botmux 3.10.0 → 3.23.1

package/dist/services/pairing-store.d.ts

@@ -1,47 +0,0 @@
-export type PairingStatus = 'pending' | 'claimed' | 'consumed';
-export interface PairingClaimer {
-    openId: string;
-    unionId?: string;
-    name?: string;
-    /** The bot app the user ran `/pair` with — open_id is scoped to THIS app. */
-    larkAppId?: string;
-}
-export interface StartedPairing {
-    pairingId: string;
-    code: string;
-    browserToken: string;
-    expiresAt: number;
-}
-/** Begin a pairing. Returns the code to show the user + a private browserToken. */
-export declare function createPairing(dataDir: string, ttlMs?: number, now?: number): StartedPairing;
-export type ClaimResult = {
-    ok: true;
-    pairingId: string;
-} | {
-    ok: false;
-    reason: 'not_found' | 'expired' | 'already_claimed';
-};
-/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
-export declare function claimPairing(dataDir: string, code: string, claimer: PairingClaimer, now?: number): ClaimResult;
-export type PairingView = {
-    status: 'pending';
-} | {
-    status: 'claimed';
-    claimedBy: PairingClaimer;
-} | {
-    status: 'consumed';
-} | {
-    status: 'not_found';
-};
-/** Browser-side status poll; requires the matching browserToken. */
-export declare function getPairingStatus(dataDir: string, pairingId: string, browserToken: string, now?: number): PairingView;
-export type ConsumeResult = {
-    ok: true;
-    claimedBy: PairingClaimer;
-} | {
-    ok: false;
-    reason: 'not_found' | 'not_claimed' | 'already_consumed';
-};
-/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
-export declare function consumePairing(dataDir: string, pairingId: string, browserToken: string, now?: number): ConsumeResult;
-//# sourceMappingURL=pairing-store.d.ts.map

package/dist/services/pairing-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pairing-store.d.ts","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAiCA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAE/D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmDD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAuB,EAAE,GAAG,GAAE,MAAmB,GAAG,cAAc,CAavH;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,iBAAiB,CAAA;CAAE,CAAC;AAEvE,4FAA4F;AAC5F,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAe1H;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,CAAC;AAE5B,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,WAAW,CAOhI;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,cAAc,CAAA;CAAE,GACvC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,aAAa,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAE5E,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,aAAa,CAUhI"}

package/dist/services/pairing-store.js

@@ -1,132 +0,0 @@
-/**
- * Pairing-login store: binds a browser session to a Feishu user without a web
- * OAuth redirect (which is unfriendly to ip:port self-host — see
- * docs/platform-design.md). Device-code style:
- *
- *   1. Browser (unauthenticated) calls start → gets a short human `code` to show
- *      the user, plus a high-entropy `browserToken` it keeps privately.
- *   2. User sends the `code` to the bot in Feishu. The daemon (which already
- *      knows the sender's open_id) claims the pairing for that identity.
- *   3. Browser polls/consumes with its `browserToken`; on a claimed pairing it
- *      learns the Feishu identity and the web endpoint issues a session.
- *
- * Identity is established INSIDE Feishu, so only a short-lived code crosses to
- * the web — independent of domain/IP/port. Team-membership gating is the
- * caller's job (via team-store); this store only pairs browser ↔ identity.
- *
- * Security: code is high-entropy + short TTL + single-use; browserToken gates
- * status/consume so a guessed code alone can't hijack a browser session.
- * (Brute-forcing codes is further bounded by endpoint rate limiting at the wiring
- * layer.) Codes/tokens are never logged.
- *
- * Storage: `{dataDir}/pairings.json` (shared across the web + daemon processes),
- * atomic writes.
- */
-import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomBytes, randomUUID } from 'node:crypto';
-const DEFAULT_TTL_MS = 5 * 60 * 1000; // 5 minutes
-/** Unambiguous alphabet (no 0/O/1/I) for the human-entered code. */
-const CODE_ALPHABET = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
-const CODE_LEN = 8;
-function filePath(dataDir) {
-    return join(dataDir, 'pairings.json');
-}
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt — fall through */ }
-    return {};
-}
-function writeFileAtomic(dataDir, data) {
-    if (!existsSync(dataDir))
-        mkdirSync(dataDir, { recursive: true });
-    const fp = filePath(dataDir);
-    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
-    renameSync(tmp, fp);
-}
-/** Drop expired entries; returns the live map. */
-function prune(data, now) {
-    for (const [id, e] of Object.entries(data)) {
-        if (e.expiresAt <= now)
-            delete data[id];
-    }
-    return data;
-}
-function genCode() {
-    const bytes = randomBytes(CODE_LEN);
-    let out = '';
-    for (let i = 0; i < CODE_LEN; i++)
-        out += CODE_ALPHABET[bytes[i] % CODE_ALPHABET.length];
-    return out;
-}
-/** Begin a pairing. Returns the code to show the user + a private browserToken. */
-export function createPairing(dataDir, ttlMs = DEFAULT_TTL_MS, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = {
-        pairingId: randomUUID(),
-        code: genCode(),
-        browserToken: randomBytes(24).toString('base64url'),
-        status: 'pending',
-        createdAt: now,
-        expiresAt: now + ttlMs,
-    };
-    data[entry.pairingId] = entry;
-    writeFileAtomic(dataDir, data);
-    return { pairingId: entry.pairingId, code: entry.code, browserToken: entry.browserToken, expiresAt: entry.expiresAt };
-}
-/** Claim a pending pairing for a Feishu identity (called by the daemon on the bot side). */
-export function claimPairing(dataDir, code, claimer, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = Object.values(data).find(e => e.code === code.trim().toUpperCase());
-    if (!entry)
-        return { ok: false, reason: 'not_found' };
-    if (entry.expiresAt <= now)
-        return { ok: false, reason: 'expired' };
-    if (entry.status !== 'pending')
-        return { ok: false, reason: 'already_claimed' };
-    entry.status = 'claimed';
-    entry.claimedBy = {
-        openId: claimer.openId,
-        ...(claimer.unionId ? { unionId: claimer.unionId } : {}),
-        ...(claimer.name ? { name: claimer.name } : {}),
-        ...(claimer.larkAppId ? { larkAppId: claimer.larkAppId } : {}),
-    };
-    writeFileAtomic(dataDir, data);
-    return { ok: true, pairingId: entry.pairingId };
-}
-/** Browser-side status poll; requires the matching browserToken. */
-export function getPairingStatus(dataDir, pairingId, browserToken, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = data[pairingId];
-    if (!entry || entry.browserToken !== browserToken)
-        return { status: 'not_found' };
-    if (entry.status === 'claimed' && entry.claimedBy)
-        return { status: 'claimed', claimedBy: entry.claimedBy };
-    if (entry.status === 'consumed')
-        return { status: 'consumed' };
-    return { status: 'pending' };
-}
-/** Single-use: turn a claimed pairing into a session. Requires the browserToken. */
-export function consumePairing(dataDir, pairingId, browserToken, now = Date.now()) {
-    const data = prune(readFile(dataDir), now);
-    const entry = data[pairingId];
-    if (!entry || entry.browserToken !== browserToken)
-        return { ok: false, reason: 'not_found' };
-    if (entry.status === 'consumed')
-        return { ok: false, reason: 'already_consumed' };
-    if (entry.status !== 'claimed' || !entry.claimedBy)
-        return { ok: false, reason: 'not_claimed' };
-    entry.status = 'consumed';
-    const claimedBy = entry.claimedBy;
-    writeFileAtomic(dataDir, data);
-    return { ok: true, claimedBy };
-}
-//# sourceMappingURL=pairing-store.js.map

package/dist/services/pairing-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pairing-store.js","sourceRoot":"","sources":["../../src/services/pairing-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAClD,oEAAoE;AACpE,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,QAAQ,GAAG,CAAC,CAAC;AAwBnB,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,kDAAkD;AAClD,SAAS,KAAK,CAAC,IAAe,EAAE,GAAW;IACzC,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO;IACd,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACb,CAAC;AASD,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,QAAgB,cAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACrG,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAiB;QAC1B,SAAS,EAAE,UAAU,EAAE;QACvB,IAAI,EAAE,OAAO,EAAE;QACf,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QACnD,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,KAAK;KACvB,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC9B,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACxH,CAAC;AAMD,4FAA4F;AAC5F,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,IAAY,EAAE,OAAuB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC3G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAChF,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,KAAK,CAAC,SAAS,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;IACF,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AAQD,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACjH,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IAC5G,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC/D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAMD,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAiB,EAAE,YAAoB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC/G,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAChG,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAClC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/services/pi-transcript.d.ts

@@ -1,26 +0,0 @@
-export interface PiBridgeEvent {
-    uuid: string;
-    timestampMs: number;
-    kind: 'user' | 'assistant_final';
-    text: string;
-    /** Best-effort terminal outcome carried by an `assistant_final` (attribution
-     *  metadata, NOT a durable receipt — Pi has no reliableTurnTerminal). Undefined
-     *  on a `stop`/`length` completion (keeps the historical completed default and
-     *  lets the empty-final fallback fire); `failed` for `error`, `ambiguous` for
-     *  `aborted`. */
-    terminalStatus?: 'completed' | 'failed' | 'ambiguous';
-    terminalErrorCode?: string;
-    sourceSessionId?: string;
-}
-export interface PiDrainResult {
-    events: PiBridgeEvent[];
-    newOffset: number;
-    pendingTail: string;
-}
-export declare function findPiTranscriptBySessionId(cliSessionId: string, cwd?: string): string | undefined;
-export declare function findPiTranscriptByPid(pid: number): {
-    path: string;
-    cliSessionId: string;
-} | undefined;
-export declare function drainPiTranscript(path: string, fromOffset: number): PiDrainResult;
-//# sourceMappingURL=pi-transcript.d.ts.map

package/dist/services/pi-transcript.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-transcript.d.ts","sourceRoot":"","sources":["../../src/services/pi-transcript.ts"],"names":[],"mappings":"AAqEA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb;;;;qBAIiB;IACjB,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACtD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAiCD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AA0CD,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAwBlG;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgCrG;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,CAiGjF"}

package/dist/services/pi-transcript.js

@@ -1,327 +0,0 @@
-/**
- * Reader for Pi agent's per-session JSONL transcript.
- *
- * Pi stores sessions under:
- *   ~/.pi/agent/sessions/<workspace-encoded>/<timestamp>_<sessionId>.jsonl
- *
- * Bridge contract (same as Codex/Grok/CoCo): emit only
- *   - `user`            — a real user prompt (`message.role === "user"`).
- *   - `assistant_final` — an assistant record carrying a TERMINAL `stopReason`.
- *
- * ## Turn boundary (verified on pi 0.80.6; `@earendil-works/pi-ai` StopReason
- * union = `"stop" | "length" | "toolUse" | "error" | "aborted"`):
- *   - `toolUse`  — mid-turn (the model is calling a tool); never a boundary. In
- *                  real transcripts toolCall content always pairs with
- *                  stopReason:"toolUse" (255/255).
- *   - `stop`     — normal completion → `completed`, but terminal ONLY when the
- *                  message has NO tool calls. A `stop`+toolCall enters the
- *                  agent-loop's tool branch (`executeToolCalls`) and keeps
- *                  looping unless the batch returns `terminate:true`, so the
- *                  real final comes later — emitting here would publish a
- *                  premature final and orphan the true one.
- *   - `length`   — output hit the model's max-output cap → `completed`, terminal
- *                  ONLY without tool calls (a `length`+toolCall is mid-turn: Pi
- *                  runs failToolCallsFromTruncatedMessage (terminate:false) and
- *                  keeps looping).
- *   - `error`    — API/provider error (e.g. "Cancelled by backend") → `failed`
- *                  (`pi_turn_error`). Hard terminal (turn_end→return) regardless
- *                  of content, so it always emits.
- *   - `aborted`  — user interrupt (Esc) → `ambiguous` (`pi_turn_aborted`). Hard
- *                  terminal. `ambiguous` (not `failed`) because Esc may land
- *                  after a tool side effect already ran — same audit semantic as
- *                  Codex/TraeX `turn_aborted`. Verified: Pi persists an
- *                  `assistant` record with `stopReason:"aborted"` +
- *                  `errorMessage:"Operation aborted"` and empty content.
- *
- * A terminal event is emitted even when its visible text is EMPTY (error/aborted
- * turns): keyed to Pi's stopReason, not to whether the model produced a closing
- * paragraph — otherwise under type-ahead the collecting turn never closes and
- * CodexBridgeQueue's head wedges. `terminalStatus`/`terminalErrorCode` are best-
- * effort attribution metadata: Pi does NOT set `reliableTurnTerminal` (see
- * pi.ts — it holds no session fd and a custom-terminate turn has no on-disk
- * boundary), so these are not treated as durable-delivery receipts.
- *
- * Accepted gap: a custom tool returning `terminate:true` ends the agent right
- * after its toolResult with the last assistant record being `toolUse` (and
- * `terminate` is not persisted), so that turn has NO on-disk boundary. We do not
- * synthesize one; quiescence idle marks the session ready and the next ordinary
- * user turn HOL-drops the unclosed collecting head.
- *
- * ## Type-ahead shape
- * Pi's Message Queue is an active-turn STEER (TUI shows "Steering: …" +
- * "Alt+Up to edit all queued messages"): a message submitted while a turn is
- * running is pulled into that SAME turn, which emits one merged final
- * (transcript: user1 → toolUse/toolResult… → user2 → assistant_final). The
- * queued user event is written at DEQUEUE time (its timestamp matches the
- * unblocking toolResult, not the submit), so CodexBridgeQueue's HOL-block-drop
- * + dequeue-time markTimeMs override attribute the single final to the newest
- * matching turn — identical to Codex/Grok. Non-steered turns stay strictly
- * interleaved (user → assistant_final → user → assistant_final).
- */
-import { existsSync, statSync, openSync, readSync, closeSync, readdirSync, readlinkSync } from 'node:fs';
-import { execSync } from 'node:child_process';
-import { homedir, platform } from 'node:os';
-import { join } from 'node:path';
-const PI_SESSIONS_ROOT = join(homedir(), '.pi', 'agent', 'sessions');
-const SESSION_UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-const IS_LINUX = platform() === 'linux';
-/** Map Pi's terminal stopReason to best-effort attribution metadata carried on
- *  the assistant_final. NOT a durable-delivery receipt (Pi has no
- *  reliableTurnTerminal — see pi.ts); the worker uses these only for
- *  CodexBridgeQueue emit ordering / dedup.
- *  - `stop`/`length` → real answers → completed (undefined status keeps the
- *    historical default + lets the empty-final fallback fire).
- *  - `error` → `failed` (`pi_turn_error`): an explicit provider error.
- *  - `aborted` → `ambiguous` (`pi_turn_aborted`): a user Esc can land AFTER a
- *    tool's side effect already completed, so we don't assert it "did not
- *    happen" — same audit semantic as Codex/TraeX `turn_aborted`.
- *  All non-`stop`/`length` map to `!== 'completed'`, so the pending turn is
- *  dropped and the type-ahead queue head is released, never wedged. */
-function piTerminalOutcome(stopReason) {
-    switch (stopReason) {
-        case 'stop':
-        case 'length':
-            return {};
-        case 'error':
-            return { terminalStatus: 'failed', terminalErrorCode: 'pi_turn_error' };
-        case 'aborted':
-            return { terminalStatus: 'ambiguous', terminalErrorCode: 'pi_turn_aborted' };
-    }
-}
-function piSessionsDirForCwd(cwd) {
-    const normalized = cwd === '/' ? '--root--' : cwd.replace(/\//g, '--');
-    return join(PI_SESSIONS_ROOT, normalized);
-}
-function piSessionIdFromPath(path) {
-    const m = /_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i.exec(path);
-    return m ? m[1] : undefined;
-}
-function matchPiTranscriptPath(target) {
-    if (!target.endsWith('.jsonl'))
-        return undefined;
-    if (!target.includes('/.pi/agent/sessions/'))
-        return undefined;
-    const sid = piSessionIdFromPath(target);
-    if (!sid)
-        return undefined;
-    return { path: target, cliSessionId: sid };
-}
-function joinTextContent(content) {
-    if (!Array.isArray(content))
-        return '';
-    const parts = [];
-    for (const item of content) {
-        if (!item || typeof item !== 'object')
-            continue;
-        if (item.type === 'text' && typeof item.text === 'string') {
-            parts.push(item.text);
-        }
-    }
-    return parts.join('\n').trim();
-}
-/** True when an assistant message contains a tool call. Pi's agent loop keeps a
- *  turn RUNNING whenever the assistant message carries tool calls — including a
- *  `length` (token-cap) message, whose truncated calls it fails and then loops
- *  again (failToolCallsFromTruncatedMessage → terminate:false). Only a terminal
- *  stopReason on a message WITHOUT tool calls actually ends the turn. */
-function hasToolCall(content) {
-    if (!Array.isArray(content))
-        return false;
-    return content.some((item) => item && typeof item === 'object' && item.type === 'toolCall');
-}
-export function findPiTranscriptBySessionId(cliSessionId, cwd) {
-    if (!cliSessionId || !SESSION_UUID_RE.test(cliSessionId))
-        return undefined;
-    const suffix = `_${cliSessionId}.jsonl`;
-    const roots = cwd ? [piSessionsDirForCwd(cwd), PI_SESSIONS_ROOT] : [PI_SESSIONS_ROOT];
-    for (const root of roots) {
-        if (!existsSync(root))
-            continue;
-        const stack = [root];
-        while (stack.length > 0) {
-            const dir = stack.pop();
-            let entries;
-            try {
-                entries = readdirSync(dir);
-            }
-            catch {
-                continue;
-            }
-            for (const name of entries) {
-                const full = join(dir, name);
-                let st;
-                try {
-                    st = statSync(full);
-                }
-                catch {
-                    continue;
-                }
-                if (st.isDirectory()) {
-                    stack.push(full);
-                }
-                else if (st.isFile() && name.endsWith(suffix)) {
-                    return full;
-                }
-            }
-        }
-    }
-    return undefined;
-}
-export function findPiTranscriptByPid(pid) {
-    if (!Number.isInteger(pid) || pid <= 0)
-        return undefined;
-    if (IS_LINUX) {
-        const fdDir = `/proc/${pid}/fd`;
-        if (existsSync(fdDir)) {
-            let entries;
-            try {
-                entries = readdirSync(fdDir);
-            }
-            catch {
-                return undefined;
-            }
-            for (const fd of entries) {
-                let target;
-                try {
-                    target = readlinkSync(join(fdDir, fd));
-                }
-                catch {
-                    continue;
-                }
-                const hit = matchPiTranscriptPath(target);
-                if (hit)
-                    return hit;
-            }
-            return undefined;
-        }
-    }
-    let out;
-    try {
-        out = execSync(`lsof -p ${pid} -Fn`, {
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-        });
-    }
-    catch {
-        return undefined;
-    }
-    for (const line of out.split('\n')) {
-        if (!line.startsWith('n/'))
-            continue;
-        const target = line.slice(1);
-        const hit = matchPiTranscriptPath(target);
-        if (hit)
-            return hit;
-    }
-    return undefined;
-}
-export function drainPiTranscript(path, fromOffset) {
-    if (!existsSync(path))
-        return { events: [], newOffset: 0, pendingTail: '' };
-    let size;
-    try {
-        size = statSync(path).size;
-    }
-    catch {
-        return { events: [], newOffset: fromOffset, pendingTail: '' };
-    }
-    let start = fromOffset;
-    if (size < start)
-        start = 0;
-    if (size === start)
-        return { events: [], newOffset: start, pendingTail: '' };
-    const len = size - start;
-    const buf = Buffer.alloc(len);
-    const fd = openSync(path, 'r');
-    try {
-        readSync(fd, buf, 0, len, start);
-    }
-    finally {
-        closeSync(fd);
-    }
-    const text = buf.toString('utf8');
-    const lastNl = text.lastIndexOf('\n');
-    const completeText = lastNl >= 0 ? text.slice(0, lastNl + 1) : '';
-    const pendingTail = lastNl >= 0 ? text.slice(lastNl + 1) : text;
-    const newOffset = start + Buffer.byteLength(completeText, 'utf8');
-    const sessionId = piSessionIdFromPath(path);
-    const events = [];
-    let cursor = start;
-    for (const line of completeText.split('\n')) {
-        if (line.length === 0) {
-            cursor += 1;
-            continue;
-        }
-        const lineStart = cursor;
-        cursor += Buffer.byteLength(line, 'utf8') + 1;
-        let obj;
-        try {
-            obj = JSON.parse(line);
-        }
-        catch {
-            continue;
-        }
-        if (obj?.type !== 'message' || !obj.message || typeof obj.message !== 'object')
-            continue;
-        const ts = typeof obj.timestamp === 'string' ? Date.parse(obj.timestamp) : NaN;
-        const timestampMs = Number.isFinite(ts) ? ts : Date.now();
-        const role = obj.message.role;
-        if (role === 'user') {
-            const content = joinTextContent(obj.message.content);
-            if (!content)
-                continue;
-            events.push({
-                uuid: `${path}:${lineStart}`,
-                timestampMs,
-                kind: 'user',
-                text: content,
-                sourceSessionId: sessionId,
-            });
-            continue;
-        }
-        // Only assistant records can close a turn. `toolResult` / `bashExecution`
-        // and any other role are mid-turn plumbing and never a boundary.
-        if (role !== 'assistant')
-            continue;
-        const stopReason = typeof obj.stopReason === 'string'
-            ? obj.stopReason
-            : typeof obj.message.stopReason === 'string'
-                ? obj.message.stopReason
-                : undefined;
-        // `toolUse` (and any missing/unknown reason) is mid-turn — the model is
-        // still working; wait for the terminal record.
-        //   - `error`/`aborted` are HARD terminals: Pi's agent loop does
-        //     turn_end→agent_end→return regardless of content, so they MUST emit
-        //     even empty, or the collecting head never closes.
-        //   - `stop`/`length` end the turn ONLY when the message has NO tool calls.
-        //     Both can carry tool calls mid-turn: agent-loop runs the batch and
-        //     keeps looping unless it terminates (`length` → failToolCallsFrom-
-        //     TruncatedMessage → terminate:false always; `stop` → executeToolCalls,
-        //     loops when the batch doesn't set terminate:true). Emitting on a
-        //     tool-carrying stop/length would publish a premature final + fireIdle,
-        //     then the real later final would arrive unmatched — breaking type-ahead
-        //     attribution. So gate both on "no tool call".
-        // Accepted limitation (why we don't claim reliableTurnTerminal): a custom
-        // tool returning terminate:true ends the agent right after its toolResult;
-        // the last assistant record is `toolUse` (not a terminal stopReason) and
-        // `terminate` is NOT persisted, so that turn has no on-disk end marker. We
-        // deliberately do NOT try to synthesize one — quiescence idle still marks
-        // the session ready, and the next ordinary user turn HOL-drops the
-        // unclosed collecting head. (botmux ships no such tool.)
-        const isHardTerminal = stopReason === 'error' || stopReason === 'aborted';
-        const isTextTerminal = (stopReason === 'stop' || stopReason === 'length')
-            && !hasToolCall(obj.message.content);
-        if (!isHardTerminal && !isTextTerminal)
-            continue;
-        events.push({
-            uuid: `${path}:${lineStart}`,
-            timestampMs,
-            kind: 'assistant_final',
-            text: joinTextContent(obj.message.content),
-            sourceSessionId: sessionId,
-            ...piTerminalOutcome(stopReason),
-        });
-    }
-    return { events, newOffset, pendingTail };
-}
-//# sourceMappingURL=pi-transcript.js.map

package/dist/services/pi-transcript.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pi-transcript.js","sourceRoot":"","sources":["../../src/services/pi-transcript.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzG,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;AACrE,MAAM,eAAe,GAAG,iEAAiE,CAAC;AAC1F,MAAM,QAAQ,GAAG,QAAQ,EAAE,KAAK,OAAO,CAAC;AAqBxC;;;;;;;;;;;uEAWuE;AACvE,SAAS,iBAAiB,CAAC,UAAgC;IAIzD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC;QACZ,KAAK,OAAO;YACV,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;QAC1E,KAAK,SAAS;YACZ,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;IACjF,CAAC;AACH,CAAC;AAQD,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,UAAU,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,CAAC,GAAG,0EAA0E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,IAAK,IAAY,CAAC,IAAI,KAAK,MAAM,IAAI,OAAQ,IAAY,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAE,IAAY,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AACjC,CAAC;AAED;;;;yEAIyE;AACzE,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAK,IAAY,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,YAAoB,EAAE,GAAY;IAC5E,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,YAAY,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACtF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAa,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;YACzB,IAAI,OAAiB,CAAC;YACtB,IAAI,CAAC;gBAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACvD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC7B,IAAI,EAA+B,CAAC;gBACpC,IAAI,CAAC;oBAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBAChD,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,CAAC;qBAAM,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAChD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,SAAS,GAAG,KAAK,CAAC;QAChC,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,OAAiB,CAAC;YACtB,IAAI,CAAC;gBAAC,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC;YACjE,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,IAAI,MAAc,CAAC;gBACnB,IAAI,CAAC;oBAAC,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,SAAS;gBAAC,CAAC;gBACnE,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,GAAG;oBAAE,OAAO,GAAG,CAAC;YACtB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,WAAW,GAAG,MAAM,EAAE;YACnC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,UAAkB;IAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAAC,CAAC;IAC5G,IAAI,KAAK,GAAG,UAAU,CAAC;IACvB,IAAI,IAAI,GAAG,KAAK;QAAE,KAAK,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAE7E,MAAM,GAAG,GAAG,IAAI,GAAG,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,MAAM,SAAS,GAAG,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAElE,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC;QACzB,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QACnD,IAAI,GAAG,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,SAAS;QACzF,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;QAE9B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE;gBAC5B,WAAW;gBACX,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,OAAO;gBACb,eAAe,EAAE,SAAS;aAC3B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,IAAI,KAAK,WAAW;YAAE,SAAS;QAEnC,MAAM,UAAU,GACd,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;YAChC,CAAC,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,QAAQ;gBAC1C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU;gBACxB,CAAC,CAAC,SAAS,CAAC;QAElB,wEAAwE;QACxE,+CAA+C;QAC/C,iEAAiE;QACjE,yEAAyE;QACzE,uDAAuD;QACvD,4EAA4E;QAC5E,wEAAwE;QACxE,wEAAwE;QACxE,4EAA4E;QAC5E,sEAAsE;QACtE,4EAA4E;QAC5E,6EAA6E;QAC7E,mDAAmD;QACnD,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,mEAAmE;QACnE,yDAAyD;QACzD,MAAM,cAAc,GAAG,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,CAAC;QAC1E,MAAM,cAAc,GAAG,CAAC,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,CAAC;eACpE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc;YAAE,SAAS;QAEjD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE;YAC5B,WAAW;YACX,IAAI,EAAE,iBAAiB;YACvB,IAAI,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YAC1C,eAAe,EAAE,SAAS;YAC1B,GAAG,iBAAiB,CAAC,UAAkC,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AAC5C,CAAC"}

package/dist/services/platform-team-store.d.ts

@@ -1,52 +0,0 @@
-/** teamId prefix used when mirroring platform team groups into team-groups.json. */
-export declare const PLATFORM_TEAM_PREFIX = "platform:";
-export interface PlatformTeamBot {
-    appId: string;
-    unionId?: string;
-    name?: string;
-}
-export interface PlatformTeamSyncTeam {
-    teamId: string;
-    teamName: string;
-    /** Team-assembled group chats (机器人大厅 first) — trusted like 拉群 groups. */
-    groupChatIds: string[];
-    bots: PlatformTeamBot[];
-    /** Team members' (people's) union_ids — the human talk-免grant leg: a member
-     *  is trusted to TALK (never operate) inside this team's group chats. */
-    memberUnionIds: string[];
-}
-export interface PlatformTeamSyncPayload {
-    rev: string;
-    teams: PlatformTeamSyncTeam[];
-}
-/**
- * Apply a platform `team-sync` push: persist the payload (full-replace — it is
- * the platform's complete view of THIS machine's teams) and mirror the group
- * chats into team-groups.json under the platform prefix. Teams absent from the
- * payload (machine left the team / team deleted) drop out of both stores.
- */
-export declare function applyPlatformTeamSync(dataDir: string, payload: {
-    rev?: unknown;
-    teams?: unknown;
-}, now?: number): PlatformTeamSyncPayload | null;
-/** The rev of the last applied team-sync ('' when none) — reported on
- *  register/heartbeat so the platform knows whether to re-push. */
-export declare function getPlatformTeamSyncRev(dataDir: string): string;
-/** All platform teams this machine belongs to (last applied sync). */
-export declare function listPlatformTeams(dataDir: string): PlatformTeamSyncTeam[];
-/** 该 chat 是否是某个平台团队的机器人大厅。大厅是身份登记回声室：bot 发的消息
- *  只用于学习（union_id / cross-ref / recordTeamBot），绝不当任务路由。
- *  只认 groupChatIds[0]（协议语义：大厅 first）——后续若下发普通团队协作群，
- *  它们不是大厅，bot 互 @ 必须正常路由（Codex review 收窄）。 */
-export declare function isPlatformHallChat(dataDir: string, chatId: string | undefined): boolean;
-/** Is `unionId` a bot in ANY platform team this machine belongs to? The auth
- *  gate's platform-mode predicate — membership-driven, no expiry. */
-export declare function isPlatformTeamBot(dataDir: string, unionId: string | undefined): boolean;
-/** Is `unionId` a HUMAN member of a platform team AND is `chatId` one of that
- *  team's group chats? The talk-免grant leg for people: a teammate speaking in
- *  the team's own group is trusted to TALK without /grant — but scoped to those
- *  groups (not everywhere), and TALK only (operate stays allowedUsers-gated, the
- *  caller must never route this predicate into canOperate). Both conditions must
- *  hold on the SAME team so cross-team leakage is impossible. */
-export declare function isPlatformTeamMemberChat(dataDir: string, chatId: string | undefined, unionId: string | undefined): boolean;
-//# sourceMappingURL=platform-team-store.d.ts.map

package/dist/services/platform-team-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"platform-team-store.d.ts","sourceRoot":"","sources":["../../src/services/platform-team-store.ts"],"names":[],"mappings":"AAgCA,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,cAAc,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,yEAAyE;IACzE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB;6EACyE;IACzE,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,oBAAoB,EAAE,CAAC;CAC/B;AAiDD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,GAAG,GAAE,MAAmB,GACvB,uBAAuB,GAAG,IAAI,CAehC;AAED;mEACmE;AACnE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,EAAE,CAEzE;AAED;;;8CAG8C;AAC9C,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAOvF;AAED;qEACqE;AACrE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CASvF;AAED;;;;;iEAKiE;AACjE,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAUT"}