botmux 3.10.0 → 3.23.1

package/dist/core/current-turn-provenance.d.ts

@@ -1,39 +0,0 @@
-export interface CurrentTurnProvenance {
-    sessionId: string;
-    turnId: string;
-    callerOpenId: string;
-    larkAppId: string;
-    chatId: string;
-    chatType?: 'group' | 'p2p';
-    /**
-     * The current user-visible thread anchor. Thread sessions use their durable
-     * root; a chat-scope turn folded into a topic uses that turn's reply target;
-     * a chat-top-level turn deliberately has no root.
-     */
-    rootMessageId?: string;
-}
-export declare class CurrentTurnProvenanceError extends Error {
-    constructor(message: string);
-}
-export interface ResolveCurrentTurnProvenanceOptions {
-    dataDir: string;
-    /** Inherited session id is only a stale/detached detector, never identity. */
-    envSessionId?: string;
-    startPid?: number;
-}
-/**
- * Authenticate an agent-facing command as the human who opened the *current*
- * botmux turn.
- *
- * Unlike the read/reply command resolver, this intentionally has no inherited
- * env fallback. A long-lived CLI keeps stale BOTMUX_TURN_ID/OWNER values, and a
- * detached child keeps those values after losing the process-tree link. A
- * mutating workflow command therefore requires the worker's fresh ancestor
- * marker (sessionId + turnId), then joins it to the latest durable session
- * record. Missing, detached and stale invocations fail closed.
- *
- * Returns null only for a genuine standalone/dev invocation: there is neither
- * an ancestor marker nor an inherited BOTMUX_SESSION_ID claim.
- */
-export declare function resolveCurrentTurnProvenance(options: ResolveCurrentTurnProvenanceOptions): CurrentTurnProvenance | null;
-//# sourceMappingURL=current-turn-provenance.d.ts.map

package/dist/core/current-turn-provenance.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"current-turn-provenance.d.ts","sourceRoot":"","sources":["../../src/core/current-turn-provenance.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,0BAA2B,SAAQ,KAAK;gBACvC,OAAO,EAAE,MAAM;CAI5B;AAiDD,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,mCAAmC,GAC3C,qBAAqB,GAAG,IAAI,CAsE9B"}

package/dist/core/current-turn-provenance.js

@@ -1,122 +0,0 @@
-import { readdirSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { findAuthenticatedAncestorSessionContext } from './session-marker.js';
-export class CurrentTurnProvenanceError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = 'CurrentTurnProvenanceError';
-    }
-}
-function nonEmpty(value) {
-    return typeof value === 'string' && value.trim().length > 0;
-}
-function readPersistedSession(dataDir, sessionId) {
-    const matches = [];
-    let files;
-    try {
-        files = readdirSync(dataDir).filter((name) => (name === 'sessions.json'
-            || (name.startsWith('sessions-') && name.endsWith('.json'))));
-    }
-    catch (err) {
-        throw new CurrentTurnProvenanceError(`无法读取 botmux session store：${err instanceof Error ? err.message : String(err)}`);
-    }
-    for (const file of files) {
-        let parsed;
-        try {
-            parsed = JSON.parse(readFileSync(join(dataDir, file), 'utf-8'));
-        }
-        catch {
-            // A corrupt unrelated bot file must not make a valid caller look like a
-            // different principal. The target session still has to resolve exactly
-            // once from a readable record below.
-            continue;
-        }
-        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
-            continue;
-        const keyed = parsed[sessionId];
-        if (!keyed || typeof keyed !== 'object' || Array.isArray(keyed))
-            continue;
-        const session = keyed;
-        if (session.sessionId !== sessionId)
-            continue;
-        matches.push(session);
-    }
-    if (matches.length === 0) {
-        throw new CurrentTurnProvenanceError(`未找到当前进程所属 session ${sessionId}`);
-    }
-    if (matches.length !== 1) {
-        throw new CurrentTurnProvenanceError(`session ${sessionId} 在多个 session store 中重复，拒绝推断当前调用者`);
-    }
-    return matches[0];
-}
-/**
- * Authenticate an agent-facing command as the human who opened the *current*
- * botmux turn.
- *
- * Unlike the read/reply command resolver, this intentionally has no inherited
- * env fallback. A long-lived CLI keeps stale BOTMUX_TURN_ID/OWNER values, and a
- * detached child keeps those values after losing the process-tree link. A
- * mutating workflow command therefore requires the worker's fresh ancestor
- * marker (sessionId + turnId), then joins it to the latest durable session
- * record. Missing, detached and stale invocations fail closed.
- *
- * Returns null only for a genuine standalone/dev invocation: there is neither
- * an ancestor marker nor an inherited BOTMUX_SESSION_ID claim.
- */
-export function resolveCurrentTurnProvenance(options) {
-    const marker = findAuthenticatedAncestorSessionContext(options.dataDir, options.startPid ?? process.ppid);
-    if (!marker) {
-        if (nonEmpty(options.envSessionId)) {
-            throw new CurrentTurnProvenanceError('当前命令已脱离 botmux CLI 进程树，无法验证本轮调用者；请在当前前台 turn 中重试');
-        }
-        return null;
-    }
-    if (!nonEmpty(marker.sessionId) || !nonEmpty(marker.turnId)) {
-        throw new CurrentTurnProvenanceError('当前 botmux CLI 进程标记缺少 sessionId/turnId，拒绝使用陈旧环境变量授权');
-    }
-    if (nonEmpty(options.envSessionId) && options.envSessionId !== marker.sessionId) {
-        throw new CurrentTurnProvenanceError(`进程标记 session ${marker.sessionId} 与环境 session ${options.envSessionId} 不一致`);
-    }
-    const session = readPersistedSession(options.dataDir, marker.sessionId);
-    if (session.status && session.status !== 'active') {
-        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 已非 active，拒绝授权当前命令`);
-    }
-    if (!nonEmpty(session.quoteTargetId) || session.quoteTargetId !== marker.turnId) {
-        throw new CurrentTurnProvenanceError(`进程标记 turn ${marker.turnId} 与 session 当前 quote turn ${session.quoteTargetId ?? '(missing)'} 不一致`);
-    }
-    const replyTarget = session.currentReplyTarget;
-    if (replyTarget && (!nonEmpty(replyTarget.turnId) || replyTarget.turnId !== marker.turnId)) {
-        throw new CurrentTurnProvenanceError(`进程标记 turn ${marker.turnId} 与 session 当前 reply turn ${replyTarget.turnId ?? '(missing)'} 不一致`);
-    }
-    if (!nonEmpty(session.lastCallerOpenId)) {
-        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 缺少 lastCallerOpenId`);
-    }
-    if (!nonEmpty(session.larkAppId) || !nonEmpty(session.chatId)) {
-        throw new CurrentTurnProvenanceError(`session ${marker.sessionId} 缺少 larkAppId/chatId`);
-    }
-    let rootMessageId;
-    if ((session.scope ?? 'thread') === 'thread') {
-        if (!nonEmpty(session.rootMessageId)) {
-            throw new CurrentTurnProvenanceError(`thread session ${marker.sessionId} 缺少 rootMessageId`);
-        }
-        rootMessageId = session.rootMessageId;
-    }
-    else if (replyTarget) {
-        if (!nonEmpty(replyTarget.rootMessageId)) {
-            throw new CurrentTurnProvenanceError(`chat session ${marker.sessionId} 的当前 reply target 缺少 rootMessageId`);
-        }
-        rootMessageId = replyTarget.rootMessageId;
-    }
-    return {
-        sessionId: marker.sessionId,
-        turnId: marker.turnId,
-        callerOpenId: session.lastCallerOpenId,
-        larkAppId: session.larkAppId,
-        chatId: session.chatId,
-        ...(session.chatType === 'group' || session.chatType === 'p2p'
-            ? { chatType: session.chatType }
-            : {}),
-        ...(rootMessageId ? { rootMessageId } : {}),
-    };
-}
-//# sourceMappingURL=current-turn-provenance.js.map

package/dist/core/current-turn-provenance.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"current-turn-provenance.js","sourceRoot":"","sources":["../../src/core/current-turn-provenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,uCAAuC,EAAE,MAAM,qBAAqB,CAAC;AAiC9E,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAe,EAAE,SAAiB;IAC9D,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC5C,IAAI,KAAK,eAAe;eACrB,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAC5D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,0BAA0B,CAClC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAY,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,uEAAuE;YACvE,qCAAqC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,SAAS;QAC7E,MAAM,KAAK,GAAI,MAAkC,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,MAAM,OAAO,GAAG,KAA6B,CAAC;QAC9C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAC9C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAAC,qBAAqB,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,0BAA0B,CAClC,WAAW,SAAS,kCAAkC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;AACrB,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAA4C;IAE5C,MAAM,MAAM,GAAG,uCAAuC,CACpD,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,CACjC,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,0BAA0B,CAClC,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,0BAA0B,CAClC,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,YAAY,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAClC,gBAAgB,MAAM,CAAC,SAAS,gBAAgB,OAAO,CAAC,YAAY,MAAM,CAC3E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,qBAAqB,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAChF,MAAM,IAAI,0BAA0B,CAClC,aAAa,MAAM,CAAC,MAAM,4BAA4B,OAAO,CAAC,aAAa,IAAI,WAAW,MAAM,CACjG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC/C,IAAI,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,0BAA0B,CAClC,aAAa,MAAM,CAAC,MAAM,4BAA4B,WAAW,CAAC,MAAM,IAAI,WAAW,MAAM,CAC9F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,0BAA0B,CAAC,WAAW,MAAM,CAAC,SAAS,sBAAsB,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,aAAiC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,MAAM,CAAC,SAAS,mBAAmB,CAAC,CAAC;QAC9F,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACxC,CAAC;SAAM,IAAI,WAAW,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,0BAA0B,CAAC,gBAAgB,MAAM,CAAC,SAAS,oCAAoC,CAAC,CAAC;QAC7G,CAAC;QACD,aAAa,GAAG,WAAW,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,OAAO,CAAC,gBAAgB;QACtC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;YAC5D,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/core/daemon-config-fence.d.ts

@@ -1,8 +0,0 @@
-import type { BotConfig } from '../bot-registry.js';
-/**
- * An explicit PM2 daemon may never retain a pre-bootstrap config snapshot.
- * Re-read its original raw bots.json slot immediately before registration and
- * reject removal, pending state, or an App ID replacement as a fatal drift.
- */
-export declare function reloadExactDaemonBotConfig(index: number, originalAppId: string, loadAtIndex: (index: number) => BotConfig): BotConfig;
-//# sourceMappingURL=daemon-config-fence.d.ts.map

package/dist/core/daemon-config-fence.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-config-fence.d.ts","sourceRoot":"","sources":["../../src/core/daemon-config-fence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,GACxC,SAAS,CAMX"}

package/dist/core/daemon-config-fence.js

@@ -1,13 +0,0 @@
-/**
- * An explicit PM2 daemon may never retain a pre-bootstrap config snapshot.
- * Re-read its original raw bots.json slot immediately before registration and
- * reject removal, pending state, or an App ID replacement as a fatal drift.
- */
-export function reloadExactDaemonBotConfig(index, originalAppId, loadAtIndex) {
-    const reloaded = loadAtIndex(index);
-    if (reloaded.larkAppId !== originalAppId) {
-        throw new Error(`BOTMUX_BOT_INDEX=${index} target drifted during profile bootstrap`);
-    }
-    return reloaded;
-}
-//# sourceMappingURL=daemon-config-fence.js.map

package/dist/core/daemon-config-fence.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-config-fence.js","sourceRoot":"","sources":["../../src/core/daemon-config-fence.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,aAAqB,EACrB,WAAyC;IAEzC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,0CAA0C,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/daemon-heartbeat.d.ts

@@ -1,15 +0,0 @@
-export interface Heartbeat {
-    larkAppId: string;
-    busyCount: number;
-    at: string;
-}
-/** A heartbeat older than this is treated as "daemon not reporting" → ignored.
- *  Daemons should write well within this window (≈ every 15s). */
-export declare const HEARTBEAT_FRESH_MS = 60000;
-export declare function heartbeatDirIn(dir: string): string;
-export declare function writeHeartbeatTo(dir: string, larkAppId: string, busyCount: number, atIso: string): void;
-/** True iff any daemon reports a fresh heartbeat with at least one busy session. */
-export declare function anyDaemonBusyTo(dir: string, nowMs: number, freshMs?: number): boolean;
-export declare function writeHeartbeat(larkAppId: string, busyCount: number): void;
-export declare function anyDaemonBusy(nowMs?: number): boolean;
-//# sourceMappingURL=daemon-heartbeat.d.ts.map

package/dist/core/daemon-heartbeat.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-heartbeat.d.ts","sourceRoot":"","sources":["../../src/core/daemon-heartbeat.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;kEACkE;AAClE,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAQvG;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,MAA2B,GAAG,OAAO,CAezG;AAqBD,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAEzE;AAED,wBAAgB,aAAa,CAAC,KAAK,GAAE,MAAmB,GAAG,OAAO,CAEjE"}

package/dist/core/daemon-heartbeat.js

@@ -1,83 +0,0 @@
-/**
- * Cross-daemon busy heartbeat. botmux runs one daemon process per bot, but a
- * restart (auto-restart / auto-update) takes them all down at once — so the
- * "is anything mid-CLI-turn right now?" gate must see across processes, not
- * just the primary daemon's own sessions.
- *
- * Each daemon periodically writes `<dataDir>/heartbeats/<larkAppId>.json` with
- * its count of actively-working sessions. The primary daemon reads them all;
- * any fresh heartbeat with busyCount > 0 blocks a maintenance restart.
- * A daemon that is down leaves a stale file, which is ignored (restarting is
- * safe when a daemon isn't even running).
- */
-import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { config } from '../config.js';
-/** A heartbeat older than this is treated as "daemon not reporting" → ignored.
- *  Daemons should write well within this window (≈ every 15s). */
-export const HEARTBEAT_FRESH_MS = 60_000;
-export function heartbeatDirIn(dir) {
-    return join(dir, 'heartbeats');
-}
-export function writeHeartbeatTo(dir, larkAppId, busyCount, atIso) {
-    const hbDir = heartbeatDirIn(dir);
-    if (!existsSync(hbDir))
-        mkdirSync(hbDir, { recursive: true });
-    const path = join(hbDir, `${sanitize(larkAppId)}.json`);
-    const tmp = `${path}.${process.pid}.tmp`;
-    const beat = { larkAppId, busyCount, at: atIso };
-    writeFileSync(tmp, JSON.stringify(beat));
-    renameSync(tmp, path);
-}
-/** True iff any daemon reports a fresh heartbeat with at least one busy session. */
-export function anyDaemonBusyTo(dir, nowMs, freshMs = HEARTBEAT_FRESH_MS) {
-    const hbDir = heartbeatDirIn(dir);
-    if (!existsSync(hbDir))
-        return false;
-    let files;
-    try {
-        files = readdirSync(hbDir);
-    }
-    catch {
-        return false;
-    }
-    for (const f of files) {
-        if (!f.endsWith('.json'))
-            continue;
-        const beat = readBeat(join(hbDir, f));
-        if (!beat)
-            continue;
-        const at = Date.parse(beat.at);
-        if (!Number.isFinite(at))
-            continue;
-        if (nowMs - at > freshMs)
-            continue; // stale → ignore
-        if (beat.busyCount > 0)
-            return true;
-    }
-    return false;
-}
-function readBeat(path) {
-    try {
-        const v = JSON.parse(readFileSync(path, 'utf-8'));
-        if (v && typeof v === 'object' && typeof v.busyCount === 'number' && typeof v.at === 'string') {
-            return v;
-        }
-    }
-    catch {
-        /* corrupt/partial write → ignore */
-    }
-    return null;
-}
-/** App ids are already filesystem-safe (cli_…), but guard against separators. */
-function sanitize(larkAppId) {
-    return larkAppId.replace(/[^A-Za-z0-9._-]/g, '_');
-}
-// ---- default-dir wrappers (production wiring) ----
-export function writeHeartbeat(larkAppId, busyCount) {
-    writeHeartbeatTo(config.session.dataDir, larkAppId, busyCount, new Date().toISOString());
-}
-export function anyDaemonBusy(nowMs = Date.now()) {
-    return anyDaemonBusyTo(config.session.dataDir, nowMs);
-}
-//# sourceMappingURL=daemon-heartbeat.js.map

package/dist/core/daemon-heartbeat.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-heartbeat.js","sourceRoot":"","sources":["../../src/core/daemon-heartbeat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAQtC;kEACkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,SAAiB,EAAE,SAAiB,EAAE,KAAa;IAC/F,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,SAAS,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,MAAM,IAAI,GAAc,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC5D,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,KAAa,EAAE,UAAkB,kBAAkB;IAC9F,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,SAAS;QACnC,IAAI,KAAK,GAAG,EAAE,GAAG,OAAO;YAAE,SAAS,CAAC,iBAAiB;QACrD,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC9F,OAAO,CAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,qDAAqD;AAErD,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,SAAiB;IACjE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,IAAI,CAAC,GAAG,EAAE;IACtD,OAAO,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC"}

package/dist/core/daemon-ipc-auth.d.ts

@@ -1,20 +0,0 @@
-/**
- * Build a route- and port-bound authorization header for the daemon's
- * loopback HTTP server.  Loopback is connectivity, not identity: Linux bwrap
- * sessions normally retain the host network namespace so an untrusted CLI can
- * also dial 127.0.0.1.  The shared dashboard secret is masked from file
- * sandboxes, while trusted dashboard/daemon/host-CLI callers can read it.
- */
-export declare function daemonIpcAuthHeaders(input: {
-    secret: string;
-    port: number;
-    method: string;
-    path: string;
-    headers?: HeadersInit;
-}): Headers;
-/** Read the host-only daemon IPC secret. Sandboxed callers fail closed because
- * ~/.botmux is masked by the bwrap plan. */
-export declare function loadDaemonIpcSecret(secretPath?: string): string;
-/** Trusted-host fetch wrapper for daemon IPC. */
-export declare function fetchDaemonIpc(port: number, path: string, init?: RequestInit, secret?: string): Promise<Response>;
-//# sourceMappingURL=daemon-ipc-auth.d.ts.map

package/dist/core/daemon-ipc-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-ipc-auth.d.ts","sourceRoot":"","sources":["../../src/core/daemon-ipc-auth.ts"],"names":[],"mappings":"AAUA;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB,GAAG,OAAO,CAWV;AAED;4CAC4C;AAC5C,wBAAgB,mBAAmB,CAAC,UAAU,SAAsB,GAAG,MAAM,CAI5E;AAED,iDAAiD;AACjD,wBAAsB,cAAc,CAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,WAAgB,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,QAAQ,CAAC,CAanB"}

package/dist/core/daemon-ipc-auth.js

@@ -1,44 +0,0 @@
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { cliAuthBind, loadDashboardSecret, signCliAuth, } from '../dashboard/auth.js';
-const DEFAULT_SECRET_PATH = join(homedir(), '.botmux', '.dashboard-secret');
-/**
- * Build a route- and port-bound authorization header for the daemon's
- * loopback HTTP server.  Loopback is connectivity, not identity: Linux bwrap
- * sessions normally retain the host network namespace so an untrusted CLI can
- * also dial 127.0.0.1.  The shared dashboard secret is masked from file
- * sandboxes, while trusted dashboard/daemon/host-CLI callers can read it.
- */
-export function daemonIpcAuthHeaders(input) {
-    const pathname = new URL(input.path, `http://127.0.0.1:${input.port}`).pathname;
-    const auth = signCliAuth(input.secret, cliAuthBind(input.method, pathname, input.port));
-    const headers = new Headers(input.headers);
-    headers.set('X-Botmux-Cli-Ts', auth.ts);
-    headers.set('X-Botmux-Cli-Nonce', auth.nonce);
-    headers.set('X-Botmux-Cli-Auth', auth.sig);
-    return headers;
-}
-/** Read the host-only daemon IPC secret. Sandboxed callers fail closed because
- * ~/.botmux is masked by the bwrap plan. */
-export function loadDaemonIpcSecret(secretPath = DEFAULT_SECRET_PATH) {
-    const secret = loadDashboardSecret(secretPath);
-    if (!secret)
-        throw new Error(`daemon IPC secret is missing or empty: ${secretPath}`);
-    return secret;
-}
-/** Trusted-host fetch wrapper for daemon IPC. */
-export async function fetchDaemonIpc(port, path, init = {}, secret) {
-    const resolvedSecret = secret ?? loadDaemonIpcSecret();
-    const method = init.method ?? 'GET';
-    return fetch(`http://127.0.0.1:${port}${path}`, {
-        ...init,
-        headers: daemonIpcAuthHeaders({
-            secret: resolvedSecret,
-            port,
-            method,
-            path,
-            headers: init.headers,
-        }),
-    });
-}
-//# sourceMappingURL=daemon-ipc-auth.js.map

package/dist/core/daemon-ipc-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-ipc-auth.js","sourceRoot":"","sources":["../../src/core/daemon-ipc-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAE9B,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE5E;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,oBAAoB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC;IAChF,MAAM,IAAI,GAAG,WAAW,CACtB,KAAK,CAAC,MAAM,EACZ,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAChD,CAAC;IACF,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;4CAC4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,UAAU,GAAG,mBAAmB;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;IACrF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,IAAY,EACZ,OAAoB,EAAE,EACtB,MAAe;IAEf,MAAM,cAAc,GAAG,MAAM,IAAI,mBAAmB,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;QAC9C,GAAG,IAAI;QACP,OAAO,EAAE,oBAAoB,CAAC;YAC5B,MAAM,EAAE,cAAc;YACtB,IAAI;YACJ,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/core/daemon-ipc-session-auth.d.ts

@@ -1,37 +0,0 @@
-import { type VcMeetingLiveManagedOrigin } from '../services/vc-meeting-send-policy.js';
-export type SessionScopedIpcAuthDecision = {
-    ok: true;
-} | {
-    ok: false;
-    error: 'origin_unproven' | 'managed_action_required';
-};
-export interface SessionScopedIpcIdentity {
-    sessionId: string;
-    larkAppId: string;
-    chatId: string;
-    rootMessageId: string | null;
-}
-/** Replace every caller-selectable route field with the authenticated
- * daemon-session identity while preserving endpoint-specific payload fields. */
-export declare function bindSessionScopedIpcIdentity<T extends object>(payload: T, identity: SessionScopedIpcIdentity): T & SessionScopedIpcIdentity;
-/**
- * Narrow fallback for commands that legitimately originate inside a
- * read-isolated CLI and therefore cannot read the host IPC HMAC secret.
- *
- * The daemon resolves `liveOrigin` from the exact body session id; callers must
- * present that session's current rotating capability. The visible turn/attempt
- * tuple is never accepted as proof. Receiver sessions are denied unless the
- * endpoint is explicitly non-observable (currently SessionStart readiness).
- */
-export declare function authorizeSessionScopedIpc(input: {
-    trustedHost: boolean;
-    sessionExists: boolean;
-    receiverSession: boolean;
-    allowReceiver: boolean;
-    sessionId: string;
-    liveOrigin?: VcMeetingLiveManagedOrigin;
-    claimedCapability?: string;
-    claimedTurnId?: string;
-    claimedDispatchAttempt?: number;
-}): SessionScopedIpcAuthDecision;
-//# sourceMappingURL=daemon-ipc-session-auth.d.ts.map

package/dist/core/daemon-ipc-session-auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-ipc-session-auth.d.ts","sourceRoot":"","sources":["../../src/core/daemon-ipc-session-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,uCAAuC,CAAC;AAE/C,MAAM,MAAM,4BAA4B,GACpC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,iBAAiB,GAAG,yBAAyB,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;gFACgF;AAChF,wBAAgB,4BAA4B,CAAC,CAAC,SAAS,MAAM,EAC3D,OAAO,EAAE,CAAC,EACV,QAAQ,EAAE,wBAAwB,GACjC,CAAC,GAAG,wBAAwB,CAE9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAC/C,WAAW,EAAE,OAAO,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,0BAA0B,CAAC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,4BAA4B,CAgB/B"}

package/dist/core/daemon-ipc-session-auth.js

@@ -1,35 +0,0 @@
-import { verifyVcMeetingManagedOriginClaim, } from '../services/vc-meeting-send-policy.js';
-/** Replace every caller-selectable route field with the authenticated
- * daemon-session identity while preserving endpoint-specific payload fields. */
-export function bindSessionScopedIpcIdentity(payload, identity) {
-    return { ...payload, ...identity };
-}
-/**
- * Narrow fallback for commands that legitimately originate inside a
- * read-isolated CLI and therefore cannot read the host IPC HMAC secret.
- *
- * The daemon resolves `liveOrigin` from the exact body session id; callers must
- * present that session's current rotating capability. The visible turn/attempt
- * tuple is never accepted as proof. Receiver sessions are denied unless the
- * endpoint is explicitly non-observable (currently SessionStart readiness).
- */
-export function authorizeSessionScopedIpc(input) {
-    if (input.trustedHost)
-        return { ok: true };
-    if (!input.sessionExists || !input.sessionId)
-        return { ok: false, error: 'origin_unproven' };
-    if (input.receiverSession && !input.allowReceiver) {
-        return { ok: false, error: 'managed_action_required' };
-    }
-    const verified = verifyVcMeetingManagedOriginClaim({
-        receiverSessionId: input.sessionId,
-        liveOrigin: input.liveOrigin,
-        claimedCapability: input.claimedCapability,
-        claimedTurnId: input.claimedTurnId,
-        claimedDispatchAttempt: input.claimedDispatchAttempt,
-    });
-    return verified.ok
-        ? { ok: true }
-        : { ok: false, error: 'origin_unproven' };
-}
-//# sourceMappingURL=daemon-ipc-session-auth.js.map

package/dist/core/daemon-ipc-session-auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"daemon-ipc-session-auth.js","sourceRoot":"","sources":["../../src/core/daemon-ipc-session-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,GAElC,MAAM,uCAAuC,CAAC;AAa/C;gFACgF;AAChF,MAAM,UAAU,4BAA4B,CAC1C,OAAU,EACV,QAAkC;IAElC,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAUzC;IACC,IAAI,KAAK,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC7F,IAAI,KAAK,CAAC,eAAe,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,iCAAiC,CAAC;QACjD,iBAAiB,EAAE,KAAK,CAAC,SAAS;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;KACrD,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,EAAE;QAChB,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE;QACd,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;AAC9C,CAAC"}

package/dist/core/dashboard-command/groups.d.ts

@@ -1,20 +0,0 @@
-/**
- * `/dashboard groups` sub-handler.
- *
- * The command-level admin gate has already passed. This handler fetches the
- * global groups matrix, builds the Feishu list card, and DMs the invoking
- * admin. Per-row detail cards carry add-bot, leave-bot, oncall, and role
- * actions through card callbacks.
- */
-import type { LarkMessage } from '../../types.js';
-import { type Locale } from '../../i18n/index.js';
-import type { DaemonClient } from '../../dashboard/daemon-internal-client.js';
-import type { CommandHandlerDeps } from '../command-handler.js';
-/** Optional injection seam for tests. */
-export interface DashboardGroupsCommandDeps {
-    createClient?: (larkAppId: string) => DaemonClient;
-    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
-    locale?: Locale;
-}
-export declare function handleDashboardGroups(_message: LarkMessage, _args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId: string | undefined, adminOpenId: string, testDeps?: DashboardGroupsCommandDeps): Promise<void>;
-//# sourceMappingURL=groups.d.ts.map

package/dist/core/dashboard-command/groups.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/groups.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2CAA2C,CAAC;AAK9E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,yCAAyC;AACzC,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,YAAY,CAAC;IACnD,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,WAAW,EACrB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,0BAA+B,GACxC,OAAO,CAAC,IAAI,CAAC,CA0Df"}

package/dist/core/dashboard-command/groups.js

@@ -1,52 +0,0 @@
-/**
- * `/dashboard groups` sub-handler.
- *
- * The command-level admin gate has already passed. This handler fetches the
- * global groups matrix, builds the Feishu list card, and DMs the invoking
- * admin. Per-row detail cards carry add-bot, leave-bot, oncall, and role
- * actions through card callbacks.
- */
-import { localeForBot, t } from '../../i18n/index.js';
-import { buildGroupsCard } from '../../im/lark/groups-card.js';
-import { createDaemonClientFor } from '../../daemon-internal-client-wrapper.js';
-import { sendUserMessage as defaultSendUserMessage } from '../../im/lark/client.js';
-export async function handleDashboardGroups(_message, _args, rootId, _chatId, deps, larkAppId, adminOpenId, testDeps = {}) {
-    if (!larkAppId)
-        return;
-    const locale = testDeps.locale ?? localeForBot(larkAppId);
-    const client = (testDeps.createClient ?? createDaemonClientFor)(larkAppId);
-    let snap;
-    try {
-        snap = await client.request({ method: 'GET', path: '/__daemon/groups-matrix?scope=global' });
-    }
-    catch (e) {
-        await deps.sessionReply(rootId, t('card.dashboard.groups.list_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
-        return;
-    }
-    if (snap.status !== 200) {
-        const reason = String(snap.body?.error ?? `http_${snap.status}`);
-        await deps.sessionReply(rootId, t('card.dashboard.groups.list_failed', { reason }, locale), undefined, larkAppId);
-        return;
-    }
-    const body = snap.body ?? {};
-    const matrix = {
-        chats: body.chats ?? [],
-        bots: body.bots ?? [],
-    };
-    // invokerOpenId = adminOpenId so subsequent clicks still pass the invoker lock.
-    const cardJson = buildGroupsCard(matrix, {
-        invokerOpenId: adminOpenId,
-        locale,
-        page: 1,
-        scope: 'global',
-    });
-    const sendUserMessage = testDeps.sendUserMessage ?? defaultSendUserMessage;
-    try {
-        await sendUserMessage(larkAppId, adminOpenId, cardJson, 'interactive');
-        await deps.sessionReply(rootId, t('card.dashboard.groups.dm_sent', undefined, locale), undefined, larkAppId);
-    }
-    catch (e) {
-        await deps.sessionReply(rootId, t('card.dashboard.groups.dm_failed', { reason: e?.message ?? String(e) }, locale), undefined, larkAppId);
-    }
-}
-//# sourceMappingURL=groups.js.map

package/dist/core/dashboard-command/groups.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"groups.js","sourceRoot":"","sources":["../../../src/core/dashboard-command/groups.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,CAAC,EAAe,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,eAAe,IAAI,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAepF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAqB,EACrB,KAAa,EACb,MAAc,EACd,OAAe,EACf,IAAwB,EACxB,SAA6B,EAC7B,WAAmB,EACnB,WAAuC,EAAE;IAEzC,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,MAAM,GAAW,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IAElE,MAAM,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACnF,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAE,IAAI,CAAC,IAAY,EAAE,KAAK,IAAI,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,EAC1D,SAAS,EAAE,SAAS,CACrB,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAI,IAAI,CAAC,IAGjB,IAAI,EAAE,CAAC;IACT,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;KACtB,CAAC;IACF,gFAAgF;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE;QACvC,aAAa,EAAE,WAAW;QAC1B,MAAM;QACN,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,QAAQ;KAChB,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,QAAQ,CAAC,eAAe,IAAI,sBAAsB,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,+BAA+B,EAAE,SAAS,EAAE,MAAM,CAAC,EACrD,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,YAAY,CACrB,MAAM,EACN,CAAC,CAAC,iCAAiC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,EACjF,SAAS,EAAE,SAAS,CACrB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/dashboard-command/index.d.ts

@@ -1,28 +0,0 @@
-/**
- * `/dashboard <module>` command-group entry.
- *
- * The entire command group is restricted to the bot's resolved `allowedUsers`,
- * matching `/botconfig`. Any subcommand that bypasses this gate is a security
- * regression. Empty args default to `overview`; successful cards are DM'd to
- * the invoking admin and the topic receives only a short confirmation.
- */
-import type { LarkMessage } from '../../types.js';
-import type { CommandHandlerDeps } from '../command-handler.js';
-import { type EnsureDashboardOwnerDeps } from './owner-gate.js';
-import { type DashboardSettingsCommandDeps } from './settings.js';
-import { type DashboardSessionsCommandDeps } from './sessions.js';
-import { type DashboardSchedulesCommandDeps } from './schedules.js';
-import { type DashboardOverviewCommandDeps } from './overview.js';
-import { type DashboardGroupsCommandDeps } from './groups.js';
-/** Optional test seam. Production omits these overrides. */
-export interface DashboardCommandDeps extends EnsureDashboardOwnerDeps {
-    /** Override for `sendUserMessage` (DM to invoking admin). Production omits. */
-    sendUserMessage?: (larkAppId: string, openId: string, content: string, msgType?: string) => Promise<string>;
-    settings?: DashboardSettingsCommandDeps;
-    sessions?: DashboardSessionsCommandDeps;
-    schedules?: DashboardSchedulesCommandDeps;
-    overview?: DashboardOverviewCommandDeps;
-    groups?: DashboardGroupsCommandDeps;
-}
-export declare function handleDashboardCommand(message: LarkMessage, args: string, rootId: string, _chatId: string, deps: CommandHandlerDeps, larkAppId?: string, testDeps?: DashboardCommandDeps): Promise<void>;
-//# sourceMappingURL=index.d.ts.map

package/dist/core/dashboard-command/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/dashboard-command/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAOtF,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAA4B,KAAK,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAC9F,OAAO,EAA2B,KAAK,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAyB,KAAK,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAErF,4DAA4D;AAC5D,MAAM,WAAW,oBAAqB,SAAQ,wBAAwB;IACpE,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5G,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,SAAS,CAAC,EAAE,6BAA6B,CAAC;IAC1C,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACxC,MAAM,CAAC,EAAE,0BAA0B,CAAC;CACrC;AAED,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,WAAW,EACpB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,kBAAkB,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,QAAQ,GAAE,oBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC,CA4Ef"}