botmux 3.4.3 → 3.5.2

package/dist/services/sandbox-migration.js

@@ -0,0 +1,85 @@
+/**
+ * bots.json sandbox-config auto-migration (old fields → fs-policy model).
+ *
+ * Runs at daemon startup, inside the shared cross-process file lock (multiple
+ * per-bot daemons boot concurrently against the same bots.json). Writes the
+ * NEW fields while KEEPING the legacy ones on disk — a downgraded daemon reads
+ * the untouched legacy fields, so downgrade needs no reverse script (design
+ * doc §6.2: upgrade rewrites, downgrade is zero-op). The original file is
+ * backed up once to `bots.json.bak-sandbox-v1` before the first rewrite.
+ *
+ * Idempotent: entries that already carry `sandboxPaths` (or have nothing to
+ * migrate) are skipped, so every subsequent boot is a no-op.
+ */
+import { promises as fsp, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { withFileLock } from '../utils/file-lock.js';
+import { writeRawConfigAtomic } from './config-store.js';
+import { migrateLegacySandboxFields } from '../adapters/cli/fs-policy.js';
+import { logger } from '../utils/logger.js';
+/** The bots.json path the daemon will load (same resolution as loadBotConfigs). */
+export function resolveBotsConfigPath() {
+    const fromEnv = process.env.BOTS_CONFIG;
+    if (fromEnv) {
+        const p = resolve(fromEnv);
+        return existsSync(p) ? p : null;
+    }
+    const p = resolve(homedir(), '.botmux', 'bots.json');
+    return existsSync(p) ? p : null;
+}
+/**
+ * Migrate every entry's legacy sandbox fields in `path`. Returns the appIds
+ * that were migrated (empty = file untouched). Never throws on a malformed
+ * file — migration must not brick daemon startup; loadBotConfigs surfaces
+ * parse errors with better context right after.
+ */
+export async function migrateSandboxConfigOnDisk(path) {
+    try {
+        return await withFileLock(path, async () => {
+            let raw;
+            try {
+                raw = JSON.parse(await fsp.readFile(path, 'utf-8'));
+            }
+            catch {
+                return { migrated: [] };
+            }
+            if (!Array.isArray(raw))
+                return { migrated: [] };
+            const migrated = [];
+            for (const entry of raw) {
+                if (!entry || typeof entry !== 'object')
+                    continue;
+                const m = migrateLegacySandboxFields(entry);
+                if (!m)
+                    continue;
+                entry.sandbox = m.sandbox;
+                if (m.sandboxPaths)
+                    entry.sandboxPaths = m.sandboxPaths;
+                migrated.push(typeof entry.larkAppId === 'string' ? entry.larkAppId : '<unknown>');
+            }
+            if (!migrated.length)
+                return { migrated };
+            const bak = `${path}.bak-sandbox-v1`;
+            if (!existsSync(bak)) {
+                await fsp.copyFile(path, bak);
+                await fsp.chmod(bak, 0o600);
+            }
+            await writeRawConfigAtomic(path, raw);
+            logger.info(`[sandbox-migration] migrated legacy sandbox fields for ${migrated.length} bot(s): ${migrated.join(', ')} (backup: ${bak})`);
+            return { migrated };
+        });
+    }
+    catch (err) {
+        logger.warn(`[sandbox-migration] skipped (${err instanceof Error ? err.message : String(err)})`);
+        return { migrated: [] };
+    }
+}
+/** Startup convenience: resolve the config path and migrate if present. */
+export async function migrateSandboxConfigAtStartup() {
+    const path = resolveBotsConfigPath();
+    if (!path)
+        return;
+    await migrateSandboxConfigOnDisk(path);
+}
+//# sourceMappingURL=sandbox-migration.js.map

package/dist/services/sandbox-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-migration.js","sourceRoot":"","sources":["../../src/services/sandbox-migration.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,mFAAmF;AACnF,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACxC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3B,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACzC,IAAI,GAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAAC,CAAC;YAC/F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;gBACxB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBAClD,MAAM,CAAC,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,CAAC,CAAC;oBAAE,SAAS;gBACjB,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;gBAC1B,IAAI,CAAC,CAAC,YAAY;oBAAE,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;gBACxD,QAAQ,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,MAAM;gBAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,GAAG,IAAI,iBAAiB,CAAC;YACrC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC9B,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,MAAM,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,0DAA0D,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;YACzI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjG,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,IAAI,GAAG,qBAAqB,EAAE,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC"}

package/dist/services/sandbox-store.d.ts

@@ -19,4 +19,32 @@ export declare function updateBotReadIsolation(larkAppId: string, enabled: boole
     ok: false;
     reason: string;
 }>;
+/** The three-tier sandbox path lists a bot may declare (highest-precedence
+ *  layer of the FsPolicy). Empty/absent tiers fall back to deny-by-default. */
+export interface SandboxPathTiers {
+    readWrite?: string[];
+    readOnly?: string[];
+    deny?: string[];
+}
+/** Current configured sandboxPaths for a bot (undefined = none set). */
+export declare function getBotSandboxPaths(larkAppId: string): SandboxPathTiers | undefined;
+/** Normalize a three-tier sandboxPaths object for storage: per-tier trim/dedup,
+ *  then CROSS-TIER dedup resolving a path listed in >1 tier to the MORE
+ *  RESTRICTIVE tier (deny > readOnly > readWrite) — matching fs-policy's
+ *  mergeFsRules same-source tie-break, so what's stored matches what the sandbox
+ *  (and the dashboard UI/tester) resolve. Returns `{}` when every tier is empty
+ *  (caller treats that as "clear the field"). Pure — unit-tested directly. */
+export declare function normalizeSandboxPaths(tiers: SandboxPathTiers): SandboxPathTiers;
+/** Per-bot sandboxPaths (readWrite/readOnly/deny) persistence. Same contract as
+ *  {@link updateBotSandbox}: atomic bots.json write + in-memory sync, so the next
+ *  session spawn reads `botCfg.sandboxPaths` without a daemon restart. Passing an
+ *  all-empty tiers object CLEARS the field (bots.json stays clean → pure
+ *  deny-by-default baseline). */
+export declare function updateBotSandboxPaths(larkAppId: string, tiers: SandboxPathTiers): Promise<{
+    ok: true;
+    sandboxPaths?: SandboxPathTiers;
+} | {
+    ok: false;
+    reason: string;
+}>;
 //# sourceMappingURL=sandbox-store.d.ts.map

package/dist/services/sandbox-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-store.d.ts","sourceRoot":"","sources":["../../src/services/sandbox-store.ts"],"names":[],"mappings":"AAUA,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAczE;AAED,wDAAwD;AACxD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;uFAEuF;AACvF,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/E"}
+{"version":3,"file":"sandbox-store.d.ts","sourceRoot":"","sources":["../../src/services/sandbox-store.ts"],"names":[],"mappings":"AAUA,sDAAsD;AACtD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAczE;AAED,wDAAwD;AACxD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAE9D;AAED;;uFAEuF;AACvF,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAc/E;AAED;+EAC+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAElF;AAkBD;;;;;8EAK8E;AAC9E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CAc/E;AAED;;;;iCAIiC;AACjC,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,gBAAgB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBxF"}

package/dist/services/sandbox-store.js

@@ -70,4 +70,86 @@ export async function updateBotReadIsolation(larkAppId, enabled) {
     logger.info(`[read-isolation:${larkAppId}] readIsolation → ${enabled}`);
     return { ok: true, readIsolation: enabled };
 }
+/** Current configured sandboxPaths for a bot (undefined = none set). */
+export function getBotSandboxPaths(larkAppId) {
+    try {
+        return getBot(larkAppId).config.sandboxPaths;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Trim + drop empties + dedupe one tier's path list. Returns undefined for an
+ *  empty result so an all-empty tiers object collapses to "no sandboxPaths". */
+function normalizeTier(list) {
+    if (!Array.isArray(list))
+        return undefined;
+    const seen = new Set();
+    const out = [];
+    for (const raw of list) {
+        if (typeof raw !== 'string')
+            continue;
+        const p = raw.trim();
+        if (!p || seen.has(p))
+            continue;
+        seen.add(p);
+        out.push(p);
+    }
+    return out.length ? out : undefined;
+}
+/** Normalize a three-tier sandboxPaths object for storage: per-tier trim/dedup,
+ *  then CROSS-TIER dedup resolving a path listed in >1 tier to the MORE
+ *  RESTRICTIVE tier (deny > readOnly > readWrite) — matching fs-policy's
+ *  mergeFsRules same-source tie-break, so what's stored matches what the sandbox
+ *  (and the dashboard UI/tester) resolve. Returns `{}` when every tier is empty
+ *  (caller treats that as "clear the field"). Pure — unit-tested directly. */
+export function normalizeSandboxPaths(tiers) {
+    const rw = normalizeTier(tiers.readWrite);
+    const ro = normalizeTier(tiers.readOnly);
+    const deny = normalizeTier(tiers.deny);
+    const normPath = (p) => p.replace(/\/+$/, '') || '/';
+    const denySet = new Set((deny ?? []).map(normPath));
+    const roSet = new Set((ro ?? []).map(normPath));
+    const keptRw = (rw ?? []).filter(p => !denySet.has(normPath(p)) && !roSet.has(normPath(p)));
+    const keptRo = (ro ?? []).filter(p => !denySet.has(normPath(p)));
+    const out = {};
+    if (keptRw.length)
+        out.readWrite = keptRw;
+    if (keptRo.length)
+        out.readOnly = keptRo;
+    if (deny)
+        out.deny = deny;
+    return out;
+}
+/** Per-bot sandboxPaths (readWrite/readOnly/deny) persistence. Same contract as
+ *  {@link updateBotSandbox}: atomic bots.json write + in-memory sync, so the next
+ *  session spawn reads `botCfg.sandboxPaths` without a daemon restart. Passing an
+ *  all-empty tiers object CLEARS the field (bots.json stays clean → pure
+ *  deny-by-default baseline). */
+export async function updateBotSandboxPaths(larkAppId, tiers) {
+    let bot;
+    try {
+        bot = getBot(larkAppId);
+    }
+    catch {
+        return { ok: false, reason: 'bot_not_registered' };
+    }
+    const normalized = normalizeSandboxPaths(tiers);
+    const isEmpty = !normalized.readWrite && !normalized.readOnly && !normalized.deny;
+    const r = await rmwBotEntry(larkAppId, (entry) => {
+        if (isEmpty)
+            delete entry.sandboxPaths; // clear → preserves deny-by-default baseline
+        else
+            entry.sandboxPaths = normalized;
+        return { write: true, result: isEmpty ? undefined : normalized };
+    });
+    if (!r.ok)
+        return { ok: false, reason: r.reason };
+    if (isEmpty)
+        delete bot.config.sandboxPaths;
+    else
+        bot.config.sandboxPaths = normalized;
+    logger.info(`[sandbox:${larkAppId}] sandboxPaths → rw=${normalized.readWrite?.length ?? 0} ro=${normalized.readOnly?.length ?? 0} deny=${normalized.deny?.length ?? 0}`);
+    return { ok: true, sandboxPaths: isEmpty ? undefined : normalized };
+}
 //# sourceMappingURL=sandbox-store.js.map

package/dist/services/sandbox-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-store.js","sourceRoot":"","sources":["../../src/services/sandbox-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,OAAgB;IAEhB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,CAAC;IAE9F,MAAM,CAAC,GAAG,MAAM,WAAW,CAAU,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QACxD,IAAI,OAAO;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;;YAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAE,+CAA+C;QAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElD,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,SAAS,eAAe,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzF,CAAC;AAED;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,OAAgB;IAEhB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,CAAC;IAE9F,MAAM,CAAC,GAAG,MAAM,WAAW,CAAU,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QACxD,IAAI,OAAO;YAAE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;;YACnC,OAAO,KAAK,CAAC,aAAa,CAAC,CAAE,+CAA+C;QACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElD,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,mBAAmB,SAAS,qBAAqB,OAAO,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"sandbox-store.js","sourceRoot":"","sources":["../../src/services/sandbox-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,sDAAsD;AACtD,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,OAAgB;IAEhB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,CAAC;IAE9F,MAAM,CAAC,GAAG,MAAM,WAAW,CAAU,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QACxD,IAAI,OAAO;YAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;;YAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAE,+CAA+C;QAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElD,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,YAAY,SAAS,eAAe,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzF,CAAC;AAED;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,OAAgB;IAEhB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,CAAC;IAE9F,MAAM,CAAC,GAAG,MAAM,WAAW,CAAU,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QACxD,IAAI,OAAO;YAAE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;;YACnC,OAAO,KAAK,CAAC,aAAa,CAAC,CAAE,+CAA+C;QACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElD,GAAG,CAAC,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,mBAAmB,SAAS,qBAAqB,OAAO,EAAE,CAAC,CAAC;IACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC;AAUD,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACnF,CAAC;AAED;gFACgF;AAChF,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,SAAS;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC;AAED;;;;;8EAK8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,KAAuB;IAC3D,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM;QAAE,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;IACzC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;iCAIiC;AACjC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,KAAuB;IAEvB,IAAI,GAAG,CAAC;IACR,IAAI,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAAC,CAAC;IAE9F,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;IAElF,MAAM,CAAC,GAAG,MAAM,WAAW,CAA+B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC7E,IAAI,OAAO;YAAE,OAAO,KAAK,CAAC,YAAY,CAAC,CAAG,6CAA6C;;YAClF,KAAK,CAAC,YAAY,GAAG,UAAU,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAElD,IAAI,OAAO;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;;QACvC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC;IAC1C,MAAM,CAAC,IAAI,CAAC,YAAY,SAAS,uBAAuB,UAAU,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,SAAS,UAAU,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC,CAAC;IACzK,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACtE,CAAC"}

package/dist/services/traex-user-input.d.ts

@@ -0,0 +1,19 @@
+import type { AskQuestion } from '../core/ask-types.js';
+export interface TraexUserInputQuestion {
+    id: string;
+    question: AskQuestion;
+}
+export type TraexUserInputParseResult = {
+    kind: 'answerable';
+    questions: TraexUserInputQuestion[];
+} | {
+    kind: 'unsupported';
+    reason: string;
+};
+/**
+ * Convert TRAE's app-server requestUserInput payload into the existing
+ * button-card contract. The card cannot faithfully represent a free-text or
+ * malformed question, so a mixed batch must not silently drop those questions.
+ */
+export declare function parseTraexUserInputQuestions(params: unknown): TraexUserInputParseResult;
+//# sourceMappingURL=traex-user-input.d.ts.map

package/dist/services/traex-user-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traex-user-input.d.ts","sourceRoot":"","sources":["../../src/services/traex-user-input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,sBAAsB,EAAE,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,yBAAyB,CAqDvF"}

package/dist/services/traex-user-input.js

@@ -0,0 +1,57 @@
+/**
+ * Convert TRAE's app-server requestUserInput payload into the existing
+ * button-card contract. The card cannot faithfully represent a free-text or
+ * malformed question, so a mixed batch must not silently drop those questions.
+ */
+export function parseTraexUserInputQuestions(params) {
+    if (!params || typeof params !== 'object' || Array.isArray(params)) {
+        return { kind: 'unsupported', reason: 'missing request parameters' };
+    }
+    const rawQuestions = params.questions;
+    if (!Array.isArray(rawQuestions) || rawQuestions.length === 0) {
+        return { kind: 'unsupported', reason: 'missing questions' };
+    }
+    const questions = [];
+    const ids = new Set();
+    for (let index = 0; index < rawQuestions.length; index++) {
+        const raw = rawQuestions[index];
+        if (!raw || typeof raw !== 'object' || Array.isArray(raw)) {
+            return { kind: 'unsupported', reason: `question ${index + 1} is malformed` };
+        }
+        const question = raw;
+        if (!Array.isArray(question.options) || question.options.length < 2) {
+            return { kind: 'unsupported', reason: `question ${index + 1} has fewer than two options` };
+        }
+        const options = [];
+        for (const option of question.options) {
+            if (!option || typeof option !== 'object' || Array.isArray(option)) {
+                return { kind: 'unsupported', reason: `question ${index + 1} has a malformed option` };
+            }
+            const label = option.label;
+            if (typeof label !== 'string' || !label.trim()) {
+                return { kind: 'unsupported', reason: `question ${index + 1} has an invalid option label` };
+            }
+            options.push({ key: label, label });
+        }
+        const id = typeof question.id === 'string' && question.id ? question.id : `q${index}`;
+        if (ids.has(id)) {
+            return { kind: 'unsupported', reason: `duplicate question id: ${id}` };
+        }
+        ids.add(id);
+        const prompt = typeof question.question === 'string' && question.question.trim()
+            ? question.question
+            : typeof question.header === 'string' && question.header.trim()
+                ? question.header
+                : `Question ${index + 1}`;
+        questions.push({
+            id,
+            question: {
+                prompt,
+                multiSelect: question.multiSelect === true,
+                options,
+            },
+        });
+    }
+    return { kind: 'answerable', questions };
+}
+//# sourceMappingURL=traex-user-input.js.map

package/dist/services/traex-user-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traex-user-input.js","sourceRoot":"","sources":["../../src/services/traex-user-input.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAe;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,YAAY,GAAI,MAAkC,CAAC,SAAS,CAAC;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9D,CAAC;IAED,MAAM,SAAS,GAA6B,EAAE,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,KAAK,GAAG,CAAC,eAAe,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,GAA8B,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,KAAK,GAAG,CAAC,6BAA6B,EAAE,CAAC;QAC7F,CAAC;QAED,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,KAAK,GAAG,CAAC,yBAAyB,EAAE,CAAC;YACzF,CAAC;YACD,MAAM,KAAK,GAAI,MAAkC,CAAC,KAAK,CAAC;YACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC/C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,KAAK,GAAG,CAAC,8BAA8B,EAAE,CAAC;YAC9F,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,EAAE,GAAG,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;QACtF,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;QACzE,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,MAAM,GAAG,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC9E,CAAC,CAAC,QAAQ,CAAC,QAAQ;YACnB,CAAC,CAAC,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC7D,CAAC,CAAC,QAAQ,CAAC,MAAM;gBACjB,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC;YACb,EAAE;YACF,QAAQ,EAAE;gBACR,MAAM;gBACN,WAAW,EAAE,QAAQ,CAAC,WAAW,KAAK,IAAI;gBAC1C,OAAO;aACR;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC"}

package/dist/setup/open-platform-automation.d.ts

@@ -64,10 +64,14 @@ export type OpenPlatformAutomationResult = {
     missingVcEvents: string[];
     /** 回读确认事件接收方式已是长连接(ok:true 时恒为 true,显式带回供门函数统一判定)。 */
     eventModeReady: boolean;
+    /** Managed onboarding only: exact same-session event mode readback. */
+    eventMode?: number;
+    /** Managed onboarding only: exact baseline event + callback count read back before session cleanup. */
+    verifiedEventCount?: number;
     versionId?: string;
 } | {
     ok: false;
-    reason: 'unsupported_brand' | 'missing_session' | 'invalid_session' | 'login_failed' | 'qr_expired' | 'timeout' | 'missing_csrf' | 'scope_mapping_failed' | 'network' | 'api_error';
+    reason: 'unsupported_brand' | 'missing_session' | 'invalid_session' | 'login_failed' | 'qr_expired' | 'timeout' | 'missing_csrf' | 'owner_session_mismatch' | 'scope_mapping_failed' | 'event_verification_failed' | 'version_verification_failed' | 'network' | 'api_error';
     message: string;
     sessionFile?: string;
     /** Number of events successfully subscribed (0 when event update failed before downstream error). */
@@ -78,6 +82,12 @@ export type OpenPlatformAutomationResult = {
     missingVcEvents?: string[];
     /** 事件接收方式是否回读确认为长连接(走到订阅阶段才有;早期失败为 undefined)。 */
     eventModeReady?: boolean;
+    /** Managed onboarding exact event-mode ACK, preserved across later scope propagation failure. */
+    eventMode?: number;
+    /** Managed onboarding exact baseline count ACK, preserved across later scope propagation failure. */
+    verifiedEventCount?: number;
+    /** Exact published version ACK, preserved across later scope propagation failure. */
+    versionId?: string;
 };
 export interface OpenPlatformAutomationOptions {
     appId: string;
@@ -85,10 +95,12 @@ export interface OpenPlatformAutomationOptions {
     sessionFilePath?: string;
     bytedcliFallbackSessionFilePath?: string;
     disableBytedcliFallback?: boolean;
-    /** Ignore cached sessions and require a fresh QR login. */
+    /** Ignore any shared cached account and require the exact App owner to scan. */
     forceQrLogin?: boolean;
     /** Reuse a valid cache or fail instead of presenting another QR. */
     disableQrLogin?: boolean;
+    /** Require all baseline events/callbacks and a published version to be proven before managed activation. */
+    requireVerifiedEvents?: boolean;
     fetchImpl?: typeof fetch;
     scopeManifest?: ScopeManifest;
     pollIntervalMs?: number;
@@ -97,6 +109,10 @@ export interface OpenPlatformAutomationOptions {
         qrText: string;
         qrPayload: string;
     }) => void | Promise<void>;
+    /** Emitted once only after Feishu reports this exact QR as scanned. */
+    onQrScanConfirmed?: (info: {
+        confirmedAt: number;
+    }) => void | Promise<void>;
     onStatus?: (message: string) => void | Promise<void>;
 }
 export type FeishuWebSessionSource = 'botmux_cache' | 'qr_login' | 'bytedcli_fallback';
@@ -133,6 +149,10 @@ export interface FeishuWebSessionOptions {
         qrText: string;
         qrPayload: string;
     }) => void | Promise<void>;
+    /** Emitted once only after polling observes Feishu status=2 for this QR. */
+    onQrScanConfirmed?: (info: {
+        confirmedAt: number;
+    }) => void | Promise<void>;
     onStatus?: (message: string) => void | Promise<void>;
 }
 export type FeishuOpenPlatformSessionInspectionResult = {
@@ -378,7 +398,8 @@ export declare function listOpenPlatformApps(client: OpenPlatformApiClient, opts
 export declare function fetchOpenPlatformAppSecret(client: OpenPlatformApiClient, clientId: string): Promise<string>;
 export declare class OpenPlatformApiError extends Error {
     readonly payload: unknown;
-    constructor(message: string, payload: unknown);
+    readonly status: number;
+    constructor(message: string, payload: unknown, status: number);
 }
 /** 从 app_version/list 响应算下一个版本号（最新已发布 +1，无发布版 → 0.0.1）。 */
 export declare function nextAppVersion(payload: unknown): string;

package/dist/setup/open-platform-automation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-platform-automation.d.ts","sourceRoot":"","sources":["../../src/setup/open-platform-automation.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,uMAO1B,CAAC;AAEX,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,oCAAqC,CAAC;AAE1E,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB,kCAAmC,CAAC;AAEvE,oCAAoC;AACpC,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAS5C,eAAO,MAAM,qBAAqB,yIAEjC,CAAC;AACF,eAAO,MAAM,sBAAsB,yIAElC,CAAC;AAEF,eAAO,MAAM,mBAAmB,mCAAmC,CAAC;AAYpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sDAAsD;IACtD,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,YAAY,GACZ,SAAS,GACT,cAAc,GACd,sBAAsB,GACtB,SAAS,GACT,WAAW,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,2DAA2D;IAC3D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAGD,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG,UAAU,GAAG,mBAAmB,CAAC;AACvF,MAAM,MAAM,6BAA6B,GAAG,cAAc,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAEtH,MAAM,MAAM,6BAA6B,GACrC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,6BAA6B,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEN,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kEAAkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,MAAM,yCAAyC,GACjD;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,6BAA6B,GAAG,cAAc,GAAG,sBAAsB,GAAG,SAAS,CAAC;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAGN,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAOtE;AAED,wBAAgB,2BAA2B,CAAC,SAAS,SAA6B,GAAG,MAAM,CAE1F;AAED,wBAAgB,6BAA6B,CAAC,OAAO,SAAY,GAAG,MAAM,CAEzE;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAYxF;AAED,wBAAgB,oCAAoC,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAE5F;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CA2B/F;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAWnF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxE;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAsBhG;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAU1F;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,sBAAsB,EAAE,GAChC,cAAc,CAShB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,GAAG,cAAc,CAAC;;;;;;;EASrH;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM;;;EAKpD;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,MAAM,GAAE,MAAM,EAAO;;;;;;;EAUtB;AAED,qDAAqD;AACrD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;;;;;EAOxG;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,6FAA6F;AAC7F,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,CAyBtF;AAED,sGAAsG;AACtG,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAQ5F;AAcD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAE,MAAM,EAAO;;;;;;;;;;;;;;;;;EAmB/F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAItE;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,6BAA6B,CAAC,CA8DxC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,4BAA4B,CAAC,CA4TvC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,MAAM,GAAG,IAAI,CAchB;AASD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAA;CAAE,GAChF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,YAAY,EAAE,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyDnC;AAED;;;GAGG;AACH,wBAAsB,sCAAsC,CAC1D,OAAO,GAAE,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,GAAG,WAAW,CAAM,GAC3E,OAAO,CAAC,yCAAyC,CAAC,CA8BpD;AAED,MAAM,MAAM,iCAAiC,GACzC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,CAAC;IACtC,eAAe,EAAE,wBAAwB,CAAC;CAC3C,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,6BAA6B,GAC7B,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,WAAW,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,kCAAmC,SAAQ,uBAAuB;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;IACzE,8BAA8B;IAC9B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,QAAQ,EAAE,wBAAwB,CAAC;KACpC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAwBD,yDAAyD;AACzD,eAAO,MAAM,iCAAiC,sBAAsB,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM;;;;;;;;;;;;;;EAYZ;AAgBD;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,qBAAqB,EAI7B,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC5F,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA6E/C;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,iCAAiC,CAAC,CA+D5C;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,qBAAqB,EAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CA2BnC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAMjB;AA2MD,qBAAa,oBAAqB,SAAQ,KAAK;IAChB,QAAQ,CAAC,OAAO,EAAE,OAAO;gBAA1C,OAAO,EAAE,MAAM,EAAW,OAAO,EAAE,OAAO;CAGvD;AAgFD,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAmBvD;AAWD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKrE"}
+{"version":3,"file":"open-platform-automation.d.ts","sourceRoot":"","sources":["../../src/setup/open-platform-automation.ts"],"names":[],"mappings":"AAgBA;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,uMAO1B,CAAC;AAEX,qDAAqD;AACrD,eAAO,MAAM,uBAAuB,oCAAqC,CAAC;AAE1E,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB,kCAAmC,CAAC;AAEvE,oCAAoC;AACpC,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAS5C,eAAO,MAAM,qBAAqB,yIAEjC,CAAC;AACF,eAAO,MAAM,sBAAsB,yIAElC,CAAC;AAEF,eAAO,MAAM,mBAAmB,mCAAmC,CAAC;AAYpE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,+CAA+C;AAC/C,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,sDAAsD;IACtD,cAAc,EAAE,OAAO,CAAC;IACxB,uEAAuE;IACvE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uGAAuG;IACvG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,mBAAmB,GACnB,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,GACd,YAAY,GACZ,SAAS,GACT,cAAc,GACd,wBAAwB,GACxB,sBAAsB,GACtB,2BAA2B,GAC3B,6BAA6B,GAC7B,SAAS,GACT,WAAW,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qGAAqG;IACrG,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iCAAiC;IACjC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kDAAkD;IAClD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,iGAAiG;IACjG,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qGAAqG;IACrG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEN,MAAM,WAAW,6BAA6B;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,gFAAgF;IAChF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4GAA4G;IAC5G,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAGD,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG,UAAU,GAAG,mBAAmB,CAAC;AACvF,MAAM,MAAM,6BAA6B,GAAG,cAAc,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAEtH,MAAM,MAAM,6BAA6B,GACrC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,6BAA6B,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEN,MAAM,WAAW,uBAAuB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,kEAAkE;IAClE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtD;AAED,MAAM,MAAM,yCAAyC,GACjD;IACE,EAAE,EAAE,IAAI,CAAC;IACT,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,6BAA6B,GAAG,cAAc,GAAG,sBAAsB,GAAG,SAAS,CAAC;IAC5F,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAGN,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAOtE;AAED,wBAAgB,2BAA2B,CAAC,SAAS,SAA6B,GAAG,MAAM,CAE1F;AAED,wBAAgB,6BAA6B,CAAC,OAAO,SAAY,GAAG,MAAM,CAEzE;AAED,wBAAgB,gCAAgC,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAYxF;AAED,wBAAgB,oCAAoC,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,GAAG,IAAI,CAE5F;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,CA2B/F;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAWnF;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKxE;AAED;;;GAGG;AACH,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI,CAsBhG;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAU1F;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,sBAAsB,EAAE,GAChC,cAAc,CAShB;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,GAAG,cAAc,CAAC;;;;;;;EASrH;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM;;;EAKpD;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAAE,EACnB,UAAU,EAAE,MAAM,EAAE,EACpB,MAAM,GAAE,MAAM,EAAO;;;;;;;EAUtB;AAED,qDAAqD;AACrD,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE;;;;;EAOxG;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,6FAA6F;AAC7F,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,CAyBtF;AAED,sGAAsG;AACtG,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAQ5F;AAcD;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAE,MAAM,EAAO;;;;;;;;;;;;;;;;;EAmB/F;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAItE;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,6BAA6B,CAAC,CA8DxC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,4BAA4B,CAAC,CAoVvC;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,MAAM,GAAG,IAAI,CAchB;AASD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAA;CAAE,GAChF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,YAAY,EAAE,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAyDnC;AAED;;;GAGG;AACH,wBAAsB,sCAAsC,CAC1D,OAAO,GAAE,IAAI,CAAC,uBAAuB,EAAE,iBAAiB,GAAG,WAAW,CAAM,GAC3E,OAAO,CAAC,yCAAyC,CAAC,CA8BpD;AAED,MAAM,MAAM,iCAAiC,GACzC;IACE,EAAE,EAAE,IAAI,CAAC;IACT,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,sBAAsB,CAAC;IACtC,eAAe,EAAE,wBAAwB,CAAC;CAC3C,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EACF,6BAA6B,GAC7B,cAAc,GACd,cAAc,GACd,sBAAsB,GACtB,iBAAiB,GACjB,WAAW,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,WAAW,kCAAmC,SAAQ,uBAAuB;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,gBAAgB,CAAC,EAAE,IAAI,CAAC,wBAAwB,EAAE,QAAQ,GAAG,UAAU,CAAC,CAAC;IACzE,8BAA8B;IAC9B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,QAAQ,EAAE,wBAAwB,CAAC;KACpC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAwBD,yDAAyD;AACzD,eAAO,MAAM,iCAAiC,sBAAsB,CAAC;AAErE;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM;;;;;;;;;;;;;;EAYZ;AAgBD;;;;;;;;;;GAUG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,qBAAqB,EAI7B,OAAO,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAC5F,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA6E/C;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,kCAAkC,GAC1C,OAAO,CAAC,iCAAiC,CAAC,CA+D5C;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,qBAAqB,EAC7B,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GACjD,OAAO,CAAC,sBAAsB,EAAE,CAAC,CA2BnC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,qBAAqB,EAC7B,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAMjB;AAgND,qBAAa,oBAAqB,SAAQ,KAAK;IAChB,QAAQ,CAAC,OAAO,EAAE,OAAO;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAnE,OAAO,EAAE,MAAM,EAAW,OAAO,EAAE,OAAO,EAAW,MAAM,EAAE,MAAM;CAGhF;AAsFD,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAmBvD;AAWD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKrE"}

package/dist/setup/open-platform-automation.js

@@ -394,6 +394,7 @@ export async function automateOpenPlatformSetup(options) {
         pollIntervalMs: options.pollIntervalMs,
         maxWaitMs: options.maxWaitMs,
         onQrCode: options.onQrCode,
+        onQrScanConfirmed: options.onQrScanConfirmed,
         onStatus: options.onStatus,
     });
     if (!preparedSession.ok) {
@@ -460,10 +461,10 @@ export async function automateOpenPlatformSetup(options) {
             data = null;
         }
         if (!response.ok) {
-            throw new OpenPlatformApiError(`HTTP ${response.status} ${path}: ${summarizeOpenPlatformPayload(data)}`, data);
+            throw new OpenPlatformApiError(`HTTP ${response.status} ${path}: ${summarizeOpenPlatformPayload(data)}`, data, response.status);
         }
         if (data && typeof data === 'object' && typeof data.code === 'number' && data.code !== 0) {
-            throw new OpenPlatformApiError(`code=${data.code} msg=${data.msg ?? data.message ?? ''}`, data);
+            throw new OpenPlatformApiError(`code=${data.code} msg=${data.msg ?? data.message ?? ''}`, data, response.status);
         }
         return data;
     };
@@ -472,7 +473,12 @@ export async function automateOpenPlatformSetup(options) {
         allScopesPayload = await postJson(`/developers/v1/scope/all/${options.appId}`);
     }
     catch (err) {
-        return { ok: false, reason: 'api_error', message: `读取开放平台 scope 列表失败: ${safeErrorMessage(err)}`, sessionFile };
+        return {
+            ok: false,
+            reason: openPlatformOwnerAccessDenied(err) ? 'owner_session_mismatch' : 'api_error',
+            message: `读取开放平台 scope 列表失败: ${safeErrorMessage(err)}`,
+            sessionFile,
+        };
     }
     const manifest = options.scopeManifest ?? readDefaultScopeManifest();
     const catalog = extractOpenPlatformScopeEntries(allScopesPayload);
@@ -615,7 +621,7 @@ export async function automateOpenPlatformSetup(options) {
         + BOT_BASELINE_CALLBACKS.filter(name => callbackState?.callbacks.includes(name)).length;
     const eventWarning = eventWarnings.length > 0 ? eventWarnings.join('; ') : undefined;
     const criticalIssues = [
-        ...BOT_CRITICAL_APP_EVENTS.filter(name => !hasEvent(name)),
+        ...(options.requireVerifiedEvents ? missingBaselineEvents : BOT_CRITICAL_APP_EVENTS.filter(name => !hasEvent(name))),
         ...missingCallbacks,
     ];
     // 长连接模式必须以回读为准:switch 接口返回成功≠生效,mode 不是 4 时
@@ -631,7 +637,7 @@ export async function automateOpenPlatformSetup(options) {
     if (criticalIssues.length > 0) {
         return {
             ok: false,
-            reason: 'api_error',
+            reason: options.requireVerifiedEvents ? 'event_verification_failed' : 'api_error',
             message: `核心事件/回调订阅未生效(${criticalIssues.join('; ')}),机器人将收不到消息或卡片点击;请到开放平台「事件与回调」手动补齐后重试`,
             sessionFile,
             subscribedEventCount,
@@ -653,6 +659,18 @@ export async function automateOpenPlatformSetup(options) {
         const appVersion = nextAppVersion(versionList);
         const created = await postJson(`/developers/v1/app_version/create/${options.appId}`, buildAppVersionCreatePayload(appVersion, visibleMemberIds));
         const versionId = extractVersionId(created);
+        if (options.requireVerifiedEvents && !versionId) {
+            return {
+                ok: false,
+                reason: 'version_verification_failed',
+                message: '开放平台未返回可发布的精确版本 ID，受管机器人保持未激活',
+                sessionFile,
+                subscribedEventCount,
+                eventWarning,
+                missingVcEvents,
+                eventModeReady,
+            };
+        }
         if (versionId) {
             await postJson(`/developers/v1/publish/commit/${options.appId}/${versionId}`, { clientId: options.appId });
         }
@@ -668,6 +686,12 @@ export async function automateOpenPlatformSetup(options) {
             eventWarning,
             missingVcEvents,
             eventModeReady,
+            ...(options.requireVerifiedEvents
+                ? {
+                    eventMode: eventState?.eventMode,
+                    verifiedEventCount: BOT_BASELINE_APP_EVENTS.length + BOT_BASELINE_CALLBACKS.length,
+                }
+                : {}),
             versionId,
         };
     }
@@ -755,10 +779,10 @@ export async function createOpenPlatformApiClient(cookies, opts = {}) {
             data = null;
         }
         if (!response.ok) {
-            throw new OpenPlatformApiError(`HTTP ${response.status} ${path}: ${summarizeOpenPlatformPayload(data)}`, data);
+            throw new OpenPlatformApiError(`HTTP ${response.status} ${path}: ${summarizeOpenPlatformPayload(data)}`, data, response.status);
         }
         if (data && typeof data === 'object' && typeof data.code === 'number' && data.code !== 0) {
-            throw new OpenPlatformApiError(`code=${data.code} msg=${data.msg ?? data.message ?? ''}`, data);
+            throw new OpenPlatformApiError(`code=${data.code} msg=${data.msg ?? data.message ?? ''}`, data, response.status);
         }
         return data;
     };
@@ -1095,11 +1119,16 @@ async function loginFeishuWebSession(fetcher, options) {
     const maxWaitMs = options.maxWaitMs ?? 120_000;
     const start = Date.now();
     let lastStatusMessage = '';
+    let scanConfirmationEmitted = false;
     for (;;) {
         if (Date.now() - start > maxWaitMs) {
             throw new FeishuWebSessionError('等待飞书扫码超时', 'timeout');
         }
         const poll = await pollFeishuQrLogin(session, fetcher, qrInit.flowKey);
+        if (poll.status === 2 && !scanConfirmationEmitted) {
+            scanConfirmationEmitted = true;
+            await options.onQrScanConfirmed?.({ confirmedAt: Date.now() });
+        }
         if (poll.nextStep === 'enter_app') {
             if (poll.crossLoginUri) {
                 await session.fetchRaw(fetcher, poll.crossLoginUri, { method: 'GET' });
@@ -1255,11 +1284,19 @@ class MutableCookieJar {
 }
 export class OpenPlatformApiError extends Error {
     payload;
-    constructor(message, payload) {
+    status;
+    constructor(message, payload, status) {
         super(message);
         this.payload = payload;
+        this.status = status;
     }
 }
+function openPlatformOwnerAccessDenied(error) {
+    if (!(error instanceof OpenPlatformApiError))
+        return false;
+    const payload = asRecord(error.payload);
+    return error.status === 403 && payload.code === 10003;
+}
 class FeishuWebSessionError extends Error {
     reason;
     constructor(message, reason) {