@sleep2agi/agent-network 2.3.0-preview.9 → 2.3.0-preview.90

package/dist/src/grok-attach-client.d.ts

@@ -0,0 +1,129 @@
+import type { Duplex } from "node:stream";
+export declare const GROK_ATTACH_PROTOCOL = "anet-grok-copresence-attach";
+export declare const GROK_ATTACH_PROTOCOL_VERSION = 1;
+export declare const GROK_ATTACH_DEFAULT_MAX_FRAME_BYTES: number;
+export declare const GROK_ATTACH_DEFAULT_MAX_BUFFER_BYTES: number;
+export declare const GROK_ATTACH_DEFAULT_HANDSHAKE_TIMEOUT_MS = 5000;
+export declare const GROK_ATTACH_DEFAULT_CLOSE_TIMEOUT_MS = 1000;
+export type GrokAttachJsonValue = null | boolean | number | string | GrokAttachJsonValue[] | {
+    [key: string]: GrokAttachJsonValue;
+};
+export interface GrokAttachHelloFrame {
+    type: "hello";
+    protocol: typeof GROK_ATTACH_PROTOCOL;
+    version: typeof GROK_ATTACH_PROTOCOL_VERSION;
+    alias: string;
+    sessionId: string;
+    [key: string]: unknown;
+}
+export interface GrokAttachOutputFrame {
+    type: "output";
+    data: string;
+    encoding: "base64";
+}
+export interface GrokAttachStatusFrame {
+    type: "status";
+    status: GrokAttachJsonValue;
+}
+export interface GrokAttachErrorFrame {
+    type: "error";
+    code: string;
+    message: string;
+    fatal: boolean;
+}
+export interface GrokAttachDetachFrame {
+    type: "detach";
+}
+export type GrokAttachServerFrame = GrokAttachHelloFrame | GrokAttachOutputFrame | GrokAttachStatusFrame | GrokAttachErrorFrame | GrokAttachDetachFrame;
+export interface GrokAttachInputFrame {
+    type: "input";
+    data: string;
+    encoding: "base64";
+}
+export interface GrokAttachResizeFrame {
+    type: "resize";
+    cols: number;
+    rows: number;
+}
+/** Asks the node to switch models (issue #879); allowed on control connections. */
+export interface GrokAttachSetModelFrame {
+    type: "set-model";
+    model: string;
+}
+export type GrokAttachClientFrame = GrokAttachInputFrame | GrokAttachResizeFrame | GrokAttachSetModelFrame | GrokAttachDetachFrame;
+export interface GrokAttachInputSource {
+    on(event: "data", listener: (chunk: unknown) => void): unknown;
+    on(event: "end", listener: () => void): unknown;
+    off?(event: "data" | "end", listener: (...args: any[]) => void): unknown;
+    removeListener?(event: "data" | "end", listener: (...args: any[]) => void): unknown;
+    pause?(): unknown;
+    resume?(): unknown;
+}
+export interface GrokAttachOutputSink {
+    write(chunk: Uint8Array): boolean | void;
+    columns?: number;
+    rows?: number;
+    once?(event: "drain", listener: () => void): unknown;
+}
+export interface GrokAttachSignalSource {
+    on(event: "SIGWINCH", listener: () => void): unknown;
+    off?(event: "SIGWINCH", listener: () => void): unknown;
+    removeListener?(event: "SIGWINCH", listener: () => void): unknown;
+}
+export interface GrokAttachSocketStat {
+    uid: number;
+    isSocket(): boolean;
+    isSymbolicLink(): boolean;
+}
+export interface GrokAttachDependencies {
+    lstat?: (socketPath: string) => Promise<GrokAttachSocketStat>;
+    getuid?: () => number | undefined;
+    connect?: (socketPath: string) => Duplex;
+}
+export interface GrokAttachClientOptions {
+    socketPath: string;
+    input: GrokAttachInputSource;
+    output: GrokAttachOutputSink;
+    signalSource?: GrokAttachSignalSource;
+    terminalSize?: () => {
+        cols: number | undefined;
+        rows: number | undefined;
+    };
+    maxFrameBytes?: number;
+    maxBufferBytes?: number;
+    handshakeTimeoutMs?: number;
+    closeTimeoutMs?: number;
+    detachOnInputEnd?: boolean;
+    onHello?: (frame: GrokAttachHelloFrame) => void;
+    onStatus?: (frame: GrokAttachStatusFrame) => void;
+    onError?: (error: Error, frame?: GrokAttachErrorFrame) => void;
+    onDetach?: (frame: GrokAttachDetachFrame) => void;
+    dependencies?: GrokAttachDependencies;
+}
+export type GrokAttachCloseReason = "local-detach" | "input-end" | "remote-detach" | "socket-close" | "socket-error" | "protocol-error";
+export interface GrokAttachCloseInfo {
+    reason: GrokAttachCloseReason;
+    error?: Error;
+}
+export interface GrokAttachSession {
+    readonly socketPath: string;
+    readonly closed: Promise<GrokAttachCloseInfo>;
+    detach(): void;
+    resize(cols?: number, rows?: number): void;
+    /**
+     * Ask the node to switch models (issue #879).
+     *
+     * The outcome does not come back from this call — it arrives as a `status`
+     * frame carrying `modelSwitch`, because the node may accept, refuse
+     * (busy / unchanged / invalid), or fail while re-spawning. Callers read it
+     * through `onStatus`.
+     */
+    setModel(model: string): void;
+}
+export declare class GrokAttachRemoteError extends Error {
+    readonly code: string;
+    readonly fatal: boolean;
+    constructor(frame: GrokAttachErrorFrame);
+}
+export declare function validateGrokAttachSocket(socketPath: string, dependencies?: GrokAttachDependencies): Promise<void>;
+export declare function connectGrokAttach(options: GrokAttachClientOptions): Promise<GrokAttachSession>;

package/dist/src/grok-build-drift.d.ts

@@ -0,0 +1,15 @@
+/** 从一段日志文本里取出**最后一次**出现的 grok 版本串。
+ *  🔴 取最后一次，不是第一次：日志按时间追加，最后一次才是这个进程最近一次
+ *     启动时用的那个。取第一次会在日志轮转/多次重启后指向历史。 */
+export declare function parseGrokBuildFromLog(text: string): string | undefined;
+/** 从 `grok --version` 的输出里取版本串（同一形状）。 */
+export declare function parseGrokBuildFromVersionOutput(out: string): string | undefined;
+export type GrokBuildDriftKind = "match" | "drift" | "unknown-current" | "unknown-started";
+export interface GrokBuildDrift {
+    readonly kind: GrokBuildDriftKind;
+    readonly started?: string;
+    readonly current?: string;
+    /** 一句人读的话。四种 kind 四句不同的话 —— 含糊化等于把这一格的功能删掉。 */
+    readonly line: string;
+}
+export declare function describeGrokBuildDrift(started: string | undefined, current: string | undefined): GrokBuildDrift;

package/dist/src/grok-copresence-disclosure.d.ts

@@ -0,0 +1,11 @@
+export type GrokCopresenceSessionDisclosure = "configured" | "new" | "resume";
+export type GrokCopresenceDisclosure = {
+    profile: "commhub-only" | "x-search" | "repo-read" | "invalid";
+    lines: readonly string[];
+};
+/**
+ * Describe only the exact tool profiles accepted by the pinned Grok TUI
+ * runtime. This is deliberately exact: a near-miss must never be presented as
+ * either reviewed capability set.
+ */
+export declare function grokCopresenceDisclosure(tools: unknown, session?: GrokCopresenceSessionDisclosure): GrokCopresenceDisclosure;

package/dist/src/grok-copresence-orchestration.d.ts

@@ -0,0 +1,75 @@
+/** tmux session names. The attachable TUI owns the bare alias so that
+ *  `tmux attach -t '=<alias>'` lands a human on the TUI, matching the codex
+ *  lane exactly — an operator should not have to remember which runtime a node
+ *  uses in order to know where to attach. */
+export declare function grokCopresenceSessions(displayName: string): {
+    node: string;
+    tui: string;
+};
+export type GrokAttachSocketState = "missing" | "not_a_socket" | "ready";
+/** Readiness is "the attach socket exists AND is a socket", never "the child
+ *  process started". A grok leader that dies during startup leaves either no
+ *  socket at all or a stale regular file from an aborted run; both used to read
+ *  as ready because nothing looked. */
+export declare function grokAttachSocketState(entry: {
+    isSocket(): boolean;
+} | null | undefined): GrokAttachSocketState;
+/** Set on the node child so that `anet node start` inside the tmux session does
+ *  not re-enter this orchestration and fork bomb. The codex lane guards on the
+ *  same variable (cli.ts: `process.env.ANET_COPRESENCE_BRIDGE !== "1"`); using a
+ *  second name would leave two guards that must be kept in sync by hand. */
+export declare const GROK_COPRESENCE_CHILD_ENV = "ANET_COPRESENCE_BRIDGE";
+export interface GrokCopresenceDiagnosis {
+    readonly ok: boolean;
+    readonly lines: readonly string[];
+    /** #1768 —— 非阻断提示:平台能跑,但 agent-node 的能力表说它少了内核层保证。
+     *  ok=true 时也可能非空;调用方打印它,不退出。 */
+    readonly notices: readonly string[];
+}
+/** One block naming every reason this node cannot run the shared TUI, not one
+ *  exit per reason. A node that is both the wrong runtime AND missing its
+ *  attach socket should learn both in one run. */
+/** Platforms whose PTY / IPC / isolation primitives the grok co-presence lane
+ *  has actually been validated on. agent-node refuses anywhere else, and it does
+ *  so only after the node has been created and started once:
+ *
+ *    [agent-node] grok-build-cli co-presence 无法在 darwin 上运行，缺少：
+ *                 平台 darwin 尚未验证过共存所需的 PTY / IPC / 隔离原语
+ *
+ *  Learned the expensive way on a Mac mini: install anet, install agent-node,
+ *  create the node, start it — and only then find out the platform is refused.
+ *  A one-command launcher that lets someone get that far has not saved them
+ *  anything, so say it in the same breath as every other gap. */
+export declare const GROK_COPRESENCE_PLATFORMS: readonly NodeJS.Platform[];
+/** 能跑但没有内核层强制的平台 —— agent-node 启动时逐条打印 reducedGuarantees,这里只提前说一句。 */
+export declare const GROK_COPRESENCE_REDUCED_GUARANTEE_PLATFORMS: readonly NodeJS.Platform[];
+export declare function diagnoseGrokCopresence(input: {
+    runtime: string;
+    displayName: string;
+    grokCopresence?: boolean;
+    grokAttachSocket?: string;
+    platform?: NodeJS.Platform;
+}): GrokCopresenceDiagnosis;
+/** True when a plain `anet node start <name>` (no flag) should bring the shared
+ *  TUI up by itself.
+ *
+ * 🔴 Deliberately NOT keyed on `grokCopresence`. That field is set to true at
+ *    CREATE time for every grok-build-cli node, so reading it here would silently
+ *    change what `anet node start` does for every grok node that already exists —
+ *    they would stop running in the foreground and fork into tmux, unasked. Caught
+ *    exactly that way: a start without the flag entered the orchestration.
+ *
+ *    The codex lane looks the same but is not: `codexCopresence` is written only
+ *    when the operator passes the flag. So grok needs its own record of the
+ *    operator's choice, and `grokCopresenceAuto` is it. */
+export declare function grokCopresenceRequested(flagPassed: boolean, profile: {
+    runtime?: unknown;
+    grokCopresence?: unknown;
+    grokCopresenceAuto?: unknown;
+}): boolean;
+/** Record the operator's opt-in so the NEXT start needs no flag — and only then.
+ *  Never infer it from `grokCopresence`, which create sets by default. */
+export declare function shouldPersistGrokCopresence(flagPassed: boolean, profile: {
+    runtime?: unknown;
+    grokCopresenceAuto?: unknown;
+}): boolean;

package/dist/src/grok-copresence-profile.d.ts

@@ -0,0 +1,65 @@
+export declare const GROK_UNIX_SOCKET_PATH_MAX_BYTES = 100;
+export declare const GROK_COPRESENCE_CAPABILITY_MARKER = "ANET_CAPABILITY_GROK_COPRESENCE_V2";
+export declare const GROK_PREVIEW_RESOLVER_INHERITED_ENV_KEYS: readonly ["PATH", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "LC_CTYPE", "TZ"];
+export declare const GROK_AGENT_NODE_INHERITED_ENV_KEYS: readonly ["PATH", "HOME", "TMPDIR", "TMP", "TEMP", "LANG", "LC_ALL", "LC_CTYPE", "TZ", "SHELL", "USER", "LOGNAME", "TERM", "COLORTERM", "NO_COLOR"];
+export declare const GROK_AGENT_NODE_OPTIONAL_ENV_KEYS: readonly ["GROK_BINARY", "GROK_HOME", "FLOCK_BINARY", "SETPRIV_BINARY", "UNSHARE_BINARY", "GROK_CLI_TIMEOUT_MS", "GROK_HANDSHAKE_TIMEOUT_MS", "LOG_LEVEL", "ANET_GOAL_TICK_MS", "COMMHUB_MAX_GOALS_PER_NODE"];
+/** Exact environment for the long-lived agent-node parent of the Grok TUI. */
+export declare function buildGrokAgentNodeEnv(parentEnv: NodeJS.ProcessEnv): Record<string, string>;
+export declare function grokPreviewResolverConfigPaths(home: string): {
+    directory: string;
+    userConfig: string;
+    globalConfig: string;
+};
+/**
+ * npm rejects loading the same file as both user and global config. Prepare
+ * two distinct, empty, owner-only files without following a final symlink so
+ * the resolver cannot inherit a user's ordinary npmrc credentials.
+ */
+export declare function prepareGrokPreviewResolverConfigs(home: string): void;
+/** Exact environment for the short-lived npm resolver and capability probe. */
+export declare function buildGrokPreviewResolverEnv(parentEnv: NodeJS.ProcessEnv, home: string): Record<string, string>;
+/** Old headless-only agent-node builds already advertised grok-build-cli. */
+export declare function agentNodeHelpSupportsGrokCopresence(help: string): boolean;
+export interface GrokCopresenceProfileFields {
+    grokCopresence: boolean;
+    grokLeaderSocket?: string;
+    grokAttachSocket?: string;
+}
+export interface GrokSocketPathOptions {
+    cwd?: string;
+    home?: string;
+    xdgRuntimeDir?: string;
+    uid?: number;
+    platform?: NodeJS.Platform;
+}
+/**
+ * Allocate deterministic Unix socket paths without creating anything.
+ *
+ * Grok's workspace sandbox does not admit an otherwise owner-controlled
+ * XDG_RUNTIME_DIR such as /run/user/<uid>. Keep the primary sockets under the
+ * node's owner-bound state home, which the runtime already admits, and use a
+ * short private tmp path only when the Unix socket length limit requires it.
+ * The runtime owns directory creation and permissions; `anet node create`
+ * only persists the identity of the two sockets.
+ */
+export declare function grokCopresenceSocketPaths(nodeId: string, options?: GrokSocketPathOptions): {
+    leaderSocket: string;
+    attachSocket: string;
+};
+export type GrokAttachTarget = {
+    ok: true;
+    socketPath: string;
+} | {
+    ok: false;
+    reason: "not_grok_build_cli" | "headless" | "missing_attach_socket";
+};
+/**
+ * `anet grok attach` eligibility. The CLI is the only human join path;
+ * this is the shipped decision so tests can drive it without a TTY.
+ */
+export declare function resolveGrokAttachTarget(input: {
+    runtime: string;
+    grokCopresence?: unknown;
+    grokAttachSocket?: unknown;
+}): GrokAttachTarget;
+export declare function grokBuildCliCreationFields(runtime: string, nodeId: string, headless?: boolean, options?: GrokSocketPathOptions): GrokCopresenceProfileFields | Record<string, never>;

package/dist/src/host-telemetry.d.ts

@@ -0,0 +1,14 @@
+export interface HostTelemetry {
+    hostname: string;
+    ip: string | null;
+    cpu_load_1min: number | null;
+    cpu_cores: number | null;
+    mem_total_gb: number | null;
+    mem_used_gb: number | null;
+    mem_avail_gb: number | null;
+    disk_total_gb: number | null;
+    disk_used_gb: number | null;
+    disk_avail_gb: number | null;
+}
+export declare function getHostTelemetry(): HostTelemetry;
+export declare function _clearHostTelemetryCache(): void;

package/dist/src/hub-time-display.d.ts

@@ -0,0 +1,20 @@
+/**
+ * 把 hub 的 TEXT 时间戳显示给人看。
+ *
+ * 🔴 原先是**原样打印**:
+ *
+ *     updated:  2026-08-31 00:20:11
+ *
+ * 那是 UTC,**没有任何时区标记**。同一时刻本地是 `08:22:41 CST` ——
+ * 于是一个 **2 分钟前**刚心跳过的节点,在 UTC+8 的用户眼里像是 **8 小时前**的。
+ *
+ * 这不是假想:2026-08-31 我自己就这么读错过一次,据此差点报出「舰队心跳陈旧
+ * 8.3 小时」。**CLI 在主动制造这个误读。**
+ *
+ * 所以显示两样东西:
+ *   - **相对时长**(人真正想知道的那个)
+ *   - 绝对值,并**显式标 UTC**(便于和日志、issue 里的时间对齐)
+ */
+export declare function formatHubTime(raw: unknown, nowMs?: number): string;
+/** 人读的时长。负数(时钟偏差/未来时间)如实说,不折成 0。 */
+export declare function formatAgo(deltaMs: number): string;

package/dist/src/hub-version-skew.d.ts

@@ -0,0 +1,19 @@
+/**
+ * #1595 —— `anet doctor` 原先只印 hub 自报的版本:
+ *
+ *   ✅ CommHub reachable (http://127.0.0.1:9200 v0.9.0-preview.38)
+ *
+ * 读的人**看不到自己这台 CLI 钉的是哪个**。实测(2026-08-31):生产 hub 在
+ * `.38`,而 `anet hub start` 的 `PINNED_SERVER_VERSION` 是 `.44` —— 两个数
+ * 差 6 个版本,而屏幕上只有一个。今天有一整条排查(agent→用户消息为什么
+ * 验不了端到端)就卡在这个差上:`.44` 之前 `send_desktop_message` 是
+ * fire-and-forget 且仍返回 `ok:true`,所以在 `.38` 上拿到的 `ok:true`
+ * 不是「用户看到了」的证据。
+ *
+ * 🔴 **只并排摆出两个数,不判断谁对、不给阈值、不发警告。**
+ *    hub 比 CLI 的 pin 老或新都可能完全合理 —— 连的是别人运维的 hub、
+ *    本机 hub 还没重启、或者故意钉在旧版。给一个猜出来的「应该一致」
+ *    判据,会在这些正常情况下变成误报,而一个会误报的检查第一周就会被关掉。
+ *    让读的人自己看见差在哪,是这一格能诚实做到的全部。
+ */
+export declare function formatHubVersionDetail(hubUrl: string, hubVersion: unknown, pinnedVersion: string): string;

package/dist/src/im/correlation-store.d.ts

@@ -0,0 +1,34 @@
+import type { IMCorrelationStore, IMTaskCorrelation } from "./types";
+export interface JsonIMCorrelationStoreOptions {
+    now?: () => number;
+    /** How long idempotency keys remain valid. Defaults to 24h. */
+    seenTtlMs?: number;
+    /** How long terminal correlations remain queryable. Defaults to 24h. */
+    terminalTtlMs?: number;
+}
+/**
+ * Small durable store for RFC-020 §2.9④ / §4.4 correlation state.
+ *
+ * The first gateway PR needs this as a standalone data structure before the
+ * bridge is rewired: idempotency keys survive process restart, and task replies
+ * can be routed back to their originating IM conversation.
+ */
+export declare class JsonIMCorrelationStore implements IMCorrelationStore {
+    private readonly path;
+    private readonly now;
+    private readonly seenTtlMs;
+    private readonly terminalTtlMs;
+    constructor(path: string, options?: JsonIMCorrelationStoreOptions);
+    hasSeen(idempotencyKey: string): Promise<string | null>;
+    recordSeen(idempotencyKey: string, taskId: string): Promise<void>;
+    getCorrelation(taskId: string): Promise<IMTaskCorrelation | null>;
+    putCorrelation(taskId: string, correlation: IMTaskCorrelation): Promise<void>;
+    updateStatus(taskId: string, status: IMTaskCorrelation["status"]): Promise<void>;
+    gc(now: number): Promise<{
+        removed: number;
+    }>;
+    private isExpired;
+    private load;
+    private save;
+}
+export declare function createJsonIMCorrelationStore(path: string, options?: JsonIMCorrelationStoreOptions): IMCorrelationStore;

package/dist/src/im/feishu/adapter.d.ts

@@ -1,5 +1,40 @@
+/**
+ * RFC-020 §3.1 — Feishu (Lark) adapter for the IM compatibility layer.
+ *
+ * Uses `@larksuiteoapi/node-sdk` in WebSocket long-connection mode (WSClient).
+ * No public IP / no domain verification / no webhook signature decryption —
+ * the three biggest 飞书 接入 risks all live in the HTTP event-callback path,
+ * not in WSClient mode.
+ *
+ * Milestones:
+ *   M1: contract scaffold.
+ *   M2 (this file): WSClient init + EventDispatcher for `im.message.receive_v1`
+ *                   + event normalization + access whitelist gate + audit log.
+ *   M3: outbound `im.message.create` (text), edit support (≤20/msg).
+ *   M5: image upload / download (`im.image.create` / `im.messageResource.get`)
+ *       + group @bot detection refined to match the bot's own open_id.
+ */
+import * as lark from "@larksuiteoapi/node-sdk";
 import type { IMAdapter, IMAdapterHealth, IMChannelConfig, IMConversationRef, IMIngressMode, NormalizedIMEvent, NormalizedIMMessage } from "../types.js";
 type OnEventHandler = (event: NormalizedIMEvent) => Promise<void>;
+export type FeishuWsClientLike = Pick<lark.WSClient, "start" | "close">;
+export type FeishuWsClientFactory = (params: ConstructorParameters<typeof lark.WSClient>[0]) => FeishuWsClientLike;
+type FeishuInboundHandler = (rawEvent: unknown) => Promise<unknown>;
+export interface FeishuEventDispatcherLike {
+    register(handlers: Record<string, FeishuInboundHandler>): unknown;
+}
+export interface FeishuAdapterOptions {
+    /** @internal Avoids real bot-info HTTP calls in lifecycle tests. */
+    createClient?: (params: ConstructorParameters<typeof lark.Client>[0]) => lark.Client;
+    /** @internal Test seam; production uses the pinned Lark SDK WSClient. */
+    createWsClient?: FeishuWsClientFactory;
+    /** @internal Test seam; production uses the pinned Lark SDK dispatcher. */
+    createEventDispatcher?: () => FeishuEventDispatcherLike;
+    /** Independent outer bound in case the SDK promise/callback path stalls. */
+    wsReadyTimeoutMs?: number;
+    /** Called once when an already-ready socket exhausts reconnect attempts. */
+    onTerminalError?: (error: Error) => void;
+}
 export declare class FeishuAdapter implements IMAdapter {
     readonly platform = "feishu";
     readonly ingressMode: IMIngressMode;
@@ -7,6 +42,8 @@ export declare class FeishuAdapter implements IMAdapter {
     private connectionName_;
     private client;
     private wsClient;
+    private lifecycleGeneration;
+    private readonly options;
     /**
      * The bot's own open_id, resolved at init() via /open-apis/bot/v3/info.
      * Used to detect real @bot mentions (vs any mention) in group messages.
@@ -17,6 +54,7 @@ export declare class FeishuAdapter implements IMAdapter {
     /** Where to persist downloaded inbound media (M5c). */
     private mediaDir;
     private health_;
+    constructor(options?: FeishuAdapterOptions);
     /**
      * Snapshot of the current `access.allowFrom` list (from access.json).
      * Used by the bridge's rate-limiter to exempt operator-vouched explicit
@@ -94,4 +132,46 @@ export declare function parsePostContent(rawJson: string): string;
  * @internal exported for unit tests.
  */
 export declare function extractPostImageKeys(rawJson: string): string[];
+/**
+ * Sanitize a Feishu-supplied `file_name` so it's safe to append to a
+ * filesystem path. Strips `/`, `\`, `..`, control characters, and NUL
+ * bytes. Empty / all-stripped input falls back to a placeholder that
+ * uses the message id, so a hostile client can never write outside the
+ * conversation's `<mediaDir>/<convKey>/` directory.
+ *
+ * NOT a full display-safety pass — the LLM still sees the sanitized
+ * bytes and shouldn't render them as HTML/etc. That's a Layer above.
+ */
+export declare function sanitizeFileName(raw: string, fallback: string): string;
+/**
+ * Feishu text-message practical chunk threshold (RFC-020 §16).
+ *
+ * The official `im.message.create`/`reply` content limit for
+ * `msg_type:text` is ~30 KB JSON-encoded (`{"text":"..."}`), comfortably
+ * under what any reasonable bot reply produces. We chunk below that
+ * limit at 4000 CHARACTERS — gives a roomy safety margin for multi-byte
+ * UTF-8 and lets us split at paragraph boundaries cleanly. Chosen
+ * conservatively after Vincent 2026-06-30 ask "issue 发文字" (i.e.
+ * never silently fall back to PNG for "long" plain-text replies — they
+ * just chunk into multiple messages).
+ *
+ * Single-message ceiling, NOT a per-second rate limit (that's separate;
+ * RFC-020 §4.4).
+ */
+export declare const FEISHU_TEXT_SINGLE_LIMIT = 4000;
+/**
+ * Split a long text into chunks ≤ `maxChars`. Tries paragraph boundaries
+ * (`\n\n`), then line boundaries (`\n`), then word boundaries (space),
+ * then hard byte split. Output preserves the original text content
+ * (sum of chunks == original, modulo the boundary character that gets
+ * consumed by the split).
+ *
+ * If the input is already short enough, returns a single-element array.
+ */
+export declare function splitTextForFeishu(text: string, maxChars: number): string[];
+/**
+ * Lark errors may echo request/config values. Keep worker logs actionable while
+ * ensuring credentials and multiline payloads never cross the process boundary.
+ */
+export declare function sanitizeFeishuWsError(rawError: unknown, appId: string, appSecret: string): Error;
 export {};

package/dist/src/im/feishu/bridge.d.ts

@@ -2,22 +2,36 @@
  * RFC-020 §2.5 / RFC-002 §2.2 — Feishu bridge worker.
  *
  * Entry point spawned by agent-node when a node profile has `channels.feishu`
- * enabled. Per Vincent 2026-06-24 decision, the first-cut is the simplified
- * "agent-node direct bridge" model, not the full commhub-gateway:
+ * enabled. This worker owns the FeishuAdapter and its WSClient connection.
  *
- *   - This worker owns the FeishuAdapter and its WSClient connection.
- *   - Inbound IM event → access whitelist gate → forward to agent-node's main
- *     `think()` via parent IPC.
- *   - think() result → adapter.send() back to the originating conversation.
+ * 🔴 There are TWO outbound paths, and which one runs is decided at line ~445:
  *
- * Differences vs RFC-020 §2.5 full commhub-gateway path:
+ *     const client = commhubClient ?? createEnvCommHubClient();
+ *     if (client) return createCommHubEventHandler(...);   // (A)
+ *     if (typeof process.send === "function") ...          // (B)
+ *
+ *   (A) CommHub task dispatch — **the default on any real node.**
+ *       `createEnvCommHubClient()` returns null only when neither COMMHUB_URL
+ *       nor ANET_HUB_URL is set, and every provisioned node has one. Replies
+ *       carry `in_reply_to`, and the correlation store tracks task status.
+ *   (B) parent IPC → agent-node's `think()` — the fallback when there is no
+ *       hub URL in env (standalone / test harness).
+ *
+ *   Both paths end at adapter.send() back to the originating conversation.
+ *
+ * 🔴 This block used to say the opposite —— verbatim:
+ *       "IM messages do NOT pass through commhub task dispatch."
+ *   That was true of the 2026-06-24 first cut, and stayed in the file after
+ *   the commhub path landed (#1252, merged 2026-08-27). It is the first thing
+ *   anyone reads in this file, so it mis-answered the question "does Feishu go
+ *   through CommHub" for at least one reader before being caught. If you change
+ *   which path is default, change these lines in the same commit.
+ *
+ * Still true of both paths (unchanged from the first cut):
  *   - No separate gateway ntok_ / dedicated commhub alias.
- *   - IM messages do NOT pass through commhub task dispatch.
- *   - Feishu messages do NOT appear in Dashboard topology / Chat.
  *
- * The full §2.9 path (meta_json columns, SSE passthrough, persisted
- * IMCorrelationStore) lands as the follow-up PR after this demo ships
- * — tracked in #182.
+ * The remaining §2.9 work (meta_json columns, SSE passthrough, Dashboard
+ * topology / Chat visibility for Feishu conversations) is tracked in #182.
  *
  * Milestones:
  *   M1: worker entry scaffold.
@@ -29,8 +43,29 @@
  *   M4: agent-node spawn integration (fork(this) wired by agent-node).
  *   M5: group @bot trigger refinement, image up/down, Docker smoke.
  */
-import type { NormalizedIMEvent } from "../types.js";
+import type { IMCorrelationStore, NormalizedIMEvent } from "../types.js";
 import { FeishuAdapter } from "./adapter.js";
+export type IMBridgeCommHubInboxMessage = {
+    id: string;
+    type?: string;
+    content: string;
+    from_session?: string;
+    in_reply_to?: string;
+    meta?: unknown;
+};
+export interface IMBridgeCommHubClient {
+    sendTask(args: {
+        alias: string;
+        task: string;
+        priority?: "high" | "normal" | "low";
+        ttlSeconds?: number;
+        meta?: unknown;
+    }): Promise<{
+        taskId: string;
+    }>;
+    getInbox(alias: string): Promise<IMBridgeCommHubInboxMessage[]>;
+    ackInbox(alias: string, messageId: string): Promise<void>;
+}
 export interface FeishuBridgeOptions {
     /** Absolute path to `.anet/nodes/<node>/channels/feishu/`. */
     channelDir: string;
@@ -44,11 +79,28 @@ export interface FeishuBridgeOptions {
      *   - stderr logger otherwise (standalone smoke debugging).
      */
     onEvent?: (event: NormalizedIMEvent) => Promise<void>;
+    /** Fatal WS failure after initial readiness (for worker lifecycle ownership). */
+    onTerminalError?: (error: Error) => void;
+    /** Persistent task/message correlation state. Defaults to channelDir/state.json. */
+    correlationStore?: IMCorrelationStore;
+    /** CommHub task transport. Defaults to COMMHUB_URL/COMMHUB_TOKEN when available. */
+    commhubClient?: IMBridgeCommHubClient;
+    /** Poll interval for CommHub replies. Defaults to 1500ms. */
+    commhubPollMs?: number;
+    /** 出站传输模式。省略时按 ANET_FEISHU_BRIDGE_MODE,再省略则 "direct"。 */
+    bridgeMode?: FeishuBridgeMode;
 }
 /** Bridge → parent: inbound IM event ready for think(). */
 export interface BridgeIncomingEnvelope {
     type: "event";
     event: NormalizedIMEvent;
+    /** Canonical outbound directory for this conversation (RFC-020 §15.1).
+     *  Single source of truth — the agent-node injects this verbatim into
+     *  the system prompt's "save files here" instruction, and the bridge
+     *  whitelist accepts files only under this directory. Computed by the
+     *  bridge from `event.conversation.conversationId` + `adapter
+     *  .connectionName`. Trailing slash included. */
+    outboundDir?: string;
 }
 /** Parent → bridge: agent reply text for a previously-forwarded event. */
 export interface BridgeReplyEnvelope {
@@ -94,6 +146,24 @@ export type WithRateLimitHandle = {
         floodKeyCount: number;
     };
 };
+/**
+ * 出站传输模式。**显式声明,不靠环境变量在场与否去猜。**
+ *
+ *   direct  — parent IPC → agent-node 的 think()。**默认。**
+ *             2026-06-24 的第一版路径,飞书消息不进 CommHub 任务分发,
+ *             也不出现在 Dashboard 拓扑 / Chat 里。
+ *   commhub — 入站事件变成一个 CommHub task,回复带 in_reply_to,
+ *             correlation store 跟踪状态。**必须显式打开。**
+ *
+ * 🔴 为什么要显式:在此之前是 `commhubClient ?? createEnvCommHubClient()` ——
+ * 有 COMMHUB_URL 就走 commhub、没有就悄悄回落 IPC。两条路径的可观测性、
+ * Dashboard 可见性、失败语义完全不同,而**运维看不出自己在哪条上**,
+ * 文件头注释也因此和代码说了相反的话长达一次发布。
+ */
+export type FeishuBridgeMode = "commhub" | "direct";
+export declare const DEFAULT_FEISHU_BRIDGE_MODE: FeishuBridgeMode;
+/** 解析模式。优先级:显式入参 > 环境变量 > 默认。非法值直接抛,不静默取默认。 */
+export declare function resolveFeishuBridgeMode(explicit?: FeishuBridgeMode, env?: NodeJS.ProcessEnv): FeishuBridgeMode;
 /**
  * IPC handler — forwards inbound events to the parent agent-node and routes
  * the parent's reply back to Feishu via the adapter. The parent contract is
@@ -118,7 +188,8 @@ export type WithRateLimitHandle = {
  *     the agent-node.log (closes the prior silent-success blindspot).
  */
 /** @internal exported for test harness; not intended for production callers. */
-export declare function createIPCEventHandler(adapter: FeishuAdapter, ttlMs: number, ackPlaceholder: boolean): (event: NormalizedIMEvent) => Promise<void>;
+export declare function createIPCEventHandler(adapter: FeishuAdapter, ttlMs: number, ackPlaceholder: boolean, correlationStore?: IMCorrelationStore): (event: NormalizedIMEvent) => Promise<void>;
+export declare function createCommHubEventHandler(nodeAlias: string, adapter: FeishuAdapter, ttlMs: number, ackPlaceholder: boolean, correlationStore: IMCorrelationStore | undefined, commhubClient: IMBridgeCommHubClient, pollMs?: number): (event: NormalizedIMEvent) => Promise<void>;
 export { FeishuAdapter } from "./adapter.js";
 export { loadFeishuChannelConfig } from "./config.js";
 export type { FeishuAccessList, FeishuChannelConfig, FeishuChannelEnv, } from "./config.js";