botmux 2.44.0 → 2.46.0

package/dist/services/bot-owner-store.d.ts

@@ -0,0 +1,28 @@
+export interface BotOwner {
+    unionId?: string;
+    openId?: string;
+    name?: string;
+    assignedAt: number;
+    assignedBy: 'auto' | 'manual';
+}
+type FileShape = Record<string, BotOwner>;
+/** Current owner of a bot, or null. */
+export declare function getBotOwner(dataDir: string, larkAppId: string): BotOwner | null;
+/**
+ * Assign a bot's owner. By default does NOT overwrite an existing owner (auto
+ * assignment on pairing). Pass `override: true` for an explicit claim. Returns
+ * true if it wrote.
+ */
+export declare function setBotOwner(dataDir: string, larkAppId: string, owner: {
+    unionId?: string;
+    openId?: string;
+    name?: string;
+}, opts?: {
+    override?: boolean;
+}, now?: number): boolean;
+/** Remove a bot's owner. Returns true if one existed. */
+export declare function clearBotOwner(dataDir: string, larkAppId: string): boolean;
+/** All owners, keyed by larkAppId. */
+export declare function listBotOwners(dataDir: string): FileShape;
+export {};
+//# sourceMappingURL=bot-owner-store.d.ts.map

package/dist/services/bot-owner-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-owner-store.d.ts","sourceRoot":"","sources":["../../src/services/bot-owner-store.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,QAAQ,CAAC;CAC/B;AAED,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AA0B1C,uCAAuC;AACvC,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAG/E;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC3D,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,EACjC,GAAG,GAAE,MAAmB,GACvB,OAAO,CAaT;AAED,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAMzE;AAED,sCAAsC;AACtC,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAExD"}

package/dist/services/bot-owner-store.js

@@ -0,0 +1,82 @@
+/**
+ * Bot ownership store: which team member "owns" each bot, used to group the
+ * team roster by person (so multi-person teams stay organized).
+ *
+ * Ownership is mostly automatic: when a member logs in via pairing through a
+ * given bot, that bot is assigned to them IF it has no owner yet (we never
+ * silently steal an existing owner — see setBotOwner override). A member can
+ * also explicitly claim bots ("归到我名下", override=true).
+ *
+ * Identity: union_id is the canonical owner key (stable across apps); openId
+ * and name are kept for display/fallback only.
+ *
+ * Storage: `{dataDir}/bot-owners.json`, atomic writes.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+function filePath(dataDir) { return join(dataDir, 'bot-owners.json'); }
+function readFile(dataDir) {
+    const fp = filePath(dataDir);
+    if (!existsSync(fp))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt */ }
+    return {};
+}
+function writeFileAtomic(dataDir, data) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+function hasIdentity(o) {
+    return !!(o.unionId || o.openId);
+}
+/** Current owner of a bot, or null. */
+export function getBotOwner(dataDir, larkAppId) {
+    if (!larkAppId)
+        return null;
+    return readFile(dataDir)[larkAppId] ?? null;
+}
+/**
+ * Assign a bot's owner. By default does NOT overwrite an existing owner (auto
+ * assignment on pairing). Pass `override: true` for an explicit claim. Returns
+ * true if it wrote.
+ */
+export function setBotOwner(dataDir, larkAppId, owner, opts = {}, now = Date.now()) {
+    if (!larkAppId || !hasIdentity(owner))
+        return false;
+    const data = readFile(dataDir);
+    if (data[larkAppId] && !opts.override)
+        return false; // don't steal an existing owner
+    data[larkAppId] = {
+        ...(owner.unionId ? { unionId: owner.unionId } : {}),
+        ...(owner.openId ? { openId: owner.openId } : {}),
+        ...(owner.name ? { name: owner.name } : {}),
+        assignedAt: now,
+        assignedBy: opts.override ? 'manual' : 'auto',
+    };
+    writeFileAtomic(dataDir, data);
+    return true;
+}
+/** Remove a bot's owner. Returns true if one existed. */
+export function clearBotOwner(dataDir, larkAppId) {
+    const data = readFile(dataDir);
+    if (!data[larkAppId])
+        return false;
+    delete data[larkAppId];
+    writeFileAtomic(dataDir, data);
+    return true;
+}
+/** All owners, keyed by larkAppId. */
+export function listBotOwners(dataDir) {
+    return readFile(dataDir);
+}
+//# sourceMappingURL=bot-owner-store.js.map

package/dist/services/bot-owner-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-owner-store.js","sourceRoot":"","sources":["../../src/services/bot-owner-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAYzC,SAAS,QAAQ,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAEvF,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,CAAwC;IAC3D,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,SAAiB;IAC5D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,SAAiB,EACjB,KAA2D,EAC3D,OAA+B,EAAE,EACjC,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;IACrF,IAAI,CAAC,SAAS,CAAC,GAAG;QAChB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;KAC9C,CAAC;IACF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}

package/dist/services/bot-profile-store.d.ts

@@ -0,0 +1,16 @@
+export interface BotProfile {
+    capability?: string;
+    updatedAt: number;
+    updatedBy?: string;
+}
+/** Full profile for a bot, or null if none recorded. */
+export declare function getBotProfile(dataDir: string, larkAppId: string): BotProfile | null;
+/** Just the capability label for a bot, or null. */
+export declare function getBotCapability(dataDir: string, larkAppId: string): string | null;
+/** Set (or overwrite) a bot's capability label. Trimmed and length-capped. */
+export declare function setBotCapability(dataDir: string, larkAppId: string, capability: string, updatedBy?: string, now?: number): void;
+/** Remove a bot's capability label (deletes its profile file). Returns true if one existed. */
+export declare function clearBotCapability(dataDir: string, larkAppId: string): boolean;
+/** All recorded profiles, keyed by larkAppId. */
+export declare function listBotProfiles(dataDir: string): Record<string, BotProfile>;
+//# sourceMappingURL=bot-profile-store.d.ts.map

package/dist/services/bot-profile-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-profile-store.d.ts","sourceRoot":"","sources":["../../src/services/bot-profile-store.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA6BD,wDAAwD;AACxD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAGnF;AAED,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAElF;AAED,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAI3I;AAED,+FAA+F;AAC/F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAK9E;AAED,iDAAiD;AACjD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAY3E"}

package/dist/services/bot-profile-store.js

@@ -0,0 +1,98 @@
+/**
+ * Team-level bot profile store: a short, human-facing **capability label** per
+ * bot (keyed by larkAppId), separate from the full team role markdown.
+ *
+ * Why separate from the team role (see role-resolver.ts):
+ * - The capability label is a one-liner used in the collaboration roster
+ *   (`botmux bots list`) for discovery/selection — "后端 bot，擅长服务端排查".
+ * - The full team role is the persona injected into the CLI `<role>` block.
+ * Keeping them apart lets the roster stay scannable while the role stays rich.
+ *
+ * Storage: **one file per bot** at `{dataDir}/bot-profiles/{larkAppId}.json`.
+ * Per-bot files (not one shared map) matter because production is one daemon
+ * per bot: a shared read-modify-write map would lose updates when two daemons
+ * write different bots' capabilities concurrently. Each daemon owns its bot's
+ * file, so there is no cross-bot lost-update window. Same rationale as the
+ * per-bot team-role files in role-resolver.ts.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, unlinkSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+/** A capability label longer than this is almost certainly a full role, not a tag. */
+const MAX_CAPABILITY_CHARS = 120;
+function profilesDir(dataDir) {
+    return join(dataDir, 'bot-profiles');
+}
+function profilePath(dataDir, larkAppId) {
+    return join(profilesDir(dataDir), `${larkAppId}.json`);
+}
+function readProfile(dataDir, larkAppId) {
+    const fp = profilePath(dataDir, larkAppId);
+    if (!existsSync(fp))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt — treat as absent */ }
+    return null;
+}
+function writeProfileAtomic(dataDir, larkAppId, profile) {
+    const dir = profilesDir(dataDir);
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    const fp = profilePath(dataDir, larkAppId);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(profile, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Full profile for a bot, or null if none recorded. */
+export function getBotProfile(dataDir, larkAppId) {
+    if (!larkAppId)
+        return null;
+    return readProfile(dataDir, larkAppId);
+}
+/** Just the capability label for a bot, or null. */
+export function getBotCapability(dataDir, larkAppId) {
+    return getBotProfile(dataDir, larkAppId)?.capability ?? null;
+}
+/** Set (or overwrite) a bot's capability label. Trimmed and length-capped. */
+export function setBotCapability(dataDir, larkAppId, capability, updatedBy, now = Date.now()) {
+    if (!larkAppId)
+        return;
+    const label = capability.trim().slice(0, MAX_CAPABILITY_CHARS);
+    writeProfileAtomic(dataDir, larkAppId, { capability: label, updatedAt: now, ...(updatedBy ? { updatedBy } : {}) });
+}
+/** Remove a bot's capability label (deletes its profile file). Returns true if one existed. */
+export function clearBotCapability(dataDir, larkAppId) {
+    const fp = profilePath(dataDir, larkAppId);
+    const had = readProfile(dataDir, larkAppId)?.capability !== undefined;
+    try {
+        unlinkSync(fp);
+    }
+    catch { /* already gone */ }
+    return had;
+}
+/** All recorded profiles, keyed by larkAppId. */
+export function listBotProfiles(dataDir) {
+    const dir = profilesDir(dataDir);
+    const out = {};
+    let files;
+    try {
+        files = readdirSync(dir);
+    }
+    catch {
+        return out;
+    }
+    for (const f of files) {
+        if (!f.endsWith('.json'))
+            continue;
+        const larkAppId = f.slice(0, -'.json'.length);
+        const p = readProfile(dataDir, larkAppId);
+        if (p)
+            out[larkAppId] = p;
+    }
+    return out;
+}
+//# sourceMappingURL=bot-profile-store.js.map

package/dist/services/bot-profile-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bot-profile-store.js","sourceRoot":"","sources":["../../src/services/bot-profile-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,sFAAsF;AACtF,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAQjC,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,SAAiB;IACrD,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,SAAiB;IACrD,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAoB,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe,EAAE,SAAiB,EAAE,OAAmB;IACjF,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,SAAiB;IAC9D,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB;IACjE,OAAO,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,UAAU,IAAI,IAAI,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,UAAkB,EAAE,SAAkB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnI,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC/D,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,SAAiB;IACnE,MAAM,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC;IACtE,IAAI,CAAC;QAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,GAAG,GAA+B,EAAE,CAAC;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/services/connector-store.d.ts

@@ -0,0 +1,58 @@
+export type ConnectorVerifyType = 'hmac-sha256';
+export type ConnectorTargetMode = 'dynamic' | 'fixed' | 'new-group';
+export type ConnectorTargetKind = 'turn' | 'workflow';
+export interface ConnectorDefinition {
+    id: string;
+    name: string;
+    enabled: boolean;
+    verify: {
+        type: ConnectorVerifyType;
+        secretRef: string;
+        signatureHeader: string;
+        timestampHeader: string;
+        nonceHeader: string;
+        toleranceSeconds: number;
+    };
+    target: {
+        mode: ConnectorTargetMode;
+        kind: ConnectorTargetKind;
+        botId: string;
+        botIds?: string[];
+        chatId?: string;
+        allowChats?: string[];
+        workflowId?: string;
+    };
+    promptEnvelope: {
+        sourceName: string;
+        headerAllowlist: string[];
+        includeRawText: boolean;
+        maxBodyBytes: number;
+    };
+    loggingPolicy: {
+        storePayload: boolean;
+        storeHeaders: boolean;
+        retentionDays: number;
+    };
+    lifecycleExtractors: null | {
+        dedupKey: string;
+        status: string;
+        statusMap?: Record<string, string>;
+    };
+    rateLimit?: {
+        windowSeconds: number;
+        maxRequests: number;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ConnectorStoreFile {
+    version: 1;
+    connectors: ConnectorDefinition[];
+}
+export declare function readConnectorStore(dataDir?: string): ConnectorStoreFile;
+export declare function listConnectors(dataDir?: string): ConnectorDefinition[];
+export declare function getConnector(id: string, dataDir?: string): ConnectorDefinition | null;
+export declare function upsertConnector(connector: ConnectorDefinition, dataDir?: string): ConnectorDefinition;
+export declare function deleteConnector(id: string, dataDir?: string): boolean;
+export declare function newConnectorId(): string;
+//# sourceMappingURL=connector-store.d.ts.map

package/dist/services/connector-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-store.d.ts","sourceRoot":"","sources":["../../src/services/connector-store.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAChD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,UAAU,CAAC;AAEtD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IAGjB,MAAM,EAAE;QACN,IAAI,EAAE,mBAAmB,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,MAAM,EAAE;QACN,IAAI,EAAE,mBAAmB,CAAC;QAC1B,IAAI,EAAE,mBAAmB,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,cAAc,EAAE;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,aAAa,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,mBAAmB,EAAE,IAAI,GAAG;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACpC,CAAC;IACF,SAAS,CAAC,EAAE;QACV,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAqBD,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,MAA+B,GAAG,kBAAkB,CAQ/F;AAUD,wBAAgB,cAAc,CAAC,OAAO,GAAE,MAA+B,GAAG,mBAAmB,EAAE,CAE9F;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,MAA+B,GAAG,mBAAmB,GAAG,IAAI,CAG7G;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,MAA+B,GACvC,mBAAmB,CAerB;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,MAA+B,GAAG,OAAO,CAO7F;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/services/connector-store.js

@@ -0,0 +1,79 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { config } from '../config.js';
+function storePath(dataDir = config.session.dataDir) {
+    return join(dataDir, 'connectors.json');
+}
+function emptyStore() {
+    return { version: 1, connectors: [] };
+}
+function normalizeStore(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return emptyStore();
+    const r = raw;
+    return {
+        version: 1,
+        connectors: Array.isArray(r.connectors)
+            ? r.connectors.filter((c) => !!c && typeof c === 'object' && typeof c.id === 'string')
+            : [],
+    };
+}
+export function readConnectorStore(dataDir = config.session.dataDir) {
+    const fp = storePath(dataDir);
+    if (!existsSync(fp))
+        return emptyStore();
+    try {
+        return normalizeStore(JSON.parse(readFileSync(fp, 'utf-8')));
+    }
+    catch {
+        return emptyStore();
+    }
+}
+function writeConnectorStore(dataDir, store) {
+    const fp = storePath(dataDir);
+    mkdirSync(dirname(fp), { recursive: true });
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(normalizeStore(store), null, 2) + '\n', { encoding: 'utf-8', mode: 0o600 });
+    renameSync(tmp, fp);
+}
+export function listConnectors(dataDir = config.session.dataDir) {
+    return readConnectorStore(dataDir).connectors;
+}
+export function getConnector(id, dataDir = config.session.dataDir) {
+    if (!id)
+        return null;
+    return listConnectors(dataDir).find(c => c.id === id) ?? null;
+}
+export function upsertConnector(connector, dataDir = config.session.dataDir) {
+    if (!connector.id)
+        throw new Error('connector id is required');
+    const now = new Date().toISOString();
+    const store = readConnectorStore(dataDir);
+    const idx = store.connectors.findIndex(c => c.id === connector.id);
+    const prior = idx >= 0 ? store.connectors[idx] : undefined;
+    const next = {
+        ...connector,
+        createdAt: connector.createdAt || prior?.createdAt || now,
+        updatedAt: now,
+    };
+    if (idx >= 0)
+        store.connectors[idx] = next;
+    else
+        store.connectors.push(next);
+    writeConnectorStore(dataDir, store);
+    return next;
+}
+export function deleteConnector(id, dataDir = config.session.dataDir) {
+    const store = readConnectorStore(dataDir);
+    const before = store.connectors.length;
+    store.connectors = store.connectors.filter(c => c.id !== id);
+    if (store.connectors.length === before)
+        return false;
+    writeConnectorStore(dataDir, store);
+    return true;
+}
+export function newConnectorId() {
+    return `conn_${randomUUID()}`;
+}
+//# sourceMappingURL=connector-store.js.map

package/dist/services/connector-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-store.js","sourceRoot":"","sources":["../../src/services/connector-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA0DtC,SAAS,SAAS,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACzD,OAAO,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,GAAkC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;YACzH,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACzE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAyB;IACrE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACrE,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAC/E,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,SAA8B,EAC9B,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAExC,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,IAAI,GAAwB;QAChC,GAAG,SAAS;QACZ,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,GAAG;QACzD,SAAS,EAAE,GAAG;KACf,CAAC;IACF,IAAI,GAAG,IAAI,CAAC;QAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;QACtC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAClF,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACvC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAC;AAChC,CAAC"}

package/dist/services/deployment-identity.d.ts

@@ -0,0 +1,22 @@
+export interface DeploymentIdentity {
+    deploymentId: string;
+    name: string;
+    /** The owner's tenant-stable Feishu identity, bound once via /pair. Used as
+     *  the "operator" when this deployment initiates 拉群 (so the operator is
+     *  pulled into the group). Absent until bound. */
+    ownerUnionId?: string;
+    ownerName?: string;
+}
+/** Load (creating + persisting on first call) this deployment's identity. */
+export declare function getDeploymentIdentity(dataDir: string): DeploymentIdentity;
+/** Rename this deployment (owner-facing label). Returns the updated identity. */
+export declare function setDeploymentName(dataDir: string, name: string): DeploymentIdentity;
+/** Bind the owner's Feishu identity (via /pair or auto-bind). Also adopts the
+ *  owner's Feishu name as the DEPLOYMENT name — the deployment is shown to the
+ *  team by its owner's real name (no custom labels), so the roster reads
+ *  naturally ("申晗 的部署" instead of a hostname). Returns the updated identity. */
+export declare function setDeploymentOwner(dataDir: string, owner: {
+    unionId?: string;
+    name?: string;
+}): DeploymentIdentity;
+//# sourceMappingURL=deployment-identity.d.ts.map

package/dist/services/deployment-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-identity.d.ts","sourceRoot":"","sources":["../../src/services/deployment-identity.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb;;sDAEkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAcD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAkBzE;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAKnF;AAED;;;gFAGgF;AAChF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,kBAAkB,CAUlH"}

package/dist/services/deployment-identity.js

@@ -0,0 +1,67 @@
+/**
+ * Deployment identity: a stable id + human-readable name for THIS botmux
+ * deployment (one install = one owner). Used by federation so a hub can tell
+ * member deployments apart and group their bots in the shared roster.
+ *
+ * Generated once and persisted to `{dataDir}/deployment-identity.json`; the name
+ * defaults to the machine hostname and can be renamed by the owner.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { hostname } from 'node:os';
+function filePath(dataDir) {
+    return join(dataDir, 'deployment-identity.json');
+}
+function write(dataDir, id) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(id, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Load (creating + persisting on first call) this deployment's identity. */
+export function getDeploymentIdentity(dataDir) {
+    const fp = filePath(dataDir);
+    if (existsSync(fp)) {
+        try {
+            const p = JSON.parse(readFileSync(fp, 'utf-8'));
+            if (p && typeof p.deploymentId === 'string' && p.deploymentId) {
+                return {
+                    deploymentId: p.deploymentId,
+                    name: typeof p.name === 'string' && p.name ? p.name : 'botmux',
+                    ownerUnionId: typeof p.ownerUnionId === 'string' ? p.ownerUnionId : undefined,
+                    ownerName: typeof p.ownerName === 'string' ? p.ownerName : undefined,
+                };
+            }
+        }
+        catch { /* corrupt — regenerate */ }
+    }
+    const id = { deploymentId: `dep_${randomUUID().slice(0, 12)}`, name: hostname() || 'botmux' };
+    write(dataDir, id);
+    return id;
+}
+/** Rename this deployment (owner-facing label). Returns the updated identity. */
+export function setDeploymentName(dataDir, name) {
+    const cur = getDeploymentIdentity(dataDir);
+    const next = { ...cur, name: name.trim() || cur.name };
+    write(dataDir, next);
+    return next;
+}
+/** Bind the owner's Feishu identity (via /pair or auto-bind). Also adopts the
+ *  owner's Feishu name as the DEPLOYMENT name — the deployment is shown to the
+ *  team by its owner's real name (no custom labels), so the roster reads
+ *  naturally ("申晗 的部署" instead of a hostname). Returns the updated identity. */
+export function setDeploymentOwner(dataDir, owner) {
+    const cur = getDeploymentIdentity(dataDir);
+    const next = {
+        ...cur,
+        ownerUnionId: owner.unionId || cur.ownerUnionId,
+        ownerName: owner.name || cur.ownerName,
+        name: owner.name || cur.name, // default the deployment label to the owner's Feishu name
+    };
+    write(dataDir, next);
+    return next;
+}
+//# sourceMappingURL=deployment-identity.js.map

package/dist/services/deployment-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-identity.js","sourceRoot":"","sources":["../../src/services/deployment-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAYnC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,KAAK,CAAC,OAAe,EAAE,EAAsB;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBAC9D,OAAO;oBACL,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAC9D,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;oBAC7E,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,EAAE,GAAuB,EAAE,YAAY,EAAE,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;IAClH,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAuB,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3E,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;gFAGgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAA0C;IAC5F,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAuB;QAC/B,GAAG,GAAG;QACN,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY;QAC/C,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,0DAA0D;KACzF,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/federation-membership-store.d.ts

@@ -0,0 +1,23 @@
+export interface RemoteMembership {
+    hubUrl: string;
+    teamId: string;
+    teamName: string;
+    syncToken: string;
+    deploymentId: string;
+    joinedAt: number;
+    /** Token THIS spoke issued to the hub at join; the hub presents it on
+     *  delegate-group calls so we can verify the request came from a hub we joined. */
+    delegationToken?: string;
+}
+/** Record (or replace) a remote-team membership. */
+export declare function addMembership(dataDir: string, m: Omit<RemoteMembership, 'joinedAt'> & {
+    joinedAt?: number;
+}, now?: number): RemoteMembership;
+/** All remote teams this deployment has joined. */
+export declare function listMemberships(dataDir: string): RemoteMembership[];
+/** Find the membership whose delegationToken matches (verifies an incoming
+ *  hub→spoke delegate call came from a hub this deployment actually joined). */
+export declare function findMembershipByDelegationToken(dataDir: string, token: string): RemoteMembership | null;
+/** Remove one membership. Returns true if removed. */
+export declare function removeMembership(dataDir: string, hubUrl: string, teamId: string): boolean;
+//# sourceMappingURL=federation-membership-store.d.ts.map

package/dist/services/federation-membership-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-membership-store.d.ts","sourceRoot":"","sources":["../../src/services/federation-membership-store.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB;uFACmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA8BD,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,gBAAgB,CAMxJ;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEnE;AAED;gFACgF;AAChF,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGvG;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOzF"}

package/dist/services/federation-membership-store.js

@@ -0,0 +1,66 @@
+/**
+ * Federation membership store (SPOKE side): which remote teams THIS deployment
+ * has joined, and the syncToken/hub needed to push bots + pull the shared roster.
+ *
+ * Storage: `{dataDir}/federation-memberships.json`, atomic writes. Keyed by
+ * `${hubUrl}::${teamId}` so a deployment can join multiple teams / hubs.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+function filePath(dataDir) {
+    return join(dataDir, 'federation-memberships.json');
+}
+function keyOf(hubUrl, teamId) {
+    return `${hubUrl}::${teamId}`;
+}
+function readFile(dataDir) {
+    const fp = filePath(dataDir);
+    if (!existsSync(fp))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt */ }
+    return {};
+}
+function writeFileAtomic(dataDir, data) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Record (or replace) a remote-team membership. */
+export function addMembership(dataDir, m, now = Date.now()) {
+    const data = readFile(dataDir);
+    const full = { ...m, joinedAt: m.joinedAt ?? now };
+    data[keyOf(m.hubUrl, m.teamId)] = full;
+    writeFileAtomic(dataDir, data);
+    return full;
+}
+/** All remote teams this deployment has joined. */
+export function listMemberships(dataDir) {
+    return Object.values(readFile(dataDir));
+}
+/** Find the membership whose delegationToken matches (verifies an incoming
+ *  hub→spoke delegate call came from a hub this deployment actually joined). */
+export function findMembershipByDelegationToken(dataDir, token) {
+    if (!token)
+        return null;
+    return Object.values(readFile(dataDir)).find(m => m.delegationToken === token) ?? null;
+}
+/** Remove one membership. Returns true if removed. */
+export function removeMembership(dataDir, hubUrl, teamId) {
+    const data = readFile(dataDir);
+    const key = keyOf(hubUrl, teamId);
+    if (!data[key])
+        return false;
+    delete data[key];
+    writeFileAtomic(dataDir, data);
+    return true;
+}
+//# sourceMappingURL=federation-membership-store.js.map

package/dist/services/federation-membership-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-membership-store.js","sourceRoot":"","sources":["../../src/services/federation-membership-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBzC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,MAAc;IAC3C,OAAO,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,CAA6D,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpI,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAqB,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,+BAA+B,CAAC,OAAe,EAAE,KAAa;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AACzF,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc,EAAE,MAAc;IAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}