botmux 3.10.0 → 3.23.1

package/dist/dashboard/history-senders.d.ts

@@ -1,40 +0,0 @@
-export interface HistoryMessage {
-    messageId: string;
-    senderId: string;
-    senderType: string;
-    /** Server-provided display name (`with_sender_name=true` read APIs). Used as
-     *  the fallback when local rosters / contact profiles can't name the sender. */
-    senderName?: string;
-    msgType: string;
-    content: string;
-    createTime?: number;
-}
-export interface HistoryHumanProfile {
-    name: string;
-    avatarUrl?: string;
-}
-export interface HistoryBotMember {
-    openId: string;
-    displayName?: string;
-    name?: string;
-    larkAppId?: string;
-}
-export interface HistoryBotInfo {
-    larkAppId: string;
-    botOpenId?: string | null;
-    botName?: string | null;
-    botAvatarUrl?: string | null;
-}
-/**
- * Attach sender presentation data without changing the Lark message order or
- * content. Lark history may identify an app sender either by its stable
- * `cli_*` app id or an observer-scoped `ou_*` open_id. Match the stable id
- * directly when present; otherwise use the chat-member projection, then enrich
- * it with bots-info avatar metadata.
- */
-export declare function enrichHistorySenders(messages: HistoryMessage[], humans: ReadonlyMap<string, HistoryHumanProfile | null>, botMembers: readonly HistoryBotMember[], botInfos: readonly HistoryBotInfo[]): Array<HistoryMessage & {
-    senderName?: string;
-    senderAvatar?: string;
-    senderBotAppId?: string;
-}>;
-//# sourceMappingURL=history-senders.d.ts.map

package/dist/dashboard/history-senders.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"history-senders.d.ts","sourceRoot":"","sources":["../../src/dashboard/history-senders.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB;oFACgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EAAE,EAC1B,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAC,EACvD,UAAU,EAAE,SAAS,gBAAgB,EAAE,EACvC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAClC,KAAK,CAAC,cAAc,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+CjG"}

package/dist/dashboard/history-senders.js

@@ -1,60 +0,0 @@
-/**
- * Attach sender presentation data without changing the Lark message order or
- * content. Lark history may identify an app sender either by its stable
- * `cli_*` app id or an observer-scoped `ou_*` open_id. Match the stable id
- * directly when present; otherwise use the chat-member projection, then enrich
- * it with bots-info avatar metadata.
- */
-export function enrichHistorySenders(messages, humans, botMembers, botInfos) {
-    const infoByAppId = new Map(botInfos.filter(info => info.larkAppId).map(info => [info.larkAppId, info]));
-    const infoByName = new Map();
-    const duplicateNames = new Set();
-    for (const info of botInfos) {
-        const name = String(info.botName ?? '').trim();
-        if (!name)
-            continue;
-        if (infoByName.has(name))
-            duplicateNames.add(name);
-        else
-            infoByName.set(name, info);
-    }
-    for (const name of duplicateNames)
-        infoByName.delete(name);
-    const botByOpenId = new Map();
-    for (const member of botMembers) {
-        if (member.openId)
-            botByOpenId.set(member.openId, member);
-    }
-    return messages.map(message => {
-        if (message.senderType === 'user') {
-            const profile = humans.get(message.senderId);
-            return profile
-                ? { ...message, senderName: profile.name, senderAvatar: profile.avatarUrl }
-                : message;
-        }
-        if (message.senderType !== 'app' && message.senderType !== 'bot')
-            return message;
-        const member = botByOpenId.get(message.senderId);
-        const directInfo = infoByAppId.get(message.senderId);
-        if (!member && directInfo) {
-            const name = String(directInfo.botName ?? '').trim();
-            return {
-                ...message,
-                ...(name ? { senderName: name } : {}),
-                ...(directInfo.botAvatarUrl ? { senderAvatar: directInfo.botAvatarUrl } : {}),
-                senderBotAppId: directInfo.larkAppId,
-            };
-        }
-        if (!member)
-            return message;
-        const name = String(member.displayName || member.name || '').trim();
-        const info = (member.larkAppId && infoByAppId.get(member.larkAppId)) || (name && infoByName.get(name)) || undefined;
-        return {
-            ...message,
-            ...(name ? { senderName: name } : {}),
-            ...(info?.botAvatarUrl ? { senderAvatar: info.botAvatarUrl } : {}),
-            ...(member.larkAppId || info?.larkAppId ? { senderBotAppId: member.larkAppId || info?.larkAppId } : {}),
-        };
-    });
-}
-//# sourceMappingURL=history-senders.js.map

package/dist/dashboard/history-senders.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"history-senders.js","sourceRoot":"","sources":["../../src/dashboard/history-senders.ts"],"names":[],"mappings":"AA+BA;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA0B,EAC1B,MAAuD,EACvD,UAAuC,EACvC,QAAmC;IAEnC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;;YAC9C,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc;QAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,MAAM;YAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAC5B,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO;gBACZ,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE;gBAC3E,CAAC,CAAC,OAAO,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK;YAAE,OAAO,OAAO,CAAC;QAEjF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO;gBACL,GAAG,OAAO;gBACV,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,cAAc,EAAE,UAAU,CAAC,SAAS;aACrC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC;QACpH,OAAO;YACL,GAAG,OAAO;YACV,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/dashboard/http.d.ts

@@ -1,4 +0,0 @@
-import type { ServerResponse } from 'node:http';
-/** Write a JSON HTTP response without coupling callers to a feature module. */
-export declare function jsonRes(res: ServerResponse, status: number, body: unknown): void;
-//# sourceMappingURL=http.d.ts.map

package/dist/dashboard/http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/dashboard/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,+EAA+E;AAC/E,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF"}

package/dist/dashboard/http.js

@@ -1,6 +0,0 @@
-/** Write a JSON HTTP response without coupling callers to a feature module. */
-export function jsonRes(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json' });
-    res.end(JSON.stringify(body));
-}
-//# sourceMappingURL=http.js.map

package/dist/dashboard/http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/dashboard/http.ts"],"names":[],"mappings":"AAEA,+EAA+E;AAC/E,MAAM,UAAU,OAAO,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACxE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/dashboard/operator-selector.d.ts

@@ -1,20 +0,0 @@
-export interface DaemonInfoForPick {
-    larkAppId: string;
-    resolvedAllowedUsers: string[];
-}
-export interface CreatorPick {
-    /** larkAppId of the bot that should issue the chat-create call. */
-    creatorLarkAppId: string;
-    /** open_ids in the creator bot's app scope to invite (may be empty). */
-    userOpenIds: string[];
-}
-/**
- * From the user's selected larkAppIds, pick the bot to use as chat creator.
- *
- * Preference: first selected bot that's online AND has a non-empty allowlist
- * (so the operator can be auto-invited). Falls back to the first selected
- * online bot regardless of allowlist (auto-invite skipped — frontend surfaces
- * the warn branch). Returns null if none of the selected bots are online.
- */
-export declare function pickCreatorForGroup(selectedLarkAppIds: string[], getOnlineDaemon: (larkAppId: string) => DaemonInfoForPick | undefined): CreatorPick | null;
-//# sourceMappingURL=operator-selector.d.ts.map

package/dist/dashboard/operator-selector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-selector.d.ts","sourceRoot":"","sources":["../../src/dashboard/operator-selector.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,mEAAmE;IACnE,gBAAgB,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,kBAAkB,EAAE,MAAM,EAAE,EAC5B,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,iBAAiB,GAAG,SAAS,GACpE,WAAW,GAAG,IAAI,CAapB"}

package/dist/dashboard/operator-selector.js

@@ -1,39 +0,0 @@
-// src/dashboard/operator-selector.ts
-//
-// Helper for the "Create new group" flow: picks which of the user-selected
-// bots should issue the Lark create-chat call. Feishu makes the calling bot
-// the implicit first member + owner, so the creator MUST be one the user
-// explicitly chose — otherwise we'd silently add an extra bot to the chat.
-//
-// We also surface the operator's open_id under that bot's scope (from the
-// daemon's pre-resolved allowedUsers) so the route can auto-invite + transfer
-// ownership in the same request. open_ids are app-scoped, so the open_id and
-// the creator daemon must come from the SAME bot.
-//
-// Isolated from dashboard.ts (which is a pm2 entry script) so it stays unit-
-// testable.
-/**
- * From the user's selected larkAppIds, pick the bot to use as chat creator.
- *
- * Preference: first selected bot that's online AND has a non-empty allowlist
- * (so the operator can be auto-invited). Falls back to the first selected
- * online bot regardless of allowlist (auto-invite skipped — frontend surfaces
- * the warn branch). Returns null if none of the selected bots are online.
- */
-export function pickCreatorForGroup(selectedLarkAppIds, getOnlineDaemon) {
-    const onlineSelected = [];
-    for (const id of selectedLarkAppIds) {
-        const d = getOnlineDaemon(id);
-        if (d)
-            onlineSelected.push(d);
-    }
-    if (onlineSelected.length === 0)
-        return null;
-    const withUsers = onlineSelected.find(d => d.resolvedAllowedUsers.length > 0);
-    const chosen = withUsers ?? onlineSelected[0];
-    return {
-        creatorLarkAppId: chosen.larkAppId,
-        userOpenIds: [...chosen.resolvedAllowedUsers],
-    };
-}
-//# sourceMappingURL=operator-selector.js.map

package/dist/dashboard/operator-selector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"operator-selector.js","sourceRoot":"","sources":["../../src/dashboard/operator-selector.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,6EAA6E;AAC7E,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,YAAY;AAcZ;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,kBAA4B,EAC5B,eAAqE;IAErE,MAAM,cAAc,GAAwB,EAAE,CAAC;IAC/C,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,SAAS,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,SAAS;QAClC,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,oBAAoB,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/dashboard/public-redact.d.ts

@@ -1,32 +0,0 @@
-/** Project a `/api/groups` chats array down to the public, board-only fields
- *  for anonymous visitors. Explicit ALLOW-LIST (fail-closed): a chat field that
- *  isn't named here never reaches an anon visitor, so management/config metadata
- *  doesn't ride along. Dropped: `description`, `ownerId` (group config/PII),
- *  `hasRole` (leaks the role/persona existence matrix even though the roles
- *  page is token-gated), `oncallChat` (carries workingDir), `error`,
- *  `firstSeenAt`. Kept: chat `chatId/name/chatMode/avatar` (name-map + group
- *  头像，与公开看板已暴露的群名同等敏感度) and
- *  `memberBots[].larkAppId/botName/inChat` (roster). Returns a new array; never
- *  mutates the input. */
-export declare function redactGroupsForPublic(chats: unknown[]): unknown[];
-/** Drop `prompt` (business instructions) and `workingDir` (repo/customer path)
- *  from `/api/schedules` rows for anonymous visitors. Returns a new array; never
- *  mutates the input. Name / timing / status fields are preserved so the
- *  read-only schedules view still renders. */
-export declare function redactSchedulesForPublic(schedules: unknown[]): unknown[];
-/** Branch names often carry issue/customer identifiers. `riffAccessUrl` is the
- * Riff AIO Sandbox **write** capability — a bearer URL whose unique subdomain is
- * itself the credential (riff-backend.ts:hashUrlForLog), so an anonymous read-only
- * visitor must never receive it (they'd gain write access to the sandbox). Read
- * access on the dashboard goes through the local worker log terminal (webPort),
- * which stays; only the sandbox write URL is stripped. `/api/sessions` and
- * `/events` are both public-read surfaces, so keep one non-mutating projection
- * for their shared session row shape. */
-export declare function redactSessionForPublic(session: unknown): unknown;
-export declare function redactSessionsForPublic(sessions: unknown[]): unknown[];
-/** Apply the same branch-name policy to session rows delivered over SSE. */
-export declare function redactSessionEventForPublic(type: string, body: unknown): unknown;
-/** 匿名只读面板不展示外部 Codex 活动、目标 Bot 或投递运行态,也不展示过载
- *  告警的目标 Bot / 收件人提示。 */
-export declare function redactSettingsForPublic(settings: unknown): unknown;
-//# sourceMappingURL=public-redact.d.ts.map

package/dist/dashboard/public-redact.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"public-redact.d.ts","sourceRoot":"","sources":["../../src/dashboard/public-redact.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;yBASyB;AACzB,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAoBjE;AAED;;;8CAG8C;AAC9C,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAOxE;AA2BD;;;;;;;yCAOyC;AACzC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGhE;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAGtE;AAED,4EAA4E;AAC5E,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAkBhF;AAED;yBACyB;AACzB,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAKlE"}

package/dist/dashboard/public-redact.js

@@ -1,137 +0,0 @@
-// src/dashboard/public-redact.ts
-//
-// Anonymous (tokenless) shaping of read-only dashboard payloads served when
-// `config.dashboard.publicReadOnly` is on. Pure + side-effect free so they can
-// be unit-tested without standing up the dashboard server (dashboard.ts starts
-// an HTTP listener on import).
-//
-// The public "watch work" board only needs NAMES + status. Read endpoints can
-// embed filesystem, business, or operator-only data that an anonymous visitor
-// must not see, so each sensitive payload gets a redactor here:
-//   - /api/groups   → memberBots[].oncallChat = { chatId, workingDir }
-//   - /api/schedules → row carries `prompt` (business instructions) + `workingDir`
-//   - /api/settings → notifier carries recipient / delivery diagnostics
-//   - /api/sessions + /events → session rows/patches may carry `gitBranch`
-//     and private message preview fields
-// The group/schedule `workingDir`s are repo / customer-project paths; stripping
-// them keeps the board functional (name-map, timing, status) while not leaking
-// bound dirs — and keeps the "/api/bots oncall config is private" boundary honest.
-/** Project a `/api/groups` chats array down to the public, board-only fields
- *  for anonymous visitors. Explicit ALLOW-LIST (fail-closed): a chat field that
- *  isn't named here never reaches an anon visitor, so management/config metadata
- *  doesn't ride along. Dropped: `description`, `ownerId` (group config/PII),
- *  `hasRole` (leaks the role/persona existence matrix even though the roles
- *  page is token-gated), `oncallChat` (carries workingDir), `error`,
- *  `firstSeenAt`. Kept: chat `chatId/name/chatMode/avatar` (name-map + group
- *  头像，与公开看板已暴露的群名同等敏感度) and
- *  `memberBots[].larkAppId/botName/inChat` (roster). Returns a new array; never
- *  mutates the input. */
-export function redactGroupsForPublic(chats) {
-    if (!Array.isArray(chats))
-        return chats;
-    return chats.map((c) => {
-        if (!c || typeof c !== 'object')
-            return c;
-        const chat = c;
-        const out = {
-            chatId: chat.chatId,
-            name: chat.name,
-            chatMode: chat.chatMode,
-            avatar: chat.avatar,
-        };
-        if (Array.isArray(chat.memberBots)) {
-            out.memberBots = chat.memberBots.map((mb) => {
-                if (!mb || typeof mb !== 'object')
-                    return mb;
-                const m = mb;
-                return { larkAppId: m.larkAppId, botName: m.botName, inChat: m.inChat };
-            });
-        }
-        return out;
-    });
-}
-/** Drop `prompt` (business instructions) and `workingDir` (repo/customer path)
- *  from `/api/schedules` rows for anonymous visitors. Returns a new array; never
- *  mutates the input. Name / timing / status fields are preserved so the
- *  read-only schedules view still renders. */
-export function redactSchedulesForPublic(schedules) {
-    if (!Array.isArray(schedules))
-        return schedules;
-    return schedules.map((s) => {
-        if (!s || typeof s !== 'object')
-            return s;
-        const { prompt: _prompt, workingDir: _workingDir, ...rest } = s;
-        return rest;
-    });
-}
-const PRIVATE_SESSION_FIELDS = new Set([
-    'gitBranch',
-    'riffAccessUrl',
-    // Concrete distribution identity is operator configuration, not anonymous
-    // watch-board data. Public rows retain protocol-level `cliId`, which is
-    // sufficient for the existing fallback label.
-    'runtimeId',
-    'runtimeDisplayName',
-    'previewUserText',
-    'previewBotText',
-    'previewUserFullText',
-    'previewBotFullText',
-    'previewUserAt',
-    'previewBotAt',
-    'previewBotState',
-]);
-function omitPrivateSessionFields(record) {
-    const out = {};
-    for (const [key, value] of Object.entries(record)) {
-        if (!PRIVATE_SESSION_FIELDS.has(key) && !key.startsWith('preview'))
-            out[key] = value;
-    }
-    return out;
-}
-/** Branch names often carry issue/customer identifiers. `riffAccessUrl` is the
- * Riff AIO Sandbox **write** capability — a bearer URL whose unique subdomain is
- * itself the credential (riff-backend.ts:hashUrlForLog), so an anonymous read-only
- * visitor must never receive it (they'd gain write access to the sandbox). Read
- * access on the dashboard goes through the local worker log terminal (webPort),
- * which stays; only the sandbox write URL is stripped. `/api/sessions` and
- * `/events` are both public-read surfaces, so keep one non-mutating projection
- * for their shared session row shape. */
-export function redactSessionForPublic(session) {
-    if (!session || typeof session !== 'object' || Array.isArray(session))
-        return session;
-    return omitPrivateSessionFields(session);
-}
-export function redactSessionsForPublic(sessions) {
-    if (!Array.isArray(sessions))
-        return sessions;
-    return sessions.map(redactSessionForPublic);
-}
-/** Apply the same branch-name policy to session rows delivered over SSE. */
-export function redactSessionEventForPublic(type, body) {
-    if (!body || typeof body !== 'object' || Array.isArray(body))
-        return body;
-    const eventBody = body;
-    if (type === 'session.spawned') {
-        return { ...eventBody, session: redactSessionForPublic(eventBody.session) };
-    }
-    if (type === 'session.update'
-        && eventBody.patch
-        && typeof eventBody.patch === 'object'
-        && !Array.isArray(eventBody.patch)) {
-        return {
-            ...eventBody,
-            patch: omitPrivateSessionFields(eventBody.patch),
-        };
-    }
-    return body;
-}
-/** 匿名只读面板不展示外部 Codex 活动、目标 Bot 或投递运行态,也不展示过载
- *  告警的目标 Bot / 收件人提示。 */
-export function redactSettingsForPublic(settings) {
-    if (!settings || typeof settings !== 'object' || Array.isArray(settings))
-        return settings;
-    const source = settings;
-    const { codexNotifier: _privateNotifier, hostOverloadAlert: _privateOverload, ...publicSettings } = source;
-    return publicSettings;
-}
-//# sourceMappingURL=public-redact.js.map

package/dist/dashboard/public-redact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public-redact.js","sourceRoot":"","sources":["../../src/dashboard/public-redact.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,+BAA+B;AAC/B,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,gEAAgE;AAChE,uEAAuE;AACvE,mFAAmF;AACnF,wEAAwE;AACxE,2EAA2E;AAC3E,yCAAyC;AACzC,gFAAgF;AAChF,+EAA+E;AAC/E,mFAAmF;AAEnF;;;;;;;;;yBASyB;AACzB,MAAM,UAAU,qBAAqB,CAAC,KAAgB;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,MAAM,GAAG,GAA4B;YACnC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC1C,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,OAAO,EAAE,CAAC;gBAC7C,MAAM,CAAC,GAAG,EAA6B,CAAC;gBACxC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;8CAG8C;AAC9C,MAAM,UAAU,wBAAwB,CAAC,SAAoB;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,CAA4B,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,WAAW;IACX,eAAe;IACf,0EAA0E;IAC1E,wEAAwE;IACxE,8CAA8C;IAC9C,WAAW;IACX,oBAAoB;IACpB,iBAAiB;IACjB,gBAAgB;IAChB,qBAAqB;IACrB,oBAAoB;IACpB,eAAe;IACf,cAAc;IACd,iBAAiB;CAClB,CAAC,CAAC;AAEH,SAAS,wBAAwB,CAAC,MAA+B;IAC/D,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;yCAOyC;AACzC,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,OAAO,wBAAwB,CAAC,OAAkC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAmB;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B,CAAC,IAAY,EAAE,IAAa;IACrE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,SAAS,GAAG,IAA+B,CAAC;IAClD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,sBAAsB,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,IACE,IAAI,KAAK,gBAAgB;WACtB,SAAS,CAAC,KAAK;WACf,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;WACnC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAClC,CAAC;QACD,OAAO;YACL,GAAG,SAAS;YACZ,KAAK,EAAE,wBAAwB,CAAC,SAAS,CAAC,KAAgC,CAAC;SAC5E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;yBACyB;AACzB,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACvD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1F,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC;IAC3G,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/dashboard/registry.d.ts

@@ -1,56 +0,0 @@
-export interface DaemonInfo {
-    larkAppId: string;
-    botName: string;
-    /** CLI adapter id from bots.json, e.g. codex / claude-code / traex. */
-    cliId?: string;
-    /** Lark app avatar URL (from /bot/v3/info); absent until the open_id probe lands. */
-    botAvatarUrl?: string;
-    botIndex: number;
-    ipcPort: number;
-    pid: number;
-    startedAt: number;
-    /** Random per-process audience for authenticated Workflow v3 mutations. */
-    bootInstanceId?: string;
-    /** Auth protocol advertised atomically with the boot identity. */
-    workflowIpcProtocol?: string;
-    lastHeartbeat: number;
-    /**
-     * open_ids of users the bot's allowedUsers list was resolved to (post-email
-     * resolution). Used by dashboard's "Create new group" flow to pick a creator
-     * bot whose scope contains the operator. Emails are stripped — only resolved
-     * open_ids appear here. May be empty for bots with no allowlist configured.
-     */
-    resolvedAllowedUsers?: string[];
-}
-export type RegistryListener = (online: DaemonInfo[]) => void;
-/**
- * Stable roster fingerprint used to tell a real roster change (bot added /
- * removed / renamed / re-indexed) apart from the 15s no-op poll and the 30s
- * heartbeat rewrites. Only fields the dashboard's Bot 配置 list keys off of are
- * included — a pure heartbeat bump (lastHeartbeat) must NOT change it, or the
- * `/events` bots.changed emitter would fire every poll. Order-independent.
- */
-export declare function botsRosterSignature(online: DaemonInfo[]): string;
-export interface DaemonRegistryOptions {
-    refreshIntervalMs?: number;
-}
-/**
- * Watches the dashboard-daemons descriptor directory and exposes the
- * currently-online daemons (filtered by 90s heartbeat staleness).
- */
-export declare class DaemonRegistry {
-    private dir;
-    private items;
-    private listeners;
-    private watcher?;
-    private poller?;
-    private refreshIntervalMs;
-    constructor(dir: string, options?: DaemonRegistryOptions);
-    start(): Promise<void>;
-    stop(): void;
-    list(): DaemonInfo[];
-    getByAppId(id: string): DaemonInfo | undefined;
-    on(fn: RegistryListener): () => void;
-    private refresh;
-}
-//# sourceMappingURL=registry.d.ts.map

package/dist/dashboard/registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/dashboard/registry.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAKD,MAAM,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,IAAI,CAAC;AAE9D;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAKhE;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,qBAAa,cAAc;IAOb,OAAO,CAAC,GAAG;IANvB,OAAO,CAAC,KAAK,CAAiC;IAC9C,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,OAAO,CAAC,CAAY;IAC5B,OAAO,CAAC,MAAM,CAAC,CAAiC;IAChD,OAAO,CAAC,iBAAiB,CAAS;gBAEd,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B;IAI9D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAc5B,IAAI,IAAI,IAAI;IASZ,IAAI,IAAI,UAAU,EAAE;IAKpB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAM9C,EAAE,CAAC,EAAE,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAKpC,OAAO,CAAC,OAAO;CAmBhB"}

package/dist/dashboard/registry.js

@@ -1,99 +0,0 @@
-import { readdirSync, readFileSync, watch } from 'node:fs';
-import { join } from 'node:path';
-const STALE_MS = 90_000;
-const DEFAULT_REFRESH_MS = 15_000;
-/**
- * Stable roster fingerprint used to tell a real roster change (bot added /
- * removed / renamed / re-indexed) apart from the 15s no-op poll and the 30s
- * heartbeat rewrites. Only fields the dashboard's Bot 配置 list keys off of are
- * included — a pure heartbeat bump (lastHeartbeat) must NOT change it, or the
- * `/events` bots.changed emitter would fire every poll. Order-independent.
- */
-export function botsRosterSignature(online) {
-    return [...online]
-        .map(d => `${d.larkAppId}:${d.botName ?? ''}:${d.cliId ?? ''}:${d.botIndex}`)
-        .sort()
-        .join('|');
-}
-/**
- * Watches the dashboard-daemons descriptor directory and exposes the
- * currently-online daemons (filtered by 90s heartbeat staleness).
- */
-export class DaemonRegistry {
-    dir;
-    items = new Map();
-    listeners = new Set();
-    watcher;
-    poller;
-    refreshIntervalMs;
-    constructor(dir, options = {}) {
-        this.dir = dir;
-        this.refreshIntervalMs = options.refreshIntervalMs ?? DEFAULT_REFRESH_MS;
-    }
-    async start() {
-        this.refresh();
-        if (!this.poller && this.refreshIntervalMs > 0) {
-            this.poller = setInterval(() => this.refresh(), this.refreshIntervalMs);
-            this.poller.unref?.();
-        }
-        try {
-            this.watcher = watch(this.dir, { persistent: true }, () => this.refresh());
-        }
-        catch {
-            // Directory may not exist yet — caller is expected to ensure it exists
-            // or the dashboard runs with an empty registry until the daemon writes.
-        }
-    }
-    stop() {
-        this.watcher?.close();
-        this.watcher = undefined;
-        if (this.poller) {
-            clearInterval(this.poller);
-            this.poller = undefined;
-        }
-    }
-    list() {
-        const now = Date.now();
-        return [...this.items.values()].filter(d => now - d.lastHeartbeat <= STALE_MS);
-    }
-    getByAppId(id) {
-        const d = this.items.get(id);
-        if (!d)
-            return undefined;
-        return Date.now() - d.lastHeartbeat > STALE_MS ? undefined : d;
-    }
-    on(fn) {
-        this.listeners.add(fn);
-        return () => this.listeners.delete(fn);
-    }
-    refresh() {
-        let names = [];
-        try {
-            names = readdirSync(this.dir);
-        }
-        catch {
-            return;
-        }
-        const next = new Map();
-        for (const n of names) {
-            if (!n.endsWith('.json'))
-                continue;
-            try {
-                const d = JSON.parse(readFileSync(join(this.dir, n), 'utf8'));
-                next.set(d.larkAppId, d);
-            }
-            catch {
-                // Skip malformed / partially-written files
-            }
-        }
-        this.items = next;
-        const online = this.list();
-        for (const fn of this.listeners) {
-            try {
-                fn(online);
-            }
-            catch { /* swallow */ }
-        }
-    }
-}
-//# sourceMappingURL=registry.js.map

package/dist/dashboard/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/dashboard/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAkB,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA2BjC,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAIlC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,OAAO,CAAC,GAAG,MAAM,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;SAC5E,IAAI,EAAE;SACN,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAMD;;;GAGG;AACH,MAAM,OAAO,cAAc;IAOL;IANZ,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IACtC,SAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,OAAO,CAAa;IACpB,MAAM,CAAkC;IACxC,iBAAiB,CAAS;IAElC,YAAoB,GAAW,EAAE,UAAiC,EAAE;QAAhD,QAAG,GAAH,GAAG,CAAQ;QAC7B,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,kBAAkB,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,iBAAiB,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,wEAAwE;QAC1E,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC;IACjF,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,EAAE,CAAC,EAAoB;QACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IAEO,OAAO;QACb,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACxD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YACnC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAe,CAAC;gBAC5E,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,EAAE,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF"}

package/dist/dashboard/resource-monitor-service.d.ts

@@ -1,56 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type CliMarkerInfo, type ResourceDaemonSeed, type ResourceSessionSeed } from '../core/resource-monitor/attribution.js';
-import type { ProcfsSample, ResourceCurrentSnapshot, ResourceHistorySnapshot } from '../core/resource-monitor/types.js';
-export interface ResourceMonitorDeps {
-    intervalMs?: number;
-    topSessionLimit?: number;
-    sessionHistoryMs?: number;
-    aggregateHistoryMs?: number;
-    topGraceMs?: number;
-    listSessions: () => ResourceSessionSeed[];
-    listDaemons: () => ResourceDaemonSeed[];
-    listBotmuxPids?: () => number[];
-    sampleProcfs?: (nowMs: number) => ProcfsSample;
-    readCliMarkers?: () => Map<number, CliMarkerInfo>;
-    nowMs?: () => number;
-}
-export interface ResourceMonitorService {
-    start(): void;
-    stop(): void;
-    sampleOnce(): void;
-    current(): ResourceCurrentSnapshot;
-    history(range: '1h' | '3h' | '24h'): ResourceHistorySnapshot;
-}
-export interface ResourceMonitorDashboardSessionRow {
-    sessionId?: unknown;
-    larkAppId?: unknown;
-    botName?: unknown;
-    title?: unknown;
-    status?: unknown;
-    spawnedAt?: unknown;
-    lastMessageAt?: unknown;
-    agentAttention?: {
-        kind?: unknown;
-        reason?: unknown;
-        at?: unknown;
-    } | null;
-    workerPid?: unknown;
-    adoptCliPid?: unknown;
-}
-export interface ResourceMonitorDashboardDaemonRow {
-    larkAppId?: unknown;
-    botName?: unknown;
-    pid?: unknown;
-}
-export interface ResourceMonitorBotConfigRow {
-    larkAppId?: unknown;
-    displayName?: unknown;
-    name?: unknown;
-}
-export declare function toResourceMonitorSessionSeed(row: ResourceMonitorDashboardSessionRow, botNameOverride?: string): ResourceSessionSeed;
-export declare function toResourceMonitorDaemonSeed(row: ResourceMonitorDashboardDaemonRow): ResourceDaemonSeed;
-export declare function buildResourceMonitorDaemonSeeds(configs: ResourceMonitorBotConfigRow[], onlineRows: ResourceMonitorDashboardDaemonRow[]): ResourceDaemonSeed[];
-export declare function handleResourceMonitorApi(req: IncomingMessage, res: ServerResponse, url: URL, service: ResourceMonitorService): Promise<boolean>;
-export declare function readCliPidMarkers(dataDir?: string): Map<number, CliMarkerInfo>;
-export declare function createResourceMonitorService(deps: ResourceMonitorDeps): ResourceMonitorService;
-//# sourceMappingURL=resource-monitor-service.d.ts.map

package/dist/dashboard/resource-monitor-service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource-monitor-service.d.ts","sourceRoot":"","sources":["../../src/dashboard/resource-monitor-service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGjE,OAAO,EAEL,KAAK,aAAa,EAElB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,yCAAyC,CAAC;AAKjD,OAAO,KAAK,EAGV,YAAY,EAEZ,uBAAuB,EACvB,uBAAuB,EAIxB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,mBAAmB,EAAE,CAAC;IAC1C,WAAW,EAAE,MAAM,kBAAkB,EAAE,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,MAAM,EAAE,CAAC;IAChC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,YAAY,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAClD,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,IAAI,IAAI,CAAC;IACd,IAAI,IAAI,IAAI,CAAC;IACb,UAAU,IAAI,IAAI,CAAC;IACnB,OAAO,IAAI,uBAAuB,CAAC;IACnC,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,uBAAuB,CAAC;CAC9D;AAED,MAAM,WAAW,kCAAkC;IACjD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,EAAE,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,iCAAiC;IAChD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,kCAAkC,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,mBAAmB,CA0BnI;AAED,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,iCAAiC,GAAG,kBAAkB,CAUtG;AAMD,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,2BAA2B,EAAE,EACtC,UAAU,EAAE,iCAAiC,EAAE,GAC9C,kBAAkB,EAAE,CAoBtB;AAWD,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAUlB;AAwHD,wBAAgB,iBAAiB,CAAC,OAAO,SAAyB,GAAG,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAmB9F;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,mBAAmB,GAAG,sBAAsB,CAqP9F"}