botmux 3.10.0 → 3.23.1

package/dist/services/platform-team-store.js

@@ -1,159 +0,0 @@
-/**
- * Platform-team trust store: the centralized botmux platform's view of the
- * teams THIS machine belongs to — teammate bot union_ids + team group chats
- * (机器人大厅 etc.), pushed by the platform over the tunnel control channel
- * (`team-sync`, see platform repo tunnel/protocol).
- *
- * This is the PLATFORM counterpart of the legacy federation trust stores
- * ([[team-bots-store]] / [[team-groups-store]]): both feed the same auth gate
- * (isTrustedTeamBotSender / canOperate / evaluateTalk), so 平台团队 and 旧版
- * hub/spoke 团队 are equally "team mode" — neither needs /grant.
- *
- * Semantics differ from the learned store on purpose:
- * - Entries are AUTHORITATIVE roster state, not passively learned — they are
- *   replaced wholesale on every sync and follow team membership. No 30d expiry:
- *   a bot removed from the team disappears on the next sync instead of aging out.
- * - The version compare is declarative: the daemon reports `rev` (see
- *   getPlatformTeamSyncRev) on register/heartbeat; the platform pushes the full
- *   payload whenever its authoritative rev differs. Missed pushes self-heal on
- *   the next heartbeat; a lost/corrupt local file self-heals the same way.
- *
- * Group chats are additionally mirrored into [[team-groups-store]] under the
- * `platform:<teamId>` teamId prefix (replace-by-prefix, never touching legacy
- * federation entries) so every existing isTeamGroupChat consumer — the
- * first-contact trust leg AND the recordTeamBot learning gate — works unchanged.
- *
- * Storage: `{dataDir}/platform-team-sync.json`.
- */
-import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-import { replaceTeamGroupsByPrefix } from './team-groups-store.js';
-/** teamId prefix used when mirroring platform team groups into team-groups.json. */
-export const PLATFORM_TEAM_PREFIX = 'platform:';
-function filePath(dataDir) {
-    return join(dataDir, 'platform-team-sync.json');
-}
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return null;
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && typeof parsed === 'object' && typeof parsed.rev === 'string' && Array.isArray(parsed.teams)) {
-            return parsed;
-        }
-    }
-    catch { /* corrupt — fall through to null (rev mismatch → platform re-pushes) */ }
-    return null;
-}
-/** Sanitize one team entry from an untrusted tunnel payload. Null → drop. */
-function sanitizeTeam(raw) {
-    if (!raw || typeof raw !== 'object')
-        return null;
-    const t = raw;
-    const teamId = typeof t.teamId === 'string' ? t.teamId.trim() : '';
-    if (!teamId)
-        return null;
-    const teamName = typeof t.teamName === 'string' ? t.teamName : teamId;
-    const groupChatIds = Array.isArray(t.groupChatIds)
-        ? t.groupChatIds.filter((c) => typeof c === 'string' && !!c.trim())
-        : [];
-    const bots = [];
-    if (Array.isArray(t.bots)) {
-        for (const b of t.bots) {
-            if (!b || typeof b !== 'object')
-                continue;
-            const appId = typeof b.appId === 'string' ? String(b.appId).trim() : '';
-            if (!appId)
-                continue;
-            const unionId = typeof b.unionId === 'string' ? String(b.unionId).trim() : '';
-            const name = typeof b.name === 'string' ? String(b.name) : undefined;
-            bots.push({ appId, unionId: unionId || undefined, name });
-        }
-    }
-    const memberUnionIds = Array.isArray(t.memberUnionIds)
-        ? t.memberUnionIds.filter((u) => typeof u === 'string' && !!u.trim()).map((u) => u.trim())
-        : [];
-    return { teamId, teamName, groupChatIds, bots, memberUnionIds };
-}
-/**
- * Apply a platform `team-sync` push: persist the payload (full-replace — it is
- * the platform's complete view of THIS machine's teams) and mirror the group
- * chats into team-groups.json under the platform prefix. Teams absent from the
- * payload (machine left the team / team deleted) drop out of both stores.
- */
-export function applyPlatformTeamSync(dataDir, payload, now = Date.now()) {
-    const rev = typeof payload?.rev === 'string' ? payload.rev.trim() : '';
-    if (!rev)
-        return null;
-    const teams = (Array.isArray(payload?.teams) ? payload.teams : [])
-        .map(sanitizeTeam)
-        .filter((t) => !!t);
-    const shape = { rev, teams, updatedAt: now };
-    atomicWriteFileSync(filePath(dataDir), JSON.stringify(shape, null, 2) + '\n');
-    replaceTeamGroupsByPrefix(dataDir, PLATFORM_TEAM_PREFIX, teams.flatMap(t => t.groupChatIds.map(chatId => ({ teamId: `${PLATFORM_TEAM_PREFIX}${t.teamId}`, chatId }))), now);
-    return { rev, teams };
-}
-/** The rev of the last applied team-sync ('' when none) — reported on
- *  register/heartbeat so the platform knows whether to re-push. */
-export function getPlatformTeamSyncRev(dataDir) {
-    return readFile(dataDir)?.rev ?? '';
-}
-/** All platform teams this machine belongs to (last applied sync). */
-export function listPlatformTeams(dataDir) {
-    return readFile(dataDir)?.teams ?? [];
-}
-/** 该 chat 是否是某个平台团队的机器人大厅。大厅是身份登记回声室：bot 发的消息
- *  只用于学习（union_id / cross-ref / recordTeamBot），绝不当任务路由。
- *  只认 groupChatIds[0]（协议语义：大厅 first）——后续若下发普通团队协作群，
- *  它们不是大厅，bot 互 @ 必须正常路由（Codex review 收窄）。 */
-export function isPlatformHallChat(dataDir, chatId) {
-    const id = (chatId ?? '').trim();
-    if (!id)
-        return false;
-    const data = readFile(dataDir);
-    if (!data)
-        return false;
-    for (const t of data.teams)
-        if (t.groupChatIds[0] === id)
-            return true;
-    return false;
-}
-/** Is `unionId` a bot in ANY platform team this machine belongs to? The auth
- *  gate's platform-mode predicate — membership-driven, no expiry. */
-export function isPlatformTeamBot(dataDir, unionId) {
-    const id = (unionId ?? '').trim();
-    if (!id)
-        return false;
-    const data = readFile(dataDir);
-    if (!data)
-        return false;
-    for (const t of data.teams) {
-        for (const b of t.bots)
-            if (b.unionId === id)
-                return true;
-    }
-    return false;
-}
-/** Is `unionId` a HUMAN member of a platform team AND is `chatId` one of that
- *  team's group chats? The talk-免grant leg for people: a teammate speaking in
- *  the team's own group is trusted to TALK without /grant — but scoped to those
- *  groups (not everywhere), and TALK only (operate stays allowedUsers-gated, the
- *  caller must never route this predicate into canOperate). Both conditions must
- *  hold on the SAME team so cross-team leakage is impossible. */
-export function isPlatformTeamMemberChat(dataDir, chatId, unionId) {
-    const cid = (chatId ?? '').trim();
-    const uid = (unionId ?? '').trim();
-    if (!cid || !uid)
-        return false;
-    const data = readFile(dataDir);
-    if (!data)
-        return false;
-    for (const t of data.teams) {
-        if (t.memberUnionIds.includes(uid) && t.groupChatIds.includes(cid))
-            return true;
-    }
-    return false;
-}
-//# sourceMappingURL=platform-team-store.js.map

package/dist/services/platform-team-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"platform-team-store.js","sourceRoot":"","sources":["../../src/services/platform-team-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAAC;AA4BhD,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1G,OAAO,MAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,wEAAwE,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QAChD,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChF,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAC1C,MAAM,KAAK,GAAG,OAAQ,CAA6B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,CAA6B,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClI,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,OAAO,GAAG,OAAQ,CAA6B,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,CAA6B,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxI,MAAM,IAAI,GAAG,OAAQ,CAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,CAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/H,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACpD,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvG,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAA2C,EAC3C,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,GAAG,GAAG,OAAO,OAAO,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,GAAG,CAAC,YAAY,CAAC;SACjB,MAAM,CAAC,CAAC,CAAC,EAA6B,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAc,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACxD,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9E,yBAAyB,CACvB,OAAO,EACP,oBAAoB,EACpB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAC5G,GAAG,CACJ,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;AACxC,CAAC;AAED;;;8CAG8C;AAC9C,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAA0B;IAC5E,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;IACtE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,OAA2B;IAC5E,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI;YAAE,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;iEAKiE;AACjE,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,MAA0B,EAC1B,OAA2B;IAE3B,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/services/plugin-registry-store.d.ts

@@ -1,8 +0,0 @@
-import type { InstalledPluginRecord, PluginRegistryFile } from '../core/plugins/types.js';
-export declare function readPluginRegistry(): PluginRegistryFile;
-export declare function writePluginRegistry(registry: PluginRegistryFile): void;
-export declare function listInstalledPlugins(): InstalledPluginRecord[];
-export declare function getInstalledPlugin(id: string): InstalledPluginRecord | undefined;
-export declare function upsertInstalledPlugin(record: InstalledPluginRecord): InstalledPluginRecord;
-export declare function removeInstalledPlugin(id: string): InstalledPluginRecord | undefined;
-//# sourceMappingURL=plugin-registry-store.d.ts.map

package/dist/services/plugin-registry-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-registry-store.d.ts","sourceRoot":"","sources":["../../src/services/plugin-registry-store.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AA2G1F,wBAAgB,kBAAkB,IAAI,kBAAkB,CAEvD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAEtE;AAED,wBAAgB,oBAAoB,IAAI,qBAAqB,EAAE,CAE9D;AAED,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEhF;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,CAe1F;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CASnF"}

package/dist/services/plugin-registry-store.js

@@ -1,153 +0,0 @@
-import { existsSync, mkdirSync, readFileSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-import { withFileLockSync } from '../utils/file-lock.js';
-import { assertValidPluginId } from '../core/plugins/ids.js';
-import { ensurePluginRegistryDir, pluginRegistryPath } from '../core/plugins/paths.js';
-import { capturePluginMcpPrivateSnapshot, isPluginMcpContribution, isPluginMcpServer, publicPluginMcpContribution, restorePluginMcpPrivateSnapshot, writePluginMcpDescriptor, } from '../core/plugins/mcp/private-store.js';
-function registryLockTarget() {
-    ensurePluginRegistryDir();
-    return pluginRegistryPath();
-}
-function parsePluginRegistry() {
-    const file = pluginRegistryPath();
-    if (!existsSync(file))
-        return { schemaVersion: 1, plugins: {} };
-    try {
-        const parsed = JSON.parse(readFileSync(file, 'utf-8'));
-        const rawPlugins = parsed?.plugins && typeof parsed.plugins === 'object' && !Array.isArray(parsed.plugins)
-            ? parsed.plugins
-            : {};
-        const plugins = {};
-        for (const [id, raw] of Object.entries(rawPlugins)) {
-            if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-                continue;
-            const record = raw;
-            if (record.id !== id)
-                continue;
-            try {
-                assertValidPluginId(id);
-            }
-            catch {
-                continue;
-            }
-            if (!record.packageName || !record.version || !record.manifest)
-                continue;
-            plugins[id] = record;
-        }
-        return { schemaVersion: 1, plugins };
-    }
-    catch {
-        return { schemaVersion: 1, plugins: {} };
-    }
-}
-function hasPrivateMcpFields(value) {
-    if (!value || typeof value !== 'object' || Array.isArray(value))
-        return false;
-    return ['command', 'env', 'url', 'headers'].some(key => Object.hasOwn(value, key));
-}
-function assertPublicPluginRegistry(registry) {
-    for (const record of Object.values(registry.plugins)) {
-        const mcp = record.contributions?.mcp;
-        if (mcp === undefined)
-            continue;
-        if (!isPluginMcpContribution(mcp) || hasPrivateMcpFields(mcp)) {
-            throw new Error(`invalid_public_plugin_mcp_contribution:${record.id}`);
-        }
-    }
-}
-function writePluginRegistryUnlocked(registry) {
-    assertPublicPluginRegistry(registry);
-    mkdirSync(dirname(pluginRegistryPath()), { recursive: true });
-    atomicWriteFileSync(pluginRegistryPath(), JSON.stringify(registry, null, 2) + '\n', { mode: 0o600 });
-}
-/** Atomically migrates legacy registry-embedded MCP descriptors into protected
- * per-plugin files. Private writes are rolled back if the public registry swap
- * fails, so readers never observe a half-migrated configuration. */
-function migrateLegacyPluginMcpDescriptors(registry) {
-    const snapshots = new Map();
-    try {
-        const legacy = [];
-        for (const record of Object.values(registry.plugins)) {
-            const mcp = record.contributions?.mcp;
-            if (mcp === undefined)
-                continue;
-            if (isPluginMcpServer(mcp)) {
-                if (mcp.name !== record.id)
-                    throw new Error(`invalid_legacy_plugin_mcp_descriptor:${record.id}`);
-                legacy.push(record);
-                continue;
-            }
-            if (!isPluginMcpContribution(mcp) || hasPrivateMcpFields(mcp)) {
-                throw new Error(`invalid_plugin_mcp_contribution:${record.id}`);
-            }
-        }
-        if (legacy.length === 0)
-            return registry;
-        for (const record of legacy) {
-            const mcp = record.contributions.mcp;
-            if (!isPluginMcpServer(mcp))
-                throw new Error(`invalid_legacy_plugin_mcp_descriptor:${record.id}`);
-            snapshots.set(record.id, capturePluginMcpPrivateSnapshot(record.id));
-            writePluginMcpDescriptor(record.id, mcp);
-            record.contributions = {
-                ...record.contributions,
-                mcp: publicPluginMcpContribution(mcp),
-            };
-        }
-        writePluginRegistryUnlocked(registry);
-        return registry;
-    }
-    catch (error) {
-        for (const [pluginId, snapshot] of [...snapshots.entries()].reverse()) {
-            try {
-                restorePluginMcpPrivateSnapshot(pluginId, snapshot);
-            }
-            catch { /* preserve migration failure */ }
-        }
-        throw new Error(`plugin_mcp_registry_migration_failed:${error instanceof Error ? error.message : String(error)}`, { cause: error });
-    }
-}
-function readPluginRegistryUnlocked() {
-    return migrateLegacyPluginMcpDescriptors(parsePluginRegistry());
-}
-export function readPluginRegistry() {
-    return withFileLockSync(registryLockTarget(), () => readPluginRegistryUnlocked(), { maxWaitMs: 30_000 });
-}
-export function writePluginRegistry(registry) {
-    withFileLockSync(registryLockTarget(), () => writePluginRegistryUnlocked(registry), { maxWaitMs: 30_000 });
-}
-export function listInstalledPlugins() {
-    return Object.values(readPluginRegistry().plugins).sort((a, b) => a.id.localeCompare(b.id));
-}
-export function getInstalledPlugin(id) {
-    return readPluginRegistry().plugins[assertValidPluginId(id)];
-}
-export function upsertInstalledPlugin(record) {
-    assertValidPluginId(record.id);
-    if (record.manifest.id !== record.id)
-        throw new Error('plugin_manifest_id_mismatch');
-    return withFileLockSync(registryLockTarget(), () => {
-        const registry = readPluginRegistryUnlocked();
-        const now = new Date().toISOString();
-        const previous = registry.plugins[record.id];
-        registry.plugins[record.id] = {
-            ...record,
-            installedAt: previous?.installedAt ?? record.installedAt ?? now,
-            updatedAt: now,
-        };
-        writePluginRegistryUnlocked(registry);
-        return registry.plugins[record.id];
-    }, { maxWaitMs: 30_000 });
-}
-export function removeInstalledPlugin(id) {
-    const pluginId = assertValidPluginId(id);
-    return withFileLockSync(registryLockTarget(), () => {
-        const registry = readPluginRegistryUnlocked();
-        const previous = registry.plugins[pluginId];
-        delete registry.plugins[pluginId];
-        writePluginRegistryUnlocked(registry);
-        return previous;
-    }, { maxWaitMs: 30_000 });
-}
-//# sourceMappingURL=plugin-registry-store.js.map

package/dist/services/plugin-registry-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plugin-registry-store.js","sourceRoot":"","sources":["../../src/services/plugin-registry-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAEvF,OAAO,EACL,+BAA+B,EAC/B,uBAAuB,EACvB,iBAAiB,EACjB,2BAA2B,EAC3B,+BAA+B,EAC/B,wBAAwB,GACzB,MAAM,sCAAsC,CAAC;AAE9C,SAAS,kBAAkB;IACzB,uBAAuB,EAAE,CAAC;IAC1B,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YACxG,CAAC,CAAC,MAAM,CAAC,OAAkC;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,OAAO,GAA0C,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YACpE,MAAM,MAAM,GAAG,GAA4B,CAAC;YAC5C,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE;gBAAE,SAAS;YAC/B,IAAI,CAAC;gBAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,SAAS;YAAC,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAAE,SAAS;YACzE,OAAO,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QACvB,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,0BAA0B,CAAC,QAA4B;IAC9D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,GAAG,GAAI,MAAM,CAAC,aAA+C,EAAE,GAAG,CAAC;QACzE,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,QAA4B;IAC/D,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,mBAAmB,CAAC,kBAAkB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACvG,CAAC;AAED;;oEAEoE;AACpE,SAAS,iCAAiC,CAAC,QAA4B;IACrE,MAAM,SAAS,GAAG,IAAI,GAAG,EAA8D,CAAC;IACxF,IAAI,CAAC;QACH,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,GAAG,GAAI,MAAM,CAAC,aAA+C,EAAE,GAAG,CAAC;YACzE,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;QAEzC,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAI,MAAM,CAAC,aAA6C,CAAC,GAAG,CAAC;YACtE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,+BAA+B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,wBAAwB,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YACzC,MAAM,CAAC,aAAa,GAAG;gBACrB,GAAG,MAAM,CAAC,aAAa;gBACvB,GAAG,EAAE,2BAA2B,CAAC,GAAG,CAAC;aACtC,CAAC;QACJ,CAAC;QACD,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtE,IAAI,CAAC;gBAAC,+BAA+B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,gCAAgC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,IAAI,KAAK,CACb,wCAAwC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAChG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B;IACjC,OAAO,iCAAiC,CAAC,mBAAmB,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,0BAA0B,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC9D,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,kBAAkB,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACrF,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7C,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG;YAC5B,GAAG,MAAM;YACT,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW,IAAI,GAAG;YAC/D,SAAS,EAAE,GAAG;SACf,CAAC;QACF,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACzC,OAAO,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,0BAA0B,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAClC,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,QAAQ,CAAC;IAClB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/services/project-scanner.d.ts

@@ -1,28 +0,0 @@
-export interface ProjectInfo {
-    name: string;
-    path: string;
-    type: 'repo' | 'worktree';
-    branch: string;
-}
-export interface ProjectScanOptions {
-    includeWorktrees?: boolean;
-}
-/**
- * Describe a single directory as a project: the main worktree basename +
- * current git ref, or null if the directory isn't a git repo/worktree. Using
- * the main worktree name preserves the picker label for an explicitly selected
- * linked worktree without recursively scanning the configured roots first.
- */
-export declare function describeProjectDir(dir: string): {
-    name: string;
-    branch: string;
-} | null;
-/**
- * Scan a directory for git repositories and their worktrees.
- */
-export declare function scanProjects(baseDir: string, maxDepth?: number, options?: ProjectScanOptions): ProjectInfo[];
-/**
- * Scan multiple directories and deduplicate by path.
- */
-export declare function scanMultipleProjects(baseDirs: string[], maxDepth?: number, options?: ProjectScanOptions): ProjectInfo[];
-//# sourceMappingURL=project-scanner.d.ts.map

package/dist/services/project-scanner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-scanner.d.ts","sourceRoot":"","sources":["../../src/services/project-scanner.ts"],"names":[],"mappings":"AA2BA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAWvF;AAsFD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAU,EAAE,OAAO,GAAE,kBAAuB,GAAG,WAAW,EAAE,CA+CnH;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,QAAQ,GAAE,MAAU,EAAE,OAAO,GAAE,kBAAuB,GAAG,WAAW,EAAE,CAe9H"}

package/dist/services/project-scanner.js

@@ -1,203 +0,0 @@
-import { execSync } from 'node:child_process';
-import { readdirSync, statSync, existsSync } from 'node:fs';
-import { join, basename, resolve } from 'node:path';
-import { logger } from '../utils/logger.js';
-/** A `.git` entry that's a regular file (worktree gitlink) or a directory
- *  containing `HEAD`. An empty `.git/` is rejected so the scanner keeps
- *  recursing past stray markers like `/root/.git`. */
-function isValidGitMarker(parentDir) {
-    const gitPath = join(parentDir, '.git');
-    let st;
-    try {
-        st = statSync(gitPath);
-    }
-    catch {
-        return false;
-    }
-    if (st.isFile())
-        return true;
-    if (st.isDirectory())
-        return existsSync(join(gitPath, 'HEAD'));
-    return false;
-}
-function runGit(args, cwd) {
-    try {
-        return execSync(`git ${args}`, {
-            cwd, timeout: 5000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'],
-        }).trim();
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Describe a single directory as a project: the main worktree basename +
- * current git ref, or null if the directory isn't a git repo/worktree. Using
- * the main worktree name preserves the picker label for an explicitly selected
- * linked worktree without recursively scanning the configured roots first.
- */
-export function describeProjectDir(dir) {
-    if (!isValidGitMarker(dir))
-        return null;
-    const worktreeList = runGit('worktree list --porcelain', dir);
-    const mainWorktree = worktreeList
-        ?.split('\n')
-        .find(line => line.startsWith('worktree '))
-        ?.slice('worktree '.length);
-    return {
-        name: mainWorktree ? basename(mainWorktree) : basename(dir),
-        branch: getGitRef(dir),
-    };
-}
-/** `rev-parse --abbrev-ref HEAD` returns the literal string `HEAD` when
- *  detached — that's the signal to fall through to tag/SHA. */
-function getGitRef(dir) {
-    const branch = runGit('rev-parse --abbrev-ref HEAD', dir);
-    if (branch && branch !== 'HEAD')
-        return branch;
-    const tag = runGit('describe --tags --exact-match HEAD', dir);
-    if (tag)
-        return tag;
-    const sha = runGit('rev-parse --short HEAD', dir);
-    return sha || 'unknown';
-}
-function describeDetachedHead(worktreePath, headSha) {
-    const tag = runGit('describe --tags --exact-match HEAD', worktreePath);
-    if (tag)
-        return tag;
-    return headSha ? headSha.slice(0, 7) : 'unknown';
-}
-/** Sibling worktrees of one repo share a common-dir — used as the dedup
- *  key so the scanner doesn't double-register when main + linked sit
- *  side-by-side in the scan root. */
-function getGitCommonDir(dir) {
-    const out = runGit('rev-parse --git-common-dir', dir);
-    return out ? resolve(dir, out) : dir;
-}
-/** Index 0 of `git worktree list --porcelain` is always the main worktree.
- *  All entries share its basename as `name`, so display stays stable
- *  regardless of which sibling readdir hits first. */
-function scanRepoFromAnyWorktree(anyWorktreePath, options = {}) {
-    const fallback = [{
-            name: basename(anyWorktreePath),
-            path: anyWorktreePath,
-            type: 'repo',
-            branch: getGitRef(anyWorktreePath),
-        }];
-    const output = runGit('worktree list --porcelain', anyWorktreePath);
-    if (output === null)
-        return fallback;
-    const entries = [];
-    let currentPath = '';
-    let currentHead = '';
-    let currentBranch = '';
-    // runGit trims the trailing newline; append a sentinel so the final
-    // entry hits the empty-line flush branch below.
-    const lines = output.split('\n');
-    lines.push('');
-    for (const line of lines) {
-        if (line.startsWith('worktree ')) {
-            currentPath = line.slice('worktree '.length);
-        }
-        else if (line.startsWith('HEAD ')) {
-            currentHead = line.slice('HEAD '.length);
-        }
-        else if (line.startsWith('branch ')) {
-            currentBranch = line.slice('branch '.length).replace('refs/heads/', '');
-        }
-        else if (line === '') {
-            if (currentPath) {
-                const ref = currentBranch
-                    || (currentHead ? describeDetachedHead(currentPath, currentHead) : 'unknown');
-                entries.push({ path: currentPath, branch: ref });
-            }
-            currentPath = '';
-            currentHead = '';
-            currentBranch = '';
-        }
-    }
-    if (entries.length === 0)
-        return fallback;
-    const repoName = basename(entries[0].path);
-    const includeWorktrees = options.includeWorktrees !== false;
-    return entries
-        .filter((_wt, i) => includeWorktrees || i === 0)
-        .map((wt, i) => ({
-        name: repoName,
-        path: wt.path,
-        type: i === 0 ? 'repo' : 'worktree',
-        branch: wt.branch,
-    }));
-}
-function compareProjects(a, b) {
-    if (a.type !== b.type)
-        return a.type === 'repo' ? -1 : 1;
-    return a.name.localeCompare(b.name) || a.branch.localeCompare(b.branch);
-}
-/**
- * Scan a directory for git repositories and their worktrees.
- */
-export function scanProjects(baseDir, maxDepth = 3, options = {}) {
-    const projects = [];
-    const seenRepos = new Set(); // by git-common-dir
-    const seenPaths = new Set(); // by absolute path
-    function walk(dir, depth) {
-        if (depth > maxDepth)
-            return;
-        let entries;
-        try {
-            entries = readdirSync(dir);
-        }
-        catch {
-            return;
-        }
-        if (entries.includes('.git') && isValidGitMarker(dir)) {
-            const commonDir = getGitCommonDir(dir);
-            if (seenRepos.has(commonDir))
-                return;
-            seenRepos.add(commonDir);
-            for (const p of scanRepoFromAnyWorktree(dir, options)) {
-                if (!seenPaths.has(p.path)) {
-                    seenPaths.add(p.path);
-                    projects.push(p);
-                }
-            }
-            return;
-        }
-        for (const entry of entries) {
-            if (entry.startsWith('.') || entry === 'node_modules' || entry === 'vendor' || entry === 'dist')
-                continue;
-            const fullPath = join(dir, entry);
-            try {
-                if (statSync(fullPath).isDirectory()) {
-                    walk(fullPath, depth + 1);
-                }
-            }
-            catch {
-                // permission denied or broken symlink
-            }
-        }
-    }
-    walk(baseDir, 0);
-    projects.sort(compareProjects);
-    logger.info(`Scanned ${baseDir}: found ${projects.length} project(s)`);
-    return projects;
-}
-/**
- * Scan multiple directories and deduplicate by path.
- */
-export function scanMultipleProjects(baseDirs, maxDepth = 3, options = {}) {
-    const seen = new Set();
-    const merged = [];
-    for (const dir of baseDirs) {
-        for (const project of scanProjects(dir, maxDepth, options)) {
-            if (!seen.has(project.path)) {
-                seen.add(project.path);
-                merged.push(project);
-            }
-        }
-    }
-    merged.sort(compareProjects);
-    return merged;
-}
-//# sourceMappingURL=project-scanner.js.map

package/dist/services/project-scanner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"project-scanner.js","sourceRoot":"","sources":["../../src/services/project-scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;sDAEsD;AACtD,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACvD,IAAI,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,EAAE,CAAC,WAAW,EAAE;QAAE,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,GAAW;IACvC,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE;YAC7B,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SACvE,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAaD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,YAAY;QAC/B,EAAE,KAAK,CAAC,IAAI,CAAC;SACZ,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAC3C,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC3D,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC;KACvB,CAAC;AACJ,CAAC;AAED;+DAC+D;AAC/D,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,GAAG,GAAG,MAAM,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;IAClD,OAAO,GAAG,IAAI,SAAS,CAAC;AAC1B,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;qCAEqC;AACrC,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACvC,CAAC;AAED;;sDAEsD;AACtD,SAAS,uBAAuB,CAAC,eAAuB,EAAE,UAA8B,EAAE;IACxF,MAAM,QAAQ,GAAkB,CAAC;YAC/B,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;YAC/B,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,SAAS,CAAC,eAAe,CAAC;SACnC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,CAAC,2BAA2B,EAAE,eAAe,CAAC,CAAC;IACpE,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAErC,MAAM,OAAO,GAAuC,EAAE,CAAC;IACvD,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,aAAa,GAAG,EAAE,CAAC;IACvB,oEAAoE;IACpE,gDAAgD;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACjC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YACvB,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,GAAG,GAAG,aAAa;uBACpB,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAChF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACnD,CAAC;YACD,WAAW,GAAG,EAAE,CAAC;YACjB,WAAW,GAAG,EAAE,CAAC;YACjB,aAAa,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAE1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC;IAC5D,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACjB,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,EAAE,CAAC,IAAI;QACb,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU;QACnC,MAAM,EAAE,EAAE,CAAC,MAAM;KAClB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,CAAc,EAAE,CAAc;IACrD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,WAAmB,CAAC,EAAE,UAA8B,EAAE;IAClG,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC,CAAG,oBAAoB;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC,CAAG,mBAAmB;IAE1D,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa;QACtC,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO;QAE7B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO;YACrC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEzB,KAAK,MAAM,CAAC,IAAI,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC;YACD,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,cAAc,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,MAAM;gBAAE,SAAS;YAC1G,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;oBACrC,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjB,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAE/B,MAAM,CAAC,IAAI,CAAC,WAAW,OAAO,WAAW,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;IACvE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAkB,EAAE,WAAmB,CAAC,EAAE,UAA8B,EAAE;IAC7G,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/services/quota-dedup.d.ts

@@ -1,33 +0,0 @@
-/**
- * 消息额度扣费去重：飞书事件可能重投、WSClient 重连后同一 message_id 可能再次进来，
- * 硬额度若按事件次数扣会被重复扣。这里用一个有界的 message_id 状态表做幂等。
- *
- * 三态去重（codex review 二轮收紧，修 fail-open）：
- *  - beginCharge 首次见 id → 记 **pending**（"扣费进行中"，非定论），返回 'fresh'：调用方继续扣费。
- *  - 扣费**成功** → commitCharge 转 **done**；后续同 id 重投命中 done → 返回 'done'：跳过扣费、放行
- *    （同一条消息只扣一次）。
- *  - 扣费**失败 / 被拒**（consumeQuota throw、或 allow=false 这种 fail-closed drop）→ abortCharge
- *    删除标记，让后续重投**重新走扣费判定**，避免「先 mark 后失败/被拒 → 重投命中标记被放行 →
- *    硬上限被绕过」的 fail-open。**关键**：被拒消息绝不能留成 done，否则重投会被直接放行。
- *  - 重投撞上仍 **pending**（前一投扣费 in-flight 未定论）→ 返回 'pending'：调用方按 **fail-closed
- *    drop** 处理（不放行、不扣），绝不在扣费定论前放行第二投。第一投走完会照常扣费+投递。
- *
- * 纯内存：重投是近期行为（秒~分钟级），daemon 重启后再收到旧 message_id 概率极低，
- * 额度近似安全，不值得持久化。
- */
-/** beginCharge 的结果：见 beginCharge 文档。 */
-export type ChargeOutcome = 'fresh' | 'pending' | 'done';
-/**
- * 标记/查询一次扣费，返回三态：
- *  - 'fresh'   首次见此 id（已记 pending）：调用方应继续扣费。
- *  - 'pending' 已有 in-flight 扣费尚未定论：调用方应 **fail-closed drop**（不放行、不扣）。
- *  - 'done'    已成功扣费定论：调用方放行（跳过扣费，不重复扣）。
- * 空 messageId 无法去重 → 永远 'fresh'（commit/abort 对它是 no-op）。
- */
-export declare function beginCharge(larkAppId: string, messageId: string): ChargeOutcome;
-/** 扣费成功：pending → done（定论，后续重投会被跳过+放行）。 */
-export declare function commitCharge(larkAppId: string, messageId: string): void;
-/** 扣费失败 / 被拒（fail-closed drop）：删除标记，让后续重投重新判定（保硬上限不被绕过）。 */
-export declare function abortCharge(larkAppId: string, messageId: string): void;
-export declare function _resetForTest(): void;
-//# sourceMappingURL=quota-dedup.d.ts.map

package/dist/services/quota-dedup.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"quota-dedup.d.ts","sourceRoot":"","sources":["../../src/services/quota-dedup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,wCAAwC;AACxC,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAMzD;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,aAAa,CAQ/E;AAED,2CAA2C;AAC3C,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAIvE;AAED,4DAA4D;AAC5D,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAGtE;AAaD,wBAAgB,aAAa,IAAI,IAAI,CAA4B"}