@sleep2agi/agent-network 2.3.0-preview.1 → 2.3.0-preview.10

package/dist/src/client.js

@@ -1 +1 @@
-const a0_0x245f1e=a0_0x3d1a;(function(_0x5a7b1c,_0x4b0e95){const _0x195303=a0_0x3d1a,_0x510511=_0x5a7b1c();while(!![]){try{const _0x5d2b32=parseInt(_0x195303(0x95))/0x1*(parseInt(_0x195303(0xd5))/0x2)+-parseInt(_0x195303(0x93))/0x3+parseInt(_0x195303(0xb7))/0x4+parseInt(_0x195303(0xd0))/0x5*(-parseInt(_0x195303(0x9c))/0x6)+parseInt(_0x195303(0xa7))/0x7+parseInt(_0x195303(0xb0))/0x8*(parseInt(_0x195303(0x91))/0x9)+-parseInt(_0x195303(0xcb))/0xa;if(_0x5d2b32===_0x4b0e95)break;else _0x510511['push'](_0x510511['shift']());}catch(_0x317665){_0x510511['push'](_0x510511['shift']());}}}(a0_0x1cd6,0xf200d));import{EventEmitter as a0_0x317040}from'events';import{hostname as a0_0x33f726}from'os';class T extends a0_0x317040{[a0_0x245f1e(0xda)];['alias'];[a0_0x245f1e(0xbb)];[a0_0x245f1e(0xae)];[a0_0x245f1e(0xb5)];[a0_0x245f1e(0xa3)];[a0_0x245f1e(0xaa)];[a0_0x245f1e(0xe2)];[a0_0x245f1e(0x92)];['running']=!0x1;constructor(_0x3540c6){const _0x4346c9=a0_0x245f1e;super();if(this[_0x4346c9(0xda)]=_0x3540c6['url'][_0x4346c9(0xbd)](/\/$/,''),this[_0x4346c9(0x90)]=_0x3540c6[_0x4346c9(0x90)],this[_0x4346c9(0xbb)]=_0x3540c6[_0x4346c9(0xbb)],this[_0x4346c9(0xae)]=_0x3540c6['agent']||'sdk',this[_0x4346c9(0xb5)]=_0x4346c9(0xbc)+_0x3540c6[_0x4346c9(0x90)]+'-'+Date['now']()[_0x4346c9(0xde)](0x24),this[_0x4346c9(0xa3)]=_0x3540c6['heartbeatInterval']??0x2bf20,this[_0x4346c9(0xaa)]=_0x3540c6[_0x4346c9(0xaa)]??0xbb8,_0x3540c6[_0x4346c9(0xd7)]!==!0x1)this['connect']();}[a0_0x245f1e(0x8e)](_0xd56960){const _0x5dd363=a0_0x245f1e;console[_0x5dd363(0x8e)]('['+new Date()[_0x5dd363(0xc2)]()[_0x5dd363(0x9b)](0x0,0x8)+_0x5dd363(0xb9)+this[_0x5dd363(0x90)]+']\x20'+_0xd56960);}async['call'](_0x236515,_0x5739fa){const _0x5fbf37=a0_0x245f1e;let _0x5a9633={'Content-Type':_0x5fbf37(0xc1),'Accept':_0x5fbf37(0xc0)};if(this[_0x5fbf37(0xbb)])_0x5a9633['Authorization']=_0x5fbf37(0xac)+this[_0x5fbf37(0xbb)];let _0x4a86b4=await(await fetch(this[_0x5fbf37(0xda)]+_0x5fbf37(0xca),{'method':_0x5fbf37(0xbf),'headers':_0x5a9633,'body':JSON['stringify']({'jsonrpc':_0x5fbf37(0xb3),'id':Date[_0x5fbf37(0xab)](),'method':_0x5fbf37(0xe1),'params':{'name':_0x236515,'arguments':_0x5739fa}})}))[_0x5fbf37(0xa9)](),_0x3a2838=_0x4a86b4['match'](/data: (.+)/),_0x4be409=_0x3a2838?JSON[_0x5fbf37(0xba)](_0x3a2838[0x1]):JSON[_0x5fbf37(0xba)](_0x4a86b4),_0xdebda4=_0x4be409?.[_0x5fbf37(0xc6)]?.[_0x5fbf37(0xd1)]?.[0x0]?.[_0x5fbf37(0xa9)];return _0xdebda4?JSON[_0x5fbf37(0xba)](_0xdebda4):_0x4be409;}async[a0_0x245f1e(0xdc)](){const _0x2af897=a0_0x245f1e;if(this['running'])return;this[_0x2af897(0x98)]=!0x0,await this[_0x2af897(0xdb)]('idle'),this['log'](_0x2af897(0xdf)),this['heartbeatTimer']=setInterval(()=>{const _0xf7761b=_0x2af897;this['status'](_0xf7761b(0xb6))[_0xf7761b(0xb8)](_0x1d94bf=>this[_0xf7761b(0x8e)](_0xf7761b(0x9a)+_0x1d94bf[_0xf7761b(0xa8)]));},this[_0x2af897(0xa3)]),this['connectSSE']();}async['disconnect'](){const _0x2dd220=a0_0x245f1e;if(this['running']=!0x1,this['sseAbort']?.[_0x2dd220(0xc4)](),this[_0x2dd220(0xe2)])clearInterval(this[_0x2dd220(0xe2)]);await this[_0x2dd220(0xdb)](_0x2dd220(0xcc))['catch'](()=>{}),this[_0x2dd220(0x8e)]('disconnected');}async[a0_0x245f1e(0x99)](_0x3255d1,_0x2949d9,_0x5906df=a0_0x245f1e(0xa4)){const _0xdee442=a0_0x245f1e;return this[_0xdee442(0xa5)]('send_task',{'alias':_0x3255d1,'task':_0x2949d9,'priority':_0x5906df,'from_session':this[_0xdee442(0x90)]});}async[a0_0x245f1e(0xa8)](_0x464b56,_0x3f02f1){const _0x3ac9b0=a0_0x245f1e;return this[_0x3ac9b0(0xa5)](_0x3ac9b0(0xc3),{'alias':_0x464b56,'message':_0x3f02f1,'from_session':this['alias']});}async['reply'](_0x324d53,_0x2a7c95,_0x4b9720=a0_0x245f1e(0xa2)){const _0x50586d=a0_0x245f1e;return this[_0x50586d(0xa5)](_0x50586d(0x94),{'in_reply_to':_0x324d53,'text':_0x2a7c95,'status':_0x4b9720});}async[a0_0x245f1e(0xdb)](_0x28e8f1,_0x52782d){const _0x3b4b62=a0_0x245f1e;return this[_0x3b4b62(0xa5)](_0x3b4b62(0xd9),{'resume_id':this[_0x3b4b62(0xb5)],'alias':this[_0x3b4b62(0x90)],'status':_0x28e8f1,'server':a0_0x33f726(),'hostname':a0_0x33f726(),'agent':this[_0x3b4b62(0xae)],'project_dir':process[_0x3b4b62(0xa6)](),..._0x52782d});}async['getAllStatus'](){const _0x2c6071=a0_0x245f1e;return this['call'](_0x2c6071(0xa0),{});}async['broadcast'](_0x7c59df,_0xcf53ba){const _0x585bf2=a0_0x245f1e;return this['call'](_0x585bf2(0xb4),{'message':_0x7c59df,'filter_server':_0xcf53ba?.['server'],'filter_status':_0xcf53ba?.[_0x585bf2(0xdb)]});}async['connectSSE'](){const _0xb28033=a0_0x245f1e;let _0xd4bf68=encodeURIComponent(this[_0xb28033(0x90)]),_0x520900=this[_0xb28033(0xda)]+_0xb28033(0xc5)+_0xd4bf68,_0x3bce39=this[_0xb28033(0xaa)];while(this[_0xb28033(0x98)]){try{this[_0xb28033(0x92)]=new AbortController();let _0x59294e={'Accept':_0xb28033(0xd6)};if(this[_0xb28033(0xbb)])_0x59294e[_0xb28033(0xd4)]=_0xb28033(0xac)+this[_0xb28033(0xbb)];let _0x50d661=await fetch(_0x520900,{'headers':_0x59294e,'signal':this[_0xb28033(0x92)]['signal']});if(!_0x50d661['ok']||!_0x50d661[_0xb28033(0xe0)]){this['log'](_0xb28033(0xce)+_0x50d661[_0xb28033(0xdb)]),await this['sleep'](_0x3bce39),_0x3bce39=Math[_0xb28033(0x96)](_0x3bce39*1.5,0xea60);continue;}_0x3bce39=this[_0xb28033(0xaa)];let _0x159a22=_0x50d661[_0xb28033(0xe0)]['getReader'](),_0x1b774a=new TextDecoder(),_0x25826f='';while(this[_0xb28033(0x98)]){let {done:_0x5396de,value:_0x25d01e}=await _0x159a22['read']();if(_0x5396de)break;_0x25826f+=_0x1b774a[_0xb28033(0xb2)](_0x25d01e,{'stream':!0x0});let _0x5349c3=_0x25826f[_0xb28033(0x8f)]('\x0a');_0x25826f=_0x5349c3[_0xb28033(0xbe)]()||'';for(let _0x47522b of _0x5349c3){if(!_0x47522b[_0xb28033(0xaf)]('data:\x20'))continue;try{let _0x47de2b=JSON[_0xb28033(0xba)](_0x47522b[_0xb28033(0x9b)](0x6));if(_0x47de2b['type']===_0xb28033(0x9f)){this[_0xb28033(0x8e)](_0xb28033(0xc7)),this[_0xb28033(0xcf)](_0xb28033(0x9f));continue;}if(_0x47de2b[_0xb28033(0xcd)]===_0xb28033(0xd3)||_0x47de2b[_0xb28033(0xcd)]===_0xb28033(0xdd)||_0x47de2b[_0xb28033(0xcd)]==='broadcast')await this[_0xb28033(0xad)]();}catch{}}}}catch(_0x569f3b){if(_0x569f3b['name']==='AbortError')break;this[_0xb28033(0xcf)](_0xb28033(0xc9),_0x569f3b),this['log'](_0xb28033(0x97)+_0x569f3b[_0xb28033(0xa8)]);}if(this[_0xb28033(0x98)])this[_0xb28033(0xcf)]('disconnected'),this[_0xb28033(0x8e)](_0xb28033(0xd2)+_0x3bce39/0x3e8+_0xb28033(0xd8)),await this['sleep'](_0x3bce39),_0x3bce39=Math[_0xb28033(0x96)](_0x3bce39*1.5,0xea60);}}async[a0_0x245f1e(0xad)](){const _0x45a32b=a0_0x245f1e;try{let _0x28bc89=(await this[_0x45a32b(0xa5)](_0x45a32b(0xc8),{'alias':this[_0x45a32b(0x90)],'limit':0xa}))?.[_0x45a32b(0x9d)]||[];for(let _0x38a57c of _0x28bc89)await this[_0x45a32b(0xa5)](_0x45a32b(0xa1),{'alias':this[_0x45a32b(0x90)],'message_id':_0x38a57c['id']}),this[_0x45a32b(0x8e)]('←\x20'+_0x38a57c[_0x45a32b(0x9e)]+':\x20'+_0x38a57c[_0x45a32b(0xd1)]['slice'](0x0,0x3c)),this['emit']('task',_0x38a57c),this[_0x45a32b(0xcf)]('message',_0x38a57c);}catch(_0x13b4ce){this[_0x45a32b(0x8e)](_0x45a32b(0xb1)+_0x13b4ce[_0x45a32b(0xa8)]);}}['sleep'](_0xa5e5){return new Promise(_0x57f733=>setTimeout(_0x57f733,_0xa5e5));}}function a0_0x1cd6(){const _0x10bc79=['split','alias','1143891ZKyEnI','sseAbort','1703472VBATGc','send_reply','1VeVDAQ','min','SSE\x20error:\x20','running','send','heartbeat\x20failed:\x20','slice','54nnbnqB','messages','from_session','connected','get_all_status','ack_inbox','completed','heartbeatInterval','normal','call','cwd','13518295FYUktq','message','text','reconnectDelay','now','Bearer\x20','processInbox','agent','startsWith','40tZELig','inbox\x20error:\x20','decode','2.0','broadcast','resumeId','idle','7633244eBvtLX','catch',']\x20[commhub:','parse','token','sdk-','replace','pop','POST','application/json,\x20text/event-stream','application/json','toTimeString','send_message','abort','/events/','result','SSE\x20connected','get_inbox','error','/mcp','21919240vKZNvu','offline','type','SSE\x20failed:\x20','emit','831005QfhfqY','content','SSE\x20reconnecting\x20in\x20','new_task','Authorization','1543622CGGAMX','text/event-stream','autoConnect','s...','report_status','url','status','connect','new_message','toString','registered','body','tools/call','heartbeatTimer','log'];a0_0x1cd6=function(){return _0x10bc79;};return a0_0x1cd6();}function a0_0x3d1a(_0x272d91,_0x1e3d59){_0x272d91=_0x272d91-0x8e;const _0x1cd602=a0_0x1cd6();let _0x3d1ab0=_0x1cd602[_0x272d91];return _0x3d1ab0;}var $=T;export{$ as default,T as CommHub};
+function a0_0x9087(_0x3f18eb,_0x38a974){_0x3f18eb=_0x3f18eb-0x1b0;const _0x527323=a0_0x5273();let _0x90874=_0x527323[_0x3f18eb];return _0x90874;}const a0_0x4139e8=a0_0x9087;(function(_0x26215d,_0x2c9eed){const _0x471321=a0_0x9087,_0x39fce5=_0x26215d();while(!![]){try{const _0x239ad1=-parseInt(_0x471321(0x1c8))/0x1*(parseInt(_0x471321(0x1b5))/0x2)+-parseInt(_0x471321(0x1fe))/0x3*(parseInt(_0x471321(0x1c2))/0x4)+-parseInt(_0x471321(0x1d3))/0x5*(parseInt(_0x471321(0x1c5))/0x6)+parseInt(_0x471321(0x200))/0x7+parseInt(_0x471321(0x1c1))/0x8+-parseInt(_0x471321(0x1e4))/0x9*(parseInt(_0x471321(0x1df))/0xa)+parseInt(_0x471321(0x1c9))/0xb;if(_0x239ad1===_0x2c9eed)break;else _0x39fce5['push'](_0x39fce5['shift']());}catch(_0x397d1a){_0x39fce5['push'](_0x39fce5['shift']());}}}(a0_0x5273,0x7bdd8));import{EventEmitter as a0_0x452b00}from'events';import{hostname as a0_0x156699}from'os';class T extends a0_0x452b00{['url'];[a0_0x4139e8(0x1b8)];[a0_0x4139e8(0x1f7)];[a0_0x4139e8(0x1e1)];[a0_0x4139e8(0x1f3)];['heartbeatInterval'];['reconnectDelay'];[a0_0x4139e8(0x1d6)];[a0_0x4139e8(0x1de)];[a0_0x4139e8(0x1be)]=!0x1;constructor(_0x1ec7b6){const _0x2dcdac=a0_0x4139e8;super();if(this[_0x2dcdac(0x1d0)]=_0x1ec7b6[_0x2dcdac(0x1d0)][_0x2dcdac(0x1ec)](/\/$/,''),this[_0x2dcdac(0x1b8)]=_0x1ec7b6[_0x2dcdac(0x1b8)],this[_0x2dcdac(0x1f7)]=_0x1ec7b6['token'],this[_0x2dcdac(0x1e1)]=_0x1ec7b6['agent']||_0x2dcdac(0x1cb),this[_0x2dcdac(0x1f3)]=_0x2dcdac(0x1dc)+_0x1ec7b6['alias']+'-'+Date[_0x2dcdac(0x1e0)]()['toString'](0x24),this[_0x2dcdac(0x201)]=_0x1ec7b6[_0x2dcdac(0x201)]??0x2bf20,this[_0x2dcdac(0x1b1)]=_0x1ec7b6[_0x2dcdac(0x1b1)]??0xbb8,_0x1ec7b6['autoConnect']!==!0x1)this[_0x2dcdac(0x1db)]();}[a0_0x4139e8(0x1ba)](_0xce487a){const _0x4d0746=a0_0x4139e8;console[_0x4d0746(0x1ba)]('['+new Date()[_0x4d0746(0x1d7)]()[_0x4d0746(0x1e6)](0x0,0x8)+_0x4d0746(0x1e2)+this['alias']+']\x20'+_0xce487a);}async['call'](_0x4fc4e6,_0x1bb33c){const _0x36dfd7=a0_0x4139e8;let _0x422b0b={'Content-Type':'application/json','Accept':'application/json,\x20text/event-stream'};if(this[_0x36dfd7(0x1f7)])_0x422b0b[_0x36dfd7(0x1c0)]=_0x36dfd7(0x1d4)+this[_0x36dfd7(0x1f7)];let _0x3e62a7=await(await fetch(this[_0x36dfd7(0x1d0)]+_0x36dfd7(0x1c3),{'method':_0x36dfd7(0x1bf),'headers':_0x422b0b,'body':JSON[_0x36dfd7(0x1ee)]({'jsonrpc':_0x36dfd7(0x1cc),'id':Date['now'](),'method':'tools/call','params':{'name':_0x4fc4e6,'arguments':_0x1bb33c}})}))[_0x36dfd7(0x1b7)](),_0x8e24e9=_0x3e62a7[_0x36dfd7(0x1ff)](/data: (.+)/),_0xe8f3df=_0x8e24e9?JSON['parse'](_0x8e24e9[0x1]):JSON['parse'](_0x3e62a7),_0x11d61f=_0xe8f3df?.['result']?.['content']?.[0x0]?.[_0x36dfd7(0x1b7)];return _0x11d61f?JSON[_0x36dfd7(0x203)](_0x11d61f):_0xe8f3df;}async['connect'](){const _0xf3262e=a0_0x4139e8;if(this[_0xf3262e(0x1be)])return;this['running']=!0x0,await this[_0xf3262e(0x1b0)]('idle'),this[_0xf3262e(0x1ba)]('registered'),this[_0xf3262e(0x1d6)]=setInterval(()=>{const _0x203fef=_0xf3262e;this['status']('idle')[_0x203fef(0x1e5)](_0x595d29=>this[_0x203fef(0x1ba)](_0x203fef(0x1f9)+_0x595d29[_0x203fef(0x1c7)]));},this[_0xf3262e(0x201)]),this[_0xf3262e(0x1b9)]();}async[a0_0x4139e8(0x1eb)](){const _0x23a6fc=a0_0x4139e8;if(this['running']=!0x1,this[_0x23a6fc(0x1de)]?.['abort'](),this[_0x23a6fc(0x1d6)])clearInterval(this[_0x23a6fc(0x1d6)]);await this[_0x23a6fc(0x1b0)](_0x23a6fc(0x1cf))['catch'](()=>{}),this[_0x23a6fc(0x1ba)](_0x23a6fc(0x1da));}async[a0_0x4139e8(0x1d9)](_0xfa460,_0x5397f3,_0x20e1ec=a0_0x4139e8(0x1ca)){const _0x22f39b=a0_0x4139e8;return this['call'](_0x22f39b(0x1f8),{'alias':_0xfa460,'task':_0x5397f3,'priority':_0x20e1ec,'from_session':this[_0x22f39b(0x1b8)]});}async[a0_0x4139e8(0x1c7)](_0xc25c42,_0x2b8571){const _0x41af61=a0_0x4139e8;return this[_0x41af61(0x1ea)]('send_message',{'alias':_0xc25c42,'message':_0x2b8571,'from_session':this['alias']});}async[a0_0x4139e8(0x1f2)](_0x2b5258,_0x514191,_0x4a53d1=a0_0x4139e8(0x1e8)){const _0x830a3c=a0_0x4139e8;return this['call'](_0x830a3c(0x1f1),{'in_reply_to':_0x2b5258,'text':_0x514191,'status':_0x4a53d1});}async['status'](_0x33e015,_0x5df1d9){const _0x1e6150=a0_0x4139e8;return this[_0x1e6150(0x1ea)]('report_status',{'resume_id':this[_0x1e6150(0x1f3)],'alias':this[_0x1e6150(0x1b8)],'status':_0x33e015,'server':a0_0x156699(),'hostname':a0_0x156699(),'agent':this[_0x1e6150(0x1e1)],'project_dir':process[_0x1e6150(0x1c4)](),..._0x5df1d9});}async[a0_0x4139e8(0x1b4)](){const _0x3f230e=a0_0x4139e8;return this[_0x3f230e(0x1ea)]('get_all_status',{});}async[a0_0x4139e8(0x1fc)](_0x4bfac2,_0x13aff5){const _0xf19557=a0_0x4139e8;return this['call'](_0xf19557(0x1fc),{'message':_0x4bfac2,'filter_server':_0x13aff5?.[_0xf19557(0x1bc)],'filter_status':_0x13aff5?.['status']});}async['connectSSE'](){const _0x3c6e5f=a0_0x4139e8;let _0x246124=encodeURIComponent(this[_0x3c6e5f(0x1b8)]),_0x321a3c=this['url']+_0x3c6e5f(0x1bd)+_0x246124,_0x49da31=this[_0x3c6e5f(0x1b1)];while(this[_0x3c6e5f(0x1be)]){try{this[_0x3c6e5f(0x1de)]=new AbortController();let _0x507414={'Accept':'text/event-stream'};if(this['token'])_0x507414['Authorization']=_0x3c6e5f(0x1d4)+this[_0x3c6e5f(0x1f7)];let _0x18bcfc=await fetch(_0x321a3c,{'headers':_0x507414,'signal':this[_0x3c6e5f(0x1de)][_0x3c6e5f(0x1ce)]});if(!_0x18bcfc['ok']||!_0x18bcfc[_0x3c6e5f(0x1fa)]){this[_0x3c6e5f(0x1ba)](_0x3c6e5f(0x1d2)+_0x18bcfc[_0x3c6e5f(0x1b0)]),await this[_0x3c6e5f(0x1d1)](_0x49da31),_0x49da31=Math[_0x3c6e5f(0x1fb)](_0x49da31*1.5,0xea60);continue;}_0x49da31=this[_0x3c6e5f(0x1b1)];let _0x1c0825=_0x18bcfc[_0x3c6e5f(0x1fa)][_0x3c6e5f(0x1d8)](),_0x45bd49=new TextDecoder(),_0x5f245d='';while(this[_0x3c6e5f(0x1be)]){let {done:_0x32689d,value:_0x5ea000}=await _0x1c0825[_0x3c6e5f(0x202)]();if(_0x32689d)break;_0x5f245d+=_0x45bd49[_0x3c6e5f(0x1cd)](_0x5ea000,{'stream':!0x0});let _0x4f5482=_0x5f245d[_0x3c6e5f(0x1e7)]('\x0a');_0x5f245d=_0x4f5482[_0x3c6e5f(0x1ed)]()||'';for(let _0x5f404f of _0x4f5482){if(!_0x5f404f['startsWith'](_0x3c6e5f(0x1c6)))continue;try{let _0x1414a2=JSON['parse'](_0x5f404f[_0x3c6e5f(0x1e6)](0x6));if(_0x1414a2[_0x3c6e5f(0x1f6)]===_0x3c6e5f(0x1bb)){this[_0x3c6e5f(0x1ba)](_0x3c6e5f(0x1fd)),this['emit'](_0x3c6e5f(0x1bb));continue;}if(_0x1414a2[_0x3c6e5f(0x1f6)]==='new_task'||_0x1414a2[_0x3c6e5f(0x1f6)]===_0x3c6e5f(0x1f0)||_0x1414a2['type']===_0x3c6e5f(0x1fc))await this['processInbox']();}catch{}}}}catch(_0x53f1fb){if(_0x53f1fb[_0x3c6e5f(0x1f5)]===_0x3c6e5f(0x1b6))break;this[_0x3c6e5f(0x1e3)]('error',_0x53f1fb),this[_0x3c6e5f(0x1ba)](_0x3c6e5f(0x1b3)+_0x53f1fb['message']);}if(this['running'])this['emit']('disconnected'),this[_0x3c6e5f(0x1ba)]('SSE\x20reconnecting\x20in\x20'+_0x49da31/0x3e8+_0x3c6e5f(0x1ef)),await this[_0x3c6e5f(0x1d1)](_0x49da31),_0x49da31=Math[_0x3c6e5f(0x1fb)](_0x49da31*1.5,0xea60);}}async[a0_0x4139e8(0x1e9)](){const _0x12fd99=a0_0x4139e8;try{let _0x289ab6=(await this[_0x12fd99(0x1ea)]('get_inbox',{'alias':this[_0x12fd99(0x1b8)],'limit':0xa}))?.['messages']||[];for(let _0x182191 of _0x289ab6)await this[_0x12fd99(0x1ea)](_0x12fd99(0x1f4),{'alias':this['alias'],'message_id':_0x182191['id']}),this[_0x12fd99(0x1ba)]('←\x20'+_0x182191['from_session']+':\x20'+_0x182191[_0x12fd99(0x1d5)]['slice'](0x0,0x3c)),this[_0x12fd99(0x1e3)](_0x12fd99(0x1dd),_0x182191),this[_0x12fd99(0x1e3)](_0x12fd99(0x1c7),_0x182191);}catch(_0x230955){this[_0x12fd99(0x1ba)](_0x12fd99(0x1b2)+_0x230955[_0x12fd99(0x1c7)]);}}['sleep'](_0x46b019){return new Promise(_0x4c2373=>setTimeout(_0x4c2373,_0x46b019));}}var $=T;function a0_0x5273(){const _0xb9b414=['resumeId','ack_inbox','name','type','token','send_task','heartbeat\x20failed:\x20','body','min','broadcast','SSE\x20connected','3kklzGc','match','4742297otxDVy','heartbeatInterval','read','parse','status','reconnectDelay','inbox\x20error:\x20','SSE\x20error:\x20','getAllStatus','120182PaDwYY','AbortError','text','alias','connectSSE','log','connected','server','/events/','running','POST','Authorization','1452400lsEPNt','325960iLhYqe','/mcp','cwd','60bWTvwm','data:\x20','message','7NFflPt','5911345IkiVmS','normal','sdk','2.0','decode','signal','offline','url','sleep','SSE\x20failed:\x20','26140bCTUFF','Bearer\x20','content','heartbeatTimer','toTimeString','getReader','send','disconnected','connect','sdk-','task','sseAbort','3346570mWRYOy','now','agent',']\x20[commhub:','emit','9fOYvkA','catch','slice','split','completed','processInbox','call','disconnect','replace','pop','stringify','s...','new_message','send_reply','reply'];a0_0x5273=function(){return _0xb9b414;};return a0_0x5273();}export{$ as default,T as CommHub};

package/dist/src/im/access-resolve.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Tiny loader that mirrors what `initTelegramChannel` does at boot —
+ * read the parsed access.json blob and produce both the raw allowFrom
+ * payload (handed to the resolver verbatim) AND a boot-time warning
+ * string for the empty / malformed case.
+ *
+ * Extracted so wiring-level regression tests (e.g. "channel state
+ * built from `{allowFrom: [123]}` MUST fail-closed when a message
+ * arrives") run without spinning up a real telegram channel + fs
+ * mocks. The previous bug — `.map(String)` rewriting [123] into
+ * ["123"] at init time — slipped past resolver-only unit tests
+ * because the resolver never saw the offending shape; the channel
+ * state did.
+ */
+export interface LoadedTelegramAccess {
+    /** Raw value from access.json — handed verbatim to resolveTelegramAccess. */
+    allowFromRaw: unknown;
+    /** Boot-time warning string when allowFrom is empty / malformed; null otherwise. */
+    bootWarn: string | null;
+}
+export declare function loadTelegramAccess(opts: {
+    channelDir: string;
+    parsedAccess: {
+        allowFrom?: unknown;
+    } | null | undefined;
+}): LoadedTelegramAccess;
+/**
+ * Discriminated reason for an access decision. Callers can switch on
+ * `kind` for routing (e.g. `empty-fail-closed` warrants a louder boot
+ * warning than a simple `denied` mid-stream).
+ */
+export type AccessKind = "wildcard-allow" | "explicit-allow" | "empty-fail-closed" | "denied";
+export interface AccessDecision {
+    allow: boolean;
+    kind: AccessKind;
+    /** Short, machine-readable reason for logging. */
+    reason: string;
+}
+/**
+ * Normalise an allowFrom input into a deduped string[] suitable for
+ * the lookup checks. Accepts: a real string[] (the happy case), null /
+ * undefined (treated as empty), a non-array shape (defensive — treated
+ * as empty + reason surfaced).
+ */
+export declare function normalizeAllowFrom(raw: unknown): {
+    list: string[];
+    malformed: boolean;
+};
+/**
+ * Resolve whether an inbound Telegram message should be processed.
+ *
+ * Fail-closed: empty / missing / malformed `allowFrom` always denies.
+ * Wildcard `"*"` always allows. Otherwise the sender's id OR username
+ * (after non-empty check) must match a list entry.
+ *
+ * @param opts.allowFrom         the access.json `allowFrom` array
+ * @param opts.senderId          numeric Telegram user id as string
+ *                               (callers already coerce; we trust)
+ * @param opts.senderUsername    optional `@username` (no `@` prefix)
+ */
+export declare function resolveTelegramAccess(opts: {
+    allowFrom: unknown;
+    senderId: string;
+    senderUsername?: string | null;
+}): AccessDecision;
+/**
+ * Resolve whether an inbound Feishu/Lark event should be processed.
+ *
+ * Same fail-closed contract as telegram. DM path checks `allowFrom`;
+ * group path checks `allowChats` first, then `groupPolicy` decides
+ * whether listed chats trigger the agent (`all` → trigger any message;
+ * `observe` → never trigger; `mention` → only on @-mention — caller
+ * still has to honour that flag, this helper just returns allow=true).
+ *
+ * @param opts.conversationType  "dm" | "group" | "channel" | "thread"
+ * @param opts.allowFrom         access.json `allowFrom` array
+ * @param opts.allowChats        access.json `allowChats` array
+ * @param opts.senderId          feishu open_id of the sender
+ * @param opts.conversationId    feishu chat_id of the conversation
+ * @param opts.groupPolicy       "all" | "mention" | "observe"
+ */
+export declare function resolveFeishuAccess(opts: {
+    conversationType: "dm" | "group" | "channel" | "thread" | string;
+    allowFrom: unknown;
+    allowChats: unknown;
+    senderId: string;
+    conversationId: string;
+    groupPolicy: "all" | "mention" | "observe" | string;
+}): AccessDecision;
+/**
+ * Build the boot-time warning string when a channel starts with an
+ * empty / malformed allowlist. Caller emits this via `warn()` once at
+ * startup so operators see the fail-closed posture immediately rather
+ * than discovering it the first time a message gets denied.
+ *
+ * Returns `null` when the allowlist has at least one entry (no boot
+ * warning needed).
+ */
+export declare function buildEmptyAllowlistWarn(opts: {
+    channel: string;
+    channelDir: string;
+    allowFrom: unknown;
+}): string | null;

package/dist/src/im/feishu/adapter.d.ts

@@ -4,7 +4,7 @@ export declare class FeishuAdapter implements IMAdapter {
     readonly platform = "feishu";
     readonly ingressMode: IMIngressMode;
     private feishuConfig;
-    private connectionName;
+    private connectionName_;
     private client;
     private wsClient;
     /**
@@ -17,6 +17,23 @@ export declare class FeishuAdapter implements IMAdapter {
     /** Where to persist downloaded inbound media (M5c). */
     private mediaDir;
     private health_;
+    /**
+     * Snapshot of the current `access.allowFrom` list (from access.json).
+     * Used by the bridge's rate-limiter to exempt operator-vouched explicit
+     * sender ids from the DM flood limit (2026-06-29: Vincent's multi-turn
+     * heavy work was tripping the 3-msg/60s DM limit; explicit-listed
+     * users are already operator-trusted via the access whitelist, no
+     * need to also flood-limit them). Returns `[]` before `init()`. The
+     * wildcard `["*"]` allowlist does NOT count as "explicit" — that's
+     * the public-channel shape and still needs flood protection.
+     */
+    getAllowFrom(): readonly string[];
+    /**
+     * Read-only accessor used by bridge to resolve per-connection paths
+     * (RFC-020 §15 outbound-marker validation needs the connection name
+     * to build the allowed per-conversation directory prefix).
+     */
+    get connectionName(): string;
     init(config: IMChannelConfig): Promise<void>;
     start(onEvent: OnEventHandler): Promise<void>;
     stop(): Promise<void>;
@@ -26,4 +43,55 @@ export declare class FeishuAdapter implements IMAdapter {
     edit(_target: IMConversationRef, messageId: string, message: NormalizedIMMessage): Promise<void>;
     health(): IMAdapterHealth;
 }
+/**
+ * Heuristic — does this text look like it contains markdown syntax that
+ * Feishu's plain-text `msg_type:"text"` would render as literal source?
+ * Catches the patterns Vincent's heavy work produces: tables (`|...|`
+ * + separator row), fenced code blocks (`` ``` ``), ATX headings (`#`),
+ * bold/italic (`**text**` / `*text*`), unordered/ordered lists, inline
+ * code (`` `code` ``), markdown links (`[label](url)`).
+ *
+ * Returns true for at least one match; the adapter then upgrades to
+ * `msg_type:"interactive"` with a `markdown` element. Returns false for
+ * plain prose so the text path stays untouched (no perf cost, no
+ * behavior change for non-markdown replies).
+ *
+ * Conservative — single-character matches (e.g., a `|` in prose, one
+ * `*` for emphasis-of-one-word that Feishu would render OK as text)
+ * are NOT enough to trigger. We want false-positives < false-negatives
+ * (a false-positive upgrade renders fine; a false-negative shows raw
+ * `|` and `**`).
+ */
+export declare function looksLikeMarkdown(text: string): boolean;
+/**
+ * Parse Feishu `message_type: "post"` content into plain text. Post
+ * content is a nested structure:
+ *
+ *   { title?: string,
+ *     content: Array<Array<{ tag: "text"|"img"|"a"|"at"|"emotion", ... }>>
+ *   }
+ *
+ * Each top-level array entry is a paragraph; each paragraph is an array
+ * of typed segments. We flatten by:
+ *   - prepending title (if present) as `<title>\n\n`
+ *   - joining paragraphs with `\n\n`
+ *   - joining segments within a paragraph in order
+ *   - tag=text → emit segment.text as-is
+ *   - tag=a    → emit `[label](href)` (markdown link)
+ *   - tag=at   → emit `@user_name` (fallback to `@<user_id>` if no name)
+ *   - tag=img  → emit `[图片]` placeholder (actual download via maybeAttachImages)
+ *   - tag=emotion → emit `[emoji]`
+ *   - unknown tag → skip
+ *
+ * @internal exported for unit tests.
+ */
+export declare function parsePostContent(rawJson: string): string;
+/**
+ * Walk a Feishu `post` content JSON and collect all `image_key` values
+ * from `tag: "img"` segments. Used by `maybeAttachImages` to schedule
+ * downloads for every image in a 图文混排 message.
+ *
+ * @internal exported for unit tests.
+ */
+export declare function extractPostImageKeys(rawJson: string): string[];
 export {};

package/dist/src/im/feishu/bridge.d.ts

@@ -49,6 +49,13 @@ export interface FeishuBridgeOptions {
 export interface BridgeIncomingEnvelope {
     type: "event";
     event: NormalizedIMEvent;
+    /** Canonical outbound directory for this conversation (RFC-020 §15.1).
+     *  Single source of truth — the agent-node injects this verbatim into
+     *  the system prompt's "save files here" instruction, and the bridge
+     *  whitelist accepts files only under this directory. Computed by the
+     *  bridge from `event.conversation.conversationId` + `adapter
+     *  .connectionName`. Trailing slash included. */
+    outboundDir?: string;
 }
 /** Parent → bridge: agent reply text for a previously-forwarded event. */
 export interface BridgeReplyEnvelope {

package/dist/src/im/feishu/markdown-image-renderer.d.ts

@@ -0,0 +1,61 @@
+/**
+ * RFC-020 §14 — markdown → image rendering for Feishu replies.
+ *
+ * Vincent 2026-06-29 path: Feishu's `markdown` card element doesn't
+ * render ATX headings or GFM tables (preview.7 caught only bold / list
+ * / link). Rather than partially support a moving subset of card
+ * elements, we render structured markdown to a PNG via headless
+ * chromium and send it through Feishu's image API (`im:resource:upload`
+ * scope). Pixel-perfect fidelity, zero schema fragility, text-not-
+ * copyable accepted as the tradeoff for "actually renders".
+ *
+ * Hybrid route (decided in adapter.send):
+ *   - plain text (no markdown markers)        → msg_type:"text"
+ *   - markdown WITHOUT heading / table / long → msg_type:"interactive" (schema 1.0 card with `markdown` element — keeps copy/paste for short bold/list/link replies; preview.7 path)
+ *   - markdown WITH heading / table / long    → THIS PATH (msg_type:"image" with rendered PNG)
+ *
+ * Renderer choice: `puppeteer-core` (no bundled chromium) + system
+ * chromium (apt install in Docker). Rationale:
+ *  - Pure-JS canvas-layout libraries (node-canvas, @napi-rs/canvas)
+ *    cost 4-6h of manual paragraph wrapping + table cell measurement
+ *    + Chinese width metrics; chromium does this natively.
+ *  - puppeteer-core (5MB) + system chromium (~100MB) is smaller than
+ *    full puppeteer (170MB) which bundles its own chromium.
+ *  - Headless screenshot ~500ms after warmup. Bot's heavy turn is 20-
+ *    70s; rendering cost is in the noise.
+ *
+ * Chromium reuse: we keep a single browser instance hot across
+ * renderings to avoid the ~2-3s cold-start per call. Auto-close on
+ * idle is a follow-up — agent-node worker lifetime is bounded.
+ */
+import { Buffer } from "node:buffer";
+/**
+ * Close the shared browser. Called from adapter.stop() during graceful
+ * worker shutdown. Subsequent render calls re-launch.
+ */
+export declare function closeBrowser(): Promise<void>;
+/**
+ * Render markdown text to a PNG buffer.
+ *
+ * Width is fixed at 800px (IM-friendly); height auto-fits content via
+ * `fullPage:true`. Returns the raw PNG bytes — caller hands them to
+ * `lark.im.image.create({image: Readable.from(buffer)})`.
+ *
+ * Throws on chromium launch failure or page navigation failure.
+ * Caller is responsible for fallback (e.g., send the raw text as a
+ * code block in the schema 1.0 card path).
+ */
+export declare function renderMarkdownToPng(text: string): Promise<Buffer>;
+/**
+ * Decide whether `renderMarkdownToPng` should be invoked for this reply
+ * text, vs. falling back to msg_type:"text" / msg_type:"interactive"
+ * (schema 1.0 card). Locked by 通信龙 3f70044c — trigger image when:
+ *   - text contains a markdown table (Feishu card can't render)
+ *   - text contains an ATX heading (Feishu card can't render)
+ *   - text length > 2000 chars (image is better than scrollable text wall)
+ *
+ * Returns false for short prose, single-line plain text, and short
+ * markdown lists / bold / link / inline-code which DO render fine in
+ * the schema 1.0 `markdown` card element.
+ */
+export declare function shouldRenderAsImage(text: string): boolean;

package/dist/src/im/feishu/outbound-marker.d.ts

@@ -0,0 +1,140 @@
+/**
+ * RFC-020 §15 — agent→bridge outbound file protocol.
+ *
+ * 2026-06-29 Vincent UAT: agent generated a PDF via reportlab + wrote it
+ * to `/work/feishu-attachments/<conv>/x.pdf`, then in text asked Vincent
+ * "I'm not sure if the system will auto-attach this — try another way?"
+ * The bridge has `adapter.send({files})` since #329, but no protocol
+ * told the agent how to signal "dispatch this file to the user".
+ *
+ * Convention: in its final reply, the agent emits one
+ *
+ *     [[send-file:/abs/path]]
+ *
+ * marker per file (one per line, end of reply). The bridge:
+ *
+ *   1. extracts every `[[send-file:...]]` token,
+ *   2. strips them from the user-visible text,
+ *   3. validates each path against an allowed-outbound-root whitelist
+ *      (`/work/feishu-attachments/<conn>/<chat>/` — same per-conversation
+ *      directory the LLM has Write access to under Layer B),
+ *   4. checks the file exists, is non-empty, and ≤ 30 MB (Feishu file_v1
+ *      upper bound),
+ *   5. magic-byte sniffs to choose `image_key` vs `file_key` upload route,
+ *   6. dispatches each file via `adapter.send({files:[...]})`,
+ *   7. emits a friendly fallback if validation fails — never the raw error.
+ *
+ * Pure module — no I/O, no IM SDK calls. The parser returns the cleaned
+ * text + a structured list of file requests; bridge.ts is responsible
+ * for filesystem checks and dispatching.
+ */
+/**
+ * One outbound-file request parsed from an agent reply.
+ *
+ *  - `raw`: the bytes between `[[send-file:` and `]]`, before any
+ *    normalization. Kept for stderr forensic.
+ *  - `normalized`: lexical-normalized absolute path (quote-strip, `..`
+ *    collapse, `//` collapse, `./` resolution against cwd). The
+ *    `validatedAbsolute` field is set later by the bridge after the
+ *    realpath / whitelist / exists check.
+ */
+export interface OutboundFileRequest {
+    raw: string;
+    normalized: string;
+}
+export interface MarkerParseResult {
+    /** Reply text with all `[[send-file:...]]` markers removed + adjacent
+     *  whitespace collapsed. May be empty (file-only reply). */
+    cleanedText: string;
+    /** Files in source order. Caller-side validation happens after. */
+    files: OutboundFileRequest[];
+}
+/**
+ * Lexically normalize a path token from the marker. NOT a full
+ * symlink/realpath resolver — bridge does that after this returns.
+ *
+ *  - Trim leading / trailing whitespace.
+ *  - Strip one layer of matching quotes (`"/x"` / `'/x'` → `/x`).
+ *  - `.` and `..` segments collapse via `path.posix.normalize`.
+ *  - Repeated `/` collapse.
+ *
+ * Returns an absolute path or the empty string if the input cannot be
+ * interpreted as an absolute path token (caller drops empties).
+ */
+export declare function normalizeMarkerPath(raw: string): string;
+/**
+ * Parse an agent reply into cleaned text + outbound-file requests.
+ *
+ * Empty / null input returns `{cleanedText: "", files: []}` so callers
+ * can safely pipe through without defensive checks.
+ *
+ * Marker-only reply (no surrounding text) returns `cleanedText: ""` —
+ * caller should NOT send an empty text message in that case; they only
+ * dispatch the files.
+ *
+ * Multiple markers on one reply are all captured. Adjacent whitespace
+ * around stripped markers is collapsed (no double blank lines).
+ */
+export declare function parseOutboundMarkers(reply: string | null | undefined): MarkerParseResult;
+export { OUTBOUND_ROOT, feishuConvKey, feishuOutboundDir } from "./outbound-paths.js";
+/**
+ * Validate a normalized absolute path against the per-conversation
+ * whitelist + size + existence checks. Returns null on success or a
+ * Chinese user-friendly reason on failure (the same string can be
+ * surfaced as a fallback text reply when ALL files fail validation).
+ *
+ * Filesystem-touching — bridge calls this AFTER `parseOutboundMarkers`.
+ *
+ * Two API shapes accepted (overload):
+ *
+ *   1. **Preferred**: caller passes `expectedDir` — the precomputed
+ *      `/work/feishu-attachments/<connectionName>/<convKey>/` value
+ *      from `feishuOutboundDir`. This guarantees what the agent was
+ *      TOLD to use (via cli.ts prompt injection) matches what we
+ *      ACCEPT here — no second algorithm.
+ *
+ *   2. **Legacy**: caller passes `connectionName` + `convKey`. We
+ *      compute the prefix here via the same helper. Kept for the
+ *      single-arg unit-test ergonomics + backwards-compat (the old
+ *      bridge wire-up shape).
+ *
+ * Params:
+ *   - p: normalized absolute path candidate
+ *   - expectedDir: precomputed whitelist directory (trailing `/`)
+ *     OR
+ *   - convKey + connectionName: legacy two-piece form
+ *   - statFn: optional override for tests (defaults to fs.statSync)
+ *   - realpathFn: optional override for tests (defaults to fs.realpathSync)
+ *
+ * The whitelist check uses literal `.startsWith(expectedDir)` — the
+ * trailing slash on `expectedDir` ensures `oc_abc/` doesn't accept
+ * paths under `oc_abc_evil/`.
+ */
+export interface ValidateOpts {
+    p: string;
+    /** Precomputed prefix (with trailing `/`). Preferred over convKey+connectionName. */
+    expectedDir?: string;
+    convKey?: string;
+    connectionName?: string;
+    statFn?: (p: string) => {
+        size: number;
+    };
+    realpathFn?: (p: string) => string;
+}
+export declare function validateOutboundPath(opts: ValidateOpts): string | null;
+/**
+ * Magic-byte sniffer — picks `image` vs `file` upload route. Reads the
+ * first 16 bytes only; safe to call before commitment. Returns:
+ *
+ *   - "image" when the bytes are a PNG / JPG / GIF / WebP / BMP signature
+ *     (Feishu image_v1 supports these natively, with chat inline render).
+ *   - "file" otherwise (PDF, TXT, audio, video, archive, …).
+ *
+ * Caller supplies a Buffer (bridge reads via fs.openSync + readSync).
+ */
+export declare function sniffFileKind(buf: Buffer): "image" | "file";
+/**
+ * User-facing fallback message when ALL marker validations fail and the
+ * stripped text is empty (would leave the user with no reply at all).
+ */
+export declare const ALL_FILES_FAILED_FALLBACK = "[\u6587\u4EF6\u9644\u4EF6\u53D1\u9001\u5931\u8D25] \u6211\u51C6\u5907\u597D\u4E86\u6587\u4EF6\u4F46\u5206\u53D1\u65F6\u51FA\u4E86\u95EE\u9898\u2014\u2014\u7A0D\u540E\u518D\u8BD5\u6216\u6362\u79CD\u65B9\u5F0F\u3002";

package/dist/src/im/feishu/outbound-paths.d.ts

@@ -0,0 +1,50 @@
+/**
+ * RFC-020 §15.1 — feishu outbound/attachment path helpers (SHARED).
+ *
+ * Single source of truth for `/work/feishu-attachments/<conn>/<convKey>/`
+ * naming. Used by:
+ *
+ *   - `adapter.ts` inbound `downloadImage` (subdir for received images),
+ *   - `bridge.ts` outbound marker whitelist (where the agent may write),
+ *   - `worker.ts` outbound envelope (the concrete path injected into the
+ *     agent's prompt, so what we tell the agent matches what we accept).
+ *
+ * 2026-06-29 Vincent UAT: prior to this module, the inbound downloader
+ * used `conversationId.replace(/[^a-zA-Z0-9_-]/g, "_")` and the outbound
+ * bridge whitelist used `sender.id` for DMs / `chatId` for groups. The
+ * two algorithms diverged — agent learned the inbound oc_<chat>/ layout
+ * from incoming attachments, then wrote outbound files to the same
+ * oc_<chat>/ subdir, but the bridge required ou_<userid>/. Every PDF
+ * generated by the bot was rejected. This module unifies on
+ * `conversationId` (the open_chat_id assigned by Feishu — present for
+ * DMs and groups equally).
+ */
+/**
+ * Sanitize a raw Feishu conversation id (`oc_<hex>` / occasionally
+ * `om_<id>` for DMs) into a filesystem-safe segment. Identical to the
+ * adapter.ts inbound download path policy — DO NOT CHANGE without also
+ * migrating any on-disk attachments under the old key.
+ *
+ * The regex strips anything outside `[A-Za-z0-9_-]`, replacing with `_`.
+ * Falsy / non-string input returns the empty string; caller is
+ * responsible for substituting a fallback (the empty key would resolve
+ * to `/work/feishu-attachments/<conn>//` which the path-prefix
+ * whitelist rejects cleanly).
+ */
+export declare function feishuConvKey(rawId: string | undefined | null): string;
+/**
+ * Compute the canonical per-conversation directory for outbound file
+ * dispatch + inbound attachment downloads. Trailing slash included so
+ * `.startsWith(...)` whitelist checks are unambiguous about the
+ * conversation boundary (no `oc_abc` matching `oc_abc_x`).
+ *
+ * Example:
+ *   feishuOutboundDir("feishu-local", "oc_9a7eedbba275a87999f7ee2cfb10f4cb")
+ *   → "/work/feishu-attachments/feishu-local/oc_9a7eedbba275a87999f7ee2cfb10f4cb/"
+ */
+export declare function feishuOutboundDir(connectionName: string, rawConvId: string | undefined | null): string;
+/**
+ * The fixed prefix root used as a sanity check by the marker validator.
+ * Useful for tests + for `validateOutboundPath` defense-in-depth.
+ */
+export declare const OUTBOUND_ROOT = "/work/feishu-attachments";