botmux 2.88.1 → 2.90.0

package/dist/core/dashboard-command/groups.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `/dashboard groups` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global groups matrix, builds the Feishu list card, and DMs the invoking
+ * admin. Per-row detail cards carry add-bot, leave-bot, oncall, and role
+ * actions through card callbacks.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type Locale } from '../../i18n/index.js';
+import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+/** Optional injection seam for tests. */
+export interface DashboardGroupsCommandDeps {
+    createClient?: (larkAppId: string) => DaemonClient;
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    locale?: Locale;
+}
+export declare function handleDashboardGroups(_message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardGroupsCommandDeps): Promise<void>;
+//# sourceMappingURL=groups.d.ts.map

package/dist/core/dashboard-command/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/groups.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAK9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,0BAA+B,GACxC,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/core/dashboard-command/groups.js

@@ -0,0 +1,52 @@
+/**
+ * `/dashboard groups` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global groups matrix, builds the Feishu list card, and DMs the invoking
+ * admin. Per-row detail cards carry add-bot, leave-bot, oncall, and role
+ * actions through card callbacks.
+ */
+import { localeForBot, t } from '../../i18n/index.js';
+import { buildGroupsCard } from '../../im/lark/groups-card.js';
+import { createDaemonClientFor } from '../../daemon-internal-client-wrapper.js';
+import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
+export async function handleDashboardGroups(_message, _args, rootId, _chatId, deps, larkAppId, adminOpenId, testDeps = {}) {
+    if (!larkAppId)
+        return;
+    const locale = testDeps.locale ?? localeForBot(larkAppId);
+    const client = (testDeps.createClient ?? createDaemonClientFor)(larkAppId);
+    let snap;
+    try {
+        snap = await client.request({ method: 'GET', path: '/__daemon/groups-matrix?scope=global' });
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.groups.list_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+        return;
+    }
+    if (snap.status !== 200) {
+        const reason = String(snap.body?.error ?? `http_${snap.status}`);
+        await deps.sessionReply(rootId, t('card.dashboard.groups.list_failed', { reason }, locale), undefined, larkAppId);
+        return;
+    }
+    const body = snap.body ?? {};
+    const matrix = {
+        chats: body.chats ?? [],
+        bots: body.bots ?? [],
+    };
+    // invokerOpenId = adminOpenId so subsequent clicks still pass the invoker lock.
+    const cardJson = buildGroupsCard(matrix, {
+        invokerOpenId: adminOpenId,
+        locale,
+        page: 1,
+        scope: 'global',
+    });
+    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
+    try {
+        await sendUserMessage(larkAppId, adminOpenId, cardJson, 'interactive');
+        await deps.sessionReply(rootId, t('card.dashboard.groups.dm_sent', undefined, locale), undefined, larkAppId);
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.groups.dm_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+    }
+}
+//# sourceMappingURL=groups.js.map

package/dist/core/dashboard-command/groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/groups.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAepF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAqB,EACrB,KAAa,EACb,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAA6B,EAC7B,WAAmB,EACnB,WAAuC,EAAE;IAEzC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACnF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAE,IAAI,CAAC,IAAY,EAAE,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAC1D,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAI,IAAI,CAAC,IAGjB,IAAI,EAAE,CAAC;IACT,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;KACtB,CAAC;IACF,gFAAgF;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE;QACvC,aAAa,EAAE,WAAW;QAC1B,MAAM;QACN,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,+BAA+B,EAAE,SAAS,EAAE,MAAM,CAAC,EACrD,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACjF,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/dashboard-command/index.d.ts

@@ -0,0 +1,30 @@
+/**
+ * `/dashboard <module>` command-group entry.
+ *
+ * The entire command group is restricted to the bot's resolved `allowedUsers`,
+ * matching `/botconfig`. Any subcommand that bypasses this gate is a security
+ * regression. Empty args default to `overview`; successful cards are DM'd to
+ * the invoking admin and the topic receives only a short confirmation.
+ */
+import type { LarkMessage } from '../../types.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+import { type EnsureDashboardOwnerDeps } from './owner-gate.js';
+import { type DashboardSettingsCommandDeps } from './settings.js';
+import { type DashboardSessionsCommandDeps } from './sessions.js';
+import { type DashboardSchedulesCommandDeps } from './schedules.js';
+import { type DashboardOverviewCommandDeps } from './overview.js';
+import { type DashboardWorkflowsCommandDeps } from './workflows.js';
+import { type DashboardGroupsCommandDeps } from './groups.js';
+/** Optional test seam. Production omits these overrides. */
+export interface DashboardCommandDeps extends EnsureDashboardOwnerDeps {
+    /** Override for `sendUserMessage` (DM to invoking admin). Production omits. */
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    settings?: DashboardSettingsCommandDeps;
+    sessions?: DashboardSessionsCommandDeps;
+    schedules?: DashboardSchedulesCommandDeps;
+    overview?: DashboardOverviewCommandDeps;
+    workflows?: DashboardWorkflowsCommandDeps;
+    groups?: DashboardGroupsCommandDeps;
+}
+export declare function handleDashboardCommand(message: LarkMessage, args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId?: string, testDeps?: DashboardCommandDeps): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/core/dashboard-command/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAOtF,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAyB,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAErF,4DAA4D;AAC5D,MAAM,WAAW,oBAAqB,SAAQ,wBAAwB;IACpE,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,GAAE,oBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC,CA2Ef"}

package/dist/core/dashboard-command/index.js

@@ -0,0 +1,81 @@
+/**
+ * `/dashboard <module>` command-group entry.
+ *
+ * The entire command group is restricted to the bot's resolved `allowedUsers`,
+ * matching `/botconfig`. Any subcommand that bypasses this gate is a security
+ * regression. Empty args default to `overview`; successful cards are DM'd to
+ * the invoking admin and the topic receives only a short confirmation.
+ */
+import { localeForBot, t } from '../../i18n/index.js';
+import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
+import { ensureDashboardOwner } from './owner-gate.js';
+import { DASHBOARD_MODULES, buildHelpText, buildStubText, } from './stub.js';
+import { handleDashboardSettings } from './settings.js';
+import { handleDashboardSessions } from './sessions.js';
+import { handleDashboardSchedules } from './schedules.js';
+import { handleDashboardOverview } from './overview.js';
+import { handleDashboardWorkflows } from './workflows.js';
+import { handleDashboardGroups } from './groups.js';
+export async function handleDashboardCommand(message, args, rootId, _chatId, deps, larkAppId, testDeps = {}) {
+    const loc = localeForBot(larkAppId);
+    // Integral admin gate — applies to ALL subcommands. It intentionally
+    // matches `/botconfig`: any resolved allowedUsers entry can use dashboard,
+    // but open-mode bots with no allowedUsers still fail closed.
+    const gate = await ensureDashboardOwner(message, larkAppId, testDeps);
+    if (!gate.ok) {
+        // Admin gate failure: reply in the topic (we don't have an admin DM target).
+        await deps.sessionReply(rootId, t('card.dashboard.owner_only', undefined, loc), undefined, larkAppId);
+        return;
+    }
+    // Every admin-gated response goes to the invoking admin's DM. The
+    // topic receives only a short confirmation, sharing the `/card` idiom
+    // (cmd.config.card_dmd: "configuration card sent to your DM").
+    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
+    const reply = async (text, msgType = 'text') => {
+        if (!larkAppId) {
+            await deps.sessionReply(rootId, text, msgType === 'interactive' ? 'interactive' : undefined, larkAppId);
+            return;
+        }
+        try {
+            await sendUserMessage(larkAppId, gate.adminOpenId, text, msgType);
+            await deps.sessionReply(rootId, t('card.dashboard.dm_sent', undefined, loc), undefined, larkAppId);
+        }
+        catch (e) {
+            await deps.sessionReply(rootId, t('card.dashboard.dm_failed', { reason: e?.message ?? String(e) }, loc), undefined, larkAppId);
+        }
+    };
+    // ─── Dispatch (admin-only zone) ───
+    const trimmedArgs = args.trim();
+    const rawSub = trimmedArgs.split(/\s+/)[0] || 'overview';
+    const sub = rawSub.toLowerCase();
+    const subArgs = trimmedArgs ? trimmedArgs.slice(rawSub.length).trimStart() : '';
+    if (sub === 'help') {
+        await reply(buildHelpText(loc));
+        return;
+    }
+    if (sub === 'settings') {
+        return handleDashboardSettings(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.settings);
+    }
+    if (sub === 'sessions') {
+        return handleDashboardSessions(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.sessions);
+    }
+    if (sub === 'schedules') {
+        return handleDashboardSchedules(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.schedules);
+    }
+    if (sub === 'workflows') {
+        return handleDashboardWorkflows(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.workflows);
+    }
+    if (sub === 'groups') {
+        return handleDashboardGroups(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.groups);
+    }
+    if (sub === 'overview') {
+        return handleDashboardOverview(message, subArgs, rootId, _chatId, deps, larkAppId, gate.adminOpenId, testDeps.overview);
+    }
+    if (DASHBOARD_MODULES.includes(sub)) {
+        await reply(buildStubText(sub, loc));
+        return;
+    }
+    // Unknown module — show help with an "unknown module" preface.
+    await reply(buildHelpText(loc, { unknownModule: sub }));
+}
+//# sourceMappingURL=index.js.map

package/dist/core/dashboard-command/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAiC,MAAM,iBAAiB,CAAC;AACtF,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAsC,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAqC,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAsC,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAAE,qBAAqB,EAAmC,MAAM,aAAa,CAAC;AAcrF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAoB,EACpB,IAAY,EACZ,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAAkB,EAClB,WAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,qEAAqE;IACrE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,6EAA6E;QAC7E,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,2BAA2B,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACtG,OAAO;IACT,CAAC;IAED,kEAAkE;IAClE,sEAAsE;IACtE,+DAA+D;IAC/D,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,UAAkC,MAAM,EAAiB,EAAE;QAC5F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACxG,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,wBAAwB,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EACvE,SAAS,EAAE,SAAS,CACrB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,qCAAqC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEhF,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,OAAO;IACT,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;QACxB,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtH,CAAC;IAED,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1H,CAAC;IAED,IAAI,iBAAiB,CAAC,QAAQ,CAAC,GAAsB,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,CAAC,aAAa,CAAC,GAAsB,EAAE,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO;IACT,CAAC;IAED,+DAA+D;IAC/D,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/core/dashboard-command/overview.d.ts

@@ -0,0 +1,29 @@
+/**
+ * `/dashboard overview` real sub-handler.
+ *
+ * Pipeline (mirrors `/dashboard sessions` / `/dashboard schedules`):
+ *   1. Admin gate has ALREADY run in `handleDashboardCommand`; this function
+ *      is called with `adminOpenId` already resolved.
+ *   2. Fetch the live overview snapshot via Route B
+ *      (`GET /__daemon/overview-snapshot?scope=global`). `/dashboard` is
+ *      a Bot admin tool panel — list modules surface cross-bot under
+ *      `?scope=global` so the first-open view matches refresh/drilldown.
+ *   3. Project through `buildOverviewCard` (counts + settings summary line)
+ *      with section buttons routed to the goto handlers (which also send
+ *      `?scope=global`).
+ *   4. DM the card to the admin; topic only gets a short `dm_sent` line.
+ *
+ * Read-only — no buttons mutate state from the overview surface itself.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type Locale } from '../../i18n/index.js';
+import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+/** Optional injection seam for tests. */
+export interface DashboardOverviewCommandDeps {
+    createClient?: (larkAppId: string) => DaemonClient;
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    locale?: Locale;
+}
+export declare function handleDashboardOverview(_message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardOverviewCommandDeps): Promise<void>;
+//# sourceMappingURL=overview.d.ts.map

package/dist/core/dashboard-command/overview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/overview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAI9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,4BAA4B;IAC3C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,4BAAiC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA+Df"}

package/dist/core/dashboard-command/overview.js

@@ -0,0 +1,61 @@
+/**
+ * `/dashboard overview` real sub-handler.
+ *
+ * Pipeline (mirrors `/dashboard sessions` / `/dashboard schedules`):
+ *   1. Admin gate has ALREADY run in `handleDashboardCommand`; this function
+ *      is called with `adminOpenId` already resolved.
+ *   2. Fetch the live overview snapshot via Route B
+ *      (`GET /__daemon/overview-snapshot?scope=global`). `/dashboard` is
+ *      a Bot admin tool panel — list modules surface cross-bot under
+ *      `?scope=global` so the first-open view matches refresh/drilldown.
+ *   3. Project through `buildOverviewCard` (counts + settings summary line)
+ *      with section buttons routed to the goto handlers (which also send
+ *      `?scope=global`).
+ *   4. DM the card to the admin; topic only gets a short `dm_sent` line.
+ *
+ * Read-only — no buttons mutate state from the overview surface itself.
+ */
+import { localeForBot, t } from '../../i18n/index.js';
+import { buildOverviewCard } from '../../im/lark/overview-card.js';
+import { createDaemonClientFor } from '../../daemon-internal-client-wrapper.js';
+import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
+export async function handleDashboardOverview(_message, _args, rootId, _chatId, deps, larkAppId, adminOpenId, testDeps = {}) {
+    if (!larkAppId)
+        return;
+    const locale = testDeps.locale ?? localeForBot(larkAppId);
+    const client = (testDeps.createClient ?? createDaemonClientFor)(larkAppId);
+    let snap;
+    try {
+        // `/dashboard` first-open MUST match the refresh-callback view:
+        // list modules are global under `?scope=global`.
+        snap = await client.request({ method: 'GET', path: '/__daemon/overview-snapshot?scope=global' });
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.overview.overview_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+        return;
+    }
+    if (snap.status !== 200) {
+        const reason = String(snap.body?.error ?? `http_${snap.status}`);
+        await deps.sessionReply(rootId, t('card.dashboard.overview.overview_failed', { reason }, locale), undefined, larkAppId);
+        return;
+    }
+    const body = snap.body;
+    if (!body || typeof body !== 'object' || !body.settings) {
+        await deps.sessionReply(rootId, t('card.dashboard.overview.overview_failed', { reason: 'malformed_body' }, locale), undefined, larkAppId);
+        return;
+    }
+    const cardJson = buildOverviewCard({
+        sessions: body.sessions ?? [],
+        schedules: body.schedules ?? [],
+        settings: body.settings,
+    }, { invokerOpenId: adminOpenId, locale });
+    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
+    try {
+        await sendUserMessage(larkAppId, adminOpenId, cardJson, 'interactive');
+        await deps.sessionReply(rootId, t('card.dashboard.overview.dm_sent', undefined, locale), undefined, larkAppId);
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.overview.dm_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+    }
+}
+//# sourceMappingURL=overview.js.map

package/dist/core/dashboard-command/overview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overview.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/overview.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAoBpF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAqB,EACrB,KAAa,EACb,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAA6B,EAC7B,WAAmB,EACnB,WAAyC,EAAE;IAE3C,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,gEAAgE;QAChE,iDAAiD;QACjD,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0CAA0C,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACzF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAE,IAAI,CAAC,IAAY,EAAE,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAChE,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAwC,CAAC;IAC3D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,EAClF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAChC;QACE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,EACD,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,CACvC,CAAC;IAEF,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,iCAAiC,EAAE,SAAS,EAAE,MAAM,CAAC,EACvD,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACnF,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/dashboard-command/owner-gate.d.ts

@@ -0,0 +1,41 @@
+/**
+ * `/dashboard` command-group admin gate.
+ *
+ * Single source of truth for verifying that a sender is allowed to use any
+ * `/dashboard <module>` subcommand. The entire `/dashboard` group is
+ * restricted to the bot's resolved `allowedUsers`, matching `/botconfig`;
+ * help / stub / unknown subcommands MUST go through this check before they
+ * can produce any output.
+ *
+ * Why a dedicated helper instead of inlining the lookup in command dispatch:
+ *  - Command entry and card-callback paths must share the same admin model.
+ *    If one path treats only allowedUsers[0] as privileged while another
+ *    accepts all allowedUsers, `/dashboard` drifts away from `/botconfig`.
+ *  - Empty allowedUsers deliberately fails closed. Other botmux commands may
+ *    have open-mode fallbacks, but dashboard exposes operational controls.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type DashboardAdminLookupDeps } from '../../dashboard/dashboard-admins.js';
+export type DashboardAdminCheck = {
+    ok: true;
+    adminOpenId: string;
+} | {
+    ok: false;
+    reason: 'no_dashboard_admin' | 'missing_sender' | 'not_dashboard_admin';
+};
+/** Backward-compatible type alias for older tests/imports. */
+export type DashboardOwnerCheck = DashboardAdminCheck;
+/** Optional injection seam — tests provide mock admin lookup. */
+export interface EnsureDashboardOwnerDeps extends DashboardAdminLookupDeps {
+}
+/**
+ * Decide whether `message.senderId` is a per-bot dashboard admin.
+ *
+ * Per-bot admin gate:
+ *  - Each `/dashboard` invocation is scoped to the bot that received it.
+ *  - Any resolved `allowedUsers` entry can operate, matching `/botconfig`.
+ *  - Empty `allowedUsers` still fails closed; dashboard is never opened by
+ *    botmux's generic open-mode `canOperate` fallback.
+ */
+export declare function ensureDashboardOwner(message: LarkMessage, larkAppId: string | undefined, deps?: EnsureDashboardOwnerDeps): Promise<DashboardAdminCheck>;
+//# sourceMappingURL=owner-gate.d.ts.map

package/dist/core/dashboard-command/owner-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-gate.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/owner-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,qCAAqC,CAAC;AAE7C,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,GAAG,gBAAgB,GAAG,qBAAqB,CAAA;CAAE,CAAC;AAE3F,8DAA8D;AAC9D,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEtD,iEAAiE;AACjE,MAAM,WAAW,wBAAyB,SAAQ,wBAAwB;CAAG;AAE7E;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC,mBAAmB,CAAC,CAQ9B"}

package/dist/core/dashboard-command/owner-gate.js

@@ -0,0 +1,40 @@
+/**
+ * `/dashboard` command-group admin gate.
+ *
+ * Single source of truth for verifying that a sender is allowed to use any
+ * `/dashboard <module>` subcommand. The entire `/dashboard` group is
+ * restricted to the bot's resolved `allowedUsers`, matching `/botconfig`;
+ * help / stub / unknown subcommands MUST go through this check before they
+ * can produce any output.
+ *
+ * Why a dedicated helper instead of inlining the lookup in command dispatch:
+ *  - Command entry and card-callback paths must share the same admin model.
+ *    If one path treats only allowedUsers[0] as privileged while another
+ *    accepts all allowedUsers, `/dashboard` drifts away from `/botconfig`.
+ *  - Empty allowedUsers deliberately fails closed. Other botmux commands may
+ *    have open-mode fallbacks, but dashboard exposes operational controls.
+ */
+import { resolveDashboardAdminOpenIds, } from '../../dashboard/dashboard-admins.js';
+/**
+ * Decide whether `message.senderId` is a per-bot dashboard admin.
+ *
+ * Per-bot admin gate:
+ *  - Each `/dashboard` invocation is scoped to the bot that received it.
+ *  - Any resolved `allowedUsers` entry can operate, matching `/botconfig`.
+ *  - Empty `allowedUsers` still fails closed; dashboard is never opened by
+ *    botmux's generic open-mode `canOperate` fallback.
+ */
+export async function ensureDashboardOwner(message, larkAppId, deps = {}) {
+    if (!larkAppId)
+        return { ok: false, reason: 'no_dashboard_admin' };
+    const admins = resolveDashboardAdminOpenIds(larkAppId, deps);
+    if (admins.length === 0)
+        return { ok: false, reason: 'no_dashboard_admin' };
+    const senderId = message.senderId;
+    if (!senderId)
+        return { ok: false, reason: 'missing_sender' };
+    if (!admins.includes(senderId))
+        return { ok: false, reason: 'not_dashboard_admin' };
+    return { ok: true, adminOpenId: senderId };
+}
+//# sourceMappingURL=owner-gate.js.map

package/dist/core/dashboard-command/owner-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner-gate.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/owner-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EACL,4BAA4B,GAE7B,MAAM,qCAAqC,CAAC;AAY7C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAoB,EACpB,SAA6B,EAC7B,OAAiC,EAAE;IAEnC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/dist/core/dashboard-command/schedules.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `/dashboard schedules` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global schedules list, builds the Feishu list card, and DMs the invoking
+ * admin. Per-schedule actions are handled by card callbacks from the detail
+ * view.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type Locale } from '../../i18n/index.js';
+import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+export interface DashboardSchedulesCommandDeps {
+    createClient?: (larkAppId: string) => DaemonClient;
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    locale?: Locale;
+    nowMs?: () => number;
+}
+export declare function handleDashboardSchedules(_message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardSchedulesCommandDeps): Promise<void>;
+//# sourceMappingURL=schedules.d.ts.map

package/dist/core/dashboard-command/schedules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/schedules.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,MAAM,WAAW,6BAA6B;IAC5C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,6BAAkC,GAC3C,OAAO,CAAC,IAAI,CAAC,CAsDf"}

package/dist/core/dashboard-command/schedules.js

@@ -0,0 +1,47 @@
+/**
+ * `/dashboard schedules` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global schedules list, builds the Feishu list card, and DMs the invoking
+ * admin. Per-schedule actions are handled by card callbacks from the detail
+ * view.
+ */
+import { localeForBot, t } from '../../i18n/index.js';
+import { buildSchedulesCard } from '../../im/lark/schedules-card.js';
+import { createDaemonClientFor } from '../../daemon-internal-client-wrapper.js';
+import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
+export async function handleDashboardSchedules(_message, _args, rootId, _chatId, deps, larkAppId, adminOpenId, testDeps = {}) {
+    if (!larkAppId)
+        return;
+    const locale = testDeps.locale ?? localeForBot(larkAppId);
+    const client = (testDeps.createClient ?? createDaemonClientFor)(larkAppId);
+    let snap;
+    try {
+        // `/dashboard` is a global tool panel: show schedules from any bot while
+        // keeping write routing on the row owner.
+        snap = await client.request({ method: 'GET', path: '/__daemon/schedules-list?scope=global' });
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.schedules.list_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+        return;
+    }
+    if (snap.status !== 200) {
+        const reason = String(snap.body?.error ?? `http_${snap.status}`);
+        await deps.sessionReply(rootId, t('card.dashboard.schedules.list_failed', { reason }, locale), undefined, larkAppId);
+        return;
+    }
+    const tasks = (snap.body?.schedules) ?? [];
+    const nowMs = testDeps.nowMs ? testDeps.nowMs() : Date.now();
+    // Thread global scope through callbacks so refresh/page/detail/back/actions
+    // keep the global view and route writes to the row's true owner.
+    const cardJson = buildSchedulesCard(tasks, { invokerOpenId: adminOpenId, locale, page: 1, scope: 'global' }, nowMs);
+    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
+    try {
+        await sendUserMessage(larkAppId, adminOpenId, cardJson, 'interactive');
+        await deps.sessionReply(rootId, t('card.dashboard.schedules.dm_sent', undefined, locale), undefined, larkAppId);
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.schedules.dm_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+    }
+}
+//# sourceMappingURL=schedules.js.map

package/dist/core/dashboard-command/schedules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedules.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/schedules.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAYpF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAqB,EACrB,KAAa,EACb,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAA6B,EAC7B,WAAmB,EACnB,WAA0C,EAAE;IAE5C,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,yEAAyE;QACzE,0CAA0C;QAC1C,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uCAAuC,EAAE,CAAC,CAAC;IAChG,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,sCAAsC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACtF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAE,IAAI,CAAC,IAAY,EAAE,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,sCAAsC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAC7D,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,CAAE,IAAI,CAAC,IAA6D,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7D,4EAA4E;IAC5E,iEAAiE;IACjE,MAAM,QAAQ,GAAG,kBAAkB,CACjC,KAAK,EACL,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAChE,KAAK,CACN,CAAC;IAEF,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,kCAAkC,EAAE,SAAS,EAAE,MAAM,CAAC,EACxD,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACpF,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/dashboard-command/sessions.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `/dashboard sessions` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global sessions list, builds the Feishu list card, and DMs the invoking
+ * admin. Per-session actions are handled by card callbacks from the detail
+ * view.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type Locale } from '../../i18n/index.js';
+import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+/** Optional injection seam for tests. */
+export interface DashboardSessionsCommandDeps {
+    createClient?: (larkAppId: string) => DaemonClient;
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    locale?: Locale;
+    /** Override `Date.now()` so tests are deterministic. */
+    nowMs?: () => number;
+}
+export declare function handleDashboardSessions(_message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardSessionsCommandDeps): Promise<void>;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/core/dashboard-command/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAE9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,4BAA4B;IAC3C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,4BAAiC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAkDf"}

package/dist/core/dashboard-command/sessions.js

@@ -0,0 +1,43 @@
+/**
+ * `/dashboard sessions` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * global sessions list, builds the Feishu list card, and DMs the invoking
+ * admin. Per-session actions are handled by card callbacks from the detail
+ * view.
+ */
+import { localeForBot, t } from '../../i18n/index.js';
+import { buildSessionsCard } from '../../im/lark/sessions-card.js';
+import { createDaemonClientFor } from '../../daemon-internal-client-wrapper.js';
+import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
+export async function handleDashboardSessions(_message, _args, rootId, _chatId, deps, larkAppId, adminOpenId, testDeps = {}) {
+    if (!larkAppId)
+        return;
+    const locale = testDeps.locale ?? localeForBot(larkAppId);
+    const client = (testDeps.createClient ?? createDaemonClientFor)(larkAppId);
+    let snap;
+    try {
+        snap = await client.request({ method: 'GET', path: '/__daemon/sessions-list?scope=global' });
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.sessions.list_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+        return;
+    }
+    if (snap.status !== 200) {
+        await deps.sessionReply(rootId, t('card.dashboard.sessions.list_failed', { reason: `http_${snap.status}` }, locale), undefined, larkAppId);
+        return;
+    }
+    const rows = (snap.body?.sessions) ?? [];
+    const nowMs = testDeps.nowMs ? testDeps.nowMs() : Date.now();
+    // invokerOpenId = adminOpenId so subsequent clicks still pass the invoker lock.
+    const cardJson = buildSessionsCard(rows, { invokerOpenId: adminOpenId, locale, page: 1, scope: 'global' }, nowMs);
+    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
+    try {
+        await sendUserMessage(larkAppId, adminOpenId, cardJson, 'interactive');
+        await deps.sessionReply(rootId, t('card.dashboard.sessions.dm_sent', undefined, locale), undefined, larkAppId);
+    }
+    catch (e) {
+        await deps.sessionReply(rootId, t('card.dashboard.sessions.dm_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
+    }
+}
+//# sourceMappingURL=sessions.js.map

package/dist/core/dashboard-command/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAcpF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAqB,EACrB,KAAa,EACb,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAA6B,EAC7B,WAAmB,EACnB,WAAyC,EAAE;IAE3C,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACrF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,EACnF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAE,IAAI,CAAC,IAAiD,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7D,gFAAgF;IAChF,MAAM,QAAQ,GAAG,iBAAiB,CAChC,IAAI,EACJ,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAChE,KAAK,CACN,CAAC;IAEF,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,iCAAiC,EAAE,SAAS,EAAE,MAAM,CAAC,EACvD,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACnF,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/dashboard-command/settings.d.ts

@@ -0,0 +1,21 @@
+/**
+ * `/dashboard settings` sub-handler.
+ *
+ * The command-level admin gate has already passed. This handler fetches the
+ * live settings snapshot, projects it into a Feishu card, and DMs the invoking
+ * admin. The topic receives only a confirmation line. The card builder never
+ * receives sender union identity; `invokerOpenId` is the admin open_id used by
+ * callback invoker-lock.
+ */
+import type { LarkMessage } from '../../types.js';
+import { type Locale } from '../../i18n/index.js';
+import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
+import type { CommandHandlerDeps } from '../command-handler.js';
+/** Optional injection seam for tests. */
+export interface DashboardSettingsCommandDeps {
+    createClient?: (larkAppId: string) => DaemonClient;
+    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
+    locale?: Locale;
+}
+export declare function handleDashboardSettings(message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardSettingsCommandDeps): Promise<void>;
+//# sourceMappingURL=settings.d.ts.map

package/dist/core/dashboard-command/settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAKnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAC9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,4BAA4B;IAC3C,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,4BAAiC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA6Df"}