botmux 2.111.0 → 2.112.0

package/dist/core/current-turn-provenance.d.ts

@@ -0,0 +1,39 @@
+export interface CurrentTurnProvenance {
+    sessionId: string;
+    turnId: string;
+    callerOpenId: string;
+    larkAppId: string;
+    chatId: string;
+    chatType?: 'group' | 'p2p';
+    /**
+     * The current user-visible thread anchor. Thread sessions use their durable
+     * root; a chat-scope turn folded into a topic uses that turn's reply target;
+     * a chat-top-level turn deliberately has no root.
+     */
+    rootMessageId?: string;
+}
+export declare class CurrentTurnProvenanceError extends Error {
+    constructor(message: string);
+}
+export interface ResolveCurrentTurnProvenanceOptions {
+    dataDir: string;
+    /** Inherited session id is only a stale/detached detector, never identity. */
+    envSessionId?: string;
+    startPid?: number;
+}
+/**
+ * Authenticate an agent-facing command as the human who opened the *current*
+ * botmux turn.
+ *
+ * Unlike the read/reply command resolver, this intentionally has no inherited
+ * env fallback. A long-lived CLI keeps stale BOTMUX_TURN_ID/OWNER values, and a
+ * detached child keeps those values after losing the process-tree link. A
+ * mutating workflow command therefore requires the worker's fresh ancestor
+ * marker (sessionId + turnId), then joins it to the latest durable session
+ * record. Missing, detached and stale invocations fail closed.
+ *
+ * Returns null only for a genuine standalone/dev invocation: there is neither
+ * an ancestor marker nor an inherited BOTMUX_SESSION_ID claim.
+ */
+export declare function resolveCurrentTurnProvenance(options: ResolveCurrentTurnProvenanceOptions): CurrentTurnProvenance | null;
+//# sourceMappingURL=current-turn-provenance.d.ts.map

package/dist/core/current-turn-provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-turn-provenance.d.ts","sourceRoot":"","sources":["../../src/core/current-turn-provenance.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAiDD,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,qBAAqB,GAAG,IAAI,CAsE9B"}

package/dist/core/current-turn-provenance.js

@@ -0,0 +1,122 @@
+import { readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { findAuthenticatedAncestorSessionContext } from './session-marker.js';
+export class CurrentTurnProvenanceError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CurrentTurnProvenanceError';
+    }
+}
+function nonEmpty(value) {
+    return typeof value === 'string' && value.trim().length > 0;
+}
+function readPersistedSession(dataDir, sessionId) {
+    const matches = [];
+    let files;
+    try {
+        files = readdirSync(dataDir).filter((name) => (name === 'sessions.json'
+            || (name.startsWith('sessions-') && name.endsWith('.json'))));
+    }
+    catch (err) {
+        throw new CurrentTurnProvenanceError(`无法读取 botmux session store：${err instanceof Error ? err.message : String(err)}`);
+    }
+    for (const file of files) {
+        let parsed;
+        try {
+            parsed = JSON.parse(readFileSync(join(dataDir, file), 'utf-8'));
+        }
+        catch {
+            // A corrupt unrelated bot file must not make a valid caller look like a
+            // different principal. The target session still has to resolve exactly
+            // once from a readable record below.
+            continue;
+        }
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            continue;
+        const keyed = parsed[sessionId];
+        if (!keyed || typeof keyed !== 'object' || Array.isArray(keyed))
+            continue;
+        const session = keyed;
+        if (session.sessionId !== sessionId)
+            continue;
+        matches.push(session);
+    }
+    if (matches.length === 0) {
+        throw new CurrentTurnProvenanceError(`未找到当前进程所属 session ${sessionId}`);
+    }
+    if (matches.length !== 1) {
+        throw new CurrentTurnProvenanceError(`session ${sessionId} 在多个 session store 中重复，拒绝推断当前调用者`);
+    }
+    return matches[0];
+}
+/**
+ * Authenticate an agent-facing command as the human who opened the *current*
+ * botmux turn.
+ *
+ * Unlike the read/reply command resolver, this intentionally has no inherited
+ * env fallback. A long-lived CLI keeps stale BOTMUX_TURN_ID/OWNER values, and a
+ * detached child keeps those values after losing the process-tree link. A
+ * mutating workflow command therefore requires the worker's fresh ancestor
+ * marker (sessionId + turnId), then joins it to the latest durable session
+ * record. Missing, detached and stale invocations fail closed.
+ *
+ * Returns null only for a genuine standalone/dev invocation: there is neither
+ * an ancestor marker nor an inherited BOTMUX_SESSION_ID claim.
+ */
+export function resolveCurrentTurnProvenance(options) {
+    const marker = findAuthenticatedAncestorSessionContext(options.dataDir, options.startPid ?? process.ppid);
+    if (!marker) {
+        if (nonEmpty(options.envSessionId)) {
+            throw new CurrentTurnProvenanceError('当前命令已脱离 botmux CLI 进程树，无法验证本轮调用者；请在当前前台 turn 中重试');
+        }
+        return null;
+    }
+    if (!nonEmpty(marker.sessionId) || !nonEmpty(marker.turnId)) {
+        throw new CurrentTurnProvenanceError('当前 botmux CLI 进程标记缺少 sessionId/turnId，拒绝使用陈旧环境变量授权');
+    }
+    if (nonEmpty(options.envSessionId) && options.envSessionId !== marker.sessionId) {
+        throw new CurrentTurnProvenanceError(`进程标记 session ${marker.sessionId} 与环境 session ${options.envSessionId} 不一致`);
+    }
+    const session = readPersistedSession(options.dataDir, marker.sessionId);
+    if (session.status && session.status !== 'active') {
+        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 已非 active，拒绝授权当前命令`);
+    }
+    if (!nonEmpty(session.quoteTargetId) || session.quoteTargetId !== marker.turnId) {
+        throw new CurrentTurnProvenanceError(`进程标记 turn ${marker.turnId} 与 session 当前 quote turn ${session.quoteTargetId ?? '(missing)'} 不一致`);
+    }
+    const replyTarget = session.currentReplyTarget;
+    if (replyTarget && (!nonEmpty(replyTarget.turnId) || replyTarget.turnId !== marker.turnId)) {
+        throw new CurrentTurnProvenanceError(`进程标记 turn ${marker.turnId} 与 session 当前 reply turn ${replyTarget.turnId ?? '(missing)'} 不一致`);
+    }
+    if (!nonEmpty(session.lastCallerOpenId)) {
+        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 缺少 lastCallerOpenId`);
+    }
+    if (!nonEmpty(session.larkAppId) || !nonEmpty(session.chatId)) {
+        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 缺少 larkAppId/chatId`);
+    }
+    let rootMessageId;
+    if ((session.scope ?? 'thread') === 'thread') {
+        if (!nonEmpty(session.rootMessageId)) {
+            throw new CurrentTurnProvenanceError(`thread session ${marker.sessionId} 缺少 rootMessageId`);
+        }
+        rootMessageId = session.rootMessageId;
+    }
+    else if (replyTarget) {
+        if (!nonEmpty(replyTarget.rootMessageId)) {
+            throw new CurrentTurnProvenanceError(`chat session ${marker.sessionId} 的当前 reply target 缺少 rootMessageId`);
+        }
+        rootMessageId = replyTarget.rootMessageId;
+    }
+    return {
+        sessionId: marker.sessionId,
+        turnId: marker.turnId,
+        callerOpenId: session.lastCallerOpenId,
+        larkAppId: session.larkAppId,
+        chatId: session.chatId,
+        ...(session.chatType === 'group' || session.chatType === 'p2p'
+            ? { chatType: session.chatType }
+            : {}),
+        ...(rootMessageId ? { rootMessageId } : {}),
+    };
+}
+//# sourceMappingURL=current-turn-provenance.js.map

package/dist/core/current-turn-provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-turn-provenance.js","sourceRoot":"","sources":["../../src/core/current-turn-provenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAC;AAiC9E,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,SAAiB;IAC9D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC5C,IAAI,KAAK,eAAe;eACrB,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAC5D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAY,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,qCAAqC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,MAAM,KAAK,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,OAAO,GAAG,KAA6B,CAAC;QAC9C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAC9C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAClC,WAAW,SAAS,kCAAkC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;AACrB,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,MAAM,GAAG,uCAAuC,CACpD,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CACjC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,0BAA0B,CAClC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,0BAA0B,CAClC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAClC,gBAAgB,MAAM,CAAC,SAAS,gBAAgB,OAAO,CAAC,YAAY,MAAM,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,qBAAqB,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAClC,aAAa,MAAM,CAAC,MAAM,4BAA4B,OAAO,CAAC,aAAa,IAAI,WAAW,MAAM,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC/C,IAAI,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,0BAA0B,CAClC,aAAa,MAAM,CAAC,MAAM,4BAA4B,WAAW,CAAC,MAAM,IAAI,WAAW,MAAM,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,aAAiC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,MAAM,CAAC,SAAS,mBAAmB,CAAC,CAAC;QAC9F,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACxC,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,MAAM,CAAC,SAAS,oCAAoC,CAAC,CAAC;QAC7G,CAAC;QACD,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,OAAO,CAAC,gBAAgB;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;YAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/core/daemon-ipc-auth.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Build a route- and port-bound authorization header for the daemon's
+ * loopback HTTP server.  Loopback is connectivity, not identity: Linux bwrap
+ * sessions normally retain the host network namespace so an untrusted CLI can
+ * also dial 127.0.0.1.  The shared dashboard secret is masked from file
+ * sandboxes, while trusted dashboard/daemon/host-CLI callers can read it.
+ */
+export declare function daemonIpcAuthHeaders(input: {
+    secret: string;
+    port: number;
+    method: string;
+    path: string;
+    headers?: HeadersInit;
+}): Headers;
+/** Read the host-only daemon IPC secret. Sandboxed callers fail closed because
+ * ~/.botmux is masked by the bwrap plan. */
+export declare function loadDaemonIpcSecret(secretPath?: string): string;
+/** Trusted-host fetch wrapper for daemon IPC. */
+export declare function fetchDaemonIpc(port: number, path: string, init?: RequestInit, secret?: string): Promise<Response>;
+//# sourceMappingURL=daemon-ipc-auth.d.ts.map

package/dist/core/daemon-ipc-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-ipc-auth.d.ts","sourceRoot":"","sources":["../../src/core/daemon-ipc-auth.ts"],"names":[],"mappings":"AAUA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GAAG,OAAO,CAWV;AAED;4CAC4C;AAC5C,wBAAgB,mBAAmB,CAAC,UAAU,SAAsB,GAAG,MAAM,CAI5E;AAED,iDAAiD;AACjD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC,CAanB"}

package/dist/core/daemon-ipc-auth.js

@@ -0,0 +1,44 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { cliAuthBind, loadDashboardSecret, signCliAuth, } from '../dashboard/auth.js';
+const DEFAULT_SECRET_PATH = join(homedir(), '.botmux', '.dashboard-secret');
+/**
+ * Build a route- and port-bound authorization header for the daemon's
+ * loopback HTTP server.  Loopback is connectivity, not identity: Linux bwrap
+ * sessions normally retain the host network namespace so an untrusted CLI can
+ * also dial 127.0.0.1.  The shared dashboard secret is masked from file
+ * sandboxes, while trusted dashboard/daemon/host-CLI callers can read it.
+ */
+export function daemonIpcAuthHeaders(input) {
+    const pathname = new URL(input.path, `http://127.0.0.1:${input.port}`).pathname;
+    const auth = signCliAuth(input.secret, cliAuthBind(input.method, pathname, input.port));
+    const headers = new Headers(input.headers);
+    headers.set('X-Botmux-Cli-Ts', auth.ts);
+    headers.set('X-Botmux-Cli-Nonce', auth.nonce);
+    headers.set('X-Botmux-Cli-Auth', auth.sig);
+    return headers;
+}
+/** Read the host-only daemon IPC secret. Sandboxed callers fail closed because
+ * ~/.botmux is masked by the bwrap plan. */
+export function loadDaemonIpcSecret(secretPath = DEFAULT_SECRET_PATH) {
+    const secret = loadDashboardSecret(secretPath);
+    if (!secret)
+        throw new Error(`daemon IPC secret is missing or empty: ${secretPath}`);
+    return secret;
+}
+/** Trusted-host fetch wrapper for daemon IPC. */
+export async function fetchDaemonIpc(port, path, init = {}, secret) {
+    const resolvedSecret = secret ?? loadDaemonIpcSecret();
+    const method = init.method ?? 'GET';
+    return fetch(`http://127.0.0.1:${port}${path}`, {
+        ...init,
+        headers: daemonIpcAuthHeaders({
+            secret: resolvedSecret,
+            port,
+            method,
+            path,
+            headers: init.headers,
+        }),
+    });
+}
+//# sourceMappingURL=daemon-ipc-auth.js.map

package/dist/core/daemon-ipc-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-ipc-auth.js","sourceRoot":"","sources":["../../src/core/daemon-ipc-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;IAChF,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,CAAC,MAAM,EACZ,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAChD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;4CAC4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,mBAAmB;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAAY,EACZ,OAAoB,EAAE,EACtB,MAAe;IAEf,MAAM,cAAc,GAAG,MAAM,IAAI,mBAAmB,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;QAC9C,GAAG,IAAI;QACP,OAAO,EAAE,oBAAoB,CAAC;YAC5B,MAAM,EAAE,cAAc;YACtB,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/core/daemon-ipc-session-auth.d.ts

@@ -0,0 +1,37 @@
+import { type VcMeetingLiveManagedOrigin } from '../services/vc-meeting-send-policy.js';
+export type SessionScopedIpcAuthDecision = {
+    ok: true;
+} | {
+    ok: false;
+    error: 'origin_unproven' | 'managed_action_required';
+};
+export interface SessionScopedIpcIdentity {
+    sessionId: string;
+    larkAppId: string;
+    chatId: string;
+    rootMessageId: string | null;
+}
+/** Replace every caller-selectable route field with the authenticated
+ * daemon-session identity while preserving endpoint-specific payload fields. */
+export declare function bindSessionScopedIpcIdentity<T extends object>(payload: T, identity: SessionScopedIpcIdentity): T & SessionScopedIpcIdentity;
+/**
+ * Narrow fallback for commands that legitimately originate inside a
+ * read-isolated CLI and therefore cannot read the host IPC HMAC secret.
+ *
+ * The daemon resolves `liveOrigin` from the exact body session id; callers must
+ * present that session's current rotating capability. The visible turn/attempt
+ * tuple is never accepted as proof. Receiver sessions are denied unless the
+ * endpoint is explicitly non-observable (currently SessionStart readiness).
+ */
+export declare function authorizeSessionScopedIpc(input: {
+    trustedHost: boolean;
+    sessionExists: boolean;
+    receiverSession: boolean;
+    allowReceiver: boolean;
+    sessionId: string;
+    liveOrigin?: VcMeetingLiveManagedOrigin;
+    claimedCapability?: string;
+    claimedTurnId?: string;
+    claimedDispatchAttempt?: number;
+}): SessionScopedIpcAuthDecision;
+//# sourceMappingURL=daemon-ipc-session-auth.d.ts.map

package/dist/core/daemon-ipc-session-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-ipc-session-auth.d.ts","sourceRoot":"","sources":["../../src/core/daemon-ipc-session-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,uCAAuC,CAAC;AAE/C,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,iBAAiB,GAAG,yBAAyB,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;gFACgF;AAChF,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,MAAM,EAC3D,OAAO,EAAE,CAAC,EACV,QAAQ,EAAE,wBAAwB,GACjC,CAAC,GAAG,wBAAwB,CAE9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,4BAA4B,CAgB/B"}

package/dist/core/daemon-ipc-session-auth.js

@@ -0,0 +1,35 @@
+import { verifyVcMeetingManagedOriginClaim, } from '../services/vc-meeting-send-policy.js';
+/** Replace every caller-selectable route field with the authenticated
+ * daemon-session identity while preserving endpoint-specific payload fields. */
+export function bindSessionScopedIpcIdentity(payload, identity) {
+    return { ...payload, ...identity };
+}
+/**
+ * Narrow fallback for commands that legitimately originate inside a
+ * read-isolated CLI and therefore cannot read the host IPC HMAC secret.
+ *
+ * The daemon resolves `liveOrigin` from the exact body session id; callers must
+ * present that session's current rotating capability. The visible turn/attempt
+ * tuple is never accepted as proof. Receiver sessions are denied unless the
+ * endpoint is explicitly non-observable (currently SessionStart readiness).
+ */
+export function authorizeSessionScopedIpc(input) {
+    if (input.trustedHost)
+        return { ok: true };
+    if (!input.sessionExists || !input.sessionId)
+        return { ok: false, error: 'origin_unproven' };
+    if (input.receiverSession && !input.allowReceiver) {
+        return { ok: false, error: 'managed_action_required' };
+    }
+    const verified = verifyVcMeetingManagedOriginClaim({
+        receiverSessionId: input.sessionId,
+        liveOrigin: input.liveOrigin,
+        claimedCapability: input.claimedCapability,
+        claimedTurnId: input.claimedTurnId,
+        claimedDispatchAttempt: input.claimedDispatchAttempt,
+    });
+    return verified.ok
+        ? { ok: true }
+        : { ok: false, error: 'origin_unproven' };
+}
+//# sourceMappingURL=daemon-ipc-session-auth.js.map

package/dist/core/daemon-ipc-session-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-ipc-session-auth.js","sourceRoot":"","sources":["../../src/core/daemon-ipc-session-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,GAElC,MAAM,uCAAuC,CAAC;AAa/C;gFACgF;AAChF,MAAM,UAAU,4BAA4B,CAC1C,OAAU,EACV,QAAkC;IAElC,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAUzC;IACC,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;QACjD,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,EAAE;QAChB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AAC9C,CAAC"}

package/dist/core/dashboard-command/index.d.ts

@@ -13,7 +13,6 @@ import { type DashboardSettingsCommandDeps } from './settings.js';
 import { type DashboardSessionsCommandDeps } from './sessions.js';
 import { type DashboardSchedulesCommandDeps } from './schedules.js';
 import { type DashboardOverviewCommandDeps } from './overview.js';
-import { type DashboardWorkflowsCommandDeps } from './workflows.js';
 import { type DashboardGroupsCommandDeps } from './groups.js';
 /** Optional test seam. Production omits these overrides. */
 export interface DashboardCommandDeps extends EnsureDashboardOwnerDeps {
@@ -23,7 +22,6 @@ export interface DashboardCommandDeps extends EnsureDashboardOwnerDeps {
     sessions?: DashboardSessionsCommandDeps;
     schedules?: DashboardSchedulesCommandDeps;
     overview?: DashboardOverviewCommandDeps;
-    workflows?: DashboardWorkflowsCommandDeps;
     groups?: DashboardGroupsCommandDeps;
 }
 export declare function handleDashboardCommand(message: LarkMessage, args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId?: string, testDeps?: DashboardCommandDeps): Promise<void>;

package/dist/core/dashboard-command/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAOtF,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAyB,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAErF,4DAA4D;AAC5D,MAAM,WAAW,oBAAqB,SAAQ,wBAAwB;IACpE,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,GAAE,oBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC,CA2Ef"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAOtF,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAyB,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAErF,4DAA4D;AAC5D,MAAM,WAAW,oBAAqB,SAAQ,wBAAwB;IACpE,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,GAAE,oBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC,CA4Ef"}

package/dist/core/dashboard-command/index.js

@@ -14,7 +14,6 @@ import { handleDashboardSettings } from './settings.js';
 import { handleDashboardSessions } from './sessions.js';
 import { handleDashboardSchedules } from './schedules.js';
 import { handleDashboardOverview } from './overview.js';
-import { handleDashboardWorkflows } from './workflows.js';
 import { handleDashboardGroups } from './groups.js';
 export async function handleDashboardCommand(message, args, rootId, _chatId, deps, larkAppId, testDeps = {}) {
     const loc = localeForBot(larkAppId);
@@ -63,7 +62,8 @@ export async function handleDashboardCommand(message, args, rootId, _chatId, dep
         return handleDashboardSchedules(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.schedules);
     }
     if (sub === 'workflows') {
-        return handleDashboardWorkflows(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.workflows);
+        await reply('v2 workflow 面板已下线；请在 Web Dashboard 的 Workflows 页面查看 v3 运行。');
+        return;
     }
     if (sub === 'groups') {
         return handleDashboardGroups(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.groups);

package/dist/core/dashboard-command/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAiC,MAAM,iBAAiB,CAAC;AACtF,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAsC,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAsC,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAmC,MAAM,aAAa,CAAC;AAcrF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAoB,EACpB,IAAY,EACZ,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAAkB,EAClB,WAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,qEAAqE;IACrE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,6EAA6E;QAC7E,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,2BAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,UAAkC,MAAM,EAAiB,EAAE;QAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,wBAAwB,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EACvE,SAAS,EAAE,SAAS,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,qCAAqC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAsB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,aAAa,CAAC,GAAsB,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAiC,MAAM,iBAAiB,CAAC;AACtF,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAsC,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAmC,MAAM,aAAa,CAAC;AAarF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAoB,EACpB,IAAY,EACZ,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAAkB,EAClB,WAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,qEAAqE;IACrE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,6EAA6E;QAC7E,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,2BAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,UAAkC,MAAM,EAAiB,EAAE;QAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,wBAAwB,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EACvE,SAAS,EAAE,SAAS,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,qCAAqC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAsB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,aAAa,CAAC,GAAsB,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/core/dashboard-command/stub.d.ts

@@ -5,7 +5,7 @@
  * defensive fallback for future modules or partial refactors.
  */
 import { type Locale } from '../../i18n/index.js';
-export type DashboardModule = 'overview' | 'sessions' | 'workflows' | 'groups' | 'schedules' | 'settings';
+export type DashboardModule = 'overview' | 'sessions' | 'groups' | 'schedules' | 'settings';
 export declare const DASHBOARD_MODULES: ReadonlyArray<DashboardModule>;
 /** Build the localised `not_implemented_yet` text for a given module. */
 export declare function buildStubText(module: DashboardModule, locale: Locale): string;

package/dist/core/dashboard-command/stub.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stub.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/stub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAK,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,UAAU,GACV,WAAW,GACX,QAAQ,GACR,WAAW,GACX,UAAU,CAAC;AAEf,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAO5D,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,qCAAqC;AACrC,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,MAAM,CAMR"}
+{"version":3,"file":"stub.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/stub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAK,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,UAAU,GACV,QAAQ,GACR,WAAW,GACX,UAAU,CAAC;AAEf,eAAO,MAAM,iBAAiB,EAAE,aAAa,CAAC,eAAe,CAM5D,CAAC;AAEF,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,qCAAqC;AACrC,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,MAAM,CAMR"}

package/dist/core/dashboard-command/stub.js

@@ -8,7 +8,6 @@ import { t } from '../../i18n/index.js';
 export const DASHBOARD_MODULES = [
     'overview',
     'sessions',
-    'workflows',
     'groups',
     'schedules',
     'settings',

package/dist/core/dashboard-command/stub.js.map

@@ -1 +1 @@
-{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/stub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AAUrD,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,UAAU;IACV,UAAU;IACV,WAAW;IACX,QAAQ;IACR,WAAW;IACX,UAAU;CACX,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,MAAuB,EAAE,MAAc;IACnE,OAAO,CAAC,CAAC,kBAAkB,MAAM,sBAAsB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,OAAmC,EAAE;IAErC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC;cAClF,MAAM,GAAG,CAAC,CAAC,0BAA0B,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,CAAC,0BAA0B,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}
+{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/stub.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AASrD,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,UAAU;IACV,UAAU;IACV,QAAQ;IACR,WAAW;IACX,UAAU;CACX,CAAC;AAEF,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,MAAuB,EAAE,MAAc;IACnE,OAAO,CAAC,CAAC,kBAAkB,MAAM,sBAAsB,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,OAAmC,EAAE;IAErC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,CAAC;cAClF,MAAM,GAAG,CAAC,CAAC,0BAA0B,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,CAAC,0BAA0B,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}

package/dist/core/dashboard-ipc-server.d.ts

@@ -1,6 +1,4 @@
 import { type IncomingMessage, type ServerResponse } from 'node:http';
-import type { TriggerInput, TriggerResult } from '../workflows/trigger-run.js';
-export declare function setWorkflowRunner(fn: (input: TriggerInput) => Promise<TriggerResult>): void;
 export type BotRenameOutcome = {
     ok: true;
     name: string;
@@ -17,12 +15,18 @@ export interface IpcServerHandle {
     close: () => Promise<void>;
 }
 export type Handler = (req: IncomingMessage, res: ServerResponse, params: Record<string, string>) => Promise<void> | void;
+export declare function isTrustedHostIpcRequest(req: IncomingMessage): boolean;
 /** Register a handler. Path supports `:name` segments captured into the params object. */
 export declare function ipcRoute(method: string, path: string, handler: Handler): void;
 export declare function jsonRes(res: ServerResponse, status: number, body: unknown): void;
 export declare function readJsonBody<T = unknown>(req: IncomingMessage): Promise<T>;
 /** Test seam: override the secret used to verify token-route HMAC. */
 export declare function setIpcAuthSecret(secret: string | null): void;
+/** Authenticate legacy terminal-token routes with the machine-local dashboard
+ * secret. Workflow v3 mutations intentionally use their separate, full-request
+ * protocol (`workflows/v3/daemon-ipc-auth`) and must never call this bare
+ * ts:nonce verifier. */
+export declare function ipcHmacAuthorized(req: IncomingMessage): boolean;
 export type { SessionRow };
 export { composeRowFromActive, composeRowFromClosed };
 export declare function setBotName(name: string): void;
@@ -53,5 +57,10 @@ export interface ScheduleRow {
 export declare function startIpcServer(opts: {
     port: number;
     host: string;
+    /** Enable the production trusted-host boundary. The verifier reloads the
+     * tiny secret file for each request so concurrent fleet bootstrap or a
+     * deliberate secret repair cannot strand a daemon on a stale cached key.
+     * Tests that omit this option retain the lightweight in-process server. */
+    authRequired?: boolean;
 }): Promise<IpcServerHandle>;
 //# sourceMappingURL=dashboard-ipc-server.d.ts.map

package/dist/core/dashboard-ipc-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAsFjG,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAS/E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAE3F;AAKD,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAE/F;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAiC,cAAc,EAAW,MAAM,aAAa,CAAC;AAK1F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAW1B,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhF;AAiBD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAyB7F,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AAmyBxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AAu6CD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAiC7F"}
+{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAgGjG,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAE/F;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAiC,cAAc,EAAW,MAAM,aAAa,CAAC;AAK1F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAe1B,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAErE;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhF;AAaD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAM7F;;;wBAGwB;AACxB,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAS/D;AAyED,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AA05BxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AA47CD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;+EAG2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmD3B"}