oasis_test_v2 2.2.110 → 2.2.112

package/dist/index.js

@@ -19611,391 +19611,6 @@ var init_host_isolation = __esm({
   }
 });
 
-// ../connectors/src/feishu/index.ts
-async function fetchFeishuTenantAccessToken(appId, appSecret) {
-  try {
-    const resp = await fetch(FEISHU_TENANT_TOKEN_URL, {
-      method: "POST",
-      headers: { "Content-Type": "application/json; charset=utf-8" },
-      body: JSON.stringify({ app_id: appId, app_secret: appSecret }),
-      signal: AbortSignal.timeout(TENANT_TOKEN_TIMEOUT_MS)
-    });
-    const data = await resp.json();
-    if (!resp.ok || data.code !== 0 || typeof data.tenant_access_token !== "string" || !data.tenant_access_token) {
-      log("[feishu]", `\u6362\u4F01\u4E1A token \u5931\u8D25\uFF08\u672C\u8F6E bot \u8EAB\u4EFD\u4E0D\u53EF\u7528\uFF09: HTTP ${resp.status} code=${String(data.code)} ${String(data.msg ?? "")}`.trim());
-      return null;
-    }
-    return data.tenant_access_token;
-  } catch (err) {
-    log("[feishu]", `\u6362\u4F01\u4E1A token \u5931\u8D25\uFF08\u672C\u8F6E bot \u8EAB\u4EFD\u4E0D\u53EF\u7528\uFF09: ${String(err?.message ?? err).slice(0, 200)}`);
-    return null;
-  }
-}
-function previousTenantToken(credsFile, appId) {
-  if (!credsFile) return null;
-  try {
-    const prev = readSessionCredsFile(credsFile);
-    if (prev["LARKSUITE_CLI_APP_ID"] !== appId) return null;
-    return prev["LARKSUITE_CLI_TENANT_ACCESS_TOKEN"] || null;
-  } catch {
-    return null;
-  }
-}
-function parseFeishuTokenResponse(data, nowMs) {
-  const accessToken = String(data["access_token"] ?? "");
-  const refreshToken = String(data["refresh_token"] ?? "");
-  const expiresInSec = Number(data["expires_in"] ?? 7200);
-  const refreshExpiresInSec = Number(
-    data["refresh_token_expires_in"] ?? data["refresh_expires_in"] ?? 30 * 24 * 3600
-  );
-  const expiresAtMs = nowMs + expiresInSec * 1e3;
-  return {
-    credentials: {
-      ...accessToken ? { user_access_token: accessToken } : {},
-      ...refreshToken ? { refresh_token: refreshToken } : {},
-      user_token_expires_at: String(expiresAtMs),
-      refresh_token_expires_at: String(nowMs + refreshExpiresInSec * 1e3)
-    },
-    expiresAt: new Date(expiresAtMs)
-  };
-}
-var import_node_child_process13, import_node_util4, import_node_path12, import_node_url, import_promises5, execFileAsync2, __dirname2, FEISHU_WELL_KNOWN_SKILLS_BASE, FEISHU_TOKEN_URL, FEISHU_TENANT_TOKEN_URL, FEISHU_USER_OPEN_ID_VAR, FEISHU_AUTHORIZED_BY_VAR, FEISHU_USER_AUTH_INVALID_VAR, FEISHU_REFRESH_REVOKED_CODES, TENANT_TOKEN_TIMEOUT_MS, FeishuConnector;
-var init_feishu = __esm({
-  "../connectors/src/feishu/index.ts"() {
-    "use strict";
-    import_node_child_process13 = require("node:child_process");
-    import_node_util4 = require("node:util");
-    import_node_path12 = require("node:path");
-    import_node_url = require("node:url");
-    import_promises5 = require("node:fs/promises");
-    init_base();
-    init_logger();
-    execFileAsync2 = (0, import_node_util4.promisify)(import_node_child_process13.execFile);
-    __dirname2 = (0, import_node_path12.dirname)((0, import_node_url.fileURLToPath)(__esm_import_meta_url));
-    FEISHU_WELL_KNOWN_SKILLS_BASE = "https://open.feishu.cn/.well-known/skills";
-    FEISHU_TOKEN_URL = "https://open.feishu.cn/open-apis/authen/v2/oauth/token";
-    FEISHU_TENANT_TOKEN_URL = "https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal";
-    FEISHU_USER_OPEN_ID_VAR = "FEISHU_USER_OPEN_ID";
-    FEISHU_AUTHORIZED_BY_VAR = "FEISHU_AUTHORIZED_BY";
-    FEISHU_USER_AUTH_INVALID_VAR = "FEISHU_USER_AUTH_INVALID";
-    FEISHU_REFRESH_REVOKED_CODES = /* @__PURE__ */ new Set([20024, 20026, 20037, 20064, 20073, 20074]);
-    TENANT_TOKEN_TIMEOUT_MS = 5e3;
-    FeishuConnector = class extends CliConnector {
-      config = {
-        slug: "feishu",
-        type: "cli",
-        // schema 要**声明本连接器实际消费的全部凭据**，不只是「让用户手填的那几个」。
-        // 历史上这里只写了 app_id，而 inject() 其实还要 app_secret / user_access_token
-        // （后两者由控制台 OAuth 流写进变量表，用户不手填）——于是 secret 标记缺失，
-        // 密钥黑名单只能在 serve.ts 另手写一份。现在黑名单从 sensitiveVars 推导，schema 必须诚实。
-        schema: [
-          { key: "app_id", description: "\u98DE\u4E66 App ID\uFF08\u7559\u7A7A\u5219\u81EA\u52A8\u521B\u5EFA\u65B0\u5E94\u7528\uFF09", secret: false, required: false },
-          { key: "app_secret", description: "\u98DE\u4E66 App Secret\uFF08\u63A7\u5236\u53F0\u6388\u6743\u6D41\u5199\u5165\uFF0C\u975E\u624B\u586B\uFF09", secret: true, required: true },
-          { key: "user_access_token", description: "\u98DE\u4E66\u7528\u6237 token\uFF08OAuth \u6388\u6743\u540E\u5199\u5165\uFF0C~2h \u8F6E\u6362\uFF09", secret: true, required: false }
-        ]
-      };
-      commandName = "lark-cli";
-      requiredCommands = ["lark-cli"];
-      envPrefix = "FEISHU_";
-      /** server 侧从 actor 变量表组装凭据的声明（见 provision.ts）。这些会随 job 下发到节点。 */
-      credentialSources = [
-        { key: "app_id", from: "FEISHU_APP_ID", required: true },
-        { key: "app_secret", from: "FEISHU_APP_SECRET", required: true },
-        { key: "user_access_token", from: "FEISHU_USER_ACCESS_TOKEN", required: false }
-      ];
-      /**
-       * 续期材料——**只在 server 侧读，不下发节点**。refresh_token 能换出新的 user token，
-       * 属于"长期材料"，没有任何理由让它出现在 agent 所在的机器上。
-       */
-      refreshCredentialSources = [
-        // App 凭据是**组织级**共享的（个人变量优先，缺失回落全局默认）；用户 token 类只认个人变量。
-        { key: "app_id", from: "FEISHU_APP_ID", orgDefault: true, required: true },
-        { key: "app_secret", from: "FEISHU_APP_SECRET", orgDefault: true, required: true },
-        { key: "refresh_token", from: "FEISHU_REFRESH_TOKEN", required: true },
-        { key: "user_token_expires_at", from: "FEISHU_USER_TOKEN_EXPIRES_AT", required: false },
-        { key: "refresh_token_expires_at", from: "FEISHU_REFRESH_TOKEN_EXPIRES_AT", required: false },
-        { key: "user_access_token", from: "FEISHU_USER_ACCESS_TOKEN", required: false }
-      ];
-      /** 过期判定只认这个键——必须与注入时消费的 token 同源（见接口注释里的历史坑）。 */
-      expiresAtCredentialKey = "user_token_expires_at";
-      /**
-       * 下发前 user token 至少还要剩 40 分钟，不够就换新（Bug 0201）。
-       *
-       * 必须 > `SESSION_CREDENTIAL_RENEW_INTERVAL_MS`（30 分钟）：会话中途续期每 30 分钟问一次 server，
-       * 问的就是这条门槛。门槛若只有通用的 5 分钟，一张还剩 20 分钟的 token 会被原样发回，
-       * 20 分钟后失效、要再等 10 分钟才到下一拍——最坏断档近 25 分钟（`99991677 token expire`）。
-       * 取 40 = 30 分钟间隔 + 10 分钟调度余量：任一拍之后剩余 > 40，到下一拍仍 > 10。
-       *
-       * 不像 GitHub 那样取全寿命（每次都换）：飞书每次刷新都会轮换 refresh_token，
-       * 换得越勤，「飞书已轮换、我们还没落库」的窗口就越常被碰上，所以只取刚好够用的值。
-       */
-      minRemainingLifetimeMs = 40 * 6e4;
-      /**
-       * 只由服务端定时任务续期（Bug 0318）：refresh_token 一次性、每刷必轮换，派单与会话中途再各刷一次就是
-       * 多个写者并发打断续期链；懒续期又让闲置超过 refresh_token 寿命的员工悄悄失效。派单只读库里最新的 token。
-       */
-      scheduledRefreshOnly = true;
-      /** refresh_token 自身 ~30d 过期，过了只能重新授权。 */
-      refreshMaterialExpiresAtCredentialKey = "refresh_token_expires_at";
-      /**
-       * refresh_token 过期后该清掉的键——**只清这个员工的授权产物**。
-       * app_id / app_secret 刻意不在其中：它们代表组织级 App 凭据，与其他员工的连接无关。
-       */
-      clearOnExpiredCredentialKeys = [
-        "user_access_token",
-        "refresh_token",
-        "user_token_expires_at",
-        "refresh_token_expires_at"
-      ];
-      /**
-       * 绝不允许进入 agent 进程环境的原始变量。
-       * 含 APP_ID 与几个过期时间戳：它们本身不算密钥，但同属飞书凭据材料，一并挡在 agent 之外，
-       * 避免 agent 绕开 wrapper 自行拼凭据（沿用既有行为）。
-       */
-      sensitiveVars = [
-        "FEISHU_APP_ID",
-        "FEISHU_APP_SECRET",
-        "FEISHU_USER_ACCESS_TOKEN",
-        "FEISHU_REFRESH_TOKEN",
-        "FEISHU_USER_TOKEN_EXPIRES_AT",
-        "FEISHU_REFRESH_TOKEN_EXPIRES_AT",
-        FEISHU_USER_OPEN_ID_VAR,
-        FEISHU_AUTHORIZED_BY_VAR,
-        FEISHU_USER_AUTH_INVALID_VAR
-      ];
-      /** 宿主机登录态隔离，理由同 github（见接口注释）：由通用装配层无条件设。 */
-      hostCredentialIsolationEnvKeys = ["LARKSUITE_CLI_CONFIG_DIR"];
-      /** inject() 写进 sessionEnv 的全部键——通用 cleanup() 按它逐个删。 */
-      injectedEnvKeys = [
-        "LARK_BIN",
-        "FEISHU_CREDS_FILE",
-        "FEISHU_RUN_TMPDIR",
-        "LARKSUITE_CLI_CONFIG_DIR"
-      ];
-      /**
-       * 自检：拿 user_access_token 问飞书「我是谁」，回 `{ok, identity, data:{name, open_id}}`。
-       *
-       * **不能用 `lark-cli auth status`**：注入外部凭据后整个 auth 命名空间会被拒
-       * （"credentials are provided externally and do not support interactive management"），
-       * 自检会恒为失败。实测 2026-08-03 踩到——`auth status` 只在**读宿主机 profile** 时才有输出，
-       * 恰恰是我们要隔离掉的那条路径。
-       */
-      verifyArgs = ["api", "GET", "/open-apis/authen/v1/user_info"];
-      /** 厂商技能包源——平台自动拉取飞书官方技能包时用。 */
-      wellKnownSkillsBase = FEISHU_WELL_KNOWN_SKILLS_BASE;
-      larkBin;
-      fetchTenantToken;
-      /** `fetchTenantToken` 只给测试替换（不打真飞书）；生产一律用 {@link fetchFeishuTenantAccessToken}。 */
-      constructor(larkBin, opts = {}) {
-        super(__dirname2);
-        this.larkBin = larkBin ?? this.resolveLarkBin();
-        this.fetchTenantToken = opts.fetchTenantToken ?? fetchFeishuTenantAccessToken;
-      }
-      /**
-       * 解析 user_info 的 JSON。lark-cli 的 `ok:false` 也是**退出码 0** 的正常输出，
-       * 所以必须在这里判 ok——只看子进程退出码会把「凭据失效」当成自检通过。
-       */
-      parseIdentity(stdout) {
-        let parsed;
-        try {
-          parsed = JSON.parse(stdout);
-        } catch {
-          return null;
-        }
-        const obj2 = parsed;
-        if (obj2.ok !== true) return null;
-        const openId = typeof obj2.data?.open_id === "string" ? obj2.data.open_id : "";
-        if (!openId) return null;
-        const name = typeof obj2.data?.name === "string" ? obj2.data.name : "";
-        return name ? `${name} (${openId})` : openId;
-      }
-      async connect(options = {}) {
-        if (this.isSimulated()) {
-          return { credentials: { app_id: options["app_id"] ?? "cli_simulated" } };
-        }
-        const app_id = options["app_id"] ?? await this.initNewApp();
-        await this.runAuthLogin(app_id);
-        return { credentials: { app_id } };
-      }
-      /**
-       * Agent run 开始：把凭据作为 lark-cli「外部凭据」写进凭据文件（不进 agent env）。
-       * credentials 接受：app_id, app_secret, user_access_token?（及其 FEISHU_* 别名）。
-       * 企业 token 不随 job 下发，由这里用 app_id/app_secret 现换（换不到只是本轮没有 bot 身份，不抛）。
-       *
-       * 注入的 sessionEnv 键（全部非敏感）：
-       *   FEISHU_CREDS_FILE — 凭据文件路径，wrapper source 它
-       *   FEISHU_RUN_TMPDIR — 本轮临时目录，cleanup 整个删掉
-       *   LARK_BIN          — 真实 lark-cli 绝对路径（防 wrapper 递归调用自身）
-       */
-      async inject(credentials2, sessionEnv) {
-        const appId = credentials2["app_id"] ?? credentials2["FEISHU_APP_ID"];
-        const appSecret = credentials2["app_secret"] ?? credentials2["FEISHU_APP_SECRET"];
-        if (!appId) throw new Error("feishu inject: missing app_id");
-        if (!appSecret) throw new Error("feishu inject: missing app_secret");
-        const userAccessToken = credentials2["user_access_token"] ?? credentials2["FEISHU_USER_ACCESS_TOKEN"];
-        const tenantAccessToken = this.isSimulated() ? null : await this.fetchTenantToken(appId, appSecret) ?? previousTenantToken(sessionEnv.get("FEISHU_CREDS_FILE"), appId);
-        const creds = await writeSessionCredsFile(this.config.slug, {
-          LARKSUITE_CLI_APP_ID: appId,
-          LARKSUITE_CLI_APP_SECRET: appSecret,
-          ...tenantAccessToken ? { LARKSUITE_CLI_TENANT_ACCESS_TOKEN: tenantAccessToken } : {},
-          ...userAccessToken ? { LARKSUITE_CLI_USER_ACCESS_TOKEN: userAccessToken } : {}
-        }, sessionEnv.get("FEISHU_RUN_TMPDIR"));
-        const configDir = (0, import_node_path12.join)(creds.dir, "lark-config");
-        await (0, import_promises5.mkdir)(configDir, { recursive: true, mode: 448 });
-        sessionEnv.set("LARK_BIN", await this.resolveAbsoluteLarkBin());
-        sessionEnv.set("FEISHU_CREDS_FILE", creds.file);
-        sessionEnv.set("FEISHU_RUN_TMPDIR", creds.dir);
-        sessionEnv.set("LARKSUITE_CLI_CONFIG_DIR", configDir);
-      }
-      /**
-       * 用 refresh_token 换一对新的 user token（飞书 v2 OAuth）。
-       *
-       * **纯换取，不落库**——持久化由调用方做（server 侧 `oauth.ts`）。这样平台知识
-       * （端点、字段名、~2h/~30d 的寿命）全部收在连接器里，与 GitHub App 的续期共用
-       * `_base/refresh.ts` 那套判定。
-       *
-       * 返回 null＝没有可用的续期材料（未完成授权）。平台报错则抛，由上层收敛成 failed。
-       */
-      async refreshCredentials(credentials2) {
-        const appId = credentials2["app_id"];
-        const appSecret = credentials2["app_secret"];
-        const refreshToken = credentials2["refresh_token"];
-        if (!appId || !appSecret || !refreshToken) return null;
-        const resp = await fetch(FEISHU_TOKEN_URL, {
-          method: "POST",
-          headers: { "Content-Type": "application/x-www-form-urlencoded" },
-          body: new URLSearchParams({
-            grant_type: "refresh_token",
-            refresh_token: refreshToken,
-            client_id: appId,
-            client_secret: appSecret
-          }).toString()
-        });
-        const data = await resp.json();
-        if (!resp.ok || data["error"]) {
-          const code2 = Number(data["code"]);
-          const msg = `feishu refresh failed: HTTP ${resp.status} code=${String(data["code"] ?? "")} ${String(data["error"] ?? "")}`.trim();
-          if (data["error"] === "invalid_grant" || FEISHU_REFRESH_REVOKED_CODES.has(code2)) throw new CredentialRevokedError(msg);
-          throw new Error(msg);
-        }
-        return parseFeishuTokenResponse(data, Date.now());
-      }
-      async initNewApp() {
-        await new Promise((resolve11, reject) => {
-          const proc = (0, import_node_child_process13.spawn)(this.larkBin, ["config", "init", "--new"], { stdio: "inherit" });
-          proc.on("close", (code2) => code2 === 0 ? resolve11() : reject(new Error(`lark-cli config init exited ${code2}`)));
-          proc.on("error", reject);
-        });
-        const { stdout } = await execFileAsync2(this.larkBin, ["config", "show", "--json"]);
-        const cfg = JSON.parse(stdout);
-        if (!cfg.appId) throw new Error("feishu connector: could not determine app_id after config init");
-        return cfg.appId;
-      }
-      async runAuthLogin(app_id) {
-        await new Promise((resolve11, reject) => {
-          const proc = (0, import_node_child_process13.spawn)(this.larkBin, ["--profile", app_id, "auth", "login"], { stdio: "inherit" });
-          proc.on("close", (code2) => code2 === 0 ? resolve11() : reject(new Error(`lark-cli auth login exited ${code2}`)));
-          proc.on("error", reject);
-        });
-      }
-      resolveLarkBin() {
-        return process.env["LARK_CLI_BIN"] ?? "lark-cli";
-      }
-      async resolveAbsoluteLarkBin() {
-        if (this.larkBin.includes("/")) return this.larkBin;
-        return this.resolveRealBin(this.larkBin);
-      }
-    };
-  }
-});
-
-// ../connectors/src/feishu/user-auth.ts
-async function startFeishuDeviceAuthorization(input) {
-  const basicAuth = Buffer.from(`${input.appId}:${input.appSecret}`).toString("base64");
-  const resp = await (input.fetchImpl ?? fetch)(FEISHU_DEVICE_AUTHORIZATION_URL, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/x-www-form-urlencoded",
-      "Authorization": `Basic ${basicAuth}`
-    },
-    body: new URLSearchParams({ client_id: input.appId, scope: input.scopes.join(" ") }).toString()
-  });
-  const data = await resp.json();
-  if (!resp.ok || data["error"]) {
-    throw new Error(String(data["error_description"] ?? data["error"] ?? "device authorization failed"));
-  }
-  const verificationUrl = String(data["verification_uri_complete"] ?? data["verification_uri"] ?? "");
-  if (!verificationUrl) throw new Error("no verification_uri in response");
-  const expiresIn = Number(data["expires_in"]);
-  const interval = Number(data["interval"]);
-  return {
-    verificationUrl,
-    deviceCode: String(data["device_code"] ?? ""),
-    ...Number.isFinite(expiresIn) && expiresIn > 0 ? { expiresIn } : {},
-    ...Number.isFinite(interval) && interval > 0 ? { interval } : {}
-  };
-}
-async function pollFeishuDeviceToken(input) {
-  const resp = await (input.fetchImpl ?? fetch)(FEISHU_TOKEN_URL, {
-    method: "POST",
-    headers: { "Content-Type": "application/x-www-form-urlencoded" },
-    body: new URLSearchParams({
-      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
-      device_code: input.deviceCode,
-      client_id: input.appId,
-      client_secret: input.appSecret
-    }).toString()
-  });
-  const data = await resp.json();
-  const errStr = data["error"];
-  if (errStr === "authorization_pending" || errStr === "slow_down") return { status: "pending" };
-  if (!resp.ok || errStr) throw new Error(String(data["error_description"] ?? errStr ?? "login failed"));
-  if (!data["access_token"]) throw new Error("no access_token in response");
-  return { status: "ok", data };
-}
-async function fetchFeishuUserIdentity(accessToken, fetchImpl = fetch) {
-  try {
-    const resp = await fetchImpl(FEISHU_USER_INFO_URL, { headers: { authorization: `Bearer ${accessToken}` } });
-    const ui = await resp.json();
-    if (!resp.ok || ui.code !== 0) return {};
-    const name = ui.data?.name || ui.data?.en_name;
-    return {
-      ...ui.data?.open_id ? { openId: ui.data.open_id } : {},
-      ...name ? { name } : {}
-    };
-  } catch {
-    return {};
-  }
-}
-async function sendFeishuBotTextToUser(input) {
-  const token2 = await (input.fetchTenantToken ?? fetchFeishuTenantAccessToken)(input.appId, input.appSecret);
-  if (!token2) throw new Error("\u6362\u4F01\u4E1A token \u5931\u8D25\uFF0Cbot \u79C1\u4FE1\u672A\u53D1\u51FA");
-  const resp = await (input.fetchImpl ?? fetch)(`${FEISHU_SEND_MESSAGE_URL}?receive_id_type=open_id`, {
-    method: "POST",
-    headers: { "content-type": "application/json; charset=utf-8", authorization: `Bearer ${token2}` },
-    body: JSON.stringify({ receive_id: input.openId, msg_type: "text", content: JSON.stringify({ text: input.text }) })
-  });
-  const body2 = await resp.json();
-  if (body2.code !== 0) throw new Error(`feishu bot \u79C1\u4FE1\u5931\u8D25: code=${String(body2.code)} ${body2.msg ?? ""}`.trim());
-}
-function feishuUserAuthInvalidText(input) {
-  const head = `\u300C${input.agentName}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF08\u6388\u6743\u88AB\u64A4\u9500\u6216\u957F\u65F6\u95F4\u65E0\u6CD5\u7EED\u671F\uFF09\uFF0C\u4EE5\u4F60\u8EAB\u4EFD\u8C03\u7528\u98DE\u4E66\u7684\u529F\u80FD\u6682\u65F6\u7528\u4E0D\u4E86\uFF0Cbot \u8EAB\u4EFD\u4E0D\u53D7\u5F71\u54CD\u3002`;
-  return input.link ? `${head}
-\u70B9\u8FD9\u4E2A\u94FE\u63A5\u91CD\u65B0\u6388\u6743\uFF08\u9700\u7528\u539F\u6388\u6743\u4EBA\u7684\u98DE\u4E66\u8D26\u53F7\u767B\u5F55\uFF0C7 \u5929\u5185\u6709\u6548\uFF09\uFF1A
-${input.link}` : `${head}
-\u8BF7\u5230 Oasis \u8BE5 Agent \u7684\u300C\u8FDE\u63A5\u5668\u300D\u9875\u91CD\u65B0\u6388\u6743\u98DE\u4E66\u3002`;
-}
-var FEISHU_DEVICE_AUTHORIZATION_URL, FEISHU_USER_INFO_URL, FEISHU_SEND_MESSAGE_URL;
-var init_user_auth = __esm({
-  "../connectors/src/feishu/user-auth.ts"() {
-    "use strict";
-    init_feishu();
-    FEISHU_DEVICE_AUTHORIZATION_URL = "https://accounts.feishu.cn/oauth/v1/device_authorization";
-    FEISHU_USER_INFO_URL = "https://open.feishu.cn/open-apis/authen/v1/user_info";
-    FEISHU_SEND_MESSAGE_URL = "https://open.feishu.cn/open-apis/im/v1/messages";
-  }
-});
-
 // ../connectors/src/feishu/scopes.ts
 function scopesForDomains(domains) {
   const set = /* @__PURE__ */ new Set(["offline_access"]);
@@ -20028,6 +19643,11 @@ function scopesForSelection(sel, includeSendAsUser) {
   return scopes;
 }
 async function appHasScope(appId, appSecret, scope2, fetchImpl = fetch) {
+  return (await fetchFeishuAppScopes(appId, appSecret, fetchImpl)).some(
+    (s2) => s2.scope_name === scope2 && (!s2.scope_type || s2.scope_type === "user")
+  );
+}
+async function fetchFeishuAppScopes(appId, appSecret, fetchImpl = fetch) {
   const tokenResp = await fetchImpl("https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal", {
     method: "POST",
     headers: { "Content-Type": "application/json; charset=utf-8" },
@@ -20042,9 +19662,7 @@ async function appHasScope(appId, appSecret, scope2, fetchImpl = fetch) {
   });
   const body2 = await resp.json();
   if (body2.code !== 0) throw new Error(`application/v6/scopes failed: code=${body2.code} msg=${body2.msg ?? ""}`);
-  return (body2.data?.scopes ?? []).some(
-    (s2) => s2.scope_name === scope2 && (!s2.scope_type || s2.scope_type === "user")
-  );
+  return body2.data?.scopes ?? [];
 }
 function feishuAuthSelectionRecord(sel, sendAsUserRequested, tokenResponse) {
   const granted = typeof tokenResponse["scope"] === "string" ? tokenResponse["scope"].split(/\s+/).filter(Boolean) : void 0;
@@ -20055,7 +19673,64 @@ function feishuAuthSelectionRecord(sel, sendAsUserRequested, tokenResponse) {
     ...granted ? { grantedScopes: granted } : {}
   };
 }
-var FEISHU_BASIC_SCOPES, FEISHU_DOMAIN_SCOPES, FEISHU_USER_SCOPES, FEISHU_USER_SCOPE_STRING, FEISHU_SEND_AS_USER_SCOPE, FEISHU_AUTH_SELECTION_VAR, AUTO_APPROVED;
+function feishuModulePolicyEnv(modules) {
+  const picked = modules.filter((m2) => FEISHU_MODULE_ACCESS[m2]);
+  if (picked.length === 0) return null;
+  const allow = /* @__PURE__ */ new Set();
+  for (const m2 of picked) {
+    for (const c of FEISHU_MODULE_ACCESS[m2].commands) allow.add(`cmd:${c}`);
+    for (const s2 of FEISHU_MODULE_ACCESS[m2].apiServices) allow.add(`api:${s2}`);
+  }
+  const need2 = /* @__PURE__ */ new Map();
+  for (const [m2, a] of Object.entries(FEISHU_MODULE_ACCESS)) {
+    for (const k2 of [...a.commands.map((c) => `cmd:${c}`), ...a.apiServices.map((s2) => `api:${s2}`)]) {
+      if (allow.has(k2)) continue;
+      need2.set(k2, [...need2.get(k2) ?? [], (FEISHU_MODULE_LABELS[m2] ?? m2).replace(/\s+/g, "")]);
+    }
+  }
+  return {
+    OASIS_FEISHU_ALLOW: ` ${[...allow].sort().join(" ")} `,
+    OASIS_FEISHU_NEED: ` ${[...need2].sort(([a], [b2]) => a.localeCompare(b2)).map(([k2, v2]) => `${k2}=${v2.join("/")}`).join(" ")} `,
+    OASIS_FEISHU_MODULES: picked.map((m2) => FEISHU_MODULE_LABELS[m2] ?? m2).join("\u3001")
+  };
+}
+function feishuSelectedModules(raw) {
+  if (!raw) return [];
+  try {
+    const parsed = JSON.parse(raw);
+    return Array.isArray(parsed.modules) ? parsed.modules.filter((m2) => typeof m2 === "string" && !!FEISHU_MODULE_ACCESS[m2]) : [];
+  } catch {
+    return [];
+  }
+}
+function feishuModuleAccessReport(input) {
+  const granted = input.grantedScopes ? new Set(input.grantedScopes) : null;
+  const tenant = (input.appScopes ?? []).filter((s2) => s2.scope_type === "tenant" && s2.scope_name);
+  return input.modules.filter((m2) => FEISHU_MODULE_ACCESS[m2]).map((m2) => {
+    const prefixes = FEISHU_MODULE_ACCESS[m2].botScopePrefixes;
+    const mine = tenant.filter((s2) => prefixes.some((p2) => s2.scope_name.startsWith(p2)));
+    const bot = input.appScopes === null ? "unknown" : mine.some((s2) => s2.grant_status === void 0 || s2.grant_status === 1) ? "granted" : mine.length > 0 ? "pending" : "missing";
+    const missingUserScopes = granted ? (FEISHU_DOMAIN_SCOPES[m2]?.scopes ?? []).filter((s2) => !granted.has(s2)) : [];
+    const user = input.userAuthInvalid ? "invalid" : !input.hasUserAuth ? "none" : missingUserScopes.length > 0 ? "partial" : "granted";
+    return {
+      id: m2,
+      label: FEISHU_MODULE_LABELS[m2] ?? m2,
+      bot,
+      user,
+      missingUserScopes: user === "partial" ? missingUserScopes : []
+    };
+  });
+}
+function feishuSendAsUserState(sel) {
+  if (!sel.sendAsUser) return "off";
+  if (!sel.sendAsUserRequested) return "app_not_enabled";
+  if (sel.grantedScopes && !sel.grantedScopes.includes(FEISHU_SEND_AS_USER_SCOPE)) return "not_granted";
+  return "on";
+}
+function feishuAppPermissionConsoleUrl(appId) {
+  return `https://open.feishu.cn/app/${encodeURIComponent(appId)}/auth`;
+}
+var FEISHU_BASIC_SCOPES, FEISHU_DOMAIN_SCOPES, FEISHU_USER_SCOPES, FEISHU_USER_SCOPE_STRING, FEISHU_SEND_AS_USER_SCOPE, FEISHU_AUTH_SELECTION_VAR, AUTO_APPROVED, FEISHU_MODULE_ACCESS, FEISHU_MODULE_LABELS;
 var init_scopes = __esm({
   "../connectors/src/feishu/scopes.ts"() {
     "use strict";
@@ -20458,6 +20133,453 @@ var init_scopes = __esm({
     FEISHU_SEND_AS_USER_SCOPE = "im:message.send_as_user";
     FEISHU_AUTH_SELECTION_VAR = "FEISHU_AUTH_SELECTION";
     AUTO_APPROVED = new Set(FEISHU_BASIC_SCOPES);
+    FEISHU_MODULE_ACCESS = {
+      im: { commands: ["im"], apiServices: ["im"], botScopePrefixes: ["im:"] },
+      calendar: { commands: ["calendar"], apiServices: ["calendar"], botScopePrefixes: ["calendar:"] },
+      docs: { commands: ["docs", "drive", "markdown", "mindnotes"], apiServices: ["docx", "doc", "docs", "drive", "mindnote", "mindnotes", "suite"], botScopePrefixes: ["docs:", "docx:", "space:"] },
+      drive: { commands: ["drive", "markdown"], apiServices: ["drive"], botScopePrefixes: ["drive:"] },
+      sheets: { commands: ["sheets"], apiServices: ["sheets"], botScopePrefixes: ["sheets:"] },
+      base: { commands: ["base"], apiServices: ["bitable", "base"], botScopePrefixes: ["base:", "bitable:"] },
+      wiki: { commands: ["wiki"], apiServices: ["wiki"], botScopePrefixes: ["wiki:"] },
+      slides: { commands: ["slides"], apiServices: ["slides", "slides_ai"], botScopePrefixes: ["slides:"] },
+      task: { commands: ["task"], apiServices: ["task"], botScopePrefixes: ["task:"] },
+      approval: { commands: ["approval"], apiServices: ["approval"], botScopePrefixes: ["approval:"] },
+      mail: { commands: ["mail"], apiServices: ["mail"], botScopePrefixes: ["mail:"] },
+      minutes: { commands: ["minutes"], apiServices: ["minutes"], botScopePrefixes: ["minutes:"] },
+      vc: { commands: ["vc", "note"], apiServices: ["vc"], botScopePrefixes: ["vc:"] },
+      contact: { commands: ["contact"], apiServices: ["contact", "search"], botScopePrefixes: ["contact:"] },
+      okr: { commands: ["okr"], apiServices: ["okr"], botScopePrefixes: ["okr:"] },
+      attendance: { commands: ["attendance"], apiServices: ["attendance"], botScopePrefixes: ["attendance:"] },
+      board: { commands: ["whiteboard"], apiServices: ["board"], botScopePrefixes: ["board:"] },
+      spark: { commands: ["apps"], apiServices: ["spark"], botScopePrefixes: ["spark:"] }
+    };
+    FEISHU_MODULE_LABELS = {
+      im: "\u5373\u65F6\u6D88\u606F",
+      calendar: "\u65E5\u5386",
+      docs: "\u4E91\u6587\u6863",
+      drive: "\u4E91\u76D8",
+      sheets: "\u7535\u5B50\u8868\u683C",
+      base: "\u591A\u7EF4\u8868\u683C",
+      wiki: "\u77E5\u8BC6\u5E93",
+      slides: "\u5E7B\u706F\u7247",
+      task: "\u4EFB\u52A1",
+      approval: "\u5BA1\u6279",
+      mail: "\u90AE\u4EF6",
+      minutes: "\u5999\u8BB0",
+      vc: "\u89C6\u9891\u4F1A\u8BAE",
+      contact: "\u901A\u8BAF\u5F55",
+      okr: "OKR",
+      attendance: "\u8003\u52E4",
+      board: "\u767D\u677F",
+      spark: "Spark \u5E94\u7528"
+    };
+  }
+});
+
+// ../connectors/src/feishu/index.ts
+async function fetchFeishuTenantAccessToken(appId, appSecret) {
+  try {
+    const resp = await fetch(FEISHU_TENANT_TOKEN_URL, {
+      method: "POST",
+      headers: { "Content-Type": "application/json; charset=utf-8" },
+      body: JSON.stringify({ app_id: appId, app_secret: appSecret }),
+      signal: AbortSignal.timeout(TENANT_TOKEN_TIMEOUT_MS)
+    });
+    const data = await resp.json();
+    if (!resp.ok || data.code !== 0 || typeof data.tenant_access_token !== "string" || !data.tenant_access_token) {
+      log("[feishu]", `\u6362\u4F01\u4E1A token \u5931\u8D25\uFF08\u672C\u8F6E bot \u8EAB\u4EFD\u4E0D\u53EF\u7528\uFF09: HTTP ${resp.status} code=${String(data.code)} ${String(data.msg ?? "")}`.trim());
+      return null;
+    }
+    return data.tenant_access_token;
+  } catch (err) {
+    log("[feishu]", `\u6362\u4F01\u4E1A token \u5931\u8D25\uFF08\u672C\u8F6E bot \u8EAB\u4EFD\u4E0D\u53EF\u7528\uFF09: ${String(err?.message ?? err).slice(0, 200)}`);
+    return null;
+  }
+}
+function previousTenantToken(credsFile, appId) {
+  if (!credsFile) return null;
+  try {
+    const prev = readSessionCredsFile(credsFile);
+    if (prev["LARKSUITE_CLI_APP_ID"] !== appId) return null;
+    return prev["LARKSUITE_CLI_TENANT_ACCESS_TOKEN"] || null;
+  } catch {
+    return null;
+  }
+}
+function parseFeishuTokenResponse(data, nowMs) {
+  const accessToken = String(data["access_token"] ?? "");
+  const refreshToken = String(data["refresh_token"] ?? "");
+  const expiresInSec = Number(data["expires_in"] ?? 7200);
+  const refreshExpiresInSec = Number(
+    data["refresh_token_expires_in"] ?? data["refresh_expires_in"] ?? 30 * 24 * 3600
+  );
+  const expiresAtMs = nowMs + expiresInSec * 1e3;
+  return {
+    credentials: {
+      ...accessToken ? { user_access_token: accessToken } : {},
+      ...refreshToken ? { refresh_token: refreshToken } : {},
+      user_token_expires_at: String(expiresAtMs),
+      refresh_token_expires_at: String(nowMs + refreshExpiresInSec * 1e3)
+    },
+    expiresAt: new Date(expiresAtMs)
+  };
+}
+var import_node_child_process13, import_node_util4, import_node_path12, import_node_url, import_promises5, execFileAsync2, __dirname2, FEISHU_WELL_KNOWN_SKILLS_BASE, FEISHU_TOKEN_URL, FEISHU_TENANT_TOKEN_URL, FEISHU_USER_OPEN_ID_VAR, FEISHU_AUTHORIZED_BY_VAR, FEISHU_USER_AUTH_INVALID_VAR, FEISHU_REFRESH_REVOKED_CODES, TENANT_TOKEN_TIMEOUT_MS, FeishuConnector;
+var init_feishu = __esm({
+  "../connectors/src/feishu/index.ts"() {
+    "use strict";
+    import_node_child_process13 = require("node:child_process");
+    import_node_util4 = require("node:util");
+    import_node_path12 = require("node:path");
+    import_node_url = require("node:url");
+    import_promises5 = require("node:fs/promises");
+    init_base();
+    init_logger();
+    init_scopes();
+    execFileAsync2 = (0, import_node_util4.promisify)(import_node_child_process13.execFile);
+    __dirname2 = (0, import_node_path12.dirname)((0, import_node_url.fileURLToPath)(__esm_import_meta_url));
+    FEISHU_WELL_KNOWN_SKILLS_BASE = "https://open.feishu.cn/.well-known/skills";
+    FEISHU_TOKEN_URL = "https://open.feishu.cn/open-apis/authen/v2/oauth/token";
+    FEISHU_TENANT_TOKEN_URL = "https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal";
+    FEISHU_USER_OPEN_ID_VAR = "FEISHU_USER_OPEN_ID";
+    FEISHU_AUTHORIZED_BY_VAR = "FEISHU_AUTHORIZED_BY";
+    FEISHU_USER_AUTH_INVALID_VAR = "FEISHU_USER_AUTH_INVALID";
+    FEISHU_REFRESH_REVOKED_CODES = /* @__PURE__ */ new Set([20024, 20026, 20037, 20064, 20073, 20074]);
+    TENANT_TOKEN_TIMEOUT_MS = 5e3;
+    FeishuConnector = class extends CliConnector {
+      config = {
+        slug: "feishu",
+        type: "cli",
+        // schema 要**声明本连接器实际消费的全部凭据**，不只是「让用户手填的那几个」。
+        // 历史上这里只写了 app_id，而 inject() 其实还要 app_secret / user_access_token
+        // （后两者由控制台 OAuth 流写进变量表，用户不手填）——于是 secret 标记缺失，
+        // 密钥黑名单只能在 serve.ts 另手写一份。现在黑名单从 sensitiveVars 推导，schema 必须诚实。
+        schema: [
+          { key: "app_id", description: "\u98DE\u4E66 App ID\uFF08\u7559\u7A7A\u5219\u81EA\u52A8\u521B\u5EFA\u65B0\u5E94\u7528\uFF09", secret: false, required: false },
+          { key: "app_secret", description: "\u98DE\u4E66 App Secret\uFF08\u63A7\u5236\u53F0\u6388\u6743\u6D41\u5199\u5165\uFF0C\u975E\u624B\u586B\uFF09", secret: true, required: true },
+          { key: "user_access_token", description: "\u98DE\u4E66\u7528\u6237 token\uFF08OAuth \u6388\u6743\u540E\u5199\u5165\uFF0C~2h \u8F6E\u6362\uFF09", secret: true, required: false },
+          { key: "auth_selection", description: "\u6388\u6743\u65F6\u52FE\u9009\u7684\u529F\u80FD\u6A21\u5757\uFF08\u63A7\u5236\u53F0\u6388\u6743\u6D41\u5199\u5165\u7684\u660E\u6587 JSON\uFF0C\u6309\u5B83\u9650\u5236 agent \u53EF\u7528\u6A21\u5757\uFF09", secret: false, required: false }
+        ]
+      };
+      commandName = "lark-cli";
+      requiredCommands = ["lark-cli"];
+      envPrefix = "FEISHU_";
+      /** server 侧从 actor 变量表组装凭据的声明（见 provision.ts）。这些会随 job 下发到节点。 */
+      credentialSources = [
+        { key: "app_id", from: "FEISHU_APP_ID", required: true },
+        { key: "app_secret", from: "FEISHU_APP_SECRET", required: true },
+        { key: "user_access_token", from: "FEISHU_USER_ACCESS_TOKEN", required: false },
+        // 按 Agent 限制可用模块：inject 据此写放行表，wrapper 拦（个人选择优先，缺失回落组织连接的选择）。
+        { key: "auth_selection", from: FEISHU_AUTH_SELECTION_VAR, required: false }
+      ];
+      /**
+       * 续期材料——**只在 server 侧读，不下发节点**。refresh_token 能换出新的 user token，
+       * 属于"长期材料"，没有任何理由让它出现在 agent 所在的机器上。
+       */
+      refreshCredentialSources = [
+        // App 凭据是**组织级**共享的（个人变量优先，缺失回落全局默认）；用户 token 类只认个人变量。
+        { key: "app_id", from: "FEISHU_APP_ID", orgDefault: true, required: true },
+        { key: "app_secret", from: "FEISHU_APP_SECRET", orgDefault: true, required: true },
+        { key: "refresh_token", from: "FEISHU_REFRESH_TOKEN", required: true },
+        { key: "user_token_expires_at", from: "FEISHU_USER_TOKEN_EXPIRES_AT", required: false },
+        { key: "refresh_token_expires_at", from: "FEISHU_REFRESH_TOKEN_EXPIRES_AT", required: false },
+        { key: "user_access_token", from: "FEISHU_USER_ACCESS_TOKEN", required: false }
+      ];
+      /** 过期判定只认这个键——必须与注入时消费的 token 同源（见接口注释里的历史坑）。 */
+      expiresAtCredentialKey = "user_token_expires_at";
+      /**
+       * 下发前 user token 至少还要剩 40 分钟，不够就换新（Bug 0201）。
+       *
+       * 必须 > `SESSION_CREDENTIAL_RENEW_INTERVAL_MS`（30 分钟）：会话中途续期每 30 分钟问一次 server，
+       * 问的就是这条门槛。门槛若只有通用的 5 分钟，一张还剩 20 分钟的 token 会被原样发回，
+       * 20 分钟后失效、要再等 10 分钟才到下一拍——最坏断档近 25 分钟（`99991677 token expire`）。
+       * 取 40 = 30 分钟间隔 + 10 分钟调度余量：任一拍之后剩余 > 40，到下一拍仍 > 10。
+       *
+       * 不像 GitHub 那样取全寿命（每次都换）：飞书每次刷新都会轮换 refresh_token，
+       * 换得越勤，「飞书已轮换、我们还没落库」的窗口就越常被碰上，所以只取刚好够用的值。
+       */
+      minRemainingLifetimeMs = 40 * 6e4;
+      /**
+       * 只由服务端定时任务续期（Bug 0318）：refresh_token 一次性、每刷必轮换，派单与会话中途再各刷一次就是
+       * 多个写者并发打断续期链；懒续期又让闲置超过 refresh_token 寿命的员工悄悄失效。派单只读库里最新的 token。
+       */
+      scheduledRefreshOnly = true;
+      /** refresh_token 自身 ~30d 过期，过了只能重新授权。 */
+      refreshMaterialExpiresAtCredentialKey = "refresh_token_expires_at";
+      /**
+       * refresh_token 过期后该清掉的键——**只清这个员工的授权产物**。
+       * app_id / app_secret 刻意不在其中：它们代表组织级 App 凭据，与其他员工的连接无关。
+       */
+      clearOnExpiredCredentialKeys = [
+        "user_access_token",
+        "refresh_token",
+        "user_token_expires_at",
+        "refresh_token_expires_at"
+      ];
+      /**
+       * 绝不允许进入 agent 进程环境的原始变量。
+       * 含 APP_ID 与几个过期时间戳：它们本身不算密钥，但同属飞书凭据材料，一并挡在 agent 之外，
+       * 避免 agent 绕开 wrapper 自行拼凭据（沿用既有行为）。
+       */
+      sensitiveVars = [
+        "FEISHU_APP_ID",
+        "FEISHU_APP_SECRET",
+        "FEISHU_USER_ACCESS_TOKEN",
+        "FEISHU_REFRESH_TOKEN",
+        "FEISHU_USER_TOKEN_EXPIRES_AT",
+        "FEISHU_REFRESH_TOKEN_EXPIRES_AT",
+        FEISHU_USER_OPEN_ID_VAR,
+        FEISHU_AUTHORIZED_BY_VAR,
+        FEISHU_USER_AUTH_INVALID_VAR
+      ];
+      /** 宿主机登录态隔离，理由同 github（见接口注释）：由通用装配层无条件设。 */
+      hostCredentialIsolationEnvKeys = ["LARKSUITE_CLI_CONFIG_DIR"];
+      /** inject() 写进 sessionEnv 的全部键——通用 cleanup() 按它逐个删。 */
+      injectedEnvKeys = [
+        "LARK_BIN",
+        "FEISHU_CREDS_FILE",
+        "FEISHU_RUN_TMPDIR",
+        "LARKSUITE_CLI_CONFIG_DIR"
+      ];
+      /**
+       * 自检：拿 user_access_token 问飞书「我是谁」，回 `{ok, identity, data:{name, open_id}}`。
+       *
+       * **不能用 `lark-cli auth status`**：注入外部凭据后整个 auth 命名空间会被拒
+       * （"credentials are provided externally and do not support interactive management"），
+       * 自检会恒为失败。实测 2026-08-03 踩到——`auth status` 只在**读宿主机 profile** 时才有输出，
+       * 恰恰是我们要隔离掉的那条路径。
+       */
+      verifyArgs = ["api", "GET", "/open-apis/authen/v1/user_info"];
+      /** 厂商技能包源——平台自动拉取飞书官方技能包时用。 */
+      wellKnownSkillsBase = FEISHU_WELL_KNOWN_SKILLS_BASE;
+      larkBin;
+      fetchTenantToken;
+      /** `fetchTenantToken` 只给测试替换（不打真飞书）；生产一律用 {@link fetchFeishuTenantAccessToken}。 */
+      constructor(larkBin, opts = {}) {
+        super(__dirname2);
+        this.larkBin = larkBin ?? this.resolveLarkBin();
+        this.fetchTenantToken = opts.fetchTenantToken ?? fetchFeishuTenantAccessToken;
+      }
+      /**
+       * 解析 user_info 的 JSON。lark-cli 的 `ok:false` 也是**退出码 0** 的正常输出，
+       * 所以必须在这里判 ok——只看子进程退出码会把「凭据失效」当成自检通过。
+       */
+      parseIdentity(stdout) {
+        let parsed;
+        try {
+          parsed = JSON.parse(stdout);
+        } catch {
+          return null;
+        }
+        const obj2 = parsed;
+        if (obj2.ok !== true) return null;
+        const openId = typeof obj2.data?.open_id === "string" ? obj2.data.open_id : "";
+        if (!openId) return null;
+        const name = typeof obj2.data?.name === "string" ? obj2.data.name : "";
+        return name ? `${name} (${openId})` : openId;
+      }
+      async connect(options = {}) {
+        if (this.isSimulated()) {
+          return { credentials: { app_id: options["app_id"] ?? "cli_simulated" } };
+        }
+        const app_id = options["app_id"] ?? await this.initNewApp();
+        await this.runAuthLogin(app_id);
+        return { credentials: { app_id } };
+      }
+      /**
+       * Agent run 开始：把凭据作为 lark-cli「外部凭据」写进凭据文件（不进 agent env）。
+       * credentials 接受：app_id, app_secret, user_access_token?（及其 FEISHU_* 别名）。
+       * 企业 token 不随 job 下发，由这里用 app_id/app_secret 现换（换不到只是本轮没有 bot 身份，不抛）。
+       *
+       * 注入的 sessionEnv 键（全部非敏感）：
+       *   FEISHU_CREDS_FILE — 凭据文件路径，wrapper source 它
+       *   FEISHU_RUN_TMPDIR — 本轮临时目录，cleanup 整个删掉
+       *   LARK_BIN          — 真实 lark-cli 绝对路径（防 wrapper 递归调用自身）
+       */
+      async inject(credentials2, sessionEnv) {
+        const appId = credentials2["app_id"] ?? credentials2["FEISHU_APP_ID"];
+        const appSecret = credentials2["app_secret"] ?? credentials2["FEISHU_APP_SECRET"];
+        if (!appId) throw new Error("feishu inject: missing app_id");
+        if (!appSecret) throw new Error("feishu inject: missing app_secret");
+        const userAccessToken = credentials2["user_access_token"] ?? credentials2["FEISHU_USER_ACCESS_TOKEN"];
+        const modulePolicy = feishuModulePolicyEnv(
+          feishuSelectedModules(credentials2["auth_selection"] ?? credentials2[FEISHU_AUTH_SELECTION_VAR])
+        );
+        const tenantAccessToken = this.isSimulated() ? null : await this.fetchTenantToken(appId, appSecret) ?? previousTenantToken(sessionEnv.get("FEISHU_CREDS_FILE"), appId);
+        const creds = await writeSessionCredsFile(this.config.slug, {
+          LARKSUITE_CLI_APP_ID: appId,
+          LARKSUITE_CLI_APP_SECRET: appSecret,
+          ...tenantAccessToken ? { LARKSUITE_CLI_TENANT_ACCESS_TOKEN: tenantAccessToken } : {},
+          ...userAccessToken ? { LARKSUITE_CLI_USER_ACCESS_TOKEN: userAccessToken } : {},
+          ...modulePolicy ?? {}
+        }, sessionEnv.get("FEISHU_RUN_TMPDIR"));
+        const configDir = (0, import_node_path12.join)(creds.dir, "lark-config");
+        await (0, import_promises5.mkdir)(configDir, { recursive: true, mode: 448 });
+        sessionEnv.set("LARK_BIN", await this.resolveAbsoluteLarkBin());
+        sessionEnv.set("FEISHU_CREDS_FILE", creds.file);
+        sessionEnv.set("FEISHU_RUN_TMPDIR", creds.dir);
+        sessionEnv.set("LARKSUITE_CLI_CONFIG_DIR", configDir);
+      }
+      /**
+       * 用 refresh_token 换一对新的 user token（飞书 v2 OAuth）。
+       *
+       * **纯换取，不落库**——持久化由调用方做（server 侧 `oauth.ts`）。这样平台知识
+       * （端点、字段名、~2h/~30d 的寿命）全部收在连接器里，与 GitHub App 的续期共用
+       * `_base/refresh.ts` 那套判定。
+       *
+       * 返回 null＝没有可用的续期材料（未完成授权）。平台报错则抛，由上层收敛成 failed。
+       */
+      async refreshCredentials(credentials2) {
+        const appId = credentials2["app_id"];
+        const appSecret = credentials2["app_secret"];
+        const refreshToken = credentials2["refresh_token"];
+        if (!appId || !appSecret || !refreshToken) return null;
+        const resp = await fetch(FEISHU_TOKEN_URL, {
+          method: "POST",
+          headers: { "Content-Type": "application/x-www-form-urlencoded" },
+          body: new URLSearchParams({
+            grant_type: "refresh_token",
+            refresh_token: refreshToken,
+            client_id: appId,
+            client_secret: appSecret
+          }).toString()
+        });
+        const data = await resp.json();
+        if (!resp.ok || data["error"]) {
+          const code2 = Number(data["code"]);
+          const msg = `feishu refresh failed: HTTP ${resp.status} code=${String(data["code"] ?? "")} ${String(data["error"] ?? "")}`.trim();
+          if (data["error"] === "invalid_grant" || FEISHU_REFRESH_REVOKED_CODES.has(code2)) throw new CredentialRevokedError(msg);
+          throw new Error(msg);
+        }
+        return parseFeishuTokenResponse(data, Date.now());
+      }
+      async initNewApp() {
+        await new Promise((resolve11, reject) => {
+          const proc = (0, import_node_child_process13.spawn)(this.larkBin, ["config", "init", "--new"], { stdio: "inherit" });
+          proc.on("close", (code2) => code2 === 0 ? resolve11() : reject(new Error(`lark-cli config init exited ${code2}`)));
+          proc.on("error", reject);
+        });
+        const { stdout } = await execFileAsync2(this.larkBin, ["config", "show", "--json"]);
+        const cfg = JSON.parse(stdout);
+        if (!cfg.appId) throw new Error("feishu connector: could not determine app_id after config init");
+        return cfg.appId;
+      }
+      async runAuthLogin(app_id) {
+        await new Promise((resolve11, reject) => {
+          const proc = (0, import_node_child_process13.spawn)(this.larkBin, ["--profile", app_id, "auth", "login"], { stdio: "inherit" });
+          proc.on("close", (code2) => code2 === 0 ? resolve11() : reject(new Error(`lark-cli auth login exited ${code2}`)));
+          proc.on("error", reject);
+        });
+      }
+      resolveLarkBin() {
+        return process.env["LARK_CLI_BIN"] ?? "lark-cli";
+      }
+      async resolveAbsoluteLarkBin() {
+        if (this.larkBin.includes("/")) return this.larkBin;
+        return this.resolveRealBin(this.larkBin);
+      }
+    };
+  }
+});
+
+// ../connectors/src/feishu/user-auth.ts
+async function startFeishuDeviceAuthorization(input) {
+  const basicAuth = Buffer.from(`${input.appId}:${input.appSecret}`).toString("base64");
+  const resp = await (input.fetchImpl ?? fetch)(FEISHU_DEVICE_AUTHORIZATION_URL, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Authorization": `Basic ${basicAuth}`
+    },
+    body: new URLSearchParams({ client_id: input.appId, scope: input.scopes.join(" ") }).toString()
+  });
+  const data = await resp.json();
+  if (!resp.ok || data["error"]) {
+    throw new Error(String(data["error_description"] ?? data["error"] ?? "device authorization failed"));
+  }
+  const verificationUrl = String(data["verification_uri_complete"] ?? data["verification_uri"] ?? "");
+  if (!verificationUrl) throw new Error("no verification_uri in response");
+  const expiresIn = Number(data["expires_in"]);
+  const interval = Number(data["interval"]);
+  return {
+    verificationUrl,
+    deviceCode: String(data["device_code"] ?? ""),
+    ...Number.isFinite(expiresIn) && expiresIn > 0 ? { expiresIn } : {},
+    ...Number.isFinite(interval) && interval > 0 ? { interval } : {}
+  };
+}
+async function pollFeishuDeviceToken(input) {
+  const resp = await (input.fetchImpl ?? fetch)(FEISHU_TOKEN_URL, {
+    method: "POST",
+    headers: { "Content-Type": "application/x-www-form-urlencoded" },
+    body: new URLSearchParams({
+      grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+      device_code: input.deviceCode,
+      client_id: input.appId,
+      client_secret: input.appSecret
+    }).toString()
+  });
+  const data = await resp.json();
+  const errStr = data["error"];
+  if (errStr === "authorization_pending" || errStr === "slow_down") return { status: "pending" };
+  if (!resp.ok || errStr) throw new Error(String(data["error_description"] ?? errStr ?? "login failed"));
+  if (!data["access_token"]) throw new Error("no access_token in response");
+  return { status: "ok", data };
+}
+async function fetchFeishuUserIdentity(accessToken, fetchImpl = fetch) {
+  try {
+    const resp = await fetchImpl(FEISHU_USER_INFO_URL, { headers: { authorization: `Bearer ${accessToken}` } });
+    const ui = await resp.json();
+    if (!resp.ok || ui.code !== 0) return {};
+    const name = ui.data?.name || ui.data?.en_name;
+    return {
+      ...ui.data?.open_id ? { openId: ui.data.open_id } : {},
+      ...name ? { name } : {}
+    };
+  } catch {
+    return {};
+  }
+}
+async function sendFeishuBotTextToUser(input) {
+  const token2 = await (input.fetchTenantToken ?? fetchFeishuTenantAccessToken)(input.appId, input.appSecret);
+  if (!token2) throw new Error("\u6362\u4F01\u4E1A token \u5931\u8D25\uFF0Cbot \u79C1\u4FE1\u672A\u53D1\u51FA");
+  const resp = await (input.fetchImpl ?? fetch)(`${FEISHU_SEND_MESSAGE_URL}?receive_id_type=open_id`, {
+    method: "POST",
+    headers: { "content-type": "application/json; charset=utf-8", authorization: `Bearer ${token2}` },
+    body: JSON.stringify({ receive_id: input.openId, msg_type: "text", content: JSON.stringify({ text: input.text }) })
+  });
+  const body2 = await resp.json();
+  if (body2.code !== 0) throw new Error(`feishu bot \u79C1\u4FE1\u5931\u8D25: code=${String(body2.code)} ${body2.msg ?? ""}`.trim());
+}
+async function lookupFeishuOpenIdByEmail(input) {
+  const token2 = await (input.fetchTenantToken ?? fetchFeishuTenantAccessToken)(input.appId, input.appSecret);
+  if (!token2) throw new Error("\u6362\u4F01\u4E1A token \u5931\u8D25\uFF0C\u672A\u80FD\u6309\u90AE\u7BB1\u67E5\u98DE\u4E66\u7528\u6237");
+  const resp = await (input.fetchImpl ?? fetch)(`${FEISHU_BATCH_GET_ID_URL}?user_id_type=open_id`, {
+    method: "POST",
+    headers: { "content-type": "application/json; charset=utf-8", authorization: `Bearer ${token2}` },
+    body: JSON.stringify({ emails: [input.email], include_resigned: false })
+  });
+  const body2 = await resp.json();
+  if (body2.code !== 0) throw new Error(`feishu \u6309\u90AE\u7BB1\u67E5\u7528\u6237\u5931\u8D25: code=${String(body2.code)} ${body2.msg ?? ""}`.trim());
+  const hit = body2.data?.user_list?.find((u) => u.email?.toLowerCase() === input.email.toLowerCase() && u.user_id);
+  return hit?.user_id ?? null;
+}
+function feishuUserAuthInvalidText(input) {
+  const head = `\u300C${input.agentName}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF08\u6388\u6743\u88AB\u64A4\u9500\u6216\u957F\u65F6\u95F4\u65E0\u6CD5\u7EED\u671F\uFF09\uFF0C\u4EE5\u4F60\u8EAB\u4EFD\u8C03\u7528\u98DE\u4E66\u7684\u529F\u80FD\u6682\u65F6\u7528\u4E0D\u4E86\uFF0Cbot \u8EAB\u4EFD\u4E0D\u53D7\u5F71\u54CD\u3002`;
+  return input.link ? `${head}
+\u70B9\u8FD9\u4E2A\u94FE\u63A5\u91CD\u65B0\u6388\u6743\uFF08\u9700\u7528\u6536\u5230\u8FD9\u6761\u79C1\u4FE1\u7684\u98DE\u4E66\u8D26\u53F7\u767B\u5F55\uFF0C7 \u5929\u5185\u6709\u6548\uFF09\uFF1A
+${input.link}` : `${head}
+\u8BF7\u5230 Oasis \u8BE5 Agent \u7684\u300C\u8FDE\u63A5\u5668\u300D\u9875\u91CD\u65B0\u6388\u6743\u98DE\u4E66\u3002`;
+}
+var FEISHU_DEVICE_AUTHORIZATION_URL, FEISHU_USER_INFO_URL, FEISHU_SEND_MESSAGE_URL, FEISHU_BATCH_GET_ID_URL;
+var init_user_auth = __esm({
+  "../connectors/src/feishu/user-auth.ts"() {
+    "use strict";
+    init_feishu();
+    FEISHU_DEVICE_AUTHORIZATION_URL = "https://accounts.feishu.cn/oauth/v1/device_authorization";
+    FEISHU_USER_INFO_URL = "https://open.feishu.cn/open-apis/authen/v1/user_info";
+    FEISHU_SEND_MESSAGE_URL = "https://open.feishu.cn/open-apis/im/v1/messages";
+    FEISHU_BATCH_GET_ID_URL = "https://open.feishu.cn/open-apis/contact/v3/users/batch_get_id";
   }
 });
 
@@ -20569,6 +20691,16 @@ async function persistFeishuUserAuthorization(store, actorId, data, nowMs, who =
   await put3(FEISHU_AUTHORIZED_BY_VAR, who.authorizedBy);
   await store.deleteVariable(FEISHU_USER_AUTH_INVALID_VAR, actorId);
 }
+async function readFeishuUserAuthInvalid(store, actorId) {
+  const raw = await store.revealVariable(FEISHU_USER_AUTH_INVALID_VAR, actorId).catch(() => null);
+  if (!raw) return null;
+  try {
+    const m2 = JSON.parse(raw);
+    return typeof m2?.at === "string" ? m2 : null;
+  } catch {
+    return null;
+  }
+}
 async function markFeishuUserAuthInvalid(store, actorId, marker) {
   await store.putVariable({
     key: FEISHU_USER_AUTH_INVALID_VAR,
@@ -23421,6 +23553,7 @@ var init_scheduled_refresh = __esm({
                   counts2[outcome.status] = (counts2[outcome.status] ?? 0) + 1;
                 }
               }
+              await this.deps.afterCompany?.(companyId, store).catch((error2) => this.deps.warn(new Error(`\u5B9A\u65F6\u7EED\u671F\u6536\u5C3E company=${companyId}: ${String(error2)}`)));
             } catch (error2) {
               this.deps.warn(new Error(`\u5B9A\u65F6\u7EED\u671F company=${companyId}: ${String(error2)}`));
             }
@@ -24524,7 +24657,7 @@ function feishuReauthUrl(apiBase, token2) {
   return `${apiBase.replace(/\/+$/, "")}/api/connectors/feishu/reauth?t=${encodeURIComponent(token2)}`;
 }
 async function issueFeishuReauthToken(links, store, claims) {
-  const openId = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, claims.actorId).catch(() => null);
+  const openId = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, claims.actorId).catch(() => null) || claims.fallbackSubject;
   if (!openId) return null;
   return links.issue({
     companyId: claims.companyId,
@@ -211867,6 +212000,54 @@ var init_registry_audit_sink = __esm({
   }
 });
 
+// ../server/src/feishu-module-access.ts
+async function feishuModuleAccess(store, actorId, fetchScopes = fetchFeishuAppScopes) {
+  const read3 = (key2) => store.revealResolvedVariable(key2, actorId).catch(() => null);
+  const appId = await read3("FEISHU_APP_ID");
+  const appSecret = await read3("FEISHU_APP_SECRET");
+  if (!appId || !appSecret) return { configured: false };
+  const rawSelection = await read3(FEISHU_AUTH_SELECTION_VAR);
+  const modules = feishuSelectedModules(rawSelection);
+  let parsed = {};
+  try {
+    parsed = rawSelection ? JSON.parse(rawSelection) : {};
+  } catch {
+    parsed = {};
+  }
+  const grantedScopes = Array.isArray(parsed.grantedScopes) ? parsed.grantedScopes.filter((s2) => typeof s2 === "string") : void 0;
+  const hasUserAuth = Boolean(await read3("FEISHU_USER_ACCESS_TOKEN") || await read3("FEISHU_REFRESH_TOKEN"));
+  const userAuthInvalid = Boolean(await read3(FEISHU_USER_AUTH_INVALID_VAR));
+  let appScopes = null;
+  let botCheckError;
+  if (modules.length > 0) {
+    try {
+      appScopes = await fetchScopes(appId, appSecret);
+    } catch (e) {
+      botCheckError = String(e?.message ?? e).slice(0, 200);
+    }
+  }
+  return {
+    configured: true,
+    restricted: modules.length > 0,
+    modules: feishuModuleAccessReport({ modules, grantedScopes, hasUserAuth, userAuthInvalid, appScopes }),
+    hasUserAuth,
+    userAuthInvalid,
+    sendAsUser: feishuSendAsUserState({
+      sendAsUser: parsed.sendAsUser === true,
+      sendAsUserRequested: parsed.sendAsUserRequested === true,
+      grantedScopes
+    }),
+    appConsoleUrl: feishuAppPermissionConsoleUrl(appId),
+    ...botCheckError ? { botCheckError } : {}
+  };
+}
+var init_feishu_module_access = __esm({
+  "../server/src/feishu-module-access.ts"() {
+    "use strict";
+    init_src3();
+  }
+});
+
 // ../server/src/github-app-inventory.ts
 async function collectOasisGithubApps(svc) {
   const rows = (await svc.listVariables()).filter((r) => r.scope === "global" || r.scope === "personal");
@@ -218060,6 +218241,17 @@ ${composed}`;
             else html(false, result.error);
             return;
           }
+          if (url.pathname === "/api/connectors/feishu/app/permissions" && req.method === "POST") {
+            try {
+              const { actorId } = JSON.parse(rawBody || "{}");
+              const svc = await connectorActorsService();
+              if (!svc) throw new Error("actors service unavailable");
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(await feishuModuleAccess(svc, actorId)));
+            } catch (e) {
+              res.writeHead(500).end(JSON.stringify({ error: String(e) }));
+            }
+            return;
+          }
           if (url.pathname === "/api/connectors/feishu/login/start" && req.method === "POST") {
             const startBody = JSON.parse(rawBody);
             const { appId, actorId } = startBody;
@@ -218072,6 +218264,12 @@ ${composed}`;
               res.writeHead(400).end(JSON.stringify({ error: "\u8BF7\u81F3\u5C11\u9009\u62E9\u4E00\u4E2A\u529F\u80FD\u6A21\u5757" }));
               return;
             }
+            const devicePending = opts.connectorAuthPending?.githubApp;
+            if (!devicePending) {
+              console.error("[feishu-oauth] connectorAuthPending store unavailable \u2014 refusing to start device auth");
+              res.writeHead(503).end(JSON.stringify({ error: "\u6388\u6743\u767B\u8BB0\u670D\u52A1\u6682\u4E0D\u53EF\u7528\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5" }));
+              return;
+            }
             try {
               const startSvc = await connectorActorsService();
               const appSecret = startSvc ? await startSvc.revealResolvedVariable("FEISHU_APP_SECRET", actorId) : null;
@@ -218095,26 +218293,21 @@ ${composed}`;
                 scopes: scopesForSelection(selection, sendAsUserRequested)
               });
               if (!deviceCode) throw new Error("no device_code in response");
-              const devicePending = opts.connectorAuthPending?.githubApp;
-              if (devicePending) {
-                const now = Date.now();
-                await devicePending.put({
-                  state: feishuDevicePendingKey(deviceCode),
-                  ...currentCompanyId ? { companyId: currentCompanyId } : {},
-                  value: {
-                    connector: "feishu",
-                    appId,
-                    actorId: actorId ?? "",
-                    modules: selection.modules,
-                    sendAsUser: selection.sendAsUser,
-                    sendAsUserRequested
-                  },
-                  createdAtMs: now,
-                  expiresAtMs: now + FEISHU_DEVICE_PENDING_TTL_MS
-                });
-              } else {
-                console.error("[feishu-oauth] connectorAuthPending store unavailable \u2014 auth selection will not be saved");
-              }
+              const now = Date.now();
+              await devicePending.put({
+                state: feishuDevicePendingKey(deviceCode),
+                ...currentCompanyId ? { companyId: currentCompanyId } : {},
+                value: {
+                  connector: "feishu",
+                  appId,
+                  actorId: actorId ?? "",
+                  modules: selection.modules,
+                  sendAsUser: selection.sendAsUser,
+                  sendAsUserRequested
+                },
+                createdAtMs: now,
+                expiresAtMs: now + FEISHU_DEVICE_PENDING_TTL_MS
+              });
               res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
                 verificationUrl,
                 deviceCode,
@@ -218137,18 +218330,22 @@ ${composed}`;
             try {
               const devicePending = opts.connectorAuthPending?.githubApp;
               const started = devicePending ? await devicePending.get(feishuDevicePendingKey(deviceCode), Date.now()) : { status: "missing" };
-              let startedSelection = null;
-              if (started.status === "found") {
-                const v2 = started.value.value;
-                if (v2["appId"] !== appId || v2["actorId"] !== (actorId ?? "") || (started.value.companyId ?? "") !== (currentCompanyId ?? "")) {
-                  res.writeHead(400).end(JSON.stringify({ error: "\u8FD9\u6B21\u6388\u6743\u4E0D\u662F\u7531\u5F53\u524D\u5E94\u7528\u6216\u5458\u5DE5\u53D1\u8D77\u7684\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743" }));
-                  return;
-                }
-                const selection = normalizeFeishuAuthSelection({ modules: v2["modules"], sendAsUser: v2["sendAsUser"] });
-                if (selection) {
-                  startedSelection = { selection, sendAsUserRequested: selection.sendAsUser && v2["sendAsUserRequested"] === true };
-                }
+              if (started.status !== "found") {
+                console.error(`[feishu-oauth] no login/start registration for this device code (${started.status}) \u2014 refusing token exchange`);
+                res.writeHead(409).end(JSON.stringify({ ok: false, restart: true, error: "\u8FD9\u6B21\u6388\u6743\u7684\u767B\u8BB0\u5DF2\u5931\u6548\uFF08\u8D85\u65F6\u6216\u670D\u52A1\u5DF2\u66F4\u65B0\uFF09\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743" }));
+                return;
+              }
+              const v2 = started.value.value;
+              if (v2["appId"] !== appId || v2["actorId"] !== (actorId ?? "") || (started.value.companyId ?? "") !== (currentCompanyId ?? "")) {
+                res.writeHead(400).end(JSON.stringify({ ok: false, restart: true, error: "\u8FD9\u6B21\u6388\u6743\u4E0D\u662F\u7531\u5F53\u524D\u5E94\u7528\u6216\u5458\u5DE5\u53D1\u8D77\u7684\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743" }));
+                return;
+              }
+              const selection = normalizeFeishuAuthSelection({ modules: v2["modules"], sendAsUser: v2["sendAsUser"] });
+              if (!selection) {
+                res.writeHead(409).end(JSON.stringify({ ok: false, restart: true, error: "\u8FD9\u6B21\u6388\u6743\u7684\u767B\u8BB0\u5DF2\u635F\u574F\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743" }));
+                return;
               }
+              const startedSelection = { selection, sendAsUserRequested: selection.sendAsUser && v2["sendAsUserRequested"] === true };
               const pollSvc = await connectorActorsService();
               const appSecret = pollSvc ? await pollSvc.revealResolvedVariable("FEISHU_APP_SECRET", actorId) : null;
               if (!appSecret) throw new Error("FEISHU_APP_SECRET not found \u2014 please complete app setup first");
@@ -218174,18 +218371,14 @@ ${composed}`;
                   ...isHumanActorId(actor) ? { authorizedBy: actor } : {}
                 }));
                 const nameScope = actorId ? { scope: "personal", actorId } : { scope: "global" };
-                if (startedSelection) {
-                  const record10 = feishuAuthSelectionRecord(startedSelection.selection, startedSelection.sendAsUserRequested, data);
-                  await svc.putVariable({
-                    key: FEISHU_AUTH_SELECTION_VAR,
-                    value: JSON.stringify(record10),
-                    ...nameScope,
-                    connectorId: "feishu",
-                    encrypted: false
-                  });
-                } else {
-                  console.error(`[feishu-oauth] no login/start registration for this device code (${started.status}) \u2014 auth selection not saved`);
-                }
+                const record10 = feishuAuthSelectionRecord(startedSelection.selection, startedSelection.sendAsUserRequested, data);
+                await svc.putVariable({
+                  key: FEISHU_AUTH_SELECTION_VAR,
+                  value: JSON.stringify(record10),
+                  ...nameScope,
+                  connectorId: "feishu",
+                  encrypted: false
+                });
                 if (!who.openId) console.error("[feishu-oauth] user_info \u672A\u53D6\u5230\u6388\u6743\u4EBA open_id\uFF1A\u6388\u6743\u5931\u6548\u65F6\u65E0\u6CD5\u79C1\u4FE1\u672C\u4EBA\u3001\u4E5F\u7B7E\u4E0D\u51FA\u4E00\u952E\u91CD\u65B0\u6388\u6743\u94FE\u63A5");
                 try {
                   const secret = await svc.revealResolvedVariable("FEISHU_APP_SECRET", actorId);
@@ -218552,6 +218745,7 @@ var init_server3 = __esm({
     init_assembly();
     init_child_live_turn();
     init_registry_audit_sink();
+    init_feishu_module_access();
     init_src3();
     init_github_app_inventory();
     init_github_app_timing();
@@ -286671,6 +286865,7 @@ function createTodoRuntime(options) {
 init_src();
 init_src3();
 init_src11();
+var MAX_NOTICE_ATTEMPTS = 36;
 function createConnectorRenewalRuntime(options) {
   const now = () => options.now?.() ?? Date.now();
   const agentName = async (companyId, actorId) => {
@@ -286679,13 +286874,17 @@ function createConnectorRenewalRuntime(options) {
     const hit = (await svc?.listActors().catch(() => []))?.find((a) => a.id === actorId);
     return hit?.name || actorId;
   };
-  const notifyFeishuUser = async (store, actorId, text7) => {
-    const openId = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId);
-    if (!openId) return "no-open-id";
+  const appCredentials = async (store, actorId) => {
     const appId = await store.revealResolvedVariable("FEISHU_APP_ID", actorId);
     const appSecret = await store.revealResolvedVariable("FEISHU_APP_SECRET", actorId);
-    if (!appId || !appSecret) return "no-app";
-    await sendFeishuBotTextToUser({ appId, appSecret, openId, text: text7 });
+    return appId && appSecret ? { appId, appSecret } : null;
+  };
+  const notifyFeishuUser = async (store, actorId, text7, openId) => {
+    const to = openId || await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId);
+    if (!to) return "no-open-id";
+    const app = await appCredentials(store, actorId);
+    if (!app) return "no-app";
+    await sendFeishuBotTextToUser({ ...app, openId: to, text: text7 });
     return "sent";
   };
   const recipientsFor = async (companyId, store, actorId) => {
@@ -286701,36 +286900,110 @@ function createConnectorRenewalRuntime(options) {
     }
     return [...out];
   };
-  const onFeishuInvalidated = async (e, store) => {
-    const at2 = new Date(now()).toISOString();
-    await markFeishuUserAuthInvalid(store, e.actorId, { at: at2, reason: e.outcome.detail ?? "\u7EED\u671F\u6750\u6599\u5DF2\u5931\u6548" });
-    const name = await agentName(e.companyId, e.actorId);
-    const token2 = await issueFeishuReauthToken(options.links, store, { companyId: e.companyId, actorId: e.actorId, purpose: "reauth" });
-    const link = token2 && options.apiBase ? feishuReauthUrl(options.apiBase, token2) : void 0;
-    const ledger = await options.notifications(e.companyId);
-    if (ledger) {
-      const fresh = [];
-      for (const recipient of await recipientsFor(e.companyId, store, e.actorId)) {
-        const row = await ledger.insert({
-          recipient,
-          category: "connector",
-          kind: "feishu-auth-invalid",
-          // 每次失效一条：键里带失效时刻，重新授权后再失效还会再提醒；同一次失效重复扫描不重发（唯一约束）。
-          sourceKey: `connector:feishu:${e.actorId ?? "org"}@invalid:${at2}`,
-          title: `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF0C\u9700\u8981\u91CD\u65B0\u6388\u6743`,
-          ...e.actorId ? { actorId: e.actorId } : {},
-          enteredAt: at2
-        });
-        if (row.enteredAt === at2) fresh.push(row);
+  const recoverOpenId = async (companyId, app, recipients) => {
+    for (const human of recipients) {
+      const email2 = await options.memberEmail?.(human, companyId).catch(() => null);
+      if (!email2) continue;
+      const openId = await lookupFeishuOpenIdByEmail({ ...app, email: email2 });
+      if (openId) return openId;
+    }
+    return null;
+  };
+  const deliverInvalidNotice = async (companyId, store, actorId, marker) => {
+    const prev = marker.notice ?? { inApp: false, dm: "pending", attempts: 0 };
+    const state = { ...prev, attempts: prev.attempts + 1 };
+    const who = `actor=${actorId ?? "-"} \u7B2C ${state.attempts}/${MAX_NOTICE_ATTEMPTS} \u6B21`;
+    const name = await agentName(companyId, actorId);
+    const recipients = await recipientsFor(companyId, store, actorId);
+    if (!state.inApp) {
+      try {
+        const ledger = await options.notifications(companyId);
+        if (ledger) {
+          const rows = [];
+          for (const recipient of recipients) {
+            rows.push(await ledger.insert({
+              recipient,
+              category: "connector",
+              kind: "feishu-auth-invalid",
+              // 每次失效一条：键里带失效时刻，重新授权后再失效还会再提醒；同一次失效补发 / 重复扫描不重发（唯一约束）。
+              sourceKey: `connector:feishu:${actorId ?? "org"}@invalid:${marker.at}`,
+              title: `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF0C\u9700\u8981\u91CD\u65B0\u6388\u6743`,
+              ...actorId ? { actorId } : {},
+              enteredAt: marker.at
+            }));
+          }
+          if (rows.length > 0) options.onNotifications?.(companyId, rows);
+        }
+        if (recipients.length === 0) console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u7AD9\u5185\u901A\u77E5\u6CA1\u6709\u6536\u4EF6\u4EBA actor=${actorId ?? "-"}`);
+        state.inApp = true;
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u7AD9\u5185\u901A\u77E5\u672A\u5199\u5165\uFF08${who}\uFF0C\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09: ${String(err)}`));
       }
-      if (fresh.length > 0) options.onNotifications?.(e.companyId, fresh);
     }
-    try {
-      const sent = await notifyFeishuUser(store, e.actorId, feishuUserAuthInvalidText({ agentName: name, ...link ? { link } : {} }));
-      if (sent !== "sent") console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u672A\u53D1\uFF08${sent}\uFF09actor=${e.actorId ?? "-"}`);
-    } catch (err) {
-      options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u53D1\u9001\u5931\u8D25 actor=${e.actorId ?? "-"}: ${String(err)}`));
+    if (state.dm === "pending") {
+      try {
+        const app = await appCredentials(store, actorId);
+        const stored = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId);
+        const recovered = !stored && app ? await recoverOpenId(companyId, app, recipients) : null;
+        const openId = stored || recovered;
+        if (!app || !openId) {
+          state.dm = "unavailable";
+          console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u65E0\u4ECE\u53D1\u51FA\uFF08${app ? "\u6CA1\u8BB0\u6388\u6743\u4EBA\u3001\u901A\u8BAF\u5F55\u4E5F\u6CA1\u6309\u6210\u5458\u90AE\u7BB1\u627E\u5230\u672C\u4EBA" : "\u6CA1\u6709\u5E94\u7528\u51ED\u636E"}\uFF09actor=${actorId ?? "-"}\uFF1B\u53EA\u6709\u7AD9\u5185\u901A\u77E5`);
+        } else {
+          const token2 = await issueFeishuReauthToken(options.links, store, {
+            companyId,
+            actorId,
+            purpose: "reauth",
+            ...recovered ? { fallbackSubject: recovered } : {}
+          });
+          const link = token2 && options.apiBase ? feishuReauthUrl(options.apiBase, token2) : void 0;
+          await notifyFeishuUser(store, actorId, feishuUserAuthInvalidText({ agentName: name, ...link ? { link } : {} }), openId);
+          state.dm = "sent";
+        }
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u53D1\u9001\u5931\u8D25\uFF08${who}\uFF0C\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09: ${String(err)}`));
+      }
+    }
+    if ((!state.inApp || state.dm === "pending") && state.attempts >= MAX_NOTICE_ATTEMPTS) {
+      options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u63D0\u9192\u8865\u53D1 ${state.attempts} \u6B21\u4ECD\u672A\u9001\u5230\uFF0C\u653E\u5F03 actor=${actorId ?? "-"} \u7AD9\u5185=${String(state.inApp)} \u79C1\u4FE1=${state.dm}`));
     }
+    return state;
+  };
+  const saveNoticeState = async (store, actorId, at2, notice) => {
+    await withConnectorCredentialLock("feishu", actorId, async () => {
+      const current = await readFeishuUserAuthInvalid(store, actorId);
+      if (current?.at !== at2) return;
+      await markFeishuUserAuthInvalid(store, actorId, { ...current, notice });
+    });
+  };
+  const handledThisSweep = /* @__PURE__ */ new Set();
+  const sweepKey = (companyId, actorId) => JSON.stringify([companyId, actorId ?? ""]);
+  const onFeishuInvalidated = async (e, store) => {
+    const marker = {
+      at: new Date(now()).toISOString(),
+      reason: e.outcome.detail ?? "\u7EED\u671F\u6750\u6599\u5DF2\u5931\u6548",
+      notice: { inApp: false, dm: "pending", attempts: 0 }
+    };
+    await markFeishuUserAuthInvalid(store, e.actorId, marker);
+    handledThisSweep.add(sweepKey(e.companyId, e.actorId));
+    await saveNoticeState(store, e.actorId, marker.at, await deliverInvalidNotice(e.companyId, store, e.actorId, marker));
+  };
+  const retryPendingNotices = async (companyId, store) => {
+    const svc = await options.actors(companyId);
+    if (!svc) return;
+    const ids2 = [void 0, ...(await svc.listActors({ status: "active" })).map((a) => a.id)];
+    for (const actorId of ids2) {
+      if (handledThisSweep.delete(sweepKey(companyId, actorId))) continue;
+      const marker = await readFeishuUserAuthInvalid(store, actorId);
+      const n = marker?.notice;
+      if (!marker || !n || n.inApp && n.dm !== "pending" || n.attempts >= MAX_NOTICE_ATTEMPTS) continue;
+      try {
+        await saveNoticeState(store, actorId, marker.at, await deliverInvalidNotice(companyId, store, actorId, marker));
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u63D0\u9192\u8865\u53D1\u5931\u8D25 actor=${actorId ?? "-"}: ${String(err)}`));
+      }
+    }
+    for (const k2 of handledThisSweep) if (JSON.parse(k2)[0] === companyId) handledThisSweep.delete(k2);
   };
   const onFeishuRenewed = async (e, store) => {
     if (await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, e.actorId)) return;
@@ -286770,6 +287043,7 @@ function createConnectorRenewalRuntime(options) {
     onRenewed: async (e, store) => {
       if (e.connector.config.slug === "feishu") await onFeishuRenewed(e, store);
     },
+    afterCompany: retryPendingNotices,
     warn: options.warn,
     ...options.now ? { now: options.now } : {}
   });
@@ -286790,7 +287064,8 @@ function createConnectorRenewalRuntime(options) {
       await notifyFeishuUser(
         store,
         claims.actorId,
-        `\u6709\u4EBA\u7528\u53E6\u4E00\u4E2A\u98DE\u4E66\u8D26\u53F7${who.userName ? `\uFF08${who.userName}\uFF09` : ""}\u6253\u5F00\u4E86\u300C${name}\u300D\u7684\u91CD\u65B0\u6388\u6743\u94FE\u63A5\uFF0C\u5DF2\u88AB\u62D2\u7EDD\uFF0C\u6388\u6743\u672A\u6539\u53D8\u3002`
+        `\u6709\u4EBA\u7528\u53E6\u4E00\u4E2A\u98DE\u4E66\u8D26\u53F7${who.userName ? `\uFF08${who.userName}\uFF09` : ""}\u6253\u5F00\u4E86\u300C${name}\u300D\u7684\u91CD\u65B0\u6388\u6743\u94FE\u63A5\uFF0C\u5DF2\u88AB\u62D2\u7EDD\uFF0C\u6388\u6743\u672A\u6539\u53D8\u3002`,
+        claims.subject
       ).catch(() => void 0);
     }
   });
@@ -290573,6 +290848,11 @@ async function startServe(opts) {
       auditSink.notifyNotificationsChanged(recipients);
     },
     boundHuman: async (agentId, companyId) => (await (await resolveAssistantsCtx(companyId)).service.getByAgent(agentId))?.humanActorId ?? null,
+    // 成员表行上带 actorId；邮箱在控制面账号上（登录时验证过）。
+    memberEmail: async (humanId, companyId) => {
+      const row = (await controlPlaneStore.listMembers(companyId)).find((m2) => m2.actorId === humanId);
+      return row ? (await controlPlaneStore.getAccount(row.accountId))?.email ?? null : null;
+    },
     links: createConnectorReauthLinkIssuer({ secretFile: path30.join(opts.dir, "connector-reauth-link-secret") }),
     apiBase: remoteApiUrl,
     warn: (error2) => console.warn(`[credential-refresh] ${String(error2)}`)
@@ -300664,7 +300944,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.110" ? "2.2.110" : "dev";
+var CLI_VERSION = "2.2.112" ? "2.2.112" : "dev";
 function apiHeaders(token2, company) {
   const headers = {
     authorization: `Bearer ${token2}`,
@@ -304835,7 +305115,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.110" : "dev";
+var PKG_VERSION = true ? "2.2.112" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;