botmux 3.10.0 → 3.23.1

package/dist/bot-registry.js

@@ -1,1909 +0,0 @@
-import * as Lark from '@larksuiteoapi/node-sdk';
-import { readFileSync, existsSync, statSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { homedir } from 'node:os';
-import { underReadIsolation } from './adapters/cli/read-isolation.js';
-import { normalizeCliRuntimeConfig, } from './adapters/cli/runtime.js';
-import { logger } from './utils/logger.js';
-import { isLocale, setBotLookup } from './i18n/index.js';
-import { sdkDomain, normalizeBrand } from './im/lark/lark-hosts.js';
-import { normalizeStartupCommandList } from './core/startup-commands.js';
-import { DAEMON_COMMANDS } from './core/passthrough-commands.js';
-import { sanitizePerBotEnv } from './core/per-bot-env.js';
-import { normalizeSubstituteMode } from './services/substitute-mode-normalize.js';
-import { normalizePluginIdList } from './core/plugins/ids.js';
-import { normalizeVcMeetingProfileInstructions } from './services/vc-meeting-profile-instructions.js';
-/**
- * Thrown when any Feishu client is requested for a core-only (`apiOnly`) bot.
- * Defined here (the lowest-level module that owns bot config + client) so both
- * `getBotClient` and higher layers (im/lark/client.ts primitives, doc-comment)
- * throw the SAME typed error without an import cycle. apiOnly = zero Feishu
- * network (reads AND writes); reaching a client request is genuine misuse.
- */
-export class LarkTransportDisabledError extends Error {
-    constructor(larkAppId, op) {
-        super(`Feishu transport is disabled for core-only bot ${larkAppId} (attempted: ${op})`);
-        this.name = 'LarkTransportDisabledError';
-    }
-}
-/** Default when a bot sets nothing: usage rides the live streaming card. */
-export const DEFAULT_USAGE_DISPLAY = 'streaming';
-function normalizeChatReplyModeConfig(raw) {
-    if (typeof raw !== 'string')
-        return undefined;
-    const v = raw.trim().toLowerCase();
-    if (v === 'chat')
-        return 'chat';
-    if (v === 'chat-topic' || v === 'chattopic' || v === 'chat_topic')
-        return 'chat-topic';
-    if (v === 'new-topic' || v === 'newtopic' || v === 'thread')
-        return 'new-topic';
-    if (v === 'topic' || v === 'shared' || v === 'share' || v === 'alias' || v === 'topic-alias' || v === 'topic_alias')
-        return 'shared';
-    return undefined;
-}
-function normalizeContentTriggerScope(raw) {
-    if (typeof raw !== 'string')
-        return undefined;
-    const v = raw.trim().toLowerCase();
-    if (v === 'both' || v === 'all')
-        return 'both';
-    if (v === 'topic' || v === 'thread' || v === 'topic-group' || v === 'topic_group')
-        return 'topic';
-    if (v === 'regulargroup' || v === 'regular-group' || v === 'regular_group' || v === 'group')
-        return 'regularGroup';
-    return undefined;
-}
-function normalizeMessageListenerSenderType(raw) {
-    if (raw === 'user' || raw === 'human')
-        return 'user';
-    if (raw === 'bot' || raw === 'app')
-        return 'bot';
-    return undefined;
-}
-function normalizeNonNegativeInt(raw) {
-    if (typeof raw !== 'number')
-        return undefined;
-    if (!Number.isInteger(raw) || raw < 0)
-        return undefined;
-    return raw;
-}
-function normalizePositiveInt(raw) {
-    if (typeof raw !== 'number')
-        return undefined;
-    if (!Number.isInteger(raw) || raw <= 0)
-        return undefined;
-    return raw;
-}
-function normalizeNonEmptyString(raw) {
-    return typeof raw === 'string' && raw.trim() ? raw.trim() : undefined;
-}
-function normalizeTimeZone(raw) {
-    const timeZone = normalizeNonEmptyString(raw);
-    if (!timeZone)
-        return undefined;
-    try {
-        new Intl.DateTimeFormat('zh-CN', { timeZone }).format(new Date(0));
-        return timeZone;
-    }
-    catch {
-        logger.warn(`vcMeetingAgent.timeZone ignored: invalid IANA time zone ${JSON.stringify(timeZone)}`);
-        return undefined;
-    }
-}
-function normalizeVcMeetingAgentConfig(raw) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const entry = raw;
-    const out = {};
-    if (entry.enabled === true)
-        out.enabled = true;
-    const notificationChatId = normalizeNonEmptyString(entry.notificationChatId);
-    const listenerChatId = normalizeNonEmptyString(entry.listenerChatId);
-    const attentionTargetOpenId = normalizeNonEmptyString(entry.attentionTargetOpenId);
-    const larkCliProfile = normalizeNonEmptyString(entry.larkCliProfile);
-    const timeZone = normalizeTimeZone(entry.timeZone ?? entry.timezone);
-    const inviteTtlMs = normalizePositiveInt(entry.inviteTtlMs);
-    const stabilizeMs = normalizePositiveInt(entry.stabilizeMs);
-    const flushIntervalMs = normalizePositiveInt(entry.flushIntervalMs);
-    const realtimeVoice = normalizeVcMeetingRealtimeVoiceConfig(entry.realtimeVoice);
-    const meetingConsumer = normalizeVcMeetingConsumerConfig(entry.meetingConsumer);
-    if (notificationChatId)
-        out.notificationChatId = notificationChatId;
-    if (listenerChatId)
-        out.listenerChatId = listenerChatId;
-    if (attentionTargetOpenId)
-        out.attentionTargetOpenId = attentionTargetOpenId;
-    if (larkCliProfile)
-        out.larkCliProfile = larkCliProfile;
-    if (timeZone)
-        out.timeZone = timeZone;
-    if (inviteTtlMs !== undefined)
-        out.inviteTtlMs = inviteTtlMs;
-    if (stabilizeMs !== undefined)
-        out.stabilizeMs = stabilizeMs;
-    if (flushIntervalMs !== undefined)
-        out.flushIntervalMs = flushIntervalMs;
-    if (realtimeVoice)
-        out.realtimeVoice = realtimeVoice;
-    if (meetingConsumer)
-        out.meetingConsumer = meetingConsumer;
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-function normalizeVcMeetingConsumerConfig(raw) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const entry = raw;
-    const out = {};
-    if (entry.enabled === true)
-        out.enabled = true;
-    if (entry.enabled === false)
-        out.enabled = false;
-    const selectionTimeoutMs = normalizePositiveInt(entry.selectionTimeoutMs);
-    const injectIntervalMs = normalizePositiveInt(entry.injectIntervalMs);
-    const minBatchChars = normalizePositiveInt(entry.minBatchChars);
-    const minBatchItems = normalizePositiveInt(entry.minBatchItems);
-    const maxInjectIntervalMs = normalizePositiveInt(entry.maxInjectIntervalMs);
-    if (selectionTimeoutMs !== undefined)
-        out.selectionTimeoutMs = selectionTimeoutMs;
-    if (injectIntervalMs !== undefined)
-        out.injectIntervalMs = injectIntervalMs;
-    if (minBatchChars !== undefined)
-        out.minBatchChars = minBatchChars;
-    if (minBatchItems !== undefined)
-        out.minBatchItems = minBatchItems;
-    if (maxInjectIntervalMs !== undefined)
-        out.maxInjectIntervalMs = maxInjectIntervalMs;
-    if (Object.prototype.hasOwnProperty.call(entry, 'defaultProfileBootstrap')) {
-        const marker = entry.defaultProfileBootstrap;
-        const path = 'vcMeetingAgent.meetingConsumer.defaultProfileBootstrap';
-        if (!marker || typeof marker !== 'object' || Array.isArray(marker)) {
-            strictConfigError(path, 'must be an object');
-        }
-        const markerEntry = marker;
-        const allowedKeys = new Set(['generatorVersion', 'profileId', 'configHash']);
-        const unknownKeys = Object.keys(markerEntry).filter(key => !allowedKeys.has(key));
-        if (unknownKeys.length > 0) {
-            strictConfigError(path, `unknown field(s): ${unknownKeys.join(', ')}`);
-        }
-        const generatorVersion = normalizePositiveInt(markerEntry.generatorVersion);
-        const profileId = normalizeNonEmptyString(markerEntry.profileId);
-        const configHash = normalizeNonEmptyString(markerEntry.configHash);
-        if (generatorVersion === undefined)
-            strictConfigError(`${path}.generatorVersion`, 'must be a positive integer');
-        if (!profileId)
-            strictConfigError(`${path}.profileId`, 'must be a non-empty string');
-        if (!configHash || !/^sha256:[0-9a-f]{64}$/u.test(configHash)) {
-            strictConfigError(`${path}.configHash`, 'must be a sha256:<64 lowercase hex> value');
-        }
-        out.defaultProfileBootstrap = { generatorVersion, profileId, configHash };
-    }
-    if (Object.prototype.hasOwnProperty.call(entry, 'consumerProfiles')) {
-        out.consumerProfiles = normalizeVcMeetingConsumerProfiles(entry.consumerProfiles);
-        if (Object.prototype.hasOwnProperty.call(entry, 'defaultConsumerIds')) {
-            out.defaultConsumerIds = normalizeStrictStringList(entry.defaultConsumerIds, 'vcMeetingAgent.meetingConsumer.defaultConsumerIds');
-        }
-        if (entry.defaultMode === 'listenOnly' || entry.defaultMode === 'agents') {
-            out.defaultMode = entry.defaultMode;
-        }
-        else if (entry.defaultMode !== undefined && entry.defaultMode !== 'agent') {
-            throw new Error('vcMeetingAgent.meetingConsumer.defaultMode must be listenOnly or agents when consumerProfiles is present');
-        }
-        const legacyFields = [
-            'defaultAgentAppId',
-            'defaultAgent',
-            'agentCandidates',
-            'agents',
-            ...(entry.defaultMode === 'agent' ? ['defaultMode=agent'] : []),
-        ].filter((field) => field.includes('=') || Object.prototype.hasOwnProperty.call(entry, field));
-        if (legacyFields.length > 0) {
-            logger.warn(`vcMeetingAgent.meetingConsumer.consumerProfiles is present; ignoring legacy fields: ${legacyFields.join(', ')}`);
-        }
-        const resolution = resolveVcMeetingConsumerProfiles(out);
-        if (!resolution.ok)
-            throw new Error(resolution.errors.join('; '));
-    }
-    else {
-        if (entry.defaultMode === 'listenOnly' || entry.defaultMode === 'agent')
-            out.defaultMode = entry.defaultMode;
-        const defaultAgentAppId = normalizeNonEmptyString(entry.defaultAgentAppId)
-            ?? normalizeNonEmptyString(entry.defaultAgent);
-        const candidates = normalizeVcMeetingConsumerCandidates(entry.agentCandidates ?? entry.agents);
-        if (defaultAgentAppId)
-            out.defaultAgentAppId = defaultAgentAppId;
-        if (candidates.length > 0)
-            out.agentCandidates = candidates;
-    }
-    if (out.defaultProfileBootstrap && out.consumerProfiles === undefined) {
-        strictConfigError('vcMeetingAgent.meetingConsumer.defaultProfileBootstrap', 'requires consumerProfiles');
-    }
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-const VC_MEETING_CONSUMER_ACTIVITY_TYPES = [
-    'participant_joined',
-    'participant_left',
-    'chat_received',
-    'transcript_received',
-    'magic_share_started',
-    'magic_share_ended',
-];
-const VC_MEETING_CONSUMER_MANAGED_SINKS = [
-    'meeting_text',
-    'meeting_voice',
-];
-const VC_MEETING_LISTENER_OUTPUT_PLACEMENTS = ['auto', 'chat', 'topic'];
-const VC_MEETING_OUTPUT_CAPABILITY = 'meeting.output.request';
-const VC_MEETING_LISTENER_OUTPUT_CAPABILITY = 'listener.output.request';
-const VC_MEETING_CONSUMER_PROFILE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-const VC_MEETING_CONSUMER_RESERVED_PROFILE_IDS = new Set([
-    '__proto__',
-    'prototype',
-    'constructor',
-]);
-function strictConfigError(path, message) {
-    throw new Error(`${path}: ${message}`);
-}
-function validateVcMeetingConsumerProfileId(id, path) {
-    if (VC_MEETING_CONSUMER_RESERVED_PROFILE_IDS.has(id)) {
-        strictConfigError(path, `${JSON.stringify(id)} is reserved`);
-    }
-    if (!VC_MEETING_CONSUMER_PROFILE_ID_RE.test(id)) {
-        strictConfigError(path, 'must match [A-Za-z0-9][A-Za-z0-9._-]{0,63}');
-    }
-}
-function normalizeStrictStringList(raw, path) {
-    if (!Array.isArray(raw))
-        strictConfigError(path, 'must be an array');
-    const out = [];
-    const seen = new Set();
-    for (let index = 0; index < raw.length; index += 1) {
-        const value = normalizeNonEmptyString(raw[index]);
-        if (!value)
-            strictConfigError(`${path}[${index}]`, 'must be a non-empty string');
-        if (seen.has(value))
-            strictConfigError(`${path}[${index}]`, `duplicates ${JSON.stringify(value)}`);
-        seen.add(value);
-        out.push(value);
-    }
-    return out;
-}
-function normalizeVcMeetingConsumerProfileFilter(raw, path) {
-    if (raw === undefined)
-        return undefined;
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
-        strictConfigError(path, 'must be an object');
-    }
-    const entry = raw;
-    const unknownKeys = Object.keys(entry).filter(key => key !== 'activityTypes');
-    if (unknownKeys.length > 0) {
-        strictConfigError(path, `unsupported filter field(s): ${unknownKeys.join(', ')}`);
-    }
-    if (entry.activityTypes === undefined)
-        return undefined;
-    const activityTypes = normalizeStrictStringList(entry.activityTypes, `${path}.activityTypes`);
-    for (let index = 0; index < activityTypes.length; index += 1) {
-        if (!VC_MEETING_CONSUMER_ACTIVITY_TYPES.includes(activityTypes[index])) {
-            strictConfigError(`${path}.activityTypes[${index}]`, `unsupported activity type ${JSON.stringify(activityTypes[index])}`);
-        }
-    }
-    return activityTypes.length > 0
-        ? { activityTypes: activityTypes }
-        : undefined;
-}
-function normalizeVcMeetingConsumerOwnedSinks(raw, path, capabilities) {
-    if (raw === undefined)
-        return undefined;
-    const sinks = normalizeStrictStringList(raw, path);
-    for (let index = 0; index < sinks.length; index += 1) {
-        const sink = sinks[index];
-        if (sink === 'listener_notice') {
-            strictConfigError(`${path}[${index}]`, 'listener_notice is reserved for the daemon system principal');
-        }
-        if (!VC_MEETING_CONSUMER_MANAGED_SINKS.includes(sink)) {
-            strictConfigError(`${path}[${index}]`, `unsupported owned sink ${JSON.stringify(sink)} in MA-P1 slice 1A`);
-        }
-        if (!capabilities.includes(VC_MEETING_OUTPUT_CAPABILITY)) {
-            strictConfigError(`${path}[${index}]`, `${sink} requires capability ${VC_MEETING_OUTPUT_CAPABILITY}`);
-        }
-    }
-    return sinks.length > 0 ? sinks : undefined;
-}
-function normalizeVcMeetingListenerDelivery(raw, path) {
-    if (raw === undefined)
-        return undefined;
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
-        strictConfigError(path, 'must be an object');
-    }
-    const entry = raw;
-    const unknownKeys = Object.keys(entry).filter(key => key !== 'placement');
-    if (unknownKeys.length > 0) {
-        strictConfigError(path, `unknown field(s): ${unknownKeys.join(', ')}`);
-    }
-    if (!VC_MEETING_LISTENER_OUTPUT_PLACEMENTS.includes(entry.placement)) {
-        strictConfigError(`${path}.placement`, 'must be auto, chat, or topic');
-    }
-    return { placement: entry.placement };
-}
-function normalizeVcMeetingConsumerProfiles(raw) {
-    const path = 'vcMeetingAgent.meetingConsumer.consumerProfiles';
-    if (!Array.isArray(raw))
-        strictConfigError(path, 'must be an array');
-    return raw.map((value, index) => {
-        const profilePath = `${path}[${index}]`;
-        if (!value || typeof value !== 'object' || Array.isArray(value)) {
-            strictConfigError(profilePath, 'must be an object');
-        }
-        const entry = value;
-        const allowedKeys = new Set([
-            'id',
-            'agentAppId',
-            'label',
-            'role',
-            'instructions',
-            'filter',
-            'responseMode',
-            'listenerDelivery',
-            'capabilities',
-            'ownedSinks',
-        ]);
-        const unknownKeys = Object.keys(entry).filter(key => !allowedKeys.has(key));
-        if (unknownKeys.length > 0) {
-            strictConfigError(profilePath, `unknown field(s): ${unknownKeys.join(', ')}`);
-        }
-        const id = normalizeNonEmptyString(entry.id);
-        if (!id)
-            strictConfigError(`${profilePath}.id`, 'must be a non-empty string');
-        validateVcMeetingConsumerProfileId(id, `${profilePath}.id`);
-        const agentAppId = normalizeNonEmptyString(entry.agentAppId);
-        if (!agentAppId)
-            strictConfigError(`${profilePath}.agentAppId`, 'must be a non-empty string');
-        const role = normalizeNonEmptyString(entry.role);
-        if (!role)
-            strictConfigError(`${profilePath}.role`, 'must be a non-empty string');
-        if (role.length > 256)
-            strictConfigError(`${profilePath}.role`, 'must be at most 256 characters');
-        if (/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/u.test(role)) {
-            strictConfigError(`${profilePath}.role`, 'must be a single printable line');
-        }
-        if (role.toLowerCase().includes('botmux_role_instructions')) {
-            strictConfigError(`${profilePath}.role`, 'contains a reserved botmux instruction marker');
-        }
-        const normalizedInstructions = normalizeVcMeetingProfileInstructions(entry.instructions);
-        if (!normalizedInstructions.ok) {
-            strictConfigError(`${profilePath}.instructions`, normalizedInstructions.error);
-        }
-        if (entry.label !== undefined && !normalizeNonEmptyString(entry.label)) {
-            strictConfigError(`${profilePath}.label`, 'must be a non-empty string when present');
-        }
-        if (entry.responseMode !== 'silent' && entry.responseMode !== 'listener_thread') {
-            strictConfigError(`${profilePath}.responseMode`, 'must be silent or listener_thread');
-        }
-        const capabilities = normalizeStrictStringList(entry.capabilities, `${profilePath}.capabilities`);
-        const filter = normalizeVcMeetingConsumerProfileFilter(entry.filter, `${profilePath}.filter`);
-        const ownedSinks = normalizeVcMeetingConsumerOwnedSinks(entry.ownedSinks, `${profilePath}.ownedSinks`, capabilities);
-        const listenerDelivery = normalizeVcMeetingListenerDelivery(entry.listenerDelivery, `${profilePath}.listenerDelivery`);
-        return {
-            id,
-            agentAppId,
-            ...(normalizeNonEmptyString(entry.label) ? { label: normalizeNonEmptyString(entry.label) } : {}),
-            role,
-            ...(normalizedInstructions.instructions
-                ? { instructions: normalizedInstructions.instructions }
-                : {}),
-            ...(filter ? { filter } : {}),
-            responseMode: entry.responseMode,
-            ...(listenerDelivery ? { listenerDelivery } : {}),
-            capabilities,
-            ...(ownedSinks ? { ownedSinks } : {}),
-        };
-    });
-}
-/**
- * Resolve and validate a profile-mode selection. The daemon can call this again
- * for card selections; config parsing calls it for the default selection.
- * Legacy configs deliberately return `source: legacy` without synthesizing
- * profiles so the existing dynamic-candidate/single-select path stays intact.
- */
-export function resolveVcMeetingConsumerProfiles(config, selectedConsumerIds) {
-    if (config.consumerProfiles === undefined) {
-        if (config.defaultMode === 'agents' || config.defaultConsumerIds !== undefined) {
-            return {
-                ok: false,
-                source: 'legacy',
-                errors: ['consumerProfiles is required for defaultMode=agents/defaultConsumerIds'],
-            };
-        }
-        return { ok: true, source: 'legacy', profiles: [], selectedProfiles: [] };
-    }
-    const errors = [];
-    const profiles = config.consumerProfiles;
-    const byId = new Map();
-    for (let index = 0; index < profiles.length; index += 1) {
-        const profile = profiles[index];
-        if (VC_MEETING_CONSUMER_RESERVED_PROFILE_IDS.has(profile.id)) {
-            errors.push(`consumerProfiles[${index}].id ${JSON.stringify(profile.id)} is reserved`);
-        }
-        else if (!VC_MEETING_CONSUMER_PROFILE_ID_RE.test(profile.id)) {
-            errors.push(`consumerProfiles[${index}].id must match [A-Za-z0-9][A-Za-z0-9._-]{0,63}`);
-        }
-        if (byId.has(profile.id)) {
-            errors.push(`consumerProfiles[${index}].id duplicates ${JSON.stringify(profile.id)}`);
-        }
-        else {
-            byId.set(profile.id, profile);
-        }
-        for (const sink of profile.ownedSinks ?? []) {
-            if (sink === 'listener_notice') {
-                errors.push(`consumerProfiles[${index}].ownedSinks: listener_notice is reserved`);
-            }
-            else if (!VC_MEETING_CONSUMER_MANAGED_SINKS.includes(sink)) {
-                errors.push(`consumerProfiles[${index}].ownedSinks: unsupported sink ${JSON.stringify(sink)}`);
-            }
-            else if (!profile.capabilities.includes(VC_MEETING_OUTPUT_CAPABILITY)) {
-                errors.push(`consumerProfiles[${index}].ownedSinks: ${sink} requires ${VC_MEETING_OUTPUT_CAPABILITY}`);
-            }
-        }
-        if (profile.responseMode === 'listener_thread'
-            && !profile.capabilities.includes(VC_MEETING_LISTENER_OUTPUT_CAPABILITY)) {
-            errors.push(`consumerProfiles[${index}].responseMode: listener_thread requires ${VC_MEETING_LISTENER_OUTPUT_CAPABILITY}`);
-        }
-    }
-    for (const [index, id] of (config.defaultConsumerIds ?? []).entries()) {
-        if (!byId.has(id))
-            errors.push(`defaultConsumerIds[${index}] references unknown profile ${JSON.stringify(id)}`);
-    }
-    const selectedIds = [...(selectedConsumerIds ?? config.defaultConsumerIds ?? [])];
-    if (selectedConsumerIds === undefined && config.defaultMode === 'agents' && selectedIds.length === 0) {
-        errors.push('defaultMode=agents requires at least one defaultConsumerId');
-    }
-    const selectedProfiles = [];
-    const seenIds = new Set();
-    const selectedByAgent = new Map();
-    const selectedBySink = new Map();
-    let selectedListenerThreadProfile;
-    for (let index = 0; index < selectedIds.length; index += 1) {
-        const id = selectedIds[index];
-        if (seenIds.has(id)) {
-            errors.push(`selectedConsumerIds[${index}] duplicates ${JSON.stringify(id)}`);
-            continue;
-        }
-        seenIds.add(id);
-        const profile = byId.get(id);
-        if (!profile) {
-            errors.push(`selectedConsumerIds[${index}] references unknown profile ${JSON.stringify(id)}`);
-            continue;
-        }
-        selectedProfiles.push(profile);
-        const priorAgentProfile = selectedByAgent.get(profile.agentAppId);
-        if (priorAgentProfile) {
-            errors.push(`selected profiles ${JSON.stringify(priorAgentProfile)} and ${JSON.stringify(profile.id)} share agentAppId ${JSON.stringify(profile.agentAppId)}`);
-        }
-        else {
-            selectedByAgent.set(profile.agentAppId, profile.id);
-        }
-        for (const sink of profile.ownedSinks ?? []) {
-            const priorSinkProfile = selectedBySink.get(sink);
-            if (priorSinkProfile) {
-                errors.push(`selected profiles ${JSON.stringify(priorSinkProfile)} and ${JSON.stringify(profile.id)} both own sink ${JSON.stringify(sink)}`);
-            }
-            else {
-                selectedBySink.set(sink, profile.id);
-            }
-        }
-        if (profile.responseMode === 'listener_thread') {
-            if (selectedListenerThreadProfile) {
-                errors.push(`selected profiles ${JSON.stringify(selectedListenerThreadProfile)} and ${JSON.stringify(profile.id)} both use responseMode "listener_thread"`);
-            }
-            else {
-                selectedListenerThreadProfile = profile.id;
-            }
-        }
-    }
-    return errors.length > 0
-        ? { ok: false, source: 'profiles', errors }
-        : { ok: true, source: 'profiles', profiles, selectedProfiles };
-}
-function normalizeVcMeetingConsumerCandidates(raw) {
-    if (!Array.isArray(raw))
-        return [];
-    const out = [];
-    const seen = new Set();
-    for (const item of raw) {
-        let larkAppId;
-        let label;
-        if (typeof item === 'string') {
-            larkAppId = item.trim();
-        }
-        else if (item && typeof item === 'object' && !Array.isArray(item)) {
-            const entry = item;
-            larkAppId = normalizeNonEmptyString(entry.larkAppId) ?? normalizeNonEmptyString(entry.appId);
-            label = normalizeNonEmptyString(entry.label) ?? normalizeNonEmptyString(entry.name);
-        }
-        if (!larkAppId || seen.has(larkAppId))
-            continue;
-        seen.add(larkAppId);
-        out.push({
-            larkAppId,
-            ...(label ? { label } : {}),
-        });
-    }
-    return out;
-}
-function normalizeVcMeetingRealtimeVoiceConfig(raw) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const entry = raw;
-    const out = {};
-    if (entry.enabled === true)
-        out.enabled = true;
-    const sampleRate = normalizePositiveInt(entry.sampleRate);
-    const channels = normalizePositiveInt(entry.channels);
-    const frameMs = normalizePositiveInt(entry.frameMs);
-    const testSpeakOnStartText = normalizeNonEmptyString(entry.testSpeakOnStartText);
-    if (sampleRate !== undefined)
-        out.sampleRate = sampleRate;
-    if (channels !== undefined)
-        out.channels = channels;
-    if (frameMs !== undefined)
-        out.frameMs = frameMs;
-    if (testSpeakOnStartText)
-        out.testSpeakOnStartText = testSpeakOnStartText;
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-function normalizeStringList(raw) {
-    if (!Array.isArray(raw))
-        return [];
-    return raw
-        .filter((p) => typeof p === 'string' && !!p.trim())
-        .map((p) => p.trim());
-}
-function normalizeSummaryRange(raw) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const entry = raw;
-    const out = {};
-    const limit = normalizeNonNegativeInt(entry.limit);
-    const sinceHours = normalizeNonNegativeInt(entry.sinceHours);
-    if (limit !== undefined)
-        out.limit = limit;
-    if (sinceHours !== undefined)
-        out.sinceHours = sinceHours;
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-function normalizeContentTriggers(raw, botIndex) {
-    if (!Array.isArray(raw))
-        return undefined;
-    const out = [];
-    raw.forEach((item, triggerIndex) => {
-        const loc = `Bot config [${botIndex}] contentTriggers[${triggerIndex}]`;
-        const drop = (reason) => logger.warn(`${loc} ignored: ${reason}`);
-        if (!item || typeof item !== 'object' || Array.isArray(item)) {
-            drop('must be an object');
-            return;
-        }
-        const entry = item;
-        const name = typeof entry.name === 'string' && entry.name.trim()
-            ? entry.name.trim()
-            : `content-trigger-${triggerIndex + 1}`;
-        const enabled = entry.enabled !== false;
-        const scope = normalizeContentTriggerScope(entry.scope);
-        if (!scope) {
-            drop(`invalid scope ${JSON.stringify(entry.scope)}`);
-            return;
-        }
-        const matchRaw = entry.match;
-        if (!matchRaw || typeof matchRaw !== 'object' || Array.isArray(matchRaw)) {
-            drop('match must be an object');
-            return;
-        }
-        const match = matchRaw;
-        const type = match.type === 'keyword' || match.type === 'regex' ? match.type : undefined;
-        if (!type) {
-            drop(`invalid match.type ${JSON.stringify(match.type)}`);
-            return;
-        }
-        const pattern = typeof match.pattern === 'string' ? match.pattern : '';
-        if (!pattern) {
-            drop('match.pattern must be a non-empty string');
-            return;
-        }
-        const caseSensitive = match.caseSensitive === true;
-        if (type === 'regex') {
-            try {
-                // Validate only. Runtime recompiles defensively in case an in-memory
-                // config is mutated after startup.
-                new RegExp(pattern, caseSensitive ? 'u' : 'iu');
-            }
-            catch (err) {
-                drop(`invalid regex ${JSON.stringify(pattern)} (${err instanceof Error ? err.message : String(err)})`);
-                return;
-            }
-        }
-        const actionRaw = entry.action;
-        if (!actionRaw || typeof actionRaw !== 'object' || Array.isArray(actionRaw)) {
-            drop('action must be an object');
-            return;
-        }
-        const action = actionRaw;
-        if (action.type !== 'start-or-wake-session') {
-            drop(`invalid action.type ${JSON.stringify(action.type)}`);
-            return;
-        }
-        const prompt = typeof action.prompt === 'string' ? action.prompt.trim() : '';
-        if (!prompt) {
-            drop('action.prompt must be a non-empty string');
-            return;
-        }
-        const historyRaw = entry.history && typeof entry.history === 'object' && !Array.isArray(entry.history)
-            ? entry.history
-            : {};
-        const topicRaw = historyRaw.topic && typeof historyRaw.topic === 'object' && !Array.isArray(historyRaw.topic)
-            ? historyRaw.topic
-            : {};
-        const regularRaw = historyRaw.regularGroup && typeof historyRaw.regularGroup === 'object' && !Array.isArray(historyRaw.regularGroup)
-            ? historyRaw.regularGroup
-            : {};
-        const topicMode = topicRaw.mode === undefined || topicRaw.mode === 'current-thread'
-            ? 'current-thread'
-            : undefined;
-        if (!topicMode) {
-            drop(`invalid history.topic.mode ${JSON.stringify(topicRaw.mode)}`);
-            return;
-        }
-        const regularMode = regularRaw.mode === undefined || regularRaw.mode === 'recent-messages'
-            ? 'recent-messages'
-            : undefined;
-        if (!regularMode) {
-            drop(`invalid history.regularGroup.mode ${JSON.stringify(regularRaw.mode)}`);
-            return;
-        }
-        const limit = regularRaw.limit === undefined ? 50 : normalizeNonNegativeInt(regularRaw.limit);
-        if (limit === undefined) {
-            drop(`invalid history.regularGroup.limit ${JSON.stringify(regularRaw.limit)}`);
-            return;
-        }
-        const sinceHours = regularRaw.sinceHours === undefined ? undefined : normalizeNonNegativeInt(regularRaw.sinceHours);
-        if (regularRaw.sinceHours !== undefined && sinceHours === undefined) {
-            drop(`invalid history.regularGroup.sinceHours ${JSON.stringify(regularRaw.sinceHours)}`);
-            return;
-        }
-        out.push({
-            name,
-            enabled,
-            scope,
-            ...(entry.allowBotMessages === true ? { allowBotMessages: true } : {}),
-            match: { type, pattern, caseSensitive },
-            history: {
-                topic: { mode: 'current-thread' },
-                regularGroup: {
-                    mode: 'recent-messages',
-                    limit,
-                    sinceHours,
-                },
-            },
-            action: { type: 'start-or-wake-session', prompt },
-        });
-    });
-    return out.length > 0 ? out : undefined;
-}
-function normalizeMessageListenerStringList(raw) {
-    const values = normalizeStringList(raw);
-    return values.length > 0 ? [...new Set(values)] : undefined;
-}
-function normalizeMessageListenerSenderKinds(raw, excludeSenderOpenIds) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const allowed = excludeSenderOpenIds ? new Set(excludeSenderOpenIds) : undefined;
-    const out = {};
-    for (const [key, value] of Object.entries(raw)) {
-        if (!key || (allowed && !allowed.has(key)))
-            continue;
-        if (value === 'user' || value === 'bot')
-            out[key] = value;
-    }
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-function normalizeMessageListenerSenderTypes(raw) {
-    if (!Array.isArray(raw))
-        return undefined;
-    const values = raw
-        .map(normalizeMessageListenerSenderType)
-        .filter((value) => !!value);
-    return values.length > 0 ? [...new Set(values)] : undefined;
-}
-function normalizeMessageListenerConfig(raw, botIndex, chatId) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const entry = raw;
-    const prompt = normalizeNonEmptyString(entry.prompt);
-    const enabled = entry.enabled === true;
-    if (enabled && !prompt) {
-        logger.warn(`Bot config [${botIndex}] messageListeners[${chatId}] ignored: enabled listener requires prompt`);
-        return undefined;
-    }
-    const senderRaw = entry.senderPolicy && typeof entry.senderPolicy === 'object' && !Array.isArray(entry.senderPolicy)
-        ? entry.senderPolicy
-        : {};
-    const senderPolicy = {};
-    const mode = senderRaw.mode === 'include_only' ? 'include_only' : 'all_except_excluded';
-    const includeSenderOpenIds = normalizeMessageListenerStringList(senderRaw.includeSenderOpenIds);
-    const excludeSenderOpenIds = normalizeMessageListenerStringList(senderRaw.excludeSenderOpenIds);
-    const excludeSenderKinds = normalizeMessageListenerSenderKinds(senderRaw.excludeSenderKinds, excludeSenderOpenIds);
-    const includeSenderTypes = normalizeMessageListenerSenderTypes(senderRaw.includeSenderTypes);
-    const excludeSenderTypes = normalizeMessageListenerSenderTypes(senderRaw.excludeSenderTypes);
-    if (mode !== 'all_except_excluded')
-        senderPolicy.mode = mode;
-    if (includeSenderOpenIds)
-        senderPolicy.includeSenderOpenIds = includeSenderOpenIds;
-    if (excludeSenderOpenIds)
-        senderPolicy.excludeSenderOpenIds = excludeSenderOpenIds;
-    if (excludeSenderKinds)
-        senderPolicy.excludeSenderKinds = excludeSenderKinds;
-    if (includeSenderTypes)
-        senderPolicy.includeSenderTypes = includeSenderTypes;
-    if (excludeSenderTypes)
-        senderPolicy.excludeSenderTypes = excludeSenderTypes;
-    if (senderRaw.excludeSelf === false)
-        senderPolicy.excludeSelf = false;
-    const messageRaw = entry.messagePolicy && typeof entry.messagePolicy === 'object' && !Array.isArray(entry.messagePolicy)
-        ? entry.messagePolicy
-        : {};
-    const messagePolicy = {};
-    const includeMsgTypes = normalizeMessageListenerStringList(messageRaw.includeMsgTypes);
-    if (includeMsgTypes)
-        messagePolicy.includeMsgTypes = includeMsgTypes;
-    messagePolicy.scope = 'top_level';
-    return {
-        enabled,
-        ...(normalizeNonEmptyString(entry.name) ? { name: normalizeNonEmptyString(entry.name) } : {}),
-        ...(normalizeNonEmptyString(entry.replyCardTitle) ? { replyCardTitle: normalizeNonEmptyString(entry.replyCardTitle) } : {}),
-        ...(normalizeNonEmptyString(entry.workingDir) ? { workingDir: normalizeNonEmptyString(entry.workingDir) } : {}),
-        prompt: prompt ?? '',
-        ...(Object.keys(senderPolicy).length > 0 ? { senderPolicy } : {}),
-        ...(Object.keys(messagePolicy).length > 0 ? { messagePolicy } : {}),
-        replyPolicy: { mode: 'thread', sessionMode: 'per_message' },
-    };
-}
-function normalizeMessageListeners(raw, botIndex) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const out = {};
-    for (const [chatId, listenerRaw] of Object.entries(raw)) {
-        if (typeof chatId !== 'string' || !chatId.trim())
-            continue;
-        const listener = normalizeMessageListenerConfig(listenerRaw, botIndex, chatId.trim());
-        if (listener)
-            out[chatId.trim()] = listener;
-    }
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-const bots = new Map();
-export function __testOnly_resetBotRegistry() {
-    bots.clear();
-    loadedConfigPath = undefined;
-    oncallChatCache = null;
-    brandLabelCache = null;
-    usageDisplayCache = null;
-}
-// Wire the i18n lookup so `localeForBot()` can resolve per-bot locale without
-// a hard import cycle between `i18n` and `bot-registry`.
-setBotLookup((id) => bots.get(id));
-/** Path of the bot config file we loaded (so `/oncall` can persist bindings back). */
-let loadedConfigPath;
-export function getLoadedConfigPath() {
-    return loadedConfigPath;
-}
-// Route Lark SDK output through our logger so it inherits the same sink
-// rules (info/debug → daemon.log in daemon mode, → stderr in CLI mode,
-// dropped when CLI is silent). The default SDK logger calls console.log,
-// which would corrupt CLI stdout consumers.
-//
-// Volume control: the SDK is chatty at info/debug ("client ready", request
-// traces, etc.); without DEBUG=1 those become no-ops in the CLI path and
-// stay in daemon.log on the daemon path — pm2's error.log no longer sees
-// "[lark:info] client ready" floods.
-// Cap raw dumps so an unrecognized error shape can never flood the log the way
-// the SDK's full AxiosError blob (stack + config + headers) did — that bloated
-// pm2's error.log past 1GB and, worse, leaked the `Authorization: Bearer t-…`
-// access token on every request failure.
-const MAX_FALLBACK_LEN = 300;
-function safeStringify(v) {
-    if (typeof v === 'string')
-        return v;
-    let s;
-    try {
-        s = JSON.stringify(v) ?? String(v);
-    }
-    catch {
-        s = String(v);
-    }
-    return s.length > MAX_FALLBACK_LEN ? `${s.slice(0, MAX_FALLBACK_LEN)}…(+${s.length - MAX_FALLBACK_LEN})` : s;
-}
-// Drop the protocol+host (and `/open-apis/` prefix) so the line shows just the
-// API path that matters for triage, never the bearer token in the URL/headers.
-function shortLarkPath(url) {
-    if (typeof url !== 'string' || !url)
-        return '';
-    const path = url.replace(/^https?:\/\/[^/]+/, '').replace(/^\/open-apis\//, '');
-    return path || url;
-}
-/**
- * Condense a Lark SDK error into one readable line, preserving just the fields
- * needed to triage (HTTP status + business `code`/`msg`/`log_id`). Returns null
- * when the value isn't an axios-shaped error, so callers fall back to
- * length-capped stringify. Never serializes `config`/`headers`/`stack`, so the
- * access token can't leak.
- */
-export function formatLarkError(v) {
-    if (!v || typeof v !== 'object')
-        return null;
-    const isAxios = v.isAxiosError === true || v.name === 'AxiosError' || (v.config && (v.response || v.status != null));
-    if (!isAxios)
-        return null;
-    const method = String(v.config?.method ?? '').toUpperCase();
-    const path = shortLarkPath(v.config?.url);
-    const httpStatus = v.response?.status ?? v.status;
-    // Lark business error lives in the response body; some shapes surface it on
-    // the error object directly.
-    const data = v.response?.data ?? {};
-    const code = data.code ?? v.code;
-    const msg = data.msg ?? v.msg;
-    const logId = data.log_id ?? data.logId;
-    const parts = [];
-    if (method)
-        parts.push(method);
-    if (path)
-        parts.push(path);
-    if (httpStatus != null || method || path)
-        parts.push(`→ ${httpStatus ?? '?'}`);
-    if (typeof code === 'number')
-        parts.push(`code=${code}`);
-    if (typeof msg === 'string' && msg)
-        parts.push(`"${msg}"`);
-    if (logId)
-        parts.push(`log_id=${logId}`);
-    if (!parts.length)
-        return null;
-    return parts.join(' ');
-}
-const fmtLark = (msg) => msg.map((m) => formatLarkError(m) ?? safeStringify(m)).join(' ');
-const larkLogger = {
-    // SDK request failures arrive here as raw AxiosError objects — condense to a
-    // single triage line (status + lark code/msg/log_id) instead of dumping the
-    // stack/config blob. Demoted to warn: nearly all are environmental and already
-    // handled at the call site (rate limits, bot-not-in-chat, stale threads).
-    error: (...msg) => logger.warn(`[lark] ${fmtLark(msg)}`),
-    warn: (...msg) => logger.warn(`[lark] ${fmtLark(msg)}`),
-    info: (...msg) => logger.info(`[lark] ${fmtLark(msg)}`),
-    debug: (...msg) => logger.debug(`[lark] ${fmtLark(msg)}`),
-    trace: (..._msg) => { },
-};
-/**
- * Pure predicate: is this bot's VC-meeting-agent config ACTIVE (should the daemon
- * attend meetings / restore VC runtime sessions / poll `lark-cli vc` for it)?
- *
- * Returns the config only when it is `enabled` AND the bot is NOT apiOnly. An
- * apiOnly (core-only) bot has no Feishu connection — attending a VC meeting drives
- * `lark-cli vc +meeting-events --as bot`, which categorically violates the
- * zero-Feishu-network contract. Gating here (rather than only at each call site)
- * means the daemon's central `effectiveVcMeetingAgentConfig` accessor — and every
- * one of its ~24 consumers, including the boot-time `restoreVcMeetingRuntimeSessions`
- * path that runs OUTSIDE the `!cfg.apiOnly` boot block — fail-closes for apiOnly by
- * construction. The dashboard already refuses to SET an apiOnly listener; this also
- * covers a hand-edited / migrated bots.json (a normal VC bot flipped to apiOnly with
- * `vcMeetingAgent.enabled:true` + a stale on-disk runtime record).
- */
-export function vcMeetingAgentConfigActive(cfg) {
-    if (!cfg)
-        return undefined;
-    if (cfg.apiOnly === true)
-        return undefined;
-    return cfg.vcMeetingAgent?.enabled === true ? cfg.vcMeetingAgent : undefined;
-}
-export function registerBot(cfg) {
-    // apiOnly (core-only) bots have NO Feishu credential (empty appSecret). The Lark
-    // SDK Client ctor throws "appSecret or clientAssertionProvider is required" on an
-    // empty secret, so constructing it would fatal the whole daemon at boot — the
-    // exact failure riff hit in a clean sandbox. An apiOnly bot never uses the client
-    // (getBotClient throws LarkTransportDisabledError first; getAllBotClients filters
-    // apiOnly), so leave it null. Zero Feishu transport is the whole contract.
-    const client = cfg.apiOnly === true
-        ? null
-        : new Lark.Client({
-            appId: cfg.larkAppId,
-            appSecret: cfg.larkAppSecret,
-            // brand → SDK domain。缺省走 feishu，国际版租户走 larksuite.com。
-            // 这一行同时修好了所有经由 SDK 的调用（发消息 / 文件 / contact 等）。
-            domain: sdkDomain(normalizeBrand(cfg.brand)),
-            logger: larkLogger,
-        });
-    const state = {
-        config: cfg,
-        client,
-        resolvedAllowedUsers: [...(cfg.allowedUsers ?? [])],
-        rawAllowedUserResolution: new Map(),
-    };
-    // p2pOpen 是一次显式的权限边界声明（进入限制态），但它只授 talk。没有 allowedUsers 就
-    // 没有任何人能 operate（/restart、/cd、卡片按钮全锁死），也没有 owner 可以处置授权卡 ——
-    // 这几乎肯定是配错了，明确告警而不是静默把 bot 变成谁也管不了的状态。
-    if (cfg.p2pOpen === true && (cfg.allowedUsers?.length ?? 0) === 0) {
-        logger.warn(`[bot:${cfg.larkAppId}] p2pOpen 已开启但未配 allowedUsers：任何人都能私聊，但没有人能执行管理操作（/restart、/cd、卡片按钮）。请补上 allowedUsers。`);
-    }
-    bots.set(cfg.larkAppId, state);
-    return state;
-}
-export function getBot(larkAppId) {
-    const state = bots.get(larkAppId);
-    if (!state) {
-        throw new Error(`Bot not registered: ${larkAppId}`);
-    }
-    return state;
-}
-export function getBotClient(larkAppId) {
-    const bot = getBot(larkAppId);
-    // Bot-level transport boundary at the TRUE shared base. `apiOnly` (core-only)
-    // means zero Feishu network — reads AND writes — not merely "no sends". Every
-    // Feishu call in the codebase resolves its client here (client.ts primitives,
-    // doc-comment drive API, open-platform rename/avatar, identity cache…), so
-    // throwing here is the single authoritative gate no caller can bypass. A
-    // correctly-built apiOnly flow never reaches this (session/CLI gates fire
-    // first); reaching it is genuine misuse and must fail loud, not silently.
-    if (bot.config.apiOnly === true) {
-        throw new LarkTransportDisabledError(larkAppId, 'getBotClient');
-    }
-    // Non-apiOnly bots always have a constructed client (registerBot builds one for
-    // every non-apiOnly config). The null-guard is defensive — a null here would mean
-    // a misconfigured bot slipped the apiOnly gate, which must fail loud, not NPE deep
-    // in an SDK call.
-    if (!bot.client) {
-        throw new Error(`Bot ${larkAppId} has no Lark client (apiOnly misconfiguration)`);
-    }
-    return bot.client;
-}
-/** Owner = bot 首个已授权 open_id，与「缺权限警告私信对象」同口径（见 admin 解析）。 */
-export function getOwnerOpenId(larkAppId) {
-    return bots.get(larkAppId)?.resolvedAllowedUsers.find(u => u.startsWith('ou_'));
-}
-/** Admins = all resolved allowedUsers, matching `/botconfig`'s permission model. */
-export function getDashboardAdminOpenIds(larkAppId) {
-    return [...(bots.get(larkAppId)?.resolvedAllowedUsers ?? [])];
-}
-/**
- * Hook the daemon registers so runtime allowedUsers mutations (set / revoke)
- * can republish the dashboard descriptor's `resolvedAllowedUsers` without the
- * services layer importing daemon internals. No-op until the daemon registers
- * it (e.g. in one-shot CLI paths that never publish a descriptor).
- */
-let republishResolvedAllowedUsersHook;
-export function setResolvedAllowedUsersRepublishHook(fn) {
-    republishResolvedAllowedUsersHook = fn;
-}
-export function republishResolvedAllowedUsersDescriptor(larkAppId, resolved) {
-    try {
-        republishResolvedAllowedUsersHook?.(larkAppId, resolved);
-    }
-    catch { /* best effort */ }
-}
-/**
- * Hook the daemon registers so a runtime allowedUsers mutation that hit a
- * TRANSIENT contact failure for some entry can schedule the same background
- * resolve-retry the startup path uses (heal-when-API-recovers). No-op until the
- * daemon registers it (e.g. one-shot CLI paths with no retry loop).
- */
-let allowedUsersResolveRetryHook;
-export function setAllowedUsersResolveRetryHook(fn) {
-    allowedUsersResolveRetryHook = fn;
-}
-export function scheduleAllowedUsersResolveRetryFromMutation(larkAppId) {
-    try {
-        allowedUsersResolveRetryHook?.(larkAppId);
-    }
-    catch { /* best effort */ }
-}
-/** Bot 自身的 open_id（用于在 mention 解析时排除自己）。 */
-export function getBotOpenId(larkAppId) {
-    return bots.get(larkAppId)?.botOpenId;
-}
-/**
- * 安全地按 appId 取 brand。未注册（如跨进程 dashboard 聚合到别的 daemon 的
- * 会话）→ 归一为 'feishu'。仅用于派生 applink 等 host，缺省 feishu 安全。
- */
-export function getBotBrand(larkAppId) {
-    return normalizeBrand(larkAppId ? bots.get(larkAppId)?.config.brand : undefined);
-}
-export function getAllBots() {
-    return Array.from(bots.values());
-}
-/**
- * Bot 的有效展示名：自定义 displayName > 飞书探测名 botName > larkAppId。
- * 仅用于展示面（dashboard descriptor / SessionRow）；@ 路由与 bots-info
- * 名册仍用飞书真名。
- */
-export function effectiveBotDisplayName(state) {
-    return state.config.displayName || state.botName || state.config.larkAppId;
-}
-/** Lookup the oncall binding for a given bot+chat, if any. */
-export function findOncallChat(larkAppId, chatId) {
-    const bot = bots.get(larkAppId);
-    return bot?.config.oncallChats?.find(c => c.chatId === chatId);
-}
-/**
- * The bot's effective default working dir for a NEW session, as a raw
- * (possibly `~`-prefixed) path — the caller still expands + validates it.
- *
- * Two sources, presented as a mutually-exclusive 3-way choice in the dashboard
- * ("默认工作目录模式": 关闭 / 仅默认目录 / Oncall 模式) but if both happen to be set
- * (legacy / chat-command config) `defaultWorkingDir` wins:
- *   1) `defaultWorkingDir` — pin a dir for new sessions; no permission change.
- *   2) `defaultOncall.workingDir` when `defaultOncall.enabled` — "Oncall 模式"
- *      extends its directory to ALL of this bot's sessions (p2p / 话题 / 普通群
- *      fallback), not just the group auto-bind. The group auto-bind (which also
- *      opens talk to the whole group) still happens separately upstream; this
- *      fallback is what makes the bot's OTHER sessions land in the same dir.
- *
- * Returns undefined when neither is configured. Reading this NEVER writes state
- * or binds a chat to oncall, so the resolved session's permission model is
- * unchanged regardless of which source supplied the path.
- */
-export function effectiveDefaultWorkingDir(cfg) {
-    return cfg.defaultWorkingDir
-        || (cfg.defaultOncall?.enabled ? cfg.defaultOncall.workingDir : undefined)
-        || undefined;
-}
-// Cross-bot oncall chat discovery — cached by config-file mtime.
-//
-// /oncall bind is per-bot, and so is consumption: both talk-authorization
-// gates AND working-dir pinning use findOncallChat(larkAppId, chatId). This
-// cross-bot lookup is now used ONLY for `botmux send` footer addressing
-// (cli.ts) — replying to the last caller in the shared oncall workspace —
-// NOT for dir pinning or permission gating.
-//
-// Multi-daemon deployments run one bot per process, so the in-memory `bots`
-// map only sees this daemon's own bot — sibling bots' bindings live only on
-// disk in the shared bots.json. Re-read that file lazily, keyed by mtime,
-// so the hot path is a single stat() once the cache is warm.
-let oncallChatCache = null;
-export function findOncallChatForAnyBot(chatId) {
-    // Fast path: this daemon's own bot(s). Covers single-daemon setups and any
-    // case where the receiving bot itself is bound.
-    for (const bot of bots.values()) {
-        const entry = bot.config.oncallChats?.find(c => c.chatId === chatId);
-        if (entry)
-            return entry;
-    }
-    // Slow path: scan the shared bots.json for sibling bots' bindings.
-    const path = loadedConfigPath;
-    if (!path)
-        return undefined;
-    try {
-        const stat = statSync(path);
-        if (!oncallChatCache || oncallChatCache.mtimeMs !== stat.mtimeMs) {
-            const raw = JSON.parse(readFileSync(path, 'utf-8'));
-            const chats = new Map();
-            if (Array.isArray(raw)) {
-                for (const entry of raw) {
-                    if (!Array.isArray(entry?.oncallChats))
-                        continue;
-                    for (const c of entry.oncallChats) {
-                        if (c && typeof c.chatId === 'string' && typeof c.workingDir === 'string') {
-                            chats.set(c.chatId, { chatId: c.chatId, workingDir: c.workingDir });
-                        }
-                    }
-                }
-            }
-            oncallChatCache = { mtimeMs: stat.mtimeMs, chats };
-        }
-        return oncallChatCache.chats.get(chatId);
-    }
-    catch {
-        return undefined;
-    }
-}
-export function isChatOncallBoundForAnyBot(chatId) {
-    return !!findOncallChatForAnyBot(chatId);
-}
-// Per-bot brand label, mtime-cached for the disk fallback. Keyed by larkAppId →
-// the configured value (undefined when the bot has no brandLabel key).
-let brandLabelCache = null;
-let usageDisplayCache = null;
-/** Normalize a raw bots.json entry's usage-display intent to the enum, applying
- *  backward compat: an explicit `usageDisplay` wins; otherwise a legacy
- *  `showUsageInCardFooter: false` maps to `'off'`; everything else is the
- *  default (`'streaming'`). Single source of truth for both the in-memory parse
- *  and the disk-fallback resolver so they cannot drift. */
-export function normalizeUsageDisplay(entry) {
-    if (entry.usageDisplay === 'streaming' || entry.usageDisplay === 'footer' || entry.usageDisplay === 'off') {
-        return entry.usageDisplay;
-    }
-    if (entry.showUsageInCardFooter === false)
-        return 'off';
-    return DEFAULT_USAGE_DISPLAY;
-}
-/** Resolve the bots.json path the same way loadBotConfigs does, without
- *  requiring the registry to have been loaded (works in one-shot CLI processes
- *  like `botmux send`). Returns null when no config file exists. */
-function botsConfigDiskPath() {
-    const env = process.env.BOTS_CONFIG;
-    if (env) {
-        const r = resolve(env);
-        return existsSync(r) ? r : null;
-    }
-    const d = resolve(homedir(), '.botmux', 'bots.json');
-    return existsSync(d) ? d : null;
-}
-/**
- * The configured brand label for a bot, or `undefined` when unset (`''` = off
- * is preserved). Prefers the in-memory registry (daemon hot path); falls back
- * to a mtime-cached read of bots.json so the CLI process — which never loads
- * the registry — still resolves the sending bot's brand. Callers feed the
- * result into {@link brandFooterSegment} for the unset→default / ''→off rule.
- */
-export function resolveBrandLabel(larkAppId) {
-    // A sandboxed one-shot `botmux send` can't read bots.json (deny-by-default),
-    // so it has no in-memory registry and would fall through to a bots.json read
-    // that EPERMs → role footer lost. The worker injects THIS bot's resolved
-    // brandLabel via env; honour it first (gated on the own appId). Present-but-
-    // empty ('') = suppress; absent → fall through. brandLabel is a cosmetic
-    // markdown template, not a secret, so env-passing is safe.
-    if (process.env.BOTMUX_LARK_APP_ID === larkAppId && 'BOTMUX_BRAND_LABEL' in process.env) {
-        return process.env.BOTMUX_BRAND_LABEL;
-    }
-    const inMem = bots.get(larkAppId);
-    if (inMem)
-        return inMem.config.brandLabel;
-    const path = loadedConfigPath ?? botsConfigDiskPath();
-    if (!path)
-        return undefined;
-    try {
-        const stat = statSync(path);
-        if (!brandLabelCache || brandLabelCache.mtimeMs !== stat.mtimeMs) {
-            const raw = JSON.parse(readFileSync(path, 'utf-8'));
-            const map = new Map();
-            if (Array.isArray(raw)) {
-                for (const e of raw) {
-                    if (e && typeof e.larkAppId === 'string') {
-                        map.set(e.larkAppId, typeof e.brandLabel === 'string' ? e.brandLabel : undefined);
-                    }
-                }
-            }
-            brandLabelCache = { mtimeMs: stat.mtimeMs, map };
-        }
-        return brandLabelCache.map.get(larkAppId);
-    }
-    catch {
-        return undefined;
-    }
-}
-/**
- * Resolve the per-bot usage-display mode (default `'streaming'`). A freshly
- * loaded registry wins over the spawn-time env so long-lived panes observe
- * `/botconfig` hot updates; sandboxed/env-only processes carry the value in
- * their synthetic registered bot and otherwise fall back to the injected env.
- */
-export function resolveUsageDisplay(larkAppId) {
-    const inMem = bots.get(larkAppId);
-    if (inMem)
-        return normalizeUsageDisplay(inMem.config);
-    if (process.env.BOTMUX_LARK_APP_ID === larkAppId
-        && 'BOTMUX_USAGE_DISPLAY' in process.env) {
-        const env = process.env.BOTMUX_USAGE_DISPLAY;
-        if (env === 'streaming' || env === 'footer' || env === 'off')
-            return env;
-        return DEFAULT_USAGE_DISPLAY;
-    }
-    const path = loadedConfigPath ?? botsConfigDiskPath();
-    if (!path)
-        return DEFAULT_USAGE_DISPLAY;
-    try {
-        const stat = statSync(path);
-        if (!usageDisplayCache || usageDisplayCache.mtimeMs !== stat.mtimeMs) {
-            const raw = JSON.parse(readFileSync(path, 'utf-8'));
-            const map = new Map();
-            if (Array.isArray(raw)) {
-                for (const entry of raw) {
-                    if (entry && typeof entry.larkAppId === 'string') {
-                        map.set(entry.larkAppId, normalizeUsageDisplay(entry));
-                    }
-                }
-            }
-            usageDisplayCache = { mtimeMs: stat.mtimeMs, map };
-        }
-        return usageDisplayCache.map.get(larkAppId) ?? DEFAULT_USAGE_DISPLAY;
-    }
-    catch {
-        return DEFAULT_USAGE_DISPLAY;
-    }
-}
-/**
- * 只读 accessor：该 bot 配置的 tuiSlashAllow allowlist（TUI 通用 slash 注入用）。
- * 仅读内存态注册表，daemon 进程内使用；无需 bots.json 磁盘回退（不同于
- * resolveBrandLabel——`botmux send` 等一次性 CLI 进程不消费此 accessor）。
- */
-export function getBotTuiSlashAllow(larkAppId) {
-    return bots.get(larkAppId)?.config.tuiSlashAllow;
-}
-/**
- * Load bot configurations from one of (in priority order):
- * 1. BOTS_CONFIG env var — path to a JSON file
- * 2. ~/.botmux/bots.json — default config path
- * 3. Core-only (BOTMUX_CORE_ONLY=1) with NEITHER of the above present:
- *    synthesize a single apiOnly bot from env — no bots.json / no Feishu creds
- *    (riff's in-sandbox headless service).
- */
-export function loadBotConfigs() {
-    const synthetic = maybeSynthesizeCoreOnlyConfig();
-    if (synthetic)
-        return synthetic;
-    return parseBotConfigFile(resolveBotConfigPath());
-}
-/**
- * Core-only headless config: when BOTMUX_CORE_ONLY=1, synthesize ONE apiOnly bot
- * from env so the daemon boots with zero Feishu credentials and no on-disk config.
- *
- * Core-only is AUTHORITATIVE about identity and IGNORES all ambient config inputs
- * — both ~/.botmux/bots.json AND the BOTS_CONFIG env (codex P1-2). Otherwise a
- * core-only service started on a host that happens to have a real fleet config —
- * or with an inherited/leaked BOTS_CONFIG — would silently boot a REAL,
- * transport-enabled Feishu bot (WSClient, real credentials, `--bot` ignored)
- * instead of the headless apiOnly one, the exact opposite of "no Feishu". There
- * is deliberately NO file-based override in this mode: the identity is exactly the
- * one synthesized here (frozen: apiOnly, `local_<slug>`, no secret). Returns null
- * only when not in core-only mode.
- *
- * The synthesized `loadedConfigPath` is pinned to the DEFAULT ~/.botmux/bots.json
- * path (even though the file is absent/ignored) so the no-transport fs-policy sees
- * the config as living INSIDE the default botmux authority root — never an external
- * path or a carve-out, which would trip buildFsPolicy's fail-closed checks.
- */
-function maybeSynthesizeCoreOnlyConfig() {
-    if (process.env.BOTMUX_CORE_ONLY !== '1')
-        return null;
-    const larkAppId = process.env.BOTMUX_API_ONLY_BOT || 'local_riff';
-    if (!/^local_[A-Za-z0-9._-]+$/.test(larkAppId)) {
-        throw new Error(`Core-only BOTMUX_API_ONLY_BOT must match local_<slug> (letters/digits/._-), got: ${larkAppId}`);
-    }
-    const cliId = process.env.BOTMUX_CORE_CLI || 'codex-app';
-    const entry = { larkAppId, apiOnly: true, cliId };
-    if (process.env.BOTMUX_CORE_WORKING_DIR)
-        entry.workingDir = process.env.BOTMUX_CORE_WORKING_DIR;
-    if (process.env.BOTMUX_CORE_MODEL)
-        entry.model = process.env.BOTMUX_CORE_MODEL;
-    // Route through the normal parser so the synthesized entry gets identical
-    // validation + normalization as a file-loaded one (apiOnly secret exemption,
-    // cliId check, defaults). Pin loadedConfigPath to the default in-root path.
-    const configs = parseBotConfigsFromText(JSON.stringify([entry]));
-    loadedConfigPath = resolve(homedir(), '.botmux', 'bots.json');
-    return configs;
-}
-function resolveBotConfigPath() {
-    // 1. BOTS_CONFIG env var
-    const botsConfigPath = process.env.BOTS_CONFIG;
-    if (botsConfigPath) {
-        const resolved = resolve(botsConfigPath);
-        if (!existsSync(resolved)) {
-            throw new Error(`BOTS_CONFIG file not found: ${resolved}`);
-        }
-        loadedConfigPath = resolved;
-        return resolved;
-    }
-    // 2. ~/.botmux/bots.json
-    const defaultPath = resolve(homedir(), '.botmux', 'bots.json');
-    if (existsSync(defaultPath)) {
-        loadedConfigPath = defaultPath;
-        return defaultPath;
-    }
-    throw new Error('No bot configuration found. Set BOTS_CONFIG or create ~/.botmux/bots.json.\nSee README for config format.');
-}
-/**
- * Resolve one daemon's exact raw bots.json slot without compacting earlier
- * activation-pending entries. PM2 assigns BOTMUX_BOT_INDEX from the durable
- * array index; filtering the array first would make a later ready bot load a
- * different App whenever concurrent onboarding left an earlier slot pending.
- */
-export function loadBotConfigAtIndex(index) {
-    if (!Number.isInteger(index) || index < 0) {
-        throw new Error(`Invalid bot config index: ${index}`);
-    }
-    const filePath = resolveBotConfigPath();
-    let parsed;
-    try {
-        parsed = JSON.parse(readFileSync(filePath, 'utf-8'));
-    }
-    catch (err) {
-        throw new Error(`Invalid JSON in bot config file (file: ${filePath}): ${err?.message ?? String(err)}`);
-    }
-    if (!Array.isArray(parsed)) {
-        throw new Error(`Bot config file must contain a JSON array (file: ${filePath})`);
-    }
-    const entry = parsed[index];
-    if (!entry || typeof entry !== 'object') {
-        throw new Error(`Bot config [${index}] does not exist (file: ${filePath})`);
-    }
-    if (entry.activationPending === true) {
-        throw new Error(`Bot config [${index}] activation pending (file: ${filePath})`);
-    }
-    if (entry.activationDeactivating !== undefined) {
-        throw new Error(`Bot config [${index}] activation pending (file: ${filePath})`);
-    }
-    const activationStarting = entry.activationStarting;
-    const activationCommitted = entry.activationCommitted;
-    if (activationStarting !== undefined && activationCommitted !== undefined) {
-        throw new Error(`Bot config [${index}] has conflicting managed activation markers (file: ${filePath})`);
-    }
-    const managedActivation = activationStarting ?? activationCommitted;
-    if (managedActivation !== undefined) {
-        if (!managedActivation
-            || typeof managedActivation !== 'object'
-            || Array.isArray(managedActivation)
-            || typeof managedActivation.appId !== 'string'
-            || managedActivation.appId !== entry.larkAppId
-            || typeof managedActivation.jobId !== 'string'
-            || !managedActivation.jobId) {
-            throw new Error(`Bot config [${index}] has an invalid managed activation marker (file: ${filePath})`);
-        }
-        if (process.env.BOTMUX_MANAGED_ACTIVATION_APP_ID !== entry.larkAppId) {
-            throw new Error(`Bot config [${index}] activation pending (file: ${filePath})`);
-        }
-        if (process.env.BOTMUX_MANAGED_ACTIVATION_JOB_ID
-            !== managedActivation.jobId) {
-            throw new Error(`Bot config [${index}] activation pending (file: ${filePath})`);
-        }
-    }
-    const entryForDaemon = { ...entry };
-    delete entryForDaemon.activationStarting;
-    delete entryForDaemon.activationCommitted;
-    const exact = parseBotConfigsFromText(JSON.stringify([entryForDaemon]));
-    if (exact.length !== 1) {
-        throw new Error(`Bot config [${index}] could not be resolved exactly (file: ${filePath})`);
-    }
-    return exact[0];
-}
-/**
- * Direct managed activation daemons are allowed to boot only while their
- * exact raw config row carries a matching startup marker. They wait before
- * registering until the dashboard records the exact PM2 identity ACK.
- */
-export function isManagedActivationStartingAtIndex(index, appId, jobId) {
-    if (!Number.isInteger(index) || index < 0 || !appId || !jobId) {
-        throw new Error('Invalid managed activation lookup');
-    }
-    const filePath = resolveBotConfigPath();
-    let parsed;
-    try {
-        parsed = JSON.parse(readFileSync(filePath, 'utf-8'));
-    }
-    catch (err) {
-        throw new Error(`Invalid JSON in bot config file (file: ${filePath}): ${err?.message ?? String(err)}`);
-    }
-    if (!Array.isArray(parsed)) {
-        throw new Error(`Bot config file must contain a JSON array (file: ${filePath})`);
-    }
-    const entry = parsed[index];
-    if (!entry || typeof entry !== 'object') {
-        throw new Error(`Bot config [${index}] does not exist (file: ${filePath})`);
-    }
-    const record = entry;
-    const marker = record.activationStarting;
-    if (marker === undefined)
-        return false;
-    if (record.activationPending === true
-        || !marker
-        || typeof marker !== 'object'
-        || Array.isArray(marker)
-        || record.larkAppId !== appId
-        || marker.appId !== appId
-        || typeof marker.jobId !== 'string'
-        || marker.jobId !== jobId) {
-        throw new Error(`Bot config [${index}] managed activation marker drifted (file: ${filePath})`);
-    }
-    return true;
-}
-function parseBotConfigFile(filePath) {
-    let raw;
-    try {
-        raw = readFileSync(filePath, 'utf-8');
-    }
-    catch (err) {
-        // A sandboxed CLI is denied bots.json ON PURPOSE (it holds every sibling's
-        // secret). Seatbelt allows the METADATA read but denies the CONTENT read, so
-        // resolveBotConfigPath()'s existsSync() passes and we land here with
-        // EPERM/EACCES — the "no config file" branch that would have degraded
-        // gracefully is never reached. Callers then die with a raw
-        // `EPERM … open '~/.botmux/bots.json'`, which is why EVERY botmux subcommand
-        // (not just send) breaks inside the sandbox.
-        //
-        // Under isolation the bot's identity comes from registerSelfFromCredFile()
-        // instead, so "disk gave us nothing" is the correct, complete answer here.
-        //
-        // Outside isolation an unreadable bots.json is a REAL fault and must still
-        // throw: swallowing it would silently boot a zero-bot process (no bots
-        // respond, no error anywhere) — strictly worse than crashing loudly.
-        if ((err?.code === 'EPERM' || err?.code === 'EACCES') && underReadIsolation())
-            return [];
-        throw err;
-    }
-    try {
-        return parseBotConfigsFromText(raw);
-    }
-    catch (err) {
-        // Preserve the file path in JSON-parse / shape errors for easier debugging.
-        throw new Error(`${err?.message ?? err} (file: ${filePath})`);
-    }
-}
-/** Pure parser: bots.json text → BotConfig[]. Exported for testing & reuse. */
-export function parseBotConfigsFromText(jsonText) {
-    let parsed;
-    try {
-        parsed = JSON.parse(jsonText);
-    }
-    catch {
-        throw new Error(`Invalid JSON in bot config file`);
-    }
-    if (!Array.isArray(parsed)) {
-        throw new Error(`Bot config file must contain a JSON array`);
-    }
-    const configs = [];
-    for (let i = 0; i < parsed.length; i++) {
-        const entry = parsed[i];
-        if (!entry.larkAppId || typeof entry.larkAppId !== 'string') {
-            throw new Error(`Bot config [${i}]: larkAppId is required and must be a string`);
-        }
-        // apiOnly (core-only) bots drive purely over the HTTP control API and never
-        // connect to Feishu, so a real app secret is not required. larkAppId is still
-        // mandatory (daemon identity + dashboard routing + cachedLarkAppId gate); use
-        // a synthetic local id like `local_<slug>`. Normal Feishu bots keep the hard
-        // requirement — a missing secret there is a misconfig, not a headless bot.
-        // The rule for apiOnly is "may be omitted; if present it must still be a
-        // string" — a number/object/array/false must NOT slip into a string field.
-        if (entry.apiOnly === true) {
-            if (entry.larkAppSecret !== undefined && typeof entry.larkAppSecret !== 'string') {
-                throw new Error(`Bot config [${i}]: larkAppSecret must be a string when provided (apiOnly bots may omit it)`);
-            }
-        }
-        else if (!entry.larkAppSecret || typeof entry.larkAppSecret !== 'string') {
-            throw new Error(`Bot config [${i}]: larkAppSecret is required and must be a string`);
-        }
-        // MOSA-managed onboarding persists the exact App/secret/owner binding so
-        // the same App can resume permission recovery, but a daemon must not load
-        // it before the recovery job has read back every critical scope.
-        if (entry.activationPending === true
-            || entry.activationDeactivating !== undefined
-            || entry.activationStarting !== undefined
-            || entry.activationCommitted !== undefined) {
-            continue;
-        }
-        // cliRuntime is the canonical successor to cliPathOverride. New writers
-        // also persist an exactly-equal path shadow so a rollback to an older
-        // BotMux still launches the same distribution. Any unequal pair would make
-        // old and new versions disagree, so it fails closed below.
-        const entryCliId = entry.cliId ?? 'claude-code';
-        if (entry.cliRuntime !== undefined && entryCliId !== 'codex') {
-            throw new Error(`Bot config [${i}]: cliRuntime is currently supported only for cliId "codex"`);
-        }
-        if (entry.cliRuntime !== undefined && typeof entry.wrapperCli === 'string' && entry.wrapperCli.trim()) {
-            throw new Error(`Bot config [${i}]: cliRuntime cannot be combined with wrapperCli`);
-        }
-        const cliRuntime = entry.cliRuntime === undefined
-            ? undefined
-            : normalizeCliRuntimeConfig(entry.cliRuntime, `Bot config [${i}].cliRuntime`);
-        if (cliRuntime && entry.cliPathOverride === undefined) {
-            throw new Error(`Bot config [${i}]: cliPathOverride is required as an exact downgrade shadow of cliRuntime.executable`);
-        }
-        if (cliRuntime && entry.cliPathOverride !== cliRuntime.executable) {
-            throw new Error(`Bot config [${i}]: cliPathOverride must exactly match cliRuntime.executable`);
-        }
-        // Parse workingDirs from comma-separated workingDir if workingDirs not explicitly set
-        let workingDirs = entry.workingDirs;
-        if (!workingDirs && entry.workingDir) {
-            workingDirs = String(entry.workingDir).split(',').map((s) => s.trim()).filter(Boolean);
-        }
-        let oncallChats;
-        if (Array.isArray(entry.oncallChats)) {
-            oncallChats = entry.oncallChats
-                .filter((c) => c && typeof c.chatId === 'string' && typeof c.workingDir === 'string')
-                .map((c) => ({
-                chatId: c.chatId,
-                workingDir: c.workingDir,
-            }));
-        }
-        let allowedChatGroups;
-        if (Array.isArray(entry.allowedChatGroups)) {
-            allowedChatGroups = entry.allowedChatGroups
-                .filter((x) => typeof x === 'string' && x.trim().length > 0)
-                .map((x) => x.trim());
-        }
-        // defaultOncall: per-bot default for auto-binding new group chats.
-        // Tolerate missing fields: an entry with `enabled:true` but no workingDir
-        // is treated as disabled (dashboard PUT enforces workingDir on save, but
-        // hand-edited bots.json could be inconsistent — never crash on parse).
-        let defaultOncall;
-        const rawDefault = entry.defaultOncall;
-        if (rawDefault && typeof rawDefault === 'object') {
-            const enabled = rawDefault.enabled === true;
-            const workingDir = typeof rawDefault.workingDir === 'string' ? rawDefault.workingDir : '';
-            const since = typeof rawDefault.since === 'number' && Number.isFinite(rawDefault.since)
-                ? rawDefault.since
-                : 0;
-            defaultOncall = { enabled: enabled && !!workingDir, workingDir, since };
-        }
-        let defaultOncallAutoboundChats;
-        if (Array.isArray(entry.defaultOncallAutoboundChats)) {
-            defaultOncallAutoboundChats = entry.defaultOncallAutoboundChats
-                .filter((x) => typeof x === 'string');
-        }
-        // Shared normalizer (with substitute-mode-store): keeps a disabled config's
-        // target list so the dashboard toggle can flip without re-entering everyone;
-        // only an enabled-but-unmatchable config collapses to undefined.
-        const substituteMode = normalizeSubstituteMode(entry.substituteMode);
-        // chatReplyModes：只保留每群显式设置，非法值丢弃。四态 chat｜chat-topic｜
-        // new-topic｜shared 都保留解析；写入路径会删除「与 per-bot 默认相同」的条目
-        // 以保持 bots.json 干净（见 chat-reply-mode-store.setChatReplyMode）。
-        let chatReplyModes;
-        if (entry.chatReplyModes && typeof entry.chatReplyModes === 'object' && !Array.isArray(entry.chatReplyModes)) {
-            const out = {};
-            for (const [cid, mode] of Object.entries(entry.chatReplyModes)) {
-                if (typeof cid !== 'string' || !cid.trim())
-                    continue;
-                const normalizedMode = normalizeChatReplyModeConfig(mode);
-                if (normalizedMode)
-                    out[cid] = normalizedMode;
-            }
-            if (Object.keys(out).length > 0)
-                chatReplyModes = out;
-        }
-        // chatGrants：只保留 { [chatId:string]: string[] }，逐项校验 typeof === 'string'，
-        // 丢弃空列表。未配置或全部非法 → undefined。
-        let chatGrants;
-        if (entry.chatGrants && typeof entry.chatGrants === 'object' && !Array.isArray(entry.chatGrants)) {
-            const out = {};
-            for (const [cid, arr] of Object.entries(entry.chatGrants)) {
-                if (!Array.isArray(arr))
-                    continue;
-                const ids = arr.filter((x) => typeof x === 'string');
-                if (ids.length > 0)
-                    out[cid] = ids;
-            }
-            if (Object.keys(out).length > 0)
-                chatGrants = out;
-        }
-        // globalGrants：只保留非空 string[]（open_id 列表），逐项校验 typeof === 'string'。
-        // 未配置或全部非法 → undefined。
-        let globalGrants;
-        if (Array.isArray(entry.globalGrants)) {
-            const ids = entry.globalGrants.filter((x) => typeof x === 'string' && x.trim().length > 0);
-            if (ids.length > 0)
-                globalGrants = ids;
-        }
-        // messageQuota.defaultLimit：仅保留正整数；非法/缺省 → undefined（卡片用产品默认 3 条）。
-        let messageQuota;
-        const rawMq = entry.messageQuota;
-        if (rawMq && typeof rawMq === 'object' && !Array.isArray(rawMq)) {
-            const d = rawMq.defaultLimit;
-            if (typeof d === 'number' && Number.isInteger(d) && d > 0)
-                messageQuota = { defaultLimit: d };
-        }
-        // quotaState：scope-aware 计数。逐项校验 key 形如 `chat:*:*` / `global:*`，
-        // value 为 { limit, used } 正整数（used 允许 0）。非法项丢弃；全空 → undefined。
-        let quotaState;
-        if (entry.quotaState && typeof entry.quotaState === 'object' && !Array.isArray(entry.quotaState)) {
-            const out = {};
-            for (const [k, v] of Object.entries(entry.quotaState)) {
-                if (!/^(chat:.+:.+|global:.+)$/.test(k))
-                    continue;
-                if (!v || typeof v !== 'object')
-                    continue;
-                const limit = v.limit, used = v.used;
-                if (typeof limit !== 'number' || !Number.isInteger(limit) || limit <= 0)
-                    continue;
-                if (typeof used !== 'number' || !Number.isInteger(used) || used < 0)
-                    continue;
-                out[k] = { limit, used };
-            }
-            if (Object.keys(out).length > 0)
-                quotaState = out;
-        }
-        let grantExpiryState;
-        if (entry.grantExpiryState && typeof entry.grantExpiryState === 'object' && !Array.isArray(entry.grantExpiryState)) {
-            const out = {};
-            for (const [k, v] of Object.entries(entry.grantExpiryState)) {
-                if (!/^(chat:.+:.+|global:.+)$/.test(k))
-                    continue;
-                if (!v || typeof v !== 'object')
-                    continue;
-                const expiresAt = v.expiresAt;
-                if (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt) || expiresAt <= 0)
-                    continue;
-                out[k] = { expiresAt };
-            }
-            if (Object.keys(out).length > 0)
-                grantExpiryState = out;
-        }
-        // customPassthroughCommands：用户额外放行透传的 slash 命令。归一化：转小写、
-        // 自动补前导 `/`、按 /^\/[a-z0-9][a-z0-9:_-]*$/ 过滤、去重。非法/缺省 → undefined。
-        // 注意：与 daemon 命令的冲突过滤放在 resolvePassthroughCommands（运行时合并）做，
-        // 这里只保证条目本身格式合法，避免在解析期耦合 command-handler 的命令清单。
-        let customPassthroughCommands;
-        if (Array.isArray(entry.customPassthroughCommands)) {
-            const normalized = entry.customPassthroughCommands
-                .filter((x) => typeof x === 'string')
-                .map((x) => x.trim().toLowerCase())
-                .map((x) => (x.startsWith('/') ? x : `/${x}`))
-                .filter((x) => /^\/[a-z0-9][a-z0-9:_-]*$/.test(x));
-            const uniq = [...new Set(normalized)];
-            if (uniq.length > 0)
-                customPassthroughCommands = uniq;
-        }
-        // canTalkDaemonCommands：daemon 命令的权限例外名单（canOperate → canTalk）。
-        // 归一化同 customPassthroughCommands（小写、补 `/`、去重），但语义相反——
-        // **只接受 DAEMON_COMMANDS 内的命令**（这里列的是 daemon 自己处理的命令，
-        // 不是透传）；不在集合内的条目（passthrough、拼错的）丢弃并 warn——丢弃是
-        // fail-closed 安全的，但静默会让配错的 owner 以为已生效。
-        let canTalkDaemonCommands;
-        if (Array.isArray(entry.canTalkDaemonCommands)) {
-            const strs = entry.canTalkDaemonCommands
-                .filter((x) => typeof x === 'string')
-                .map((x) => x.trim().toLowerCase())
-                .map((x) => (x.startsWith('/') ? x : `/${x}`));
-            const dropped = strs.filter((x) => !DAEMON_COMMANDS.has(x));
-            if (dropped.length > 0) {
-                logger.warn(`[bot-registry:${entry.larkAppId}] canTalkDaemonCommands 丢弃非 daemon 命令条目: ${[...new Set(dropped)].join(' ')}（仅接受 daemon 命令，透传命令写 customPassthroughCommands）`);
-            }
-            const uniq = [...new Set(strs.filter((x) => DAEMON_COMMANDS.has(x)))];
-            if (uniq.length > 0)
-                canTalkDaemonCommands = uniq;
-        }
-        // tuiSlashAllow：botmux 通用 slash 注入通道（inject_command，见
-        // core/slash-inject.ts）的 CLI 原生命令 allowlist。归一化规则与
-        // customPassthroughCommands 同款：转小写、自动补前导 `/`、按
-        // /^\/[a-z0-9][a-z0-9:_-]*$/ 过滤非法项、去重。非法/缺省/空 → undefined
-        // （= 通用注入关闭，默认拒绝）。/cd 即使写在这里也会被
-        // validateSlashInjection 的固定黑名单挡住，这里不重复过滤。
-        let tuiSlashAllow;
-        if (Array.isArray(entry.tuiSlashAllow)) {
-            const normalized = entry.tuiSlashAllow
-                .filter((x) => typeof x === 'string')
-                .map((x) => x.trim().toLowerCase())
-                .map((x) => (x.startsWith('/') ? x : `/${x}`))
-                .filter((x) => /^\/[a-z0-9][a-z0-9:_-]*$/.test(x));
-            const uniq = [...new Set(normalized)];
-            if (uniq.length > 0)
-                tuiSlashAllow = uniq;
-        }
-        // startupCommands：开会话后、首条 prompt 前自动敲进 CLI 的 slash 命令行（可带
-        // 参数，如 `/effort ultracode`）。归一化：去多余空白、补前导 `/`、去重；空 →
-        // undefined（与 customPassthroughCommands 同款"不写空数组保持干净"）。
-        const startupCommandsList = normalizeStartupCommandList(entry.startupCommands);
-        const startupCommands = startupCommandsList.length > 0 ? startupCommandsList : undefined;
-        // env：per-bot 环境变量（如代理 / 第三方服务商端点 ANTHROPIC_BASE_URL+AUTH_TOKEN）。
-        // sanitizePerBotEnv 过滤非法/保留键、字符串化基本类型；空 → undefined（保持 bots.json 干净）。
-        const sanitizedEnv = sanitizePerBotEnv(entry.env);
-        const env = Object.keys(sanitizedEnv).length > 0 ? sanitizedEnv : undefined;
-        const skills = readBotSkillPolicy(entry.skills);
-        // Presence is semantic for plugins: [] is an exact "none" override, while
-        // an absent field inherits the machine defaults.
-        const plugins = Array.isArray(entry.plugins)
-            ? normalizePluginIdList(entry.plugins) ?? []
-            : undefined;
-        const summaryRange = normalizeSummaryRange(entry.summaryRange ?? entry.summary);
-        const summaryMemory = entry.summaryMemory === true ? true : undefined;
-        const summaryMemoryPath = normalizeNonEmptyString(entry.summaryMemoryPath);
-        const contentTriggers = normalizeContentTriggers(entry.contentTriggers, i);
-        const messageListeners = normalizeMessageListeners(entry.messageListeners, i);
-        const vcMeetingAgent = normalizeVcMeetingAgentConfig(entry.vcMeetingAgent);
-        // voice：per-bot 语音引擎覆盖。结构化保留（engine ∈ sami|openai，sami/openai
-        // 为对象，speaker/rate 透传）；非对象或 engine 非法 → undefined。深度校验
-        // （凭证是否可用）在 resolveVoiceConfig 做，这里只挡明显垃圾。
-        let voice;
-        const rawVoice = entry.voice;
-        if (rawVoice && typeof rawVoice === 'object' && !Array.isArray(rawVoice)) {
-            const eng = rawVoice.engine;
-            if (eng === undefined || eng === 'sami' || eng === 'openai') {
-                const v = {};
-                if (eng)
-                    v.engine = eng;
-                if (typeof rawVoice.speaker === 'string')
-                    v.speaker = rawVoice.speaker;
-                if (typeof rawVoice.rate === 'number')
-                    v.rate = rawVoice.rate;
-                const s = rawVoice.sami;
-                if (s && typeof s === 'object')
-                    v.sami = { accessKey: s.accessKey, secretKey: s.secretKey, appkey: s.appkey, tokenUrl: s.tokenUrl, wsUrl: s.wsUrl };
-                const o = rawVoice.openai;
-                if (o && typeof o === 'object')
-                    v.openai = { baseUrl: o.baseUrl, apiKey: o.apiKey, model: o.model };
-                if (v.engine || v.sami || v.openai || v.speaker)
-                    voice = v;
-            }
-        }
-        configs.push({
-            larkAppId: entry.larkAppId,
-            // apiOnly bots may omit the secret (never used — no Feishu connection);
-            // fall back to '' so downstream env plumbing stays a string. Feishu image
-            // upload etc. already degrade gracefully on an empty secret.
-            larkAppSecret: entry.larkAppSecret ?? '',
-            apiOnly: entry.apiOnly === true || undefined,
-            // brand：只认精确的 'lark'，其余 → undefined（下游 normalizeBrand 当
-            // feishu）。feishu 故意存成 undefined，保持旧 bots.json 干净、不写死字段。
-            brand: entry.brand === 'lark' ? 'lark' : undefined,
-            name: typeof entry.name === 'string' && entry.name.trim() ? entry.name.trim() : undefined,
-            displayName: typeof entry.displayName === 'string' && entry.displayName.trim() ? entry.displayName.trim() : undefined,
-            cliId: entryCliId,
-            cliRuntime,
-            // Compatibility shadow: writers persist it for downgrade safety and the
-            // loader requires an exact match so every accepted config is rollback-safe.
-            cliPathOverride: entry.cliPathOverride,
-            wrapperCli: typeof entry.wrapperCli === 'string' && entry.wrapperCli.trim()
-                ? entry.wrapperCli.trim()
-                : undefined,
-            launchShell: typeof entry.launchShell === 'string' && entry.launchShell.trim()
-                ? entry.launchShell.trim()
-                : undefined,
-            model: typeof entry.model === 'string' && entry.model.trim()
-                ? entry.model.trim()
-                : undefined,
-            disableCliBypass: entry.disableCliBypass === true,
-            codexAppCleanInput: entry.codexAppCleanInput === true || undefined,
-            codexRpcInput: entry.codexRpcInput === true,
-            sandbox: entry.sandbox === true,
-            sandboxPaths: entry.sandboxPaths && typeof entry.sandboxPaths === 'object' && !Array.isArray(entry.sandboxPaths)
-                ? {
-                    readWrite: normalizeStringList(entry.sandboxPaths.readWrite),
-                    readOnly: normalizeStringList(entry.sandboxPaths.readOnly),
-                    deny: normalizeStringList(entry.sandboxPaths.deny),
-                }
-                : undefined,
-            sandboxHidePaths: normalizeStringList(entry.sandboxHidePaths),
-            sandboxReadonlyPaths: normalizeStringList(entry.sandboxReadonlyPaths),
-            sandboxNetwork: typeof entry.sandboxNetwork === 'boolean' ? entry.sandboxNetwork : undefined,
-            readIsolation: entry.readIsolation === true,
-            readDenyExtraPaths: normalizeStringList(entry.readDenyExtraPaths),
-            backendType: entry.backendType,
-            riff: entry.riff && typeof entry.riff === 'object' ? entry.riff : undefined,
-            // Positive integer only; ≤0 / non-int / absent → undefined (= no cap).
-            maxLiveWorkers: typeof entry.maxLiveWorkers === 'number'
-                && Number.isInteger(entry.maxLiveWorkers) && entry.maxLiveWorkers > 0
-                ? entry.maxLiveWorkers
-                : undefined,
-            // Only explicit true persisted (undefined = off), same as restrictGrantCommands.
-            overloadAlert: entry.overloadAlert === true || undefined,
-            vcMeetingAgent,
-            workingDir: workingDirs?.[0] ?? entry.workingDir,
-            workingDirs,
-            allowedUsers: entry.allowedUsers,
-            // Only a well-formed native open_id is trusted; anything else (stray on_/
-            // email/garbage) is dropped so the fail-safe recipient can never be a
-            // value that itself needs resolving.
-            ownerOpenId: typeof entry.ownerOpenId === 'string' && entry.ownerOpenId.startsWith('ou_')
-                ? entry.ownerOpenId
-                : undefined,
-            allowedChatGroups,
-            oncallChats,
-            defaultOncall,
-            defaultOncallAutoboundChats,
-            defaultWorkingDir: typeof entry.defaultWorkingDir === 'string' && entry.defaultWorkingDir.trim()
-                ? entry.defaultWorkingDir.trim()
-                : undefined,
-            // Only meaningful alongside defaultWorkingDir (仅默认目录 mode); only explicit
-            // true is persisted (undefined = off) so bots.json stays clean.
-            defaultWorkingDirAutoWorktree: entry.defaultWorkingDirAutoWorktree === true || undefined,
-            chatReplyModes,
-            chatGrants,
-            globalGrants,
-            // 只落显式 true（undefined = 关），与 restrictGrantCommands 同款，保持 bots.json 干净。
-            p2pOpen: entry.p2pOpen === true || undefined,
-            messageQuota,
-            quotaState,
-            grantExpiryState,
-            restrictGrantCommands: entry.restrictGrantCommands === true || undefined,
-            // Default is ON, so only explicit false is meaningful/persisted.
-            autoGrantRequestCards: entry.autoGrantRequestCards === false ? false : undefined,
-            customPassthroughCommands,
-            canTalkDaemonCommands,
-            tuiSlashAllow,
-            startupCommands,
-            env,
-            skills,
-            plugins,
-            lang: isLocale(entry.lang) ? entry.lang : undefined,
-            skillInjection: entry.skillInjection === 'global' || entry.skillInjection === 'prompt' || entry.skillInjection === 'off'
-                ? entry.skillInjection : undefined,
-            // Preserve '' distinctly from undefined: '' means "brand off", undefined
-            // means "use default botmux brand". Don't trim-to-undefined here.
-            brandLabel: typeof entry.brandLabel === 'string' ? entry.brandLabel : undefined,
-            // Persist only a non-default usage-display mode; 'streaming' (default) and
-            // an absent key both mean streaming. Legacy showUsageInCardFooter:false is
-            // still honored on read (see normalizeUsageDisplay) but never re-emitted.
-            usageDisplay: normalizeUsageDisplay(entry) === DEFAULT_USAGE_DISPLAY
-                ? undefined
-                : normalizeUsageDisplay(entry),
-            disableStreamingCard: entry.disableStreamingCard === true || undefined,
-            silentTurnReactions: entry.silentTurnReactions === true || undefined,
-            receivedReactionEmoji: typeof entry.receivedReactionEmoji === 'string' && entry.receivedReactionEmoji.trim()
-                ? entry.receivedReactionEmoji.trim() : undefined,
-            doneReactionEmoji: typeof entry.doneReactionEmoji === 'string' && entry.doneReactionEmoji.trim()
-                ? entry.doneReactionEmoji.trim() : undefined,
-            // Default is now 'chat' (flat continuous DM session). Only 'thread' is
-            // meaningful and persists; 'chat' (and anything else) normalizes to
-            // undefined so bots.json stays clean.
-            p2pMode: entry.p2pMode === 'thread' ? 'thread' : undefined,
-            noCardChats: Array.isArray(entry.noCardChats)
-                ? entry.noCardChats.filter((x) => typeof x === 'string' && x.trim().length > 0).map((x) => x.trim())
-                : undefined,
-            writableTerminalLinkInCard: entry.writableTerminalLinkInCard === true || undefined,
-            privateCard: entry.privateCard === true || undefined,
-            // Default ON: only an explicit false is meaningful/persisted (undefined = on).
-            botToBotSameDir: entry.botToBotSameDir === false ? false : undefined,
-            // 平台团队展示默认 ON：只有显式 false 有意义/落盘（undefined = 展示）。
-            showInTeam: entry.showInTeam === false ? false : undefined,
-            autoStartOnGroupJoin: entry.autoStartOnGroupJoin === true || undefined,
-            // Default ON: only an explicit false is meaningful/persisted (undefined = on).
-            autoInviteOwnerOnGroupAdd: entry.autoInviteOwnerOnGroupAdd === false ? false : undefined,
-            // Preserve the configured prompt verbatim; trim-to-undefined when blank
-            // so an empty string doesn't linger in bots.json.
-            autoStartOnGroupJoinPrompt: typeof entry.autoStartOnGroupJoinPrompt === 'string' && entry.autoStartOnGroupJoinPrompt.trim()
-                ? entry.autoStartOnGroupJoinPrompt
-                : undefined,
-            autoStartOnNewTopic: entry.autoStartOnNewTopic === true || undefined,
-            messageListeners,
-            worktreeMultiPicker: entry.worktreeMultiPicker === true || undefined,
-            // Per-bot regular-group default mode. Default is 'chat-topic' (顶层平铺
-            // 连续会话；群内原生话题各自独立会话), so only the NON-default modes
-            // ('chat' | 'new-topic' | 'shared') are meaningful and persist; 'chat-topic'
-            // and anything else normalize to undefined so bots.json stays clean.
-            regularGroupReplyMode: (() => {
-                const mode = normalizeChatReplyModeConfig(entry.regularGroupReplyMode);
-                return mode === 'chat' || mode === 'new-topic' || mode === 'shared' ? mode : undefined;
-            })(),
-            // 4-tier @ policy. Only 'topic' | 'never' | 'ambient' are meaningful;
-            // 'always' (the default) and anything else normalize to undefined so
-            // bots.json stays clean.
-            regularGroupMentionMode: entry.regularGroupMentionMode === 'topic'
-                || entry.regularGroupMentionMode === 'never'
-                || entry.regularGroupMentionMode === 'ambient'
-                ? entry.regularGroupMentionMode
-                : undefined,
-            substituteMode,
-            // 文档订阅默认触发范围。只 'all' 有意义；'mention-only'（默认）归一化为
-            // undefined 让 bots.json 保持干净。
-            docSubscribeDefaultMode: entry.docSubscribeDefaultMode === 'all' ? 'all' : undefined,
-            // 文档 → 本地仓库映射。file_token → 绝对路径。
-            docRepoMap: entry.docRepoMap && typeof entry.docRepoMap === 'object' && !Array.isArray(entry.docRepoMap)
-                ? Object.fromEntries(Object.entries(entry.docRepoMap)
-                    .filter(([, v]) => typeof v === 'string' && v.trim())
-                    .map(([k, v]) => [k, v.trim()]))
-                : undefined,
-            summaryRange,
-            summaryMemory,
-            summaryMemoryPath,
-            contentTriggers,
-            voice,
-        });
-    }
-    return configs;
-}
-function readStringArray(raw) {
-    if (!Array.isArray(raw))
-        return undefined;
-    const values = raw
-        .map((v) => typeof v === 'string' ? v.trim() : '')
-        .filter(Boolean);
-    return values.length > 0 ? values : undefined;
-}
-function readDirectSkillSelectors(raw) {
-    const values = readStringArray(raw);
-    if (!values)
-        return undefined;
-    const selectors = values.filter((value) => /^skill:.+$/.test(value));
-    return selectors.length > 0 ? selectors : undefined;
-}
-export function readBotSkillPolicy(raw) {
-    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
-        return undefined;
-    const r = raw;
-    const out = {};
-    const include = readDirectSkillSelectors(r.include);
-    if (include)
-        out.include = include;
-    return Object.keys(out).length > 0 ? out : undefined;
-}
-//# sourceMappingURL=bot-registry.js.map