opclawtm 1.4.0

package/dist/cli/tui/menus/feishu.menu.js

@@ -0,0 +1,1727 @@
+"use strict";
+/**
+ * Feishu Configuration Menu
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.showFeishuConfigMenu = showFeishuConfigMenu;
+const inquirer_1 = __importDefault(require("inquirer"));
+const chalk_1 = __importDefault(require("chalk"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const index_1 = require("../index");
+const services_1 = require("../../../core/services");
+const utils_1 = require("../../../core/utils");
+const configTracker = __importStar(require("../../../core/services/config-tracker.service"));
+const dept_repo_1 = require("../../../db/repositories/dept.repo");
+const job_repo_1 = require("../../../db/repositories/job.repo");
+/**
+ * 显示飞书配置菜单
+ */
+async function showFeishuConfigMenu() {
+    while (true) {
+        const configuredAgents = getConfiguredAgents();
+        const agentCount = Object.keys(configuredAgents).length;
+        const choices = [
+            new inquirer_1.default.Separator(chalk_1.default.cyan.bold('📱 飞书 Bot 配置')),
+            new inquirer_1.default.Separator(),
+            { name: `📋 查看已配置的 Agent Bot 列表 (${agentCount} 个)`, value: 'list' },
+            { name: '➕ 为 Agent 添加飞书 Bot', value: 'add' },
+            { name: '✏️  修改 Agent 的飞书配置', value: 'edit' },
+            { name: '🗑️ 删除 Agent 的飞书配置', value: 'delete' },
+            new inquirer_1.default.Separator(),
+            new inquirer_1.default.Separator(chalk_1.default.cyan.bold('🏢 飞书群绑定')),
+            new inquirer_1.default.Separator(),
+            { name: '📋 查看飞书群绑定列表', value: 'listGroups' },
+            { name: '🔗 绑定飞书群到事业部', value: 'bindGroup' },
+            new inquirer_1.default.Separator(),
+            new inquirer_1.default.Separator(chalk_1.default.cyan.bold('👤 用户飞书绑定')),
+            new inquirer_1.default.Separator(),
+            { name: '📋 查看用户飞书绑定状态', value: 'showUserBinding' },
+            { name: '🔗 绑定用户飞书 Open ID', value: 'bindUser' },
+            { name: '🔓 解绑用户飞书', value: 'unbindUser' },
+            new inquirer_1.default.Separator(),
+            new inquirer_1.default.Separator(chalk_1.default.cyan.bold('🔐 配对管理')),
+            new inquirer_1.default.Separator(),
+            { name: '🔐 配对管理（批准用户对话权限）', value: 'pairing' },
+            new inquirer_1.default.Separator(),
+            { name: '🔙 返回主菜单', value: 'back' }
+        ];
+        const { action } = await inquirer_1.default.prompt([
+            {
+                type: 'list',
+                name: 'action',
+                message: '请选择操作：',
+                choices,
+                loop: true,
+                pageSize: 20
+            }
+        ]);
+        switch (action) {
+            case 'list':
+                await listConfiguredAgents();
+                break;
+            case 'add':
+                await addFeishuBot();
+                break;
+            case 'edit':
+                await editFeishuBot();
+                break;
+            case 'delete':
+                await deleteFeishuBot();
+                break;
+            case 'listGroups':
+                await listFeishuGroups();
+                break;
+            case 'bindGroup':
+                await bindFeishuGroup();
+                break;
+            case 'showUserBinding':
+                await showUserFeishuBinding();
+                break;
+            case 'bindUser':
+                await bindUserFeishuId();
+                break;
+            case 'unbindUser':
+                await unbindUserFeishu();
+                break;
+            case 'pairing':
+                await showPairingMenu();
+                break;
+            case 'back':
+                return;
+        }
+    }
+}
+/**
+ * 安全读取 JSON 配置文件
+ */
+function safeReadJsonConfig(configPath) {
+    if (!fs.existsSync(configPath)) {
+        return null;
+    }
+    try {
+        let content = fs.readFileSync(configPath, 'utf-8');
+        // 移除 BOM
+        if (content.charCodeAt(0) === 0xFEFF) {
+            content = content.slice(1);
+        }
+        // 移除控制字符
+        content = content.replace(/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g, '');
+        return JSON.parse(content);
+    }
+    catch (error) {
+        console.error('JSON 解析错误:', error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+/**
+ * 获取已配置飞书 Bot 的 Agent 列表
+ * 排除 'default' 键（它是别名，不是真正的 Agent）
+ */
+function getConfiguredAgents() {
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath);
+    if (!config)
+        return {};
+    const channels = config.channels;
+    const feishuConfig = channels?.feishu;
+    const accounts = feishuConfig?.accounts;
+    if (!accounts)
+        return {};
+    const result = {};
+    for (const [agentId, account] of Object.entries(accounts)) {
+        // 跳过 'default' 键（它是别名）
+        if (agentId === 'default')
+            continue;
+        const acc = account;
+        if (acc?.appId) {
+            result[agentId] = {
+                appId: acc.appId,
+                name: acc.name || acc.botName // 兼容旧字段名
+            };
+        }
+    }
+    return result;
+}
+/**
+ * 查看已配置的 Agent Bot 列表
+ */
+async function listConfiguredAgents() {
+    const configuredAgents = getConfiguredAgents();
+    const agentIds = Object.keys(configuredAgents);
+    if (agentIds.length === 0) {
+        console.log(chalk_1.default.yellow('\n暂无已配置的飞书 Bot\n'));
+        console.log(chalk_1.default.dim('使用"为 Agent 添加飞书 Bot"进行配置\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    console.log(chalk_1.default.bold('\n📋 已配置飞书 Bot 的 Agent 列表\n'));
+    console.log(chalk_1.default.dim('Agent ID'.padEnd(30)) + chalk_1.default.dim('Bot 名称'.padEnd(20)) + chalk_1.default.dim('App ID'));
+    index_1.tuiUtils.printDivider();
+    for (const agentId of agentIds) {
+        const info = configuredAgents[agentId];
+        const agent = services_1.agentService.getById(agentId);
+        const agentName = agent?.name || agentId;
+        const botName = info.name || '-';
+        console.log(`${agentId.padEnd(30)}${botName.padEnd(20)}${info.appId}`);
+    }
+    console.log('');
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 为 Agent 添加飞书 Bot
+ */
+async function addFeishuBot() {
+    const agents = services_1.agentService.listAll();
+    if (agents.length === 0) {
+        index_1.tuiUtils.printWarning('暂无 Agent，请先创建 Agent');
+        return;
+    }
+    const configuredAgents = getConfiguredAgents();
+    // 过滤出未配置的 Agent
+    const unconfiguredAgents = agents.filter(a => !configuredAgents[a.id]);
+    if (unconfiguredAgents.length === 0) {
+        console.log(chalk_1.default.yellow('\n所有 Agent 都已配置飞书 Bot\n'));
+        console.log(chalk_1.default.dim('如需修改，请使用"修改 Agent 的飞书配置"\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    // Enrich agent info with department and job names
+    const agentsWithDetails = unconfiguredAgents.map(a => {
+        const dept = a.department_id ? dept_repo_1.departmentRepository.findById(a.department_id) : null;
+        const job = a.job_id ? job_repo_1.jobRepository.findById(a.job_id) : null;
+        const roleMap = {
+            manager: '管理者',
+            executor: '执行者',
+            reviewer: '审核者',
+            assistant: '总助理',
+            watchdog: '监控者'
+        };
+        return {
+            ...a,
+            deptName: dept?.name || '未分配',
+            jobName: job?.name || '未指定',
+            roleDisplay: roleMap[a.role] || a.role
+        };
+    });
+    console.log(chalk_1.default.bold.cyan('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk_1.default.bold('➕ 为 Agent 添加飞书 Bot'));
+    console.log(chalk_1.default.bold.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n'));
+    console.log(chalk_1.default.bold.yellow('📖 详细教程：'));
+    console.log(chalk_1.default.cyan('  https://www.feishu.cn/content/article/7602519239445974205\n'));
+    console.log(chalk_1.default.bold.yellow('📋 前置准备（在飞书开放平台完成）：\n'));
+    console.log(chalk_1.default.bold('步骤 1：创建企业自建应用'));
+    console.log(chalk_1.default.dim('  • 进入飞书开放平台：https://open.feishu.cn/app'));
+    console.log(chalk_1.default.dim('  • 点击「创建企业自建应用」，填写应用信息\n'));
+    console.log(chalk_1.default.bold('步骤 2：启用机器人能力'));
+    console.log(chalk_1.default.dim('  • 进入「应用能力」→「机器人」'));
+    console.log(chalk_1.default.dim('  • 开启机器人能力，设置机器人名称\n'));
+    console.log(chalk_1.default.bold('步骤 3：配置应用权限'));
+    console.log(chalk_1.default.dim('  • 进入「权限管理」→ 点击「批量导入」'));
+    console.log(chalk_1.default.dim('  • 复制以下 JSON 内容直接导入：\n'));
+    console.log(chalk_1.default.cyan('  {'));
+    console.log(chalk_1.default.cyan('    "scopes": {'));
+    console.log(chalk_1.default.cyan('      "tenant": ['));
+    console.log(chalk_1.default.cyan('        "contact:user.base:readonly",'));
+    console.log(chalk_1.default.cyan('        "im:message",'));
+    console.log(chalk_1.default.cyan('        "im:message.p2p_msg:readonly",'));
+    console.log(chalk_1.default.cyan('        "im:message.group_at_msg:readonly",'));
+    console.log(chalk_1.default.cyan('        "im:message:send_as_bot",'));
+    console.log(chalk_1.default.cyan('        "im:resource"'));
+    console.log(chalk_1.default.cyan('      ]'));
+    console.log(chalk_1.default.cyan('    }'));
+    console.log(chalk_1.default.cyan('  }\n'));
+    console.log(chalk_1.default.dim('  提示：可根据实际需求添加更多权限\n'));
+    console.log(chalk_1.default.bold('步骤 4：获取凭证'));
+    console.log(chalk_1.default.dim('  • 进入「凭证与基础信息」页面'));
+    console.log(chalk_1.default.dim('  • 复制 App ID 和 App Secret\n'));
+    console.log(chalk_1.default.bold.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n'));
+    // 选择 Agent
+    const { agentId } = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'agentId',
+            message: '选择要配置飞书 Bot 的 Agent：',
+            choices: [
+                ...agentsWithDetails.map(a => ({
+                    name: `${a.name} | ${a.deptName} | ${a.roleDisplay} | ${a.jobName}`,
+                    value: a.id
+                })),
+                new inquirer_1.default.Separator(),
+                { name: '🔙 取消', value: 'cancel' }
+            ],
+            loop: true
+        }
+    ]);
+    if (agentId === 'cancel') {
+        return;
+    }
+    const agent = services_1.agentService.getById(agentId);
+    console.log(chalk_1.default.dim('\n请输入飞书开放平台的应用凭证：'));
+    console.log(chalk_1.default.dim('  飞书开放平台：https://open.feishu.cn/app\n'));
+    // 输入凭证
+    const { appId, appSecret, dmPolicy } = await inquirer_1.default.prompt([
+        {
+            type: 'input',
+            name: 'appId',
+            message: 'App ID (cli_xxx 格式)：'
+        },
+        {
+            type: 'password',
+            name: 'appSecret',
+            message: 'App Secret：'
+        },
+        {
+            type: 'list',
+            name: 'dmPolicy',
+            message: '私聊策略：',
+            choices: [
+                { name: 'pairing - 需配对批准（推荐，最安全）', value: 'pairing' },
+                { name: 'open - 允许所有用户私聊', value: 'open' },
+                { name: 'disabled - 禁用私聊', value: 'disabled' }
+            ],
+            default: 'pairing',
+            loop: true
+        }
+    ]);
+    if (!appId?.trim() || !appId.startsWith('cli_')) {
+        index_1.tuiUtils.printError('App ID 格式错误，应以 cli_ 开头');
+        return;
+    }
+    if (!appSecret?.trim()) {
+        index_1.tuiUtils.printError('App Secret 不能为空');
+        return;
+    }
+    // 更新配置
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath) || {
+        gateway: { port: 28789, mode: 'local', bind: 'loopback', auth: { mode: 'token', token: 'default-token' } },
+        agents: { defaults: {}, list: [] },
+        bindings: [],
+        models: { providers: {} },
+        channels: {}
+    };
+    // 确保 channels.feishu 结构存在
+    if (!config.channels)
+        config.channels = {};
+    const channels = config.channels;
+    // 记录是否是新创建的飞书配置（用于重置时记录变更）
+    const isNewFeishuConfig = !channels.feishu;
+    // 重要：不能覆盖现有的 feishu 配置，只更新需要的字段
+    if (!channels.feishu) {
+        channels.feishu = {
+            enabled: true,
+            dmPolicy: 'pairing',
+            connectionMode: 'websocket',
+            accounts: {}
+        };
+    }
+    const feishuConfig = channels.feishu;
+    // 重要：确保 accounts 不被覆盖
+    if (!feishuConfig.accounts) {
+        feishuConfig.accounts = {};
+    }
+    const accounts = feishuConfig.accounts;
+    // 调试：显示当前 accounts
+    console.log(chalk_1.default.dim(`[调试] 保存前 accounts 中的账号: ${Object.keys(accounts).join(', ') || '无'}`));
+    // 记录旧配置（用于重置时撤销）
+    const oldAccountConfig = accounts[agentId] ? { [agentId]: accounts[agentId] } : undefined;
+    // 添加账号配置（OpenClaw 官方 schema）
+    // accounts.<account_id> 只允许 appId 和 appSecret
+    // dmPolicy 等字段必须在顶层 channels.feishu 下
+    accounts[agentId] = {
+        appId: appId.trim(),
+        appSecret: appSecret.trim()
+    };
+    // 顶层设置（这些字段在 channels.feishu 层级）
+    if (!feishuConfig.enabled) {
+        feishuConfig.enabled = true;
+    }
+    if (!feishuConfig.dmPolicy) {
+        feishuConfig.dmPolicy = dmPolicy;
+    }
+    if (!feishuConfig.connectionMode) {
+        feishuConfig.connectionMode = 'websocket';
+    }
+    // 调试：显示保存后的 accounts
+    console.log(chalk_1.default.dim(`[调试] 保存后 accounts 中的账号: ${Object.keys(accounts).join(', ')}`));
+    // 确保 bindings 存在
+    if (!config.bindings)
+        config.bindings = [];
+    const bindings = config.bindings;
+    // 检查是否已有该 Agent 的绑定
+    const existingBindingIndex = bindings.findIndex((b) => b.agentId === agentId && b.match?.channel === 'feishu');
+    // 创建默认绑定（该 Bot 的所有消息路由到此 Agent）
+    const binding = {
+        agentId,
+        match: {
+            channel: 'feishu',
+            accountId: agentId
+        }
+    };
+    if (existingBindingIndex >= 0) {
+        bindings[existingBindingIndex] = binding;
+    }
+    else {
+        bindings.push(binding);
+    }
+    // 保存配置
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+    // 记录变更（用于重置时撤销）
+    // 1. 如果是首次创建飞书配置，记录整体结构变更
+    if (isNewFeishuConfig) {
+        configTracker.recordConfigChange({
+            change_type: 'channel_config',
+            action: 'add',
+            target_path: 'channels.feishu',
+            target_type: 'channels.feishu',
+            new_value: JSON.stringify(channels.feishu),
+            description: '创建飞书渠道配置'
+        });
+    }
+    // 2. 记录飞书账号配置变更
+    configTracker.recordConfigChange({
+        change_type: 'channel_config',
+        action: oldAccountConfig ? 'update' : 'add',
+        target_path: `channels.feishu.accounts.${agentId}`,
+        target_type: 'channels.feishu',
+        old_value: oldAccountConfig ? JSON.stringify(oldAccountConfig) : undefined,
+        new_value: JSON.stringify({ [agentId]: accounts[agentId] }),
+        related_id: agentId,
+        description: `配置飞书账号: ${agentId}`
+    });
+    // 3. 记录绑定变更
+    configTracker.recordBindingCreate(binding, agentId);
+    console.log(chalk_1.default.green(`\n✓ 已为 Agent "${agent?.name}" 配置飞书 Bot`));
+    console.log(chalk_1.default.dim(`  App ID: ${appId}`));
+    console.log(chalk_1.default.dim(`  私聊策略: ${dmPolicy}`));
+    console.log(chalk_1.default.bold.cyan('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk_1.default.bold.yellow('📋 后续步骤：\n'));
+    console.log(chalk_1.default.bold('步骤 1：启动 Gateway'));
+    console.log(chalk_1.default.cyan('  openclaw gateway'));
+    console.log(chalk_1.default.dim('  ⚠️ 必须先启动 Gateway，否则长连接配置会失败\n'));
+    console.log(chalk_1.default.bold('步骤 2：配置事件订阅（飞书开放平台）'));
+    console.log(chalk_1.default.dim('  • 进入「事件订阅」页面'));
+    console.log(chalk_1.default.dim('  • 开启「使用长连接接收事件」开关'));
+    console.log(chalk_1.default.dim('  • 添加事件：im.message.receive_v1'));
+    console.log(chalk_1.default.dim('  • 保存配置\n'));
+    console.log(chalk_1.default.bold('步骤 3：配置消息卡片回调（飞书开放平台）'));
+    console.log(chalk_1.default.dim('  • 进入「消息卡片」→「回调配置」页面'));
+    console.log(chalk_1.default.dim('  • 开启「使用长连接接收事件」开关'));
+    console.log(chalk_1.default.dim('  • 保存配置'));
+    console.log(chalk_1.default.dim('  说明：用于接收消息卡片按钮点击等交互事件\n'));
+    console.log(chalk_1.default.bold('步骤 4：创建版本'));
+    console.log(chalk_1.default.dim('  • 进入「版本管理与发布」页面'));
+    console.log(chalk_1.default.dim('  • 点击「创建版本」，填写版本号和更新说明'));
+    console.log(chalk_1.default.dim('  • 保存版本\n'));
+    console.log(chalk_1.default.bold('步骤 5：提交审核'));
+    console.log(chalk_1.default.dim('  • 选择刚创建的版本，点击「申请上线」'));
+    console.log(chalk_1.default.dim('  • 等待管理员审批（企业自建应用通常自动通过）\n'));
+    console.log(chalk_1.default.bold('步骤 6：用户配对'));
+    console.log(chalk_1.default.dim('  • 用户在飞书搜索并添加机器人'));
+    console.log(chalk_1.default.dim('  • 用户发送私聊消息，机器人返回配对码'));
+    console.log(chalk_1.default.dim('  • 使用本工具「配对管理」输入配对码完成授权\n'));
+    console.log(chalk_1.default.bold.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n'));
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 修改 Agent 的飞书配置
+ */
+async function editFeishuBot() {
+    const configuredAgents = getConfiguredAgents();
+    const agentIds = Object.keys(configuredAgents);
+    if (agentIds.length === 0) {
+        console.log(chalk_1.default.yellow('\n暂无已配置的飞书 Bot\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    console.log(chalk_1.default.bold('\n✏️  修改 Agent 的飞书配置\n'));
+    // Enrich agent info
+    const agentsWithDetails = agentIds.map(id => {
+        const agent = services_1.agentService.getById(id);
+        const info = configuredAgents[id];
+        const dept = agent?.department_id ? dept_repo_1.departmentRepository.findById(agent.department_id) : null;
+        const job = agent?.job_id ? job_repo_1.jobRepository.findById(agent.job_id) : null;
+        const roleMap = {
+            manager: '管理者',
+            executor: '执行者',
+            reviewer: '审核者',
+            assistant: '总助理',
+            watchdog: '监控者'
+        };
+        return {
+            id,
+            agent,
+            info,
+            deptName: dept?.name || '未分配',
+            jobName: job?.name || '未指定',
+            roleDisplay: roleMap[agent?.role || ''] || agent?.role || '未知'
+        };
+    });
+    // 选择 Agent
+    const { agentId } = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'agentId',
+            message: '选择要修改的 Agent：',
+            choices: [
+                ...agentsWithDetails.map(a => ({
+                    name: `${a.agent?.name || a.id} | ${a.deptName} | ${a.roleDisplay} | ${a.jobName} (${a.info.name || a.info.appId})`,
+                    value: a.id
+                })),
+                new inquirer_1.default.Separator(),
+                { name: '🔙 取消', value: 'cancel' }
+            ],
+            loop: true
+        }
+    ]);
+    if (agentId === 'cancel') {
+        return;
+    }
+    // 获取当前配置
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath);
+    const channels = config?.channels;
+    const feishuConfig = channels?.feishu;
+    const accounts = feishuConfig?.accounts;
+    const currentAccount = accounts?.[agentId];
+    if (!feishuConfig) {
+        index_1.tuiUtils.printError('飞书配置不存在');
+        return;
+    }
+    if (!currentAccount) {
+        index_1.tuiUtils.printError('配置读取失败');
+        return;
+    }
+    // 获取 agent 信息用于显示
+    const agent = services_1.agentService.getById(agentId);
+    // dmPolicy 在顶层 channels.feishu 下
+    const currentDmPolicy = feishuConfig?.dmPolicy || 'pairing';
+    console.log(chalk_1.default.dim('\n当前配置：'));
+    console.log(chalk_1.default.dim(`  App ID: ${currentAccount.appId}`));
+    console.log(chalk_1.default.dim(`  私聊策略: ${currentDmPolicy}\n`));
+    // 选择要修改的内容
+    const { fields } = await inquirer_1.default.prompt([
+        {
+            type: 'checkbox',
+            name: 'fields',
+            message: '选择要修改的内容：',
+            choices: [
+                { name: 'App Secret（重新输入）', value: 'appSecret' },
+                { name: '私聊策略', value: 'dmPolicy' }
+            ]
+        }
+    ]);
+    if (fields.length === 0) {
+        console.log(chalk_1.default.dim('\n未做任何修改\n'));
+        return;
+    }
+    // 逐个修改
+    if (fields.includes('appSecret')) {
+        const { appSecret } = await inquirer_1.default.prompt([
+            {
+                type: 'password',
+                name: 'appSecret',
+                message: '新的 App Secret：'
+            }
+        ]);
+        if (appSecret?.trim()) {
+            currentAccount.appSecret = appSecret.trim();
+        }
+    }
+    if (fields.includes('dmPolicy')) {
+        const { dmPolicy } = await inquirer_1.default.prompt([
+            {
+                type: 'list',
+                name: 'dmPolicy',
+                message: '新的私聊策略：',
+                choices: [
+                    { name: 'pairing - 需配对批准', value: 'pairing' },
+                    { name: 'open - 允许所有用户私聊', value: 'open' },
+                    { name: 'disabled - 禁用私聊', value: 'disabled' }
+                ],
+                default: currentDmPolicy,
+                loop: true
+            }
+        ]);
+        // dmPolicy 在顶层 channels.feishu 下
+        feishuConfig.dmPolicy = dmPolicy;
+    }
+    // 保存
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+    console.log(chalk_1.default.green('\n✓ 配置已更新\n'));
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 删除 Agent 的飞书配置
+ */
+async function deleteFeishuBot() {
+    const configuredAgents = getConfiguredAgents();
+    const agentIds = Object.keys(configuredAgents);
+    if (agentIds.length === 0) {
+        console.log(chalk_1.default.yellow('\n暂无已配置的飞书 Bot\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    console.log(chalk_1.default.bold('\n🗑️ 删除 Agent 的飞书配置\n'));
+    console.log(chalk_1.default.yellow('⚠️ 警告：删除后该 Agent 的飞书 Bot 将无法使用\n'));
+    // 选择 Agent
+    const { agentId } = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'agentId',
+            message: '选择要删除的 Agent 配置：',
+            choices: [
+                ...agentIds.map(id => {
+                    const agent = services_1.agentService.getById(id);
+                    const info = configuredAgents[id];
+                    return {
+                        name: `${agent?.name || id} (${id}) - ${info.name || info.appId}`,
+                        value: id
+                    };
+                }),
+                new inquirer_1.default.Separator(),
+                { name: '🔙 取消', value: 'cancel' }
+            ],
+            loop: true
+        }
+    ]);
+    if (agentId === 'cancel') {
+        return;
+    }
+    // 确认删除
+    const { confirm } = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'confirm',
+            message: '确认删除该飞书 Bot 配置？',
+            default: false
+        }
+    ]);
+    if (!confirm) {
+        console.log(chalk_1.default.dim('\n已取消\n'));
+        return;
+    }
+    // 更新配置
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath);
+    if (!config) {
+        index_1.tuiUtils.printError('配置文件读取失败');
+        return;
+    }
+    // 删除账号配置
+    const channels = config.channels;
+    const feishuConfig = channels?.feishu;
+    const accounts = feishuConfig?.accounts;
+    // 保存旧配置（用于追踪记录）
+    const oldAccountConfig = accounts?.[agentId] ? JSON.stringify(accounts[agentId]) : undefined;
+    const oldBindings = Array.isArray(config.bindings) ? [...config.bindings] : [];
+    if (accounts && accounts[agentId]) {
+        delete accounts[agentId];
+    }
+    // 删除相关绑定
+    if (config.bindings && Array.isArray(config.bindings)) {
+        config.bindings = config.bindings.filter((b) => !(b.agentId === agentId && b.match?.channel === 'feishu'));
+    }
+    // 记录变更（用于重置时恢复）
+    if (oldAccountConfig) {
+        configTracker.recordConfigChange({
+            change_type: 'channel_config',
+            action: 'remove',
+            target_path: `channels.feishu.accounts.${agentId}`,
+            target_type: 'channels.feishu',
+            old_value: oldAccountConfig,
+            related_id: agentId,
+            description: `删除飞书账号配置: ${agentId}`
+        });
+    }
+    // 记录绑定删除
+    const currentBindings = Array.isArray(config.bindings) ? config.bindings : [];
+    if (oldBindings.length > currentBindings.length) {
+        configTracker.recordConfigChange({
+            change_type: 'binding_delete',
+            action: 'remove',
+            target_path: 'bindings',
+            target_type: 'bindings',
+            old_value: JSON.stringify(oldBindings),
+            new_value: JSON.stringify(currentBindings),
+            related_id: agentId,
+            description: `删除 Agent ${agentId} 的飞书绑定`
+        });
+    }
+    // 保存
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+    console.log(chalk_1.default.green('\n✓ 飞书 Bot 配置已删除'));
+    console.log(chalk_1.default.yellow('\n⚠️  请重启 Gateway 使飞书长连接断开：'));
+    console.log(chalk_1.default.cyan('    openclaw gateway restart\n'));
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 查看飞书群绑定列表
+ */
+async function listFeishuGroups() {
+    console.log(chalk_1.default.bold.cyan('\n🏢 飞书群绑定列表\n'));
+    // 从数据库读取事业部列表
+    const { departmentRepository } = await Promise.resolve().then(() => __importStar(require('../../../db/repositories/dept.repo')));
+    const departments = departmentRepository.findAll();
+    if (departments.length === 0) {
+        console.log(chalk_1.default.dim('暂无事业部\n'));
+    }
+    else {
+        console.log(chalk_1.default.dim('事业部'.padEnd(20)) + chalk_1.default.dim('飞书群ID'));
+        index_1.tuiUtils.printDivider();
+        for (const dept of departments) {
+            const groupId = dept.feishu_group_id || '-';
+            console.log(`${(dept.name || '-').padEnd(20)}${groupId}`);
+        }
+        console.log('');
+    }
+    // 显示 openclaw.json 中的 bindings
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath);
+    const bindings = (config?.bindings || []);
+    const feishuBindings = bindings.filter(b => b.match?.channel === 'feishu');
+    if (feishuBindings.length > 0) {
+        console.log(chalk_1.default.bold('飞书路由绑定（openclaw.json）：\n'));
+        console.log(chalk_1.default.dim('Agent ID'.padEnd(25)) + chalk_1.default.dim('类型'.padEnd(10)) + chalk_1.default.dim('ID'));
+        index_1.tuiUtils.printDivider();
+        for (const binding of feishuBindings) {
+            const type = binding.match?.peer?.kind || 'unknown';
+            const id = binding.match?.peer?.id || binding.match?.accountId || '*';
+            console.log(`${(binding.agentId || '-').padEnd(25)}${type.padEnd(10)}${id}`);
+        }
+        console.log('');
+    }
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 绑定飞书群到事业部
+ *
+ * 绑定规则：
+ * 1. 该事业部内的所有 Agent 都绑定到群
+ * 2. 默认增加总助理（assistant_main）
+ * 3. 配置群组设置（requireMention: true 支持 @ 沟通）
+ */
+async function bindFeishuGroup() {
+    try {
+        console.log(chalk_1.default.bold.cyan('\n🔗 绑定飞书群到事业部\n'));
+        // 从数据库读取事业部列表
+        const { departmentRepository } = await Promise.resolve().then(() => __importStar(require('../../../db/repositories/dept.repo')));
+        const departments = departmentRepository.findAll();
+        if (departments.length === 0) {
+            console.log(chalk_1.default.yellow('暂无事业部，请先创建事业部\n'));
+            await index_1.tuiUtils.waitForKey();
+            return;
+        }
+        // 选择事业部
+        const { deptId } = await inquirer_1.default.prompt([
+            {
+                type: 'list',
+                name: 'deptId',
+                message: '选择要绑定的事业部：',
+                choices: [
+                    ...departments.map((d) => ({
+                        name: `${d.name} (${d.id})${d.feishu_group_id ? ' [已绑定: ' + d.feishu_group_id + ']' : ''}`,
+                        value: d.id
+                    })),
+                    new inquirer_1.default.Separator(),
+                    { name: '🔙 取消', value: 'cancel' }
+                ],
+                loop: true
+            }
+        ]);
+        if (deptId === 'cancel') {
+            return;
+        }
+        // 输入飞书群ID
+        const { groupId } = await inquirer_1.default.prompt([
+            {
+                type: 'input',
+                name: 'groupId',
+                message: '请输入飞书群ID（oc_xxx 格式）：',
+                validate: (input) => {
+                    if (!input.trim()) {
+                        return '请输入飞书群ID';
+                    }
+                    if (!input.startsWith('oc_')) {
+                        return '飞书群ID格式错误，应以 oc_ 开头';
+                    }
+                    return true;
+                }
+            }
+        ]);
+        // 更新数据库
+        const dept = departments.find((d) => d.id === deptId);
+        const oldGroupId = dept?.feishu_group_id;
+        departmentRepository.update(deptId, { feishu_group_id: groupId });
+        // 记录变更（用于重置时撤销）
+        configTracker.recordFeishuGroupBind(deptId, dept?.name || deptId, groupId, oldGroupId);
+        // 更新 openclaw.json
+        const configPath = (0, utils_1.getOpenClawJsonPath)();
+        const config = safeReadJsonConfig(configPath) || {};
+        // 1. 配置群组设置（支持 @ 沟通）
+        if (!config.channels)
+            config.channels = {};
+        const channels = config.channels;
+        // 重要：不能覆盖现有的 feishu 配置，只更新需要的字段
+        if (!channels.feishu) {
+            channels.feishu = {
+                enabled: true,
+                dmPolicy: 'pairing',
+                groupPolicy: 'allowlist',
+                accounts: {} // 确保 accounts 存在
+            };
+        }
+        const feishuConfig = channels.feishu;
+        // 确保 accounts 不被覆盖
+        if (!feishuConfig.accounts) {
+            feishuConfig.accounts = {};
+        }
+        // 设置群组访问策略
+        feishuConfig.groupPolicy = 'allowlist';
+        if (!feishuConfig.groupAllowFrom)
+            feishuConfig.groupAllowFrom = [];
+        const groupAllowFrom = feishuConfig.groupAllowFrom;
+        // 记录旧的 groupAllowFrom（用于追踪）
+        const oldGroupAllowFrom = [...groupAllowFrom];
+        if (!groupAllowFrom.includes(groupId)) {
+            groupAllowFrom.push(groupId);
+            // 记录 groupAllowFrom 变更（用于重置时撤销）
+            configTracker.recordConfigChange({
+                change_type: 'channel_config',
+                action: 'update',
+                target_path: 'channels.feishu.groupAllowFrom',
+                target_type: 'channels.feishu',
+                old_value: JSON.stringify(oldGroupAllowFrom),
+                new_value: JSON.stringify(groupAllowFrom),
+                related_id: groupId,
+                description: `添加群到白名单: ${groupId}`
+            });
+        }
+        // 群组详细配置
+        if (!feishuConfig.groups)
+            feishuConfig.groups = {};
+        const groups = feishuConfig.groups;
+        // 群组配置：requireMention: true 表示需要 @ 才能触发
+        // 默认配置：respondToMentionAll=true, enabled=true
+        groups[groupId] = {
+            requireMention: true,
+            respondToMentionAll: true,
+            enabled: true
+        };
+        // 2. 创建绑定：该事业部所有 Agent + 总助理
+        if (!config.bindings)
+            config.bindings = [];
+        const bindings = config.bindings;
+        // 获取该事业部的所有 Agent
+        const allAgents = services_1.agentService.listAll();
+        console.log(chalk_1.default.dim(`[调试] 总 Agent 数: ${allAgents.length}`));
+        const deptAgents = allAgents.filter((a) => a.department_id === deptId);
+        console.log(chalk_1.default.dim(`[调试] 事业部 ${deptId} 的 Agent 数: ${deptAgents.length}`));
+        // 获取总助理
+        const assistantMain = allAgents.find((a) => a.id === 'assistant_main' || a.role === 'assistant');
+        console.log(chalk_1.default.dim(`[调试] 总助理: ${assistantMain?.id || '未找到'}`));
+        // 要绑定的 Agent 列表：事业部所有 Agent + 总助理
+        const agentsToBind = [...deptAgents];
+        if (assistantMain && !agentsToBind.find(a => a.id === assistantMain.id)) {
+            agentsToBind.push(assistantMain);
+        }
+        console.log(chalk_1.default.dim(`[调试] 最终绑定 Agent 数: ${agentsToBind.length}`));
+        if (agentsToBind.length === 0) {
+            console.log(chalk_1.default.yellow('\n⚠️  未找到可绑定的 Agent\n'));
+            console.log(chalk_1.default.dim('请确保该事业部已创建 Agent（管理者、审核者、执行者）\n'));
+            await index_1.tuiUtils.waitForKey();
+            return;
+        }
+        const typedBindings = bindings;
+        const oldBindings = typedBindings.filter((b) => b.match?.peer?.id !== groupId);
+        // 添加新绑定
+        for (const agent of agentsToBind) {
+            const binding = {
+                agentId: agent.id,
+                match: {
+                    channel: 'feishu',
+                    peer: {
+                        kind: 'group',
+                        id: groupId
+                    }
+                }
+            };
+            oldBindings.push(binding);
+            // 记录每个 binding 的创建（用于重置时撤销）
+            configTracker.recordBindingCreate(binding);
+        }
+        config.bindings = oldBindings;
+        // 保存配置
+        console.log(chalk_1.default.dim(`[调试] 保存配置到: ${configPath}`));
+        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+        console.log(chalk_1.default.dim(`[调试] 配置已保存`));
+        console.log(chalk_1.default.green('\n✓ 飞书群已绑定\n'));
+        console.log(chalk_1.default.dim(`事业部: ${dept?.name || deptId}`));
+        console.log(chalk_1.default.dim(`群ID: ${groupId}`));
+        console.log(chalk_1.default.dim(`\n绑定的 Agent（共 ${agentsToBind.length} 个）:`));
+        for (const agent of agentsToBind) {
+            const roleLabel = agent.role === 'assistant' ? '[总助理]' :
+                agent.role === 'manager' ? '[管理者]' :
+                    agent.role === 'reviewer' ? '[审核者]' : '[执行者]';
+            console.log(chalk_1.default.dim(`  - ${agent.name} ${roleLabel}`));
+        }
+        console.log(chalk_1.default.dim('\n群组访问配置:'));
+        console.log(chalk_1.default.dim(`  - groupPolicy: allowlist（仅允许绑定的群）`));
+        console.log(chalk_1.default.dim(`  - requireMention: true（需要 @ 机器人才能触发）`));
+        console.log(chalk_1.default.dim('\n使用说明:'));
+        console.log(chalk_1.default.dim(`  - 在群内 @机器人 发送消息，绑定的 Agent 会响应`));
+        console.log(chalk_1.default.dim(`  - Agent 可以主动向群发送消息`));
+        console.log(chalk_1.default.yellow('\n⚠️  请重启 Gateway 使配置生效'));
+        console.log(chalk_1.default.dim('    1. 关闭当前运行的 Gateway（Ctrl+C）'));
+        console.log(chalk_1.default.dim('    2. 重新启动 Gateway'));
+        console.log(chalk_1.default.dim('    启动命令: openclaw gateway run\n'));
+        await index_1.tuiUtils.waitForKey('按回车键返回...');
+    }
+    catch (error) {
+        console.log(chalk_1.default.red('\n✗ 绑定失败'));
+        console.log(chalk_1.default.dim(`错误: ${error instanceof Error ? error.message : String(error)}\n`));
+        await index_1.tuiUtils.waitForKey();
+    }
+}
+/**
+ * 配对管理菜单
+ *
+ * 配对流程说明：
+ * 1. 用户在飞书私聊机器人
+ * 2. 机器人返回配对码（如 ABC123）
+ * 3. 管理员在命令行执行配对命令
+ * 4. 用户获得对话权限，可以正常对话
+ *
+ * 这是安全机制，防止未授权用户与机器人对话
+ */
+async function showPairingMenu() {
+    const { execSync } = require('child_process');
+    while (true) {
+        // 读取配对请求
+        const requests = readFeishuPairingRequests();
+        console.log(chalk_1.default.bold.cyan('\n🔐 配对管理\n'));
+        console.log(chalk_1.default.dim(`凭证目录: ${getCredentialsDir()}\n`));
+        if (requests.length === 0) {
+            console.log(chalk_1.default.dim('暂无待批准的配对请求\n'));
+            console.log(chalk_1.default.dim('提示：用户在飞书私聊机器人后，会收到配对码\n'));
+            await index_1.tuiUtils.waitForKey();
+            return;
+        }
+        console.log(chalk_1.default.bold(`待批准的配对请求（共 ${requests.length} 个）：\n`));
+        console.log(chalk_1.default.dim('配对码'.padEnd(15)) + chalk_1.default.dim('用户ID'.padEnd(45)) + chalk_1.default.dim('账号'));
+        index_1.tuiUtils.printDivider();
+        for (const req of requests) {
+            const code = req.code || '-';
+            const userId = req.id || '-';
+            const accountId = req.meta?.accountId || req.accountId || 'default';
+            console.log(code.padEnd(15) + userId.padEnd(45) + accountId);
+        }
+        console.log('');
+        // 提供选择菜单
+        const choices = [
+            ...requests.map(req => {
+                const code = req.code || '-';
+                const accountId = req.meta?.accountId || req.accountId || 'default';
+                return {
+                    name: `批准: ${code} (${accountId})`,
+                    value: { code: req.code, userId: req.id, accountId: req.meta?.accountId || req.accountId || 'default' }
+                };
+            }),
+            new inquirer_1.default.Separator(),
+            { name: '🔄 刷新列表', value: 'refresh' },
+            { name: '🔙 返回', value: 'back' }
+        ];
+        const { action } = await inquirer_1.default.prompt([
+            {
+                type: 'list',
+                name: 'action',
+                message: '请选择操作：',
+                choices,
+                loop: true
+            }
+        ]);
+        if (action === 'back') {
+            return;
+        }
+        if (action === 'refresh') {
+            continue;
+        }
+        // 通过 openclaw 命令批准配对
+        const { code, userId, accountId } = action;
+        const command = `openclaw pairing approve feishu ${code}`;
+        console.log(chalk_1.default.dim(`\n执行命令: ${command}\n`));
+        try {
+            const output = execSync(command, {
+                encoding: 'utf-8',
+                cwd: (0, utils_1.getOpenClawRoot)() || undefined
+            });
+            console.log(chalk_1.default.green('\n✓ 配对授权成功！\n'));
+            console.log(chalk_1.default.dim(output));
+            console.log(chalk_1.default.yellow('提示：用户现在可以在飞书中与机器人对话。\n'));
+            // 记录配对变更（用于重置时清除）
+            configTracker.recordConfigChange({
+                change_type: 'feishu_pairing_approve',
+                action: 'add',
+                target_path: `credentials.feishu.allowFrom.${accountId}`,
+                target_type: 'credentials',
+                new_value: JSON.stringify({ accountId, userId }),
+                related_id: accountId,
+                description: `批准飞书配对: ${userId} -> ${accountId}`
+            });
+        }
+        catch (error) {
+            console.log(chalk_1.default.red('\n✗ 配对授权失败\n'));
+            const errorMsg = error instanceof Error
+                ? error.stderr || error.message
+                : String(error);
+            console.log(chalk_1.default.dim(`错误信息: ${errorMsg}\n`));
+            console.log(chalk_1.default.dim('可能原因：'));
+            console.log(chalk_1.default.dim('  • 配对码无效或已过期'));
+            console.log(chalk_1.default.dim('  • 配对码已被使用'));
+            console.log(chalk_1.default.dim('  • Gateway 未运行'));
+            console.log(chalk_1.default.dim('  • openclaw 命令未安装或不在 PATH 中\n'));
+        }
+        await index_1.tuiUtils.waitForKey();
+    }
+}
+/**
+ * 扫描本地端口查找活跃的 Gateway
+ */
+async function scanGateways() {
+    const http = require('http');
+    const gateways = [];
+    // 常用端口列表
+    const commonPorts = [28789, 18789, 38789, 48789];
+    // 先从 openclaw.json 读取已配置的端口
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    const config = safeReadJsonConfig(configPath);
+    const gateway = config?.gateway;
+    const configPort = gateway?.port || 28789;
+    const configToken = gateway?.auth?.token;
+    // 将配置的端口放在最前面
+    const portsToScan = [configPort, ...commonPorts.filter(p => p !== configPort)];
+    for (const port of portsToScan) {
+        const isRunning = await checkGatewayPort(port);
+        if (isRunning) {
+            const token = port === configPort ? configToken : undefined;
+            const source = port === configPort ? '当前配置' : '自动发现';
+            gateways.push({ port, status: 'running', token, source });
+        }
+    }
+    return gateways;
+}
+/**
+ * 检查指定端口是否有 Gateway 运行
+ */
+function checkGatewayPort(port) {
+    const http = require('http');
+    return new Promise((resolve) => {
+        const req = http.request({
+            hostname: '127.0.0.1',
+            port: port,
+            path: '/health',
+            method: 'GET',
+            timeout: 2000
+        }, (res) => {
+            resolve(res.statusCode === 200);
+        });
+        req.on('error', () => resolve(false));
+        req.on('timeout', () => {
+            req.destroy();
+            resolve(false);
+        });
+        req.end();
+    });
+}
+/**
+ * 让用户选择 Gateway
+ */
+async function selectGateway() {
+    console.log(chalk_1.default.dim('\n正在扫描活跃的 Gateway...\n'));
+    const gateways = await scanGateways();
+    if (gateways.length === 0) {
+        console.log(chalk_1.default.yellow('未发现活跃的 Gateway\n'));
+        console.log(chalk_1.default.dim('请确保 Gateway 正在运行：'));
+        console.log(chalk_1.default.cyan('  openclaw gateway\n'));
+        return null;
+    }
+    if (gateways.length === 1) {
+        const gw = gateways[0];
+        console.log(chalk_1.default.green(`✓ 发现 Gateway: 端口 ${gw.port} (${gw.source})\n`));
+        // 如果有 token，直接返回
+        if (gw.token) {
+            return { port: gw.port, token: gw.token };
+        }
+        // 否则让用户输入 token
+        const { token } = await inquirer_1.default.prompt([
+            {
+                type: 'password',
+                name: 'token',
+                message: `请输入 Gateway Token（端口 ${gw.port}）：`
+            }
+        ]);
+        if (!token?.trim()) {
+            console.log(chalk_1.default.yellow('\n未输入 Token，已取消\n'));
+            return null;
+        }
+        return { port: gw.port, token: token.trim() };
+    }
+    // 多个 Gateway，让用户选择
+    console.log(chalk_1.default.dim(`发现 ${gateways.length} 个活跃的 Gateway：\n`));
+    const choices = gateways.map(gw => ({
+        name: `端口 ${gw.port} (${gw.source})${gw.token ? ' [已配置Token]' : ''}`,
+        value: gw
+    }));
+    const { selected } = await inquirer_1.default.prompt([
+        {
+            type: 'list',
+            name: 'selected',
+            message: '选择要使用的 Gateway：',
+            choices,
+            loop: true
+        }
+    ]);
+    if (selected.token) {
+        return { port: selected.port, token: selected.token };
+    }
+    // 让用户输入 token
+    const { token } = await inquirer_1.default.prompt([
+        {
+            type: 'password',
+            name: 'token',
+            message: `请输入 Gateway Token（端口 ${selected.port}）：`
+        }
+    ]);
+    if (!token?.trim()) {
+        console.log(chalk_1.default.yellow('\n未输入 Token，已取消\n'));
+        return null;
+    }
+    return { port: selected.port, token: token.trim() };
+}
+/**
+ * Gateway WebSocket 客户端
+ * 用于调用 Gateway 的配对 API
+ */
+class GatewayClient {
+    gateway = null;
+    /**
+     * 设置 Gateway 信息
+     */
+    setGateway(gateway) {
+        this.gateway = gateway;
+    }
+    /**
+     * 初始化：选择或配置 Gateway
+     */
+    async init() {
+        if (this.gateway)
+            return true;
+        const gateway = await selectGateway();
+        if (!gateway)
+            return false;
+        this.gateway = gateway;
+        return true;
+    }
+    /**
+     * 调用 Gateway WebSocket 方法
+     */
+    async callMethod(method, params = {}) {
+        if (!this.gateway) {
+            return { success: false, error: 'Gateway 未配置' };
+        }
+        // 保存引用，避免在 Promise 回调中访问 this.gateway
+        const gateway = this.gateway;
+        const WebSocket = require('ws');
+        const url = `ws://127.0.0.1:${gateway.port}/ws`;
+        const origin = `http://127.0.0.1:${gateway.port}`;
+        return new Promise((resolve) => {
+            // 创建 WebSocket 连接，添加 origin header
+            const ws = new WebSocket(url, {
+                headers: {
+                    'Origin': origin
+                }
+            });
+            let resolved = false;
+            const connectId = `connect_${Date.now()}`;
+            const methodId = `method_${Date.now()}`;
+            const timeout = setTimeout(() => {
+                if (!resolved) {
+                    resolved = true;
+                    ws.close();
+                    resolve({ success: false, error: '连接超时' });
+                }
+            }, 15000);
+            ws.on('open', () => {
+                // 等待 challenge 事件，不立即发送
+            });
+            ws.on('message', (data) => {
+                try {
+                    const msg = JSON.parse(data.toString());
+                    // 1. 收到 challenge 事件
+                    if (msg.type === 'event' && msg.event === 'connect.challenge') {
+                        // 发送 connect 请求（使用正确的客户端 ID 和模式）
+                        ws.send(JSON.stringify({
+                            type: 'req',
+                            id: connectId,
+                            method: 'connect',
+                            params: {
+                                minProtocol: 3,
+                                maxProtocol: 3,
+                                client: {
+                                    id: 'openclaw-control-ui', // 官方定义的控制 UI 客户端 ID
+                                    version: '1.0.0',
+                                    platform: process.platform,
+                                    mode: 'ui' // UI 模式
+                                },
+                                role: 'operator',
+                                scopes: ['operator.pairing'],
+                                auth: { token: gateway.token }
+                            }
+                        }));
+                        return;
+                    }
+                    // 2. connect 响应 (type: "res")
+                    if (msg.type === 'res' && msg.id === connectId) {
+                        if (msg.ok) {
+                            // 连接成功，发送实际的方法调用
+                            ws.send(JSON.stringify({
+                                type: 'req',
+                                id: methodId,
+                                method: method,
+                                params: params
+                            }));
+                        }
+                        else {
+                            clearTimeout(timeout);
+                            resolved = true;
+                            ws.close();
+                            const errMsg = msg.error?.message || msg.error?.text || JSON.stringify(msg.error);
+                            resolve({ success: false, error: `认证失败: ${errMsg}` });
+                        }
+                        return;
+                    }
+                    // 3. 方法调用响应 (type: "res")
+                    if (msg.type === 'res' && msg.id === methodId) {
+                        clearTimeout(timeout);
+                        resolved = true;
+                        ws.close();
+                        if (msg.ok) {
+                            resolve({ success: true, result: msg.result || msg.payload });
+                        }
+                        else {
+                            const errMsg = msg.error?.message || msg.error?.text || JSON.stringify(msg.error);
+                            resolve({ success: false, error: errMsg });
+                        }
+                        return;
+                    }
+                }
+                catch (e) {
+                    // 忽略解析错误
+                }
+            });
+            ws.on('error', (err) => {
+                clearTimeout(timeout);
+                if (!resolved) {
+                    resolved = true;
+                    resolve({ success: false, error: `WebSocket错误: ${err.message}` });
+                }
+            });
+            ws.on('close', (code, reason) => {
+                clearTimeout(timeout);
+                if (!resolved) {
+                    resolved = true;
+                    const reasonText = reason.toString() || `code=${code}`;
+                    resolve({ success: false, error: `连接已关闭: ${reasonText}` });
+                }
+            });
+        });
+    }
+    /**
+     * 检查并提示用户配置 Gateway
+     */
+    checkGatewayConfig() {
+        if (!this.gateway) {
+            return { needsConfig: false, message: '' };
+        }
+        const configPath = (0, utils_1.getOpenClawJsonPath)();
+        const config = safeReadJsonConfig(configPath);
+        if (!config) {
+            return {
+                needsConfig: true,
+                message: '无法读取配置文件'
+            };
+        }
+        const gateway = config.gateway;
+        const controlUi = gateway?.controlUi;
+        // 检查是否配置了 allowInsecureAuth
+        if (controlUi?.allowInsecureAuth !== true) {
+            return {
+                needsConfig: true,
+                message: `需要在 openclaw.json 中添加以下配置：
+
+  "gateway": {
+    "controlUi": {
+      "allowInsecureAuth": true
+    }
+  }
+
+或者配置允许的 origin：
+
+  "gateway": {
+    "controlUi": {
+      "allowedOrigins": ["http://127.0.0.1:${this.gateway.port}"]
+    }
+  }`
+            };
+        }
+        return { needsConfig: false, message: '' };
+    }
+    /**
+     * 列出配对请求
+     */
+    async listPairingRequests() {
+        // node.pair.list 不需要参数
+        const result = await this.callMethod('node.pair.list', {});
+        if (!result.success) {
+            return { success: false, error: result.error };
+        }
+        // 返回格式: { pending: [...], paired: [...] }
+        const response = result.result;
+        return { success: true, pending: response.pending || [] };
+    }
+    /**
+     * 批准配对请求
+     */
+    async approvePairing(requestId) {
+        const result = await this.callMethod('node.pair.approve', { requestId });
+        if (!result.success) {
+            return { success: false, error: result.error };
+        }
+        return { success: true };
+    }
+}
+// 全局 Gateway 客户端实例
+const gatewayClient = new GatewayClient();
+/**
+ * 获取凭证目录路径
+ *
+ * 基于 TUI 启动时选择的工作目录计算：
+ * - 工作目录: <project>/.openclaw
+ * - 凭证目录: <project>/credentials
+ *
+ * 即：凭证目录 = 工作目录/credentials
+ *
+ * Gateway 运行时会在工作目录下创建 credentials 子目录存储配对信息
+ */
+function getCredentialsDir() {
+    const path = require('path');
+    const os = require('os');
+    // 获取 TUI 启动时用户选择的工作目录
+    const openclawRoot = (0, utils_1.getOpenClawRoot)();
+    // 凭证目录直接在工作目录下
+    // 工作目录：~/.openclaw 或 <project>/.openclaw
+    // 凭证目录：<工作目录>/credentials
+    if (openclawRoot) {
+        return path.join(openclawRoot, 'credentials');
+    }
+    // 如果工作目录未设置，尝试从配置文件路径推导
+    const configPath = (0, utils_1.getOpenClawJsonPath)();
+    if (configPath) {
+        const openclawDir = path.dirname(configPath);
+        return path.join(openclawDir, 'credentials');
+    }
+    // 尝试环境变量
+    if (process.env.OPENCLAW_CREDENTIALS_DIR) {
+        return process.env.OPENCLAW_CREDENTIALS_DIR;
+    }
+    if (process.env.OPENCLAW_STATE_DIR) {
+        return path.join(process.env.OPENCLAW_STATE_DIR, 'credentials');
+    }
+    // 默认：全局目录
+    return path.join(os.homedir(), '.openclaw', 'credentials');
+}
+/**
+ * 获取飞书配对文件路径
+ */
+function getFeishuPairingFilePath() {
+    const path = require('path');
+    return path.join(getCredentialsDir(), 'feishu-pairing.json');
+}
+/**
+ * 读取飞书配对请求
+ */
+function readFeishuPairingRequests() {
+    const filePath = getFeishuPairingFilePath();
+    if (!fs.existsSync(filePath)) {
+        return [];
+    }
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const data = JSON.parse(content);
+        return data.requests || [];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * 批准飞书配对请求
+ *
+ * 执行流程（遵循 OpenClaw 标准）：
+ * 1. 验证配对码是否有效
+ * 2. 查找对应的配对请求（匹配 code 和 accountId）
+ * 3. 从待处理配对列表中删除该请求
+ * 4. 将发送者 ID 添加到 allowFrom 存储文件
+ *
+ * 存储文件位置：
+ * - {credentials_dir}/feishu-allowFrom.json（默认账户）
+ * - {credentials_dir}/feishu-{accountId}-allowFrom.json（指定账户）
+ *
+ * 同时会记录变更到 config_changes 表，用于重置时清除
+ */
+function approveFeishuPairing(code, accountId) {
+    const credentialsDir = getCredentialsDir();
+    const filePath = getFeishuPairingFilePath();
+    console.log(chalk_1.default.dim(`凭证目录: ${credentialsDir}`));
+    console.log(chalk_1.default.dim(`配对文件: ${filePath}`));
+    if (!fs.existsSync(filePath)) {
+        return { success: false, error: '配对请求文件不存在' };
+    }
+    try {
+        const content = fs.readFileSync(filePath, 'utf-8');
+        const data = JSON.parse(content);
+        const requests = data.requests || [];
+        console.log(chalk_1.default.dim(`当前请求数: ${requests.length}`));
+        // 查找匹配的配对请求
+        const requestIndex = requests.findIndex((r) => r.code && r.code.toUpperCase() === code.toUpperCase());
+        if (requestIndex < 0) {
+            return { success: false, error: `配对码 "${code}" 不存在或已过期` };
+        }
+        const request = requests[requestIndex];
+        console.log(chalk_1.default.dim(`用户ID: ${request.id}`));
+        // 从请求列表中移除
+        requests.splice(requestIndex, 1);
+        data.requests = requests;
+        // 确保凭证目录存在
+        if (!fs.existsSync(credentialsDir)) {
+            fs.mkdirSync(credentialsDir, { recursive: true });
+        }
+        // 写回请求文件
+        fs.writeFileSync(filePath, JSON.stringify(data, null, 2), 'utf-8');
+        console.log(chalk_1.default.dim(`已从配对列表移除配对码`));
+        // 获取请求中的 accountId
+        const requestAccountId = (request.meta?.accountId || request.accountId);
+        // 确定要写入的 accountId（优先级：传入参数 > 请求中的 accountId > default）
+        let targetAccountId;
+        if (accountId && accountId !== 'default') {
+            targetAccountId = accountId;
+        }
+        else if (requestAccountId) {
+            targetAccountId = requestAccountId;
+        }
+        else {
+            targetAccountId = 'default';
+        }
+        console.log(chalk_1.default.dim(`目标账户: ${targetAccountId}`));
+        // 写入多种格式的 allowFrom 文件，确保 Gateway 能找到
+        const userId = request.id;
+        const fileNames = [
+            'feishu-allowFrom.json', // 默认格式
+            `feishu-${targetAccountId}-allowFrom.json`, // 指定账户
+            'feishu-default-allowFrom.json' // default 账户
+        ];
+        for (const fileName of fileNames) {
+            const allowFromPath = path.join(credentialsDir, fileName);
+            let allowFrom = [];
+            if (fs.existsSync(allowFromPath)) {
+                try {
+                    allowFrom = JSON.parse(fs.readFileSync(allowFromPath, 'utf-8')) || [];
+                }
+                catch {
+                    allowFrom = [];
+                }
+            }
+            if (!allowFrom.includes(userId)) {
+                allowFrom.push(userId);
+                fs.writeFileSync(allowFromPath, JSON.stringify(allowFrom, null, 2), 'utf-8');
+                console.log(chalk_1.default.dim(`已写入: ${fileName}`));
+            }
+        }
+        // 记录变更（用于重置时清除）
+        configTracker.recordConfigChange({
+            change_type: 'feishu_pairing_approve',
+            action: 'add',
+            target_path: `credentials.feishu.allowFrom.${targetAccountId}`,
+            target_type: 'credentials',
+            new_value: JSON.stringify({ accountId: targetAccountId, userId }),
+            related_id: targetAccountId,
+            description: `批准飞书配对: ${userId} -> ${targetAccountId}`
+        });
+        return { success: true, userId, targetAccountId };
+    }
+    catch (error) {
+        return { success: false, error: error instanceof Error ? error.message : String(error) };
+    }
+}
+/**
+ * 列出配对请求
+ */
+async function listPairingRequests() {
+    console.log(chalk_1.default.dim('\n正在查询配对请求...\n'));
+    console.log(chalk_1.default.dim(`凭证目录: ${getCredentialsDir()}\n`));
+    const requests = readFeishuPairingRequests();
+    if (requests.length === 0) {
+        console.log(chalk_1.default.dim('暂无待批准的配对请求\n'));
+        console.log(chalk_1.default.dim('提示：让用户在飞书私聊机器人，机器人会返回配对码\n'));
+    }
+    else {
+        console.log(chalk_1.default.bold(`待批准的配对请求（共 ${requests.length} 个）：\n`));
+        console.log(chalk_1.default.dim('配对码'.padEnd(15)) + chalk_1.default.dim('用户ID'.padEnd(45)) + chalk_1.default.dim('账号'));
+        index_1.tuiUtils.printDivider();
+        for (const req of requests) {
+            const code = req.code || '-';
+            const userId = req.id || '-';
+            const accountId = req.accountId || req.meta?.accountId || 'default';
+            console.log(code.padEnd(15) + userId.padEnd(45) + accountId);
+        }
+        console.log('');
+    }
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 批准配对请求
+ *
+ * 直接调用 approveFeishuPairing 函数完成授权
+ */
+async function approvePairingRequest() {
+    console.log(chalk_1.default.bold.cyan('\n━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━'));
+    console.log(chalk_1.default.bold('🔐 飞书配对授权'));
+    console.log(chalk_1.default.bold.cyan('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n'));
+    console.log(chalk_1.default.dim('用户在飞书私聊机器人后，会收到配对码。\n'));
+    console.log(chalk_1.default.dim(`凭证目录: ${getCredentialsDir()}\n`));
+    const { pairingCode } = await inquirer_1.default.prompt([
+        {
+            type: 'input',
+            name: 'pairingCode',
+            message: '请输入配对码（留空取消）：'
+        }
+    ]);
+    if (!pairingCode || !pairingCode.trim()) {
+        console.log(chalk_1.default.dim('\n已取消\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    const code = pairingCode.trim().toUpperCase();
+    console.log(chalk_1.default.dim(`\n正在批准配对码: ${code}...\n`));
+    // 直接调用配对函数
+    const result = approveFeishuPairing(code);
+    if (result.success) {
+        console.log(chalk_1.default.green('\n✓ 配对授权成功！\n'));
+        console.log(chalk_1.default.dim(`用户ID: ${result.userId}`));
+        console.log(chalk_1.default.dim(`账号: ${result.targetAccountId}\n`));
+        console.log(chalk_1.default.yellow('提示：用户现在可以在飞书中与机器人对话。\n'));
+    }
+    else {
+        console.log(chalk_1.default.red('\n✗ 配对授权失败\n'));
+        console.log(chalk_1.default.dim(`错误: ${result.error || '未知错误'}\n`));
+        console.log(chalk_1.default.dim('可能原因：'));
+        console.log(chalk_1.default.dim('  • 配对码无效或已过期'));
+        console.log(chalk_1.default.dim('  • 配对码已被使用'));
+        console.log(chalk_1.default.dim('  • 凭证目录配置不正确\n'));
+    }
+    await index_1.tuiUtils.waitForKey();
+}
+// ============================================
+// 用户飞书绑定功能 (v1.1.5)
+// ============================================
+/**
+ * 查看用户飞书绑定状态
+ */
+async function showUserFeishuBinding() {
+    console.log(chalk_1.default.bold.cyan('\n👤 用户飞书绑定状态\n'));
+    const userInfo = services_1.userService.getUserInfo();
+    console.log(chalk_1.default.dim('用户信息：'));
+    console.log(chalk_1.default.dim(`  用户ID: ${userInfo.id}`));
+    console.log(chalk_1.default.dim(`  用户名: ${userInfo.name}`));
+    console.log('');
+    if (userInfo.feishuBound) {
+        console.log(chalk_1.default.green('飞书绑定状态: 已绑定'));
+        console.log(chalk_1.default.dim(`  Open ID: ${userInfo.feishuOpenId}`));
+        console.log('');
+        console.log(chalk_1.default.dim('总助理可以通过飞书私聊通知你任务完成情况。'));
+    }
+    else {
+        console.log(chalk_1.default.yellow('飞书绑定状态: 未绑定'));
+        console.log('');
+        console.log(chalk_1.default.dim('绑定后，总助理可以通过飞书私聊通知你任务完成情况。'));
+        console.log(chalk_1.default.dim('使用"绑定用户飞书 Open ID"进行绑定。'));
+    }
+    console.log('');
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 绑定用户飞书 Open ID
+ */
+async function bindUserFeishuId() {
+    console.log(chalk_1.default.bold.cyan('\n🔗 绑定用户飞书 Open ID\n'));
+    // 显示当前状态
+    const userInfo = services_1.userService.getUserInfo();
+    if (userInfo.feishuBound) {
+        console.log(chalk_1.default.yellow('当前已绑定：'));
+        console.log(chalk_1.default.dim(`  Open ID: ${userInfo.feishuOpenId}`));
+        console.log('');
+        const { overwrite } = await inquirer_1.default.prompt([
+            {
+                type: 'confirm',
+                name: 'overwrite',
+                message: '是否要覆盖现有绑定？',
+                default: false
+            }
+        ]);
+        if (!overwrite) {
+            console.log(chalk_1.default.dim('\n已取消\n'));
+            await index_1.tuiUtils.waitForKey();
+            return;
+        }
+    }
+    // 说明如何获取 open_id
+    console.log(chalk_1.default.bold.yellow('📖 如何获取飞书 Open ID：\n'));
+    console.log(chalk_1.default.dim('方法一：查看 Gateway 日志'));
+    console.log(chalk_1.default.cyan('  1. 用户在飞书私聊机器人'));
+    console.log(chalk_1.default.cyan('  2. 查看 Gateway 日志，找到 open_id 字段'));
+    console.log(chalk_1.default.cyan('     命令: openclaw logs --follow'));
+    console.log('');
+    console.log(chalk_1.default.dim('方法二：通过飞书管理后台'));
+    console.log(chalk_1.default.cyan('  1. 进入飞书管理后台 > 成员管理'));
+    console.log(chalk_1.default.cyan('  2. 找到目标用户，查看用户详情'));
+    console.log(chalk_1.default.cyan('  3. 复制 Open ID（ou_xxx 格式）'));
+    console.log('');
+    // 输入 open_id
+    const { feishuOpenId } = await inquirer_1.default.prompt([
+        {
+            type: 'input',
+            name: 'feishuOpenId',
+            message: '请输入飞书 Open ID（ou_xxx 格式）：',
+            validate: (input) => {
+                if (!input.trim()) {
+                    return '请输入 Open ID';
+                }
+                if (!input.trim().startsWith('ou_')) {
+                    return 'Open ID 格式错误，应以 ou_ 开头';
+                }
+                return true;
+            }
+        }
+    ]);
+    // 可选：输入用户名
+    const { updateName, userName } = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'updateName',
+            message: '是否更新用户名？',
+            default: false
+        },
+        {
+            type: 'input',
+            name: 'userName',
+            message: '请输入用户名：',
+            when: (answers) => answers.updateName
+        }
+    ]);
+    // 执行绑定
+    const success = services_1.userService.bindFeishu(feishuOpenId.trim());
+    if (success) {
+        // 更新用户名
+        if (userName?.trim()) {
+            services_1.userService.updateName(userName.trim());
+        }
+        console.log(chalk_1.default.green('\n✓ 飞书账号绑定成功！\n'));
+        console.log(chalk_1.default.dim(`  Open ID: ${feishuOpenId}`));
+        if (userName?.trim()) {
+            console.log(chalk_1.default.dim(`  用户名: ${userName}`));
+        }
+        console.log('');
+        console.log(chalk_1.default.dim('现在总助理可以通过飞书私聊通知你了！'));
+    }
+    else {
+        console.log(chalk_1.default.red('\n✗ 绑定失败\n'));
+    }
+    console.log('');
+    await index_1.tuiUtils.waitForKey();
+}
+/**
+ * 解绑用户飞书
+ */
+async function unbindUserFeishu() {
+    console.log(chalk_1.default.bold.cyan('\n🔓 解绑用户飞书\n'));
+    const userInfo = services_1.userService.getUserInfo();
+    if (!userInfo.feishuBound) {
+        console.log(chalk_1.default.yellow('当前未绑定飞书账号\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    console.log(chalk_1.default.dim('当前绑定信息：'));
+    console.log(chalk_1.default.dim(`  Open ID: ${userInfo.feishuOpenId}`));
+    console.log('');
+    const { confirm } = await inquirer_1.default.prompt([
+        {
+            type: 'confirm',
+            name: 'confirm',
+            message: '确认解绑飞书账号？',
+            default: false
+        }
+    ]);
+    if (!confirm) {
+        console.log(chalk_1.default.dim('\n已取消\n'));
+        await index_1.tuiUtils.waitForKey();
+        return;
+    }
+    const success = services_1.userService.unbindFeishu();
+    if (success) {
+        console.log(chalk_1.default.green('\n✓ 飞书账号已解绑\n'));
+        console.log(chalk_1.default.dim('总助理将无法通过飞书私聊通知你。'));
+    }
+    else {
+        console.log(chalk_1.default.red('\n✗ 解绑失败\n'));
+    }
+    console.log('');
+    await index_1.tuiUtils.waitForKey();
+}
+//# sourceMappingURL=feishu.menu.js.map