AI-written Feishu thread and quoted-message fetching bypassed the sender allowlist, letting unapproved remote senders expose context to recipients.

+        kind: isGroup ? "group" : "dm",+        id: isGroup ? ctx.chatId : ctx.senderOpenId,+      },+    });++    const preview = ctx.content.replace(/\s+/g, " ").slice(0, 160);+    const inboundLabel = isGroup+      ? `Feishu message in group ${ctx.chatId}`+      : `Feishu DM from ${ctx.senderOpenId}`;++    core.system.enqueueSystemEvent(`${inboundLabel}: ${preview}`, {+      sessionKey: route.sessionKey,+      contextKey: `feishu:message:${ctx.chatId}:${ctx.messageId}`,+    });++    // Fetch quoted/replied message content if parentId exists+    let quotedContent: string | undefined;+    if (ctx.parentId) {+      try {+        const quotedMsg = await getMessageFeishu({ cfg, messageId: ctx.parentId });+        if (quotedMsg) {+          quotedContent = quotedMsg.content;+          log(`feishu: fetched quoted message: ${quotedContent?.slice(0, 100)}`);+        }+      } catch (err) {+        log(`feishu: failed to fetch quoted message: ${String(err)}`);+      }+    }++    const envelopeOptions = core.channel.reply.resolveEnvelopeFormatOptions(cfg);++    // Build message body with quoted content if available+    let messageBody = ctx.content;+    if (quotedContent) {+      messageBody = `[Replying to: "${quotedContent}"]\n\n${ctx.content}`;+    }++    const body = core.channel.reply.formatAgentEnvelope({+      channel: "Feishu",+      from: isGroup ? ctx.chatId : ctx.senderOpenId,+      timestamp: new Date(),+      envelope: envelopeOptions,+      body: messageBody,+    });++    let combinedBody = body;+    const historyKey = isGroup ? ctx.chatId : undefined;++    if (isGroup && historyKey && chatHistories) {+      combinedBody = buildPendingHistoryContextFromMap({+        historyMap: chatHistories,+        historyKey,+        limit: historyLimit,+        currentMessage: combinedBody,+        formatEntry: (entry) =>+          core.channel.reply.formatAgentEnvelope({+            channel: "Feishu",+            from: ctx.chatId,+            timestamp: entry.timestamp,+            body: `${entry.sender}: ${entry.body}`,+            envelope: envelopeOptions,+          }),+      });+    }++    const ctxPayload = core.channel.reply.finalizeInboundContext({

+      ChatType: isGroup ? "group" : "direct",+      GroupSubject: isGroup ? ctx.chatId : undefined,+      SenderName: ctx.senderOpenId,

+  senderType?: string;+}): boolean {+  if (!params.isGroup || params.allowFrom.length === 0) {+    return true;+  }+  if (params.senderType === "app") {+    return true;+  }+  const senderId = params.senderId?.trim();

+    senderName: undefined,+  });+}++function filterFetchedGroupContextMessages<+  T extends Pick<FeishuMessageInfo, "senderId" | "senderType">,+>(+  messages: readonly T[],+  params: {+    isGroup: boolean;+    allowFrom: Array<string | number>;

+      senderType: message.senderType,+    }),+  );+}+ export async function handleFeishuMessage(params: {   cfg: ClawdbotConfig;   event: FeishuMessageEvent;@@ -337,6 +380,11 @@ export async function handleFeishuMessage(params: {   const groupConfig = isGroup     ? resolveFeishuGroupConfig({ cfg: feishuCfg, groupId: ctx.chatId })     : undefined;+  const effectiveGroupSenderAllowFrom = isGroup+    ? (groupConfig?.allowFrom?.length ?? 0) > 0+      ? (groupConfig?.allowFrom ?? [])+      : (feishuCfg?.groupSenderAllowFrom ?? [])+    : [];   const groupSession = isGroup     ? resolveFeishuGroupSession({         chatId: ctx.chatId,@@ -402,14 +450,10 @@ export async function handleFeishuMessage(params: {     }      // Sender-level allowlist: per-group allowFrom takes precedence, then global groupSenderAllowFrom-    const perGroupSenderAllowFrom = groupConfig?.allowFrom ?? [];-    const globalSenderAllowFrom = feishuCfg?.groupSenderAllowFrom ?? [];-    const effectiveSenderAllowFrom =

         senderId: ctx.senderOpenId,         senderIds: [senderUserId],         senderName: ctx.senderName,@@ -691,11 +735,23 @@ export async function handleFeishuMessage(params: {           messageId: ctx.parentId,           accountId: account.accountId,         });