botmux 3.10.0 → 3.23.1

package/dist/services/team-bots-store.js

@@ -1,111 +0,0 @@
-/**
- * Team-bot identity store: the tenant-stable `union_id` set of bots this
- * deployment has learned are TEAMMATES, so the auth gate can let them
- * collaborate without `/grant` (and without `/introduce` for discovery).
- *
- * Why union_id is the key (not name, not open_id):
- * - **name is spoofable** — anyone in the tenant can run a bot called "Claude".
- *   Trust must never hinge on a self-reported display name.
- * - **open_id is per-app scoped** — bot B's open_id as seen by app A ≠ as seen
- *   by app B, so it can't be a shared trust key across deployments.
- * - **union_id is tenant-stable and cross-app consistent** — the same value in
- *   every app's view of the same bot, and Feishu vouches for it (it arrives on
- *   inbound events as `sender.sender_id.union_id`). It is the only sound key.
- *
- * Where entries come from (the trust ROOT — see recordTeamBot callers):
- * - A bot observed talking inside a TEAM-ASSEMBLED group (a 拉群 group recorded
- *   in [[team-groups-store]]). Such groups are built by the team itself, adding
- *   bots by `larkAppId` from the federated roster — membership is team-controlled,
- *   so a bot speaking there is a vouched teammate. We capture its union_id here,
- *   then honour that union_id as a teammate in ANY group (incl. manually-created
- *   ones), without re-deriving trust from a spoofable name.
- *
- * Revocation / self-healing: entries carry lastSeenAt and expire after
- * DEFAULT_EXPIRY_MS if the bot stops appearing in team contexts — so a bot that
- * leaves the team ages out of the trusted set on its own.
- *
- * Storage: `{dataDir}/team-bots.json`, deployment-wide (not per-chat: trust in a
- * teammate is global once established). Atomic writes via the shared helper.
- */
-import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-/** Learned-teammate entries older than this (by lastSeenAt) are ignored by
- *  isTeamBot / listTeamBots — the bot hasn't shown up in a team context for a
- *  month, so we stop vouching for it until it's seen again. */
-export const DEFAULT_EXPIRY_MS = 30 * 24 * 60 * 60 * 1000;
-function filePath(dataDir) {
-    return join(dataDir, 'team-bots.json');
-}
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt — fall through */ }
-    return {};
-}
-/**
- * Upsert a learned teammate bot by union_id. Existing entry keeps firstSeenAt
- * and bumps lastSeenAt (+ refreshes name); new entry stamps both.
- *
- * No-op when unionId is empty — many inbound bot events DO carry
- * `sender.sender_id.union_id`, but the ones that don't simply can't be learned
- * (and fall back to the existing /grant path), never polluting the store with a
- * keyless entry. name may be empty (we still record the trusted union_id).
- *
- * Returns true iff the store changed (new entry or refreshed timestamp/name),
- * so callers can skip a redundant log.
- */
-export function recordTeamBot(dataDir, bot, now = Date.now()) {
-    const unionId = (bot.unionId ?? '').trim();
-    if (!unionId)
-        return false;
-    const name = (bot.name ?? '').trim();
-    const data = readFile(dataDir);
-    const prior = data[unionId];
-    data[unionId] = prior
-        ? { ...prior, name: name || prior.name, lastSeenAt: now }
-        : { name, firstSeenAt: now, lastSeenAt: now };
-    atomicWriteFileSync(filePath(dataDir), JSON.stringify(data, null, 2) + '\n');
-    return true;
-}
-/** Is `unionId` a known (non-expired) teammate bot? The auth gate's predicate.
- *  Empty/unknown/expired → false (caller falls back to /grant). */
-export function isTeamBot(dataDir, unionId, maxAgeMs = DEFAULT_EXPIRY_MS, now = Date.now()) {
-    const id = (unionId ?? '').trim();
-    if (!id)
-        return false;
-    const entry = readFile(dataDir)[id];
-    if (!entry)
-        return false;
-    return now - entry.lastSeenAt <= maxAgeMs;
-}
-/** All non-expired learned teammate bots (for discovery / debugging). Unordered. */
-export function listTeamBots(dataDir, maxAgeMs = DEFAULT_EXPIRY_MS, now = Date.now()) {
-    const data = readFile(dataDir);
-    const out = [];
-    for (const [unionId, entry] of Object.entries(data)) {
-        if (now - entry.lastSeenAt > maxAgeMs)
-            continue;
-        out.push({ unionId, name: entry.name, firstSeenAt: entry.firstSeenAt, lastSeenAt: entry.lastSeenAt });
-    }
-    return out;
-}
-/** Forget a learned teammate (explicit revoke). Returns true if removed. */
-export function removeTeamBot(dataDir, unionId) {
-    const id = (unionId ?? '').trim();
-    if (!id)
-        return false;
-    const data = readFile(dataDir);
-    if (!(id in data))
-        return false;
-    delete data[id];
-    atomicWriteFileSync(filePath(dataDir), JSON.stringify(data, null, 2) + '\n');
-    return true;
-}
-//# sourceMappingURL=team-bots-store.js.map

package/dist/services/team-bots-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-bots-store.js","sourceRoot":"","sources":["../../src/services/team-bots-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D;;+DAE+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAY1D,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAmB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,GAAmD,EACnD,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,KAAK;QACnB,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE;QACzD,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IAChD,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,OAA2B,EAC3B,WAAmB,iBAAiB,EACpC,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC5C,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAC1B,OAAe,EACf,WAAmB,iBAAiB,EACpC,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ;YAAE,SAAS;QAChD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAA2B;IACxE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/team-groups-store.d.ts

@@ -1,29 +0,0 @@
-export interface TeamGroupBinding {
-    teamId: string;
-    chatId: string;
-    createdAt: number;
-}
-export declare function listTeamGroups(dataDir: string, teamId?: string): TeamGroupBinding[];
-export declare function recordTeamGroup(dataDir: string, teamId: string, chatId: string, now?: number): void;
-/**
- * Replace ALL entries whose teamId starts with `prefix` by `groups`, leaving
- * other entries (e.g. legacy federation teams) untouched. Used by the platform
- * team-sync mirror ([[platform-team-store]], prefix `platform:`): the platform
- * push is the authoritative full view, so removal must work — append-only
- * recordTeamGroup can't drop a dissolved hall / left team. Survivors keep
- * their original createdAt.
- */
-export declare function replaceTeamGroupsByPrefix(dataDir: string, prefix: string, groups: Array<{
-    teamId: string;
-    chatId: string;
-}>, now?: number): void;
-/** Is `chatId` a team-assembled (拉群) group of ANY team? This is the TRUST ROOT
- *  for team-bot collaboration: such a group is built by the team (bots added by
- *  larkAppId from the federated roster), so a bot speaking there is a vouched
- *  teammate (see [[team-bots-store]]). Recorded on the orchestrating deployment
- *  by recordTeamGroup, and mirrored onto member deployments when the hub returns
- *  groupChatIds on federation sync — so every member's auth gate sees the same
- *  trust boundary. Platform-mode 拉群 groups land here too, mirrored from
- *  team-sync under the `platform:` teamId prefix (see [[platform-team-store]]). */
-export declare function isTeamGroupChat(dataDir: string, chatId: string | undefined): boolean;
-//# sourceMappingURL=team-groups-store.d.ts.map

package/dist/services/team-groups-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-groups-store.d.ts","sourceRoot":"","sources":["../../src/services/team-groups-store.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,EAAE,CASnF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAM/G;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,KAAK,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EACjD,GAAG,GAAE,MAAmB,GACvB,IAAI,CAcN;AAED;;;;;;;mFAOmF;AACnF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGpF"}

package/dist/services/team-groups-store.js

@@ -1,70 +0,0 @@
-// 团队协作群绑定：dashboard 团队页发起建群成功后记录 teamId↔chatId。
-// 看板的团队筛选用它识别「dashboard 发起的协作群」（另一半靠 /introduce
-// 记录 + 团队 roster 名字匹配识别手动协作群）。
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { atomicWriteFileSync } from '../utils/atomic-write.js';
-function filePath(dataDir) {
-    return join(dataDir, 'team-groups.json');
-}
-export function listTeamGroups(dataDir, teamId) {
-    let arr = [];
-    try {
-        const raw = JSON.parse(readFileSync(filePath(dataDir), 'utf-8'));
-        if (Array.isArray(raw))
-            arr = raw.filter(b => b && typeof b.teamId === 'string' && typeof b.chatId === 'string');
-    }
-    catch {
-        // 文件不存在/损坏 → 视为无绑定
-    }
-    return teamId === undefined ? arr : arr.filter(b => b.teamId === teamId);
-}
-export function recordTeamGroup(dataDir, teamId, chatId, now = Date.now()) {
-    if (!teamId || !chatId)
-        return;
-    const all = listTeamGroups(dataDir);
-    if (all.some(b => b.teamId === teamId && b.chatId === chatId))
-        return;
-    all.push({ teamId, chatId, createdAt: now });
-    atomicWriteFileSync(filePath(dataDir), JSON.stringify(all, null, 2) + '\n');
-}
-/**
- * Replace ALL entries whose teamId starts with `prefix` by `groups`, leaving
- * other entries (e.g. legacy federation teams) untouched. Used by the platform
- * team-sync mirror ([[platform-team-store]], prefix `platform:`): the platform
- * push is the authoritative full view, so removal must work — append-only
- * recordTeamGroup can't drop a dissolved hall / left team. Survivors keep
- * their original createdAt.
- */
-export function replaceTeamGroupsByPrefix(dataDir, prefix, groups, now = Date.now()) {
-    if (!prefix)
-        return;
-    const all = listTeamGroups(dataDir);
-    const kept = all.filter(b => !b.teamId.startsWith(prefix));
-    const prior = new Map(all.filter(b => b.teamId.startsWith(prefix)).map(b => [`${b.teamId}\u0000${b.chatId}`, b]));
-    const seen = new Set();
-    for (const g of groups) {
-        if (!g.teamId.startsWith(prefix) || !g.chatId)
-            continue; // caller must pre-prefix — never let platform data shadow legacy ids
-        const key = `${g.teamId}\u0000${g.chatId}`;
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        kept.push(prior.get(key) ?? { teamId: g.teamId, chatId: g.chatId, createdAt: now });
-    }
-    atomicWriteFileSync(filePath(dataDir), JSON.stringify(kept, null, 2) + '\n');
-}
-/** Is `chatId` a team-assembled (拉群) group of ANY team? This is the TRUST ROOT
- *  for team-bot collaboration: such a group is built by the team (bots added by
- *  larkAppId from the federated roster), so a bot speaking there is a vouched
- *  teammate (see [[team-bots-store]]). Recorded on the orchestrating deployment
- *  by recordTeamGroup, and mirrored onto member deployments when the hub returns
- *  groupChatIds on federation sync — so every member's auth gate sees the same
- *  trust boundary. Platform-mode 拉群 groups land here too, mirrored from
- *  team-sync under the `platform:` teamId prefix (see [[platform-team-store]]). */
-export function isTeamGroupChat(dataDir, chatId) {
-    if (!chatId)
-        return false;
-    return listTeamGroups(dataDir).some(b => b.chatId === chatId);
-}
-//# sourceMappingURL=team-groups-store.js.map

package/dist/services/team-groups-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-groups-store.js","sourceRoot":"","sources":["../../src/services/team-groups-store.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,gDAAgD;AAChD,+BAA+B;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAQ/D,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,MAAe;IAC7D,IAAI,GAAG,GAAuB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc,EAAE,MAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACvG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO;IAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO;IACtE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,MAAc,EACd,MAAiD,EACjD,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS,CAAC,qEAAqE;QAC9H,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;QAC3C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;;mFAOmF;AACnF,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAA0B;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AAChE,CAAC"}

package/dist/services/team-roster.d.ts

@@ -1,64 +0,0 @@
-export interface TeamRosterBot {
-    larkAppId: string;
-    name: string;
-    cliId: string;
-    capability: string | null;
-    hasTeamRole: boolean;
-    /** Owner for grouping by person; null if unassigned. unionId is the key, name for display. */
-    owner: {
-        unionId?: string;
-        openId?: string;
-        name?: string;
-    } | null;
-    /** Feishu transport capability of THIS local bot. Only populated when the
-     *  caller passes `liveBots` (the live registry knows apiOnly); false = core-only
-     *  (no Feishu transport → cannot be a group member/creator, #668). undefined =
-     *  unknown (bots-info.json fallback path, or a legacy caller) → treat as normal. */
-    larkTransportEnabled?: boolean;
-}
-export interface TeamRoster {
-    team: {
-        id: string;
-        name: string;
-        memberCount: number;
-    };
-    bots: TeamRosterBot[];
-}
-/**
- * Compute the per-bot Feishu-transport flag for a set of live bots, given the
- * set of apiOnly (core-only) appIds read from config.
- *
- * ⚠️ FAIL-CLOSED on config-read failure. When `apiOnlyIds` is `null` (config
- * couldn't be read), we cannot confirm any bot HAS transport, so every bot this
- * round is flagged `larkTransportEnabled: false`. This roster is federated to a
- * REMOTE hub/spoke that has no local config to double-check against — so
- * mislabeling a core-only bot as normal (fail-open) would let it be invited into
- * a group it can't join (#668). Mirror federation-spoke-api's spoke-side advert,
- * NOT the dashboard's local isNoTransportBot (which fails open only because it
- * has a second local config-read backstop right beside it).
- *
- * Healthy path (`apiOnlyIds` is a Set): per-bot `!apiOnlyIds.has(id)`.
- */
-export declare function resolveLiveBotTransport<T extends {
-    larkAppId: string;
-}>(bots: T[], apiOnlyIds: Set<string> | null): Array<T & {
-    larkTransportEnabled: boolean;
-}>;
-/** A currently-running bot from the live daemon registry (authoritative for
- *  "what's running" — unlike bots-info.json which is a racy, probe-lagged file). */
-export interface LiveBot {
-    larkAppId: string;
-    botName?: string | null;
-    cliId?: string;
-    larkTransportEnabled?: boolean;
-}
-/**
- * @param configOrder optional list of larkAppIds in bots.json (config) order;
- *   when given, the roster is sorted to match it (and the personal dashboard).
- * @param liveBots optional live daemon-registry bots. When given, the roster's
- *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
- *   showing no bots even though daemons are running), enriched with cliId from
- *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
- */
-export declare function buildTeamRoster(dataDir: string, teamId?: string, configOrder?: string[], liveBots?: LiveBot[]): TeamRoster;
-//# sourceMappingURL=team-roster.d.ts.map

package/dist/services/team-roster.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-roster.d.ts","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;IACrB,8FAA8F;IAC9F,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACnE;;;wFAGoF;IACpF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,CAAC,SAAS;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EACrE,IAAI,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GACxC,KAAK,CAAC,CAAC,GAAG;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,CAAC,CAK9C;AAkBD;oFACoF;AACpF,MAAM,WAAW,OAAO;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE;AAEvH;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAwB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,UAAU,CA8C3I"}

package/dist/services/team-roster.js

@@ -1,108 +0,0 @@
-/**
- * Team-level collaboration roster for the platform UI: every bot the deployment
- * runs (from bots-info.json) enriched with its team capability label and whether
- * it has a team-level role, plus the team's member count.
- *
- * This is the TEAM view (who's on the team), distinct from the per-chat roster
- * in listChatBotMembers (who's in a given group + reliably @-mentionable).
- * Pure read from `{dataDir}` files — no Lark API, no config coupling — so it is
- * trivially testable and cheap for the UI to poll.
- */
-import { readFileSync, existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { getBotCapability } from './bot-profile-store.js';
-import { getBotOwner } from './bot-owner-store.js';
-import { getTeam, getDefaultTeam, DEFAULT_TEAM_ID } from './team-store.js';
-/**
- * Compute the per-bot Feishu-transport flag for a set of live bots, given the
- * set of apiOnly (core-only) appIds read from config.
- *
- * ⚠️ FAIL-CLOSED on config-read failure. When `apiOnlyIds` is `null` (config
- * couldn't be read), we cannot confirm any bot HAS transport, so every bot this
- * round is flagged `larkTransportEnabled: false`. This roster is federated to a
- * REMOTE hub/spoke that has no local config to double-check against — so
- * mislabeling a core-only bot as normal (fail-open) would let it be invited into
- * a group it can't join (#668). Mirror federation-spoke-api's spoke-side advert,
- * NOT the dashboard's local isNoTransportBot (which fails open only because it
- * has a second local config-read backstop right beside it).
- *
- * Healthy path (`apiOnlyIds` is a Set): per-bot `!apiOnlyIds.has(id)`.
- */
-export function resolveLiveBotTransport(bots, apiOnlyIds) {
-    return bots.map(b => ({
-        ...b,
-        larkTransportEnabled: apiOnlyIds ? !apiOnlyIds.has(b.larkAppId) : false,
-    }));
-}
-function readBotsInfo(dataDir) {
-    const fp = join(dataDir, 'bots-info.json');
-    if (!existsSync(fp))
-        return [];
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (Array.isArray(parsed))
-            return parsed;
-    }
-    catch { /* corrupt — empty roster */ }
-    return [];
-}
-function hasTeamRoleFile(dataDir, larkAppId) {
-    return existsSync(join(dataDir, 'team-roles', `${larkAppId}.md`));
-}
-/**
- * @param configOrder optional list of larkAppIds in bots.json (config) order;
- *   when given, the roster is sorted to match it (and the personal dashboard).
- * @param liveBots optional live daemon-registry bots. When given, the roster's
- *   bot set is THESE (authoritative — fixes an empty/stale bots-info.json
- *   showing no bots even though daemons are running), enriched with cliId from
- *   bots-info.json by larkAppId. When omitted, falls back to bots-info.json.
- */
-export function buildTeamRoster(dataDir, teamId = DEFAULT_TEAM_ID, configOrder, liveBots) {
-    const team = getTeam(dataDir, teamId) ?? getDefaultTeam(dataDir);
-    const info = readBotsInfo(dataDir);
-    let entries;
-    // Transport capability per appId — only known when the live registry is passed
-    // (bots-info.json doesn't carry apiOnly). Absent → undefined → treated as normal.
-    const transportByAppId = new Map();
-    if (liveBots !== undefined) {
-        // Live registry is the source of truth WHEN PROVIDED — including an empty
-        // array (no daemons running ⇒ empty roster). Never fall back to a stale
-        // bots-info.json here, or removed/offline bots would linger. Enrich
-        // cliId/openId/name from bots-info.json (which carries cliId — the registry
-        // doesn't) by larkAppId.
-        const byId = new Map(info.map(e => [e.larkAppId, e]));
-        entries = liveBots.map(lb => {
-            const ex = byId.get(lb.larkAppId);
-            transportByAppId.set(lb.larkAppId, lb.larkTransportEnabled);
-            return {
-                larkAppId: lb.larkAppId,
-                botOpenId: ex?.botOpenId ?? null,
-                botName: lb.botName ?? ex?.botName ?? null,
-                cliId: lb.cliId ?? ex?.cliId ?? '',
-            };
-        });
-    }
-    else {
-        entries = info;
-    }
-    if (configOrder && configOrder.length) {
-        const rank = new Map(configOrder.map((id, i) => [id, i]));
-        const at = (id) => rank.has(id) ? rank.get(id) : Number.MAX_SAFE_INTEGER;
-        // stable sort by config index; unknown bots fall to the end keeping their order
-        entries = entries.map((b, i) => ({ b, i })).sort((x, y) => (at(x.b.larkAppId) - at(y.b.larkAppId)) || (x.i - y.i)).map(x => x.b);
-    }
-    const bots = entries.map((b) => {
-        const o = getBotOwner(dataDir, b.larkAppId);
-        return {
-            larkAppId: b.larkAppId,
-            name: b.botName ?? b.cliId,
-            cliId: b.cliId,
-            capability: getBotCapability(dataDir, b.larkAppId),
-            hasTeamRole: hasTeamRoleFile(dataDir, b.larkAppId),
-            owner: o ? { unionId: o.unionId, openId: o.openId, name: o.name } : null,
-            larkTransportEnabled: transportByAppId.get(b.larkAppId),
-        };
-    });
-    return { team: { id: team.id, name: team.name, memberCount: team.members.length }, bots };
-}
-//# sourceMappingURL=team-roster.js.map

package/dist/services/team-roster.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-roster.js","sourceRoot":"","sources":["../../src/services/team-roster.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAsB3E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAS,EAAE,UAA8B;IAEzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACpB,GAAG,CAAC;QACJ,oBAAoB,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK;KACxE,CAAC,CAAC,CAAC;AACN,CAAC;AAID,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAwB,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,SAAiB;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,SAAiB,eAAe,EAAE,WAAsB,EAAE,QAAoB;IAC7H,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAuB,CAAC;IAC5B,+EAA+E;IAC/E,kFAAkF;IAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAChE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,wEAAwE;QACxE,oEAAoE;QACpE,4EAA4E;QAC5E,yBAAyB;QACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAClC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC;YAC5D,OAAO;gBACL,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,SAAS,EAAE,EAAE,EAAE,SAAS,IAAI,IAAI;gBAChC,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,IAAI,IAAI;gBAC1C,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;aACnC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,EAAE,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC7F,gFAAgF;QAChF,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnI,CAAC;IACD,MAAM,IAAI,GAAoB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,UAAU,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,WAAW,EAAE,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;YACxE,oBAAoB,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;SACxD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC"}

package/dist/services/team-store.d.ts

@@ -1,54 +0,0 @@
-export declare const DEFAULT_TEAM_ID = "default";
-export interface TeamMember {
-    unionId?: string;
-    openId?: string;
-    email?: string;
-    name?: string;
-    addedAt: number;
-    addedBy?: string;
-}
-export interface Team {
-    id: string;
-    name: string;
-    members: TeamMember[];
-    createdAt: number;
-    updatedAt: number;
-}
-/** Identifiers a membership check can match on. Match succeeds on ANY non-empty hit. */
-export interface MemberIdentity {
-    unionId?: string;
-    openId?: string;
-    email?: string;
-}
-/** All teams (empty array if none materialized yet). */
-export declare function listTeams(dataDir: string): Team[];
-/** A team by id, or null. */
-export declare function getTeam(dataDir: string, teamId: string): Team | null;
-/** All teams the given identity belongs to (matches any identifier). */
-export declare function listTeamsForMember(dataDir: string, id: MemberIdentity): Team[];
-/**
- * The default (implicit single-deployment) team. Read-only: returns the first
- * persisted team, else a synthesized empty default that is NOT written. Use
- * `ensureDefaultTeam` when you intend to persist.
- */
-export declare function getDefaultTeam(dataDir: string): Team;
-/** Materialize (persist) the default team if no team exists yet; returns it. */
-export declare function ensureDefaultTeam(dataDir: string, now?: number): Team;
-/** Delete a team entirely (members + the team entry). Returns true if removed.
- *  Bots/connectors live at the deployment level (not per-team), so they are
- *  unaffected — only the membership/trust boundary is dropped. */
-export declare function deleteTeam(dataDir: string, teamId: string): boolean;
-/** Create a new explicit team. */
-export declare function createTeam(dataDir: string, name: string, now?: number): Team;
-/**
- * Add (or merge) a member into a team. Dedupes by any matching identifier and
- * fills in newly-known fields. Returns the updated team, or null if no such team.
- */
-export declare function addMember(dataDir: string, teamId: string, member: Omit<TeamMember, 'addedAt'> & {
-    addedAt?: number;
-}, now?: number): Team | null;
-/** Remove a member matching any identifier. Returns true if removed. */
-export declare function removeMember(dataDir: string, teamId: string, id: MemberIdentity, now?: number): boolean;
-/** Whether the given identity is a member of the team (matches any identifier). */
-export declare function isMember(dataDir: string, teamId: string, id: MemberIdentity): boolean;
-//# sourceMappingURL=team-store.d.ts.map

package/dist/services/team-store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-store.d.ts","sourceRoot":"","sources":["../../src/services/team-store.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,eAAe,YAAY,CAAC;AAEzC,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwBD,wDAAwD;AACxD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,CAEjD;AAED,6BAA6B;AAC7B,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAEpE;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,IAAI,EAAE,CAG9E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMpD;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAOjF;AAED;;kEAEkE;AAClE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOnE;AAED,kCAAkC;AAClC,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAMxF;AAQD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,GAAG,IAAI,CAgB5J;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAmB,GAAG,OAAO,CAUnH;AAED,mFAAmF;AACnF,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAKrF"}

package/dist/services/team-store.js

@@ -1,156 +0,0 @@
-/**
- * Team store: the trust boundary for multi-bot collaboration.
- *
- * A "team" is a set of people (members) who trust each other; within a team,
- * bots collaborate freely (discover, team up, hand off) without per-action
- * authorization. Team membership is what the platform login (pairing flow) and
- * the team Web UI gate on.
- *
- * Identity: members are keyed canonically by **union_id** (stable across apps
- * under the same Feishu developer/tenant — see docs/platform-design.md). We also
- * keep open_id / email / name when known so membership checks can match on any
- * identifier the caller has on hand.
- *
- * Deployment model: "one deployment = one implicit team" is the simplest case,
- * so a single default team is auto-materialized on first write. Explicit
- * multi-team support is the same shape, just more than one entry.
- *
- * Storage: `{dataDir}/teams.json`, atomic writes (unique tmp + rename).
- */
-import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
-import { join } from 'node:path';
-import { randomUUID } from 'node:crypto';
-export const DEFAULT_TEAM_ID = 'default';
-function filePath(dataDir) {
-    return join(dataDir, 'teams.json');
-}
-function readFile(dataDir) {
-    const fp = filePath(dataDir);
-    if (!existsSync(fp))
-        return { version: 1, teams: [] };
-    try {
-        const parsed = JSON.parse(readFileSync(fp, 'utf-8'));
-        if (parsed && Array.isArray(parsed.teams))
-            return { version: 1, teams: parsed.teams };
-    }
-    catch { /* corrupt — fall through */ }
-    return { version: 1, teams: [] };
-}
-function writeFileAtomic(dataDir, data) {
-    if (!existsSync(dataDir))
-        mkdirSync(dataDir, { recursive: true });
-    const fp = filePath(dataDir);
-    const tmp = `${fp}.${process.pid}.${randomUUID()}.tmp`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2) + '\n', 'utf-8');
-    renameSync(tmp, fp);
-}
-/** All teams (empty array if none materialized yet). */
-export function listTeams(dataDir) {
-    return readFile(dataDir).teams;
-}
-/** A team by id, or null. */
-export function getTeam(dataDir, teamId) {
-    return readFile(dataDir).teams.find(t => t.id === teamId) ?? null;
-}
-/** All teams the given identity belongs to (matches any identifier). */
-export function listTeamsForMember(dataDir, id) {
-    if (!id.unionId && !id.openId && !id.email)
-        return [];
-    return readFile(dataDir).teams.filter(t => t.members.some(m => sameMember(m, id)));
-}
-/**
- * The default (implicit single-deployment) team. Read-only: returns the first
- * persisted team, else a synthesized empty default that is NOT written. Use
- * `ensureDefaultTeam` when you intend to persist.
- */
-export function getDefaultTeam(dataDir) {
-    const teams = readFile(dataDir).teams;
-    const existing = teams.find(t => t.id === DEFAULT_TEAM_ID) ?? teams[0];
-    if (existing)
-        return existing;
-    const now = Date.now();
-    return { id: DEFAULT_TEAM_ID, name: '默认团队', members: [], createdAt: now, updatedAt: now };
-}
-/** Materialize (persist) the default team if no team exists yet; returns it. */
-export function ensureDefaultTeam(dataDir, now = Date.now()) {
-    const data = readFile(dataDir);
-    if (data.teams.length > 0)
-        return data.teams.find(t => t.id === DEFAULT_TEAM_ID) ?? data.teams[0];
-    const team = { id: DEFAULT_TEAM_ID, name: '默认团队', members: [], createdAt: now, updatedAt: now };
-    data.teams.push(team);
-    writeFileAtomic(dataDir, data);
-    return team;
-}
-/** Delete a team entirely (members + the team entry). Returns true if removed.
- *  Bots/connectors live at the deployment level (not per-team), so they are
- *  unaffected — only the membership/trust boundary is dropped. */
-export function deleteTeam(dataDir, teamId) {
-    const data = readFile(dataDir);
-    const before = data.teams.length;
-    data.teams = data.teams.filter(t => t.id !== teamId);
-    if (data.teams.length === before)
-        return false;
-    writeFileAtomic(dataDir, data);
-    return true;
-}
-/** Create a new explicit team. */
-export function createTeam(dataDir, name, now = Date.now()) {
-    const data = readFile(dataDir);
-    const team = { id: `team_${randomUUID().slice(0, 8)}`, name: name.trim() || '未命名团队', members: [], createdAt: now, updatedAt: now };
-    data.teams.push(team);
-    writeFileAtomic(dataDir, data);
-    return team;
-}
-function sameMember(m, id) {
-    return (!!id.unionId && m.unionId === id.unionId)
-        || (!!id.openId && m.openId === id.openId)
-        || (!!id.email && m.email === id.email);
-}
-/**
- * Add (or merge) a member into a team. Dedupes by any matching identifier and
- * fills in newly-known fields. Returns the updated team, or null if no such team.
- */
-export function addMember(dataDir, teamId, member, now = Date.now()) {
-    const data = readFile(dataDir);
-    const team = data.teams.find(t => t.id === teamId);
-    if (!team)
-        return null;
-    const existing = team.members.find(m => sameMember(m, member));
-    if (existing) {
-        existing.unionId ??= member.unionId;
-        existing.openId ??= member.openId;
-        existing.email ??= member.email;
-        if (member.name)
-            existing.name = member.name;
-    }
-    else {
-        team.members.push({ ...member, addedAt: member.addedAt ?? now });
-    }
-    team.updatedAt = now;
-    writeFileAtomic(dataDir, data);
-    return team;
-}
-/** Remove a member matching any identifier. Returns true if removed. */
-export function removeMember(dataDir, teamId, id, now = Date.now()) {
-    const data = readFile(dataDir);
-    const team = data.teams.find(t => t.id === teamId);
-    if (!team)
-        return false;
-    const before = team.members.length;
-    team.members = team.members.filter(m => !sameMember(m, id));
-    if (team.members.length === before)
-        return false;
-    team.updatedAt = now;
-    writeFileAtomic(dataDir, data);
-    return true;
-}
-/** Whether the given identity is a member of the team (matches any identifier). */
-export function isMember(dataDir, teamId, id) {
-    if (!id.unionId && !id.openId && !id.email)
-        return false;
-    const team = getTeam(dataDir, teamId);
-    if (!team)
-        return false;
-    return team.members.some(m => sameMember(m, id));
-}
-//# sourceMappingURL=team-store.js.map

package/dist/services/team-store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"team-store.js","sourceRoot":"","sources":["../../src/services/team-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AA+BzC,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;QACrD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,IAAe;IACvD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,UAAU,EAAE,MAAM,CAAC;IACvD,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IAClE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;AACjC,CAAC;AAED,6BAA6B;AAC7B,MAAM,UAAU,OAAO,CAAC,OAAe,EAAE,MAAc;IACrD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AACpE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,EAAkB;IACpE,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC5F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAS,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACtG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;kEAEkE;AAClE,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,MAAc;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kCAAkC;AAClC,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,IAAY,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAS,EAAE,EAAE,EAAE,QAAQ,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACzI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,EAAkB;IACnD,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,OAAO,CAAC;WAC5C,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC;WACvC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,MAAc,EAAE,MAA0D,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7I,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC;QACpC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAClC,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;IACrB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,MAAc,EAAE,EAAkB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACxG,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;IACrB,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,MAAc,EAAE,EAAkB;IAC1E,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC"}