botmux 2.104.0 → 2.105.0

package/dist/dashboard.js

@@ -30,6 +30,7 @@ import { FeishuLoginManager } from './dashboard/feishu-login.js';
 import { CLI_SELECT_OPTIONS, resolveCliSelection, isTtadkWrapper, ttadkAcceptsModel, TTADK_DEFAULT_MODEL, TTADK_MODEL_SUGGESTIONS, } from './setup/cli-selection.js';
 import { invalidWorkingDirs } from './utils/working-dir.js';
 import { invalidateGlobalConfigCache, mergeGlobalConfig, readGlobalConfig } from './global-config.js';
+import { hostLocalTimeZone, scheduleTimeZone } from './utils/timezone.js';
 import { buildDashboardUrls } from './core/dashboard-url.js';
 import { deleteWhiteboard, listWhiteboards, readWhiteboard, whiteboardEnabled } from './services/whiteboard-store.js';
 import { isLocalDevInstall, botmuxVersion, botmuxCliEntry } from './utils/install-info.js';
@@ -49,7 +50,8 @@ import { listTeamReports, readTeamBoard, setTeamBoardEntry } from './services/te
 import { hd2dAssetPath, hd2dStatus, startHd2dDownload } from './dashboard/hd2d-assets.js';
 import { installLocalSkillLinks, readSkillRegistry, removeInstalledSkill, updateInstalledSkillAsync, } from './services/skill-registry-store.js';
 import { redactGitUrlCredentials } from './core/skills/sources.js';
-import { loadBotConfigs } from './bot-registry.js';
+import { getBot, loadBotConfigs } from './bot-registry.js';
+import { findEntryIndex, readRawConfig, requireConfigPath, writeRawConfigAtomic } from './services/config-store.js';
 import { discoverNativeCliSkillGroups } from './core/skills/discovery.js';
 import { analyzeSkillReferences } from './core/skills/references.js';
 import { discoverDashboardSkills, installDashboardSkill, parseDashboardSkillInstallRequest, parseInstallLocalLinksSources, MAX_LOCAL_LINK_SOURCES } from './dashboard/skill-install-request.js';
@@ -61,6 +63,8 @@ import { startPlatformTunnelClient } from './platform/tunnel-client.js';
 import { applyPlatformTeamSync, getPlatformTeamSyncRev, listPlatformTeams } from './services/platform-team-store.js';
 import { getBotUnionId } from './services/bot-union-ids-store.js';
 import { cleanupIdleSessions, parseIdleCleanupHours } from './dashboard/session-cleanup.js';
+import { larkHosts } from './im/lark/lark-hosts.js';
+import { VC_MEETING_FEATURE_SCOPES, VC_MEETING_REALTIME_VOICE_SCOPES, } from './setup/verify-permissions.js';
 const SECRET_PATH = join(homedir(), '.botmux', '.dashboard-secret');
 const TOKEN_PATH = join(homedir(), '.botmux', '.dashboard-token');
 /** Per-daemon budget for the cross-daemon insight overview fan-out — bounds
@@ -242,6 +246,183 @@ const botOnboarding = new BotOnboardingManager({
 const feishuLogin = new FeishuLoginManager();
 const subs = new Map();
 const attaching = new Set(); // dedup concurrent attaches per appId
+function vcMeetingListenerBotOptions() {
+    try {
+        const onlineByAppId = new Map(registry.list().map(bot => [bot.larkAppId, bot]));
+        return loadBotConfigs().map(bot => ({
+            larkAppId: bot.larkAppId,
+            botName: bot.displayName ?? onlineByAppId.get(bot.larkAppId)?.botName ?? bot.name ?? null,
+            cliId: onlineByAppId.get(bot.larkAppId)?.cliId ?? bot.cliId,
+            vcMeetingAgentEnabled: bot.vcMeetingAgent?.enabled === true,
+            hasLarkCliProfile: typeof bot.vcMeetingAgent?.larkCliProfile === 'string' && bot.vcMeetingAgent.larkCliProfile.trim().length > 0,
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+async function fetchGrantedScopesForBotConfig(bot) {
+    const brand = bot.brand === 'lark' ? 'lark' : 'feishu';
+    const openApi = larkHosts(brand).openApi;
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), 10_000);
+    try {
+        const tokenRes = await fetch(`${openApi}/open-apis/auth/v3/tenant_access_token/internal`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ app_id: bot.larkAppId, app_secret: bot.larkAppSecret }),
+            signal: ac.signal,
+        });
+        const tokenData = await tokenRes.json();
+        if (tokenData?.code !== 0 || typeof tokenData?.tenant_access_token !== 'string') {
+            return { ok: false, error: `vcMeetingAgent_listenerBot_invalid_credentials: code=${tokenData?.code ?? '?'} msg=${tokenData?.msg ?? ''}` };
+        }
+        const infoRes = await fetch(`${openApi}/open-apis/application/v6/applications/${bot.larkAppId}?lang=zh_cn`, { headers: { Authorization: `Bearer ${tokenData.tenant_access_token}` }, signal: ac.signal });
+        const infoData = await infoRes.json();
+        if (infoData?.code === 99991672) {
+            return { ok: false, error: 'vcMeetingAgent_listenerBot_scope_check_unavailable: missing application:application:self_manage' };
+        }
+        if (infoData?.code !== 0) {
+            return { ok: false, error: `vcMeetingAgent_listenerBot_scope_check_failed: code=${infoData?.code ?? '?'} msg=${infoData?.msg ?? ''}` };
+        }
+        const scopesRaw = infoData.data?.app?.scopes
+            ?? infoData.data?.application?.scopes
+            ?? infoData.data?.scopes
+            ?? [];
+        if (!Array.isArray(scopesRaw) || scopesRaw.length === 0) {
+            return { ok: false, error: 'vcMeetingAgent_listenerBot_scope_check_failed: empty scopes' };
+        }
+        const granted = new Set(scopesRaw.map(s => typeof s === 'string' ? s : s?.scope).filter(Boolean));
+        return { ok: true, granted };
+    }
+    catch (err) {
+        return {
+            ok: false,
+            error: ac.signal.aborted
+                ? 'vcMeetingAgent_listenerBot_scope_check_timeout'
+                : `vcMeetingAgent_listenerBot_scope_check_failed: ${err?.message ?? err}`,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function validateVcMeetingListenerBotAppId(appId) {
+    let bots;
+    try {
+        bots = loadBotConfigs();
+    }
+    catch (err) {
+        return { ok: false, error: `vcMeetingAgent_listenerBot_config_unavailable: ${err?.message ?? err}` };
+    }
+    const bot = bots.find(b => b.larkAppId === appId);
+    if (!bot)
+        return { ok: false, error: 'vcMeetingAgent_listenerBot_unknown' };
+    const cfg = bot.vcMeetingAgent ?? {};
+    if (!cfg.larkCliProfile)
+        return { ok: false, error: 'vcMeetingAgent_listenerBot_missing_larkCliProfile' };
+    const granted = await fetchGrantedScopesForBotConfig(bot);
+    if (!granted.ok)
+        return granted;
+    const required = cfg.realtimeVoice?.enabled === true
+        ? [...VC_MEETING_FEATURE_SCOPES, ...VC_MEETING_REALTIME_VOICE_SCOPES]
+        : VC_MEETING_FEATURE_SCOPES;
+    const missing = required.filter(scope => !granted.granted.has(scope.name));
+    if (missing.length > 0) {
+        return { ok: false, error: `vcMeetingAgent_listenerBot_missing_scopes: ${missing.map(s => s.name).join(',')}` };
+    }
+    return { ok: true };
+}
+function normalizeVcMeetingAgentRecord(raw) {
+    return raw && typeof raw === 'object' && !Array.isArray(raw)
+        ? { ...raw }
+        : {};
+}
+function compactVcMeetingAgentEntry(entry, next) {
+    if (Object.keys(next).length > 0)
+        entry.vcMeetingAgent = next;
+    else
+        delete entry.vcMeetingAgent;
+}
+function refreshLocalVcMeetingAgentConfig(appId) {
+    try {
+        const latest = loadBotConfigs().find(bot => bot.larkAppId === appId);
+        const live = getBot(appId);
+        live.config.vcMeetingAgent = latest?.vcMeetingAgent;
+    }
+    catch {
+        // This dashboard process may not host the target bot daemon.
+    }
+}
+async function reloadVcMeetingBotConfigOnDaemons(appIds) {
+    const unique = [...new Set(appIds.filter(Boolean))];
+    for (const appId of unique)
+        refreshLocalVcMeetingAgentConfig(appId);
+    await Promise.all(unique.map(async (appId) => {
+        const d = registry.getByAppId(appId);
+        if (!d)
+            return;
+        await fetch(`http://127.0.0.1:${d.ipcPort}/api/bot-config/reload`, {
+            method: 'POST',
+            signal: AbortSignal.timeout(10_000),
+        }).catch(() => undefined);
+    }));
+}
+async function syncVcMeetingListenerBotConfig(listenerBotAppId, previousListenerBotAppId) {
+    const nextAppId = listenerBotAppId?.trim() || null;
+    const prevAppId = previousListenerBotAppId?.trim() || null;
+    if (!nextAppId && !prevAppId)
+        return { ok: true };
+    const changedAppIds = new Set();
+    try {
+        const path = requireConfigPath();
+        await withFileLock(path, async () => {
+            const raw = await readRawConfig(path);
+            let changed = false;
+            if (nextAppId) {
+                const idx = findEntryIndex(raw, nextAppId);
+                if (idx < 0)
+                    throw new Error('bot_not_in_config');
+                const entry = raw[idx];
+                const next = normalizeVcMeetingAgentRecord(entry.vcMeetingAgent);
+                let entryChanged = false;
+                if (next.enabled !== true) {
+                    next.enabled = true;
+                    next.dashboardManagedListener = true;
+                    entryChanged = true;
+                }
+                if (entryChanged) {
+                    compactVcMeetingAgentEntry(entry, next);
+                    changed = true;
+                    changedAppIds.add(nextAppId);
+                }
+            }
+            if (prevAppId && prevAppId !== nextAppId) {
+                const idx = findEntryIndex(raw, prevAppId);
+                if (idx >= 0) {
+                    const entry = raw[idx];
+                    const next = normalizeVcMeetingAgentRecord(entry.vcMeetingAgent);
+                    if (next.dashboardManagedListener === true) {
+                        delete next.dashboardManagedListener;
+                        if (next.enabled === true)
+                            delete next.enabled;
+                        compactVcMeetingAgentEntry(entry, next);
+                        changed = true;
+                        changedAppIds.add(prevAppId);
+                    }
+                }
+            }
+            if (changed)
+                await writeRawConfigAtomic(path, raw);
+        });
+    }
+    catch (err) {
+        return { ok: false, error: `vcMeetingAgent_listenerBot_config_write_failed: ${err?.message ?? err}` };
+    }
+    if (changedAppIds.size > 0)
+        await reloadVcMeetingBotConfigOnDaemons([...changedAppIds]);
+    return { ok: true };
+}
 function resolveDashboardSettings() {
     const global = readGlobalConfig();
     const dashboard = global.dashboard ?? {};
@@ -249,11 +430,19 @@ function resolveDashboardSettings() {
         publicReadOnly: dashboard.publicReadOnly ?? config.dashboard.publicReadOnly,
         openTerminalInFeishu: dashboard.openTerminalInFeishu === true,
         chatBotDiscovery: dashboard.chatBotDiscovery !== false, // default ON
+        vcMeetingAgent: {
+            enabled: global.vcMeetingAgent?.enabled !== false,
+            listenerBotAppId: global.vcMeetingAgent?.listenerBotAppId ?? null,
+            listenerBotOptions: vcMeetingListenerBotOptions(),
+        },
         repoPickerMode: global.repoPickerMode ?? 'all',
         maintenance: global.maintenance ?? {},
         localDevInstall: isLocalDevInstall(),
         whiteboard: { enabled: global.whiteboard?.enabled === true },
         remoteAccess: global.remoteAccess === true,
+        scheduleTimeZone: global.scheduleTimeZone ?? null,
+        hostTimeZone: hostLocalTimeZone(),
+        effectiveScheduleTimeZone: scheduleTimeZone(),
     };
 }
 // Single shared deps object for `applySettingsWrite` — both the browser
@@ -263,6 +452,8 @@ async function reloadLocaleOnAllDaemons() {
     await Promise.all(registry.list().map(d => fetch(`http://127.0.0.1:${d.ipcPort}/api/locale/reload`, { method: 'POST' }).catch(() => undefined)));
 }
 const settingsWriteApplierDeps = defaultSettingsWriteApplierDeps(resolveDashboardSettings, reloadLocaleOnAllDaemons);
+settingsWriteApplierDeps.syncVcMeetingListenerBotConfig = syncVcMeetingListenerBotConfig;
+settingsWriteApplierDeps.validateVcMeetingListenerBotAppId = validateVcMeetingListenerBotAppId;
 /** Helper to render a {status, body} HandlerResult through `res`. */
 function writeHandlerResult(res, result) {
     const headers = { 'content-type': 'application/json', ...(result.headers ?? {}) };
@@ -1232,7 +1423,10 @@ const server = createServer(async (req, res) => {
             const schedules = authed
                 ? aggregator.getSchedules()
                 : redactSchedulesForPublic(aggregator.getSchedules());
-            return jsonRes(res, 200, { schedules });
+            // Effective schedule timezone: nextRunAt/lastRunAt instants must be
+            // rendered in the zone the scheduler fires in (not the viewer's browser
+            // zone), so the web schedule/overview lists match cron/card/CLI displays.
+            return jsonRes(res, 200, { schedules, timezone: scheduleTimeZone() });
         }
         if (req.method === 'GET' && url.pathname === '/api/settings') {
             // `authed` lets the Settings page disable toggles for read-only