@xfey/tutti 0.1.103 → 0.1.104

package/dist/server-shell/local-console/project-service.d.ts

@@ -1,11 +1,14 @@
+import { type ProjectSurface, type ProjectSurfaceProfile } from "@tutti/shared/domain";
 import { type ProjectId, type RelayProjectRef } from "@tutti/shared/ids";
 import { type ConfigureProjectOpenAiProviderResult, type OpenAiProviderCredentialValidator } from "../../providers/openai/index.js";
 import { type FetchLike } from "../cli/host-runtime-endpoint.js";
+import type { HostLaunchRelaySummary } from "../cli/relay-registration.js";
 import { type RuntimeProjectRow } from "../cli/runtime-commands.js";
 import { type LocalConsoleInvocationContext } from "./invocation-context.js";
 import { LocalConsoleOperationCoordinator } from "./operation-coordinator.js";
 export type LocalConsoleProject = {
     project_id: ProjectId;
+    surface_profile: ProjectSurfaceProfile;
     display_name: string;
     workspace_path: string;
     status: RuntimeProjectRow["status"];
@@ -31,8 +34,13 @@ export type LocalConsoleProjectMetadataInput = {
 export type LocalConsoleLaunchResult = {
     project: LocalConsoleProject;
     project_created: boolean;
-    join_url: string;
+    join_url?: string;
     join_token_expires_at?: string;
+    feishu_setup?: HostLaunchRelaySummary["feishu_setup"];
+};
+export type LocalConsoleAccountHandoff = {
+    token: string;
+    expires_at: string;
 };
 export type LocalConsoleOpenResult = {
     project: LocalConsoleProject;
@@ -79,7 +87,8 @@ export declare class LocalConsoleProjectService {
         workspacePath: string;
         project?: LocalConsoleProjectMetadataInput;
         provider?: LocalConsoleProviderInput;
-    }, context: LocalConsoleInvocationContext): Promise<LocalConsoleLaunchResult>;
+        surface?: ProjectSurface;
+    }, context: LocalConsoleInvocationContext, accountHandoff?: LocalConsoleAccountHandoff): Promise<LocalConsoleLaunchResult>;
     openProject(projectId: string, context: LocalConsoleInvocationContext): Promise<LocalConsoleOpenResult>;
     refreshInvite(projectId: string, context: LocalConsoleInvocationContext): Promise<{
         join_url: string;

package/dist/server-shell/local-console/project-service.js

@@ -1,6 +1,7 @@
 import { existsSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 import { readRelayProjectMembershipState } from "@tutti/relay-client";
+import { createProjectSurfaceProfile, } from "@tutti/shared/domain";
 import { relayProjectRouteSegment } from "@tutti/shared/ids";
 import { configureProjectOpenAiProvider, discoverOpenAiModels, isOpenAiApiKey, readOpenAiProviderConfigProjection, validateOpenAiCredential, } from "../../providers/openai/index.js";
 import { formatCliErrorReason, LaunchError } from "../cli/errors.js";
@@ -8,7 +9,7 @@ import { createRuntimeEndpointProbe, waitForHostShutdown, } from "../cli/host-ru
 import { prepareLaunchProject, resolveLaunchLocalContext, resolveRelayUrl } from "../cli/launch.js";
 import { readHostLocalLaunchStatus, requestHostLocalIdleShutdown, rotateHostLocalInvite, } from "../cli/local-control-client.js";
 import { readFreshVisibleJoinUrl } from "../cli/join-url.js";
-import { readHostRegistrationSecret, readMachineProjectBinding, readMachineRuntimeEndpoint, } from "../cli/machine-local.js";
+import { readHostRegistrationSecret, readMachineProjectBinding, readMachineRuntimeEndpoint, writeFeishuOwnerAccountHandoff, } from "../cli/machine-local.js";
 import { spawnDetachedHost, waitForManagedHostReady } from "../cli/managed-host.js";
 import { relayStatusFromLocalStatus } from "../cli/host-relay-status.js";
 import { resolveManagedProjectContext } from "../cli/project-resolver.js";
@@ -88,9 +89,12 @@ function validateProjectMetadata(input) {
 }
 function projectFromRuntimeRow(row, providerStatus, providerModel, metadata) {
     const currentVersion = readCliVersion();
-    const openUrl = projectOpenUrl(metadata.relayUrl, row.relay_project_ref);
+    const openUrl = metadata.surfaceProfile.kind === "standalone"
+        ? projectOpenUrl(metadata.relayUrl, row.relay_project_ref)
+        : undefined;
     return {
         project_id: row.project_id,
+        surface_profile: metadata.surfaceProfile,
         display_name: row.display_name,
         workspace_path: row.workspace_root,
         status: row.status,
@@ -213,6 +217,7 @@ export class LocalConsoleProjectService {
                 ...(activityAt === undefined ? {} : { activityAt }),
                 ...(createdAt === undefined ? {} : { createdAt }),
                 relayUrl: binding?.relay_url ?? relayUrlFromJoinUrl(row.join_url) ?? resolveRelayUrl(operation.env),
+                surfaceProfile: binding?.surface_profile ?? createProjectSurfaceProfile(),
             });
         });
     }
@@ -224,7 +229,9 @@ export class LocalConsoleProjectService {
         return project;
     }
     async #startManagedHost(options) {
-        spawnDetachedHost({
+        const startup = spawnDetachedHost({
+            tuttiHome: options.tuttiHome,
+            projectId: options.projectId,
             workspaceRoot: options.workspaceRoot,
             env: options.env,
             inheritProcessEnv: false,
@@ -234,6 +241,7 @@ export class LocalConsoleProjectService {
             projectId: options.projectId,
             workspaceRoot: options.workspaceRoot,
             fetchImpl: this.#fetchImpl,
+            startupAttemptRef: startup.startup_attempt_ref,
             ...(options.inviteMode === undefined ? {} : { inviteMode: options.inviteMode }),
         });
     }
@@ -289,7 +297,7 @@ export class LocalConsoleProjectService {
             throw new LocalConsoleProjectError("provider_configuration_required", "This project does not have a valid saved Provider. Configure it in the launch form.");
         }
     }
-    async launchProject(input, context) {
+    async launchProject(input, context, accountHandoff) {
         const workspacePath = validateWorkspacePath(input.workspacePath);
         const active = this.#launches.get(workspacePath);
         if (active !== undefined) {
@@ -304,14 +312,15 @@ export class LocalConsoleProjectService {
             ...(input.provider === undefined
                 ? {}
                 : { provider: validateProvider(input.provider) }),
-        }, context))
+            ...(input.surface === undefined ? {} : { surface: input.surface }),
+        }, context, accountHandoff))
             .finally(() => {
             this.#launches.delete(workspacePath);
         });
         this.#launches.set(workspacePath, launch);
         return await launch;
     }
-    async #launchProject(input, context) {
+    async #launchProject(input, context, accountHandoff) {
         const operation = this.#operationOptions(context);
         if (input.provider === undefined) {
             try {
@@ -335,6 +344,7 @@ export class LocalConsoleProjectService {
                             ? {}
                             : { projectDescription: input.project.description }),
                     }),
+                ...(input.surface === undefined ? {} : { projectSurface: input.surface }),
                 ...operation,
             });
         }
@@ -357,6 +367,16 @@ export class LocalConsoleProjectService {
         else if (preparation.provider_status !== "configured") {
             throw new LocalConsoleProjectError("provider_configuration_required", "This project does not have a valid saved Provider. Configure it in the launch form.");
         }
+        if (preparation.machine_local.binding.surface_profile.kind === "feishu" &&
+            accountHandoff !== undefined) {
+            writeFeishuOwnerAccountHandoff({
+                tuttiHome: preparation.tutti_home,
+                projectId: preparation.project_id,
+                token: accountHandoff.token,
+                expiresAt: accountHandoff.expires_at,
+                now: this.#now(),
+            });
+        }
         try {
             const ready = await this.#startManagedHost({
                 workspaceRoot: preparation.workspace_root,
@@ -364,7 +384,8 @@ export class LocalConsoleProjectService {
                 projectId: preparation.project_id,
                 env: operation.env,
             });
-            if (ready.join_url === undefined) {
+            if (preparation.machine_local.binding.surface_profile.kind === "standalone" &&
+                ready.join_url === undefined) {
                 throw new LocalConsoleProjectError("relay_registration_failed", "The host started, but Relay did not return a visible join link.");
             }
             const projects = await this.listProjects(context);
@@ -375,10 +396,11 @@ export class LocalConsoleProjectService {
             return {
                 project,
                 project_created: preparation.project_identity_created,
-                join_url: ready.join_url,
+                ...(ready.join_url === undefined ? {} : { join_url: ready.join_url }),
                 ...(ready.join_token_expires_at === undefined
                     ? {}
                     : { join_token_expires_at: ready.join_token_expires_at }),
+                ...(ready.feishu_setup === undefined ? {} : { feishu_setup: ready.feishu_setup }),
             };
         }
         catch (error) {
@@ -388,6 +410,9 @@ export class LocalConsoleProjectService {
     async openProject(projectId, context) {
         return await this.#operations.runProjectOperation(async () => {
             const current = await this.#readProject(projectId, context);
+            if (current.surface_profile.kind !== "standalone") {
+                throw new LocalConsoleProjectError("project_surface_mismatch", "Feishu collaboration projects do not use the Standalone workspace entry.");
+            }
             if (current.open_url === undefined) {
                 throw new LocalConsoleProjectError("project_open_unavailable", "This project does not have a Relay destination yet.");
             }
@@ -534,6 +559,9 @@ export class LocalConsoleProjectService {
                 target: projectId,
                 ...this.#operationOptions(context),
             });
+            if (project.binding?.surface_profile.kind !== "standalone") {
+                throw new LocalConsoleProjectError("project_surface_mismatch", "Feishu collaboration projects do not use Standalone invite links.");
+            }
             if (project.runtime_endpoint === null) {
                 throw new LocalConsoleProjectError("host_not_running", "Launch this project before creating an invite link.");
             }

package/dist/server-shell/local-console/server.js

@@ -405,6 +405,10 @@ export function createLocalConsoleServer(options) {
                             model: { type: "string", minLength: 1, maxLength: 240 },
                         },
                     },
+                    surface: {
+                        type: "string",
+                        enum: ["standalone", "feishu"],
+                    },
                 },
             },
         },
@@ -414,7 +418,8 @@ export function createLocalConsoleServer(options) {
             workspacePath: request.body.workspace_path,
             ...(request.body.project === undefined ? {} : { project: request.body.project }),
             ...(request.body.provider === undefined ? {} : { provider: request.body.provider }),
-        }, session.context);
+            ...(request.body.surface === undefined ? {} : { surface: request.body.surface }),
+        }, session.context, session.accountHandoff);
     });
     app.post(`${LOCAL_CONSOLE_API_BASE}/projects/:projectId/open`, async (request) => {
         const session = requireSession(request, true);

package/dist/server-shell/local-console/session.d.ts

@@ -13,6 +13,10 @@ export type ExchangedLocalConsoleSession = {
 export type ReadLocalConsoleSession = {
     accountReady: boolean;
     accountDisplayName?: string;
+    accountHandoff?: {
+        token: string;
+        expires_at: string;
+    };
     csrfToken: string;
     context: LocalConsoleInvocationContext;
 };

package/dist/server-shell/local-console/session.js

@@ -111,6 +111,12 @@ export class LocalConsoleSessionRegistry {
             ...(normalizedAccountDisplayName === undefined
                 ? {}
                 : { accountDisplayName: normalizedAccountDisplayName }),
+            ...(accessToken.accountReady
+                ? {
+                    accountHandoffToken: token,
+                    accountHandoffExpiresAt: accessToken.expiresAt,
+                }
+                : {}),
             hash: contextHash,
             expiresAt: session.expiresAt,
             sessionHash,
@@ -147,6 +153,14 @@ export class LocalConsoleSessionRegistry {
             ...(context.accountDisplayName === undefined
                 ? {}
                 : { accountDisplayName: context.accountDisplayName }),
+            ...(context.accountHandoffToken === undefined || context.accountHandoffExpiresAt === undefined
+                ? {}
+                : {
+                    accountHandoff: {
+                        token: context.accountHandoffToken,
+                        expires_at: new Date(context.accountHandoffExpiresAt).toISOString(),
+                    },
+                }),
             csrfToken: session.csrfToken,
             context: context.context,
         };

package/dist/server-shell/session/relay-session-context.d.ts

@@ -1,5 +1,6 @@
-import { type RelaySessionContext } from "@tutti/shared/schemas/internal";
+import { type FeishuPlatformSessionContext, type RelaySessionContext } from "@tutti/shared/schemas/internal";
 export declare const RELAY_SESSION_CONTEXT_METADATA_KEY = "relay_session_context";
+export declare const FEISHU_PLATFORM_SESSION_CONTEXT_METADATA_KEY = "feishu_platform_session_context";
 export declare const TRUSTED_RELAY_METADATA_REQUEST_HEADER = "x-tutti-internal-relay-metadata-id";
 export type RelaySessionContextReadResult = {
     kind: "present";
@@ -9,6 +10,14 @@ export type RelaySessionContextReadResult = {
 } | {
     kind: "invalid";
 };
+export type FeishuPlatformSessionContextReadResult = {
+    kind: "present";
+    context: FeishuPlatformSessionContext;
+} | {
+    kind: "missing";
+} | {
+    kind: "invalid";
+};
 export declare class RelaySessionInvalidError extends Error {
     readonly statusCode = 401;
     readonly code = "relay_session_invalid";
@@ -22,4 +31,6 @@ export declare class TrustedRelaySessionMetadataStore {
 export declare function createTrustedRelaySessionMetadataStore(): TrustedRelaySessionMetadataStore;
 export declare function readRelaySessionContext(metadata: unknown): RelaySessionContextReadResult;
 export declare function requireRelaySessionContext(metadata: unknown): RelaySessionContext;
+export declare function readFeishuPlatformSessionContext(metadata: unknown): FeishuPlatformSessionContextReadResult;
+export declare function requireFeishuPlatformSessionContext(metadata: unknown): FeishuPlatformSessionContext;
 //# sourceMappingURL=relay-session-context.d.ts.map

package/dist/server-shell/session/relay-session-context.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
-import { parseRelaySessionContext } from "@tutti/shared/schemas/internal";
+import { parseFeishuPlatformSessionContext, parseRelaySessionContext, } from "@tutti/shared/schemas/internal";
 export const RELAY_SESSION_CONTEXT_METADATA_KEY = "relay_session_context";
+export const FEISHU_PLATFORM_SESSION_CONTEXT_METADATA_KEY = "feishu_platform_session_context";
 export const TRUSTED_RELAY_METADATA_REQUEST_HEADER = "x-tutti-internal-relay-metadata-id";
 export class RelaySessionInvalidError extends Error {
     statusCode = 401;
@@ -46,4 +47,21 @@ export function requireRelaySessionContext(metadata) {
     }
     return result.context;
 }
+export function readFeishuPlatformSessionContext(metadata) {
+    if (!isRecord(metadata) || !(FEISHU_PLATFORM_SESSION_CONTEXT_METADATA_KEY in metadata)) {
+        return { kind: "missing" };
+    }
+    const context = parseFeishuPlatformSessionContext(metadata[FEISHU_PLATFORM_SESSION_CONTEXT_METADATA_KEY]);
+    if (context === null) {
+        return { kind: "invalid" };
+    }
+    return { kind: "present", context };
+}
+export function requireFeishuPlatformSessionContext(metadata) {
+    const result = readFeishuPlatformSessionContext(metadata);
+    if (result.kind !== "present") {
+        throw new RelaySessionInvalidError();
+    }
+    return result.context;
+}
 //# sourceMappingURL=relay-session-context.js.map

package/migrations/0016_external_source_mappings.sql

@@ -0,0 +1,141 @@
+CREATE TABLE external_source_mappings (
+  platform TEXT NOT NULL,
+  installation_ref TEXT NOT NULL,
+  conversation_ref TEXT NOT NULL,
+  thread_ref TEXT,
+  parent_message_ref TEXT,
+  external_message_ref TEXT NOT NULL,
+  message_id TEXT NOT NULL UNIQUE,
+  binding_ref TEXT NOT NULL,
+  receipt_key TEXT NOT NULL UNIQUE,
+  external_subject_ref TEXT NOT NULL,
+  author_account_ref TEXT NOT NULL,
+  author_display_name TEXT NOT NULL,
+  external_created_at TEXT NOT NULL,
+  accepted_at TEXT NOT NULL,
+  initial_revision_ref TEXT NOT NULL,
+  initial_observed_at TEXT NOT NULL,
+  content_sha256 TEXT NOT NULL CHECK (
+    content_sha256 GLOB 'sha256:[0-9a-f]*' AND length(content_sha256) = 71
+  ),
+  adapter_version TEXT NOT NULL,
+  latest_revision_ref TEXT NOT NULL,
+  latest_external_updated_at TEXT NOT NULL,
+  external_deleted_at TEXT,
+  PRIMARY KEY (platform, installation_ref, external_message_ref),
+  FOREIGN KEY (message_id) REFERENCES messages(id) ON DELETE RESTRICT
+);
+
+CREATE INDEX external_source_mappings_conversation_order
+  ON external_source_mappings (
+    platform,
+    installation_ref,
+    conversation_ref,
+    accepted_at,
+    message_id
+  );
+
+CREATE TABLE external_source_revision_observations (
+  platform TEXT NOT NULL,
+  installation_ref TEXT NOT NULL,
+  external_message_ref TEXT NOT NULL,
+  revision_ref TEXT NOT NULL,
+  observation_kind TEXT NOT NULL CHECK (
+    observation_kind IN ('created', 'edited', 'deleted')
+  ),
+  content_sha256 TEXT CHECK (
+    content_sha256 IS NULL
+    OR (content_sha256 GLOB 'sha256:[0-9a-f]*' AND length(content_sha256) = 71)
+  ),
+  external_updated_at TEXT NOT NULL,
+  observed_at TEXT NOT NULL,
+  adapter_version TEXT NOT NULL,
+  PRIMARY KEY (
+    platform,
+    installation_ref,
+    external_message_ref,
+    revision_ref
+  ),
+  FOREIGN KEY (platform, installation_ref, external_message_ref)
+    REFERENCES external_source_mappings (
+      platform,
+      installation_ref,
+      external_message_ref
+    )
+    ON DELETE RESTRICT,
+  CHECK (observation_kind != 'created' OR content_sha256 IS NOT NULL)
+);
+
+CREATE INDEX external_source_revision_observations_order
+  ON external_source_revision_observations (
+    platform,
+    installation_ref,
+    external_message_ref,
+    external_updated_at,
+    revision_ref
+  );
+
+CREATE TRIGGER external_source_mapping_identity_immutable
+BEFORE UPDATE OF
+  platform,
+  installation_ref,
+  conversation_ref,
+  thread_ref,
+  parent_message_ref,
+  external_message_ref,
+  message_id,
+  binding_ref,
+  receipt_key,
+  external_subject_ref,
+  author_account_ref,
+  author_display_name,
+  external_created_at,
+  accepted_at,
+  initial_revision_ref,
+  initial_observed_at,
+  content_sha256,
+  adapter_version
+ON external_source_mappings
+BEGIN
+  SELECT RAISE(ABORT, 'external source mapping evidence is immutable');
+END;
+
+CREATE TRIGGER external_source_mapping_no_delete
+BEFORE DELETE ON external_source_mappings
+BEGIN
+  SELECT RAISE(ABORT, 'external source mapping evidence is immutable');
+END;
+
+CREATE TRIGGER external_source_revision_observation_no_update
+BEFORE UPDATE ON external_source_revision_observations
+BEGIN
+  SELECT RAISE(ABORT, 'external source revision observations are append-only');
+END;
+
+CREATE TRIGGER external_source_revision_observation_no_delete
+BEFORE DELETE ON external_source_revision_observations
+BEGIN
+  SELECT RAISE(ABORT, 'external source revision observations are append-only');
+END;
+
+CREATE TRIGGER external_source_message_evidence_immutable
+BEFORE UPDATE OF
+  scope_kind,
+  clarification_round_id,
+  author_kind,
+  author_ref,
+  author_display_name,
+  author_avatar_json,
+  message_kind,
+  body,
+  refs_json,
+  created_at
+ON messages
+WHEN EXISTS (
+  SELECT 1
+  FROM external_source_mappings
+  WHERE external_source_mappings.message_id = OLD.id
+)
+BEGIN
+  SELECT RAISE(ABORT, 'external source message evidence is immutable');
+END;

package/migrations/0017_platform_outbound_intents.sql

@@ -0,0 +1,31 @@
+CREATE TABLE platform_outbound_intents (
+  intent_ref TEXT PRIMARY KEY CHECK (intent_ref GLOB 'idem_*'),
+  platform TEXT NOT NULL CHECK (platform = 'feishu'),
+  installation_ref TEXT NOT NULL,
+  binding_ref TEXT NOT NULL,
+  trigger_message_id TEXT NOT NULL,
+  canonical_message_id TEXT NOT NULL UNIQUE,
+  disposition TEXT NOT NULL CHECK (
+    disposition IN ('pending', 'sending', 'retry_wait', 'handed_off', 'terminal')
+  ),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  next_attempt_at TEXT,
+  last_attempt_at TEXT,
+  delivery_ref TEXT,
+  error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  handed_off_at TEXT,
+  FOREIGN KEY (trigger_message_id) REFERENCES messages(id) ON DELETE RESTRICT,
+  FOREIGN KEY (canonical_message_id) REFERENCES messages(id) ON DELETE RESTRICT,
+  CHECK (
+    (disposition = 'handed_off' AND delivery_ref IS NOT NULL AND handed_off_at IS NOT NULL)
+    OR disposition != 'handed_off'
+  )
+);
+
+CREATE INDEX platform_outbound_intents_due
+  ON platform_outbound_intents (disposition, next_attempt_at, created_at, intent_ref);
+
+CREATE INDEX platform_outbound_intents_trigger
+  ON platform_outbound_intents (trigger_message_id, created_at, intent_ref);

package/migrations/README.md

@@ -28,10 +28,12 @@
 - `0013_scratchpad_receipt_sources.sql`：新增当前 Scratchpad snapshot 与 submitted receipt 的 source message id 引用表，供 Timeline Task Accepted 追溯原始聊天依据。
 - `0014_scratchpad_task_compile_context.sql`：把 Scratchpad source state 收敛为纯主群聊周期 cursor，新增 durable active Task Compile Context 与完整 source refs，并把 Current Scratchpad / receipt sources 限定为主群聊。该开发阶段 migration 不迁移旧调试数据，已有本地开发数据库需要 reset / recreate。
 - `0015_control_plane_intents.sql`：新增 Control Plane durable dispatch intent，保存 bounded kind / owner / dedupe / lane、pending-to-running claim lease 与 terminal 状态，为 Clarification、Task Compile、Scratchpad、Reference Summary 和 Run 提供可恢复的 runtime handoff；同时用 immutable pending Task Compile submission row 固化 context capture 前的 workflow / main-chat cursor boundary，不保存 prompt、消息正文、provider output、secret 或 host path。
+- `0016_external_source_mappings.sql`：新增external installation / message identity到既有`messages.id`的一对一mapping和append-only revision observation；mapped message evidence、mapping identity与observations由trigger / FK保护，不保存raw platform payload、credential或短期URL。
+- `0017_platform_outbound_intents.sql`：新增Host-owned platform outbound intent；只引用canonical / trigger message与installation / binding locator，保存handoff attempt和terminal状态，不复制回复正文或保存conversation ref / credential。
 
 ## 当前实现状态
 
-- `0001_init.sql` 至 `0015_control_plane_intents.sql` 已存在，代表当前 host project SQLite schema contract。`0014` 明确采用开发数据库重建策略，不提供旧 Scratchpad source/cursor 数据兼容。
+- `0001_init.sql` 至 `0017_platform_outbound_intents.sql` 已存在，代表当前 host project SQLite schema contract。`0014` 明确采用开发数据库重建策略，不提供旧 Scratchpad source/cursor 数据兼容；`0016`–`0017`是additive migration，不要求为既有internal Chat message或agent response回填external mapping / outbound intent。
 - SQLite adapter、migration runner、checksum 校验、store metadata 初始化、transaction helper 与 command recovery scan helper 已实现。
 - 协作 repository 与 Control Plane 已实现第一批业务读写；Phase 7 首批已复用 `0001_init.sql` 中的 `tasks.latest_run_result_id`、`task_details.result_json` 与 `run_results` 表完成 Run result / checks / promotion 摘要持久化。Control Plane recovery resolver 与 task-bound continuation / retry 复用现有 schema；新 Run 的 accepted checkpoint 业务 truth 继续写入最终 Run result / task detail result，Git tag / commit trailer 承担 crash recovery evidence。Timeline 默认从 `tasks`、`run_results` 与历史主群聊 `refs.worklist_feedback` 投影任务级审计节点，当前 task terminal Chat feedback 写入 `refs.task_result` 消息；`project_timeline_events` 只保留缺少稳定 record 的轻量可观测性事件和历史 reconcile 兼容记录。project workspace、working diff 与 ignored runtime state 都不进入 SQLite truth。`provider_usage_events` 只保存 token 计数、调用来源、模型名、记录时间和可空 anchor，不保存 provider secret、prompt 或 raw response。store 基础设施本身已经可以创建并迁移 `tutti.sqlite`。
 

package/node_modules/@tutti/relay-client/dist/host-control.d.ts

@@ -1,10 +1,13 @@
 import { type HostConnectionRef, type IdempotencyKey, type ProjectId, type RelayProjectRef, type RelayUploadRef } from "@tutti/shared/ids";
+import type { ProjectSurfaceProfile } from "@tutti/shared/domain";
 import type { RelayUploadPurpose, Sha256Digest } from "@tutti/shared/schemas/api";
+import { type FeishuSetupProjection, type PlatformOutboundHandoffResponse, type PlatformOutboundTextIntent } from "@tutti/shared/schemas/internal";
 export type RelayHostControlFetch = (input: string | URL, init?: RequestInit) => Promise<Response>;
 export type RelayProjectProjection = {
     relay_project_ref: RelayProjectRef;
     display_name: string;
     host_status: "online" | "offline" | "unknown";
+    surface_profile?: ProjectSurfaceProfile;
 };
 export type HostConnectionProjection = {
     host_connection_ref: HostConnectionRef;
@@ -31,6 +34,7 @@ export type RegisterRelayHostConnectionPayload = {
         secret: string;
     };
     display_name: string;
+    surface_profile?: ProjectSurfaceProfile;
     host: {
         server_version: string;
         host_project_api_base_path: "/api/v1";
@@ -39,17 +43,24 @@ export type RegisterRelayHostConnectionPayload = {
             provider_config_query: boolean;
             browser_secret_write: false;
             repo_viewer: boolean;
+            integration_source_ingestion_v1?: boolean;
+            integration_outbound_v1?: boolean;
         };
     };
     join_token?: {
         mode: "reuse_active" | "rotate";
         ttl_seconds?: number;
     };
+    owner_bootstrap?: {
+        kind: "local_console_account_handoff_v1";
+        account_handoff_token: string;
+    };
 };
 export type RegisterRelayHostConnectionResult = {
     relay_project: RelayProjectProjection;
     host_connection: HostConnectionProjection;
-    join_token: JoinTokenProjection;
+    join_token?: JoinTokenProjection;
+    feishu_setup?: FeishuSetupProjection;
     host_connection_token: string;
 };
 export type RegisterRelayHostConnectionResponse = {
@@ -122,18 +133,31 @@ export type ResolveRelayUploadResponse = {
 export type CompleteRelayUploadResponse = {
     upload: RelayUploadProjection;
 };
+export type DeliverRelayPlatformOutboundOptions = {
+    relayUrl: string;
+    projectId: ProjectId;
+    relayProjectRef: RelayProjectRef;
+    hostConnectionRef: HostConnectionRef;
+    hostRegistrationSecret: string;
+    intent: PlatformOutboundTextIntent;
+    fetch?: RelayHostControlFetch;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+};
 export type RegisterRelayHostConnectionOptions = {
     relayUrl: string;
     projectId: ProjectId;
     hostRegistrationSecret: string;
     displayName: string;
     serverVersion: string;
+    surfaceProfile?: ProjectSurfaceProfile;
     commandId?: IdempotencyKey;
     issuedAt?: Date;
     joinToken?: {
         mode: "reuse_active" | "rotate";
         ttlSeconds?: number;
     };
+    accountHandoffToken?: string;
     capabilities?: Partial<RegisterRelayHostConnectionPayload["host"]["capabilities"]>;
     fetch?: RelayHostControlFetch;
     timeoutMs?: number;
@@ -198,4 +222,5 @@ export declare function archiveRelayProject(options: ArchiveRelayProjectOptions)
 export declare function readRelayProjectMembershipState(options: ReadRelayProjectMembershipStateOptions): Promise<ReadRelayProjectMembershipStateResponse>;
 export declare function resolveRelayUpload(options: ResolveRelayUploadOptions): Promise<ResolveRelayUploadResponse>;
 export declare function completeRelayUpload(options: CompleteRelayUploadOptions): Promise<CompleteRelayUploadResponse>;
+export declare function deliverRelayPlatformOutbound(options: DeliverRelayPlatformOutboundOptions): Promise<PlatformOutboundHandoffResponse>;
 //# sourceMappingURL=host-control.d.ts.map