@modelzen/feishu-codex-bridge 0.3.0 → 0.3.2

package/dist/cli.js

@@ -78,6 +78,7 @@ import { dirname as dirname3, join as join2 } from "path";
 
 // src/config/store.ts
 import { chmod, mkdir, readFile, rename, writeFile } from "fs/promises";
+import { randomUUID } from "crypto";
 import { dirname as dirname2 } from "path";
 
 // src/config/schema.ts
@@ -114,18 +115,23 @@ function getRunIdleTimeoutMs(cfg) {
   const clamped = Math.min(Math.max(Math.floor(raw), 10), 1800);
   return clamped * 1e3;
 }
-function isUserAllowed(cfg, senderId) {
-  const list = cfg.preferences?.access?.allowedUsers;
-  if (!list || list.length === 0) return true;
-  return list.includes(senderId);
-}
 function isChatAllowed(cfg, chatId) {
   const list = cfg.preferences?.access?.allowedChats;
   if (!list || list.length === 0) return true;
   return list.includes(chatId);
 }
+function resolveOwner(cfg) {
+  const access = cfg.preferences?.access;
+  return access?.ownerOpenId ?? access?.admins?.[0];
+}
 function isAdmin(cfg, senderId) {
-  const list = cfg.preferences?.access?.admins;
+  if (!senderId) return false;
+  if (senderId === resolveOwner(cfg)) return true;
+  return Boolean(cfg.preferences?.access?.admins?.includes(senderId));
+}
+function isUserAllowedInProject(cfg, project, senderId) {
+  if (isAdmin(cfg, senderId)) return true;
+  const list = project?.allowedUsers;
   if (!list || list.length === 0) return true;
   return list.includes(senderId);
 }
@@ -174,13 +180,21 @@ exec ${sq(node)} ${sq(bridgeEntry)} secrets get "$@"
   await rename(tmp, wrapperPath);
   return wrapperPath;
 }
-async function saveConfig(cfg, path = paths.configFile) {
-  await mkdir(dirname2(path), { recursive: true });
-  const tmp = `${path}.tmp-${process.pid}`;
-  await writeFile(tmp, `${JSON.stringify(cfg, null, 2)}
+var saveChain = Promise.resolve();
+function saveConfig(cfg, path = paths.configFile) {
+  const run = saveChain.then(async () => {
+    await mkdir(dirname2(path), { recursive: true });
+    const tmp = `${path}.tmp-${process.pid}-${randomUUID()}`;
+    await writeFile(tmp, `${JSON.stringify(cfg, null, 2)}
 `, "utf8");
-  await chmod(tmp, 384);
-  await rename(tmp, path);
+    await chmod(tmp, 384);
+    await rename(tmp, path);
+  });
+  saveChain = run.then(
+    () => void 0,
+    () => void 0
+  );
+  return run;
 }
 
 // src/config/bots.ts
@@ -228,6 +242,21 @@ function findBot(reg, nameOrAppId) {
 function currentBot(reg) {
   return reg.current ? reg.bots.find((b) => b.appId === reg.current) : void 0;
 }
+function activeBots(reg) {
+  const configured = reg.bots.some((b) => b.active !== void 0);
+  if (configured) return reg.bots.filter((b) => b.active === true);
+  const cur = currentBot(reg);
+  return cur ? [cur] : [];
+}
+async function setActiveBots(appIds) {
+  const reg = await loadBots();
+  const want = new Set(appIds);
+  for (const b of reg.bots) b.active = want.has(b.appId);
+  const firstActive = reg.bots.find((b) => b.active);
+  if (firstActive) reg.current = firstActive.appId;
+  await saveBots(reg);
+  return reg;
+}
 async function addBot(entry) {
   const reg = await loadBots();
   reg.bots = reg.bots.filter((b) => b.appId !== entry.appId);
@@ -236,11 +265,6 @@ async function addBot(entry) {
   await saveBots(reg);
   return reg;
 }
-async function setCurrent(appId) {
-  const reg = await loadBots();
-  reg.current = appId;
-  await saveBots(reg);
-}
 async function removeBot(appId) {
   const reg = await loadBots();
   reg.bots = reg.bots.filter((b) => b.appId !== appId);
@@ -660,7 +684,7 @@ async function runRegistrationWizard() {
     accounts: { app: { id: result.client_id, secret: result.client_secret, tenant } }
   };
   if (operatorOpenId) {
-    cfg.preferences = { access: { admins: [operatorOpenId] } };
+    cfg.preferences = { access: { ownerOpenId: operatorOpenId, admins: [operatorOpenId] } };
     console.log(`  Admin:   ${operatorOpenId} (\u4F60\u81EA\u5DF1\uFF0C\u5DF2\u81EA\u52A8\u52A0\u5165\u7BA1\u7406\u5458\u540D\u5355)`);
   } else {
     console.log(
@@ -717,7 +741,13 @@ var JOIN_GROUP_SCOPES = [
   "im:chat:readonly",
   "im:chat.members:write_only"
 ];
-var GRANT_SCOPES = [...REQUIRED_SCOPES, ...COMMENT_SCOPES, ...JOIN_GROUP_SCOPES];
+var CONTACT_SCOPES = ["contact:user.base:readonly"];
+var GRANT_SCOPES = [
+  ...REQUIRED_SCOPES,
+  ...COMMENT_SCOPES,
+  ...JOIN_GROUP_SCOPES,
+  ...CONTACT_SCOPES
+];
 var SCOPE_LABELS = {
   "im:message.group_at_msg:readonly": "\u63A5\u6536\u7FA4\u91CC @\u673A\u5668\u4EBA \u7684\u6D88\u606F",
   "im:message.group_msg": "\u63A5\u6536\u7FA4\u5185\u6240\u6709\u6D88\u606F\uFF08\u514D@\uFF09",
@@ -738,7 +768,8 @@ var SCOPE_LABELS = {
   "cardkit:card:write": "\u4EA4\u4E92\u6309\u94AE\u5361\u7247",
   "docs:document.comment:read": "\u8BFB\u53D6\u6587\u6863\u8BC4\u8BBA",
   "docs:document.comment:create": "\u53D1\u8868\u6587\u6863\u8BC4\u8BBA\u56DE\u590D",
-  "wiki:wiki:readonly": "\u8BFB\u53D6\u77E5\u8BC6\u5E93\u8282\u70B9"
+  "wiki:wiki:readonly": "\u8BFB\u53D6\u77E5\u8BC6\u5E93\u8282\u70B9",
+  "contact:user.base:readonly": "\u8BFB\u53D6\u6210\u5458\u59D3\u540D\uFF08\u7BA1\u7406\u5458 / \u767D\u540D\u5355\u5C55\u793A\uFF09"
 };
 function labelScope(scope) {
   const label = SCOPE_LABELS[scope];
@@ -1026,8 +1057,14 @@ function ensureCodex() {
 async function ensureOnboarded(opts = {}) {
   if (!ensureCodex()) return null;
   const reg = await ensureRegistry();
-  const entry = currentBot(reg);
+  const entry = opts.bot ? findBot(reg, opts.bot) : currentBot(reg);
   if (!entry) {
+    if (opts.bot) {
+      console.error(
+        `\u2717 \u627E\u4E0D\u5230\u673A\u5668\u4EBA\u300C${opts.bot}\u300D\u3002\u7528 \`feishu-codex-bridge bot list\` \u67E5\u770B\u5DF2\u6CE8\u518C\u7684\u673A\u5668\u4EBA\u3002`
+      );
+      return null;
+    }
     if (!opts.allowCreate) {
       console.error("\u2717 \u5C1A\u672A\u914D\u7F6E\u4EFB\u4F55\u98DE\u4E66\u673A\u5668\u4EBA\u3002\u8BF7\u5148\u8FD0\u884C `feishu-codex-bridge bot init`\uFF08\u6216\u524D\u53F0 `run`\uFF09\u626B\u7801\u521B\u5EFA\u3002");
       return null;
@@ -2152,6 +2189,14 @@ function selectStatic(opts) {
     behaviors: [{ type: "callback", value: { a: opts.actionId } }]
   };
 }
+function selectMenu(opts) {
+  return {
+    tag: "select_static",
+    name: opts.name,
+    placeholder: { tag: "plain_text", content: opts.placeholder },
+    options: opts.options.map((o) => ({ text: { tag: "plain_text", content: o.label }, value: o.value }))
+  };
+}
 
 // src/card/command-cards.ts
 var MC = {
@@ -2259,19 +2304,13 @@ function pickerTime(unixSeconds) {
 function talkLine(noMention, tail) {
   return noMention ? `\xB7 \u76F4\u63A5\u53D1\u6D88\u606F\uFF08\u514D@\uFF09\u2192 ${tail}` : `\xB7 **@\u6211 + \u5185\u5BB9** \u2192 ${tail}\uFF08\u672C\u7FA4\u9ED8\u8BA4\u9700 @\uFF1B\`/settings\` \u53EF\u5F00\u542F\u514D@\uFF09`;
 }
-function buildHelpCard(scope, noMention = true) {
+function buildHelpCard(scope, noMention = true, isAdmin2 = false) {
   const elements = [];
   if (scope === "single") {
-    elements.push(
-      md("\u{1F4AC} **\u5355\u4F1A\u8BDD\u7FA4** \u2014 \u6574\u7FA4\u5C31\u662F\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u4E0A\u4E0B\u6587\u8FDE\u7EED\u3002"),
-      hr(),
-      md(
-        `${talkLine(noMention, "\u4EA4\u7ED9\u6211\u5904\u7406")}
-\xB7 \`/model\` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6
-\xB7 \`/settings\` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09
-\xB7 \`/help\` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361`
-      )
-    );
+    const lines = [talkLine(noMention, "\u4EA4\u7ED9\u6211\u5904\u7406"), "\xB7 `/model` \u2192 \u5207\u6362\u6A21\u578B / \u63A8\u7406\u5F3A\u5EA6"];
+    if (isAdmin2) lines.push("\xB7 `/settings` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09");
+    lines.push("\xB7 `/help` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361");
+    elements.push(md("\u{1F4AC} **\u5355\u4F1A\u8BDD\u7FA4** \u2014 \u6574\u7FA4\u5C31\u662F\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u4E0A\u4E0B\u6587\u8FDE\u7EED\u3002"), hr(), md(lines.join("\n")));
   } else if (scope === "topic") {
     elements.push(
       md("\u{1F9F5} **\u8BDD\u9898\u5185** \u2014 \u6BCF\u4E2A\u8BDD\u9898\u662F\u4E00\u4E2A\u72EC\u7ACB\u4F1A\u8BDD\u3002"),
@@ -2284,13 +2323,10 @@ function buildHelpCard(scope, noMention = true) {
       note("\u5F00\u65B0\u8BDD\u9898\uFF1A\u56DE\u5230\u4E3B\u7FA4\u533A @\u6211 + \u5185\u5BB9\u3002")
     );
   } else {
-    elements.push(
-      md("\u{1F465} **\u4E3B\u7FA4\u533A** \u2014 @\u6211\u5F00\u8BDD\u9898\uFF0C\u6BCF\u4E2A\u8BDD\u9898\u662F\u72EC\u7ACB\u4F1A\u8BDD\u3002"),
-      hr(),
-      md(
-        "\xB7 **@\u6211 + \u5185\u5BB9** \u2192 \u5F00\u4E00\u4E2A\u65B0\u8BDD\u9898\u5E76\u5F00\u59CB\n\xB7 `/resume` \u2192 \u6062\u590D\u5386\u53F2\u4F1A\u8BDD\n\xB7 `/settings` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09\n\xB7 `/model` \u2192 \u9700\u8981\u5728\u8BDD\u9898\u91CC\u7528\n\xB7 `/help` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361"
-      )
-    );
+    const lines = ["\xB7 **@\u6211 + \u5185\u5BB9** \u2192 \u5F00\u4E00\u4E2A\u65B0\u8BDD\u9898\u5E76\u5F00\u59CB"];
+    if (isAdmin2) lines.push("\xB7 `/resume` \u2192 \u6062\u590D\u5386\u53F2\u4F1A\u8BDD", "\xB7 `/settings` \u2192 \u7FA4\u8BBE\u7F6E\uFF08\u514D@ \u5F00\u5173\uFF09");
+    lines.push("\xB7 `/model` \u2192 \u9700\u8981\u5728\u8BDD\u9898\u91CC\u7528", "\xB7 `/help` \u2192 \u8FD9\u5F20\u901F\u67E5\u5361");
+    elements.push(md("\u{1F465} **\u4E3B\u7FA4\u533A** \u2014 @\u6211\u5F00\u8BDD\u9898\uFF0C\u6BCF\u4E2A\u8BDD\u9898\u662F\u72EC\u7ACB\u4F1A\u8BDD\u3002"), hr(), md(lines.join("\n")));
   }
   return card(elements, { header: { title: "\u{1F916} \u53EF\u7528\u547D\u4EE4", template: "blue" }, summary: "\u53EF\u7528\u547D\u4EE4" });
 }
@@ -3097,6 +3133,7 @@ async function uploadBuffer(channel, buffer) {
 
 // src/project/registry.ts
 import { mkdir as mkdir4, readFile as readFile6, rename as rename4, writeFile as writeFile4 } from "fs/promises";
+import { randomUUID as randomUUID2 } from "crypto";
 import { dirname as dirname5 } from "path";
 function defaultNoMention(p) {
   return !((p.origin ?? "created") === "joined" && (p.kind ?? "multi") === "single");
@@ -3112,9 +3149,18 @@ async function read() {
     throw err;
   }
 }
+var opChain = Promise.resolve();
+function withLock(fn) {
+  const run = opChain.then(fn, fn);
+  opChain = run.then(
+    () => void 0,
+    () => void 0
+  );
+  return run;
+}
 async function write(projects) {
   await mkdir4(dirname5(paths.projectsFile), { recursive: true });
-  const tmp = `${paths.projectsFile}.tmp-${process.pid}`;
+  const tmp = `${paths.projectsFile}.tmp-${process.pid}-${randomUUID2()}`;
   const body = { version: FILE_VERSION2, projects };
   await writeFile4(tmp, `${JSON.stringify(body, null, 2)}
 `, "utf8");
@@ -3130,34 +3176,41 @@ async function getProjectByName(name) {
   return (await read()).find((p) => p.name === name);
 }
 async function addProject(p) {
-  const projects = await read();
-  if (projects.some((x) => x.name === p.name)) {
-    throw new Error(`\u9879\u76EE\u540D\u300C${p.name}\u300D\u5DF2\u5B58\u5728`);
-  }
-  if (p.chatId) {
-    const bound = projects.find((x) => x.chatId === p.chatId);
-    if (bound) throw new Error(`\u8BE5\u7FA4\u5DF2\u7ED1\u5B9A\u4E3A\u9879\u76EE\u300C${bound.name}\u300D`);
-  }
-  projects.push(p);
-  await write(projects);
+  return withLock(async () => {
+    const projects = await read();
+    if (projects.some((x) => x.name === p.name)) {
+      throw new Error(`\u9879\u76EE\u540D\u300C${p.name}\u300D\u5DF2\u5B58\u5728`);
+    }
+    if (p.chatId) {
+      const bound = projects.find((x) => x.chatId === p.chatId);
+      if (bound) throw new Error(`\u8BE5\u7FA4\u5DF2\u7ED1\u5B9A\u4E3A\u9879\u76EE\u300C${bound.name}\u300D`);
+    }
+    projects.push(p);
+    await write(projects);
+  });
 }
 async function updateProject(name, patch) {
-  const projects = await read();
-  const p = projects.find((x) => x.name === name);
-  if (!p) return;
-  const target = p;
-  for (const [k, v] of Object.entries(patch)) {
-    if (v !== void 0) target[k] = v;
-  }
-  await write(projects);
+  return withLock(async () => {
+    const projects = await read();
+    const p = projects.find((x) => x.name === name);
+    if (!p) return;
+    const actual = typeof patch === "function" ? patch(p) : patch;
+    const target = p;
+    for (const [k, v] of Object.entries(actual)) {
+      if (v !== void 0) target[k] = v;
+    }
+    await write(projects);
+  });
 }
 async function removeProject(name) {
-  const projects = await read();
-  const idx = projects.findIndex((p) => p.name === name);
-  if (idx === -1) return void 0;
-  const [removed] = projects.splice(idx, 1);
-  await write(projects);
-  return removed;
+  return withLock(async () => {
+    const projects = await read();
+    const idx = projects.findIndex((p) => p.name === name);
+    if (idx === -1) return void 0;
+    const [removed] = projects.splice(idx, 1);
+    await write(projects);
+    return removed;
+  });
 }
 
 // src/card/dm-cards.ts
@@ -3182,7 +3235,19 @@ var DM = {
   setTools: "dm.set.tools",
   setWatchdog: "dm.set.watchdog",
   setPending: "dm.set.pending",
-  setConcurrency: "dm.set.concurrency"
+  setConcurrency: "dm.set.concurrency",
+  // 权限管理：全局 admins（settings 卡进入）+ 项目响应白名单（项目列表 / 建项目完成卡进入）
+  admins: "dm.admins",
+  addAdminForm: "dm.admin.addForm",
+  addAdminSubmit: "dm.admin.addSubmit",
+  rmAdmin: "dm.admin.rm",
+  allowlist: "dm.allowlist",
+  addAllowedForm: "dm.allow.addForm",
+  addAllowedSubmit: "dm.allow.addSubmit",
+  rmAllowed: "dm.allow.rm",
+  // 项目设置容器（项目列表 / 建项目完成卡 进入），以后的项目级设置项往这里加
+  projectSettings: "dm.projectSettings",
+  setNoMentionDm: "dm.proj.noMention"
 };
 var GS = {
   setNoMention: "gs.noMention"
@@ -3448,7 +3513,13 @@ function buildNewProjectDoneCard(p) {
     note(`\u{1F4C2} \`${p.cwd}\`   \xB7   ${kindLabel(p.kind)}`),
     md(p.chatId ? "\u{1F449} \u53BB\u7FA4\u91CC **@\u6211** \u5E72\u6D3B\u3002" : "\u53D1\u6211\u4EFB\u610F\u6D88\u606F\u53EF\u518D\u6B21\u6253\u5F00\u7BA1\u7406\u53F0\u3002")
   ];
-  if (p.chatId) elements.push(actions([linkButton("\u{1F4AC} \u6253\u5F00\u7FA4\u804A", openChatUrl(p.chatId), "primary")]));
+  if (p.chatId)
+    elements.push(
+      actions([
+        linkButton("\u{1F4AC} \u6253\u5F00\u7FA4\u804A", openChatUrl(p.chatId), "primary"),
+        button("\u2699\uFE0F \u9879\u76EE\u8BBE\u7F6E", { a: DM.projectSettings, n: p.name })
+      ])
+    );
   return card(elements, { header: { title, template: "green" } });
 }
 function buildProjectListCard(projects, sessionsByChat = /* @__PURE__ */ new Map()) {
@@ -3479,6 +3550,7 @@ function buildProjectListCard(projects, sessionsByChat = /* @__PURE__ */ new Map
     }
     const row = [];
     if (p.chatId) row.push(linkButton("\u{1F4AC} \u6253\u5F00\u7FA4\u804A", openChatUrl(p.chatId)));
+    row.push(button("\u2699\uFE0F \u8BBE\u7F6E", { a: DM.projectSettings, n: p.name }));
     row.push(button("\u{1F5D1} \u5220\u9664", { a: DM.rmConfirm, n: p.name }, "danger"));
     elements.push(actions(row));
     elements.push(hr());
@@ -3533,7 +3605,8 @@ function buildSettingsCard(cfg) {
         { label: "20", value: "20" }
       ]),
       note("\u26A0\uFE0F \u5047\u6B7B\u8D85\u65F6 / \u5E76\u53D1\u4E0A\u9650 \u6539\u540E\u9700**\u91CD\u542F**\u751F\u6548\uFF1B\u5DE5\u5177\u663E\u793A / \u8FD0\u884C\u4E2D\u65B0\u6D88\u606F \u5373\u65F6\u751F\u6548\u3002"),
-      actions([button("\u2B05\uFE0F \u83DC\u5355", { a: DM.menu })])
+      hr(),
+      actions([button("\u{1F46E} \u7BA1\u7406\u5458", { a: DM.admins }), button("\u2B05\uFE0F \u83DC\u5355", { a: DM.menu })])
     ],
     { header: { title: "\u2699\uFE0F \u8BBE\u7F6E", template: "blue" } }
   );
@@ -3556,6 +3629,146 @@ function buildGroupSettingsCard(project) {
     { header: { title: "\u2699\uFE0F \u7FA4\u8BBE\u7F6E", template: "blue" } }
   );
 }
+function memberName(names, id) {
+  return names.get(id) ?? `\u2026${id.slice(-6)}`;
+}
+function buildAdminsCard(cfg, names) {
+  const owner = resolveOwner(cfg);
+  const admins = cfg.preferences?.access?.admins ?? [];
+  const elements = [md("**\u7BA1\u7406\u5458\u540D\u5355** \xB7 \u672C bot \u5168\u5C40\uFF08\u53EF\u79C1\u804A\u7BA1\u7406 / \u5EFA\u9879\u76EE / \u9500\u6BC1\u64CD\u4F5C\uFF09"), hr()];
+  const seen = /* @__PURE__ */ new Set();
+  if (owner) {
+    seen.add(owner);
+    elements.push(actions([md(`\u{1F451} **${memberName(names, owner)}** \xB7 Bot \u62E5\u6709\u8005\uFF08\u6CE8\u518C\u8005\uFF09`)]));
+  }
+  let extra = 0;
+  for (const id of admins) {
+    if (seen.has(id)) continue;
+    seen.add(id);
+    extra++;
+    elements.push(actions([md(memberName(names, id)), button("\u{1F5D1} \u79FB\u9664", { a: DM.rmAdmin, u: id }, "danger")]));
+  }
+  if (extra === 0) elements.push(note("\u6682\u65E0\u989D\u5916\u7BA1\u7406\u5458\u3002"));
+  elements.push(
+    hr(),
+    actions([button("\u2795 \u6DFB\u52A0\u7BA1\u7406\u5458", { a: DM.addAdminForm }, "primary"), button("\u2B05\uFE0F \u8BBE\u7F6E", { a: DM.settings })]),
+    note("\u{1F451} Bot \u62E5\u6709\u8005\uFF08\u6CE8\u518C\u6B64 bot \u7684\u4EBA\uFF09\u6052\u4E3A\u7BA1\u7406\u5458\uFF0C\u4E0D\u53EF\u79FB\u9664\uFF1B\u540D\u5355\u4E3A\u7A7A\u65F6\u4EC5\u62E5\u6709\u8005\u53EF\u7BA1\u7406\u3002")
+  );
+  return card(elements, { header: { title: "\u{1F46E} \u7BA1\u7406\u5458", template: "blue" } });
+}
+function buildAddAdminCard(members) {
+  const MAX = 50;
+  const shown = members.slice(0, MAX);
+  const formEls = [];
+  if (shown.length > 0) {
+    formEls.push(
+      selectMenu({
+        name: "pick",
+        placeholder: "\u4ECE\u9879\u76EE\u7FA4\u6210\u5458\u9009\u62E9",
+        options: shown.map((m) => ({ label: m.name, value: m.openId }))
+      })
+    );
+  }
+  formEls.push(
+    input({
+      name: "open_id",
+      label: shown.length ? "\u6216\u76F4\u63A5\u8F93\u5165 open_id" : "\u8F93\u5165 open_id\uFF08\u672A\u8BFB\u53D6\u5230\u9879\u76EE\u7FA4\u6210\u5458\uFF09",
+      placeholder: "ou_xxx"
+    }),
+    actions([submitButton("\u2705 \u786E\u8BA4\u6DFB\u52A0", { a: DM.addAdminSubmit }, "primary", "submit_admin")])
+  );
+  const tail = [];
+  if (members.length > MAX) tail.push(note(`\u5019\u9009\u8F83\u591A\uFF0C\u4EC5\u5217\u524D ${MAX} \u4E2A\uFF1B\u5176\u4F59\u8BF7\u76F4\u63A5\u8F93\u5165 open_id\u3002`));
+  return card(
+    [
+      md("**\u6DFB\u52A0\u7BA1\u7406\u5458** \xB7 \u4ECE\u9879\u76EE\u7FA4\u6210\u5458\u9009\uFF0C\u6216\u8F93\u5165 open_id"),
+      form("add_admin", formEls),
+      ...tail,
+      actions([button("\u2B05\uFE0F \u53D6\u6D88", { a: DM.admins })])
+    ],
+    { header: { title: "\u2795 \u6DFB\u52A0\u7BA1\u7406\u5458", template: "blue" } }
+  );
+}
+function buildProjectSettingsCard(project) {
+  const kind = project.kind ?? "multi";
+  const noMention = project.noMention ?? defaultNoMention(project);
+  return card(
+    [
+      md(`**\u9879\u76EE\u8BBE\u7F6E** \xB7 ${project.name}`),
+      note(`${kindLabel(kind)}${project.cwd ? `   \xB7   \u{1F4C2} \`${project.cwd}\`` : ""}`),
+      hr(),
+      md("\u270B \u514D@\uFF08\u4E0D\u7528 @ \u4E5F\u56DE\u590D\uFF09"),
+      actions([
+        button("\u5F00", { a: DM.setNoMentionDm, v: "on", n: project.name }, noMention ? "primary" : "default"),
+        button("\u5173", { a: DM.setNoMentionDm, v: "off", n: project.name }, noMention ? "default" : "primary")
+      ]),
+      note(
+        kind === "single" ? "\u5F00\u542F\u540E\uFF1A\u672C\u7FA4\u6240\u6709\u6D88\u606F(\u4E0D\u7528 @)\u90FD\u4EA4\u7ED9\u6211\u5904\u7406\u3002" : "\u5F00\u542F\u540E\uFF1A\u8BDD\u9898\u5185\u6D88\u606F(\u4E0D\u7528 @)\u90FD\u5904\u7406\uFF1B**\u5F00\u65B0\u8BDD\u9898\u4ECD\u9700 @\u6211**\u3002"
+      ),
+      hr(),
+      actions([button("\u{1F6E1} \u54CD\u5E94\u767D\u540D\u5355", { a: DM.allowlist, n: project.name }, "primary")]),
+      note("\u8BBE\u7F6E\u8C01\u80FD\u8BA9\u6211\u5728\u672C\u7FA4\u54CD\u5E94 / \u8DD1 codex\uFF08\u7A7A = \u6240\u6709\u4EBA\uFF09\u3002"),
+      hr(),
+      actions([button("\u2B05\uFE0F \u9879\u76EE\u5217\u8868", { a: DM.projects })])
+    ],
+    { header: { title: "\u2699\uFE0F \u9879\u76EE\u8BBE\u7F6E", template: "blue" } }
+  );
+}
+function buildAllowlistCard(project, names) {
+  const list = project.allowedUsers ?? [];
+  const elements = [md(`**\u54CD\u5E94\u767D\u540D\u5355** \xB7 ${project.name}`), note("\u8C01\u80FD\u8BA9\u6211\u5728\u672C\u7FA4\u54CD\u5E94 / \u8DD1 codex"), hr()];
+  if (list.length === 0) {
+    elements.push(note("\u5F53\u524D**\u6240\u6709\u4EBA**\u53EF\u7528\uFF08\u7BA1\u7406\u5458\u59CB\u7EC8\u53EF\u7528\uFF09\u3002"));
+  } else {
+    for (const id of list) {
+      elements.push(
+        actions([md(memberName(names, id)), button("\u{1F5D1} \u79FB\u9664", { a: DM.rmAllowed, u: id, n: project.name }, "danger")])
+      );
+    }
+  }
+  elements.push(
+    hr(),
+    actions([
+      button("\u2795 \u6DFB\u52A0", { a: DM.addAllowedForm, n: project.name }, "primary"),
+      button("\u2B05\uFE0F \u8BBE\u7F6E", { a: DM.projectSettings, n: project.name })
+    ]),
+    note("\u7BA1\u7406\u5458\u59CB\u7EC8\u53EF\u7528\uFF0C\u4E0D\u53D7\u6B64\u540D\u5355\u9650\u5236\uFF1B\u540D\u5355\u4E3A\u7A7A = \u6240\u6709\u4EBA\u53EF\u7528\u3002")
+  );
+  return card(elements, { header: { title: "\u{1F6E1} \u54CD\u5E94\u767D\u540D\u5355", template: "blue" } });
+}
+function buildAddAllowedCard(projectName, members) {
+  const MAX = 50;
+  const shown = members.slice(0, MAX);
+  const formEls = [];
+  if (shown.length > 0) {
+    formEls.push(
+      selectMenu({
+        name: "pick",
+        placeholder: "\u4ECE\u7FA4\u6210\u5458\u9009\u62E9",
+        options: shown.map((m) => ({ label: m.name, value: m.openId }))
+      })
+    );
+  }
+  formEls.push(
+    input({
+      name: "open_id",
+      label: shown.length ? "\u6216\u76F4\u63A5\u8F93\u5165 open_id" : "\u8F93\u5165 open_id\uFF08\u672A\u8BFB\u53D6\u5230\u7FA4\u6210\u5458\uFF09",
+      placeholder: "ou_xxx"
+    }),
+    actions([submitButton("\u2705 \u786E\u8BA4\u6DFB\u52A0", { a: DM.addAllowedSubmit, n: projectName }, "primary", "submit_allowed")])
+  );
+  const tail = [];
+  if (members.length > MAX) tail.push(note(`\u7FA4\u6210\u5458\u8F83\u591A\uFF0C\u4EC5\u5217\u524D ${MAX} \u4E2A\uFF1B\u5176\u4F59\u8BF7\u76F4\u63A5\u8F93\u5165 open_id\u3002`));
+  return card(
+    [
+      md(`**\u6DFB\u52A0\u53EF\u4F7F\u7528\u300C${projectName}\u300D\u7684\u4EBA**`),
+      form("add_allowed", formEls),
+      ...tail,
+      actions([button("\u2B05\uFE0F \u53D6\u6D88", { a: DM.allowlist, n: projectName })])
+    ],
+    { header: { title: "\u2795 \u6DFB\u52A0\u767D\u540D\u5355\u6210\u5458", template: "blue" } }
+  );
+}
 
 // src/service/update.ts
 import { existsSync as existsSync6, readFileSync as readFileSync3 } from "fs";
@@ -4829,6 +5042,59 @@ var Semaphore = class {
 };
 
 // src/bot/handle-message.ts
+async function resolveNames(channel, ids) {
+  const uniq = [...new Set(ids.filter((x) => Boolean(x)))];
+  const out = /* @__PURE__ */ new Map();
+  if (uniq.length === 0) return out;
+  try {
+    const r = await channel.rawClient.contact.v3.user.batch({
+      params: { user_ids: uniq, user_id_type: "open_id" }
+    });
+    for (const it of r.data?.items ?? []) {
+      if (it.open_id && it.name) out.set(it.open_id, it.name);
+    }
+  } catch (err) {
+    log.info("console", "resolve-names-fail", { n: uniq.length, err: String(err) });
+  }
+  return out;
+}
+async function fetchChatMembers(channel, chatId) {
+  try {
+    const r = await channel.rawClient.im.v1.chatMembers.get({
+      path: { chat_id: chatId },
+      params: { member_id_type: "open_id", page_size: 100 }
+    });
+    const out = [];
+    for (const it of r.data?.items ?? []) {
+      if (it.member_id) out.push({ openId: it.member_id, name: it.name || `\u2026${it.member_id.slice(-6)}` });
+    }
+    return out;
+  } catch (err) {
+    log.info("console", "fetch-members-fail", { chatId: chatId.slice(-6), err: String(err) });
+    return [];
+  }
+}
+async function fetchAllProjectMembers(channel) {
+  const projects = await listProjects();
+  const lists = await Promise.all(projects.filter((p) => p.chatId).map((p) => fetchChatMembers(channel, p.chatId)));
+  const seen = /* @__PURE__ */ new Map();
+  for (const members of lists) {
+    for (const m of members) if (!seen.has(m.openId)) seen.set(m.openId, m.name);
+  }
+  return [...seen].map(([openId, name]) => ({ openId, name }));
+}
+function pickOpenId(formValue) {
+  const raw = formValue?.pick;
+  const cands = Array.isArray(raw) ? raw : [raw];
+  for (const c of cands) {
+    if (typeof c === "string" && c.startsWith("ou_")) return c;
+    if (c && typeof c === "object") {
+      const o = c;
+      for (const v of [o.open_id, o.id, o.value]) if (typeof v === "string" && v.startsWith("ou_")) return v;
+    }
+  }
+  return void 0;
+}
 function createOrchestrator(channel, cfg, fallbackCwd) {
   const backend = createBackend();
   const sessions = /* @__PURE__ */ new Map();
@@ -4906,7 +5172,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     }
     const project = await getProjectByChatId(msg.chatId);
     if (!msg.mentionedBot && !(project && shouldRespondWithoutMention(project, msg))) return;
-    if (!isChatAllowed(cfg, msg.chatId) || !isUserAllowed(cfg, msg.senderId)) {
+    if (!isChatAllowed(cfg, msg.chatId) || !isUserAllowedInProject(cfg, project, msg.senderId)) {
       log.info("intake", "reject", { reason: "not_allowed", chatId: msg.chatId.slice(-6) });
       return;
     }
@@ -4980,9 +5246,13 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     if ((project.kind ?? "multi") === "single") return true;
     return Boolean(msg.threadId) || parseCommand(msg.content.trim()) !== null;
   }
+  async function denyAdminCommand(msg, cmd) {
+    await channel.send(msg.chatId, { markdown: `\u26A0\uFE0F \`/${cmd}\` \u4EC5 bot \u7BA1\u7406\u5458\u53EF\u7528\u3002` }, { replyTo: msg.messageId }).catch(() => void 0);
+    log.info("intake", "cmd-denied", { cmd });
+  }
   async function postGroupSettings(msg, project) {
     if (!isAdmin(cfg, msg.senderId)) {
-      await channel.send(msg.chatId, { markdown: "\u4EC5\u7BA1\u7406\u5458\u53EF\u6539\u7FA4\u8BBE\u7F6E\u3002" }, { replyTo: msg.messageId }).catch(() => void 0);
+      await denyAdminCommand(msg, "settings");
       return;
     }
     if (!project) {
@@ -5134,6 +5404,10 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     }).catch((err) => log.fail("intake", err));
   }
   async function postResumeCard(msg) {
+    if (!isAdmin(cfg, msg.senderId)) {
+      await denyAdminCommand(msg, "resume");
+      return;
+    }
     await withTrace({ chatId: msg.chatId, msgId: msg.messageId }, async () => {
       const project = await getProjectByChatId(msg.chatId);
       const cwd = project?.cwd ?? fallbackCwd;
@@ -5175,7 +5449,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
   async function postHelpCard(msg, scope, inThread = false, project) {
     const noMention = project ? project.noMention ?? defaultNoMention(project) : true;
     await withTrace({ chatId: msg.chatId, msgId: msg.messageId }, async () => {
-      await sendManagedCard(channel, msg.chatId, buildHelpCard(scope, noMention), msg.messageId, inThread).catch(
+      await sendManagedCard(channel, msg.chatId, buildHelpCard(scope, noMention, isAdmin(cfg, msg.senderId)), msg.messageId, inThread).catch(
         (err) => log.fail("card", err, { cmd: "help", scope })
       );
       log.info("card", "help", { scope });
@@ -5214,7 +5488,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
       return void 0;
     }
     const op = evt.operator?.openId ?? "";
-    if (op !== state.requesterOpenId || !isChatAllowed(cfg, state.chatId) || !isUserAllowed(cfg, op)) {
+    if (op !== state.requesterOpenId || !isChatAllowed(cfg, state.chatId)) {
       log.info("card", "action-denied", { reason: "not-allowed" });
       return void 0;
     }
@@ -5250,7 +5524,7 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
     settleUpdate(evt.messageId, buildResumeLaunchingCard(state));
     void resumeFromCard(evt, state, codexThreadId);
   });
-  const runAllowed = (evt) => isChatAllowed(cfg, evt.chatId) && isUserAllowed(cfg, evt.operator?.openId ?? "");
+  const runAllowed = (evt) => isChatAllowed(cfg, evt.chatId);
   const runOwnerOrAdmin = (evt, ownerOpenId) => {
     if (!runAllowed(evt)) return false;
     const op = evt.operator?.openId ?? "";
@@ -5265,6 +5539,15 @@ function createOrchestrator(channel, cfg, fallbackCwd) {
   });
   const dmAdmin = (openId) => isAdmin(cfg, openId ?? "");
   const patch = (evt, c) => settleUpdate(evt.messageId, c, evt.chatId);
+  const namesWithOperator = async (evt, ids) => {
+    const m = await resolveNames(channel, ids);
+    if (ids.some((id) => id && !m.has(id))) {
+      for (const mem of await fetchAllProjectMembers(channel)) if (!m.has(mem.openId)) m.set(mem.openId, mem.name);
+    }
+    const op = evt.operator;
+    if (op?.openId && op.name && !m.has(op.openId)) m.set(op.openId, op.name);
+    return m;
+  };
   function applyPref(evt, mut) {
     if (!dmAdmin(evt.operator?.openId)) return;
     const prefs = { ...cfg.preferences ?? {} };
@@ -5488,6 +5771,107 @@ ${tail}` }, { replyTo: evt.messageId }).catch(() => void 0);
       }
       return buildGroupSettingsCard({ name: "\u672C\u7FA4", kind: "multi", noMention: on });
     });
+  }).on(DM.admins, ({ evt }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    patch(
+      evt,
+      async () => buildAdminsCard(cfg, await namesWithOperator(evt, [resolveOwner(cfg), ...cfg.preferences?.access?.admins ?? []]))
+    );
+  }).on(DM.addAdminForm, ({ evt }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    patch(evt, async () => {
+      const all = await fetchAllProjectMembers(channel);
+      const members = all.filter((m) => !isAdmin(cfg, m.openId));
+      return buildAddAdminCard(members);
+    });
+  }).on(DM.addAdminSubmit, ({ evt, formValue }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const manual = String(formValue?.open_id ?? "").trim();
+    const id = manual.startsWith("ou_") ? manual : pickOpenId(formValue);
+    log.info("console", "admin-add", { picked: id?.slice(-6) ?? null });
+    void (async () => {
+      if (id) {
+        const access = { ...cfg.preferences?.access ?? {} };
+        access.ownerOpenId ??= resolveOwner(cfg);
+        access.admins = Array.from(/* @__PURE__ */ new Set([...access.admins ?? [], id]));
+        cfg.preferences = { ...cfg.preferences ?? {}, access };
+        await saveConfig(cfg).catch((e) => log.fail("console", e, { phase: "save-config" }));
+      }
+      const ids = [resolveOwner(cfg), ...cfg.preferences?.access?.admins ?? []];
+      const next = buildAdminsCard(cfg, await namesWithOperator(evt, ids));
+      await sendManagedCard(channel, evt.chatId, next).catch((e) => log.fail("console", e, { phase: "admin-add-result" }));
+    })();
+  }).on(DM.rmAdmin, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const id = typeof value.u === "string" ? value.u : "";
+    patch(evt, async () => {
+      if (id && id !== resolveOwner(cfg)) {
+        const access = { ...cfg.preferences?.access ?? {} };
+        access.ownerOpenId ??= resolveOwner(cfg);
+        access.admins = (access.admins ?? []).filter((x) => x !== id);
+        cfg.preferences = { ...cfg.preferences ?? {}, access };
+        await saveConfig(cfg).catch((e) => log.fail("console", e, { phase: "save-config" }));
+      }
+      const ids = [resolveOwner(cfg), ...cfg.preferences?.access?.admins ?? []];
+      return buildAdminsCard(cfg, await namesWithOperator(evt, ids));
+    });
+  }).on(DM.allowlist, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const name = typeof value.n === "string" ? value.n : "";
+    patch(evt, async () => {
+      const p = await getProjectByName(name);
+      if (!p) return buildDmMenuCard();
+      return buildAllowlistCard(p, await namesWithOperator(evt, p.allowedUsers ?? []));
+    });
+  }).on(DM.addAllowedForm, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const name = typeof value.n === "string" ? value.n : "";
+    if (!name) return;
+    patch(evt, async () => {
+      const p = await getProjectByName(name);
+      const members = p?.chatId ? await fetchChatMembers(channel, p.chatId) : [];
+      return buildAddAllowedCard(name, members);
+    });
+  }).on(DM.addAllowedSubmit, ({ evt, value, formValue }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const name = typeof value.n === "string" ? value.n : "";
+    const manual = String(formValue?.open_id ?? "").trim();
+    const id = manual.startsWith("ou_") ? manual : pickOpenId(formValue);
+    log.info("console", "allow-add", { project: name, picked: id?.slice(-6) ?? null });
+    void (async () => {
+      if (id) await updateProject(name, (p) => ({ allowedUsers: Array.from(/* @__PURE__ */ new Set([...p.allowedUsers ?? [], id])) }));
+      const fresh = await getProjectByName(name);
+      if (!fresh) return;
+      const card2 = buildAllowlistCard(fresh, await namesWithOperator(evt, fresh.allowedUsers ?? []));
+      await sendManagedCard(channel, evt.chatId, card2).catch((e) => log.fail("console", e, { phase: "allow-add-result" }));
+    })();
+  }).on(DM.rmAllowed, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const id = typeof value.u === "string" ? value.u : "";
+    const name = typeof value.n === "string" ? value.n : "";
+    patch(evt, async () => {
+      await updateProject(name, (p) => ({ allowedUsers: (p.allowedUsers ?? []).filter((x) => x !== id) }));
+      const fresh = await getProjectByName(name);
+      if (!fresh) return buildDmMenuCard();
+      return buildAllowlistCard(fresh, await namesWithOperator(evt, fresh.allowedUsers ?? []));
+    });
+  }).on(DM.projectSettings, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const name = typeof value.n === "string" ? value.n : "";
+    patch(evt, async () => {
+      const p = await getProjectByName(name);
+      return p ? buildProjectSettingsCard(p) : buildDmMenuCard();
+    });
+  }).on(DM.setNoMentionDm, ({ evt, value }) => {
+    if (!dmAdmin(evt.operator?.openId)) return;
+    const name = typeof value.n === "string" ? value.n : "";
+    const on = value.v === "on";
+    patch(evt, async () => {
+      const p = await getProjectByName(name);
+      if (!p) return buildDmMenuCard();
+      await updateProject(name, { noMention: on });
+      return buildProjectSettingsCard({ ...p, noMention: on });
+    });
   });
   async function resumeFromCard(evt, state, codexThreadId) {
     try {
@@ -5737,8 +6121,6 @@ ${tail}` }, { replyTo: evt.messageId }).catch(() => void 0);
       if (!evt.mentionedBot) return log.info("comment", "skip", { reason: "not-mentioned" });
       if (!SUPPORTED_FILE_TYPES.has(evt.fileType))
         return log.info("comment", "skip", { reason: "unsupported-fileType", fileType: evt.fileType });
-      if (!isUserAllowed(cfg, evt.operator.openId))
-        return log.info("comment", "skip", { reason: "not-allowed" });
       const resolved = await resolveComment(channel, evt);
       if (!resolved) return log.info("comment", "skip", { reason: "no-target-or-empty" });
       const { target, ctx } = resolved;
@@ -5956,6 +6338,94 @@ async function startBridge(opts) {
   return { channel, shutdown };
 }
 
+// src/bot/supervisor.ts
+var BACKOFF_MIN_MS = 1e3;
+var BACKOFF_MAX_MS = 3e4;
+var HEALTHY_UPTIME_MS = 6e4;
+var SHUTDOWN_GRACE_MS = 8e3;
+async function runSupervisor(bots) {
+  const cliEntry = process.argv[1];
+  if (!cliEntry) throw new Error("supervisor: \u65E0\u6CD5\u89E3\u6790 CLI \u5165\u53E3\uFF08process.argv[1] \u4E3A\u7A7A\uFF09");
+  const childEnv = { ...process.env };
+  delete childEnv[SERVICE_ENV_FLAG];
+  let shuttingDown = false;
+  const children = bots.map((bot2) => ({ bot: bot2, backoffMs: BACKOFF_MIN_MS, startedAt: 0 }));
+  console.log(`
+\u6B63\u5728\u542F\u52A8 ${bots.length} \u4E2A\u673A\u5668\u4EBA\uFF08\u5404\u81EA\u72EC\u7ACB\u8FDB\u7A0B\uFF09\uFF1A`);
+  for (const b of bots) console.log(`  \u2022 ${b.name}  (${b.appId})  [${b.tenant}]`);
+  console.log("Ctrl+C \u9000\u51FA\uFF08\u5173\u95ED\u5168\u90E8\uFF09\u3002\n");
+  const prefixPipe = (name, src, dst) => {
+    if (!src) return;
+    let buf = "";
+    src.setEncoding("utf8");
+    src.on("data", (chunk) => {
+      buf += chunk;
+      let nl;
+      while ((nl = buf.indexOf("\n")) >= 0) {
+        const line = buf.slice(0, nl);
+        buf = buf.slice(nl + 1);
+        dst.write(`\x1B[2m[${name}]\x1B[0m ${line}
+`);
+      }
+    });
+    src.on("end", () => {
+      if (buf) dst.write(`\x1B[2m[${name}]\x1B[0m ${buf}
+`);
+    });
+  };
+  const spawnChild = (c) => {
+    c.startedAt = Date.now();
+    const proc = spawnProcess(process.execPath, [cliEntry, "run", "--bot", c.bot.appId], {
+      stdio: ["ignore", "pipe", "pipe"],
+      env: childEnv
+    });
+    c.proc = proc;
+    log.info("supervisor", "child-start", { bot: c.bot.name, appId: c.bot.appId, pid: proc.pid ?? null });
+    prefixPipe(c.bot.name, proc.stdout, process.stdout);
+    prefixPipe(c.bot.name, proc.stderr, process.stderr);
+    proc.on("exit", (code, signal) => {
+      c.proc = void 0;
+      if (shuttingDown) return;
+      const uptime = Date.now() - c.startedAt;
+      if (uptime >= HEALTHY_UPTIME_MS) c.backoffMs = BACKOFF_MIN_MS;
+      const wait = c.backoffMs;
+      c.backoffMs = Math.min(c.backoffMs * 2, BACKOFF_MAX_MS);
+      log.warn("supervisor", "child-exit", { bot: c.bot.name, code, signal, restartInMs: wait });
+      console.error(
+        `\x1B[2m[${c.bot.name}]\x1B[0m \u8FDB\u7A0B\u9000\u51FA\uFF08code=${code ?? signal ?? "?"}\uFF09\uFF0C${Math.round(wait / 1e3)}s \u540E\u91CD\u542F\u2026`
+      );
+      c.restartTimer = setTimeout(() => spawnChild(c), wait);
+    });
+    proc.on("error", (err) => {
+      log.fail("supervisor", err, { bot: c.bot.name, phase: "spawn" });
+    });
+  };
+  for (const c of children) spawnChild(c);
+  await new Promise((resolve7) => {
+    const stop = (sig) => {
+      if (shuttingDown) return;
+      shuttingDown = true;
+      console.log(`
+\u6536\u5230 ${sig}\uFF0C\u6B63\u5728\u5173\u95ED\u5168\u90E8\u673A\u5668\u4EBA\u2026`);
+      for (const c of children) {
+        if (c.restartTimer) clearTimeout(c.restartTimer);
+        c.proc?.kill("SIGTERM");
+      }
+      const deadline = Date.now() + SHUTDOWN_GRACE_MS;
+      const poll = setInterval(() => {
+        const alive = children.filter((c) => c.proc && !c.proc.killed);
+        if (alive.length === 0 || Date.now() >= deadline) {
+          clearInterval(poll);
+          for (const c of alive) c.proc?.kill("SIGKILL");
+          resolve7();
+        }
+      }, 200);
+    };
+    for (const sig of ["SIGINT", "SIGTERM"]) process.once(sig, () => stop(sig));
+  });
+  process.exit(0);
+}
+
 // src/core/single-instance.ts
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync4, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname11 } from "path";
@@ -6003,8 +6473,20 @@ function acquireSingleInstanceLock(appId) {
 }
 
 // src/cli/commands/run.ts
-async function runRun() {
-  const ready = await ensureOnboarded({ allowCreate: true });
+async function runRun(botName) {
+  if (botName) {
+    await runSingle(botName);
+    return;
+  }
+  const active = activeBots(await loadBots());
+  if (active.length > 1) {
+    await runSupervisor(active);
+    return;
+  }
+  await runSingle(active[0]?.name);
+}
+async function runSingle(botName) {
+  const ready = await ensureOnboarded({ allowCreate: !botName, bot: botName });
   if (!ready) {
     process.exitCode = 1;
     return;
@@ -6047,14 +6529,37 @@ async function runRun() {
 
 // src/cli/commands/daemon.ts
 async function runStart() {
-  const ready = await ensureOnboarded({ allowCreate: true });
-  if (!ready) {
-    process.exitCode = 1;
-    return;
-  }
-  if (!await confirmReadyForDaemon(ready)) {
-    process.exitCode = 1;
-    return;
+  const active = activeBots(await loadBots());
+  if (active.length === 0) {
+    const ready = await ensureOnboarded({ allowCreate: true });
+    if (!ready) {
+      process.exitCode = 1;
+      return;
+    }
+    if (!await confirmReadyForDaemon(ready)) {
+      process.exitCode = 1;
+      return;
+    }
+  } else {
+    if (active.length > 1) {
+      console.log(`
+\u540E\u53F0\u670D\u52A1\u5C06\u6258\u7BA1 ${active.length} \u4E2A\u673A\u5668\u4EBA\uFF08supervisor \u591A\u8FDB\u7A0B\uFF0C\u5404\u81EA\u72EC\u7ACB\u8FDB\u7A0B\uFF09\uFF1A`);
+      for (const b of active) console.log(`  \u2022 ${b.name}  (${b.appId})  [${b.tenant}]`);
+      console.log("");
+    }
+    for (const bot2 of active) {
+      if (active.length > 1) console.log(`
+\u2500\u2500\u2500\u2500 \u673A\u5668\u4EBA\u300C${bot2.name}\u300D(${bot2.appId}) \u2500\u2500\u2500\u2500`);
+      const ready = await ensureOnboarded({ bot: bot2.appId });
+      if (!ready) {
+        process.exitCode = 1;
+        return;
+      }
+      if (!await confirmReadyForDaemon(ready)) {
+        process.exitCode = 1;
+        return;
+      }
+    }
   }
   const status = await getServiceAdapter().install();
   console.log(installedNote());
@@ -6151,6 +6656,98 @@ async function runUpdate(opts = {}) {
 
 // src/cli/commands/bot.ts
 import { rm as rm5 } from "fs/promises";
+
+// src/cli/checkbox.ts
+import { emitKeypressEvents } from "readline";
+var ESC = "\x1B";
+var HIDE_CURSOR = `${ESC}[?25l`;
+var SHOW_CURSOR = `${ESC}[?25h`;
+var ALT_SCREEN_ON = `${ESC}[?1049h`;
+var ALT_SCREEN_OFF = `${ESC}[?1049l`;
+var HOME_AND_CLEAR = `${ESC}[H${ESC}[2J`;
+async function checkboxSelect(title, items) {
+  const input2 = process.stdin;
+  const output = process.stdout;
+  if (!input2.isTTY) throw new Error("checkboxSelect requires an interactive TTY");
+  const checked = items.map((it) => Boolean(it.checked));
+  let cursor = 0;
+  const frame = () => {
+    const lines = [title, ""];
+    items.forEach((it, i) => {
+      const box = checked[i] ? "\x1B[32m[x]\x1B[0m" : "[ ]";
+      const pointer = i === cursor ? "\x1B[36m>\x1B[0m" : " ";
+      const label = i === cursor ? `\x1B[1m${it.label}\x1B[0m` : it.label;
+      const hint = it.hint ? `  \x1B[2m${it.hint}\x1B[0m` : "";
+      lines.push(`${pointer} ${box} ${label}${hint}`);
+    });
+    const n = checked.filter(Boolean).length;
+    lines.push("");
+    lines.push(`\x1B[2m${n} \u4E2A\u5DF2\u52FE\u9009 \xB7 \u2191\u2193 \u79FB\u52A8 \xB7 \u7A7A\u683C\u52FE\u9009 \xB7 a \u5168\u9009 \xB7 \u56DE\u8F66\u786E\u8BA4 \xB7 q \u53D6\u6D88\x1B[0m`);
+    return lines.join("\r\n");
+  };
+  const redraw = () => {
+    output.write(HOME_AND_CLEAR + frame());
+  };
+  emitKeypressEvents(input2);
+  const wasRaw = Boolean(input2.isRaw);
+  let restored = false;
+  const restore = () => {
+    if (restored) return;
+    restored = true;
+    output.write(`${SHOW_CURSOR}${ALT_SCREEN_OFF}`);
+  };
+  input2.setRawMode?.(true);
+  input2.resume();
+  output.write(`${ALT_SCREEN_ON}${HIDE_CURSOR}`);
+  process.once("exit", restore);
+  redraw();
+  return await new Promise((resolve7) => {
+    const cleanup = () => {
+      input2.off("keypress", onKey);
+      input2.setRawMode?.(wasRaw);
+      input2.pause();
+      process.off("exit", restore);
+      restore();
+    };
+    const onKey = (_str, key) => {
+      const name = key?.name;
+      if (key?.ctrl && name === "c" || name === "escape" || name === "q") {
+        cleanup();
+        resolve7(null);
+        return;
+      }
+      if (name === "return" || name === "enter") {
+        cleanup();
+        resolve7(checked.flatMap((on, i) => on ? [i] : []));
+        return;
+      }
+      if (name === "up" || name === "k") {
+        cursor = (cursor - 1 + items.length) % items.length;
+        redraw();
+        return;
+      }
+      if (name === "down" || name === "j") {
+        cursor = (cursor + 1) % items.length;
+        redraw();
+        return;
+      }
+      if (name === "space") {
+        checked[cursor] = !checked[cursor];
+        redraw();
+        return;
+      }
+      if (name === "a") {
+        const allOn = checked.every(Boolean);
+        for (let i = 0; i < checked.length; i++) checked[i] = !allOn;
+        redraw();
+        return;
+      }
+    };
+    input2.on("keypress", onKey);
+  });
+}
+
+// src/cli/commands/bot.ts
 async function runBotInit(name) {
   if (!ensureCodex()) {
     process.exitCode = 1;
@@ -6165,7 +6762,7 @@ async function runBotInit(name) {
   console.log("  1) \u4E8B\u4EF6\u4E0E\u56DE\u8C03 \u2192 \u957F\u8FDE\u63A5 \u2192 \u8BA2\u9605\uFF1Aim.message.receive_v1 / card.action.trigger / application.bot.menu_v6");
   console.log("     \uFF08\u53EF\u9009\uFF09\u300C\u52A0\u8FDB\u5DF2\u6709\u7FA4\u300D\u529F\u80FD\u518D\u8BA2\u9605\uFF1Aim.chat.member.bot.added_v1 / im.chat.member.bot.deleted_v1");
   console.log("  2) \u521B\u5EFA\u5E76\u53D1\u5E03\u5E94\u7528\u7248\u672C");
-  console.log("\n`bot list` \u67E5\u770B\u5168\u90E8\uFF1B`bot use <\u540D>` \u5207\u6362\u5F53\u524D\uFF1B`run` \u524D\u53F0\u8DD1 / `start` \u540E\u53F0\u5E38\u9A7B\u3002\n");
+  console.log("\n`bot list` \u67E5\u770B\u5168\u90E8\uFF1B`bot use` \u52FE\u9009\u8981\u540C\u65F6\u8FDE\u63A5\u7684\u673A\u5668\u4EBA\uFF1B`run` \u524D\u53F0\u8DD1 / `start` \u540E\u53F0\u5E38\u9A7B\u3002\n");
 }
 async function runBotList() {
   const reg = await loadBots();
@@ -6173,27 +6770,65 @@ async function runBotList() {
     console.log("\uFF08\u8FD8\u6CA1\u6709\u6CE8\u518C\u4EFB\u4F55\u98DE\u4E66\u673A\u5668\u4EBA\u3002\u8FD0\u884C `feishu-codex-bridge bot init` \u521B\u5EFA\u3002\uFF09");
     return;
   }
+  const active = new Set(activeBots(reg).map((b) => b.appId));
   console.log("\n\u5DF2\u6CE8\u518C\u7684\u98DE\u4E66\u673A\u5668\u4EBA\uFF1A\n");
   for (const b of reg.bots) {
-    const cur = b.appId === reg.current ? "\u{1F449}" : "  ";
-    console.log(`${cur} ${b.name.padEnd(16)} ${b.appId}  [${b.tenant}]${b.botName ? `  ${b.botName}` : ""}`);
+    const mark = active.has(b.appId) ? "\u2705" : "\u2B1C";
+    console.log(`${mark} ${b.name.padEnd(16)} ${b.appId}  [${b.tenant}]${b.botName ? `  ${b.botName}` : ""}`);
   }
-  console.log("\n\u{1F449} = \u5F53\u524D\u9009\u4E2D\uFF08run / start \u542F\u52A8\u7684\u5C31\u662F\u5B83\uFF09\u3002`bot use <\u540D>` \u5207\u6362\u3002\n");
+  console.log("\n\x1B[2m`bot use` \u52FE\u9009\u8981\u540C\u65F6\u8FDE\u63A5\u7684\u673A\u5668\u4EBA\uFF0C\u6216 `bot use <\u540D> [\u540D\u2026]` \u76F4\u63A5\u6307\u5B9A\u3002\x1B[0m\n");
 }
-async function runBotUse(name) {
+async function runBotUse(names) {
   const reg = await loadBots();
-  const bot2 = findBot(reg, name);
-  if (!bot2) {
-    console.error(`\u2717 \u627E\u4E0D\u5230\u673A\u5668\u4EBA\u300C${name}\u300D\u3002\u5DF2\u6CE8\u518C\uFF1A${botNames(reg.bots)}`);
+  if (reg.bots.length === 0) {
+    console.error("\u2717 \u8FD8\u6CA1\u6709\u6CE8\u518C\u4EFB\u4F55\u98DE\u4E66\u673A\u5668\u4EBA\u3002\u5148 `feishu-codex-bridge bot init` \u521B\u5EFA\u3002");
     process.exitCode = 1;
     return;
   }
-  if (reg.current === bot2.appId) {
-    console.log(`\u300C${bot2.name}\u300D\u5DF2\u7ECF\u662F\u5F53\u524D\u673A\u5668\u4EBA\u3002`);
+  let appIds;
+  if (names.length > 0) {
+    const resolved = [];
+    const unknown = [];
+    for (const n of names) {
+      const b = findBot(reg, n);
+      if (!b) unknown.push(n);
+      else if (!resolved.includes(b.appId)) resolved.push(b.appId);
+    }
+    if (unknown.length) {
+      console.error(`\u2717 \u627E\u4E0D\u5230\u673A\u5668\u4EBA\uFF1A${unknown.join(", ")}\u3002\u5DF2\u6CE8\u518C\uFF1A${botNames(reg.bots)}`);
+      process.exitCode = 1;
+      return;
+    }
+    appIds = resolved;
+  } else {
+    if (!process.stdin.isTTY) {
+      const cur = activeBots(reg).map((b) => b.name).join(", ") || "\uFF08\u7A7A\uFF09";
+      console.log(`\u5F53\u524D\u6D3B\u8DC3\u673A\u5668\u4EBA\uFF1A${cur}`);
+      console.log("\uFF08\u975E\u4EA4\u4E92\u5F0F\u7EC8\u7AEF\uFF0C\u65E0\u6CD5\u5F39\u52FE\u9009\u6846\u3002\u7528 `bot use <\u540D> [\u540D\u2026]` \u76F4\u63A5\u6307\u5B9A\u8981\u540C\u65F6\u8FDE\u63A5\u7684\u673A\u5668\u4EBA\u3002\uFF09");
+      return;
+    }
+    const activeSet = new Set(activeBots(reg).map((b) => b.appId));
+    const items = reg.bots.map((b) => ({
+      label: b.name,
+      hint: `${b.appId}  [${b.tenant}]${b.botName ? `  ${b.botName}` : ""}`,
+      checked: activeSet.has(b.appId)
+    }));
+    const picked = await checkboxSelect("\u9009\u62E9\u8981\u540C\u65F6\u8FDE\u63A5\u7684\u673A\u5668\u4EBA\uFF08\u7A7A\u683C\u52FE\u9009\uFF0C\u56DE\u8F66\u786E\u8BA4\uFF09\uFF1A", items);
+    if (picked === null) {
+      console.log("\u5DF2\u53D6\u6D88\uFF0C\u672A\u6539\u52A8\u3002");
+      return;
+    }
+    appIds = picked.map((i) => reg.bots[i]?.appId).filter((id) => Boolean(id));
+  }
+  await setActiveBots(appIds);
+  const chosen = appIds.map((id) => reg.bots.find((b) => b.appId === id)?.name ?? id);
+  if (chosen.length === 0) {
+    console.log("\u2713 \u5DF2\u6E05\u7A7A\u6D3B\u8DC3\u673A\u5668\u4EBA\u2014\u2014`run` / `start` \u6682\u4E0D\u8FDE\u63A5\u4EFB\u4F55 bot\u3002`bot use` \u91CD\u65B0\u52FE\u9009\u3002");
     return;
   }
-  await setCurrent(bot2.appId);
-  console.log(`\u2713 \u5F53\u524D\u673A\u5668\u4EBA \u2192 \u300C${bot2.name}\u300D(${bot2.appId})\u3002\u524D\u53F0 \`run\` \u76F4\u63A5\u751F\u6548\uFF1B\u540E\u53F0\u8BF7 \`restart\`\u3002`);
+  console.log(
+    `\u2713 \u6D3B\u8DC3\u673A\u5668\u4EBA\uFF08${chosen.length} \u4E2A\uFF09\u2192 ${chosen.join(", ")}\u3002\u524D\u53F0\u91CD\u8DD1 \`run\` \u751F\u6548${chosen.length > 1 ? "\uFF08\u591A\u8FDB\u7A0B\u6258\u7BA1\uFF09" : ""}\uFF1B\u540E\u53F0\u8BF7 \`restart\`\u3002`
+  );
 }
 async function runBotRm(name) {
   const reg = await loadBots();
@@ -6278,8 +6913,8 @@ function readStdin() {
 // src/cli/index.ts
 var program = new Command();
 program.name("feishu-codex-bridge").description("\u628A\u98DE\u4E66/Lark \u6865\u63A5\u5230\u672C\u673A Codex\uFF08\u9879\u76EE=\u7FA4, \u8BDD\u9898=\u4F1A\u8BDD\uFF09").version(bridgeVersion());
-program.command("run").description("\u524D\u53F0\u542F\u52A8 bot\uFF08\u6CA1\u914D\u7F6E\u5219\u5148\u626B\u7801 init\uFF1BCtrl+C \u4F18\u96C5\u9000\u51FA\uFF09").action(async () => {
-  await runRun();
+program.command("run").description("\u524D\u53F0\u542F\u52A8\u6D3B\u8DC3\u673A\u5668\u4EBA\uFF08\u591A\u4E2A\u5219\u5404\u81EA\u72EC\u7ACB\u8FDB\u7A0B\uFF1B\u6CA1\u914D\u7F6E\u5219\u5148\u626B\u7801 init\uFF1BCtrl+C \u4F18\u96C5\u9000\u51FA\uFF09").option("--bot <name>", "\u53EA\u542F\u52A8\u6307\u5B9A\u7684\u4E00\u4E2A\u673A\u5668\u4EBA\uFF08\u540D\u5B57\u6216 appId\uFF09").action(async (options) => {
+  await runRun(options.bot);
 });
 program.command("start").description("\u540E\u53F0 daemon \u542F\u52A8\uFF08\u88C5 launchd \u5F00\u673A\u81EA\u542F\uFF1B\u6CA1\u914D\u7F6E\u5219\u5148\u626B\u7801 init\uFF09").action(async () => {
   await runStart();
@@ -6306,8 +6941,8 @@ bot.command("init [name]").description("\u6CE8\u518C\u4E00\u4E2A\u98DE\u4E66\u67
 bot.command("list").description("\u5217\u51FA\u5DF2\u6CE8\u518C\u7684\u98DE\u4E66\u673A\u5668\u4EBA").action(async () => {
   await runBotList();
 });
-bot.command("use <name>").description("\u9009\u62E9 run / start \u542F\u52A8\u65F6\u4F7F\u7528\u7684\u673A\u5668\u4EBA").action(async (name) => {
-  await runBotUse(name);
+bot.command("use [names...]").description("\u52FE\u9009/\u6307\u5B9A\u8981\u540C\u65F6\u8FDE\u63A5\u7684\u673A\u5668\u4EBA\uFF08\u591A\u9009\uFF09\uFF1B\u65E0\u53C2\u6570\u5F39\u4EA4\u4E92\u5F0F\u52FE\u9009\u6846").action(async (names) => {
+  await runBotUse(names ?? []);
 });
 bot.command("rm <name>").description("\u79FB\u9664\u4E00\u4E2A\u673A\u5668\u4EBA\u914D\u7F6E").action(async (name) => {
   await runBotRm(name);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelzen/feishu-codex-bridge",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Bridge Feishu/Lark messenger with local Codex via app-server (project=group, thread=session)",
   "type": "module",
   "bin": {