botmux 3.10.0 → 3.23.1

package/dist/platform/device.d.ts

@@ -1,77 +0,0 @@
-export declare const DEVICE_CREDENTIAL_SCHEMA_VERSION: 1;
-export interface DeviceCredentials {
-    schemaVersion: typeof DEVICE_CREDENTIAL_SCHEMA_VERSION;
-    /** HTTPS origin pinned when enrollment starts. */
-    issuer: string;
-    /** Short-lived signed bearer. Never expose outside the host process. */
-    accessToken: string;
-    /** Absolute access-token expiry supplied by the server, Unix epoch ms. */
-    accessExpiresAt: number;
-    /** Rotating opaque secret. Never expose outside the host process. */
-    refreshToken: string;
-    /** Absolute server-issued device expiry, represented as Unix epoch ms. */
-    deviceExp: number;
-    /** Local metadata only; ISO timestamp of the last atomic credential write. */
-    savedAt: string;
-    /**
-     * Durable idempotency key for an in-flight refresh rotation. A failed or
-     * interrupted request keeps this value so the next host process can replay
-     * the same server operation instead of reusing the old refresh as a new one.
-     */
-    pendingRefreshRequestId?: string;
-    /** Unix epoch ms when the current replay window began. */
-    pendingRefreshStartedAt?: number;
-    /** Ambiguous/unsafe refresh state: never send the stored refresh again. */
-    refreshRecoveryRequired?: true;
-}
-export type DeviceCredentialWriteInput = Pick<DeviceCredentials, 'issuer' | 'accessToken' | 'accessExpiresAt' | 'refreshToken' | 'deviceExp'> & {
-    pendingRefreshRequestId?: string;
-    pendingRefreshStartedAt?: number;
-    refreshRecoveryRequired?: true;
-};
-export type DevicePublicStatus = {
-    schemaVersion: typeof DEVICE_CREDENTIAL_SCHEMA_VERSION;
-    enrolled: false;
-} | {
-    schemaVersion: typeof DEVICE_CREDENTIAL_SCHEMA_VERSION;
-    enrolled: true;
-    issuer: string;
-    deviceExp: number;
-    savedAt: string;
-};
-export interface DeviceCredentialPathOptions {
-    /** Test/embedding seam. Defaults to os.homedir(). */
-    homeDir?: string;
-    /** Exact file override. Takes precedence over homeDir. */
-    filePath?: string;
-}
-export interface WriteDeviceCredentialsOptions extends DeviceCredentialPathOptions {
-    /** Test seam; defaults to the current wall clock. */
-    now?: () => Date;
-}
-export declare class DeviceCredentialError extends Error {
-    readonly code: 'invalid_issuer' | 'issuer_mismatch' | 'unsafe_file' | 'invalid_file';
-    constructor(message: string, code: 'invalid_issuer' | 'issuer_mismatch' | 'unsafe_file' | 'invalid_file');
-}
-export declare function deviceCredentialsPath(options?: DeviceCredentialPathOptions): string;
-/**
- * Normalize and validate the credential issuer.
- *
- * Production enrollment is HTTPS-only. Loopback HTTP is accepted solely for
- * local development/self-tests; credentials are never sent over cleartext to
- * a non-loopback host. Paths, query strings, fragments and userinfo are
- * rejected so every request stays pinned to one unambiguous origin.
- */
-export declare function normalizeDeviceIssuer(raw: string): string;
-export declare function readDeviceCredentials(options?: DeviceCredentialPathOptions): DeviceCredentials | null;
-/**
- * Atomically replace the device credential pair with exact 0600 permissions.
- * If a credential already exists, its issuer is immutable until explicit
- * logout. This prevents a changed env/platform binding from exfiltrating the
- * rotating refresh token to another origin.
- */
-export declare function writeDeviceCredentials(input: DeviceCredentialWriteInput, options?: WriteDeviceCredentialsOptions): DeviceCredentials;
-/** Delete only the local credential file. Server-side revocation is separate. */
-export declare function clearDeviceCredentials(options?: DeviceCredentialPathOptions): boolean;
-export declare function readDevicePublicStatus(options?: DeviceCredentialPathOptions): DevicePublicStatus;
-//# sourceMappingURL=device.d.ts.map

package/dist/platform/device.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../src/platform/device.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,0DAA0D;IAC1D,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,iBAAiB,EACjB,QAAQ,GAAG,aAAa,GAAG,iBAAiB,GAAG,cAAc,GAAG,WAAW,CAC5E,GAAG;IACF,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IACE,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,QAAQ,EAAE,KAAK,CAAC;CACjB,GACD;IACE,aAAa,EAAE,OAAO,gCAAgC,CAAC;IACvD,QAAQ,EAAE,IAAI,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,WAAW,2BAA2B;IAC1C,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,6BAA8B,SAAQ,2BAA2B;IAChF,qDAAqD;IACrD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAG5C,QAAQ,CAAC,IAAI,EACT,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,cAAc;gBALlB,OAAO,EAAE,MAAM,EACN,IAAI,EACT,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,cAAc;CAKrB;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,2BAAgC,GAAG,MAAM,CAGvF;AAOD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBzD;AA2ED,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,2BAAgC,GACxC,iBAAiB,GAAG,IAAI,CAQ1B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,6BAAkC,GAC1C,iBAAiB,CA6DnB;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,2BAAgC,GAAG,OAAO,CAOzF;AAED,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,2BAAgC,GACxC,kBAAkB,CAYpB"}

package/dist/platform/device.js

@@ -1,212 +0,0 @@
-/**
- * Host-only desktop device credential storage.
- *
- * Device credentials are deliberately kept separate from platform.json: the
- * machine bearer identifies the daemon, while this file identifies a person on
- * a desktop device.  Callers must never serialize this object to stdout or a
- * renderer process; use {@link readDevicePublicStatus} for display purposes.
- */
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { readSecureHostFileSync, unlinkSecureHostFileSync, UnsafeHostAuthorityFileError, writeSecureHostFileSync, } from './secure-host-file.js';
-import { deviceCredentialFile } from './device-paths.js';
-export const DEVICE_CREDENTIAL_SCHEMA_VERSION = 1;
-export class DeviceCredentialError extends Error {
-    code;
-    constructor(message, code) {
-        super(message);
-        this.code = code;
-        this.name = 'DeviceCredentialError';
-    }
-}
-export function deviceCredentialsPath(options = {}) {
-    return options.filePath
-        ?? deviceCredentialFile(join(options.homeDir ?? homedir(), '.botmux'));
-}
-function isLoopbackHostname(hostname) {
-    const normalized = hostname.toLowerCase().replace(/^\[|\]$/g, '');
-    return normalized === 'localhost' || normalized === '127.0.0.1' || normalized === '::1';
-}
-/**
- * Normalize and validate the credential issuer.
- *
- * Production enrollment is HTTPS-only. Loopback HTTP is accepted solely for
- * local development/self-tests; credentials are never sent over cleartext to
- * a non-loopback host. Paths, query strings, fragments and userinfo are
- * rejected so every request stays pinned to one unambiguous origin.
- */
-export function normalizeDeviceIssuer(raw) {
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        throw new DeviceCredentialError('设备平台地址无效', 'invalid_issuer');
-    }
-    if (url.username || url.password || url.pathname !== '/' || url.search || url.hash) {
-        throw new DeviceCredentialError('设备平台地址必须是纯 origin，不能包含路径、查询、片段或用户信息', 'invalid_issuer');
-    }
-    const secure = url.protocol === 'https:';
-    const localDevelopment = url.protocol === 'http:' && isLoopbackHostname(url.hostname);
-    if (!secure && !localDevelopment) {
-        throw new DeviceCredentialError('设备注册只允许 HTTPS（本机 loopback 开发除外）', 'invalid_issuer');
-    }
-    return url.origin;
-}
-function asCredentialFileError(error) {
-    if (error instanceof UnsafeHostAuthorityFileError) {
-        throw new DeviceCredentialError(error.message, 'unsafe_file');
-    }
-    throw error;
-}
-function parseDeviceCredentials(raw) {
-    let value;
-    try {
-        value = JSON.parse(raw);
-    }
-    catch {
-        throw new DeviceCredentialError('device.json 已损坏或不是有效 JSON', 'invalid_file');
-    }
-    if (!value || typeof value !== 'object' || Array.isArray(value)) {
-        throw new DeviceCredentialError('device.json 结构无效', 'invalid_file');
-    }
-    const record = value;
-    if (record.schemaVersion !== DEVICE_CREDENTIAL_SCHEMA_VERSION
-        || typeof record.issuer !== 'string'
-        || typeof record.accessToken !== 'string'
-        || !record.accessToken
-        || typeof record.accessExpiresAt !== 'number'
-        || !Number.isSafeInteger(record.accessExpiresAt)
-        || record.accessExpiresAt <= 0
-        || typeof record.refreshToken !== 'string'
-        || !record.refreshToken
-        || typeof record.deviceExp !== 'number'
-        || !Number.isSafeInteger(record.deviceExp)
-        || record.deviceExp <= 0
-        || record.accessExpiresAt > record.deviceExp
-        || typeof record.savedAt !== 'string'
-        || !record.savedAt
-        || !Number.isFinite(Date.parse(record.savedAt))
-        || new Date(record.savedAt).toISOString() !== record.savedAt
-        || (record.pendingRefreshRequestId !== undefined && (typeof record.pendingRefreshRequestId !== 'string'
-            || !/^[a-zA-Z0-9._:-]{16,128}$/.test(record.pendingRefreshRequestId)))
-        || (record.pendingRefreshStartedAt !== undefined && (typeof record.pendingRefreshStartedAt !== 'number'
-            || !Number.isSafeInteger(record.pendingRefreshStartedAt)
-            || record.pendingRefreshStartedAt <= 0))
-        || ((record.pendingRefreshRequestId === undefined) !== (record.pendingRefreshStartedAt === undefined))
-        || (record.refreshRecoveryRequired !== undefined && record.refreshRecoveryRequired !== true)
-        || (record.refreshRecoveryRequired === true && record.pendingRefreshRequestId !== undefined)) {
-        throw new DeviceCredentialError('device.json 缺少必要字段或字段类型无效', 'invalid_file');
-    }
-    const issuer = normalizeDeviceIssuer(record.issuer);
-    if (issuer !== record.issuer) {
-        throw new DeviceCredentialError('device.json 中的 issuer 不是规范化 origin', 'invalid_file');
-    }
-    return {
-        schemaVersion: DEVICE_CREDENTIAL_SCHEMA_VERSION,
-        issuer,
-        accessToken: record.accessToken,
-        accessExpiresAt: record.accessExpiresAt,
-        refreshToken: record.refreshToken,
-        deviceExp: record.deviceExp,
-        savedAt: record.savedAt,
-        ...(typeof record.pendingRefreshRequestId === 'string'
-            ? { pendingRefreshRequestId: record.pendingRefreshRequestId }
-            : {}),
-        ...(typeof record.pendingRefreshStartedAt === 'number'
-            ? { pendingRefreshStartedAt: record.pendingRefreshStartedAt }
-            : {}),
-        ...(record.refreshRecoveryRequired === true ? { refreshRecoveryRequired: true } : {}),
-    };
-}
-export function readDeviceCredentials(options = {}) {
-    const filePath = deviceCredentialsPath(options);
-    try {
-        const raw = readSecureHostFileSync(filePath);
-        return raw === null ? null : parseDeviceCredentials(raw);
-    }
-    catch (error) {
-        asCredentialFileError(error);
-    }
-}
-/**
- * Atomically replace the device credential pair with exact 0600 permissions.
- * If a credential already exists, its issuer is immutable until explicit
- * logout. This prevents a changed env/platform binding from exfiltrating the
- * rotating refresh token to another origin.
- */
-export function writeDeviceCredentials(input, options = {}) {
-    const issuer = normalizeDeviceIssuer(input.issuer);
-    if (!input.accessToken
-        || !Number.isSafeInteger(input.accessExpiresAt)
-        || input.accessExpiresAt <= 0
-        || !input.refreshToken
-        || !Number.isSafeInteger(input.deviceExp)
-        || input.deviceExp <= 0
-        || input.accessExpiresAt > input.deviceExp) {
-        throw new DeviceCredentialError('平台返回的设备凭证字段无效', 'invalid_file');
-    }
-    if (input.pendingRefreshRequestId !== undefined
-        && !/^[a-zA-Z0-9._:-]{16,128}$/.test(input.pendingRefreshRequestId)) {
-        throw new DeviceCredentialError('设备续期 request ID 无效', 'invalid_file');
-    }
-    if ((input.pendingRefreshRequestId === undefined) !== (input.pendingRefreshStartedAt === undefined)
-        || (input.pendingRefreshStartedAt !== undefined && (!Number.isSafeInteger(input.pendingRefreshStartedAt)
-            || input.pendingRefreshStartedAt <= 0))
-        || (input.refreshRecoveryRequired !== undefined && input.refreshRecoveryRequired !== true)
-        || (input.refreshRecoveryRequired === true && input.pendingRefreshRequestId !== undefined)) {
-        throw new DeviceCredentialError('设备续期恢复状态无效', 'invalid_file');
-    }
-    const filePath = deviceCredentialsPath(options);
-    const current = readDeviceCredentials(options);
-    if (current && current.issuer !== issuer) {
-        throw new DeviceCredentialError('已有设备凭证已固定到另一个平台；请先执行 botmux device logout，再重新注册', 'issuer_mismatch');
-    }
-    const credential = {
-        schemaVersion: DEVICE_CREDENTIAL_SCHEMA_VERSION,
-        issuer,
-        accessToken: input.accessToken,
-        accessExpiresAt: input.accessExpiresAt,
-        refreshToken: input.refreshToken,
-        deviceExp: input.deviceExp,
-        savedAt: (options.now ?? (() => new Date()))().toISOString(),
-        ...(input.pendingRefreshRequestId
-            ? { pendingRefreshRequestId: input.pendingRefreshRequestId }
-            : {}),
-        ...(input.pendingRefreshStartedAt !== undefined
-            ? { pendingRefreshStartedAt: input.pendingRefreshStartedAt }
-            : {}),
-        ...(input.refreshRecoveryRequired === true ? { refreshRecoveryRequired: true } : {}),
-    };
-    try {
-        writeSecureHostFileSync(filePath, `${JSON.stringify(credential, null, 2)}\n`);
-    }
-    catch (error) {
-        asCredentialFileError(error);
-    }
-    return credential;
-}
-/** Delete only the local credential file. Server-side revocation is separate. */
-export function clearDeviceCredentials(options = {}) {
-    const filePath = deviceCredentialsPath(options);
-    try {
-        return unlinkSecureHostFileSync(filePath);
-    }
-    catch (error) {
-        asCredentialFileError(error);
-    }
-}
-export function readDevicePublicStatus(options = {}) {
-    const credential = readDeviceCredentials(options);
-    if (!credential) {
-        return { schemaVersion: DEVICE_CREDENTIAL_SCHEMA_VERSION, enrolled: false };
-    }
-    return {
-        schemaVersion: DEVICE_CREDENTIAL_SCHEMA_VERSION,
-        enrolled: true,
-        issuer: credential.issuer,
-        deviceExp: credential.deviceExp,
-        savedAt: credential.savedAt,
-    };
-}
-//# sourceMappingURL=device.js.map

package/dist/platform/device.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"device.js","sourceRoot":"","sources":["../../src/platform/device.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzD,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AA8D3D,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAGnC;IAFX,YACE,OAAe,EACN,IAIS;QAElB,KAAK,CAAC,OAAO,CAAC,CAAC;QANN,SAAI,GAAJ,IAAI,CAIK;QAGlB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAuC,EAAE;IAC7E,OAAO,OAAO,CAAC,QAAQ;WAClB,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,CAAC;AAC1F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACnF,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,EAAE,gBAAgB,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACzC,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,EAAE,gBAAgB,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,4BAA4B,EAAE,CAAC;QAClD,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW;IACzC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,qBAAqB,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IACE,MAAM,CAAC,aAAa,KAAK,gCAAgC;WACtD,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;WACjC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;WACtC,CAAC,MAAM,CAAC,WAAW;WACnB,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;WAC1C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC;WAC7C,MAAM,CAAC,eAAe,IAAI,CAAC;WAC3B,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;WACvC,CAAC,MAAM,CAAC,YAAY;WACpB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;WACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;WACvC,MAAM,CAAC,SAAS,IAAI,CAAC;WACrB,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,SAAS;WACzC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;WAClC,CAAC,MAAM,CAAC,OAAO;WACf,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;WAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO;WACzD,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,CAClD,OAAO,MAAM,CAAC,uBAAuB,KAAK,QAAQ;eAC/C,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CACrE,CAAC;WACC,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,CAClD,OAAO,MAAM,CAAC,uBAAuB,KAAK,QAAQ;eAC/C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,uBAAuB,CAAC;eACrD,MAAM,CAAC,uBAAuB,IAAI,CAAC,CACvC,CAAC;WACC,CAAC,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC;WACnG,CAAC,MAAM,CAAC,uBAAuB,KAAK,SAAS,IAAI,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC;WACzF,CAAC,MAAM,CAAC,uBAAuB,KAAK,IAAI,IAAI,MAAM,CAAC,uBAAuB,KAAK,SAAS,CAAC,EAC5F,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,2BAA2B,EAAE,cAAc,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,qBAAqB,CAAC,oCAAoC,EAAE,cAAc,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,aAAa,EAAE,gCAAgC;QAC/C,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,OAAO,MAAM,CAAC,uBAAuB,KAAK,QAAQ;YACpD,CAAC,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,uBAAuB,KAAK,QAAQ;YACpD,CAAC,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,EAAE;YAC7D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAuC,EAAE;IAEzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAC7C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAiC,EACjC,UAAyC,EAAE;IAE3C,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,IACE,CAAC,KAAK,CAAC,WAAW;WACf,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC;WAC5C,KAAK,CAAC,eAAe,IAAI,CAAC;WAC1B,CAAC,KAAK,CAAC,YAAY;WACnB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;WACtC,KAAK,CAAC,SAAS,IAAI,CAAC;WACpB,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,SAAS,EAC1C,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IACD,IACE,KAAK,CAAC,uBAAuB,KAAK,SAAS;WACxC,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IACxE,CAAC;IACD,IACE,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS,CAAC;WAC5F,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS,IAAI,CACjD,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,uBAAuB,CAAC;eACjD,KAAK,CAAC,uBAAuB,IAAI,CAAC,CACtC,CAAC;WACC,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS,IAAI,KAAK,CAAC,uBAAuB,KAAK,IAAI,CAAC;WACvF,CAAC,KAAK,CAAC,uBAAuB,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,CAAC,EAC1F,CAAC;QACD,MAAM,IAAI,qBAAqB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,qBAAqB,CAC7B,iDAAiD,EACjD,iBAAiB,CAClB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAsB;QACpC,aAAa,EAAE,gCAAgC;QAC/C,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE;QAC5D,GAAG,CAAC,KAAK,CAAC,uBAAuB;YAC/B,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;YAC7C,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE;YAC5D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9F,CAAC;IACF,IAAI,CAAC;QACH,uBAAuB,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,sBAAsB,CAAC,UAAuC,EAAE;IAC9E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAuC,EAAE;IAEzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,aAAa,EAAE,gCAAgC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO;QACL,aAAa,EAAE,gCAAgC;QAC/C,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,CAAC;AACJ,CAAC"}

package/dist/platform/host-command-context.d.ts

@@ -1,15 +0,0 @@
-export interface ManagedAgentHostCommandContextOptions {
-    env?: NodeJS.ProcessEnv;
-    dataDir?: string;
-    startPid?: number;
-}
-/**
- * Detect commands launched from a botmux-managed AI CLI rather than a trusted
- * host terminal. Environment hints cover detached/workflow launches; the
- * daemon-owned PID marker covers shells which scrub those hints. Child-provided
- * HOME/SESSION_DATA_DIR are deliberately ignored when resolving the authority
- * store. This is an early UX/consumption guard; OS credential isolation remains
- * the actual secret boundary.
- */
-export declare function isManagedAgentHostCommandContext(options?: ManagedAgentHostCommandContextOptions): boolean;
-//# sourceMappingURL=host-command-context.d.ts.map

package/dist/platform/host-command-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"host-command-context.d.ts","sourceRoot":"","sources":["../../src/platform/host-command-context.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,qCAAqC;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,GAAE,qCAA0C,GAClD,OAAO,CAWT"}

package/dist/platform/host-command-context.js

@@ -1,26 +0,0 @@
-import { homedir } from 'node:os';
-import { resolveBotmuxDataDir } from '../core/data-dir.js';
-import { resolveSessionContext } from '../core/session-marker.js';
-/**
- * Detect commands launched from a botmux-managed AI CLI rather than a trusted
- * host terminal. Environment hints cover detached/workflow launches; the
- * daemon-owned PID marker covers shells which scrub those hints. Child-provided
- * HOME/SESSION_DATA_DIR are deliberately ignored when resolving the authority
- * store. This is an early UX/consumption guard; OS credential isolation remains
- * the actual secret boundary.
- */
-export function isManagedAgentHostCommandContext(options = {}) {
-    const env = options.env ?? process.env;
-    if (env.BOTMUX_WORKFLOW === '1' || !!env.BOTMUX_SESSION_ID?.trim())
-        return true;
-    try {
-        const dataDir = options.dataDir
-            ?? resolveBotmuxDataDir({ env: {}, homeDir: homedir() });
-        return resolveSessionContext(dataDir, undefined, options.startPid ?? process.ppid) !== null;
-    }
-    catch {
-        // If the authority boundary cannot be evaluated, fail closed.
-        return true;
-    }
-}
-//# sourceMappingURL=host-command-context.js.map

package/dist/platform/host-command-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"host-command-context.js","sourceRoot":"","sources":["../../src/platform/host-command-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAQlE;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAiD,EAAE;IAEnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,GAAG,CAAC,eAAe,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;eAC1B,oBAAoB,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/platform/issue-client.d.ts

@@ -1,201 +0,0 @@
-/**
- * 平台 Issue Board 的 machine-auth 客户端（打 `/v1/machine/*`，Bearer = machineToken）。
- *
- * 平台侧入口见 platform 仓 `src/server/machine-issues-http.ts` / DESIGN-issue-board.md §三之二。
- * 只有五个端点：teams / issues(list) / claim / bind / status。创建、编辑、force-detach、
- * 归档是**人的决策**，只在平台 Web 上做，这里没有也不该有。
- *
- * 鉴权材料全部来自 `~/.botmux/platform.json`（[[platform/binding]]）：未绑定平台时所有调用
- * 直接返回 `{ ok:false, reason:'unbound' }`，调用方据此把整个 issue board 功能关掉。
- *
- * 错误分型是这层的重点——上层 outbox pump 要据此决定「退避重试」还是「就此打住」：
- *  - `network`  ：连不上/超时 → **必须重试**（daemon 离线期间状态照样变，回来要补上）
- *  - `conflict` ：平台返回 409（state_rev_conflict / stale_epoch / claim_expired…）
- *                 → 重新投影后再发，不是简单重试
- *  - `forbidden`：401/403（token 失效、解绑、machine_mismatch）→ **停手**，重试无意义
- *  - `server`   ：5xx → 退避重试（含平台 ByteDoc 降级的 503）
- */
-import { getJson, postJson } from './platform-http.js';
-import type { AttentionReason, IssueStatus } from '../services/issue-board-store.js';
-export interface PlatformIssueClaim {
-    claimId: string;
-    claimEpoch: number;
-    unionId: string;
-    name: string;
-    machineId: string;
-    localTaskRef?: string;
-    /** 本地任务的可读名（本仓传 issue 群的群名）。平台详情页优先显示它而不是 localTaskRef。 */
-    localTaskLabel?: string;
-    /** 本地任务深链（本仓传飞书群 applink）。平台只接受 https，非法值会被静默丢弃。 */
-    localTaskUrl?: string;
-    agent?: string;
-    repoLabel?: string;
-    claimedAt: number;
-    leaseExpiresAt: number;
-    bound: boolean;
-    lastSourceSeq: number;
-}
-export interface PlatformIssue {
-    _id: string;
-    teamId: string;
-    title: string;
-    body: string;
-    status: IssueStatus;
-    labels?: string[];
-    targetRepoId?: string;
-    targetRepoLabel?: string;
-    suggestedAssigneeUnionId?: string;
-    claim?: PlatformIssueClaim;
-    attentionSince?: number;
-    attentionReason?: AttentionReason;
-    createdBy: string;
-    createdByName: string;
-    createdAt: number;
-    updatedAt: number;
-    rev: number;
-    stateRev: number;
-    claimEpochCounter: number;
-}
-export interface PlatformIssueSections {
-    needsAttention: PlatformIssue[];
-    todo: PlatformIssue[];
-    inProgress: PlatformIssue[];
-    inReview: PlatformIssue[];
-    done: PlatformIssue[];
-}
-export type IssueClientFailure = {
-    ok: false;
-    reason: 'unbound';
-} | {
-    ok: false;
-    reason: 'network';
-    error: string;
-} | {
-    ok: false;
-    reason: 'conflict';
-    status: number;
-    error: string;
-} | {
-    ok: false;
-    reason: 'forbidden';
-    status: number;
-    error: string;
-}
-/** 其余 4xx（400 invalid / 404 not_found …）：请求本身有问题，重发多少次都一样。 */
- | {
-    ok: false;
-    reason: 'client';
-    status: number;
-    error: string;
-} | {
-    ok: false;
-    reason: 'server';
-    status: number;
-    error: string;
-};
-export type IssueClientResult<T> = {
-    ok: true;
-    value: T;
-} | IssueClientFailure;
-/**
- * 该失败是否值得退避后重投。
- *
- * 只有 `network` 与**真正的 5xx** 值得：4xx 全都是「再发一次结果不变」——401/403 是凭证/
- * 归属问题，409 要先重新投影再发（不是盲重试），400/404 是请求本身错了。把它们混进可重试
- * 一类，pump 会对着一个永远不会成功的请求指数退避到天荒地老，日志里还只看得到"在重试"。
- */
-export declare function isRetriable(f: IssueClientFailure): boolean;
-/**
- * 这次失败是否**永远**不会成功——发件箱据此把行标 fatal，彻底停止重投。
- *
- * 注意它**不是** `!isRetriable`，那两个的补集差着两类，混用会把好行判死：
- *  - `conflict`（409）：是竞争不是错误。上层先重新对账再重发，对账本身可能因为网络问题
- *    没做成，此时判死等于把一条完全正常的回写扔了。留给下一轮。
- *  - `unbound`：本机当前没绑平台。绑回来之后这条行照样该发，判死就再也发不出去了。
- *
- * 剩下的两类才是真死：`forbidden`（401/403，凭证失效 / machine_mismatch / claim 被 revoke）
- * 与 `client`（400 参数错 / 404 issue 被删或归档）。对它们退避重投，就是每 5 分钟朝一个
- * 永远不会变的死端点打一发，同时 `/issue status` 上那句「N 条回写没发出去」永不清零。
- */
-export declare function isPermanentFailure(f: IssueClientFailure): boolean;
-export interface IssueClientOptions {
-    /** 覆盖平台地址与凭证（测试用；缺省读 ~/.botmux/platform.json）。 */
-    binding?: {
-        platformUrl: string;
-        machineToken: string;
-        machineId: string;
-    } | null;
-    timeoutMs?: number;
-    /** 注入 HTTP 实现（测试用）。 */
-    http?: {
-        get: typeof getJson;
-        post: typeof postJson;
-    };
-}
-/** 本机 owner 所属的平台团队。注意：日常判断「本机在不在团队里」应读本地
- *  `platform-team-sync.json`（[[platform-team-store]]），这个接口是不依赖 team-sync
- *  是否已收敛的权威兜底。 */
-export declare function fetchTeams(opts?: IssueClientOptions): Promise<IssueClientResult<Array<{
-    teamId: string;
-    teamName: string;
-}>>>;
-export declare function fetchIssues(teamId: string, opts?: IssueClientOptions): Promise<IssueClientResult<PlatformIssueSections>>;
-/**
- * 按 id 单查一条 issue。
- *
- * 平台**没有**「按 id 单查」的机器接口，只能从分段列表里捞——这是唯一的实现方式，所以收口
- * 在这里，别让每个调用方各抄一遍（回写的 409 对账、领取确认、交付都要用它）。
- *
- * 返回 null 有两种含义且**无法区分**：拉列表失败，或 issue 不在活跃分段里（已归档）。
- * 调用方一律按「无法判定」处理，不要把 null 当成「平台上没有/不是我的」——那会让
- * 409 对账做出相反的决定。
- */
-export declare function findIssueById(teamId: string, issueId: string, opts?: IssueClientOptions): Promise<PlatformIssue | null>;
-/**
- * 领取。`claimId` 必须是**高熵随机**（`crypto.randomBytes(16).toString('hex')`），
- * 绝不能由 issueId 派生——平台的幂等分支现在会连 machineId/unionId 一起校验，派生键在
- * 多机场景下会直接撞 409 `already_claimed`（早失败，好过静默把别人的 claim 当成自己的）。
- *
- * `machineId` 不用传：平台以 token 为准（传了且不一致会 403 machine_mismatch）。
- */
-export declare function claimIssue(issueId: string, args: {
-    claimId: string;
-    agent?: string;
-    repoLabel?: string;
-    expectedStateRev: number;
-}, opts?: IssueClientOptions): Promise<IssueClientResult<{
-    claim: PlatformIssueClaim;
-    issue: PlatformIssue;
-}>>;
-/**
- * 绑定本地任务。`localTaskRef` = `<anchorId>::<larkAppId>`（见 [[issue-board-store]] 的
- * `buildLocalTaskRef`）。
- *
- * `localTaskLabel` / `localTaskUrl` 是**纯展示**的可选项：前者给人看（群名），后者是点进去
- * 的深链。平台只接受 https 深链，其余静默丢弃且**不会**让 bind 失败——展示字段不该有能力
- * 弄砸一次真实绑定。
- */
-export declare function bindIssue(issueId: string, args: {
-    claimId: string;
-    localTaskRef: string;
-    expectedStateRev: number;
-    localTaskLabel?: string;
-    localTaskUrl?: string;
-}, opts?: IssueClientOptions): Promise<IssueClientResult<{
-    issue: PlatformIssue;
-}>>;
-/**
- * 状态回写。幂等只认 `sourceSeq`（每 binding 单调、串行发送），所以同一条 outbox 行重发
- * 是安全的：平台见到 `sourceSeq <= lastSourceSeq` 直接回当前态、零副作用。
- */
-export declare function writeIssueStatus(issueId: string, args: {
-    claimId: string;
-    claimEpoch: number;
-    sourceSeq: number;
-    status: IssueStatus;
-    attentionReason?: AttentionReason;
-    expectedStateRev: number;
-}, opts?: IssueClientOptions): Promise<IssueClientResult<{
-    issue: PlatformIssue;
-}>>;
-//# sourceMappingURL=issue-client.d.ts.map

package/dist/platform/issue-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"issue-client.d.ts","sourceRoot":"","sources":["../../src/platform/issue-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAErF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,IAAI,EAAE,aAAa,EAAE,CAAC;IACtB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAChC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACnE,8DAA8D;GAC5D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG,kBAAkB,CAAC;AAE/E;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAE1D;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAEjE;AAED,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,OAAO,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,IAAI,CAAC,EAAE;QACL,GAAG,EAAE,OAAO,OAAO,CAAC;QACpB,IAAI,EAAE,OAAO,QAAQ,CAAC;KACvB,CAAC;CACH;AA2CD;;kBAEkB;AAClB,wBAAgB,UAAU,CACxB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAC,CAEzE;AAED,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC,CAQnD;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAQ/B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAA;CAAE,EACvF,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC;IAAE,KAAK,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC,CAEjF;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,EACD,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC,CAEtD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,gBAAgB,EAAE,MAAM,CAAC;CAC1B,EACD,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,iBAAiB,CAAC;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC,CAEtD"}