botmux 3.9.1 → 3.10.0

package/dist/platform/platform-http.js.map

@@ -1 +1 @@
-{"version":3,"file":"platform-http.js","sourceRoot":"","sources":["../../src/platform/platform-http.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,wDAAwD;AACxD,2DAA2D;AAC3D,gDAAgD;AAChD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAanD,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAa,EAAE,OAAwB,EAAE;IAC7E,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CACnB;YACE,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE;SAClF,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,GAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"platform-http.js","sourceRoot":"","sources":["../../src/platform/platform-http.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,wDAAwD;AACxD,2DAA2D;AAC3D,gDAAgD;AAChD,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AAenD,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAa,EAAE,OAAwB,EAAE;IAC7E,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CACnB;YACE,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,sDAAsD;YACtD,gBAAgB;YAChB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,EAAE;SAC9F,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,GAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,OAAwB,EAAE;IAC7D,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,SAAS,CACnB;YACE,IAAI,EAAE,CAAC,CAAC,QAAQ;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE;YAChC,MAAM,EAAE,KAAK;YACb,MAAM;YACN,OAAO,EAAE,SAAS;YAClB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACpD,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,IAAI,GAAY,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBAAC,MAAM,CAAC;oBACP,iCAAiC;gBACnC,CAAC;gBACD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CACF,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/pm2-graceful-exit.d.ts

@@ -0,0 +1,28 @@
+/**
+ * PM2 only receives an exit code plus a signal. For signal exits Node reports
+ * a null code, which PM2 normalizes to 0 before applying `stop_exit_codes`.
+ * Therefore 0 cannot safely mean "intentional shutdown" for a PM2-managed
+ * process: SIGKILL would be mistaken for a clean stop and never restarted.
+ */
+export declare const PM2_GRACEFUL_EXIT_CODE = 90;
+export declare const PM2_GRACEFUL_EXIT_CODE_ENV = "BOTMUX_PM2_GRACEFUL_EXIT_CODE";
+export declare function pm2ManagedExitConfig(): {
+    stopExitCodes: number[];
+    env: Record<string, string>;
+};
+/** Keep direct/foreground launches on the conventional successful exit code. */
+export declare function gracefulProcessExitCode(env?: NodeJS.ProcessEnv): number;
+/**
+ * Strip the graceful-exit sentinel from an env destined for a child/spawned
+ * process, returning a fresh shallow copy (never mutates the input). Only the
+ * two PM2-managed cores (daemon.ts, dashboard.ts) may see this marker;
+ * anything they fork/spawn that inherits it — a worker, a CLI child, a plugin
+ * PM2 app, a local terminal — could re-launch a foreground `botmux` and then
+ * exit 90 on a clean stop, which a supervisor misreads as a crash. Boundaries
+ * that copy raw `process.env` (pm2Env, spawnDetached) call this; boundaries
+ * with a key deny-list (redactChildEnv, workerForkEnv) list the key there
+ * instead. Always returns a new object so callers can safely mutate the result
+ * (e.g. delete other keys) without touching process.env.
+ */
+export declare function stripPm2GracefulExitMarker(env: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+//# sourceMappingURL=pm2-graceful-exit.d.ts.map

package/dist/pm2-graceful-exit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-graceful-exit.d.ts","sourceRoot":"","sources":["../src/pm2-graceful-exit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,eAAO,MAAM,0BAA0B,kCAAkC,CAAC;AAE1E,wBAAgB,oBAAoB,IAAI;IACtC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,CAKA;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAIpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAIpF"}

package/dist/pm2-graceful-exit.js

@@ -0,0 +1,39 @@
+/**
+ * PM2 only receives an exit code plus a signal. For signal exits Node reports
+ * a null code, which PM2 normalizes to 0 before applying `stop_exit_codes`.
+ * Therefore 0 cannot safely mean "intentional shutdown" for a PM2-managed
+ * process: SIGKILL would be mistaken for a clean stop and never restarted.
+ */
+// Keep the sentinel outside POSIX sysexits (64-78) and signal-derived 128+N.
+export const PM2_GRACEFUL_EXIT_CODE = 90;
+export const PM2_GRACEFUL_EXIT_CODE_ENV = 'BOTMUX_PM2_GRACEFUL_EXIT_CODE';
+export function pm2ManagedExitConfig() {
+    return {
+        stopExitCodes: [PM2_GRACEFUL_EXIT_CODE],
+        env: { [PM2_GRACEFUL_EXIT_CODE_ENV]: String(PM2_GRACEFUL_EXIT_CODE) },
+    };
+}
+/** Keep direct/foreground launches on the conventional successful exit code. */
+export function gracefulProcessExitCode(env = process.env) {
+    return env[PM2_GRACEFUL_EXIT_CODE_ENV] === String(PM2_GRACEFUL_EXIT_CODE)
+        ? PM2_GRACEFUL_EXIT_CODE
+        : 0;
+}
+/**
+ * Strip the graceful-exit sentinel from an env destined for a child/spawned
+ * process, returning a fresh shallow copy (never mutates the input). Only the
+ * two PM2-managed cores (daemon.ts, dashboard.ts) may see this marker;
+ * anything they fork/spawn that inherits it — a worker, a CLI child, a plugin
+ * PM2 app, a local terminal — could re-launch a foreground `botmux` and then
+ * exit 90 on a clean stop, which a supervisor misreads as a crash. Boundaries
+ * that copy raw `process.env` (pm2Env, spawnDetached) call this; boundaries
+ * with a key deny-list (redactChildEnv, workerForkEnv) list the key there
+ * instead. Always returns a new object so callers can safely mutate the result
+ * (e.g. delete other keys) without touching process.env.
+ */
+export function stripPm2GracefulExitMarker(env) {
+    const next = { ...env };
+    delete next[PM2_GRACEFUL_EXIT_CODE_ENV];
+    return next;
+}
+//# sourceMappingURL=pm2-graceful-exit.js.map

package/dist/pm2-graceful-exit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm2-graceful-exit.js","sourceRoot":"","sources":["../src/pm2-graceful-exit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAE1E,MAAM,UAAU,oBAAoB;IAIlC,OAAO;QACL,aAAa,EAAE,CAAC,sBAAsB,CAAC;QACvC,GAAG,EAAE,EAAE,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,EAAE;KACtE,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1E,OAAO,GAAG,CAAC,0BAA0B,CAAC,KAAK,MAAM,CAAC,sBAAsB,CAAC;QACvE,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAsB;IAC/D,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACxB,OAAO,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/services/bridge-fallback-gate.d.ts

@@ -1,5 +1,12 @@
-export declare const BRIDGE_NO_REPLY_SENTINEL = "BOTMUX_NO_REPLY";
-export declare function isBridgeNoReplyFinal(finalText: string | undefined): boolean;
+export declare const BRIDGE_NOTHING_TO_SEND_SENTINEL = "BOTMUX_NOTHING_TO_SEND";
+/** Superseded token name. Instructions no longer teach it, but the matcher
+ *  below still accepts it: during a rollout (and after a restart that restores
+ *  sessions spawned before the rename) in-flight turns still carry the old
+ *  token in their captured system prompt, and dropping recognition would leak
+ *  that literal sentinel line into Lark. The reader stays liberal; only the
+ *  instruction surface moved to the new name. */
+export declare const BRIDGE_NO_REPLY_SENTINEL_LEGACY = "BOTMUX_NO_REPLY";
+export declare function isBridgeNothingToSendFinal(finalText: string | undefined): boolean;
 export interface BridgeSendMarker {
     sentAtMs: number;
     messageId?: string;

package/dist/services/bridge-fallback-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-fallback-gate.d.ts","sourceRoot":"","sources":["../../src/services/bridge-fallback-gate.ts"],"names":[],"mappings":"AA6CA,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAE1D,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAuB3E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;2DACuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B;;yCAEqC;IACrC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;qDACiD;IACjD,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B;mFAC+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;gEAC4D;IAC5D,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;CACvD;AAID;;;;;;oFAMoF;AACpF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW9E;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,GACd,IAAI,CAAC,gBAAgB,EAAE,eAAe,GAAG,aAAa,CAAC,GAAG,SAAS,CAUrE;AA8BD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,eAAe,EACrB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,SAAS,EAAE,OAAO,GACjB,OAAO,CAST;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;2DA2B2D;AAC3D,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,eAAe,EACrB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,SAAS,EAAE,OAAO,GACjB,OAAO,CAMT"}
+{"version":3,"file":"bridge-fallback-gate.d.ts","sourceRoot":"","sources":["../../src/services/bridge-fallback-gate.ts"],"names":[],"mappings":"AA8CA,eAAO,MAAM,+BAA+B,2BAA2B,CAAC;AACxE;;;;;iDAKiD;AACjD,eAAO,MAAM,+BAA+B,oBAAoB,CAAC;AAOjE,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAuBjF;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;2DACuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B;;yCAEqC;IACrC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B;qDACiD;IACjD,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B;mFAC+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;gEAC4D;IAC5D,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;CACvD;AAID;;;;;;oFAMoF;AACpF,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAW9E;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,GACd,IAAI,CAAC,gBAAgB,EAAE,eAAe,GAAG,aAAa,CAAC,GAAG,SAAS,CAUrE;AA8BD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,eAAe,EACrB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,SAAS,EAAE,OAAO,GACjB,OAAO,CAST;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;2DA2B2D;AAC3D,wBAAgB,sCAAsC,CACpD,IAAI,EAAE,eAAe,EACrB,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,SAAS,EAAE,OAAO,GACjB,OAAO,CAMT"}

package/dist/services/bridge-fallback-gate.js

@@ -8,14 +8,15 @@
  * disk and threads them through here.
  *
  * Rules:
- *   - Non-adopt + no-reply sentinel terminator: suppress the whole turn.
- *     Botmux-aware models use this explicit protocol when a turn genuinely
- *     needs no chat response. The signal is the LAST non-empty line of the
- *     final being exactly `BOTMUX_NO_REPLY` — models almost always explain
- *     the silence first and then append the token on its own line, so a
- *     full-string exact match leaked the literal token into Lark. A token
- *     that only appears inline (mid-sentence, or with prose after it) is
- *     still a normal answer and is NOT guessed away. See isBridgeNoReplyFinal.
+ *   - Non-adopt + nothing-to-send sentinel terminator: suppress the whole turn.
+ *     Botmux-aware models use this explicit protocol when a turn has nothing
+ *     left to send (already sent, or genuinely no reply needed). The signal is
+ *     the LAST non-empty line of the final being exactly `BOTMUX_NOTHING_TO_SEND`
+ *     (or the legacy `BOTMUX_NO_REPLY`) — models almost always explain the
+ *     silence first and then append the token on its own line, so a full-string
+ *     exact match leaked the literal token into Lark. A token that only appears
+ *     inline (mid-sentence, or with prose after it) is still a normal answer and
+ *     is NOT guessed away. See isBridgeNothingToSendFinal.
  *   - Adopt mode never suppresses: in /adopt the model in the adopted
  *     session is unaware of botmux, so transcript drain is the ONLY
  *     channel from model to Lark. There's no `botmux send` to compete
@@ -41,30 +42,41 @@
 import { normaliseForFingerprint } from './bridge-turn-queue.js';
 const MATERIAL_FINAL_LENGTH_RATIO = 2;
 const MATERIAL_FINAL_MIN_EXTRA_CHARS = 120;
-export const BRIDGE_NO_REPLY_SENTINEL = 'BOTMUX_NO_REPLY';
-export function isBridgeNoReplyFinal(finalText) {
+export const BRIDGE_NOTHING_TO_SEND_SENTINEL = 'BOTMUX_NOTHING_TO_SEND';
+/** Superseded token name. Instructions no longer teach it, but the matcher
+ *  below still accepts it: during a rollout (and after a restart that restores
+ *  sessions spawned before the rename) in-flight turns still carry the old
+ *  token in their captured system prompt, and dropping recognition would leak
+ *  that literal sentinel line into Lark. The reader stays liberal; only the
+ *  instruction surface moved to the new name. */
+export const BRIDGE_NO_REPLY_SENTINEL_LEGACY = 'BOTMUX_NO_REPLY';
+const BRIDGE_SENTINEL_TOKENS = [
+    BRIDGE_NOTHING_TO_SEND_SENTINEL,
+    BRIDGE_NO_REPLY_SENTINEL_LEGACY,
+];
+export function isBridgeNothingToSendFinal(finalText) {
     if (finalText === undefined)
         return false;
     // Suppress the whole turn when the model's final ENDS WITH a standalone
-    // no-reply sentinel line. We look at the LAST non-empty line only:
-    //   - pure `BOTMUX_NO_REPLY`                       → suppress
-    //   - `<prose>\n\nBOTMUX_NO_REPLY`                 → suppress the whole turn
-    //   - a final whose last non-empty line is prose   → NOT a no-reply signal
+    // nothing-to-send sentinel line. We look at the LAST non-empty line only:
+    //   - pure `BOTMUX_NOTHING_TO_SEND`                → suppress
+    //   - `<prose>\n\nBOTMUX_NOTHING_TO_SEND`          → suppress the whole turn
+    //   - a final whose last non-empty line is prose   → NOT a sentinel signal
     //     (the token inline in a sentence, or followed by more prose, still posts)
     // Full-string exact match was too brittle: botmux-aware models almost always
     // explain the silence first ("...no reply needed.") and then append the token
     // on its own line, which exact match let leak the literal token into Lark.
     // Trade-off (accepted): a genuine answer that happens to end with a bare
-    // sentinel line is dropped WHOLE — the product wants a fully silent no-reply
-    // turn over the safer strip-and-forward. The last-non-empty-line rule (not a
+    // sentinel line is dropped WHOLE — the product wants a fully silent turn
+    // over the safer strip-and-forward. The last-non-empty-line rule (not a
     // substring / endsWith test) keeps that risk to finals the model deliberately
-    // terminated with the sentinel.
+    // terminated with the sentinel. Both the current and legacy tokens match.
     const lines = finalText.split('\n');
     for (let i = lines.length - 1; i >= 0; i--) {
         const line = lines[i].trim();
         if (line.length === 0)
             continue;
-        return line === BRIDGE_NO_REPLY_SENTINEL;
+        return BRIDGE_SENTINEL_TOKENS.includes(line);
     }
     return false;
 }
@@ -125,7 +137,7 @@ function markerSetCoversFinal(markers, finalText) {
 export function shouldSuppressBridgeEmit(turn, nextBoundaryMs, markers, adoptMode) {
     if (adoptMode)
         return false;
-    if (isBridgeNoReplyFinal(turn.finalText))
+    if (isBridgeNothingToSendFinal(turn.finalText))
         return true;
     if (turn.isLocal)
         return true;

package/dist/services/bridge-fallback-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-fallback-gate.js","sourceRoot":"","sources":["../../src/services/bridge-fallback-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,MAAM,UAAU,oBAAoB,CAAC,SAA6B;IAChE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,wEAAwE;IACxE,mEAAmE;IACnE,8DAA8D;IAC9D,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,gCAAgC;IAChC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,OAAO,IAAI,KAAK,wBAAwB,CAAC;IAC3C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAE5C;;;;;;oFAMoF;AACpF,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SAC/B,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,6BAA6B;QAChD,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,GAAG,CAAC,CAAC,GAAG;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAe;IAEf,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,aAAa,EAAE,UAAU,CAAC,MAAM;QAChC,0EAA0E;QAC1E,WAAW,EAAE,0BAA0B,CAAC,OAAO,CAAC;KACjD,CAAC;AACJ,CAAC;AAMD,SAAS,0BAA0B,CAAC,MAAwB;IAC1D,OAAO,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,gCAAgC,CAAC,WAAmB,EAAE,OAA8C;IAC3G,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,OAAO,WAAW,IAAI,aAAa,GAAG,2BAA2B;WAC5D,WAAW,GAAG,aAAa,IAAI,8BAA8B,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAoC,EAAE,SAA6B;IAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,eAAe,GAAG,uBAAuB,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACrE,OAAO,CAAC,gCAAgC,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAqB,EACrB,cAAkC,EAClC,OAAoC,EACpC,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;IAC9B,MAAM,KAAK,GAAG,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;IACvF,OAAO,oBAAoB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;2DA2B2D;AAC3D,MAAM,UAAU,sCAAsC,CACpD,IAAqB,EACrB,cAAkC,EAClC,OAAoC,EACpC,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CAAC,wBAAwB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7E,CAAC"}
+{"version":3,"file":"bridge-fallback-gate.js","sourceRoot":"","sources":["../../src/services/bridge-fallback-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AACxE;;;;;iDAKiD;AACjD,MAAM,CAAC,MAAM,+BAA+B,GAAG,iBAAiB,CAAC;AAEjE,MAAM,sBAAsB,GAAsB;IAChD,+BAA+B;IAC/B,+BAA+B;CAChC,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,SAA6B;IACtE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,wEAAwE;IACxE,0EAA0E;IAC1E,8DAA8D;IAC9D,6EAA6E;IAC7E,2EAA2E;IAC3E,+EAA+E;IAC/E,6EAA6E;IAC7E,8EAA8E;IAC9E,2EAA2E;IAC3E,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,OAAO,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AA2BD,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAE5C;;;;;;oFAMoF;AACpF,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;SAC/B,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACvB,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC;SAC5B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,6BAA6B;QAChD,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,GAAG,CAAC,CAAC,GAAG;QACxD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAe;IAEf,MAAM,UAAU,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO;QACL,6EAA6E;QAC7E,2EAA2E;QAC3E,aAAa,EAAE,UAAU,CAAC,MAAM;QAChC,0EAA0E;QAC1E,WAAW,EAAE,0BAA0B,CAAC,OAAO,CAAC;KACjD,CAAC;AACJ,CAAC;AAMD,SAAS,0BAA0B,CAAC,MAAwB;IAC1D,OAAO,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,gCAAgC,CAAC,WAAmB,EAAE,OAA8C;IAC3G,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,OAAO,WAAW,IAAI,aAAa,GAAG,2BAA2B;WAC5D,WAAW,GAAG,aAAa,IAAI,8BAA8B,CAAC;AACrE,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAoC,EAAE,SAA6B;IAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnE,MAAM,eAAe,GAAG,uBAAuB,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAElC,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACrE,OAAO,CAAC,gCAAgC,CAAC,eAAe,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAqB,EACrB,cAAkC,EAClC,OAAoC,EACpC,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;IAC9B,MAAM,KAAK,GAAG,cAAc,IAAI,MAAM,CAAC,iBAAiB,CAAC;IACzD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;IACvF,OAAO,oBAAoB,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;2DA2B2D;AAC3D,MAAM,UAAU,sCAAsC,CACpD,IAAqB,EACrB,cAAkC,EAClC,OAAoC,EACpC,SAAkB;IAElB,IAAI,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,IAAI,CAAC,cAAc,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,CAAC,wBAAwB,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7E,CAAC"}

package/dist/services/issue-board-store.d.ts

@@ -0,0 +1,214 @@
+/**
+ * localTaskRef 的**唯一**构造入口，且 `createBinding` 会自己调它——`CreateBindingInput`
+ * 里没有 localTaskRef 字段，调用方**没有**手拼的机会。
+ *
+ * 之所以做成内生而不是「约定调用方用这个函数」：拼反了顺序不会当场报错，要等平台 bind
+ * 记下的 localTaskRef 与崩溃恢复时的重确认对不上，那条 held 会话被判 claim_mismatch 作废
+ * 才暴露——离出错点太远。直接复用 botmux 自己的 `sessionKey`，与 activeSessions 键同源。
+ */
+export declare function buildLocalTaskRef(anchorId: string, larkAppId: string): string;
+/** 平台 IssueStatus 的线上取值（回写目标只用得到其中一部分，但解析要认全）。 */
+export type IssueStatus = 'open' | 'claimed' | 'in_progress' | 'in_review' | 'done' | 'cancelling' | 'needs_attention' | 'reopened';
+export type AttentionReason = 'cancel_delivery_timeout' | 'claim_activate_timeout' | 'task_blocked' | 'run_timeout';
+/**
+ * 一条 issue ↔ 本机会话的绑定。
+ *
+ * `bindState` 对应 §六 的崩溃恢复分支，外加一个人为终态：
+ *  - `pending` ：claim 成功、binding 已落盘，但还没向平台 bind（群可能还没建出来）
+ *  - `bound`   ：平台已接受 bind，本地会话可以 activate（发 kickoff @ bot）
+ *  - `void`    ：补 bind 被平台拒（issue 被回收 / 别人领走 / 代次过期），这条作废
+ *  - `released`：人主动释放（[[issue-release]]），issue 已退回平台待领取池
+ *  - `done`    ：人验收通过（`/issue done`），平台已终结这条 issue
+ *
+ * 三个终态都不再回写，但**不能合并**：`void` 是"平台不认这次领取"，对账见到它要考虑群是不是
+ * 白建了；`released` 是"领取本来是好的，人不做了"，群里有正经的工作记录，对账不该去动它；
+ * `done` 是"活干完并且验收了"。区分开也让日志能说清一个群到底是怎么结束的。
+ *
+ * 加终态时只改 `isActiveBindState` 一处——散落的 `!== 'void'` 式判断漏改一处，就会出现
+ * 「已结束的 issue 仍被当成本机持有」，而且全程不报错。
+ */
+export interface IssueBinding {
+    /**
+     * **路由锚点**——主键，也是平台契约里的「本地任务」标识。
+     *
+     * 这里必须是 anchor 而**不是** botmux 的 session id：协议要求 bind（带 localTaskRef）
+     * 发生在 activate 之前，而 botmux 的会话是 kickoff 消息把 bot @ 起来之后才由 daemon
+     * 创建的——bind 那一刻根本还没有 session id。anchor 则在 kickoff 之前就存在：
+     *  - 拉群模式 → `chatId`（chat-scope 会话的路由键，建群即得）
+     *  - 话题模式 → `rootMessageId`（先发无 @ 的 seed 拿到，再发 threaded kickoff）
+     * 见 core/types.ts 的 `sessionAnchorId` / `sessionKey`。
+     */
+    anchorId: string;
+    /** 平台契约的 localTaskRef，取值就是 botmux 自己的 `sessionKey(anchorId, larkAppId)`
+     *  = `<anchorId>::<larkAppId>`。复用它而不是另造一套：它本来就是本仓跨 bot 的规范会话
+     *  身份，且 `om_`（消息）与 `oc_`（群）两个地址空间不会碰撞。 */
+    localTaskRef: string;
+    larkAppId: string;
+    issueId: string;
+    teamId: string;
+    /** 绑到哪个平台（换绑/多平台时区分该往哪回写）。 */
+    platformBaseUrl: string;
+    /** 领取幂等键，必须是高熵随机（禁止由 issueId 派生）。全表唯一。 */
+    claimId: string;
+    /** 领取代次快照——回写栅栏，旧代次的迟到回写会被平台按 stale_epoch 丢弃。 */
+    claimEpoch: number;
+    bindState: 'pending' | 'bound' | 'void' | 'released' | 'done';
+    /** 会话所在的群。拉群模式下 === anchorId；话题模式下是承载话题的那个群。
+     *  崩溃恢复据此复用已建的群而不是再建一个。 */
+    chatId?: string;
+    /** 会话作用域：拉群 → 'chat'（一群一 issue 一会话）；话题 → 'thread'。 */
+    scope: 'chat' | 'thread';
+    /** 本 binding 的 sourceSeq 分配计数器：单调、每 binding 唯一，平台的线上幂等只认它。 */
+    nextSourceSeq: number;
+    /** 已成功回写的状态（离线期间不动——去重合并要拿它和「最新未完成目标」一起比）。 */
+    lastSyncedStatus?: IssueStatus;
+    /** 上次回写后平台返回的 issue.stateRev，下次状态 CAS 用。 */
+    platformStateRev?: number;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface IssueOutboxRow {
+    /** 仅本地行主键（去重发送用），不上送平台——平台幂等只认 sourceSeq。 */
+    writeId: string;
+    anchorId: string;
+    sourceSeq: number;
+    targetStatus: IssueStatus;
+    attentionReason?: AttentionReason;
+    claimId: string;
+    claimEpoch: number;
+    expectedStateRev?: number;
+    state: 'pending' | 'inflight' | 'done' | 'failed';
+    attempts: number;
+    nextRetryAt?: number;
+    lastError?: string;
+    createdAt: number;
+}
+export declare function listBindings(dataDir: string): IssueBinding[];
+export declare function getBinding(dataDir: string, anchorId: string): IssueBinding | null;
+/**
+ * 这条 binding 是否还代表「本机正持有这个 issue」。
+ *
+ * 抽成一个谓词而不是到处写 `!== 'void'`：终态从一个变成两个（`void` / `released`）时，
+ * 散落各处的判断只要漏改一处，就会出现「已释放的 issue 仍被当成已领取」——重领被拦、
+ * 回写继续发，而且全程不报错。加状态就改这一个地方。
+ */
+export declare function isActiveBindState(state: IssueBinding['bindState']): boolean;
+/** 按 claimId 反查——崩溃恢复的入口（§六：不依赖平台「按 claimId 查 issue」的接口，那个接口不存在）。 */
+export declare function findBindingByClaimId(dataDir: string, claimId: string): IssueBinding | null;
+/** 某 issue 当前在本机的活跃 binding（作废/已释放的不算）。用于「这个 issue 是不是我已经领了」。 */
+export declare function findActiveBindingByIssue(dataDir: string, issueId: string): IssueBinding | null;
+export interface IssueClaimIntent {
+    /** 主键。高熵随机，与平台 claim 用的是同一个值。 */
+    claimId: string;
+    issueId: string;
+    teamId: string;
+    claimEpoch: number;
+    platformBaseUrl: string;
+    /** 平台 claim 返回的 stateRev，后续 bind 的 CAS 基线。 */
+    platformStateRev: number;
+    /** 这个 issue 交给哪个 bot 跑（决定 localTaskRef 的 appId 段）。 */
+    larkAppId: string;
+    scope: 'chat' | 'thread';
+    /**
+     * 建群/发 seed 拿到 anchor 后回填。它出现 = 群已存在，对账时**不要再建一个**。
+     * 注意这份回填本身也可能崩在中间，所以对账不能只信它，还要按 claimId 去群里反查。
+     */
+    anchorId?: string;
+    chatId?: string;
+    createdAt: number;
+    updatedAt: number;
+}
+export declare function listClaimIntents(dataDir: string): IssueClaimIntent[];
+export declare function getClaimIntent(dataDir: string, claimId: string): IssueClaimIntent | null;
+/**
+ * 记下一次领取意图。**必须在 platform claim 返回成功后立刻调用，早于任何建群动作**。
+ *
+ * 同 claimId 重入返回既有记录（claim 本身幂等，重试不该产生第二条意图）。
+ */
+export declare function recordClaimIntent(dataDir: string, input: Omit<IssueClaimIntent, 'createdAt' | 'updatedAt'>, now?: number): IssueClaimIntent;
+/** 回填 anchorId / chatId（建群成功后）。 */
+export declare function updateClaimIntent(dataDir: string, claimId: string, patch: Partial<Omit<IssueClaimIntent, 'claimId' | 'createdAt'>>, now?: number): IssueClaimIntent | null;
+/**
+ * 领取流程走完（binding 已 bound）后清掉意图——此后 binding 自己就是完整证据。
+ *
+ * ⚠️ 清除必须**晚于** binding 落盘。反过来先清意图再写 binding，中间崩溃就同时丢掉了两份
+ * 证据，那个群彻底认不回来——这正是意图存在的意义。
+ */
+export declare function clearClaimIntent(dataDir: string, claimId: string): boolean;
+/** 对账分类：意图还在、但没有对应 binding 的，就是需要人/流程接手的悬空领取。 */
+export declare function listDanglingClaimIntents(dataDir: string): IssueClaimIntent[];
+/** 注意没有 `localTaskRef`：它由 `buildLocalTaskRef(anchorId, larkAppId)` 内生，见上。 */
+export type CreateBindingInput = Omit<IssueBinding, 'nextSourceSeq' | 'createdAt' | 'updatedAt' | 'bindState' | 'localTaskRef'> & {
+    bindState?: IssueBinding['bindState'];
+};
+/**
+ * 写入一条 pending binding。**在建群/发 seed 拿到 anchorId 之后调用**——主键就是那个
+ * anchor，之前不可能有。放在 `createGroupWithBots` 的 `onChatCreated` 同步钩子里写，
+ * 让它成为「群已存在」到「群已归属某个 issue」之间的 durable boundary（见文件头时序）。
+ *
+ * 两条不变式都在这层强制，不指望调用方自觉：
+ *  - **claimId 唯一**：同 claimId 重入直接返回既有行（本地幂等，对应 Desktop 侧的
+ *    `UNIQUE(claim_id)`）——领取重试不会产生第二条 binding、也不会重复建群。
+ *  - **一 issue 一活跃 binding**：同 issue 已有非 void 的 binding 却拿着不同 claimId 进来，
+ *    是调用方漏查（比如没先 `findActiveBindingByIssue`）。此时**抛错**而不是照写——写下去
+ *    就是同一个 issue 两个群、两个 agent 同时开工，而平台侧只认最后一次 claim，另一个群
+ *    会变成谁也不管的孤儿。抛在这里离原因最近；释放后重领是安全的（旧 binding 已置 void）。
+ */
+export declare function createBinding(dataDir: string, input: CreateBindingInput, now?: number): IssueBinding;
+/** 局部更新一条 binding（read-modify-write，保住并发写入的其它字段）。 */
+export declare function updateBinding(dataDir: string, anchorId: string, patch: Partial<Omit<IssueBinding, 'anchorId' | 'createdAt'>>, now?: number): IssueBinding | null;
+/** 删除一条 binding（会话彻底结束且 issue 已终态后清理）。返回是否删掉。 */
+export declare function removeBinding(dataDir: string, anchorId: string): boolean;
+export declare function listOutbox(dataDir: string, anchorId?: string): IssueOutboxRow[];
+/**
+ * 投影一次「本会话应达的 issue 状态」到发件箱（§七 去重合并）。
+ *
+ * 合并规则（**与最新未完成目标比，不是与 lastSyncedStatus 比**）：
+ *  - 该 binding 已有 `pending` 行 → **就地覆盖**它的 targetStatus 并重分配 sourceSeq，不新增行；
+ *  - 否则仅当 desired 与「最新目标 ∪ lastSyncedStatus」都不同才排一条新行。
+ *
+ * 为什么必须这样：离线期间 30s 一次的 tick 会反复投影，若每次都追加，恢复后会把一长串
+ * 早已过时的中间态依次发给平台——既刷无效自迁移，又让**最新**状态排在队尾迟迟到不了。
+ *
+ * 返回排出的行；无需回写时返回 null。
+ */
+export declare function enqueueDesiredStatus(dataDir: string, anchorId: string, desired: IssueStatus, opts?: {
+    attentionReason?: AttentionReason;
+    expectedStateRev?: number;
+}, now?: number): IssueOutboxRow | null;
+/**
+ * 领取该 binding 的下一条待发行（`pending → inflight` 的 CAS）。
+ *
+ * **串行**：同一 binding 已有 inflight 行时返回 null——平台侧要求同一 issue 的 sourceSeq
+ * 单调到达，并发发送会让顺序乱掉。`nextRetryAt` 未到的行也不返回（退避）。
+ */
+export declare function claimNextOutboxRow(dataDir: string, anchorId: string, now?: number): IssueOutboxRow | null;
+/**
+ * 发送成功：标 done，并把平台返回的 stateRev / 已同步状态写回 binding。
+ *
+ * `applied: false` 用于「这条行不必再发了，但平台**没有**采纳它」——目前只有一种情况：
+ * 409 对账发现 claim 已易主。此时**绝不能**写 `lastSyncedStatus`：写了本地就以为
+ * "已经是 in_review 了"，下一次交付会走幂等分支直接回成功，而平台上那条压根没变。
+ */
+export declare function settleOutboxRow(dataDir: string, writeId: string, result: {
+    platformStateRev?: number;
+    platformLastSourceSeq?: number;
+    applied?: boolean;
+}, now?: number): void;
+/** 发送失败：退回 pending + 指数退避（上限 5min）。`fatal` 用于平台明确拒绝、重试无意义的情况。 */
+export declare function failOutboxRow(dataDir: string, writeId: string, error: string, opts?: {
+    fatal?: boolean;
+}, now?: number): void;
+/**
+ * 启动对账：把本机所有 `inflight` 退回 `pending`。
+ *
+ * 进程在「标 inflight 后、记录响应前」崩溃时，那一行会永远停在 inflight 并**堵死该
+ * binding 的串行 pump**（claimNextOutboxRow 见到 inflight 就返回 null）。平台侧的
+ * sourceSeq 单调 + 终态幂等保证重复投递是安全的，所以无脑退回即可，不需要发送租约。
+ *
+ * 返回被退回的行数。
+ */
+export declare function resetInflightToPending(dataDir: string): number;
+/** 清理已完成的发件箱行（保留最近 `keep` 条便于排查）。返回清掉的行数。 */
+export declare function pruneOutbox(dataDir: string, keep?: number): number;
+//# sourceMappingURL=issue-board-store.d.ts.map

package/dist/services/issue-board-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-board-store.d.ts","sourceRoot":"","sources":["../../src/services/issue-board-store.ts"],"names":[],"mappings":"AA6EA;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,kDAAkD;AAClD,MAAM,MAAM,WAAW,GACnB,MAAM,GACN,SAAS,GACT,aAAa,GACb,WAAW,GACX,MAAM,GACN,YAAY,GACZ,iBAAiB,GACjB,UAAU,CAAC;AAEf,MAAM,MAAM,eAAe,GACvB,yBAAyB,GACzB,wBAAwB,GACxB,cAAc,GACd,aAAa,CAAC;AAElB;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;;;;;;OASG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB;;8CAE0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;IAC9D;+BAC2B;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB,8DAA8D;IAC9D,aAAa,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,WAAW,CAAC;IAC/B,4CAA4C;IAC5C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,WAAW,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE,CAE5D;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAEjF;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,OAAO,CAE3E;AAED,qEAAqE;AACrE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAE1F;AAED,iEAAiE;AACjE,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAE9F;AAiBD,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAEpE;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,IAAI,CAExF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,GAAG,WAAW,CAAC,EACxD,GAAG,GAAE,MAAmB,GACvB,gBAAgB,CAUlB;AAED,mCAAmC;AACnC,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,WAAW,CAAC,CAAC,EAC/D,GAAG,GAAE,MAAmB,GACvB,gBAAgB,GAAG,IAAI,CAUzB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ1E;AAED,iDAAiD;AACjD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAG5E;AAED,6EAA6E;AAC7E,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,YAAY,EACZ,eAAe,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAC3E,GAAG;IAAE,SAAS,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAA;CAAE,CAAC;AAE9C;;;;;;;;;;;;GAYG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,kBAAkB,EACzB,GAAG,GAAE,MAAmB,GACvB,YAAY,CA0Bd;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC,EAC5D,GAAG,GAAE,MAAmB,GACvB,YAAY,GAAG,IAAI,CAErB;AAkBD,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQxE;AAaD,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAG/E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,EACpB,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,EAC3E,GAAG,GAAE,MAAmB,GACvB,cAAc,GAAG,IAAI,CAqEvB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAmB,GACvB,cAAc,GAAG,IAAI,CAkBvB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,MAAM,EAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EACxF,GAAG,GAAE,MAAmB,GACvB,IAAI,CAgCN;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,EAC9B,GAAG,GAAE,MAAmB,GACvB,IAAI,CAeN;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAY9D;AAED,6CAA6C;AAC7C,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAK,GAAG,MAAM,CAW9D"}