botmux 2.111.0 → 2.112.0

package/dist/core/session-marker.js

@@ -1,23 +1,172 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { execSync } from 'node:child_process';
-export function parseSessionMarker(raw) {
+import { execFileSync } from 'node:child_process';
+import { readManagedOriginCapability } from './managed-origin-capability.js';
+export class SessionMarkerAuthenticationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionMarkerAuthenticationError';
+    }
+}
+const LINUX_BOOT_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Kernel-generated identity that changes on every Linux boot. */
+export function readLinuxBootIdentity() {
+    if (process.platform !== 'linux')
+        return undefined;
+    try {
+        const bootId = readFileSync('/proc/sys/kernel/random/boot_id', 'utf8').trim();
+        return LINUX_BOOT_ID_RE.test(bootId) ? bootId.toLowerCase() : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Stable process-birth identity used to reject stale marker files after PID
+ * reuse. Linux exposes start ticks in /proc; macOS/other Unix falls back to
+ * ps(1)'s process start timestamp so mutating commands remain cross-platform.
+ */
+export function readProcessStartIdentity(pid) {
+    if (!Number.isInteger(pid) || pid <= 1)
+        return undefined;
+    if (process.platform === 'linux') {
+        try {
+            const raw = readFileSync(`/proc/${pid}/stat`, 'utf8');
+            const closeParen = raw.lastIndexOf(')');
+            if (closeParen >= 0) {
+                const fields = raw.slice(closeParen + 2).trim().split(/\s+/);
+                if (fields[19])
+                    return fields[19];
+            }
+        }
+        catch { /* disappeared or unreadable: never fall through to ambient ps */ }
+        return undefined;
+    }
+    const ps = systemPsBin();
+    if (!ps)
+        return undefined;
+    try {
+        const started = execFileSync(ps, ['-o', 'lstart=', '-p', String(pid)], {
+            encoding: 'utf-8',
+            timeout: 2000,
+            stdio: ['ignore', 'pipe', 'ignore'],
+            env: { PATH: '/usr/bin:/bin', LANG: 'C' },
+        }).trim();
+        return started || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function systemPsBin() {
+    for (const candidate of ['/usr/bin/ps', '/bin/ps']) {
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return undefined;
+}
+function readParentPid(pid) {
+    if (process.platform === 'linux') {
+        try {
+            const raw = readFileSync(`/proc/${pid}/stat`, 'utf8');
+            const closeParen = raw.lastIndexOf(')');
+            if (closeParen < 0)
+                return undefined;
+            const fields = raw.slice(closeParen + 2).trim().split(/\s+/);
+            const parent = Number(fields[1]);
+            return Number.isSafeInteger(parent) && parent > 0 ? parent : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    const ps = systemPsBin();
+    if (!ps)
+        return undefined;
+    try {
+        const out = execFileSync(ps, ['-o', 'ppid=', '-p', String(pid)], {
+            encoding: 'utf-8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'],
+            env: { PATH: '/usr/bin:/bin', LANG: 'C' },
+        }).trim();
+        const parent = Number(out);
+        return Number.isSafeInteger(parent) && parent > 0 ? parent : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function parseDispatchAttempt(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value > 0
+        ? value
+        : undefined;
+}
+function parseIdentityBoundSessionMarker(raw) {
     const text = raw.trim();
-    if (!text)
+    if (!text.startsWith('{'))
+        return { sessionId: text };
+    try {
+        const parsed = JSON.parse(text);
+        const dispatchAttempt = parseDispatchAttempt(parsed.dispatchAttempt);
+        return {
+            sessionId: typeof parsed.sessionId === 'string' ? parsed.sessionId : '',
+            ...(typeof parsed.turnId === 'string' ? { turnId: parsed.turnId } : {}),
+            ...(dispatchAttempt !== undefined ? { dispatchAttempt } : {}),
+            ...(typeof parsed.procStart === 'string' ? { procStart: parsed.procStart } : {}),
+        };
+    }
+    catch {
         return { sessionId: '' };
-    if (text.startsWith('{')) {
-        try {
-            const parsed = JSON.parse(text);
+    }
+}
+export function parseSessionMarker(raw) {
+    const parsed = parseIdentityBoundSessionMarker(raw);
+    return {
+        sessionId: parsed.sessionId,
+        ...(parsed.turnId ? { turnId: parsed.turnId } : {}),
+        ...(parsed.dispatchAttempt !== undefined ? { dispatchAttempt: parsed.dispatchAttempt } : {}),
+    };
+}
+/**
+ * Strong marker lookup for authority-bearing commands. Unlike the legacy
+ * read/reply resolver, this requires the worker's JSON procStart binding and
+ * verifies it against the live ancestor process before returning identity.
+ */
+export function findAuthenticatedAncestorSessionContext(dataDir, startPid = process.ppid) {
+    const markersDir = join(dataDir, '.botmux-cli-pids');
+    if (!existsSync(markersDir))
+        return null;
+    let pid = startPid;
+    for (let depth = 0; depth < 8 && pid > 1; depth++) {
+        const markerPath = join(markersDir, String(pid));
+        if (existsSync(markerPath)) {
+            let marker;
+            try {
+                marker = parseIdentityBoundSessionMarker(readFileSync(markerPath, 'utf-8'));
+            }
+            catch (err) {
+                throw new SessionMarkerAuthenticationError(`无法读取 CLI process marker ${markerPath}：${err instanceof Error ? err.message : String(err)}`);
+            }
+            if (!marker.sessionId || !marker.turnId || !marker.procStart) {
+                throw new SessionMarkerAuthenticationError(`CLI process marker ${markerPath} 缺少 sessionId/turnId/procStart，不能用于变更操作授权`);
+            }
+            const liveStart = readProcessStartIdentity(pid);
+            if (!liveStart || liveStart !== marker.procStart) {
+                throw new SessionMarkerAuthenticationError(`CLI process marker ${markerPath} 已过期或 PID 被复用，拒绝授权`);
+            }
             return {
-                sessionId: typeof parsed.sessionId === 'string' ? parsed.sessionId : '',
-                turnId: typeof parsed.turnId === 'string' ? parsed.turnId : undefined,
+                sessionId: marker.sessionId,
+                turnId: marker.turnId,
+                ...(marker.dispatchAttempt !== undefined ? { dispatchAttempt: marker.dispatchAttempt } : {}),
+                markerPid: pid,
+                procStart: marker.procStart,
             };
         }
-        catch {
-            return { sessionId: '' };
-        }
+        const parent = readParentPid(pid);
+        if (!parent)
+            break;
+        pid = parent;
     }
-    return { sessionId: text };
+    return null;
 }
 /**
  * Walk the process tree looking for a CLI-pid marker written by the botmux
@@ -40,15 +189,10 @@ export function findAncestorSessionContext(dataDir, startPid = process.ppid) {
                 return { sessionId: '' };
             }
         }
-        try {
-            const out = execSync(`ps -o ppid= -p ${pid}`, { encoding: 'utf-8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'] }).trim();
-            pid = parseInt(out, 10);
-            if (isNaN(pid))
-                break;
-        }
-        catch {
+        const parent = readParentPid(pid);
+        if (!parent)
             break;
-        }
+        pid = parent;
     }
     return null;
 }
@@ -72,8 +216,29 @@ export function findAncestorSessionContext(dataDir, startPid = process.ppid) {
  */
 export function resolveSessionContext(dataDir, envSessionId, startPid = process.ppid) {
     const fromMarker = findAncestorSessionContext(dataDir, startPid);
+    // A live process-tree marker is the primary source whenever it is visible.
+    // Per-session capability snapshots may survive SIGKILL or a later config
+    // change that disables read isolation; they are only a fallback for the
+    // macOS profile where the shared marker directory is intentionally hidden.
     if (fromMarker && fromMarker.sessionId)
         return fromMarker;
+    // Read-isolated macOS sessions cannot read the shared PID-marker directory.
+    // Their exact per-session capability carve-out carries one atomically rotated
+    // turn snapshot, preserving fresh routing without treating the tuple itself
+    // as daemon authority. It is consulted only when no live marker is visible,
+    // so fields from two generations are never mixed.
+    const protectedClaim = envSessionId
+        ? readManagedOriginCapability(dataDir, envSessionId)
+        : null;
+    if (protectedClaim) {
+        return {
+            sessionId: protectedClaim.sessionId,
+            ...(protectedClaim.turnId ? { turnId: protectedClaim.turnId } : {}),
+            ...(protectedClaim.dispatchAttempt !== undefined
+                ? { dispatchAttempt: protectedClaim.dispatchAttempt }
+                : {}),
+        };
+    }
     if (envSessionId)
         return { sessionId: envSessionId };
     return fromMarker;

package/dist/core/session-marker.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-marker.js","sourceRoot":"","sources":["../../src/core/session-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAO9C,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA8C,CAAC;YAC7E,OAAO;gBACL,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBACvE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aACtE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,WAAmB,OAAO,CAAC,IAAI;IACzF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,OAAO,kBAAkB,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,kBAAkB,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChI,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACxB,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,MAAM;QACxB,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM;QAAC,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,YAAgC,EAChC,WAAmB,OAAO,CAAC,IAAI;IAE/B,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1D,IAAI,YAAY;QAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrD,OAAO,UAAU,CAAC;AACpB,CAAC"}
+{"version":3,"file":"session-marker.js","sourceRoot":"","sources":["../../src/core/session-marker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAiB7E,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACzD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,gBAAgB,GAAG,iEAAiE,CAAC;AAE3F,kEAAkE;AAClE,MAAM,UAAU,qBAAqB;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,OAAO,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;gBACpB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,MAAM,CAAC,EAAE,CAAC;oBAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,iEAAiE,CAAC,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAC1B,EAAE,EACF,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EACpC;YACE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE;SAC1C,CACF,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,OAAO,IAAI,SAAS,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW;IAClB,KAAK,MAAM,SAAS,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,UAAU,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACrC,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjC,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IAC/B,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,EAAE,CAAC;IACzB,IAAI,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YAC/D,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACrE,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE;SAC1C,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,OAAO,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAC1E,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,+BAA+B,CAAC,GAAW;IAClD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAE7B,CAAC;QACF,MAAM,eAAe,GAAG,oBAAoB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACrE,OAAO;YACL,SAAS,EAAE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YACvE,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAC;IACpD,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uCAAuC,CACrD,OAAe,EACf,WAAmB,OAAO,CAAC,IAAI;IAE/B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,MAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,GAAG,+BAA+B,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,gCAAgC,CACxC,2BAA2B,UAAU,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAC7D,MAAM,IAAI,gCAAgC,CACxC,sBAAsB,UAAU,2CAA2C,CAC5E,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjD,MAAM,IAAI,gCAAgC,CACxC,sBAAsB,UAAU,oBAAoB,CACrD,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5F,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,WAAmB,OAAO,CAAC,IAAI;IACzF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,OAAO,kBAAkB,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAAC,CAAC;QAC3G,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,MAAM;QACnB,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,YAAgC,EAChC,WAAmB,OAAO,CAAC,IAAI;IAE/B,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,IAAI,UAAU,IAAI,UAAU,CAAC,SAAS;QAAE,OAAO,UAAU,CAAC;IAC1D,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,kDAAkD;IAClD,MAAM,cAAc,GAAG,YAAY;QACjC,CAAC,CAAC,2BAA2B,CAAC,OAAO,EAAE,YAAY,CAAC;QACpD,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,SAAS,EAAE,cAAc,CAAC,SAAS;YACnC,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,cAAc,CAAC,eAAe,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE,eAAe,EAAE,cAAc,CAAC,eAAe,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IACD,IAAI,YAAY;QAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IACrD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/slash-inject.d.ts

@@ -0,0 +1,15 @@
+/**
+ * 纯函数校验：能否把 `command` 作为一行斜杠命令注入到 TUI（inject_command）。
+ * 规则：必须 `/` 开头、单行、命令名不在 FORBIDDEN 固定黑名单里、且命令名在调用方
+ * 传入的 allowlist 里（缺省/空 allowlist = 默认全拒，即通用注入关闭）。
+ * 不做副作用、不访问任何全局状态——allowlist 由调用方（如 bot-registry 的
+ * tuiSlashAllow）解析后传入。
+ */
+export declare function validateSlashInjection(command: string, allowlist: readonly string[] | undefined): {
+    ok: true;
+    command: string;
+} | {
+    ok: false;
+    error: string;
+};
+//# sourceMappingURL=slash-inject.d.ts.map

package/dist/core/slash-inject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-inject.d.ts","sourceRoot":"","sources":["../../src/core/slash-inject.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACvC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAS9D"}

package/dist/core/slash-inject.js

@@ -0,0 +1,25 @@
+/** 通用注入通道禁止的命令：改变 daemon 记录所描述状态的命令必须走专用路由（如 botmux cd）。 */
+const FORBIDDEN = new Set(['/cd']);
+/**
+ * 纯函数校验：能否把 `command` 作为一行斜杠命令注入到 TUI（inject_command）。
+ * 规则：必须 `/` 开头、单行、命令名不在 FORBIDDEN 固定黑名单里、且命令名在调用方
+ * 传入的 allowlist 里（缺省/空 allowlist = 默认全拒，即通用注入关闭）。
+ * 不做副作用、不访问任何全局状态——allowlist 由调用方（如 bot-registry 的
+ * tuiSlashAllow）解析后传入。
+ */
+export function validateSlashInjection(command, allowlist) {
+    const cmd = command.trim();
+    if (!cmd.startsWith('/'))
+        return { ok: false, error: 'not_slash_command' };
+    if (/[\r\n]/.test(cmd))
+        return { ok: false, error: 'multiline_rejected' };
+    const name = cmd.split(/\s+/)[0].toLowerCase();
+    if (FORBIDDEN.has(name))
+        return { ok: false, error: 'command_forbidden' };
+    if (!allowlist || allowlist.length === 0)
+        return { ok: false, error: 'allowlist_empty' };
+    if (!allowlist.includes(name))
+        return { ok: false, error: 'not_in_allowlist' };
+    return { ok: true, command: cmd };
+}
+//# sourceMappingURL=slash-inject.js.map

package/dist/core/slash-inject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slash-inject.js","sourceRoot":"","sources":["../../src/core/slash-inject.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,SAAwC;IAExC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC3E,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC1E,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IACzF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACpC,CAAC"}

package/dist/core/terminal-url.d.ts

@@ -20,6 +20,7 @@ interface TerminalUrlSession {
     };
     workerPort: number | null;
     workerToken: string | null;
+    workerViewToken?: string | null;
     /** Riff AIO Sandbox web terminal link — when present, buildTerminalUrl
      *  returns this directly instead of building a local/proxy URL. */
     riffAccessUrl?: string;

package/dist/core/terminal-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-url.d.ts","sourceRoot":"","sources":["../../src/core/terminal-url.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,UAAU,kBAAkB;IAC1B,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;uEACmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AASD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGvD;AAED;qDACqD;AACrD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE1D;AAED,8DAA8D;AAC9D,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;sDAIsD;AACtD,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,IAAI,CAIzC;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CAsC/F"}
+{"version":3,"file":"terminal-url.d.ts","sourceRoot":"","sources":["../../src/core/terminal-url.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,UAAU,kBAAkB;IAC1B,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACxD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC;uEACmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AASD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAGvD;AAED;qDACqD;AACrD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAE1D;AAED,8DAA8D;AAC9D,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAED;;;;sDAIsD;AACtD,wBAAgB,yBAAyB,IAAI,MAAM,CAElD;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,IAAI,IAAI,CAIzC;AAMD,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,kBAAkB,EAAE,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,CA2C/F"}

package/dist/core/terminal-url.js

@@ -35,6 +35,9 @@ export function resetTerminalProxy() {
     proxyReady = false;
     externalPort = 0;
 }
+function withCapability(base, name, value) {
+    return value ? `${base}?${name}=${encodeURIComponent(value)}` : base;
+}
 export function buildTerminalUrl(ds, opts = {}) {
     // Riff backend: the AIO Sandbox link is the OPERATE entry — served via
     // 「获取操作链接」/ write links only (opts.write). The read-only
@@ -49,7 +52,8 @@ export function buildTerminalUrl(ds, opts = {}) {
     // proxies `/s/*` to the local terminal proxy — so terminals are reachable
     // centrally with no `:port`. Platform owner login grants write access, and an
     // explicitly requested private write link keeps its worker token as an
-    // alternative capability. Public/read-only links never carry that token.
+    // alternative capability. Read-only links carry a distinct view capability:
+    // knowing it never grants terminal input.
     // When 远程访问 is off the platform base is null and we fall through — first
     // to a self-hosted reverse proxy base (`BOTMUX_PUBLIC_URL`, same front-door
     // `/s/<id>` form), then to the local proxy/worker port.
@@ -57,9 +61,9 @@ export function buildTerminalUrl(ds, opts = {}) {
         const platformBase = isRemoteAccessEnabled() ? platformMachineBaseUrl() : null;
         if (platformBase) {
             const base = `${platformBase}/s/${ds.session.sessionId}`;
-            if (opts.write && ds.workerToken)
-                return `${base}?token=${ds.workerToken}`;
-            return base;
+            return opts.write
+                ? withCapability(base, 'token', ds.workerToken)
+                : withCapability(base, 'viewToken', ds.workerViewToken);
         }
         // 自建反代（BOTMUX_PUBLIC_URL）：走 dashboard 前门 `/s/<id>`，无 per-bot 端口、
         // 对所有 bot 通。这里没有平台 SSO 兜底，故写链接必须像本地分支一样保留 token，
@@ -67,14 +71,16 @@ export function buildTerminalUrl(ds, opts = {}) {
         const publicBase = publicReverseProxyBaseUrl();
         if (publicBase) {
             const url = `${publicBase}/s/${ds.session.sessionId}`;
-            return opts.write && ds.workerToken ? `${url}?token=${ds.workerToken}` : url;
+            return opts.write
+                ? withCapability(url, 'token', ds.workerToken)
+                : withCapability(url, 'viewToken', ds.workerViewToken);
         }
     }
     const base = proxyReady
         ? `http://${config.web.externalHost}:${getTerminalAdvertisedPort()}/s/${ds.session.sessionId}`
         : `http://${config.web.externalHost}:${ds.workerPort ?? ds.session.webPort}`;
-    if (opts.write && ds.workerToken)
-        return `${base}?token=${ds.workerToken}`;
-    return base;
+    return opts.write
+        ? withCapability(base, 'token', ds.workerToken)
+        : withCapability(base, 'viewToken', ds.workerViewToken);
 }
 //# sourceMappingURL=terminal-url.js.map

package/dist/core/terminal-url.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-url.js","sourceRoot":"","sources":["../../src/core/terminal-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AA2B5D,IAAI,SAAS,GAAG,CAAC,CAAC;AAClB,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,SAAS,GAAG,IAAI,CAAC;IACjB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED;qDACqD;AACrD,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,oBAAoB;IAClC,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;sDAIsD;AACtD,MAAM,UAAU,yBAAyB;IACvC,OAAO,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAsB,EAAE,OAA4B,EAAE;IACrF,uEAAuE;IACvE,yDAAyD;IACzD,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,EAAE,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC;IAC5D,4EAA4E;IAC5E,2EAA2E;IAC3E,iFAAiF;IACjF,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,GAAG,YAAY,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW;gBAAE,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iEAAiE;QACjE,iDAAiD;QACjD,kBAAkB;QAClB,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,GAAG,UAAU,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,GAAG,UAAU,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,UAAU;QACrB,CAAC,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,yBAAyB,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE;QAC9F,CAAC,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/E,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW;QAAE,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3E,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"terminal-url.js","sourceRoot":"","sources":["../../src/core/terminal-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AA4B5D,IAAI,SAAS,GAAG,CAAC,CAAC;AAClB,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,IAAI,YAAY,GAAG,CAAC,CAAC;AAErB,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,SAAS,GAAG,IAAI,CAAC;IACjB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED;qDACqD;AACrD,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,oBAAoB;IAClC,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED;;;;sDAIsD;AACtD,MAAM,UAAU,yBAAyB;IACvC,OAAO,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kBAAkB;IAChC,SAAS,GAAG,CAAC,CAAC;IACd,UAAU,GAAG,KAAK,CAAC;IACnB,YAAY,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAA2B,EAAE,KAAgC;IACjG,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAsB,EAAE,OAA4B,EAAE;IACrF,uEAAuE;IACvE,yDAAyD;IACzD,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,EAAE,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC,aAAa,CAAC;IAC5D,4EAA4E;IAC5E,2EAA2E;IAC3E,iFAAiF;IACjF,2EAA2E;IAC3E,0EAA0E;IAC1E,8EAA8E;IAC9E,uEAAuE;IACvE,4EAA4E;IAC5E,0CAA0C;IAC1C,yEAAyE;IACzE,4EAA4E;IAC5E,wDAAwD;IACxD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,GAAG,YAAY,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACzD,OAAO,IAAI,CAAC,KAAK;gBACf,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;QAC5D,CAAC;QACD,iEAAiE;QACjE,iDAAiD;QACjD,kBAAkB;QAClB,MAAM,UAAU,GAAG,yBAAyB,EAAE,CAAC;QAC/C,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,GAAG,UAAU,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YACtD,OAAO,IAAI,CAAC,KAAK;gBACf,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;gBAC9C,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,UAAU;QACrB,CAAC,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,yBAAyB,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE;QAC9F,CAAC,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC,KAAK;QACf,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC;QAC/C,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC;AAC5D,CAAC"}

package/dist/core/terminal-write-auth.d.ts

@@ -9,10 +9,30 @@ export interface TerminalWriteInput {
      *  i.e. it genuinely traversed the platform's authenticated reverse proxy. */
     platformProxied: boolean;
 }
+export interface TerminalAccessInput extends TerminalWriteInput {
+    /** Whether the request's `?viewToken=` matched the worker's read capability. */
+    viewTokenMatches: boolean;
+}
+export interface TerminalAccessDecision {
+    hasRead: boolean;
+    hasWrite: boolean;
+    platformReadonly: boolean;
+}
+/**
+ * Derive a stable, read-only terminal capability for one session.  The domain
+ * separator prevents this HMAC from being confused with any other use of the
+ * dashboard secret, while binding to sessionId keeps a token from opening a
+ * different worker.  The host-only secret is masked from sandboxed CLIs.
+ */
+export declare function deriveTerminalViewToken(secret: string, sessionId: string): string;
 export declare function resolveTerminalWrite({ role, tokenMatches, platformBound, platformProxied }: TerminalWriteInput): {
     hasWrite: boolean;
     platformReadonly: boolean;
 };
+/** Resolve both read and write access without ever promoting a view token. */
+export declare function resolveTerminalAccess(input: TerminalAccessInput): TerminalAccessDecision;
+/** Constant-time equality (avoids leaking the dashboard token through compare timing). */
+export declare function safeTerminalTokenEqual(a: string | null | undefined, b: string): boolean;
 /** Extract the `botmux_dashboard_token` value from a request Cookie header. */
 export declare function readDashboardCookie(cookieHeader: string | string[] | undefined): string | null;
 /**
@@ -31,4 +51,10 @@ export declare function resolveTerminalWriteForRequest(headers: Record<string, s
     hasWrite: boolean;
     platformReadonly: boolean;
 };
+/**
+ * Request-level terminal access gate.  Unlike the legacy write-only resolver,
+ * this explicitly denies observation unless the caller has a view/write
+ * capability or an authenticated dashboard cookie.
+ */
+export declare function resolveTerminalAccessForRequest(headers: Record<string, string | string[] | undefined>, tokenMatches: boolean, viewTokenMatches: boolean, isPlatformBound: () => boolean, getDashboardToken: () => string | null): TerminalAccessDecision;
 //# sourceMappingURL=terminal-write-auth.d.ts.map

package/dist/core/terminal-write-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-write-auth.d.ts","sourceRoot":"","sources":["../../src/core/terminal-write-auth.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,kBAAkB;IACjC,iGAAiG;IACjG,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAE,OAAO,CAAC;IACtB,4FAA4F;IAC5F,aAAa,EAAE,OAAO,CAAC;IACvB;kFAC8E;IAC9E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,CAClC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,kBAAkB,GACzE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAWlD;AAUD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAS9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,YAAY,EAAE,OAAO,EACrB,eAAe,EAAE,MAAM,OAAO,EAC9B,iBAAiB,EAAE,MAAM,MAAM,GAAG,IAAI,GACrC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAOlD"}
+{"version":3,"file":"terminal-write-auth.d.ts","sourceRoot":"","sources":["../../src/core/terminal-write-auth.ts"],"names":[],"mappings":"AA8BA,MAAM,WAAW,kBAAkB;IACjC,iGAAiG;IACjG,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,wEAAwE;IACxE,YAAY,EAAE,OAAO,CAAC;IACtB,4FAA4F;IAC5F,aAAa,EAAE,OAAO,CAAC;IACvB;kFAC8E;IAC9E,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D,gFAAgF;IAChF,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKjF;AAED,wBAAgB,oBAAoB,CAClC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,kBAAkB,GACzE;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAWlD;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,sBAAsB,CAUxF;AAED,0FAA0F;AAC1F,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAMvF;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAS9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,YAAY,EAAE,OAAO,EACrB,eAAe,EAAE,MAAM,OAAO,EAC9B,iBAAiB,EAAE,MAAM,MAAM,GAAG,IAAI,GACrC;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,gBAAgB,EAAE,OAAO,CAAA;CAAE,CAOlD;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,YAAY,EAAE,OAAO,EACrB,gBAAgB,EAAE,OAAO,EACzB,eAAe,EAAE,MAAM,OAAO,EAC9B,iBAAiB,EAAE,MAAM,MAAM,GAAG,IAAI,GACrC,sBAAsB,CAaxB"}

package/dist/core/terminal-write-auth.js

@@ -25,7 +25,19 @@
 //     platform's authenticated front door.
 //
 // Otherwise the role header is ignored and write falls back to `?token=`.
-import { timingSafeEqual } from 'node:crypto';
+import { createHmac, timingSafeEqual } from 'node:crypto';
+/**
+ * Derive a stable, read-only terminal capability for one session.  The domain
+ * separator prevents this HMAC from being confused with any other use of the
+ * dashboard secret, while binding to sessionId keeps a token from opening a
+ * different worker.  The host-only secret is masked from sandboxed CLIs.
+ */
+export function deriveTerminalViewToken(secret, sessionId) {
+    return createHmac('sha256', secret)
+        .update('botmux-terminal-view-v1\0')
+        .update(sessionId)
+        .digest('base64url');
+}
 export function resolveTerminalWrite({ role, tokenMatches, platformBound, platformProxied }) {
     // A matching private write-link token is an independent capability: the owner
     // explicitly issued that link, so it grants write even for a viewer the
@@ -39,8 +51,22 @@ export function resolveTerminalWrite({ role, tokenMatches, platformBound, platfo
     }
     return { hasWrite: false, platformReadonly: false };
 }
+/** Resolve both read and write access without ever promoting a view token. */
+export function resolveTerminalAccess(input) {
+    const write = resolveTerminalWrite(input);
+    return {
+        // A valid dashboard cookie proves that the request passed through the
+        // authenticated dashboard/platform front door.  It grants observation even
+        // on an unbound local dashboard, while write still follows the stricter
+        // token/platform-owner rules above.
+        hasRead: write.hasWrite || input.viewTokenMatches || input.platformProxied,
+        ...write,
+    };
+}
 /** Constant-time equality (avoids leaking the dashboard token through compare timing). */
-function safeEqual(a, b) {
+export function safeTerminalTokenEqual(a, b) {
+    if (!a)
+        return false;
     const ab = Buffer.from(a);
     const bb = Buffer.from(b);
     if (ab.length !== bb.length)
@@ -78,7 +104,26 @@ export function resolveTerminalWriteForRequest(headers, tokenMatches, isPlatform
     const role = typeof rawRole === 'string' ? rawRole : undefined;
     const cookieToken = readDashboardCookie(headers['cookie']);
     const activeToken = getDashboardToken();
-    const platformProxied = !!activeToken && !!cookieToken && safeEqual(cookieToken, activeToken);
+    const platformProxied = !!activeToken && safeTerminalTokenEqual(cookieToken, activeToken);
     return resolveTerminalWrite({ role, tokenMatches, platformBound: isPlatformBound(), platformProxied });
 }
+/**
+ * Request-level terminal access gate.  Unlike the legacy write-only resolver,
+ * this explicitly denies observation unless the caller has a view/write
+ * capability or an authenticated dashboard cookie.
+ */
+export function resolveTerminalAccessForRequest(headers, tokenMatches, viewTokenMatches, isPlatformBound, getDashboardToken) {
+    const rawRole = headers['x-botmux-role'];
+    const role = typeof rawRole === 'string' ? rawRole : undefined;
+    const cookieToken = readDashboardCookie(headers['cookie']);
+    const activeToken = getDashboardToken();
+    const platformProxied = !!activeToken && safeTerminalTokenEqual(cookieToken, activeToken);
+    return resolveTerminalAccess({
+        role,
+        tokenMatches,
+        viewTokenMatches,
+        platformBound: isPlatformBound(),
+        platformProxied,
+    });
+}
 //# sourceMappingURL=terminal-write-auth.js.map

package/dist/core/terminal-write-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"terminal-write-auth.js","sourceRoot":"","sources":["../../src/core/terminal-write-auth.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,6CAA6C;AAC7C,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,2CAA2C;AAC3C,EAAE;AACF,0EAA0E;AAE1E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAc9C,MAAM,UAAU,oBAAoB,CAClC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAsB;IAE1E,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IACrE,IAAI,aAAa,IAAI,eAAe,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,0FAA0F;AAC1F,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,YAA2C;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACjF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,wBAAwB;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAsD,EACtD,YAAqB,EACrB,eAA8B,EAC9B,iBAAsC;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,IAAI,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9F,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AACzG,CAAC"}
+{"version":3,"file":"terminal-write-auth.js","sourceRoot":"","sources":["../../src/core/terminal-write-auth.ts"],"names":[],"mappings":"AAAA,kCAAkC;AAClC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,EAAE;AACF,uEAAuE;AACvE,+EAA+E;AAC/E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,gFAAgF;AAChF,6CAA6C;AAC7C,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,2CAA2C;AAC3C,EAAE;AACF,0EAA0E;AAE1E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAyB1D;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,SAAiB;IACvE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,2BAA2B,CAAC;SACnC,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAsB;IAE1E,8EAA8E;IAC9E,wEAAwE;IACxE,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,YAAY;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;IACrE,IAAI,aAAa,IAAI,eAAe,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,KAAK,OAAO,CAAC;QAClC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,KAA0B;IAC9D,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO;QACL,sEAAsE;QACtE,2EAA2E;QAC3E,wEAAwE;QACxE,oCAAoC;QACpC,OAAO,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,eAAe;QAC1E,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,sBAAsB,CAAC,CAA4B,EAAE,CAAS;IAC5E,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,YAA2C;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IACjF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,wBAAwB;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACtG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAsD,EACtD,YAAqB,EACrB,eAA8B,EAC9B,iBAAsC;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1F,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;AACzG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAsD,EACtD,YAAqB,EACrB,gBAAyB,EACzB,eAA8B,EAC9B,iBAAsC;IAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,CAAC,CAAC,WAAW,IAAI,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1F,OAAO,qBAAqB,CAAC;QAC3B,IAAI;QACJ,YAAY;QACZ,gBAAgB;QAChB,aAAa,EAAE,eAAe,EAAE;QAChC,eAAe;KAChB,CAAC,CAAC;AACL,CAAC"}

package/dist/core/trigger-session.d.ts

@@ -6,6 +6,29 @@ export interface TriggerSessionDeps {
     larkAppId: string;
     activeSessions: Map<string, DaemonSession>;
 }
+/** Daemon-internal dispatch controls. These deliberately do not live in the
+ * public TriggerRequest schema: an untrusted connector must not choose a turn
+ * identity that participates in durable delivery reconciliation. */
+export interface TriggerSessionInternalOptions {
+    stableTurnId?: string;
+    /** Synchronous write-ahead hook invoked immediately before worker IPC/fork.
+     *  Durable receivers use it to persist DISPATCHED with the exact worker
+     *  generation. Throwing aborts the dispatch. */
+    beforeDispatch?: (context: {
+        sessionId: string;
+        workerGeneration: number;
+    }) => void | {
+        dispatchAttempt: number;
+    };
+    /** Suppress daemon-rendered final_output while preserving turn_terminal.
+     *  Used by analysis-only meeting consumers; explicit user IM turns do not
+     *  set it. */
+    suppressFinalOutput?: boolean;
+    /** Meeting raw text is intentionally ephemeral receiver input. Keep it out
+     *  of botmux's persisted Session.lastUserPrompt/lastCliInput fields; receipt
+     *  recovery asks the hub to resend the frozen envelope instead. */
+    persistInputHistory?: boolean;
+}
 /** Small, human-readable text for Codex App's visible UserMessage. The full
  * legacy event envelope still travels as hidden untrusted context. */
 export declare function buildExternalEventVisibleText(req: TriggerRequest, larkAppId?: string): string;
@@ -26,5 +49,5 @@ export declare function buildExternalEventDataContext(req: TriggerRequest, trigg
  *  keep a top-level external event flat in the group chat-scope session, exactly
  *  as they route a top-level @mention. Exported for unit tests. */
 export declare function externalEventOpensOwnTopic(chatMode: ChatMode, regularGroupMode: ChatReplyMode): boolean;
-export declare function triggerSessionTurn(req: TriggerRequest, deps: TriggerSessionDeps): Promise<TriggerResponse>;
+export declare function triggerSessionTurn(req: TriggerRequest, deps: TriggerSessionDeps, internal?: TriggerSessionInternalOptions): Promise<TriggerResponse>;
 //# sourceMappingURL=trigger-session.d.ts.map

package/dist/core/trigger-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trigger-session.d.ts","sourceRoot":"","sources":["../../src/core/trigger-session.ts"],"names":[],"mappings":"AAKA,OAAO,EAA4D,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAQnG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpF,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC5C;AAOD;sEACsE;AACtE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAG7F;AAED;;gFAEgF;AAChF,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAmBhF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxF;AAED;;0EAE0E;AAC1E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAyB5F;AAED;;;;;;mEAMmE;AACnE,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,GAAG,OAAO,CAEvG;AA6HD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,eAAe,CAAC,CAsT1B"}
+{"version":3,"file":"trigger-session.d.ts","sourceRoot":"","sources":["../../src/core/trigger-session.ts"],"names":[],"mappings":"AAKA,OAAO,EAA4D,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC/G,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAQnG,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAGpF,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;CAC5C;AAED;;oEAEoE;AACpE,MAAM,WAAW,6BAA6B;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;oDAEgD;IAChD,cAAc,CAAC,EAAE,CACf,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,KACrD,IAAI,GAAG;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC;;kBAEc;IACd,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;uEAEmE;IACnE,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAOD;sEACsE;AACtE,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAG7F;AAED;;gFAEgF;AAChF,wBAAgB,oCAAoC,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAmBhF;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIxF;AAED;;0EAE0E;AAC1E,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAyB5F;AAED;;;;;;mEAMmE;AACnE,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,GAAG,OAAO,CAEvG;AA6HD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,cAAc,EACnB,IAAI,EAAE,kBAAkB,EACxB,QAAQ,CAAC,EAAE,6BAA6B,GACvC,OAAO,CAAC,eAAe,CAAC,CA+Y1B"}