oasis_test_v2 2.2.112 → 2.2.114

package/dist/feishu/wrapper.sh

@@ -11,13 +11,15 @@
 #   LARK_BIN          — 真实 lark-cli 绝对路径（避免递归调用自身）
 #   FEISHU_CREDS_FILE — 凭据文件路径（内含 export LARKSUITE_CLI_* 行）
 #
-# 按 Agent 限制可用模块（产品反馈「飞书连接器·按 Agent 的权限模型」）：凭据文件里有
-# OASIS_FEISHU_ALLOW 时，只放行所选模块的 `lark-cli <domain>` 与 `lark-cli api <METHOD> /open-apis/<service>/…`，
-# 机器人与用户身份一样拦（bot 的企业 token 能调应用开通的全集，飞书侧分不开）。放行表由 inject() 按
-# FEISHU_AUTH_SELECTION 算好写入（feishuModulePolicyEnv），这里不认识任何模块，只查表。
+# 按 Agent 限制可用模块（产品反馈「飞书连接器·按 Agent 的权限模型」）：只放行所选模块的
+# `lark-cli <domain> …` 与 `lark-cli api <METHOD> /open-apis/<service>/…`，机器人与用户身份一样拦
+# （bot 的企业 token 能调应用开通的全集，飞书侧分不开）。放行表由 inject() 按 FEISHU_AUTH_SELECTION
+# 算好写入凭据文件（feishuModulePolicyEnv），这里不认识任何模块，只按规则表（OASIS_FEISHU_RULES）查。
+# 共用的 drive 命令/接口按子命令、路径细分。**没有放行表、没有有效选择都按一个模块都没开放拦**，不会退成不限制。
 # 被拦时照 lark-cli 的错误形状往 stderr 打一段 JSON、退出码 3（与 lark-cli 自己的鉴权失败同码）。
 
 set -euo pipefail
+shopt -s extglob   # 放行规则用 +([!/]) / ?(/*) 表示「一段」「零到多段」
 
 OASIS_BIN_VAR="LARK_BIN"
 OASIS_CMD_NAME="lark-cli"
@@ -28,7 +30,7 @@ oasis_resolve_bin
 oasis_check_available
 
 # 放行表只认凭据文件里的：先清掉 agent 环境里可能带进来的同名变量。
-unset OASIS_FEISHU_ALLOW OASIS_FEISHU_NEED OASIS_FEISHU_MODULES
+unset OASIS_FEISHU_POLICY OASIS_FEISHU_ALLOW OASIS_FEISHU_RULES OASIS_FEISHU_LABELS OASIS_FEISHU_MODULES
 
 # Load feishu credentials into THIS process only (not visible to the agent).
 if [ -n "${FEISHU_CREDS_FILE:-}" ] && [ -f "${FEISHU_CREDS_FILE}" ]; then
@@ -41,34 +43,82 @@ FEISHU_NEUTRAL_COMMANDS=" help schema skills whoami doctor completion auth confi
 # 任何模块都放行的接口 service；与 scopes.ts FEISHU_NEUTRAL_API_SERVICES 同一份。
 FEISHU_NEUTRAL_API=" authen auth "
 
+feishu_reply_blocked() {
+  printf '{\n  "ok": false,\n  "error": {\n    "type": "oasis_module_blocked",\n    "message": "%s",\n    "hint": "%s"\n  }\n}\n' "$1" "$2" >&2
+  exit 3
+}
+
 feishu_blocked() {
-  # $1 = 放行表里的键（cmd:<domain> / api:<service>）；$2 = 给人看的命令写法（已过滤成安全字符）。
-  local key="$1" shown="$2" need="" message hint
-  local entry
-  for entry in ${OASIS_FEISHU_NEED:-}; do
-    if [ "${entry%%=*}" = "$key" ]; then need="${entry#*=}"; break; fi
-  done
-  if [ -n "$need" ]; then
-    message="本 agent 的飞书连接器没有开放「${need}」模块，${shown} 已被 Oasis 拦下（机器人与用户身份都不可用）。当前开放的模块：${OASIS_FEISHU_MODULES:-无}。"
-    hint="如需使用，请让配置人在 Oasis 里这个 agent 的飞书连接器详情点「重新连接」，勾选「${need}」后完成授权。"
-  else
-    message="${shown} 不属于任何可勾选的飞书功能模块；本 agent 的飞书调用已按模块限制，Oasis 不放行它。当前开放的模块：${OASIS_FEISHU_MODULES:-无}。"
-    hint="请改用已开放模块对应的 lark-cli 命令；确需此能力请联系 Oasis 管理员。"
+  # $1 = 规则要求的模块（逗号分隔，空 = 不属于任何模块）；$2 = 给人看的命令写法（已过滤成安全字符）。
+  local mods="$1" shown="$2" need="" m entry label
+  local reconnect="请让配置人在 Oasis 里这个 agent 的飞书连接器详情点「重新连接」"
+  case "${OASIS_FEISHU_POLICY:-}" in
+    ok) ;;
+    none)
+      feishu_reply_blocked "本 agent 的飞书连接器还没有保存过可用模块的选择，Oasis 按「一个模块都没开放」处理，${shown} 已被拦下（机器人与用户身份都不可用）。" \
+        "${reconnect}，勾选需要的模块后完成授权。" ;;
+    invalid)
+      feishu_reply_blocked "本 agent 的飞书连接器保存的模块选择无法识别，Oasis 按「一个模块都没开放」处理，${shown} 已被拦下（机器人与用户身份都不可用）。" \
+        "${reconnect}，重新勾选模块后完成授权。" ;;
+    *)
+      feishu_reply_blocked "本次运行没有拿到飞书模块放行表，Oasis 不放行 ${shown}（机器人与用户身份都不可用）。" \
+        "请重新发起任务；仍出现请联系 Oasis 管理员检查飞书连接器。" ;;
+  esac
+  if [ -n "$mods" ]; then
+    for m in ${mods//,/ }; do
+      label="$m"
+      for entry in ${OASIS_FEISHU_LABELS:-}; do
+        if [ "${entry%%=*}" = "$m" ]; then label="${entry#*=}"; break; fi
+      done
+      need="${need:+${need}」或「}${label}"
+    done
+    feishu_reply_blocked "本 agent 的飞书连接器没有开放「${need}」模块，${shown} 已被 Oasis 拦下（机器人与用户身份都不可用）。当前开放的模块：${OASIS_FEISHU_MODULES:-无}。" \
+      "如需使用，${reconnect}，勾选「${need}」后完成授权。"
   fi
-  printf '{\n  "ok": false,\n  "error": {\n    "type": "oasis_module_blocked",\n    "message": "%s",\n    "hint": "%s"\n  }\n}\n' "$message" "$hint" >&2
-  exit 3
+  feishu_reply_blocked "${shown} 不属于任何可勾选的飞书功能模块；本 agent 的飞书调用已按模块限制，Oasis 不放行它。当前开放的模块：${OASIS_FEISHU_MODULES:-无}。" \
+    "请改用已开放模块对应的 lark-cli 命令；共用的 drive 子命令须紧跟在 drive 之后写。确需此能力请联系 Oasis 管理员。"
 }
 
 # 只把「看起来像命令名 / service 名」的字符串回显出来，其余一律写成占位——它要进 JSON。
 feishu_safe() {
   case "$1" in
-    ''|*[!A-Za-z0-9_.-]*) printf '%s' "该命令" ;;
+    ''|*[!A-Za-z0-9_.+-]*) printf '%s' "该命令" ;;
+    *) printf '%s' "$1" ;;
+  esac
+}
+
+# 按规则表判 $1（cmd/<domain>/… 或 api/<METHOD>/<service>/…）：命中且所需模块里有一个已放行 → 放行；
+# 命中但都没放行 → 拦并说缺哪个；一条都没命中 → 拦（不属于任何模块）。
+feishu_check_key() {
+  local key="$1" shown="$2" entry pat mods m
+  set -f
+  for entry in ${OASIS_FEISHU_RULES:-}; do
+    pat="${entry%=*}"; mods="${entry##*=}"
+    # shellcheck disable=SC2254
+    case "$key" in
+      $pat)
+        set +f
+        if [ "${OASIS_FEISHU_POLICY:-}" = "ok" ]; then
+          for m in ${mods//,/ }; do
+            case "${OASIS_FEISHU_ALLOW:-}" in *" $m "*) return 0 ;; esac
+          done
+        fi
+        feishu_blocked "$mods" "$shown" ;;
+    esac
+  done
+  set +f
+  feishu_blocked "" "$shown"
+}
+
+# 命令行里的一个词能不能原样进规则 key：只允许命令名字符，其余写成 ?（不会命中任何规则）。
+feishu_seg() {
+  case "$1" in
+    ''|*[!A-Za-z0-9_.+-]*) printf '?' ;;
     *) printf '%s' "$1" ;;
   esac
 }
 
 feishu_enforce_modules() {
-  [ -n "${OASIS_FEISHU_ALLOW:-}" ] || return 0   # 没保存过模块选择：不限制
   local args=("$@") i=0 n=$# cmd=""
   # 跳过命令前的全局参数（--profile X、-h/--help、-v/--version）。
   while [ "$i" -lt "$n" ]; do
@@ -82,8 +132,8 @@ feishu_enforce_modules() {
   case "$FEISHU_NEUTRAL_COMMANDS" in *" $cmd "*) return 0 ;; esac
 
   if [ "$cmd" = "api" ]; then
-    # lark-cli api <METHOD> <path> [flags]：取 api 之后第二个位置参数为 path（跳过带值的参数）。
-    local pos=0 path="" a
+    # lark-cli api <METHOD> <path> [flags]：api 之后第一、二个位置参数为 method、path（跳过带值的参数）。
+    local pos=0 method="" path="" a
     i=$((i + 1))
     while [ "$i" -lt "$n" ]; do
       a="${args[$i]}"
@@ -92,27 +142,49 @@ feishu_enforce_modules() {
         -*) i=$((i + 1)); continue ;;
       esac
       pos=$((pos + 1))
+      if [ "$pos" -eq 1 ]; then method="$a"; fi
       if [ "$pos" -eq 2 ]; then path="$a"; break; fi
       i=$((i + 1))
     done
     [ -n "$path" ] || return 0                   # 没给 path：lark-cli 自己报用法错，不会发请求
-    # 归一成 <service>/…：lark-cli 接受完整 URL、/open-apis/ 前缀可省、前导斜杠可省。
+    # 归一成 <service>/…：lark-cli 接受完整 URL、/open-apis/ 前缀可省、前导斜杠可省；连续斜杠并成一个。
     local p="$path"
     p="${p#http://}"; p="${p#https://}"
     case "$path" in http://*|https://*) p="${p#*/}" ;; esac
     while [ "${p#/}" != "$p" ]; do p="${p#/}"; done
     p="${p#open-apis/}"
     while [ "${p#/}" != "$p" ]; do p="${p#/}"; done
-    # 路径里带 .. 或百分号编码的，不去猜它最后落到哪个 service——直接拒。
-    case "$p" in *..*|*%*|*\\*) feishu_blocked "api:?" "lark-cli api（路径含 .. 或编码字符）" ;; esac
-    local svc="${p%%[/?#]*}"
+    p="${p%%[?#]*}"
+    while [ "${p//\/\//\/}" != "$p" ]; do p="${p//\/\//\/}"; done
+    # 路径里带 ..、. 段或百分号编码的，不去猜它最后落到哪个接口——直接拒。
+    case "/$p/" in *..*|*%*|*\\*|*/./*) feishu_blocked "" "lark-cli api（路径含 .. 或编码字符）" ;; esac
+    local svc="${p%%/*}"
     case "$FEISHU_NEUTRAL_API" in *" $svc "*) return 0 ;; esac
-    case "$OASIS_FEISHU_ALLOW" in *" api:$svc "*) return 0 ;; esac
-    feishu_blocked "api:$svc" "lark-cli api …/open-apis/$(feishu_safe "$svc")/…"
+    case "$p" in *[!A-Za-z0-9_./:-]*) feishu_blocked "" "lark-cli api（路径含非法字符）" ;; esac
+    # 方法名转大写（macOS 自带 bash 3.2 没有 ${x^^}）。
+    method="$(feishu_seg "$method" | tr '[:lower:]' '[:upper:]')"
+    feishu_check_key "api/$method/$p" "lark-cli api …/open-apis/$(feishu_safe "$svc")/…"
+    return 0
   fi
 
-  case "$OASIS_FEISHU_ALLOW" in *" cmd:$cmd "*) return 0 ;; esac
-  feishu_blocked "cmd:$cmd" "lark-cli $(feishu_safe "$cmd")"
+  # lark-cli <domain> [子命令] [方法]：只取紧跟在 domain 后面的词（drive 这类共用 domain 按子命令分模块）；
+  # domain 后面先出现参数的，key 里记成「-」，共用 domain 的细分规则一条都不会命中。
+  local key="cmd/$(feishu_seg "$cmd")" depth=0 j=$((i + 1)) only_help=1 w
+  while [ "$j" -lt "$n" ]; do
+    case "${args[$j]}" in -h|--help) ;; *) only_help=0 ;; esac
+    j=$((j + 1))
+  done
+  [ "$only_help" -eq 1 ] && [ $((i + 1)) -lt "$n" ] && return 0   # lark-cli <domain> --help
+  j=$((i + 1))
+  while [ "$j" -lt "$n" ] && [ "$depth" -lt 2 ]; do
+    w="${args[$j]}"
+    case "$w" in -*) key="$key/-"; break ;; esac
+    key="$key/$(feishu_seg "$w")"
+    depth=$((depth + 1)); j=$((j + 1))
+  done
+  local shown="lark-cli $(feishu_safe "$cmd")"
+  [ "$depth" -ge 1 ] && shown="$shown $(feishu_safe "${args[$((i + 1))]}")"
+  feishu_check_key "$key" "$shown"
 }
 
 feishu_enforce_modules "$@"

package/dist/index.js

@@ -19673,49 +19673,69 @@ function feishuAuthSelectionRecord(sel, sendAsUserRequested, tokenResponse) {
     ...granted ? { grantedScopes: granted } : {}
   };
 }
-function feishuModulePolicyEnv(modules) {
-  const picked = modules.filter((m2) => FEISHU_MODULE_ACCESS[m2]);
-  if (picked.length === 0) return null;
-  const allow = /* @__PURE__ */ new Set();
-  for (const m2 of picked) {
-    for (const c of FEISHU_MODULE_ACCESS[m2].commands) allow.add(`cmd:${c}`);
-    for (const s2 of FEISHU_MODULE_ACCESS[m2].apiServices) allow.add(`api:${s2}`);
-  }
-  const need2 = /* @__PURE__ */ new Map();
-  for (const [m2, a] of Object.entries(FEISHU_MODULE_ACCESS)) {
-    for (const k2 of [...a.commands.map((c) => `cmd:${c}`), ...a.apiServices.map((s2) => `api:${s2}`)]) {
-      if (allow.has(k2)) continue;
-      need2.set(k2, [...need2.get(k2) ?? [], (FEISHU_MODULE_LABELS[m2] ?? m2).replace(/\s+/g, "")]);
-    }
-  }
-  return {
-    OASIS_FEISHU_ALLOW: ` ${[...allow].sort().join(" ")} `,
-    OASIS_FEISHU_NEED: ` ${[...need2].sort(([a], [b2]) => a.localeCompare(b2)).map(([k2, v2]) => `${k2}=${v2.join("/")}`).join(" ")} `,
-    OASIS_FEISHU_MODULES: picked.map((m2) => FEISHU_MODULE_LABELS[m2] ?? m2).join("\u3001")
-  };
+function feishuModuleRules() {
+  const own3 = Object.entries(FEISHU_MODULE_ACCESS).flatMap(([m2, a]) => [
+    ...a.commands.map((c) => ({ pattern: `cmd/${c}/**`, modules: [m2] })),
+    ...a.apiServices.map((s2) => ({ pattern: `api/*/${s2}/**`, modules: [m2] }))
+  ]);
+  return [...own3, ...FEISHU_SHARED_RULES];
+}
+function ruleToExtglob(pattern) {
+  const tail = pattern.endsWith("/**");
+  const body2 = (tail ? pattern.slice(0, -3) : pattern).split("/").map((seg) => seg === "*" ? "+([!/])" : seg).join("/");
+  return tail ? `${body2}?(/*)` : body2;
 }
-function feishuSelectedModules(raw) {
-  if (!raw) return [];
+function feishuParseSelection(raw) {
+  if (!raw) return { state: "none", modules: [] };
+  let parsed;
   try {
-    const parsed = JSON.parse(raw);
-    return Array.isArray(parsed.modules) ? parsed.modules.filter((m2) => typeof m2 === "string" && !!FEISHU_MODULE_ACCESS[m2]) : [];
+    parsed = JSON.parse(raw);
   } catch {
-    return [];
+    return { state: "invalid", modules: [] };
   }
+  const modules = Array.isArray(parsed?.modules) ? [...new Set(parsed.modules.filter((m2) => typeof m2 === "string" && !!FEISHU_MODULE_ACCESS[m2]))] : [];
+  return modules.length > 0 ? { state: "ok", modules } : { state: "invalid", modules: [] };
+}
+function feishuModulePolicyEnv(selection) {
+  const picked = selection.state === "ok" ? selection.modules.filter((m2) => FEISHU_MODULE_ACCESS[m2]) : [];
+  const label2 = (m2) => (FEISHU_MODULE_LABELS[m2] ?? m2).replace(/\s+/g, "");
+  return {
+    OASIS_FEISHU_POLICY: picked.length > 0 ? "ok" : selection.state === "ok" ? "invalid" : selection.state,
+    OASIS_FEISHU_ALLOW: ` ${picked.join(" ")} `,
+    OASIS_FEISHU_RULES: feishuModuleRules().map((r) => `${ruleToExtglob(r.pattern)}=${r.modules.join(",")}`).join(" "),
+    OASIS_FEISHU_LABELS: Object.keys(FEISHU_MODULE_ACCESS).map((m2) => `${m2}=${label2(m2)}`).join(" "),
+    OASIS_FEISHU_MODULES: picked.map((m2) => FEISHU_MODULE_LABELS[m2] ?? m2).join("\u3001")
+  };
 }
 function feishuModuleAccessReport(input) {
   const granted = input.grantedScopes ? new Set(input.grantedScopes) : null;
-  const tenant = (input.appScopes ?? []).filter((s2) => s2.scope_type === "tenant" && s2.scope_name);
+  const tenant = /* @__PURE__ */ new Map();
+  for (const s2 of input.appScopes ?? []) {
+    if (s2.scope_type !== "tenant" || !s2.scope_name) continue;
+    const ok3 = s2.grant_status === void 0 || s2.grant_status === 1;
+    tenant.set(s2.scope_name, (tenant.get(s2.scope_name) ?? false) || ok3);
+  }
   return input.modules.filter((m2) => FEISHU_MODULE_ACCESS[m2]).map((m2) => {
-    const prefixes = FEISHU_MODULE_ACCESS[m2].botScopePrefixes;
-    const mine = tenant.filter((s2) => prefixes.some((p2) => s2.scope_name.startsWith(p2)));
-    const bot = input.appScopes === null ? "unknown" : mine.some((s2) => s2.grant_status === void 0 || s2.grant_status === 1) ? "granted" : mine.length > 0 ? "pending" : "missing";
+    const gaps = [];
+    let anyGranted = false;
+    let anyPending = false;
+    for (const cap of FEISHU_MODULE_ACCESS[m2].botCapabilities) {
+      if (cap.anyOf.some((s2) => tenant.get(s2) === true)) {
+        anyGranted = true;
+        continue;
+      }
+      const pending = cap.anyOf.some((s2) => tenant.has(s2));
+      if (pending) anyPending = true;
+      gaps.push({ label: cap.label, state: pending ? "pending" : "missing", scopes: [...cap.anyOf] });
+    }
+    const bot = input.appScopes === null ? "unknown" : gaps.length === 0 ? "granted" : anyGranted ? "partial" : anyPending ? "pending" : "missing";
     const missingUserScopes = granted ? (FEISHU_DOMAIN_SCOPES[m2]?.scopes ?? []).filter((s2) => !granted.has(s2)) : [];
-    const user = input.userAuthInvalid ? "invalid" : !input.hasUserAuth ? "none" : missingUserScopes.length > 0 ? "partial" : "granted";
+    const user = input.userAuthInvalid ? "invalid" : !input.hasUserAuth ? "none" : !granted ? "unknown" : missingUserScopes.length > 0 ? "partial" : "granted";
     return {
       id: m2,
       label: FEISHU_MODULE_LABELS[m2] ?? m2,
       bot,
+      missingBotCapabilities: bot === "unknown" ? [] : gaps,
       user,
       missingUserScopes: user === "partial" ? missingUserScopes : []
     };
@@ -19730,7 +19750,7 @@ function feishuSendAsUserState(sel) {
 function feishuAppPermissionConsoleUrl(appId) {
   return `https://open.feishu.cn/app/${encodeURIComponent(appId)}/auth`;
 }
-var FEISHU_BASIC_SCOPES, FEISHU_DOMAIN_SCOPES, FEISHU_USER_SCOPES, FEISHU_USER_SCOPE_STRING, FEISHU_SEND_AS_USER_SCOPE, FEISHU_AUTH_SELECTION_VAR, AUTO_APPROVED, FEISHU_MODULE_ACCESS, FEISHU_MODULE_LABELS;
+var FEISHU_BASIC_SCOPES, FEISHU_DOMAIN_SCOPES, FEISHU_USER_SCOPES, FEISHU_USER_SCOPE_STRING, FEISHU_SEND_AS_USER_SCOPE, FEISHU_AUTH_SELECTION_VAR, AUTO_APPROVED, FEISHU_MODULE_ACCESS, DRIVE_DOCS_ONLY_SHORTCUTS, DRIVE_DOCS_ONLY_RESOURCES, DRIVE_SHARED_SHORTCUTS, FEISHU_SHARED_RULES, FEISHU_MODULE_LABELS;
 var init_scopes = __esm({
   "../connectors/src/feishu/scopes.ts"() {
     "use strict";
@@ -20134,25 +20154,154 @@ var init_scopes = __esm({
     FEISHU_AUTH_SELECTION_VAR = "FEISHU_AUTH_SELECTION";
     AUTO_APPROVED = new Set(FEISHU_BASIC_SCOPES);
     FEISHU_MODULE_ACCESS = {
-      im: { commands: ["im"], apiServices: ["im"], botScopePrefixes: ["im:"] },
-      calendar: { commands: ["calendar"], apiServices: ["calendar"], botScopePrefixes: ["calendar:"] },
-      docs: { commands: ["docs", "drive", "markdown", "mindnotes"], apiServices: ["docx", "doc", "docs", "drive", "mindnote", "mindnotes", "suite"], botScopePrefixes: ["docs:", "docx:", "space:"] },
-      drive: { commands: ["drive", "markdown"], apiServices: ["drive"], botScopePrefixes: ["drive:"] },
-      sheets: { commands: ["sheets"], apiServices: ["sheets"], botScopePrefixes: ["sheets:"] },
-      base: { commands: ["base"], apiServices: ["bitable", "base"], botScopePrefixes: ["base:", "bitable:"] },
-      wiki: { commands: ["wiki"], apiServices: ["wiki"], botScopePrefixes: ["wiki:"] },
-      slides: { commands: ["slides"], apiServices: ["slides", "slides_ai"], botScopePrefixes: ["slides:"] },
-      task: { commands: ["task"], apiServices: ["task"], botScopePrefixes: ["task:"] },
-      approval: { commands: ["approval"], apiServices: ["approval"], botScopePrefixes: ["approval:"] },
-      mail: { commands: ["mail"], apiServices: ["mail"], botScopePrefixes: ["mail:"] },
-      minutes: { commands: ["minutes"], apiServices: ["minutes"], botScopePrefixes: ["minutes:"] },
-      vc: { commands: ["vc", "note"], apiServices: ["vc"], botScopePrefixes: ["vc:"] },
-      contact: { commands: ["contact"], apiServices: ["contact", "search"], botScopePrefixes: ["contact:"] },
-      okr: { commands: ["okr"], apiServices: ["okr"], botScopePrefixes: ["okr:"] },
-      attendance: { commands: ["attendance"], apiServices: ["attendance"], botScopePrefixes: ["attendance:"] },
-      board: { commands: ["whiteboard"], apiServices: ["board"], botScopePrefixes: ["board:"] },
-      spark: { commands: ["apps"], apiServices: ["spark"], botScopePrefixes: ["spark:"] }
-    };
+      im: { commands: ["im"], apiServices: ["im"], botCapabilities: [
+        { label: "\u53D1\u6D88\u606F", anyOf: ["im:message:send_as_bot", "im:message", "im:message:send"] },
+        { label: "\u8BFB\u6D88\u606F", anyOf: ["im:message:readonly", "im:message", "im:message.group_msg", "im:message.p2p_msg:readonly", "im:message.group_at_msg:readonly"] },
+        { label: "\u7FA4\u4FE1\u606F", anyOf: ["im:chat:readonly", "im:chat:read", "im:chat"] }
+      ] },
+      calendar: { commands: ["calendar"], apiServices: ["calendar"], botCapabilities: [
+        { label: "\u8BFB\u65E5\u7A0B", anyOf: ["calendar:calendar:readonly", "calendar:calendar", "calendar:calendar:read", "calendar:calendar.event:read"] },
+        { label: "\u5199\u65E5\u7A0B", anyOf: ["calendar:calendar", "calendar:calendar.event:create", "calendar:calendar.event:update"] }
+      ] },
+      docs: { commands: ["docs", "mindnotes"], apiServices: ["docx", "doc", "docs", "mindnote", "mindnotes", "suite"], botCapabilities: [
+        { label: "\u8BFB\u6587\u6863", anyOf: ["docx:document:readonly", "docx:document", "docs:document.content:read", "docs:doc:readonly", "docs:doc"] },
+        { label: "\u5199\u6587\u6863", anyOf: ["docx:document", "docx:document:create", "docx:document:write_only", "docs:doc"] }
+      ] },
+      drive: { commands: ["markdown"], apiServices: [], botCapabilities: [
+        { label: "\u4E0B\u8F7D\u6587\u4EF6", anyOf: ["drive:drive:readonly", "drive:drive", "drive:file:download", "drive:file:readonly", "drive:file"] },
+        { label: "\u4E0A\u4F20\u6587\u4EF6", anyOf: ["drive:drive", "drive:file:upload", "drive:file"] }
+      ] },
+      sheets: { commands: ["sheets"], apiServices: ["sheets"], botCapabilities: [
+        { label: "\u8BFB\u8868\u683C", anyOf: ["sheets:spreadsheet:readonly", "sheets:spreadsheet", "sheets:spreadsheet:read"] },
+        { label: "\u5199\u8868\u683C", anyOf: ["sheets:spreadsheet", "sheets:spreadsheet:write_only", "sheets:spreadsheet:create"] }
+      ] },
+      base: { commands: ["base"], apiServices: ["bitable", "base"], botCapabilities: [
+        { label: "\u8BFB\u8BB0\u5F55", anyOf: ["bitable:app:readonly", "bitable:app", "base:record:read", "base:app:read"] },
+        { label: "\u5199\u8BB0\u5F55", anyOf: ["bitable:app", "base:record:create", "base:record:update"] }
+      ] },
+      wiki: { commands: ["wiki"], apiServices: ["wiki"], botCapabilities: [
+        { label: "\u8BFB\u77E5\u8BC6\u5E93", anyOf: ["wiki:wiki:readonly", "wiki:wiki", "wiki:node:read", "wiki:space:read"] },
+        { label: "\u5199\u77E5\u8BC6\u5E93", anyOf: ["wiki:wiki", "wiki:node:create", "wiki:space:write_only"] }
+      ] },
+      slides: { commands: ["slides"], apiServices: ["slides", "slides_ai"], botCapabilities: [
+        { label: "\u8BFB\u5E7B\u706F\u7247", anyOf: ["slides:presentation:read", "slides:presentation:readonly", "slides:presentation"] },
+        { label: "\u5199\u5E7B\u706F\u7247", anyOf: ["slides:presentation:update", "slides:presentation:write_only", "slides:presentation:create", "slides:presentation"] }
+      ] },
+      task: { commands: ["task"], apiServices: ["task"], botCapabilities: [
+        { label: "\u8BFB\u4EFB\u52A1", anyOf: ["task:task:read", "task:task:readonly", "task:task"] },
+        { label: "\u5199\u4EFB\u52A1", anyOf: ["task:task:write", "task:task"] }
+      ] },
+      approval: { commands: ["approval"], apiServices: ["approval"], botCapabilities: [
+        { label: "\u8BFB\u5BA1\u6279", anyOf: ["approval:instance:read", "approval:approval:readonly", "approval:approval"] },
+        { label: "\u5904\u7406\u5BA1\u6279", anyOf: ["approval:instance:write", "approval:task:write", "approval:approval"] }
+      ] },
+      mail: { commands: ["mail"], apiServices: ["mail"], botCapabilities: [
+        { label: "\u8BFB\u90AE\u4EF6", anyOf: ["mail:user_mailbox.message:readonly", "mail:user_mailbox:readonly", "mail:user_mailbox"] }
+      ] },
+      minutes: { commands: ["minutes"], apiServices: ["minutes"], botCapabilities: [
+        { label: "\u8BFB\u5999\u8BB0", anyOf: ["minutes:minutes:readonly", "minutes:minutes", "minutes:minutes.search:read"] }
+      ] },
+      vc: { commands: ["vc", "note"], apiServices: ["vc"], botCapabilities: [
+        { label: "\u8BFB\u4F1A\u8BAE", anyOf: ["vc:meeting:readonly", "vc:meeting", "vc:meeting.meetingevent:read", "vc:record:readonly"] }
+      ] },
+      contact: { commands: ["contact"], apiServices: ["contact"], botCapabilities: [
+        { label: "\u8BFB\u901A\u8BAF\u5F55", anyOf: ["contact:user.base:readonly", "contact:contact:readonly_as_app", "contact:contact:readonly", "contact:contact", "contact:user.basic_profile:readonly"] }
+      ] },
+      okr: { commands: ["okr"], apiServices: ["okr"], botCapabilities: [
+        { label: "\u8BFB OKR", anyOf: ["okr:okr:readonly", "okr:okr", "okr:okr:read"] }
+      ] },
+      attendance: { commands: ["attendance"], apiServices: ["attendance"], botCapabilities: [
+        { label: "\u8BFB\u8003\u52E4", anyOf: ["attendance:task:readonly", "attendance:record:read", "attendance:task"] }
+      ] },
+      board: { commands: ["whiteboard"], apiServices: ["board"], botCapabilities: [
+        { label: "\u8BFB\u767D\u677F", anyOf: ["board:whiteboard:node:read"] },
+        { label: "\u5199\u767D\u677F", anyOf: ["board:whiteboard:node:create"] }
+      ] },
+      spark: { commands: ["apps"], apiServices: ["spark"], botCapabilities: [
+        { label: "\u8BFB\u5E94\u7528", anyOf: ["spark:app:read"] },
+        { label: "\u5199\u5E94\u7528", anyOf: ["spark:app:write"] }
+      ] }
+    };
+    DRIVE_DOCS_ONLY_SHORTCUTS = [
+      // 评论
+      "+add-comment",
+      "+add-reply",
+      "+batch-query-comments",
+      "+delete-reply",
+      "+list-comments",
+      "+list-replies",
+      "+react-reply",
+      "+resolve-comment",
+      "+restore-comment",
+      "+update-reply",
+      // 协作者与分享权限
+      "+apply-permission",
+      "+member-add",
+      "+member-list",
+      "+member-remove",
+      "+permission-get-setting",
+      // 导入导出、搜索、密级
+      "+export",
+      "+export-download",
+      "+import",
+      "+search",
+      "+secure-label-list",
+      "+secure-label-update"
+    ];
+    DRIVE_DOCS_ONLY_RESOURCES = [
+      "file.comment.reply.reactions",
+      "file.comment.replys",
+      "file.comments",
+      "permission.members",
+      "permission.public",
+      "user"
+    ];
+    DRIVE_SHARED_SHORTCUTS = ["+copy", "+create-folder", "+create-shortcut", "+delete", "+move", "+update-title", "+inspect", "+task_result"];
+    FEISHU_SHARED_RULES = [
+      ...DRIVE_DOCS_ONLY_SHORTCUTS.map((s2) => ({ pattern: `cmd/drive/${s2}/**`, modules: ["docs"] })),
+      ...DRIVE_DOCS_ONLY_RESOURCES.map((r) => ({ pattern: `cmd/drive/${r}/*/**`, modules: ["docs"] })),
+      ...DRIVE_SHARED_SHORTCUTS.map((s2) => ({ pattern: `cmd/drive/${s2}/**`, modules: ["docs", "drive"] })),
+      ...["copy", "create_folder", "patch"].map((m2) => ({ pattern: `cmd/drive/files/${m2}/**`, modules: ["docs", "drive"] })),
+      { pattern: "cmd/drive/metas/*/**", modules: ["docs", "drive"] },
+      // drive 后面先写参数再写子命令的（`drive --as bot +add-comment`），认不出子命令归谁——谁都不放行。
+      { pattern: "cmd/drive/-/**", modules: [] },
+      { pattern: "cmd/drive/**", modules: ["drive"] },
+      ...[
+        "drive/v1/permissions/**",
+        "drive/v2/permissions/**",
+        "drive/permission/**",
+        "drive/v1/files/*/comments/**",
+        "drive/v1/files/*/new_comments/**",
+        "drive/v2/files/*/comments/**",
+        "drive/v2/files/*/likes/**",
+        "drive/v1/files/*/subscribe/**",
+        "drive/v1/files/*/get_subscribe/**",
+        "drive/v1/files/*/delete_subscribe/**",
+        "drive/v1/files/*/subscriptions/**",
+        "drive/v1/user/**",
+        "drive/v1/import_tasks/**",
+        "drive/v1/export_tasks/**",
+        "drive/v1/medias/**",
+        "drive/v2/files/*/secure_label/**",
+        "drive/v2/my_secure_labels/**"
+      ].map((p2) => ({ pattern: `api/*/${p2}`, modules: ["docs"] })),
+      ...[
+        "*/drive/v1/files/create_folder/**",
+        "*/drive/v1/files/create_shortcut/**",
+        "*/drive/v1/files/task_check/**",
+        "*/drive/v1/files/*/move/**",
+        "*/drive/v1/files/*/copy/**",
+        "DELETE/drive/v1/files/*",
+        "PATCH/drive/v1/files/*",
+        "*/drive/v1/metas/**",
+        "*/drive/v2/files/query_by_token/**",
+        "*/drive/explorer/**"
+      ].map((p2) => ({ pattern: `api/${p2}`, modules: ["docs", "drive"] })),
+      { pattern: "api/*/drive/**", modules: ["drive"] },
+      { pattern: "api/*/search/v1/user/**", modules: ["contact"] },
+      { pattern: "api/*/search/v2/message/**", modules: ["im"] },
+      { pattern: "api/*/search/v2/doc_wiki/**", modules: ["docs", "wiki"] }
+    ];
     FEISHU_MODULE_LABELS = {
       im: "\u5373\u65F6\u6D88\u606F",
       calendar: "\u65E5\u5386",
@@ -20330,7 +20479,8 @@ var init_feishu = __esm({
         "FEISHU_REFRESH_TOKEN_EXPIRES_AT",
         FEISHU_USER_OPEN_ID_VAR,
         FEISHU_AUTHORIZED_BY_VAR,
-        FEISHU_USER_AUTH_INVALID_VAR
+        FEISHU_USER_AUTH_INVALID_VAR,
+        "FEISHU_AUTH_PENDING_APPROVAL"
       ];
       /** 宿主机登录态隔离，理由同 github（见接口注释）：由通用装配层无条件设。 */
       hostCredentialIsolationEnvKeys = ["LARKSUITE_CLI_CONFIG_DIR"];
@@ -20403,7 +20553,7 @@ var init_feishu = __esm({
         if (!appSecret) throw new Error("feishu inject: missing app_secret");
         const userAccessToken = credentials2["user_access_token"] ?? credentials2["FEISHU_USER_ACCESS_TOKEN"];
         const modulePolicy = feishuModulePolicyEnv(
-          feishuSelectedModules(credentials2["auth_selection"] ?? credentials2[FEISHU_AUTH_SELECTION_VAR])
+          feishuParseSelection(credentials2["auth_selection"] ?? credentials2[FEISHU_AUTH_SELECTION_VAR])
         );
         const tenantAccessToken = this.isSimulated() ? null : await this.fetchTenantToken(appId, appSecret) ?? previousTenantToken(sessionEnv.get("FEISHU_CREDS_FILE"), appId);
         const creds = await writeSessionCredsFile(this.config.slug, {
@@ -20411,7 +20561,7 @@ var init_feishu = __esm({
           LARKSUITE_CLI_APP_SECRET: appSecret,
           ...tenantAccessToken ? { LARKSUITE_CLI_TENANT_ACCESS_TOKEN: tenantAccessToken } : {},
           ...userAccessToken ? { LARKSUITE_CLI_USER_ACCESS_TOKEN: userAccessToken } : {},
-          ...modulePolicy ?? {}
+          ...modulePolicy
         }, sessionEnv.get("FEISHU_RUN_TMPDIR"));
         const configDir = (0, import_node_path12.join)(creds.dir, "lark-config");
         await (0, import_promises5.mkdir)(configDir, { recursive: true, mode: 448 });
@@ -20522,7 +20672,8 @@ async function pollFeishuDeviceToken(input) {
   const data = await resp.json();
   const errStr = data["error"];
   if (errStr === "authorization_pending" || errStr === "slow_down") return { status: "pending" };
-  if (!resp.ok || errStr) throw new Error(String(data["error_description"] ?? errStr ?? "login failed"));
+  if (errStr) throw new FeishuDeviceFlowError(errStr, String(data["error_description"] ?? errStr));
+  if (!resp.ok) throw new Error(String(data["error_description"] ?? "login failed"));
   if (!data["access_token"]) throw new Error("no access_token in response");
   return { status: "ok", data };
 }
@@ -20571,7 +20722,7 @@ function feishuUserAuthInvalidText(input) {
 ${input.link}` : `${head}
 \u8BF7\u5230 Oasis \u8BE5 Agent \u7684\u300C\u8FDE\u63A5\u5668\u300D\u9875\u91CD\u65B0\u6388\u6743\u98DE\u4E66\u3002`;
 }
-var FEISHU_DEVICE_AUTHORIZATION_URL, FEISHU_USER_INFO_URL, FEISHU_SEND_MESSAGE_URL, FEISHU_BATCH_GET_ID_URL;
+var FEISHU_DEVICE_AUTHORIZATION_URL, FEISHU_USER_INFO_URL, FEISHU_SEND_MESSAGE_URL, FEISHU_BATCH_GET_ID_URL, FeishuDeviceFlowError;
 var init_user_auth = __esm({
   "../connectors/src/feishu/user-auth.ts"() {
     "use strict";
@@ -20580,6 +20731,78 @@ var init_user_auth = __esm({
     FEISHU_USER_INFO_URL = "https://open.feishu.cn/open-apis/authen/v1/user_info";
     FEISHU_SEND_MESSAGE_URL = "https://open.feishu.cn/open-apis/im/v1/messages";
     FEISHU_BATCH_GET_ID_URL = "https://open.feishu.cn/open-apis/contact/v3/users/batch_get_id";
+    FeishuDeviceFlowError = class extends Error {
+      constructor(code2, message) {
+        super(message);
+        this.code = code2;
+        this.name = "FeishuDeviceFlowError";
+      }
+    };
+  }
+});
+
+// ../connectors/src/feishu/pending-approval.ts
+function feishuPendingApprovalScopes(input) {
+  const granted = input.granted ? new Set(input.granted) : null;
+  const missing = input.requested.filter((s2) => s2 !== "offline_access" && !granted?.has(s2));
+  if (!input.appScopes) return missing.filter((s2) => !AUTO_APPROVED2.has(s2));
+  const byName = userScopeIndex(input.appScopes);
+  return missing.filter((s2) => byName.has(s2) && !isGranted(byName.get(s2)));
+}
+function feishuPendingApprovalSettled(pending, appScopes) {
+  const byName = userScopeIndex(appScopes);
+  return pending.pendingScopes.every((s2) => isGranted(byName.get(s2)));
+}
+function feishuPendingApprovalModules(pending) {
+  const waiting = new Set(pending.pendingScopes);
+  return pending.modules.filter((m2) => (FEISHU_DOMAIN_SCOPES[m2]?.scopes ?? []).some((s2) => waiting.has(s2)));
+}
+async function readFeishuPendingApproval(store, actorId) {
+  const raw = await store.revealVariable(FEISHU_AUTH_PENDING_APPROVAL_VAR, actorId).catch(() => null);
+  if (!raw) return null;
+  try {
+    const p2 = JSON.parse(raw);
+    return typeof p2?.at === "string" && typeof p2.appId === "string" && Array.isArray(p2.modules) && Array.isArray(p2.pendingScopes) ? p2 : null;
+  } catch {
+    return null;
+  }
+}
+async function writeFeishuPendingApproval(store, actorId, pending) {
+  await store.putVariable({
+    key: FEISHU_AUTH_PENDING_APPROVAL_VAR,
+    value: JSON.stringify(pending),
+    ...actorId ? { scope: "personal", actorId } : { scope: "global" },
+    connectorId: "feishu",
+    encrypted: false
+  });
+}
+async function clearFeishuPendingApproval(store, actorId) {
+  await store.deleteVariable(FEISHU_AUTH_PENDING_APPROVAL_VAR, actorId);
+}
+function feishuApprovalGrantedText(input) {
+  const head = `\u7BA1\u7406\u5458\u5DF2\u6279\u51C6\u300C${input.agentName}\u300D\u7533\u8BF7\u7684\u98DE\u4E66\u6743\u9650\uFF08${moduleNames(input.modules)}\uFF09\u3002\u8FD8\u5DEE\u4F60\u70B9\u4E00\u6B21\u6388\u6743\uFF0C\u8FD9\u90E8\u5206\u529F\u80FD\u624D\u80FD\u4EE5\u4F60\u7684\u8EAB\u4EFD\u4F7F\u7528\u3002`;
+  return input.link ? `${head}
+\u70B9\u8FD9\u4E2A\u94FE\u63A5\u8865\u4E0A\u6743\u9650\uFF08\u9700\u7528\u6536\u5230\u8FD9\u6761\u79C1\u4FE1\u7684\u98DE\u4E66\u8D26\u53F7\u767B\u5F55\uFF0C7 \u5929\u5185\u6709\u6548\uFF09\uFF1A
+${input.link}` : `${head}
+\u8BF7\u5230 Oasis \u8BE5 Agent \u7684\u300C\u8FDE\u63A5\u5668\u300D\u9875\u91CD\u65B0\u8FDE\u63A5\u98DE\u4E66\u3002`;
+}
+function feishuPendingApprovalNotice(modules) {
+  return `${moduleNames(modules)}\u542B\u9700\u98DE\u4E66\u7BA1\u7406\u5458\u5BA1\u6279\u7684\u6743\u9650\uFF0C\u5DF2\u63D0\u4EA4\u5BA1\u6279\u3002\u6279\u51C6\u540E\u4F1A\u5728\u98DE\u4E66\u79C1\u4FE1\u901A\u77E5\u4F60\uFF0C\u70B9\u4E00\u4E0B\u5373\u53EF\u8865\u4E0A\u8FD9\u90E8\u5206\u6743\u9650\uFF1B\u5DF2\u6709\u7684\u98DE\u4E66\u80FD\u529B\u4E0D\u53D7\u5F71\u54CD\u3002`;
+}
+var FEISHU_AUTH_PENDING_APPROVAL_VAR, FEISHU_PENDING_APPROVAL_WATCH_MS, FEISHU_APPROVED_SUPPLEMENT_KEEP_MS, AUTO_APPROVED2, userScopeIndex, isGranted, moduleNames;
+var init_pending_approval = __esm({
+  "../connectors/src/feishu/pending-approval.ts"() {
+    "use strict";
+    init_scopes();
+    FEISHU_AUTH_PENDING_APPROVAL_VAR = "FEISHU_AUTH_PENDING_APPROVAL";
+    FEISHU_PENDING_APPROVAL_WATCH_MS = 30 * 24 * 36e5;
+    FEISHU_APPROVED_SUPPLEMENT_KEEP_MS = 7 * 24 * 36e5;
+    AUTO_APPROVED2 = new Set(FEISHU_BASIC_SCOPES);
+    userScopeIndex = (appScopes) => new Map(
+      appScopes.filter((s2) => s2.scope_name && (!s2.scope_type || s2.scope_type === "user")).map((s2) => [s2.scope_name, s2])
+    );
+    isGranted = (s2) => !!s2 && (s2.grant_status === void 0 || s2.grant_status === 1);
+    moduleNames = (modules) => modules.map((m2) => FEISHU_MODULE_LABELS[m2] ?? m2).join("\u3001") || "\u6240\u7533\u8BF7\u7684";
   }
 });
 
@@ -24504,6 +24727,7 @@ var init_src3 = __esm({
     init_host_isolation();
     init_feishu();
     init_user_auth();
+    init_pending_approval();
     init_scopes();
     init_oauth();
     init_scheduled_refresh();
@@ -24525,6 +24749,14 @@ var init_src3 = __esm({
 });
 
 // ../server/src/feishu-reauth.ts
+async function supplementSelection(store, actorId) {
+  const pending = await readFeishuPendingApproval(store, actorId);
+  if (!pending) return null;
+  const appId = await store.revealResolvedVariable("FEISHU_APP_ID", actorId).catch(() => null);
+  if (appId !== pending.appId) return null;
+  const sel = normalizeFeishuAuthSelection({ modules: pending.modules, sendAsUser: pending.sendAsUser });
+  return sel ? { sel, sendAsUser: pending.sendAsUserRequested, pending } : null;
+}
 async function reauthSelection(store, actorId) {
   const raw = await store.revealVariable(FEISHU_AUTH_SELECTION_VAR, actorId).catch(() => null);
   if (raw) {
@@ -24565,17 +24797,31 @@ function createFeishuReauth(deps) {
       };
     }
     await withConnectorCredentialLock("feishu", claims.actorId, async () => {
+      const pending2 = claims.purpose === "supplement" ? await readFeishuPendingApproval(store, claims.actorId) : null;
       await persistFeishuUserAuthorization(store, claims.actorId, data, now(), {
         openId: who.openId,
-        ...who.name ? { userName: who.name } : {}
+        ...who.name ? { userName: who.name } : {},
+        ...pending2?.applicant ? { authorizedBy: pending2.applicant } : {}
       });
+      const record10 = feishuAuthSelectionRecord(sel, sendAsUserRequested, data);
       await store.putVariable({
         key: FEISHU_AUTH_SELECTION_VAR,
-        value: JSON.stringify(feishuAuthSelectionRecord(sel, sendAsUserRequested, data)),
+        value: JSON.stringify(record10),
         ...claims.actorId ? { scope: "personal", actorId: claims.actorId } : { scope: "global" },
         connectorId: "feishu",
         encrypted: false
       });
+      if (pending2) {
+        const granted = record10.grantedScopes ? new Set(record10.grantedScopes) : null;
+        const still = granted ? pending2.pendingScopes.filter((x2) => !granted.has(x2)) : [];
+        if (still.length === 0) await clearFeishuPendingApproval(store, claims.actorId);
+        else {
+          const next = { ...pending2, pendingScopes: still };
+          delete next.approvedAt;
+          delete next.notice;
+          await writeFeishuPendingApproval(store, claims.actorId, next);
+        }
+      }
     });
     await deps.onRestored?.(claims, { openId: who.openId, ...who.name ? { userName: who.name } : {} }).catch((e) => warn(`onRestored: ${String(e)}`));
     return { state: "restored", ...who.name ? { userName: who.name } : {} };
@@ -24607,7 +24853,15 @@ function createFeishuReauth(deps) {
       if (!store) return { ok: false, status: 404, message: "\u627E\u4E0D\u5230\u8FD9\u4E2A\u94FE\u63A5\u6240\u5C5E\u7684\u7EC4\u7EC7\u3002" };
       const app = await appCredentials(store, claims.actorId);
       if (!app) return { ok: false, status: 409, message: "\u8FD9\u540D Agent \u7684\u98DE\u4E66\u5E94\u7528\u51ED\u636E\u5DF2\u4E0D\u5B58\u5728\uFF0C\u65E0\u6CD5\u91CD\u65B0\u6388\u6743\u3002\u8BF7\u5230 Oasis \u8FDE\u63A5\u5668\u9875\u91CD\u65B0\u8FDE\u63A5\u98DE\u4E66\u3002" };
-      const { sel, sendAsUser } = await reauthSelection(store, claims.actorId);
+      let picked;
+      if (claims.purpose === "supplement") {
+        const sup = await supplementSelection(store, claims.actorId);
+        if (!sup) return { ok: false, status: 410, message: "\u8FD9\u6B21\u8865\u6388\u6743\u5DF2\u7ECF\u5B8C\u6210\u6216\u5DF2\u5931\u6548\u3002\u8BF7\u5230 Oasis \u8BE5 Agent \u7684\u300C\u8FDE\u63A5\u5668\u300D\u9875\u67E5\u770B\uFF0C\u9700\u8981\u65F6\u91CD\u65B0\u8FDE\u63A5\u98DE\u4E66\u3002" };
+        picked = sup;
+      } else {
+        picked = await reauthSelection(store, claims.actorId);
+      }
+      const { sel, sendAsUser } = picked;
       const auth = await (deps.start ?? startFeishuDeviceAuthorization)({
         appId: app.appId,
         appSecret: app.appSecret,
@@ -24622,7 +24876,7 @@ function createFeishuReauth(deps) {
       const intervalSec = auth.interval ?? DEFAULT_POLL_INTERVAL_SEC;
       void watch(auth.deviceCode, entry, { store, ...app, sel, sendAsUser, intervalSec });
       const agentName = await deps.agentName?.(claims.companyId, claims.actorId).catch(() => void 0) ?? claims.actorId ?? "\u7EC4\u7EC7";
-      return { ok: true, verificationUrl: auth.verificationUrl, deviceCode: auth.deviceCode, agentName, intervalSec };
+      return { ok: true, verificationUrl: auth.verificationUrl, deviceCode: auth.deviceCode, agentName, intervalSec, purpose: claims.purpose };
     },
     /** 页面轮询结果。票与 deviceCode 必须是同一次 begin 发出来的。 */
     status(token2, deviceCode) {
@@ -24639,17 +24893,18 @@ function createFeishuReauth(deps) {
 function feishuReauthPageHtml(input) {
   const head = `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>\u91CD\u65B0\u6388\u6743\u98DE\u4E66</title>
 <style>body{font-family:system-ui,-apple-system,sans-serif;max-width:32rem;margin:3rem auto;padding:0 1.25rem;color:#1f2329;line-height:1.6}a.btn{display:inline-block;background:#1f2329;color:#fff;padding:.6rem 1.2rem;border-radius:.5rem;text-decoration:none}#s{margin-top:1.25rem}</style></head><body>`;
-  if (!input.ok) return `${head}<h2>\u65E0\u6CD5\u91CD\u65B0\u6388\u6743</h2><p>${escapeHtml(input.message)}</p></body></html>`;
-  const cfg = JSON.stringify({ t: input.token, d: input.deviceCode, i: Math.max(2, input.intervalSec) }).replace(/</g, "\\u003c");
-  return `${head}<h2>\u91CD\u65B0\u6388\u6743\u98DE\u4E66\uFF1A${escapeHtml(input.agentName)}</h2>
-<p>\u8BF7\u7528<strong>\u539F\u6388\u6743\u4EBA</strong>\u7684\u98DE\u4E66\u8D26\u53F7\u5B8C\u6210\u6388\u6743\u3002\u6362\u6210\u522B\u7684\u8D26\u53F7\u6388\u6743\u4F1A\u88AB\u62D2\u7EDD\uFF0C\u539F\u6388\u6743\u4FDD\u6301\u4E0D\u53D8\u3002</p>
+  if (!input.ok) return `${head}<h2>\u65E0\u6CD5\u5B8C\u6210\u6388\u6743</h2><p>${escapeHtml(input.message)}</p></body></html>`;
+  const supplement = input.purpose === "supplement";
+  const cfg = JSON.stringify({ t: input.token, d: input.deviceCode, i: Math.max(2, input.intervalSec), s: supplement }).replace(/</g, "\\u003c");
+  return `${head}<h2>${supplement ? "\u8865\u6388\u6743\u98DE\u4E66\uFF08\u7BA1\u7406\u5458\u5DF2\u6279\u51C6\uFF09" : "\u91CD\u65B0\u6388\u6743\u98DE\u4E66"}\uFF1A${escapeHtml(input.agentName)}</h2>
+<p>\u8BF7\u7528<strong>${supplement ? "\u7533\u8BF7\u4EBA" : "\u539F\u6388\u6743\u4EBA"}</strong>\u7684\u98DE\u4E66\u8D26\u53F7\u5B8C\u6210\u6388\u6743\u3002\u6362\u6210\u522B\u7684\u8D26\u53F7\u6388\u6743\u4F1A\u88AB\u62D2\u7EDD\uFF0C\u539F\u6388\u6743\u4FDD\u6301\u4E0D\u53D8\u3002</p>
 <p><a class="btn" href="${escapeHtml(input.verificationUrl)}" target="_blank" rel="noopener">\u53BB\u98DE\u4E66\u6388\u6743</a></p>
 <p id="s">\u7B49\u5F85\u4F60\u5728\u98DE\u4E66\u70B9\u300C\u6388\u6743\u300D\u2026</p>
 <script>(function(){var c=${cfg};var el=document.getElementById("s");
 function tick(){fetch("reauth/status",{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({t:c.t,deviceCode:c.d})})
 .then(function(r){return r.json()}).then(function(b){
 if(b.state==="pending"){setTimeout(tick,c.i*1000);return}
-if(b.state==="restored"){el.textContent="\u5DF2\u6062\u590D\uFF1A"+(b.userName?b.userName+" \u7684":"")+"\u98DE\u4E66\u7528\u6237\u6388\u6743\u91CD\u65B0\u751F\u6548\uFF0C\u53EF\u4EE5\u5173\u6389\u8FD9\u4E2A\u9875\u9762\u4E86\u3002";return}
+if(b.state==="restored"){el.textContent=(c.s?"\u5DF2\u8865\u4E0A\uFF1A":"\u5DF2\u6062\u590D\uFF1A")+(b.userName?b.userName+" \u7684":"")+(c.s?"\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5305\u542B\u7BA1\u7406\u5458\u6279\u51C6\u7684\u6743\u9650":"\u98DE\u4E66\u7528\u6237\u6388\u6743\u91CD\u65B0\u751F\u6548")+"\uFF0C\u53EF\u4EE5\u5173\u6389\u8FD9\u4E2A\u9875\u9762\u4E86\u3002";return}
 el.textContent=b.message||"\u6388\u6743\u6CA1\u6709\u5B8C\u6210\uFF0C\u53EF\u4EE5\u91CD\u65B0\u70B9\u94FE\u63A5\u518D\u8BD5\u3002"}).catch(function(){setTimeout(tick,c.i*1000)})}
 setTimeout(tick,c.i*1000)})();</script></body></html>`;
 }
@@ -212007,10 +212262,10 @@ async function feishuModuleAccess(store, actorId, fetchScopes = fetchFeishuAppSc
   const appSecret = await read3("FEISHU_APP_SECRET");
   if (!appId || !appSecret) return { configured: false };
   const rawSelection = await read3(FEISHU_AUTH_SELECTION_VAR);
-  const modules = feishuSelectedModules(rawSelection);
+  const { state: selection, modules } = feishuParseSelection(rawSelection);
   let parsed = {};
   try {
-    parsed = rawSelection ? JSON.parse(rawSelection) : {};
+    parsed = rawSelection ? JSON.parse(rawSelection) ?? {} : {};
   } catch {
     parsed = {};
   }
@@ -212028,7 +212283,7 @@ async function feishuModuleAccess(store, actorId, fetchScopes = fetchFeishuAppSc
   }
   return {
     configured: true,
-    restricted: modules.length > 0,
+    selection,
     modules: feishuModuleAccessReport({ modules, grantedScopes, hasUserAuth, userAuthInvalid, appScopes }),
     hasUserAuth,
     userAuthInvalid,
@@ -212048,6 +212303,42 @@ var init_feishu_module_access = __esm({
   }
 });
 
+// ../server/src/feishu-pending-approval.ts
+async function recordFeishuPendingApproval(input) {
+  const requested = scopesForSelection(input.selection, input.sendAsUserRequested);
+  let appScopes = null;
+  try {
+    appScopes = await (input.fetchScopes ?? fetchFeishuAppScopes)(input.appId, input.appSecret);
+  } catch (e) {
+    (input.warn ?? ((m2) => console.warn(`[feishu-oauth] ${m2}`)))(`\u5E94\u7528\u6743\u9650\u5217\u8868\u67E5\u8BE2\u5931\u8D25\uFF0C\u5F85\u5BA1\u6279\u6309\u514D\u5BA1\u96C6\u5408\u4F30\u7B97: ${String(e)}`);
+  }
+  const pendingScopes = feishuPendingApprovalScopes({ requested, granted: input.granted, appScopes });
+  if (pendingScopes.length === 0) {
+    if (input.granted) {
+      await withConnectorCredentialLock("feishu", input.actorId, () => clearFeishuPendingApproval(input.store, input.actorId));
+    }
+    return null;
+  }
+  const record10 = {
+    at: new Date(input.now).toISOString(),
+    appId: input.appId,
+    ...input.applicant ? { applicant: input.applicant } : {},
+    modules: input.selection.modules,
+    sendAsUser: input.selection.sendAsUser,
+    sendAsUserRequested: input.sendAsUserRequested,
+    pendingScopes
+  };
+  await withConnectorCredentialLock("feishu", input.actorId, () => writeFeishuPendingApproval(input.store, input.actorId, record10));
+  const modules = feishuPendingApprovalModules(record10);
+  return { modules, scopes: pendingScopes, notice: feishuPendingApprovalNotice(modules) };
+}
+var init_feishu_pending_approval = __esm({
+  "../server/src/feishu-pending-approval.ts"() {
+    "use strict";
+    init_src3();
+  }
+});
+
 // ../server/src/github-app-inventory.ts
 async function collectOasisGithubApps(svc) {
   const rows = (await svc.listVariables()).filter((r) => r.scope === "global" || r.scope === "personal");
@@ -218349,12 +218640,40 @@ ${composed}`;
               const pollSvc = await connectorActorsService();
               const appSecret = pollSvc ? await pollSvc.revealResolvedVariable("FEISHU_APP_SECRET", actorId) : null;
               if (!appSecret) throw new Error("FEISHU_APP_SECRET not found \u2014 please complete app setup first");
-              const polled = await pollFeishuDeviceToken({ appId, appSecret, deviceCode });
+              let polled;
+              try {
+                polled = await pollFeishuDeviceToken({ appId, appSecret, deviceCode });
+              } catch (e) {
+                if (!(e instanceof FeishuDeviceFlowError) || !pollSvc) throw e;
+                const pendingApproval2 = await recordFeishuPendingApproval({
+                  store: pollSvc,
+                  actorId,
+                  appId,
+                  appSecret,
+                  selection: startedSelection.selection,
+                  sendAsUserRequested: startedSelection.sendAsUserRequested,
+                  ...isHumanActorId(actor) ? { applicant: actor } : {},
+                  now: Date.now()
+                });
+                const expired = e.code === "expired_token" || e.code === "invalid_grant";
+                res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify(pendingApproval2 ? {
+                  ok: false,
+                  final: true,
+                  pendingApproval: { modules: pendingApproval2.modules, scopes: pendingApproval2.scopes },
+                  notice: expired ? `\u6388\u6743\u9875\u5DF2\u8D85\u65F6\u3002\u5982\u679C\u4F60\u5728\u6388\u6743\u9875\u70B9\u4E86\u300C\u7533\u8BF7\u300D\uFF1A${pendingApproval2.notice}\u6CA1\u70B9\u7684\u8BDD\u91CD\u65B0\u53D1\u8D77\u6388\u6743\u5373\u53EF\u3002` : pendingApproval2.notice
+                } : {
+                  ok: false,
+                  final: true,
+                  error: expired ? "\u6388\u6743\u8D85\u65F6\uFF08\u8BBE\u5907\u7801\u5DF2\u8FC7\u671F\uFF09\uFF0C\u8BF7\u91CD\u65B0\u53D1\u8D77\u6388\u6743" : `\u98DE\u4E66\u6CA1\u6709\u5B8C\u6210\u6388\u6743\uFF08${e.message.slice(0, 200)}\uFF09\uFF0C\u53EF\u4EE5\u91CD\u65B0\u53D1\u8D77\u6388\u6743`
+                }));
+                return;
+              }
               if (polled.status === "pending") {
                 res.writeHead(200).end(JSON.stringify({ ok: false, error: "authorization_pending" }));
                 return;
               }
               const data = polled.data;
+              let pendingApproval = null;
               const svc = await connectorActorsService();
               if (svc) {
                 if (actorId) {
@@ -218379,6 +218698,23 @@ ${composed}`;
                   connectorId: "feishu",
                   encrypted: false
                 });
+                if (record10.grantedScopes) {
+                  try {
+                    pendingApproval = await recordFeishuPendingApproval({
+                      store: svc,
+                      actorId,
+                      appId,
+                      appSecret,
+                      selection: startedSelection.selection,
+                      sendAsUserRequested: startedSelection.sendAsUserRequested,
+                      ...isHumanActorId(actor) ? { applicant: actor } : {},
+                      granted: record10.grantedScopes,
+                      now: Date.now()
+                    });
+                  } catch (e) {
+                    console.error(`[feishu-oauth] \u5F85\u5BA1\u6279\u8BB0\u5F55\u5199\u5165\u5931\u8D25: ${String(e)}`);
+                  }
+                }
                 if (!who.openId) console.error("[feishu-oauth] user_info \u672A\u53D6\u5230\u6388\u6743\u4EBA open_id\uFF1A\u6388\u6743\u5931\u6548\u65F6\u65E0\u6CD5\u79C1\u4FE1\u672C\u4EBA\u3001\u4E5F\u7B7E\u4E0D\u51FA\u4E00\u952E\u91CD\u65B0\u6388\u6743\u94FE\u63A5");
                 try {
                   const secret = await svc.revealResolvedVariable("FEISHU_APP_SECRET", actorId);
@@ -218403,7 +218739,12 @@ ${composed}`;
                   }
                 }
               }
-              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({ ok: true, appId, stored: true }));
+              res.writeHead(200, { "content-type": "application/json" }).end(JSON.stringify({
+                ok: true,
+                appId,
+                stored: true,
+                ...pendingApproval ? { pendingApproval: { modules: pendingApproval.modules, scopes: pendingApproval.scopes }, notice: pendingApproval.notice } : {}
+              }));
             } catch (e) {
               res.writeHead(500).end(JSON.stringify({ error: String(e) }));
             }
@@ -218746,6 +219087,7 @@ var init_server3 = __esm({
     init_child_live_turn();
     init_registry_audit_sink();
     init_feishu_module_access();
+    init_feishu_pending_approval();
     init_src3();
     init_github_app_inventory();
     init_github_app_timing();
@@ -286888,53 +287230,43 @@ function createConnectorRenewalRuntime(options) {
     return "sent";
   };
   const recipientsFor = async (companyId, store, actorId) => {
-    const out = /* @__PURE__ */ new Set();
     const by = await store.revealVariable(FEISHU_AUTHORIZED_BY_VAR, actorId).catch(() => null);
-    if (by && isHumanActorId(by)) out.add(by);
-    if (out.size === 0 && actorId) {
-      if (isHumanActorId(actorId)) out.add(actorId);
-      else {
-        const human = await options.boundHuman(actorId, companyId).catch(() => null);
-        if (human) out.add(human);
-      }
-    }
-    return [...out];
+    if (by && isHumanActorId(by)) return { recipients: [by], authorizer: by };
+    if (!actorId) return { recipients: [], authorizer: null };
+    if (isHumanActorId(actorId)) return { recipients: [actorId], authorizer: null };
+    const human = await options.boundHuman(actorId, companyId).catch(() => null);
+    return { recipients: human ? [human] : [], authorizer: null };
   };
-  const recoverOpenId = async (companyId, app, recipients) => {
-    for (const human of recipients) {
-      const email2 = await options.memberEmail?.(human, companyId).catch(() => null);
-      if (!email2) continue;
-      const openId = await lookupFeishuOpenIdByEmail({ ...app, email: email2 });
-      if (openId) return openId;
-    }
-    return null;
+  const recoverOpenId = async (companyId, app, authorizer) => {
+    const email2 = await options.memberEmail?.(authorizer, companyId).catch(() => null);
+    return email2 ? lookupFeishuOpenIdByEmail({ ...app, email: email2 }) : null;
   };
   const deliverInvalidNotice = async (companyId, store, actorId, marker) => {
     const prev = marker.notice ?? { inApp: false, dm: "pending", attempts: 0 };
     const state = { ...prev, attempts: prev.attempts + 1 };
     const who = `actor=${actorId ?? "-"} \u7B2C ${state.attempts}/${MAX_NOTICE_ATTEMPTS} \u6B21`;
     const name = await agentName(companyId, actorId);
-    const recipients = await recipientsFor(companyId, store, actorId);
+    const { recipients, authorizer } = await recipientsFor(companyId, store, actorId);
+    const unverified = !authorizer && !await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId).catch(() => "?");
     if (!state.inApp) {
       try {
         const ledger = await options.notifications(companyId);
-        if (ledger) {
-          const rows = [];
-          for (const recipient of recipients) {
-            rows.push(await ledger.insert({
-              recipient,
-              category: "connector",
-              kind: "feishu-auth-invalid",
-              // 每次失效一条：键里带失效时刻，重新授权后再失效还会再提醒；同一次失效补发 / 重复扫描不重发（唯一约束）。
-              sourceKey: `connector:feishu:${actorId ?? "org"}@invalid:${marker.at}`,
-              title: `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF0C\u9700\u8981\u91CD\u65B0\u6388\u6743`,
-              ...actorId ? { actorId } : {},
-              enteredAt: marker.at
-            }));
-          }
-          if (rows.length > 0) options.onNotifications?.(companyId, rows);
+        if (!ledger) throw new Error("\u8BE5\u516C\u53F8\u7684\u901A\u77E5\u53F0\u8D26\u4E0D\u53EF\u7528");
+        if (recipients.length === 0) throw new Error("\u6CA1\u6709\u6536\u4EF6\u4EBA\uFF08\u6CA1\u8BB0\u6388\u6743\u4EBA\u3001\u5458\u5DE5\u4E5F\u6CA1\u6709\u7ED1\u5B9A\u771F\u4EBA\uFF09");
+        const rows = [];
+        for (const recipient of recipients) {
+          rows.push(await ledger.insert({
+            recipient,
+            category: "connector",
+            kind: "feishu-auth-invalid",
+            // 每次失效一条：键里带失效时刻，重新授权后再失效还会再提醒；同一次失效补发 / 重复扫描不重发（唯一约束）。
+            sourceKey: `connector:feishu:${actorId ?? "org"}@invalid:${marker.at}`,
+            title: unverified ? `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF0C\u8BF7\u5230\u8FDE\u63A5\u5668\u9875\u91CD\u65B0\u8FDE\u63A5` : `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u5931\u6548\uFF0C\u9700\u8981\u91CD\u65B0\u6388\u6743`,
+            ...actorId ? { actorId } : {},
+            enteredAt: marker.at
+          }));
         }
-        if (recipients.length === 0) console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u7AD9\u5185\u901A\u77E5\u6CA1\u6709\u6536\u4EF6\u4EBA actor=${actorId ?? "-"}`);
+        options.onNotifications?.(companyId, rows);
         state.inApp = true;
       } catch (err) {
         options.warn(new Error(`\u98DE\u4E66\u6388\u6743\u5931\u6548\u7AD9\u5185\u901A\u77E5\u672A\u5199\u5165\uFF08${who}\uFF0C\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09: ${String(err)}`));
@@ -286943,12 +287275,13 @@ function createConnectorRenewalRuntime(options) {
     if (state.dm === "pending") {
       try {
         const app = await appCredentials(store, actorId);
-        const stored = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId);
-        const recovered = !stored && app ? await recoverOpenId(companyId, app, recipients) : null;
-        const openId = stored || recovered;
+        const storedOpenId = await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId);
+        const recovered = !storedOpenId && app && authorizer ? await recoverOpenId(companyId, app, authorizer) : null;
+        const openId = storedOpenId || recovered;
         if (!app || !openId) {
           state.dm = "unavailable";
-          console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u65E0\u4ECE\u53D1\u51FA\uFF08${app ? "\u6CA1\u8BB0\u6388\u6743\u4EBA\u3001\u901A\u8BAF\u5F55\u4E5F\u6CA1\u6309\u6210\u5458\u90AE\u7BB1\u627E\u5230\u672C\u4EBA" : "\u6CA1\u6709\u5E94\u7528\u51ED\u636E"}\uFF09actor=${actorId ?? "-"}\uFF1B\u53EA\u6709\u7AD9\u5185\u901A\u77E5`);
+          const why = !app ? "\u6CA1\u6709\u5E94\u7528\u51ED\u636E" : unverified ? "\u6CA1\u8BB0\u539F\u6388\u6743\u4EBA\uFF0C\u6838\u5B9E\u4E0D\u4E86\u672C\u4EBA\uFF0C\u4E0D\u7B7E\u94FE\u63A5\uFF1B\u9700\u5230\u8FDE\u63A5\u5668\u9875\u91CD\u65B0\u8FDE\u63A5" : "\u901A\u8BAF\u5F55\u6CA1\u6309\u539F\u6388\u6743\u4EBA\u7684\u8D26\u53F7\u90AE\u7BB1\u627E\u5230\u4ED6";
+          console.warn(`[credential-refresh] \u98DE\u4E66\u6388\u6743\u5931\u6548\u79C1\u4FE1\u65E0\u4ECE\u53D1\u51FA\uFF08${why}\uFF09actor=${actorId ?? "-"}\uFF1B\u53EA\u6709\u7AD9\u5185\u901A\u77E5`);
         } else {
           const token2 = await issueFeishuReauthToken(options.links, store, {
             companyId,
@@ -287005,6 +287338,122 @@ function createConnectorRenewalRuntime(options) {
     }
     for (const k2 of handledThisSweep) if (JSON.parse(k2)[0] === companyId) handledThisSweep.delete(k2);
   };
+  const applicantOpenId = async (companyId, store, actorId, app, applicant) => {
+    if (!applicant || !isHumanActorId(applicant)) return null;
+    const by = await store.revealVariable(FEISHU_AUTHORIZED_BY_VAR, actorId).catch(() => null);
+    const stored = by === applicant ? await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, actorId).catch(() => null) : null;
+    return stored || recoverOpenId(companyId, app, applicant);
+  };
+  const deliverApprovalNotice = async (companyId, store, actorId, pending, app) => {
+    const prev = pending.notice ?? { inApp: false, dm: "pending", attempts: 0 };
+    const state = { ...prev, attempts: prev.attempts + 1 };
+    const who = `actor=${actorId ?? "-"} \u7B2C ${state.attempts}/${MAX_NOTICE_ATTEMPTS} \u6B21`;
+    const name = await agentName(companyId, actorId);
+    const modules = feishuPendingApprovalModules(pending);
+    if (!state.inApp) {
+      try {
+        const ledger = await options.notifications(companyId);
+        if (!ledger) throw new Error("\u8BE5\u516C\u53F8\u7684\u901A\u77E5\u53F0\u8D26\u4E0D\u53EF\u7528");
+        const recipients = pending.applicant && isHumanActorId(pending.applicant) ? [pending.applicant] : (await recipientsFor(companyId, store, actorId)).recipients;
+        if (recipients.length === 0) throw new Error("\u6CA1\u6709\u6536\u4EF6\u4EBA\uFF08\u6CA1\u8BB0\u7533\u8BF7\u4EBA\u3001\u5458\u5DE5\u4E5F\u6CA1\u6709\u7ED1\u5B9A\u771F\u4EBA\uFF09");
+        const rows = [];
+        for (const recipient of recipients) {
+          rows.push(await ledger.insert({
+            recipient,
+            category: "connector",
+            kind: "feishu-approval-granted",
+            // 每次申请一条（键里带提交时刻）；同一次批准补发 / 重复扫描不重发（唯一约束）。
+            sourceKey: `connector:feishu:${actorId ?? "org"}@approved:${pending.at}`,
+            title: `\u7BA1\u7406\u5458\u5DF2\u6279\u51C6\u300C${name}\u300D\u7533\u8BF7\u7684\u98DE\u4E66\u6743\u9650\uFF0C\u8865\u6388\u6743\u540E\u5373\u53EF\u4F7F\u7528`,
+            ...actorId ? { actorId } : {},
+            enteredAt: pending.approvedAt ?? new Date(now()).toISOString()
+          }));
+        }
+        options.onNotifications?.(companyId, rows);
+        state.inApp = true;
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u6743\u9650\u6279\u51C6\u7AD9\u5185\u901A\u77E5\u672A\u5199\u5165\uFF08${who}\uFF0C\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09: ${String(err)}`));
+      }
+    }
+    if (state.dm === "pending") {
+      try {
+        const openId = await applicantOpenId(companyId, store, actorId, app, pending.applicant);
+        if (!openId) {
+          state.dm = "unavailable";
+          console.warn(`[credential-refresh] \u98DE\u4E66\u6743\u9650\u6279\u51C6\u79C1\u4FE1\u65E0\u4ECE\u53D1\u51FA\uFF08${pending.applicant ? "\u901A\u8BAF\u5F55\u6CA1\u6309\u7533\u8BF7\u4EBA\u7684\u8D26\u53F7\u90AE\u7BB1\u627E\u5230\u4ED6" : "\u6CA1\u8BB0\u7533\u8BF7\u4EBA"}\uFF09actor=${actorId ?? "-"}\uFF1B\u53EA\u6709\u7AD9\u5185\u901A\u77E5\uFF0C\u9700\u5230\u8FDE\u63A5\u5668\u9875\u91CD\u65B0\u8FDE\u63A5`);
+        } else {
+          const token2 = options.links.issue({
+            companyId,
+            ...actorId ? { actorId } : {},
+            connectorId: "feishu",
+            purpose: "supplement",
+            subject: openId
+          });
+          const link = options.apiBase ? feishuReauthUrl(options.apiBase, token2) : void 0;
+          await notifyFeishuUser(store, actorId, feishuApprovalGrantedText({ agentName: name, modules, ...link ? { link } : {} }), openId);
+          state.dm = "sent";
+        }
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u6743\u9650\u6279\u51C6\u79C1\u4FE1\u53D1\u9001\u5931\u8D25\uFF08${who}\uFF0C\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09: ${String(err)}`));
+      }
+    }
+    if ((!state.inApp || state.dm === "pending") && state.attempts >= MAX_NOTICE_ATTEMPTS) {
+      options.warn(new Error(`\u98DE\u4E66\u6743\u9650\u6279\u51C6\u901A\u77E5\u8865\u53D1 ${state.attempts} \u6B21\u4ECD\u672A\u9001\u5230\uFF0C\u653E\u5F03 actor=${actorId ?? "-"} \u7AD9\u5185=${String(state.inApp)} \u79C1\u4FE1=${state.dm}`));
+    }
+    return state;
+  };
+  const savePendingApproval = async (store, actorId, at2, next) => {
+    await withConnectorCredentialLock("feishu", actorId, async () => {
+      const current = await readFeishuPendingApproval(store, actorId);
+      if (current?.at !== at2) return;
+      if (next) await writeFeishuPendingApproval(store, actorId, next);
+      else await clearFeishuPendingApproval(store, actorId);
+    });
+  };
+  const checkPendingApproval = async (companyId, store, actorId) => {
+    const pending = await readFeishuPendingApproval(store, actorId);
+    if (!pending) return;
+    const t = now();
+    const app = await appCredentials(store, actorId);
+    if (!app || app.appId !== pending.appId) {
+      console.warn(`[credential-refresh] \u98DE\u4E66\u5F85\u5BA1\u6279\u8BB0\u5F55\u4F5C\u5E9F\uFF08\u5E94\u7528\u51ED\u636E${app ? "\u5DF2\u6362\u6210\u522B\u7684\u5E94\u7528" : "\u4E0D\u5B58\u5728"}\uFF09actor=${actorId ?? "-"}`);
+      await savePendingApproval(store, actorId, pending.at, null);
+      return;
+    }
+    let next;
+    if (!pending.approvedAt) {
+      if (t - Date.parse(pending.at) > FEISHU_PENDING_APPROVAL_WATCH_MS) {
+        options.warn(new Error(`\u98DE\u4E66\u5F85\u5BA1\u6279 ${pending.at} \u8D77 30 \u5929\u672A\u68C0\u6D4B\u5230\u6279\u51C6\uFF0C\u4E0D\u518D\u68C0\u6D4B actor=${actorId ?? "-"} \u6743\u9650=${pending.pendingScopes.join(",")}`));
+        await savePendingApproval(store, actorId, pending.at, null);
+        return;
+      }
+      const scopes = await (options.fetchAppScopes ?? fetchFeishuAppScopes)(app.appId, app.appSecret);
+      if (!feishuPendingApprovalSettled(pending, scopes)) return;
+      next = { ...pending, approvedAt: new Date(t).toISOString(), notice: { inApp: false, dm: "pending", attempts: 0 } };
+      console.warn(`[credential-refresh] \u98DE\u4E66\u5F85\u5BA1\u6279\u5DF2\u6279\u51C6 actor=${actorId ?? "-"} \u6743\u9650=${pending.pendingScopes.join(",")}`);
+    } else {
+      if (t - Date.parse(pending.approvedAt) > FEISHU_APPROVED_SUPPLEMENT_KEEP_MS) {
+        await savePendingApproval(store, actorId, pending.at, null);
+        return;
+      }
+      const n = pending.notice;
+      if (!n || n.inApp && n.dm !== "pending" || n.attempts >= MAX_NOTICE_ATTEMPTS) return;
+      next = pending;
+    }
+    await savePendingApproval(store, actorId, pending.at, { ...next, notice: await deliverApprovalNotice(companyId, store, actorId, next, app) });
+  };
+  const checkPendingApprovals = async (companyId, store) => {
+    const svc = await options.actors(companyId);
+    if (!svc) return;
+    const ids2 = [void 0, ...(await svc.listActors({ status: "active" })).map((a) => a.id)];
+    for (const actorId of ids2) {
+      try {
+        await checkPendingApproval(companyId, store, actorId);
+      } catch (err) {
+        options.warn(new Error(`\u98DE\u4E66\u5F85\u5BA1\u6279\u68C0\u6D4B\u5931\u8D25\uFF08\u4E0B\u4E00\u62CD\u91CD\u8BD5\uFF09actor=${actorId ?? "-"}: ${String(err)}`));
+      }
+    }
+  };
   const onFeishuRenewed = async (e, store) => {
     if (await store.revealVariable(FEISHU_USER_OPEN_ID_VAR, e.actorId)) return;
     const accessToken = e.outcome.credentials?.["user_access_token"];
@@ -287043,7 +287492,13 @@ function createConnectorRenewalRuntime(options) {
     onRenewed: async (e, store) => {
       if (e.connector.config.slug === "feishu") await onFeishuRenewed(e, store);
     },
-    afterCompany: retryPendingNotices,
+    afterCompany: async (companyId, store) => {
+      try {
+        await retryPendingNotices(companyId, store);
+      } finally {
+        await checkPendingApprovals(companyId, store);
+      }
+    },
     warn: options.warn,
     ...options.now ? { now: options.now } : {}
   });
@@ -287055,7 +287510,7 @@ function createConnectorRenewalRuntime(options) {
       const store = await options.actors(claims.companyId);
       if (!store) return;
       const name = await agentName(claims.companyId, claims.actorId);
-      await notifyFeishuUser(store, claims.actorId, `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u6062\u590D\u3002`).catch(() => void 0);
+      await notifyFeishuUser(store, claims.actorId, claims.purpose === "supplement" ? `\u300C${name}\u300D\u7684\u98DE\u4E66\u6743\u9650\u5DF2\u8865\u4E0A\uFF0C\u7BA1\u7406\u5458\u6279\u51C6\u7684\u529F\u80FD\u73B0\u5728\u53EF\u4EE5\u4F7F\u7528\u4E86\u3002` : `\u300C${name}\u300D\u7684\u98DE\u4E66\u7528\u6237\u6388\u6743\u5DF2\u6062\u590D\u3002`).catch(() => void 0);
     },
     onRejected: async (claims, who) => {
       const store = await options.actors(claims.companyId);
@@ -300944,7 +301399,7 @@ async function waitForCommandAuthorization(base, headers, draftId, fallback) {
     }
   }
 }
-var CLI_VERSION = "2.2.112" ? "2.2.112" : "dev";
+var CLI_VERSION = "2.2.114" ? "2.2.114" : "dev";
 function apiHeaders(token2, company) {
   const headers = {
     authorization: `Bearer ${token2}`,
@@ -305115,7 +305570,7 @@ function shimScript() {
 }
 
 // src/index.ts
-var PKG_VERSION = true ? "2.2.112" : "dev";
+var PKG_VERSION = true ? "2.2.114" : "dev";
 var LOCAL_BIN = localBin();
 var NPM_PREFIX = npmPrefix();
 var INSTANCE = DEFAULT_INSTANCE;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oasis_test_v2",
-  "version": "2.2.112",
+  "version": "2.2.114",
   "description": "Oasis node daemon + CLI — background daemon, auto-start, full server CLI",
   "bin": {
     "oasis": "./dist/index.js"
@@ -26,6 +26,6 @@
     "node": ">=20"
   },
   "oasisRelease": {
-    "sourceHead": "278bdc2558b23bd381c4c3007a8d40330244edc1"
+    "sourceHead": "46e4f9275679ea8eec37f0f1e30b45cc48e3e70c"
   }
 }