botmux 3.10.0 → 3.23.1

package/dist/dashboard/federated-group-core.js

@@ -1,236 +0,0 @@
-/**
- * Shared 拉群 orchestration for federation — used by BOTH the local team page
- * (`/api/team/federated-group`, dashboard token) and the hub endpoint a spoke
- * calls (`/api/federation/group`, syncToken). Keeps the create-or-delegate +
- * owner-invite logic in one place so the two entry points can't drift.
- *
- * Invite set (union_id, deduped) = the OPERATOR (whoever initiated; for a spoke
- * request it's the hub-derived spoke owner — NEVER client-supplied) + each
- * selected bot's owner. Bots are added by app_id (see docs/federation-design.md).
- */
-import { buildFederatedRoster } from '../services/federation-roster.js';
-import { listFederatedDeployments } from '../services/federation-store.js';
-import { DEFAULT_TEAM_ID } from '../services/team-store.js';
-import { recordTeamGroup } from '../services/team-groups-store.js';
-import { logger } from '../utils/logger.js';
-const HUB_TIMEOUT_MS = 8000;
-/** Thrown by fetchWithTimeout when a hub/spoke call doesn't answer in time. */
-export class HubTimeout extends Error {
-    constructor() { super('hub_timeout'); this.name = 'HubTimeout'; }
-}
-/** Wrap an outbound call with an abort timeout; surface a distinguishable timeout. */
-export async function fetchWithTimeout(fetcher, url, init = {}, ms = HUB_TIMEOUT_MS) {
-    const ac = new AbortController();
-    const timer = setTimeout(() => ac.abort(), ms);
-    try {
-        return await fetcher(url, { ...init, signal: ac.signal });
-    }
-    catch (e) {
-        if (e?.name === 'AbortError' || e instanceof HubTimeout)
-            throw new HubTimeout();
-        throw e;
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-/** Map an outbound call failure to a stable {status, error}. */
-export function hubError(e) {
-    return e instanceof HubTimeout ? { status: 504, error: 'hub_timeout' } : { status: 502, error: 'hub_unreachable' };
-}
-/**
- * Validate selection against the team's aggregated roster, collect invitees
- * (operator + selected bots' owners), then create locally if a local online bot
- * exists, else delegate to a federated deployment that owns a selected bot.
- * Returns a transport-agnostic {status, body}.
- */
-export async function orchestrateFederatedGroup(dataDir, args, deps) {
-    const { name, larkAppIds, operatorUnionId, requestId } = args;
-    const teamId = args.teamId ?? DEFAULT_TEAM_ID;
-    if (larkAppIds.length === 0)
-        return { status: 400, body: { ok: false, error: 'no_bots_selected' } };
-    const roster = buildFederatedRoster(dataDir, teamId, undefined, undefined, deps.live);
-    const byId = new Map(roster.bots.map(b => [b.larkAppId, b]));
-    const unknown = larkAppIds.filter(id => !byId.has(id));
-    if (unknown.length)
-        return { status: 400, body: { ok: false, error: 'unknown_bot', unknown } };
-    // Owner-in-group policy (示例用户): a bot should only join if its owner is in the
-    // group too (else it's "打黑工" — in a group its owner can't see). A REMOTE bot
-    // whose owner is unbound has no owner to pull → skip it. (LOCAL bots are covered
-    // by the operator, who is always pulled in.)
-    const skippedNoOwner = larkAppIds.filter(id => { const b = byId.get(id); return !!b && !b.deployment.local && !b.owner?.unionId; });
-    const eligible = larkAppIds.filter(id => !skippedNoOwner.includes(id));
-    if (eligible.length === 0)
-        return { status: 400, body: { ok: false, error: 'all_bots_skipped_no_owner', skippedNoOwner } };
-    // Invitees = operator (if bound) + each eligible bot's owner. union_id, deduped.
-    const ownerUnionIds = Array.from(new Set([
-        ...(operatorUnionId ? [operatorUnionId] : []),
-        ...eligible.map(id => byId.get(id)?.owner?.unionId).filter((u) => !!u),
-    ]));
-    const missingOperatorIdentity = !operatorUnionId;
-    const r = await deps.createTeamGroup({
-        name,
-        larkAppIds: eligible,
-        ownerUnionIds,
-        transferOwnerUnionId: operatorUnionId,
-    });
-    if (r.ok) {
-        // The creator bot adds the owners IT can reach; owners outside its app's
-        // visibility scope (Lark code 232024 — typically owners of OTHER deployments)
-        // come back as invalidOwnerUnionIds. Add each of those via THEIR OWN
-        // deployment's bot (which has them in scope) — hub→spoke delegate-add-owner.
-        const initiallyInvalidOwners = r.invalidOwnerUnionIds ?? [];
-        let invalidOwners = initiallyInvalidOwners;
-        if (invalidOwners.length > 0 && r.chatId) {
-            invalidOwners = await delegateAddOwners(dataDir, teamId, r.chatId, invalidOwners, eligible, requestId, deps.fetcher);
-        }
-        const completed = await completeLocalDeferredOwnerTransfer(r, initiallyInvalidOwners, invalidOwners, operatorUnionId, deps.transferTeamGroupOwner);
-        // 记录 team↔chatId 绑定 —— 看板团队筛选据此识别「dashboard 发起的协作群」。
-        if (r.chatId)
-            recordTeamGroup(dataDir, teamId, String(r.chatId));
-        return { status: 200, body: { ...completed, invalidOwnerUnionIds: invalidOwners, missingOperatorIdentity, skippedNoOwner } };
-    }
-    // No local online creator → delegate to a reachable deployment that owns a
-    // selected bot (hub→spoke). requestId makes each delegate idempotent.
-    if (r.error === 'no_online_daemon') {
-        const selected = new Set(eligible);
-        let lastErr = 'no_creator_available';
-        for (const dep of listFederatedDeployments(dataDir, teamId)) {
-            if (!dep.callbackUrl || !dep.delegationToken)
-                continue;
-            if (!dep.bots.some(b => selected.has(b.larkAppId)))
-                continue;
-            try {
-                const dr = await fetchWithTimeout(deps.fetcher, `${dep.callbackUrl}/api/federation/delegate-group`, {
-                    method: 'POST',
-                    headers: { 'content-type': 'application/json', authorization: `Bearer ${dep.delegationToken}` },
-                    body: JSON.stringify({ name, larkAppIds: eligible, ownerUnionIds, transferOwnerUnionId: operatorUnionId, requestId }),
-                });
-                const dj = await dr.json().catch(() => ({}));
-                if (dr.ok && dj?.ok && dj.chatId) {
-                    // The delegate creator added the owners IT could; owners it couldn't
-                    // reach (e.g. a THIRD deployment's owner) must still be added via their
-                    // own deployment — same post-create delegation as the local-create path.
-                    const initiallyInvalidOwners = dj.invalidOwnerUnionIds ?? [];
-                    let invalidOwners = initiallyInvalidOwners;
-                    if (invalidOwners.length > 0) {
-                        invalidOwners = await delegateAddOwners(dataDir, teamId, dj.chatId, invalidOwners, eligible, requestId, deps.fetcher);
-                    }
-                    const completed = await completeDelegatedDeferredOwnerTransfer(dep, dj, initiallyInvalidOwners, invalidOwners, operatorUnionId, requestId, deps.fetcher);
-                    recordTeamGroup(dataDir, teamId, String(dj.chatId));
-                    return { status: 200, body: { ...completed, invalidOwnerUnionIds: invalidOwners, delegatedTo: dep.name, missingOperatorIdentity, skippedNoOwner } };
-                }
-                lastErr = dj?.error || `hub_${dr.status}`;
-            }
-            catch (e) {
-                // Timeout ⇒ the delegate MAY have created the group (lost response). Stop —
-                // trying another deployment would risk a duplicate.
-                if (e instanceof HubTimeout)
-                    return { status: 504, body: { ok: false, error: 'delegation_timeout', delegatedTo: dep.name } };
-                lastErr = 'hub_unreachable'; // never connected → safe to try next
-            }
-        }
-        return { status: 502, body: { ok: false, error: lastErr } };
-    }
-    return { status: 502, body: r };
-}
-function deferredOperatorWasAdded(operatorUnionId, initiallyInvalidOwners, invalidOwners) {
-    return !!operatorUnionId
-        && initiallyInvalidOwners.includes(operatorUnionId)
-        && !invalidOwners.includes(operatorUnionId);
-}
-async function completeLocalDeferredOwnerTransfer(created, initiallyInvalidOwners, invalidOwners, operatorUnionId, transfer) {
-    if (!deferredOperatorWasAdded(operatorUnionId, initiallyInvalidOwners, invalidOwners))
-        return created;
-    if (!created.chatId || !created.creator || !transfer) {
-        return { ...created, ownerTransferredTo: null, transferError: 'owner_transfer_retry_unavailable' };
-    }
-    try {
-        return {
-            ...created,
-            ...await transfer({
-                creatorLarkAppId: created.creator,
-                chatId: created.chatId,
-                transferOwnerUnionId: operatorUnionId,
-            }),
-        };
-    }
-    catch {
-        return { ...created, ownerTransferredTo: null, transferError: 'owner_transfer_retry_failed' };
-    }
-}
-async function completeDelegatedDeferredOwnerTransfer(creatorDeployment, created, initiallyInvalidOwners, invalidOwners, operatorUnionId, requestId, fetcher) {
-    if (!deferredOperatorWasAdded(operatorUnionId, initiallyInvalidOwners, invalidOwners))
-        return created;
-    if (!creatorDeployment.callbackUrl || !creatorDeployment.delegationToken) {
-        return { ...created, ownerTransferredTo: null, transferError: 'owner_transfer_retry_unavailable' };
-    }
-    try {
-        const rr = await fetchWithTimeout(fetcher, `${creatorDeployment.callbackUrl}/api/federation/delegate-transfer-owner`, {
-            method: 'POST',
-            headers: { 'content-type': 'application/json', authorization: `Bearer ${creatorDeployment.delegationToken}` },
-            body: JSON.stringify({ requestId }),
-        });
-        const rj = await rr.json().catch(() => ({}));
-        if (!rr.ok || !rj?.ok) {
-            return { ...created, ownerTransferredTo: null, transferError: rj?.error || `owner_transfer_http_${rr.status}` };
-        }
-        return {
-            ...created,
-            ownerTransferredTo: rj.ownerTransferredTo ?? null,
-            transferError: rj.transferError ?? null,
-            notifyMessageId: rj.notifyMessageId ?? null,
-            notifyError: rj.notifyError ?? null,
-        };
-    }
-    catch (e) {
-        return { ...created, ownerTransferredTo: null, transferError: hubError(e).error };
-    }
-}
-/**
- * For owners the creator couldn't add (out of its app scope), delegate the add
- * to each owner's OWN deployment: that deployment has a selected bot already in
- * the chat (`via`) and the owner in its app's visibility scope. Returns the
- * owners still not added after delegation.
- */
-async function delegateAddOwners(dataDir, teamId, chatId, owners, selectedAppIds, requestId, fetcher) {
-    const selected = new Set(selectedAppIds);
-    const stillInvalid = new Set(owners);
-    for (const dep of listFederatedDeployments(dataDir, teamId)) {
-        if (!dep.callbackUrl || !dep.delegationToken)
-            continue;
-        // Offer EVERY bot of this dep already in the chat as a via candidate, not just
-        // the first: a single bot may lack write scope (99991672) or owner visibility
-        // (232024) and strand the owner. The spoke falls through them until one lands.
-        const viaCandidates = dep.bots.filter(b => selected.has(b.larkAppId)).map(b => b.larkAppId);
-        if (viaCandidates.length === 0)
-            continue;
-        const via = viaCandidates[0]; // first one doubles as viaLarkAppId for old-spoke back-compat
-        const mine = owners.filter(u => dep.ownerUnionId === u || dep.bots.some(b => b.ownerUnionId === u));
-        if (mine.length === 0)
-            continue;
-        try {
-            logger.info(`[federation] delegate-add-owner → ${dep.name} (${dep.callbackUrl}) via=${via} cands=${viaCandidates.length} owners=${mine.length}`);
-            const dr = await fetchWithTimeout(fetcher, `${dep.callbackUrl}/api/federation/delegate-add-owner`, {
-                method: 'POST',
-                headers: { 'content-type': 'application/json', authorization: `Bearer ${dep.delegationToken}` },
-                body: JSON.stringify({ chatId, ownerUnionIds: mine, viaLarkAppId: via, viaCandidates, requestId }),
-            });
-            const dj = await dr.json().catch(() => ({}));
-            logger.info(`[federation] delegate-add-owner ← ${dep.name}: status=${dr.status} ok=${dj?.ok} invalid=${JSON.stringify(dj?.invalidUserIds ?? 'all')}`);
-            if (dr.ok && dj?.ok) {
-                const inv = new Set(dj.invalidUserIds ?? mine);
-                for (const u of mine)
-                    if (!inv.has(u))
-                        stillInvalid.delete(u);
-            }
-        }
-        catch (e) {
-            logger.warn(`[federation] delegate-add-owner threw for ${dep.name} (${dep.callbackUrl}): ${e?.message ?? e}`);
-        }
-    }
-    if (stillInvalid.size)
-        logger.warn(`[federation] delegateAddOwners: ${stillInvalid.size} owner(s) still not added: ${[...stillInvalid].join(',')}`);
-    return [...stillInvalid];
-}
-//# sourceMappingURL=federated-group-core.js.map

package/dist/dashboard/federated-group-core.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"federated-group-core.js","sourceRoot":"","sources":["../../src/dashboard/federated-group-core.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,+EAA+E;AAC/E,MAAM,OAAO,UAAW,SAAQ,KAAK;IAAG,gBAAgB,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;CAAE;AAI3G,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB,EAAE,GAAW,EAAE,OAAoB,EAAE,EAAE,EAAE,GAAG,cAAc;IAC/G,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,IAAI,KAAK,YAAY,IAAI,CAAC,YAAY,UAAU;YAAE,MAAM,IAAI,UAAU,EAAE,CAAC;QAChF,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AACrH,CAAC;AAoDD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,IAA0B,EAC1B,IAA0B;IAE1B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACpG,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,CAAC;IAE/F,8EAA8E;IAC9E,6EAA6E;IAC7E,iFAAiF;IACjF,6CAA6C;IAC7C,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,cAAc,EAAE,EAAE,CAAC;IAE3H,iFAAiF;IACjF,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACvC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACpF,CAAC,CAAC,CAAC;IACJ,MAAM,uBAAuB,GAAG,CAAC,eAAe,CAAC;IAEjD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC;QACnC,IAAI;QACJ,UAAU,EAAE,QAAQ;QACpB,aAAa;QACb,oBAAoB,EAAE,eAAe;KACtC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,yEAAyE;QACzE,8EAA8E;QAC9E,qEAAqE;QACrE,6EAA6E;QAC7E,MAAM,sBAAsB,GAAG,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC;QAC5D,IAAI,aAAa,GAAG,sBAAsB,CAAC;QAC3C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACzC,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,kCAAkC,CACxD,CAAC,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,CAAC,sBAAsB,CACvF,CAAC;QACF,qDAAqD;QACrD,IAAI,CAAC,CAAC,MAAM;YAAE,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,uBAAuB,EAAE,cAAc,EAAE,EAAE,CAAC;IAC/H,CAAC;IAED,2EAA2E;IAC3E,sEAAsE;IACtE,IAAI,CAAC,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,OAAO,GAAG,sBAAsB,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,eAAe;gBAAE,SAAS;YACvD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAAE,SAAS;YAC7D,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,gCAAgC,EAAE;oBAClG,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,eAAe,EAAE,EAAE;oBAC/F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC;iBACtH,CAAC,CAAC;gBACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAU,CAAA,CAAC,CAAC;gBACpD,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;oBACjC,qEAAqE;oBACrE,wEAAwE;oBACxE,yEAAyE;oBACzE,MAAM,sBAAsB,GAAa,EAAE,CAAC,oBAAoB,IAAI,EAAE,CAAC;oBACvE,IAAI,aAAa,GAAG,sBAAsB,CAAC;oBAC3C,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC7B,aAAa,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxH,CAAC;oBACD,MAAM,SAAS,GAAG,MAAM,sCAAsC,CAC5D,GAAG,EAAE,EAAE,EAAE,sBAAsB,EAAE,aAAa,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CACzF,CAAC;oBACF,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;oBACpD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,SAAS,EAAE,oBAAoB,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,uBAAuB,EAAE,cAAc,EAAE,EAAE,CAAC;gBACtJ,CAAC;gBACD,OAAO,GAAG,EAAE,EAAE,KAAK,IAAI,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;YAC5C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,4EAA4E;gBAC5E,oDAAoD;gBACpD,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7H,OAAO,GAAG,iBAAiB,CAAC,CAAC,qCAAqC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,wBAAwB,CAC/B,eAAmC,EACnC,sBAAgC,EAChC,aAAuB;IAEvB,OAAO,CAAC,CAAC,eAAe;WACnB,sBAAsB,CAAC,QAAQ,CAAC,eAAe,CAAC;WAChD,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,kCAAkC,CAC/C,OAA8B,EAC9B,sBAAgC,EAChC,aAAuB,EACvB,eAAmC,EACnC,QAAwD;IAExD,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,sBAAsB,EAAE,aAAa,CAAC;QAAE,OAAO,OAAO,CAAC;IACtG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,kCAAkC,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,CAAC;QACH,OAAO;YACL,GAAG,OAAO;YACV,GAAG,MAAM,QAAQ,CAAC;gBAChB,gBAAgB,EAAE,OAAO,CAAC,OAAO;gBACjC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,oBAAoB,EAAE,eAAe;aACtC,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,6BAA6B,EAAE,CAAC;IAChG,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sCAAsC,CACnD,iBAAqE,EACrE,OAA8B,EAC9B,sBAAgC,EAChC,aAAuB,EACvB,eAAmC,EACnC,SAAiB,EACjB,OAAgB;IAEhB,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,sBAAsB,EAAE,aAAa,CAAC;QAAE,OAAO,OAAO,CAAC;IACtG,IAAI,CAAC,iBAAiB,CAAC,WAAW,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,CAAC;QACzE,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,kCAAkC,EAAE,CAAC;IACrG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,WAAW,yCAAyC,EAAE;YACpH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,iBAAiB,CAAC,eAAe,EAAE,EAAE;YAC7G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAU,CAAA,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;QAClH,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,IAAI,IAAI;YACjD,aAAa,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;YACvC,eAAe,EAAE,EAAE,CAAC,eAAe,IAAI,IAAI;YAC3C,WAAW,EAAE,EAAE,CAAC,WAAW,IAAI,IAAI;SACpC,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IACpF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EAAE,MAAc,EAAE,MAAc,EAC/C,MAAgB,EAAE,cAAwB,EAAE,SAAiB,EAAE,OAAgB;IAE/E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,MAAM,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,eAAe;YAAE,SAAS;QACvD,+EAA+E;QAC/E,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACzC,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,8DAA8D;QAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,SAAS,GAAG,UAAU,aAAa,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACjJ,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,WAAW,oCAAoC,EAAE;gBACjG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,eAAe,EAAE,EAAE;gBAC/F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;aACnG,CAAC,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAU,CAAA,CAAC,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,qCAAqC,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC,MAAM,OAAO,EAAE,EAAE,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;YACtJ,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;gBACpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAS,EAAE,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;gBACvD,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,6CAA6C,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,MAAM,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,YAAY,CAAC,IAAI,8BAA8B,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpJ,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;AAC3B,CAAC"}

package/dist/dashboard/federation-api.d.ts

@@ -1,43 +0,0 @@
-/**
- * Federation HUB endpoints. Cross-deployment, so mounted BEFORE the dashboard's
- * `?t=` token gate (like webhook/team routes) — they authenticate by their OWN
- * credentials instead:
- *   - POST /api/federation/join   → an invite code (single-use admission)
- *   - POST /api/federation/sync   → a syncToken (per-deployment bearer)
- *   - GET  /api/federation/roster → a syncToken
- *
- * A spoke deployment registers once with an invite, gets a long-lived syncToken,
- * then pushes bots + pulls the aggregated roster with it. See docs/federation-design.md.
- */
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type LiveBot } from '../services/team-roster.js';
-import { type Fetcher, type TeamGroupCreateResult, type TeamGroupOwnerTransferResult } from './federated-group-core.js';
-export interface FederationApiDeps {
-    dataDir?: string;
-    fetcher?: Fetcher;
-    /** Live daemon-registry bots (authoritative over bots-info.json) for the
-     *  delegate-group local-bot guard. */
-    liveBots?: () => LiveBot[];
-    /** Injected by dashboard.ts — used when a HUB delegates 拉群 to THIS spoke
-     *  (we create the chat with one of OUR local online bots as creator). */
-    createTeamGroup?: (args: {
-        name: string;
-        larkAppIds: string[];
-        ownerUnionIds?: string[];
-        transferOwnerUnionId?: string;
-    }) => Promise<TeamGroupCreateResult>;
-    /** Complete a pending transfer through the daemon that originally created
-     *  the chat. Used locally and by delegate-transfer-owner. */
-    transferTeamGroupOwner?: (args: {
-        creatorLarkAppId: string;
-        chatId: string;
-        transferOwnerUnionId: string;
-    }) => Promise<TeamGroupOwnerTransferResult>;
-    /** Add owners to an existing chat via one of OUR local bots (defaults to
-     *  ensure-client + addUsersToChatByUnionId). Test seam. Returns the rejected ids. */
-    addOwners?: (viaLarkAppId: string, chatId: string, ownerUnionIds: string[]) => Promise<{
-        invalidUserIds: string[];
-    }>;
-}
-export declare function handleFederationApi(req: IncomingMessage, res: ServerResponse, url: URL, deps?: FederationApiDeps): Promise<boolean>;
-//# sourceMappingURL=federation-api.d.ts.map

package/dist/dashboard/federation-api.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"federation-api.d.ts","sourceRoot":"","sources":["../../src/dashboard/federation-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAmBjE,OAAO,EAAmB,KAAK,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAE3E,OAAO,EAEL,KAAK,OAAO,EACZ,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EAClC,MAAM,2BAA2B,CAAC;AA+FnC,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;0CACsC;IACtC,QAAQ,CAAC,EAAE,MAAM,OAAO,EAAE,CAAC;IAC3B;6EACyE;IACzE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC5J;iEAC6D;IAC7D,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE;QAC9B,gBAAgB,EAAE,MAAM,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;QACf,oBAAoB,EAAE,MAAM,CAAC;KAC9B,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5C;yFACqF;IACrF,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACtH;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,OAAO,CAAC,CA6TlB"}