botmux 3.14.0 → 3.16.0

package/dist/dashboard/terminal-view-capability.js

@@ -0,0 +1,145 @@
+import { deriveWorkerViewGeneration, issueTerminalControlGrant, looksLikeTerminalControlGrant, signTerminalViewForward, verifyTerminalControlGrant, } from '../core/terminal-control-grant.js';
+/**
+ * Short-lived read capability for the `/api/sessions/:id/view-link` URL.
+ *
+ * The link used to embed the worker's STABLE view token — an irrevocable
+ * bearer capability: an H5 viewer who fetched it once could keep reading the
+ * terminal long after logout/expiry, and a worker restart re-derived the same
+ * value. The view-link URL now carries a signed read grant instead, bound to
+ * sessionId + authSessionId + expiresAt.
+ *
+ * That alone was still bypassable (P1-5, second round): the returned URL kept
+ * the DAEMON/WORKER origin, so a copied raw URL — or a direct dial to the
+ * worker port / the daemon's own network-bound `/s/` reverse proxy — reached a
+ * stateless verifier that knew nothing about logout. Central revocation was
+ * decoration on a road nobody had to drive. Two changes close it, and the
+ * capability now names both of them in its own claims:
+ *
+ *   • CENTRAL-ONLY CONSUMPTION. `centralViewLinkPath` returns a same-origin
+ *     path on the central dashboard (`/s/<id>/?viewToken=…`) — the daemon /
+ *     worker origin never leaves this process. The capability is minted with
+ *     `audience: 'central'`, and the front proxy countersigns each accepted
+ *     capability with a forward proof the browser cannot compute. The worker
+ *     demands both, so a raw URL pointed at any other entry point fails closed
+ *     even though its signature and expiry are perfectly valid.
+ *   • WORKER GENERATION PINNING. The capability carries the worker's per-boot
+ *     generation (derived one-way from the boot view token the daemon already
+ *     reports). A worker restart re-randomizes it, so grants issued to a dead
+ *     boot die with it instead of surviving on the shared `.dashboard-secret`.
+ *
+ * Revocation therefore has two independent fences: the front proxy refuses a
+ * capability whose auth session ended (and closes its bridged sockets), and the
+ * worker refuses one that did not come through that proxy or that outlived the
+ * boot it was minted for.
+ *
+ * The TTL doubles as the periodic reconnect boundary for read sockets, so it
+ * is deliberately longer than the old 60s per-request read grants (which now
+ * share this constant) but still short enough that a copied URL dies quickly.
+ */
+export const TERMINAL_VIEW_CAPABILITY_TTL_MS = 10 * 60_000;
+/** Mint the short-lived, identity-bound read capability for one session.
+ *  `workerGeneration` pins the capability to the worker boot it was minted
+ *  against — see `upstreamWorkerViewGeneration`. */
+export function mintTerminalViewCapability(secret, sessionId, identity, workerGeneration, now = Date.now()) {
+    const expiresAt = Math.min(identity.expiresAt, now + TERMINAL_VIEW_CAPABILITY_TTL_MS);
+    if (!Number.isSafeInteger(expiresAt) || expiresAt <= now)
+        return null;
+    try {
+        return {
+            token: issueTerminalControlGrant(secret, {
+                scope: 'read',
+                sessionId,
+                userId: identity.userId,
+                authSessionId: identity.authSessionId,
+                issuedAt: now,
+                expiresAt,
+                audience: 'central',
+                workerGeneration,
+            }),
+            expiresAt,
+        };
+    }
+    catch {
+        // Out-of-shape identities (empty ids, control chars) and a missing/blank
+        // worker generation fail closed: the caller returns an error instead of
+        // falling back to any stable token or to an unpinned capability.
+        return null;
+    }
+}
+/**
+ * Read the worker boot generation out of the daemon-built view-link URL.
+ *
+ * That upstream URL still carries the worker's per-boot card token in
+ * `?viewToken=` — the one value that identifies the live worker generation and
+ * that this process must never pass through to a browser. We convert it to a
+ * one-way generation id here and drop the token itself.
+ *
+ * Fails closed (null) on a malformed URL, a non-http(s) scheme, a missing
+ * token, or an upstream that already handed us a signed grant: without a
+ * generation the caller must return an error rather than mint an unpinned
+ * capability.
+ */
+export function upstreamWorkerViewGeneration(secret, upstreamUrl) {
+    if (typeof upstreamUrl !== 'string' || !upstreamUrl)
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(upstreamUrl);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        return null;
+    return deriveWorkerViewGeneration(secret, parsed.searchParams.get('viewToken'));
+}
+/**
+ * Build the browser-facing view link: a CENTRAL-ORIGIN RELATIVE path, never an
+ * absolute URL. The daemon's terminal-proxy port and the worker port are both
+ * reachable on the network and neither knows anything about auth-session
+ * liveness, so publishing either origin is the whole bypass — a relative path
+ * cannot name them, and cannot be repointed by a poisoned `Host` header the way
+ * a server-rebuilt absolute URL could.
+ *
+ * The path shape matches the front proxy's `/s/<sessionId>` route, which is
+ * also what the daemon's proxy and the worker accept after the loopback hops.
+ */
+export function centralViewLinkPath(sessionId, token) {
+    if (!sessionId || !token)
+        return null;
+    if (sessionId.length > 512 || token.length > 4_096)
+        return null;
+    if (/[\r\n\0]/.test(sessionId) || /[\r\n\0]/.test(token))
+        return null;
+    return `/s/${encodeURIComponent(sessionId)}/?viewToken=${encodeURIComponent(token)}`;
+}
+/**
+ * Resolve which auth session a bound `?viewToken=` capability belongs to, or
+ * null when the value is not a valid bound read capability for this session.
+ * Used by the front proxy to (a) refuse capabilities whose auth session was
+ * already revoked and (b) index the bridged socket for logout-time closing.
+ *
+ * A grant without `audience: 'central'` is an internal loopback credential that
+ * was never meant to travel in a URL; it resolves to null so the proxy neither
+ * blesses it nor countersigns it.
+ */
+export function terminalViewCapabilityAuthSession(secret, sessionId, viewToken, now = Date.now()) {
+    if (!looksLikeTerminalControlGrant(viewToken))
+        return null;
+    const verified = verifyTerminalControlGrant(secret, viewToken, sessionId, now);
+    if (!verified.ok || verified.claims.scope !== 'read')
+        return null;
+    if (verified.claims.audience !== 'central')
+        return null;
+    return verified.claims.authSessionId;
+}
+/**
+ * Countersign one accepted view capability for the loopback hop. Only the front
+ * proxy calls this, and only after the capability's auth session was confirmed
+ * live — the proof is what tells the worker "this request came through the
+ * component that holds the revocation state".
+ */
+export function terminalViewForwardProof(secret, viewToken) {
+    return signTerminalViewForward(secret, viewToken) ?? undefined;
+}
+//# sourceMappingURL=terminal-view-capability.js.map

package/dist/dashboard/terminal-view-capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-view-capability.js","sourceRoot":"","sources":["../../src/dashboard/terminal-view-capability.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,GAAG,MAAM,CAAC;AAU3D;;oDAEoD;AACpD,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,SAAiB,EACjB,QAAwC,EACxC,gBAAwB,EACxB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,GAAG,+BAA+B,CAAC,CAAC;IACtF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACtE,IAAI,CAAC;QACH,OAAO;YACL,KAAK,EAAE,yBAAyB,CAAC,MAAM,EAAE;gBACvC,KAAK,EAAE,MAAM;gBACb,SAAS;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,QAAQ,EAAE,GAAG;gBACb,SAAS;gBACT,QAAQ,EAAE,SAAS;gBACnB,gBAAgB;aACjB,CAAC;YACF,SAAS;SACV,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,wEAAwE;QACxE,iEAAiE;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAc,EAAE,WAAoB;IAC/E,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB,EAAE,KAAa;IAClE,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,MAAM,kBAAkB,CAAC,SAAS,CAAC,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iCAAiC,CAC/C,MAAc,EACd,SAAiB,EACjB,SAAoC,EACpC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,CAAC,6BAA6B,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,SAAiB;IACxE,OAAO,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;AACjE,CAAC"}

package/dist/dashboard/web/agent-workbench-api.d.ts

@@ -0,0 +1,59 @@
+import type { WorkbenchH5Context } from './agent-workbench-chat.js';
+export interface TerminalControlState {
+    mode: 'readonly' | 'controlled';
+    owned: boolean;
+    expiresAt?: number;
+    reused?: boolean;
+    /** Trusted platform owners have a fixed role, not a releasable takeover lease. */
+    fixed?: boolean;
+}
+export interface PreviewInteractionState {
+    mode: 'preview' | 'interactive';
+    label: string;
+    securityNotice: string;
+    idleExpiresAt?: number;
+}
+export interface WorkbenchApi {
+    getTerminalControl(sessionId: string, signal?: AbortSignal): Promise<TerminalControlState>;
+    takeoverTerminal(sessionId: string, signal?: AbortSignal): Promise<TerminalControlState>;
+    releaseTerminal(sessionId: string, signal?: AbortSignal): Promise<TerminalControlState>;
+    getPreviewInteraction(sessionId: string, signal?: AbortSignal): Promise<PreviewInteractionState>;
+    unlockPreview(sessionId: string, signal?: AbortSignal): Promise<PreviewInteractionState>;
+    touchPreview(sessionId: string, signal?: AbortSignal): Promise<PreviewInteractionState>;
+    lockPreview(sessionId: string, signal?: AbortSignal): Promise<PreviewInteractionState>;
+    getH5Context(signal?: AbortSignal): Promise<WorkbenchH5Context | null>;
+    /** Capability URL for the read-only terminal (viewToken-bearing). The frame
+     *  authenticates by this capability, so it also works where no Dashboard
+     *  cookie exists — a Feishu WebView being the case that motivated it.
+     *  The server answers with a same-origin path and this client refuses
+     *  anything else (P1-5) — see `sameOriginViewLink`.
+     *  The capability is short-lived and bound to this login (P1-5): `expiresAt`
+     *  is when the server stops honoring it, so callers should fetch a fresh
+     *  link shortly before then (null when the server did not say). */
+    getTerminalViewLink(sessionId: string, signal?: AbortSignal): Promise<{
+        url: string;
+        expiresAt: number | null;
+    } | null>;
+    /** 让 bot 在会话原话题里发一条 @ 拥有者的定位标记。服务端对每个会话有 30s
+     *  限流，超了返回 429 + `retry-after`（见 WorkbenchApiError.retryAfterSeconds）。 */
+    locateSession(sessionId: string, signal?: AbortSignal): Promise<void>;
+    /** owner 自取的**常驻**工作台入口（`<base>/workbench?t=<当前活跃 token>`），
+     *  用来收藏进浏览器书签。只有本机完整管理身份取得到；其它身份服务端 401/404，
+     *  这里一律回落 null——「取不到」就是「没有这个入口」，绝不半开。
+     *  与 view-link 那条短时能力 URL 不同，这里返回的是长期凭证，所以调用方只在
+     *  用户显式点开弹层时才请求，不做预取。 */
+    getStandingLink(signal?: AbortSignal): Promise<{
+        url: string;
+    } | null>;
+}
+export declare class WorkbenchApiError extends Error {
+    readonly status: number;
+    readonly code: string;
+    /** 仅 429 有值：还要等多少秒才能重试。调用方据此显示冷却而不是报错。 */
+    readonly retryAfterSeconds?: number | undefined;
+    constructor(status: number, code: string, 
+    /** 仅 429 有值：还要等多少秒才能重试。调用方据此显示冷却而不是报错。 */
+    retryAfterSeconds?: number | undefined);
+}
+export declare function createWorkbenchApi(fetchImpl?: typeof fetch): WorkbenchApi;
+//# sourceMappingURL=agent-workbench-api.d.ts.map

package/dist/dashboard/web/agent-workbench-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-workbench-api.d.ts","sourceRoot":"","sources":["../../../src/dashboard/web/agent-workbench-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,GAAG,YAAY,CAAC;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kFAAkF;IAClF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,SAAS,GAAG,aAAa,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC3F,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzF,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxF,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACjG,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACzF,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACxF,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF,YAAY,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACvE;;;;;;;uEAOmE;IACnE,mBAAmB,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC7D;8EAC0E;IAC1E,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;6BAIyB;IACzB,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;CACxE;AAED,qBAAa,iBAAkB,SAAQ,KAAK;aAExB,MAAM,EAAE,MAAM;aACd,IAAI,EAAE,MAAM;IAC5B,0CAA0C;aAC1B,iBAAiB,CAAC,EAAE,MAAM;gBAH1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM;IAC5B,0CAA0C;IAC1B,iBAAiB,CAAC,EAAE,MAAM,YAAA;CAK7C;AA6ID,wBAAgB,kBAAkB,CAAC,SAAS,GAAE,OAAO,KAAa,GAAG,YAAY,CAuGhF"}

package/dist/dashboard/web/agent-workbench-api.js

@@ -0,0 +1,227 @@
+import { controlCsrfHeaders } from './control-csrf.js';
+export class WorkbenchApiError extends Error {
+    status;
+    code;
+    retryAfterSeconds;
+    constructor(status, code, 
+    /** 仅 429 有值：还要等多少秒才能重试。调用方据此显示冷却而不是报错。 */
+    retryAfterSeconds) {
+        super(code);
+        this.status = status;
+        this.code = code;
+        this.retryAfterSeconds = retryAfterSeconds;
+        this.name = 'WorkbenchApiError';
+    }
+}
+/** 限流响应把等待时长放在 `retry-after` 头（秒）里，body 另带 `retryAfterMs`。
+ *  取头优先、body 兜底，两者都没有就返回 undefined（调用方退化成普通错误）。 */
+function parseRetryAfter(response, body) {
+    if (response.status !== 429)
+        return undefined;
+    const header = Number(response.headers?.get?.('retry-after'));
+    if (Number.isFinite(header) && header > 0)
+        return Math.ceil(header);
+    const ms = Number(body?.retryAfterMs);
+    if (Number.isFinite(ms) && ms > 0)
+        return Math.ceil(ms / 1000);
+    return undefined;
+}
+async function jsonRequest(fetchImpl, path, init = {}) {
+    // P1-11：写请求（takeover/release、preview 解锁、locate）带上页面注入的一次性
+    // CSRF 票据。读请求不需要，服务端也不校验。
+    const method = String(init.method ?? 'GET').toUpperCase();
+    const headers = method === 'GET'
+        ? init.headers
+        : { ...controlCsrfHeaders(), ...init.headers };
+    const response = await fetchImpl(path, { cache: 'no-store', ...init, headers });
+    const body = await response.json().catch(() => null);
+    if (!response.ok || !body || body.ok === false) {
+        throw new WorkbenchApiError(response.status, String(body?.error ?? `http_${response.status}`), parseRetryAfter(response, body));
+    }
+    return body;
+}
+function responseObject(value, code) {
+    if (!value || typeof value !== 'object' || Array.isArray(value)) {
+        throw new WorkbenchApiError(502, code);
+    }
+    return value;
+}
+function optionalDeadline(value, code) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isSafeInteger(value) || value <= 0) {
+        throw new WorkbenchApiError(502, code);
+    }
+    return value;
+}
+function terminalControlState(value, fallbackOwned) {
+    const body = responseObject(value, 'invalid_control_response');
+    if (body.mode !== 'readonly' && body.mode !== 'controlled') {
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    }
+    const owned = typeof body.owned === 'boolean' ? body.owned : fallbackOwned;
+    if (typeof owned !== 'boolean')
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    const expiresAt = optionalDeadline(body.expiresAt, 'invalid_control_response');
+    const fixed = body.fixed === undefined ? undefined : body.fixed;
+    if (fixed !== undefined && typeof fixed !== 'boolean') {
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    }
+    if ((body.mode === 'readonly' && (owned || expiresAt !== undefined))
+        || (body.mode === 'controlled' && expiresAt === undefined && fixed !== true)) {
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    }
+    const reused = body.reused === undefined ? undefined : body.reused;
+    if (reused !== undefined && typeof reused !== 'boolean') {
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    }
+    if (fixed === true && (body.mode !== 'controlled' || !owned || expiresAt !== undefined)) {
+        throw new WorkbenchApiError(502, 'invalid_control_response');
+    }
+    return {
+        mode: body.mode,
+        owned,
+        ...(expiresAt === undefined ? {} : { expiresAt }),
+        ...(reused === undefined ? {} : { reused }),
+        ...(fixed === undefined ? {} : { fixed }),
+    };
+}
+function previewInteractionState(value) {
+    const body = responseObject(value, 'invalid_preview_interaction_response');
+    if (body.mode !== 'preview' && body.mode !== 'interactive') {
+        throw new WorkbenchApiError(502, 'invalid_preview_interaction_response');
+    }
+    if (typeof body.label !== 'string' || !body.label || body.label.length > 256
+        || typeof body.securityNotice !== 'string' || !body.securityNotice || body.securityNotice.length > 1_024) {
+        throw new WorkbenchApiError(502, 'invalid_preview_interaction_response');
+    }
+    const idleExpiresAt = optionalDeadline(body.idleExpiresAt, 'invalid_preview_interaction_response');
+    if ((body.mode === 'preview' && idleExpiresAt !== undefined)
+        || (body.mode === 'interactive' && idleExpiresAt === undefined)) {
+        throw new WorkbenchApiError(502, 'invalid_preview_interaction_response');
+    }
+    return {
+        mode: body.mode,
+        label: body.label,
+        securityNotice: body.securityNotice,
+        ...(idleExpiresAt === undefined ? {} : { idleExpiresAt }),
+    };
+}
+/** 当前工作台页面的 origin。无 window（SSR、或注入 fetchImpl 的单测）时返回 null，
+ *  此时「同源」无从谈起，调用方原样保留上游地址。 */
+function currentPageOrigin() {
+    const origin = globalThis
+        .window?.location?.origin;
+    return typeof origin === 'string' && origin ? origin : null;
+}
+/** 只接受「工作台页面同源」的 view-link，并在有 origin 时拼成绝对地址。
+ *
+ *  P1-5 之后服务端只回同源相对路径（形如 `/s/<id>/?viewToken=…`），绝不再回
+ *  daemon/worker 自身端口上的绝对 URL。这不只是可达性问题（早先踩过的案例：手机所在办公
+ *  网只放行 dashboard 端口，对反代端口没有任何可达连接，iframe 一片空白），更是撤销问题：
+ *  daemon 反代和 worker 端口都在网络上开着，且都看不到 dashboard 的登出状态，凭证一旦被
+ *  指到那两个 origin 上，中央的吊销检查就形同虚设。所以这里对任何非同源地址一律拒绝，
+ *  不再「改写洗白」——服务端本就不会给，真给了也说明链路被人动过手脚。
+ *
+ *  origin 缺失（SSR / 注入 fetchImpl 的测试环境）或拼接失败（沙箱 iframe 的不透明 origin，
+ *  `window.location.origin` 为 "null"）时保留相对路径：相对地址同样只会打到当前源，
+ *  iframe 直接用即可。 */
+function sameOriginViewLink(path) {
+    const origin = currentPageOrigin();
+    if (!origin)
+        return path;
+    try {
+        const rebased = new URL(path, origin);
+        if (rebased.protocol !== 'http:' && rebased.protocol !== 'https:')
+            return path;
+        return rebased.toString();
+    }
+    catch {
+        return path;
+    }
+}
+function controlPath(sessionId, action) {
+    return `/api/sessions/${encodeURIComponent(sessionId)}/control${action ? `/${action}` : ''}`;
+}
+function previewPath(sessionId, action) {
+    return `/api/sessions/${encodeURIComponent(sessionId)}/preview-interaction${action ? `/${action}` : ''}`;
+}
+export function createWorkbenchApi(fetchImpl = fetch) {
+    return {
+        getTerminalControl: async (sessionId, signal) => terminalControlState(await jsonRequest(fetchImpl, controlPath(sessionId), { signal })),
+        takeoverTerminal: async (sessionId, signal) => terminalControlState(await jsonRequest(fetchImpl, controlPath(sessionId, 'takeover'), { method: 'POST', signal }), true),
+        releaseTerminal: async (sessionId, signal) => terminalControlState(await jsonRequest(fetchImpl, controlPath(sessionId, 'release'), { method: 'POST', signal }), false),
+        getPreviewInteraction: async (sessionId, signal) => previewInteractionState(await jsonRequest(fetchImpl, previewPath(sessionId), { signal })),
+        unlockPreview: async (sessionId, signal) => previewInteractionState(await jsonRequest(fetchImpl, previewPath(sessionId, 'unlock'), { method: 'POST', signal })),
+        touchPreview: async (sessionId, signal) => previewInteractionState(await jsonRequest(fetchImpl, previewPath(sessionId, 'activity'), { method: 'POST', signal })),
+        lockPreview: async (sessionId, signal) => previewInteractionState(await jsonRequest(fetchImpl, previewPath(sessionId, 'lock'), { method: 'POST', signal })),
+        async locateSession(sessionId, signal) {
+            await jsonRequest(fetchImpl, `/api/sessions/${encodeURIComponent(sessionId)}/locate`, { method: 'POST', signal });
+        },
+        async getTerminalViewLink(sessionId, signal) {
+            try {
+                const body = responseObject(await jsonRequest(fetchImpl, `/api/sessions/${encodeURIComponent(sessionId)}/view-link`, { signal }), 'invalid_view_link_response');
+                // P1-5: the only shape allowed to reach the DOM is a same-origin
+                // terminal path. `//host/...` is a protocol-relative ABSOLUTE URL and
+                // `/\host` is treated the same way by browsers, so both are rejected
+                // along with every explicit scheme — an absolute link would hand this
+                // capability to an origin that cannot enforce revocation.
+                if (typeof body.url !== 'string' || body.url.length > 2_048)
+                    return null;
+                if (!/^\/s\/[^/\\]/.test(body.url))
+                    return null;
+                // Malformed expiry degrades to "unknown" rather than rejecting the
+                // link: expiry-driven refresh is an optimization, not the gate.
+                const expiresAt = typeof body.expiresAt === 'number'
+                    && Number.isSafeInteger(body.expiresAt) && body.expiresAt > 0
+                    ? body.expiresAt
+                    : null;
+                return { url: sameOriginViewLink(body.url), expiresAt };
+            }
+            catch {
+                return null;
+            }
+        },
+        async getStandingLink(signal) {
+            try {
+                const body = responseObject(await jsonRequest(fetchImpl, '/api/workbench/standing-link', { signal }), 'invalid_standing_link_response');
+                // 这条 URL 会被放进输入框交给用户复制粘贴，所以只接受**绝对的 http(s)**
+                // 地址：`javascript:` 之类的伪协议、超长串一律当没有拿到。服务端本就只
+                // 会给 `<base>/workbench?t=…`，形状不对说明链路被人动过手脚。
+                if (typeof body.url !== 'string' || !body.url || body.url.length > 2_048)
+                    return null;
+                const parsed = new URL(body.url);
+                if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+                    return null;
+                return { url: body.url };
+            }
+            catch {
+                // 401 / 403 / 404（无权身份）与 503（还没有活跃 token）走同一条回落：
+                // 前端只知道「没有这个入口」，不区分原因。
+                return null;
+            }
+        },
+        async getH5Context(signal) {
+            try {
+                const body = responseObject(await jsonRequest(fetchImpl, '/api/workbench/h5-context', { signal }), 'invalid_h5_context_response');
+                const h5 = responseObject(body.h5, 'invalid_h5_context_response');
+                if (typeof h5.enabled !== 'boolean'
+                    || typeof h5.appId !== 'string' || h5.appId.length > 256
+                    || (h5.brand !== 'feishu' && h5.brand !== 'lark')
+                    || typeof h5.entryPath !== 'string' || !/^\/[A-Za-z0-9/_-]{1,127}$/.test(h5.entryPath)) {
+                    throw new WorkbenchApiError(502, 'invalid_h5_context_response');
+                }
+                return {
+                    enabled: h5.enabled,
+                    appId: h5.appId,
+                    brand: h5.brand,
+                    entryPath: h5.entryPath,
+                };
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+}
+//# sourceMappingURL=agent-workbench-api.js.map

package/dist/dashboard/web/agent-workbench-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-workbench-api.js","sourceRoot":"","sources":["../../../src/dashboard/web/agent-workbench-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAkDvD,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAExB;IACA;IAEA;IAJlB,YACkB,MAAc,EACd,IAAY;IAC5B,0CAA0C;IAC1B,iBAA0B;QAE1C,KAAK,CAAC,IAAI,CAAC,CAAC;QALI,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAEZ,sBAAiB,GAAjB,iBAAiB,CAAS;QAG1C,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;mDACmD;AACnD,SAAS,eAAe,CAAC,QAAkB,EAAE,IAAoC;IAC/E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,SAAuB,EAAE,IAAY,EAAE,OAAoB,EAAE;IACzF,0DAA0D;IAC1D,0BAA0B;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK;QAC9B,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,EAAE,GAAG,kBAAkB,EAAE,EAAE,GAAI,IAAI,CAAC,OAA8C,EAAE,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAmC,CAAC;IACvF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,iBAAiB,CACzB,QAAQ,CAAC,MAAM,EACf,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC,EAChD,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,aAAuB;IACnE,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAChE,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC;WAC/D,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACnE,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,KAAK,IAAI,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;QACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;QACjD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3D,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;WACvE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC3G,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;IACnG,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS,CAAC;WACvD,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,aAAa,KAAK,SAAS,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,sCAAsC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;8BAC8B;AAC9B,SAAS,iBAAiB;IACxB,MAAM,MAAM,GAAI,UAA+D;SAC5E,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;IAC5B,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;oBAWoB;AACpB,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/E,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,MAA+B;IACrE,OAAO,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,WAAW,CAAC,SAAiB,EAAE,MAAuC;IAC7E,OAAO,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,uBAAuB,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAA0B,KAAK;IAChE,OAAO;QACL,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CACnE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CACjE;QACD,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CACjE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAC5F,IAAI,CACL;QACD,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,oBAAoB,CAChE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,EAC3F,KAAK,CACN;QACD,qBAAqB,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CACzE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CACjE;QACD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CACjE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC3F;QACD,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAChE,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAC7F;QACD,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAC/D,MAAM,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CACzF;QACD,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM;YACnC,MAAM,WAAW,CACf,SAAS,EACT,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EACvD,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAC3B,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,cAAc,CACzB,MAAM,WAAW,CACf,SAAS,EACT,iBAAiB,kBAAkB,CAAC,SAAS,CAAC,YAAY,EAC1D,EAAE,MAAM,EAAE,CACX,EACD,4BAA4B,CAC7B,CAAC;gBACF,iEAAiE;gBACjE,sEAAsE;gBACtE,qEAAqE;gBACrE,sEAAsE;gBACtE,0DAA0D;gBAC1D,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;gBACzE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBAChD,mEAAmE;gBACnE,gEAAgE;gBAChE,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;uBAC/C,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC;oBAC7D,CAAC,CAAC,IAAI,CAAC,SAAS;oBAChB,CAAC,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;YAC1D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,MAAM;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,cAAc,CACzB,MAAM,WAAW,CAAU,SAAS,EAAE,8BAA8B,EAAE,EAAE,MAAM,EAAE,CAAC,EACjF,gCAAgC,CACjC,CAAC;gBACF,8CAA8C;gBAC9C,4CAA4C;gBAC5C,4CAA4C;gBAC5C,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK;oBAAE,OAAO,IAAI,CAAC;gBACtF,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAC7E,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;gBACjD,uBAAuB;gBACvB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,MAAM;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,cAAc,CACzB,MAAM,WAAW,CAAU,SAAS,EAAE,2BAA2B,EAAE,EAAE,MAAM,EAAE,CAAC,EAC9E,6BAA6B,CAC9B,CAAC;gBACF,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBAClE,IAAI,OAAO,EAAE,CAAC,OAAO,KAAK,SAAS;uBAC9B,OAAO,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;uBACrD,CAAC,EAAE,CAAC,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,KAAK,KAAK,MAAM,CAAC;uBAC9C,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzF,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,6BAA6B,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,EAAE,CAAC,OAAO;oBACnB,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,SAAS,EAAE,EAAE,CAAC,SAAS;iBACxB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/dashboard/web/agent-workbench-appearance-menu.d.ts

@@ -0,0 +1,59 @@
+import { type WorkbenchApi } from './agent-workbench-api.js';
+import type { ThemeMode } from './preferences.js';
+import { type WorkbenchAppearanceSnapshot, type WorkbenchSkinId, type WorkbenchTermStyle } from './agent-workbench-appearance.js';
+/** 读当前外观。store 缓存快照对象，未变化时引用不变，不会引起额外重渲染。 */
+export declare function useWorkbenchAppearance(): WorkbenchAppearanceSnapshot;
+/**
+ * 工作台表面（完整工作台 / 会话坞）挂载期间把外观落到文档根上，离开时原样还回去 ——
+ * 这 4 套配色是工作台的局部调色板，不该在 Dashboard 其它页面继续生效。
+ */
+export declare function useWorkbenchAppearanceRoot(): WorkbenchAppearanceSnapshot;
+export declare function setWorkbenchSkin(skin: WorkbenchSkinId): void;
+export declare function setWorkbenchMode(mode: ThemeMode): void;
+export declare function setWorkbenchTermStyle(termStyle: WorkbenchTermStyle): void;
+/** 「阅读｜经典」分段控件。终端标题栏右侧和外观面板里用的是同一个组件、同一状态源。 */
+export declare function WorkbenchTermStyleSegment(props: {
+    termStyle: WorkbenchTermStyle;
+}): JSX.Element;
+/** 面板正文。桌面浮层和移动 sheet 共用，只有外层容器不同。 */
+export declare function WorkbenchAppearanceControls(): JSX.Element;
+export interface WorkbenchStandingLinkPanelProps {
+    api: WorkbenchApi;
+    onClose(): void;
+    /** 测试注入用的复制实现。生产默认是 web/clipboard.ts 的 `copyText`：先
+     *  `navigator.clipboard.writeText`，被拒或不可用时降级到
+     *  `document.execCommand('copy')`。 */
+    copy?: (text: string) => Promise<boolean>;
+}
+/**
+ * 「常驻链接」面板正文：显示完整链接（只读、聚焦即全选）、一键复制、以及一句
+ * 说明它为什么安全可用（收藏进书签长期用；怀疑泄漏时 `botmux dashboard rotate`
+ * 立刻作废）。
+ *
+ * 链接**只在这里现取**（点开才请求），拿不到就只显示一行「暂时取不到」——绝不
+ * 显示半截链接，也不区分「无权」和「服务端还没有 token」：对前端来说都是没有
+ * 这个入口。
+ */
+export declare function WorkbenchStandingLinkPanel(props: WorkbenchStandingLinkPanelProps): JSX.Element;
+export interface WorkbenchAppearanceSheetProps {
+    open: boolean;
+    onClose(): void;
+    /** 只有本机完整管理身份才渲染「常驻链接」入口（见文件头注释）。 */
+    standingLink?: boolean;
+    api?: WorkbenchApi;
+}
+/** 移动端：同一块内容的底部 sheet（列表页顶栏 `◐` 直达）。owner 的常驻链接也挂在
+ *  这里——手机浏览器同样能把工作台收进书签，不必回到桌面端。 */
+export declare function WorkbenchAppearanceSheet(props: WorkbenchAppearanceSheetProps): JSX.Element | null;
+export interface WorkbenchAppearanceMenuProps {
+    /** 只有本机完整管理身份才渲染「常驻链接」项（见文件头注释）。 */
+    standingLink?: boolean;
+    api?: WorkbenchApi;
+}
+/**
+ * 桌面 / 会话坞头部的 `⋯` 菜单。第一项是「外观」，owner 还多一项「常驻链接」，
+ * 两项点开的都是同一族下拉浮层（`.wb-appearance-pop`）。
+ * 菜单和浮层都能用键盘走：Esc 关闭并把焦点还给 `⋯`，方向键在单选组里移动。
+ */
+export declare function WorkbenchAppearanceMenu(props?: WorkbenchAppearanceMenuProps): JSX.Element;
+//# sourceMappingURL=agent-workbench-appearance-menu.d.ts.map

package/dist/dashboard/web/agent-workbench-appearance-menu.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-workbench-appearance-menu.d.ts","sourceRoot":"","sources":["../../../src/dashboard/web/agent-workbench-appearance-menu.tsx"],"names":[],"mappings":"AAsBA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAOL,KAAK,2BAA2B,EAChC,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACxB,MAAM,iCAAiC,CAAC;AAmCzC,6CAA6C;AAC7C,wBAAgB,sBAAsB,IAAI,2BAA2B,CAEpE;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,IAAI,2BAA2B,CAMxE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAEtD;AAED,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,kBAAkB,GAAG,IAAI,CAEzE;AAmBD,+CAA+C;AAC/C,wBAAgB,yBAAyB,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,kBAAkB,CAAA;CAAE,GAAG,GAAG,CAAC,OAAO,CAqB/F;AAED,sCAAsC;AACtC,wBAAgB,2BAA2B,IAAI,GAAG,CAAC,OAAO,CAoEzD;AAOD,MAAM,WAAW,+BAA+B;IAC9C,GAAG,EAAE,YAAY,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC;IAChB;;0CAEsC;IACtC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,+BAA+B,GAAG,GAAG,CAAC,OAAO,CAiE9F;AAoBD,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,IAAI,IAAI,CAAC;IAChB,qCAAqC;IACrC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,YAAY,CAAC;CACpB;AAED;oCACoC;AACpC,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,GAAG,CAAC,OAAO,GAAG,IAAI,CAsCjG;AAED,MAAM,WAAW,4BAA4B;IAC3C,oCAAoC;IACpC,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,YAAY,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,GAAE,4BAAiC,GAAG,GAAG,CAAC,OAAO,CA+D7F"}