veadk-python 0.5.31__tar.gz → 0.5.33__tar.gz

{veadk_python-0.5.31 → veadk_python-0.5.33}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: veadk-python
-Version: 0.5.31
+Version: 0.5.33
 Summary: Volcengine agent development kit, integrations with Volcengine cloud services.
 Author-email: Yaozheng Fang <fangyozheng@gmail.com>, Guodong Li <cu.eric.lee@gmail.com>, Zhi Han <sliverydayday@gmail.com>, Meng Wang <mengwangwm@gmail.com>
 License:                                  Apache License
@@ -209,9 +209,9 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pydantic-settings==2.10.1
-Requires-Dist: a2a-sdk>=0.3.7
+Requires-Dist: a2a-sdk==0.3.7
 Requires-Dist: deprecated==1.2.18
-Requires-Dist: google-adk>=1.19.0
+Requires-Dist: google-adk==1.19.0
 Requires-Dist: litellm<=1.82.6,>=1.74.3
 Requires-Dist: loguru==0.7.3
 Requires-Dist: opentelemetry-exporter-otlp==1.37.0
@@ -243,6 +243,7 @@ Requires-Dist: llama-index-llms-openai-like==0.5.1; extra == "extensions"
 Requires-Dist: llama-index-vector-stores-redis>=0.6.1; extra == "extensions"
 Requires-Dist: llama-index-vector-stores-opensearch==0.6.1; extra == "extensions"
 Requires-Dist: opensearch-py==2.8.0; extra == "extensions"
+Requires-Dist: lark-oapi; extra == "extensions"
 Provides-Extra: database
 Requires-Dist: redis>=5.0; extra == "database"
 Requires-Dist: pymysql>=1.1.1; extra == "database"
@@ -343,6 +344,21 @@ res = asyncio.run(agent.run("hello!"))
 print(res)
 ```
 
+## Feishu bot channel
+
+VeADK now provides `veadk.extensions.FeishuChannelExtension` for bridging a Feishu bot with a `Runner`. It maps `union_id` to `user_id`, and `thread_id` / `chat_id` to `session_id`, so VeADK memory and tracing can work directly in Feishu conversations.
+
+```python
+from veadk import Agent, Runner
+from veadk.extensions import FeishuChannelExtension
+
+agent = Agent()
+runner = Runner(agent=agent, app_name="feishu_demo")
+channel = FeishuChannelExtension(runner=runner)
+```
+
+Configure credentials with `TOOL_FEISHU_CHANNEL_APP_ID` and `TOOL_FEISHU_CHANNEL_APP_SECRET`, or in `config.yaml` under `tool.feishu_channel`.
+
 ## Command line tools
 
 VeADK provides several useful command line tools for faster deployment and optimization, such as:
@@ -365,6 +381,11 @@ Before commit or push your changes, please make sure the unittests are passed ,o
 pytest -n 16
 ```
 
+## Security and privacy
+
+This project takes security seriously.
+For vulnerability reporting and supported versions, see [SECURITY.md](SECURITY.md)
+
 ## Contact with us
 
 Join our discussion group by scanning the QR code below:

{veadk_python-0.5.31 → veadk_python-0.5.33}/README.md

@@ -80,6 +80,21 @@ res = asyncio.run(agent.run("hello!"))
 print(res)
 ```
 
+## Feishu bot channel
+
+VeADK now provides `veadk.extensions.FeishuChannelExtension` for bridging a Feishu bot with a `Runner`. It maps `union_id` to `user_id`, and `thread_id` / `chat_id` to `session_id`, so VeADK memory and tracing can work directly in Feishu conversations.
+
+```python
+from veadk import Agent, Runner
+from veadk.extensions import FeishuChannelExtension
+
+agent = Agent()
+runner = Runner(agent=agent, app_name="feishu_demo")
+channel = FeishuChannelExtension(runner=runner)
+```
+
+Configure credentials with `TOOL_FEISHU_CHANNEL_APP_ID` and `TOOL_FEISHU_CHANNEL_APP_SECRET`, or in `config.yaml` under `tool.feishu_channel`.
+
 ## Command line tools
 
 VeADK provides several useful command line tools for faster deployment and optimization, such as:
@@ -102,6 +117,11 @@ Before commit or push your changes, please make sure the unittests are passed ,o
 pytest -n 16
 ```
 
+## Security and privacy
+
+This project takes security seriously.
+For vulnerability reporting and supported versions, see [SECURITY.md](SECURITY.md)
+
 ## Contact with us
 
 Join our discussion group by scanning the QR code below:

{veadk_python-0.5.31 → veadk_python-0.5.33}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "veadk-python"
-version = "0.5.31"
+version = "0.5.33"
 description = "Volcengine agent development kit, integrations with Volcengine cloud services."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -13,9 +13,9 @@ authors = [
 ]
 dependencies = [
     "pydantic-settings==2.10.1", # Config management
-    "a2a-sdk>=0.3.7", # For Google Agent2Agent protocol
+    "a2a-sdk==0.3.7", # For Google Agent2Agent protocol
     "deprecated==1.2.18",
-    "google-adk>=1.19.0", # For basic agent architecture
+    "google-adk==1.19.0", # For basic agent architecture
     "litellm>=1.74.3,<=1.82.6", # For model inference
     "loguru==0.7.3", # For better logging
     "opentelemetry-exporter-otlp==1.37.0",
@@ -53,6 +53,7 @@ extensions = [
     "llama-index-vector-stores-redis>=0.6.1",               # For Redis database
     "llama-index-vector-stores-opensearch==0.6.1",          # For Opensearch database
     "opensearch-py==2.8.0",
+    "lark-oapi",
 ]
 database = [
     "redis>=5.0",                   # For Redis database
@@ -97,4 +98,4 @@ include-package-data = true
 exclude = [
     "veadk/integrations/ve_faas/template/*",
     "veadk/integrations/ve_faas/web_template/*"
-]
+]

{veadk_python-0.5.31 → veadk_python-0.5.33}/tests/test_agent.py

@@ -13,7 +13,7 @@
 # limitations under the License.
 
 import os
-from unittest.mock import Mock, patch
+from unittest.mock import Mock, PropertyMock, patch
 
 from google.adk.agents.llm_agent import LlmAgent
 from google.adk.models.lite_llm import LiteLlm
@@ -76,19 +76,32 @@ def test_agent():
 
 @patch.dict("os.environ", {"MODEL_AGENT_API_KEY": "mock_api_key"})
 def test_agent_default_values():
-    agent = Agent()
-
-    assert agent.name == DEFAULT_AGENT_NAME
-
-    assert agent.model_name == DEFAULT_MODEL_AGENT_NAME
-    assert agent.model_provider == DEFAULT_MODEL_AGENT_PROVIDER
-    assert agent.model_api_base == DEFAULT_MODEL_AGENT_API_BASE
-
-    assert agent.tools == []
-    assert agent.sub_agents == []
-    assert agent.knowledgebase is None
-    assert agent.long_term_memory is None
-    # assert agent.tracers == []
+    with (
+        patch("veadk.agent.settings.model.name", new=DEFAULT_MODEL_AGENT_NAME),
+        patch("veadk.agent.settings.model.provider", new=DEFAULT_MODEL_AGENT_PROVIDER),
+        patch(
+            "veadk.agent.settings.model.api_base",
+            new=DEFAULT_MODEL_AGENT_API_BASE,
+        ),
+        patch(
+            "veadk.configs.model_configs.ModelConfig.api_key",
+            new_callable=PropertyMock,
+            return_value="mock_api_key",
+        ),
+    ):
+        agent = Agent()
+
+        assert agent.name == DEFAULT_AGENT_NAME
+
+        assert agent.model_name == DEFAULT_MODEL_AGENT_NAME
+        assert agent.model_provider == DEFAULT_MODEL_AGENT_PROVIDER
+        assert agent.model_api_base == DEFAULT_MODEL_AGENT_API_BASE
+
+        assert agent.tools == []
+        assert agent.sub_agents == []
+        assert agent.knowledgebase is None
+        assert agent.long_term_memory is None
+        # assert agent.tracers == []
 
 
 @patch.dict("os.environ", {"MODEL_AGENT_API_KEY": "mock_api_key"})

veadk_python-0.5.33/tests/test_feishu_channel_extension.py

@@ -0,0 +1,132 @@
+# Copyright (c) 2025 Beijing Volcano Engine Technology Co., Ltd. and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from types import SimpleNamespace
+
+import pytest
+
+from veadk.extensions.feishu_channel import FeishuChannelExtension
+
+
+class FakeChannel:
+    def __init__(self):
+        self.handlers = {}
+        self.sent_messages = []
+
+    def on(self, event_name, handler):
+        self.handlers[event_name] = handler
+
+    async def send(self, chat_id, body, options=None):
+        self.sent_messages.append((chat_id, body, options))
+
+
+class FakeRunner:
+    def __init__(self):
+        self.calls = []
+
+    async def run(self, messages, user_id="", session_id="", **kwargs):
+        self.calls.append(
+            {
+                "messages": messages,
+                "user_id": user_id,
+                "session_id": session_id,
+            }
+        )
+        return f"echo:{messages}"
+
+
+def build_message(**overrides):
+    message = SimpleNamespace(
+        id="om_001",
+        message_id="om_001",
+        chat_id="oc_chat",
+        chat_type="p2p",
+        thread_id="",
+        reply_to_message_id="",
+        content_text="你好",
+        sender_id="ou_sender",
+        sender=SimpleNamespace(
+            union_id="on_union",
+            open_id="ou_sender",
+            user_id="u_sender",
+        ),
+        conversation=SimpleNamespace(
+            chat_id="oc_chat",
+            chat_type="p2p",
+            thread_id="",
+        ),
+        reply=SimpleNamespace(message_id=""),
+    )
+    for key, value in overrides.items():
+        setattr(message, key, value)
+    return message
+
+
+@pytest.mark.asyncio
+async def test_extension_uses_union_id_and_thread_id():
+    runner = FakeRunner()
+    channel = FakeChannel()
+    extension = FeishuChannelExtension(runner=runner, channel=channel)
+
+    message = build_message(
+        thread_id="thread_1",
+        conversation=SimpleNamespace(
+            chat_id="oc_chat",
+            chat_type="group",
+            thread_id="thread_1",
+        ),
+    )
+
+    await extension._on_message(message)
+
+    assert runner.calls == [
+        {
+            "messages": "你好",
+            "user_id": "on_union",
+            "session_id": "thread_1",
+        }
+    ]
+    assert channel.sent_messages == [
+        ("oc_chat", {"text": "echo:你好"}, {"reply_to": "om_001"})
+    ]
+
+
+@pytest.mark.asyncio
+async def test_extension_falls_back_to_chat_id_when_thread_missing():
+    runner = FakeRunner()
+    channel = FakeChannel()
+    extension = FeishuChannelExtension(runner=runner, channel=channel)
+
+    message = build_message(
+        sender=SimpleNamespace(union_id="", open_id="ou_fallback", user_id="u_sender")
+    )
+
+    await extension._on_message(message)
+
+    assert runner.calls[0]["user_id"] == "ou_fallback"
+    assert runner.calls[0]["session_id"] == "oc_chat"
+
+
+@pytest.mark.asyncio
+async def test_extension_ignores_empty_message_by_default():
+    runner = FakeRunner()
+    channel = FakeChannel()
+    extension = FeishuChannelExtension(runner=runner, channel=channel)
+
+    message = build_message(content_text="   ")
+
+    await extension._on_message(message)
+
+    assert runner.calls == []
+    assert channel.sent_messages == []

veadk_python-0.5.33/veadk/extensions/__init__.py

@@ -0,0 +1,17 @@
+# Copyright (c) 2025 Beijing Volcano Engine Technology Co., Ltd. and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from veadk.extensions.feishu_channel import FeishuChannelExtension
+
+__all__ = ["FeishuChannelExtension"]

veadk_python-0.5.33/veadk/extensions/feishu_channel.py

@@ -0,0 +1,289 @@
+# Copyright (c) 2025 Beijing Volcano Engine Technology Co., Ltd. and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import inspect
+import os
+from dataclasses import dataclass
+from typing import TYPE_CHECKING, Any, Awaitable, Callable
+
+from veadk.utils.logger import get_logger
+
+if TYPE_CHECKING:
+    from veadk.runner import Runner
+
+logger = get_logger(__name__)
+
+MessageHandler = Callable[["FeishuMessageContext"], Awaitable[str | None] | str | None]
+SessionIdFactory = Callable[[Any], str]
+UserIdFactory = Callable[[Any], str]
+
+
+def _coalesce(*values: Any) -> str:
+    for value in values:
+        if value:
+            return str(value)
+    return ""
+
+
+def _read_attr(obj: Any, *path: str) -> Any:
+    current = obj
+    for key in path:
+        if current is None:
+            return None
+        current = getattr(current, key, None)
+    return current
+
+
+@dataclass(slots=True)
+class FeishuMessageContext:
+    message_id: str
+    chat_id: str
+    chat_type: str
+    thread_id: str
+    reply_to_message_id: str
+    user_id: str
+    session_id: str
+    union_id: str
+    open_id: str
+    raw_message: Any
+    text: str
+
+
+class FeishuChannelExtension:
+    """Bridge a Feishu bot channel with a VeADK runner.
+
+    The extension subscribes to normalized ``message`` events from
+    ``lark_oapi.channel.FeishuChannel`` and forwards the incoming text to a VeADK
+    ``Runner``. It maps Feishu sender identity to VeADK ``user_id`` and Feishu
+    conversation/thread identity to VeADK ``session_id`` so existing short-term
+    memory, long-term memory and tracing continue to work without changes.
+    """
+
+    def __init__(
+        self,
+        runner: "Runner",
+        *,
+        app_id: str | None = None,
+        app_secret: str | None = None,
+        channel: Any | None = None,
+        session_id_factory: SessionIdFactory | None = None,
+        user_id_factory: UserIdFactory | None = None,
+        message_handler: MessageHandler | None = None,
+        response_formatter: Callable[[str], dict[str, str]] | None = None,
+        reply_in_thread: bool = True,
+        ignore_empty_messages: bool = True,
+        channel_kwargs: dict[str, Any] | None = None,
+    ) -> None:
+        self.runner = runner
+        self.session_id_factory = session_id_factory or self.default_session_id_factory
+        self.user_id_factory = user_id_factory or self.default_user_id_factory
+        self.message_handler = message_handler
+        self.response_formatter = response_formatter or self.default_response_formatter
+        self.reply_in_thread = reply_in_thread
+        self.ignore_empty_messages = ignore_empty_messages
+
+        if channel is not None:
+            self.channel = channel
+        else:
+            self.channel = self._build_channel(
+                app_id=app_id,
+                app_secret=app_secret,
+                channel_kwargs=channel_kwargs,
+            )
+
+        self.channel.on("message", self._on_message)
+
+    @staticmethod
+    def default_user_id_factory(message: Any) -> str:
+        sender = _read_attr(message, "sender")
+        user_id = _coalesce(
+            getattr(sender, "union_id", None),
+            getattr(sender, "open_id", None),
+            getattr(sender, "user_id", None),
+            getattr(message, "sender_id", None),
+        )
+        if user_id:
+            return user_id
+        raise ValueError("Cannot resolve Feishu sender identity into a VeADK user_id.")
+
+    @staticmethod
+    def default_session_id_factory(message: Any) -> str:
+        thread_id = _coalesce(
+            _read_attr(message, "conversation", "thread_id"),
+            getattr(message, "thread_id", None),
+            getattr(message, "reply_to_message_id", None),
+        )
+        chat_id = _coalesce(
+            getattr(message, "chat_id", None),
+            _read_attr(message, "conversation", "chat_id"),
+        )
+        return thread_id or chat_id or getattr(message, "message_id", "")
+
+    @staticmethod
+    def default_response_formatter(text: str) -> dict[str, str]:
+        return {"text": text}
+
+    async def connect(self) -> Any:
+        return await self._maybe_await(self.channel.connect())
+
+    async def disconnect(self) -> Any:
+        disconnect = getattr(self.channel, "disconnect", None)
+        if disconnect is None:
+            return None
+        result = disconnect()
+        if inspect.isawaitable(result):
+            return await result
+        return result
+
+    async def handle_webhook_request(
+        self, headers: dict[str, str], body: bytes | str
+    ) -> Any:
+        handler = getattr(self.channel, "handle_webhook_request", None)
+        if handler is None:
+            raise AttributeError("Current channel does not support webhook requests.")
+        result = handler(headers, body)
+        if inspect.isawaitable(result):
+            return await result
+        return result
+
+    async def _on_message(self, message: Any) -> None:
+        text = str(getattr(message, "content_text", "") or "").strip()
+        if self.ignore_empty_messages and not text:
+            logger.debug(
+                f"Ignore empty Feishu message: {getattr(message, 'message_id', '')}"
+            )
+            return
+
+        context = self.build_message_context(message=message, text=text)
+
+        if self.message_handler is not None:
+            response_text = await self._maybe_await(self.message_handler(context))
+        else:
+            response_text = await self.runner.run(
+                messages=context.text,
+                user_id=context.user_id,
+                session_id=context.session_id,
+            )
+
+        if not response_text:
+            return
+
+        send_options = {}
+        if self.reply_in_thread and context.message_id:
+            send_options["reply_to"] = context.message_id
+
+        await self._maybe_await(
+            self.channel.send(
+                context.chat_id,
+                self.response_formatter(str(response_text)),
+                send_options,
+            )
+        )
+
+    def build_message_context(
+        self, message: Any, text: str | None = None
+    ) -> FeishuMessageContext:
+        user_id = self.user_id_factory(message)
+        session_id = self.session_id_factory(message)
+        message_id = _coalesce(
+            getattr(message, "message_id", None),
+            getattr(message, "id", None),
+        )
+        chat_id = _coalesce(
+            getattr(message, "chat_id", None),
+            _read_attr(message, "conversation", "chat_id"),
+        )
+        chat_type = _coalesce(
+            getattr(message, "chat_type", None),
+            _read_attr(message, "conversation", "chat_type"),
+        )
+        thread_id = _coalesce(
+            getattr(message, "thread_id", None),
+            _read_attr(message, "conversation", "thread_id"),
+        )
+        reply_to_message_id = _coalesce(
+            getattr(message, "reply_to_message_id", None),
+            _read_attr(message, "reply", "message_id"),
+        )
+        union_id = _coalesce(_read_attr(message, "sender", "union_id"))
+        open_id = _coalesce(
+            _read_attr(message, "sender", "open_id"),
+            getattr(message, "sender_id", None),
+        )
+
+        return FeishuMessageContext(
+            message_id=message_id,
+            chat_id=chat_id,
+            chat_type=chat_type,
+            thread_id=thread_id,
+            reply_to_message_id=reply_to_message_id,
+            user_id=user_id,
+            session_id=session_id,
+            union_id=union_id,
+            open_id=open_id,
+            raw_message=message,
+            text=text
+            if text is not None
+            else str(getattr(message, "content_text", "") or ""),
+        )
+
+    def _build_channel(
+        self,
+        *,
+        app_id: str | None,
+        app_secret: str | None,
+        channel_kwargs: dict[str, Any] | None,
+    ) -> Any:
+        try:
+            from lark_oapi.channel import FeishuChannel
+        except ImportError as exc:
+            raise ImportError(
+                "Feishu channel extension requires `lark-oapi`. "
+                "Install `veadk-python[extensions]` or `pip install lark-oapi`."
+            ) from exc
+
+        resolved_app_id = (
+            app_id
+            or os.getenv("TOOL_FEISHU_CHANNEL_APP_ID")
+            or os.getenv("TOOL_LARK_ENDPOINT")
+        )
+        resolved_app_secret = (
+            app_secret
+            or os.getenv("TOOL_FEISHU_CHANNEL_APP_SECRET")
+            or os.getenv("TOOL_LARK_API_KEY")
+        )
+
+        if not resolved_app_id or not resolved_app_secret:
+            raise ValueError(
+                "Missing Feishu app credentials. Set `app_id` / `app_secret` or configure "
+                "`TOOL_FEISHU_CHANNEL_APP_ID` / `TOOL_FEISHU_CHANNEL_APP_SECRET` "
+                "(compatible fallback: `TOOL_LARK_ENDPOINT` / `TOOL_LARK_API_KEY`)."
+            )
+
+        resolved_channel_kwargs = dict(channel_kwargs or {})
+        resolved_channel_kwargs.setdefault(
+            "transport", os.getenv("TOOL_FEISHU_CHANNEL_TRANSPORT", "ws")
+        )
+
+        return FeishuChannel(
+            app_id=resolved_app_id,
+            app_secret=resolved_app_secret,
+            **resolved_channel_kwargs,
+        )
+
+    @staticmethod
+    async def _maybe_await(value: Any) -> Any:
+        if inspect.isawaitable(value):
+            return await value
+        return value

{veadk_python-0.5.31 → veadk_python-0.5.33}/veadk/version.py

@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-VERSION = "0.5.31"
+VERSION = "0.5.33"

{veadk_python-0.5.31 → veadk_python-0.5.33}/veadk_python.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: veadk-python
-Version: 0.5.31
+Version: 0.5.33
 Summary: Volcengine agent development kit, integrations with Volcengine cloud services.
 Author-email: Yaozheng Fang <fangyozheng@gmail.com>, Guodong Li <cu.eric.lee@gmail.com>, Zhi Han <sliverydayday@gmail.com>, Meng Wang <mengwangwm@gmail.com>
 License:                                  Apache License
@@ -209,9 +209,9 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pydantic-settings==2.10.1
-Requires-Dist: a2a-sdk>=0.3.7
+Requires-Dist: a2a-sdk==0.3.7
 Requires-Dist: deprecated==1.2.18
-Requires-Dist: google-adk>=1.19.0
+Requires-Dist: google-adk==1.19.0
 Requires-Dist: litellm<=1.82.6,>=1.74.3
 Requires-Dist: loguru==0.7.3
 Requires-Dist: opentelemetry-exporter-otlp==1.37.0
@@ -243,6 +243,7 @@ Requires-Dist: llama-index-llms-openai-like==0.5.1; extra == "extensions"
 Requires-Dist: llama-index-vector-stores-redis>=0.6.1; extra == "extensions"
 Requires-Dist: llama-index-vector-stores-opensearch==0.6.1; extra == "extensions"
 Requires-Dist: opensearch-py==2.8.0; extra == "extensions"
+Requires-Dist: lark-oapi; extra == "extensions"
 Provides-Extra: database
 Requires-Dist: redis>=5.0; extra == "database"
 Requires-Dist: pymysql>=1.1.1; extra == "database"
@@ -343,6 +344,21 @@ res = asyncio.run(agent.run("hello!"))
 print(res)
 ```
 
+## Feishu bot channel
+
+VeADK now provides `veadk.extensions.FeishuChannelExtension` for bridging a Feishu bot with a `Runner`. It maps `union_id` to `user_id`, and `thread_id` / `chat_id` to `session_id`, so VeADK memory and tracing can work directly in Feishu conversations.
+
+```python
+from veadk import Agent, Runner
+from veadk.extensions import FeishuChannelExtension
+
+agent = Agent()
+runner = Runner(agent=agent, app_name="feishu_demo")
+channel = FeishuChannelExtension(runner=runner)
+```
+
+Configure credentials with `TOOL_FEISHU_CHANNEL_APP_ID` and `TOOL_FEISHU_CHANNEL_APP_SECRET`, or in `config.yaml` under `tool.feishu_channel`.
+
 ## Command line tools
 
 VeADK provides several useful command line tools for faster deployment and optimization, such as:
@@ -365,6 +381,11 @@ Before commit or push your changes, please make sure the unittests are passed ,o
 pytest -n 16
 ```
 
+## Security and privacy
+
+This project takes security seriously.
+For vulnerability reporting and supported versions, see [SECURITY.md](SECURITY.md)
+
 ## Contact with us
 
 Join our discussion group by scanning the QR code below: