botmux 2.111.0 → 2.112.0

package/dist/services/vc-meeting-consumer-profile-store.js

@@ -0,0 +1,190 @@
+import { createHash } from 'node:crypto';
+import { parseBotConfigsFromText, } from '../bot-registry.js';
+import { canonicalJson } from '../utils/canonical-input-hash.js';
+import { readRawConfig, requireConfigPath, rmwBotEntry, } from './config-store.js';
+import { isLegacyVcMeetingDefaultConsumerSeedCandidate } from './vc-meeting-consumer-profile-bootstrap.js';
+function canonicalRevision(consumer, rawConsumer) {
+    return `sha256:${createHash('sha256')
+        // Raw own-property presence is semantic for bootstrap/catalog ownership.
+        // Hash the parsed raw object so a concurrent hand edit such as an empty
+        // legacy alias cannot normalize away and slip past optimistic concurrency.
+        .update(canonicalJson(rawConsumer ?? consumer ?? null), 'utf8')
+        .digest('hex')}`;
+}
+function findBot(configs, larkAppId) {
+    return configs.find(config => config.larkAppId === larkAppId);
+}
+function rawBotEntry(raw, larkAppId) {
+    return raw.find((value) => !!value && typeof value === 'object' && !Array.isArray(value)
+        && value.larkAppId === larkAppId);
+}
+function rawMeetingConsumer(entry) {
+    const vcAgent = entry?.vcMeetingAgent;
+    if (!vcAgent || typeof vcAgent !== 'object' || Array.isArray(vcAgent))
+        return undefined;
+    const consumer = vcAgent.meetingConsumer;
+    return consumer && typeof consumer === 'object' && !Array.isArray(consumer)
+        ? consumer
+        : undefined;
+}
+function catalogStateFromRaw(entry) {
+    const consumer = rawMeetingConsumer(entry);
+    if (!consumer)
+        return 'uninitialized';
+    if (Object.prototype.hasOwnProperty.call(consumer, 'consumerProfiles')) {
+        return Array.isArray(consumer.consumerProfiles) && consumer.consumerProfiles.length === 0
+            ? 'explicit_empty'
+            : 'profiles';
+    }
+    const legacyOrPartial = [
+        'defaultAgentAppId',
+        'defaultAgent',
+        'agentCandidates',
+        'agents',
+        'defaultConsumerIds',
+        'defaultMode',
+    ].some(field => Object.prototype.hasOwnProperty.call(consumer, field))
+        || consumer.defaultMode === 'agent';
+    return legacyOrPartial ? 'legacy_or_partial' : 'uninitialized';
+}
+function snapshotFromBot(bot, entry) {
+    const consumer = bot.vcMeetingAgent?.meetingConsumer;
+    const rawConsumer = rawMeetingConsumer(entry);
+    const profiles = consumer?.consumerProfiles ?? [];
+    const profileIds = new Set(profiles.map(profile => profile.id));
+    const defaultConsumerIds = (consumer?.defaultConsumerIds ?? []).filter(id => profileIds.has(id));
+    return {
+        listenerBotAppId: bot.larkAppId,
+        revision: canonicalRevision(consumer, rawConsumer),
+        catalogState: catalogStateFromRaw(entry),
+        defaultMode: consumer?.defaultMode === 'agents' && defaultConsumerIds.length > 0
+            ? 'agents'
+            : 'listenOnly',
+        defaultConsumerIds,
+        profiles,
+        ...(consumer?.defaultProfileBootstrap
+            ? { defaultProfileBootstrap: consumer.defaultProfileBootstrap }
+            : {}),
+        ...(rawConsumer && isLegacyVcMeetingDefaultConsumerSeedCandidate(rawConsumer)
+            ? { migrationOffer: 'enable_seeded_minutes_default' }
+            : {}),
+    };
+}
+function parseConfigs(raw) {
+    return parseBotConfigsFromText(JSON.stringify(raw));
+}
+function validationError(err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const pathMatch = message.match(/vcMeetingAgent\.meetingConsumer\.(consumerProfiles(?:\[\d+\])?(?:\.[A-Za-z0-9_]+)*(?:\[\d+\])?|defaultConsumerIds(?:\[\d+\])?|defaultMode)/u);
+    let path = pathMatch?.[1]?.replace(/^consumerProfiles/u, 'profiles');
+    if (path) {
+        path = path
+            .replace(/\.filter\.activityTypes/u, '.activityTypes')
+            .replace(/\.(?:capabilities|ownedSinks)(?:\[\d+\])?$/u, '.permissionPreset');
+    }
+    else if (/defaultConsumerIds|defaultMode=agents|selected profiles|selectedConsumerIds/u.test(message)) {
+        path = 'defaultConsumerIds';
+    }
+    else {
+        path = 'profiles';
+    }
+    return { path, message };
+}
+function rawProfile(profile) {
+    return {
+        id: profile.id,
+        agentAppId: profile.agentAppId,
+        ...(profile.label ? { label: profile.label } : {}),
+        role: profile.role,
+        ...(profile.instructions ? { instructions: profile.instructions } : {}),
+        ...(profile.filter ? { filter: profile.filter } : {}),
+        responseMode: profile.responseMode,
+        capabilities: [...profile.capabilities],
+        ...(profile.ownedSinks?.length ? { ownedSinks: [...profile.ownedSinks] } : {}),
+    };
+}
+function applyProfilesToRawEntry(entry, input) {
+    const vcMeetingAgent = entry.vcMeetingAgent && typeof entry.vcMeetingAgent === 'object' && !Array.isArray(entry.vcMeetingAgent)
+        ? entry.vcMeetingAgent
+        : {};
+    const meetingConsumer = vcMeetingAgent.meetingConsumer && typeof vcMeetingAgent.meetingConsumer === 'object' && !Array.isArray(vcMeetingAgent.meetingConsumer)
+        ? vcMeetingAgent.meetingConsumer
+        : {};
+    meetingConsumer.enabled = true;
+    meetingConsumer.consumerProfiles = input.profiles.map(rawProfile);
+    meetingConsumer.defaultMode = input.defaultMode;
+    // Keep the submitted selection byte-for-byte (apart from JSON encoding) until
+    // the shared bot-registry parser validates it below. Silently filtering
+    // unknown/duplicate ids or downgrading an empty agents default would let the
+    // dashboard accept a different policy than the daemon will enforce.
+    if (input.defaultConsumerIds.length > 0) {
+        meetingConsumer.defaultConsumerIds = [...input.defaultConsumerIds];
+    }
+    else
+        delete meetingConsumer.defaultConsumerIds;
+    // An explicit Dashboard/CLI save transfers ownership to the operator. Do
+    // not leave generator provenance behind: future automatic migrations must
+    // require both the marker and an unchanged generated fingerprint.
+    delete meetingConsumer.defaultProfileBootstrap;
+    // Presence of consumerProfiles is the profile-mode discriminator. Remove
+    // legacy aliases so they cannot silently revive after an explicit empty save.
+    delete meetingConsumer.defaultAgentAppId;
+    delete meetingConsumer.defaultAgent;
+    delete meetingConsumer.agentCandidates;
+    delete meetingConsumer.agents;
+    vcMeetingAgent.meetingConsumer = meetingConsumer;
+    entry.vcMeetingAgent = vcMeetingAgent;
+}
+export async function readVcMeetingConsumerProfiles(listenerBotAppId) {
+    const path = requireConfigPath();
+    const raw = await readRawConfig(path);
+    const bot = findBot(parseConfigs(raw), listenerBotAppId);
+    return bot ? snapshotFromBot(bot, rawBotEntry(raw, listenerBotAppId)) : undefined;
+}
+/**
+ * Optimistic, lock-protected replacement of the listener bot's preset catalog.
+ * The expected revision is derived from the latest canonical on-disk config,
+ * so hand edits and concurrent dashboard tabs cannot overwrite one another.
+ */
+export async function updateVcMeetingConsumerProfiles(listenerBotAppId, input) {
+    try {
+        const result = await rmwBotEntry(listenerBotAppId, (entry, raw) => {
+            let current;
+            try {
+                const bot = findBot(parseConfigs(raw), listenerBotAppId);
+                if (!bot)
+                    return { write: false, result: { ok: false, reason: 'bot_not_in_config' } };
+                current = snapshotFromBot(bot, rawBotEntry(raw, listenerBotAppId));
+            }
+            catch (err) {
+                return {
+                    write: false,
+                    result: { ok: false, reason: 'validation_failed', fieldErrors: [validationError(err)] },
+                };
+            }
+            if (current.revision !== input.expectedRevision) {
+                return { write: false, result: { ok: false, reason: 'config_conflict' } };
+            }
+            applyProfilesToRawEntry(entry, input);
+            let updated;
+            try {
+                const bot = findBot(parseConfigs(raw), listenerBotAppId);
+                if (!bot)
+                    return { write: false, result: { ok: false, reason: 'bot_not_in_config' } };
+                updated = snapshotFromBot(bot, rawBotEntry(raw, listenerBotAppId));
+            }
+            catch (err) {
+                return {
+                    write: false,
+                    result: { ok: false, reason: 'validation_failed', fieldErrors: [validationError(err)] },
+                };
+            }
+            return { write: true, result: { ok: true, snapshot: updated } };
+        });
+        return result.ok ? result.result : { ok: false, reason: 'bot_not_in_config' };
+    }
+    catch {
+        return { ok: false, reason: 'config_unavailable' };
+    }
+}
+//# sourceMappingURL=vc-meeting-consumer-profile-store.js.map

package/dist/services/vc-meeting-consumer-profile-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-meeting-consumer-profile-store.js","sourceRoot":"","sources":["../../src/services/vc-meeting-consumer-profile-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EACL,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,6CAA6C,EAAE,MAAM,4CAA4C,CAAC;AA+B3G,SAAS,iBAAiB,CACxB,QAA6C,EAC7C,WAAgD;IAEhD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC;QACnC,yEAAyE;QACzE,wEAAwE;QACxE,2EAA2E;SAC1E,MAAM,CAAC,aAAa,CAAC,WAAW,IAAI,QAAQ,IAAI,IAAI,CAAC,EAAE,MAAM,CAAC;SAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,OAAO,CAAC,OAA6B,EAAE,SAAiB;IAC/D,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,GAAuB,EAAE,SAAiB;IAC7D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAoC,EAAE,CAC1D,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACvD,KAAiC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAA0C;IACpE,MAAM,OAAO,GAAG,KAAK,EAAE,cAAc,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACxF,MAAM,QAAQ,GAAI,OAAmC,CAAC,eAAe,CAAC;IACtE,OAAO,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzE,CAAC,CAAC,QAAmC;QACrC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAA0C;IAE1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ;QAAE,OAAO,eAAe,CAAC;IACtC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,QAAQ,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACvF,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC;IACD,MAAM,eAAe,GAAG;QACtB,mBAAmB;QACnB,cAAc;QACd,iBAAiB;QACjB,QAAQ;QACR,oBAAoB;QACpB,aAAa;KACd,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;WACjE,QAAQ,CAAC,WAAW,KAAK,OAAO,CAAC;IACtC,OAAO,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,eAAe,CAAC;AACjE,CAAC;AAED,SAAS,eAAe,CACtB,GAAc,EACd,KAA+B;IAE/B,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,EAAE,eAAe,CAAC;IACrD,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjG,OAAO;QACL,gBAAgB,EAAE,GAAG,CAAC,SAAS;QAC/B,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC;QAClD,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC;QACxC,WAAW,EAAE,QAAQ,EAAE,WAAW,KAAK,QAAQ,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC;YAC9E,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,YAAY;QAChB,kBAAkB;QAClB,QAAQ;QACR,GAAG,CAAC,QAAQ,EAAE,uBAAuB;YACnC,CAAC,CAAC,EAAE,uBAAuB,EAAE,QAAQ,CAAC,uBAAuB,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,IAAI,6CAA6C,CAAC,WAAW,CAAC;YAC3E,CAAC,CAAC,EAAE,cAAc,EAAE,+BAAwC,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAc;IAClC,OAAO,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAC7B,6IAA6I,CAC9I,CAAC;IACF,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;IACrE,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,GAAG,IAAI;aACR,OAAO,CAAC,0BAA0B,EAAE,gBAAgB,CAAC;aACrD,OAAO,CAAC,6CAA6C,EAAE,mBAAmB,CAAC,CAAC;IACjF,CAAC;SAAM,IAAI,8EAA8E,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxG,IAAI,GAAG,oBAAoB,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,OAAuC;IACzD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAA8B,EAC9B,KAA2C;IAE3C,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QAC7H,CAAC,CAAC,KAAK,CAAC,cAAyC;QACjD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,IAAI,OAAO,cAAc,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC;QAC5J,CAAC,CAAC,cAAc,CAAC,eAA0C;QAC3D,CAAC,CAAC,EAAE,CAAC;IACP,eAAe,CAAC,OAAO,GAAG,IAAI,CAAC;IAC/B,eAAe,CAAC,gBAAgB,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClE,eAAe,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAChD,8EAA8E;IAC9E,wEAAwE;IACxE,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,KAAK,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,eAAe,CAAC,kBAAkB,GAAG,CAAC,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACrE,CAAC;;QACI,OAAO,eAAe,CAAC,kBAAkB,CAAC;IAC/C,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,OAAO,eAAe,CAAC,uBAAuB,CAAC;IAC/C,yEAAyE;IACzE,8EAA8E;IAC9E,OAAO,eAAe,CAAC,iBAAiB,CAAC;IACzC,OAAO,eAAe,CAAC,YAAY,CAAC;IACpC,OAAO,eAAe,CAAC,eAAe,CAAC;IACvC,OAAO,eAAe,CAAC,MAAM,CAAC;IAC9B,cAAc,CAAC,eAAe,GAAG,eAAe,CAAC;IACjD,KAAK,CAAC,cAAc,GAAG,cAAc,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,gBAAwB;IAExB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,gBAAwB,EACxB,KAA2C;IAE3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAwC,gBAAgB,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACvG,IAAI,OAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACzD,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC;gBACtF,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE;iBACxF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAChD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,CAAC;YAC5E,CAAC;YACD,uBAAuB,CAAC,KAAgC,EAAE,KAAK,CAAC,CAAC;YACjE,IAAI,OAA0C,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC;gBACzD,IAAI,CAAC,GAAG;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC;gBACtF,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE;iBACxF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/services/vc-meeting-daemon-auth.d.ts

@@ -0,0 +1,29 @@
+export declare const VC_MEETING_DAEMON_AUTH_HEADER = "x-botmux-vc-daemon-auth";
+export interface VcMeetingDaemonAuthFailure {
+    ok: false;
+    status: 401;
+    body: {
+        ok: false;
+        errorCode: 'vc_daemon_auth_required';
+        error: string;
+    };
+}
+export type VcMeetingDaemonAuthResult = {
+    ok: true;
+} | VcMeetingDaemonAuthFailure;
+type HeaderMap = Record<string, string | string[] | undefined>;
+/** Digesting the app id keeps arbitrary app-id characters out of filenames. */
+export declare function vcMeetingDaemonAuthTokenPath(dataDir: string, larkAppId: string): string;
+/** Read an existing target token without creating or rotating it. */
+export declare function readVcMeetingDaemonAuthToken(dataDir: string, larkAppId: string): string | undefined;
+/**
+ * Create-once/read the target token. File locking prevents two daemon starts
+ * from racing to install different credentials for the same app id.
+ */
+export declare function ensureVcMeetingDaemonAuthToken(dataDir: string, larkAppId: string): string;
+/** Pure route guard result. Callers must invoke it before reading a body. */
+export declare function authorizeVcMeetingDaemonControlRequest(dataDir: string, targetLarkAppId: string, headers: Headers | HeaderMap): VcMeetingDaemonAuthResult;
+/** Add/replace the target daemon's credential without mutating caller headers. */
+export declare function withVcMeetingDaemonAuthHeader(dataDir: string, targetLarkAppId: string, initHeaders?: HeadersInit): Headers;
+export {};
+//# sourceMappingURL=vc-meeting-daemon-auth.d.ts.map

package/dist/services/vc-meeting-daemon-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-meeting-daemon-auth.d.ts","sourceRoot":"","sources":["../../src/services/vc-meeting-daemon-auth.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,6BAA6B,4BAA4B,CAAC;AAEvE,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,CAAC;IACZ,IAAI,EAAE;QACJ,EAAE,EAAE,KAAK,CAAC;QACV,SAAS,EAAE,yBAAyB,CAAC;QACrC,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,MAAM,yBAAyB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG,0BAA0B,CAAC;AAElF,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;AAS/D,+EAA+E;AAC/E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAIvF;AAUD,qEAAqE;AACrE,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,GAAG,SAAS,CAQpB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,MAAM,CAgBR;AAmBD,6EAA6E;AAC7E,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,GAAG,SAAS,GAC3B,yBAAyB,CAkB3B;AAED,kFAAkF;AAClF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,MAAM,EACvB,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAOT"}

package/dist/services/vc-meeting-daemon-auth.js

@@ -0,0 +1,117 @@
+/**
+ * Shared-host authentication for VC meeting daemon-to-daemon control traffic.
+ *
+ * Every bot daemon owns one random token under the shared session dataDir.
+ * Peer daemons on the same trusted host can read that target-scoped token and
+ * present it on internal control-plane requests. Tokens never enter daemon
+ * descriptors, worker environments, delivery envelopes, or outboxes.
+ *
+ * This is intentionally NOT the authorization mechanism for agent-facing
+ * managed-action requests. Those must prove a live receiver origin and pass
+ * capability/sink-owner policy in the action gate.
+ */
+import { createHash, randomBytes, timingSafeEqual } from 'node:crypto';
+import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, } from 'node:fs';
+import { join } from 'node:path';
+import { atomicWriteFileSync } from '../utils/atomic-write.js';
+import { withFileLockSync } from '../utils/file-lock.js';
+const AUTH_DIR = 'vc-meeting-daemon-auth';
+const TOKEN_PATTERN = /^vcda_[0-9a-f]{64}$/;
+export const VC_MEETING_DAEMON_AUTH_HEADER = 'x-botmux-vc-daemon-auth';
+function requireAppId(larkAppId) {
+    if (typeof larkAppId !== 'string' || !larkAppId.trim() || larkAppId.length > 512) {
+        throw new Error('invalid larkAppId for VC daemon auth');
+    }
+    return larkAppId.trim();
+}
+/** Digesting the app id keeps arbitrary app-id characters out of filenames. */
+export function vcMeetingDaemonAuthTokenPath(dataDir, larkAppId) {
+    const appId = requireAppId(larkAppId);
+    const digest = createHash('sha256').update(appId, 'utf8').digest('hex');
+    return join(dataDir, AUTH_DIR, `${digest}.token`);
+}
+function parseToken(raw, fp) {
+    const token = raw.trim();
+    if (!TOKEN_PATTERN.test(token)) {
+        throw new Error(`invalid VC daemon auth token at ${fp}`);
+    }
+    return token;
+}
+/** Read an existing target token without creating or rotating it. */
+export function readVcMeetingDaemonAuthToken(dataDir, larkAppId) {
+    const fp = vcMeetingDaemonAuthTokenPath(dataDir, larkAppId);
+    if (!existsSync(fp))
+        return undefined;
+    const stat = lstatSync(fp);
+    if (!stat.isFile() || stat.isSymbolicLink()) {
+        throw new Error(`VC daemon auth token is not a regular file: ${fp}`);
+    }
+    return parseToken(readFileSync(fp, 'utf8'), fp);
+}
+/**
+ * Create-once/read the target token. File locking prevents two daemon starts
+ * from racing to install different credentials for the same app id.
+ */
+export function ensureVcMeetingDaemonAuthToken(dataDir, larkAppId) {
+    const fp = vcMeetingDaemonAuthTokenPath(dataDir, larkAppId);
+    const dir = join(dataDir, AUTH_DIR);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true, mode: 0o700 });
+    chmodSync(dir, 0o700);
+    return withFileLockSync(fp, () => {
+        const existing = readVcMeetingDaemonAuthToken(dataDir, larkAppId);
+        if (existing) {
+            chmodSync(fp, 0o600);
+            return existing;
+        }
+        const token = `vcda_${randomBytes(32).toString('hex')}`;
+        atomicWriteFileSync(fp, `${token}\n`, { mode: 0o600 });
+        chmodSync(fp, 0o600);
+        return token;
+    });
+}
+function presentedHeader(headers) {
+    if (headers instanceof Headers) {
+        const value = headers.get(VC_MEETING_DAEMON_AUTH_HEADER);
+        return value?.trim() || undefined;
+    }
+    const value = headers[VC_MEETING_DAEMON_AUTH_HEADER];
+    // Duplicate auth headers are ambiguous and fail closed.
+    if (Array.isArray(value))
+        return undefined;
+    return typeof value === 'string' ? value.trim() || undefined : undefined;
+}
+function constantTimeEqual(expected, actual) {
+    const left = Buffer.from(expected, 'utf8');
+    const right = Buffer.from(actual, 'utf8');
+    return left.length === right.length && timingSafeEqual(left, right);
+}
+/** Pure route guard result. Callers must invoke it before reading a body. */
+export function authorizeVcMeetingDaemonControlRequest(dataDir, targetLarkAppId, headers) {
+    let expected;
+    try {
+        expected = readVcMeetingDaemonAuthToken(dataDir, targetLarkAppId);
+    }
+    catch {
+        expected = undefined;
+    }
+    const actual = presentedHeader(headers);
+    if (expected && actual && constantTimeEqual(expected, actual))
+        return { ok: true };
+    return {
+        ok: false,
+        status: 401,
+        body: {
+            ok: false,
+            errorCode: 'vc_daemon_auth_required',
+            error: 'valid daemon-to-daemon VC control authentication is required',
+        },
+    };
+}
+/** Add/replace the target daemon's credential without mutating caller headers. */
+export function withVcMeetingDaemonAuthHeader(dataDir, targetLarkAppId, initHeaders) {
+    const headers = new Headers(initHeaders);
+    headers.set(VC_MEETING_DAEMON_AUTH_HEADER, ensureVcMeetingDaemonAuthToken(dataDir, targetLarkAppId));
+    return headers;
+}
+//# sourceMappingURL=vc-meeting-daemon-auth.js.map

package/dist/services/vc-meeting-daemon-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-meeting-daemon-auth.js","sourceRoot":"","sources":["../../src/services/vc-meeting-daemon-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,MAAM,QAAQ,GAAG,wBAAwB,CAAC;AAC1C,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAE5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,CAAC;AAgBvE,SAAS,YAAY,CAAC,SAAiB;IACrC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,4BAA4B,CAAC,OAAe,EAAE,SAAiB;IAC7E,MAAM,KAAK,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,EAAU;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,SAAiB;IAEjB,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAe,EACf,SAAiB;IAEjB,MAAM,EAAE,GAAG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtB,OAAO,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE;QAC/B,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,QAAQ,EAAE,CAAC;YACb,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,mBAAmB,CAAC,EAAE,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA4B;IACnD,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACzD,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IACpC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrD,wDAAwD;IACxD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,MAAc;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sCAAsC,CACpD,OAAe,EACf,eAAuB,EACvB,OAA4B;IAE5B,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,4BAA4B,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,QAAQ,GAAG,SAAS,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,IAAI,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACnF,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,GAAG;QACX,IAAI,EAAE;YACJ,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,yBAAyB;YACpC,KAAK,EAAE,8DAA8D;SACtE;KACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,6BAA6B,CAC3C,OAAe,EACf,eAAuB,EACvB,WAAyB;IAEzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CACT,6BAA6B,EAC7B,8BAA8B,CAAC,OAAO,EAAE,eAAe,CAAC,CACzD,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/services/vc-meeting-delivery-feed.d.ts

@@ -0,0 +1,52 @@
+import type { NormalizedVcMeetingItem, VcMeetingActivityType } from '../vc-agent/types.js';
+import { type VcMeetingDeliveryEntry, type VcMeetingDeliveryRequest } from './vc-meeting-delivery-protocol.js';
+export declare const VC_MEETING_DELIVERY_INSTRUCTION_VERSION: "meeting-consumer-v1";
+export interface VcMeetingCanonicalFeedItem {
+    /** Canonical listener feed sequence. Gaps are valid after per-member filtering. */
+    ingestSeq: number;
+    /** Durable journal identity. Callers that persist/rebuild a feed must supply
+     *  both fields instead of relying on the process-local transcript revision. */
+    itemVersionKey?: string;
+    contentHash?: string;
+    item: NormalizedVcMeetingItem;
+}
+export interface VcMeetingDeliveryRenderContext {
+    timeZone: string;
+    /** Stable identities allowed to issue instructions in meeting content. */
+    authorizedActorIds?: readonly string[];
+}
+export interface VcMeetingDeliveryMemberFilter {
+    activityTypes?: readonly VcMeetingActivityType[];
+}
+export interface BuildVcMeetingDeliveryEntriesInput {
+    items: readonly VcMeetingCanonicalFeedItem[];
+    fromDeliverySeq: number;
+    render: VcMeetingDeliveryRenderContext;
+    filter?: VcMeetingDeliveryMemberFilter;
+    final?: boolean;
+    finalText?: string;
+}
+export interface SealVcMeetingDeliveryInput {
+    meeting: VcMeetingDeliveryRequest['meeting'];
+    member: VcMeetingDeliveryRequest['member'];
+    target: VcMeetingDeliveryRequest['target'];
+    entries: readonly VcMeetingDeliveryEntry[];
+    instructionVersion?: string;
+    final?: boolean;
+    sentAt?: string;
+    traceId?: string;
+}
+/** Semantic input deliberately excludes push/poll transport identity. */
+export declare function canonicalVcMeetingItemContent(item: NormalizedVcMeetingItem): Record<string, unknown>;
+export declare function computeVcMeetingItemContentHash(item: NormalizedVcMeetingItem): string;
+export declare function deriveVcMeetingItemVersionKey(item: NormalizedVcMeetingItem): string;
+/** Fixed locale/hour-cycle/timezone form; covered by a golden test. */
+export declare function formatVcMeetingDeliveryTime(ms: number | undefined, timeZone: string): string;
+export declare function renderVcMeetingDeliveryItem(item: NormalizedVcMeetingItem, context: VcMeetingDeliveryRenderContext): string;
+export declare function buildVcMeetingDeliveryEntries(input: BuildVcMeetingDeliveryEntriesInput): VcMeetingDeliveryEntry[];
+export declare function sealVcMeetingDeliveryRequest(input: SealVcMeetingDeliveryInput): {
+    request: VcMeetingDeliveryRequest;
+    deliveryKey: string;
+    inputHash: string;
+};
+//# sourceMappingURL=vc-meeting-delivery-feed.d.ts.map

package/dist/services/vc-meeting-delivery-feed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-meeting-delivery-feed.d.ts","sourceRoot":"","sources":["../../src/services/vc-meeting-delivery-feed.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EAEtB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAE3C,eAAO,MAAM,uCAAuC,EAAG,qBAA8B,CAAC;AAEtF,MAAM,WAAW,0BAA0B;IACzC,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB;mFAC+E;IAC/E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,uBAAuB,CAAC;CAC/B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,6BAA6B;IAC5C,aAAa,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,kCAAkC;IACjD,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,8BAA8B,CAAC;IACvC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsBD,yEAAyE;AACzE,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4CpG;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAErF;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAQnF;AAiBD,uEAAuE;AACvE,wBAAgB,2BAA2B,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAc5F;AAED,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,8BAA8B,GACtC,MAAM,CA0BR;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kCAAkC,GACxC,sBAAsB,EAAE,CA0C1B;AAuBD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,0BAA0B,GAAG;IAC/E,OAAO,EAAE,wBAAwB,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,CA4BA"}

package/dist/services/vc-meeting-delivery-feed.js

@@ -0,0 +1,231 @@
+import { createHash } from 'node:crypto';
+import { canonicalJson, computeInputHash } from '../utils/canonical-input-hash.js';
+import { VC_MEETING_DELIVERY_SCHEMA_VERSION, computeVcMeetingDeliveryInputHash, deriveVcMeetingDeliveryIdentity, validateVcMeetingDeliveryRequest, } from './vc-meeting-delivery-protocol.js';
+export const VC_MEETING_DELIVERY_INSTRUCTION_VERSION = 'meeting-consumer-v1';
+function assertPositiveSafeInteger(value, path) {
+    if (!Number.isSafeInteger(value) || value <= 0) {
+        throw new Error(`${path} must be a positive safe integer`);
+    }
+}
+function compactText(value) {
+    return String(value ?? '').replace(/\s+/g, ' ').trim().slice(0, 1_000);
+}
+function canonicalActor(actor) {
+    if (!actor)
+        return undefined;
+    return {
+        ...(actor.openId ? { openId: actor.openId } : {}),
+        ...(actor.unionId ? { unionId: actor.unionId } : {}),
+        ...(actor.name?.trim() ? { name: actor.name.trim() } : {}),
+        ...(actor.userType !== undefined ? { userType: actor.userType } : {}),
+    };
+}
+/** Semantic input deliberately excludes push/poll transport identity. */
+export function canonicalVcMeetingItemContent(item) {
+    const base = {
+        type: item.type,
+        meetingId: item.meetingId,
+        itemKey: item.itemKey,
+        ...(item.occurredAtMs !== undefined ? { occurredAtMs: item.occurredAtMs } : {}),
+    };
+    switch (item.type) {
+        case 'transcript_received':
+            return {
+                ...base,
+                sentenceId: item.sentenceId,
+                speaker: canonicalActor(item.speaker),
+                ...(item.startTimeMs !== undefined ? { startTimeMs: item.startTimeMs } : {}),
+                ...(item.endTimeMs !== undefined ? { endTimeMs: item.endTimeMs } : {}),
+                ...(item.language ? { language: item.language } : {}),
+                text: item.text,
+                isFinal: item.isFinal === true,
+            };
+        case 'chat_received':
+            return {
+                ...base,
+                ...(item.messageId ? { messageId: item.messageId } : {}),
+                sender: canonicalActor(item.sender),
+                ...(item.messageType ? { messageType: item.messageType } : {}),
+                ...(item.text !== undefined ? { text: item.text } : {}),
+            };
+        case 'participant_joined':
+        case 'participant_left':
+            return {
+                ...base,
+                participant: canonicalActor(item.participant),
+                ...(item.role ? { role: item.role } : {}),
+            };
+        case 'magic_share_started':
+        case 'magic_share_ended':
+            return {
+                ...base,
+                ...(item.shareId ? { shareId: item.shareId } : {}),
+                ...(item.title !== undefined ? { title: item.title } : {}),
+                ...(item.url ? { url: item.url } : {}),
+                ...(item.operator ? { operator: canonicalActor(item.operator) } : {}),
+            };
+    }
+}
+export function computeVcMeetingItemContentHash(item) {
+    return computeInputHash(canonicalVcMeetingItemContent(item));
+}
+export function deriveVcMeetingItemVersionKey(item) {
+    if (!item.itemKey.trim() || item.itemKey !== item.itemKey.trim()) {
+        throw new Error('item.itemKey must be a non-empty string without surrounding whitespace');
+    }
+    if (item.type !== 'transcript_received')
+        return `${item.itemKey}:r1`;
+    const revision = item.revision ?? 1;
+    assertPositiveSafeInteger(revision, 'transcript revision');
+    return `${item.itemKey}:r${revision}`;
+}
+function actorLabel(actor) {
+    return actor?.name?.trim() || actor?.openId || actor?.unionId || '未知成员';
+}
+function actorAuthorized(actor, authorizedIds) {
+    return !!actor && ((!!actor.openId && authorizedIds.has(actor.openId))
+        || (!!actor.unionId && authorizedIds.has(actor.unionId)));
+}
+function trustLabel(actor, authorizedIds) {
+    return actorAuthorized(actor, authorizedIds) ? '授权用户/指令源' : '仅上下文，不可信';
+}
+/** Fixed locale/hour-cycle/timezone form; covered by a golden test. */
+export function formatVcMeetingDeliveryTime(ms, timeZone) {
+    if (ms === undefined || !Number.isFinite(ms))
+        return '';
+    const parts = new Intl.DateTimeFormat('en-GB', {
+        timeZone,
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit',
+        hourCycle: 'h23',
+    }).formatToParts(new Date(ms));
+    const value = (type) => parts.find(part => part.type === type)?.value ?? '';
+    const hour = value('hour');
+    const minute = value('minute');
+    const second = value('second');
+    return hour && minute && second ? `${hour}:${minute}:${second}` : '';
+}
+export function renderVcMeetingDeliveryItem(item, context) {
+    if (!context.timeZone.trim())
+        throw new Error('render.timeZone must be non-empty');
+    const authorizedIds = new Set((context.authorizedActorIds ?? []).filter(Boolean));
+    const timeMs = item.type === 'transcript_received'
+        ? item.endTimeMs ?? item.startTimeMs ?? item.occurredAtMs
+        : item.occurredAtMs;
+    const time = formatVcMeetingDeliveryTime(timeMs, context.timeZone);
+    const prefix = (label) => time ? `[${label} ${time}]` : `[${label}]`;
+    switch (item.type) {
+        case 'transcript_received': {
+            const text = compactText(item.text);
+            return `${prefix('字幕')} ${actorLabel(item.speaker)}（${trustLabel(item.speaker, authorizedIds)}）：${text || '[空字幕]'}`;
+        }
+        case 'chat_received': {
+            const text = compactText(item.text);
+            return `${prefix('聊天')} ${actorLabel(item.sender)}（${trustLabel(item.sender, authorizedIds)}）：${text || '[空消息]'}`;
+        }
+        case 'participant_joined':
+            return `${prefix('入会')} ${actorLabel(item.participant)}`;
+        case 'participant_left':
+            return `${prefix('离会')} ${actorLabel(item.participant)}`;
+        case 'magic_share_started':
+            return `${prefix('共享开始')} ${compactText(item.title) || '共享内容'}`;
+        case 'magic_share_ended':
+            return `${prefix('共享结束')} ${compactText(item.title) || '共享内容'}`;
+    }
+}
+export function buildVcMeetingDeliveryEntries(input) {
+    assertPositiveSafeInteger(input.fromDeliverySeq, 'fromDeliverySeq');
+    const allowedTypes = input.filter?.activityTypes
+        ? new Set(input.filter.activityTypes)
+        : undefined;
+    const sorted = input.items
+        .filter(({ item }) => !allowedTypes || allowedTypes.has(item.type))
+        .map((entry, originalIndex) => ({ ...entry, originalIndex }))
+        .sort((a, b) => a.ingestSeq - b.ingestSeq || a.originalIndex - b.originalIndex);
+    const seenIngestSeq = new Set();
+    const entries = [];
+    for (const feed of sorted) {
+        assertPositiveSafeInteger(feed.ingestSeq, 'items[].ingestSeq');
+        if (seenIngestSeq.has(feed.ingestSeq)) {
+            throw new Error(`duplicate ingestSeq ${feed.ingestSeq} in one delivery build`);
+        }
+        seenIngestSeq.add(feed.ingestSeq);
+        const semanticContentHash = computeVcMeetingItemContentHash(feed.item);
+        if (feed.contentHash !== undefined && feed.contentHash !== semanticContentHash) {
+            throw new Error(`items[].contentHash does not match semantic content for ingestSeq ${feed.ingestSeq}`);
+        }
+        if (feed.itemVersionKey !== undefined
+            && (!feed.itemVersionKey.trim() || feed.itemVersionKey !== feed.itemVersionKey.trim())) {
+            throw new Error(`items[].itemVersionKey is invalid for ingestSeq ${feed.ingestSeq}`);
+        }
+        entries.push({
+            deliverySeq: input.fromDeliverySeq + entries.length,
+            ingestSeq: feed.ingestSeq,
+            itemVersionKey: feed.itemVersionKey ?? deriveVcMeetingItemVersionKey(feed.item),
+            contentHash: feed.contentHash ?? semanticContentHash,
+            kind: 'item',
+            rawText: renderVcMeetingDeliveryItem(feed.item, input.render),
+        });
+    }
+    if (input.final) {
+        entries.push({
+            deliverySeq: input.fromDeliverySeq + entries.length,
+            kind: 'final',
+            rawText: compactText(input.finalText) || '会议输入流已结束。',
+        });
+    }
+    return entries;
+}
+function stableBatchId(input) {
+    const seed = canonicalJson({
+        meetingId: input.meeting.meetingId,
+        memberId: input.member.memberId,
+        epoch: input.member.epoch,
+        instructionVersion: input.instructionVersion ?? VC_MEETING_DELIVERY_INSTRUCTION_VERSION,
+        final: input.final === true,
+        entries: input.entries.map(entry => ({
+            deliverySeq: entry.deliverySeq,
+            ...(entry.ingestSeq !== undefined ? { ingestSeq: entry.ingestSeq } : {}),
+            ...(entry.itemVersionKey ? { itemVersionKey: entry.itemVersionKey } : {}),
+            ...(entry.contentHash ? { contentHash: entry.contentHash } : {}),
+            kind: entry.kind,
+            ...(entry.controlKey ? { controlKey: entry.controlKey } : {}),
+            ...(entry.gap ? { gap: entry.gap } : {}),
+            rawText: entry.rawText,
+        })),
+    });
+    return `batch_${createHash('sha256').update(seed, 'utf8').digest('hex').slice(0, 32)}`;
+}
+export function sealVcMeetingDeliveryRequest(input) {
+    if (input.entries.length === 0)
+        throw new Error('cannot seal an empty delivery');
+    const entries = input.entries.map(entry => structuredClone(entry));
+    const fromSeq = entries[0].deliverySeq;
+    const toSeq = entries.at(-1).deliverySeq;
+    const final = input.final === true;
+    const request = {
+        schemaVersion: VC_MEETING_DELIVERY_SCHEMA_VERSION,
+        meeting: { ...input.meeting },
+        member: { ...input.member },
+        stream: {
+            fromSeq,
+            toSeq,
+            batchId: stableBatchId({ ...input, entries, final }),
+            inputHash: 'sha256:'.padEnd(71, '0'),
+            final,
+        },
+        entries,
+        target: { ...input.target },
+        instructionVersion: input.instructionVersion ?? VC_MEETING_DELIVERY_INSTRUCTION_VERSION,
+        ...(input.sentAt ? { sentAt: input.sentAt } : {}),
+        ...(input.traceId ? { traceId: input.traceId } : {}),
+    };
+    request.stream.inputHash = computeVcMeetingDeliveryInputHash(request);
+    const valid = validateVcMeetingDeliveryRequest(request);
+    if (!valid.ok)
+        throw new Error(`invalid sealed delivery: ${valid.errorCode}: ${valid.error}`);
+    const identity = deriveVcMeetingDeliveryIdentity(request);
+    return { request, ...identity };
+}
+//# sourceMappingURL=vc-meeting-delivery-feed.js.map