A change generated with Claude Code and co-authored by Claude Opus 4.6 introduced the Feishu plugin's dynamic-agent creation, which writes new agents, sender bindings and their directories into the operator config without consulting the `resolveChannelConfigWrites` policy.

+};++/**

+  const existingBindings = cfg.bindings ?? [];+  const hasBinding = existingBindings.some(+    (b) =>+      b.match?.channel === "feishu" &&+      b.match?.peer?.kind === "dm" &&+      b.match?.peer?.id === senderOpenId,+  );++  if (hasBinding) {+    return { created: false, updatedCfg: cfg };+  }++  // Check maxAgents limit if configured+  if (dynamicCfg.maxAgents !== undefined) {+    const feishuAgentCount = (cfg.agents?.list ?? []).filter((a) =>+      a.id.startsWith("feishu-"),+    ).length;+    if (feishuAgentCount >= dynamicCfg.maxAgents) {+      log(+        `feishu: maxAgents limit (${dynamicCfg.maxAgents}) reached, not creating agent for ${senderOpenId}`,+      );+      return { created: false, updatedCfg: cfg };+    }+  }++  // Use full OpenID as agent ID suffix (OpenID format: ou_xxx is already filesystem-safe)+  const agentId = `feishu-${senderOpenId}`;++  // Check if agent already exists (but binding was missing)+  const existingAgent = (cfg.agents?.list ?? []).find((a) => a.id === agentId);+  if (existingAgent) {+    // Agent exists but binding doesn't - just add the binding+    log(`feishu: agent "${agentId}" exists, adding missing binding for ${senderOpenId}`);++    const updatedCfg: OpenClawConfig = {+      ...cfg,+      bindings: [+        ...existingBindings,+        {+          agentId,+          match: {+            channel: "feishu",+            peer: { kind: "dm", id: senderOpenId },+          },+        },+      ],+    };++    await runtime.config.writeConfigFile(updatedCfg);+    return { created: true, updatedCfg, agentId };+  }++  // Resolve path templates with substitutions+  const workspaceTemplate = dynamicCfg.workspaceTemplate ?? "~/.openclaw/workspace-{agentId}";+  const agentDirTemplate = dynamicCfg.agentDirTemplate ?? "~/.openclaw/agents/{agentId}/agent";++  const workspace = resolveUserPath(+    workspaceTemplate.replace("{userId}", senderOpenId).replace("{agentId}", agentId),+  );+  const agentDir = resolveUserPath(+    agentDirTemplate.replace("{userId}", senderOpenId).replace("{agentId}", agentId),+  );+

-import type { FeishuMessageContext, FeishuMediaInfo, ResolvedFeishuAccount } from "./types.js";+import type {+  FeishuConfig,+  FeishuMessageContext,+  FeishuMediaInfo,+  ResolvedFeishuAccount,+} from "./types.js";+import type { DynamicAgentCreationConfig } from "./types.js";

   resolveFeishuGroupConfig,@@ -21,6 +28,37 @@ import { createFeishuReplyDispatcher } from "./reply-dispatcher.js"; import { getFeishuRuntime } from "./runtime.js"; import { getMessageFeishu } from "./send.js"; +// --- Message deduplication ---+// Prevent duplicate processing when WebSocket reconnects or Feishu redelivers messages.+const DEDUP_TTL_MS = 30 * 60 * 1000; // 30 minutes+const DEDUP_MAX_SIZE = 1_000;+const DEDUP_CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // cleanup every 5 minutes+const processedMessageIds = new Map<string, number>(); // messageId -> timestamp+let lastCleanupTime = Date.now();++function tryRecordMessage(messageId: string): boolean {+  const now = Date.now();++  // Throttled cleanup: evict expired entries at most once per interval+  if (now - lastCleanupTime > DEDUP_CLEANUP_INTERVAL_MS) {+    for (const [id, ts] of processedMessageIds) {+      if (now - ts > DEDUP_TTL_MS) processedMessageIds.delete(id);+    }+    lastCleanupTime = now;+  }++  if (processedMessageIds.has(messageId)) return false;++  // Evict oldest entries if cache is full+  if (processedMessageIds.size >= DEDUP_MAX_SIZE) {+    const first = processedMessageIds.keys().next().value!;+    processedMessageIds.delete(first);+  }++  processedMessageIds.set(messageId, now);+  return true;+}+ // --- Permission error extraction --- // Extract permission grant URL from Feishu API error response. type PermissionError = {@@ -30,16 +68,12 @@ type PermissionError = { };  function extractPermissionError(err: unknown): PermissionError | null {-  if (!err || typeof err !== "object") {-    return null;-  }+  if (!err || typeof err !== "object") return null;    // Axios error structure: err.response.data contains the Feishu error   const axiosErr = err as { response?: { data?: unknown } };   const data = axiosErr.response?.data;-  if (!data || typeof data !== "object") {-    return null;-  }+  if (!data || typeof data !== "object") return null;    const feishuErr = data as {     code?: number;@@ -48,9 +82,7 @@ function extractPermissionError(err: unknown): PermissionError | null {   };    // Feishu permission error code: 99991672-  if (feishuErr.code !== 99991672) {-    return null;-  }+  if (feishuErr.code !== 99991672) return null;    // Extract the grant URL from the error message (contains the direct link)   const msg = feishuErr.msg ?? "";@@ -82,28 +114,20 @@ type SenderNameResult = { async function resolveFeishuSenderName(params: {

@@ -163,6 +164,11 @@ export async function handleFeishuCommentEvent(

+        }),         log: (message) => log(message),       });       if (dynamicResult.created) {