@modelzen/feishu-codex-bridge 0.1.8 → 0.2.1-win

package/dist/cli.js

@@ -15,7 +15,6 @@ function bridgeVersion() {
 }
 
 // src/cli/commands/doctor.ts
-import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join4 } from "path";
@@ -269,27 +268,56 @@ async function moveIfExists(src, dest) {
 }
 
 // src/agent/codex-appserver/locate.ts
-import { execFileSync } from "child_process";
 import { existsSync as existsSync2 } from "fs";
-import { join as join3 } from "path";
+import { extname, join as join3 } from "path";
+
+// src/platform/spawn.ts
+import crossSpawn from "cross-spawn";
+function spawnProcess(command, args = [], options = {}) {
+  return crossSpawn(command, [...args], options);
+}
+function spawnProcessSync(command, args = [], options = {}) {
+  return crossSpawn.sync(command, [...args], options);
+}
+function mergeProcessEnv(base = process.env, overrides = {}) {
+  const out = { ...base };
+  for (const [key, value] of Object.entries(overrides)) {
+    for (const existing of Object.keys(out)) {
+      if (existing.toLowerCase() === key.toLowerCase()) delete out[existing];
+    }
+    if (value !== void 0) out[key] = value;
+  }
+  return out;
+}
+
+// src/agent/codex-appserver/locate.ts
+var IS_WIN = process.platform === "win32";
 function resolveCodexBin() {
   const env = process.env.CODEX_BIN;
   if (env && existsSync2(env)) return env;
   const onPath = which("codex");
   if (onPath) return onPath;
-  const priv = join3(paths.codexCliBinDir, "codex");
-  if (existsSync2(priv)) return priv;
+  for (const cand of execCandidates(paths.codexCliBinDir, "codex")) {
+    if (existsSync2(cand)) return cand;
+  }
   const appBundle = "/Applications/Codex.app/Contents/Resources/codex";
   if (process.platform === "darwin" && existsSync2(appBundle)) return appBundle;
   return null;
 }
+function execCandidates(dir, base) {
+  const exact = join3(dir, base);
+  if (!IS_WIN || extname(base)) return [exact];
+  const exts = (process.env.PATHEXT ?? ".COM;.EXE;.BAT;.CMD").split(";").map((e) => e.trim()).filter(Boolean);
+  return [exact, ...exts.map((e) => join3(dir, base + e.toLowerCase()))];
+}
 function which(cmd) {
   try {
-    const out = execFileSync(process.platform === "win32" ? "where" : "which", [cmd], {
+    const res = spawnProcessSync(IS_WIN ? "where" : "which", [cmd], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     });
-    const first = out.split("\n").map((l) => l.trim()).find(Boolean);
+    if (res.status !== 0 || typeof res.stdout !== "string") return null;
+    const first = res.stdout.split("\n").map((l) => l.trim()).find(Boolean);
     return first && existsSync2(first) ? first : null;
   } catch {
     return null;
@@ -297,7 +325,9 @@ function which(cmd) {
 }
 function codexVersion(bin) {
   try {
-    return execFileSync(bin, ["--version"], { encoding: "utf8" }).trim();
+    const res = spawnProcessSync(bin, ["--version"], { encoding: "utf8" });
+    if (res.status !== 0 || typeof res.stdout !== "string") return null;
+    return res.stdout.trim();
   } catch {
     return null;
   }
@@ -355,7 +385,9 @@ ${failed === 0 ? "\u5168\u90E8\u901A\u8FC7 \u2713" : `${failed} \u9879\u9700\u59
 }
 function tryExec(cmd, args) {
   try {
-    return execFileSync2(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    const res = spawnProcessSync(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    if (res.status !== 0 || typeof res.stdout !== "string") return null;
+    return res.stdout.trim();
   } catch {
     return null;
   }
@@ -538,7 +570,7 @@ async function spawnExecProvider(pc, ref) {
   const timeoutMs = pc.noOutputTimeoutMs ?? DEFAULT_EXEC_TIMEOUT_MS;
   const maxOutput = pc.maxOutputBytes ?? DEFAULT_EXEC_MAX_OUTPUT;
   const providerName = ref.provider ?? DEFAULT_PROVIDER;
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const env = {};
     if (pc.passEnv) for (const k of pc.passEnv) {
       const v = process.env[k];
@@ -583,7 +615,7 @@ async function spawnExecProvider(pc, ref) {
       try {
         const parsed = JSON.parse(stdout);
         const value = parsed.values?.[ref.id];
-        if (typeof value === "string") return resolve6(value);
+        if (typeof value === "string") return resolve7(value);
         const err = parsed.errors?.[ref.id]?.message;
         reject(new Error(`exec provider did not return secret for ${ref.id}${err ? `: ${err}` : ""}`));
       } catch (err) {
@@ -679,7 +711,11 @@ var COMMENT_SCOPES = [
   "docs:document.comment:create",
   "wiki:wiki:readonly"
 ];
-var GRANT_SCOPES = [...REQUIRED_SCOPES, ...COMMENT_SCOPES];
+var JOIN_GROUP_SCOPES = [
+  "im:chat:readonly",
+  "im:chat.members:write_only"
+];
+var GRANT_SCOPES = [...REQUIRED_SCOPES, ...COMMENT_SCOPES, ...JOIN_GROUP_SCOPES];
 var SCOPE_LABELS = {
   "im:message.group_at_msg:readonly": "\u63A5\u6536\u7FA4\u91CC @\u673A\u5668\u4EBA \u7684\u6D88\u606F",
   "im:message.group_msg": "\u63A5\u6536\u7FA4\u5185\u6240\u6709\u6D88\u606F\uFF08\u514D@\uFF09",
@@ -695,6 +731,8 @@ var SCOPE_LABELS = {
   "im:chat.announcement:write_only": "\u7F16\u8F91\u7FA4\u516C\u544A",
   "im:chat.top_notice:write_only": "\u7F6E\u9876\u7FA4\u516C\u544A\u6A2A\u5E45",
   "im:chat.tabs:write_only": "\u6DFB\u52A0\u7FA4\u6807\u7B7E\u9875",
+  "im:chat:readonly": "\u8BFB\u53D6\u7FA4\u4FE1\u606F\uFF08\u7FA4\u540D/\u7FA4\u4E3B\uFF0C\u52A0\u5165\u5B58\u91CF\u7FA4\u7528\uFF09",
+  "im:chat.members:write_only": "\u7FA4\u6210\u5458\u589E\u51CF\uFF08\u7ED1\u5B9A\u7684\u5B58\u91CF\u7FA4\u89E3\u7ED1\u65F6\u673A\u5668\u4EBA\u9000\u7FA4\uFF09",
   "cardkit:card:write": "\u4EA4\u4E92\u6309\u94AE\u5361\u7247",
   "docs:document.comment:read": "\u8BFB\u53D6\u6587\u6863\u8BC4\u8BBA",
   "docs:document.comment:create": "\u53D1\u8868\u6587\u6863\u8BC4\u8BBA\u56DE\u590D",
@@ -746,8 +784,15 @@ async function validateAppCredentials(appId, appSecret, tenant) {
   }
   const token = data.tenant_access_token;
   const info = await fetchBotInfo(base, token).catch(() => void 0);
-  const missingScopes = await fetchMissingScopes(base, token).catch(() => void 0);
-  return { ok: true, botName: info?.bot?.app_name, botOpenId: info?.bot?.open_id, missingScopes };
+  const granted = await fetchGrantedScopes(base, token).catch(() => void 0);
+  const missing = (list) => granted ? list.filter((s) => !granted.has(s)) : void 0;
+  return {
+    ok: true,
+    botName: info?.bot?.app_name,
+    botOpenId: info?.bot?.open_id,
+    missingScopes: missing(REQUIRED_SCOPES),
+    missingJoinScopes: missing(JOIN_GROUP_SCOPES)
+  };
 }
 async function fetchBotInfo(base, token) {
   const resp = await fetch(`${base}/open-apis/bot/v3/info`, {
@@ -756,15 +801,14 @@ async function fetchBotInfo(base, token) {
   if (!resp.ok) return void 0;
   return await resp.json();
 }
-async function fetchMissingScopes(base, token) {
+async function fetchGrantedScopes(base, token) {
   const resp = await fetch(`${base}/open-apis/application/v6/scopes`, {
     headers: { Authorization: `Bearer ${token}` }
   });
   if (!resp.ok) return void 0;
   const body = await resp.json();
   if (!body.data?.scopes) return void 0;
-  const granted = new Set(body.data.scopes.filter((s) => s.grant_status === 1).map((s) => s.scope_name));
-  return REQUIRED_SCOPES.filter((s) => !granted.has(s));
+  return new Set(body.data.scopes.filter((s) => s.grant_status === 1).map((s) => s.scope_name));
 }
 
 // src/utils/open-url.ts
@@ -1071,6 +1115,10 @@ async function confirmReadyForDaemon(result) {
   console.log("       \u2022 \uFF08\u53EF\u9009\uFF09\u60F3\u8981\u300C\u5728\u98DE\u4E66\u6587\u6863\u8BC4\u8BBA\u91CC @\u673A\u5668\u4EBA\u5C31\u81EA\u52A8\u56DE\u590D\u300D\uFF0C\u518D\u52A0\u8FD9\u4E00\u4E2A\u4E8B\u4EF6\uFF1A");
   console.log("           drive.notice.comment_add_v1\uFF08\u4E91\u6587\u6863\u65B0\u589E\u8BC4\u8BBA\uFF09");
   console.log("           \u5B83\u4F9D\u8D56\u300C\u6587\u6863\u8BC4\u8BBA\u300D\u6743\u9650\uFF08docs:document.comment:read / :create\uFF0C\u6388\u6743\u94FE\u63A5\u5DF2\u9884\u52FE\u9009\uFF09\uFF1B\u4E0D\u52A0\u5219\u8BE5\u529F\u80FD\u9759\u9ED8\u5173\u95ED\u3002");
+  console.log("       \u2022 \uFF08\u53EF\u9009\uFF09\u60F3\u8981\u300C\u628A\u6211\u52A0\u8FDB\u5DF2\u6709\u7FA4\u5C31\u80FD\u7ED1\u5B9A\u6210\u9879\u76EE\u300D\uFF0C\u518D\u52A0\u8FD9\u4E24\u4E2A\u4E8B\u4EF6\uFF1A");
+  console.log("           im.chat.member.bot.added_v1\uFF08\u673A\u5668\u4EBA\u88AB\u52A0\u5165\u7FA4 \u2192 \u79C1\u804A\u63A8\u9001\u7ED1\u5B9A\u5361\uFF09");
+  console.log("           im.chat.member.bot.deleted_v1\uFF08\u673A\u5668\u4EBA\u88AB\u79FB\u51FA\u7FA4 \u2192 \u81EA\u52A8\u89E3\u7ED1\u9879\u76EE\uFF09");
+  console.log("           \u5B83\u4EEC\u4F9D\u8D56\u300C\u7FA4\u4FE1\u606F/\u7FA4\u6210\u5458\u300D\u6743\u9650\uFF08im:chat:readonly / im:chat.members:write_only\uFF0C\u5DF2\u9884\u52FE\u9009\uFF09\uFF1B\u4E0D\u52A0\u5219\u8BE5\u529F\u80FD\u9759\u9ED8\u5173\u95ED\u3002");
   console.log("       \u2022 \u5207\u5230\u300C\u56DE\u8C03\u914D\u7F6E\u300D\u6807\u7B7E \u2192 \u300C\u8BA2\u9605\u65B9\u5F0F\u300D\u6539\u300C\u957F\u8FDE\u63A5\u300D\u2192 \u70B9\u300C\u6DFB\u52A0\u56DE\u8C03\u300D\u52FE\u9009\uFF1A");
   console.log("           card.action.trigger\uFF08\u5361\u7247\u56DE\u4F20\u4EA4\u4E92\uFF09");
   console.log("           \u26A0\uFE0F \u5B83\u662F\u300C\u56DE\u8C03\u300D\u4E0D\u662F\u300C\u4E8B\u4EF6\u300D\u2014\u2014\u5728\u4E0A\u9762\u300C\u6DFB\u52A0\u4E8B\u4EF6\u300D\u91CC\u641C\u4E0D\u5230\uFF0C\u5FC5\u987B\u5207\u5230\u300C\u56DE\u8C03\u914D\u7F6E\u300D\u8FD9\u4E2A\u6807\u7B7E\u3002");
@@ -1115,7 +1163,6 @@ ${rule}`);
 import { createLarkChannel, Domain } from "@larksuiteoapi/node-sdk";
 
 // src/agent/codex-appserver/app-server-client.ts
-import { spawn as spawn3 } from "child_process";
 var AsyncQueue = class {
   items = [];
   waiters = [];
@@ -1136,7 +1183,7 @@ var AsyncQueue = class {
         continue;
       }
       if (this.closed) return;
-      const next = await new Promise((resolve6) => this.waiters.push(resolve6));
+      const next = await new Promise((resolve7) => this.waiters.push(resolve7));
       if (next.done) return;
       yield next.value;
     }
@@ -1158,9 +1205,9 @@ var AppServerClient = class {
   }
   /** spawn + initialize handshake. Throws if spawn/handshake fails. */
   async connect() {
-    const child = spawn3(this.opts.bin, ["app-server", "--listen", "stdio://"], {
+    const child = spawnProcess(this.opts.bin, ["app-server", "--listen", "stdio://"], {
       cwd: this.opts.cwd,
-      env: { ...process.env, ...this.opts.env, FEISHU_CODEX_BRIDGE: "1" },
+      env: mergeProcessEnv(process.env, { ...this.opts.env, FEISHU_CODEX_BRIDGE: "1" }),
       stdio: ["pipe", "pipe", "pipe"]
     });
     this.child = child;
@@ -1187,8 +1234,8 @@ var AppServerClient = class {
     const id = ++this.nextId;
     const payload = `${JSON.stringify({ jsonrpc: "2.0", id, method, params: params ?? {} })}
 `;
-    return new Promise((resolve6, reject) => {
-      this.pending.set(id, { resolve: resolve6, reject });
+    return new Promise((resolve7, reject) => {
+      this.pending.set(id, { resolve: resolve7, reject });
       this.child.stdin.write(payload, (err) => {
         if (err) {
           this.pending.delete(id);
@@ -1211,15 +1258,36 @@ var AppServerClient = class {
     this.closed = true;
     const child = this.child;
     if (!child || child.exitCode !== null) return;
+    if (process.platform === "win32" && child.pid) {
+      await new Promise((resolve7) => {
+        let settled = false;
+        const done = () => {
+          if (settled) return;
+          settled = true;
+          clearTimeout(t);
+          resolve7();
+        };
+        const t = setTimeout(done, graceMs);
+        child.once("exit", done);
+        spawnProcess("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore" }).on(
+          "error",
+          () => {
+            child.kill();
+            done();
+          }
+        );
+      });
+      return;
+    }
     child.kill("SIGTERM");
-    await new Promise((resolve6) => {
+    await new Promise((resolve7) => {
       const t = setTimeout(() => {
         if (child.exitCode === null) child.kill("SIGKILL");
-        resolve6();
+        resolve7();
       }, graceMs);
       child.once("exit", () => {
         clearTimeout(t);
-        resolve6();
+        resolve7();
       });
     });
   }
@@ -1352,12 +1420,12 @@ var BRIDGE_DEVELOPER_INSTRUCTIONS = [
 ].join("\n");
 var READ_HISTORY_TIMEOUT_MS = 2e4;
 function withDeadline(p, ms, label) {
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     const t = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);
     p.then(
       (v) => {
         clearTimeout(t);
-        resolve6(v);
+        resolve7(v);
       },
       (e) => {
         clearTimeout(t);
@@ -1397,11 +1465,11 @@ var CodexThread = class {
       if (self.model) params.model = self.model;
       if (self.effort) params.effort = self.effort;
       let startError;
-      const startFailed = new Promise((resolve6) => {
+      const startFailed = new Promise((resolve7) => {
         self.client.request("turn/start", params).then(void 0, (err) => {
           startError = err instanceof Error ? err : new Error(String(err));
           log.fail("agent", startError, { phase: "turn/start" });
-          resolve6("start-failed");
+          resolve7("start-failed");
         });
       });
       const stream2 = self.client.stream()[Symbol.asyncIterator]();
@@ -1707,7 +1775,7 @@ function stampRenderToken(card2) {
   };
   visit(card2);
 }
-async function sendManagedCard(channel, chatId, card2, replyTo, replyInThread = false) {
+async function sendManagedCard(channel, to, card2, replyTo, replyInThread = false, receiveIdType = "chat_id") {
   stampRenderToken(card2);
   const created = await channel.rawClient.cardkit.v1.card.create({
     data: { type: "card_json", data: JSON.stringify(card2) }
@@ -1726,8 +1794,8 @@ async function sendManagedCard(channel, chatId, card2, replyTo, replyInThread =
     messageId = sent.data?.message_id;
   } else {
     const sent = await channel.rawClient.im.v1.message.create({
-      params: { receive_id_type: "chat_id" },
-      data: { receive_id: chatId, msg_type: "interactive", content }
+      params: { receive_id_type: receiveIdType },
+      data: { receive_id: to, msg_type: "interactive", content }
     });
     messageId = sent.data?.message_id;
   }
@@ -2183,14 +2251,20 @@ function pickerTime(unixSeconds) {
   const md2 = `${p2(d.getMonth() + 1)}-${p2(d.getDate())}`;
   return d.getFullYear() === now.getFullYear() ? `${md2} ${hm}` : `${d.getFullYear()}-${md2} ${hm}`;
 }
-function buildHelpCard(scope) {
+function talkLine(noMention, tail) {
+  return noMention ? `\xB7 \u76F4\u63A5\u53D1\u6D88\u606F\uFF08\u514D@\uFF09\u2192 ${tail}` : `\xB7 **@\u6211 + \u5185\u5BB9** \u2192 ${tail}\uFF08\u672C\u7FA4\u9ED8\u8BA4\u9700 @\uFF1B\`/settings\` \u53EF\u5F00\u542F\u514D@\uFF09`;
+}
+function buildHelpCard(scope, noMention = true) {
   const elements = [];
   if (scope === "single") {
     elements.push(
       md("\u{1F4AC} **\u5355\u4F1A\u8BDD\u7FA4** \u2014 \u6574\u7FA4\u5C31\u662F\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u4E0A\u4E0B\u6587\u8FDE\u7EED\u3002"),
       hr(),
       md(
-        "\xB7 \u76F4\u63A5\u53D1\u6D88\u606F\uFF08\u514D@\uFF09\u2192 \u4EA4\u7ED9\u6211\u5904\u7406\n\xB7 `/model` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6\n\xB7 `/settings` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09\n\xB7 `/help` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361"
+        `${talkLine(noMention, "\u4EA4\u7ED9\u6211\u5904\u7406")}
+\xB7 \`/model\` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6
+\xB7 \`/settings\` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09
+\xB7 \`/help\` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361`
       )
     );
   } else if (scope === "topic") {
@@ -2198,7 +2272,9 @@ function buildHelpCard(scope) {
       md("\u{1F9F5} **\u8BDD\u9898\u5185** \u2014 \u6BCF\u4E2A\u8BDD\u9898\u662F\u4E00\u4E2A\u72EC\u7ACB\u4F1A\u8BDD\u3002"),
       hr(),
       md(
-        "\xB7 \u76F4\u63A5\u53D1\u6D88\u606F\uFF08\u514D@\uFF09\u2192 \u7EE7\u7EED\u5F53\u524D\u4F1A\u8BDD\n\xB7 `/model` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6\n\xB7 `/help` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361"
+        `${talkLine(noMention, "\u7EE7\u7EED\u5F53\u524D\u4F1A\u8BDD")}
+\xB7 \`/model\` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6
+\xB7 \`/help\` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361`
       ),
       note("\u5F00\u65B0\u8BDD\u9898\uFF1A\u56DE\u5230\u4E3B\u7FA4\u533A @\u6211 + \u5185\u5BB9\u3002")
     );
@@ -2213,7 +2289,7 @@ function buildHelpCard(scope) {
   }
   return card(elements, { header: { title: "\u{1F916} \u53EF\u7528\u547D\u4EE4", template: "blue" }, summary: "\u53EF\u7528\u547D\u4EE4" });
 }
-function buildWelcomeCard(kind, docUrl) {
+function buildWelcomeCard(kind, docUrl, noMention = true) {
   const elements = [
     md("\u{1F44B} **\u6B22\u8FCE\u4F7F\u7528 Codex Bridge** \u2014 \u672C\u7FA4\u5DF2\u7ED1\u5B9A\u4E00\u4E2A\u9879\u76EE\u76EE\u5F55\uFF0C\u5728\u7FA4\u91CC\u5C31\u80FD\u9A71\u52A8\u672C\u673A Codex \u5E72\u6D3B\u3002"),
     hr()
@@ -2222,7 +2298,10 @@ function buildWelcomeCard(kind, docUrl) {
     elements.push(
       md("\u{1F4AC} **\u5355\u4F1A\u8BDD\u7FA4**\uFF08\u6574\u7FA4\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u4E0A\u4E0B\u6587\u8FDE\u7EED\uFF09"),
       md(
-        "\xB7 \u76F4\u63A5\u53D1\u6D88\u606F\uFF08\u514D@\uFF09\u2192 \u4EA4\u7ED9\u6211\u5904\u7406\n\xB7 `/model` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6\n\xB7 `/settings` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09\n\xB7 `/help` \u2192 \u547D\u4EE4\u901F\u67E5\u5361"
+        `${talkLine(noMention, "\u4EA4\u7ED9\u6211\u5904\u7406")}
+\xB7 \`/model\` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6
+\xB7 \`/settings\` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09
+\xB7 \`/help\` \u2192 \u547D\u4EE4\u901F\u67E5\u5361`
       )
     );
   } else {
@@ -2761,7 +2840,7 @@ var RunCardStream = class {
 
 // src/card/outbound-images.ts
 import { readFile as readFile5, stat as stat2 } from "fs/promises";
-import { extname, isAbsolute, resolve as resolve2, sep } from "path";
+import { extname as extname2, isAbsolute, resolve as resolve2, sep } from "path";
 var MAX_IMAGES = 9;
 var MAX_BYTES = 10 * 1024 * 1024;
 var DOWNLOAD_TIMEOUT_MS = 1e4;
@@ -2827,7 +2906,7 @@ async function loadLocal(src, cwd) {
     log.warn("outbound", "image-outside-cwd", { src: src.slice(0, 80) });
     return { cacheKey: `local:${abs}` };
   }
-  const ext = extname(abs).slice(1).toLowerCase();
+  const ext = extname2(abs).slice(1).toLowerCase();
   if (!ALLOWED_EXT.has(ext)) {
     log.warn("outbound", "image-ext", { ext, src: src.slice(0, 80) });
     return { cacheKey: `local:${abs}` };
@@ -2895,6 +2974,71 @@ async function uploadBuffer(channel, buffer) {
   return key;
 }
 
+// src/project/registry.ts
+import { mkdir as mkdir4, readFile as readFile6, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { dirname as dirname5 } from "path";
+function defaultNoMention(p) {
+  return !((p.origin ?? "created") === "joined" && (p.kind ?? "multi") === "single");
+}
+var FILE_VERSION2 = 1;
+async function read() {
+  try {
+    const text = await readFile6(paths.projectsFile, "utf8");
+    const parsed = JSON.parse(text);
+    return Array.isArray(parsed.projects) ? parsed.projects : [];
+  } catch (err) {
+    if (err.code === "ENOENT") return [];
+    throw err;
+  }
+}
+async function write(projects) {
+  await mkdir4(dirname5(paths.projectsFile), { recursive: true });
+  const tmp = `${paths.projectsFile}.tmp-${process.pid}`;
+  const body = { version: FILE_VERSION2, projects };
+  await writeFile4(tmp, `${JSON.stringify(body, null, 2)}
+`, "utf8");
+  await rename4(tmp, paths.projectsFile);
+}
+async function listProjects() {
+  return read();
+}
+async function getProjectByChatId(chatId) {
+  return (await read()).find((p) => p.chatId === chatId);
+}
+async function getProjectByName(name) {
+  return (await read()).find((p) => p.name === name);
+}
+async function addProject(p) {
+  const projects = await read();
+  if (projects.some((x) => x.name === p.name)) {
+    throw new Error(`\u9879\u76EE\u540D\u300C${p.name}\u300D\u5DF2\u5B58\u5728`);
+  }
+  if (p.chatId) {
+    const bound = projects.find((x) => x.chatId === p.chatId);
+    if (bound) throw new Error(`\u8BE5\u7FA4\u5DF2\u7ED1\u5B9A\u4E3A\u9879\u76EE\u300C${bound.name}\u300D`);
+  }
+  projects.push(p);
+  await write(projects);
+}
+async function updateProject(name, patch) {
+  const projects = await read();
+  const p = projects.find((x) => x.name === name);
+  if (!p) return;
+  const target = p;
+  for (const [k, v] of Object.entries(patch)) {
+    if (v !== void 0) target[k] = v;
+  }
+  await write(projects);
+}
+async function removeProject(name) {
+  const projects = await read();
+  const idx = projects.findIndex((p) => p.name === name);
+  if (idx === -1) return void 0;
+  const [removed] = projects.splice(idx, 1);
+  await write(projects);
+  return removed;
+}
+
 // src/card/dm-cards.ts
 function openChatUrl(chatId) {
   return `https://applink.feishu.cn/client/chat/open?openChatId=${encodeURIComponent(chatId)}`;
@@ -2904,6 +3048,7 @@ var DM = {
   menu: "dm.menu",
   newProject: "dm.newProject",
   newProjectSubmit: "dm.newProject.submit",
+  joinGroupSubmit: "dm.joinGroup.submit",
   projects: "dm.projects",
   settings: "dm.settings",
   doctor: "dm.doctor",
@@ -3057,6 +3202,27 @@ ${i.missingScopes.map((s) => `\xB7 ${labelScope(s)}`).join("\n")}`),
     actions([linkButton("\u{1F511} \u4E00\u952E\u53BB\u5F00\u901A\u8FD9\u4E9B\u6743\u9650", i.scopeGrantUrl)])
   ];
 }
+function joinFeatureDiagnosis(i) {
+  const out = [md("**\u52A0\u5165\u5B58\u91CF\u7FA4\uFF08\u53EF\u9009\uFF09**")];
+  if (i.missingJoinScopes === void 0) {
+    out.push(md("- \u6743\u9650\uFF1A\u26A0\uFE0F \u672A\u80FD\u81EA\u52A8\u68C0\u67E5\uFF08\u51ED\u636E\u5931\u6548\u6216\u7F51\u7EDC\u4E0D\u901A\uFF09"), actions([linkButton("\u{1F511} \u53BB\u5F00\u901A", i.joinScopeGrantUrl)]));
+  } else if (i.missingJoinScopes.length === 0) {
+    out.push(md("- \u6743\u9650\uFF1A\u2705 \u5DF2\u5F00\u901A\uFF08`im:chat:readonly` / `im:chat.members:write_only`\uFF09"));
+  } else {
+    out.push(
+      md(`- \u6743\u9650\uFF1A\u274C \u7F3A ${i.missingJoinScopes.length} \u9879 \u2014\u2014 \u5F00\u901A\u540E\u624D\u80FD\u628A\u6211\u52A0\u8FDB\u5DF2\u6709\u7FA4\uFF08\u7ED1\u5B9A / \u9000\u7FA4\uFF09`),
+      note(`\u5F85\u5F00\u901A\uFF1A
+${i.missingJoinScopes.map((s) => `\xB7 ${labelScope(s)}`).join("\n")}`),
+      actions([linkButton("\u{1F511} \u4E00\u952E\u5F00\u901A\u8FD9\u4E24\u9879\u6743\u9650", i.joinScopeGrantUrl)])
+    );
+  }
+  out.push(
+    note(
+      "\u26A0\uFE0F \u8FD8\u9700\u5728\u540E\u53F0\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u624B\u52A8\u8BA2\u9605 `im.chat.member.bot.added_v1`\uFF08\u88AB\u62C9\u8FDB\u7FA4\u2192\u63A8\u9001\u7ED1\u5B9A\u5361\uFF09\u548C `im.chat.member.bot.deleted_v1`\uFF08\u88AB\u79FB\u51FA\u7FA4\u2192\u81EA\u52A8\u89E3\u7ED1\uFF09\u2014\u2014 \u98DE\u4E66\u65E0\u67E5\u8BE2\u63A5\u53E3\uFF0C\u8FD9\u91CC\u65E0\u6CD5\u81EA\u52A8\u68C0\u6D4B\u3002"
+    )
+  );
+  return out;
+}
 function codexDiagnosePrompt(i) {
   return [
     "\u6211\u5728\u7528 feishu-codex-bridge\uFF08\u98DE\u4E66 \u2194 \u672C\u5730 Codex \u6865\u63A5\uFF09\u9047\u5230\u95EE\u9898\uFF0C\u8BF7\u5E2E\u6211\u5B9A\u4F4D\u539F\u56E0\u5E76\u7ED9\u51FA\u4FEE\u590D\u6B65\u9AA4\u3002",
@@ -3099,6 +3265,8 @@ function buildDoctorCard(i) {
       ...scopeDiagnosis(i),
       note(`bridge v${i.bridgeVer}\u3000\xB7\u3000Node ${i.node}\u3000\xB7\u3000${i.platform}`),
       hr(),
+      ...joinFeatureDiagnosis(i),
+      hr(),
       md("**\u65E5\u5FD7\u8DEF\u5F84**"),
       note(`\u540E\u53F0\u5B88\u62A4\u8F93\u51FA\uFF1A\`${i.logStdout}\``),
       note(`\u540E\u53F0\u5B88\u62A4\u9519\u8BEF\uFF1A\`${i.logStderr}\``),
@@ -3132,14 +3300,35 @@ function buildNewProjectFormCard(opts = {}) {
   );
   return card(elements, { header: { title: "\u2795 \u65B0\u5EFA\u9879\u76EE", template: "turquoise" } });
 }
+function buildJoinGroupFormCard(opts) {
+  const elements = [];
+  if (opts.error) elements.push(md(`\u274C **\u7ED1\u5B9A\u5931\u8D25**\uFF1A${opts.error}`));
+  elements.push(
+    md("\u6211\u5DF2\u88AB\u52A0\u5165\u8FD9\u4E2A\u7FA4\u3002\u586B\u4E00\u4E0B\u8981\u7ED1\u5B9A\u7684\u9879\u76EE\u4FE1\u606F\u5373\u53EF\u5F00\u59CB\u7528\u3002"),
+    md("\u9879\u76EE\u540D\u9ED8\u8BA4\u7528\u7FA4\u540D\uFF0C\u53EF\u6539\u3002**\u6587\u4EF6\u5939\u8DEF\u5F84\u7559\u7A7A** = \u81EA\u52A8\u65B0\u5EFA\u7A7A\u767D\u9879\u76EE\uFF1B**\u586B\u7EDD\u5BF9\u8DEF\u5F84** = \u7528\u7535\u8111\u4E0A\u5DF2\u6709\u7684\u6587\u4EF6\u5939\u3002"),
+    form("join_group", [
+      input({ name: "name", label: "\u9879\u76EE\u540D", placeholder: "my-app", value: opts.name, required: true }),
+      input({ name: "cwd", label: "\u6587\u4EF6\u5939\u8DEF\u5F84\uFF08\u9009\u586B\uFF0C\u7559\u7A7A\u81EA\u52A8\u65B0\u5EFA\uFF09", placeholder: "/Users/you/code/my-app", value: opts.cwd }),
+      note("\u9009\u7FA4\u7C7B\u578B(\u76F4\u63A5\u70B9\u5BF9\u5E94\u6309\u94AE\u521B\u5EFA)\uFF1A\u{1F465} \u591A\u8BDD\u9898\u7FA4 = @\u6211\u5F00\u8BDD\u9898\u3001\u6BCF\u8BDD\u9898\u72EC\u7ACB\u4F1A\u8BDD\uFF1B\u{1F4AC} \u5355\u4F1A\u8BDD\u7FA4 = \u6574\u7FA4\u4E00\u4E2A\u4F1A\u8BDD\u3001\u8FDE\u7EED\u4E0A\u4E0B\u6587\uFF08\u9ED8\u8BA4\u4E0D\u514D@\uFF09\u3002"),
+      actions([
+        submitButton("\u{1F465} \u7ED1\u5B9A\xB7\u591A\u8BDD\u9898\u7FA4", { a: DM.joinGroupSubmit, kind: "multi", chatId: opts.chatId }, "primary", "submit_multi"),
+        submitButton("\u{1F4AC} \u7ED1\u5B9A\xB7\u5355\u4F1A\u8BDD\u7FA4", { a: DM.joinGroupSubmit, kind: "single", chatId: opts.chatId }, "primary", "submit_single")
+      ])
+    ])
+  );
+  return card(elements, { header: { title: "\u{1F517} \u7ED1\u5B9A\u5DF2\u6709\u7FA4", template: "turquoise" } });
+}
 function buildNewProjectDoneCard(p) {
+  const joined = (p.origin ?? "created") === "joined";
+  const verb = joined ? "\u5DF2\u7ED1\u5B9A\u7FA4" : "\u5DF2\u521B\u5EFA\u9879\u76EE";
+  const title = joined ? "\u{1F517} \u7ED1\u5B9A\u5DF2\u6709\u7FA4" : "\u2795 \u65B0\u5EFA\u9879\u76EE";
   const elements = [
-    md(`\u2705 \u5DF2\u521B\u5EFA\u9879\u76EE **${p.name}**${p.blank ? " _(\u7A7A\u767D\u9879\u76EE)_" : ""}`),
+    md(`\u2705 ${verb} **${p.name}**${p.blank ? " _(\u7A7A\u767D\u9879\u76EE)_" : ""}`),
     note(`\u{1F4C2} \`${p.cwd}\`   \xB7   ${kindLabel(p.kind)}`),
-    md(p.chatId ? "\u7FA4\u5DF2\u5EFA\u597D \u{1F449} \u53BB\u9879\u76EE\u7FA4\u91CC **@\u6211** \u5E72\u6D3B\u3002" : "\u53D1\u6211\u4EFB\u610F\u6D88\u606F\u53EF\u518D\u6B21\u6253\u5F00\u7BA1\u7406\u53F0\u3002")
+    md(p.chatId ? "\u{1F449} \u53BB\u7FA4\u91CC **@\u6211** \u5E72\u6D3B\u3002" : "\u53D1\u6211\u4EFB\u610F\u6D88\u606F\u53EF\u518D\u6B21\u6253\u5F00\u7BA1\u7406\u53F0\u3002")
   ];
   if (p.chatId) elements.push(actions([linkButton("\u{1F4AC} \u6253\u5F00\u7FA4\u804A", openChatUrl(p.chatId), "primary")]));
-  return card(elements, { header: { title: "\u2795 \u65B0\u5EFA\u9879\u76EE", template: "green" } });
+  return card(elements, { header: { title, template: "green" } });
 }
 function buildProjectListCard(projects, sessionsByChat = /* @__PURE__ */ new Map()) {
   if (projects.length === 0) {
@@ -3154,7 +3343,7 @@ function buildProjectListCard(projects, sessionsByChat = /* @__PURE__ */ new Map
     elements.push(note(`\u{1F4C2} \`${p.cwd}\`${p.branch && p.branch !== "\u2014" ? `   \u{1F33F} ${p.branch}` : ""}`));
     elements.push(
       note(
-        p.chatId ? `\u{1F4AC} \u7FA4\uFF1A**${p.name}**   \xB7   ${kindLabel(p.kind)}   \xB7   \u514D@\uFF1A${p.noMention ?? true ? "\u5F00" : "\u5173"}` : "\u26A0\uFE0F \u672A\u7ED1\u5B9A\u7FA4"
+        p.chatId ? `\u{1F4AC} \u7FA4\uFF1A**${p.name}**   \xB7   ${kindLabel(p.kind)}${(p.origin ?? "created") === "joined" ? " \xB7 \u{1F517}\u5DF2\u52A0\u5165" : ""}   \xB7   \u514D@\uFF1A${p.noMention ?? defaultNoMention(p) ? "\u5F00" : "\u5173"}` : "\u26A0\uFE0F \u672A\u7ED1\u5B9A\u7FA4"
       )
     );
     const sessions = (p.chatId ? sessionsByChat.get(p.chatId) : void 0) ?? [];
@@ -3177,11 +3366,12 @@ function buildProjectListCard(projects, sessionsByChat = /* @__PURE__ */ new Map
   elements.push(actions([button("\u2B05\uFE0F \u83DC\u5355", { a: DM.menu })]));
   return card(elements, { header: { title: "\u{1F4C1} \u9879\u76EE\u5217\u8868", template: "wathet" } });
 }
-function buildRmConfirmCard(name) {
+function buildRmConfirmCard(name, origin) {
+  const note_ = (origin ?? "created") === "joined" ? "\u4EC5\u89E3\u7ED1\uFF08\u79FB\u9664\u6CE8\u518C\uFF09\uFF0C**\u4E0D\u5220\u4EE3\u7801\u76EE\u5F55**\u3002\u786E\u8BA4\u540E**\u6211\u4F1A\u9000\u51FA\u8BE5\u7FA4**\uFF08\u7FA4\u662F\u4F60\u4EEC\u7684\uFF0C\u4E0D\u4F1A\u89E3\u6563\uFF09\u3002" : "\u4EC5\u89E3\u7ED1\uFF08\u79FB\u9664\u6CE8\u518C + \u64A4\u9500\u7F6E\u9876\u6A2A\u5E45\uFF09\uFF0C**\u4E0D\u5220\u4EE3\u7801\u76EE\u5F55**\u3002\u7FA4\u4E3B\u4F1A\u8F6C\u7ED9\u4F60\uFF0C\u518D\u7531\u4F60\u81EA\u884C\u5728\u98DE\u4E66\u89E3\u6563\u7FA4\u3002";
   return card(
     [
       md(`\u786E\u5B9A\u5220\u9664\u9879\u76EE **${name}**\uFF1F`),
-      note("\u4EC5\u89E3\u7ED1\uFF08\u79FB\u9664\u6CE8\u518C + \u64A4\u9500\u7F6E\u9876\u6A2A\u5E45\uFF09\uFF0C**\u4E0D\u5220\u4EE3\u7801\u76EE\u5F55**\u3002\u7FA4\u4E3B\u4F1A\u8F6C\u7ED9\u4F60\uFF0C\u518D\u7531\u4F60\u81EA\u884C\u5728\u98DE\u4E66\u89E3\u6563\u7FA4\u3002"),
+      note(note_),
       actions([
         button("\u2705 \u786E\u8BA4\u5220\u9664", { a: DM.rmDo, n: name }, "danger"),
         button("\u53D6\u6D88", { a: DM.rmCancel })
@@ -3229,7 +3419,7 @@ function buildSettingsCard(cfg) {
 }
 function buildGroupSettingsCard(project) {
   const kind = project.kind ?? "multi";
-  const noMention = project.noMention ?? true;
+  const noMention = project.noMention ?? defaultNoMention(project);
   const scopeNote = kind === "single" ? "\u5F00\u542F\u540E\uFF1A\u672C\u7FA4\u6240\u6709\u6D88\u606F(\u4E0D\u7528 @)\u90FD\u4EA4\u7ED9\u6211\u5904\u7406\u3002" : "\u5F00\u542F\u540E\uFF1A\u8BDD\u9898\u5185\u7684\u6D88\u606F(\u4E0D\u7528 @)\u90FD\u4EA4\u7ED9\u6211\u5904\u7406\uFF1B**\u5F00\u65B0\u8BDD\u9898\u4ECD\u9700 @\u6211**\u3002";
   return card(
     [
@@ -3247,31 +3437,42 @@ function buildGroupSettingsCard(project) {
 }
 
 // src/service/update.ts
-import { execFile, spawn as spawn5 } from "child_process";
-import { existsSync as existsSync5, readFileSync as readFileSync2 } from "fs";
-import { dirname as dirname6, join as join8, resolve as resolve4 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { execFile, spawn as spawn4 } from "child_process";
+import { existsSync as existsSync6, readFileSync as readFileSync2 } from "fs";
+import { dirname as dirname8, join as join10, resolve as resolve5 } from "path";
+import { fileURLToPath as fileURLToPath4 } from "url";
 import { promisify } from "util";
 
 // src/service/launchd.ts
-import { spawn as spawn4, spawnSync } from "child_process";
+import { spawn as spawn3, spawnSync } from "child_process";
 import { existsSync as existsSync4 } from "fs";
-import { appendFile, mkdir as mkdir4, rm as rm2, writeFile as writeFile4 } from "fs/promises";
+import { mkdir as mkdir6, rm as rm2, writeFile as writeFile5 } from "fs/promises";
 import { homedir as homedir3, userInfo as userInfo2 } from "os";
-import { dirname as dirname5, join as join7, resolve as resolve3 } from "path";
+import { dirname as dirname6, join as join8, resolve as resolve3 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-var LAUNCHD_LABEL = "ai.feishu-codex-bridge.bot";
-function launchAgentPlistPath() {
-  return join7(homedir3(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
-}
+
+// src/service/common.ts
+import { appendFile, mkdir as mkdir5 } from "fs/promises";
+import { join as join7 } from "path";
 function serviceStdoutPath() {
   return join7(paths.appDir, "service.log");
 }
 function serviceStderrPath() {
   return join7(paths.appDir, "service.err.log");
 }
+async function ensureLogFiles() {
+  await mkdir5(paths.appDir, { recursive: true });
+  await appendFile(serviceStdoutPath(), "");
+  await appendFile(serviceStderrPath(), "");
+}
+
+// src/service/launchd.ts
+var LAUNCHD_LABEL = "ai.feishu-codex-bridge.bot";
+function launchAgentPlistPath() {
+  return join8(homedir3(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+}
 function resolveCliBinPath() {
-  const distDir = dirname5(fileURLToPath2(import.meta.url));
+  const distDir = dirname6(fileURLToPath2(import.meta.url));
   return resolve3(distDir, "..", "bin", "feishu-codex-bridge.mjs");
 }
 function escapeXml(value) {
@@ -3312,9 +3513,9 @@ function buildPlist() {
 }
 async function installLaunchd() {
   const plistPath = launchAgentPlistPath();
-  await mkdir4(dirname5(plistPath), { recursive: true });
+  await mkdir6(dirname6(plistPath), { recursive: true });
   await ensureLogFiles();
-  await writeFile4(plistPath, buildPlist(), "utf8");
+  await writeFile5(plistPath, buildPlist(), "utf8");
   if (isLoaded()) {
     const bootout = runLaunchctl(["bootout", serviceTarget()]);
     if (!bootout.ok) throw launchctlError("launchctl bootout", bootout);
@@ -3350,9 +3551,10 @@ function statusLaunchd() {
   const raw = result.stdout || result.stderr;
   const parsed = parseLaunchdStatus(raw);
   return {
+    platformName: "launchd (macOS)",
     installed: existsSync4(launchAgentPlistPath()),
-    loaded: result.ok,
-    plistPath: launchAgentPlistPath(),
+    running: result.ok,
+    servicePath: launchAgentPlistPath(),
     stdoutPath: serviceStdoutPath(),
     stderrPath: serviceStderrPath(),
     pid: parsed.pid,
@@ -3364,7 +3566,7 @@ async function tailLaunchdLogs(follow) {
   await ensureLogFiles();
   const args = follow ? ["-f", serviceStdoutPath(), serviceStderrPath()] : ["-n", "100", serviceStdoutPath(), serviceStderrPath()];
   await new Promise((resolvePromise, reject) => {
-    const child = spawn4("tail", args, { stdio: "inherit" });
+    const child = spawn3("tail", args, { stdio: "inherit" });
     child.on("error", reject);
     child.on("close", (code) => {
       if (code === 0 || follow && code === null) {
@@ -3395,11 +3597,6 @@ async function waitUntilUnloaded(timeoutMs = 5e3) {
   }
   throw new Error(`launchd service \u672A\u5728 ${timeoutMs}ms \u5185\u5378\u8F7D\u5B8C\u6210`);
 }
-async function ensureLogFiles() {
-  await mkdir4(paths.appDir, { recursive: true });
-  await appendFile(serviceStdoutPath(), "");
-  await appendFile(serviceStderrPath(), "");
-}
 function userTarget() {
   return `gui/${userInfo2().uid}`;
 }
@@ -3420,29 +3617,218 @@ function launchctlError(command, result) {
   return new Error(`${command} \u5931\u8D25\uFF08exit ${result.status ?? "unknown"}\uFF09${output ? `\uFF1A${output}` : ""}`);
 }
 
+// src/service/schtasks.ts
+import { spawnSync as spawnSync2 } from "child_process";
+import { createReadStream, existsSync as existsSync5, statSync } from "fs";
+import { mkdir as mkdir7, readFile as readFile7, rm as rm3, writeFile as writeFile6 } from "fs/promises";
+import { dirname as dirname7, join as join9, resolve as resolve4 } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
+var WINDOWS_TASK_NAME = "feishu-codex-bridge";
+function launcherCmdPath() {
+  return join9(paths.appDir, "service-launcher.cmd");
+}
+function resolveCliBinPath2() {
+  const distDir = dirname7(fileURLToPath3(import.meta.url));
+  return resolve4(distDir, "..", "bin", "feishu-codex-bridge.mjs");
+}
+function buildLauncherCmd() {
+  const nodePath = process.execPath;
+  const cliBinPath = resolveCliBinPath2();
+  const pathEnv = process.env.PATH ?? "";
+  return [
+    "@echo off",
+    `set "PATH=${pathEnv}"`,
+    `"${nodePath}" "${cliBinPath}" run >> "${serviceStdoutPath()}" 2>> "${serviceStderrPath()}"`,
+    ""
+  ].join("\r\n");
+}
+function runSchtasks(args) {
+  const r = spawnSync2("schtasks", args, { encoding: "utf8" });
+  return {
+    ok: r.status === 0,
+    status: r.status,
+    stdout: r.stdout ?? "",
+    stderr: r.stderr ?? ""
+  };
+}
+function schtasksError(command, r) {
+  const out = [r.stderr.trim(), r.stdout.trim()].filter(Boolean).join("\n");
+  return new Error(`${command} \u5931\u8D25\uFF08exit ${r.status ?? "unknown"}\uFF09${out ? `\uFF1A${out}` : ""}`);
+}
+async function writeLauncherCmd() {
+  const cmdPath = launcherCmdPath();
+  await mkdir7(dirname7(cmdPath), { recursive: true });
+  await ensureLogFiles();
+  await writeFile6(cmdPath, buildLauncherCmd(), "utf8");
+}
+async function installSchtask() {
+  await writeLauncherCmd();
+  const create = runSchtasks([
+    "/Create",
+    "/F",
+    "/SC",
+    "ONLOGON",
+    "/RL",
+    "LIMITED",
+    "/TN",
+    WINDOWS_TASK_NAME,
+    "/TR",
+    `"${launcherCmdPath()}"`
+  ]);
+  if (!create.ok) throw schtasksError("schtasks /Create", create);
+  const run = runSchtasks(["/Run", "/TN", WINDOWS_TASK_NAME]);
+  if (!run.ok) throw schtasksError("schtasks /Run", run);
+  return statusSchtask();
+}
+async function uninstallSchtask() {
+  runSchtasks(["/End", "/TN", WINDOWS_TASK_NAME]);
+  const del = runSchtasks(["/Delete", "/F", "/TN", WINDOWS_TASK_NAME]);
+  if (!del.ok && isTaskRegistered()) throw schtasksError("schtasks /Delete", del);
+  if (existsSync5(launcherCmdPath())) await rm3(launcherCmdPath(), { force: true });
+}
+async function restartSchtask() {
+  if (!isTaskRegistered()) {
+    throw new Error(`\u8BA1\u5212\u4EFB\u52A1\u672A\u5B89\u88C5\uFF1A${WINDOWS_TASK_NAME}\uFF08\u5148\u8FD0\u884C \`feishu-codex-bridge start\`\uFF09`);
+  }
+  runSchtasks(["/End", "/TN", WINDOWS_TASK_NAME]);
+  await waitUntilStopped();
+  const run = runSchtasks(["/Run", "/TN", WINDOWS_TASK_NAME]);
+  if (!run.ok) throw schtasksError("schtasks /Run", run);
+  return statusSchtask();
+}
+function statusSchtask() {
+  const installed = isTaskRegistered();
+  const raw = installed ? describeTask() : "";
+  return {
+    platformName: "Task Scheduler (Windows)",
+    installed,
+    running: installed && /Status:\s+Running/i.test(raw),
+    servicePath: WINDOWS_TASK_NAME,
+    stdoutPath: serviceStdoutPath(),
+    stderrPath: serviceStderrPath(),
+    // `Process ID:` only appears in verbose output while the task is running.
+    pid: raw.match(/Process ID:\s*(\d+)/i)?.[1],
+    // `Last Result: 0` ⇒ last run succeeded. Surface it as the exit code.
+    lastExit: raw.match(/Last Result:\s*(-?\d+)/i)?.[1],
+    raw
+  };
+}
+function isTaskRegistered() {
+  const r = spawnSync2("schtasks", ["/Query", "/TN", WINDOWS_TASK_NAME], {
+    stdio: ["ignore", "ignore", "ignore"]
+  });
+  return r.status === 0;
+}
+function schtaskRunning() {
+  if (!isTaskRegistered()) return false;
+  return /Status:\s+Running/i.test(describeTask());
+}
+function describeTask() {
+  const r = runSchtasks(["/Query", "/V", "/FO", "LIST", "/TN", WINDOWS_TASK_NAME]);
+  return r.stdout || r.stderr || "";
+}
+async function waitUntilStopped(timeoutMs = 5e3) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (!schtaskRunning()) return true;
+    await new Promise((r) => setTimeout(r, 200));
+  }
+  return false;
+}
+async function tailSchtaskLogs(follow) {
+  await ensureLogFiles();
+  const files = [serviceStdoutPath(), serviceStderrPath()];
+  for (const f of files) {
+    const tail = await lastLines(f, 100);
+    if (tail) process.stdout.write(`
+===== ${f} =====
+${tail}
+`);
+  }
+  if (!follow) return;
+  const offsets = new Map(files.map((f) => [f, fileSize(f)]));
+  await new Promise((resolvePromise) => {
+    const onSigint = () => {
+      clearInterval(timer);
+      process.off("SIGINT", onSigint);
+      resolvePromise();
+    };
+    process.on("SIGINT", onSigint);
+    const timer = setInterval(() => {
+      for (const f of files) {
+        const size = fileSize(f);
+        const from = offsets.get(f) ?? 0;
+        if (size > from) {
+          offsets.set(f, size);
+          createReadStream(f, { start: from, end: size - 1, encoding: "utf8" }).pipe(process.stdout, {
+            end: false
+          });
+        } else if (size < from) {
+          offsets.set(f, size);
+        }
+      }
+    }, 700);
+  });
+}
+function fileSize(file) {
+  try {
+    return statSync(file).size;
+  } catch {
+    return 0;
+  }
+}
+async function lastLines(file, n) {
+  try {
+    const text = await readFile7(file, "utf8");
+    const lines = text.split("\n");
+    return lines.slice(-n - 1).join("\n").trimEnd();
+  } catch {
+    return "";
+  }
+}
+
 // src/service/adapter.ts
 function getServiceAdapter() {
-  if (process.platform !== "darwin") {
-    throw new Error("service\uFF1A\u5F53\u524D\u5E73\u53F0\u6682\u4E0D\u652F\u6301\uFF0C\u540E\u7EED\u4F1A\u652F\u6301 Windows/systemd\u3002");
+  if (process.platform === "darwin") {
+    return {
+      install: installLaunchd,
+      uninstall: uninstallLaunchd,
+      status: async () => statusLaunchd(),
+      restart: restartLaunchd,
+      logs: tailLaunchdLogs
+    };
   }
-  return {
-    install: installLaunchd,
-    uninstall: uninstallLaunchd,
-    status: async () => statusLaunchd(),
-    restart: restartLaunchd,
-    logs: tailLaunchdLogs
-  };
+  if (process.platform === "win32") {
+    return {
+      install: installSchtask,
+      uninstall: uninstallSchtask,
+      status: async () => statusSchtask(),
+      restart: restartSchtask,
+      logs: tailSchtaskLogs
+    };
+  }
+  throw new Error(
+    "service\uFF1A\u5F53\u524D\u5E73\u53F0\u6682\u4E0D\u652F\u6301\u540E\u53F0\u670D\u52A1\uFF08\u4EC5 macOS launchd / Windows \u8BA1\u5212\u4EFB\u52A1\uFF09\u3002\u8BF7\u7528 `feishu-codex-bridge run` \u524D\u53F0\u8FD0\u884C" + (process.platform === "linux" ? "\uFF1BLinux systemd \u652F\u6301\u540E\u7EED\u63D0\u4F9B\u3002" : "\u3002")
+  );
+}
+function isServiceRunning() {
+  try {
+    if (process.platform === "darwin") return isLoaded();
+    if (process.platform === "win32") return schtaskRunning();
+  } catch {
+  }
+  return false;
 }
 
 // src/service/update.ts
 var execFileP = promisify(execFile);
 var NPM = process.platform === "win32" ? "npm.cmd" : "npm";
 function pkgRoot() {
-  return resolve4(dirname6(fileURLToPath3(import.meta.url)), "..");
+  return resolve5(dirname8(fileURLToPath4(import.meta.url)), "..");
 }
 function pkgJson() {
   try {
-    return JSON.parse(readFileSync2(join8(pkgRoot(), "package.json"), "utf8"));
+    return JSON.parse(readFileSync2(join10(pkgRoot(), "package.json"), "utf8"));
   } catch {
     return {};
   }
@@ -3454,7 +3840,7 @@ function packageName() {
   return pkgJson().name ?? "@modelzen/feishu-codex-bridge";
 }
 function isDevSource() {
-  return existsSync5(join8(pkgRoot(), ".git"));
+  return existsSync6(join10(pkgRoot(), ".git"));
 }
 function isNewer(a, b) {
   const pa = a.split(".").map((n) => Number.parseInt(n, 10) || 0);
@@ -3477,7 +3863,7 @@ async function latestVersion() {
 async function installLatest(opts = {}) {
   const target = `${packageName()}@latest`;
   return await new Promise((resolveP) => {
-    const child = spawn5(NPM, ["install", "-g", target], {
+    const child = spawn4(NPM, ["install", "-g", target], {
       stdio: opts.inherit ? ["ignore", "inherit", "inherit"] : ["ignore", "pipe", "pipe"]
     });
     let out = "";
@@ -3493,78 +3879,16 @@ async function installLatest(opts = {}) {
   });
 }
 function daemonRunning() {
-  try {
-    return statusLaunchd().loaded;
-  } catch {
-    return false;
-  }
+  return isServiceRunning();
 }
 async function restartDaemon() {
   await getServiceAdapter().restart();
 }
 
-// src/project/registry.ts
-import { mkdir as mkdir5, readFile as readFile6, rename as rename4, writeFile as writeFile5 } from "fs/promises";
-import { dirname as dirname7 } from "path";
-var FILE_VERSION2 = 1;
-async function read() {
-  try {
-    const text = await readFile6(paths.projectsFile, "utf8");
-    const parsed = JSON.parse(text);
-    return Array.isArray(parsed.projects) ? parsed.projects : [];
-  } catch (err) {
-    if (err.code === "ENOENT") return [];
-    throw err;
-  }
-}
-async function write(projects) {
-  await mkdir5(dirname7(paths.projectsFile), { recursive: true });
-  const tmp = `${paths.projectsFile}.tmp-${process.pid}`;
-  const body = { version: FILE_VERSION2, projects };
-  await writeFile5(tmp, `${JSON.stringify(body, null, 2)}
-`, "utf8");
-  await rename4(tmp, paths.projectsFile);
-}
-async function listProjects() {
-  return read();
-}
-async function getProjectByChatId(chatId) {
-  return (await read()).find((p) => p.chatId === chatId);
-}
-async function getProjectByName(name) {
-  return (await read()).find((p) => p.name === name);
-}
-async function addProject(p) {
-  const projects = await read();
-  if (projects.some((x) => x.name === p.name)) {
-    throw new Error(`\u9879\u76EE\u540D\u300C${p.name}\u300D\u5DF2\u5B58\u5728`);
-  }
-  projects.push(p);
-  await write(projects);
-}
-async function updateProject(name, patch) {
-  const projects = await read();
-  const p = projects.find((x) => x.name === name);
-  if (!p) return;
-  const target = p;
-  for (const [k, v] of Object.entries(patch)) {
-    if (v !== void 0) target[k] = v;
-  }
-  await write(projects);
-}
-async function removeProject(name) {
-  const projects = await read();
-  const idx = projects.findIndex((p) => p.name === name);
-  if (idx === -1) return void 0;
-  const [removed] = projects.splice(idx, 1);
-  await write(projects);
-  return removed;
-}
-
 // src/project/lifecycle.ts
-import { mkdir as mkdir6 } from "fs/promises";
-import { existsSync as existsSync6 } from "fs";
-import { isAbsolute as isAbsolute2, join as join9, resolve as resolve5 } from "path";
+import { mkdir as mkdir8 } from "fs/promises";
+import { existsSync as existsSync7 } from "fs";
+import { isAbsolute as isAbsolute2, join as join11, resolve as resolve6 } from "path";
 
 // src/project/git-info.ts
 import { execFile as execFile2 } from "child_process";
@@ -3665,21 +3989,23 @@ var HELP_DOC_URL = "https://my.feishu.cn/wiki/PZ23wGr7JiKK5RkIG4rcZXzGn5g";
 async function onboardGroup(channel, project) {
   const kind = project.kind ?? "multi";
   const chatId = project.chatId;
+  const decorate = (project.origin ?? "created") !== "joined";
   try {
-    const content = JSON.stringify(buildWelcomeCard(kind, HELP_DOC_URL || void 0));
+    const noMention = project.noMention ?? defaultNoMention(project);
+    const content = JSON.stringify(buildWelcomeCard(kind, HELP_DOC_URL || void 0, noMention));
     const sent = await channel.rawClient.im.v1.message.create({
       params: { receive_id_type: "chat_id" },
       data: { receive_id: chatId, msg_type: "interactive", content }
     });
     const messageId = sent.data?.message_id;
-    if (messageId) {
+    if (messageId && decorate) {
       await channel.rawClient.im.v1.pin.create({ data: { message_id: messageId } });
       log.info("project", "onboard-pin", { name: project.name });
     }
   } catch (err) {
     log.fail("project", err, { phase: "onboard-welcome" });
   }
-  if (HELP_DOC_URL) {
+  if (decorate && HELP_DOC_URL) {
     try {
       await channel.rawClient.im.v1.chatTab.create({
         path: { chat_id: chatId },
@@ -3695,21 +4021,21 @@ async function onboardGroup(channel, project) {
 }
 
 // src/project/lifecycle.ts
+async function resolveCwd(name, existingPath) {
+  if (existingPath) {
+    const cwd2 = isAbsolute2(existingPath) ? existingPath : resolve6(existingPath);
+    if (!existsSync7(cwd2)) throw new Error(`\u6587\u4EF6\u5939\u4E0D\u5B58\u5728\uFF1A${cwd2}`);
+    return { cwd: cwd2, blank: false };
+  }
+  const cwd = join11(paths.projectsRootDir, name);
+  await mkdir8(cwd, { recursive: true });
+  return { cwd, blank: true };
+}
 async function createProject(channel, input2) {
   const name = input2.name.trim();
   if (!name) throw new Error("\u9879\u76EE\u540D\u4E0D\u80FD\u4E3A\u7A7A");
   if (await getProjectByName(name)) throw new Error(`\u9879\u76EE\u540D\u300C${name}\u300D\u5DF2\u5B58\u5728\uFF0C\u6362\u4E2A\u540D\u6216\u7528 /projects \u770B\u5DF2\u6709\u7684`);
-  let cwd;
-  let blank;
-  if (input2.existingPath) {
-    cwd = isAbsolute2(input2.existingPath) ? input2.existingPath : resolve5(input2.existingPath);
-    if (!existsSync6(cwd)) throw new Error(`\u6587\u4EF6\u5939\u4E0D\u5B58\u5728\uFF1A${cwd}`);
-    blank = false;
-  } else {
-    cwd = join9(paths.projectsRootDir, name);
-    await mkdir6(cwd, { recursive: true });
-    blank = true;
-  }
+  const { cwd, blank } = await resolveCwd(name, input2.existingPath);
   const res = await channel.rawClient.im.v1.chat.create({
     params: { user_id_type: "open_id" },
     data: { name, user_id_list: [input2.ownerOpenId] }
@@ -3721,13 +4047,35 @@ async function createProject(channel, input2) {
     params: { member_id_type: "open_id" },
     data: { manager_ids: [input2.ownerOpenId] }
   }).catch((err) => log.fail("project", err, { phase: "add-manager" }));
-  const project = { name, chatId, cwd, blank, createdAt: Date.now(), kind: input2.kind ?? "multi" };
+  const project = { name, chatId, cwd, blank, createdAt: Date.now(), kind: input2.kind ?? "multi", origin: "created" };
   await addProject(project);
   log.info("project", "create", { name, chatId, cwd, blank });
   await setAnnouncement(channel, project).catch((err) => log.fail("project", err, { phase: "announcement" }));
   await onboardGroup(channel, project).catch((err) => log.fail("project", err, { phase: "onboard" }));
   return project;
 }
+async function joinExistingGroup(channel, input2) {
+  const name = input2.name.trim();
+  if (!name) throw new Error("\u9879\u76EE\u540D\u4E0D\u80FD\u4E3A\u7A7A");
+  if (await getProjectByName(name)) throw new Error(`\u9879\u76EE\u540D\u300C${name}\u300D\u5DF2\u5B58\u5728\uFF0C\u6362\u4E2A\u540D\u6216\u7528 /projects \u770B\u5DF2\u6709\u7684`);
+  const bound = await getProjectByChatId(input2.chatId);
+  if (bound) throw new Error(`\u8BE5\u7FA4\u5DF2\u7ED1\u5B9A\u4E3A\u9879\u76EE\u300C${bound.name}\u300D`);
+  const { cwd, blank } = await resolveCwd(name, input2.existingPath);
+  const project = {
+    name,
+    chatId: input2.chatId,
+    cwd,
+    blank,
+    createdAt: Date.now(),
+    kind: input2.kind ?? "multi",
+    origin: "joined",
+    addedBy: input2.addedBy
+  };
+  await addProject(project);
+  log.info("project", "join", { name, chatId: input2.chatId, cwd, blank, kind: project.kind });
+  await onboardGroup(channel, project).catch((err) => log.fail("project", err, { phase: "onboard-join" }));
+  return project;
+}
 
 // src/project/group-ops.ts
 async function transferOwnership(channel, chatId, toOpenId) {
@@ -3738,14 +4086,21 @@ async function transferOwnership(channel, chatId, toOpenId) {
   });
   log.info("project", "owner-transfer", { chatId: chatId.slice(-6), to: toOpenId.slice(-6) });
 }
+async function leaveChat(channel, chatId) {
+  await channel.rawClient.request({
+    method: "PATCH",
+    url: `/open-apis/im/v1/chats/${encodeURIComponent(chatId)}/members/me_leave`
+  });
+  log.info("project", "leave-chat", { chatId: chatId.slice(-6) });
+}
 
 // src/bot/session-store.ts
-import { mkdir as mkdir7, readFile as readFile7, rename as rename5, writeFile as writeFile6 } from "fs/promises";
-import { dirname as dirname8 } from "path";
+import { mkdir as mkdir9, readFile as readFile8, rename as rename5, writeFile as writeFile7 } from "fs/promises";
+import { dirname as dirname9 } from "path";
 var FILE_VERSION3 = 1;
 async function read2() {
   try {
-    const text = await readFile7(paths.sessionsFile, "utf8");
+    const text = await readFile8(paths.sessionsFile, "utf8");
     const parsed = JSON.parse(text);
     return Array.isArray(parsed.sessions) ? parsed.sessions : [];
   } catch (err) {
@@ -3754,10 +4109,10 @@ async function read2() {
   }
 }
 async function write2(sessions) {
-  await mkdir7(dirname8(paths.sessionsFile), { recursive: true });
+  await mkdir9(dirname9(paths.sessionsFile), { recursive: true });
   const tmp = `${paths.sessionsFile}.tmp-${process.pid}`;
   const body = { version: FILE_VERSION3, sessions };
-  await writeFile6(tmp, `${JSON.stringify(body, null, 2)}
+  await writeFile7(tmp, `${JSON.stringify(body, null, 2)}
 `, "utf8");
   await rename5(tmp, paths.sessionsFile);
 }
@@ -3801,8 +4156,8 @@ async function handleDmConsole(channel, cfg, msg) {
 }
 
 // src/bot/media.ts
-import { mkdir as mkdir8, readdir as readdir2, rm as rm3, stat as stat3 } from "fs/promises";
-import { join as join10 } from "path";
+import { mkdir as mkdir10, readdir as readdir2, rm as rm4, stat as stat3 } from "fs/promises";
+import { join as join12 } from "path";
 var MAX_IMAGES2 = 9;
 var MEDIA_TTL_MS = 60 * 6e4;
 var EXT_BY_CONTENT_TYPE = {
@@ -3831,7 +4186,7 @@ async function collectInboundImages(channel, msg) {
   if (refs.length === 0) return [];
   await pruneOldMedia();
   try {
-    await mkdir8(paths.mediaDir, { recursive: true });
+    await mkdir10(paths.mediaDir, { recursive: true });
   } catch {
   }
   const out = [];
@@ -3907,7 +4262,7 @@ async function downloadOne(channel, ref, index) {
       params: { type: "image" }
     });
     const ext = extFromHeaders(res.headers);
-    const file = join10(paths.mediaDir, `${safeName(ref.fileKey)}-${index}.${ext}`);
+    const file = join12(paths.mediaDir, `${safeName(ref.fileKey)}-${index}.${ext}`);
     await res.writeFile(file);
     return file;
   } catch (err) {
@@ -3941,10 +4296,10 @@ async function pruneOldMedia() {
   }
   const cutoff = Date.now() - MEDIA_TTL_MS;
   for (const name of entries) {
-    const file = join10(paths.mediaDir, name);
+    const file = join12(paths.mediaDir, name);
     try {
       const st = await stat3(file);
-      if (st.mtimeMs < cutoff) await rm3(file, { force: true });
+      if (st.mtimeMs < cutoff) await rm4(file, { force: true });
     } catch {
     }
   }
@@ -4268,11 +4623,22 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
       log.info("intake", "reject", { reason: "not_allowed", chatId: msg.chatId.slice(-6) });
       return;
     }
+    if (!project) {
+      log.info("intake", "unbound-group", { chatId: msg.chatId.slice(-6), atBot: msg.mentionedBot });
+      if (msg.mentionedBot) {
+        await channel.send(
+          msg.chatId,
+          { markdown: "\u672C\u7FA4\u8FD8\u6CA1\u7ED1\u5B9A\u4E3A\u9879\u76EE\u3002\u8BF7**\u628A\u6211\u62C9\u8FDB\u7FA4\u7684\u7BA1\u7406\u5458**\u5728\u4E0E\u6211\u7684\u79C1\u804A\u91CC\u5B8C\u6210\u7ED1\u5B9A\u540E\u518D @\u6211\u3002" },
+          { replyTo: msg.messageId }
+        ).catch(() => void 0);
+      }
+      return;
+    }
     const text = msg.content.trim();
     const cmd = parseCommand(text);
     if ((project?.kind ?? "multi") === "single") {
       if (cmd === "help") {
-        await postHelpCard(msg, "single");
+        await postHelpCard(msg, "single", false, project);
         return;
       }
       if (cmd === "settings") {
@@ -4288,7 +4654,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     }
     if (msg.threadId) {
       if (cmd === "help") {
-        await postHelpCard(msg, "topic", true);
+        await postHelpCard(msg, "topic", true, project);
         return;
       }
       if (cmd === "model") {
@@ -4299,7 +4665,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
       return;
     }
     if (cmd === "help") {
-      await postHelpCard(msg, "main");
+      await postHelpCard(msg, "main", false, project);
       return;
     }
     if (cmd === "resume") {
@@ -4322,7 +4688,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     return name === "resume" || name === "model" || name === "settings" || name === "help" ? name : null;
   }
   function shouldRespondWithoutMention(project, msg) {
-    if (!(project.noMention ?? true)) return false;
+    if (!(project.noMention ?? defaultNoMention(project))) return false;
     if (msg.mentionAll || msg.mentions.some((m) => !m.isBot)) return false;
     if ((project.kind ?? "multi") === "single") return true;
     return Boolean(msg.threadId) || parseCommand(msg.content.trim()) !== null;
@@ -4519,9 +4885,10 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
       log.info("card", "model", { threadId: sessionKey, model: state.model, effort: state.effort });
     });
   }
-  async function postHelpCard(msg, scope, inThread = false) {
+  async function postHelpCard(msg, scope, inThread = false, project) {
+    const noMention = project ? project.noMention ?? defaultNoMention(project) : true;
     await withTrace({ chatId: msg.chatId, msgId: msg.messageId }, async () => {
-      await sendManagedCard(channel, msg.chatId, buildHelpCard(scope), msg.messageId, inThread).catch(
+      await sendManagedCard(channel, msg.chatId, buildHelpCard(scope, noMention), msg.messageId, inThread).catch(
         (err) => log.fail("card", err, { cmd: "help", scope })
       );
       log.info("card", "help", { scope });
@@ -4659,6 +5026,32 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
         (e) => log.fail("console", e, { phase: "new-project-result" })
       );
     })();
+  }).on(DM.joinGroupSubmit, ({ evt, formValue, value }) => {
+    const op = evt.operator?.openId;
+    if (!dmAdmin(op)) return;
+    const name = String(formValue?.name ?? "").trim();
+    const cwdIn = String(formValue?.cwd ?? "").trim();
+    const chatId = typeof value.chatId === "string" ? value.chatId : "";
+    const kind = value.kind === "single" ? "single" : "multi";
+    void (async () => {
+      let result;
+      if (!chatId)
+        result = buildJoinGroupFormCard({ chatId: "", name, cwd: cwdIn, error: "\u7F3A\u5C11\u7FA4\u6807\u8BC6\uFF0C\u8BF7\u91CD\u65B0\u4ECE\u8FDB\u7FA4\u901A\u77E5\u91CC\u6253\u5F00\u7ED1\u5B9A\u5361" });
+      else if (!name) result = buildJoinGroupFormCard({ chatId, cwd: cwdIn, error: "\u9879\u76EE\u540D\u4E0D\u80FD\u4E3A\u7A7A" });
+      else if (!op) result = buildJoinGroupFormCard({ chatId, name, cwd: cwdIn, error: "\u65E0\u6CD5\u8BC6\u522B\u64CD\u4F5C\u8005\u8EAB\u4EFD" });
+      else {
+        try {
+          const p = await joinExistingGroup(channel, { name, chatId, addedBy: op, existingPath: cwdIn || void 0, kind });
+          log.info("console", "join-group", { name: p.name, blank: p.blank });
+          result = buildNewProjectDoneCard(p);
+        } catch (err) {
+          result = buildJoinGroupFormCard({ chatId, name, cwd: cwdIn, error: err instanceof Error ? err.message : String(err) });
+        }
+      }
+      await sendManagedCard(channel, evt.chatId, result).catch(
+        (e) => log.fail("console", e, { phase: "join-group-result" })
+      );
+    })();
   }).on(DM.projects, ({ evt }) => {
     if (!dmAdmin(evt.operator?.openId)) return;
     patch(evt, renderProjectList);
@@ -4671,6 +5064,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     const secret = await getSecret(secretKeyForApp(app.id)).catch(() => void 0);
     const scopeCheck = secret ? await validateAppCredentials(app.id, secret, app.tenant).catch(() => void 0) : void 0;
     const missingScopes = scopeCheck?.missingScopes;
+    const missingJoinScopes = scopeCheck?.missingJoinScopes;
     const info = {
       codexOk: await backend.isAvailable().catch(() => false),
       codexVer: codexBin ? codexVersion(codexBin) : null,
@@ -4687,7 +5081,10 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
         app.id,
         app.tenant,
         missingScopes && missingScopes.length ? missingScopes : void 0
-      )
+      ),
+      missingJoinScopes,
+      // 「加入存量群」按钮恒预选这两项 opt-in scope（它们不在必需清单里）。
+      joinScopeGrantUrl: buildScopeGrantUrl(app.id, app.tenant, JOIN_GROUP_SCOPES)
     };
     await sendManagedCard(channel, evt.chatId, buildDoctorCard(info), evt.messageId).catch(
       (err) => log.fail("console", err, { cmd: "doctor" })
@@ -4748,7 +5145,8 @@ SDK \u4F1A\u81EA\u52A8\u91CD\u8FDE\uFF1B\u82E5\u957F\u671F\u65AD\u5F00\uFF0C\u8B
   }).on(DM.rmConfirm, async ({ evt, value }) => {
     const name = typeof value.n === "string" ? value.n : void 0;
     if (!dmAdmin(evt.operator?.openId) || !name) return;
-    await patch(evt, buildRmConfirmCard(name));
+    const proj = (await listProjects()).find((p) => p.name === name);
+    await patch(evt, buildRmConfirmCard(name, proj?.origin));
   }).on(DM.rmCancel, ({ evt }) => {
     if (!dmAdmin(evt.operator?.openId)) return;
     patch(evt, renderProjectList);
@@ -4758,15 +5156,25 @@ SDK \u4F1A\u81EA\u52A8\u91CD\u8FDE\uFF1B\u82E5\u957F\u671F\u65AD\u5F00\uFF0C\u8B
     if (!dmAdmin(op) || !name) return;
     patch(evt, async () => {
       const removed = await removeProject(name);
-      let transferred = false;
-      if (removed?.chatId && op) {
-        transferred = await transferOwnership(channel, removed.chatId, op).then(() => true).catch((err) => {
-          log.fail("console", err, { phase: "owner-transfer" });
+      let tail;
+      if (removed && (removed.origin ?? "created") === "joined") {
+        const left = removed.chatId ? await leaveChat(channel, removed.chatId).then(() => true).catch((err) => {
+          log.fail("console", err, { phase: "leave-chat" });
           return false;
-        });
+        }) : false;
+        log.info("console", "rm", { name, origin: "joined", left });
+        tail = left ? "\u6211\u5DF2\u9000\u51FA\u8BE5\u7FA4\uFF08\u7FA4\u662F\u4F60\u4EEC\u7684\uFF0C\u4E0D\u4F1A\u89E3\u6563\uFF09\u3002" : "\u26A0\uFE0F \u6211\u9000\u7FA4\u5931\u8D25\uFF08\u53EF\u80FD\u6743\u9650\u4E0D\u8DB3\uFF09\uFF0C\u53EF\u5728\u7FA4\u91CC\u624B\u52A8\u628A\u6211\u79FB\u9664\u3002";
+      } else {
+        let transferred = false;
+        if (removed?.chatId && op) {
+          transferred = await transferOwnership(channel, removed.chatId, op).then(() => true).catch((err) => {
+            log.fail("console", err, { phase: "owner-transfer" });
+            return false;
+          });
+        }
+        log.info("console", "rm", { name, origin: "created", transferred });
+        tail = transferred ? "\u7FA4\u4E3B\u5DF2\u8F6C\u7ED9\u4F60 \u2192 \u8BF7\u5728\u98DE\u4E66\u91CC**\u81EA\u884C\u89E3\u6563\u8BE5\u7FA4**\uFF08\u673A\u5668\u4EBA\u4E0D\u4E3B\u52A8\u89E3\u6563\uFF09\u3002" : "\u26A0\uFE0F \u7FA4\u4E3B\u8F6C\u8BA9\u5931\u8D25\uFF08\u53EF\u80FD bot \u975E\u7FA4\u4E3B\uFF09\uFF0C\u8BF7\u7528\u300C\u{1F6AA} \u7FA4\u7BA1\u7406\u300D\u624B\u52A8\u8F6C\u8BA9\u540E\u89E3\u6563\u3002";
       }
-      log.info("console", "rm", { name, transferred });
-      const tail = transferred ? "\u7FA4\u4E3B\u5DF2\u8F6C\u7ED9\u4F60 \u2192 \u8BF7\u5728\u98DE\u4E66\u91CC**\u81EA\u884C\u89E3\u6563\u8BE5\u7FA4**\uFF08\u673A\u5668\u4EBA\u4E0D\u4E3B\u52A8\u89E3\u6563\uFF09\u3002" : "\u26A0\uFE0F \u7FA4\u4E3B\u8F6C\u8BA9\u5931\u8D25\uFF08\u53EF\u80FD bot \u975E\u7FA4\u4E3B\uFF09\uFF0C\u8BF7\u7528\u300C\u{1F6AA} \u7FA4\u7BA1\u7406\u300D\u624B\u52A8\u8F6C\u8BA9\u540E\u89E3\u6563\u3002";
       await channel.send(evt.chatId, { markdown: `\u2705 \u5DF2\u5220\u9664\u9879\u76EE\u300C${name}\u300D\uFF08\u89E3\u7ED1\uFF0C\u672A\u5220\u4EE3\u7801\u76EE\u5F55\uFF09\u3002
 ${tail}` }, { replyTo: evt.messageId }).catch(() => void 0);
       return renderProjectList();
@@ -5102,13 +5510,57 @@ ${tail}` }, { replyTo: evt.messageId }).catch(() => void 0);
     });
     return fresh;
   }
+  async function onBotAddedToChat(evt) {
+    await withTrace({ chatId: evt.chatId }, async () => {
+      const op = evt.operator?.openId;
+      if (await getProjectByChatId(evt.chatId)) {
+        log.info("intake", "bot-added-bound", { chatId: evt.chatId.slice(-6) });
+        return;
+      }
+      if (!op || !isAdmin(cfg, op)) {
+        log.info("intake", "bot-added-nonadmin", { chatId: evt.chatId.slice(-6), op: op?.slice(-6) });
+        return;
+      }
+      const info = await channel.getChatInfo(evt.chatId).catch((err) => {
+        log.fail("intake", err, { phase: "bot-added-chatinfo" });
+        return void 0;
+      });
+      const name = (info?.name ?? "").trim();
+      await sendManagedCard(
+        channel,
+        op,
+        buildJoinGroupFormCard({ chatId: evt.chatId, name }),
+        void 0,
+        false,
+        "open_id"
+      ).catch((err) => log.fail("intake", err, { phase: "bot-added-bindcard" }));
+      log.info("intake", "bot-added", { chatId: evt.chatId.slice(-6), op: op.slice(-6), named: Boolean(name) });
+    }).catch((err) => log.fail("intake", err, { phase: "bot-added" }));
+  }
+  async function onBotRemovedFromChat(chatId) {
+    const project = await getProjectByChatId(chatId);
+    if (!project) return;
+    const removed = await removeProject(project.name);
+    if (!removed) return;
+    log.info("intake", "bot-removed-unbind", { name: removed.name, chatId: chatId.slice(-6) });
+    if (removed.addedBy) {
+      await channel.rawClient.im.v1.message.create({
+        params: { receive_id_type: "open_id" },
+        data: {
+          receive_id: removed.addedBy,
+          msg_type: "text",
+          content: JSON.stringify({ text: `\u2139\uFE0F \u6211\u5DF2\u88AB\u79FB\u51FA\u7FA4\u300C${removed.name}\u300D\uFF0C\u5BF9\u5E94\u9879\u76EE\u5DF2\u81EA\u52A8\u89E3\u7ED1\u3002` })
+        }
+      }).catch(() => void 0);
+    }
+  }
   async function shutdown() {
     const live = [...sessions.values()];
     sessions.clear();
     await Promise.allSettled(live.map((t) => t.close()));
     log.info("bridge", "shutdown", { closed: live.length });
   }
-  return { onMessage, onComment, dispatcher, shutdown };
+  return { onMessage, onComment, onBotAddedToChat, onBotRemovedFromChat, dispatcher, shutdown };
 }
 async function getThreadId(channel, messageId) {
   try {
@@ -5146,6 +5598,24 @@ async function startBridge(opts) {
   channel.on("message", orchestrator.onMessage);
   channel.on("cardAction", orchestrator.dispatcher.handle);
   channel.on("comment", orchestrator.onComment);
+  channel.on("botAdded", orchestrator.onBotAddedToChat);
+  try {
+    const tap = channel.dispatcher;
+    if (tap?.register) {
+      tap.register({
+        "im.chat.member.bot.deleted_v1": (raw) => {
+          const ev = raw;
+          const chatId = ev?.chat_id ?? ev?.event?.chat_id;
+          if (chatId) void orchestrator.onBotRemovedFromChat(chatId);
+        }
+      });
+      log.info("ws", "bot-removed-tap");
+    } else {
+      log.info("ws", "bot-removed-tap-unavailable");
+    }
+  } catch (err) {
+    log.fail("ws", err, { phase: "bot-removed-tap" });
+  }
   channel.on("reject", (evt) => log.info("intake", "reject", { reason: evt.reason, msgId: evt.messageId }));
   channel.on("error", (err) => log.fail("ws", err));
   channel.on("reconnecting", () => log.info("ws", "reconnecting"));
@@ -5164,7 +5634,7 @@ async function startBridge(opts) {
 
 // src/core/single-instance.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync3, unlinkSync, writeFileSync } from "fs";
-import { dirname as dirname9 } from "path";
+import { dirname as dirname10 } from "path";
 var BridgeAlreadyRunningError = class extends Error {
   constructor(pid) {
     super(
@@ -5193,7 +5663,7 @@ function acquireSingleInstanceLock(appId) {
   } catch (err) {
     if (err instanceof BridgeAlreadyRunningError) throw err;
   }
-  mkdirSync2(dirname9(file), { recursive: true });
+  mkdirSync2(dirname10(file), { recursive: true });
   const record = { pid: process.pid, appId, startedAt: Date.now() };
   writeFileSync(file, `${JSON.stringify(record)}
 `, "utf8");
@@ -5262,12 +5732,14 @@ async function runStart() {
     return;
   }
   const status = await getServiceAdapter().install();
-  console.log("\u2713 \u540E\u53F0\u670D\u52A1\u5DF2\u5B89\u88C5\u5E76\u542F\u52A8\uFF08\u5F00\u673A\u81EA\u542F\u3001\u5D29\u6E83\u81EA\u52A8\u62C9\u8D77\uFF09\u3002");
+  console.log(
+    process.platform === "win32" ? "\u2713 \u540E\u53F0\u670D\u52A1\u5DF2\u5B89\u88C5\u5E76\u542F\u52A8\uFF08\u767B\u5F55\u81EA\u542F\uFF1B\u6CE8\u610F\uFF1AWindows \u8BA1\u5212\u4EFB\u52A1\u65E0\u5D29\u6E83\u81EA\u52A8\u62C9\u8D77\uFF09\u3002" : "\u2713 \u540E\u53F0\u670D\u52A1\u5DF2\u5B89\u88C5\u5E76\u542F\u52A8\uFF08\u5F00\u673A\u81EA\u542F\u3001\u5D29\u6E83\u81EA\u52A8\u62C9\u8D77\uFF09\u3002"
+  );
   printStatus(status);
 }
 async function runStop() {
   await getServiceAdapter().uninstall();
-  console.log("\u2713 \u540E\u53F0\u670D\u52A1\u5DF2\u505C\u6B62\uFF0C\u5E76\u5DF2\u5173\u95ED\u5F00\u673A\u81EA\u542F\uFF08\u5DF2\u79FB\u9664 launchd plist\uFF09\u3002");
+  console.log("\u2713 \u540E\u53F0\u670D\u52A1\u5DF2\u505C\u6B62\uFF0C\u5E76\u5DF2\u5173\u95ED\u81EA\u542F\uFF08\u5DF2\u79FB\u9664\u670D\u52A1\u5B9A\u4E49\uFF09\u3002");
 }
 async function runRestart() {
   const status = await getServiceAdapter().restart();
@@ -5281,17 +5753,18 @@ async function runLogs(follow) {
   await getServiceAdapter().logs(follow);
 }
 function printStatus(status) {
-  console.log(`plist:     ${status.plistPath}`);
+  console.log(`service:   ${status.platformName}`);
+  console.log(`path:      ${status.servicePath}`);
   console.log(`installed: ${status.installed ? "yes" : "no"}`);
-  console.log(`loaded:    ${status.loaded ? "yes" : "no"}`);
+  console.log(`running:   ${status.running ? "yes" : "no"}`);
   console.log(`pid:       ${status.pid ?? "-"}`);
   console.log(`last exit: ${status.lastExit ?? "-"}`);
   console.log(`stdout:    ${status.stdoutPath}`);
   console.log(`stderr:    ${status.stderrPath}`);
   if (!status.installed) {
     console.log("\u63D0\u793A\uFF1A\u540E\u53F0\u670D\u52A1\u5C1A\u672A\u5B89\u88C5\uFF0C\u8FD0\u884C `feishu-codex-bridge start`\u3002");
-  } else if (!status.loaded) {
-    console.log("\u63D0\u793A\uFF1Aplist \u5DF2\u5B58\u5728\uFF0C\u4F46 launchd \u5F53\u524D\u672A\u52A0\u8F7D\uFF08\u8BD5\u8BD5 `restart`\uFF09\u3002");
+  } else if (!status.running) {
+    console.log("\u63D0\u793A\uFF1A\u670D\u52A1\u5DF2\u6CE8\u518C\u4F46\u5F53\u524D\u672A\u8FD0\u884C\uFF08\u8BD5\u8BD5 `restart`\uFF09\u3002");
   }
 }
 
@@ -5344,7 +5817,7 @@ async function runUpdate(opts = {}) {
 }
 
 // src/cli/commands/bot.ts
-import { rm as rm4 } from "fs/promises";
+import { rm as rm5 } from "fs/promises";
 async function runBotInit(name) {
   if (!ensureCodex()) {
     process.exitCode = 1;
@@ -5357,6 +5830,7 @@ async function runBotInit(name) {
   }
   console.log("\n\u4E0B\u4E00\u6B65\uFF08\u98DE\u4E66\u5F00\u653E\u5E73\u53F0\u540E\u53F0\uFF0C\u9700\u624B\u52A8\u4E00\u6B21 https://open.feishu.cn/app \uFF09\uFF1A");
   console.log("  1) \u4E8B\u4EF6\u4E0E\u56DE\u8C03 \u2192 \u957F\u8FDE\u63A5 \u2192 \u8BA2\u9605\uFF1Aim.message.receive_v1 / card.action.trigger / application.bot.menu_v6");
+  console.log("     \uFF08\u53EF\u9009\uFF09\u300C\u52A0\u8FDB\u5DF2\u6709\u7FA4\u300D\u529F\u80FD\u518D\u8BA2\u9605\uFF1Aim.chat.member.bot.added_v1 / im.chat.member.bot.deleted_v1");
   console.log("  2) \u521B\u5EFA\u5E76\u53D1\u5E03\u5E94\u7528\u7248\u672C");
   console.log("\n`bot list` \u67E5\u770B\u5168\u90E8\uFF1B`bot use <\u540D>` \u5207\u6362\u5F53\u524D\uFF1B`run` \u524D\u53F0\u8DD1 / `start` \u540E\u53F0\u5E38\u9A7B\u3002\n");
 }
@@ -5398,7 +5872,7 @@ async function runBotRm(name) {
   }
   const after = await removeBot(bot2.appId);
   await removeSecret(secretKeyForApp(bot2.appId));
-  await rm4(botDir(bot2.appId), { recursive: true, force: true });
+  await rm5(botDir(bot2.appId), { recursive: true, force: true });
   console.log(`\u2713 \u5DF2\u79FB\u9664\u673A\u5668\u4EBA\u300C${bot2.name}\u300D(${bot2.appId})\uFF1A\u6CE8\u518C\u8868 + \u5BC6\u94A5 + \u72B6\u6001\u76EE\u5F55(projects/sessions)\u3002`);
   if (after.bots.length === 0) {
     console.log("  \u5DF2\u65E0\u4EFB\u4F55\u673A\u5668\u4EBA\uFF0C`bot init` \u91CD\u65B0\u521B\u5EFA\u3002");
@@ -5456,15 +5930,15 @@ async function secretsRemove(id) {
   console.log(ok ? `\u2713 \u5DF2\u5220\u9664: ${id}` : `\u672A\u627E\u5230: ${id}`);
 }
 function readStdin() {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     let data = "";
     if (process.stdin.isTTY) {
-      resolve6("");
+      resolve7("");
       return;
     }
     process.stdin.setEncoding("utf8");
     process.stdin.on("data", (c) => data += c);
-    process.stdin.on("end", () => resolve6(data));
+    process.stdin.on("end", () => resolve7(data));
   });
 }