forgebadger 0.1.0 → 0.1.2

package/dist/gateway/src/services/channels/channel-run-scope.d.ts

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import type { Database } from '../../db/types.js';
+import type { TurnInput } from '../agent/run-ledger.js';
+import type { AgentToolContext } from '../agent/tool-registry.js';
+declare const scopeSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    routeId: z.ZodString;
+    routeRevision: z.ZodNumber;
+    identityId: z.ZodString;
+    identityRevision: z.ZodNumber;
+    conversationId: z.ZodString;
+    projectIds: z.ZodArray<z.ZodString, "many">;
+    roots: z.ZodArray<z.ZodObject<{
+        projectId: z.ZodString;
+        path: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        projectId: string;
+    }, {
+        path: string;
+        projectId: string;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    identityId: string;
+    identityRevision: number;
+    conversationId: string;
+    routeId: string;
+    projectIds: string[];
+    routeRevision: number;
+    roots: {
+        path: string;
+        projectId: string;
+    }[];
+}, {
+    version: 1;
+    identityId: string;
+    identityRevision: number;
+    conversationId: string;
+    routeId: string;
+    projectIds: string[];
+    routeRevision: number;
+    roots: {
+        path: string;
+        projectId: string;
+    }[];
+}>;
+export type ChannelRunScope = z.infer<typeof scopeSchema>;
+export interface ChannelResources {
+    projectIds: readonly string[];
+    rootPaths?: readonly string[];
+    conversationId?: string;
+}
+/** Admission is the only place that captures authority. Recovery must never synthesize it. */
+export declare function prepareChannelAdmission(db: Database, userId: string, input: TurnInput): TurnInput;
+/** Durable snapshot AND current route/identity/root authority must agree. */
+export declare function assertChannelRunScope(db: Database, userId: string, input: Pick<TurnInput, 'conversationId' | 'channelScope' | 'parentRunId' | 'projectId'>, resources?: ChannelResources, depth?: number): ChannelRunScope | undefined;
+export declare function channelToolAllowed(input: TurnInput, name: string): boolean;
+export declare function channelToolContext(context: AgentToolContext): AgentToolContext;
+/** Resolve resource IDs against their actual rows, never trust a supplied project hint. */
+export declare function assertChannelToolScope(context: AgentToolContext, name: string, raw: unknown): void;
+/** List projection is applied before pagination; an inaccessible session is omitted. */
+export declare function channelSessionAllowed(context: AgentToolContext, sessionId: string): boolean;
+export {};

package/dist/gateway/src/services/channels/channel-run-scope.js

@@ -0,0 +1,208 @@
+import { existsSync, realpathSync } from 'node:fs';
+import path from 'node:path';
+import { z } from 'zod';
+import { ProjectRepository } from '../../db/repositories/project-repository.js';
+import { ChannelIdentityRepository } from '../../db/repositories/channel-identity-repository.js';
+import { SessionRepository } from '../../db/repositories/session-repository.js';
+import { DENIED_ROOTS, validateProjectRoot } from '../../lib/safe-resolve.js';
+import { AgentError } from '../agent/types.js';
+import { ChannelIdentityError, ChannelIdentityService } from './channel-identity-service.js';
+const id = z.string().min(1).max(128);
+const scopeSchema = z.object({ version: z.literal(1), routeId: id, routeRevision: z.number().int().positive(),
+    identityId: id, identityRevision: z.number().int().positive(), conversationId: id,
+    projectIds: z.array(id).min(1).max(100), roots: z.array(z.object({ projectId: id, path: z.string().min(1) }).strict()).min(1).max(100) }).strict();
+function requireScope(condition) { if (!condition)
+    throw new ChannelIdentityError(); }
+function canonicalRoot(value) {
+    const full = path.resolve(value);
+    let ancestor = full;
+    const tail = [];
+    while (!existsSync(ancestor)) {
+        tail.unshift(path.basename(ancestor));
+        const parent = path.dirname(ancestor);
+        requireScope(parent !== ancestor);
+        ancestor = parent;
+    }
+    const resolved = path.join(realpathSync(ancestor), ...tail);
+    for (const denied of DENIED_ROOTS)
+        requireScope(resolved !== denied && (denied === '/' || !resolved.startsWith(denied + path.sep)));
+    if (existsSync(resolved))
+        validateProjectRoot(resolved);
+    return resolved;
+}
+function parentInput(db, userId, runId) {
+    const row = db.prepare('SELECT input_json FROM copilot_runs WHERE user_id=? AND id=?').get(userId, runId);
+    requireScope(row);
+    return JSON.parse(row.input_json);
+}
+function currentScope(db, userId, conversationId) {
+    const records = new ChannelIdentityRepository(db, userId);
+    const route = records.conversationRoute(conversationId);
+    if (!route && !records.conversationIsChannelOwned(conversationId))
+        return;
+    requireScope(route);
+    const authority = new ChannelIdentityService(db, userId).admitRoute(route.id, conversationId);
+    const projects = new ProjectRepository(db, userId);
+    return { version: 1, routeId: authority.routeId, routeRevision: authority.routeRevision,
+        identityId: authority.identityId, identityRevision: authority.identityRevision, conversationId,
+        projectIds: authority.projectIds, roots: authority.projectIds.map(projectId => {
+            const project = projects.getById(projectId);
+            requireScope(project);
+            return { projectId, path: canonicalRoot(project.path) };
+        }) };
+}
+/** Admission is the only place that captures authority. Recovery must never synthesize it. */
+export function prepareChannelAdmission(db, userId, input) {
+    let snapshot;
+    if (input.parentRunId)
+        snapshot = assertChannelRunScope(db, userId, parentInput(db, userId, input.parentRunId));
+    else {
+        const current = currentScope(db, userId, input.conversationId);
+        if (current) {
+            // Every run admitted into a channel-owned conversation inherits channel
+            // scope — including owner-originated web follow-ups (source 'user'),
+            // whose output may be relayed to the channel. The previous run's
+            // snapshot is only accepted while it still equals current route,
+            // identity and root authority; any drift fails closed below.
+            const previous = db.prepare('SELECT input_json FROM copilot_runs WHERE user_id=? AND conversation_id=? ORDER BY created_at DESC,id DESC LIMIT 1')
+                .get(userId, input.conversationId);
+            snapshot = previous ? assertChannelRunScope(db, userId, JSON.parse(previous.input_json)) : current;
+        }
+    }
+    let projectId = input.projectId;
+    if (snapshot && projectId === undefined) {
+        // Defaulting is unambiguous only for a single-project snapshot; with
+        // multiple bound projects the caller must choose explicitly.
+        if (snapshot.projectIds.length !== 1)
+            throw new AgentError('COPILOT_CHANNEL_PROJECT_REQUIRED', 'Channel run requires an explicit projectId');
+        projectId = snapshot.projectIds[0];
+    }
+    const result = { ...input, ...(snapshot ? { channelScope: snapshot, projectId } : {}) };
+    // Caller-supplied trusted fields cannot create channel authority on an owner conversation.
+    if (!snapshot)
+        delete result.channelScope;
+    assertChannelRunScope(db, userId, result);
+    return result;
+}
+/** Durable snapshot AND current route/identity/root authority must agree. */
+export function assertChannelRunScope(db, userId, input, resources, depth = 0) {
+    requireScope(depth < 8);
+    const current = currentScope(db, userId, input.channelScope?.conversationId ?? input.conversationId);
+    const inherited = input.parentRunId ? assertChannelRunScope(db, userId, parentInput(db, userId, input.parentRunId), undefined, depth + 1) : undefined;
+    if (!current && !inherited && !input.channelScope)
+        return;
+    requireScope(current && input.channelScope);
+    const parsed = scopeSchema.safeParse(input.channelScope);
+    requireScope(parsed.success);
+    const snapshot = parsed.data;
+    requireScope(JSON.stringify(snapshot) === JSON.stringify(current));
+    if (inherited)
+        requireScope(JSON.stringify(inherited) === JSON.stringify(snapshot));
+    else
+        requireScope(snapshot.conversationId === input.conversationId);
+    if (input.projectId)
+        requireScope(snapshot.projectIds.includes(input.projectId));
+    if (resources) {
+        requireScope(resources.projectIds.every(project => snapshot.projectIds.includes(project)));
+        if (resources.conversationId)
+            requireScope(resources.conversationId === input.conversationId);
+        for (const root of resources.rootPaths ?? []) {
+            const actual = canonicalRoot(root);
+            requireScope(snapshot.roots.some(bound => actual === bound.path || actual.startsWith(bound.path + path.sep)));
+        }
+    }
+    return snapshot;
+}
+/** Explicit catalog: global data and new/extension tools remain closed until audited. */
+const CHANNEL_TOOLS = new Set(['list_projects', 'get_project', 'list_sessions', 'get_session', 'get_session_output', 'get_session_writer',
+    'pm_overview', 'pm_get_goal', 'pm_get_work_item', 'pm_list_ledger', 'pm_get_management', 'pm_list_task_packets', 'pm_get_task_packet',
+    'pm_get_task_progress', 'pm_close_task', 'pm_create_work_item', 'pm_update_work_item', 'pm_update_management', 'update_project', 'start_session', 'stop_session',
+    'dispatch_task_to_session', 'pm_prepare_task_packet', 'pm_execute_task_packet', 'search_memory', 'list_memory', 'write_memory',
+    'list_project_files', 'read_project_file', 'search_project_files', 'get_project_git_status', 'read_project_diff',
+    'project_graph_search', 'project_graph_symbol_detail', 'project_graph_impact', 'project_graph_affected_paths',
+    'list_development_tasks', 'get_development_task', 'research_project', 'discover_tools', 'read_tool_result']);
+export function channelToolAllowed(input, name) {
+    return !input.channelScope || CHANNEL_TOOLS.has(name) || input.executionMode === 'repair' && name === 'submit_development_task';
+}
+function contextScope(context) {
+    if (typeof context.runId === 'string') {
+        const row = context.db.prepare('SELECT input_json FROM copilot_runs WHERE user_id=? AND id=?').get(context.userId, context.runId);
+        if (row) {
+            const input = JSON.parse(row.input_json);
+            requireScope(input.userId === context.userId && (context.conversationId === undefined || input.conversationId === context.conversationId));
+            return assertChannelRunScope(context.db, context.userId, input);
+        }
+    }
+    if (context.conversationId)
+        requireScope(!currentScope(context.db, context.userId, context.conversationId));
+}
+export function channelToolContext(context) {
+    const scope = contextScope(context);
+    return scope ? { ...context, channelScope: scope, allowedProjectIds: scope.projectIds } : context;
+}
+/** Resolve resource IDs against their actual rows, never trust a supplied project hint. */
+export function assertChannelToolScope(context, name, raw) {
+    const scope = contextScope(context);
+    if (!scope)
+        return;
+    requireScope(CHANNEL_TOOLS.has(name) || context.executionMode === 'repair' && name === 'submit_development_task');
+    requireScope(raw && typeof raw === 'object' && !Array.isArray(raw));
+    const input = raw;
+    const projects = new Set();
+    const roots = [];
+    if (typeof input.projectId === 'string')
+        projects.add(input.projectId);
+    if (typeof input.sessionId === 'string') {
+        const session = new SessionRepository(context.db, context.userId).getById(input.sessionId);
+        requireScope(session);
+        projects.add(session.projectId);
+        roots.push(session.workingDir);
+        if (input.projectId !== undefined)
+            requireScope(input.projectId === session.projectId);
+    }
+    for (const [field, table] of [['taskId', 'copilot_development_tasks'], ['workItemId', 'project_manager_work_items']]) {
+        if (typeof input[field] !== 'string')
+            continue;
+        const query = table === 'copilot_development_tasks'
+            ? 'SELECT project_id,project_root FROM copilot_development_tasks WHERE user_id=? AND id=?'
+            : 'SELECT project_id,details_json FROM project_manager_work_items WHERE user_id=? AND id=?';
+        const row = context.db.prepare(query).get(context.userId, input[field]);
+        requireScope(row);
+        projects.add(row.project_id);
+        if (input.projectId !== undefined)
+            requireScope(input.projectId === row.project_id);
+        if (row.project_root)
+            roots.push(row.project_root);
+        if (row.details_json) {
+            const details = JSON.parse(row.details_json);
+            if (typeof details.taskPacket?.sessionId === 'string') {
+                const linked = new SessionRepository(context.db, context.userId).getById(details.taskPacket.sessionId);
+                requireScope(linked && linked.projectId === row.project_id);
+                roots.push(linked.workingDir);
+            }
+        }
+    }
+    if (['search_memory', 'list_memory', 'write_memory'].includes(name)) {
+        requireScope(input.scope === 'project' && typeof input.projectId === 'string' || input.scope === 'session' && input.projectId === undefined);
+        if (input.conversationId !== undefined)
+            requireScope(input.conversationId === context.conversationId);
+    }
+    else if (!['list_projects', 'list_sessions', 'pm_overview', 'discover_tools', 'read_tool_result'].includes(name))
+        requireScope(projects.size > 0);
+    requireScope([...projects].every(project => scope.projectIds.includes(project)));
+    for (const root of roots) {
+        const canonical = canonicalRoot(root);
+        requireScope(scope.roots.some(bound => canonical === bound.path || canonical.startsWith(bound.path + path.sep)));
+    }
+}
+/** List projection is applied before pagination; an inaccessible session is omitted. */
+export function channelSessionAllowed(context, sessionId) {
+    try {
+        assertChannelToolScope(context, 'get_session', { sessionId });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=channel-run-scope.js.map

package/dist/gateway/src/services/channels/channel-run-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-run-scope.js","sourceRoot":"","sources":["../../../../src/services/channels/channel-run-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,6CAA6C,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAE7F,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3G,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,EAAE;IACjF,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAIrJ,SAAS,YAAY,CAAC,SAAkB,IAAuB,IAAI,CAAC,SAAS;IAAE,MAAM,IAAI,oBAAoB,EAAE,CAAC,CAAC,CAAC;AAClH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAAC,IAAI,QAAQ,GAAG,IAAI,CAAC;IAAC,MAAM,IAAI,GAAa,EAAE,CAAC;IACjF,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAAC,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAAC,QAAQ,GAAG,MAAM,CAAC;IAAC,CAAC;IACrK,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IAC5D,KAAK,MAAM,MAAM,IAAI,YAAY;QAAE,YAAY,CAAC,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpI,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACxD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAS,WAAW,CAAC,EAAY,EAAE,MAAc,EAAE,KAAa;IAC9D,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAuC,CAAC;IAChJ,YAAY,CAAC,GAAG,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAc,CAAC;AACpE,CAAC;AACD,SAAS,YAAY,CAAC,EAAY,EAAE,MAAc,EAAE,cAAsB;IACxE,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,0BAA0B,CAAC,cAAc,CAAC;QAAE,OAAO;IAC1E,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa;QACrF,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,EAAE,cAAc;QAC9F,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE;YAC5E,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACnE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,uBAAuB,CAAC,EAAY,EAAE,MAAc,EAAE,KAAgB;IACpF,IAAI,QAAqC,CAAC;IAC1C,IAAI,KAAK,CAAC,WAAW;QAAE,QAAQ,GAAG,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;SAC3G,CAAC;QACJ,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,OAAO,EAAE,CAAC;YACZ,wEAAwE;YACxE,qEAAqE;YACrE,iEAAiE;YACjE,iEAAiE;YACjE,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,oHAAoH,CAAC;iBAC9I,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAuC,CAAC;YAC3E,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAClH,CAAC;IACH,CAAC;IACD,IAAI,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;IAChC,IAAI,QAAQ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,qEAAqE;QACrE,6DAA6D;QAC7D,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,EAAE,4CAA4C,CAAC,CAAC;QAC7I,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxF,2FAA2F;IAC3F,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAC1C,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,EAAY,EAAE,MAAc,EAAE,KAAuF,EACzJ,SAA4B,EAAE,KAAK,GAAG,CAAC;IACvC,YAAY,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;IACrG,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtJ,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO;IAC1D,YAAY,CAAC,OAAO,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;IAC7B,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAI,SAAS;QAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;;QAC/E,YAAY,CAAC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,SAAS;QAAE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACjF,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3F,IAAI,SAAS,CAAC,cAAc;YAAE,YAAY,CAAC,SAAS,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;QAC9F,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yFAAyF;AACzF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,oBAAoB,EAAE,oBAAoB;IACvI,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB;IACrI,sBAAsB,EAAE,eAAe,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,eAAe,EAAE,cAAc;IAChK,0BAA0B,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc;IAC9H,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,mBAAmB;IAChH,sBAAsB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,8BAA8B;IAC7G,wBAAwB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC/G,MAAM,UAAU,kBAAkB,CAAC,KAAgB,EAAE,IAAY;IAC/D,OAAO,CAAC,KAAK,CAAC,YAAY,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,CAAC;AAClI,CAAC;AAED,SAAS,YAAY,CAAC,OAAyB;IAC7C,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAuC,CAAC;QACxK,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAc,CAAC;YACtD,YAAY,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;YAC3I,OAAO,qBAAqB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,cAAc;QAAE,YAAY,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAC9G,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACpG,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,sBAAsB,CAAC,OAAyB,EAAE,IAAY,EAAE,GAAY;IAC1F,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK;QAAE,OAAO;IACxD,YAAY,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,CAAC,CAAC;IAClH,YAAY,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC/D,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClH,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,2BAA2B,CAAC,EAAE,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAU,EAAE,CAAC;QAC9H,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,KAAK,KAAK,2BAA2B;YACjD,CAAC,CAAC,wFAAwF;YAC1F,CAAC,CAAC,yFAAyF,CAAC;QAC9F,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAqF,CAAC;QAC5J,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;QACpF,IAAI,GAAG,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAA6C,CAAC;YACzF,IAAI,OAAO,OAAO,CAAC,UAAU,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBACvG,YAAY,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,eAAe,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,YAAY,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC7I,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACxG,CAAC;SAAM,IAAI,CAAC,CAAC,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACpJ,YAAY,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACtC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAyB,EAAE,SAAiB;IAChF,IAAI,CAAC;QAAC,sBAAsB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACnF,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC"}

package/dist/gateway/src/services/channels/feishu-approval.d.ts

@@ -0,0 +1,28 @@
+import type { Database } from '../../db/types.js';
+import { type ChannelDelivery } from '../../db/repositories/channel-delivery-repository.js';
+export declare const FEISHU_APPROVAL_PHASE = "approval-card-v1:";
+export type FeishuInteractiveCard = Record<string, unknown>;
+export type RecordChannelApproval = (input: {
+    runId: string;
+    actionId: string;
+    approved: boolean;
+}) => boolean;
+/** SDK-only approval adapter; the channel delivery receipt is the authority anchor. */
+export declare class FeishuApprovalService {
+    private readonly db;
+    private readonly userId;
+    private readonly key;
+    constructor(db: Database, userId: string, key: string);
+    private load;
+    private presentation;
+    private signature;
+    card(delivery: ChannelDelivery): FeishuInteractiveCard;
+    /** No network/model calls: commit the same decision as Web, then the runtime pump resumes execution. */
+    handle(envelope: unknown, accountId: string, accountRevision: number, decide: RecordChannelApproval): {
+        toast: {
+            type: "error" | "info" | "success";
+            content: string;
+        };
+    };
+    private receipt;
+}

package/dist/gateway/src/services/channels/feishu-approval.js

@@ -0,0 +1,152 @@
+import { createHmac, timingSafeEqual } from 'node:crypto';
+import { z } from 'zod';
+import { decryptSecret } from '../../crypto/secret-box.js';
+import { ChannelDeliveryRepository } from '../../db/repositories/channel-delivery-repository.js';
+import { PlatformActionRepository } from '../../db/repositories/platform-action-repository.js';
+import { AuditLogRepository } from '../../db/repositories/audit-log-repository.js';
+import { NativeChannelInbox } from './native-channel-inbox.js';
+import { inputDigest } from '../agent/run-ledger.js';
+import { redactAgentText } from '../agent/redaction.js';
+import { normalizeFeishuEvent } from '../integrations/feishu-event-normalizer.js';
+export const FEISHU_APPROVAL_PHASE = 'approval-card-v1:';
+const valueSchema = z.object({ action_id: z.literal('copilot_approval'), delivery_id: z.string().uuid(),
+    approved: z.boolean(), signature: z.string().regex(/^[a-f0-9]{64}$/) }).strict();
+const plain = (content) => ({ tag: 'plain_text', content });
+const div = (content) => ({ tag: 'div', text: plain(content) });
+const toast = (content, type = 'info') => ({ toast: { type, content } });
+const TTL_MS = 24 * 60 * 60_000;
+/** SDK-only approval adapter; the channel delivery receipt is the authority anchor. */
+export class FeishuApprovalService {
+    db;
+    userId;
+    key;
+    constructor(db, userId, key) {
+        this.db = db;
+        this.userId = userId;
+        this.key = key;
+    }
+    load(delivery) {
+        if (!delivery.phase.startsWith(FEISHU_APPROVAL_PHASE))
+            throw new Error('APPROVAL_PHASE_INVALID');
+        const inbox = new NativeChannelInbox(this.db, this.userId, this.key);
+        const message = inbox.messages.get(delivery.inbox_id);
+        if (!message)
+            throw new Error('APPROVAL_MESSAGE_MISSING');
+        const stored = JSON.parse(decryptSecret(JSON.parse(message.payload_encrypted), { key: this.key }));
+        if (stored.peer.channel !== 'feishu')
+            throw new Error('APPROVAL_CHANNEL_INVALID');
+        const result = inbox.result(message.id, stored.peer);
+        const action = result.pendingActions.find(row => delivery.phase === FEISHU_APPROVAL_PHASE + row.id);
+        if (!action || action.runId !== result.runId)
+            throw new Error('APPROVAL_ACTION_MISSING');
+        return { peer: stored.peer, request: stored.text, result, action };
+    }
+    presentation(action, delivery) {
+        const intent = action.stepId ? new PlatformActionRepository(this.db, this.userId).byKey(action.stepId) : undefined;
+        let complete = true;
+        let detail = '';
+        try {
+            const input = JSON.parse(action.inputJson);
+            detail = JSON.stringify(input, null, 2);
+            if (action.tool === 'stop_session') {
+                const target = intent ? JSON.parse(intent.resources_json).stopTarget : undefined;
+                const planned = intent ? JSON.parse(intent.input_json) : undefined;
+                complete = intent?.command_id === 'session.stop' && !!target && target.executionScope === 'session_process_group'
+                    && typeof target.taskTitle === 'string' && typeof target.sessionId === 'string'
+                    && [input, planned].every(value => value?.sessionId === target.sessionId
+                        && value?.observationId === target.observationId && value?.expectedTitle === target.taskTitle);
+                if (complete)
+                    detail = `停止目标（整个会话进程组）：\n${JSON.stringify(target, null, 2)}\n\n参数：\n${detail}`;
+            }
+        }
+        catch {
+            complete = false;
+        }
+        const safe = redactAgentText(detail);
+        // Count the complete redacted representation before clipping, never approve an incomplete preview.
+        if (Buffer.byteLength(safe, 'utf8') > 6_000)
+            complete = false;
+        const expiresAt = Math.min(delivery.created_at + TTL_MS, intent?.expires_at ?? Infinity);
+        return { detail: Array.from(safe).slice(0, 1500).join(''),
+            complete: complete && Array.from(safe).length <= 1500 && expiresAt > Date.now(), expiresAt,
+            evidenceDigest: inputDigest(JSON.stringify([action.tool, action.inputJson, action.inputDigest, intent?.resources_json ?? null])) };
+    }
+    signature(delivery, action, approved) {
+        const presentation = this.presentation(action, delivery);
+        return createHmac('sha256', this.key).update(JSON.stringify(['forgebadger.feishu.approval.v1', this.userId,
+            delivery.id, action.id, action.runId, presentation.evidenceDigest, approved, presentation.expiresAt])).digest('hex');
+    }
+    card(delivery) {
+        const { action, request } = this.load(delivery);
+        const presentation = this.presentation(action, delivery);
+        const button = (approved) => ({ tag: 'button', text: plain(approved ? '批准本次' : '拒绝'),
+            type: approved ? 'primary' : 'danger', value: { action_id: 'copilot_approval', delivery_id: delivery.id,
+                approved, signature: this.signature(delivery, action, approved) },
+            ...(approved ? { confirm: { title: plain('确认批准本次操作？'), text: plain('仅批准卡片中展示的这一次操作，不授予后续操作权限。') } } : {}) });
+        return { config: { wide_screen_mode: true, enable_forward: false, update_multi: true },
+            header: { template: 'orange', title: plain('ForgeBadger · 操作待审批') }, elements: [
+                div(`请求：${Array.from(redactAgentText(request)).slice(0, 300).join('')}`),
+                div(`操作：${redactAgentText(action.tool)}\n审批编号：${action.id.slice(0, 8)}`),
+                div(presentation.detail || '操作参数无法完整显示。'),
+                div(presentation.complete ? '仅发起此任务且仍有权限的用户可以批准；本次授权不覆盖后续操作。'
+                    : '操作信息不完整、过长或已过期，请到 Web Copilot 核对后批准；也可在此拒绝。'),
+                div(`卡片有效期至：${new Date(presentation.expiresAt).toISOString()}`),
+                { tag: 'action', actions: [...(presentation.complete ? [button(true)] : []), button(false)] }
+            ] };
+    }
+    /** No network/model calls: commit the same decision as Web, then the runtime pump resumes execution. */
+    handle(envelope, accountId, accountRevision, decide) {
+        try {
+            const event = normalizeFeishuEvent(envelope, { accountId, eventType: 'card.action.trigger' });
+            if (event?.kind !== 'card_action')
+                return toast('无法识别此审批操作。', 'error');
+            const parsed = valueSchema.safeParse(event.value);
+            if (!parsed.success)
+                return toast('审批卡片无效，请重新发起请求。', 'error');
+            const value = parsed.data;
+            return this.db.transaction(() => {
+                const delivery = new ChannelDeliveryRepository(this.db, this.userId).get(value.delivery_id);
+                if (!delivery || delivery.status !== 'delivered' || !delivery.provider_message_id
+                    || delivery.provider_message_id !== event.messageId)
+                    throw new Error('APPROVAL_RECEIPT_INVALID');
+                const { peer, result, action, request } = this.load(delivery);
+                if (peer.accountId !== accountId || peer.accountRevision !== accountRevision
+                    || peer.chatId !== event.chatId || peer.externalUserId !== event.senderOpenId)
+                    throw new Error('APPROVAL_PEER_INVALID');
+                const expected = this.signature(delivery, action, value.approved);
+                if (!timingSafeEqual(Buffer.from(expected, 'hex'), Buffer.from(value.signature, 'hex')))
+                    throw new Error('APPROVAL_SIGNATURE_INVALID');
+                const receipt = (message) => this.receipt(message, action, request, delivery);
+                if (action.status !== 'pending' || result.status !== 'awaiting_approval') {
+                    return receipt(action.status === 'approved' ? '此操作已批准' : action.status === 'rejected' ? '此操作已拒绝' : '此审批已失效');
+                }
+                const view = this.presentation(action, delivery);
+                if (view.expiresAt <= Date.now())
+                    return receipt('审批卡片已过期，请到 Web Copilot 核对或重新发起请求。');
+                if (value.approved && !view.complete)
+                    return toast('操作信息无法完整显示，请在 Web Copilot 核对后批准。', 'error');
+                // Guard against changed raw input even when its recorded digest was not updated.
+                if (inputDigest(action.inputJson) !== action.inputDigest)
+                    throw new Error('APPROVAL_INPUT_CHANGED');
+                if (!decide({ runId: action.runId, actionId: action.id, approved: value.approved }))
+                    return receipt('此审批已失效');
+                new AuditLogRepository(this.db, this.userId).create({ action: 'copilot.channel.approval', resourceType: 'copilot_pending_action',
+                    resourceId: action.id, details: { channel: 'feishu', deliveryId: delivery.id, approved: value.approved } });
+                return receipt(value.approved ? '已批准，Copilot 将继续执行' : '已拒绝，Copilot 将继续处理');
+            }).immediate();
+        }
+        catch {
+            return toast('无法审批：身份、权限或卡片状态已变化，请核对当前任务。', 'error');
+        }
+    }
+    receipt(message, action, request, delivery) {
+        return { ...toast(message, 'info'), card: { type: 'raw', data: {
+                    config: { wide_screen_mode: true, enable_forward: false, update_multi: true },
+                    header: { template: 'blue', title: plain('ForgeBadger · 审批结果') }, elements: [div(message),
+                        div(`请求：${Array.from(redactAgentText(request)).slice(0, 300).join('')}`),
+                        div(`操作：${redactAgentText(action.tool)}\n审批编号：${action.id.slice(0, 8)}`),
+                        div(this.presentation(action, delivery).detail || '操作参数无法完整显示。')]
+                } } };
+    }
+}
+//# sourceMappingURL=feishu-approval.js.map

package/dist/gateway/src/services/channels/feishu-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-approval.js","sourceRoot":"","sources":["../../../../src/services/channels/feishu-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAwB,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,yBAAyB,EAAwB,MAAM,sDAAsD,CAAC;AACvH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAE/D,OAAO,EAAoB,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEvE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4CAA4C,CAAC;AAElF,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAGzD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrG,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACnF,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;AACpE,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACxE,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,OAAqC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AAC/G,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAEhC,uFAAuF;AACvF,MAAM,OAAO,qBAAqB;IACH;IAA+B;IAAiC;IAA7F,YAA6B,EAAY,EAAmB,MAAc,EAAmB,GAAW;QAA3E,OAAE,GAAF,EAAE,CAAU;QAAmB,WAAM,GAAN,MAAM,CAAQ;QAAmB,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAEpG,IAAI,CAAC,QAAyB;QACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAoB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAA+C,CAAC;QACpK,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,KAAK,qBAAqB,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACzF,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACrE,CAAC;IAEO,YAAY,CAAC,MAA0B,EAAE,QAAyB;QACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnH,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAA4B,CAAC;YACtE,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,UAAiD,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxH,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9F,QAAQ,GAAG,MAAM,EAAE,UAAU,KAAK,cAAc,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,cAAc,KAAK,uBAAuB;uBAC5G,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;uBAC5E,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS;2BACnE,KAAK,EAAE,aAAa,KAAK,MAAM,CAAC,aAAa,IAAI,KAAK,EAAE,aAAa,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;gBACnG,IAAI,QAAQ;oBAAE,MAAM,GAAG,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,MAAM,EAAE,CAAC;YAChG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,QAAQ,GAAG,KAAK,CAAC;QAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACrC,mGAAmG;QACnG,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,KAAK;YAAE,QAAQ,GAAG,KAAK,CAAC;QAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,CAAC;QACzF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS;YAC1F,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACvI,CAAC;IAEO,SAAS,CAAC,QAAyB,EAAE,MAA0B,EAAE,QAAiB;QACxF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,gCAAgC,EAAE,IAAI,CAAC,MAAM;YACxG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzH,CAAC;IAED,IAAI,CAAC,QAAyB;QAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,QAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3F,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACrG,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE;YACnE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,2BAA2B,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;YACpF,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,QAAQ,EAAE;gBAC7E,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,YAAY,CAAC,MAAM,IAAI,aAAa,CAAC;gBACzC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC;oBAC3D,CAAC,CAAC,6CAA6C,CAAC;gBAClD,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC/D,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;aAC9F,EAAE,CAAC;IACR,CAAC;IAED,wGAAwG;IACxG,MAAM,CAAC,QAAiB,EAAE,SAAiB,EAAE,eAAuB,EAAE,MAA6B;QACjG,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa;gBAAE,OAAO,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;YAC1B,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC9B,MAAM,QAAQ,GAAG,IAAI,yBAAyB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;gBAC5F,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,mBAAmB;uBAC5E,QAAQ,CAAC,mBAAmB,KAAK,KAAK,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBACnG,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,KAAK,eAAe;uBACvE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBAC1H,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACvI,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACtF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;oBACzE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC/G,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACjD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;oBAAE,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;gBACtF,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC,kCAAkC,EAAE,OAAO,CAAC,CAAC;gBAChG,iFAAiF;gBACjF,IAAI,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACpG,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC9G,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,YAAY,EAAE,wBAAwB;oBAC9H,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC9G,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC7E,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;IACnE,CAAC;IAEO,OAAO,CAAC,OAAe,EAAE,MAA0B,EAAE,OAAe,EAAE,QAAyB;QACrG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;oBAC7D,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE;oBAC7E,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;wBACvF,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;wBACxE,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACxE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;iBACpE,EAAE,EAAE,CAAC;IACR,CAAC;CACF"}

package/dist/gateway/src/services/channels/feishu-typing-worker.d.ts

@@ -0,0 +1,16 @@
+import type { Database } from '../../db/types.js';
+import { type FeishuReactionIO } from '../integrations/feishu-reactions.js';
+/** Best-effort processing feedback. Durable compensation is independent of text delivery. */
+export declare class FeishuTypingWorker {
+    private readonly db;
+    private readonly userId;
+    private readonly key;
+    private readonly io;
+    private readonly records;
+    private readonly accounts;
+    constructor(db: Database, userId: string, key: string, io?: FeishuReactionIO);
+    runOnce(signal: AbortSignal): Promise<void>;
+    private processing;
+    private authorizeProcessing;
+    private api;
+}

package/dist/gateway/src/services/channels/feishu-typing-worker.js

@@ -0,0 +1,100 @@
+import { decryptSecret } from '../../crypto/secret-box.js';
+import { FeishuChannelRepository } from '../../db/repositories/feishu-channel-repository.js';
+import { FeishuTypingRepository } from '../../db/repositories/feishu-typing-repository.js';
+import { ChannelMessageRepository } from '../../db/repositories/channel-message-repository.js';
+import { ChannelIdentityService } from './channel-identity-service.js';
+import { FeishuReactions, FeishuReactionError } from '../integrations/feishu-reactions.js';
+/** Best-effort processing feedback. Durable compensation is independent of text delivery. */
+export class FeishuTypingWorker {
+    db;
+    userId;
+    key;
+    io;
+    records;
+    accounts;
+    constructor(db, userId, key, io = {}) {
+        this.db = db;
+        this.userId = userId;
+        this.key = key;
+        this.io = io;
+        this.records = new FeishuTypingRepository(db, userId);
+        this.accounts = new FeishuChannelRepository(db, userId, key);
+    }
+    async runOnce(signal) {
+        if (signal.aborted)
+            return;
+        this.records.project();
+        const job = this.records.claim();
+        if (!job)
+            return;
+        try {
+            if (job.state === 'pending') {
+                if (Date.now() - job.created_at > 120_000 || !this.processing(job)) {
+                    this.records.release(job, 'done');
+                    return;
+                }
+                this.records.adding(job);
+                job.state = 'adding';
+                const reactionId = await this.api(job, signal, true).add();
+                this.records.saveReceipt(job, reactionId);
+            }
+            if (job.state === 'active' && this.processing(job)) {
+                this.records.release(job, 'active');
+                return;
+            }
+            const api = this.api(job, signal, false);
+            // Uncertain creates are never repeated, even after a process restart.
+            const ids = job.state === 'active' && job.reaction_id ? [job.reaction_id]
+                : (await api.listOwn()).filter(id => !job.reaction_id || id === job.reaction_id);
+            if (!ids.length && !job.reaction_id && Date.now() < job.reconcile_until) {
+                // A timed-out POST may become visible after the first empty list response.
+                this.records.release(job, 'uncertain', 30_000);
+                return;
+            }
+            for (const id of ids)
+                await api.remove(id);
+            this.records.release(job, 'done');
+        }
+        catch (error) {
+            const delay = error instanceof FeishuReactionError ? error.retryAfterMs : 30_000;
+            // A DELETE can succeed even when its response is lost. Query before retrying it.
+            this.records.release(job, job.state === 'adding' || job.state === 'active' ? 'uncertain' : job.state, Math.max(delay, Math.min(300_000, 30_000 * 2 ** Math.min(job.attempt_count, 4))), true);
+        }
+    }
+    processing(job) {
+        if (this.records.ended(job))
+            return false;
+        try {
+            this.authorizeProcessing(job);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    authorizeProcessing(job) {
+        const message = new ChannelMessageRepository(this.db, this.userId).get(job.inbox_id);
+        if (!message)
+            throw new Error('FEISHU_TYPING_INBOX_MISSING');
+        const payload = JSON.parse(decryptSecret(JSON.parse(message.payload_encrypted), { key: this.key }));
+        if (payload.peer.channel !== 'feishu' || payload.peer.accountId !== job.account_id)
+            throw new Error('FEISHU_TYPING_PEER_MISMATCH');
+        new ChannelIdentityService(this.db, this.userId).admit(message.route_id, payload.peer);
+    }
+    api(job, signal, adding) {
+        return new FeishuReactions({ messageId: job.message_id, appId: job.app_id, signal,
+            credentials: () => this.accounts.decryptAccountCredentials(job.account_id),
+            authorize: () => {
+                if (!this.records.owns(job) || !this.records.actorActive() || this.accounts.getAccount(job.account_id)?.appId !== job.app_id)
+                    throw new Error('FEISHU_TYPING_AUTHORITY_REJECTED');
+                // Deleting our own recorded Typing is compensation, allowed after revocation/emergency stop.
+                if (adding) {
+                    if (Date.now() - job.created_at > 120_000 || this.records.ended(job))
+                        throw new Error('FEISHU_TYPING_FINISHED');
+                    this.authorizeProcessing(job);
+                }
+            }
+        }, this.io);
+    }
+}
+//# sourceMappingURL=feishu-typing-worker.js.map

package/dist/gateway/src/services/channels/feishu-typing-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-typing-worker.js","sourceRoot":"","sources":["../../../../src/services/channels/feishu-typing-worker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAwB,MAAM,4BAA4B,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAkB,MAAM,mDAAmD,CAAC;AAC3G,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,sBAAsB,EAA2B,MAAM,+BAA+B,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAyB,MAAM,qCAAqC,CAAC;AAElH,6FAA6F;AAC7F,MAAM,OAAO,kBAAkB;IAGA;IAA+B;IACzC;IAA8B;IAHhC,OAAO,CAAyB;IAChC,QAAQ,CAA0B;IACnD,YAA6B,EAAY,EAAmB,MAAc,EACvD,GAAW,EAAmB,KAAuB,EAAE;QAD7C,OAAE,GAAF,EAAE,CAAU;QAAmB,WAAM,GAAN,MAAM,CAAQ;QACvD,QAAG,GAAH,GAAG,CAAQ;QAAmB,OAAE,GAAF,EAAE,CAAuB;QACxE,IAAI,CAAC,OAAO,GAAG,IAAI,sBAAsB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,uBAAuB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAmB;QAC/B,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO;QAC3B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACnE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAAC,OAAO;gBAC5C,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC;gBAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC3D,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAAC,OAAO;YAC9C,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YACzC,sEAAsE;YACtE,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;gBACvE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;YACnF,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBACxE,2EAA2E;gBAC3E,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBAAC,OAAO;YACzD,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,GAAG;gBAAE,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,KAAK,YAAY,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;YACjF,iFAAiF;YACjF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAClG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,GAAc;QAC/B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC;YAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC7E,CAAC;IAEO,mBAAmB,CAAC,GAAc;QACxC,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAoB,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAiC,CAAC;QACvJ,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnI,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IAEO,GAAG,CAAC,GAAc,EAAE,MAAmB,EAAE,MAAe;QAC9D,OAAO,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM;YAC/E,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,GAAG,CAAC,UAAU,CAAC;YAC1E,SAAS,EAAE,GAAG,EAAE;gBACd,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC,MAAM;oBAC1H,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACtD,6FAA6F;gBAC7F,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBAChH,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;SACF,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;CACF"}