botmux 2.44.0 → 2.46.0

package/dist/services/invite-store.js

@@ -0,0 +1,85 @@
+/**
+ * Team invite store: an existing member mints a single-use, short-TTL invite
+ * code; the invitee pairs (pairing-login) and presents the code on consume,
+ * which authorizes joining the team (team-store.addMember). This sidesteps
+ * email→open_id resolution (the dashboard process has no Lark client) — the
+ * invitee self-authenticates via the bot, the invite only grants admission.
+ *
+ * Storage: `{dataDir}/team-invites.json`, atomic writes; expired/used pruned.
+ *
+ * Concurrency: consume is a read-modify-write. This assumes a SINGLE dashboard
+ * writer process (the current deployment model). If multiple dashboard processes
+ * ever write concurrently, a single-use code would need a file lock here.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomBytes, randomUUID } from 'node:crypto';
+const DEFAULT_TTL_MS = 24 * 60 * 60 * 1000; // 24h
+function filePath(dataDir) { return join(dataDir, 'team-invites.json'); }
+function readFile(dataDir) {
+    const fp = filePath(dataDir);
+    if (!existsSync(fp))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt */ }
+    return {};
+}
+function writeFileAtomic(dataDir, data) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Drop expired or used-and-old entries. */
+function prune(data, now) {
+    for (const [code, inv] of Object.entries(data)) {
+        if (inv.expiresAt <= now || (inv.usedAt && now - inv.usedAt > DEFAULT_TTL_MS))
+            delete data[code];
+    }
+    return data;
+}
+/** Mint a single-use invite for a team. */
+export function createInvite(dataDir, teamId, createdBy, ttlMs = DEFAULT_TTL_MS, now = Date.now()) {
+    const data = prune(readFile(dataDir), now);
+    const code = randomBytes(9).toString('base64url'); // ~12 chars, high entropy
+    data[code] = { code, teamId, createdBy, createdAt: now, expiresAt: now + ttlMs };
+    writeFileAtomic(dataDir, data);
+    return { code, expiresAt: now + ttlMs };
+}
+/** Drop every invite for a team (e.g. when the team is deleted), so stale codes
+ *  can't later be consumed to join/switch into a non-existent team. Returns count. */
+export function deleteInvitesForTeam(dataDir, teamId) {
+    const data = readFile(dataDir);
+    let removed = 0;
+    for (const [code, inv] of Object.entries(data)) {
+        if (inv.teamId === teamId) {
+            delete data[code];
+            removed++;
+        }
+    }
+    if (removed)
+        writeFileAtomic(dataDir, data);
+    return removed;
+}
+/** Validate + burn an invite (single-use). Determines the precise failure
+ *  reason BEFORE pruning, so an expired code reports `expired` (not `not_found`). */
+export function consumeInvite(dataDir, code, now = Date.now()) {
+    const data = readFile(dataDir);
+    const inv = data[code?.trim()];
+    if (!inv)
+        return { ok: false, reason: 'not_found' };
+    if (inv.expiresAt <= now)
+        return { ok: false, reason: 'expired' };
+    if (inv.usedAt)
+        return { ok: false, reason: 'used' };
+    inv.usedAt = now;
+    writeFileAtomic(dataDir, prune(data, now)); // burn this one; prune other stale entries
+    return { ok: true, teamId: inv.teamId };
+}
+//# sourceMappingURL=invite-store.js.map

package/dist/services/invite-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-store.js","sourceRoot":"","sources":["../../src/services/invite-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAalD,SAAS,QAAQ,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;AAEzF,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,SAAS,KAAK,CAAC,IAAe,EAAE,GAAW;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,SAAiB,EAAE,QAAgB,cAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACvI,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,0BAA0B;IAC7E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;IACjF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO;QAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD;qFACqF;AACrF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClE,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACrD,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,2CAA2C;IACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/services/pairing-store.d.ts

@@ -0,0 +1,47 @@
+export type PairingStatus = 'pending' | 'claimed' | 'consumed';
+export interface PairingClaimer {
+    openId: string;
+    unionId?: string;
+    name?: string;
+    /** The bot app the user ran `/pair` with — open_id is scoped to THIS app. */
+    larkAppId?: string;
+}
+export interface StartedPairing {
+    pairingId: string;
+    code: string;
+    browserToken: string;
+    expiresAt: number;
+}
+/** Begin a pairing. Returns the code to show the user + a private browserToken. */
+export declare function createPairing(dataDir: string, ttlMs?: number, now?: number): StartedPairing;
+export type ClaimResult = {
+    ok: true;
+    pairingId: string;
+} | {
+    ok: false;
+    reason: 'not_found' | 'expired' | 'already_claimed';
+};
+/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
+export declare function claimPairing(dataDir: string, code: string, claimer: PairingClaimer, now?: number): ClaimResult;
+export type PairingView = {
+    status: 'pending';
+} | {
+    status: 'claimed';
+    claimedBy: PairingClaimer;
+} | {
+    status: 'consumed';
+} | {
+    status: 'not_found';
+};
+/** Browser-side status poll; requires the matching browserToken. */
+export declare function getPairingStatus(dataDir: string, pairingId: string, browserToken: string, now?: number): PairingView;
+export type ConsumeResult = {
+    ok: true;
+    claimedBy: PairingClaimer;
+} | {
+    ok: false;
+    reason: 'not_found' | 'not_claimed' | 'already_consumed';
+};
+/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
+export declare function consumePairing(dataDir: string, pairingId: string, browserToken: string, now?: number): ConsumeResult;
+//# sourceMappingURL=pairing-store.d.ts.map

package/dist/services/pairing-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-store.d.ts","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmDD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAuB,EAAE,GAAG,GAAE,MAAmB,GAAG,cAAc,CAavH;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEvE,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAe1H;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5B,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAOhI;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE5E,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,aAAa,CAUhI"}

package/dist/services/pairing-store.js

@@ -0,0 +1,132 @@
+/**
+ * Pairing-login store: binds a browser session to a Feishu user without a web
+ * OAuth redirect (which is unfriendly to ip:port self-host — see
+ * docs/platform-design.md). Device-code style:
+ *
+ *   1. Browser (unauthenticated) calls start → gets a short human `code` to show
+ *      the user, plus a high-entropy `browserToken` it keeps privately.
+ *   2. User sends the `code` to the bot in Feishu. The daemon (which already
+ *      knows the sender's open_id) claims the pairing for that identity.
+ *   3. Browser polls/consumes with its `browserToken`; on a claimed pairing it
+ *      learns the Feishu identity and the web endpoint issues a session.
+ *
+ * Identity is established INSIDE Feishu, so only a short-lived code crosses to
+ * the web — independent of domain/IP/port. Team-membership gating is the
+ * caller's job (via team-store); this store only pairs browser ↔ identity.
+ *
+ * Security: code is high-entropy + short TTL + single-use; browserToken gates
+ * status/consume so a guessed code alone can't hijack a browser session.
+ * (Brute-forcing codes is further bounded by endpoint rate limiting at the wiring
+ * layer.) Codes/tokens are never logged.
+ *
+ * Storage: `{dataDir}/pairings.json` (shared across the web + daemon processes),
+ * atomic writes.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomBytes, randomUUID } from 'node:crypto';
+const DEFAULT_TTL_MS = 5 * 60 * 1000; // 5 minutes
+/** Unambiguous alphabet (no 0/O/1/I) for the human-entered code. */
+const CODE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
+const CODE_LEN = 8;
+function filePath(dataDir) {
+    return join(dataDir, 'pairings.json');
+}
+function readFile(dataDir) {
+    const fp = filePath(dataDir);
+    if (!existsSync(fp))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt — fall through */ }
+    return {};
+}
+function writeFileAtomic(dataDir, data) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Drop expired entries; returns the live map. */
+function prune(data, now) {
+    for (const [id, e] of Object.entries(data)) {
+        if (e.expiresAt <= now)
+            delete data[id];
+    }
+    return data;
+}
+function genCode() {
+    const bytes = randomBytes(CODE_LEN);
+    let out = '';
+    for (let i = 0; i < CODE_LEN; i++)
+        out += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];
+    return out;
+}
+/** Begin a pairing. Returns the code to show the user + a private browserToken. */
+export function createPairing(dataDir, ttlMs = DEFAULT_TTL_MS, now = Date.now()) {
+    const data = prune(readFile(dataDir), now);
+    const entry = {
+        pairingId: randomUUID(),
+        code: genCode(),
+        browserToken: randomBytes(24).toString('base64url'),
+        status: 'pending',
+        createdAt: now,
+        expiresAt: now + ttlMs,
+    };
+    data[entry.pairingId] = entry;
+    writeFileAtomic(dataDir, data);
+    return { pairingId: entry.pairingId, code: entry.code, browserToken: entry.browserToken, expiresAt: entry.expiresAt };
+}
+/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
+export function claimPairing(dataDir, code, claimer, now = Date.now()) {
+    const data = prune(readFile(dataDir), now);
+    const entry = Object.values(data).find(e => e.code === code.trim().toUpperCase());
+    if (!entry)
+        return { ok: false, reason: 'not_found' };
+    if (entry.expiresAt <= now)
+        return { ok: false, reason: 'expired' };
+    if (entry.status !== 'pending')
+        return { ok: false, reason: 'already_claimed' };
+    entry.status = 'claimed';
+    entry.claimedBy = {
+        openId: claimer.openId,
+        ...(claimer.unionId ? { unionId: claimer.unionId } : {}),
+        ...(claimer.name ? { name: claimer.name } : {}),
+        ...(claimer.larkAppId ? { larkAppId: claimer.larkAppId } : {}),
+    };
+    writeFileAtomic(dataDir, data);
+    return { ok: true, pairingId: entry.pairingId };
+}
+/** Browser-side status poll; requires the matching browserToken. */
+export function getPairingStatus(dataDir, pairingId, browserToken, now = Date.now()) {
+    const data = prune(readFile(dataDir), now);
+    const entry = data[pairingId];
+    if (!entry || entry.browserToken !== browserToken)
+        return { status: 'not_found' };
+    if (entry.status === 'claimed' && entry.claimedBy)
+        return { status: 'claimed', claimedBy: entry.claimedBy };
+    if (entry.status === 'consumed')
+        return { status: 'consumed' };
+    return { status: 'pending' };
+}
+/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
+export function consumePairing(dataDir, pairingId, browserToken, now = Date.now()) {
+    const data = prune(readFile(dataDir), now);
+    const entry = data[pairingId];
+    if (!entry || entry.browserToken !== browserToken)
+        return { ok: false, reason: 'not_found' };
+    if (entry.status === 'consumed')
+        return { ok: false, reason: 'already_consumed' };
+    if (entry.status !== 'claimed' || !entry.claimedBy)
+        return { ok: false, reason: 'not_claimed' };
+    entry.status = 'consumed';
+    const claimedBy = entry.claimedBy;
+    writeFileAtomic(dataDir, data);
+    return { ok: true, claimedBy };
+}
+//# sourceMappingURL=pairing-store.js.map

package/dist/services/pairing-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing-store.js","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAClD,oEAAoE;AACpE,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,QAAQ,GAAG,CAAC,CAAC;AAwBnB,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,kDAAkD;AAClD,SAAS,KAAK,CAAC,IAAe,EAAE,GAAW;IACzC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AASD,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,QAAgB,cAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACrG,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAiB;QAC1B,SAAS,EAAE,UAAU,EAAE;QACvB,IAAI,EAAE,OAAO,EAAE;QACf,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,KAAK;KACvB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC9B,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACxH,CAAC;AAMD,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,OAAuB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAChF,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,SAAS,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;IACF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AAQD,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACjH,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC5G,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAMD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC/G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/services/relay-picker.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Shared helper for collecting the operator's relayable sessions used by the
+ * /relay picker. Same selection criteria used both at first render
+ * (command-handler) and on each card-update click (card-handler re-render),
+ * so factor it out to keep both paths in sync.
+ *
+ * Selection rules:
+ *   • same bot (this larkAppId — only this daemon's sessions are visible)
+ *   • NOT in the current chat (can't relay into the chat it already lives in)
+ *   • operator is the session owner (owner-only access)
+ *   • not an adopt session (those wrap a user-attached tmux pane, refused
+ *     by transferSession anyway)
+ *
+ * Resolves friendly chat names and modes via getChatNameAndMode in parallel
+ * (1 API call per unique source chatId). Failure modes are tolerant:
+ * unresolved chats fall back to the raw chatId for chatLabel and the
+ * session's own chatType for mode.
+ */
+import type { DaemonSession } from '../core/types.js';
+import type { RelayPickerEntry } from '../im/lark/card-builder.js';
+export declare function collectRelayPickerEntries(activeSessions: Map<string, DaemonSession>, myAppId: string, currentChatId: string, operatorOpenId: string): Promise<RelayPickerEntry[]>;
+//# sourceMappingURL=relay-picker.d.ts.map

package/dist/services/relay-picker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-picker.d.ts","sourceRoot":"","sources":["../../src/services/relay-picker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAInE,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwD7B"}

package/dist/services/relay-picker.js

@@ -0,0 +1,62 @@
+import { getChatNameAndMode } from '../im/lark/client.js';
+import { isRelayableRealSession } from '../core/worker-pool.js';
+export async function collectRelayPickerEntries(activeSessions, myAppId, currentChatId, operatorOpenId) {
+    const candidates = [];
+    for (const c of activeSessions.values()) {
+        if (c.larkAppId !== myAppId)
+            continue;
+        if (c.chatId === currentChatId)
+            continue;
+        if (c.session.ownerOpenId !== operatorOpenId)
+            continue;
+        if (c.session.adoptedFrom)
+            continue;
+        // Daemon-command scratches (worker:null + no persisted CLI markers)
+        // are placeholder records for /help / unfinished /relay etc. — they
+        // have no real conversation to bring along. Don't surface them in
+        // anyone's picker.
+        if (!isRelayableRealSession(c))
+            continue;
+        candidates.push(c);
+    }
+    // Skip the API call entirely for p2p chats. session.chatType is recorded
+    // at session creation from the Lark event payload and is authoritative —
+    // it doesn't drift. The earlier design used `info?.mode ?? fallbackMode`,
+    // but `getChatNameAndMode` swallows API errors and returns the SAFE
+    // DEFAULT `{ name: null, mode: 'group' }` — which then mis-classified
+    // every p2p session as 普通群 whenever the chat.get call failed
+    // (permissions / network / etc.). 王皓 caught this. Authoritative path:
+    // p2p → session.chatType; non-p2p → Lark API (for group/topic split).
+    const groupChatIds = [...new Set(candidates.filter(c => c.chatType !== 'p2p').map(c => c.chatId))];
+    const resolved = await Promise.all(groupChatIds.map(async (cid) => [cid, await getChatNameAndMode(myAppId, cid)]));
+    const chatInfo = new Map();
+    for (const [cid, info] of resolved)
+        chatInfo.set(cid, info);
+    return candidates.map(c => {
+        if (c.chatType === 'p2p') {
+            return {
+                sessionId: c.session.sessionId,
+                // chatLabel is unused for p2p in the rendered output (location
+                // field always renders the locale-aware "单聊" literal), but we
+                // still set it to chatId for completeness / downstream debug.
+                chatLabel: c.chatId,
+                title: c.session.title || c.currentTurnTitle || '(no title)',
+                workingDir: c.session.workingDir,
+                cliId: c.session.cliId,
+                lastMessageAt: c.lastMessageAt,
+                chatMode: 'p2p',
+            };
+        }
+        const info = chatInfo.get(c.chatId);
+        return {
+            sessionId: c.session.sessionId,
+            chatLabel: info?.name ?? c.chatId,
+            title: c.session.title || c.currentTurnTitle || '(no title)',
+            workingDir: c.session.workingDir,
+            cliId: c.session.cliId,
+            lastMessageAt: c.lastMessageAt,
+            chatMode: info?.mode ?? 'group',
+        };
+    });
+}
+//# sourceMappingURL=relay-picker.js.map

package/dist/services/relay-picker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-picker.js","sourceRoot":"","sources":["../../src/services/relay-picker.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAA0C,EAC1C,OAAe,EACf,aAAqB,EACrB,cAAsB;IAEtB,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc;YAAE,SAAS;QACvD,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW;YAAE,SAAS;QACpC,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,mBAAmB;QACnB,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAAE,SAAS;QACzC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,6DAA6D;IAC7D,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAChE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAU,CAAC,CACxF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoE,CAAC;IAC7F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO;gBACL,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;gBAC9B,+DAA+D;gBAC/D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,SAAS,EAAE,CAAC,CAAC,MAAM;gBACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,IAAI,YAAY;gBAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;gBAChC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,QAAQ,EAAE,KAAc;aACzB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;YAC9B,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM;YACjC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,IAAI,YAAY;YAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;YAChC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/team-roster.d.ts

@@ -0,0 +1,38 @@
+export interface TeamRosterBot {
+    larkAppId: string;
+    name: string;
+    cliId: string;
+    capability: string | null;
+    hasTeamRole: boolean;
+    /** Owner for grouping by person; null if unassigned. unionId is the key, name for display. */
+    owner: {
+        unionId?: string;
+        openId?: string;
+        name?: string;
+    } | null;
+}
+export interface TeamRoster {
+    team: {
+        id: string;
+        name: string;
+        memberCount: number;
+    };
+    bots: TeamRosterBot[];
+}
+/** A currently-running bot from the live daemon registry (authoritative for
+ *  "what's running" — unlike bots-info.json which is a racy, probe-lagged file). */
+export interface LiveBot {
+    larkAppId: string;
+    botName?: string | null;
+    cliId?: string;
+}
+/**
+ * @param configOrder optional list of larkAppIds in bots.json (config) order;
+ *   when given, the roster is sorted to match it (and the personal dashboard).
+ * @param liveBots optional live daemon-registry bots. When given, the roster's
+ *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
+ *   showing no bots even though daemons are running), enriched with cliId from
+ *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
+ */
+export declare function buildTeamRoster(dataDir: string, teamId?: string, configOrder?: string[], liveBots?: LiveBot[]): TeamRoster;
+//# sourceMappingURL=team-roster.d.ts.map

package/dist/services/team-roster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-roster.d.ts","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,8FAA8F;IAC9F,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAkBD;oFACoF;AACpF,MAAM,WAAW,OAAO;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEvF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAwB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,UAAU,CAyC3I"}

package/dist/services/team-roster.js

@@ -0,0 +1,82 @@
+/**
+ * Team-level collaboration roster for the platform UI: every bot the deployment
+ * runs (from bots-info.json) enriched with its team capability label and whether
+ * it has a team-level role, plus the team's member count.
+ *
+ * This is the TEAM view (who's on the team), distinct from the per-chat roster
+ * in listChatBotMembers (who's in a given group + reliably @-mentionable).
+ * Pure read from `{dataDir}` files — no Lark API, no config coupling — so it is
+ * trivially testable and cheap for the UI to poll.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { getBotCapability } from './bot-profile-store.js';
+import { getBotOwner } from './bot-owner-store.js';
+import { getTeam, getDefaultTeam, DEFAULT_TEAM_ID } from './team-store.js';
+function readBotsInfo(dataDir) {
+    const fp = join(dataDir, 'bots-info.json');
+    if (!existsSync(fp))
+        return [];
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt — empty roster */ }
+    return [];
+}
+function hasTeamRoleFile(dataDir, larkAppId) {
+    return existsSync(join(dataDir, 'team-roles', `${larkAppId}.md`));
+}
+/**
+ * @param configOrder optional list of larkAppIds in bots.json (config) order;
+ *   when given, the roster is sorted to match it (and the personal dashboard).
+ * @param liveBots optional live daemon-registry bots. When given, the roster's
+ *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
+ *   showing no bots even though daemons are running), enriched with cliId from
+ *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
+ */
+export function buildTeamRoster(dataDir, teamId = DEFAULT_TEAM_ID, configOrder, liveBots) {
+    const team = getTeam(dataDir, teamId) ?? getDefaultTeam(dataDir);
+    const info = readBotsInfo(dataDir);
+    let entries;
+    if (liveBots !== undefined) {
+        // Live registry is the source of truth WHEN PROVIDED — including an empty
+        // array (no daemons running ⇒ empty roster). Never fall back to a stale
+        // bots-info.json here, or removed/offline bots would linger. Enrich
+        // cliId/openId/name from bots-info.json (which carries cliId — the registry
+        // doesn't) by larkAppId.
+        const byId = new Map(info.map(e => [e.larkAppId, e]));
+        entries = liveBots.map(lb => {
+            const ex = byId.get(lb.larkAppId);
+            return {
+                larkAppId: lb.larkAppId,
+                botOpenId: ex?.botOpenId ?? null,
+                botName: lb.botName ?? ex?.botName ?? null,
+                cliId: lb.cliId ?? ex?.cliId ?? '',
+            };
+        });
+    }
+    else {
+        entries = info;
+    }
+    if (configOrder && configOrder.length) {
+        const rank = new Map(configOrder.map((id, i) => [id, i]));
+        const at = (id) => rank.has(id) ? rank.get(id) : Number.MAX_SAFE_INTEGER;
+        // stable sort by config index; unknown bots fall to the end keeping their order
+        entries = entries.map((b, i) => ({ b, i })).sort((x, y) => (at(x.b.larkAppId) - at(y.b.larkAppId)) || (x.i - y.i)).map(x => x.b);
+    }
+    const bots = entries.map((b) => {
+        const o = getBotOwner(dataDir, b.larkAppId);
+        return {
+            larkAppId: b.larkAppId,
+            name: b.botName ?? b.cliId,
+            cliId: b.cliId,
+            capability: getBotCapability(dataDir, b.larkAppId),
+            hasTeamRole: hasTeamRoleFile(dataDir, b.larkAppId),
+            owner: o ? { unionId: o.unionId, openId: o.openId, name: o.name } : null,
+        };
+    });
+    return { team: { id: team.id, name: team.name, memberCount: team.members.length }, bots };
+}
+//# sourceMappingURL=team-roster.js.map

package/dist/services/team-roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-roster.js","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAmB3E,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAwB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,SAAiB;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB,eAAe,EAAE,WAAsB,EAAE,QAAoB;IAC7H,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAuB,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,yBAAyB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS,EAAE,EAAE,EAAE,SAAS,IAAI,IAAI;gBAChC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,IAAI,IAAI;gBAC1C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7F,gFAAgF;QAChF,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,IAAI,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,WAAW,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC"}

package/dist/services/team-store.d.ts

@@ -0,0 +1,54 @@
+export declare const DEFAULT_TEAM_ID = "default";
+export interface TeamMember {
+    unionId?: string;
+    openId?: string;
+    email?: string;
+    name?: string;
+    addedAt: number;
+    addedBy?: string;
+}
+export interface Team {
+    id: string;
+    name: string;
+    members: TeamMember[];
+    createdAt: number;
+    updatedAt: number;
+}
+/** Identifiers a membership check can match on. Match succeeds on ANY non-empty hit. */
+export interface MemberIdentity {
+    unionId?: string;
+    openId?: string;
+    email?: string;
+}
+/** All teams (empty array if none materialized yet). */
+export declare function listTeams(dataDir: string): Team[];
+/** A team by id, or null. */
+export declare function getTeam(dataDir: string, teamId: string): Team | null;
+/** All teams the given identity belongs to (matches any identifier). */
+export declare function listTeamsForMember(dataDir: string, id: MemberIdentity): Team[];
+/**
+ * The default (implicit single-deployment) team. Read-only: returns the first
+ * persisted team, else a synthesized empty default that is NOT written. Use
+ * `ensureDefaultTeam` when you intend to persist.
+ */
+export declare function getDefaultTeam(dataDir: string): Team;
+/** Materialize (persist) the default team if no team exists yet; returns it. */
+export declare function ensureDefaultTeam(dataDir: string, now?: number): Team;
+/** Delete a team entirely (members + the team entry). Returns true if removed.
+ *  Bots/connectors live at the deployment level (not per-team), so they are
+ *  unaffected — only the membership/trust boundary is dropped. */
+export declare function deleteTeam(dataDir: string, teamId: string): boolean;
+/** Create a new explicit team. */
+export declare function createTeam(dataDir: string, name: string, now?: number): Team;
+/**
+ * Add (or merge) a member into a team. Dedupes by any matching identifier and
+ * fills in newly-known fields. Returns the updated team, or null if no such team.
+ */
+export declare function addMember(dataDir: string, teamId: string, member: Omit<TeamMember, 'addedAt'> & {
+    addedAt?: number;
+}, now?: number): Team | null;
+/** Remove a member matching any identifier. Returns true if removed. */
+export declare function removeMember(dataDir: string, teamId: string, id: MemberIdentity, now?: number): boolean;
+/** Whether the given identity is a member of the team (matches any identifier). */
+export declare function isMember(dataDir: string, teamId: string, id: MemberIdentity): boolean;
+//# sourceMappingURL=team-store.d.ts.map

package/dist/services/team-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-store.d.ts","sourceRoot":"","sources":["../../src/services/team-store.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwBD,wDAAwD;AACxD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAEjD;AAED,6BAA6B;AAC7B,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEpE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,EAAE,CAG9E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMpD;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAOjF;AAED;;kEAEkE;AAClE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOnE;AAED,kCAAkC;AAClC,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAMxF;AAQD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,GAAG,IAAI,CAgB5J;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAUnH;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAKrF"}