botmux 3.10.0 → 3.23.1

package/dist/services/seen-message-store.js

@@ -1,119 +0,0 @@
-/**
- * seen-message-store.ts — 跨重启的入站消息去重（按 message_id 持久化）。
- *
- * 为什么需要它：飞书长连接 (WS) 是 at-least-once，且每个事件只回**一帧** ACK——
- * 一旦 ACK 没及时回达（主机内存压力把事件循环卡住超过 ~3s 预算 / 网络抖动把那帧
- * ACK 丢了），飞书就按 15s / 5min / 1h / 6h（最多 4 次）重推同一条消息事件。
- *
- * event-dispatcher 原有的内存去重 (`eventClaims`, key=event_id, TTL 2h) 有两个缺口：
- *   1. **纯内存** —— daemon 重启 / 崩溃循环 / 被 OOM 杀掉一次，去重表就清空，之后任何
- *      重推都当新消息重新触发；
- *   2. **2h TTL** —— 盖不住 6h 那一档重推。
- * 此外它 key 用 `event_id ?? message_id`：`event_id` 标识「一次投递事件」，跨连接重投
- * 可能变；`message_id` 标识「消息」本身，对同一条逻辑消息恒定不变。要做「同一条消息
- * 只处理一次」，`message_id` 才是正确且充分的幂等键。
- *
- * 本 store 因此按 `message_id` **落盘**去重，TTL 8h 覆盖整条重推梯度 + 余量，重启后
- * 仍能挡住旧消息重放。每个 larkAppId 一份文件（key 已隐含 app 维度，且多 bot 各自
- * 独立、无跨进程写竞争）。
- *
- * 同步落盘的理由：`claimMessageOnce` 必须**全同步**返回（event-dispatcher 在 ACK 前的
- * 同步段里调用它，且依赖「claim + setImmediate 之间不 await」来保住同 anchor 消息的
- * 到达序）。落盘走 `atomicWriteFileSync`（tmp + rename，崩溃安全、无半截读），只在
- * 见到**新** message_id 时写一次快照；重复命中直接返回、不写盘。聊天桥接是人类节奏，
- * 每条新消息一次小快照写（个位数 ms）远在 3s ACK 预算之内。
- */
-import { existsSync, readFileSync, mkdirSync } from 'node:fs';
-import { dirname, join } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-import { config } from '../config.js';
-import { logger } from '../utils/logger.js';
-/** 8h —— 覆盖飞书 15s/5min/1h/6h 的全部重推档，外加余量。 */
-const TTL_MS = 8 * 60 * 60_000;
-/** 有界：超限按最旧（Map 迭代序即插入序）淘汰，防文件无界增长。 */
-const MAX_ENTRIES = 5000;
-const caches = new Map();
-function fileFor(larkAppId) {
-    return join(config.session.dataDir, 'dedup', `seen-messages-${larkAppId}.json`);
-}
-/** 懒加载：进程内首次用到某 app 时从盘载入（已过期的条目载入时即丢弃）。 */
-function load(larkAppId) {
-    const existing = caches.get(larkAppId);
-    if (existing?.loaded)
-        return existing;
-    const map = new Map();
-    const file = fileFor(larkAppId);
-    try {
-        if (existsSync(file)) {
-            const parsed = JSON.parse(readFileSync(file, 'utf-8'));
-            // 兜底：只接受 `{ key: number }` 形态；数组/损坏内容当空表，绝不抛。
-            if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
-                const now = Date.now();
-                for (const [k, exp] of Object.entries(parsed)) {
-                    if (typeof exp === 'number' && exp > now)
-                        map.set(k, exp);
-                }
-            }
-        }
-    }
-    catch (err) {
-        logger.warn(`[seen-message-store] load failed (${file}): ${err}`);
-    }
-    const cache = { map, loaded: true };
-    caches.set(larkAppId, cache);
-    return cache;
-}
-function persist(larkAppId, map) {
-    const file = fileFor(larkAppId);
-    try {
-        mkdirSync(dirname(file), { recursive: true });
-        const obj = {};
-        for (const [k, v] of map)
-            obj[k] = v;
-        atomicWriteFileSync(file, JSON.stringify(obj));
-    }
-    catch (err) {
-        // 落盘失败不阻断处理：退化为「本进程内仍去重，但重启后这条不再被挡」，
-        // 与未持久化前的旧行为一致，绝不因写盘失败丢消息。
-        logger.warn(`[seen-message-store] persist failed (${file}): ${err}`);
-    }
-}
-/** 删过期 + 超限淘汰最旧，保持 map / 文件有界。 */
-function pruneAndCap(map, now) {
-    for (const [k, exp] of map)
-        if (exp <= now)
-            map.delete(k);
-    if (map.size > MAX_ENTRIES) {
-        let drop = map.size - MAX_ENTRIES;
-        for (const k of map.keys()) {
-            map.delete(k);
-            if (--drop <= 0)
-                break;
-        }
-    }
-}
-/**
- * 首次见到此 `messageId` → 记录 + 落盘，返回 `true`（调用方应处理这条消息）。
- * 8h 内重复命中（飞书重推 / at-least-once 重复）→ 返回 `false`（重投，应丢弃）。
- * 空 `messageId` 无法去重 → 永远 `true`（绝不因缺 id 而误吞真实消息）。
- */
-export function claimMessageOnce(larkAppId, messageId, now = Date.now()) {
-    if (!messageId)
-        return true;
-    const cache = load(larkAppId);
-    const exp = cache.map.get(messageId);
-    if (exp && exp > now)
-        return false; // 命中未过期记录 → 重投
-    pruneAndCap(cache.map, now);
-    cache.map.set(messageId, now + TTL_MS);
-    persist(larkAppId, cache.map);
-    return true;
-}
-/**
- * Test-only：清空进程内缓存（**不删盘**），用于模拟「daemon 重启」后从盘重新载入，
- * 验证去重跨重启仍生效。
- */
-export function _resetCacheForTest() {
-    caches.clear();
-}
-//# sourceMappingURL=seen-message-store.js.map

package/dist/services/seen-message-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"seen-message-store.js","sourceRoot":"","sources":["../../src/services/seen-message-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,6CAA6C;AAC7C,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;AAC/B,uCAAuC;AACvC,MAAM,WAAW,GAAG,IAAI,CAAC;AAOzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;AAE3C,SAAS,OAAO,CAAC,SAAiB;IAChC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,SAAS,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,4CAA4C;AAC5C,SAAS,IAAI,CAAC,SAAiB;IAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,QAAQ,EAAE,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,8CAA8C;YAC9C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACvB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,GAAG;wBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,SAAiB,EAAE,GAAwB;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrC,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,qCAAqC;QACrC,2BAA2B;QAC3B,MAAM,CAAC,IAAI,CAAC,wCAAwC,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,kCAAkC;AAClC,SAAS,WAAW,CAAC,GAAwB,EAAE,GAAW;IACxD,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,GAAG;QAAE,IAAI,GAAG,IAAI,GAAG;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,GAAG,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACd,IAAI,EAAE,IAAI,IAAI,CAAC;gBAAE,MAAM;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,eAAe;IACnD,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC;IACvC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/services/send-policy.d.ts

@@ -1,182 +0,0 @@
-/**
- * Pure decision helpers for `botmux send` (extracted from cmdSend so they can
- * be unit-tested without process.exit / Lark I/O).
- *
- * Two policies live here:
- *   - resolveQuoteTarget: which message a chat-scope send should quote (reply
- *     to), so 普通群 messages render Lark's 引用 chain. Thread-scope and
- *     --top-level never quote.
- *   - validateMentionDecision: the @ hard-gate — every model-initiated reply
- *     must explicitly choose --mention / --mention-back / --no-mention.
- */
-export interface QuoteTargetArgs {
-    /** session.scope === 'chat' */
-    isChatScope: boolean;
-    /** --top-level publish mode */
-    sendTopLevel: boolean;
-    /** --no-quote: force a plain (un-quoted) send */
-    noQuote: boolean;
-    /** --quote <message_id> explicit override */
-    explicitQuote?: string;
-    /** session.quoteTargetId — the latest inbound message this turn responds to */
-    sessionQuoteTargetId?: string;
-}
-/**
- * Resolve the message id a send should quote, or null for a plain send.
- * Priority: --quote > session.quoteTargetId. Only chat-scope, non-top-level,
- * non-`--no-quote` sends quote.
- */
-export declare function resolveQuoteTarget(args: QuoteTargetArgs): string | null;
-export interface ManagedVcQuoteArgs {
-    managed: boolean;
-    durableDelivery: boolean;
-    explicitImMessageId?: string;
-    explicitQuote?: string;
-}
-/** A quote message id is a routing primitive: Lark's reply API derives the
- * destination chat from that id, not from the separately supplied chat id.
- * Managed deliveries therefore cannot choose one, while an explicit IM turn
- * may quote only the exact Lark message frozen in its origin snapshot. */
-export declare function managedVcQuoteError(args: ManagedVcQuoteArgs): string | null;
-/** Managed VC output must stay within botmux-owned message shapes. Even though
- * ordinary custom cards are scanned for known callback controls, treating an
- * evolving third-party card schema as an exhaustive privilege boundary is not
- * safe for meeting-derived (untrusted) model output. */
-export declare function managedVcCustomCardError(managed: boolean, customCardRequested: boolean): string | null;
-export interface ManagedVcSendControlArgs {
-    managed: boolean;
-    sendTopLevel: boolean;
-    overrideChatId?: string;
-    sendInto?: string;
-    attentionRequested: boolean;
-    explicitMentionCount: number;
-    mentionBack: boolean;
-    noMention: boolean;
-}
-/** Freeze every managed reply to the listener-thread route and a no-mention
- * addressing mode. Routing/mention/attention are independent side effects that
- * are not represented by the primary VC action identity. */
-export declare function managedVcSendControlError(args: ManagedVcSendControlArgs): string | null;
-export interface ManagedVcSendPayloadArgs {
-    managed: boolean;
-    asVoice: boolean;
-    hasBodyText: boolean;
-    imageCount: number;
-    fileCount: number;
-    videoCount: number;
-    containsNativeAtTag: boolean;
-}
-/** A dedicated receiver may emit only one botmux-owned text card. Provider
- * uploads (image/file/video/audio) happen before a Lark message UUID can be
- * reconciled, so allowing them would give retries or repeated commands an
- * unledgered resource-creation channel even when the visible message dedupes. */
-export declare function managedVcSendPayloadError(args: ManagedVcSendPayloadArgs): string | null;
-export declare function containsLarkAtTag(content: string): boolean;
-/** Render model-authored native Lark mention tags inert before placing the
- * text in a botmux-owned card. Full-width angle brackets are intentional:
- * unlike an HTML entity, they cannot be decoded and re-interpreted as a
- * second-pass `<at>` control by the card renderer. */
-export declare function neutralizeLarkAtTags(content: string): string;
-export interface MentionDecisionArgs {
-    /** config.send.requireMentionDecision */
-    enabled: boolean;
-    /** --top-level publish is exempt from the gate */
-    sendTopLevel: boolean;
-    /** at least one --mention <ou:Name> given */
-    hasMentionArgs: boolean;
-    /** --mention-back given */
-    mentionBack: boolean;
-    /** --no-mention given */
-    noMention: boolean;
-    /** whether the session knows who sent the message being replied to */
-    hasQuoteTargetSender: boolean;
-}
-export interface MentionDecisionResult {
-    ok: boolean;
-    /** present when !ok — the message to print before exit(2) */
-    error?: string;
-}
-/**
- * Enforce that the model made an explicit @ decision before sending.
- * Returns ok:false with a context-aware error when no decision was made or
- * the flags contradict each other.
- */
-export declare function validateMentionDecision(args: MentionDecisionArgs): MentionDecisionResult;
-export interface MentionBackParticipantArgs {
-    /** Session chat type — 'p2p' is inherently 1v1 (no fetch needed). */
-    chatType?: 'group' | 'p2p';
-    /** Real (human) member count from getGroupStats — excludes bots. */
-    userCount: number;
-    /** Bot member count from getGroupStats. */
-    botCount: number;
-}
-/**
- * Should `--mention-back` be blocked because the conversation has more than
- * two participants (humans + bots)?
- *
- * Rationale (symmetric with the inbound @ gate in event-dispatcher.ts, which
- * only lets an un-@ message through when `userCount <= 1 && botCount <= 1`):
- * in a true 1v1 (`userCount + botCount <= 2`, e.g. 1 human + 1 bot, or a p2p
- * DM) the triggerer IS the only counterpart, so auto-@-ing them back is safe
- * and unambiguous. Once a third party joins, "whoever triggered this turn" is
- * no longer reliably "who should be addressed" — a bystander's message can
- * trigger the bot while the substantive reply belongs to someone else. There
- * we force the model to make an explicit `--mention <ou:Name>` decision rather
- * than blindly @-ing the last speaker.
- *
- * Note: this gates the MODEL-authored `botmux send --mention-back` only — the
- * clear-headed path where the model chose to reply and can instead pick an
- * explicit `--mention` in a busy group. The daemon fallback card
- * (daemonCardFooterRecipientOpenId) is a separate, un-gated path that addresses
- * the session owner: it fires only when the model made NO routing decision at
- * all (forgot to send), so there is no reliable "who triggered this turn" to
- * honour, and guessing the last conversant would mis-@ a peer bot on a purely
- * local turn. Owner is the safe default there; real bot-to-bot handoffs go
- * through this explicit `--mention` path.
- *
- * p2p short-circuits to `false` (no API round-trip). The caller passes
- * getGroupStats' worst-case `{999,999}` soft-failure fallback, which yields
- * `true` here → fail-closed to "make an explicit decision", never a silent
- * wrong @.
- */
-export declare function shouldBlockMentionBackByParticipants(args: MentionBackParticipantArgs): boolean;
-/**
- * Agent "raise-hand" attention flag for `botmux send --attention[=kind]`.
- *
- * `--attention`            → boolean raise, kind defaults to 'blocked'.
- * `--attention=<kind>`     → raise with an explicit kind.
- * Unknown kinds fall back to 'blocked' (lenient: never fail the send over a
- * typo'd category — the reason text carries the real meaning).
- *
- * MUST be parsed here, not via argValue('--attention'), because a bare
- * `--attention "我卡住了"` would otherwise eat the message as the flag value.
- * Callers must also add '--attention' to positionals()' booleanFlags so the
- * body isn't swallowed.
- */
-export declare const ATTENTION_KINDS: readonly ["authz", "decision", "blocked", "help"];
-export declare function parseAttentionFlag(args: string[]): {
-    requested: boolean;
-    kind: string;
-};
-export interface AttentionUsageArgs {
-    requested: boolean;
-    /** --top-level */
-    sendTopLevel: boolean;
-    /** --chat-id <id> */
-    overrideChatId?: string;
-    /** --into <topic> */
-    sendInto?: string;
-    /** --voice */
-    asVoice?: boolean;
-    /** message body has non-empty text */
-    hasText: boolean;
-}
-/**
- * Guard `--attention` usage. Returns an error string, or null if OK.
- * `--attention` only makes sense replying into the CURRENT session: clear-on-reply
- * binds to this session's anchor, so routing the message elsewhere (--top-level /
- * --chat-id / --into) would leave the needs-you signal un-clearable. And the
- * dashboard needs a text reason, so an image/file-only send can't raise.
- */
-export declare function attentionUsageError(args: AttentionUsageArgs): string | null;
-//# sourceMappingURL=send-policy.d.ts.map

package/dist/services/send-policy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-policy.d.ts","sourceRoot":"","sources":["../../src/services/send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,+BAA+B;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAIvE;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;0EAG0E;AAC1E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAM3E;AAED;;;wDAGwD;AACxD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGtG;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;4DAE4D;AAC5D,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,IAAI,CAYvF;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED;;;iFAGiF;AACjF,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,wBAAwB,GAAG,MAAM,GAAG,IAAI,CASvF;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;sDAGsD;AACtD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI5D;AAED,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,cAAc,EAAE,OAAO,CAAC;IACxB,2BAA2B;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,yBAAyB;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB,sEAAsE;IACtE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,mBAAmB,GAAG,qBAAqB,CAoBxF;AAED,MAAM,WAAW,0BAA0B;IACzC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3B,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,oCAAoC,CAAC,IAAI,EAAE,0BAA0B,GAAG,OAAO,CAG9F;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,eAAe,mDAAoD,CAAC;AAEjF,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAMvF;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,qBAAqB;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,sCAAsC;IACtC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,kBAAkB,GAAG,MAAM,GAAG,IAAI,CAY3E"}

package/dist/services/send-policy.js

@@ -1,189 +0,0 @@
-/**
- * Pure decision helpers for `botmux send` (extracted from cmdSend so they can
- * be unit-tested without process.exit / Lark I/O).
- *
- * Two policies live here:
- *   - resolveQuoteTarget: which message a chat-scope send should quote (reply
- *     to), so 普通群 messages render Lark's 引用 chain. Thread-scope and
- *     --top-level never quote.
- *   - validateMentionDecision: the @ hard-gate — every model-initiated reply
- *     must explicitly choose --mention / --mention-back / --no-mention.
- */
-/**
- * Resolve the message id a send should quote, or null for a plain send.
- * Priority: --quote > session.quoteTargetId. Only chat-scope, non-top-level,
- * non-`--no-quote` sends quote.
- */
-export function resolveQuoteTarget(args) {
-    if (!args.isChatScope || args.sendTopLevel || args.noQuote)
-        return null;
-    const target = args.explicitQuote ?? args.sessionQuoteTargetId;
-    return target && target.trim() ? target.trim() : null;
-}
-/** A quote message id is a routing primitive: Lark's reply API derives the
- * destination chat from that id, not from the separately supplied chat id.
- * Managed deliveries therefore cannot choose one, while an explicit IM turn
- * may quote only the exact Lark message frozen in its origin snapshot. */
-export function managedVcQuoteError(args) {
-    if (!args.managed || !args.explicitQuote)
-        return null;
-    if (args.durableDelivery || args.explicitQuote !== args.explicitImMessageId) {
-        return '--quote 必须是本轮精确路由的 IM 消息；durable delivery 不能指定引用目标。';
-    }
-    return null;
-}
-/** Managed VC output must stay within botmux-owned message shapes. Even though
- * ordinary custom cards are scanned for known callback controls, treating an
- * evolving third-party card schema as an exhaustive privilege boundary is not
- * safe for meeting-derived (untrusted) model output. */
-export function managedVcCustomCardError(managed, customCardRequested) {
-    if (!managed || !customCardRequested)
-        return null;
-    return '--card-json/--card-file 不允许用于受管 VC 回复；请使用普通文本。';
-}
-/** Freeze every managed reply to the listener-thread route and a no-mention
- * addressing mode. Routing/mention/attention are independent side effects that
- * are not represented by the primary VC action identity. */
-export function managedVcSendControlError(args) {
-    if (!args.managed)
-        return null;
-    if (args.sendTopLevel || args.overrideChatId || args.sendInto) {
-        return '--top-level/--chat-id/--into 不能改变受管 VC 的 listener-thread 路由。';
-    }
-    if (args.attentionRequested) {
-        return '--attention 不属于受管 VC 主消息 action。';
-    }
-    if (args.explicitMentionCount > 0 || args.mentionBack || !args.noMention) {
-        return '受管 VC 回复必须显式使用 --no-mention，不能使用 --mention/--mention-back。';
-    }
-    return null;
-}
-/** A dedicated receiver may emit only one botmux-owned text card. Provider
- * uploads (image/file/video/audio) happen before a Lark message UUID can be
- * reconciled, so allowing them would give retries or repeated commands an
- * unledgered resource-creation channel even when the visible message dedupes. */
-export function managedVcSendPayloadError(args) {
-    if (!args.managed)
-        return null;
-    if (args.asVoice || args.imageCount > 0 || args.fileCount > 0 || args.videoCount > 0) {
-        return '受管 VC 回复只允许普通文本；图片、文件、视频和语音上传没有可恢复的 action identity。';
-    }
-    if (args.containsNativeAtTag) {
-        return '受管 VC 文本不能包含原生 <at …> 标签。';
-    }
-    return null;
-}
-export function containsLarkAtTag(content) {
-    return /<at(?:\s|>)/iu.test(content);
-}
-/** Render model-authored native Lark mention tags inert before placing the
- * text in a botmux-owned card. Full-width angle brackets are intentional:
- * unlike an HTML entity, they cannot be decoded and re-interpreted as a
- * second-pass `<at>` control by the card renderer. */
-export function neutralizeLarkAtTags(content) {
-    return content
-        .replace(/<at(?=\s|>)/giu, '＜at')
-        .replace(/<\/at\s*>/giu, match => `＜${match.slice(1, -1)}＞`);
-}
-/**
- * Enforce that the model made an explicit @ decision before sending.
- * Returns ok:false with a context-aware error when no decision was made or
- * the flags contradict each other.
- */
-export function validateMentionDecision(args) {
-    if (!args.enabled || args.sendTopLevel)
-        return { ok: true };
-    if (args.noMention && (args.hasMentionArgs || args.mentionBack)) {
-        return { ok: false, error: '--no-mention 不能与 --mention / --mention-back 同时使用。' };
-    }
-    if (args.mentionBack && !args.hasQuoteTargetSender) {
-        return { ok: false, error: '--mention-back 无可 @ 对象：本轮没有可识别的触发消息发送者。请改用 --mention <ou:Name> 或 --no-mention。' };
-    }
-    const decided = args.hasMentionArgs || args.mentionBack || args.noMention;
-    if (decided)
-        return { ok: true };
-    // No decision made — guide by message VALUE (not by human-vs-bot). Avoid
-    // letting --no-mention become the lazy default, and avoid meaningless @.
-    return {
-        ok: false,
-        error: '本条需显式 @ 决策（别把 --no-mention 当默认）：有实质结论、要对方继续看/确认/决策 → --mention-back（或 --mention <ou:Name> 点名）；纯记录/低优先级进度/简短确认 → --no-mention；若只是没信息量的"收到"，不如不发，等有内容再回。',
-    };
-}
-/**
- * Should `--mention-back` be blocked because the conversation has more than
- * two participants (humans + bots)?
- *
- * Rationale (symmetric with the inbound @ gate in event-dispatcher.ts, which
- * only lets an un-@ message through when `userCount <= 1 && botCount <= 1`):
- * in a true 1v1 (`userCount + botCount <= 2`, e.g. 1 human + 1 bot, or a p2p
- * DM) the triggerer IS the only counterpart, so auto-@-ing them back is safe
- * and unambiguous. Once a third party joins, "whoever triggered this turn" is
- * no longer reliably "who should be addressed" — a bystander's message can
- * trigger the bot while the substantive reply belongs to someone else. There
- * we force the model to make an explicit `--mention <ou:Name>` decision rather
- * than blindly @-ing the last speaker.
- *
- * Note: this gates the MODEL-authored `botmux send --mention-back` only — the
- * clear-headed path where the model chose to reply and can instead pick an
- * explicit `--mention` in a busy group. The daemon fallback card
- * (daemonCardFooterRecipientOpenId) is a separate, un-gated path that addresses
- * the session owner: it fires only when the model made NO routing decision at
- * all (forgot to send), so there is no reliable "who triggered this turn" to
- * honour, and guessing the last conversant would mis-@ a peer bot on a purely
- * local turn. Owner is the safe default there; real bot-to-bot handoffs go
- * through this explicit `--mention` path.
- *
- * p2p short-circuits to `false` (no API round-trip). The caller passes
- * getGroupStats' worst-case `{999,999}` soft-failure fallback, which yields
- * `true` here → fail-closed to "make an explicit decision", never a silent
- * wrong @.
- */
-export function shouldBlockMentionBackByParticipants(args) {
-    if (args.chatType === 'p2p')
-        return false;
-    return args.userCount + args.botCount > 2;
-}
-/**
- * Agent "raise-hand" attention flag for `botmux send --attention[=kind]`.
- *
- * `--attention`            → boolean raise, kind defaults to 'blocked'.
- * `--attention=<kind>`     → raise with an explicit kind.
- * Unknown kinds fall back to 'blocked' (lenient: never fail the send over a
- * typo'd category — the reason text carries the real meaning).
- *
- * MUST be parsed here, not via argValue('--attention'), because a bare
- * `--attention "我卡住了"` would otherwise eat the message as the flag value.
- * Callers must also add '--attention' to positionals()' booleanFlags so the
- * body isn't swallowed.
- */
-export const ATTENTION_KINDS = ['authz', 'decision', 'blocked', 'help'];
-export function parseAttentionFlag(args) {
-    const arg = args.find(a => a === '--attention' || a.startsWith('--attention='));
-    if (!arg)
-        return { requested: false, kind: 'blocked' };
-    const raw = arg.includes('=') ? arg.slice('--attention='.length) : '';
-    const kind = ATTENTION_KINDS.includes(raw) ? raw : 'blocked';
-    return { requested: true, kind };
-}
-/**
- * Guard `--attention` usage. Returns an error string, or null if OK.
- * `--attention` only makes sense replying into the CURRENT session: clear-on-reply
- * binds to this session's anchor, so routing the message elsewhere (--top-level /
- * --chat-id / --into) would leave the needs-you signal un-clearable. And the
- * dashboard needs a text reason, so an image/file-only send can't raise.
- */
-export function attentionUsageError(args) {
-    if (!args.requested)
-        return null;
-    if (args.sendTopLevel || args.overrideChatId || args.sendInto) {
-        return '--attention 只能用于回复当前会话，不能与 --top-level / --chat-id / --into 混用。';
-    }
-    if (args.asVoice) {
-        return '--attention 只能用于文本/卡片消息，不能与 --voice 混用。';
-    }
-    if (!args.hasText) {
-        return '--attention 需要文本 reason（看板「需要你」列要显示原因，不能只发图片/文件）。';
-    }
-    return null;
-}
-//# sourceMappingURL=send-policy.js.map

package/dist/services/send-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"send-policy.js","sourceRoot":"","sources":["../../src/services/send-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,oBAAoB,CAAC;IAC/D,OAAO,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AASD;;;0EAG0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC5E,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;wDAGwD;AACxD,MAAM,UAAU,wBAAwB,CAAC,OAAgB,EAAE,mBAA4B;IACrF,IAAI,CAAC,OAAO,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAClD,OAAO,gDAAgD,CAAC;AAC1D,CAAC;AAaD;;4DAE4D;AAC5D,MAAM,UAAU,yBAAyB,CAAC,IAA8B;IACtE,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,8DAA8D,CAAC;IACxE,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC5B,OAAO,kCAAkC,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,CAAC,oBAAoB,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzE,OAAO,4DAA4D,CAAC;IACtE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD;;;iFAGiF;AACjF,MAAM,UAAU,yBAAyB,CAAC,IAA8B;IACtE,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QACrF,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,OAAO,2BAA2B,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED;;;sDAGsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,OAAO;SACX,OAAO,CAAC,gBAAgB,EAAE,KAAK,CAAC;SAChC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC;AAuBD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAyB;IAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAE5D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gFAAgF,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC;IAC1E,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAEjC,yEAAyE;IACzE,yEAAyE;IACzE,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,wJAAwJ;KAChK,CAAC;AACJ,CAAC;AAWD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,oCAAoC,CAAC,IAAgC;IACnF,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAEjF,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,IAAI,GAAI,eAAqC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9D,OAAO,iEAAiE,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,yCAAyC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,mDAAmD,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/session-lifecycle-hooks.d.ts

@@ -1,10 +0,0 @@
-import type { StreamStatus } from '../types.js';
-import type { DaemonSession } from '../core/types.js';
-import { type HookEvent } from './hook-runner.js';
-type SessionLifecycleEvent = Extract<HookEvent, 'session.start' | 'session.exit' | 'session.idle' | 'session.requires_attention'>;
-export declare function setSessionLifecycleShutdown(value: boolean): void;
-export declare function emitSessionLifecycleHook(ds: DaemonSession, event: SessionLifecycleEvent, body?: Record<string, unknown>): boolean;
-export declare function emitSessionStateTransitionHook(ds: DaemonSession, prevState: StreamStatus | undefined, newState: StreamStatus | undefined, body?: Record<string, unknown>): boolean;
-export declare function __testOnly_resetSessionLifecycleHooks(): void;
-export {};
-//# sourceMappingURL=session-lifecycle-hooks.d.ts.map

package/dist/services/session-lifecycle-hooks.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-lifecycle-hooks.d.ts","sourceRoot":"","sources":["../../src/services/session-lifecycle-hooks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGjE,KAAK,qBAAqB,GAAG,OAAO,CAClC,SAAS,EACT,eAAe,GAAG,cAAc,GAAG,cAAc,GAAG,4BAA4B,CACjF,CAAC;AAOF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAEhE;AAqBD,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,aAAa,EACjB,KAAK,EAAE,qBAAqB,EAC5B,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CA6BT;AAED,wBAAgB,8BAA8B,CAC5C,EAAE,EAAE,aAAa,EACjB,SAAS,EAAE,YAAY,GAAG,SAAS,EACnC,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,IAAI,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACjC,OAAO,CAiBT;AAED,wBAAgB,qCAAqC,IAAI,IAAI,CAG5D"}

package/dist/services/session-lifecycle-hooks.js

@@ -1,78 +0,0 @@
-import { sessionAnchorId } from '../core/types.js';
-import { emitHookEvent } from './hook-runner.js';
-import { logger } from '../utils/logger.js';
-const IDLE_DEDUP_WINDOW_MS = 10_000;
-let shutdownInProgress = false;
-const lastIdleEmits = new Map();
-export function setSessionLifecycleShutdown(value) {
-    shutdownInProgress = value;
-}
-function lifecyclePayload(ds, body) {
-    const initCliId = ds.initConfig && 'cliId' in ds.initConfig ? ds.initConfig.cliId : undefined;
-    return {
-        sessionId: ds.session.sessionId,
-        chatId: ds.chatId,
-        chatType: ds.chatType,
-        larkAppId: ds.larkAppId,
-        scope: ds.scope,
-        anchor: sessionAnchorId(ds),
-        title: ds.currentTurnTitle ?? ds.session.title,
-        cliId: ds.session.cliId ?? initCliId,
-        workingDir: ds.workingDir ?? ds.session.workingDir,
-        hasHistory: ds.hasHistory,
-        spawnedAt: ds.spawnedAt,
-        lastMessageAt: ds.lastMessageAt,
-        ...body,
-    };
-}
-export function emitSessionLifecycleHook(ds, event, body = {}) {
-    if (event === 'session.exit') {
-        // Prune dedup state to prevent unbounded Map growth
-        const prefix = `:${ds.session.sessionId}:`;
-        for (const key of lastIdleEmits.keys()) {
-            if (key.includes(prefix))
-                lastIdleEmits.delete(key);
-        }
-    }
-    // Dedicated VC receivers process meeting-derived, untrusted content. User
-    // hooks are an external side-effect channel outside the listener action
-    // ledger, so every lifecycle event from such a session fails closed. Keep
-    // the exit cleanup above so the dedupe map cannot retain dead sessions.
-    if (ds.session.vcMeetingReceiver) {
-        logger.debug(`[hooks] ${event} suppressed for dedicated VC receiver ${ds.session.sessionId}`);
-        return false;
-    }
-    if (event === 'session.exit') {
-        if (shutdownInProgress) {
-            logger.debug(`[hooks] session.exit suppressed during daemon shutdown (session ${ds.session.sessionId})`);
-            return false;
-        }
-    }
-    emitHookEvent(event, lifecyclePayload(ds, body));
-    return true;
-}
-export function emitSessionStateTransitionHook(ds, prevState, newState, body = {}) {
-    if (ds.session.vcMeetingReceiver)
-        return false;
-    if (!newState || prevState === newState)
-        return false;
-    if (prevState !== 'idle' && newState !== 'idle')
-        return false;
-    const now = Date.now();
-    const key = `session.idle:${ds.session.sessionId}:${newState}`;
-    const last = lastIdleEmits.get(key);
-    if (last !== undefined && now - last < IDLE_DEDUP_WINDOW_MS)
-        return false;
-    lastIdleEmits.set(key, now);
-    return emitSessionLifecycleHook(ds, 'session.idle', {
-        prevState,
-        newState,
-        transition: newState === 'idle' ? 'enter' : 'exit',
-        ...body,
-    });
-}
-export function __testOnly_resetSessionLifecycleHooks() {
-    shutdownInProgress = false;
-    lastIdleEmits.clear();
-}
-//# sourceMappingURL=session-lifecycle-hooks.js.map

package/dist/services/session-lifecycle-hooks.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-lifecycle-hooks.js","sourceRoot":"","sources":["../../src/services/session-lifecycle-hooks.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAO5C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAEpC,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAC/B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,kBAAkB,GAAG,KAAK,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,EAAiB,EAAE,IAA6B;IACxE,MAAM,SAAS,GAAG,EAAE,CAAC,UAAU,IAAI,OAAO,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,OAAO;QACL,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS;QAC/B,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,QAAQ,EAAE,EAAE,CAAC,QAAQ;QACrB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QAC3B,KAAK,EAAE,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK;QAC9C,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,SAAS;QACpC,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU;QAClD,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,aAAa,EAAE,EAAE,CAAC,aAAa;QAC/B,GAAG,IAAI;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,EAAiB,EACjB,KAA4B,EAC5B,OAAgC,EAAE;IAElC,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,oDAAoD;QACpD,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,IAAI,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CACV,WAAW,KAAK,yCAAyC,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAChF,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;QAC7B,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,mEAAmE,EAAE,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACzG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,EAAiB,EACjB,SAAmC,EACnC,QAAkC,EAClC,OAAgC,EAAE;IAElC,IAAI,EAAE,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,SAAS,KAAK,MAAM,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC,OAAO,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,oBAAoB;QAAE,OAAO,KAAK,CAAC;IAC1E,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAE5B,OAAO,wBAAwB,CAAC,EAAE,EAAE,cAAc,EAAE;QAClD,SAAS;QACT,QAAQ;QACR,UAAU,EAAE,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QAClD,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qCAAqC;IACnD,kBAAkB,GAAG,KAAK,CAAC;IAC3B,aAAa,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC"}