botmux 3.10.0 → 3.23.1

package/dist/platform/issue-client.js

@@ -1,142 +0,0 @@
-/**
- * 平台 Issue Board 的 machine-auth 客户端（打 `/v1/machine/*`，Bearer = machineToken）。
- *
- * 平台侧入口见 platform 仓 `src/server/machine-issues-http.ts` / DESIGN-issue-board.md §三之二。
- * 只有五个端点：teams / issues(list) / claim / bind / status。创建、编辑、force-detach、
- * 归档是**人的决策**，只在平台 Web 上做，这里没有也不该有。
- *
- * 鉴权材料全部来自 `~/.botmux/platform.json`（[[platform/binding]]）：未绑定平台时所有调用
- * 直接返回 `{ ok:false, reason:'unbound' }`，调用方据此把整个 issue board 功能关掉。
- *
- * 错误分型是这层的重点——上层 outbox pump 要据此决定「退避重试」还是「就此打住」：
- *  - `network`  ：连不上/超时 → **必须重试**（daemon 离线期间状态照样变，回来要补上）
- *  - `conflict` ：平台返回 409（state_rev_conflict / stale_epoch / claim_expired…）
- *                 → 重新投影后再发，不是简单重试
- *  - `forbidden`：401/403（token 失效、解绑、machine_mismatch）→ **停手**，重试无意义
- *  - `server`   ：5xx → 退避重试（含平台 ByteDoc 降级的 503）
- */
-import { getJson, postJson } from './platform-http.js';
-import { readPlatformBinding } from './binding.js';
-/**
- * 该失败是否值得退避后重投。
- *
- * 只有 `network` 与**真正的 5xx** 值得：4xx 全都是「再发一次结果不变」——401/403 是凭证/
- * 归属问题，409 要先重新投影再发（不是盲重试），400/404 是请求本身错了。把它们混进可重试
- * 一类，pump 会对着一个永远不会成功的请求指数退避到天荒地老，日志里还只看得到"在重试"。
- */
-export function isRetriable(f) {
-    return f.reason === 'network' || (f.reason === 'server' && f.status >= 500);
-}
-/**
- * 这次失败是否**永远**不会成功——发件箱据此把行标 fatal，彻底停止重投。
- *
- * 注意它**不是** `!isRetriable`，那两个的补集差着两类，混用会把好行判死：
- *  - `conflict`（409）：是竞争不是错误。上层先重新对账再重发，对账本身可能因为网络问题
- *    没做成，此时判死等于把一条完全正常的回写扔了。留给下一轮。
- *  - `unbound`：本机当前没绑平台。绑回来之后这条行照样该发，判死就再也发不出去了。
- *
- * 剩下的两类才是真死：`forbidden`（401/403，凭证失效 / machine_mismatch / claim 被 revoke）
- * 与 `client`（400 参数错 / 404 issue 被删或归档）。对它们退避重投，就是每 5 分钟朝一个
- * 永远不会变的死端点打一发，同时 `/issue status` 上那句「N 条回写没发出去」永不清零。
- */
-export function isPermanentFailure(f) {
-    return f.reason === 'forbidden' || f.reason === 'client';
-}
-function resolveBinding(opts) {
-    if (opts.binding !== undefined)
-        return opts.binding;
-    const b = readPlatformBinding();
-    return b ? { platformUrl: b.platformUrl, machineToken: b.machineToken, machineId: b.machineId } : null;
-}
-function classify(status, json) {
-    const error = typeof json?.error === 'string' ? String(json.error) : `http_${status}`;
-    if (status === 401 || status === 403)
-        return { ok: false, reason: 'forbidden', status, error };
-    if (status === 409)
-        return { ok: false, reason: 'conflict', status, error };
-    // 其余 4xx 单列一类：既不是鉴权问题（别误导排查方向），也绝不该被重试。
-    if (status >= 400 && status < 500)
-        return { ok: false, reason: 'client', status, error };
-    return { ok: false, reason: 'server', status, error };
-}
-async function call(opts, method, path, body, pick = (j) => j) {
-    const binding = resolveBinding(opts);
-    if (!binding)
-        return { ok: false, reason: 'unbound' };
-    const http = opts.http ?? { get: getJson, post: postJson };
-    const url = `${binding.platformUrl.replace(/\/+$/, '')}${path}`;
-    const reqOpts = {
-        headers: { authorization: `Bearer ${binding.machineToken}` },
-        ...(opts.timeoutMs !== undefined ? { timeoutMs: opts.timeoutMs } : {}),
-    };
-    let res;
-    try {
-        res = method === 'GET' ? await http.get(url, reqOpts) : await http.post(url, body ?? {}, reqOpts);
-    }
-    catch (e) {
-        return { ok: false, reason: 'network', error: String(e?.message ?? e) };
-    }
-    // 2xx 之外一律走分型；平台的成功响应恒为 200。
-    if (res.status < 200 || res.status >= 300)
-        return classify(res.status, res.json);
-    return { ok: true, value: pick(res.json) };
-}
-/** 本机 owner 所属的平台团队。注意：日常判断「本机在不在团队里」应读本地
- *  `platform-team-sync.json`（[[platform-team-store]]），这个接口是不依赖 team-sync
- *  是否已收敛的权威兜底。 */
-export function fetchTeams(opts = {}) {
-    return call(opts, 'GET', '/v1/machine/teams', undefined, (j) => (Array.isArray(j?.teams) ? j.teams : []));
-}
-export function fetchIssues(teamId, opts = {}) {
-    return call(opts, 'GET', `/v1/machine/issues?teamId=${encodeURIComponent(teamId)}`, undefined, (j) => (j?.sections ?? { needsAttention: [], todo: [], inProgress: [], inReview: [], done: [] }));
-}
-/**
- * 按 id 单查一条 issue。
- *
- * 平台**没有**「按 id 单查」的机器接口，只能从分段列表里捞——这是唯一的实现方式，所以收口
- * 在这里，别让每个调用方各抄一遍（回写的 409 对账、领取确认、交付都要用它）。
- *
- * 返回 null 有两种含义且**无法区分**：拉列表失败，或 issue 不在活跃分段里（已归档）。
- * 调用方一律按「无法判定」处理，不要把 null 当成「平台上没有/不是我的」——那会让
- * 409 对账做出相反的决定。
- */
-export async function findIssueById(teamId, issueId, opts = {}) {
-    const list = await fetchIssues(teamId, opts);
-    if (!list.ok)
-        return null;
-    for (const section of Object.values(list.value)) {
-        const hit = section.find((i) => i._id === issueId);
-        if (hit)
-            return hit;
-    }
-    return null;
-}
-/**
- * 领取。`claimId` 必须是**高熵随机**（`crypto.randomBytes(16).toString('hex')`），
- * 绝不能由 issueId 派生——平台的幂等分支现在会连 machineId/unionId 一起校验，派生键在
- * 多机场景下会直接撞 409 `already_claimed`（早失败，好过静默把别人的 claim 当成自己的）。
- *
- * `machineId` 不用传：平台以 token 为准（传了且不一致会 403 machine_mismatch）。
- */
-export function claimIssue(issueId, args, opts = {}) {
-    return call(opts, 'POST', `/v1/machine/issues/${encodeURIComponent(issueId)}/claim`, args);
-}
-/**
- * 绑定本地任务。`localTaskRef` = `<anchorId>::<larkAppId>`（见 [[issue-board-store]] 的
- * `buildLocalTaskRef`）。
- *
- * `localTaskLabel` / `localTaskUrl` 是**纯展示**的可选项：前者给人看（群名），后者是点进去
- * 的深链。平台只接受 https 深链，其余静默丢弃且**不会**让 bind 失败——展示字段不该有能力
- * 弄砸一次真实绑定。
- */
-export function bindIssue(issueId, args, opts = {}) {
-    return call(opts, 'POST', `/v1/machine/issues/${encodeURIComponent(issueId)}/bind`, args);
-}
-/**
- * 状态回写。幂等只认 `sourceSeq`（每 binding 单调、串行发送），所以同一条 outbox 行重发
- * 是安全的：平台见到 `sourceSeq <= lastSourceSeq` 直接回当前态、零副作用。
- */
-export function writeIssueStatus(issueId, args, opts = {}) {
-    return call(opts, 'POST', `/v1/machine/issues/${encodeURIComponent(issueId)}/status`, args);
-}
-//# sourceMappingURL=issue-client.js.map

package/dist/platform/issue-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"issue-client.js","sourceRoot":"","sources":["../../src/platform/issue-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AA+DnD;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,CAAqB;IAC/C,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAqB;IACtD,OAAO,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAC3D,CAAC;AAaD,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACpD,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;IAChC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzG,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,IAAa;IAC7C,MAAM,KAAK,GAAG,OAAQ,IAA4B,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,IAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC;IACtI,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC/F,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5E,wCAAwC;IACxC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACzF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,IAAI,CACjB,IAAwB,EACxB,MAAsB,EACtB,IAAY,EACZ,IAAc,EACd,OAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAM;IAEtC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,YAAY,EAAE,EAAE;QAC5D,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvE,CAAC;IACF,IAAI,GAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IACpG,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAE,CAAW,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;IACrF,CAAC;IACD,6BAA6B;IAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;kBAEkB;AAClB,MAAM,UAAU,UAAU,CACxB,OAA2B,EAAE;IAE7B,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,MAAc,EACd,OAA2B,EAAE;IAE7B,OAAO,IAAI,CACT,IAAI,EACJ,KAAK,EACL,6BAA6B,kBAAkB,CAAC,MAAM,CAAC,EAAE,EACzD,SAAS,EACT,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAA0B,CAC1H,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,OAAe,EACf,OAA2B,EAAE;IAE7B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAI,OAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC;QACxE,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,IAAuF,EACvF,OAA2B,EAAE;IAE7B,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7F,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,IAMC,EACD,OAA2B,EAAE;IAE7B,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,IAOC,EACD,OAA2B,EAAE;IAE7B,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sBAAsB,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;AAC9F,CAAC"}

package/dist/platform/platform-http.d.ts

@@ -1,15 +0,0 @@
-export interface PostJsonResult {
-    status: number;
-    json: unknown;
-}
-export interface PostJsonOptions {
-    /** 强制 IP 协议族：4 / 6；缺省跟随系统默认解析（含 net 层 happy-eyeballs）。 */
-    family?: 4 | 6;
-    timeoutMs?: number;
-    /** 附加请求头（如 `Authorization: Bearer <machineToken>`）。不能覆盖 content-* 两个。 */
-    headers?: Record<string, string>;
-}
-export declare function postJson(url: string, body: unknown, opts?: PostJsonOptions): Promise<PostJsonResult>;
-/** 同 {@link postJson} 的连接口径（含 family 钉死），只是不带请求体的 GET。 */
-export declare function getJson(url: string, opts?: PostJsonOptions): Promise<PostJsonResult>;
-//# sourceMappingURL=platform-http.d.ts.map

package/dist/platform/platform-http.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"platform-http.d.ts","sourceRoot":"","sources":["../../src/platform/platform-http.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAqCxG;AAED,0DAA0D;AAC1D,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAkCxF"}

package/dist/platform/platform-http.js

@@ -1,77 +0,0 @@
-// 平台 HTTP 请求助手：支持强制 IP 协议族（family 4/6）的 JSON POST。
-// 不用全局 fetch（undici）是因为它不透传 family、也不做 happy-eyeballs——
-// IPv4 路由黑洞的机器上会直接 "fetch failed"；node:http(s) 的 family 选项
-// 走 dns.lookup 单协议族解析，能确定性地把连接钉在 IPv4 或 IPv6 上。
-import { request as httpsRequest } from 'node:https';
-import { request as httpRequest } from 'node:http';
-export function postJson(url, body, opts = {}) {
-    const { family, timeoutMs = 10_000, headers } = opts;
-    const u = new URL(url);
-    const doRequest = u.protocol === 'https:' ? httpsRequest : httpRequest;
-    const payload = Buffer.from(JSON.stringify(body), 'utf8');
-    return new Promise((resolve, reject) => {
-        const req = doRequest({
-            host: u.hostname,
-            port: u.port || (u.protocol === 'https:' ? 443 : 80),
-            path: `${u.pathname}${u.search}`,
-            method: 'POST',
-            family,
-            timeout: timeoutMs,
-            // content-* 放在扩展头之后：调用方传错 content-length 会让请求体被截断/挂死，
-            // 这两个必须由本函数说了算。
-            headers: { ...headers, 'content-type': 'application/json', 'content-length': payload.length },
-        }, (res) => {
-            const chunks = [];
-            res.on('data', (c) => chunks.push(c));
-            res.on('end', () => {
-                let json = {};
-                try {
-                    json = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                }
-                catch {
-                    /* 非 JSON 响应按空对象处理，调用方看 status */
-                }
-                resolve({ status: res.statusCode || 0, json });
-            });
-            res.on('error', reject);
-        });
-        req.on('timeout', () => req.destroy(new Error(`连接超时（${timeoutMs}ms）`)));
-        req.on('error', reject);
-        req.end(payload);
-    });
-}
-/** 同 {@link postJson} 的连接口径（含 family 钉死），只是不带请求体的 GET。 */
-export function getJson(url, opts = {}) {
-    const { family, timeoutMs = 10_000, headers } = opts;
-    const u = new URL(url);
-    const doRequest = u.protocol === 'https:' ? httpsRequest : httpRequest;
-    return new Promise((resolve, reject) => {
-        const req = doRequest({
-            host: u.hostname,
-            port: u.port || (u.protocol === 'https:' ? 443 : 80),
-            path: `${u.pathname}${u.search}`,
-            method: 'GET',
-            family,
-            timeout: timeoutMs,
-            headers: { ...headers, accept: 'application/json' },
-        }, (res) => {
-            const chunks = [];
-            res.on('data', (c) => chunks.push(c));
-            res.on('end', () => {
-                let json = {};
-                try {
-                    json = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-                }
-                catch {
-                    /* 非 JSON 响应按空对象处理，调用方看 status */
-                }
-                resolve({ status: res.statusCode || 0, json });
-            });
-            res.on('error', reject);
-        });
-        req.on('timeout', () => req.destroy(new Error(`连接超时（${timeoutMs}ms）`)));
-        req.on('error', reject);
-        req.end();
-    });
-}
-//# sourceMappingURL=platform-http.js.map

package/dist/platform/platform-http.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"platform-http.js","sourceRoot":"","sources":["../../src/platform/platform-http.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,wDAAwD;AACxD,2DAA2D;AAC3D,gDAAgD;AAChD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAenD,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAa,EAAE,OAAwB,EAAE;IAC7E,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CACnB;YACE,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,sDAAsD;YACtD,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE;SAC9F,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,GAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,OAAwB,EAAE;IAC7D,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CACnB;YACE,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM,EAAE,KAAK;YACb,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACpD,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,GAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/platform/secure-host-file.d.ts

@@ -1,12 +0,0 @@
-export declare class UnsafeHostAuthorityFileError extends Error {
-    constructor(message: string);
-}
-/** Create/resolve the parent without ever resolving the final path component. */
-export declare function secureHostFilePath(filePath: string): string;
-/** Return null only for a genuinely absent leaf; unsafe shapes fail closed. */
-export declare function readSecureHostFileSync(filePath: string, maxBytes?: number): string | null;
-/** Strict, durable atomic replace that never follows a leaf symlink. */
-export declare function writeSecureHostFileSync(filePath: string, data: string): void;
-/** Strict durable unlink. Returns false only if the leaf is absent. */
-export declare function unlinkSecureHostFileSync(filePath: string): boolean;
-//# sourceMappingURL=secure-host-file.d.ts.map

package/dist/platform/secure-host-file.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secure-host-file.d.ts","sourceRoot":"","sources":["../../src/platform/secure-host-file.ts"],"names":[],"mappings":"AA6BA,qBAAa,4BAA6B,SAAQ,KAAK;gBACzC,OAAO,EAAE,MAAM;CAI5B;AA4ED,iFAAiF;AACjF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI3D;AAgHD,+EAA+E;AAC/E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAY,GAAG,MAAM,GAAG,IAAI,CAa5F;AAoCD,wEAAwE;AACxE,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAkC5E;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAmBlE"}

package/dist/platform/secure-host-file.js

@@ -1,301 +0,0 @@
-/**
- * Strict host-authority file primitives.
- *
- * Unlike general dotfiles, machine/device credentials must never follow a
- * leaf symlink. Linux pins the containing directory while operating on the
- * leaf; other platforms require a non-replaceable ancestor chain. All writes
- * atomically replace the leaf, and its directory must be owned by the current
- * user without group/other write access.
- */
-import { randomBytes } from 'node:crypto';
-import { closeSync, constants, fchmodSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from 'node:fs';
-import { basename, dirname, join } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-export class UnsafeHostAuthorityFileError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'UnsafeHostAuthorityFileError';
-    }
-}
-function sameInode(left, right) {
-    return left.dev === right.dev && left.ino === right.ino;
-}
-function assertOwnedByCurrentUser(stats, label) {
-    if (process.platform === 'win32' || !process.getuid)
-        return;
-    if (stats.uid !== process.getuid()) {
-        throw new UnsafeHostAuthorityFileError(`${label} 不属于当前用户`);
-    }
-}
-function assertSecureParentStats(stats) {
-    if (!stats.isDirectory()) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证目录不是普通目录');
-    }
-    assertOwnedByCurrentUser(stats, '宿主凭证目录');
-    if (process.platform !== 'win32' && (stats.mode & 0o022) !== 0) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证目录可被组内或其它用户写入');
-    }
-}
-/**
- * A 0700 credential directory is still replaceable when one of its ancestors
- * is writable by another user. Walk the canonical chain so later path-based
- * open/rename operations cannot be redirected by renaming the whole directory.
- *
- * POSIX sticky directories (notably /tmp) are the one safe writable exception:
- * when both the directory owner and child owner are trusted, unrelated users
- * cannot rename that child despite the directory's 01777 mode.
- */
-function assertAncestorChainCannotReplace(canonicalParent) {
-    if (process.platform === 'win32' || !process.getuid)
-        return;
-    const uid = process.getuid();
-    const trustedOwner = (owner) => owner === uid || owner === 0;
-    let childPath = canonicalParent;
-    let childStats = statSync(childPath);
-    while (true) {
-        const ancestorPath = dirname(childPath);
-        if (ancestorPath === childPath)
-            return;
-        const ancestorStats = statSync(ancestorPath);
-        if (!ancestorStats.isDirectory()) {
-            throw new UnsafeHostAuthorityFileError('宿主凭证祖先路径不是目录');
-        }
-        const untrustedOwnerCanWrite = !trustedOwner(ancestorStats.uid)
-            && (ancestorStats.mode & 0o200) !== 0;
-        const groupOrOtherCanWrite = (ancestorStats.mode & 0o022) !== 0;
-        if (untrustedOwnerCanWrite || groupOrOtherCanWrite) {
-            const stickyProtectsChild = (ancestorStats.mode & 0o1000) !== 0
-                && trustedOwner(ancestorStats.uid)
-                && trustedOwner(childStats.uid);
-            if (!stickyProtectsChild) {
-                throw new UnsafeHostAuthorityFileError('宿主凭证目录可被不可信祖先目录替换');
-            }
-        }
-        childPath = ancestorPath;
-        childStats = ancestorStats;
-    }
-}
-function canonicalSecureHostParent(filePath) {
-    const parent = dirname(filePath);
-    mkdirSync(parent, { recursive: true, mode: 0o700 });
-    const canonicalParent = realpathSync(parent);
-    const parentStats = statSync(canonicalParent);
-    assertSecureParentStats(parentStats);
-    return canonicalParent;
-}
-/** Create/resolve the parent without ever resolving the final path component. */
-export function secureHostFilePath(filePath) {
-    const canonicalParent = canonicalSecureHostParent(filePath);
-    assertAncestorChainCannotReplace(canonicalParent);
-    return join(canonicalParent, basename(filePath));
-}
-/**
- * Linux exposes an opened directory through /proc/self/fd. Keeping that
- * directory descriptor open makes all leaf operations independent of later
- * ancestor renames: an untrusted mount-point owner can still cause denial of
- * service, but cannot redirect a credential write into a directory it reads.
- *
- * Other platforms retain the conservative ancestor-chain requirement until
- * they have an equivalent descriptor-relative primitive.
- */
-function acquireSecureHostParent(filePath) {
-    const canonicalParent = canonicalSecureHostParent(filePath);
-    if (process.platform !== 'linux') {
-        assertAncestorChainCannotReplace(canonicalParent);
-        return { path: canonicalParent };
-    }
-    const fd = openSync(canonicalParent, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-    try {
-        const openedStats = fstatSync(fd);
-        assertSecureParentStats(openedStats);
-        const anchoredPath = `/proc/self/fd/${fd}`;
-        let anchoredStats;
-        try {
-            anchoredStats = statSync(anchoredPath);
-        }
-        catch {
-            // Minimal/chrooted Linux environments may not mount procfs. Preserve
-            // the old fail-closed path validation there.
-            closeSync(fd);
-            assertAncestorChainCannotReplace(canonicalParent);
-            return { path: canonicalParent };
-        }
-        if (!sameInode(openedStats, anchoredStats)) {
-            throw new UnsafeHostAuthorityFileError('宿主凭证目录句柄发生变化');
-        }
-        return { path: anchoredPath, fd };
-    }
-    catch (error) {
-        try {
-            closeSync(fd);
-        }
-        catch { /* best effort */ }
-        throw error;
-    }
-}
-function releaseSecureHostParent(parent) {
-    if (parent.fd === undefined)
-        return;
-    closeSync(parent.fd);
-}
-function assertSecureFileStats(stats, maxBytes) {
-    if (!stats.isFile()) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证必须是普通文件');
-    }
-    assertOwnedByCurrentUser(stats, '宿主凭证文件');
-    if (process.platform !== 'win32' && (stats.mode & 0o777) !== 0o600) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证文件权限必须严格为 0600');
-    }
-    if (stats.size < 0 || stats.size > maxBytes) {
-        throw new UnsafeHostAuthorityFileError('宿主凭证文件大小异常');
-    }
-}
-function readSecureHostFileFromParentSync(parent, leafName, maxBytes) {
-    const resolved = join(parent.path, leafName);
-    let fd;
-    try {
-        const flags = process.platform === 'win32'
-            ? constants.O_RDONLY
-            : constants.O_RDONLY | constants.O_NOFOLLOW;
-        fd = openSync(resolved, flags);
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return null;
-        if (error.code === 'ELOOP') {
-            throw new UnsafeHostAuthorityFileError('宿主凭证拒绝符号链接');
-        }
-        throw error;
-    }
-    try {
-        const before = fstatSync(fd);
-        assertSecureFileStats(before, maxBytes);
-        const pathStats = lstatSync(resolved);
-        if (pathStats.isSymbolicLink() || !sameInode(before, pathStats)) {
-            throw new UnsafeHostAuthorityFileError('宿主凭证路径在读取时发生变化');
-        }
-        const raw = readFileSync(fd, 'utf8');
-        const after = fstatSync(fd);
-        if (!sameInode(before, after)
-            || before.size !== after.size
-            || before.mtimeMs !== after.mtimeMs
-            || before.ctimeMs !== after.ctimeMs) {
-            throw new UnsafeHostAuthorityFileError('宿主凭证在读取时发生变化');
-        }
-        return raw;
-    }
-    finally {
-        closeSync(fd);
-    }
-}
-/** Return null only for a genuinely absent leaf; unsafe shapes fail closed. */
-export function readSecureHostFileSync(filePath, maxBytes = 64 * 1024) {
-    try {
-        lstatSync(dirname(filePath));
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return null;
-        throw error;
-    }
-    const parent = acquireSecureHostParent(filePath);
-    try {
-        return readSecureHostFileFromParentSync(parent, basename(filePath), maxBytes);
-    }
-    finally {
-        releaseSecureHostParent(parent);
-    }
-}
-function writePinnedSecureHostFileSync(parent, directoryFd, leafName, data) {
-    const resolved = join(parent.path, leafName);
-    const tmp = join(parent.path, `${leafName}.${process.pid}.${randomBytes(4).toString('hex')}.tmp`);
-    let fd;
-    try {
-        fd = openSync(tmp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-        writeFileSync(fd, data, { encoding: 'utf8' });
-        fchmodSync(fd, 0o600);
-        fsyncSync(fd);
-        closeSync(fd);
-        fd = undefined;
-        renameSync(tmp, resolved);
-        fsyncSync(directoryFd);
-    }
-    catch (error) {
-        if (fd !== undefined) {
-            try {
-                closeSync(fd);
-            }
-            catch { /* best effort */ }
-        }
-        try {
-            unlinkSync(tmp);
-        }
-        catch { /* best effort */ }
-        throw error;
-    }
-}
-/** Strict, durable atomic replace that never follows a leaf symlink. */
-export function writeSecureHostFileSync(filePath, data) {
-    const parent = acquireSecureHostParent(filePath);
-    const leafName = basename(filePath);
-    const resolved = join(parent.path, leafName);
-    try {
-        let leafExists = false;
-        try {
-            lstatSync(resolved);
-            leafExists = true;
-        }
-        catch (error) {
-            if (error.code !== 'ENOENT')
-                throw error;
-        }
-        if (leafExists) {
-            // Pin and validate the existing leaf before replacement. The final
-            // rename never follows a leaf symlink.
-            readSecureHostFileFromParentSync(parent, leafName, 64 * 1024);
-        }
-        if (parent.fd !== undefined) {
-            writePinnedSecureHostFileSync(parent, parent.fd, leafName, data);
-        }
-        else {
-            atomicWriteFileSync(resolved, data, {
-                mode: 0o600,
-                durable: true,
-                followTargetSymlink: false,
-            });
-        }
-    }
-    finally {
-        releaseSecureHostParent(parent);
-    }
-}
-/** Strict durable unlink. Returns false only if the leaf is absent. */
-export function unlinkSecureHostFileSync(filePath) {
-    const parent = acquireSecureHostParent(filePath);
-    const leafName = basename(filePath);
-    const resolved = join(parent.path, leafName);
-    try {
-        if (readSecureHostFileFromParentSync(parent, leafName, 64 * 1024) === null)
-            return false;
-        unlinkSync(resolved);
-        if (process.platform !== 'win32') {
-            if (parent.fd !== undefined) {
-                fsyncSync(parent.fd);
-            }
-            else {
-                const fd = openSync(parent.path, constants.O_RDONLY);
-                try {
-                    fsyncSync(fd);
-                }
-                finally {
-                    closeSync(fd);
-                }
-            }
-        }
-        return true;
-    }
-    finally {
-        releaseSecureHostParent(parent);
-    }
-}
-//# sourceMappingURL=secure-host-file.js.map

package/dist/platform/secure-host-file.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"secure-host-file.js","sourceRoot":"","sources":["../../src/platform/secure-host-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,QAAQ,EACR,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,SAAS,CAChB,IAAkD,EAClD,KAAmD;IAEnD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAA8B,EAAE,KAAa;IAC7E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,4BAA4B,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA8B;IAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC;IACD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gCAAgC,CAAC,eAAuB;IAC/D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC7B,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,CAAC,CAAC;IACrE,IAAI,SAAS,GAAG,eAAe,CAAC;IAChC,IAAI,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAErC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,sBAAsB,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;eAC1D,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,oBAAoB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,sBAAsB,IAAI,oBAAoB,EAAE,CAAC;YACnD,MAAM,mBAAmB,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;mBAC1D,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC;mBAC/B,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,MAAM,IAAI,4BAA4B,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,SAAS,GAAG,YAAY,CAAC;QACzB,UAAU,GAAG,aAAa,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9C,uBAAuB,CAAC,WAAW,CAAC,CAAC;IACrC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,eAAe,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC5D,gCAAgC,CAAC,eAAe,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACnD,CAAC;AAOD;;;;;;;;GAQG;AACH,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,MAAM,eAAe,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,gCAAgC,CAAC,eAAe,CAAC,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,EAAE,GAAG,QAAQ,CACjB,eAAe,EACf,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAClE,CAAC;IACF,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,uBAAuB,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,iBAAiB,EAAE,EAAE,CAAC;QAC3C,IAAI,aAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,aAAa,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,6CAA6C;YAC7C,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,gCAAgC,CAAC,eAAe,CAAC,CAAC;YAClD,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS;QAAE,OAAO;IACpC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA8B,EAAE,QAAgB;IAC7E,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,4BAA4B,CAAC,aAAa,CAAC,CAAC;IACxD,CAAC;IACD,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;QACnE,MAAM,IAAI,4BAA4B,CAAC,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,gCAAgC,CACvC,MAAwB,EACxB,QAAgB,EAChB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;YACxC,CAAC,CAAC,SAAS,CAAC,QAAQ;YACpB,CAAC,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAC9C,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,IAAK,KAA+B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,4BAA4B,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,4BAA4B,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IACE,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;eACtB,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;eAC1B,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;eAChC,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EACnC,CAAC;YACD,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,QAAQ,GAAG,EAAE,GAAG,IAAI;IAC3E,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,gCAAgC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAwB,EACxB,WAAmB,EACnB,QAAgB,EAChB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CACd,MAAM,CAAC,IAAI,EACX,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CACnE,CAAC;IACF,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CACX,GAAG,EACH,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAChF,KAAK,CACN,CAAC;QACF,aAAa,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,EAAE,GAAG,SAAS,CAAC;QACf,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1B,SAAS,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,IAAI,CAAC;gBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,IAAY;IACpE,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,CAAC;YACH,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,mEAAmE;YACnE,uCAAuC;YACvC,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5B,6BAA6B,CAC3B,MAAM,EACN,MAAM,CAAC,EAAE,EACT,QAAQ,EACR,IAAI,CACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAClC,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,IAAI;gBACb,mBAAmB,EAAE,KAAK;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,gCAAgC,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACzF,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC5B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACrD,IAAI,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/platform/tunnel-client.d.ts

@@ -1,41 +0,0 @@
-import { type PlatformBinding } from './binding.js';
-/** 本机一个 botmux bot 的概要（上报给平台，供团队页「人→机器→bot」展示 + 拉群）。 */
-export interface PlatformBotInfo {
-    appId: string;
-    openId: string | null;
-    name: string;
-    avatar?: string;
-    cli?: string;
-    /** 团队页是否展示这个 bot（默认 true，按 bot 配置 showInTeam 上报）。 */
-    showInTeam?: boolean;
-    /** bot 自己的租户稳定 union_id（自家消息回声学到，见 bot-union-ids-store）。
-     *  平台按团队聚合成 roster 随 team-sync 下发，成员机器据此免 /grant 互信。 */
-    unionId?: string;
-}
-/** 平台 team-sync 下发的原始负载（校验/落盘在 platform-team-store）。 */
-export interface PlatformTeamSyncMessage {
-    rev: string;
-    teams: unknown[];
-}
-export interface TunnelClientOptions {
-    binding: PlatformBinding;
-    /** 实际绑定的 dashboard 端口（探测后可能与配置不同） */
-    getDashboardPort: () => number;
-    /** 当前 dashboard token（会轮转，每次读最新） */
-    getDashboardToken: () => string | null;
-    getVersion: () => string;
-    /** 本机的 bot 清单（每次读最新；随心跳上报） */
-    getBots?: () => PlatformBotInfo[];
-    /** 本机已应用的 team-sync rev（每次读最新；随 register/heartbeat 上报，平台
-     *  据此做版本比对：不一致才下发全量 team-sync）。 */
-    getTeamSyncRev?: () => string;
-    /** 平台下发 team-sync（团队 bot roster + 团队群清单）时回调；落盘与公告由
-     *  dashboard 侧处理，tunnel-client 只做传输。 */
-    onTeamSync?: (payload: PlatformTeamSyncMessage) => void;
-    log: (msg: string, extra?: Record<string, unknown>) => void;
-}
-export interface TunnelClientHandle {
-    stop(): void;
-}
-export declare function startPlatformTunnelClient(opts: TunnelClientOptions): TunnelClientHandle;
-//# sourceMappingURL=tunnel-client.d.ts.map

package/dist/platform/tunnel-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tunnel-client.d.ts","sourceRoot":"","sources":["../../src/platform/tunnel-client.ts"],"names":[],"mappings":"AAMA,OAAO,EAA0C,KAAK,eAAe,EAAqB,MAAM,cAAc,CAAC;AAE/G,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;4DACwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wDAAwD;AACxD,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,eAAe,CAAC;IACzB,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,MAAM,CAAC;IAC/B,oCAAoC;IACpC,iBAAiB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACvC,UAAU,EAAE,MAAM,MAAM,CAAC;IACzB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,eAAe,EAAE,CAAC;IAClC;uCACmC;IACnC,cAAc,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B;4CACwC;IACxC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACxD,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC7D;AA4CD,MAAM,WAAW,kBAAkB;IACjC,IAAI,IAAI,IAAI,CAAC;CACd;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,GAAG,kBAAkB,CA8WvF"}