botmux 2.26.0 → 2.27.1

package/dist/setup/verify-permissions.js

@@ -0,0 +1,207 @@
+/**
+ * 凭证 + 权限自检. 不阻塞 setup / daemon 启动, 任意失败都降级到"打印剩余步骤".
+ *
+ * 主路径只用:
+ * - {@link validateCredentials} —— 取一次 `tenant_access_token`, 通过才认为
+ *   AppID/Secret 有效. 没拿到才会让 setup 失败 (拒绝写 bots.json).
+ *
+ * 仅作为可选 helper, **未启用于 setup / start 主链路**:
+ * - {@link checkRequiredScopes} —— 调 `application.v6.scope.list` 比对 botmux
+ *   需要的 scope. 待 spike 用真实/可复现 mock 证明 grant_status 闭环后再启用.
+ * - {@link applyScopesUnverified} —— 调 `application.v6.scope.apply` 触发管理
+ *   员审批. Lark 文档表明它只能提交"已声明但未授权"的 scope, 不能给 manifest
+ *   加新 scope, 所以无法绕开"用户去开放平台勾"这步; 同样待 spike 后启用.
+ *
+ * 安全约束:
+ * - Secret 永远不进 console / 日志 / 错误链
+ * - 网络/接口错误一律返回结构化结果, 不抛
+ */
+import * as Lark from '@larksuiteoapi/node-sdk';
+/**
+ * botmux 运行所需的 scope. 这里**只用于检测/提示**, 不用于自动申请——飞书
+ * `scope.apply` 只能提交"已声明但未授权"的, 没法给应用 manifest 加新声明.
+ * scope 选择必须用户去开放平台勾.
+ */
+export const BOTMUX_REQUIRED_SCOPES = [
+    { name: 'im:message', desc: '收发消息', critical: true },
+    { name: 'im:message.group_at_msg', desc: '群消息接收', critical: true },
+    { name: 'im:resource', desc: '消息附件下载', critical: true },
+    { name: 'im:chat', desc: '群信息读取', critical: true },
+    { name: 'contact:user.base:readonly', desc: '用户基本信息', critical: true },
+    { name: 'im:message.group_at_msg.include_bot:readonly', desc: '跨 bot @ 事件', critical: false },
+    { name: 'application:application:self_manage', desc: '应用自查 (免审批)', critical: false },
+];
+export function buildScopeDeepLink(appId, scopeName, brand = 'feishu') {
+    const host = brand === 'lark' ? 'open.larksuite.com' : 'open.feishu.cn';
+    return `https://${host}/app/${appId}/auth?q=${encodeURIComponent(scopeName)}&op_from=openapi&token_type=tenant`;
+}
+export function buildEventSubDeepLink(appId, brand = 'feishu') {
+    const host = brand === 'lark' ? 'open.larksuite.com' : 'open.feishu.cn';
+    return `https://${host}/app/${appId}/dev-config/event-sub`;
+}
+export function buildAppHomeDeepLink(appId, brand = 'feishu') {
+    const host = brand === 'lark' ? 'open.larksuite.com' : 'open.feishu.cn';
+    return `https://${host}/app/${appId}`;
+}
+/**
+ * 用 AppID/Secret 取一次 tenant_access_token, 验证凭证可用.
+ *
+ * Secret 不进 error.message: 错误信息只来自飞书返回的 msg 字段或 axios 错误类型.
+ *
+ * Codex review #3: 加 AbortController + 总超时. 网络半挂时 `botmux setup` /
+ * `botmux start` 不能无限卡住; 超时归类为 network, 这样 setup 走"凭证校验失败
+ * 不写盘" 路径, start 走"network 只 WARN 继续"路径.
+ */
+export async function validateCredentials(appId, appSecret, brand = 'feishu', opts = {}) {
+    const budgetMs = opts.budgetMs ?? 10_000;
+    const host = brand === 'lark' ? 'open.larksuite.com' : 'open.feishu.cn';
+    const url = `https://${host}/open-apis/auth/v3/tenant_access_token/internal`;
+    // 自家 AbortController 控制总超时; 同时把上层传进来的 signal 也接上.
+    const ac = new AbortController();
+    const timer = setTimeout(() => ac.abort(), budgetMs);
+    if (opts.signal) {
+        if (opts.signal.aborted)
+            ac.abort();
+        else
+            opts.signal.addEventListener('abort', () => ac.abort(), { once: true });
+    }
+    // Codex review v2 follow-up: timer 必须覆盖 res.json() 阶段, 否则飞书极端半挂
+    // (body 半 chunk 后服务端不再发) 仍会卡住. clearTimeout 推迟到 JSON 解析之后.
+    let res;
+    let body;
+    try {
+        res = await fetch(url, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            // 注意: 这是飞书唯一接受 appSecret 的端点; 其它端点全部用 token. 不要把
+            // secret 拼到 query string 或日志里.
+            body: JSON.stringify({ app_id: appId, app_secret: appSecret }),
+            signal: ac.signal,
+        });
+        body = await res.json();
+    }
+    catch (err) {
+        clearTimeout(timer);
+        // AbortError (fetch / json() 内部 / 我们自己 timeout) 全部归到 network
+        const isAbort = err?.name === 'AbortError' || ac.signal.aborted;
+        // JSON 解析错 (非 abort) 归 unknown, 保留旧行为
+        if (!isAbort && err instanceof SyntaxError) {
+            return { ok: false, error: 'unknown', message: `HTTP ${res?.status ?? '?'} 响应非 JSON` };
+        }
+        return {
+            ok: false,
+            error: 'network',
+            message: isAbort
+                ? `请求超时 (> ${budgetMs}ms)`
+                : `网络错误: ${err?.code ?? err?.message ?? 'unknown'}`,
+        };
+    }
+    clearTimeout(timer);
+    if (body?.code === 0 && typeof body.tenant_access_token === 'string') {
+        return { ok: true, tenantAccessToken: body.tenant_access_token, tokenExpiresIn: body.expire ?? 7200 };
+    }
+    // 飞书常见错误码:
+    // 10003 / 10012: app_id or app_secret invalid
+    // 10014: 应用未发布
+    // 99991663: app_secret invalid
+    if (body?.code === 10003 || body?.code === 10012 || body?.code === 99991663) {
+        return { ok: false, error: 'invalid_credentials', message: `凭证无效 (code=${body.code}): ${body.msg ?? ''}` };
+    }
+    return { ok: false, error: 'unknown', message: `code=${body?.code ?? '?'} msg=${body?.msg ?? ''}` };
+}
+/**
+ * 列出应用的 scope grant 状态, 比对 BOTMUX_REQUIRED_SCOPES.
+ *
+ * **不在主路径使用** — 待 spike 用真实/可复现 mock 证明 grant_status 含义和
+ * 状态闭环后再启用. 当前主路径只输出"剩余步骤 + 深链", 不做 grant_status 判定.
+ *
+ * scope.list 返回 shape (SDK type):
+ *   `{ data: { scopes: [{ scope_name, grant_status, scope_type }] } }`
+ * grant_status 含义未在官方文档明确, 但社区 SDK / 实测一般约定:
+ *   1 = 已申请未生效, 2 = 已生效. 启用前 spike 务必确认这个映射.
+ */
+export async function checkRequiredScopes(appId, appSecret, brand = 'feishu') {
+    const domain = brand === 'lark' ? Lark.Domain.Lark : Lark.Domain.Feishu;
+    const client = new Lark.Client({ appId, appSecret, domain, loggerLevel: Lark.LoggerLevel.error });
+    let resp;
+    try {
+        resp = await client.application.scope.list();
+    }
+    catch (err) {
+        return { ok: false, error: 'network', message: `scope.list 调用失败: ${err?.code ?? err?.message ?? 'unknown'}` };
+    }
+    // SDK 失败时不抛, 返回 { code, msg }
+    if (resp?.code === 99991672) {
+        return {
+            ok: false,
+            error: 'need_self_manage',
+            message: '应用缺少 application:application:self_manage 权限, 无法自查 scope 列表',
+        };
+    }
+    if (resp?.code !== 0) {
+        return { ok: false, error: 'unknown', message: `code=${resp?.code ?? '?'} msg=${resp?.msg ?? ''}` };
+    }
+    const scopes = resp?.data?.scopes ?? [];
+    // grant_status === 2 → granted (待 spike 确认这是正确映射)
+    const grantedNames = scopes
+        .filter((s) => s?.grant_status === 2 && typeof s?.scope_name === 'string')
+        .map((s) => s.scope_name);
+    const missingCritical = BOTMUX_REQUIRED_SCOPES.filter(s => s.critical && !grantedNames.includes(s.name));
+    const missingOptional = BOTMUX_REQUIRED_SCOPES.filter(s => !s.critical && !grantedNames.includes(s.name));
+    return { ok: true, granted: grantedNames, missingCritical, missingOptional };
+}
+export async function applyScopesUnverified(appId, appSecret, opts = {}) {
+    const brand = opts.brand ?? 'feishu';
+    const budgetMs = opts.budgetMs ?? 15_000;
+    const domain = brand === 'lark' ? Lark.Domain.Lark : Lark.Domain.Feishu;
+    const client = new Lark.Client({ appId, appSecret, domain, loggerLevel: Lark.LoggerLevel.error });
+    const timeout = new Promise((resolve) => {
+        const timer = setTimeout(() => resolve({ status: 'timeout', msg: `> ${budgetMs}ms` }), budgetMs);
+        opts.signal?.addEventListener('abort', () => {
+            clearTimeout(timer);
+            resolve({ status: 'timeout', msg: 'aborted' });
+        }, { once: true });
+    });
+    const call = (async () => {
+        try {
+            const resp = await client.application.scope.apply();
+            const code = resp?.code;
+            const msg = resp?.msg;
+            if (code === 0)
+                return { status: 'submitted', code, msg };
+            if (code === 212001)
+                return { status: 'super_scope_only', code, msg };
+            if (code === 212002)
+                return { status: 'nothing_to_apply', code, msg };
+            if (code === 212003)
+                return { status: 'over_limit', code, msg };
+            if (code === 212004)
+                return { status: 'already_applied', code, msg };
+            return { status: 'error', code, msg };
+        }
+        catch (err) {
+            return { status: 'error', msg: err?.code ?? err?.message ?? 'unknown' };
+        }
+    })();
+    return Promise.race([call, timeout]);
+}
+// ─── Remaining-steps printer ──────────────────────────────────────────────
+/**
+ * setup 后 "还要手动点的步骤" 结构化数据. 跟 cli.ts 的 printRemainingSteps + README
+ * "5 分钟快速接入" 一致: 主线就两步 (权限申请 + 按需重定向 URL); PersonalAgent
+ * 应用默认订阅事件 + bot 能力, 不在主线提示, 收不到消息时见 README 的 fallback
+ * 自查清单.
+ */
+export function buildRemainingSteps(appId, brand = 'feishu') {
+    return [
+        {
+            title: '申请权限 (一次性导入完整 JSON 提交审批) — 进入「权限管理」→「批量导入/导出权限」, 粘贴 ~/.botmux/lark-scopes.json',
+            url: `${buildAppHomeDeepLink(appId, brand)}/auth`,
+        },
+        {
+            title: '添加重定向 URL http://127.0.0.1:9768/callback (按需, 用于 botmux 内 /login 跨用户调 API)',
+            url: `${buildAppHomeDeepLink(appId, brand)}/safe`,
+        },
+    ];
+}
+//# sourceMappingURL=verify-permissions.js.map

package/dist/setup/verify-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-permissions.js","sourceRoot":"","sources":["../../src/setup/verify-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,IAAI,MAAM,yBAAyB,CAAC;AAgBhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;IACpD,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAClE,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAClD,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtE,EAAE,IAAI,EAAE,8CAA8C,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE;IAC7F,EAAE,IAAI,EAAE,qCAAqC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE;CACrF,CAAC;AAQF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,SAAiB,EAAE,QAAe,QAAQ;IAC1F,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxE,OAAO,WAAW,IAAI,QAAQ,KAAK,WAAW,kBAAkB,CAAC,SAAS,CAAC,oCAAoC,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,QAAe,QAAQ;IAC1E,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxE,OAAO,WAAW,IAAI,QAAQ,KAAK,uBAAuB,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,QAAe,QAAQ;IACzE,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxE,OAAO,WAAW,IAAI,QAAQ,KAAK,EAAE,CAAC;AACxC,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,SAAiB,EACjB,QAAe,QAAQ,EACvB,OAAoD,EAAE;IAEtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gBAAgB,CAAC;IACxE,MAAM,GAAG,GAAG,WAAW,IAAI,iDAAiD,CAAC;IAE7E,kDAAkD;IAClD,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,EAAE,CAAC,KAAK,EAAE,CAAC;;YAC/B,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,gEAAgE;IAChE,2DAA2D;IAC3D,IAAI,GAAa,CAAC;IAClB,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,iDAAiD;YACjD,+BAA+B;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YAC9D,MAAM,EAAE,EAAE,CAAC,MAAM;SAClB,CAAC,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,6DAA6D;QAC7D,MAAM,OAAO,GAAG,GAAG,EAAE,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QAChE,sCAAsC;QACtC,IAAI,CAAC,OAAO,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,GAAI,EAAE,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,WAAW,QAAQ,KAAK;gBAC1B,CAAC,CAAC,SAAS,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,IAAI,SAAS,EAAE;SACtD,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,mBAAmB,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;IACxG,CAAC;IAED,WAAW;IACX,8CAA8C;IAC9C,eAAe;IACf,+BAA+B;IAC/B,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,OAAO,EAAE,cAAc,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC;IAC7G,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,IAAI,IAAI,GAAG,QAAQ,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC;AACtG,CAAC;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAAa,EACb,SAAiB,EACjB,QAAe,QAAQ;IAEvB,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAElG,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,IAAI,SAAS,EAAE,EAAE,CAAC;IAChH,CAAC;IAED,8BAA8B;IAC9B,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,4DAA4D;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,EAAE,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,IAAI,EAAE,IAAI,IAAI,GAAG,QAAQ,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC;IACtG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;IACxC,kDAAkD;IAClD,MAAM,YAAY,GAAa,MAAM;SAClC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,CAAC,IAAI,OAAO,CAAC,EAAE,UAAU,KAAK,QAAQ,CAAC;SAC9E,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzG,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAE1G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AAC/E,CAAC;AAqCD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,SAAiB,EACjB,OAAmE,EAAE;IAErE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;IAElG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACjG,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAC3B,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACjD,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,CAAC,KAAK,IAAgC,EAAE;QACnD,IAAI,CAAC;YACH,MAAM,IAAI,GAAQ,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACzD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,EAAE,GAAG,CAAC;YACtB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAC1D,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtE,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACtE,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YAChE,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;YACrE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,IAAI,GAAG,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa,EAAE,QAAe,QAAQ;IACxE,OAAO;QACL;YACE,KAAK,EACH,gFAAgF;YAClF,GAAG,EAAE,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO;SAClD;QACD;YACE,KAAK,EACH,4EAA4E;YAC9E,GAAG,EAAE,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO;SAClD;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botmux",
-  "version": "2.26.0",
+  "version": "2.27.1",
   "description": "Bridge between IM platforms and AI coding CLIs — one topic, one CLI session with live streaming",
   "type": "module",
   "main": "dist/index-daemon.js",
@@ -15,7 +15,7 @@
     "LICENSE"
   ],
   "scripts": {
-    "build": "tsc && pnpm dashboard:bundle",
+    "build": "tsc && cp src/setup/lark-scopes.json dist/setup/ && pnpm dashboard:bundle",
     "dashboard:bundle": "esbuild src/dashboard/web/app.ts --bundle --outfile=dist/dashboard-web/app.js --platform=browser --format=iife --minify && cp src/dashboard/web/index.html dist/dashboard-web/index.html && cp src/dashboard/web/style.css dist/dashboard-web/style.css",
     "daemon": "tsx src/index-daemon.ts",
     "daemon:start": "node dist/cli.js start",
@@ -32,7 +32,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@larksuiteoapi/node-sdk": "^1.59.0",
+    "@larksuiteoapi/node-sdk": "^1.64.0",
     "@napi-rs/canvas": "^0.1.65",
     "@xterm/addon-unicode11": "^0.9.0",
     "@xterm/headless": "^6.0.0",
@@ -41,6 +41,7 @@
     "markdown-it": "^14.1.1",
     "node-pty": "^1.1.0",
     "pm2": "^6.0.0",
+    "qrcode-terminal": "^0.12.0",
     "ws": "^8.19.0",
     "zod": "^3.23.0"
   },
@@ -49,6 +50,7 @@
     "@playwright/test": "^1.58.2",
     "@types/markdown-it": "^14.1.2",
     "@types/node": "^20.0.0",
+    "@types/qrcode-terminal": "^0.12.2",
     "@types/ws": "^8.18.1",
     "esbuild": "^0.28.0",
     "memfs": "^4.57.1",