forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/notifications/feishu-notification-directory-client.js

@@ -0,0 +1,50 @@
+import { z } from 'zod';
+import { assertResolvedPublicHttpsEndpoint } from '../network-policy.js';
+import { FeishuNotificationError } from './feishu-notification-error.js';
+const base = 'https://open.feishu.cn/open-apis';
+const groupsSchema = z.object({ code: z.literal(0), data: z.object({
+        items: z.array(z.object({ chat_id: z.string().min(1).max(128), name: z.string().max(1000) })),
+        has_more: z.boolean(), page_token: z.string().max(4096).optional(),
+    }) });
+async function request(path, init, io, fence) {
+    fence();
+    await (io.validate ?? assertResolvedPublicHttpsEndpoint)(base + path);
+    fence();
+    const response = await (io.fetch ?? fetch)(base + path, { ...init, redirect: 'error' });
+    fence();
+    if (!response.ok)
+        throw new FeishuNotificationError(response.status === 403 ? 'DIRECTORY_PERMISSION_REQUIRED' : 'DIRECTORY_UNAVAILABLE');
+    const data = await response.json();
+    fence();
+    if (data && typeof data === 'object' && 'code' in data && data.code !== 0)
+        throw new FeishuNotificationError(data.code === 99991672 ? 'DIRECTORY_PERMISSION_REQUIRED' : 'DIRECTORY_UNAVAILABLE');
+    return data;
+}
+export async function directoryToken(credentials, signal, io, fence) {
+    const result = await request('/auth/v3/tenant_access_token/internal', { method: 'POST', signal, headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ app_id: credentials.appId, app_secret: credentials.appSecret }) }, io, fence);
+    return z.object({ code: z.literal(0), tenant_access_token: z.string().min(1) }).parse(result).tenant_access_token;
+}
+export async function listFeishuGroups(token, signal, io, fence) {
+    const groups = new Map(), seen = new Set();
+    let pageToken = '';
+    for (let page = 0; page < 20; page++) {
+        const query = new URLSearchParams({ page_size: '100', ...(pageToken ? { page_token: pageToken } : {}) });
+        const result = groupsSchema.parse(await request(`/im/v1/chats?${query}`, { signal, headers: { authorization: `Bearer ${token}` } }, io, fence));
+        for (const item of result.data.items)
+            groups.set(item.chat_id, { chatId: item.chat_id, name: item.name });
+        if (!result.data.has_more)
+            return [...groups.values()];
+        const next = result.data.page_token;
+        if (!next || seen.has(next))
+            break;
+        seen.add(next);
+        pageToken = next;
+    }
+    throw new FeishuNotificationError('DIRECTORY_INCOMPLETE');
+}
+export async function isFeishuGroupMember(chatId, token, signal, io, fence) {
+    const result = await request(`/im/v1/chats/${encodeURIComponent(chatId)}/members/is_in_chat`, { signal, headers: { authorization: `Bearer ${token}` } }, io, fence);
+    return z.object({ code: z.literal(0), data: z.object({ is_in_chat: z.boolean() }) }).parse(result).data.is_in_chat;
+}
+//# sourceMappingURL=feishu-notification-directory-client.js.map

package/dist/gateway/src/services/notifications/feishu-notification-directory-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notification-directory-client.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notification-directory-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAGzE,MAAM,IAAI,GAAC,kCAAkC,CAAC;AAC9C,MAAM,YAAY,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,KAAK,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAC,CAAC,CAAC;QACvF,QAAQ,EAAC,CAAC,CAAC,OAAO,EAAE,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KAChE,CAAC,EAAC,CAAC,CAAC;AAEL,KAAK,UAAU,OAAO,CAAC,IAAW,EAAC,IAAgB,EAAC,EAAoB,EAAC,KAAc;IACrF,KAAK,EAAE,CAAC;IAAA,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAE,iCAAiC,CAAC,CAAC,IAAI,GAAC,IAAI,CAAC,CAAC;IAAA,KAAK,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAE,KAAK,CAAC,CAAC,IAAI,GAAC,IAAI,EAAC,EAAC,GAAG,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAC,CAAC,CAAC;IAC7E,KAAK,EAAE,CAAC;IACR,IAAG,CAAC,QAAQ,CAAC,EAAE;QAAC,MAAM,IAAI,uBAAuB,CAAC,QAAQ,CAAC,MAAM,KAAG,GAAG,CAAA,CAAC,CAAA,+BAA+B,CAAA,CAAC,CAAA,uBAAuB,CAAC,CAAC;IACjI,MAAM,IAAI,GAAS,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAAA,KAAK,EAAE,CAAC;IACjD,IAAG,IAAI,IAAE,OAAO,IAAI,KAAG,QAAQ,IAAE,MAAM,IAAI,IAAI,IAAE,IAAI,CAAC,IAAI,KAAG,CAAC;QAC5D,MAAM,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,+BAA+B,CAAA,CAAC,CAAA,uBAAuB,CAAC,CAAC;IAClH,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAA2C,EAAC,MAAkB,EAAC,EAAoB,EAAC,KAAc;IACrI,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,uCAAuC,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC;QAClI,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAC,WAAW,CAAC,KAAK,EAAC,UAAU,EAAC,WAAW,CAAC,SAAS,EAAC,CAAC,EAAC,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,mBAAmB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC;AAC/G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAY,EAAC,MAAkB,EAAC,EAAoB,EAAC,KAAc;IACxG,MAAM,MAAM,GAAC,IAAI,GAAG,EAAsC,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IAClF,IAAI,SAAS,GAAC,EAAE,CAAC;IACjB,KAAI,IAAI,IAAI,GAAC,CAAC,EAAC,IAAI,GAAC,EAAE,EAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAC,IAAI,eAAe,CAAC,EAAC,SAAS,EAAC,KAAK,EAAC,GAAG,CAAC,SAAS,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,SAAS,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC,EAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAC,YAAY,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,gBAAgB,KAAK,EAAE,EAAC,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,EAAC,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC,CAAC;QACpI,KAAI,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK;YAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAC,EAAC,MAAM,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC;QAClG,IAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ;YAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,GAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,IAAG,CAAC,IAAI,IAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAC,MAAM;QAC/B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAA,SAAS,GAAC,IAAI,CAAC;IAChC,CAAC;IACD,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;AAC5D,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAa,EAAC,KAAY,EAAC,MAAkB,EAAC,EAAoB,EAAC,KAAc;IACzH,MAAM,MAAM,GAAC,MAAM,OAAO,CAAC,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,qBAAqB,EAAC,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,EAAC,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;IACxJ,OAAO,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,OAAO,EAAE,EAAC,CAAC,EAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;AAC7G,CAAC"}

package/dist/gateway/src/services/notifications/feishu-notification-error.d.ts

@@ -0,0 +1,4 @@
+export declare class FeishuNotificationError extends Error {
+    readonly code: string;
+    constructor(code: string);
+}

package/dist/gateway/src/services/notifications/feishu-notification-error.js

@@ -0,0 +1,8 @@
+export class FeishuNotificationError extends Error {
+    code;
+    constructor(code) {
+        super(code);
+        this.code = code;
+    }
+}
+//# sourceMappingURL=feishu-notification-error.js.map

package/dist/gateway/src/services/notifications/feishu-notification-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notification-error.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notification-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,IAAW;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAAzB,SAAI,GAAJ,IAAI,CAAO;IAAc,CAAC;CAChD"}

package/dist/gateway/src/services/notifications/feishu-notification-targets.d.ts

@@ -0,0 +1,27 @@
+import type { Database } from '../../db/types.js';
+import { FeishuNotificationTargetRepository } from '../../db/repositories/feishu-notification-target-repository.js';
+import { type FeishuDirectoryIO } from './feishu-notification-directory-client.js';
+export interface FeishuNotificationTarget {
+    id: string;
+    kind: 'private' | 'group';
+    name: string;
+    chatId: string;
+    accountId: string;
+    accountRevision: number;
+    revision: number;
+    available: boolean;
+    reason: string | null;
+}
+export declare class FeishuNotificationTargets {
+    private readonly db;
+    private readonly userId;
+    readonly records: FeishuNotificationTargetRepository;
+    private readonly identities;
+    constructor(db: Database, userId: string);
+    private assertAccount;
+    private privateTarget;
+    resolve(id: string | null): FeishuNotificationTarget | undefined;
+    authority(id: string | null): FeishuNotificationTarget;
+    list(): FeishuNotificationTarget[];
+    refresh(masterKey: string, io?: FeishuDirectoryIO): Promise<FeishuNotificationTarget[]>;
+}

package/dist/gateway/src/services/notifications/feishu-notification-targets.js

@@ -0,0 +1,101 @@
+import { ChannelIdentityRepository } from '../../db/repositories/channel-identity-repository.js';
+import { FeishuChannelRepository } from '../../db/repositories/feishu-channel-repository.js';
+import { FeishuIntegrationRepository } from '../../db/repositories/feishu-integration-repository.js';
+import { FeishuNotificationTargetRepository } from '../../db/repositories/feishu-notification-target-repository.js';
+import { FeishuNotificationError } from './feishu-notification-error.js';
+import { directoryToken, listFeishuGroups } from './feishu-notification-directory-client.js';
+import { redactSensitiveContent } from '../../lib/redaction.js';
+export class FeishuNotificationTargets {
+    db;
+    userId;
+    records;
+    identities;
+    constructor(db, userId) {
+        this.db = db;
+        this.userId = userId;
+        this.records = new FeishuNotificationTargetRepository(db, userId);
+        this.identities = new ChannelIdentityRepository(db, userId);
+    }
+    assertAccount(accountId, accountRevision) {
+        if (!this.identities.actorActive())
+            throw new FeishuNotificationError('USER_DISABLED');
+        const account = this.identities.accountMetadata('feishu', accountId);
+        if (!account?.enabled || account.configRevision !== accountRevision)
+            throw new FeishuNotificationError('ACCOUNT_CHANGED');
+        const config = new FeishuIntegrationRepository(this.db, this.userId).getConfig();
+        if (!config.enabled || config.emergencyDisabled)
+            throw new FeishuNotificationError('CHANNEL_DISABLED');
+    }
+    privateTarget(id) {
+        const identity = this.identities.identity(id);
+        if (!identity || identity.channel !== 'feishu')
+            return;
+        return { id: `private:${identity.id}`, kind: 'private', name: `已确认私聊 · ${identity.externalUserId}`, chatId: identity.chatId,
+            accountId: identity.accountId, accountRevision: identity.accountRevision, revision: identity.revision,
+            available: identity.status === 'active', reason: identity.status === 'active' ? null : 'IDENTITY_INVALID' };
+    }
+    resolve(id) {
+        if (!id)
+            return;
+        if (id.startsWith('private:'))
+            return this.privateTarget(id.slice(8));
+        if (!id.startsWith('group:'))
+            return;
+        const group = this.records.group(id.slice(6));
+        return group ? { ...group, id: `group:${group.id}`, kind: 'group', reason: group.available ? null : 'TARGET_UNAVAILABLE' } : undefined;
+    }
+    authority(id) {
+        const target = this.resolve(id);
+        if (!target)
+            throw new FeishuNotificationError('TARGET_INVALID');
+        this.assertAccount(target.accountId, target.accountRevision);
+        if (!target.available)
+            throw new FeishuNotificationError(target.reason ?? 'TARGET_UNAVAILABLE');
+        return target;
+    }
+    list() {
+        const account = this.records.account();
+        if (!account)
+            return [];
+        const privateTargets = this.identities.listIdentities()
+            .filter(identity => identity.channel === 'feishu' && identity.accountId === account.id && identity.accountRevision === account.configRevision && identity.status === 'active')
+            .map(identity => this.privateTarget(identity.id));
+        const groups = this.records.groups(account.id, account.configRevision).map(group => this.resolve(`group:${group.id}`));
+        return [...privateTargets, ...groups].map(target => {
+            try {
+                this.authority(target.id);
+                return target;
+            }
+            catch (error) {
+                return { ...target, available: false, reason: error instanceof FeishuNotificationError ? error.code : 'TARGET_UNAVAILABLE' };
+            }
+        });
+    }
+    async refresh(masterKey, io = {}) {
+        const accounts = new FeishuChannelRepository(this.db, this.userId, masterKey);
+        const account = accounts.getAccount();
+        if (!account)
+            throw new FeishuNotificationError('ACCOUNT_CHANGED');
+        const signal = AbortSignal.timeout(20_000);
+        const fence = () => { signal.throwIfAborted(); this.assertAccount(account.id, account.configRevision); };
+        fence();
+        const config = new FeishuIntegrationRepository(this.db, this.userId).getConfig();
+        const candidates = new Set([...config.allowedChatIds, ...this.records.knownGroupChatIds(account.id, account.configRevision),
+            ...this.records.groups(account.id, account.configRevision).map(group => group.chatId)]);
+        let groups;
+        try {
+            const token = await directoryToken(accounts.decryptAccountCredentials(account.id), signal, io, fence);
+            groups = await listFeishuGroups(token, signal, io, fence);
+        }
+        catch (error) {
+            if (error instanceof FeishuNotificationError)
+                throw error;
+            throw new FeishuNotificationError('DIRECTORY_UNAVAILABLE');
+        }
+        fence();
+        this.records.synchronize(account.id, account.configRevision, groups.filter(group => candidates.has(group.chatId))
+            .map(group => ({ ...group, name: Array.from(redactSensitiveContent(group.name)).slice(0, 200).join('') || '未命名群聊' })));
+        return this.list();
+    }
+}
+//# sourceMappingURL=feishu-notification-targets.js.map

package/dist/gateway/src/services/notifications/feishu-notification-targets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notification-targets.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notification-targets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,sDAAsD,CAAC;AACjG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,2BAA2B,EAAE,MAAM,wDAAwD,CAAC;AACrG,OAAO,EAAE,kCAAkC,EAAE,MAAM,gEAAgE,CAAC;AACpH,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAA0B,MAAM,2CAA2C,CAAC;AACrH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAMhE,MAAM,OAAO,yBAAyB;IAGP;IAA6B;IAFjD,OAAO,CAAoC;IACnC,UAAU,CAA2B;IACtD,YAA6B,EAAW,EAAkB,MAAa;QAA1C,OAAE,GAAF,EAAE,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAO;QACrE,IAAI,CAAC,OAAO,GAAC,IAAI,kCAAkC,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,GAAC,IAAI,yBAAyB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IACO,aAAa,CAAC,SAAgB,EAAC,eAAsB;QAC3D,IAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YAAC,MAAM,IAAI,uBAAuB,CAAC,eAAe,CAAC,CAAC;QACrF,MAAM,OAAO,GAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC;QAClE,IAAG,CAAC,OAAO,EAAE,OAAO,IAAE,OAAO,CAAC,cAAc,KAAG,eAAe;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QACpH,MAAM,MAAM,GAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9E,IAAG,CAAC,MAAM,CAAC,OAAO,IAAE,MAAM,CAAC,iBAAiB;YAAC,MAAM,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;IACrG,CAAC;IACO,aAAa,CAAC,EAAS;QAC7B,MAAM,QAAQ,GAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAG,CAAC,QAAQ,IAAE,QAAQ,CAAC,OAAO,KAAG,QAAQ;YAAC,OAAO;QACjD,OAAO,EAAC,EAAE,EAAC,WAAW,QAAQ,CAAC,EAAE,EAAE,EAAC,IAAI,EAAC,SAAS,EAAC,IAAI,EAAC,WAAW,QAAQ,CAAC,cAAc,EAAE,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM;YACjH,SAAS,EAAC,QAAQ,CAAC,SAAS,EAAC,eAAe,EAAC,QAAQ,CAAC,eAAe,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ;YAChG,SAAS,EAAC,QAAQ,CAAC,MAAM,KAAG,QAAQ,EAAC,MAAM,EAAC,QAAQ,CAAC,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,kBAAkB,EAAC,CAAC;IACpG,CAAC;IACD,OAAO,CAAC,EAAc;QACpB,IAAG,CAAC,EAAE;YAAC,OAAO;QACd,IAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAC,OAAO;QACnC,MAAM,KAAK,GAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAA,CAAC,CAAA,EAAC,GAAG,KAAK,EAAC,EAAE,EAAC,SAAS,KAAK,CAAC,EAAE,EAAE,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,EAAC,KAAK,CAAC,SAAS,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,oBAAoB,EAAC,CAAA,CAAC,CAAA,SAAS,CAAC;IACzH,CAAC;IACD,SAAS,CAAC,EAAc;QACtB,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAG,CAAC,MAAM;YAAC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC5D,IAAG,CAAC,MAAM,CAAC,SAAS;YAAC,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,MAAM,IAAE,oBAAoB,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI;QACF,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAG,CAAC,OAAO;YAAC,OAAO,EAAE,CAAC;QACtB,MAAM,cAAc,GAAC,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE;aAClD,MAAM,CAAC,QAAQ,CAAA,EAAE,CAAA,QAAQ,CAAC,OAAO,KAAG,QAAQ,IAAE,QAAQ,CAAC,SAAS,KAAG,OAAO,CAAC,EAAE,IAAE,QAAQ,CAAC,eAAe,KAAG,OAAO,CAAC,cAAc,IAAE,QAAQ,CAAC,MAAM,KAAG,QAAQ,CAAC;aAC7J,GAAG,CAAC,QAAQ,CAAA,EAAE,CAAA,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,CAAC,EAAE,EAAE,CAAE,CAAC,CAAC;QACnH,OAAO,CAAC,GAAG,cAAc,EAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAA,EAAE;YAC/C,IAAG,CAAC;gBAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAAA,OAAO,MAAM,CAAC;YAAA,CAAC;YAC7C,OAAM,KAAK,EAAC,CAAC;gBAAA,OAAO,EAAC,GAAG,MAAM,EAAC,SAAS,EAAC,KAAK,EAAC,MAAM,EAAC,KAAK,YAAY,uBAAuB,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,CAAA,CAAC,CAAA,oBAAoB,EAAC,CAAC;YAAA,CAAC;QACnI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,SAAgB,EAAC,KAAqB,EAAE;QACpD,MAAM,QAAQ,GAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACpC,IAAG,CAAC,OAAO;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAC,GAAE,EAAE,GAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAA,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAA,CAAC,CAAC;QACjG,KAAK,EAAE,CAAC;QACR,MAAM,MAAM,GAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9E,MAAM,UAAU,GAAC,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,EAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,cAAc,CAAC;YACrH,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvF,IAAI,MAAoC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;YACjG,MAAM,GAAC,MAAM,gBAAgB,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE,EAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YACZ,IAAG,KAAK,YAAY,uBAAuB;gBAAC,MAAM,KAAK,CAAC;YACxD,MAAM,IAAI,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,cAAc,EAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;aAC1G,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,GAAG,KAAK,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAE,OAAO,EAAC,CAAC,CAAC,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/gateway/src/services/notifications/feishu-notification-worker.d.ts

@@ -0,0 +1,14 @@
+import type { Database } from '../../db/types.js';
+import { assertResolvedPublicHttpsEndpoint } from '../network-policy.js';
+export interface FeishuNotificationIO {
+    fetch?: typeof fetch;
+    validate?: typeof assertResolvedPublicHttpsEndpoint;
+}
+export declare class FeishuNotificationWorker {
+    private readonly db;
+    private readonly userId;
+    private readonly key;
+    private readonly io;
+    constructor(db: Database, userId: string, key: string, io?: FeishuNotificationIO);
+    runOnce(stop: AbortSignal): Promise<void>;
+}

package/dist/gateway/src/services/notifications/feishu-notification-worker.js

@@ -0,0 +1,117 @@
+import { z } from 'zod';
+import { FeishuChannelRepository } from '../../db/repositories/feishu-channel-repository.js';
+import { NotificationRepository } from '../../db/repositories/notification-repository.js';
+import { FeishuNotifications, FeishuNotificationError } from './feishu-notifications.js';
+import { renderFeishuNotificationCard } from './feishu-notification-card.js';
+import { assertResolvedPublicHttpsEndpoint } from '../network-policy.js';
+import { isFeishuGroupMember } from './feishu-notification-directory-client.js';
+const tokenUrl = 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal';
+const messageUrl = 'https://open.feishu.cn/open-apis/im/v1/messages?receive_id_type=chat_id';
+const tokenSchema = z.object({ code: z.literal(0), tenant_access_token: z.string().min(1) });
+const receiptSchema = z.object({ code: z.number(), data: z.object({ message_id: z.string().min(1) }).optional() });
+export class FeishuNotificationWorker {
+    db;
+    userId;
+    key;
+    io;
+    constructor(db, userId, key, io = {}) {
+        this.db = db;
+        this.userId = userId;
+        this.key = key;
+        this.io = io;
+    }
+    async runOnce(stop) {
+        if (stop.aborted || !this.db.open)
+            return;
+        const service = new FeishuNotifications(this.db, this.userId), records = service.records;
+        const item = records.claim();
+        if (!item)
+            return;
+        const notifications = new NotificationRepository(this.db, this.userId);
+        const signal = AbortSignal.any([stop, AbortSignal.timeout(15_000)]);
+        const authorize = () => {
+            signal.throwIfAborted();
+            if (!this.db.open || !records.owns(item))
+                throw new FeishuNotificationError('CLAIM_LOST');
+            const scope = service.assertDelivery(item);
+            if (item.notification_id && !notifications.get(item.notification_id))
+                throw new FeishuNotificationError('NOTIFICATION_REMOVED');
+            return scope;
+        };
+        const request = this.io.fetch ?? fetch, validate = this.io.validate ?? assertResolvedPublicHttpsEndpoint;
+        let attempted = false;
+        try {
+            authorize();
+            await validate(tokenUrl);
+            const { target } = authorize();
+            const credentials = new FeishuChannelRepository(this.db, this.userId, this.key).decryptAccountCredentials(target.accountId);
+            const tokenResponse = await request(tokenUrl, { method: 'POST', redirect: 'error', signal, headers: { 'content-type': 'application/json' },
+                body: JSON.stringify({ app_id: credentials.appId, app_secret: credentials.appSecret }) });
+            if (tokenResponse.status === 429 || tokenResponse.status >= 500) {
+                records.retry(item, retryDelay(tokenResponse));
+                return;
+            }
+            if (!tokenResponse.ok) {
+                records.finish(item, 'failed', 'TOKEN_REJECTED');
+                return;
+            }
+            const token = tokenSchema.parse(await tokenResponse.json()).tenant_access_token;
+            authorize();
+            if (target.kind === 'group' && !await isFeishuGroupMember(target.chatId, token, signal, this.io, () => { authorize(); })) {
+                service.targets.records.invalidate(target.id.slice(6));
+                throw new FeishuNotificationError('TARGET_UNAVAILABLE');
+            }
+            await validate(messageUrl);
+            const current = authorize();
+            const notification = item.notification_id ? notifications.get(item.notification_id) : undefined;
+            const card = renderFeishuNotificationCard(item, notification, current.config.webBaseUrl);
+            const body = JSON.stringify({ receive_id: current.target.chatId, msg_type: 'interactive', content: JSON.stringify(card), uuid: item.id });
+            authorize();
+            attempted = true;
+            const response = await request(messageUrl, { method: 'POST', redirect: 'error', signal, headers: { 'content-type': 'application/json', authorization: `Bearer ${token}` }, body });
+            if (stop.aborted || !this.db.open)
+                return;
+            if (response.status === 429) {
+                records.retry(item, retryDelay(response));
+                return;
+            }
+            if (response.status >= 500) {
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+                return;
+            }
+            const parsed = receiptSchema.safeParse(await response.json());
+            if (!parsed.success) {
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+                return;
+            }
+            if (parsed.data.code !== 0) {
+                records.finish(item, 'failed', 'SEND_REJECTED');
+                return;
+            }
+            const messageId = parsed.data.data?.message_id;
+            records.finish(item, response.ok && messageId ? 'delivered' : 'unknown', messageId ? undefined : 'SEND_UNCERTAIN', messageId);
+        }
+        catch (error) {
+            if (stop.aborted || !this.db.open)
+                return;
+            if (attempted)
+                records.finish(item, 'unknown', 'SEND_UNCERTAIN');
+            else if (error instanceof FeishuNotificationError && error.code === 'DIRECTORY_UNAVAILABLE')
+                records.retry(item, 1000);
+            else if (error instanceof FeishuNotificationError && error.code === 'DIRECTORY_PERMISSION_REQUIRED')
+                records.finish(item, 'failed', error.code);
+            else if (error instanceof FeishuNotificationError)
+                records.finish(item, 'cancelled', error.code);
+            else
+                records.retry(item, 1000);
+        }
+    }
+}
+function retryDelay(response) {
+    const header = response.headers.get('retry-after');
+    if (!header)
+        return 1000;
+    const seconds = Number(header), delay = Number.isFinite(seconds) ? seconds * 1000 : Date.parse(header) - Date.now();
+    return Number.isFinite(delay) ? Math.max(1000, delay) : 1000;
+}
+//# sourceMappingURL=feishu-notification-worker.js.map

package/dist/gateway/src/services/notifications/feishu-notification-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notification-worker.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notification-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAC7F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAC1F,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzF,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,MAAM,QAAQ,GAAC,uEAAuE,CAAC;AACvF,MAAM,UAAU,GAAC,yEAAyE,CAAC;AAC3F,MAAM,WAAW,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,mBAAmB,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;AACtF,MAAM,aAAa,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,QAAQ,EAAE,EAAC,CAAC,CAAC;AACzG,MAAM,OAAO,wBAAwB;IACN;IAA6B;IAA+B;IAA4B;IAArH,YAA6B,EAAW,EAAkB,MAAa,EAAkB,GAAU,EAAkB,KAAwB,EAAE;QAAlH,OAAE,GAAF,EAAE,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAO;QAAkB,QAAG,GAAH,GAAG,CAAO;QAAkB,OAAE,GAAF,EAAE,CAAwB;IAAG,CAAC;IACnJ,KAAK,CAAC,OAAO,CAAC,IAAgB;QAC5B,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;YAAC,OAAO;QACxC,MAAM,OAAO,GAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,EAAC,OAAO,GAAC,OAAO,CAAC,OAAO,CAAC;QACnF,MAAM,IAAI,GAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,IAAG,CAAC,IAAI;YAAC,OAAO;QAC3C,MAAM,aAAa,GAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,MAAM,GAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,SAAS,GAAC,GAAE,EAAE;YAClB,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,IAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACxF,MAAM,KAAK,GAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzC,IAAG,IAAI,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;gBAAC,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;YAC9H,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,OAAO,GAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAE,KAAK,EAAC,QAAQ,GAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAE,iCAAiC,CAAC;QAChG,IAAI,SAAS,GAAC,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,SAAS,EAAE,CAAC;YAAA,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACrC,MAAM,EAAC,MAAM,EAAC,GAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,GAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxH,MAAM,aAAa,GAAC,MAAM,OAAO,CAAC,QAAQ,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC;gBAC3H,IAAI,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,MAAM,EAAC,WAAW,CAAC,KAAK,EAAC,UAAU,EAAC,WAAW,CAAC,SAAS,EAAC,CAAC,EAAC,CAAC,CAAC;YACrF,IAAG,aAAa,CAAC,MAAM,KAAG,GAAG,IAAI,aAAa,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAClH,IAAG,CAAC,aAAa,CAAC,EAAE,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC7E,MAAM,KAAK,GAAC,WAAW,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC;YAC9E,SAAS,EAAE,CAAC;YACZ,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,IAAE,CAAC,MAAM,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAC,KAAK,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,GAAE,EAAE,GAAC,SAAS,EAAE,CAAC,CAAA,CAAC,CAAC,EAAE,CAAC;gBAC5G,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvD,MAAM,IAAI,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;YAC1D,CAAC;YACD,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAAA,MAAM,OAAO,GAAC,SAAS,EAAE,CAAC;YACrD,MAAM,YAAY,GAAC,IAAI,CAAC,eAAe,CAAA,CAAC,CAAA,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA,CAAC,CAAA,SAAS,CAAC;YAC1F,MAAM,IAAI,GAAC,4BAA4B,CAAC,IAAI,EAAC,YAAY,EAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrF,MAAM,IAAI,GAAC,IAAI,CAAC,SAAS,CAAC,EAAC,UAAU,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,QAAQ,EAAC,aAAa,EAAC,OAAO,EAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,EAAE,EAAC,CAAC,CAAC;YAC/H,SAAS,EAAE,CAAC;YAAA,SAAS,GAAC,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAC,MAAM,OAAO,CAAC,UAAU,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,cAAc,EAAC,kBAAkB,EAAC,aAAa,EAAC,UAAU,KAAK,EAAE,EAAC,EAAC,IAAI,EAAC,CAAC,CAAC;YAClK,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAC,OAAO;YACxC,IAAG,QAAQ,CAAC,MAAM,KAAG,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC3E,IAAG,QAAQ,CAAC,MAAM,IAAE,GAAG,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YACjF,MAAM,MAAM,GAAC,aAAa,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAG,CAAC,MAAM,CAAC,OAAO,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC5E,IAAG,MAAM,CAAC,IAAI,CAAC,IAAI,KAAG,CAAC,EAAC,CAAC;gBAAA,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,eAAe,CAAC,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC/E,MAAM,SAAS,GAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;YAC7C,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,CAAC,EAAE,IAAI,SAAS,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,SAAS,EAAC,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,gBAAgB,EAAC,SAAS,CAAC,CAAC;QACrH,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YACZ,IAAG,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAC,OAAO;YACxC,IAAG,SAAS;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,SAAS,EAAC,gBAAgB,CAAC,CAAC;iBACxD,IAAG,KAAK,YAAY,uBAAuB,IAAE,KAAK,CAAC,IAAI,KAAG,uBAAuB;gBAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;iBAC3G,IAAG,KAAK,YAAY,uBAAuB,IAAE,KAAK,CAAC,IAAI,KAAG,+BAA+B;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACnI,IAAG,KAAK,YAAY,uBAAuB;gBAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAC,WAAW,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;gBACxF,OAAO,CAAC,KAAK,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF;AACD,SAAS,UAAU,CAAC,QAAiB;IACnC,MAAM,MAAM,GAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAAA,IAAG,CAAC,MAAM;QAAC,OAAO,IAAI,CAAC;IACxE,MAAM,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA,CAAC,CAAA,OAAO,GAAC,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACvG,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,IAAI,EAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;AAC1D,CAAC"}

package/dist/gateway/src/services/notifications/feishu-notifications.d.ts

@@ -0,0 +1,32 @@
+import type { Database } from '../../db/types.js';
+import { FeishuNotificationTargets } from './feishu-notification-targets.js';
+export { FeishuNotificationError } from './feishu-notification-error.js';
+import { FeishuNotificationRepository, type FeishuNotificationConfig, type FeishuNotificationDelivery, type FeishuNotificationType } from '../../db/repositories/feishu-notification-repository.js';
+import type { Notification } from '../../db/repositories/notification-repository.js';
+export declare class FeishuNotifications {
+    private readonly db;
+    private readonly userId;
+    readonly records: FeishuNotificationRepository;
+    readonly targets: FeishuNotificationTargets;
+    constructor(db: Database, userId: string);
+    authority(config?: FeishuNotificationConfig): import("./feishu-notification-targets.js").FeishuNotificationTarget;
+    state(): {
+        config: FeishuNotificationConfig;
+        ready: boolean;
+        blocker: string | null;
+        targets: import("./feishu-notification-targets.js").FeishuNotificationTarget[];
+    };
+    update(input: unknown): {
+        config: FeishuNotificationConfig;
+        ready: boolean;
+        blocker: string | null;
+        targets: import("./feishu-notification-targets.js").FeishuNotificationTarget[];
+    };
+    enqueue(notification: Notification): void;
+    test(input: unknown): FeishuNotificationDelivery;
+    assertDelivery(item: FeishuNotificationDelivery): {
+        target: import("./feishu-notification-targets.js").FeishuNotificationTarget;
+        config: FeishuNotificationConfig;
+    };
+}
+export declare function notificationType(notification: Notification): FeishuNotificationType | undefined;

package/dist/gateway/src/services/notifications/feishu-notifications.js

@@ -0,0 +1,139 @@
+import { z } from 'zod';
+import { FeishuNotificationTargets } from './feishu-notification-targets.js';
+import { FeishuNotificationError } from './feishu-notification-error.js';
+export { FeishuNotificationError } from './feishu-notification-error.js';
+import { FeishuNotificationRepository } from '../../db/repositories/feishu-notification-repository.js';
+const types = z.enum(['attention', 'failure', 'completion', 'lifecycle', 'app_action', 'automation']);
+// Accept retired clients' field without making basic result content optional.
+const configSchema = z.object({ enabled: z.boolean(), contentLevel: z.enum(['status', 'summary']).default('summary').transform(() => 'summary'), targetId: z.string().min(1).max(160).nullable().optional(), identityId: z.string().min(1).max(128).nullable().optional(), types: z.array(types).max(6),
+    webBaseUrl: z.string().trim().max(2048).transform(value => {
+        if (!value)
+            return '';
+        let url;
+        try {
+            url = new URL(value);
+        }
+        catch {
+            throw new FeishuNotificationError('WEB_URL_INVALID');
+        }
+        if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash || value.includes('\\'))
+            throw new FeishuNotificationError('WEB_URL_INVALID');
+        return url.toString().replace(/\/+$/, '');
+    }), revision: z.number().int().min(0) }).strict();
+export class FeishuNotifications {
+    db;
+    userId;
+    records;
+    targets;
+    constructor(db, userId) {
+        this.db = db;
+        this.userId = userId;
+        this.records = new FeishuNotificationRepository(db, userId);
+        this.targets = new FeishuNotificationTargets(db, userId);
+    }
+    authority(config = this.records.config()) {
+        return this.targets.authority(config.targetId);
+    }
+    state() {
+        const config = this.records.config();
+        let blocker = null;
+        try {
+            this.authority(config);
+        }
+        catch (error) {
+            blocker = error instanceof FeishuNotificationError ? error.code : 'CONFIG_INVALID';
+        }
+        return { config, ready: blocker === null, blocker, targets: this.targets.list() };
+    }
+    update(input) {
+        const parsed = configSchema.parse(input);
+        const targetId = parsed.targetId === undefined ? (parsed.identityId ? `private:${parsed.identityId}` : null) : parsed.targetId;
+        if (parsed.identityId && targetId !== `private:${parsed.identityId}`)
+            throw new FeishuNotificationError('TARGET_CONFLICT');
+        const next = { ...parsed, targetId, identityId: targetId?.startsWith('private:') ? targetId.slice(8) : null, types: [...new Set(parsed.types)].sort() };
+        return this.db.transaction(() => {
+            const previous = this.records.config();
+            if (previous.revision !== next.revision)
+                throw new FeishuNotificationError('CONFIG_CONFLICT');
+            if (next.enabled) {
+                if (!next.types.length)
+                    throw new FeishuNotificationError('TYPES_REQUIRED');
+                this.authority(next);
+            }
+            if (previous.enabled === next.enabled && previous.targetId === next.targetId && previous.webBaseUrl === next.webBaseUrl && previous.contentLevel === next.contentLevel
+                && [...previous.types].sort().join(',') === next.types.join(','))
+                return this.state();
+            this.records.save(next);
+            return this.state();
+        }).immediate();
+    }
+    enqueue(notification) {
+        const config = this.records.config();
+        const eventType = notificationType(notification);
+        if (!config.enabled || !eventType || !config.types.includes(eventType))
+            return;
+        try {
+            const target = this.authority(config);
+            this.records.enqueue({ notificationId: notification.id, eventType, subscriptionRevision: config.revision, identityRevision: target.kind === 'private' ? target.revision : 0, targetId: target.id, targetRevision: target.revision,
+                ttlMs: eventType === 'attention' ? 10 * 60_000 : 24 * 60 * 60_000 });
+        }
+        catch (error) {
+            if (!(error instanceof FeishuNotificationError))
+                throw error;
+        }
+    }
+    test(input) {
+        const { requestId } = z.object({ requestId: z.string().uuid() }).strict().parse(input);
+        return this.db.transaction(() => {
+            const config = this.records.config();
+            if (!config.enabled)
+                throw new FeishuNotificationError('SUBSCRIPTION_DISABLED');
+            const target = this.authority(config);
+            const existing = this.records.getTest(requestId);
+            if (existing)
+                return existing;
+            if (this.records.pendingCount() >= 100)
+                throw new FeishuNotificationError('QUEUE_FULL');
+            return this.records.enqueue({ testKey: requestId, eventType: 'test', subscriptionRevision: config.revision, identityRevision: target.kind === 'private' ? target.revision : 0, targetId: target.id, targetRevision: target.revision, ttlMs: 10 * 60_000 });
+        }).immediate();
+    }
+    assertDelivery(item) {
+        const config = this.records.config();
+        if (!config.enabled || config.revision !== item.subscription_revision)
+            throw new FeishuNotificationError('SUBSCRIPTION_CHANGED');
+        if (item.expires_at <= Date.now())
+            throw new FeishuNotificationError('EXPIRED');
+        const target = this.authority(config);
+        if (target.id !== item.target_id || target.revision !== item.target_revision)
+            throw new FeishuNotificationError('TARGET_CHANGED');
+        return { target, config };
+    }
+}
+export function notificationType(notification) {
+    let payload = {};
+    try {
+        payload = JSON.parse(notification.payload ?? '{}');
+    }
+    catch {
+        return;
+    }
+    if (!payload || typeof payload !== 'object')
+        return;
+    if (notification.type === 'copilot_automation')
+        return 'automation';
+    if (notification.type === 'app_action_notification')
+        return 'app_action';
+    if (notification.type !== 'claude_notification')
+        return;
+    switch (payload.notification_type) {
+        case 'attention':
+        case 'permission_prompt': return 'attention';
+        case 'task_failed':
+        case 'permission_denied': return 'failure';
+        case 'task_completed': return 'completion';
+        case 'task_interrupted':
+        case 'session_ended': return 'lifecycle';
+        default: return;
+    }
+}
+//# sourceMappingURL=feishu-notifications.js.map

package/dist/gateway/src/services/notifications/feishu-notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feishu-notifications.js","sourceRoot":"","sources":["../../../../src/services/notifications/feishu-notifications.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,4BAA4B,EAA+F,MAAM,yDAAyD,CAAC;AAGpM,MAAM,KAAK,GAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAC,SAAS,EAAC,YAAY,EAAC,WAAW,EAAC,YAAY,EAAC,YAAY,CAAC,CAAC,CAAC;AAC/F,8EAA8E;AAC9E,MAAM,YAAY,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAE,EAAC,YAAY,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,GAAE,EAAE,CAAA,SAAkB,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAC,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAC,KAAK,EAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/R,UAAU,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAA,EAAE;QACtD,IAAG,CAAC,KAAK;YAAC,OAAO,EAAE,CAAC;QACpB,IAAI,GAAO,CAAC;QACZ,IAAG,CAAC;YAAA,GAAG,GAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAAA,CAAC;QACpF,IAAG,CAAC,CAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,QAAQ,IAAE,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI,IAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QAC3K,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAC,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC;AACjD,MAAM,OAAO,mBAAmB;IAGD;IAA6B;IAFjD,OAAO,CAA8B;IACrC,OAAO,CAA2B;IAC3C,YAA6B,EAAW,EAAkB,MAAa;QAA1C,OAAE,GAAF,EAAE,CAAS;QAAkB,WAAM,GAAN,MAAM,CAAO;QACrE,IAAI,CAAC,OAAO,GAAC,IAAI,4BAA4B,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,OAAO,GAAC,IAAI,yBAAyB,CAAC,EAAE,EAAC,MAAM,CAAC,CAAC;IACjH,CAAC;IACD,SAAS,CAAC,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;QACpC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IACD,KAAK;QACH,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAI,OAAO,GAAa,IAAI,CAAC;QAC7B,IAAG,CAAC;YAAA,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,OAAO,GAAC,KAAK,YAAY,uBAAuB,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,CAAA,CAAC,CAAA,gBAAgB,CAAC;QAAA,CAAC;QACvH,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,OAAO,KAAG,IAAI,EAAC,OAAO,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,KAAa;QAClB,MAAM,MAAM,GAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAC,MAAM,CAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,CAAC,MAAM,CAAC,UAAU,CAAA,CAAC,CAAA,WAAW,MAAM,CAAC,UAAU,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAC;QACnH,IAAG,MAAM,CAAC,UAAU,IAAE,QAAQ,KAAG,WAAW,MAAM,CAAC,UAAU,EAAE;YAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;QACrH,MAAM,IAAI,GAAC,EAAC,GAAG,MAAM,EAAC,QAAQ,EAAC,UAAU,EAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA,CAAC,CAAA,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAC,CAAC;QAC3I,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC7B,MAAM,QAAQ,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACrC,IAAG,QAAQ,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ;gBAAC,MAAM,IAAI,uBAAuB,CAAC,iBAAiB,CAAC,CAAC;YAC1F,IAAG,IAAI,CAAC,OAAO,EAAC,CAAC;gBAAA,IAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;oBAAC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;gBAAA,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAAA,CAAC;YACjH,IAAG,QAAQ,CAAC,OAAO,KAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,KAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,KAAG,IAAI,CAAC,YAAY;mBACxJ,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACrF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAA,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9C,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,YAAyB;QAC/B,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,SAAS,GAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC/C,IAAG,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAC,OAAO;QAC7E,IAAI,CAAC;YACH,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,cAAc,EAAC,YAAY,CAAC,EAAE,EAAC,SAAS,EAAC,oBAAoB,EAAC,MAAM,CAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ;gBAC9M,KAAK,EAAC,SAAS,KAAG,WAAW,CAAA,CAAC,CAAA,EAAE,GAAC,MAAM,CAAA,CAAC,CAAA,EAAE,GAAC,EAAE,GAAC,MAAM,EAAC,CAAC,CAAC;QAC3D,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,IAAG,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;gBAAC,MAAM,KAAK,CAAC;QAAA,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAa;QAChB,MAAM,EAAC,SAAS,EAAC,GAAC,CAAC,CAAC,MAAM,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAE,EAAE;YAC7B,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,IAAG,CAAC,MAAM,CAAC,OAAO;gBAAC,MAAM,IAAI,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAG,QAAQ;gBAAC,OAAO,QAAQ,CAAC;YAC5B,IAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,IAAE,GAAG;gBAAC,MAAM,IAAI,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,oBAAoB,EAAC,MAAM,CAAC,QAAQ,EAAC,gBAAgB,EAAC,MAAM,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,MAAM,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,EAAC,QAAQ,EAAC,MAAM,CAAC,EAAE,EAAC,cAAc,EAAC,MAAM,CAAC,QAAQ,EAAC,KAAK,EAAC,EAAE,GAAC,MAAM,EAAC,CAAC,CAAC;QACtO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACjB,CAAC;IACD,cAAc,CAAC,IAA+B;QAC5C,MAAM,MAAM,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,IAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,qBAAqB;YAAC,MAAM,IAAI,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;QAC7H,IAAG,IAAI,CAAC,UAAU,IAAE,IAAI,CAAC,GAAG,EAAE;YAAC,MAAM,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,MAAM,GAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,IAAG,MAAM,CAAC,EAAE,KAAG,IAAI,CAAC,SAAS,IAAE,MAAM,CAAC,QAAQ,KAAG,IAAI,CAAC,eAAe;YAAC,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;QAC1H,OAAO,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAyB;IACxD,IAAI,OAAO,GAAwB,EAAE,CAAC;IACtC,IAAG,CAAC;QAAA,OAAO,GAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,IAAE,IAAI,CAA2B,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO;IAAA,CAAC;IAC5F,IAAG,CAAC,OAAO,IAAI,OAAO,OAAO,KAAG,QAAQ;QAAC,OAAO;IAChD,IAAG,YAAY,CAAC,IAAI,KAAG,oBAAoB;QAAC,OAAO,YAAY,CAAC;IAChE,IAAG,YAAY,CAAC,IAAI,KAAG,yBAAyB;QAAC,OAAO,YAAY,CAAC;IACrE,IAAG,YAAY,CAAC,IAAI,KAAG,qBAAqB;QAAC,OAAO;IACpD,QAAO,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACjC,KAAK,WAAW,CAAC;QAAA,KAAK,mBAAmB,CAAC,CAAA,OAAO,WAAW,CAAC;QAC7D,KAAK,aAAa,CAAC;QAAA,KAAK,mBAAmB,CAAC,CAAA,OAAO,SAAS,CAAC;QAC7D,KAAK,gBAAgB,CAAC,CAAA,OAAO,YAAY,CAAC;QAC1C,KAAK,kBAAkB,CAAC;QAAA,KAAK,eAAe,CAAC,CAAA,OAAO,WAAW,CAAC;QAChE,OAAO,CAAC,CAAA,OAAO;IACjB,CAAC;AACH,CAAC"}

package/dist/gateway/src/services/notifications/observe-cli-hook.d.ts

@@ -0,0 +1,6 @@
+import type { Database } from '../../db/types.js';
+import type { Session } from '../../db/repositories/session-repository.js';
+import { type CliSummary } from './cli-observation.js';
+/** Synchronous, bounded direct-field enrichment BEFORE emitEvent. No filesystem
+ * reads or waits; optional enrichment failure never suppresses lifecycle. */
+export declare function observeCliHook(db: Database, session: Session, event: Record<string, unknown>, adapter: string): CliSummary | undefined;

package/dist/gateway/src/services/notifications/observe-cli-hook.js

@@ -0,0 +1,55 @@
+import { nativePromptIdentity } from '../../db/repositories/session-notification-prompt-repository.js';
+import { CliObservationRepository } from '../../db/repositories/cli-observation-repository.js';
+import { cliText, directCliFields, toolObservation } from './cli-observation.js';
+/** Synchronous, bounded direct-field enrichment BEFORE emitEvent. No filesystem
+ * reads or waits; optional enrichment failure never suppresses lifecycle. */
+export function observeCliHook(db, session, event, adapter) {
+    if (event.agent_id !== undefined && event.agent_id !== null && event.agent_id !== '')
+        return;
+    const hook = event.hook_event_name;
+    if (!['UserPromptSubmit', 'TurnStarted', 'TaskStarted', 'PostToolUse', 'PostToolUseFailure', 'Stop', 'StopFailure', 'Notification', 'PermissionRequest'].includes(String(hook)))
+        return;
+    const records = new CliObservationRepository(db, session.userId);
+    const epoch = records.runtime(session.id, session.attachToken);
+    if (!epoch)
+        return;
+    const native = nativePromptIdentity(event.session_id, event.turn_id);
+    const exact = Boolean(native?.turnId);
+    const prior = exact ? records.find(session.id, epoch, native.sessionId, native.turnId) : undefined;
+    // Late tool/request events cannot rewrite the terminal summary of this round.
+    if (prior?.endedAt)
+        return ['Stop', 'StopFailure'].includes(String(hook)) ? prior : undefined;
+    const now = Date.now();
+    const summary = { version: 1, runtimeEpoch: epoch, identityQuality: exact ? 'exact_turn' : native ? 'session_only' : 'unknown',
+        ...(native ? { nativeSessionId: native.sessionId, ...(native.turnId ? { turnId: native.turnId } : {}) } : {}),
+        state: 'working', observedAt: now, progress: [], verification: [], ...prior };
+    summary.observedAt = now;
+    if (['UserPromptSubmit', 'TurnStarted', 'TaskStarted'].includes(String(hook))) {
+        summary.startedAt ??= now;
+        const prompt = cliText(event.prompt, 160, true);
+        if (prompt && exact)
+            summary.request = prompt;
+    }
+    else if (['PostToolUse', 'PostToolUseFailure'].includes(String(hook))) {
+        if (!exact)
+            return; // no evidence association without a causal round
+        const detail = toolObservation(event);
+        summary.progress = [...summary.progress, ...detail.progress].filter((p, i, all) => all.findIndex(other => other.text === p.text) === i).slice(-3);
+    }
+    else {
+        summary.state = hook === 'Stop' ? 'task_completed' : hook === 'StopFailure' ? 'task_failed'
+            : hook === 'PermissionRequest' ? 'permission_prompt' : cliText(event.notification_type, 80) || 'attention';
+        Object.assign(summary, directCliFields(adapter, event));
+        if (['Stop', 'StopFailure'].includes(String(hook)))
+            summary.endedAt = now;
+        // Remove literal echoed request paragraphs without altering the result facts.
+        if (summary.result && summary.request) {
+            summary.result.text = summary.result.text.split('\n').filter(line => line.trim() !== summary.request).join('\n').trim();
+            if (!summary.result.text)
+                delete summary.result;
+        }
+    }
+    records.save(session.id, summary, !prior && ['UserPromptSubmit', 'TurnStarted', 'TaskStarted'].includes(String(hook)));
+    return summary;
+}
+//# sourceMappingURL=observe-cli-hook.js.map

package/dist/gateway/src/services/notifications/observe-cli-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe-cli-hook.js","sourceRoot":"","sources":["../../../../src/services/notifications/observe-cli-hook.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iEAAiE,CAAC;AACvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAmB,MAAM,sBAAsB,CAAC;AAElG;6EAC6E;AAC7E,MAAM,UAAU,cAAc,CAAC,EAAY,EAAE,OAAgB,EAAE,KAA8B,EAAE,OAAe;IAC5G,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;QAAE,OAAO;IAC7F,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,CAAC;IACnC,IAAI,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO;IACxL,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAO,CAAC,SAAS,EAAE,MAAO,CAAC,MAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,8EAA8E;IAC9E,IAAI,KAAK,EAAE,OAAO;QAAE,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAe,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACxI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7G,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC;IAChF,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC;IACzB,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,SAAS,KAAK,GAAG,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,IAAI,KAAK;YAAE,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC;IAChD,CAAC;SAAM,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,iDAAiD;QACrE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,CAAC,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa;YACzF,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC;QAC7G,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;QAC1E,8EAA8E;QAC9E,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACtC,OAAO,CAAC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACxH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC;AACjB,CAAC"}