botmux 3.14.0 → 3.16.0

package/dist/dashboard/preview-contract.js

@@ -0,0 +1,198 @@
+import { isPreviewLoopbackHost, previewBackendSupported, safeSessionPreviewTarget, sessionPreviewDescriptor, sessionPreviewFingerprint, } from '../core/session-preview.js';
+/** Internal daemon rows carry the literal loopback target so the central
+ * dashboard can proxy it. Browser rows never do: they receive only a
+ * same-origin path plus a timestamp.
+ *
+ * Riff 矩阵：远端 sandbox 会话在 daemon 的 loopback 上不可能有 Web 服务，注册路由
+ * 已经拒绝它们；这里再拦一道，让任何来源（历史行、切后端前留下的行）都不会给
+ * 浏览器一个点进去必然失败的预览入口。 */
+export function projectSessionPreviewForBrowser(session) {
+    if (!session || typeof session !== 'object' || Array.isArray(session))
+        return session;
+    const source = session;
+    const { previewTarget: _previewTarget, preview: _stalePreview, ...rest } = source;
+    const sessionId = typeof source.sessionId === 'string' ? source.sessionId : '';
+    const preview = sessionId && previewBackendSupported(source.backendType)
+        ? sessionPreviewDescriptor(sessionId, source.previewTarget)
+        : undefined;
+    return preview ? { ...rest, preview } : rest;
+}
+export function projectSessionPreviewsForBrowser(sessions) {
+    if (!Array.isArray(sessions))
+        return sessions;
+    return sessions.map(projectSessionPreviewForBrowser);
+}
+/** Projection for daemon `GET /api/sessions/:id` envelopes. Keep this beside
+ * the list/SSE projectors so every browser delivery path shares one rule. */
+export function projectSessionDetailForBrowser(body) {
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return body;
+    const source = body;
+    if (!Object.prototype.hasOwnProperty.call(source, 'session'))
+        return body;
+    return { ...source, session: projectSessionPreviewForBrowser(source.session) };
+}
+/** Apply the identical projection to the central SSE stream. A future clear
+ * patch maps to `preview: null`, ensuring browser stores discard stale state. */
+export function projectSessionPreviewEventForBrowser(type, body) {
+    if (!body || typeof body !== 'object' || Array.isArray(body))
+        return body;
+    const eventBody = body;
+    if (type === 'session.spawned') {
+        return {
+            ...eventBody,
+            session: projectSessionPreviewForBrowser(eventBody.session),
+        };
+    }
+    if (type === 'session.update'
+        && eventBody.patch
+        && typeof eventBody.patch === 'object'
+        && !Array.isArray(eventBody.patch)) {
+        const rawPatch = eventBody.patch;
+        const hasTarget = Object.prototype.hasOwnProperty.call(rawPatch, 'previewTarget');
+        const hasStalePreview = Object.prototype.hasOwnProperty.call(rawPatch, 'preview');
+        if (!hasTarget && !hasStalePreview)
+            return body;
+        const { previewTarget, preview: _stalePreview, ...patch } = rawPatch;
+        if (!hasTarget)
+            return { ...eventBody, patch };
+        const sessionId = typeof eventBody.sessionId === 'string' ? eventBody.sessionId : '';
+        const descriptor = sessionId
+            ? sessionPreviewDescriptor(sessionId, previewTarget)
+            : undefined;
+        return {
+            ...eventBody,
+            patch: { ...patch, preview: descriptor ?? null },
+        };
+    }
+    return body;
+}
+/** Resolve an aggregator row under positive session + daemon ownership proof.
+ * The requested URL never supplies a host or port; both come solely from this
+ * exact owned row and are revalidated as literal loopback data. */
+export function resolveSessionPreviewFromRow(input) {
+    if (!input.row || typeof input.row !== 'object' || Array.isArray(input.row)) {
+        return { ok: false, status: 404, error: 'unknown_session' };
+    }
+    const row = input.row;
+    if (typeof row.sessionId !== 'string'
+        || row.sessionId !== input.sessionId
+        || typeof row.larkAppId !== 'string'
+        || !input.ownerLarkAppId
+        || row.larkAppId !== input.ownerLarkAppId) {
+        return { ok: false, status: 404, error: 'session_owner_mismatch' };
+    }
+    if (row.status === 'closed') {
+        return { ok: false, status: 409, error: 'session_not_active' };
+    }
+    // Riff/远端 backend：不是「暂时连不上」，是这条路径在这种会话上根本不存在。
+    if (!previewBackendSupported(row.backendType)) {
+        return { ok: false, status: 501, error: 'preview_unsupported' };
+    }
+    const target = safeSessionPreviewTarget(row.previewTarget);
+    if (target)
+        return { ok: true, target };
+    if (row.previewTarget !== undefined && row.previewTarget !== null) {
+        const raw = typeof row.previewTarget === 'object' && !Array.isArray(row.previewTarget)
+            ? row.previewTarget
+            : undefined;
+        if (raw && !isPreviewLoopbackHost(raw.host)) {
+            return { ok: false, status: 403, error: 'remote_host_forbidden' };
+        }
+        return { ok: false, status: 409, error: 'invalid_preview_target' };
+    }
+    return { ok: false, status: 404, error: 'preview_not_registered' };
+}
+/**
+ * 中央 Dashboard 每一跳预览请求的完整判定。顺序即安全次序，任何一步失败都不代理：
+ *
+ *   会话归属 → 会话仍活着 → backend 支持预览 → 目标本身合法 → 拥有它的 daemon 在线
+ *   → **端口此刻仍由注册时那个进程持有**（P1-12）。
+ *
+ * 最后一条是每次落地前都要重跑的：注册时的一次 TCP connect 只证明当时有人在监听，
+ * 而 dev server 退出后端口号会被内核回收，下一个抢到它的本机进程就继承了这条已登录
+ * 用户可达的同源代理路由。判定失效时同步回 `preview_target_stale`，并通过
+ * `onStaleTarget` 触发收口（断掉既有预览长连接、收回交互租约、让 daemon 清 target 并
+ * 广播 `preview: null`）。
+ */
+export function resolveSessionPreviewForProxy(input) {
+    const resolution = resolveSessionPreviewFromRow({
+        row: input.row,
+        sessionId: input.sessionId,
+        ownerLarkAppId: input.ownerLarkAppId,
+    });
+    if (!resolution.ok)
+        return resolution;
+    if (!input.ownerLarkAppId || !input.daemonOnline) {
+        return { ok: false, status: 503, error: 'daemon_offline' };
+    }
+    if (!input.isTargetOwned(resolution.target)) {
+        input.onStaleTarget?.(input.sessionId, resolution.target);
+        return { ok: false, status: 409, error: 'preview_target_stale' };
+    }
+    return resolution;
+}
+export function previewDescriptorFromRow(row) {
+    if (!row || typeof row !== 'object' || Array.isArray(row))
+        return undefined;
+    const source = row;
+    if (typeof source.sessionId !== 'string')
+        return undefined;
+    if (!previewBackendSupported(source.backendType))
+        return undefined;
+    return sessionPreviewDescriptor(source.sessionId, source.previewTarget);
+}
+/**
+ * P1-1：daemon 生命周期事件 → 「这个会话的预览长连接要不要收口」。
+ *
+ * 原来只认两件事：`session.exited`，以及带 `previewTarget` 的 `session.update`。
+ * 漏掉的是 `session.spawned`——daemon 的 `/api/events` **每次**被连上都会把全部会话
+ * 重放成 spawned（SSE attach 的确定性重放），而 daemon 重启期间广播的
+ * `preview: null` 是丢的（事件总线没有 replay buffer），重连之后只以 spawned 形式
+ * 补齐。于是「目标已经没了，浏览器那条流还在流」这一支完全不在收口范围内。
+ *
+ * 但 spawned 不能无条件收口：aggregator 在通知监听器**之前**就把整行覆盖掉了，
+ * 每次 SSE 重连都会重放全部会话，无条件 teardown 等于每次重连误杀全部预览长连接。
+ * 所以 dashboard 侧自记一份「上次见过的目标指纹」，只有指纹**确实变了**才收口；
+ * 第一次见到某个会话不算变（那是重放/新建，不是换靶）。
+ *
+ * `lastSeenFingerprints` 由调用方持有并在此原地更新——收口判据和记忆必须是同一个
+ * 动作，分开写迟早会漏更新一条分支。
+ */
+export function previewTeardownForDaemonEvent(event, lastSeenFingerprints) {
+    const body = event.body && typeof event.body === 'object' && !Array.isArray(event.body)
+        ? event.body
+        : {};
+    if (event.type === 'session.exited') {
+        const sessionId = typeof body.sessionId === 'string' ? body.sessionId : undefined;
+        if (!sessionId)
+            return undefined;
+        lastSeenFingerprints.delete(sessionId);
+        return sessionId;
+    }
+    if (event.type === 'session.spawned') {
+        const row = body.session && typeof body.session === 'object' && !Array.isArray(body.session)
+            ? body.session
+            : undefined;
+        const sessionId = typeof row?.sessionId === 'string' ? row.sessionId : undefined;
+        if (!sessionId)
+            return undefined;
+        const fingerprint = sessionPreviewFingerprint(row?.previewTarget);
+        const previous = lastSeenFingerprints.get(sessionId);
+        lastSeenFingerprints.set(sessionId, fingerprint);
+        return previous !== undefined && previous !== fingerprint ? sessionId : undefined;
+    }
+    if (event.type !== 'session.update')
+        return undefined;
+    const sessionId = typeof body.sessionId === 'string' ? body.sessionId : undefined;
+    const patch = body.patch && typeof body.patch === 'object' && !Array.isArray(body.patch)
+        ? body.patch
+        : undefined;
+    if (!sessionId || !patch || !Object.prototype.hasOwnProperty.call(patch, 'previewTarget')) {
+        return undefined;
+    }
+    // 记忆同步更新，否则下一次 SSE 重放会把「已经处理过的这次变更」再当成一次变更。
+    lastSeenFingerprints.set(sessionId, sessionPreviewFingerprint(patch.previewTarget));
+    return sessionId;
+}
+//# sourceMappingURL=preview-contract.js.map

package/dist/dashboard/preview-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-contract.js","sourceRoot":"","sources":["../../src/dashboard/preview-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,GAG1B,MAAM,4BAA4B,CAAC;AAEpC;;;;;;wBAMwB;AACxB,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,MAAM,MAAM,GAAG,OAAkC,CAAC;IAClD,MAAM,EACJ,aAAa,EAAE,cAAc,EAC7B,OAAO,EAAE,aAAa,EACtB,GAAG,IAAI,EACR,GAAG,MAAM,CAAC;IACX,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,SAAS,IAAI,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC;QACtE,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,QAAmB;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,QAAQ,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;AACvD,CAAC;AAED;6EAC6E;AAC7E,MAAM,UAAU,8BAA8B,CAAC,IAAa;IAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,IAA+B,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,+BAA+B,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;iFACiF;AACjF,MAAM,UAAU,oCAAoC,CAAC,IAAY,EAAE,IAAa;IAC9E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,SAAS,GAAG,IAA+B,CAAC;IAClD,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO;YACL,GAAG,SAAS;YACZ,OAAO,EAAE,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC;SAC5D,CAAC;IACJ,CAAC;IACD,IACE,IAAI,KAAK,gBAAgB;WACtB,SAAS,CAAC,KAAK;WACf,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;WACnC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAClC,CAAC;QACD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAgC,CAAC;QAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,GAAG,QAAQ,CAAC;QACrE,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,UAAU,GAAG,SAAS;YAC1B,CAAC,CAAC,wBAAwB,CAAC,SAAS,EAAE,aAAa,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;QACd,OAAO;YACL,GAAG,SAAS;YACZ,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI,EAAE;SACjD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD;;mEAEmE;AACnE,MAAM,UAAU,4BAA4B,CAAC,KAI5C;IACC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAA8B,CAAC;IACjD,IACE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;WAC9B,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WACjC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;WACjC,CAAC,KAAK,CAAC,cAAc;WACrB,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,cAAc,EACzC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACjE,CAAC;IACD,8CAA8C;IAC9C,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACxC,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClE,MAAM,GAAG,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YACpF,CAAC,CAAC,GAAG,CAAC,aAAwC;YAC9C,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAAC,KAS7C;IACC,MAAM,UAAU,GAAG,4BAA4B,CAAC;QAC9C,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,KAAK,CAAC,aAAa,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACnE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3D,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,wBAAwB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,6BAA6B,CAC3C,KAAsC,EACtC,oBAAyC;IAEzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QACrF,CAAC,CAAC,KAAK,CAAC,IAA+B;QACvC,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC1F,CAAC,CAAC,IAAI,CAAC,OAAkC;YACzC,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,SAAS,GAAG,OAAO,GAAG,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,MAAM,WAAW,GAAG,yBAAyB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACjD,OAAO,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACtF,CAAC,CAAC,IAAI,CAAC,KAAgC;QACvC,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,4CAA4C;IAC5C,oBAAoB,CAAC,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IACpF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/dashboard/preview-guard-page.d.ts

@@ -0,0 +1,52 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { type PreviewProxyResolution } from './preview-proxy.js';
+export interface PreviewGuardPageOptions {
+    authenticated(req: IncomingMessage): boolean;
+    resolve(sessionId: string): PreviewProxyResolution;
+    /** Mint the path-scoped capability for this request's identity. Null fails
+     *  the page closed rather than falling back to a cookie-authenticated
+     *  (and therefore same-origin-usable) content URL. */
+    mintContentCapability(req: IncomingMessage, sessionId: string): {
+        token: string;
+        expiresAt: number;
+    } | null;
+    /**
+     * P1-11：给这张壳现签一枚绑定当前认证会话的 CSRF 票据。壳自己会 POST
+     * unlock/activity/lock，是控制类端点的合法调用方之一，必须带票据；返回 null
+     * 时壳照常渲染（预览只读可用），解锁按钮会被服务端 403 挡住。
+     */
+    mintCsrfToken?(req: IncomingMessage): string | null;
+    /**
+     * P2（readonly 解锁按钮）：这个身份到底能不能解锁交互。必填，调用方必须显式
+     * 用与工作台按钮同一份能力投影（`projectWorkbenchOperationCapabilities` 的
+     * `canInteract`）回答，不给隐式默认值——漏接就编译不过，而不是悄悄把按钮画给
+     * 只读身份。
+     */
+    canInteract(req: IncomingMessage): boolean;
+}
+export interface PreviewGuardRenderOptions {
+    /** 渲染时刻（毫秒），只用于算 capability 续期倒计时。默认 `Date.now()`。 */
+    now?: number;
+    /** P1-11：本壳自己 POST 控制端点时带的一次性 CSRF 票据。 */
+    csrfToken?: string | null;
+    /**
+     * P2：该身份能否解锁交互。false（平台 teammate/guest 这类 readonly 身份）时
+     * 壳里根本不渲染解锁/锁定按钮——那两个 POST 只会被服务端 403，画出来是把
+     * 「点了才知道没权限」当交互；同时壳内部把交互态钉死在关闭状态，任何
+     * `mode: 'interactive'` 的状态响应都掀不开蒙层。渲染按钮不等于放大权限，
+     * 不渲染也不等于额外收紧：服务端门禁始终是唯一权威。
+     */
+    canInteract: boolean;
+}
+export declare function previewGuardHtml(sessionId: string, capability: {
+    token: string;
+    expiresAt: number;
+}, options: PreviewGuardRenderOptions): string;
+/**
+ * Serve only the descriptor root. All subpaths and the reserved iframe content
+ * request continue through the hardened preview proxy unchanged.
+ */
+export declare function createPreviewGuardPage(options: PreviewGuardPageOptions): {
+    handle(req: IncomingMessage, res: ServerResponse, url: URL): boolean;
+};
+//# sourceMappingURL=preview-guard-page.d.ts.map

package/dist/dashboard/preview-guard-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-guard-page.d.ts","sourceRoot":"","sources":["../../src/dashboard/preview-guard-page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAUzF,MAAM,WAAW,uBAAuB;IACtC,aAAa,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;IAC7C,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,sBAAsB,CAAC;IACnD;;0DAEsD;IACtD,qBAAqB,CACnB,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,GAChB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,aAAa,CAAC,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAAC;IACpD;;;;;OAKG;IACH,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,sDAAsD;IACtD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,EAAE,OAAO,CAAC;CACtB;AAsBD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAChD,OAAO,EAAE,yBAAyB,GACjC,MAAM,CA+ER;AAWD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG;IACxE,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC;CACtE,CAqCA"}

package/dist/dashboard/preview-guard-page.js

@@ -0,0 +1,162 @@
+import { PREVIEW_ROUTE_PREFIX, sessionPreviewContentPath, } from '../core/session-preview.js';
+import { PREVIEW_SANDBOX_TOKENS } from './preview-proxy.js';
+import { PREVIEW_DEFAULT_MODE_LABEL, PREVIEW_OVERLAY_SECURITY_NOTICE, } from './preview-interaction.js';
+/** Reload the shell this long before the content capability dies, so a pane
+ *  left open for hours re-mints instead of silently 401-ing its subresources. */
+const CAPABILITY_REFRESH_LEAD_MS = 30_000;
+function exactRootSessionId(url) {
+    if (url.search || !url.pathname.startsWith(`${PREVIEW_ROUTE_PREFIX}/`)) {
+        return undefined;
+    }
+    const afterPrefix = url.pathname.slice(PREVIEW_ROUTE_PREFIX.length + 1);
+    const raw = afterPrefix.endsWith('/') ? afterPrefix.slice(0, -1) : afterPrefix;
+    if (!raw || raw.includes('/'))
+        return undefined;
+    let decoded;
+    try {
+        decoded = decodeURIComponent(raw);
+    }
+    catch {
+        return undefined;
+    }
+    return decoded && decoded.length <= 512 && !/[\\/\0]/.test(decoded) ? decoded : undefined;
+}
+function escapeJsonForScript(value) {
+    return JSON.stringify(value).replace(/</g, '\\u003c');
+}
+function csrfToken(options) {
+    return options.csrfToken ?? '';
+}
+export function previewGuardHtml(sessionId, capability, options) {
+    const now = options.now ?? Date.now();
+    const canInteract = options.canInteract;
+    const encoded = encodeURIComponent(sessionId);
+    const contentPath = sessionPreviewContentPath(sessionId, capability.token);
+    const statePath = `/api/sessions/${encoded}/preview-interaction`;
+    const defaultLabel = escapeJsonForScript(PREVIEW_DEFAULT_MODE_LABEL);
+    const notice = escapeJsonForScript(PREVIEW_OVERLAY_SECURITY_NOTICE);
+    // P1-11：票据只进本壳自己的 fetch 头，不落 DOM 属性、不进 URL。
+    const csrf = escapeJsonForScript(csrfToken(options));
+    // P2：只读身份看不到解锁入口，也看不到「返回预览模式」——它同样是只会 403 的
+    // POST。蒙层照常渲染，预览内容照常可看。
+    const unlockControl = canInteract
+        ? '<button id="unlock" type="button">解锁交互（15 分钟无操作后回锁）</button>'
+        : '<p class="readonly" id="readonly-note">你在这个会话上是只读身份，不能解锁交互；预览保持锁定，页面内容可以照常查看。</p>';
+    const lockControl = canInteract
+        ? '<button class="lock hidden" id="lock" type="button">返回预览模式</button>'
+        : '';
+    const introCopy = canInteract
+        ? '当前蒙层用于避免误触。需要操作应用时，请显式解锁交互。'
+        : '当前蒙层用于避免误触，并且你的身份没有交互权限。';
+    // Relative deadline, not an absolute timestamp: the browser clock may be
+    // skewed against the dashboard's and a wrong sign would mean either an
+    // instant reload loop or an expired frame.
+    const reloadInMs = Math.max(0, Math.min(capability.expiresAt - now - CAPABILITY_REFRESH_LEAD_MS, 2_147_483_000));
+    return `<!doctype html>
+<html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover">
+<meta name="referrer" content="no-referrer"><title>Botmux Web 预览</title>
+<style>*{box-sizing:border-box}html,body{margin:0;width:100%;height:100%;overflow:hidden;background:#111827;font:14px/1.5 system-ui;color:#f8fafc}.shell{position:relative;width:100%;height:100%}iframe{display:block;border:0;width:100%;height:100%;background:#fff}.bar{position:absolute;z-index:4;top:12px;left:12px;right:12px;display:flex;align-items:center;gap:8px;pointer-events:none}.badge,.lock{border:1px solid #94a3b8;border-radius:2px;background:#0f172ee8;color:#fff;padding:7px 12px}.lock{pointer-events:auto;cursor:pointer}.overlay{position:absolute;z-index:3;inset:0;display:grid;place-items:center;background:#0f172e30}.panel{max-width:520px;margin:24px;padding:22px;border:1px solid #cbd5e1;border-radius:4px;background:#0f172eee;text-align:center}.panel h1{margin:0 0 8px;font-size:20px}.panel p{margin:8px 0;color:#dbe4f0}.panel .notice{font-size:12px;color:#fbbf24}.panel .readonly{margin-top:10px;font-size:13px;color:#cbd5e1}.panel button{margin-top:10px;border:1px solid #60a5fa;border-radius:2px;background:#172554;color:#dbeafe;padding:9px 18px;cursor:pointer}.hidden{display:none}</style></head>
+<body><main class="shell"><iframe id="app" src="${contentPath}" title="Web 应用预览" sandbox="${PREVIEW_SANDBOX_TOKENS}" allow="clipboard-read; clipboard-write"></iframe>
+<div class="bar"><span class="badge" id="badge">${PREVIEW_DEFAULT_MODE_LABEL}</span>${lockControl}</div>
+<div class="overlay" id="overlay" data-can-interact="${canInteract ? 'true' : 'false'}"><section class="panel"><h1>${PREVIEW_DEFAULT_MODE_LABEL}</h1><p>${introCopy}</p><p class="notice">${PREVIEW_OVERLAY_SECURITY_NOTICE}</p>${unlockControl}</section></div></main>
+<script>(function(){
+var api=${escapeJsonForScript(statePath)},labelDefault=${defaultLabel},securityNotice=${notice},csrf=${csrf},canInteract=${canInteract ? 'true' : 'false'};
+var frame=document.getElementById('app'),overlay=document.getElementById('overlay'),badge=document.getElementById('badge'),unlock=document.getElementById('unlock'),lock=document.getElementById('lock');
+var deadlineTimer=0,statePollTimer=0,lastActivitySent=0,interactive=false;
+// P1-16：每个状态请求领一张带 generation 的票，只有最新一代的响应能动蒙层。
+// 显式 lock/unlock 会 abort 掉在途的轮询/activity 并作废它们的代号，所以「点锁定
+// 之前发出、点完之后才回来」的旧响应（典型是 activity 回的 interactive）会被直接
+// 丢弃，而不是把用户刚锁上的蒙层重新掀开、留一个直到下一轮 15s 轮询才自愈的窗口。
+var generation=0,pending=null;
+function begin(mutating){if(pending&&pending.controller){try{pending.controller.abort()}catch(e){}}pending={gen:++generation,mutating:!!mutating,controller:typeof AbortController==='function'?new AbortController():null};return pending}
+function settle(ticket){if(pending===ticket)pending=null;return ticket.gen===generation}
+function send(path,method,mutating){
+// 显式解锁/锁定在途时，观察类请求（轮询 GET、activity）让路：它们的响应只会
+// 反映点击之前的状态，抢在后面落地就是又一次「旧响应推翻新决定」。
+if(!mutating&&pending&&pending.mutating)return;
+var ticket=begin(mutating),h={'accept':'application/json'},init={method:method||'GET',credentials:'same-origin',headers:h};
+if(csrf)h['x-botmux-csrf']=csrf;
+if(ticket.controller)init.signal=ticket.controller.signal;
+fetch(api+(path||''),init).then(function(r){if(!r.ok)throw new Error('state');return r.json()}).then(function(state){if(settle(ticket))apply(state)},function(){if(settle(ticket))failClosed()})}
+function schedule(deadline){clearTimeout(deadlineTimer);if(!deadline)return;deadlineTimer=setTimeout(function(){send('', 'GET')},Math.max(0,deadline-Date.now())+25)}
+// canInteract=false 的身份永远停在锁定态：解锁 POST 只会 403，任何说 interactive
+// 的状态响应都不该在这张壳上掀开蒙层。
+function apply(state){interactive=canInteract&&state.mode==='interactive';overlay.classList.toggle('hidden',interactive);if(lock)lock.classList.toggle('hidden',!interactive);badge.textContent=state.label||labelDefault;schedule(interactive?state.idleExpiresAt:0)}
+function failClosed(){interactive=false;overlay.classList.remove('hidden');if(lock)lock.classList.add('hidden');badge.textContent=labelDefault;clearTimeout(deadlineTimer)}
+function activity(){if(!interactive)return;var now=Date.now();if(now-lastActivitySent<20000)return;lastActivitySent=now;send('/activity','POST')}
+// The framed document is an opaque origin, so its DOM is unreachable from here
+// by design. Idle refresh therefore rides on the host-observable signal that
+// focus moved into the preview — which also means the app can no longer
+// manufacture activity events to hold an interactive lease open forever.
+window.addEventListener('blur',function(){if(document.activeElement===frame)activity()});
+document.addEventListener('pointerdown',activity,{capture:true,passive:true});
+if(unlock)unlock.addEventListener('click',function(){send('/unlock','POST',true)});
+// 锁定先落地再发请求：这一步只会更严，请求卡住或失败都不该让蒙层继续开着。
+if(lock)lock.addEventListener('click',function(){failClosed();send('/lock','POST',true)});
+document.addEventListener('visibilitychange',function(){if(!document.hidden)send('', 'GET')});
+// Keep the limitation available to accessibility/debug tooling without ever
+// placing a credential in DOM state.
+overlay.setAttribute('data-security-notice',securityNotice);
+statePollTimer=setInterval(function(){if(!document.hidden)send('', 'GET')},15000);
+// The sandboxed frame authenticates by the capability embedded in its path, so
+// the shell must re-mint before that capability expires.
+if(${reloadInMs}>0)setTimeout(function(){location.reload()},${reloadInMs});
+send('', 'GET');
+})();</script></body></html>`;
+}
+function jsonError(res, status, error) {
+    res.writeHead(status, {
+        'content-type': 'application/json; charset=utf-8',
+        'cache-control': 'no-store',
+        'referrer-policy': 'no-referrer',
+    });
+    res.end(JSON.stringify({ ok: false, error }));
+}
+/**
+ * Serve only the descriptor root. All subpaths and the reserved iframe content
+ * request continue through the hardened preview proxy unchanged.
+ */
+export function createPreviewGuardPage(options) {
+    return {
+        handle(req, res, url) {
+            if (req.method !== 'GET' && req.method !== 'HEAD')
+                return false;
+            const sessionId = exactRootSessionId(url);
+            if (!sessionId)
+                return false;
+            if (!options.authenticated(req)) {
+                jsonError(res, 401, 'authentication_required');
+                return true;
+            }
+            const resolution = options.resolve(sessionId);
+            if (!resolution.ok) {
+                jsonError(res, resolution.status, resolution.error);
+                return true;
+            }
+            const capability = options.mintContentCapability(req, sessionId);
+            if (!capability) {
+                jsonError(res, 503, 'preview_capability_unavailable');
+                return true;
+            }
+            const html = previewGuardHtml(sessionId, capability, {
+                now: Date.now(),
+                csrfToken: options.mintCsrfToken?.(req) ?? null,
+                // P2：与工作台按钮同一份能力投影。只读身份拿到的壳里没有解锁入口。
+                canInteract: options.canInteract(req),
+            });
+            res.writeHead(200, {
+                'content-type': 'text/html; charset=utf-8',
+                'cache-control': 'no-store',
+                'referrer-policy': 'no-referrer',
+                'x-content-type-options': 'nosniff',
+                'content-security-policy': "default-src 'none'; frame-src 'self'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; frame-ancestors 'self' https://*.feishu.cn https://*.larksuite.com",
+            });
+            if (req.method === 'HEAD')
+                res.end();
+            else
+                res.end(html);
+            return true;
+        },
+    };
+}
+//# sourceMappingURL=preview-guard-page.js.map

package/dist/dashboard/preview-guard-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-guard-page.js","sourceRoot":"","sources":["../../src/dashboard/preview-guard-page.ts"],"names":[],"mappings":"AACA,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAA+B,MAAM,oBAAoB,CAAC;AACzF,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAElC;iFACiF;AACjF,MAAM,0BAA0B,GAAG,MAAM,CAAC;AA0C1C,SAAS,kBAAkB,CAAC,GAAQ;IAClC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QAAC,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IACtE,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,OAAkC;IACnD,OAAO,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,UAAgD,EAChD,OAAkC;IAElC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,yBAAyB,CAAC,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,iBAAiB,OAAO,sBAAsB,CAAC;IACjE,MAAM,YAAY,GAAG,mBAAmB,CAAC,0BAA0B,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,mBAAmB,CAAC,+BAA+B,CAAC,CAAC;IACpE,4CAA4C;IAC5C,MAAM,IAAI,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,4CAA4C;IAC5C,wBAAwB;IACxB,MAAM,aAAa,GAAG,WAAW;QAC/B,CAAC,CAAC,8DAA8D;QAChE,CAAC,CAAC,mFAAmF,CAAC;IACxF,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,qEAAqE;QACvE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,WAAW;QAC3B,CAAC,CAAC,6BAA6B;QAC/B,CAAC,CAAC,0BAA0B,CAAC;IAC/B,yEAAyE;IACzE,uEAAuE;IACvE,2CAA2C;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,GAAG,0BAA0B,EAAE,aAAa,CAAC,CACjF,CAAC;IACF,OAAO;;;;kDAIyC,WAAW,+BAA+B,sBAAsB;kDAChE,0BAA0B,UAAU,WAAW;uDAC1C,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,gCAAgC,0BAA0B,WAAW,SAAS,yBAAyB,+BAA+B,OAAO,aAAa;;UAErO,mBAAmB,CAAC,SAAS,CAAC,iBAAiB,YAAY,mBAAmB,MAAM,SAAS,IAAI,gBAAgB,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwCpJ,UAAU,+CAA+C,UAAU;;6BAE3C,CAAC;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,KAAa;IACnE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,eAAe,EAAE,UAAU;QAC3B,iBAAiB,EAAE,aAAa;KACjC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgC;IAGrE,OAAO;QACL,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG;YAClB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChE,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,CAAC;gBAC/C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;gBACpD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,qBAAqB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACjE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,gCAAgC,CAAC,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE;gBACnD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;gBACf,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI;gBAC/C,oCAAoC;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC;aACtC,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,0BAA0B;gBAC1C,eAAe,EAAE,UAAU;gBAC3B,iBAAiB,EAAE,aAAa;gBAChC,wBAAwB,EAAE,SAAS;gBACnC,yBAAyB,EAAE,sMAAsM;aAClO,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,GAAG,CAAC,GAAG,EAAE,CAAC;;gBAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/dashboard/preview-interaction.d.ts

@@ -0,0 +1,57 @@
+import { type ControlAuditSink } from './control-audit.js';
+import type { TerminalDashboardActor } from './terminal-control.js';
+/** Product contract: interaction always relocks after fifteen idle minutes. */
+export declare const PREVIEW_INTERACTION_IDLE_MS: number;
+export declare const PREVIEW_DEFAULT_MODE_LABEL = "\u9884\u89C8\u6A21\u5F0F\uFF08\u9ED8\u8BA4\uFF09";
+export declare const PREVIEW_INTERACTIVE_MODE_LABEL = "\u4EA4\u4E92\u6A21\u5F0F";
+export declare const PREVIEW_OVERLAY_SECURITY_NOTICE = "\u4EA4\u4E92\u8499\u5C42\u4EC5\u7528\u4E8E\u9632\u6B62\u8BEF\u89E6\uFF0C\u4E0D\u662F\u5E94\u7528\u7EA7\u5F3A\u53EA\u8BFB\u5B89\u5168\u8FB9\u754C\u3002";
+export interface PreviewInteractionState {
+    mode: 'preview' | 'interactive';
+    label: string;
+    securityNotice: string;
+    idleExpiresAt?: number;
+}
+export interface PreviewInteractionManagerOptions {
+    audit: ControlAuditSink;
+    now?: () => number;
+    setTimer?: typeof setTimeout;
+    clearTimer?: typeof clearTimeout;
+}
+/**
+ * Server-owned preview interaction state. Unlock and activity are explicit;
+ * both the scheduled timer and lazy reads enforce the exact idle deadline.
+ * This state drives a browser overlay only—it does not claim to neutralize
+ * scripts or network side effects inside the proxied application.
+ */
+export declare class PreviewInteractionManager {
+    private readonly leases;
+    private readonly audit;
+    private readonly now;
+    private readonly schedule;
+    private readonly cancel;
+    private generation;
+    constructor(opts: PreviewInteractionManagerOptions);
+    state(actor: TerminalDashboardActor, sessionId: string): PreviewInteractionState;
+    unlock(actor: TerminalDashboardActor, sessionId: string): PreviewInteractionState;
+    activity(actor: TerminalDashboardActor, sessionId: string): PreviewInteractionState;
+    lock(actor: TerminalDashboardActor, sessionId: string): PreviewInteractionState;
+    /**
+     * P1-13：把某个**业务会话**上的交互授权全部收回，不论持有者是谁。
+     *
+     * 交互解锁是「我确认要操作**这个**预览目标」的授权，绑定的是当时那一代 worker 起
+     * 的那个 Web 服务。worker 换代、切 CLI、会话 close→resume、端口易主之后，目标已经
+     * 是另一个进程，旧租约不能顺延：否则 resume 出来的新一代 CLI（或抢到同一端口的别的
+     * 进程）一上来就落在「交互模式」里，用户从未对它点过解锁。收回后回到默认预览模式，
+     * 需要重新显式解锁。
+     */
+    relockSession(sessionId: string): number;
+    relockAuthSession(authSessionId: string): number;
+    expireDue(): number;
+    private liveLease;
+    private arm;
+    private expire;
+    private remove;
+    private previewState;
+    private interactiveState;
+}
+//# sourceMappingURL=preview-interaction.d.ts.map

package/dist/dashboard/preview-interaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-interaction.d.ts","sourceRoot":"","sources":["../../src/dashboard/preview-interaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEpE,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,QAAc,CAAC;AACvD,eAAO,MAAM,0BAA0B,qDAAa,CAAC;AACrD,eAAO,MAAM,8BAA8B,6BAAS,CAAC;AACrD,eAAO,MAAM,+BAA+B,2JAA8B,CAAC;AAa3E,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,SAAS,GAAG,aAAa,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,gBAAgB,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,UAAU,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,YAAY,CAAC;CAClC;AAMD;;;;;GAKG;AACH,qBAAa,yBAAyB;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,UAAU,CAAK;gBAEX,IAAI,EAAE,gCAAgC;IAOlD,KAAK,CAAC,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,GAAG,uBAAuB;IAKhF,MAAM,CAAC,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,GAAG,uBAAuB;IAoBjF,QAAQ,CAAC,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,GAAG,uBAAuB;IAcnF,IAAI,CAAC,KAAK,EAAE,sBAAsB,EAAE,SAAS,EAAE,MAAM,GAAG,uBAAuB;IAc/E;;;;;;;;OAQG;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAoBxC,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM;IAoBhD,SAAS,IAAI,MAAM;IAWnB,OAAO,CAAC,SAAS;IAYjB,OAAO,CAAC,GAAG;IAeX,OAAO,CAAC,MAAM;IAYd,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,gBAAgB;CAQzB"}