botmux 3.14.0 → 3.16.0

package/dist/cli/bots-list-output.js

@@ -1,32 +1,178 @@
-export function formatChatBotsForCli(chatBots, currentLarkAppId) {
-    return chatBots.map((cb) => ({
-        name: cb.displayName,
-        openId: cb.openId,
-        isSelf: cb.larkAppId === currentLarkAppId,
-        source: cb.source,
-        larkAppId: cb.larkAppId,
-        workflowBot: cb.larkAppId || null,
-        capability: cb.capability ?? null,
-        hasTeamRole: cb.hasTeamRole,
-        mentionable: cb.mentionable,
-        mentionSource: cb.mentionSource,
-    }));
+export const collaborationHelp = {
+    general: 'unknown 表示当前命令没有足够证据，不等于不可用；群成员关系、本地配置和发送成功也不能单独证明目标在线或任务完成。',
+    fields: {
+        reachability: {
+            description: '当前 Bot 是否有足够证据被可靠寻址。',
+            values: {
+                ready: '已有当前群的可靠 @ 句柄，可以直接寻址；不代表目标运行时在线。',
+                'needs-introduce': '已识别配置中的 Bot，但 @ 句柄不可靠；先完成 /introduce 再依赖 @ 派发。',
+                offline: '已有权威离线证据；恢复后再派发。',
+                unknown: '缺少当前群的可靠寻址证据；先刷新花名册或完成 /introduce，不能据此判定离线。',
+            },
+        },
+        'workspace.requirement': {
+            description: '派发任务时是否需要指定仓库或工作区。',
+            values: {
+                required: '必须显式提供工作区；缺少仓库时不要派发。',
+                optional: '工作区可省略；代码任务仍应在需要时明确指定仓库。',
+                none: '该 Bot 的任务不需要工作区。',
+                unknown: '能力声明没有给出要求；派发前先确认，不能假定当前目录可用。',
+            },
+        },
+        'workspace.source': {
+            description: '目标创建会话时可用的工作区配置候选来源；目录校验或会话继承可能改变最终 cwd。',
+            values: {
+                default: '已配置目标 Bot 的默认工作区候选；不代表最终 cwd。',
+                oncall: '当前群命中 OnCall 工作区候选；不代表最终 cwd。',
+                inherited: '继承既有会话或话题的工作区。',
+                explicit: '使用派发时显式指定的工作区。',
+                none: '不需要工作区。',
+                unknown: '当前输出没有 cwd 来源证据；不要猜测目标目录。',
+            },
+        },
+        'authorization.talk': {
+            description: '是否具备普通 Bot 间对话所需的授权证据。',
+            values: {
+                ready: '已有对话授权，可以直接交互。',
+                'preflight-required': '用稳定 --bot-app 派发；发送前会建立并回读 talk-only 授权。',
+                unknown: '没有足够对话授权证据；先确认稳定目标和对话信任链路。',
+            },
+        },
+        'authorization.operate': {
+            description: '是否有执行 /repo、/restart 等管理动作的授权证据；与普通对话授权分开判断。',
+            values: {
+                true: '已有 operate 授权证据，可以执行管理动作。',
+                false: '本次 talk-only preflight 不授予 operate；/repo、/restart 等管理动作仍需单独授权。',
+                unknown: '当前命令没有 operate 授权证据；不要按 true 处理。',
+            },
+        },
+        'session.mentionMode': {
+            description: '目标 Bot 在普通群中何时要求 @ 才会响应；不描述私聊或话题群策略。',
+            values: {
+                always: '普通群内始终需要 @ 目标 Bot，包括 shared 话题内的续话。',
+                topic: '普通群顶层需要 @；shared 话题内后续非 @ 消息可继续唤起。',
+                never: '普通群内不需要 @ 即可唤起。',
+                ambient: '普通群内可免 @ 观察消息，但消息明确指向其他成员时保持安静。',
+                unknown: '没有权威普通群配置；派发时保守地使用明确寻址。',
+            },
+        },
+        'session.replyMode': {
+            description: '目标 Bot 在普通群中的回复会落在哪种会话或话题上下文；不描述私聊或话题群策略。',
+            values: {
+                chat: '普通群内复用群级会话，原生话题也折叠到同一会话。',
+                'chat-topic': '普通群顶层复用 chat-scope session；群内原生话题各自使用独立会话。',
+                'new-topic': '普通群顶层派发后新建独立话题，应在新话题跟进结果。',
+                shared: '普通群回复展示在话题中，但复用群级 chat-scope session 和 cwd。',
+                unknown: '没有权威普通群路由配置；不要假定回复位置或上下文会被继承。',
+            },
+        },
+        'runtime.transport': {
+            description: '目标 Bot 的配置是否具备飞书 transport 能力；该字段不是在线健康状态。',
+            values: {
+                true: '配置允许飞书 transport；不证明 daemon 或连接在线。',
+                false: 'apiOnly 配置明确不具备飞书 transport。',
+                unknown: '当前进程读不到权威 BotConfig；群成员关系或 Lark API 成功不能替代配置证据。',
+            },
+        },
+        'runtime.deployment': {
+            description: '目标 Bot 的部署归属；该字段不表示在线状态。',
+            values: {
+                local: '目标 App 在当前 botmux 主机有配置；仍需单独判断运行时健康。',
+                remote: '目标由远端部署管理；派发时需要保留远端回报和路径边界。',
+                unknown: '当前输出无法确定部署归属。',
+            },
+        },
+        'runtime.stale': {
+            description: '已有运行时健康证据是否过期。',
+            values: {
+                true: '健康证据已过期；派发前刷新状态。',
+                false: '有近期权威健康证据。',
+                unknown: '没有健康时间戳或探针证据；不能据此判断在线或离线。',
+            },
+        },
+    },
+};
+function dispatchGuide(capability) {
+    const workspace = capability?.match(/\bworkspace\s*:\s*(required|optional|none)\b/i)?.[1]?.toLowerCase();
+    return {
+        trigger: 'mention',
+        workspace: workspace === 'required' || workspace === 'optional' || workspace === 'none'
+            ? workspace
+            : 'unknown',
+    };
 }
-export function formatBotInfoEntriesForCli(botEntries, currentLarkAppId) {
+function collaborationGuide(row, live, facts) {
+    // A "stable peer" is a locally-configured bot we can preflight a talk-only
+    // grant against. Gate on source==='configured' explicitly, not just a
+    // non-empty larkAppId: today the sole producers guarantee introduce rows
+    // carry larkAppId='' (so non-empty ⇒ configured), but talk/operate promise a
+    // "--bot-app" dispatch that REQUIRES local config — so we encode that
+    // invariant here rather than relying on it. deployment already gates the same
+    // way; this keeps a future introduce producer carrying a remote app id from
+    // silently flipping talk to preflight-required.
+    const stablePeer = live && row.larkAppId !== '' && row.source === 'configured' && !row.isSelf;
+    return {
+        reachability: live
+            ? (row.mentionable ? 'ready' : row.source === 'configured' ? 'needs-introduce' : 'unknown')
+            : 'unknown',
+        workspace: {
+            requirement: row.dispatch.workspace,
+            source: row.dispatch.workspace === 'none' ? 'none' : facts?.workspaceSource ?? 'unknown',
+        },
+        authorization: {
+            talk: stablePeer ? 'preflight-required' : 'unknown',
+            operate: stablePeer ? false : 'unknown',
+        },
+        session: {
+            mentionMode: facts?.mentionMode ?? 'unknown',
+            replyMode: facts?.replyMode ?? 'unknown',
+        },
+        runtime: {
+            transport: facts?.transport ?? 'unknown',
+            deployment: row.larkAppId !== '' && ((live && row.source === 'configured') || facts !== undefined)
+                ? 'local'
+                : 'unknown',
+            stale: 'unknown',
+        },
+    };
+}
+export function formatChatBotsForCli(chatBots, currentLarkAppId, factsByAppId = {}) {
+    return chatBots.map((cb) => {
+        const row = {
+            name: cb.displayName,
+            openId: cb.openId,
+            isSelf: cb.larkAppId === currentLarkAppId,
+            source: cb.source,
+            larkAppId: cb.larkAppId,
+            workflowBot: cb.larkAppId || null,
+            capability: cb.capability ?? null,
+            hasTeamRole: cb.hasTeamRole,
+            mentionable: cb.mentionable,
+            mentionSource: cb.mentionSource,
+            dispatch: dispatchGuide(cb.capability),
+        };
+        return { ...row, collaboration: collaborationGuide(row, true, factsByAppId[row.larkAppId]) };
+    });
+}
+export function formatBotInfoEntriesForCli(botEntries, currentLarkAppId, factsByAppId = {}) {
     return botEntries
         .filter((b) => b.botOpenId)
-        .map((b) => ({
-        name: b.botName ?? b.cliId,
-        openId: b.botOpenId,
-        isSelf: b.larkAppId === currentLarkAppId,
-        source: 'configured',
-        larkAppId: b.larkAppId,
-        workflowBot: b.larkAppId,
-        // Local fallback path (no live chat query): we only know self reliably.
-        capability: null,
-        hasTeamRole: false,
-        mentionable: b.larkAppId === currentLarkAppId,
-        mentionSource: (b.larkAppId === currentLarkAppId ? 'self' : 'fallback'),
-    }));
+        .map((b) => {
+        const row = {
+            name: b.botName ?? b.cliId,
+            openId: b.botOpenId,
+            isSelf: b.larkAppId === currentLarkAppId,
+            source: 'configured',
+            larkAppId: b.larkAppId,
+            workflowBot: b.larkAppId,
+            // Local fallback path (no live chat query): we only know self reliably.
+            capability: null,
+            hasTeamRole: false,
+            mentionable: b.larkAppId === currentLarkAppId,
+            mentionSource: (b.larkAppId === currentLarkAppId ? 'self' : 'fallback'),
+            dispatch: dispatchGuide(null),
+        };
+        return { ...row, collaboration: collaborationGuide(row, false, factsByAppId[row.larkAppId]) };
+    });
 }
 //# sourceMappingURL=bots-list-output.js.map

package/dist/cli/bots-list-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"bots-list-output.js","sourceRoot":"","sources":["../../src/cli/bots-list-output.ts"],"names":[],"mappings":"AA6BA,MAAM,UAAU,oBAAoB,CAClC,QAAyB,EACzB,gBAAwB;IAExB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3B,IAAI,EAAE,EAAE,CAAC,WAAW;QACpB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,MAAM,EAAE,EAAE,CAAC,SAAS,KAAK,gBAAgB;QACzC,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,WAAW,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI;QACjC,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;QACjC,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,aAAa,EAAE,EAAE,CAAC,aAAa;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAiC,EACjC,gBAAwB;IAExB,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK;QAC1B,MAAM,EAAE,CAAC,CAAC,SAAU;QACpB,MAAM,EAAE,CAAC,CAAC,SAAS,KAAK,gBAAgB;QACxC,MAAM,EAAE,YAAqB;QAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,WAAW,EAAE,CAAC,CAAC,SAAS;QACxB,wEAAwE;QACxE,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,CAAC,CAAC,SAAS,KAAK,gBAAgB;QAC7C,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAwB;KAC/F,CAAC,CAAC,CAAC;AACR,CAAC"}
+{"version":3,"file":"bots-list-output.js","sourceRoot":"","sources":["../../src/cli/bots-list-output.ts"],"names":[],"mappings":"AAiEA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,OAAO,EAAE,8DAA8D;IACvE,MAAM,EAAE;QACN,YAAY,EAAE;YACZ,WAAW,EAAE,sBAAsB;YACnC,MAAM,EAAE;gBACN,KAAK,EAAE,kCAAkC;gBACzC,iBAAiB,EAAE,gDAAgD;gBACnE,OAAO,EAAE,kBAAkB;gBAC3B,OAAO,EAAE,6CAA6C;aACvD;SACF;QACD,uBAAuB,EAAE;YACvB,WAAW,EAAE,oBAAoB;YACjC,MAAM,EAAE;gBACN,QAAQ,EAAE,sBAAsB;gBAChC,QAAQ,EAAE,0BAA0B;gBACpC,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,+BAA+B;aACzC;SACF;QACD,kBAAkB,EAAE;YAClB,WAAW,EAAE,0CAA0C;YACvD,MAAM,EAAE;gBACN,OAAO,EAAE,+BAA+B;gBACxC,MAAM,EAAE,+BAA+B;gBACvC,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,gBAAgB;gBAC1B,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,2BAA2B;aACrC;SACF;QACD,oBAAoB,EAAE;YACpB,WAAW,EAAE,wBAAwB;YACrC,MAAM,EAAE;gBACN,KAAK,EAAE,gBAAgB;gBACvB,oBAAoB,EAAE,0CAA0C;gBAChE,OAAO,EAAE,4BAA4B;aACtC;SACF;QACD,uBAAuB,EAAE;YACvB,WAAW,EAAE,8CAA8C;YAC3D,MAAM,EAAE;gBACN,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE,gEAAgE;gBACvE,OAAO,EAAE,kCAAkC;aAC5C;SACF;QACD,qBAAqB,EAAE;YACrB,WAAW,EAAE,sCAAsC;YACnD,MAAM,EAAE;gBACN,MAAM,EAAE,qCAAqC;gBAC7C,KAAK,EAAE,oCAAoC;gBAC3C,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,iCAAiC;gBAC1C,OAAO,EAAE,yBAAyB;aACnC;SACF;QACD,mBAAmB,EAAE;YACnB,WAAW,EAAE,2CAA2C;YACxD,MAAM,EAAE;gBACN,IAAI,EAAE,0BAA0B;gBAChC,YAAY,EAAE,4CAA4C;gBAC1D,WAAW,EAAE,2BAA2B;gBACxC,MAAM,EAAE,6CAA6C;gBACrD,OAAO,EAAE,+BAA+B;aACzC;SACF;QACD,mBAAmB,EAAE;YACnB,WAAW,EAAE,4CAA4C;YACzD,MAAM,EAAE;gBACN,IAAI,EAAE,oCAAoC;gBAC1C,KAAK,EAAE,8BAA8B;gBACrC,OAAO,EAAE,iDAAiD;aAC3D;SACF;QACD,oBAAoB,EAAE;YACpB,WAAW,EAAE,0BAA0B;YACvC,MAAM,EAAE;gBACN,KAAK,EAAE,sCAAsC;gBAC7C,MAAM,EAAE,6BAA6B;gBACrC,OAAO,EAAE,eAAe;aACzB;SACF;QACD,eAAe,EAAE;YACf,WAAW,EAAE,gBAAgB;YAC7B,MAAM,EAAE;gBACN,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,2BAA2B;aACrC;SACF;KACF;CACO,CAAC;AAEX,SAAS,aAAa,CAAC,UAAqC;IAC1D,MAAM,SAAS,GAAG,UAAU,EAAE,KAAK,CAAC,+CAA+C,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACzG,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,MAAM;YACrF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAA6F,EAC7F,IAAa,EACb,KAAwC;IAExC,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,6EAA6E;IAC7E,sEAAsE;IACtE,8EAA8E;IAC9E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,UAAU,GAAG,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAC9F,OAAO;QACL,YAAY,EAAE,IAAI;YAChB,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,CAAC,CAAC,SAAS;QACb,SAAS,EAAE;YACT,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS;YACnC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,eAAe,IAAI,SAAS;SACzF;QACD,aAAa,EAAE;YACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS;YACnD,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACxC;QACD,OAAO,EAAE;YACP,WAAW,EAAE,KAAK,EAAE,WAAW,IAAI,SAAS;YAC5C,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS;SACzC;QACD,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,SAAS;YACxC,UAAU,EAAE,GAAG,CAAC,SAAS,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,IAAI,KAAK,KAAK,SAAS,CAAC;gBAChG,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,SAAS;YACb,KAAK,EAAE,SAAS;SACjB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAyB,EACzB,gBAAwB,EACxB,eAA6C,EAAE;IAE/C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,EAAE,CAAC,WAAW;YACpB,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,MAAM,EAAE,EAAE,CAAC,SAAS,KAAK,gBAAgB;YACzC,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,WAAW,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI;YACjC,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,IAAI;YACjC,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,WAAW,EAAE,EAAE,CAAC,WAAW;YAC3B,aAAa,EAAE,EAAE,CAAC,aAAa;YAC/B,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,UAAU,CAAC;SACa,CAAC;QACtD,OAAO,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,UAAiC,EACjC,gBAAwB,EACxB,eAA6C,EAAE;IAE/C,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,GAAG,GAAG;YACV,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK;YAC1B,MAAM,EAAE,CAAC,CAAC,SAAU;YACpB,MAAM,EAAE,CAAC,CAAC,SAAS,KAAK,gBAAgB;YACxC,MAAM,EAAE,YAAqB;YAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,SAAS;YACxB,wEAAwE;YACxE,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,CAAC,CAAC,SAAS,KAAK,gBAAgB;YAC7C,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAwB;YAC9F,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC;SACsB,CAAC;QACtD,OAAO,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/daemon-lifecycle-env.d.ts

@@ -1,9 +1,16 @@
-declare const DAEMON_ENV_KEYS: readonly ["WEB_EXTERNAL_HOST", "BOTMUX_DASHBOARD_EXTERNAL_HOST", "BOTMUX_DASHBOARD_HOST", "BOTMUX_DASHBOARD_PORT", "BOTMUX_DAEMON_IPC_BASE_PORT", "BOTMUX_DASHBOARD_PUBLIC_READONLY", "BOTMUX_PUBLIC_URL"];
+export declare const DAEMON_ENV_KEYS: readonly ["WEB_EXTERNAL_HOST", "BOTMUX_DASHBOARD_EXTERNAL_HOST", "BOTMUX_DASHBOARD_HOST", "BOTMUX_DASHBOARD_PORT", "BOTMUX_DAEMON_IPC_BASE_PORT", "BOTMUX_DASHBOARD_PUBLIC_READONLY", "BOTMUX_PUBLIC_URL", "BOTMUX_DASHBOARD_CONTROL_AUDIT_PATH", "BOTMUX_DASHBOARD_TERMINAL_CONTROL_TTL_MS"];
+export type DaemonEnvKey = (typeof DAEMON_ENV_KEYS)[number];
 /**
  * Pin both PM2 apps to one deterministic ~/.botmux/.env snapshot. A restart
  * launched inside a botmux session inherited its values from the old daemon,
  * so only the persisted file is authoritative in that context.
+ *
+ * Every key resolves to a string, empty when neither source sets it. Each
+ * consumer treats the empty string as "unset" and applies its own default
+ * (h5-auth's ENABLED/BRAND/TTL/SECURE_COOKIE parsing, control-audit's path
+ * fallback, terminal-control's TTL validation), so a blank baked value is
+ * indistinguishable from an absent one — except for the dashboard bind host,
+ * whose historical default is applied here.
  */
-export declare function resolveDaemonEnv(inheritedEnv: NodeJS.ProcessEnv, envFileText?: string): Record<(typeof DAEMON_ENV_KEYS)[number], string>;
-export {};
+export declare function resolveDaemonEnv(inheritedEnv: NodeJS.ProcessEnv, envFileText?: string): Record<DaemonEnvKey, string>;
 //# sourceMappingURL=daemon-lifecycle-env.d.ts.map

package/dist/cli/daemon-lifecycle-env.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-lifecycle-env.d.ts","sourceRoot":"","sources":["../../src/cli/daemon-lifecycle-env.ts"],"names":[],"mappings":"AAOA,QAAA,MAAM,eAAe,4MAaX,CAAC;AAEX;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,CAAC,UAAU,EAC/B,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAAC,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAiBlD"}
+{"version":3,"file":"daemon-lifecycle-env.d.ts","sourceRoot":"","sources":["../../src/cli/daemon-lifecycle-env.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,eAAe,+RAuBlB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,CAAC,UAAU,EAC/B,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAe9B"}

package/dist/cli/daemon-lifecycle-env.js

@@ -3,8 +3,22 @@ import { parse } from 'dotenv';
 // MUST stay mirrored by detachedRestartEnv() in src/core/maintenance.ts: any key
 // added here also has to be stripped there, or a detached restart (dashboard
 // update/restart, maintenance auto-update) reuses the stale baked value instead
-// of reloading it from ~/.botmux/.env.
-const DAEMON_ENV_KEYS = [
+// of reloading it from ~/.botmux/.env. test/maintenance.test.ts pins that
+// mirror by iterating this exported list.
+//
+// This baked block is SHARED: the same resolved values land in the env of the
+// dashboard AND of every bot daemon, and they persist on disk in
+// ~/.botmux/ecosystem.config.json. Only non-secret settings belong here.
+//
+// The Dashboard Feishu H5 login family (BOTMUX_DASHBOARD_FEISHU_H5_*, incl. the
+// APP_SECRET credential) is DELIBERATELY absent: the dashboard receives it via
+// its own entry point — index-dashboard.ts dotenv-loads ~/.botmux/.env, exactly
+// like the bot daemons' index-daemon.ts — so the secret never enters the shared
+// env block and never lands in ecosystem.config.json. Do not re-add those keys;
+// test/daemon-lifecycle-env.test.ts pins the exclusion, and utils/child-env.ts
+// (stripDashboardH5Env / redactChildEnv) keeps the family out of the daemon
+// process and every CLI child.
+export const DAEMON_ENV_KEYS = [
     'WEB_EXTERNAL_HOST',
     'BOTMUX_DASHBOARD_EXTERNAL_HOST',
     'BOTMUX_DASHBOARD_HOST',
@@ -17,11 +31,28 @@ const DAEMON_ENV_KEYS = [
     // from a bot session (whose pane wrapper unsets BOTMUX_*) silently demoted
     // all web-terminal links back to raw ip:port.
     'BOTMUX_PUBLIC_URL',
+    // Dashboard-only, non-secret settings: the control-audit destination
+    // (dashboard/control-audit.ts defaultControlAuditPath) and the terminal
+    // takeover lease TTL (dashboard/terminal-control.ts terminalControlTtlFromEnv).
+    // Documented in .env.example, but without a baked value an operator pointing
+    // the audit log at /var/lib/botmux kept writing to ~/.botmux/audit instead
+    // ("configured but never took effect"). Baked values also outrank the
+    // dashboard's own dotenv load (dotenv never overrides existing vars), which
+    // keeps them on the deterministic resolveDaemonEnv snapshot semantics.
+    'BOTMUX_DASHBOARD_CONTROL_AUDIT_PATH',
+    'BOTMUX_DASHBOARD_TERMINAL_CONTROL_TTL_MS',
 ];
 /**
  * Pin both PM2 apps to one deterministic ~/.botmux/.env snapshot. A restart
  * launched inside a botmux session inherited its values from the old daemon,
  * so only the persisted file is authoritative in that context.
+ *
+ * Every key resolves to a string, empty when neither source sets it. Each
+ * consumer treats the empty string as "unset" and applies its own default
+ * (h5-auth's ENABLED/BRAND/TTL/SECURE_COOKIE parsing, control-audit's path
+ * fallback, terminal-control's TTL validation), so a blank baked value is
+ * indistinguishable from an absent one — except for the dashboard bind host,
+ * whose historical default is applied here.
  */
 export function resolveDaemonEnv(inheritedEnv, envFileText) {
     const fileEnv = envFileText === undefined ? {} : parse(envFileText);
@@ -30,14 +61,10 @@ export function resolveDaemonEnv(inheritedEnv, envFileText) {
         const value = sessionOrigin ? fileEnv[key] : inheritedEnv[key] ?? fileEnv[key];
         return value?.trim() ?? '';
     };
-    return {
-        WEB_EXTERNAL_HOST: resolve('WEB_EXTERNAL_HOST'),
-        BOTMUX_DASHBOARD_EXTERNAL_HOST: resolve('BOTMUX_DASHBOARD_EXTERNAL_HOST'),
-        BOTMUX_DASHBOARD_HOST: resolve('BOTMUX_DASHBOARD_HOST') || '0.0.0.0',
-        BOTMUX_DASHBOARD_PORT: resolve('BOTMUX_DASHBOARD_PORT'),
-        BOTMUX_DAEMON_IPC_BASE_PORT: resolve('BOTMUX_DAEMON_IPC_BASE_PORT'),
-        BOTMUX_DASHBOARD_PUBLIC_READONLY: resolve('BOTMUX_DASHBOARD_PUBLIC_READONLY'),
-        BOTMUX_PUBLIC_URL: resolve('BOTMUX_PUBLIC_URL'),
-    };
+    // Derived from DAEMON_ENV_KEYS rather than hand-listed: the previous literal
+    // return object was a second place to forget a key.
+    const resolved = Object.fromEntries(DAEMON_ENV_KEYS.map(key => [key, resolve(key)]));
+    resolved.BOTMUX_DASHBOARD_HOST ||= '0.0.0.0';
+    return resolved;
 }
 //# sourceMappingURL=daemon-lifecycle-env.js.map

package/dist/cli/daemon-lifecycle-env.js.map

@@ -1 +1 @@
-{"version":3,"file":"daemon-lifecycle-env.js","sourceRoot":"","sources":["../../src/cli/daemon-lifecycle-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,uCAAuC;AACvC,MAAM,eAAe,GAAG;IACtB,mBAAmB;IACnB,gCAAgC;IAChC,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;IAC7B,kCAAkC;IAClC,8DAA8D;IAC9D,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,8CAA8C;IAC9C,mBAAmB;CACX,CAAC;AAEX;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAA+B,EAC/B,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,GAAqC,EAAU,EAAE;QAChE,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,OAAO;QACL,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC;QAC/C,8BAA8B,EAAE,OAAO,CAAC,gCAAgC,CAAC;QACzE,qBAAqB,EAAE,OAAO,CAAC,uBAAuB,CAAC,IAAI,SAAS;QACpE,qBAAqB,EAAE,OAAO,CAAC,uBAAuB,CAAC;QACvD,2BAA2B,EAAE,OAAO,CAAC,6BAA6B,CAAC;QACnE,gCAAgC,EAAE,OAAO,CAAC,kCAAkC,CAAC;QAC7E,iBAAiB,EAAE,OAAO,CAAC,mBAAmB,CAAC;KAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"daemon-lifecycle-env.js","sourceRoot":"","sources":["../../src/cli/daemon-lifecycle-env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAE/B,+EAA+E;AAC/E,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,8EAA8E;AAC9E,iEAAiE;AACjE,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,+EAA+E;AAC/E,4EAA4E;AAC5E,+BAA+B;AAC/B,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,mBAAmB;IACnB,gCAAgC;IAChC,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;IAC7B,kCAAkC;IAClC,8DAA8D;IAC9D,yEAAyE;IACzE,yEAAyE;IACzE,2EAA2E;IAC3E,8CAA8C;IAC9C,mBAAmB;IACnB,qEAAqE;IACrE,wEAAwE;IACxE,gFAAgF;IAChF,6EAA6E;IAC7E,2EAA2E;IAC3E,sEAAsE;IACtE,4EAA4E;IAC5E,uEAAuE;IACvE,qCAAqC;IACrC,0CAA0C;CAClC,CAAC;AAIX;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAA+B,EAC/B,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAU,EAAE;QAC5C,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/E,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC,CAAC;IAEF,6EAA6E;IAC7E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAChB,CAAC;IAClC,QAAQ,CAAC,qBAAqB,KAAK,SAAS,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/cli/dashboard-command.d.ts

@@ -10,6 +10,21 @@ export type DashboardCommandExecution = {
     action: 'current' | 'rotate';
     result: DashboardResult;
 };
+/**
+ * `botmux dashboard` 成功时要打印的每一行，按顺序。
+ *
+ * ⚠️ 契约：**第 0 行永远是且只是那条 URL**，不带任何前缀、标签或修饰。脚本和用户
+ * 都靠「取第一行」拿链接（`botmux dashboard | head -1`）。往后追加行可以，动第一行
+ * 不行。
+ *
+ * 第二行是工作台直达入口（`<base>/workbench?t=<token>`）——`/workbench` 是
+ * Dashboard 上一个无 fragment 的入口，会 302 到 `/?t=…#/agent-workbench`
+ * （见 dashboard.ts）。它和第一行同源同 token，所以第一行能用它就能用；拼不出来
+ * （URL 不可解析）时这一行整行省略，不打印半截链接。
+ */
+export declare function formatDashboardSuccessLines(result: Extract<DashboardResult, {
+    ok: true;
+}>): string[];
 export declare function formatDashboardFallbackFailure(action: 'current' | 'rotate', failure: Extract<DashboardResult, {
     ok: false;
 }>): string;

package/dist/cli/dashboard-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-command.d.ts","sourceRoot":"","sources":["../../src/cli/dashboard-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAElF,eAAO,MAAM,uBAAuB,8cAGyB,CAAC;AAE9D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAYhF,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,GAAG,QAAQ,EAC5B,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,GAC/C,MAAM,CAGR;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,YAAY,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,eAAe,CAAC,GAClE,OAAO,CAAC,yBAAyB,CAAC,CAwCpC"}
+{"version":3,"file":"dashboard-command.d.ts","sourceRoot":"","sources":["../../src/cli/dashboard-command.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAElF,eAAO,MAAM,uBAAuB,8cAGyB,CAAC;AAE9D,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAYhF;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAMpG;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,SAAS,GAAG,QAAQ,EAC5B,OAAO,EAAE,OAAO,CAAC,eAAe,EAAE;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,GAC/C,MAAM,CAGR;AAED;;;;;GAKG;AACH,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,YAAY,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,OAAO,CAAC,eAAe,CAAC,GAClE,OAAO,CAAC,yBAAyB,CAAC,CAwCpC"}

package/dist/cli/dashboard-command.js

@@ -1,3 +1,4 @@
+import { workbenchEntryUrl } from '../core/dashboard-url.js';
 export const DASHBOARD_COMMAND_USAGE = `用法:
   botmux dashboard           获取当前 Dashboard 登录 URL（没有则创建，不轮换已有 token）
   botmux dashboard current   获取当前 Dashboard 登录 URL（没有则创建，不轮换已有 token）
@@ -11,6 +12,27 @@ function legacyEnsureRouteMissing(result) {
     return result.reason === 'http-error'
         && result.detail?.startsWith(LEGACY_ENSURE_TOKEN_GATE_PREFIX) === true;
 }
+/**
+ * `botmux dashboard` 成功时要打印的每一行，按顺序。
+ *
+ * ⚠️ 契约：**第 0 行永远是且只是那条 URL**，不带任何前缀、标签或修饰。脚本和用户
+ * 都靠「取第一行」拿链接（`botmux dashboard | head -1`）。往后追加行可以，动第一行
+ * 不行。
+ *
+ * 第二行是工作台直达入口（`<base>/workbench?t=<token>`）——`/workbench` 是
+ * Dashboard 上一个无 fragment 的入口，会 302 到 `/?t=…#/agent-workbench`
+ * （见 dashboard.ts）。它和第一行同源同 token，所以第一行能用它就能用；拼不出来
+ * （URL 不可解析）时这一行整行省略，不打印半截链接。
+ */
+export function formatDashboardSuccessLines(result) {
+    const lines = [result.url];
+    const workbench = workbenchEntryUrl(result.url);
+    if (workbench)
+        lines.push(`工作台: ${workbench}`);
+    if (result.localUrl)
+        lines.push(`本地直连(平台异常时可用): ${result.localUrl}`);
+    return lines;
+}
 export function formatDashboardFallbackFailure(action, failure) {
     const operation = action === 'current' ? 'Dashboard lookup' : 'Rotation';
     return `${operation} failed: ${failure.detail ?? failure.reason}`;

package/dist/cli/dashboard-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-command.js","sourceRoot":"","sources":["../../src/cli/dashboard-command.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;6DAGsB,CAAC;AAO9D,MAAM,+BAA+B,GACnC,gEAAgE,CAAC;AAEnE,SAAS,wBAAwB,CAAC,MAAuB;IACvD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,KAAK,YAAY;WAChC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,+BAA+B,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA4B,EAC5B,OAAgD;IAEhD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,OAAO,GAAG,SAAS,YAAY,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAuB,EACvB,YAAmE;IAEnE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAEnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,CAAC;IACpD,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,aAAa,CAAC,EAAE,IAAI,aAAa,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC"}
+{"version":3,"file":"dashboard-command.js","sourceRoot":"","sources":["../../src/cli/dashboard-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAI7D,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;6DAGsB,CAAC;AAO9D,MAAM,+BAA+B,GACnC,gEAAgE,CAAC;AAEnE,SAAS,wBAAwB,CAAC,MAAuB;IACvD,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,KAAK,YAAY;WAChC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,+BAA+B,CAAC,KAAK,IAAI,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAA8C;IACxF,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,MAA4B,EAC5B,OAAgD;IAEhD,MAAM,SAAS,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;IACzE,OAAO,GAAG,SAAS,YAAY,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAuB,EACvB,YAAmE;IAEnE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IAEnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACvD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,CAAC;IACpD,6EAA6E;IAC7E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,IAAI,wBAAwB,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,iDAAiD;QACjD,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC3D,IAAI,aAAa,CAAC,EAAE,IAAI,aAAa,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC,eAAe,CAAC,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACvD,CAAC"}

package/dist/cli/log-tail.d.ts

@@ -0,0 +1,54 @@
+/**
+ * PM2-client-free log tailing for `botmux logs`.
+ *
+ * `pm2 logs` is a PM2 client, and any PM2 client invoked with no live God
+ * lazily births one (pm2 Client.start → pingDaemon false → launchDaemon).
+ * That made the read command a check/use race against `restart
+ * --include-pm2`: a God observed under the fleet lock could be retired after
+ * the lock released but before the spawned client connected, and the
+ * connecting client would then create a replacement God inside the
+ * kill→start window. Tailing the log FILES pm2 itself writes removes the PM2
+ * client entirely — no interleaving of this command can create a God, and
+ * logs keep working while the fleet is stopped.
+ */
+export interface LogTailSource {
+    /** Display label, e.g. the PM2 process name. */
+    label: string;
+    stream: 'out' | 'err';
+    file: string;
+}
+export declare function formatLogLine(source: LogTailSource, line: string): string;
+/** Last `n` complete lines of a text chunk (trailing newline ignored). */
+export declare function lastLinesOfChunk(chunk: string, n: number): string[];
+export interface LogFileFollowerOptions {
+    sources: readonly LogTailSource[];
+    writeLine: (formatted: string) => void;
+    pollIntervalMs?: number;
+}
+/**
+ * Print the last N lines of every existing source, then follow appends.
+ * Correctness boundaries this models explicitly:
+ *  - An unterminated trailing line is NEVER emitted as a line; it is carried
+ *    as `partial` (from the initial tail too) and emitted once completed, so
+ *    "abc" + later "def\n" prints one "abcdef" line.
+ *  - Atomic rotation (rename + recreate at the same path) is detected by
+ *    dev+ino generation identity, not by size heuristics — a new file whose
+ *    size already exceeds the old offset would otherwise be read mid-stream.
+ *    (On filesystems reporting ino=0 this degrades to the size checks.)
+ *  - In-place truncation (`pm2 flush`) resets to the top of the new content.
+ *  - Files may appear later (fleet starts while tailing) or disappear.
+ */
+export declare class LogFileFollower {
+    private readonly states;
+    private readonly writeLine;
+    private readonly pollIntervalMs;
+    private timer;
+    constructor(opts: LogFileFollowerOptions);
+    /** Emit the initial `--lines` window and position offsets at end-of-file. */
+    printInitialTail(lines: number): void;
+    start(): void;
+    stop(): void;
+    /** One poll pass; exposed so tests can drive it deterministically. */
+    pollOnce(): void;
+}
+//# sourceMappingURL=log-tail.d.ts.map

package/dist/cli/log-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-tail.d.ts","sourceRoot":"","sources":["../../src/cli/log-tail.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,0EAA0E;AAC1E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAKnE;AAgDD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;IAClC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA8B;IACxD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,KAAK,CAA6B;gBAE9B,IAAI,EAAE,sBAAsB;IAQxC,6EAA6E;IAC7E,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAsBrC,KAAK,IAAI,IAAI;IAKb,IAAI,IAAI,IAAI;IAKZ,sEAAsE;IACtE,QAAQ,IAAI,IAAI;CAyCjB"}

package/dist/cli/log-tail.js

@@ -0,0 +1,167 @@
+import { closeSync, existsSync, openSync, readSync, statSync } from 'node:fs';
+export function formatLogLine(source, line) {
+    return `${source.label}${source.stream === 'err' ? ' (err)' : ''} | ${line}`;
+}
+/** Last `n` complete lines of a text chunk (trailing newline ignored). */
+export function lastLinesOfChunk(chunk, n) {
+    if (n <= 0)
+        return [];
+    const all = chunk.split('\n');
+    if (all.length > 0 && all[all.length - 1] === '')
+        all.pop();
+    return all.slice(Math.max(0, all.length - n));
+}
+// Initial `--lines` window: start small and grow until the window holds
+// enough complete lines (or the whole file / a hard cap), so a large N is
+// honored instead of silently clipped by a fixed window.
+const INITIAL_TAIL_WINDOW_BYTES = 64 * 1024;
+const MAX_TAIL_WINDOW_BYTES = 8 * 1024 * 1024;
+function readFileRange(file, start, end) {
+    const length = end - start;
+    if (length <= 0)
+        return '';
+    const fd = openSync(file, 'r');
+    try {
+        const buffer = Buffer.alloc(length);
+        const read = readSync(fd, buffer, 0, length, start);
+        return buffer.subarray(0, read).toString('utf8');
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Tail window ending at `size`, aligned to a line start (or BOF). */
+function readAlignedTailWindow(file, size, wantLines) {
+    for (let window = INITIAL_TAIL_WINDOW_BYTES;; window *= 2) {
+        const start = Math.max(0, size - window);
+        const chunk = readFileRange(file, start, size);
+        if (start === 0)
+            return chunk;
+        const newlineCount = chunk.split('\n').length - 1;
+        // Need wantLines complete lines AFTER dropping the leading partial line a
+        // mid-file window start produces (plus a possible unterminated tail).
+        if (newlineCount > wantLines + 1 || window >= MAX_TAIL_WINDOW_BYTES) {
+            return chunk.slice(chunk.indexOf('\n') + 1);
+        }
+    }
+}
+/**
+ * Print the last N lines of every existing source, then follow appends.
+ * Correctness boundaries this models explicitly:
+ *  - An unterminated trailing line is NEVER emitted as a line; it is carried
+ *    as `partial` (from the initial tail too) and emitted once completed, so
+ *    "abc" + later "def\n" prints one "abcdef" line.
+ *  - Atomic rotation (rename + recreate at the same path) is detected by
+ *    dev+ino generation identity, not by size heuristics — a new file whose
+ *    size already exceeds the old offset would otherwise be read mid-stream.
+ *    (On filesystems reporting ino=0 this degrades to the size checks.)
+ *  - In-place truncation (`pm2 flush`) resets to the top of the new content.
+ *  - Files may appear later (fleet starts while tailing) or disappear.
+ */
+export class LogFileFollower {
+    states;
+    writeLine;
+    pollIntervalMs;
+    timer;
+    constructor(opts) {
+        this.states = opts.sources.map(source => ({
+            source, offset: undefined, partial: '', dev: undefined, ino: undefined,
+        }));
+        this.writeLine = opts.writeLine;
+        this.pollIntervalMs = opts.pollIntervalMs ?? 300;
+    }
+    /** Emit the initial `--lines` window and position offsets at end-of-file. */
+    printInitialTail(lines) {
+        for (const state of this.states) {
+            if (!existsSync(state.source.file))
+                continue;
+            let stats;
+            try {
+                stats = statSync(state.source.file);
+            }
+            catch {
+                continue;
+            }
+            let chunk;
+            try {
+                chunk = readAlignedTailWindow(state.source.file, stats.size, lines);
+            }
+            catch {
+                continue;
+            }
+            let complete = chunk;
+            if (chunk.length > 0 && !chunk.endsWith('\n')) {
+                const cut = chunk.lastIndexOf('\n');
+                state.partial = chunk.slice(cut + 1);
+                complete = cut >= 0 ? chunk.slice(0, cut + 1) : '';
+            }
+            for (const line of lastLinesOfChunk(complete, lines)) {
+                this.writeLine(formatLogLine(state.source, line));
+            }
+            state.offset = stats.size;
+            state.dev = stats.dev;
+            state.ino = stats.ino;
+        }
+    }
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => this.pollOnce(), this.pollIntervalMs);
+    }
+    stop() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = undefined;
+    }
+    /** One poll pass; exposed so tests can drive it deterministically. */
+    pollOnce() {
+        for (const state of this.states) {
+            let stats;
+            try {
+                stats = statSync(state.source.file);
+            }
+            catch {
+                // Absent (not yet created, or rotated away): forget position so the
+                // file is picked up from its start when it (re)appears.
+                state.offset = undefined;
+                state.partial = '';
+                state.dev = undefined;
+                state.ino = undefined;
+                continue;
+            }
+            const sameGeneration = state.dev === stats.dev && state.ino === stats.ino;
+            if (state.offset === undefined || !sameGeneration) {
+                // Newly appeared file, or an atomic replace under the same path:
+                // this is a different byte stream, so any carried position/partial
+                // belongs to the OLD generation and must be dropped unconditionally.
+                state.offset = 0;
+                state.partial = '';
+            }
+            else if (stats.size < state.offset) {
+                // Truncated in place (pm2 flush): restart from the top of the new
+                // content instead of replaying or reading past EOF.
+                state.offset = 0;
+                state.partial = '';
+            }
+            state.dev = stats.dev;
+            state.ino = stats.ino;
+            if (stats.size === state.offset)
+                continue;
+            let chunk;
+            try {
+                chunk = readFileRange(state.source.file, state.offset, stats.size);
+            }
+            catch {
+                continue;
+            }
+            state.offset = stats.size;
+            const combined = state.partial + chunk;
+            const parts = combined.split('\n');
+            state.partial = parts.pop() ?? '';
+            for (const line of parts) {
+                this.writeLine(formatLogLine(state.source, line));
+            }
+        }
+    }
+}
+//# sourceMappingURL=log-tail.js.map