openclaw-lark-multi-agent 1.8.18 → 1.8.19

package/dist/bot-identity.d.ts

@@ -0,0 +1,6 @@
+import type { BotConfig } from "./config.js";
+/** Includes SDK authentication requests, not just the final bot-info HTTP call.
+ * A separate transport keeps the identity deadline away from normal sends. */
+export declare function requestBotIdentity(config: BotConfig, signal: AbortSignal, timeout: number): Promise<unknown>;
+/** Only original-account API evidence establishes identity. Names never do. */
+export declare function trustedBotOpenId(response: any, appId: string): string | null;

package/dist/bot-identity.js

@@ -0,0 +1,25 @@
+import * as lark from "@larksuiteoapi/node-sdk";
+/** Includes SDK authentication requests, not just the final bot-info HTTP call.
+ * A separate transport keeps the identity deadline away from normal sends. */
+export async function requestBotIdentity(config, signal, timeout) {
+    const request = (options) => lark.defaultHttpInstance.request({ ...options, timeout, signal });
+    const transport = { request };
+    for (const method of ["get", "delete", "head", "options"]) {
+        transport[method] = (url, options) => request({ ...options, method, url });
+    }
+    for (const method of ["post", "put", "patch"]) {
+        transport[method] = (url, data, options) => request({ ...options, method, url, data });
+    }
+    const client = new lark.Client({ appId: config.appId, appSecret: config.appSecret,
+        appType: lark.AppType.SelfBuild, httpInstance: transport });
+    return client.request({ method: "GET", url: "/open-apis/bot/v3/info/" });
+}
+/** Only original-account API evidence establishes identity. Names never do. */
+export function trustedBotOpenId(response, appId) {
+    if (response?.code !== undefined && response.code !== 0)
+        return null;
+    const bot = response?.bot ?? response?.data?.bot;
+    if (bot?.app_id !== undefined && bot.app_id !== appId)
+        return null;
+    return typeof bot?.open_id === "string" && /^ou_[a-zA-Z0-9]+$/.test(bot.open_id) ? bot.open_id : null;
+}

package/dist/feishu-bot.d.ts

@@ -23,6 +23,21 @@ export declare class FeishuBot {
     private openclawClient;
     private store;
     private botOpenId;
+    private identityClosed;
+    private identityRetryTimer?;
+    private identityFlight?;
+    private identityAbort?;
+    private identityNextProbeAt;
+    private identityFailures;
+    private identityDrain?;
+    private identityDrainRetry;
+    private identityDrainNextAt;
+    private identityDrainFailures;
+    private identityCaptures;
+    private identityTargetRepairs;
+    private identitySessionWaiters;
+    private readonly identityEffects;
+    private requestIdentity;
     /** Tracks which chatId sessions have been initialized */
     private initializedSessions;
     /** Per-chat busy lock: timestamp when became busy (0 = not busy) */
@@ -119,9 +134,24 @@ export declare class FeishuBot {
      * Start the Feishu WS connection. Sessions are created lazily per chat.
      */
     start(): Promise<void>;
-    /** Resolve this bot's open_id at startup so direct @bot mentions work even
-     * when Feishu mention payloads omit app_id and only contain open_id/name. */
+    /** Local custody repair only. This never authorizes replay of a claimed event
+     * or re-probes an already known identity. The journal remains the sole owner. */
+    private retryIdentityIngress;
+    /** Bounded, read-only public metadata. Late responses never write custody. */
+    private identitySessionInfo;
+    private captureIdentityTarget;
+    private assertIdentityCurrent;
+    private assertIdentityEffect;
+    /** One background timer per bot covers both discovery and local journal
+     * repair; every asynchronous AND synchronous timer effect is owned. */
+    private scheduleIdentityProbe;
+    /** Bounded observation AND cancellable HTTP (including token discovery).
+     * Even a nonconforming transport ignoring abort retains single-flight custody
+     * until it settles; we never accumulate timed-out requests or trust late data. */
     private probeBotIdentity;
+    /** Metadata may say who was targeted, but can never say who THIS bot is. */
+    private needsIdentityRecovery;
+    private drainIdentityIngress;
     /**
      * On startup, check all known chats for unsynced messages and process them.
      * Also re-subscribe to known sessions for tool events.
@@ -131,6 +161,7 @@ export declare class FeishuBot {
     static getByName(name: string): FeishuBot | undefined;
     static findByOpenId(openId: string): FeishuBot | undefined;
     private handleMessage;
+    private handleResolvedMessage;
     /** Separate guarded-admission proof. Aggregate busy never becomes idle. */
     private observedFollowupGuard;
     /** A positive refusal must be durable AND explained to the sender. */