botmux 2.46.1 → 2.47.0

package/dist/services/invite-store.js

@@ -1,85 +0,0 @@
-/**
- * Team invite store: an existing member mints a single-use, short-TTL invite
- * code; the invitee pairs (pairing-login) and presents the code on consume,
- * which authorizes joining the team (team-store.addMember). This sidesteps
- * email→open_id resolution (the dashboard process has no Lark client) — the
- * invitee self-authenticates via the bot, the invite only grants admission.
- *
- * Storage: `{dataDir}/team-invites.json`, atomic writes; expired/used pruned.
- *
- * Concurrency: consume is a read-modify-write. This assumes a SINGLE dashboard
- * writer process (the current deployment model). If multiple dashboard processes
- * ever write concurrently, a single-use code would need a file lock here.
- */
-import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomBytes, randomUUID } from 'node:crypto';
-const DEFAULT_TTL_MS = 24 * 60 * 60 * 1000; // 24h
-function filePath(dataDir) { return join(dataDir, 'team-invites.json'); }
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt */ }
-    return {};
-}
-function writeFileAtomic(dataDir, data) {
-    if (!existsSync(dataDir))
-        mkdirSync(dataDir, { recursive: true });
-    const fp = filePath(dataDir);
-    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
-    renameSync(tmp, fp);
-}
-/** Drop expired or used-and-old entries. */
-function prune(data, now) {
-    for (const [code, inv] of Object.entries(data)) {
-        if (inv.expiresAt <= now || (inv.usedAt && now - inv.usedAt > DEFAULT_TTL_MS))
-            delete data[code];
-    }
-    return data;
-}
-/** Mint a single-use invite for a team. */
-export function createInvite(dataDir, teamId, createdBy, ttlMs = DEFAULT_TTL_MS, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const code = randomBytes(9).toString('base64url'); // ~12 chars, high entropy
-    data[code] = { code, teamId, createdBy, createdAt: now, expiresAt: now + ttlMs };
-    writeFileAtomic(dataDir, data);
-    return { code, expiresAt: now + ttlMs };
-}
-/** Drop every invite for a team (e.g. when the team is deleted), so stale codes
- *  can't later be consumed to join/switch into a non-existent team. Returns count. */
-export function deleteInvitesForTeam(dataDir, teamId) {
-    const data = readFile(dataDir);
-    let removed = 0;
-    for (const [code, inv] of Object.entries(data)) {
-        if (inv.teamId === teamId) {
-            delete data[code];
-            removed++;
-        }
-    }
-    if (removed)
-        writeFileAtomic(dataDir, data);
-    return removed;
-}
-/** Validate + burn an invite (single-use). Determines the precise failure
- *  reason BEFORE pruning, so an expired code reports `expired` (not `not_found`). */
-export function consumeInvite(dataDir, code, now = Date.now()) {
-    const data = readFile(dataDir);
-    const inv = data[code?.trim()];
-    if (!inv)
-        return { ok: false, reason: 'not_found' };
-    if (inv.expiresAt <= now)
-        return { ok: false, reason: 'expired' };
-    if (inv.usedAt)
-        return { ok: false, reason: 'used' };
-    inv.usedAt = now;
-    writeFileAtomic(dataDir, prune(data, now)); // burn this one; prune other stale entries
-    return { ok: true, teamId: inv.teamId };
-}
-//# sourceMappingURL=invite-store.js.map

package/dist/services/invite-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"invite-store.js","sourceRoot":"","sources":["../../src/services/invite-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,MAAM;AAalD,SAAS,QAAQ,CAAC,OAAe,IAAY,OAAO,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;AAEzF,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,4CAA4C;AAC5C,SAAS,KAAK,CAAC,IAAe,EAAE,GAAW;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAID,2CAA2C;AAC3C,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,SAAiB,EAAE,QAAgB,cAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACvI,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,0BAA0B;IAC7E,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;IACjF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,GAAG,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED;sFACsF;AACtF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,MAAc;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAAC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO;QAAE,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC;AACjB,CAAC;AAMD;qFACqF;AACrF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClE,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACrD,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;IACjB,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,2CAA2C;IACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAC1C,CAAC"}

package/dist/services/pairing-store.d.ts

@@ -1,47 +0,0 @@
-export type PairingStatus = 'pending' | 'claimed' | 'consumed';
-export interface PairingClaimer {
-    openId: string;
-    unionId?: string;
-    name?: string;
-    /** The bot app the user ran `/pair` with — open_id is scoped to THIS app. */
-    larkAppId?: string;
-}
-export interface StartedPairing {
-    pairingId: string;
-    code: string;
-    browserToken: string;
-    expiresAt: number;
-}
-/** Begin a pairing. Returns the code to show the user + a private browserToken. */
-export declare function createPairing(dataDir: string, ttlMs?: number, now?: number): StartedPairing;
-export type ClaimResult = {
-    ok: true;
-    pairingId: string;
-} | {
-    ok: false;
-    reason: 'not_found' | 'expired' | 'already_claimed';
-};
-/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
-export declare function claimPairing(dataDir: string, code: string, claimer: PairingClaimer, now?: number): ClaimResult;
-export type PairingView = {
-    status: 'pending';
-} | {
-    status: 'claimed';
-    claimedBy: PairingClaimer;
-} | {
-    status: 'consumed';
-} | {
-    status: 'not_found';
-};
-/** Browser-side status poll; requires the matching browserToken. */
-export declare function getPairingStatus(dataDir: string, pairingId: string, browserToken: string, now?: number): PairingView;
-export type ConsumeResult = {
-    ok: true;
-    claimedBy: PairingClaimer;
-} | {
-    ok: false;
-    reason: 'not_found' | 'not_claimed' | 'already_consumed';
-};
-/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
-export declare function consumePairing(dataDir: string, pairingId: string, browserToken: string, now?: number): ConsumeResult;
-//# sourceMappingURL=pairing-store.d.ts.map

package/dist/services/pairing-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pairing-store.d.ts","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmDD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAuB,EAAE,GAAG,GAAE,MAAmB,GAAG,cAAc,CAavH;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEvE,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAe1H;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5B,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAOhI;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE5E,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,aAAa,CAUhI"}

package/dist/services/pairing-store.js

@@ -1,132 +0,0 @@
-/**
- * Pairing-login store: binds a browser session to a Feishu user without a web
- * OAuth redirect (which is unfriendly to ip:port self-host — see
- * docs/platform-design.md). Device-code style:
- *
- *   1. Browser (unauthenticated) calls start → gets a short human `code` to show
- *      the user, plus a high-entropy `browserToken` it keeps privately.
- *   2. User sends the `code` to the bot in Feishu. The daemon (which already
- *      knows the sender's open_id) claims the pairing for that identity.
- *   3. Browser polls/consumes with its `browserToken`; on a claimed pairing it
- *      learns the Feishu identity and the web endpoint issues a session.
- *
- * Identity is established INSIDE Feishu, so only a short-lived code crosses to
- * the web — independent of domain/IP/port. Team-membership gating is the
- * caller's job (via team-store); this store only pairs browser ↔ identity.
- *
- * Security: code is high-entropy + short TTL + single-use; browserToken gates
- * status/consume so a guessed code alone can't hijack a browser session.
- * (Brute-forcing codes is further bounded by endpoint rate limiting at the wiring
- * layer.) Codes/tokens are never logged.
- *
- * Storage: `{dataDir}/pairings.json` (shared across the web + daemon processes),
- * atomic writes.
- */
-import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomBytes, randomUUID } from 'node:crypto';
-const DEFAULT_TTL_MS = 5 * 60 * 1000; // 5 minutes
-/** Unambiguous alphabet (no 0/O/1/I) for the human-entered code. */
-const CODE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
-const CODE_LEN = 8;
-function filePath(dataDir) {
-    return join(dataDir, 'pairings.json');
-}
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt — fall through */ }
-    return {};
-}
-function writeFileAtomic(dataDir, data) {
-    if (!existsSync(dataDir))
-        mkdirSync(dataDir, { recursive: true });
-    const fp = filePath(dataDir);
-    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
-    renameSync(tmp, fp);
-}
-/** Drop expired entries; returns the live map. */
-function prune(data, now) {
-    for (const [id, e] of Object.entries(data)) {
-        if (e.expiresAt <= now)
-            delete data[id];
-    }
-    return data;
-}
-function genCode() {
-    const bytes = randomBytes(CODE_LEN);
-    let out = '';
-    for (let i = 0; i < CODE_LEN; i++)
-        out += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];
-    return out;
-}
-/** Begin a pairing. Returns the code to show the user + a private browserToken. */
-export function createPairing(dataDir, ttlMs = DEFAULT_TTL_MS, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = {
-        pairingId: randomUUID(),
-        code: genCode(),
-        browserToken: randomBytes(24).toString('base64url'),
-        status: 'pending',
-        createdAt: now,
-        expiresAt: now + ttlMs,
-    };
-    data[entry.pairingId] = entry;
-    writeFileAtomic(dataDir, data);
-    return { pairingId: entry.pairingId, code: entry.code, browserToken: entry.browserToken, expiresAt: entry.expiresAt };
-}
-/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
-export function claimPairing(dataDir, code, claimer, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = Object.values(data).find(e => e.code === code.trim().toUpperCase());
-    if (!entry)
-        return { ok: false, reason: 'not_found' };
-    if (entry.expiresAt <= now)
-        return { ok: false, reason: 'expired' };
-    if (entry.status !== 'pending')
-        return { ok: false, reason: 'already_claimed' };
-    entry.status = 'claimed';
-    entry.claimedBy = {
-        openId: claimer.openId,
-        ...(claimer.unionId ? { unionId: claimer.unionId } : {}),
-        ...(claimer.name ? { name: claimer.name } : {}),
-        ...(claimer.larkAppId ? { larkAppId: claimer.larkAppId } : {}),
-    };
-    writeFileAtomic(dataDir, data);
-    return { ok: true, pairingId: entry.pairingId };
-}
-/** Browser-side status poll; requires the matching browserToken. */
-export function getPairingStatus(dataDir, pairingId, browserToken, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = data[pairingId];
-    if (!entry || entry.browserToken !== browserToken)
-        return { status: 'not_found' };
-    if (entry.status === 'claimed' && entry.claimedBy)
-        return { status: 'claimed', claimedBy: entry.claimedBy };
-    if (entry.status === 'consumed')
-        return { status: 'consumed' };
-    return { status: 'pending' };
-}
-/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
-export function consumePairing(dataDir, pairingId, browserToken, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = data[pairingId];
-    if (!entry || entry.browserToken !== browserToken)
-        return { ok: false, reason: 'not_found' };
-    if (entry.status === 'consumed')
-        return { ok: false, reason: 'already_consumed' };
-    if (entry.status !== 'claimed' || !entry.claimedBy)
-        return { ok: false, reason: 'not_claimed' };
-    entry.status = 'consumed';
-    const claimedBy = entry.claimedBy;
-    writeFileAtomic(dataDir, data);
-    return { ok: true, claimedBy };
-}
-//# sourceMappingURL=pairing-store.js.map

package/dist/services/pairing-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pairing-store.js","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAClD,oEAAoE;AACpE,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,QAAQ,GAAG,CAAC,CAAC;AAwBnB,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,kDAAkD;AAClD,SAAS,KAAK,CAAC,IAAe,EAAE,GAAW;IACzC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AASD,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,QAAgB,cAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACrG,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAiB;QAC1B,SAAS,EAAE,UAAU,EAAE;QACvB,IAAI,EAAE,OAAO,EAAE;QACf,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,KAAK;KACvB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC9B,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACxH,CAAC;AAMD,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,OAAuB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAChF,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,SAAS,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;IACF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AAQD,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACjH,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC5G,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAMD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC/G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/services/relay-picker.d.ts

@@ -1,22 +0,0 @@
-/**
- * Shared helper for collecting the operator's relayable sessions used by the
- * /relay picker. Same selection criteria used both at first render
- * (command-handler) and on each card-update click (card-handler re-render),
- * so factor it out to keep both paths in sync.
- *
- * Selection rules:
- *   • same bot (this larkAppId — only this daemon's sessions are visible)
- *   • NOT in the current chat (can't relay into the chat it already lives in)
- *   • operator is the session owner (owner-only access)
- *   • not an adopt session (those wrap a user-attached tmux pane, refused
- *     by transferSession anyway)
- *
- * Resolves friendly chat names and modes via getChatNameAndMode in parallel
- * (1 API call per unique source chatId). Failure modes are tolerant:
- * unresolved chats fall back to the raw chatId for chatLabel and the
- * session's own chatType for mode.
- */
-import type { DaemonSession } from '../core/types.js';
-import type { RelayPickerEntry } from '../im/lark/card-builder.js';
-export declare function collectRelayPickerEntries(activeSessions: Map<string, DaemonSession>, myAppId: string, currentChatId: string, operatorOpenId: string): Promise<RelayPickerEntry[]>;
-//# sourceMappingURL=relay-picker.d.ts.map

package/dist/services/relay-picker.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"relay-picker.d.ts","sourceRoot":"","sources":["../../src/services/relay-picker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAInE,wBAAsB,yBAAyB,CAC7C,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EAC1C,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAwD7B"}

package/dist/services/relay-picker.js

@@ -1,62 +0,0 @@
-import { getChatNameAndMode } from '../im/lark/client.js';
-import { isRelayableRealSession } from '../core/worker-pool.js';
-export async function collectRelayPickerEntries(activeSessions, myAppId, currentChatId, operatorOpenId) {
-    const candidates = [];
-    for (const c of activeSessions.values()) {
-        if (c.larkAppId !== myAppId)
-            continue;
-        if (c.chatId === currentChatId)
-            continue;
-        if (c.session.ownerOpenId !== operatorOpenId)
-            continue;
-        if (c.session.adoptedFrom)
-            continue;
-        // Daemon-command scratches (worker:null + no persisted CLI markers)
-        // are placeholder records for /help / unfinished /relay etc. — they
-        // have no real conversation to bring along. Don't surface them in
-        // anyone's picker.
-        if (!isRelayableRealSession(c))
-            continue;
-        candidates.push(c);
-    }
-    // Skip the API call entirely for p2p chats. session.chatType is recorded
-    // at session creation from the Lark event payload and is authoritative —
-    // it doesn't drift. The earlier design used `info?.mode ?? fallbackMode`,
-    // but `getChatNameAndMode` swallows API errors and returns the SAFE
-    // DEFAULT `{ name: null, mode: 'group' }` — which then mis-classified
-    // every p2p session as 普通群 whenever the chat.get call failed
-    // (permissions / network / etc.). 王皓 caught this. Authoritative path:
-    // p2p → session.chatType; non-p2p → Lark API (for group/topic split).
-    const groupChatIds = [...new Set(candidates.filter(c => c.chatType !== 'p2p').map(c => c.chatId))];
-    const resolved = await Promise.all(groupChatIds.map(async (cid) => [cid, await getChatNameAndMode(myAppId, cid)]));
-    const chatInfo = new Map();
-    for (const [cid, info] of resolved)
-        chatInfo.set(cid, info);
-    return candidates.map(c => {
-        if (c.chatType === 'p2p') {
-            return {
-                sessionId: c.session.sessionId,
-                // chatLabel is unused for p2p in the rendered output (location
-                // field always renders the locale-aware "单聊" literal), but we
-                // still set it to chatId for completeness / downstream debug.
-                chatLabel: c.chatId,
-                title: c.session.title || c.currentTurnTitle || '(no title)',
-                workingDir: c.session.workingDir,
-                cliId: c.session.cliId,
-                lastMessageAt: c.lastMessageAt,
-                chatMode: 'p2p',
-            };
-        }
-        const info = chatInfo.get(c.chatId);
-        return {
-            sessionId: c.session.sessionId,
-            chatLabel: info?.name ?? c.chatId,
-            title: c.session.title || c.currentTurnTitle || '(no title)',
-            workingDir: c.session.workingDir,
-            cliId: c.session.cliId,
-            lastMessageAt: c.lastMessageAt,
-            chatMode: info?.mode ?? 'group',
-        };
-    });
-}
-//# sourceMappingURL=relay-picker.js.map

package/dist/services/relay-picker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"relay-picker.js","sourceRoot":"","sources":["../../src/services/relay-picker.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,cAA0C,EAC1C,OAAe,EACf,aAAqB,EACrB,cAAsB;IAEtB,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO;YAAE,SAAS;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,SAAS;QACzC,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,KAAK,cAAc;YAAE,SAAS;QACvD,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW;YAAE,SAAS;QACpC,oEAAoE;QACpE,oEAAoE;QACpE,kEAAkE;QAClE,mBAAmB;QACnB,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;YAAE,SAAS;QACzC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,6DAA6D;IAC7D,sEAAsE;IACtE,sEAAsE;IACtE,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAC9B,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAChE,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAU,CAAC,CACxF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoE,CAAC;IAC7F,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,QAAQ;QAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACzB,OAAO;gBACL,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;gBAC9B,+DAA+D;gBAC/D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,SAAS,EAAE,CAAC,CAAC,MAAM;gBACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,IAAI,YAAY;gBAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;gBAChC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,QAAQ,EAAE,KAAc;aACzB,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;YAC9B,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,MAAM;YACjC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,IAAI,YAAY;YAC5D,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;YAChC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,OAAO;SAChC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/services/send-policy.d.ts

@@ -1,55 +0,0 @@
-/**
- * Pure decision helpers for `botmux send` (extracted from cmdSend so they can
- * be unit-tested without process.exit / Lark I/O).
- *
- * Two policies live here:
- *   - resolveQuoteTarget: which message a chat-scope send should quote (reply
- *     to), so 普通群 messages render Lark's 引用 chain. Thread-scope and
- *     --top-level never quote.
- *   - validateMentionDecision: the @ hard-gate — every model-initiated reply
- *     must explicitly choose --mention / --mention-back / --no-mention.
- */
-export interface QuoteTargetArgs {
-    /** session.scope === 'chat' */
-    isChatScope: boolean;
-    /** --top-level publish mode */
-    sendTopLevel: boolean;
-    /** --no-quote: force a plain (un-quoted) send */
-    noQuote: boolean;
-    /** --quote <message_id> explicit override */
-    explicitQuote?: string;
-    /** session.quoteTargetId — the latest inbound message this turn responds to */
-    sessionQuoteTargetId?: string;
-}
-/**
- * Resolve the message id a send should quote, or null for a plain send.
- * Priority: --quote > session.quoteTargetId. Only chat-scope, non-top-level,
- * non-`--no-quote` sends quote.
- */
-export declare function resolveQuoteTarget(args: QuoteTargetArgs): string | null;
-export interface MentionDecisionArgs {
-    /** config.send.requireMentionDecision */
-    enabled: boolean;
-    /** --top-level publish is exempt from the gate */
-    sendTopLevel: boolean;
-    /** at least one --mention <ou:Name> given */
-    hasMentionArgs: boolean;
-    /** --mention-back given */
-    mentionBack: boolean;
-    /** --no-mention given */
-    noMention: boolean;
-    /** whether the session knows who sent the message being replied to */
-    hasQuoteTargetSender: boolean;
-}
-export interface MentionDecisionResult {
-    ok: boolean;
-    /** present when !ok — the message to print before exit(2) */
-    error?: string;
-}
-/**
- * Enforce that the model made an explicit @ decision before sending.
- * Returns ok:false with a context-aware error when no decision was made or
- * the flags contradict each other.
- */
-export declare function validateMentionDecision(args: MentionDecisionArgs): MentionDecisionResult;
-//# sourceMappingURL=send-policy.d.ts.map

package/dist/services/send-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-policy.d.ts","sourceRoot":"","sources":["../../src/services/send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,+BAA+B;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAIvE;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,2BAA2B;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,yBAAyB;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAoBxF"}

package/dist/services/send-policy.js

@@ -1,47 +0,0 @@
-/**
- * Pure decision helpers for `botmux send` (extracted from cmdSend so they can
- * be unit-tested without process.exit / Lark I/O).
- *
- * Two policies live here:
- *   - resolveQuoteTarget: which message a chat-scope send should quote (reply
- *     to), so 普通群 messages render Lark's 引用 chain. Thread-scope and
- *     --top-level never quote.
- *   - validateMentionDecision: the @ hard-gate — every model-initiated reply
- *     must explicitly choose --mention / --mention-back / --no-mention.
- */
-/**
- * Resolve the message id a send should quote, or null for a plain send.
- * Priority: --quote > session.quoteTargetId. Only chat-scope, non-top-level,
- * non-`--no-quote` sends quote.
- */
-export function resolveQuoteTarget(args) {
-    if (!args.isChatScope || args.sendTopLevel || args.noQuote)
-        return null;
-    const target = args.explicitQuote ?? args.sessionQuoteTargetId;
-    return target && target.trim() ? target.trim() : null;
-}
-/**
- * Enforce that the model made an explicit @ decision before sending.
- * Returns ok:false with a context-aware error when no decision was made or
- * the flags contradict each other.
- */
-export function validateMentionDecision(args) {
-    if (!args.enabled || args.sendTopLevel)
-        return { ok: true };
-    if (args.noMention && (args.hasMentionArgs || args.mentionBack)) {
-        return { ok: false, error: '--no-mention 不能与 --mention / --mention-back 同时使用。' };
-    }
-    if (args.mentionBack && !args.hasQuoteTargetSender) {
-        return { ok: false, error: '--mention-back 无可 @ 对象：本轮没有可识别的触发消息发送者。请改用 --mention <ou:Name> 或 --no-mention。' };
-    }
-    const decided = args.hasMentionArgs || args.mentionBack || args.noMention;
-    if (decided)
-        return { ok: true };
-    // No decision made — guide by message VALUE (not by human-vs-bot). Avoid
-    // letting --no-mention become the lazy default, and avoid meaningless @.
-    return {
-        ok: false,
-        error: '本条需显式 @ 决策（别把 --no-mention 当默认）：有实质结论、要对方继续看/确认/决策 → --mention-back（或 --mention <ou:Name> 点名）；纯记录/低优先级进度/简短确认 → --no-mention；若只是没信息量的"收到"，不如不发，等有内容再回。',
-    };
-}
-//# sourceMappingURL=send-policy.js.map

package/dist/services/send-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-policy.js","sourceRoot":"","sources":["../../src/services/send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,oBAAoB,CAAC;IAC/D,OAAO,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAuBD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAE5D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gFAAgF,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC;IAC1E,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEjC,yEAAyE;IACzE,yEAAyE;IACzE,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,wJAAwJ;KAChK,CAAC;AACJ,CAAC"}

package/dist/services/team-roster.d.ts

@@ -1,38 +0,0 @@
-export interface TeamRosterBot {
-    larkAppId: string;
-    name: string;
-    cliId: string;
-    capability: string | null;
-    hasTeamRole: boolean;
-    /** Owner for grouping by person; null if unassigned. unionId is the key, name for display. */
-    owner: {
-        unionId?: string;
-        openId?: string;
-        name?: string;
-    } | null;
-}
-export interface TeamRoster {
-    team: {
-        id: string;
-        name: string;
-        memberCount: number;
-    };
-    bots: TeamRosterBot[];
-}
-/** A currently-running bot from the live daemon registry (authoritative for
- *  "what's running" — unlike bots-info.json which is a racy, probe-lagged file). */
-export interface LiveBot {
-    larkAppId: string;
-    botName?: string | null;
-    cliId?: string;
-}
-/**
- * @param configOrder optional list of larkAppIds in bots.json (config) order;
- *   when given, the roster is sorted to match it (and the personal dashboard).
- * @param liveBots optional live daemon-registry bots. When given, the roster's
- *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
- *   showing no bots even though daemons are running), enriched with cliId from
- *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
- */
-export declare function buildTeamRoster(dataDir: string, teamId?: string, configOrder?: string[], liveBots?: LiveBot[]): TeamRoster;
-//# sourceMappingURL=team-roster.d.ts.map

package/dist/services/team-roster.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-roster.d.ts","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,8FAA8F;IAC9F,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CACpE;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAkBD;oFACoF;AACpF,MAAM,WAAW,OAAO;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAEvF;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAwB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,UAAU,CAyC3I"}

package/dist/services/team-roster.js

@@ -1,82 +0,0 @@
-/**
- * Team-level collaboration roster for the platform UI: every bot the deployment
- * runs (from bots-info.json) enriched with its team capability label and whether
- * it has a team-level role, plus the team's member count.
- *
- * This is the TEAM view (who's on the team), distinct from the per-chat roster
- * in listChatBotMembers (who's in a given group + reliably @-mentionable).
- * Pure read from `{dataDir}` files — no Lark API, no config coupling — so it is
- * trivially testable and cheap for the UI to poll.
- */
-import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getBotCapability } from './bot-profile-store.js';
-import { getBotOwner } from './bot-owner-store.js';
-import { getTeam, getDefaultTeam, DEFAULT_TEAM_ID } from './team-store.js';
-function readBotsInfo(dataDir) {
-    const fp = join(dataDir, 'bots-info.json');
-    if (!existsSync(fp))
-        return [];
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt — empty roster */ }
-    return [];
-}
-function hasTeamRoleFile(dataDir, larkAppId) {
-    return existsSync(join(dataDir, 'team-roles', `${larkAppId}.md`));
-}
-/**
- * @param configOrder optional list of larkAppIds in bots.json (config) order;
- *   when given, the roster is sorted to match it (and the personal dashboard).
- * @param liveBots optional live daemon-registry bots. When given, the roster's
- *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
- *   showing no bots even though daemons are running), enriched with cliId from
- *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
- */
-export function buildTeamRoster(dataDir, teamId = DEFAULT_TEAM_ID, configOrder, liveBots) {
-    const team = getTeam(dataDir, teamId) ?? getDefaultTeam(dataDir);
-    const info = readBotsInfo(dataDir);
-    let entries;
-    if (liveBots !== undefined) {
-        // Live registry is the source of truth WHEN PROVIDED — including an empty
-        // array (no daemons running ⇒ empty roster). Never fall back to a stale
-        // bots-info.json here, or removed/offline bots would linger. Enrich
-        // cliId/openId/name from bots-info.json (which carries cliId — the registry
-        // doesn't) by larkAppId.
-        const byId = new Map(info.map(e => [e.larkAppId, e]));
-        entries = liveBots.map(lb => {
-            const ex = byId.get(lb.larkAppId);
-            return {
-                larkAppId: lb.larkAppId,
-                botOpenId: ex?.botOpenId ?? null,
-                botName: lb.botName ?? ex?.botName ?? null,
-                cliId: lb.cliId ?? ex?.cliId ?? '',
-            };
-        });
-    }
-    else {
-        entries = info;
-    }
-    if (configOrder && configOrder.length) {
-        const rank = new Map(configOrder.map((id, i) => [id, i]));
-        const at = (id) => rank.has(id) ? rank.get(id) : Number.MAX_SAFE_INTEGER;
-        // stable sort by config index; unknown bots fall to the end keeping their order
-        entries = entries.map((b, i) => ({ b, i })).sort((x, y) => (at(x.b.larkAppId) - at(y.b.larkAppId)) || (x.i - y.i)).map(x => x.b);
-    }
-    const bots = entries.map((b) => {
-        const o = getBotOwner(dataDir, b.larkAppId);
-        return {
-            larkAppId: b.larkAppId,
-            name: b.botName ?? b.cliId,
-            cliId: b.cliId,
-            capability: getBotCapability(dataDir, b.larkAppId),
-            hasTeamRole: hasTeamRoleFile(dataDir, b.larkAppId),
-            owner: o ? { unionId: o.unionId, openId: o.openId, name: o.name } : null,
-        };
-    });
-    return { team: { id: team.id, name: team.name, memberCount: team.members.length }, bots };
-}
-//# sourceMappingURL=team-roster.js.map

package/dist/services/team-roster.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-roster.js","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAmB3E,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAwB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,SAAiB;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB,eAAe,EAAE,WAAsB,EAAE,QAAoB;IAC7H,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAuB,CAAC;IAC5B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,yBAAyB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS,EAAE,EAAE,EAAE,SAAS,IAAI,IAAI;gBAChC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,IAAI,IAAI;gBAC1C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7F,gFAAgF;QAChF,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,IAAI,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,WAAW,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC"}