feishu-user-plugin 1.3.5 → 1.3.7

package/src/logger.js

@@ -0,0 +1,20 @@
+// Global stdout guard. MCP stdio uses stdout for JSON-RPC; ANY accidental write
+// from this process or its dependencies corrupts the transport and disconnects
+// the client. Defense-in-depth: redirect every console.log / console.info to
+// stderr at module load. REQUIRE THIS BEFORE ANY OTHER MODULE so even early
+// log calls during dependency init are captured.
+console.log = (...args) => console.error(...args);
+console.info = (...args) => console.error(...args);
+
+// Stderr-only logger for the Lark SDK (the SDK's defaultLogger.error() writes
+// to stdout via console.log, which would also corrupt MCP stdio). Shape and
+// prefixes preserved verbatim from the original definition in src/official.js.
+const stderrLogger = {
+  error: (...msg) => console.error('[lark-sdk][error]:', ...msg),
+  warn:  (...msg) => console.error('[lark-sdk][warn]:', ...msg),
+  info:  () => {},
+  debug: () => {},
+  trace: () => {},
+};
+
+module.exports = { stderrLogger };

package/src/oauth.js

@@ -28,7 +28,14 @@ const REDIRECT_URI = `http://127.0.0.1:${PORT}/callback`;
 //   calendar:*                             for list_calendars / list_calendar_events / get_calendar_event
 //   wiki:wiki                              write access for move_docs_to_wiki (attach docs/bitables to wiki)
 //   docs:document.media:(upload|download)  for docx image read/write
-const SCOPES = 'offline_access auth:user.id:read im:message im:message:readonly im:chat im:chat:readonly contact:user.base:readonly contact:user.id:readonly docx:document drive:drive bitable:app wiki:wiki:readonly wiki:wiki okr:okr:readonly okr:okr.period:readonly okr:okr.content:readonly calendar:calendar:readonly calendar:calendar.event:read docs:document.media:download docs:document.media:upload';
+// v1.3.6 additions:
+//   sheets:spreadsheet                     for sheet_image / sheet_file media uploads
+//   drive:file:upload                      narrower scope for drive/v1/files/upload_all (independent of drive:drive)
+// v1.3.7 additions:
+//   calendar:calendar.event:write          create/update/delete/respond calendar events
+//   task:task                              full Task v2 read+write
+//   okr:okr.content:write                  create/delete OKR progress records
+const SCOPES = 'offline_access auth:user.id:read im:message im:message:readonly im:chat im:chat:readonly contact:user.base:readonly contact:user.id:readonly docx:document drive:drive drive:file:upload bitable:app wiki:wiki:readonly wiki:wiki okr:okr:readonly okr:okr.period:readonly okr:okr.content:readonly okr:okr.content:write calendar:calendar:readonly calendar:calendar.event:read calendar:calendar.event:write docs:document.media:download docs:document.media:upload sheets:spreadsheet task:task';
 
 if (!APP_ID || !APP_SECRET) {
   console.error('Missing LARK_APP_ID or LARK_APP_SECRET.');