feishu-user-plugin 1.3.8 → 1.3.10

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "feishu-user-plugin",
-  "version": "1.3.8",
-  "description": "All-in-one Feishu plugin for Claude Code & Codex — messaging (with merge_forward expansion + batch_send), docs (image + file blocks read/write), bitable, wiki (full CRUD), drive, OKR (with progress writes), calendar (read+write), Tasks v2, multi-profile auto-switch, real-time WS events. 82 tools + 9 prompts, 3 auth layers.",
+  "mcpName": "io.github.EthanQC/feishu-user-plugin",
+  "version": "1.3.10",
+  "description": "All-in-one Feishu MCP server for Claude Code & Codex — 84 tools across 3 auth layers (cookie / app / OAuth). Send as you, read groups, manage docs / bitable / wiki / drive / calendar / tasks / OKR.",
   "main": "src/index.js",
   "bin": {
     "feishu-user-plugin": "src/cli.js"
@@ -49,18 +50,24 @@
     ".env.example",
     "CHANGELOG.md",
     "README.md",
+    "README.en.md",
     "LICENSE"
   ],
   "engines": {
     "node": ">=18.0.0"
   },
   "dependencies": {
-    "@larksuiteoapi/node-sdk": "^1.59.0",
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@larksuiteoapi/node-sdk": "^1.63.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^16.4.7",
-    "protobufjs": "^7.4.0"
+    "feishu-docx": "^0.7.0",
+    "protobufjs": "^7.5.6"
   },
   "devDependencies": {
+    "@resvg/resvg-js": "^2.6.2",
     "husky": "^9.1.7"
+  },
+  "overrides": {
+    "axios": "^1.16.0"
   }
 }

package/proto/lark.proto

@@ -123,8 +123,18 @@ message Content {
   optional string text = 1;
   optional string imageKey = 2;
   optional string title = 3;
+  // Image metadata fields (v1.3.9 — reverse-engineered via brute-force probe;
+  // see scripts/explore-image-minimize.js). Required for IMAGE messages on the
+  // cookie-protobuf path: imageKey + thumbnailKey(10) is the minimum the
+  // gateway accepts. width(4) / height(5) / mimeType(8) / fileSize(9) are
+  // optional but commonly present in the real wire format.
+  optional int32 imageWidth = 4;
+  optional int32 imageHeight = 5;
   optional string fileKey = 6;
   optional string audioKey = 7;
+  optional string mimeType = 8;
+  optional int64 fileSize = 9;
+  optional string thumbnailKey = 10;
   optional string fileName = 11;
   optional RichText richText = 14;
   optional string stickerSetId = 24;

package/scripts/explore-card-protobuf.js

@@ -0,0 +1,144 @@
+#!/usr/bin/env node
+'use strict';
+// CARD (type=14) protobuf field exploration. Probe field numbers + types.
+
+const fs = require('fs');
+const path = require('path');
+const protobuf = require('protobufjs');
+
+const claudeCfg = JSON.parse(fs.readFileSync(path.join(require('os').homedir(), '.claude.json'), 'utf8'));
+const env = claudeCfg.mcpServers?.['feishu-user-plugin']?.env || {};
+process.env.LARK_COOKIE = env.LARK_COOKIE;
+process.env.LARK_APP_ID = env.LARK_APP_ID;
+process.env.LARK_APP_SECRET = env.LARK_APP_SECRET;
+
+const PLUGIN_ROOT = path.join(__dirname, '..');
+const { LarkUserClient } = require(path.join(PLUGIN_ROOT, 'src/clients/user'));
+const { generateCid, generateRequestId } = require(path.join(PLUGIN_ROOT, 'src/utils'));
+
+const TEST_GROUP_NAME = '飞书plugin测试群';
+
+const errProto = protobuf.parse(`
+  syntax = "proto3";
+  message ErrorResponse {
+    optional string message = 1;
+    optional int32 code = 2;
+    optional int32 subCode = 3;
+    optional string detail = 4;
+    optional string trace = 5;
+    optional string requestId = 6;
+  }
+`).root;
+const ErrorResponse = errProto.lookupType('ErrorResponse');
+
+async function fetchProto(url, opts) {
+  const u = new URL(url);
+  return new Promise((resolve, reject) => {
+    const req = require('node:https').request({
+      hostname: u.hostname,
+      port: u.port || 443,
+      path: u.pathname + u.search,
+      method: opts.method || 'GET',
+      headers: opts.headers || {},
+    }, (res) => {
+      const chunks = [];
+      res.on('data', (c) => chunks.push(c));
+      res.on('end', () => resolve({ status: res.statusCode, body: Buffer.concat(chunks) }));
+    });
+    req.on('error', reject);
+    if (opts.body) req.write(opts.body);
+    req.end();
+  });
+}
+
+function encodeVarint(n) {
+  const bytes = [];
+  while (n >= 0x80) { bytes.push((n & 0x7f) | 0x80); n = Math.floor(n / 128); }
+  bytes.push(n & 0x7f);
+  return Buffer.from(bytes);
+}
+
+function encodeWireField(num, type, val) {
+  if (type === 'varint') return Buffer.concat([Buffer.from([(num << 3) | 0]), encodeVarint(val)]);
+  if (type === 'string' || type === 'bytes') {
+    const v = type === 'string' ? Buffer.from(val, 'utf8') : val;
+    const tag = (num << 3) | 2;
+    if (num < 16) return Buffer.concat([Buffer.from([tag]), encodeVarint(v.length), v]);
+    // For field numbers > 15, tag is multi-byte varint
+    return Buffer.concat([encodeVarint(tag), encodeVarint(v.length), v]);
+  }
+  throw new Error('unknown type');
+}
+
+async function trySendRaw(userClient, chatId, msgType, contentBytes, label) {
+  const proto = userClient.proto;
+  const PutMessageRequest = proto.lookupType('PutMessageRequest');
+  const Packet = proto.lookupType('Packet');
+
+  const restReq = PutMessageRequest.encode(PutMessageRequest.create({
+    type: msgType, chatId, cid: generateCid(), isNotified: true, version: 1,
+  })).finish();
+  const contentField = Buffer.concat([
+    Buffer.from([(2 << 3) | 2]),
+    encodeVarint(contentBytes.length),
+    contentBytes,
+  ]);
+  const reqBuf = Buffer.concat([contentField, restReq]);
+
+  const packetBuf = Packet.encode(Packet.create({
+    payloadType: 1,
+    cmd: 5,
+    cid: generateRequestId(),
+    payload: reqBuf,
+  })).finish();
+
+  const res = await fetchProto('https://internal-api-lark-api.feishu.cn/im/gateway/', {
+    method: 'POST',
+    headers: userClient._protoHeaders(5, '5.7.0'),
+    body: packetBuf,
+  });
+
+  let parsedErr = null;
+  try { parsedErr = ErrorResponse.toObject(ErrorResponse.decode(res.body)); } catch (_) {}
+
+  const status = res.status === 200 ? '✓ OK' : `✗ ${res.status}`;
+  const errMsg = parsedErr?.message?.slice(0, 120) || '';
+  console.log(`${status} [${label}] ${errMsg}`);
+  return { ok: res.status === 200, status: res.status, err: errMsg };
+}
+
+(async () => {
+  const userClient = new LarkUserClient(process.env.LARK_COOKIE);
+  await userClient.init();
+  const sr = await userClient.search(TEST_GROUP_NAME);
+  const chatId = sr.find(x => x.type === 'group' && x.title.includes(TEST_GROUP_NAME)).id;
+  console.log('chatId:', chatId);
+
+  const card = JSON.stringify({
+    config: { wide_screen_mode: true },
+    header: { title: { tag: 'plain_text', content: '[explore-card] please ignore' } },
+    elements: [{ tag: 'div', text: { tag: 'lark_md', content: 'Cookie protobuf test card' } }],
+  });
+  const cardBuf = Buffer.from(card, 'utf8');
+  console.log('card json size:', cardBuf.length);
+
+  console.log('\n=== Phase A: try type=14 with each unused field number ===');
+  // Known used: 1(text), 2(imageKey), 3(title), 6(fileKey), 7(audioKey), 11(fileName), 14(richText), 24(stickerSetId), 25(stickerId)
+  // Unused (potential card field): 4, 5, 8, 9, 10, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 23
+  const candidates = [4, 5, 8, 9, 10, 12, 13, 15, 16, 17, 18, 19, 20, 21, 22, 23];
+  for (const fieldNum of candidates) {
+    // Try as string (JSON)
+    const ckS = encodeWireField(fieldNum, 'string', card);
+    const res = await trySendRaw(userClient, chatId, 14, ckS, `field ${fieldNum} string=cardJSON`);
+    if (res.ok) {
+      console.log(`\n🎯 SUCCESS at field ${fieldNum}!`);
+    }
+  }
+
+  console.log('\n=== Phase B: special — Content field 14 is richText. Try CARD via richText? ===');
+  // Skip — richText is for POST type. CARD is different.
+
+  console.log('\n=== Phase C: combos — maybe card needs type at multiple fields ===');
+  // Like image needed thumb. Try card at field 8 + 9 + 10 + 16 etc.
+  // Skip for now — Phase A may have answered.
+})().catch(e => { console.error('FATAL:', e.message); process.exit(1); });

package/scripts/explore-image-minimize.js

@@ -0,0 +1,163 @@
+#!/usr/bin/env node
+'use strict';
+// Minimize IMAGE Content fields. Start with known-working combo, drop one field
+// at a time and observe which omissions still pass.
+
+const fs = require('fs');
+const path = require('path');
+const protobuf = require('protobufjs');
+
+const claudeCfg = JSON.parse(fs.readFileSync(path.join(require('os').homedir(), '.claude.json'), 'utf8'));
+const env = claudeCfg.mcpServers?.['feishu-user-plugin']?.env || {};
+process.env.LARK_COOKIE = env.LARK_COOKIE;
+process.env.LARK_APP_ID = env.LARK_APP_ID;
+process.env.LARK_APP_SECRET = env.LARK_APP_SECRET;
+
+const PLUGIN_ROOT = path.join(__dirname, '..');
+const { LarkUserClient } = require(path.join(PLUGIN_ROOT, 'src/clients/user'));
+const { LarkOfficialClient } = require(path.join(PLUGIN_ROOT, 'src/clients/official'));
+const { generateCid, generateRequestId } = require(path.join(PLUGIN_ROOT, 'src/utils'));
+
+const TEST_IMAGE = path.join(PLUGIN_ROOT, '.playwright-mcp/captures/test-small.png');
+const TEST_GROUP_NAME = '飞书plugin测试群';
+
+const errProto = protobuf.parse(`
+  syntax = "proto3";
+  message ErrorResponse {
+    optional string message = 1;
+    optional int32 code = 2;
+    optional int32 subCode = 3;
+    optional string detail = 4;
+    optional string trace = 5;
+    optional string requestId = 6;
+  }
+`).root;
+const ErrorResponse = errProto.lookupType('ErrorResponse');
+
+async function fetchProto(url, opts) {
+  const u = new URL(url);
+  return new Promise((resolve, reject) => {
+    const req = require('node:https').request({
+      hostname: u.hostname,
+      port: u.port || 443,
+      path: u.pathname + u.search,
+      method: opts.method || 'GET',
+      headers: opts.headers || {},
+    }, (res) => {
+      const chunks = [];
+      res.on('data', (c) => chunks.push(c));
+      res.on('end', () => resolve({ status: res.statusCode, body: Buffer.concat(chunks) }));
+    });
+    req.on('error', reject);
+    if (opts.body) req.write(opts.body);
+    req.end();
+  });
+}
+
+function encodeVarint(n) {
+  const bytes = [];
+  while (n >= 0x80) {
+    bytes.push((n & 0x7f) | 0x80);
+    n = Math.floor(n / 128);
+  }
+  bytes.push(n & 0x7f);
+  return Buffer.from(bytes);
+}
+
+function encodeWireField(num, type, val) {
+  if (type === 'varint') return Buffer.concat([Buffer.from([(num << 3) | 0]), encodeVarint(val)]);
+  if (type === 'string') {
+    const v = Buffer.from(val, 'utf8');
+    return Buffer.concat([Buffer.from([(num << 3) | 2]), encodeVarint(v.length), v]);
+  }
+  throw new Error('unknown type');
+}
+
+function buildContent(fields) {
+  return Buffer.concat(fields.map(([n, t, v]) => encodeWireField(n, t, v)));
+}
+
+async function trySendRaw(userClient, chatId, msgType, contentBytes, label) {
+  const proto = userClient.proto;
+  const PutMessageRequest = proto.lookupType('PutMessageRequest');
+  const Packet = proto.lookupType('Packet');
+
+  const restReq = PutMessageRequest.encode(PutMessageRequest.create({
+    type: msgType, chatId, cid: generateCid(), isNotified: true, version: 1,
+  })).finish();
+  const contentField = Buffer.concat([
+    Buffer.from([(2 << 3) | 2]),
+    encodeVarint(contentBytes.length),
+    contentBytes,
+  ]);
+  const reqBuf = Buffer.concat([contentField, restReq]);
+
+  const packetBuf = Packet.encode(Packet.create({
+    payloadType: 1,
+    cmd: 5,
+    cid: generateRequestId(),
+    payload: reqBuf,
+  })).finish();
+
+  const res = await fetchProto('https://internal-api-lark-api.feishu.cn/im/gateway/', {
+    method: 'POST',
+    headers: userClient._protoHeaders(5, '5.7.0'),
+    body: packetBuf,
+  });
+
+  let parsedErr = null;
+  try { parsedErr = ErrorResponse.toObject(ErrorResponse.decode(res.body)); } catch (_) {}
+
+  const status = res.status === 200 ? '✓ OK' : `✗ ${res.status}`;
+  const errMsg = parsedErr?.message?.slice(0, 100) || '';
+  console.log(`${status} [${label}] ${errMsg}`);
+  return { ok: res.status === 200, status: res.status, err: errMsg };
+}
+
+(async () => {
+  const oc = new LarkOfficialClient(process.env.LARK_APP_ID, process.env.LARK_APP_SECRET);
+  const r = await oc.uploadImage(TEST_IMAGE, 'message');
+  const imageKey = r.imageKey;
+  console.log('imageKey:', imageKey);
+
+  const userClient = new LarkUserClient(process.env.LARK_COOKIE);
+  await userClient.init();
+  const sr = await userClient.search(TEST_GROUP_NAME);
+  const chatId = sr.find(x => x.type === 'group' && x.title.includes(TEST_GROUP_NAME)).id;
+  console.log('chatId:', chatId);
+
+  // ALL fields baseline (known to work)
+  const allFields = [
+    [2, 'string', imageKey],     // imageKey
+    [4, 'varint', 50],           // ?
+    [5, 'varint', 50],           // ?
+    [8, 'string', 'image/png'],  // mime?
+    [9, 'varint', 141],          // size?
+    [10, 'string', imageKey],    // thumbnail?
+  ];
+
+  console.log('\n=== Verify baseline (all 6 fields) ===');
+  await trySendRaw(userClient, chatId, 5, buildContent(allFields), 'baseline all fields');
+
+  console.log('\n=== Drop each field individually ===');
+  // Field labels: imageKey is required; we test which of the OTHER 5 are required
+  const others = [4, 5, 8, 9, 10];
+  for (const dropField of others) {
+    const subset = allFields.filter(([n]) => n !== dropField);
+    const result = await trySendRaw(userClient, chatId, 5, buildContent(subset), `omit field ${dropField}`);
+  }
+
+  console.log('\n=== Drop pairs / minimize ===');
+  // Just imageKey alone (already known to fail)
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0]]), 'just imageKey');
+  // imageKey + field 10 (thumb)
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0], allFields[5]]), 'imageKey + thumb(10)');
+  // imageKey + 4 + 5 (dims)
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0], allFields[1], allFields[2]]), 'imageKey + 4 + 5');
+  // imageKey + 4 + 5 + 10
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0], allFields[1], allFields[2], allFields[5]]), 'imageKey + 4 + 5 + 10');
+  // imageKey + 8 + 10 (mime + thumb)
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0], allFields[3], allFields[5]]), 'imageKey + mime(8) + thumb(10)');
+  // imageKey + 4 + 5 + 8 (no size, no thumb)
+  await trySendRaw(userClient, chatId, 5, buildContent([allFields[0], allFields[1], allFields[2], allFields[3]]), 'imageKey + 4 + 5 + mime(8)');
+})().catch(e => { console.error('FATAL:', e.message); process.exit(1); });

package/scripts/generate-og-image.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+// Render docs/og.svg → docs/og.png at 1200x630.
+//
+// Idempotent. Run `node scripts/generate-og-image.js` after editing
+// docs/og.svg. Commit both the SVG (source) and the PNG (asset used
+// by social-media unfurls and `<meta property="og:image">`).
+//
+// Why PNG: Twitter / WeChat / 飞书 unfurls don't render SVG `og:image`.
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { Resvg } = require('@resvg/resvg-js');
+
+const svgPath = path.join(__dirname, '..', 'docs', 'og.svg');
+const pngPath = path.join(__dirname, '..', 'docs', 'og.png');
+
+const svg = fs.readFileSync(svgPath, 'utf8');
+
+const resvg = new Resvg(svg, {
+  fitTo: { mode: 'width', value: 1200 },
+  // Try to use system fonts so Chinese characters render. resvg-js loads
+  // fonts from `font.fontDirs` and `font.defaultFontFamily`. On macOS
+  // /System/Library/Fonts has PingFang SC; on Linux CI, jekyll-seo-tag
+  // doesn't run this script anyway — only humans do, locally.
+  font: {
+    fontDirs: ['/System/Library/Fonts', '/Library/Fonts', '/usr/share/fonts'],
+    loadSystemFonts: true,
+    defaultFontFamily: 'PingFang SC',
+  },
+  background: '#0d1117',
+});
+
+const pngBuffer = resvg.render().asPng();
+fs.writeFileSync(pngPath, pngBuffer);
+
+const sizeKb = (pngBuffer.length / 1024).toFixed(1);
+console.log(`OK: wrote ${pngPath} (${pngBuffer.length} bytes / ${sizeKb} KiB)`);