botmux 2.47.0 → 2.47.1

package/dist/services/connector-store.d.ts

@@ -0,0 +1,58 @@
+export type ConnectorVerifyType = 'hmac-sha256';
+export type ConnectorTargetMode = 'dynamic' | 'fixed' | 'new-group';
+export type ConnectorTargetKind = 'turn' | 'workflow';
+export interface ConnectorDefinition {
+    id: string;
+    name: string;
+    enabled: boolean;
+    verify: {
+        type: ConnectorVerifyType;
+        secretRef: string;
+        signatureHeader: string;
+        timestampHeader: string;
+        nonceHeader: string;
+        toleranceSeconds: number;
+    };
+    target: {
+        mode: ConnectorTargetMode;
+        kind: ConnectorTargetKind;
+        botId: string;
+        botIds?: string[];
+        chatId?: string;
+        allowChats?: string[];
+        workflowId?: string;
+    };
+    promptEnvelope: {
+        sourceName: string;
+        headerAllowlist: string[];
+        includeRawText: boolean;
+        maxBodyBytes: number;
+    };
+    loggingPolicy: {
+        storePayload: boolean;
+        storeHeaders: boolean;
+        retentionDays: number;
+    };
+    lifecycleExtractors: null | {
+        dedupKey: string;
+        status: string;
+        statusMap?: Record<string, string>;
+    };
+    rateLimit?: {
+        windowSeconds: number;
+        maxRequests: number;
+    };
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ConnectorStoreFile {
+    version: 1;
+    connectors: ConnectorDefinition[];
+}
+export declare function readConnectorStore(dataDir?: string): ConnectorStoreFile;
+export declare function listConnectors(dataDir?: string): ConnectorDefinition[];
+export declare function getConnector(id: string, dataDir?: string): ConnectorDefinition | null;
+export declare function upsertConnector(connector: ConnectorDefinition, dataDir?: string): ConnectorDefinition;
+export declare function deleteConnector(id: string, dataDir?: string): boolean;
+export declare function newConnectorId(): string;
+//# sourceMappingURL=connector-store.d.ts.map

package/dist/services/connector-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-store.d.ts","sourceRoot":"","sources":["../../src/services/connector-store.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAChD,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AACpE,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,UAAU,CAAC;AAEtD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IAGjB,MAAM,EAAE;QACN,IAAI,EAAE,mBAAmB,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,MAAM,EAAE;QACN,IAAI,EAAE,mBAAmB,CAAC;QAC1B,IAAI,EAAE,mBAAmB,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,cAAc,EAAE;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,EAAE,CAAC;QAC1B,cAAc,EAAE,OAAO,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IACF,aAAa,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;IACF,mBAAmB,EAAE,IAAI,GAAG;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACpC,CAAC;IACF,SAAS,CAAC,EAAE;QACV,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAqBD,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,MAA+B,GAAG,kBAAkB,CAQ/F;AAUD,wBAAgB,cAAc,CAAC,OAAO,GAAE,MAA+B,GAAG,mBAAmB,EAAE,CAE9F;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,MAA+B,GAAG,mBAAmB,GAAG,IAAI,CAG7G;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,mBAAmB,EAC9B,OAAO,GAAE,MAA+B,GACvC,mBAAmB,CAerB;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,MAA+B,GAAG,OAAO,CAO7F;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC"}

package/dist/services/connector-store.js

@@ -0,0 +1,79 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { config } from '../config.js';
+function storePath(dataDir = config.session.dataDir) {
+    return join(dataDir, 'connectors.json');
+}
+function emptyStore() {
+    return { version: 1, connectors: [] };
+}
+function normalizeStore(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return emptyStore();
+    const r = raw;
+    return {
+        version: 1,
+        connectors: Array.isArray(r.connectors)
+            ? r.connectors.filter((c) => !!c && typeof c === 'object' && typeof c.id === 'string')
+            : [],
+    };
+}
+export function readConnectorStore(dataDir = config.session.dataDir) {
+    const fp = storePath(dataDir);
+    if (!existsSync(fp))
+        return emptyStore();
+    try {
+        return normalizeStore(JSON.parse(readFileSync(fp, 'utf-8')));
+    }
+    catch {
+        return emptyStore();
+    }
+}
+function writeConnectorStore(dataDir, store) {
+    const fp = storePath(dataDir);
+    mkdirSync(dirname(fp), { recursive: true });
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(normalizeStore(store), null, 2) + '\n', { encoding: 'utf-8', mode: 0o600 });
+    renameSync(tmp, fp);
+}
+export function listConnectors(dataDir = config.session.dataDir) {
+    return readConnectorStore(dataDir).connectors;
+}
+export function getConnector(id, dataDir = config.session.dataDir) {
+    if (!id)
+        return null;
+    return listConnectors(dataDir).find(c => c.id === id) ?? null;
+}
+export function upsertConnector(connector, dataDir = config.session.dataDir) {
+    if (!connector.id)
+        throw new Error('connector id is required');
+    const now = new Date().toISOString();
+    const store = readConnectorStore(dataDir);
+    const idx = store.connectors.findIndex(c => c.id === connector.id);
+    const prior = idx >= 0 ? store.connectors[idx] : undefined;
+    const next = {
+        ...connector,
+        createdAt: connector.createdAt || prior?.createdAt || now,
+        updatedAt: now,
+    };
+    if (idx >= 0)
+        store.connectors[idx] = next;
+    else
+        store.connectors.push(next);
+    writeConnectorStore(dataDir, store);
+    return next;
+}
+export function deleteConnector(id, dataDir = config.session.dataDir) {
+    const store = readConnectorStore(dataDir);
+    const before = store.connectors.length;
+    store.connectors = store.connectors.filter(c => c.id !== id);
+    if (store.connectors.length === before)
+        return false;
+    writeConnectorStore(dataDir, store);
+    return true;
+}
+export function newConnectorId() {
+    return `conn_${randomUUID()}`;
+}
+//# sourceMappingURL=connector-store.js.map

package/dist/services/connector-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-store.js","sourceRoot":"","sources":["../../src/services/connector-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AA0DtC,SAAS,SAAS,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACzD,OAAO,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IAC/E,MAAM,CAAC,GAAG,GAAkC,CAAC;IAC7C,OAAO;QACL,OAAO,EAAE,CAAC;QACV,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YACrC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAS,CAAC,EAAE,KAAK,QAAQ,CAAC;YACzH,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACzE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,UAAU,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,EAAE,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,KAAyB;IACrE,MAAM,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IACrE,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAU,EAAE,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAC/E,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,SAA8B,EAC9B,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAExC,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,MAAM,IAAI,GAAwB;QAChC,GAAG,SAAS;QACZ,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,KAAK,EAAE,SAAS,IAAI,GAAG;QACzD,SAAS,EAAE,GAAG;KACf,CAAC;IACF,IAAI,GAAG,IAAI,CAAC;QAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;;QACtC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,UAAkB,MAAM,CAAC,OAAO,CAAC,OAAO;IAClF,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IACvC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,UAAU,EAAE,EAAE,CAAC;AAChC,CAAC"}

package/dist/services/deployment-identity.d.ts

@@ -0,0 +1,22 @@
+export interface DeploymentIdentity {
+    deploymentId: string;
+    name: string;
+    /** The owner's tenant-stable Feishu identity, bound once via /pair. Used as
+     *  the "operator" when this deployment initiates 拉群 (so the operator is
+     *  pulled into the group). Absent until bound. */
+    ownerUnionId?: string;
+    ownerName?: string;
+}
+/** Load (creating + persisting on first call) this deployment's identity. */
+export declare function getDeploymentIdentity(dataDir: string): DeploymentIdentity;
+/** Rename this deployment (owner-facing label). Returns the updated identity. */
+export declare function setDeploymentName(dataDir: string, name: string): DeploymentIdentity;
+/** Bind the owner's Feishu identity (via /pair or auto-bind). Also adopts the
+ *  owner's Feishu name as the DEPLOYMENT name — the deployment is shown to the
+ *  team by its owner's real name (no custom labels), so the roster reads
+ *  naturally ("申晗 的部署" instead of a hostname). Returns the updated identity. */
+export declare function setDeploymentOwner(dataDir: string, owner: {
+    unionId?: string;
+    name?: string;
+}): DeploymentIdentity;
+//# sourceMappingURL=deployment-identity.d.ts.map

package/dist/services/deployment-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-identity.d.ts","sourceRoot":"","sources":["../../src/services/deployment-identity.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb;;sDAEkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAcD,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAkBzE;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,kBAAkB,CAKnF;AAED;;;gFAGgF;AAChF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,kBAAkB,CAUlH"}

package/dist/services/deployment-identity.js

@@ -0,0 +1,67 @@
+/**
+ * Deployment identity: a stable id + human-readable name for THIS botmux
+ * deployment (one install = one owner). Used by federation so a hub can tell
+ * member deployments apart and group their bots in the shared roster.
+ *
+ * Generated once and persisted to `{dataDir}/deployment-identity.json`; the name
+ * defaults to the machine hostname and can be renamed by the owner.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+import { hostname } from 'node:os';
+function filePath(dataDir) {
+    return join(dataDir, 'deployment-identity.json');
+}
+function write(dataDir, id) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(id, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Load (creating + persisting on first call) this deployment's identity. */
+export function getDeploymentIdentity(dataDir) {
+    const fp = filePath(dataDir);
+    if (existsSync(fp)) {
+        try {
+            const p = JSON.parse(readFileSync(fp, 'utf-8'));
+            if (p && typeof p.deploymentId === 'string' && p.deploymentId) {
+                return {
+                    deploymentId: p.deploymentId,
+                    name: typeof p.name === 'string' && p.name ? p.name : 'botmux',
+                    ownerUnionId: typeof p.ownerUnionId === 'string' ? p.ownerUnionId : undefined,
+                    ownerName: typeof p.ownerName === 'string' ? p.ownerName : undefined,
+                };
+            }
+        }
+        catch { /* corrupt — regenerate */ }
+    }
+    const id = { deploymentId: `dep_${randomUUID().slice(0, 12)}`, name: hostname() || 'botmux' };
+    write(dataDir, id);
+    return id;
+}
+/** Rename this deployment (owner-facing label). Returns the updated identity. */
+export function setDeploymentName(dataDir, name) {
+    const cur = getDeploymentIdentity(dataDir);
+    const next = { ...cur, name: name.trim() || cur.name };
+    write(dataDir, next);
+    return next;
+}
+/** Bind the owner's Feishu identity (via /pair or auto-bind). Also adopts the
+ *  owner's Feishu name as the DEPLOYMENT name — the deployment is shown to the
+ *  team by its owner's real name (no custom labels), so the roster reads
+ *  naturally ("申晗 的部署" instead of a hostname). Returns the updated identity. */
+export function setDeploymentOwner(dataDir, owner) {
+    const cur = getDeploymentIdentity(dataDir);
+    const next = {
+        ...cur,
+        ownerUnionId: owner.unionId || cur.ownerUnionId,
+        ownerName: owner.name || cur.ownerName,
+        name: owner.name || cur.name, // default the deployment label to the owner's Feishu name
+    };
+    write(dataDir, next);
+    return next;
+}
+//# sourceMappingURL=deployment-identity.js.map

package/dist/services/deployment-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployment-identity.js","sourceRoot":"","sources":["../../src/services/deployment-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAYnC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,KAAK,CAAC,OAAe,EAAE,EAAsB;IACpD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBAC9D,OAAO;oBACL,YAAY,EAAE,CAAC,CAAC,YAAY;oBAC5B,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;oBAC9D,YAAY,EAAE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;oBAC7E,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;iBACrE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,EAAE,GAAuB,EAAE,YAAY,EAAE,OAAO,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;IAClH,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAY;IAC7D,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAuB,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3E,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;gFAGgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAA0C;IAC5F,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAuB;QAC/B,GAAG,GAAG;QACN,YAAY,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,YAAY;QAC/C,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS;QACtC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,0DAA0D;KACzF,CAAC;IACF,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/federation-membership-store.d.ts

@@ -0,0 +1,23 @@
+export interface RemoteMembership {
+    hubUrl: string;
+    teamId: string;
+    teamName: string;
+    syncToken: string;
+    deploymentId: string;
+    joinedAt: number;
+    /** Token THIS spoke issued to the hub at join; the hub presents it on
+     *  delegate-group calls so we can verify the request came from a hub we joined. */
+    delegationToken?: string;
+}
+/** Record (or replace) a remote-team membership. */
+export declare function addMembership(dataDir: string, m: Omit<RemoteMembership, 'joinedAt'> & {
+    joinedAt?: number;
+}, now?: number): RemoteMembership;
+/** All remote teams this deployment has joined. */
+export declare function listMemberships(dataDir: string): RemoteMembership[];
+/** Find the membership whose delegationToken matches (verifies an incoming
+ *  hub→spoke delegate call came from a hub this deployment actually joined). */
+export declare function findMembershipByDelegationToken(dataDir: string, token: string): RemoteMembership | null;
+/** Remove one membership. Returns true if removed. */
+export declare function removeMembership(dataDir: string, hubUrl: string, teamId: string): boolean;
+//# sourceMappingURL=federation-membership-store.d.ts.map

package/dist/services/federation-membership-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-membership-store.d.ts","sourceRoot":"","sources":["../../src/services/federation-membership-store.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB;uFACmF;IACnF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA8BD,oDAAoD;AACpD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,gBAAgB,CAMxJ;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEnE;AAED;gFACgF;AAChF,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAGvG;AAED,sDAAsD;AACtD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOzF"}

package/dist/services/federation-membership-store.js

@@ -0,0 +1,66 @@
+/**
+ * Federation membership store (SPOKE side): which remote teams THIS deployment
+ * has joined, and the syncToken/hub needed to push bots + pull the shared roster.
+ *
+ * Storage: `{dataDir}/federation-memberships.json`, atomic writes. Keyed by
+ * `${hubUrl}::${teamId}` so a deployment can join multiple teams / hubs.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
+import { join } from 'node:path';
+import { randomUUID } from 'node:crypto';
+function filePath(dataDir) {
+    return join(dataDir, 'federation-memberships.json');
+}
+function keyOf(hubUrl, teamId) {
+    return `${hubUrl}::${teamId}`;
+}
+function readFile(dataDir) {
+    const fp = filePath(dataDir);
+    if (!existsSync(fp))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
+            return parsed;
+    }
+    catch { /* corrupt */ }
+    return {};
+}
+function writeFileAtomic(dataDir, data) {
+    if (!existsSync(dataDir))
+        mkdirSync(dataDir, { recursive: true });
+    const fp = filePath(dataDir);
+    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
+    renameSync(tmp, fp);
+}
+/** Record (or replace) a remote-team membership. */
+export function addMembership(dataDir, m, now = Date.now()) {
+    const data = readFile(dataDir);
+    const full = { ...m, joinedAt: m.joinedAt ?? now };
+    data[keyOf(m.hubUrl, m.teamId)] = full;
+    writeFileAtomic(dataDir, data);
+    return full;
+}
+/** All remote teams this deployment has joined. */
+export function listMemberships(dataDir) {
+    return Object.values(readFile(dataDir));
+}
+/** Find the membership whose delegationToken matches (verifies an incoming
+ *  hub→spoke delegate call came from a hub this deployment actually joined). */
+export function findMembershipByDelegationToken(dataDir, token) {
+    if (!token)
+        return null;
+    return Object.values(readFile(dataDir)).find(m => m.delegationToken === token) ?? null;
+}
+/** Remove one membership. Returns true if removed. */
+export function removeMembership(dataDir, hubUrl, teamId) {
+    const data = readFile(dataDir);
+    const key = keyOf(hubUrl, teamId);
+    if (!data[key])
+        return false;
+    delete data[key];
+    writeFileAtomic(dataDir, data);
+    return true;
+}
+//# sourceMappingURL=federation-membership-store.js.map

package/dist/services/federation-membership-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-membership-store.js","sourceRoot":"","sources":["../../src/services/federation-membership-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAgBzC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,MAAc;IAC3C,OAAO,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;IACzB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,CAA6D,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACpI,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAqB,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,GAAG,EAAE,CAAC;IACrE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,+BAA+B,CAAC,OAAe,EAAE,KAAa;IAC5E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AACzF,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc,EAAE,MAAc;IAC9E,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/federation-roster.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Aggregated cross-deployment roster (HUB side): the hub's own local bots
+ * ([[team-roster]]) merged with every member deployment's advertised bots
+ * ([[federation-store]]), each tagged with the deployment it belongs to so the
+ * UI can group by deployment (local first, then remote by name).
+ *
+ * Pure read from `{dataDir}` files — testable, no Lark API.
+ */
+import { type LiveBot } from './team-roster.js';
+/** A federated deployment is considered stale (likely offline) if it hasn't
+ *  synced within this window — its bots are flagged so the UI can de-emphasize them. */
+export declare const FEDERATION_STALE_MS: number;
+export interface AggregatedRosterBot {
+    larkAppId: string;
+    name: string;
+    cliId: string;
+    capability: string | null;
+    hasTeamRole: boolean;
+    /** Tenant-stable bot id (kept now so P2 拉群 by union_id needs no schema change). */
+    botUnionId?: string;
+    /** Owner (person) of this bot — union_id is tenant-stable, used to pull the
+     *  owner into a federated group regardless of app scope. */
+    owner?: {
+        unionId?: string;
+        name?: string;
+    };
+    deployment: {
+        id: string;
+        name: string;
+        local: boolean;
+        stale: boolean;
+    };
+}
+export interface AggregatedDeployment {
+    id: string;
+    name: string;
+    local: boolean;
+    botCount: number;
+    lastSeenAt?: number;
+    /** true when a remote deployment hasn't synced within FEDERATION_STALE_MS. */
+    stale: boolean;
+}
+export interface AggregatedRoster {
+    team: {
+        id: string;
+        name: string;
+        memberCount: number;
+    };
+    deployments: AggregatedDeployment[];
+    bots: AggregatedRosterBot[];
+}
+/** Hub's local bots + all member deployments' bots, tagged + grouped by deployment. */
+export declare function buildFederatedRoster(dataDir: string, teamId?: string, configOrder?: string[], now?: number, liveBots?: LiveBot[]): AggregatedRoster;
+//# sourceMappingURL=federation-roster.d.ts.map

package/dist/services/federation-roster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-roster.d.ts","sourceRoot":"","sources":["../../src/services/federation-roster.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAKjE;wFACwF;AACxF,eAAO,MAAM,mBAAmB,QAAgB,CAAC;AAEjD,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;gEAC4D;IAC5D,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,UAAU,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACpC,IAAI,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAwB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,GAAE,MAAmB,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAoChL"}

package/dist/services/federation-roster.js

@@ -0,0 +1,51 @@
+/**
+ * Aggregated cross-deployment roster (HUB side): the hub's own local bots
+ * ([[team-roster]]) merged with every member deployment's advertised bots
+ * ([[federation-store]]), each tagged with the deployment it belongs to so the
+ * UI can group by deployment (local first, then remote by name).
+ *
+ * Pure read from `{dataDir}` files — testable, no Lark API.
+ */
+import { buildTeamRoster } from './team-roster.js';
+import { listFederatedDeployments } from './federation-store.js';
+import { getDeploymentIdentity } from './deployment-identity.js';
+import { getTeam, getDefaultTeam, DEFAULT_TEAM_ID } from './team-store.js';
+/** A federated deployment is considered stale (likely offline) if it hasn't
+ *  synced within this window — its bots are flagged so the UI can de-emphasize them. */
+export const FEDERATION_STALE_MS = 5 * 60 * 1000;
+/** Hub's local bots + all member deployments' bots, tagged + grouped by deployment. */
+export function buildFederatedRoster(dataDir, teamId = DEFAULT_TEAM_ID, configOrder, now = Date.now(), liveBots) {
+    const team = getTeam(dataDir, teamId) ?? getDefaultTeam(dataDir);
+    const localId = getDeploymentIdentity(dataDir);
+    const local = buildTeamRoster(dataDir, teamId, configOrder, liveBots);
+    const deployments = [
+        { id: localId.deploymentId, name: localId.name, local: true, botCount: local.bots.length, stale: false },
+    ];
+    const bots = local.bots.map(b => ({
+        larkAppId: b.larkAppId,
+        name: b.name,
+        cliId: b.cliId,
+        capability: b.capability,
+        hasTeamRole: b.hasTeamRole,
+        owner: b.owner ? { unionId: b.owner.unionId, name: b.owner.name } : undefined,
+        deployment: { id: localId.deploymentId, name: localId.name, local: true, stale: false },
+    }));
+    for (const dep of listFederatedDeployments(dataDir, teamId)) {
+        const stale = now - dep.lastSeenAt > FEDERATION_STALE_MS;
+        deployments.push({ id: dep.deploymentId, name: dep.name, local: false, botCount: dep.bots.length, lastSeenAt: dep.lastSeenAt, stale });
+        for (const b of dep.bots) {
+            bots.push({
+                larkAppId: b.larkAppId,
+                name: b.botName,
+                cliId: b.cliId,
+                capability: b.capability ?? null,
+                hasTeamRole: !!b.hasTeamRole,
+                botUnionId: b.botUnionId,
+                owner: (b.ownerUnionId || b.ownerName) ? { unionId: b.ownerUnionId, name: b.ownerName } : undefined,
+                deployment: { id: dep.deploymentId, name: dep.name, local: false, stale },
+            });
+        }
+    }
+    return { team: { id: team.id, name: team.name, memberCount: team.members.length }, deployments, bots };
+}
+//# sourceMappingURL=federation-roster.js.map

package/dist/services/federation-roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-roster.js","sourceRoot":"","sources":["../../src/services/federation-roster.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,eAAe,EAAgB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAE3E;wFACwF;AACxF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAgCjD,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,SAAiB,eAAe,EAAE,WAAsB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,QAAoB;IAC5J,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEtE,MAAM,WAAW,GAA2B;QAC1C,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE;KACzG,CAAC;IACF,MAAM,IAAI,GAA0B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvD,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAC7E,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;KACxF,CAAC,CAAC,CAAC;IAEJ,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,GAAG,GAAG,GAAG,CAAC,UAAU,GAAG,mBAAmB,CAAC;QACzD,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACvI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC;gBACR,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,IAAI,EAAE,CAAC,CAAC,OAAO;gBACf,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI;gBAChC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW;gBAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS;gBACnG,UAAU,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACzG,CAAC"}

package/dist/services/federation-store.d.ts

@@ -0,0 +1,76 @@
+export interface FederatedBot {
+    larkAppId: string;
+    botName: string;
+    cliId: string;
+    /** Tenant-stable bot id (used by P2 拉群 to add the bot cross-app). */
+    botUnionId?: string;
+    capability?: string | null;
+    hasTeamRole?: boolean;
+    /** Owner (the person) of this bot, tenant-stable union_id — so 拉群 can pull
+     *  the owner into the group by union_id (open_id is app-scoped, union_id not). */
+    ownerUnionId?: string;
+    ownerName?: string;
+}
+export interface FederatedDeployment {
+    deploymentId: string;
+    name: string;
+    syncToken: string;
+    bots: FederatedBot[];
+    joinedAt: number;
+    lastSeenAt: number;
+    /** The spoke deployment's OWNER (the person), tenant-stable union_id. Hub uses
+     *  this — derived from syncToken — as the trusted operator identity when this
+     *  spoke initiates 拉群 (so the operator is pulled into the group). */
+    ownerUnionId?: string;
+    ownerName?: string;
+    /** Spoke's dashboard base URL — so this hub can call back to delegate 拉群
+     *  (hub→spoke) when no local online bot can be the group creator. */
+    callbackUrl?: string;
+    /** Token the SPOKE issued to THIS hub at join; the hub presents it on
+     *  delegate calls so the spoke can verify the request is from its hub. */
+    delegationToken?: string;
+}
+export interface RegisterInput {
+    deploymentId: string;
+    name: string;
+    bots: FederatedBot[];
+    ownerUnionId?: string;
+    ownerName?: string;
+    callbackUrl?: string;
+    delegationToken?: string;
+}
+/**
+ * Register a NEW remote deployment under a team and issue a fresh syncToken.
+ *
+ * NOT idempotent on purpose: `deploymentId` is public (it appears in the roster),
+ * so re-registering an existing id must NOT hand back its long-lived syncToken —
+ * otherwise anyone with an invite could claim another deployment's token by
+ * guessing its id. A duplicate returns `{ created: false }` with NO token; the
+ * caller surfaces `deployment_already_joined`. Ongoing bot refresh is via
+ * `syncDeployment` (syncToken), not this. Re-binding/rotation is a future
+ * explicit reset proving the old syncToken.
+ */
+export declare function registerDeployment(dataDir: string, teamId: string, input: RegisterInput, now?: number): {
+    syncToken: string;
+    created: boolean;
+};
+/** Resolve a syncToken to its {teamId, deployment}, or null. */
+export declare function getDeploymentByToken(dataDir: string, syncToken: string): {
+    teamId: string;
+    deployment: FederatedDeployment;
+} | null;
+/** Refresh a deployment's advertised bots + heartbeat, by syncToken. Returns true if found. */
+export declare function syncDeployment(dataDir: string, syncToken: string, bots: FederatedBot[], owner?: {
+    ownerUnionId?: string;
+    ownerName?: string;
+    name?: string;
+}, now?: number): boolean;
+/** Member deployments of a team (empty if none). */
+export declare function listFederatedDeployments(dataDir: string, teamId: string): FederatedDeployment[];
+/** Remove a deployment from a team (leave/kick). Returns true if removed. */
+export declare function removeDeployment(dataDir: string, teamId: string, deploymentId: string): boolean;
+/** Remove the deployment owning a syncToken (spoke-initiated leave/revoke). Returns true if removed. */
+export declare function removeDeploymentByToken(dataDir: string, syncToken: string): boolean;
+/** Drop all federation records for a team (e.g. when the team is deleted). */
+export declare function removeTeamFederation(dataDir: string, teamId: string): void;
+//# sourceMappingURL=federation-store.d.ts.map

package/dist/services/federation-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-store.d.ts","sourceRoot":"","sources":["../../src/services/federation-store.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;sFACkF;IAClF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB;;yEAEqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;yEACqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AA8BD,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,GAAE,MAAmB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAQ3J;AAED,gEAAgE;AAChE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,mBAAmB,CAAA;CAAE,GAAG,IAAI,CAQnI;AAED,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,KAAK,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAiBhM;AAED,oDAAoD;AACpD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAE/F;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAS/F;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAQnF;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAM1E"}