sealclaw 2026.7.28 → 2026.7.30

package/CHANGELOG.md

@@ -109,6 +109,9 @@ Docs: https://docs.openclaw.ai
 
 ### Fixes
 
+- Control UI/Feishu: detect when the installed lark-cli is still bound to a previous Feishu application after credential reconfiguration, require fresh authorization, and pass the active App ID explicitly when rebinding so CLI sends use the newly selected application.
+- Feishu: resolve ambiguous `private` message events through the chat API's `chat_mode` before routing, so private groups remain group sessions while true one-to-one chats and lookup failures retain direct-message safeguards.
+- Feishu/Gateway: stop prompt-segment tracing from looping past end-of-input when group mention metadata is the final prompt block, preventing one processed group message from starving the Gateway event loop.
 - Control UI/Models: accept nullable and string-valued optional metadata from the SeaSeek model catalog so production refreshes replace stale persisted model lists instead of failing Gateway validation.
 - Control UI/Skill Center: match installed store skills by stable skill id before name so renamed skills correctly show the available update action.
 - Agents/compaction: recognize Codex's `input exceeds the context window` response as recoverable context overflow so OpenClaw compacts and retries the current message instead of surfacing the provider error and waiting for another turn.

package/dist/abort-DO7JdvT6.js

@@ -0,0 +1,201 @@
+import { c as normalizeOptionalString, s as normalizeOptionalLowercaseString } from "./string-coerce-Bje8XVt9.js";
+import { a as formatErrorMessage } from "./errors-D58q7G6U.js";
+import { s as parseAgentSessionKey } from "./session-key-utils-XZPVMWQh.js";
+import { p as resolveSessionAgentId } from "./agent-scope-Bqcr9I3t.js";
+import { r as logVerbose } from "./globals-a-nBRc1P.js";
+import { u as resolveStorePath } from "./paths-DAJwv63N.js";
+import { t as loadSessionStore } from "./store-load-BYZSJ2CB.js";
+import { d as resolveSessionStoreEntry, o as updateSessionStore } from "./store-CwbbWvNb.js";
+import "./sessions-Dxh_1FJv.js";
+import { n as abortEmbeddedPiRun, y as replyRunRegistry } from "./runs-C6CdVbfv.js";
+import { n as getAcpSessionManager } from "./manager-DpFOVw-3.js";
+import { c as resolveMainSessionAlias, s as resolveInternalSessionKey } from "./sessions-helpers-DKv-d276.js";
+import { s as clearSessionQueues } from "./queue-G-PmC6Du.js";
+import { f as markSubagentRunTerminated, o as getLatestSubagentRunByChildSessionKey, u as listSubagentRunsForController } from "./subagent-registry-B1FiYs52.js";
+import { o as stripMentions, s as stripStructuralPrefixes } from "./mentions-C_rH78Xj.js";
+import { i as setAbortMemory, n as isAbortRequestText } from "./abort-primitives-DsY42urp.js";
+import { t as resolveCommandAuthorization } from "./command-auth-Cac5pqcp.js";
+import { a as shouldPersistAbortCutoff, i as resolveAbortCutoffFromContext, t as applyAbortCutoffToSessionEntry } from "./abort-cutoff-BDLY3Lm8.js";
+const abortDeps = {
+	getAcpSessionManager,
+	abortEmbeddedPiRun,
+	getLatestSubagentRunByChildSessionKey,
+	listSubagentRunsForController,
+	markSubagentRunTerminated
+};
+function formatAbortReplyText(stoppedSubagents) {
+	if (typeof stoppedSubagents !== "number" || stoppedSubagents <= 0) return "⚙️ Agent was aborted.";
+	return `⚙️ Agent was aborted. Stopped ${stoppedSubagents} ${stoppedSubagents === 1 ? "sub-agent" : "sub-agents"}.`;
+}
+function resolveSessionEntryForKey(store, sessionKey) {
+	if (!store || !sessionKey) return {};
+	const resolved = resolveSessionStoreEntry({
+		store,
+		sessionKey
+	});
+	if (resolved.existing) return resolved.legacyKeys.length > 0 ? {
+		entry: resolved.existing,
+		key: resolved.normalizedKey,
+		legacyKeys: resolved.legacyKeys
+	} : {
+		entry: resolved.existing,
+		key: resolved.normalizedKey
+	};
+	return {};
+}
+function normalizeRequesterSessionKey(cfg, key) {
+	const cleaned = normalizeOptionalString(key);
+	if (!cleaned) return;
+	const { mainKey, alias } = resolveMainSessionAlias(cfg);
+	return resolveInternalSessionKey({
+		key: cleaned,
+		alias,
+		mainKey
+	});
+}
+function stopSubagentsForRequester(params) {
+	const requesterKey = normalizeRequesterSessionKey(params.cfg, params.requesterSessionKey);
+	if (!requesterKey) return { stopped: 0 };
+	const dedupedRunsByChildKey = /* @__PURE__ */ new Map();
+	for (const run of abortDeps.listSubagentRunsForController(requesterKey)) {
+		const childKey = normalizeOptionalString(run.childSessionKey);
+		if (!childKey) continue;
+		const latest = abortDeps.getLatestSubagentRunByChildSessionKey(childKey);
+		if (!latest) {
+			const existing = dedupedRunsByChildKey.get(childKey);
+			if (!existing || run.createdAt >= existing.createdAt) dedupedRunsByChildKey.set(childKey, run);
+			continue;
+		}
+		const latestControllerSessionKey = normalizeOptionalString(latest?.controllerSessionKey) ?? normalizeOptionalString(latest?.requesterSessionKey);
+		if (latest.runId !== run.runId || latestControllerSessionKey !== requesterKey) continue;
+		const existing = dedupedRunsByChildKey.get(childKey);
+		if (!existing || run.createdAt >= existing.createdAt) dedupedRunsByChildKey.set(childKey, run);
+	}
+	const runs = Array.from(dedupedRunsByChildKey.values());
+	if (runs.length === 0) return { stopped: 0 };
+	const storeCache = /* @__PURE__ */ new Map();
+	const seenChildKeys = /* @__PURE__ */ new Set();
+	let stopped = 0;
+	for (const run of runs) {
+		const childKey = normalizeOptionalString(run.childSessionKey);
+		if (!childKey || seenChildKeys.has(childKey)) continue;
+		seenChildKeys.add(childKey);
+		if (!run.endedAt) {
+			const cleared = clearSessionQueues([childKey]);
+			const parsed = parseAgentSessionKey(childKey);
+			const storePath = resolveStorePath(params.cfg.session?.store, { agentId: parsed?.agentId });
+			let store = storeCache.get(storePath);
+			if (!store) {
+				store = loadSessionStore(storePath);
+				storeCache.set(storePath, store);
+			}
+			const entry = store[childKey];
+			const sessionId = replyRunRegistry.resolveSessionId(childKey) ?? entry?.sessionId;
+			const aborted = (childKey ? replyRunRegistry.abort(childKey) : false) || (sessionId ? abortDeps.abortEmbeddedPiRun(sessionId) : false);
+			if (abortDeps.markSubagentRunTerminated({
+				runId: run.runId,
+				childSessionKey: childKey,
+				reason: "killed"
+			}) > 0 || aborted || cleared.followupCleared > 0 || cleared.laneCleared > 0) stopped += 1;
+		}
+		const cascadeResult = stopSubagentsForRequester({
+			cfg: params.cfg,
+			requesterSessionKey: childKey
+		});
+		stopped += cascadeResult.stopped;
+	}
+	if (stopped > 0) logVerbose(`abort: stopped ${stopped} subagent run(s) for ${requesterKey}`);
+	return { stopped };
+}
+async function tryFastAbortFromMessage(params) {
+	const { ctx, cfg } = params;
+	const targetKey = normalizeOptionalString(ctx.CommandTargetSessionKey) ?? normalizeOptionalString(ctx.SessionKey);
+	const raw = stripStructuralPrefixes(ctx.CommandBody ?? ctx.RawBody ?? ctx.Body ?? "");
+	if (!isAbortRequestText(normalizeOptionalLowercaseString(ctx.ChatType) === "group" ? stripMentions(raw, ctx, cfg, resolveSessionAgentId({
+		sessionKey: targetKey ?? ctx.SessionKey ?? "",
+		config: cfg
+	})) : raw)) return {
+		handled: false,
+		aborted: false
+	};
+	const commandAuthorized = ctx.CommandAuthorized;
+	const auth = resolveCommandAuthorization({
+		ctx,
+		cfg,
+		commandAuthorized
+	});
+	if (!auth.isAuthorizedSender) return {
+		handled: false,
+		aborted: false
+	};
+	const agentId = resolveSessionAgentId({
+		sessionKey: targetKey ?? ctx.SessionKey ?? "",
+		config: cfg
+	});
+	const abortKey = targetKey ?? auth.from ?? auth.to;
+	const requesterSessionKey = targetKey ?? ctx.SessionKey ?? abortKey;
+	if (targetKey) {
+		const storePath = resolveStorePath(cfg.session?.store, { agentId });
+		const store = loadSessionStore(storePath);
+		const { entry, key, legacyKeys } = resolveSessionEntryForKey(store, targetKey);
+		const resolvedTargetKey = key ?? targetKey;
+		const acpManager = abortDeps.getAcpSessionManager();
+		if (acpManager.resolveSession({
+			cfg,
+			sessionKey: resolvedTargetKey
+		}).kind !== "none") try {
+			await acpManager.cancelSession({
+				cfg,
+				sessionKey: resolvedTargetKey,
+				reason: "fast-abort"
+			});
+		} catch (error) {
+			logVerbose(`abort: ACP cancel failed for ${resolvedTargetKey}: ${formatErrorMessage(error)}`);
+		}
+		const sessionId = replyRunRegistry.resolveSessionId(resolvedTargetKey) ?? entry?.sessionId;
+		const aborted = replyRunRegistry.abort(resolvedTargetKey) || (sessionId ? abortDeps.abortEmbeddedPiRun(sessionId) : false);
+		const cleared = clearSessionQueues([resolvedTargetKey, sessionId]);
+		if (cleared.followupCleared > 0 || cleared.laneCleared > 0) logVerbose(`abort: cleared followups=${cleared.followupCleared} lane=${cleared.laneCleared} keys=${cleared.keys.join(",")}`);
+		const abortCutoff = shouldPersistAbortCutoff({
+			commandSessionKey: ctx.SessionKey,
+			targetSessionKey: resolvedTargetKey
+		}) ? resolveAbortCutoffFromContext(ctx) : void 0;
+		if (entry && key) {
+			entry.abortedLastRun = true;
+			applyAbortCutoffToSessionEntry(entry, abortCutoff);
+			entry.updatedAt = Date.now();
+			store[key] = entry;
+			for (const legacyKey of legacyKeys ?? []) if (legacyKey !== key) delete store[legacyKey];
+			await updateSessionStore(storePath, (nextStore) => {
+				const nextEntry = nextStore[key] ?? entry;
+				if (!nextEntry) return;
+				nextEntry.abortedLastRun = true;
+				applyAbortCutoffToSessionEntry(nextEntry, abortCutoff);
+				nextEntry.updatedAt = Date.now();
+				nextStore[key] = nextEntry;
+				for (const legacyKey of legacyKeys ?? []) if (legacyKey !== key) delete nextStore[legacyKey];
+			});
+		} else if (abortKey) setAbortMemory(abortKey, true);
+		const { stopped } = stopSubagentsForRequester({
+			cfg,
+			requesterSessionKey
+		});
+		return {
+			handled: true,
+			aborted,
+			stoppedSubagents: stopped
+		};
+	}
+	if (abortKey) setAbortMemory(abortKey, true);
+	const { stopped } = stopSubagentsForRequester({
+		cfg,
+		requesterSessionKey
+	});
+	return {
+		handled: true,
+		aborted: false,
+		stoppedSubagents: stopped
+	};
+}
+//#endregion
+export { tryFastAbortFromMessage as i, resolveSessionEntryForKey as n, stopSubagentsForRequester as r, formatAbortReplyText as t };

package/dist/abort-cutoff.runtime-CyRo1V2_.js

@@ -0,0 +1,20 @@
+import { o as updateSessionStore } from "./store-CwbbWvNb.js";
+import { n as hasAbortCutoff, t as applyAbortCutoffToSessionEntry } from "./abort-cutoff-BDLY3Lm8.js";
+//#region src/auto-reply/reply/abort-cutoff.runtime.ts
+async function clearAbortCutoffInSessionRuntime(params) {
+	const { sessionEntry, sessionStore, sessionKey, storePath } = params;
+	if (!sessionEntry || !sessionStore || !sessionKey || !hasAbortCutoff(sessionEntry)) return false;
+	applyAbortCutoffToSessionEntry(sessionEntry, void 0);
+	sessionEntry.updatedAt = Date.now();
+	sessionStore[sessionKey] = sessionEntry;
+	if (storePath) await updateSessionStore(storePath, (store) => {
+		const existing = store[sessionKey] ?? sessionEntry;
+		if (!existing) return;
+		applyAbortCutoffToSessionEntry(existing, void 0);
+		existing.updatedAt = Date.now();
+		store[sessionKey] = existing;
+	});
+	return true;
+}
+//#endregion
+export { clearAbortCutoffInSessionRuntime };

package/dist/abort-cutoff.runtime.js

@@ -1 +1 @@
-export * from "./abort-cutoff.runtime-CJSdsZjn.js";
+export * from "./abort-cutoff.runtime-CyRo1V2_.js";

package/dist/abort.runtime-BS0sUVZ6.js

@@ -0,0 +1,2 @@
+import { i as tryFastAbortFromMessage, t as formatAbortReplyText } from "./abort-DO7JdvT6.js";
+export { formatAbortReplyText, tryFastAbortFromMessage };

package/dist/abort.runtime.js

@@ -1 +1 @@
-export * from "./abort.runtime-DZI0k0Cv.js";
+export * from "./abort.runtime-BS0sUVZ6.js";

package/dist/accounts-8AfjIXel.js

@@ -0,0 +1,2 @@
+import { s as resolveFeishuAccount } from "./accounts-mmubi9Q_.js";
+export { resolveFeishuAccount };

package/dist/accounts-mmubi9Q_.js

@@ -0,0 +1,416 @@
+import { c as normalizeOptionalString, f as readStringValue } from "./string-coerce-Bje8XVt9.js";
+import { c as isRecord$1 } from "./utils-Cqo7291Q.js";
+import { a as coerceSecretRef } from "./types.secrets-DSMjvwjM.js";
+import { n as normalizeAccountId, r as normalizeOptionalAccountId, t as DEFAULT_ACCOUNT_ID } from "./account-id-DYyLENsu.js";
+import "./provider-auth-vt_wjjGe.js";
+import "./text-runtime-CCok03WE.js";
+import { s as resolveMergedAccountConfig, t as createAccountListHelpers } from "./account-helpers-CHeJGMNv.js";
+import "./account-resolution-BCm6JqCS.js";
+//#region extensions/feishu/src/comment-target.ts
+const FEISHU_COMMENT_FILE_TYPES = [
+	"doc",
+	"docx",
+	"file",
+	"sheet",
+	"slides"
+];
+function normalizeCommentFileType(value) {
+	return typeof value === "string" && FEISHU_COMMENT_FILE_TYPES.includes(value) ? value : void 0;
+}
+function buildFeishuCommentTarget(params) {
+	return `comment:${params.fileType}:${params.fileToken}:${params.commentId}`;
+}
+function parseFeishuCommentTarget(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed?.startsWith("comment:")) return null;
+	const parts = trimmed.split(":");
+	if (parts.length !== 4) return null;
+	const fileType = normalizeCommentFileType(parts[1]);
+	const fileToken = parts[2]?.trim();
+	const commentId = parts[3]?.trim();
+	if (!fileType || !fileToken || !commentId) return null;
+	return {
+		fileType,
+		fileToken,
+		commentId
+	};
+}
+//#endregion
+//#region extensions/feishu/src/comment-shared.ts
+function encodeQuery(params) {
+	const query = new URLSearchParams();
+	for (const [key, value] of Object.entries(params)) {
+		const trimmed = value?.trim();
+		if (trimmed) query.set(key, trimmed);
+	}
+	const queryString = query.toString();
+	return queryString ? `?${queryString}` : "";
+}
+const readString = readStringValue;
+const normalizeString = normalizeOptionalString;
+const isRecord = isRecord$1;
+function formatFeishuApiError(error, options = {}) {
+	if (!isRecord(error)) return typeof error === "string" ? error : JSON.stringify(error);
+	const config = isRecord(error.config) ? error.config : void 0;
+	const response = isRecord(error.response) ? error.response : void 0;
+	const responseData = isRecord(response?.data) ? response?.data : void 0;
+	const feishuLogId = readString(responseData?.log_id) || (options.includeNestedErrorLogId ? readString(isRecord(responseData?.error) ? responseData.error.log_id : void 0) : void 0);
+	const nestedError = isRecord(responseData?.error) ? responseData.error : void 0;
+	return JSON.stringify({
+		message: typeof error.message === "string" ? error.message : typeof error === "string" ? error : JSON.stringify(error),
+		code: readString(error.code),
+		method: readString(config?.method),
+		url: readString(config?.url),
+		...options.includeConfigParams ? { params: config?.params } : {},
+		http_status: typeof response?.status === "number" ? response.status : void 0,
+		feishu_code: typeof responseData?.code === "number" ? responseData.code : readString(responseData?.code),
+		feishu_msg: readString(responseData?.msg),
+		feishu_log_id: feishuLogId,
+		feishu_troubleshooter: readString(responseData?.troubleshooter) || readString(nestedError?.troubleshooter)
+	});
+}
+function formatFeishuApiFailure(error, errorPrefix, options = {}) {
+	return `${errorPrefix}: ${formatFeishuApiError(error, options) || "unknown error"}`;
+}
+function createFeishuApiError(error, errorPrefix, options = {}) {
+	return new Error(formatFeishuApiFailure(error, errorPrefix, options), { cause: error });
+}
+async function requestFeishuApi(request, errorPrefix, options = {}) {
+	try {
+		return await request();
+	} catch (error) {
+		throw createFeishuApiError(error, errorPrefix, options);
+	}
+}
+function readDocsLinkUrl(element) {
+	const docsLink = isRecord(element.docs_link) ? element.docs_link : void 0;
+	return normalizeString(docsLink?.url) || normalizeString(docsLink?.link) || normalizeString(element.url) || normalizeString(element.link) || void 0;
+}
+function readMentionUserId(element) {
+	const mention = isRecord(element.mention) ? element.mention : void 0;
+	return normalizeString((isRecord(element.person) ? element.person : void 0)?.user_id) || normalizeString(mention?.user_id) || normalizeString(mention?.open_id) || normalizeString(element.mention_user) || normalizeString(element.user_id) || void 0;
+}
+function readMentionDisplayText(element, userId) {
+	const mention = isRecord(element.mention) ? element.mention : void 0;
+	const mentionName = normalizeString(mention?.name) || normalizeString(mention?.display_name) || normalizeString(element.name);
+	return mentionName ? `@${mentionName}` : `@${userId}`;
+}
+function normalizeCommentText(parts) {
+	return parts.join("").trim() || void 0;
+}
+function normalizeCommentSemanticText(parts) {
+	return parts.join("").replace(/\s+/g, " ").trim() || void 0;
+}
+function readElementTextPreservingWhitespace(element) {
+	return (isRecord(element.text_run) ? readString(element.text_run.content) || readString(element.text_run.text) : void 0) || readString(element.text) || readString(element.content) || readString(element.name) || void 0;
+}
+const FEISHU_LINK_TOKEN_MIN_LENGTH = 22;
+const FEISHU_LINK_TOKEN_MAX_LENGTH = 28;
+const COMMENT_LINK_KIND_ALIASES = new Map([
+	["doc", "doc"],
+	["docs", "doc"],
+	["docx", "docx"],
+	["sheet", "sheet"],
+	["sheets", "sheet"],
+	["slide", "slides"],
+	["slides", "slides"],
+	["file", "file"],
+	["files", "file"],
+	["wiki", "wiki"],
+	["mindnote", "mindnote"],
+	["mindnotes", "mindnote"],
+	["bitable", "bitable"],
+	["base", "base"]
+]);
+function isCommentFileType(value) {
+	return typeof value === "string" && FEISHU_COMMENT_FILE_TYPES.includes(value);
+}
+function isReasonableFeishuLinkToken(token) {
+	return typeof token === "string" && token.length >= FEISHU_LINK_TOKEN_MIN_LENGTH && token.length <= FEISHU_LINK_TOKEN_MAX_LENGTH;
+}
+function parseCommentLinkedDocumentPath(pathname) {
+	const segments = pathname.split("/").map((segment) => segment.trim()).filter(Boolean);
+	const offset = segments[0]?.toLowerCase() === "space" ? 1 : 0;
+	const kind = COMMENT_LINK_KIND_ALIASES.get(segments[offset]?.toLowerCase() ?? "");
+	const token = normalizeString(segments[offset + 1]);
+	if (!kind || !isReasonableFeishuLinkToken(token)) return null;
+	return {
+		urlKind: kind,
+		token
+	};
+}
+function hasResolvedLinkedDocumentReference(link) {
+	return link.urlKind !== "unknown" && (Boolean(link.resolvedObjToken) || Boolean(link.wikiNodeToken));
+}
+function resolveCommentLinkedDocumentFromUrl(params) {
+	const link = {
+		rawUrl: params.rawUrl,
+		urlKind: "unknown"
+	};
+	try {
+		const parsedPath = parseCommentLinkedDocumentPath(new URL(params.rawUrl).pathname);
+		if (!parsedPath) return link;
+		const { urlKind, token } = parsedPath;
+		link.urlKind = urlKind;
+		if (urlKind === "wiki") {
+			link.urlKind = "wiki";
+			link.wikiNodeToken = token;
+		} else {
+			link.resolvedObjType = urlKind;
+			link.resolvedObjToken = token;
+		}
+		if (link.resolvedObjType && link.resolvedObjToken && isCommentFileType(link.resolvedObjType) && params.currentDocument?.fileType === link.resolvedObjType && params.currentDocument.fileToken === link.resolvedObjToken) link.isCurrentDocument = true;
+		else if (link.resolvedObjType && link.resolvedObjToken && isCommentFileType(link.resolvedObjType)) link.isCurrentDocument = false;
+	} catch {
+		return link;
+	}
+	return link;
+}
+function parseCommentContentElements(params) {
+	const elements = Array.isArray(params.elements) ? params.elements : [];
+	const plainTextParts = [];
+	const semanticTextParts = [];
+	const mentions = [];
+	const linkedDocuments = [];
+	const botIds = new Set(Array.from(params.botOpenIds ?? []).map((value) => normalizeString(value)).filter((value) => Boolean(value)));
+	const linkedDocumentKeys = /* @__PURE__ */ new Set();
+	let botMentioned = false;
+	for (const rawElement of elements) {
+		if (!isRecord(rawElement)) continue;
+		const element = rawElement;
+		const type = normalizeString(element.type);
+		const text = (type === "text_run" ? readElementTextPreservingWhitespace(element) : void 0) || (type === "text" ? readElementTextPreservingWhitespace(element) : void 0) || (type === "docs_link" || type === "link" ? readDocsLinkUrl(element) : void 0) || (type === "mention" || type === "mention_user" || type === "person" ? (() => {
+			const userId = readMentionUserId(element);
+			return userId ? readMentionDisplayText(element, userId) : void 0;
+		})() : void 0) || readElementTextPreservingWhitespace(element) || void 0;
+		if (type === "mention" || type === "mention_user" || type === "person") {
+			const userId = readMentionUserId(element);
+			if (userId) {
+				const displayText = readMentionDisplayText(element, userId);
+				const isBotMention = botIds.has(userId);
+				mentions.push({
+					userId,
+					displayText,
+					isBotMention
+				});
+				plainTextParts.push(displayText);
+				if (!isBotMention) semanticTextParts.push(displayText);
+				else botMentioned = true;
+				continue;
+			}
+		}
+		if (type === "docs_link" || type === "link") {
+			const rawUrl = readDocsLinkUrl(element);
+			if (rawUrl) {
+				plainTextParts.push(rawUrl);
+				semanticTextParts.push(rawUrl);
+				const linkedDocument = resolveCommentLinkedDocumentFromUrl({
+					rawUrl,
+					currentDocument: params.currentDocument
+				});
+				if (hasResolvedLinkedDocumentReference(linkedDocument)) {
+					const key = [
+						linkedDocument.rawUrl,
+						linkedDocument.urlKind,
+						linkedDocument.resolvedObjType,
+						linkedDocument.resolvedObjToken,
+						linkedDocument.wikiNodeToken
+					].join(":");
+					if (!linkedDocumentKeys.has(key)) {
+						linkedDocumentKeys.add(key);
+						linkedDocuments.push(linkedDocument);
+					}
+				}
+				continue;
+			}
+		}
+		if (text) {
+			plainTextParts.push(text);
+			semanticTextParts.push(text);
+		}
+	}
+	return {
+		plainText: normalizeCommentText(plainTextParts),
+		semanticText: normalizeCommentSemanticText(semanticTextParts),
+		mentions,
+		linkedDocuments,
+		botMentioned
+	};
+}
+function extractReplyText(reply) {
+	if (!reply || !isRecord(reply.content)) return;
+	return parseCommentContentElements({ elements: Array.isArray(reply.content.elements) ? reply.content.elements : [] }).plainText;
+}
+//#endregion
+//#region extensions/feishu/src/accounts.ts
+const { listAccountIds: listFeishuAccountIds, resolveDefaultAccountId } = createAccountListHelpers("feishu", { allowUnlistedDefaultAccount: true });
+function formatSecretRefLabel(ref) {
+	return `${ref.source}:${ref.provider}:${ref.id}`;
+}
+var FeishuSecretRefUnavailableError = class extends Error {
+	constructor(path, ref) {
+		super(`${path}: unresolved SecretRef "${formatSecretRefLabel(ref)}". Resolve this command against an active gateway runtime snapshot before reading it.`);
+		this.name = "FeishuSecretRefUnavailableError";
+		this.path = path;
+	}
+};
+function resolveFeishuSecretLike(params) {
+	const asString = normalizeString(params.value);
+	if (asString) return asString;
+	const ref = coerceSecretRef(params.value);
+	if (!ref) return;
+	if (params.mode === "inspect") {
+		if (params.allowEnvSecretRefRead && ref.source === "env") {
+			const envValue = normalizeString(process.env[ref.id]);
+			if (envValue) return envValue;
+		}
+		return;
+	}
+	throw new FeishuSecretRefUnavailableError(params.path, ref);
+}
+function resolveFeishuBaseCredentials(cfg, mode) {
+	const appId = resolveFeishuSecretLike({
+		value: cfg?.appId,
+		path: "channels.feishu.appId",
+		mode,
+		allowEnvSecretRefRead: true
+	});
+	const appSecret = resolveFeishuSecretLike({
+		value: cfg?.appSecret,
+		path: "channels.feishu.appSecret",
+		mode,
+		allowEnvSecretRefRead: true
+	});
+	if (!appId || !appSecret) return null;
+	return {
+		appId,
+		appSecret,
+		domain: cfg?.domain ?? "feishu"
+	};
+}
+function resolveFeishuEventSecrets(cfg, mode) {
+	return {
+		encryptKey: (cfg?.connectionMode ?? "websocket") === "webhook" ? resolveFeishuSecretLike({
+			value: cfg?.encryptKey,
+			path: "channels.feishu.encryptKey",
+			mode,
+			allowEnvSecretRefRead: true
+		}) : normalizeString(cfg?.encryptKey),
+		verificationToken: resolveFeishuSecretLike({
+			value: cfg?.verificationToken,
+			path: "channels.feishu.verificationToken",
+			mode,
+			allowEnvSecretRefRead: true
+		})
+	};
+}
+/**
+* Resolve the default account selection and its source.
+*/
+function resolveDefaultFeishuAccountSelection(cfg) {
+	const preferred = normalizeOptionalAccountId((cfg.channels?.feishu)?.defaultAccount);
+	if (preferred) return {
+		accountId: preferred,
+		source: "explicit-default"
+	};
+	const ids = listFeishuAccountIds(cfg);
+	if (ids.includes("default")) return {
+		accountId: DEFAULT_ACCOUNT_ID,
+		source: "mapped-default"
+	};
+	return {
+		accountId: ids[0] ?? "default",
+		source: "fallback"
+	};
+}
+/**
+* Resolve the default account ID.
+*/
+function resolveDefaultFeishuAccountId(cfg) {
+	return resolveDefaultAccountId(cfg);
+}
+/**
+* Merge top-level config with account-specific config.
+* Account-specific fields override top-level fields.
+*/
+function mergeFeishuAccountConfig(cfg, accountId) {
+	const feishuCfg = cfg.channels?.feishu;
+	return resolveMergedAccountConfig({
+		channelConfig: feishuCfg,
+		accounts: feishuCfg?.accounts,
+		accountId,
+		omitKeys: ["defaultAccount"]
+	});
+}
+function resolveFeishuCredentials(cfg, options) {
+	const mode = options?.mode ?? (options?.allowUnresolvedSecretRef ? "inspect" : "strict");
+	const base = resolveFeishuBaseCredentials(cfg, mode);
+	if (!base) return null;
+	const eventSecrets = resolveFeishuEventSecrets(cfg, mode);
+	return {
+		...base,
+		...eventSecrets
+	};
+}
+function inspectFeishuCredentials(cfg) {
+	return resolveFeishuCredentials(cfg, { mode: "inspect" });
+}
+function buildResolvedFeishuAccount(params) {
+	const hasExplicitAccountId = typeof params.accountId === "string" && params.accountId.trim() !== "";
+	const defaultSelection = hasExplicitAccountId ? null : resolveDefaultFeishuAccountSelection(params.cfg);
+	const accountId = hasExplicitAccountId ? normalizeAccountId(params.accountId) : defaultSelection?.accountId ?? "default";
+	const selectionSource = hasExplicitAccountId ? "explicit" : defaultSelection?.source ?? "fallback";
+	const baseEnabled = (params.cfg.channels?.feishu)?.enabled !== false;
+	const merged = mergeFeishuAccountConfig(params.cfg, accountId);
+	const accountEnabled = merged.enabled !== false;
+	const enabled = baseEnabled && accountEnabled;
+	const baseCreds = resolveFeishuBaseCredentials(merged, params.baseMode);
+	const eventSecrets = resolveFeishuEventSecrets(merged, params.eventSecretMode);
+	const accountName = merged.name;
+	return {
+		accountId,
+		selectionSource,
+		enabled,
+		configured: Boolean(baseCreds),
+		name: typeof accountName === "string" ? accountName.trim() || void 0 : void 0,
+		appId: baseCreds?.appId,
+		appSecret: baseCreds?.appSecret,
+		encryptKey: eventSecrets.encryptKey,
+		verificationToken: eventSecrets.verificationToken,
+		domain: baseCreds?.domain ?? "feishu",
+		config: merged
+	};
+}
+/**
+* Resolve a read-only Feishu account snapshot for CLI/config surfaces.
+* Unresolved SecretRefs are treated as unavailable instead of throwing.
+*/
+function resolveFeishuAccount(params) {
+	return buildResolvedFeishuAccount({
+		...params,
+		baseMode: "inspect",
+		eventSecretMode: "inspect"
+	});
+}
+/**
+* Resolve a runtime Feishu account.
+* Required app credentials stay strict; event-only secrets can be required by callers.
+*/
+function resolveFeishuRuntimeAccount(params, options) {
+	return buildResolvedFeishuAccount({
+		...params,
+		baseMode: "strict",
+		eventSecretMode: options?.requireEventSecrets ? "strict" : "inspect"
+	});
+}
+/**
+* List all enabled and configured accounts.
+*/
+function listEnabledFeishuAccounts(cfg) {
+	return listFeishuAccountIds(cfg).map((accountId) => resolveFeishuAccount({
+		cfg,
+		accountId
+	})).filter((account) => account.enabled && account.configured);
+}
+//#endregion
+export { readString as _, resolveDefaultFeishuAccountId as a, normalizeCommentFileType as b, resolveFeishuCredentials as c, encodeQuery as d, extractReplyText as f, parseCommentContentElements as g, normalizeString as h, listFeishuAccountIds as i, resolveFeishuRuntimeAccount as l, isRecord as m, inspectFeishuCredentials as n, resolveDefaultFeishuAccountSelection as o, formatFeishuApiError as p, listEnabledFeishuAccounts as r, resolveFeishuAccount as s, FeishuSecretRefUnavailableError as t, createFeishuApiError as u, requestFeishuApi as v, parseFeishuCommentTarget as x, buildFeishuCommentTarget as y };