@barryfan2045/dsh-matrix 0.1.0

package/dist/bridge/turn-commands.js

@@ -0,0 +1,97 @@
+/** "/name args…" 的极简解析;非斜杠开头的文本返回 undefined。 */
+export function parseTurnCommand(text) {
+    const trimmed = text.trim();
+    if (!trimmed.startsWith('/'))
+        return undefined;
+    const space = trimmed.indexOf(' ');
+    const name = space === -1 ? trimmed : trimmed.slice(0, space);
+    const args = space === -1 ? '' : trimmed.slice(space + 1).trim();
+    return { name, args };
+}
+/** Collapse a queue entry to one bounded line for chat display. */
+function truncateLine(text, max = 120) {
+    const oneLine = text.replace(/\s+/g, ' ').trim();
+    return oneLine.length > max ? `${oneLine.slice(0, max)}…` : oneLine;
+}
+/**
+ * /stop 与 /interrupt 的队列播报:keepInbox 取消保留 pending 项,它们将在
+ * 下一轮生效 —— 必须显式列出,避免"背刺式"延迟执行(pi-courier 同款 UX)。
+ */
+function queueWarning(items) {
+    if (items.length === 0)
+        return null;
+    const lines = items.map((m) => `- ${truncateLine(m.text)}`);
+    return `⚠️ 队列中仍有 ${items.length} 条消息将在下一轮生效:\n${lines.join('\n')}`;
+}
+function formatQueueView(items) {
+    if (items.length === 0)
+        return '📋 队列为空:没有排队中的消息。';
+    const steering = items.filter((i) => i.kind === 'steer');
+    const followUp = items.filter((i) => i.kind === 'queue');
+    const lines = ['📋 当前消息队列:'];
+    if (steering.length > 0) {
+        lines.push(`steering(${steering.length} 条,注入当前运行):`);
+        for (const m of steering)
+            lines.push(`- ${truncateLine(m.text)}`);
+    }
+    if (followUp.length > 0) {
+        lines.push(`followUp(${followUp.length} 条,后续轮次执行):`);
+        for (const m of followUp)
+            lines.push(`- ${truncateLine(m.text)}`);
+    }
+    return lines.join('\n');
+}
+/** 起一个回合并把最终回答作为回帖文本返回(命令内部的"当普通消息"路径)。 */
+async function runTurn(session, text) {
+    session.prompt(text);
+    await session.whenIdle();
+    return session.lastReply() ?? '(本轮没有文本输出)';
+}
+/** Names owned by this table (pipeline uses it to keep the T4 router from
+ * claiming /stop etc.). Values keep the leading slash, matching parseTurnCommand. */
+export const TURN_COMMANDS = new Set(['/stop', '/abort', '/queue', '/interrupt', '/last']);
+export async function handleTurnCommand(name, args, ctx) {
+    const { session } = ctx;
+    switch (name) {
+        case '/stop':
+        case '/abort': {
+            if (!session.isRunning())
+                return 'ℹ️ 当前没有运行中的任务';
+            // keepInbox = pi abort 语义:只掐当前回合,不动队列
+            session.cancel({ keepInbox: true });
+            const warning = queueWarning(session.queuedItems());
+            return warning ? `⏹️ 已停止\n${warning}` : '⏹️ 已停止';
+        }
+        case '/queue': {
+            if (!args)
+                return formatQueueView(session.queuedItems());
+            if (session.isRunning()) {
+                // DSH followup 在 running 时天然排到下一轮(Alt+Enter 语义)
+                session.prompt(args);
+                return '📥 已排队:不打断当前任务,将在空闲后自动执行。';
+            }
+            return runTurn(session, args);
+        }
+        case '/interrupt': {
+            if (!args)
+                return '用法: /interrupt <新指令> — 中断当前回合并立即下发新指令。';
+            if (!session.isRunning())
+                return runTurn(session, args);
+            session.cancel({ keepInbox: true });
+            await session.whenIdle();
+            const answer = await runTurn(session, args);
+            const warning = queueWarning(session.queuedItems());
+            const head = `⏸️ 已中断当前任务并发送新指令\n\n${answer}`;
+            return warning ? `${head}\n${warning}` : head;
+        }
+        case '/last': {
+            const last = session.lastReply()?.trim();
+            if (!last)
+                return '💤 没有可复述的回复(本会话还没有 assistant 输出)。';
+            return last.length > 3000 ? `${last.slice(0, 3000)}\n…(已截断)` : last;
+        }
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=turn-commands.js.map

package/dist/bridge/turn-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-commands.js","sourceRoot":"","sources":["../../src/bridge/turn-commands.ts"],"names":[],"mappings":"AAwBA,gDAAgD;AAChD,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAChE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAED,mEAAmE;AACnE,SAAS,YAAY,CAAC,IAAY,EAAE,GAAG,GAAG,GAAG;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAChD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,KAA4B;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3D,OAAO,YAAY,KAAK,CAAC,MAAM,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AACpE,CAAC;AAED,SAAS,eAAe,CAAC,KAA4B;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,mBAAmB,CAAA;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAA;IACxD,MAAM,KAAK,GAAa,CAAC,YAAY,CAAC,CAAA;IACtC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAA;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,YAAY,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAA;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,2CAA2C;AAC3C,KAAK,UAAU,OAAO,CAAC,OAAsB,EAAE,IAAY;IACzD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACpB,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;IACxB,OAAO,OAAO,CAAC,SAAS,EAAE,IAAI,YAAY,CAAA;AAC5C,CAAC;AAED;qFACqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAY,EACZ,GAAuB;IAEvB,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAA;IACvB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBAAE,OAAO,eAAe,CAAA;YAChD,sCAAsC;YACtC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;YACnD,OAAO,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAA;QAClD,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,CAAC,IAAI;gBAAE,OAAO,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;YACxD,IAAI,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBACxB,gDAAgD;gBAChD,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBACpB,OAAO,2BAA2B,CAAA;YACpC,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC/B,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,IAAI;gBAAE,OAAO,wCAAwC,CAAA;YAC1D,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YACvD,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAA;YACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,uBAAuB,MAAM,EAAE,CAAA;YAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/C,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAA;YACxC,IAAI,CAAC,IAAI;gBAAE,OAAO,mCAAmC,CAAA;YACrD,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAA;QACrE,CAAC;QAED;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC"}

package/dist/cli/config-store.d.ts

@@ -0,0 +1,32 @@
+export type OpsLogLevel = 'debug' | 'info' | 'warn' | 'error';
+export interface OpsConfig {
+    /** 实例名 = dsh profile 名(~/.dsh/profiles/<profile>),默认 "matrix"。 */
+    profile: string;
+    homeserver: string;
+    /** 登录方式一:用户名 + 密码(桥启动时换取 token)。 */
+    username?: string;
+    password?: string;
+    /** 登录方式二:直接粘贴 access token。 */
+    accessToken?: string;
+    trustedUsers: string[];
+    workdir: string;
+    logLevel?: OpsLogLevel;
+}
+/** dsh 的家目录(与 dsh 一致:DSH_HOME 覆盖,默认 ~/.dsh)。 */
+export declare function dshHome(homedir?: string): string;
+export declare function opsConfigPath(homedir?: string): string;
+/** pi-courier 的旧配置文件路径(US41 迁移源):~/.pi/pi-courier.json。 */
+export declare function piCourierConfigPath(homedir?: string): string;
+/**
+ * 把 pi-courier 的配置对象映射成本包的 OpsConfig(US41)。
+ *
+ * 同构字段直接搬(homeserver/accessToken/trustedUsers/workdir/logLevel);
+ * pi 专属字段(cliPath/sessionDir/hideToolCalls/multiProject 等)一律丢弃。
+ * 缺 homeserver 视为不可迁移,返回 null。
+ */
+export declare function migratePiCourierConfig(raw: unknown, profile?: string, homedir?: string): OpsConfig | null;
+/** 读配置;文件不存在时先尝试从 pi-courier 旧配置迁移,仍无则返回 null。权限过开(组/其他可读)时告警。 */
+export declare function loadOpsConfig(homedir?: string): OpsConfig | null;
+/** 写配置(0600)。返回写入路径。目录不存在时以 0700 创建。 */
+export declare function saveOpsConfig(cfg: OpsConfig, homedir?: string): string;
+//# sourceMappingURL=config-store.d.ts.map

package/dist/cli/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/cli/config-store.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAE7D,MAAM,WAAW,SAAS;IACxB,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,WAAW,CAAA;CACvB;AAED,gDAAgD;AAChD,wBAAgB,OAAO,CAAC,OAAO,GAAE,MAAqB,GAAG,MAAM,CAI9D;AAED,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,MAAqB,GAAG,MAAM,CAE1E;AAOD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,OAAO,SAAW,EAClB,OAAO,GAAE,MAAqB,GAC7B,SAAS,GAAG,IAAI,CAgClB;AAqBD,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAchE;AAED,wCAAwC;AACxC,wBAAgB,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAQtE"}

package/dist/cli/config-store.js

@@ -0,0 +1,118 @@
+/**
+ * 运维配置存储:~/.dsh/dsh-matrix.json(权限 0600)。
+ *
+ * 这是 CLI 侧的"运维真相源":setup 写它,enable/status/install-profile 读它。
+ * 桥运行时的配置仍走 cordis patch 行(src/config.ts loadConfig,不改);
+ * install-profile 负责把这里的值生成 profile 的 cordis.patch.yml 覆盖块。
+ *
+ * 0600 读写与不安全权限告警移植自 pi-courier src/config.ts 的 loadConfig/
+ * saveConfig(第 9-100 行),语义改为 DSH 目录。
+ */
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+/** dsh 的家目录(与 dsh 一致:DSH_HOME 覆盖,默认 ~/.dsh)。 */
+export function dshHome(homedir = os.homedir()) {
+    const envHome = process.env.DSH_HOME;
+    if (envHome && envHome.trim())
+        return path.resolve(envHome.trim());
+    return path.join(homedir, '.dsh');
+}
+export function opsConfigPath(homedir) {
+    return path.join(dshHome(homedir), 'dsh-matrix.json');
+}
+/** pi-courier 的旧配置文件路径(US41 迁移源):~/.pi/pi-courier.json。 */
+export function piCourierConfigPath(homedir = os.homedir()) {
+    return path.join(homedir, '.pi', 'pi-courier.json');
+}
+/** pi-courier 的 trustedUsers 带 matrix: 前缀,迁移时剥掉成 MXID。 */
+function stripMatrixPrefix(user) {
+    return user.startsWith('matrix:') ? user.slice('matrix:'.length) : user;
+}
+/**
+ * 把 pi-courier 的配置对象映射成本包的 OpsConfig(US41)。
+ *
+ * 同构字段直接搬(homeserver/accessToken/trustedUsers/workdir/logLevel);
+ * pi 专属字段(cliPath/sessionDir/hideToolCalls/multiProject 等)一律丢弃。
+ * 缺 homeserver 视为不可迁移,返回 null。
+ */
+export function migratePiCourierConfig(raw, profile = 'matrix', homedir = os.homedir()) {
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const r = raw;
+    const matrix = typeof r.matrix === 'object' && r.matrix !== null ? r.matrix : {};
+    const auth = typeof r.auth === 'object' && r.auth !== null ? r.auth : {};
+    const homeserver = typeof matrix.homeserverUrl === 'string' && matrix.homeserverUrl
+        ? matrix.homeserverUrl
+        : typeof r.homeserver === 'string' && r.homeserver
+            ? r.homeserver
+            : undefined;
+    if (!homeserver)
+        return null;
+    const trustedRaw = auth.trustedUsers ?? r.trustedUsers;
+    const trustedUsers = Array.isArray(trustedRaw)
+        ? trustedRaw.map(String).map(stripMatrixPrefix)
+        : typeof trustedRaw === 'string'
+            ? trustedRaw.split(',').map((s) => s.trim()).filter(Boolean).map(stripMatrixPrefix)
+            : [];
+    const lvl = r.logLevel;
+    const logLevel = lvl === 'debug' || lvl === 'info' || lvl === 'warn' || lvl === 'error' ? lvl : undefined;
+    return {
+        profile,
+        homeserver,
+        ...(typeof matrix.accessToken === 'string' && matrix.accessToken ? { accessToken: matrix.accessToken } : {}),
+        trustedUsers,
+        workdir: typeof r.workdir === 'string' && r.workdir ? r.workdir : path.join(homedir, 'Projects'),
+        ...(logLevel ? { logLevel } : {}),
+    };
+}
+/**
+ * 当 ~/.dsh/dsh-matrix.json 不存在时,尝试从 pi-courier 旧配置迁移(US41):
+ * 迁移成功会写出新配置(0600)并返回;旧文件原样保留。
+ */
+function migratePiCourierIfPresent(homedir) {
+    const legacy = piCourierConfigPath(homedir);
+    if (!fs.existsSync(legacy))
+        return null;
+    try {
+        const migrated = migratePiCourierConfig(JSON.parse(fs.readFileSync(legacy, 'utf-8')), 'matrix', homedir);
+        if (!migrated)
+            return null;
+        const target = saveOpsConfig(migrated, homedir);
+        console.warn('ℹ️  检测到 pi-courier 旧配置 ' + legacy + ',已迁移到 ' + target + '(旧文件保留未动)。');
+        return migrated;
+    }
+    catch (err) {
+        console.error('❌ 迁移 pi-courier 配置 ' + legacy + ' 失败: ' + err.message);
+        return null;
+    }
+}
+/** 读配置;文件不存在时先尝试从 pi-courier 旧配置迁移,仍无则返回 null。权限过开(组/其他可读)时告警。 */
+export function loadOpsConfig(homedir) {
+    const file = opsConfigPath(homedir);
+    if (!fs.existsSync(file))
+        return migratePiCourierIfPresent(homedir);
+    try {
+        const mode = fs.statSync(file).mode & 0o777;
+        if ((mode & 0o077) !== 0) {
+            console.warn(`⚠️  ${file} 权限为 ${mode.toString(8).padStart(4, '0')},含密码/token,应为 0600。已自动收紧。`);
+            fs.chmodSync(file, 0o600);
+        }
+        return JSON.parse(fs.readFileSync(file, 'utf-8'));
+    }
+    catch (err) {
+        console.error(`❌ 读取 ${file} 失败: ${err.message}`);
+        return null;
+    }
+}
+/** 写配置(0600)。返回写入路径。目录不存在时以 0700 创建。 */
+export function saveOpsConfig(cfg, homedir) {
+    const dir = dshHome(homedir);
+    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = opsConfigPath(homedir);
+    // 已存在的文件 writeFileSync 不改权限,写完统一显式 chmod,保证 0600。
+    fs.writeFileSync(file, JSON.stringify(cfg, null, 2) + '\n');
+    fs.chmodSync(file, 0o600);
+    return file;
+}
+//# sourceMappingURL=config-store.js.map

package/dist/cli/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/cli/config-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAkBjC,gDAAgD;AAChD,MAAM,UAAU,OAAO,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAA;IACpC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAA;AACvD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,CAAC,OAAO,EAAE;IAChE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,CAAA;AACrD,CAAC;AAED,0DAA0D;AAC1D,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,OAAO,GAAG,QAAQ,EAClB,UAAkB,EAAE,CAAC,OAAO,EAAE;IAE9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACxD,MAAM,CAAC,GAAG,GAA8B,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7G,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAA;IAErG,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa;QAC9D,CAAC,CAAC,MAAM,CAAC,aAAa;QACtB,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU;YAChD,CAAC,CAAC,CAAC,CAAC,UAAU;YACd,CAAC,CAAC,SAAS,CAAA;IACjB,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAE5B,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAA;IACtD,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC5C,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAC/C,CAAC,CAAC,OAAO,UAAU,KAAK,QAAQ;YAC9B,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACnF,CAAC,CAAC,EAAE,CAAA;IAER,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAA;IACtB,MAAM,QAAQ,GAAG,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;IAEzG,OAAO;QACL,OAAO;QACP,UAAU;QACV,GAAG,CAAC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,YAAY;QACZ,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC;QAChG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClC,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,yBAAyB,CAAC,OAAgB;IACjD,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC3C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;QACxG,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAA;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;QAC/C,OAAO,CAAC,IAAI,CAAC,yBAAyB,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC,CAAA;QACnF,OAAO,QAAQ,CAAA;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,MAAM,GAAG,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC,CAAA;QAChF,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,yBAAyB,CAAC,OAAO,CAAC,CAAA;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QAC3C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,2BAA2B,CAAC,CAAA;YAC7F,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAc,CAAA;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,QAAS,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3D,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,GAAc,EAAE,OAAgB;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5B,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACnC,kDAAkD;IAClD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAC3D,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACzB,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/cli/crypto-store.d.ts

@@ -0,0 +1,42 @@
+/** crypto 存储目录:与运行时一致(`<dataDir>/matrix-crypto`,dataDir 缺省 `$DSH_HOME/dsh-matrix`)。 */
+export declare function cryptoStoreDir(opts: {
+    dataDir?: string;
+    dshHome: string;
+}): string;
+/**
+ * T14:读出桥的 crypto 引擎自居的**设备身份**。
+ *
+ * matrix-bot-sdk 的 RustSdkCryptoStorageProvider 把它记在存储目录的 `bot-sdk.json`
+ * 里(`{deviceId, rooms}`)。`prune-devices` 要靠它带 `device_id` 登录 ——
+ * 否则"清理设备"这个动作自己又会新建一个设备,那就荒唐了。
+ *
+ * 读不到(文件缺失/坏 JSON/没记 deviceId)一律返回 undefined:调用方据此退回
+ * "不带 device_id 登录"的旧行为,不会因此崩。
+ */
+export declare function readCryptoStoreDeviceId(dir: string, read?: (p: string) => string): string | undefined;
+export interface CryptoResetPlan {
+    action: 'backup' | 'purge' | 'absent';
+    /** 要动的目录。 */
+    dir: string;
+    /** action='backup' 时的改名目标。 */
+    target?: string;
+    reason: string;
+}
+/**
+ * 复位计划(纯函数,便于测):
+ * - `purge` → 直接删(用户明确要求,不保留旧身份);
+ * - 缺省 → **改名备份**(`<dir>.bak-<stamp>`)而不是删 —— 万一只是误判,旧身份还能拿回来;
+ * - 目录不存在 → absent(不改任何东西)。
+ */
+export declare function planCryptoReset(input: {
+    dir: string;
+    purge?: boolean;
+    stamp: string;
+    exists?: (p: string) => boolean;
+}): CryptoResetPlan;
+/** 执行计划;返回实际做了什么(供 CLI 打印)。测试可注入 exists 之外的 fs 操作。 */
+export declare function applyCryptoReset(plan: CryptoResetPlan, ops?: {
+    rename?: (from: string, to: string) => void;
+    rm?: (p: string) => void;
+}): CryptoResetPlan;
+//# sourceMappingURL=crypto-store.d.ts.map

package/dist/cli/crypto-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-store.d.ts","sourceRoot":"","sources":["../../src/cli/crypto-store.ts"],"names":[],"mappings":"AAeA,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAGlF;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAA2C,GAC/D,MAAM,GAAG,SAAS,CAOpB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAA;IACrC,aAAa;IACb,GAAG,EAAE,MAAM,CAAA;IACX,8BAA8B;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAA;CAChC,GAAG,eAAe,CAclB;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,EACrB,GAAG,GAAE;IAAE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,CAAA;CAAO,GAClF,eAAe,CAMjB"}

package/dist/cli/crypto-store.js

@@ -0,0 +1,70 @@
+/**
+ * T13:crypto 存储的复位路径。
+ *
+ * 背景(见 docs/tickets/13-crypto-store-health.md):桥的 crypto 存储一旦进入坏状态,
+ * E2EE 会**静默失效** —— 桥照常启动、照常打 "E2EE 已启用",只是所有密文都解不开
+ * (`Can't find the room key`)。用户手上唯一可行的自救就是换一份存储,而这件事此前
+ * 没有任何入口。这里给出**显式**的复位动作(而不是"解密失败就自动删库重建" ——
+ * 那会静默更换设备身份,把用户原有的验证关系打乱)。
+ *
+ * 复位代价必须说清楚:换存储 = **换设备身份**,对方(Element 等)会看到一个新设备,
+ * 需要重新验证;历史加密消息也解不开(密钥在旧存储里)。
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+/** crypto 存储目录:与运行时一致(`<dataDir>/matrix-crypto`,dataDir 缺省 `$DSH_HOME/dsh-matrix`)。 */
+export function cryptoStoreDir(opts) {
+    const dataDir = opts.dataDir ?? path.join(opts.dshHome, 'dsh-matrix');
+    return path.join(dataDir, 'matrix-crypto');
+}
+/**
+ * T14:读出桥的 crypto 引擎自居的**设备身份**。
+ *
+ * matrix-bot-sdk 的 RustSdkCryptoStorageProvider 把它记在存储目录的 `bot-sdk.json`
+ * 里(`{deviceId, rooms}`)。`prune-devices` 要靠它带 `device_id` 登录 ——
+ * 否则"清理设备"这个动作自己又会新建一个设备,那就荒唐了。
+ *
+ * 读不到(文件缺失/坏 JSON/没记 deviceId)一律返回 undefined:调用方据此退回
+ * "不带 device_id 登录"的旧行为,不会因此崩。
+ */
+export function readCryptoStoreDeviceId(dir, read = (p) => fs.readFileSync(p, 'utf-8')) {
+    try {
+        const parsed = JSON.parse(read(path.join(dir, 'bot-sdk.json')));
+        return typeof parsed.deviceId === 'string' && parsed.deviceId ? parsed.deviceId : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * 复位计划(纯函数,便于测):
+ * - `purge` → 直接删(用户明确要求,不保留旧身份);
+ * - 缺省 → **改名备份**(`<dir>.bak-<stamp>`)而不是删 —— 万一只是误判,旧身份还能拿回来;
+ * - 目录不存在 → absent(不改任何东西)。
+ */
+export function planCryptoReset(input) {
+    const exists = input.exists ?? fs.existsSync;
+    if (!exists(input.dir)) {
+        return { action: 'absent', dir: input.dir, reason: '目录不存在(可能从未启用过 E2EE,或已经复位过)' };
+    }
+    if (input.purge) {
+        return { action: 'purge', dir: input.dir, reason: '已按 --purge 删除(不保留旧设备身份)' };
+    }
+    return {
+        action: 'backup',
+        dir: input.dir,
+        target: `${input.dir}.bak-${input.stamp}`,
+        reason: '已改名备份(想彻底删掉可手动删该目录)',
+    };
+}
+/** 执行计划;返回实际做了什么(供 CLI 打印)。测试可注入 exists 之外的 fs 操作。 */
+export function applyCryptoReset(plan, ops = {}) {
+    const rename = ops.rename ?? fs.renameSync;
+    const rm = ops.rm ?? ((p) => fs.rmSync(p, { recursive: true, force: true }));
+    if (plan.action === 'backup' && plan.target)
+        rename(plan.dir, plan.target);
+    else if (plan.action === 'purge')
+        rm(plan.dir);
+    return plan;
+}
+//# sourceMappingURL=crypto-store.js.map

package/dist/cli/crypto-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-store.js","sourceRoot":"","sources":["../../src/cli/crypto-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,uFAAuF;AACvF,MAAM,UAAU,cAAc,CAAC,IAA2C;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IACrE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;AAC5C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,OAA8B,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC;IAEhE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAA2B,CAAA;QACzF,OAAO,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAWD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAK/B;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,UAAU,CAAA;IAC5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAA;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO;QACL,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,KAAK,EAAE;QACzC,MAAM,EAAE,qBAAqB;KAC9B,CAAA;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAC9B,IAAqB,EACrB,MAAiF,EAAE;IAEnF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,UAAU,CAAA;IAC1C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;SACrE,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9C,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/cli/device-prune.d.ts

@@ -0,0 +1,105 @@
+/**
+ * T14 后续:清理账号上的**孤儿设备**。
+ *
+ * 背景(见 docs/tickets/14-e2ee-bridge-regression.md):桥以前每次密码登录都**不带
+ * `device_id`**,Synapse 于是每次新建一个设备;累积起来不只是难看 ——
+ * 发送方每次加密都要对这一大堆设备做 keys/query、keys/claim 并逐个建 olm 会话,
+ * 实测把首次 sendMessage 拖到 6 分 13 秒。T14 已让桥不再造新设备,但**历史遗留**
+ * 的那些孤儿设备还在,本模块就是清理它们的显式入口。
+ *
+ * 设计原则(与 T13 §4 同一条):**显式、可见、不擅自**。
+ *   - 默认只是**列出**(演练),必须 `--yes`(或交互确认)才真删;
+ *   - 当前桥设备**永远保留**;
+ *   - `--keep-days <n>` 可把"最近 n 天活动过"的设备一并保留(安全网,缺省 0 = 只留桥设备);
+ *   - 删设备是**不可逆**的(私钥没了就是没了),所以这里绝不静默动手。
+ */
+export interface DeviceInfo {
+    device_id: string;
+    display_name?: string | null;
+    last_seen_ts?: number | null;
+    last_seen_ip?: string | null;
+}
+export interface PrunePlan {
+    /** 保留的设备 id(当前桥设备)。 */
+    keep: string;
+    /** keep 是否真的在设备列表里(不在 = 配置里的设备身份可能已经没了)。 */
+    keepFound: boolean;
+    /** 计划删除的设备。 */
+    remove: DeviceInfo[];
+    /** 明确保留的设备及原因(让"为什么没删"也可见)。 */
+    retained: {
+        device: DeviceInfo;
+        why: string;
+    }[];
+}
+/**
+ * 纯函数:算出"该删谁、留谁"。
+ *
+ * 判定顺序:当前桥设备 → 最近 keepDays 天活动过 → 其余都删。
+ * 没有 `last_seen_ts`(从未登录过)的设备一律算孤儿 —— 它们正是复位/改名留下的残骸。
+ */
+export declare function planDevicePrune(input: {
+    devices: DeviceInfo[];
+    keep: string;
+    now: number;
+    /** 最近多少天内活动过的设备也保留(缺省 0:只留桥设备)。 */
+    keepDays?: number;
+}): PrunePlan;
+export interface MatrixAdminOps {
+    whoAmI(): Promise<{
+        user_id: string;
+        device_id?: string;
+    }>;
+    listDevices(): Promise<DeviceInfo[]>;
+    /** 删一个设备(Synapse 要 UI auth,内部自动走两步)。 */
+    deleteDevice(deviceId: string): Promise<void>;
+}
+export declare function createMatrixAdminOps(opts: {
+    homeserver: string;
+    accessToken: string;
+    userId: string;
+    /** 删除设备需要重新认证;没有密码就只能演练(会给出明确报错)。 */
+    password?: string;
+    fetchImpl?: typeof fetch;
+}): MatrixAdminOps;
+/** 密码登录换一个 token;带 deviceId 时复用该设备(不新建)。 */
+export declare function loginForToken(opts: {
+    homeserver: string;
+    username: string;
+    password: string;
+    deviceId?: string;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    accessToken: string;
+    userId: string;
+    deviceId?: string;
+}>;
+/** 给人看的"最后活动"列。 */
+export declare function formatLastSeen(ts: number | null | undefined, now: number): string;
+export type IdentityChoice = {
+    mode: 'token';
+} | {
+    mode: 'password';
+    deviceId: string;
+} | {
+    mode: 'unavailable';
+    message: string;
+};
+/**
+ * 选登录身份。
+ *
+ * **硬不变量:本命令绝不新建设备。** —— 一个"清理孤儿设备"的工具自己再造一个设备,
+ * 就正好是它要治的那毛病(实测踩到过:对着没有本地 crypto 存储的账号跑演练,直接多出
+ * 一个设备)。所以拿不到**既有**身份时明确拒绝,并告诉用户两条出路,而不是默默登录
+ * (密码登录不带 device_id 必然新建)。
+ */
+export declare function chooseLoginIdentity(input: {
+    accessToken?: string;
+    username?: string;
+    password?: string;
+    /** 桥的 crypto 存储里记着的设备身份(没有 = 拿不到既有身份)。 */
+    storedDeviceId?: string;
+    /** 仅供报错时提示位置。 */
+    cryptoDir: string;
+}): IdentityChoice;
+//# sourceMappingURL=device-prune.d.ts.map

package/dist/cli/device-prune.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-prune.d.ts","sourceRoot":"","sources":["../../src/cli/device-prune.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,SAAS,EAAE,OAAO,CAAA;IAClB,eAAe;IACf,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,+BAA+B;IAC/B,QAAQ,EAAE;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAChD;AAID;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,OAAO,EAAE,UAAU,EAAE,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB,GAAG,SAAS,CAqBZ;AAMD,MAAM,WAAW,cAAc;IAC7B,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC1D,WAAW,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACpC,wCAAwC;IACxC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9C;AAuBD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;IACd,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,GAAG,cAAc,CA+CjB;AAED,4CAA4C;AAC5C,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoBtE;AAED,mBAAmB;AACnB,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAKjF;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5C;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,iBAAiB;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB,GAAG,cAAc,CAgBjB"}