@modelzen/feishu-codex-bridge 0.3.12-test.0 → 0.3.12-test.2

package/dist/cli.js

@@ -91,7 +91,10 @@ var paths = {
   inboundDir: join(appDir, "inbound"),
   /** daemon 内嵌 Web 控制台的发现文件 {port, token, pid}（0600，daemon 退出
    * 清理）——`web` 子命令据此直接打开 daemon 控制台而不是再起只读副本。 */
-  webConsoleFile: join(appDir, "web-console.json")
+  webConsoleFile: join(appDir, "web-console.json"),
+  /** 稳定的 Web 控制台 token（0600，**不随进程退出清理**）——让重启 / 预览→daemon
+   * 切换后浏览器里那条带 token 的 URL 始终有效，不再 401。删此文件即轮换 token。 */
+  webTokenFile: join(appDir, "web-token")
 };
 
 // src/config/bots.ts
@@ -11886,6 +11889,7 @@ function createAdminService(deps = {}) {
       return readRecentLogs({ maxBytes: opts?.maxBytes ?? 64 * 1024 });
     },
     registerBot(input2) {
+      if (deps.readonlyPreview) throw new NotWiredYetError("\u2795 \u6DFB\u52A0\u673A\u5668\u4EBA");
       return registerBotFromCredentials({
         appId: input2.appId,
         appSecret: input2.appSecret,
@@ -11954,6 +11958,7 @@ function createAdminService(deps = {}) {
       };
     },
     async registerBotByQr(opts) {
+      if (deps.readonlyPreview) throw new NotWiredYetError("\u2795 \u6DFB\u52A0\u673A\u5668\u4EBA");
       let creds;
       try {
         creds = await startRegistration({ signal: opts.signal, onQr: opts.onQr, onStatus: opts.onStatus });
@@ -12167,7 +12172,7 @@ async function catalogEntryStatus(entry, defaultBackend) {
 }
 async function probeAllBackends() {
   return Promise.all(
-    backendIds().map(async (id) => {
+    visibleCatalog().map((e) => e.id).map(async (id) => {
       const backend = createBackend(id);
       const probe = await backend.doctor({ force: true }).catch(() => void 0);
       return {
@@ -12183,7 +12188,7 @@ async function probeAllBackends() {
   );
 }
 function createReadonlyAdminService(deps = {}) {
-  return createAdminService({ startDaemon: deps.startDaemon });
+  return createAdminService({ startDaemon: deps.startDaemon, applyUpdate: deps.applyUpdate, readonlyPreview: true });
 }
 function isAlive(pid) {
   try {
@@ -12195,6 +12200,7 @@ function isAlive(pid) {
 }
 
 // src/web/discovery.ts
+import { randomUUID as randomUUID6 } from "crypto";
 import { mkdirSync as mkdirSync2, readFileSync as readFileSync5, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname12 } from "path";
 function publishWebConsole(rec, file = paths.webConsoleFile) {
@@ -12225,6 +12231,25 @@ function clearWebConsole(file = paths.webConsoleFile) {
   } catch {
   }
 }
+function stableWebConsoleToken(file = paths.webTokenFile) {
+  try {
+    const t = readFileSync5(file, "utf8").trim();
+    if (t) return t;
+  } catch {
+  }
+  const token = randomUUID6();
+  try {
+    mkdirSync2(dirname12(file), { recursive: true });
+    try {
+      unlinkSync(file);
+    } catch {
+    }
+    writeFileSync2(file, `${token}
+`, { mode: 384 });
+  } catch {
+  }
+  return token;
+}
 function isAlive2(pid) {
   try {
     process.kill(pid, 0);
@@ -12347,7 +12372,7 @@ async function doRestart(phase) {
 
 // src/web/server.ts
 import { createServer } from "http";
-import { randomUUID as randomUUID6, timingSafeEqual } from "crypto";
+import { randomUUID as randomUUID7, timingSafeEqual } from "crypto";
 import { mkdirSync as mkdirSync3, watch } from "fs";
 import { open as open2, stat as stat5 } from "fs/promises";
 import { join as join19 } from "path";
@@ -13377,7 +13402,7 @@ ${UI_PURE_JS}
     bots.forEach(function (b) {
       nav.appendChild(navItem({ icon: 'bot', label: botTitle(b), on: r.tab === 'bot' && r.botId === b.appId, dot: !!b.running, onClick: function () { go({ tab: 'bot', botId: b.appId }); } }));
     });
-    nav.appendChild(navItem({ icon: 'add', label: '\u6DFB\u52A0\u673A\u5668\u4EBA', add: true, onClick: function () { openWizard(); } }));
+    nav.appendChild(navItem({ icon: 'add', label: '\u6DFB\u52A0\u673A\u5668\u4EBA', add: true, onClick: function () { tryAddBot(); } }));
     nav.appendChild(el('div', 'nav-sec', '\u914D\u7F6E'));
     nav.appendChild(navItem({ icon: 'backend', label: '\u540E\u7AEF Agent', on: r.tab === 'backends', onClick: function () { go({ tab: 'backends' }); } }));
     nav.appendChild(navItem({ icon: 'doctor', label: '\u5BBF\u4E3B\u673A\u4F53\u68C0', on: r.tab === 'doctor', onClick: function () { go({ tab: 'doctor' }); } }));
@@ -13405,7 +13430,7 @@ ${UI_PURE_JS}
       act.textContent = '';
       if (r.tab === 'overview' || r.tab === 'bot') {
         var add = el('button', 'btn primary sm', '\u2795 \u6DFB\u52A0\u673A\u5668\u4EBA');
-        add.onclick = function () { openWizard(); };
+        add.onclick = function () { tryAddBot(); };
         act.appendChild(add);
       }
     }
@@ -13479,7 +13504,7 @@ ${UI_PURE_JS}
     hero.appendChild(el('div', 'home-sub', '\u628A\u98DE\u4E66\u63A5\u5230\u672C\u673A\u7684 Codex / Claude \u2014\u2014 \u4E00\u4E2A\u7FA4\u4E00\u4E2A\u9879\u76EE\uFF0C@\u4E00\u53E5\u8BDD\u5C31\u5F00\u5E72\u3002\u591A\u673A\u5668\u4EBA\u3001\u591A\u540E\u7AEF\uFF0C\u5168\u7A0B\u8DD1\u5728\u4F60\u8FD9\u53F0\u673A\u5668\u4E0A\uFF0C\u79C1\u6709\u53EF\u63A7\u3002'));
     var ctaRow = el('div', 'home-cta-row');
     var primary = el('button', 'btn primary home-cta', hasBots ? '\u8FDB\u5165\u63A7\u5236\u53F0' : '\u2795 \u626B\u7801\u521B\u5EFA\u7B2C\u4E00\u4E2A\u673A\u5668\u4EBA');
-    primary.onclick = function () { if (hasBots) go({ tab: 'overview' }); else openWizard(); };
+    primary.onclick = function () { if (hasBots) go({ tab: 'overview' }); else tryAddBot(); };
     ctaRow.appendChild(primary);
     if (hasBots) {
       var sec = el('button', 'btn home-cta', '\u540E\u7AEF\u7BA1\u7406');
@@ -13930,6 +13955,10 @@ ${UI_PURE_JS}
       } else {
         var pb = el('button', 'btn sm primary', '\u25B6\uFE0F \u542F\u52A8'); pb.onclick = askStart; acts.appendChild(pb);
       }
+      // \u68C0\u67E5\u66F4\u65B0\u5165\u53E3\uFF1A\u59CB\u7EC8\u5728\uFF08\u4E0D\u7BA1\u8DD1\u6CA1\u8DD1\uFF09\u3002\u6CA1\u542F\u52A8\u65F6\u80FD\u505A\u7684\u5C31\u662F\u300C\u542F\u52A8\u300D+\u300C\u66F4\u65B0\u300D\u3002
+      var ub = el('button', 'btn sm', '\u{1F504} \u68C0\u67E5\u66F4\u65B0'); ub.style.marginLeft = '6px';
+      ub.onclick = function () { var bx = $('updateBody'); if (bx) { bx.textContent = '\u7248\u672C\u68C0\u67E5\u4E2D\u2026'; loadUpdate(bx); } toast('\u{1F504} \u6B63\u5728\u68C0\u67E5\u66F4\u65B0\u2026'); };
+      acts.appendChild(ub);
     }
     var line = el('div', 'statline');
     if (d.running) line.appendChild(el('span', 'tag green', '\u2705 \u8FD0\u884C\u4E2D' + (d.pid ? ' \xB7 pid ' + d.pid : '')));
@@ -14043,7 +14072,7 @@ ${UI_PURE_JS}
       hero.appendChild(el('div', 'fr-title', '\u6B22\u8FCE\uFF01\u8FD8\u5DEE\u6700\u540E\u4E00\u6B65\uFF1A\u521B\u5EFA\u4F60\u7684\u7B2C\u4E00\u4E2A\u98DE\u4E66\u673A\u5668\u4EBA'));
       hero.appendChild(el('div', 'fr-sub', '\u70B9\u4E0B\u9762\u7684\u6309\u94AE\uFF0C\u7528\u98DE\u4E66\u626B\u7801\u5373\u53EF\u521B\u5EFA\u5E76\u6388\u6743\u2014\u2014\u5168\u7A0B\u5728\u8FD9\u4E2A\u7F51\u9875\u91CC\u5B8C\u6210\uFF0C\u4E0D\u7528\u78B0\u7EC8\u7AEF\u3002'));
       var cta = el('button', 'btn primary fr-cta', '\u2795 \u626B\u7801\u521B\u5EFA\u7B2C\u4E00\u4E2A\u673A\u5668\u4EBA');
-      cta.onclick = function () { openWizard(); };
+      cta.onclick = function () { tryAddBot(); };
       hero.appendChild(cta);
       box.appendChild(hero);
       if (countEl) countEl.textContent = '';
@@ -14368,7 +14397,7 @@ ${UI_PURE_JS}
     box.textContent = '';
     box.className = 'note';
     if (!diag) return;
-    box.appendChild(el('div', null, '\u4E8B\u4EF6\u8BA2\u9605\uFF1A' + eventDiagText(diag.event)));
+    box.appendChild(el('div', null, '\u2139\uFE0F \u4E8B\u4EF6\u8BA2\u9605\uFF1A\u8BF7\u81EA\u884C\u5230\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u786E\u8BA4\u5DF2\u8BA2\u9605 im.message.receive_v1\uFF08\u957F\u8FDE\u63A5\uFF09\uFF1B\u6B64\u9879\u7CFB\u7EDF\u65E0\u6CD5\u53EF\u9760\u68C0\u6D4B\uFF0C\u4EC5\u4F5C\u63D0\u9192\u3002'));
     var title = el('div', null, '\u{1F9E0} \u540E\u7AEF\u73AF\u5883\uFF1A');
     title.style.marginTop = '6px';
     box.appendChild(title);
@@ -14553,9 +14582,27 @@ ${UI_PURE_JS}
   var wizEs = null;         // \u626B\u7801 SSE EventSource
   var wizQrSessionId = null;
   var wizCountdown = null;  // \u4E8C\u7EF4\u7801\u8FC7\u671F\u5012\u8BA1\u65F6
+  var wizAutoEnabled = false;    // \u65B0 bot \u662F\u5426\u5DF2\u81EA\u52A8\u52A0\u5165\u6D3B\u8DC3\u96C6\uFF08\u4E00\u6B21\u6027\uFF09
+  var wizRestartPrompted = false; // \u5B8C\u6210\u6B65\u662F\u5426\u5DF2\u5F39\u8FC7\u300C\u91CD\u542F\u62C9\u8D77\u300D\u786E\u8BA4\uFF08\u4E00\u6B21\u6027\uFF09
+
+  // \u6DFB\u52A0\u673A\u5668\u4EBA\u662F\u5199\u64CD\u4F5C\uFF1AFeishu Bridge \u6CA1\u5728\u8DD1\u65F6\u63A7\u5236\u53F0\u4E3A\u53EA\u8BFB\uFF0C\u4E0D\u80FD\u52A0\uFF08\u4E0E\u300C\u6CA1\u542F\u52A8\u53EA\u8BFB\u300D\u4E00\u81F4\uFF09\u3002
+  // \u6CA1\u5728\u8DD1\u5C31\u5F15\u5BFC\u5148\u542F\u52A8\uFF0C\u800C\u4E0D\u662F\u6253\u5F00\u5411\u5BFC\u8BA9\u7528\u6237\u767D\u586B\u4E00\u901A\u518D\u88AB 501 \u6321\u56DE\u3002
+  function tryAddBot() {
+    if (daemon && daemon.running) { openWizard(); return; }
+    confirmDialog({
+      title: '\u9700\u8981\u5148\u542F\u52A8 Feishu Bridge',
+      lines: [
+        'Feishu Bridge \u672A\u5728\u8FD0\u884C\u65F6\u63A7\u5236\u53F0\u4E3A\u53EA\u8BFB\uFF0C\u65E0\u6CD5\u6DFB\u52A0\u673A\u5668\u4EBA\u3002',
+        '\u5148\u542F\u52A8 Feishu Bridge\uFF0C\u518D\u56DE\u6765\u6DFB\u52A0\u3002',
+      ],
+      confirmLabel: '\u7ACB\u5373\u542F\u52A8',
+      onConfirm: function () { postAction('/api/daemon/start', '\u542F\u52A8'); },
+    });
+  }
 
   function openWizard() {
     wizStep = 1; wizBotId = null; wizSetup = null; wizManualOpen = false;
+    wizAutoEnabled = false; wizRestartPrompted = false;
     stopWizPoll(); stopWizQr();
     $('wizMask').classList.add('open');
     renderWizard();
@@ -14605,6 +14652,11 @@ ${UI_PURE_JS}
     qrWrap.appendChild(el('div', 'note', '\u6B63\u5728\u751F\u6210\u4E8C\u7EF4\u7801\u2026'));
     w.appendChild(qrWrap);
 
+    var steps = el('div', 'note');
+    steps.style.cssText = 'margin-top:6px;line-height:1.7';
+    steps.textContent = '\u2460 \u7528\u98DE\u4E66 App \u626B\u7801 \u2192 \u2461 \u5728\u98DE\u4E66\u91CC\u70B9\u300C\u521B\u5EFA\u5E76\u6388\u6743\u300D \u2192 \u2462 \u56DE\u5230\u672C\u9875\uFF08\u65E0\u9700\u624B\u52A8\u5237\u65B0\uFF09\uFF0C\u521B\u5EFA\u6210\u529F\u4F1A\u81EA\u52A8\u8FDB\u5165\u7B2C\u2461\u6B65\u300C\u63A5\u5165\u68C0\u6D4B\u300D\u3002';
+    w.appendChild(steps);
+
     var statusLine = el('div', 'note'); statusLine.id = 'wizScanStatus';
     statusLine.style.textAlign = 'center';
     w.appendChild(statusLine);
@@ -14773,12 +14825,21 @@ ${UI_PURE_JS}
   function startWizPoll() { stopWizPoll(); pollWizSetup(); wizPoll = setInterval(pollWizSetup, 5000); }
   function pollWizSetup() {
     if (!wizBotId) return;
+    // \u65B0 bot \u9ED8\u8BA4\u5C31\u52A0\u5165\u6D3B\u8DC3\u96C6\u2014\u2014\u7528\u6237\u4E0D\u5FC5\u624B\u52A8\u70B9\u6309\u94AE / \u8DD1 bot use\u3002\u4E00\u6B21\u6027\uFF1B\u5931\u8D25\u4E0B\u5468\u671F\u91CD\u8BD5\u3002
+    // \u771F\u6B63\u300C\u62C9\u8D77\u4E0A\u7EBF\u300D\u8981\u91CD\u542F Feishu Bridge\uFF0C\u90A3\u4E00\u6B65\u7559\u5230\u300C\u5B8C\u6210\u300D\u65F6\u5F39\u7A97\u786E\u8BA4\uFF08\u91CD\u542F\u4F1A\u77ED\u6682
+    // \u5F71\u54CD\u5176\u5B83\u5728\u7EBF bot\uFF0C\u6240\u4EE5\u4E0D\u9759\u9ED8\u91CD\u542F\uFF09\u3002
+    if (!wizAutoEnabled) {
+      wizAutoEnabled = true;
+      fetch('/api/bots/' + encodeURIComponent(wizBotId), {
+        method: 'PATCH', headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ enabled: true }),
+      }).catch(function () { wizAutoEnabled = false; });
+    }
     fetch('/api/bots/' + encodeURIComponent(wizBotId) + '/setup-status')
       .then(function (r) { return r.json(); })
       .then(function (s) {
         wizSetup = s;
         if (wizStep === 2) renderWizChecklist();
-        if (s.event && s.event.state === 'ok') stopWizPoll();
       })
       .catch(function () { /* \u4E0B\u4E2A\u5468\u671F\u91CD\u8BD5 */ });
   }
@@ -14805,7 +14866,7 @@ ${UI_PURE_JS}
     var s = wizSetup;
     if (!s || !s.credentials) {
       w.appendChild(checkItem('spin', '\u6B63\u5728\u68C0\u6D4B\u2026', '\u9996\u6B21\u62C9\u53D6\u7EA6 2~3 \u79D2'));
-      w.appendChild(wizChecklistActions(false));
+      w.appendChild(wizChecklistActions());
       return;
     }
     w.appendChild(checkItem(
@@ -14827,89 +14888,31 @@ ${UI_PURE_JS}
         w.appendChild(checkItem('\u26A0\uFE0F', '\u7F3A ' + miss.length + ' \u9879\u5FC5\u9700\u6743\u9650', miss.join('\u3001'), grant));
       }
     }
-    var conn = s.connection || {};
-    if (conn.running && conn.connection === 'connected') {
-      w.appendChild(checkItem('\u2705', '\u957F\u8FDE\u63A5\u5728\u7EBF', 'bridge \u5DF2\u8FDE\u4E0A\u98DE\u4E66\uFF0C\u53EF\u5B9E\u65F6\u6536\u53D1'));
-    } else if (conn.running) {
-      w.appendChild(checkItem('spin', 'bridge \u8FD0\u884C\u4E2D', '\u957F\u8FDE\u63A5' + (conn.connection ? '\uFF08' + conn.connection + '\uFF09' : '\u5EFA\u7ACB\u4E2D\u2026')));
-    } else {
-      var cmd = el('div');
-      var act = el('div', 'actions');
-      var go1 = el('button', 'btn primary', '\u26A1 \u4E00\u952E\u542F\u7528\u5E76\u62C9\u8D77');
-      go1.onclick = function () { wizEnableAndLaunch(); };
-      act.appendChild(go1);
-      cmd.appendChild(act);
-      cmd.appendChild(el('div', 'note', '\u4E00\u952E\uFF1A\u628A\u5B83\u52A0\u5165\u6D3B\u8DC3\u96C6\u5E76\u81EA\u52A8'
-        + ((daemon && daemon.running) ? '\u91CD\u542F' : '\u542F\u52A8') + ' Feishu Bridge'
-        + ((daemon && daemon.running) ? '\uFF08\u7EA6\u6570\u79D2\uFF0C\u5176\u5B83\u5728\u7EBF\u673A\u5668\u4EBA\u4F1A\u77ED\u6682\u65AD\u8FDE\u540E\u81EA\u52A8\u91CD\u8FDE\uFF09' : '') + '\u3002'));
-      cmd.appendChild(el('div', 'note', '\u6216\u624B\u52A8\u5728\u7EC8\u7AEF\u6267\u884C\uFF1A'));
-      cmd.appendChild(copyRow('feishu-codex-bridge bot use ' + (wizBotId || '<appId>')));
-      cmd.appendChild(copyRow('feishu-codex-bridge start'));
-      w.appendChild(checkItem('\u{1F7E0}', '\u957F\u8FDE\u63A5\u672A\u5EFA\u7ACB', '\u9700\u8981 Feishu Bridge \u62C9\u8D77\u8FD9\u4E2A bot', cmd));
-    }
-    var ev = s.event || { state: 'unchecked' };
-    if (ev.state === 'ok') {
-      w.appendChild(checkItem('\u2705', '\u4E8B\u4EF6\u8BA2\u9605\u5DF2\u751F\u6548', eventDiagText(ev)));
-    } else {
-      var evExtra = el('div');
-      evExtra.appendChild(el('div', 'note', ev.state === 'unchecked'
-        ? '\uFF08\u7F3A application:app_version \u53EA\u8BFB scope \u6216\u7F51\u7EDC\u4E0D\u901A\u65F6\u65E0\u6CD5\u81EA\u52A8\u68C0\u6D4B\uFF1B\u6309\u4E0B\u65B9\u6DF1\u94FE\u624B\u52A8\u6838\u5BF9\u300C\u4E8B\u4EF6\u914D\u7F6E\u300D\u3002\uFF09'
-        : '\u53BB\u5F00\u53D1\u8005\u540E\u53F0\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\uFF1A\u4E8B\u4EF6\u914D\u7F6E\u6539\u300C\u957F\u8FDE\u63A5\u300D\u2192 \u6DFB\u52A0 im.message.receive_v1 \u2192 \u5E94\u7528\u53D1\u5E03\u91CC\u521B\u5EFA\u5E76\u53D1\u5E03\u7248\u672C\u3002'));
-      var ea = el('a', null, '\u6253\u5F00\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u914D\u7F6E\u9875 \u2197');
-      ea.href = s.eventConfigUrl; ea.target = '_blank'; ea.rel = 'noopener';
-      evExtra.appendChild(ea);
-      evExtra.appendChild(el('div', 'note', '\u914D\u7F6E\u597D\u540E\u65E0\u9700\u624B\u52A8\u5237\u65B0\u2014\u2014\u672C\u9875\u6BCF 5 \u79D2\u81EA\u52A8\u590D\u68C0\uFF0C\u751F\u6548\u4F1A\u53D8 \u2705\u3002'));
-      w.appendChild(checkItem(ev.state === 'unchecked' ? '\u26A0\uFE0F' : 'spin',
-        ev.state === 'unchecked' ? '\u4E8B\u4EF6\u8BA2\u9605\u672A\u80FD\u81EA\u52A8\u68C0\u6D4B' : '\u4E8B\u4EF6\u8BA2\u9605\u5C1A\u672A\u751F\u6548',
-        eventDiagText(ev), evExtra));
-    }
-    w.appendChild(wizChecklistActions(ev.state === 'ok'));
+    // \u300C\u52A0\u5165\u6D3B\u8DC3\u96C6 + \u62C9\u8D77\u4E0A\u7EBF\u300D\u5168\u7A0B\u9759\u9ED8\uFF1A\u65B0 bot \u5DF2\u5728 pollWizSetup \u81EA\u52A8\u52A0\u5165\u6D3B\u8DC3\u96C6\uFF0C\u771F\u6B63\u62C9\u8D77
+    // \u9760\u6700\u540E\u4E00\u6B65\u300C\u5B8C\u6210\u300D\u5F39\u7A97\u786E\u8BA4\u91CD\u542F\u2014\u2014\u8FD9\u91CC\u4E0D\u518D\u663E\u793A\u300C\u5F85\u62C9\u8D77\u4E0A\u7EBF\u300D\u4E4B\u7C7B\u7684\u4E2D\u95F4\u6001\u9879\u3002
+    // \u4E8B\u4EF6\u8BA2\u9605\uFF1A\u7CFB\u7EDF\u65E0\u6CD5\u53EF\u9760\u68C0\u6D4B\uFF08\u957F\u8FDE\u63A5\u8BA2\u9605\u5728\u5DF2\u53D1\u5E03\u7248\u672C\u91CC\u7684\u4F53\u73B0\u4E0D\u7A33\u5B9A\uFF09\uFF0C\u6545\u53EA\u505A\u63D0\u9192\u3001\u4E0D\u4E0B\u7ED3\u8BBA\u3001
+    // \u4E0D\u963B\u585E\u300C\u4E0B\u4E00\u6B65\u300D\u3002\u7528\u6237\u81EA\u884C\u53BB\u540E\u53F0\u6838\u5BF9\u3002
+    var evHint = el('div');
+    var ea = el('a', null, '\u6253\u5F00\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u914D\u7F6E\u9875 \u2197');
+    ea.href = (s.eventConfigUrl || '#'); ea.target = '_blank'; ea.rel = 'noopener';
+    evHint.appendChild(ea);
+    w.appendChild(checkItem('\u2139\uFE0F', '\u4E8B\u4EF6\u8BA2\u9605\uFF08\u8BF7\u81EA\u884C\u786E\u8BA4\uFF09',
+      '\u8BF7\u5230\u300C\u4E8B\u4EF6\u4E0E\u56DE\u8C03\u300D\u786E\u8BA4\u5DF2\u8BA2\u9605 im.message.receive_v1\uFF08\u957F\u8FDE\u63A5\u6A21\u5F0F\uFF09\u5E76\u5DF2\u53D1\u5E03\u7248\u672C\uFF0C\u5426\u5219 @\u673A\u5668\u4EBA\u4E0D\u4F1A\u6709\u53CD\u5E94\u3002\u6B64\u9879\u7CFB\u7EDF\u65E0\u6CD5\u53EF\u9760\u68C0\u6D4B\uFF0C\u4EC5\u4F5C\u63D0\u9192\u3002', evHint));
+    w.appendChild(wizChecklistActions());
   }
 
-  function wizChecklistActions(eventOk) {
+  function wizChecklistActions() {
     var actions = el('div', 'actions');
     var back = el('button', 'btn', '\u7A0D\u540E\u518D\u8BF4');
     back.onclick = closeWizard;
     actions.appendChild(back);
     actions.appendChild(el('div', 'grow'));
-    var next = el('button', 'btn' + (eventOk ? ' primary' : ''), eventOk ? '\u4E0B\u4E00\u6B65' : '\u4E8B\u4EF6\u751F\u6548\u540E\u518D\u7EE7\u7EED');
-    if (eventOk) { next.onclick = function () { wizStep = 3; stopWizPoll(); renderWizard(); }; }
-    else { next.className = 'btn disabled'; next.disabled = true; }
+    var next = el('button', 'btn primary', '\u4E0B\u4E00\u6B65');
+    next.onclick = function () { wizStep = 3; stopWizPoll(); renderWizard(); };
     actions.appendChild(next);
     return actions;
   }
 
-  // \u300C\u957F\u8FDE\u63A5\u672A\u5EFA\u7ACB\u300D\u4E00\u952E\uFF1A\u542F\u7528\uFF08\u52A0\u5165\u6D3B\u8DC3\u96C6\uFF09\u2192 daemon \u5728\u8DD1\u5C31\u786E\u8BA4\u91CD\u542F\u3001\u6CA1\u8DD1\u5C31\u76F4\u63A5\u542F\u52A8\uFF0C
-  // \u7701\u53BB\u7EC8\u7AEF bot use + start\u3002\u590D\u7528 confirmDialog / postAction\uFF0C\u4E0E\u4EEA\u8868\u76D8\u91CD\u542F\u540C\u4E00\u5957\u3002
-  function wizEnableAndLaunch() {
-    if (!wizBotId) { toast('\u274C \u7F3A\u5C11\u673A\u5668\u4EBA ID'); return; }
-    var who = (wizSetup && wizSetup.botName) || wizBotId;
-    fetch('/api/bots/' + encodeURIComponent(wizBotId), {
-      method: 'PATCH', headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ enabled: true }),
-    }).then(function (r) { return r.json().then(function (j) { return { status: r.status, body: j }; }); })
-      .then(function (resp) {
-        if (resp.status !== 200) { toast('\u274C ' + (resp.body.message || ('HTTP ' + resp.status))); return; }
-        toast('\u2705 \u5DF2\u52A0\u5165\u6D3B\u8DC3\u96C6');
-        if (daemon && daemon.running) {
-          confirmDialog({
-            title: '\u{1F504} \u7ACB\u5373\u91CD\u542F Feishu Bridge \u62C9\u8D77\u300C' + who + '\u300D\uFF1F',
-            lines: [
-              '\u5DF2\u52A0\u5165\u6D3B\u8DC3\u96C6\uFF0C\u91CD\u542F\u540E\u5373\u53EF\u4E0A\u7EBF\u3002',
-              '\u91CD\u542F\u7EA6\u6570\u79D2\uFF0C\u671F\u95F4\u6240\u6709\u5728\u7EBF\u673A\u5668\u4EBA\u7684\u957F\u8FDE\u63A5\u4F1A\u77ED\u6682\u65AD\u5F00\u5E76\u81EA\u52A8\u91CD\u8FDE\u3002',
-            ],
-            confirmLabel: '\u7ACB\u5373\u91CD\u542F',
-            onConfirm: function () { postAction('/api/daemon/restart', '\u91CD\u542F'); },
-          });
-        } else {
-          // daemon \u6CA1\u5728\u8DD1\uFF08\u53EA\u8BFB\u9884\u89C8\uFF09\u2192 \u542F\u52A8\u5B83\uFF08read-only preview \u6CE8\u5165\u4E86 startDaemon\uFF09\uFF1B
-          // \u8D77\u6765\u540E /api/console/live \u8F6E\u8BE2\u4F1A\u628A\u9875\u9762\u81EA\u52A8\u5E26\u53BB\u53EF\u5199\u63A7\u5236\u53F0\u3002
-          postAction('/api/daemon/start', '\u542F\u52A8');
-        }
-      })
-      .catch(function () { toast('\u274C \u8BF7\u6C42\u5931\u8D25'); });
-  }
-
   function copyRow(text) {
     var row = el('div', 'copybox');
     row.appendChild(el('code', null, text));
@@ -14930,33 +14933,20 @@ ${UI_PURE_JS}
     w.textContent = '';
     w.appendChild(el('h3', null, '\u{1F389} \u63A5\u5165\u5B8C\u6210'));
     w.appendChild(wizStepBar(3));
-    w.appendChild(el('div', 'note', '\u673A\u5668\u4EBA\u300C' + ((wizSetup && wizSetup.botName) || wizBotId || '') + '\u300D\u5DF2\u5C31\u7EEA\uFF0C\u4E8B\u4EF6\u8BA2\u9605\u5DF2\u751F\u6548\u3002'));
-    var ul = el('div'); ul.style.margin = '12px 0';
-    [
-      '\u2460 \u5728\u98DE\u4E66\u91CC\u79C1\u804A\u8FD9\u4E2A\u673A\u5668\u4EBA\uFF0C\u70B9\u300C\u2795 \u65B0\u5EFA\u9879\u76EE\u300D\u628A\u4E00\u4E2A\u76EE\u5F55\u7ED1\u6210\u9879\u76EE\u7FA4\uFF1B',
-      '\u2461 \u6216\u628A\u673A\u5668\u4EBA\u62C9\u8FDB\u4E00\u4E2A\u5DF2\u6709\u7FA4\uFF08\u9700\u5F00\u300C\u52A0\u5165\u5B58\u91CF\u7FA4\u300D\u76F8\u5173\u6743\u9650\uFF09\u81EA\u52A8\u7ED1\u5B9A\uFF1B',
-      '\u2462 \u7136\u540E\u5728\u7FA4\u91CC @\u673A\u5668\u4EBA \u63D0\u9700\u6C42\uFF0C\u5B83\u5C31\u5728\u7ED1\u5B9A\u7684\u76EE\u5F55\u91CC\u5E72\u6D3B\u3002',
-    ].forEach(function (line) {
-      var d = el('div'); d.style.padding = '4px 0'; d.textContent = line;
-      ul.appendChild(d);
-    });
-    w.appendChild(ul);
-    w.appendChild(el('div', 'note', '\u63D0\u793A\uFF1A\u79C1\u804A\u673A\u5668\u4EBA\u53D1\u4EFB\u610F\u6D88\u606F\u5373\u53EF\u5524\u51FA\u79C1\u804A\u7BA1\u7406\u53F0\uFF1BWeb \u63A7\u5236\u53F0\u4E0E\u79C1\u804A\u5361\u7247\u5171\u4EAB\u540C\u4E00\u5957\u8BBE\u7F6E\uFF0C\u53CC\u7AEF\u5B9E\u65F6\u4E00\u81F4\u3002'));
-    // \u65B0\u5EFA\u7684\u673A\u5668\u4EBA\u8981\u7B49 daemon \u91CD\u542F\u3001\u88AB supervisor \u63A5\u7BA1\u540E\u624D\u771F\u6B63\u4E0A\u7EBF\uFF08\u5C24\u5176\u300C\u5F15\u5BFC\u63A7\u5236\u53F0\u300D\u662F
-    // \u96F6 bot \u8D77\u7684\uFF0C\u5F97\u91CD\u542F\u624D\u4F1A\u8FDE\u4E0A\u8FD9\u4E2A\u65B0 bot\uFF09\u3002\u7ED9\u4E00\u6761\u9192\u76EE\u63D0\u793A + \u4E00\u952E\u91CD\u542F\uFF08\u786E\u8BA4\u5F39\u7A97\u91CC\u4F1A\u8BF4\u660E
-    // \u91CD\u542F\u4F1A\u77ED\u6682\u6253\u65AD\u5176\u5B83\u5728\u8DD1\u7684\u673A\u5668\u4EBA\uFF09\u3002
-    var liveTip = el('div', 'note');
-    liveTip.style.cssText = 'margin-top:10px;padding:10px 12px;background:var(--blue-tint);border-radius:8px;color:var(--text-2)';
-    liveTip.textContent = '\u26A1 \u8BA9\u5B83\u4E0A\u7EBF\uFF1A\u65B0\u673A\u5668\u4EBA\u9700\u91CD\u542F Feishu Bridge \u540E\u7531\u540E\u53F0\u63A5\u7BA1\u3002\u70B9\u4E0B\u9762\u300C\u91CD\u542F\u4F7F\u5176\u4E0A\u7EBF\u300D\u5373\u53EF\uFF08\u9996\u6B21\u521B\u5EFA\u65F6\u91CD\u542F\u5F88\u5B89\u5168\uFF0C\u4E0D\u5F71\u54CD\u522B\u7684\u673A\u5668\u4EBA\uFF09\u3002';
-    w.appendChild(liveTip);
+    var who = (wizSetup && wizSetup.botName) || wizBotId || '';
+    // \u5230\u8FD9\u4E00\u6B65\u53EA\u5269\u4E00\u4EF6\u4E8B\uFF1A\u91CD\u542F Feishu Bridge \u8BA9\u65B0 bot \u4E0A\u7EBF\u3002\u4E0D\u518D\u5806\u300C\u65B0\u5EFA\u9879\u76EE/\u62C9\u7FA4/@\u300D\u90A3\u5957
+    // \u5F15\u5BFC\uFF08\u90A3\u4F1A\u8BA9\u4EBA\u4EE5\u4E3A\u5F97\u5148\u505A\u5B8C\u624D\u80FD\u7EE7\u7EED\uFF09\u3002\u91CD\u542F\u5165\u53E3**\u53EA\u6B64\u4E00\u5904**\uFF1A\u4E3B\u6309\u94AE\u300C\u91CD\u542F\u4F7F\u5176\u4E0A\u7EBF\u300D\uFF1B
+    // \u60F3\u665A\u70B9\u518D\u8BF4\u5C31\u70B9\u300C\u7A0D\u540E\u518D\u91CD\u542F\u300D\u3002
+    w.appendChild(el('div', 'note', '\u673A\u5668\u4EBA\u300C' + who + '\u300D\u5DF2\u52A0\u5165\u6D3B\u8DC3\u96C6\u3002\u6700\u540E\u4E00\u6B65\uFF1A\u91CD\u542F Feishu Bridge \u8BA9\u5B83\u4E0A\u7EBF\uFF08\u7EA6\u6570\u79D2\uFF0C\u5176\u5B83\u5728\u7EBF\u673A\u5668\u4EBA\u4F1A\u77ED\u6682\u65AD\u8FDE\u540E\u81EA\u52A8\u91CD\u8FDE\uFF09\u3002'));
+    var gotoBot = function () { var id = wizBotId; closeWizard(); if (id) go({ tab: 'bot', botId: id }); };
     var actions = el('div', 'actions');
-    var restart = el('button', 'btn', '\u{1F501} \u91CD\u542F\u4F7F\u5176\u4E0A\u7EBF');
-    restart.onclick = askRestart;
-    actions.appendChild(restart);
+    var later = el('button', 'btn', '\u7A0D\u540E\u518D\u91CD\u542F');
+    later.onclick = gotoBot;
+    actions.appendChild(later);
     actions.appendChild(el('div', 'grow'));
-    var done = el('button', 'btn primary', '\u5B8C\u6210\u5E76\u8FDB\u5165\u8BE5\u673A\u5668\u4EBA \u2192');
-    done.onclick = function () { var id = wizBotId; closeWizard(); if (id) go({ tab: 'bot', botId: id }); };
-    actions.appendChild(done);
+    var restart = el('button', 'btn primary', '\u{1F501} \u91CD\u542F\u4F7F\u5176\u4E0A\u7EBF');
+    restart.onclick = function () { postAction('/api/daemon/restart', '\u91CD\u542F'); gotoBot(); };
+    actions.appendChild(restart);
     w.appendChild(actions);
   }
 
@@ -15037,7 +15027,7 @@ var DEFAULT_WEB_PORT = 51847;
 var COOKIE_NAME = "fcb_console_token";
 var SSE_INITIAL_TAIL_BYTES = 16 * 1024;
 function createWebServer(opts) {
-  const token = opts.token ?? randomUUID6();
+  const token = opts.token ?? randomUUID7();
   const html = opts.html ?? UI_HTML;
   const logDir = opts.logDir ?? join19(paths.appDir, "logs");
   const sseCleanups = /* @__PURE__ */ new Set();
@@ -15360,7 +15350,16 @@ function createWebServer(opts) {
     const appSecret = typeof body.appSecret === "string" ? body.appSecret : "";
     const tenant = body.tenant === "lark" ? "lark" : "feishu";
     const desiredName = typeof body.name === "string" && body.name.trim() ? body.name.trim() : void 0;
-    const result = await opts.service.registerBot({ appId, appSecret, tenant, desiredName });
+    let result;
+    try {
+      result = await opts.service.registerBot({ appId, appSecret, tenant, desiredName });
+    } catch (err) {
+      if (err instanceof NotWiredYetError) {
+        sendJson(res, 501, { error: "not_wired_yet", message: err.message });
+        return;
+      }
+      throw err;
+    }
     if (result.ok) {
       sendJson(res, 201, {
         ok: true,
@@ -15380,7 +15379,7 @@ function createWebServer(opts) {
   function handleRegisterQrStream(req, res) {
     qrSession?.abort.abort();
     const abort = new AbortController();
-    const session = { id: randomUUID6(), abort };
+    const session = { id: randomUUID7(), abort };
     qrSession = session;
     res.writeHead(200, {
       "Content-Type": "text/event-stream",
@@ -15657,23 +15656,27 @@ async function readJsonBody(req) {
 }
 
 // src/web/mount.ts
+async function listenCanonical(web, attempts = 25, gapMs = 200) {
+  for (let i = 0; i < attempts; i++) {
+    try {
+      return await web.listen(DEFAULT_WEB_PORT);
+    } catch (err) {
+      if (err.code !== "EADDRINUSE") throw err;
+      if (i < attempts - 1) await new Promise((r) => setTimeout(r, gapMs));
+    }
+  }
+  log.warn("web", "console-port-busy-fallback", { preferred: DEFAULT_WEB_PORT });
+  return web.listen(0);
+}
 async function mountWebConsole(service) {
-  const web = createWebServer({ service });
+  const web = createWebServer({ service, token: stableWebConsoleToken() });
   let port;
   let url;
   try {
-    ({ port, url } = await web.listen(DEFAULT_WEB_PORT));
+    ({ port, url } = await listenCanonical(web));
   } catch (err) {
-    if (err.code !== "EADDRINUSE") {
-      log.fail("web", err, { phase: "console-listen" });
-      return void 0;
-    }
-    try {
-      ({ port, url } = await web.listen(0));
-    } catch (err2) {
-      log.fail("web", err2, { phase: "console-listen-fallback" });
-      return void 0;
-    }
+    log.fail("web", err, { phase: "console-listen" });
+    return void 0;
   }
   publishWebConsole({ port, token: web.token, pid: process.pid, startedAt: Date.now() });
   const exitCleanup = () => clearWebConsole();
@@ -16469,14 +16472,17 @@ async function runWeb(opts = {}) {
     console.log("   \xB7 \u4EC5\u672C\u673A\u53EF\u8BBF\u95EE\uFF08127.0.0.1\uFF09\uFF1BURL \u542B token\uFF0C\u8BF7\u52FF\u5916\u4F20/\u622A\u56FE\u3002");
     return;
   }
-  const port = opts.port ?? DEFAULT_WEB_PORT;
+  const port = opts.port ?? 0;
   if (!Number.isInteger(port) || port < 0 || port > 65535) {
     console.error(`\u2717 \u65E0\u6548\u7AEF\u53E3\uFF1A${opts.port}`);
     process.exitCode = 1;
     return;
   }
-  const service = createReadonlyAdminService({ startDaemon: () => spawnDaemonControl("start") });
-  const web = createWebServer({ service, liveConsole: () => readWebConsole() });
+  const service = createReadonlyAdminService({
+    startDaemon: () => spawnDaemonControl("start"),
+    applyUpdate: () => spawnDaemonControl("update")
+  });
+  const web = createWebServer({ service, token: stableWebConsoleToken(), liveConsole: () => readWebConsole() });
   let url;
   try {
     ({ url } = await web.listen(port));

package/dist/index.d.ts

@@ -55,6 +55,9 @@ declare const paths: {
     /** daemon 内嵌 Web 控制台的发现文件 {port, token, pid}（0600，daemon 退出
      * 清理）——`web` 子命令据此直接打开 daemon 控制台而不是再起只读副本。 */
     webConsoleFile: string;
+    /** 稳定的 Web 控制台 token（0600，**不随进程退出清理**）——让重启 / 预览→daemon
+     * 切换后浏览器里那条带 token 的 URL 始终有效，不再 401。删此文件即轮换 token。 */
+    webTokenFile: string;
 };
 
 export { log, newTraceId, paths, withTrace };

package/dist/index.js

@@ -61,7 +61,10 @@ var paths = {
   inboundDir: join(appDir, "inbound"),
   /** daemon 内嵌 Web 控制台的发现文件 {port, token, pid}（0600，daemon 退出
    * 清理）——`web` 子命令据此直接打开 daemon 控制台而不是再起只读副本。 */
-  webConsoleFile: join(appDir, "web-console.json")
+  webConsoleFile: join(appDir, "web-console.json"),
+  /** 稳定的 Web 控制台 token（0600，**不随进程退出清理**）——让重启 / 预览→daemon
+   * 切换后浏览器里那条带 token 的 URL 始终有效，不再 401。删此文件即轮换 token。 */
+  webTokenFile: join(appDir, "web-token")
 };
 
 // src/core/logger.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelzen/feishu-codex-bridge",
-  "version": "0.3.12-test.0",
+  "version": "0.3.12-test.2",
   "description": "Bridge Feishu/Lark messenger with local Codex via app-server (project=group, thread=session)",
   "type": "module",
   "bin": {