botmux 3.10.0 → 3.23.1

package/dist/core/dashboard-events.d.ts

@@ -1,67 +0,0 @@
-/** Event union — every payload is JSON-serialisable. */
-export type DashboardEvent = {
-    type: 'session.spawned';
-    body: {
-        session: any;
-    };
-} | {
-    type: 'session.update';
-    body: {
-        sessionId: string;
-        patch: Record<string, any>;
-    };
-} | {
-    type: 'session.exited';
-    body: {
-        sessionId: string;
-        reason?: string;
-    };
-} | {
-    type: 'schedule.created';
-    body: {
-        schedule: any;
-    };
-} | {
-    type: 'schedule.updated';
-    body: {
-        id: string;
-        patch: Record<string, any>;
-    };
-} | {
-    type: 'schedule.deleted';
-    body: {
-        id: string;
-    };
-} | {
-    type: 'schedule.fired';
-    body: {
-        id: string;
-        runAt: number;
-        status: 'ok' | 'error';
-        error?: string;
-    };
-} | {
-    type: 'schedule.timezone';
-    body: {
-        timezone: string;
-    };
-} | {
-    type: 'bots.changed';
-    body: {
-        signature: string;
-    };
-} | {
-    type: 'heartbeat';
-    body: {
-        ts: number;
-    };
-};
-export type Subscriber = (event: DashboardEvent) => void;
-export declare class DashboardEventBus {
-    private subs;
-    subscribe(fn: Subscriber): () => void;
-    publish(event: DashboardEvent): void;
-}
-/** Process-wide singleton — daemon publishers and IPC SSE handler share. */
-export declare const dashboardEventBus: DashboardEventBus;
-//# sourceMappingURL=dashboard-events.d.ts.map

package/dist/core/dashboard-events.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-events.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAG,IAAI,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAmB,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,GAAG,CAAA;KAAoB,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,GAAC,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAM,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAS,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;AAEzD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAyB;IAErC,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,IAAI;IAKrC,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;CAQrC;AAED,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/core/dashboard-events.js

@@ -1,23 +0,0 @@
-// src/core/dashboard-events.ts
-import { logger } from '../utils/logger.js';
-export class DashboardEventBus {
-    subs = new Set();
-    subscribe(fn) {
-        this.subs.add(fn);
-        return () => this.subs.delete(fn);
-    }
-    publish(event) {
-        for (const fn of this.subs) {
-            try {
-                fn(event);
-            }
-            catch (err) {
-                // Subscriber errors must not break publishing.
-                logger.error(`[dashboard-events] subscriber threw: ${err}`);
-            }
-        }
-    }
-}
-/** Process-wide singleton — daemon publishers and IPC SSE handler share. */
-export const dashboardEventBus = new DashboardEventBus();
-//# sourceMappingURL=dashboard-events.js.map

package/dist/core/dashboard-events.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-events.js","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAiB5C,MAAM,OAAO,iBAAiB;IACpB,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;IAErC,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,KAAqB;QAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC9B,+CAA+C;gBAC/C,MAAM,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/core/dashboard-images.d.ts

@@ -1,29 +0,0 @@
-import type { LarkAttachment } from '../types.js';
-export declare const DASHBOARD_IMAGE_MAX_COUNT = 8;
-export declare const DASHBOARD_IMAGE_MAX_BYTES: number;
-export declare const DASHBOARD_IMAGE_MAX_TOTAL_BYTES: number;
-export interface DashboardImageUpload {
-    name: string;
-    mimeType: string;
-    dataBase64: string;
-}
-export type DashboardImagesResult = {
-    ok: true;
-    images: DashboardImageUpload[];
-} | {
-    ok: false;
-    error: string;
-};
-/** Validate browser-pasted images before any group or session is created.
- * SVG is deliberately excluded: the dashboard only accepts bounded raster
- * formats and verifies the file signature instead of trusting MIME/filename. */
-export declare function parseDashboardImageUploads(value: unknown): DashboardImagesResult;
-/** Persist validated uploads inside this bot's read-isolation attachment
- * bucket. Each target daemon writes its own copy, so no bot needs access to a
- * sibling appId's files. */
-export declare function materializeDashboardImages(larkAppId: string, images: DashboardImageUpload[]): LarkAttachment[];
-/** Remove only a materialization directory created by the helper above.
- * Bucket and basename checks keep cleanup scoped to this bot's exact
- * attachment directory even if a malformed path reaches this function. */
-export declare function cleanupMaterializedDashboardImages(larkAppId: string, attachments: readonly LarkAttachment[]): void;
-//# sourceMappingURL=dashboard-images.d.ts.map

package/dist/core/dashboard-images.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-images.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-images.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,eAAO,MAAM,yBAAyB,QAAmB,CAAC;AAC1D,eAAO,MAAM,+BAA+B,QAAmB,CAAC;AAShE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAC7B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,oBAAoB,EAAE,CAAA;CAAE,GAC5C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AA8BjC;;gFAEgF;AAChF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAyBhF;AAED;;4BAE4B;AAC5B,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,oBAAoB,EAAE,GAC7B,cAAc,EAAE,CAelB;AAED;;0EAE0E;AAC1E,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,SAAS,cAAc,EAAE,GACrC,IAAI,CAQN"}

package/dist/core/dashboard-images.js

@@ -1,113 +0,0 @@
-import { mkdirSync, rmSync, writeFileSync } from 'node:fs';
-import { basename, dirname, extname, join, resolve } from 'node:path';
-import { randomUUID } from 'node:crypto';
-import { getAttachmentsDir } from './attachment-path.js';
-export const DASHBOARD_IMAGE_MAX_COUNT = 8;
-export const DASHBOARD_IMAGE_MAX_BYTES = 10 * 1024 * 1024;
-export const DASHBOARD_IMAGE_MAX_TOTAL_BYTES = 25 * 1024 * 1024;
-const IMAGE_EXTENSIONS = {
-    'image/png': '.png',
-    'image/jpeg': '.jpg',
-    'image/gif': '.gif',
-    'image/webp': '.webp',
-};
-function hasExpectedSignature(bytes, mimeType) {
-    if (mimeType === 'image/png') {
-        return bytes.length >= 8 && bytes.subarray(0, 8).equals(Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]));
-    }
-    if (mimeType === 'image/jpeg')
-        return bytes.length >= 3 && bytes[0] === 0xff && bytes[1] === 0xd8 && bytes[2] === 0xff;
-    if (mimeType === 'image/gif')
-        return bytes.length >= 6 && (bytes.subarray(0, 6).toString('ascii') === 'GIF87a' || bytes.subarray(0, 6).toString('ascii') === 'GIF89a');
-    if (mimeType === 'image/webp') {
-        return bytes.length >= 12 && bytes.subarray(0, 4).toString('ascii') === 'RIFF' && bytes.subarray(8, 12).toString('ascii') === 'WEBP';
-    }
-    return false;
-}
-function decodeBase64(value) {
-    if (!value || value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value))
-        return null;
-    const bytes = Buffer.from(value, 'base64');
-    return bytes.length > 0 ? bytes : null;
-}
-function normalizedImageName(value, mimeType, index) {
-    const extension = IMAGE_EXTENSIONS[mimeType];
-    const raw = typeof value === 'string' ? basename(value.trim()) : '';
-    const stem = (raw ? raw.slice(0, raw.length - extname(raw).length) : `pasted-image-${index + 1}`)
-        .replace(/[^\p{L}\p{N}._-]+/gu, '-')
-        .replace(/^[.-]+|[.-]+$/g, '')
-        .slice(0, 80) || `pasted-image-${index + 1}`;
-    return `${stem}${extension}`;
-}
-/** Validate browser-pasted images before any group or session is created.
- * SVG is deliberately excluded: the dashboard only accepts bounded raster
- * formats and verifies the file signature instead of trusting MIME/filename. */
-export function parseDashboardImageUploads(value) {
-    if (value === undefined || value === null)
-        return { ok: true, images: [] };
-    if (!Array.isArray(value))
-        return { ok: false, error: 'bad_images' };
-    if (value.length > DASHBOARD_IMAGE_MAX_COUNT)
-        return { ok: false, error: 'too_many_images' };
-    const images = [];
-    let totalBytes = 0;
-    for (let index = 0; index < value.length; index += 1) {
-        const item = value[index];
-        if (!item || typeof item !== 'object')
-            return { ok: false, error: 'bad_image' };
-        const mimeType = typeof item.mimeType === 'string' ? item.mimeType.trim().toLowerCase() : '';
-        if (!IMAGE_EXTENSIONS[mimeType])
-            return { ok: false, error: 'unsupported_image_type' };
-        const dataBase64 = typeof item.dataBase64 === 'string' ? item.dataBase64.trim() : '';
-        const bytes = decodeBase64(dataBase64);
-        if (!bytes || !hasExpectedSignature(bytes, mimeType))
-            return { ok: false, error: 'invalid_image_data' };
-        if (bytes.length > DASHBOARD_IMAGE_MAX_BYTES)
-            return { ok: false, error: 'image_too_large' };
-        totalBytes += bytes.length;
-        if (totalBytes > DASHBOARD_IMAGE_MAX_TOTAL_BYTES)
-            return { ok: false, error: 'images_too_large' };
-        images.push({
-            name: normalizedImageName(item.name, mimeType, index),
-            mimeType,
-            dataBase64,
-        });
-    }
-    return { ok: true, images };
-}
-/** Persist validated uploads inside this bot's read-isolation attachment
- * bucket. Each target daemon writes its own copy, so no bot needs access to a
- * sibling appId's files. */
-export function materializeDashboardImages(larkAppId, images) {
-    if (images.length === 0)
-        return [];
-    const messageId = `dashboard-${randomUUID()}`;
-    const dir = getAttachmentsDir(larkAppId, messageId);
-    mkdirSync(dir, { recursive: true, mode: 0o700 });
-    try {
-        return images.map((image, index) => {
-            const path = join(dir, `${String(index + 1).padStart(2, '0')}-${image.name}`);
-            writeFileSync(path, Buffer.from(image.dataBase64, 'base64'), { mode: 0o600, flag: 'wx' });
-            return { type: 'image', path, name: image.name };
-        });
-    }
-    catch (error) {
-        rmSync(dir, { recursive: true, force: true });
-        throw error;
-    }
-}
-/** Remove only a materialization directory created by the helper above.
- * Bucket and basename checks keep cleanup scoped to this bot's exact
- * attachment directory even if a malformed path reaches this function. */
-export function cleanupMaterializedDashboardImages(larkAppId, attachments) {
-    if (attachments.length === 0)
-        return;
-    const bucket = resolve(getAttachmentsDir(larkAppId, '.'));
-    const dirs = new Set(attachments.map(attachment => resolve(dirname(attachment.path))));
-    for (const dir of dirs) {
-        if (dirname(dir) !== bucket || !basename(dir).startsWith('dashboard-'))
-            continue;
-        rmSync(dir, { recursive: true, force: true });
-    }
-}
-//# sourceMappingURL=dashboard-images.js.map

package/dist/core/dashboard-images.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-images.js","sourceRoot":"","sources":["../../src/core/dashboard-images.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1D,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEhE,MAAM,gBAAgB,GAA2B;IAC/C,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,OAAO;CACtB,CAAC;AAYF,SAAS,oBAAoB,CAAC,KAAa,EAAE,QAAgB;IAC3D,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IACvH,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACvK,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC;IACvI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,QAAgB,EAAE,KAAa;IAC1E,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,GAAG,CAAC,EAAE,CAAC;SAC9F,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC;SACnC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC7B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,gBAAgB,KAAK,GAAG,CAAC,EAAE,CAAC;IAC/C,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAE7F,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAChF,MAAM,QAAQ,GAAG,OAAQ,IAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QACvF,MAAM,UAAU,GAAG,OAAQ,IAAY,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAY,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,MAAM,KAAK,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACxG,IAAI,KAAK,CAAC,MAAM,GAAG,yBAAyB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC7F,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,UAAU,GAAG,+BAA+B;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAClG,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,mBAAmB,CAAE,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC;YAC9D,QAAQ;YACR,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;4BAE4B;AAC5B,MAAM,UAAU,0BAA0B,CACxC,SAAiB,EACjB,MAA8B;IAE9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,aAAa,UAAU,EAAE,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9E,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;0EAE0E;AAC1E,MAAM,UAAU,kCAAkC,CAChD,SAAiB,EACjB,WAAsC;IAEtC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QACjF,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/core/dashboard-ipc-server.d.ts

@@ -1,114 +0,0 @@
-import { type IncomingMessage, type ServerResponse } from 'node:http';
-import { applyExactChatGrantRequest } from '../services/exact-chat-grant.js';
-/** Test seam: replace the exact-grant service without touching live Feishu/config state. */
-export declare function setExactChatGrantHandler(handler: typeof applyExactChatGrantRequest | null): void;
-export type BotRenameOutcome = {
-    ok: true;
-    name: string;
-} | {
-    ok: false;
-    reason: string;
-    message: string;
-};
-export declare function setBotRenamer(fn: ((newName: string) => Promise<BotRenameOutcome>) | null): void;
-export type BotAvatarOutcome = {
-    ok: true;
-    avatarUrl: string;
-    versionId?: string;
-} | {
-    ok: false;
-    reason: string;
-    message: string;
-};
-export declare function setBotAvatarChanger(fn: ((image: Buffer) => Promise<BotAvatarOutcome>) | null): void;
-import { composeRowFromActive, composeRowFromClosed, composeRowFromPersistedActive, type SessionRow } from './dashboard-rows.js';
-import type { ParsedSchedule, ScheduleExecutionPosition } from '../types.js';
-export interface IpcServerHandle {
-    port: number;
-    close: () => Promise<void>;
-}
-export type Handler = (req: IncomingMessage, res: ServerResponse, params: Record<string, string>) => Promise<void> | void;
-export declare function isTrustedHostIpcRequest(req: IncomingMessage): boolean;
-/** Register a handler. Path supports `:name` segments captured into the params object. */
-export declare function ipcRoute(method: string, path: string, handler: Handler): void;
-export declare function jsonRes(res: ServerResponse, status: number, body: unknown): void;
-export declare class JsonBodyTooLargeError extends Error {
-    readonly maxBytes: number;
-    constructor(maxBytes: number);
-}
-export declare class AbortDeadlineError extends Error {
-    readonly label: string;
-    readonly timeoutMs: number;
-    constructor(label: string, timeoutMs: number);
-}
-/** 校验跨进程 JSON envelope，只接受普通对象和完整、精确的自有字段集合。 */
-export declare function hasExactSafeJsonKeys(value: unknown, expectedKeys: readonly string[]): value is Record<string, unknown>;
-/**
- * 为支持 AbortSignal 的底层操作设置硬截止时间。Promise.race 保证调用方按时释放
- * in-flight 状态，AbortController 同时取消仍在执行的网络或子进程操作。
- */
-export declare function runWithAbortDeadline<T>(label: string, timeoutMs: number, task: (signal: AbortSignal, deadlineAt: number) => Promise<T>): Promise<T>;
-export declare function readJsonBody<T = unknown>(req: IncomingMessage, maxBytes?: number): Promise<T>;
-/** Test seam: override the secret used to verify token-route HMAC. */
-export declare function setIpcAuthSecret(secret: string | null): void;
-/** Authenticate legacy terminal-token routes with the machine-local dashboard
- * secret. Workflow v3 mutations intentionally use their separate, full-request
- * protocol (`workflows/v3/daemon-ipc-auth`) and must never call this bare
- * ts:nonce verifier. */
-export declare function ipcHmacAuthorized(req: IncomingMessage, bind?: string): boolean;
-export declare function armCoreOnlyReadinessGate(): void;
-export declare function setCoreOnlyReady(): void;
-/** @internal test-only: reset the core-only readiness gate between cases. */
-export declare function __testOnly_resetCoreOnlyReadiness(): void;
-export type { SessionRow };
-export { composeRowFromActive, composeRowFromClosed, composeRowFromPersistedActive };
-export declare function setBotName(name: string): void;
-export declare function setLarkAppId(id: string): void;
-export interface ScheduleRow {
-    id: string;
-    name: string;
-    schedule: string;
-    parsed: ParsedSchedule;
-    prompt: string;
-    workingDir: string;
-    chatId: string;
-    rootMessageId?: string;
-    scope?: 'thread' | 'chat';
-    executionPosition?: ScheduleExecutionPosition;
-    topicTitle?: string;
-    larkAppId?: string;
-    botName?: string;
-    enabled: boolean;
-    createdAt: string;
-    lastRunAt?: string;
-    nextRunAt?: string;
-    lastStatus?: 'ok' | 'error';
-    lastError?: string;
-    repeat?: {
-        times: number | null;
-        completed: number;
-    };
-    deliver?: 'origin' | 'local' | 'new-topic';
-    silent?: boolean;
-    feishuChatLink: string;
-}
-export declare function startIpcServer(opts: {
-    port: number;
-    host: string;
-    /** Enable the production trusted-host boundary. The verifier reloads the
-     * tiny secret file for each request so concurrent fleet bootstrap or a
-     * deliberate secret repair cannot strand a daemon on a stale cached key.
-     * Tests that omit this option retain the lightweight in-process server. */
-    authRequired?: boolean;
-    /** Upward-probe span on EADDRINUSE. Default DEFAULT_PROBE_SPAN (fleet daemons
-     * step to the next free port so a port race can't crash boot). Core-only
-     * (single in-sandbox service) sets 0 to BIND-OR-FAIL on the exact requested
-     * port — riff's task-runner is told a fixed port and must not have the service
-     * silently drift to another one. */
-    maxProbe?: number;
-    /** Core-only: additionally treat the tight riff-facing route allowlist
-     * (routeIsCoreOnlyPublic) as public (no HMAC). Every OTHER route still requires
-     * the trusted-host HMAC — this does NOT disable auth wholesale (codex P1). */
-    coreOnlyPublicRoutes?: boolean;
-}): Promise<IpcServerHandle>;
-//# sourceMappingURL=dashboard-ipc-server.d.ts.map

package/dist/core/dashboard-ipc-server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAwDjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAoE7E,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAEhG;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAE/F;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAEnG;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAI7B,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAiC,cAAc,EAAE,yBAAyB,EAAW,MAAM,aAAa,CAAC;AAqBrH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAe1B,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAErE;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAItC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM;gBADjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM;CAK7B;AAED,gDAAgD;AAChD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWlC;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,CAAC,CAAC,CAoBZ;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,GAAG,EAAE,eAAe,EACpB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,CAAC,CAAC,CAuEZ;AAaD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAM7F;;;wBAGwB;AACxB,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAS9E;AAwGD,wBAAgB,wBAAwB,IAAI,IAAI,CAAkC;AAClF,wBAAgB,gBAAgB,IAAI,IAAI,CAA0B;AAClE,6EAA6E;AAC7E,wBAAgB,iCAAiC,IAAI,IAAI,CAA0D;AAqBnH,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,CAAC;AAMrF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAkBxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AA8wCxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AA2wED,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;+EAG2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;wCAIoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;kFAE8E;IAC9E,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,GAAG,OAAO,CAAC,eAAe,CAAC,CA6D3B"}