botmux 3.4.3 → 3.5.2

package/dist/core/daemon-config-fence.d.ts

@@ -0,0 +1,8 @@
+import type { BotConfig } from '../bot-registry.js';
+/**
+ * An explicit PM2 daemon may never retain a pre-bootstrap config snapshot.
+ * Re-read its original raw bots.json slot immediately before registration and
+ * reject removal, pending state, or an App ID replacement as a fatal drift.
+ */
+export declare function reloadExactDaemonBotConfig(index: number, originalAppId: string, loadAtIndex: (index: number) => BotConfig): BotConfig;
+//# sourceMappingURL=daemon-config-fence.d.ts.map

package/dist/core/daemon-config-fence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-config-fence.d.ts","sourceRoot":"","sources":["../../src/core/daemon-config-fence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,GACxC,SAAS,CAMX"}

package/dist/core/daemon-config-fence.js

@@ -0,0 +1,13 @@
+/**
+ * An explicit PM2 daemon may never retain a pre-bootstrap config snapshot.
+ * Re-read its original raw bots.json slot immediately before registration and
+ * reject removal, pending state, or an App ID replacement as a fatal drift.
+ */
+export function reloadExactDaemonBotConfig(index, originalAppId, loadAtIndex) {
+    const reloaded = loadAtIndex(index);
+    if (reloaded.larkAppId !== originalAppId) {
+        throw new Error(`BOTMUX_BOT_INDEX=${index} target drifted during profile bootstrap`);
+    }
+    return reloaded;
+}
+//# sourceMappingURL=daemon-config-fence.js.map

package/dist/core/daemon-config-fence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-config-fence.js","sourceRoot":"","sources":["../../src/core/daemon-config-fence.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,KAAa,EACb,aAAqB,EACrB,WAAyC;IAEzC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,QAAQ,CAAC,SAAS,KAAK,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,0CAA0C,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/dashboard-events.d.ts

@@ -45,6 +45,11 @@ export type DashboardEvent = {
     body: {
         timezone: string;
     };
+} | {
+    type: 'bots.changed';
+    body: {
+        signature: string;
+    };
 } | {
     type: 'heartbeat';
     body: {

package/dist/core/dashboard-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-events.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAG,IAAI,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAmB,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,GAAG,CAAA;KAAoB,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,GAAC,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAS,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;AAEzD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAyB;IAErC,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,IAAI;IAKrC,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;CAQrC;AAED,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}
+{"version":3,"file":"dashboard-events.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAGA,wDAAwD;AACxD,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAG,IAAI,EAAE;QAAE,OAAO,EAAE,GAAG,CAAA;KAAmB,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,QAAQ,EAAE,GAAG,CAAA;KAAoB,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;KAAE,CAAA;CAAE,GAC/E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAE,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAI,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,IAAI,GAAC,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAM,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,WAAW,CAAC;IAAS,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAC;AAExD,MAAM,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;AAEzD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAAyB;IAErC,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,IAAI;IAKrC,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;CAQrC;AAED,4EAA4E;AAC5E,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

package/dist/core/dashboard-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-events.js","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAgB5C,MAAM,OAAO,iBAAiB;IACpB,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;IAErC,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,KAAqB;QAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC9B,+CAA+C;gBAC/C,MAAM,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"dashboard-events.js","sourceRoot":"","sources":["../../src/core/dashboard-events.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAiB5C,MAAM,OAAO,iBAAiB;IACpB,IAAI,GAAG,IAAI,GAAG,EAAc,CAAC;IAErC,SAAS,CAAC,EAAc;QACtB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,KAAqB;QAC3B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBAC9B,+CAA+C;gBAC/C,MAAM,CAAC,KAAK,CAAC,wCAAwC,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/core/dashboard-ipc-server.d.ts

@@ -1,4 +1,7 @@
 import { type IncomingMessage, type ServerResponse } from 'node:http';
+import { applyExactChatGrantRequest } from '../services/exact-chat-grant.js';
+/** Test seam: replace the exact-grant service without touching live Feishu/config state. */
+export declare function setExactChatGrantHandler(handler: typeof applyExactChatGrantRequest | null): void;
 export type BotRenameOutcome = {
     ok: true;
     name: string;
@@ -29,14 +32,30 @@ export declare function isTrustedHostIpcRequest(req: IncomingMessage): boolean;
 /** Register a handler. Path supports `:name` segments captured into the params object. */
 export declare function ipcRoute(method: string, path: string, handler: Handler): void;
 export declare function jsonRes(res: ServerResponse, status: number, body: unknown): void;
-export declare function readJsonBody<T = unknown>(req: IncomingMessage): Promise<T>;
+export declare class JsonBodyTooLargeError extends Error {
+    readonly maxBytes: number;
+    constructor(maxBytes: number);
+}
+export declare class AbortDeadlineError extends Error {
+    readonly label: string;
+    readonly timeoutMs: number;
+    constructor(label: string, timeoutMs: number);
+}
+/** 校验跨进程 JSON envelope，只接受普通对象和完整、精确的自有字段集合。 */
+export declare function hasExactSafeJsonKeys(value: unknown, expectedKeys: readonly string[]): value is Record<string, unknown>;
+/**
+ * 为支持 AbortSignal 的底层操作设置硬截止时间。Promise.race 保证调用方按时释放
+ * in-flight 状态，AbortController 同时取消仍在执行的网络或子进程操作。
+ */
+export declare function runWithAbortDeadline<T>(label: string, timeoutMs: number, task: (signal: AbortSignal, deadlineAt: number) => Promise<T>): Promise<T>;
+export declare function readJsonBody<T = unknown>(req: IncomingMessage, maxBytes?: number): Promise<T>;
 /** Test seam: override the secret used to verify token-route HMAC. */
 export declare function setIpcAuthSecret(secret: string | null): void;
 /** Authenticate legacy terminal-token routes with the machine-local dashboard
  * secret. Workflow v3 mutations intentionally use their separate, full-request
  * protocol (`workflows/v3/daemon-ipc-auth`) and must never call this bare
  * ts:nonce verifier. */
-export declare function ipcHmacAuthorized(req: IncomingMessage): boolean;
+export declare function ipcHmacAuthorized(req: IncomingMessage, bind?: string): boolean;
 export type { SessionRow };
 export { composeRowFromActive, composeRowFromClosed };
 export declare function setBotName(name: string): void;

package/dist/core/dashboard-ipc-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAiGjG,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAE/F;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAEnG;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAiC,cAAc,EAAE,yBAAyB,EAAW,MAAM,aAAa,CAAC;AAerH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAe1B,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAErE;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhF;AAaD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAM7F;;;wBAGwB;AACxB,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAS/D;AAyED,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AAi8BxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAyrDD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;+EAG2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmD3B"}
+{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAmDjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AA4C7E,4FAA4F;AAC5F,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAEhG;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAE/F;AAID,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAEnG;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAU7B,OAAO,KAAK,EAAiC,cAAc,EAAE,yBAAyB,EAAW,MAAM,aAAa,CAAC;AAerH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAe1B,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAErE;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,qBAAa,qBAAsB,SAAQ,KAAK;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM;gBAAhB,QAAQ,EAAE,MAAM;CAItC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM;gBADjB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM;CAK7B;AAED,gDAAgD;AAChD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAWlC;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,CAAC,EAC1C,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAC5D,OAAO,CAAC,CAAC,CAAC,CAoBZ;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAC5C,GAAG,EAAE,eAAe,EACpB,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC,CAAC,CAAC,CAuEZ;AAaD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAM7F;;;wBAGwB;AACxB,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAS9E;AA6ED,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AAg8BxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;CACxB;AAyxDD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;+EAG2E;IAC3E,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GAAG,OAAO,CAAC,eAAe,CAAC,CAmD3B"}

package/dist/core/dashboard-ipc-server.js

@@ -53,11 +53,11 @@ import * as observedBotsStore from '../services/observed-bots-store.js';
 import { getDeploymentIdentity } from '../services/deployment-identity.js';
 import { getBotUnionId } from '../services/bot-union-ids-store.js';
 import * as grantPrefsStore from '../services/grant-prefs-store.js';
+import { applyExactChatGrantRequest } from '../services/exact-chat-grant.js';
 import { findConfigField, applyConfigField, coerceConfigValue } from '../services/bot-config-store.js';
 import { globalBuiltinSkillInjectionDefault, resolveSkillInjectionSupport } from '../skills/injection-mode.js';
 import { summaryRangeFromBotConfig, updateDashboardSummaryRange } from '../services/summary-range-store.js';
 import { config } from '../config.js';
-import { computeSandboxDiff, applySandboxDiff } from '../services/sandbox-land.js';
 import { buildSafeInsightConversation, buildSafeInsightOverview, buildSafeInsightReport, buildSafeInsightTurnDetail } from '../services/insight/report.js';
 import { readRawConfig, findEntryIndex, requireConfigPath, rmwBotEntry } from '../services/config-store.js';
 import { setDefaultLocale, localeForBot, t } from '../i18n/index.js';
@@ -85,6 +85,11 @@ import { validateTriggerRequest } from '../services/trigger-types.js';
 import { resolveCliSelection, selectionKeyForBot } from '../setup/cli-selection.js';
 import { checkCliAvailability } from '../setup/cli-availability.js';
 import { enrichHistorySenders } from '../dashboard/history-senders.js';
+let exactChatGrantHandler = applyExactChatGrantRequest;
+/** Test seam: replace the exact-grant service without touching live Feishu/config state. */
+export function setExactChatGrantHandler(handler) {
+    exactChatGrantHandler = handler ?? applyExactChatGrantRequest;
+}
 let botRenamer = null;
 export function setBotRenamer(fn) {
     botRenamer = fn;
@@ -124,10 +129,138 @@ export function jsonRes(res, status, body) {
     res.writeHead(status, { 'content-type': 'application/json' });
     res.end(JSON.stringify(body));
 }
-export async function readJsonBody(req) {
+export class JsonBodyTooLargeError extends Error {
+    maxBytes;
+    constructor(maxBytes) {
+        super(`JSON request body exceeds ${maxBytes} bytes`);
+        this.maxBytes = maxBytes;
+        this.name = 'JsonBodyTooLargeError';
+    }
+}
+export class AbortDeadlineError extends Error {
+    label;
+    timeoutMs;
+    constructor(label, timeoutMs) {
+        super(`${label} timed out after ${timeoutMs}ms`);
+        this.label = label;
+        this.timeoutMs = timeoutMs;
+        this.name = 'AbortDeadlineError';
+    }
+}
+/** 校验跨进程 JSON envelope，只接受普通对象和完整、精确的自有字段集合。 */
+export function hasExactSafeJsonKeys(value, expectedKeys) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null)
+        return false;
+    const keys = Object.keys(value);
+    if (keys.length !== expectedKeys.length)
+        return false;
+    if (['__proto__', 'prototype', 'constructor'].some(key => Object.hasOwn(value, key))) {
+        return false;
+    }
+    const expected = new Set(expectedKeys);
+    return keys.every(key => expected.has(key));
+}
+/**
+ * 为支持 AbortSignal 的底层操作设置硬截止时间。Promise.race 保证调用方按时释放
+ * in-flight 状态，AbortController 同时取消仍在执行的网络或子进程操作。
+ */
+export async function runWithAbortDeadline(label, timeoutMs, task) {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) {
+        throw new RangeError('timeoutMs must be a positive safe integer');
+    }
+    const controller = new AbortController();
+    const deadlineAt = Date.now() + timeoutMs;
+    let timer;
+    const timeout = new Promise((_resolve, reject) => {
+        timer = setTimeout(() => {
+            const error = new AbortDeadlineError(label, timeoutMs);
+            controller.abort(error);
+            reject(error);
+        }, timeoutMs);
+        timer.unref?.();
+    });
+    try {
+        return await Promise.race([task(controller.signal, deadlineAt), timeout]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+export async function readJsonBody(req, maxBytes) {
+    if (maxBytes !== undefined && (!Number.isSafeInteger(maxBytes) || maxBytes <= 0)) {
+        throw new RangeError('maxBytes must be a positive safe integer');
+    }
+    if (maxBytes !== undefined) {
+        const declared = req.headers?.['content-length'];
+        const declaredBytes = typeof declared === 'string' && /^\d+$/.test(declared)
+            ? Number(declared)
+            : undefined;
+        if (declaredBytes !== undefined && declaredBytes > maxBytes) {
+            req.once('error', () => { });
+            req.resume();
+            throw new JsonBodyTooLargeError(maxBytes);
+        }
+        const body = await new Promise((resolve, reject) => {
+            const chunks = [];
+            let totalBytes = 0;
+            let settled = false;
+            const cleanup = () => {
+                req.off('data', onData);
+                req.off('end', onEnd);
+                req.off('error', onError);
+                req.off('aborted', onAborted);
+            };
+            const rejectOnce = (error, drain = false) => {
+                if (settled)
+                    return;
+                settled = true;
+                cleanup();
+                if (drain) {
+                    // 不销毁 keep-alive socket，只丢弃剩余正文，让调用方仍能返回 413。
+                    req.once('error', () => { });
+                    req.resume();
+                }
+                reject(error);
+            };
+            const onData = (raw) => {
+                if (settled)
+                    return;
+                const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(raw);
+                totalBytes += chunk.byteLength;
+                if (totalBytes > maxBytes) {
+                    chunks.length = 0;
+                    rejectOnce(new JsonBodyTooLargeError(maxBytes), true);
+                    return;
+                }
+                chunks.push(chunk);
+            };
+            const onEnd = () => {
+                if (settled)
+                    return;
+                settled = true;
+                cleanup();
+                resolve(Buffer.concat(chunks, totalBytes));
+            };
+            const onError = (error) => rejectOnce(error);
+            const onAborted = () => rejectOnce(new Error('request aborted'));
+            req.on('data', onData);
+            req.once('end', onEnd);
+            req.once('error', onError);
+            req.once('aborted', onAborted);
+        });
+        if (body.byteLength === 0)
+            return {};
+        return JSON.parse(body.toString('utf8'));
+    }
     const chunks = [];
-    for await (const c of req)
-        chunks.push(c);
+    for await (const c of req) {
+        const chunk = Buffer.isBuffer(c) ? c : Buffer.from(c);
+        chunks.push(chunk);
+    }
     if (chunks.length === 0)
         return {};
     return JSON.parse(Buffer.concat(chunks).toString('utf8'));
@@ -159,7 +292,7 @@ function ipcAuthSecret() {
  * secret. Workflow v3 mutations intentionally use their separate, full-request
  * protocol (`workflows/v3/daemon-ipc-auth`) and must never call this bare
  * ts:nonce verifier. */
-export function ipcHmacAuthorized(req) {
+export function ipcHmacAuthorized(req, bind) {
     if (trustedHostRequests.has(req))
         return true;
     const secret = ipcAuthSecret();
@@ -170,7 +303,10 @@ export function ipcHmacAuthorized(req) {
     const sig = req.headers['x-botmux-cli-auth'];
     if (typeof ts !== 'string' || typeof nonce !== 'string' || typeof sig !== 'string')
         return false;
-    return verifyHmac(secret, { ts, nonce, sig }, req.socket.remoteAddress ?? '').ok;
+    return verifyHmac(secret, { ts, nonce, sig }, req.socket.remoteAddress ?? '', bind).ok;
+}
+function tokenRouteAuthorized(req, bind) {
+    return ipcHmacAuthorized(req, bind);
 }
 function routeHasPublicAccess(method, pathname) {
     // Liveness contains no data and performs no mutation.
@@ -945,6 +1081,29 @@ ipcRoute('GET', '/api/sessions/:sessionId/write-link', (req, res, params) => {
         return jsonRes(res, 409, { ok: false, error: 'terminal_unavailable' });
     jsonRes(res, 200, { ok: true, url: buildTerminalUrl(ds, { write: true }) });
 });
+/**
+ * Dashboard「复现命令」：返回该 active session 本次冷启的**近似**可复现 CLI 调用
+ * （bin + argv + cwd + 权威注入 env），供用户粘到调试终端改参数复现。命令原样保留
+ * （含 write token / --append-system-prompt / 凭证 env），与 write-link 同一把
+ * loopback-HMAC 锁：匿名浏览器在 dashboard HTTP 边界就 401（该路径不在 allow-list），
+ * 本机知道 ipcPort 的进程也过不了 ipcHmacAuthorized。仅持管理 cookie 的写权限视图能取。
+ *
+ * 只读 active session 的**内存**字段（DaemonSession.spawnCommand）：命令含凭证，
+ * 绝不落盘，也绝不从 closed/持久化 session 取（那既无值也避免误暴露）。daemon 重启后
+ * 到 worker 再次 ready 之前返回 unavailable——可接受。warm reattach 不重算命令，此时
+ * 亦为空。riff 后端无本地 bin/args，worker 侧不产出命令，这里同样 unavailable。
+ */
+ipcRoute('GET', '/api/sessions/:sessionId/spawn-command', (req, res, params) => {
+    if (!ipcHmacAuthorized(req))
+        return jsonRes(res, 401, { ok: false, error: 'unauthorized' });
+    const ds = findActiveBySessionId(params.sessionId);
+    if (!ds)
+        return jsonRes(res, 404, { ok: false, error: 'session_not_active' });
+    const cmd = ds.spawnCommand;
+    if (!cmd)
+        return jsonRes(res, 404, { ok: false, error: 'spawn_command_unavailable' });
+    jsonRes(res, 200, { ok: true, command: cmd });
+});
 /**
  * Deliver the writable-terminal card privately to the bot's owner(s) — the
  * `botmux term-link <id>` CLI command's backend. Unlike the GET route above
@@ -974,32 +1133,6 @@ function workingDirForSession(sessionId) {
         return ds.session.workingDir;
     return sessionStore.listSessions().find(s => s.sessionId === sessionId)?.workingDir;
 }
-ipcRoute('GET', '/api/sessions/:sessionId/sandbox-diff', (_req, res, params) => {
-    const d = computeSandboxDiff(config.session.dataDir, params.sessionId, localeForBot(cachedLarkAppId));
-    if (!d.ok)
-        return jsonRes(res, 200, { ok: false, error: d.error });
-    jsonRes(res, 200, {
-        ok: true, empty: d.empty, files: d.files, insertions: d.insertions, deletions: d.deletions,
-        statText: d.statText, patch: d.patch, workingDir: workingDirForSession(params.sessionId) ?? null,
-    });
-});
-ipcRoute('POST', '/api/sessions/:sessionId/sandbox-land/:action', (_req, res, params) => {
-    if (params.action === 'discard')
-        return jsonRes(res, 200, { ok: true, discarded: true });
-    if (params.action !== 'apply')
-        return jsonRes(res, 400, { ok: false, error: 'unknown action' });
-    const locLand = localeForBot(cachedLarkAppId);
-    const wd = workingDirForSession(params.sessionId);
-    if (!wd)
-        return jsonRes(res, 404, { ok: false, error: t('sandbox.workingdir_not_found', undefined, locLand) });
-    const d = computeSandboxDiff(config.session.dataDir, params.sessionId, locLand);
-    if (!d.ok)
-        return jsonRes(res, 200, { ok: false, error: d.error });
-    if (d.empty)
-        return jsonRes(res, 200, { ok: false, error: t('sandbox.no_changes_left', undefined, locLand) });
-    const a = applySandboxDiff(wd, config.session.dataDir, params.sessionId, locLand);
-    jsonRes(res, 200, a.ok ? { ok: true, files: d.files, insertions: d.insertions, deletions: d.deletions, workingDir: wd } : { ok: false, error: a.error });
-});
 /**
  * Reactivate a closed session — counterpart to `/close`. Used by both the
  * "▶️ 恢复会话" card button (via card-handler) and the `botmux resume <id>`
@@ -1531,6 +1664,73 @@ ipcRoute('POST', '/api/trigger', async (req, res) => {
         return jsonRes(res, 500, { ok: false, errorCode: 'trigger_failed', error: e?.message ?? String(e) });
     }
 });
+// ─── Exact chat grants (talk-only) ─────────────────────────────────────────
+/**
+ * Apply/read/revoke a receiver-scoped chatGrant. The receiver identity comes
+ * from this daemon's cached larkAppId, never from the caller. The body repeats
+ * it only as an anti-misrouting assertion (e.g. a stale daemon descriptor).
+ *
+ * This permission write is loopback-HMAC protected: a sandboxed worker that
+ * merely discovers an ipcPort must not be able to grant itself access.
+ */
+ipcRoute('POST', '/api/grants/chat', async (req, res) => {
+    const localPort = req.socket.localPort;
+    const authBind = localPort ? cliAuthBind('POST', '/api/grants/chat', localPort) : undefined;
+    if (!authBind || !tokenRouteAuthorized(req, authBind)) {
+        return jsonRes(res, 401, { ok: false, error: 'unauthorized' });
+    }
+    if (!cachedLarkAppId) {
+        return jsonRes(res, 503, { ok: false, error: 'larkAppId_not_set' });
+    }
+    let body;
+    try {
+        body = await readJsonBody(req);
+    }
+    catch {
+        return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+    }
+    if (body.receiverLarkAppId !== cachedLarkAppId) {
+        return jsonRes(res, 409, {
+            ok: false,
+            error: 'receiver_mismatch',
+            receiverLarkAppId: cachedLarkAppId,
+        });
+    }
+    const hasSubjectOpenIds = Object.prototype.hasOwnProperty.call(body, 'subjectOpenIds');
+    const hasSubjectLarkAppIds = Object.prototype.hasOwnProperty.call(body, 'subjectLarkAppIds');
+    if (hasSubjectOpenIds === hasSubjectLarkAppIds) {
+        return jsonRes(res, 400, {
+            ok: false,
+            error: 'exactly_one_subject_identity_required',
+            message: 'Provide exactly one of subjectOpenIds or subjectLarkAppIds',
+        });
+    }
+    if (hasSubjectLarkAppIds && body.operation !== 'grant') {
+        return jsonRes(res, 400, {
+            ok: false,
+            error: 'subject_lark_app_ids_grant_only',
+            message: 'subjectLarkAppIds may only be used with operation=grant',
+        });
+    }
+    const result = hasSubjectLarkAppIds
+        ? await exactChatGrantHandler({
+            operation: body.operation,
+            receiverLarkAppId: cachedLarkAppId,
+            chatId: body.chatId,
+            subjectLarkAppIds: body.subjectLarkAppIds,
+        })
+        : await exactChatGrantHandler({
+            operation: body.operation,
+            receiverLarkAppId: cachedLarkAppId,
+            chatId: body.chatId,
+            subjectOpenIds: body.subjectOpenIds,
+        });
+    if (!result.ok) {
+        const { status, ...responseBody } = result;
+        return jsonRes(res, status, responseBody);
+    }
+    return jsonRes(res, 200, result);
+});
 // ─── Groups (Phase B) ──────────────────────────────────────────────────────
 ipcRoute('GET', '/api/groups', async (_req, res) => {
     if (!cachedLarkAppId)
@@ -2029,6 +2229,7 @@ ipcRoute('GET', '/api/bot-default-oncall', async (_req, res) => {
         autoboundChatCount: autoboundChats.length,
         brandLabel: brandStore.getBotBrandLabel(cachedLarkAppId) ?? null,
         sandbox: sandboxStore.getBotSandbox(cachedLarkAppId),
+        sandboxPaths: sandboxStore.getBotSandboxPaths(cachedLarkAppId) ?? null,
         readIsolation: sandboxStore.getBotReadIsolation(cachedLarkAppId),
         // Full enforceability (adapter support + no wrapperCli + macOS) — the UI
         // disables the toggle wherever the worker would fail-close on it.
@@ -2777,6 +2978,31 @@ ipcRoute('PUT', '/api/bot-sandbox', async (req, res) => {
         return jsonRes(res, 400, { ok: false, error: r.reason });
     jsonRes(res, 200, { ok: true, sandbox: r.sandbox });
 });
+// Per-bot sandboxPaths (three-tier whitelist: readWrite / readOnly / deny).
+// Body `{ readWrite?: string[]; readOnly?: string[]; deny?: string[] }`. Highest-
+// precedence layer of the FsPolicy — an empty/absent tier falls back to the
+// deny-by-default baseline. Passing all-empty CLEARS the field. next-session
+// 生效：running sessions keep their spawn-time policy, only new spawns re-read it.
+ipcRoute('PUT', '/api/bot-sandbox-paths', async (req, res) => {
+    if (!cachedLarkAppId)
+        return jsonRes(res, 503, { error: 'larkAppId_not_set' });
+    let body;
+    try {
+        body = await readJsonBody(req);
+    }
+    catch {
+        return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+    }
+    const asList = (v) => Array.isArray(v) ? v.filter((x) => typeof x === 'string') : undefined;
+    const r = await sandboxStore.updateBotSandboxPaths(cachedLarkAppId, {
+        readWrite: asList(body.readWrite),
+        readOnly: asList(body.readOnly),
+        deny: asList(body.deny),
+    });
+    if (!r.ok)
+        return jsonRes(res, 400, { ok: false, error: r.reason });
+    jsonRes(res, 200, { ok: true, sandboxPaths: r.sandboxPaths ?? null });
+});
 // Per-bot read-isolation toggle. Body `{ enabled: boolean }`. When on, this bot's
 // CLI sessions run under macOS Seatbelt read-deny (siblings' creds/sessions/content
 // unreadable). The macOS counterpart of the file sandbox above.