@wendongfly/myhi 1.3.190 → 1.3.192

package/dist/admin.html

@@ -5,47 +5,73 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>myhi 管理</title>
   <script src="/lib/machine.js"></script>
+  <script src="/theme.js"></script>
+  <script>
+    // 主题与其他页面一致：浏览器选过的优先，否则服务端默认（新装浅色、老机器深色）
+    (function(){try{var t=localStorage.getItem('myhi_theme')||window.MYHI_DEFAULT_THEME||'dark';
+      if(t==='system') t=matchMedia('(prefers-color-scheme: light)').matches?'light':'dark';
+      if(t!=='dark') document.documentElement.setAttribute('data-theme',t);}catch(e){}})();
+  </script>
 <style>
+  :root { --bg:#0d1117; --surface:#161b22; --text:#e6edf3; --text2:#b1bac4; --text3:#8b949e; --muted:#6e7681;
+    --line:rgba(255,255,255,0.06); --border:rgba(255,255,255,0.12); --border2:#30363d; --accent:#7c3aed; }
+  :root[data-theme="light"] { --bg:#f6f8fa; --surface:#ffffff; --text:#1f2328; --text2:#424a53; --text3:#57606a; --muted:#6e7781;
+    --line:rgba(0,0,0,0.06); --border:#d0d7de; --border2:#d0d7de; --accent:#8250df; }
+  :root[data-theme="black"] { --bg:#000000; --surface:#0a0a0a; --border2:#262626; }
   * { margin: 0; padding: 0; box-sizing: border-box; }
-  body { font-family: -apple-system, system-ui, sans-serif; background: #0d1117; color: #e6edf3; min-height: 100vh; }
+  body { font-family: -apple-system, system-ui, sans-serif; background: var(--bg); color: var(--text); min-height: 100vh; }
   .login-wrap { display: flex; align-items: center; justify-content: center; min-height: 100vh; padding: 1rem; }
-  .login-box { background: #161b22; border: 1px solid rgba(255,255,255,0.1); border-radius: 16px; padding: 2rem; width: 100%; max-width: 360px; }
+  .login-box { background: var(--surface); border: 1px solid var(--border); border-radius: 16px; padding: 2rem; width: 100%; max-width: 360px; }
   .login-box h2 { text-align: center; margin-bottom: 1.5rem; font-size: 1.2rem; }
-  .login-box input { width: 100%; padding: 0.8rem; background: #0d1117; border: 1px solid rgba(255,255,255,0.15); border-radius: 10px; color: #e6edf3; font-size: 1rem; margin-bottom: 1rem; }
-  .login-box button { width: 100%; padding: 0.8rem; background: #7c3aed; color: #fff; border: none; border-radius: 10px; font-size: 1rem; font-weight: 600; cursor: pointer; }
+  .login-box input { width: 100%; padding: 0.8rem; background: var(--bg); border: 1px solid var(--border); border-radius: 10px; color: var(--text); font-size: 1rem; margin-bottom: 1rem; }
+  .login-box button { width: 100%; padding: 0.8rem; background: var(--accent); color: #fff; border: none; border-radius: 10px; font-size: 1rem; font-weight: 600; cursor: pointer; }
   .login-box .err { color: #f85149; font-size: 0.85rem; text-align: center; margin-bottom: 0.5rem; min-height: 1.2em; }
   .wrap { max-width: 640px; margin: 0 auto; padding: 1rem; }
-  .header { display: flex; align-items: center; justify-content: space-between; padding: 1rem 0; border-bottom: 1px solid rgba(255,255,255,0.08); margin-bottom: 1.5rem; }
+  .header { display: flex; align-items: center; justify-content: space-between; padding: 1rem 0; border-bottom: 1px solid var(--line); margin-bottom: 1.5rem; }
   .header h1 { font-size: 1.1rem; }
-  .header .logout { background: none; border: 1px solid rgba(255,255,255,0.15); color: #8b949e; padding: 0.3rem 0.8rem; border-radius: 8px; cursor: pointer; font-size: 0.8rem; }
-  .ver-card { background: #161b22; border: 1px solid rgba(255,255,255,0.1); border-radius: 14px; padding: 1.2rem 1.5rem; margin-bottom: 1.2rem; }
-  .ver-big { font-size: 2rem; font-weight: 800; color: #7c3aed; }
-  .ver-sub { font-size: 0.85rem; color: #8b949e; margin-top: 0.5rem; }
+  .header .logout { background: none; border: 1px solid var(--border); color: var(--text3); padding: 0.3rem 0.8rem; border-radius: 8px; cursor: pointer; font-size: 0.8rem; }
+  .ver-card { background: var(--surface); border: 1px solid var(--border); border-radius: 14px; padding: 1.2rem 1.5rem; margin-bottom: 1.2rem; }
+  .ver-big { font-size: 2rem; font-weight: 800; color: var(--accent); }
+  .ver-sub { font-size: 0.85rem; color: var(--text3); margin-top: 0.5rem; }
   .ver-sub b { color: #3fb950; }
   .actions { display: flex; gap: 0.8rem; margin-bottom: 1.5rem; }
   .actions button { flex: 1; padding: 0.8rem; border: none; border-radius: 10px; font-size: 0.9rem; font-weight: 600; cursor: pointer; }
-  .btn-up { background: #7c3aed; color: #fff; }
-  .btn-up:disabled { background: #333; color: #666; cursor: not-allowed; }
+  .btn-up { background: var(--accent); color: #fff; }
+  .btn-up:disabled { background: var(--border2); color: var(--muted); cursor: not-allowed; }
   .btn-up.glow { background: #3fb950; animation: pulse 2s infinite; }
-  .btn-re { background: rgba(255,255,255,0.08); color: #e6edf3; border: 1px solid rgba(255,255,255,0.15) !important; }
+  .btn-re { background: var(--line); color: var(--text); border: 1px solid var(--border) !important; }
   @keyframes pulse { 0%,100%{opacity:1} 50%{opacity:0.7} }
-  .card { background: #161b22; border: 1px solid rgba(255,255,255,0.1); border-radius: 14px; padding: 1rem 1.2rem; margin-bottom: 1rem; }
+  .card { background: var(--surface); border: 1px solid var(--border); border-radius: 14px; padding: 1rem 1.2rem; margin-bottom: 1rem; }
   .card h3 { font-size: 0.9rem; font-weight: 700; margin-bottom: 0.8rem; }
-  .row { font-size: 0.82rem; color: #b1bac4; padding: 0.5rem 0; line-height: 1.5; display: flex; justify-content: space-between; align-items: center; }
-  .row + .row { border-top: 1px solid rgba(255,255,255,0.04); }
+  .row { font-size: 0.82rem; color: var(--text2); padding: 0.5rem 0; line-height: 1.5; display: flex; justify-content: space-between; align-items: center; }
+  .row + .row { border-top: 1px solid var(--line); }
   .row-actions { display: flex; gap: 0.4rem; }
-  .row-actions button { background: none; border: 1px solid rgba(255,255,255,0.12); color: #8b949e; padding: 0.2rem 0.5rem; border-radius: 6px; cursor: pointer; font-size: 0.75rem; }
-  .row-actions button:hover { color: #e6edf3; border-color: rgba(255,255,255,0.3); }
+  .row-actions button { background: none; border: 1px solid var(--border); color: var(--text3); padding: 0.2rem 0.5rem; border-radius: 6px; cursor: pointer; font-size: 0.75rem; }
+  .row-actions button:hover { color: var(--text); border-color: var(--border2); }
   .row-actions .del { color: #f85149; border-color: rgba(248,81,73,0.3); }
-  .inp { padding: 0.5rem 0.7rem; background: #0d1117; border: 1px solid rgba(255,255,255,0.15); border-radius: 8px; color: #e6edf3; font-size: 0.85rem; width: 100%; }
+  .inp { padding: 0.5rem 0.7rem; background: var(--bg); border: 1px solid var(--border); border-radius: 8px; color: var(--text); font-size: 0.85rem; width: 100%; }
   .inp-row { display: flex; gap: 0.5rem; align-items: center; margin-bottom: 0.5rem; }
   .inp-row .inp { flex: 1; }
-  .btn-sm { padding: 0.5rem 1rem; background: #7c3aed; color: #fff; border: none; border-radius: 8px; cursor: pointer; font-size: 0.85rem; white-space: nowrap; }
+  .btn-sm { padding: 0.5rem 1rem; background: var(--accent); color: #fff; border: none; border-radius: 8px; cursor: pointer; font-size: 0.85rem; white-space: nowrap; }
+  .btn-sm.ghost { background: transparent; color: var(--text2); border: 1px solid var(--border); }
+  .mode-status { font-size: 0.85rem; line-height: 1.6; padding: 0.6rem 0.75rem; border-radius: 10px; background: rgba(124,58,237,0.1); border: 1px solid rgba(124,58,237,0.25); margin-bottom: 0.5rem; }
+  .mode-status b { color: var(--text); }
+  .mode-status small { display: block; color: var(--text3); font-size: 0.75rem; }
+  .sw { position: relative; width: 38px; height: 22px; flex-shrink: 0; }
+  .sw input { opacity: 0; width: 0; height: 0; }
+  .sw span { position: absolute; inset: 0; background: var(--border2); border-radius: 11px; cursor: pointer; transition: 0.2s; }
+  .sw span::before { content: ''; position: absolute; width: 16px; height: 16px; left: 3px; top: 3px; background: #fff; border-radius: 50%; transition: 0.2s; }
+  .sw input:checked + span { background: var(--accent); }
+  .sw input:checked + span::before { transform: translateX(16px); }
+  .dir-pick { border: 1px solid var(--border); border-radius: 8px; max-height: 220px; overflow-y: auto; margin-bottom: 0.5rem; font-size: 0.8rem; }
+  .dir-pick div { padding: 0.4rem 0.6rem; cursor: pointer; color: var(--text2); }
+  .dir-pick div:hover { background: var(--line); }
+  .dir-pick .cur { color: var(--text3); font-size: 0.72rem; cursor: default; border-bottom: 1px solid var(--line); }
   .msg { font-size: 0.8rem; margin-top: 0.3rem; min-height: 1.2em; }
   .msg-ok { color: #3fb950; }
   .msg-err { color: #f85149; }
-  .status-msg { text-align: center; padding: 1rem; color: #8b949e; font-size: 0.85rem; }
-  .uptime { font-size: 0.78rem; color: #6e7681; text-align: center; margin-top: 1rem; }
+  .status-msg { text-align: center; padding: 1rem; color: var(--text3); font-size: 0.85rem; }
+  .uptime { font-size: 0.78rem; color: var(--muted); text-align: center; margin-top: 1rem; }
 </style>
 </head>
 <body>
@@ -67,7 +93,7 @@
 
   <!-- 版本 + 升级 -->
   <div class="ver-card">
-    <div style="font-size:0.8rem;color:#8b949e">当前版本</div>
+    <div style="font-size:0.8rem;color:var(--text3)">当前版本</div>
     <div class="ver-big" id="v-cur">--</div>
     <div class="ver-sub" id="v-latest"></div>
   </div>
@@ -79,7 +105,7 @@
 
   <!-- Claude Code 版本 + 升级 -->
   <div class="ver-card">
-    <div style="font-size:0.8rem;color:#8b949e">Claude Code 版本</div>
+    <div style="font-size:0.8rem;color:var(--text3)">Claude Code 版本</div>
     <div class="ver-big" id="cl-cur">--</div>
     <div class="ver-sub" id="cl-latest"></div>
   </div>
@@ -91,31 +117,43 @@
   <!-- 在线用户 -->
   <div class="card">
     <h3>在线用户</h3>
-    <div id="online-users"><div class="row" style="color:#6e7681">加载中...</div></div>
+    <div id="online-users"><div class="row" style="color:var(--muted)">加载中...</div></div>
   </div>
 
   <!-- 活跃会话 -->
   <div class="card">
     <h3>活跃会话</h3>
-    <div id="active-sessions"><div class="row" style="color:#6e7681">加载中...</div></div>
+    <div id="active-sessions"><div class="row" style="color:var(--muted)">加载中...</div></div>
   </div>
 
   <!-- 用户管理 -->
-  <div class="card">
-    <h3>用户管理</h3>
+  <div class="card" id="mode">
+    <h3>使用模式</h3>
+    <div id="mode-status" class="mode-status"></div>
     <div id="user-list"></div>
-    <div style="border-top:1px solid rgba(255,255,255,0.08);margin-top:0.5rem;padding-top:0.8rem">
-      <div style="font-size:0.82rem;color:#8b949e;margin-bottom:0.5rem">添加用户</div>
+    <div id="excl-row" class="row" style="display:none">
+      <span>独占模式<br><small style="color:var(--muted)">同一时间只允许一个人登录，别人登录会被挡住</small></span>
+      <label class="sw"><input type="checkbox" id="excl-toggle" onchange="setExclusive(this.checked)"><span></span></label>
+    </div>
+    <button class="btn-sm" id="add-open" onclick="openAddMember()" style="margin-top:0.6rem;width:100%"></button>
+    <div id="add-member" style="display:none;margin-top:0.7rem">
+      <div class="inp-row"><input class="inp" id="u-name" placeholder="成员名称（如：张三）"></div>
       <div class="inp-row">
-        <input class="inp" id="u-pwd" placeholder="密码">
-        <input class="inp" id="u-name" placeholder="名称">
+        <input class="inp" id="u-pwd" placeholder="登录密码（至少 4 位）" autocomplete="off">
+        <button class="btn-sm ghost" onclick="genPwd()">随机生成</button>
       </div>
       <div class="inp-row">
-        <input class="inp" id="u-dir" placeholder="工作目录">
-        <button class="btn-sm" onclick="addUser()">添加</button>
+        <input class="inp" id="u-dir" placeholder="工作目录（留空 = 不限制）">
+        <button class="btn-sm ghost" onclick="pickDir()">浏览…</button>
+      </div>
+      <div id="dir-pick" style="display:none" class="dir-pick"></div>
+      <div class="inp-row" style="margin-top:0.2rem">
+        <button class="btn-sm ghost" onclick="closeAddMember()" style="flex:1">取消</button>
+        <button class="btn-sm" onclick="addUser()" style="flex:2">添加</button>
       </div>
-      <div class="msg" id="u-msg"></div>
     </div>
+    <div class="msg" id="u-msg"></div>
+    <div id="mode-foot" style="font-size:0.72rem;color:var(--muted);margin-top:0.5rem;line-height:1.5"></div>
   </div>
 
   <!-- 修改管理密码 -->
@@ -131,8 +169,8 @@
   <!-- 大模型网关 -->
   <div class="card">
     <h3>大模型网关</h3>
-    <div style="font-size:0.75rem;color:#6e7681;margin-bottom:0.6rem;line-height:1.5">
-      配置后新建的 Claude 会话自动注入 <code style="background:#161b22;padding:0.1em 0.3em;border-radius:3px">ANTHROPIC_BASE_URL</code> / <code style="background:#161b22;padding:0.1em 0.3em;border-radius:3px">ANTHROPIC_API_KEY</code>
+    <div style="font-size:0.75rem;color:var(--muted);margin-bottom:0.6rem;line-height:1.5">
+      配置后新建的 Claude 会话自动注入 <code style="background:var(--surface);padding:0.1em 0.3em;border-radius:3px">ANTHROPIC_BASE_URL</code> / <code style="background:var(--surface);padding:0.1em 0.3em;border-radius:3px">ANTHROPIC_API_KEY</code>
     </div>
     <div class="inp-row">
       <input type="text" class="inp" id="gw-url" placeholder="网关 URL（如 https://gateway.example.com）">
@@ -147,11 +185,11 @@
   <!-- 命名密钥库 -->
   <div class="card">
     <h3>密钥库（Secret Vault）</h3>
-    <div style="font-size:0.75rem;color:#6e7681;margin-bottom:0.6rem;line-height:1.5">
+    <div style="font-size:0.75rem;color:var(--muted);margin-bottom:0.6rem;line-height:1.5">
       集中存 GitLab PAT / 部署 token / 网关 key / 证书等敏感值，spawn 会话时注入成环境变量，AI/命令用
-      <code style="background:#161b22;padding:0.1em 0.3em;border-radius:3px">$名字</code>
+      <code style="background:var(--surface);padding:0.1em 0.3em;border-radius:3px">$名字</code>
       引用——密钥值不进聊天、不落 transcript。类型选「文件」（证书等）时注入的是路径
-      <code style="background:#161b22;padding:0.1em 0.3em;border-radius:3px">$MYHI_SECRET_名字</code>。
+      <code style="background:var(--surface);padding:0.1em 0.3em;border-radius:3px">$MYHI_SECRET_名字</code>。
       作用域「项目」仅注给该 cwd 的会话（最小权限）。<b>密钥值绝不写进记忆/CLAUDE.md。</b>
     </div>
     <div id="sec-list" style="margin-bottom:0.6rem"></div>
@@ -219,22 +257,22 @@ async function loadSecrets() {
     const d = await r.json();
     const box = document.getElementById('sec-list');
     let html = '';
-    const row = (s, scope, cwd) => `<div style="display:flex;align-items:center;gap:0.5rem;padding:0.25rem 0;border-bottom:1px solid #21262d;font-size:0.8rem">
-      <span style="color:#e6edf3;font-family:monospace">${escHtml(s.name)}</span>
-      <span style="color:#6e7681">${s.type === 'file' ? '📄文件' : '🔑变量'}</span>
-      <span style="color:#6e7681;font-family:monospace;flex:1">${escHtml(s.preview)}</span>
+    const row = (s, scope, cwd) => `<div style="display:flex;align-items:center;gap:0.5rem;padding:0.25rem 0;border-bottom:1px solid var(--line);font-size:0.8rem">
+      <span style="color:var(--text);font-family:monospace">${escHtml(s.name)}</span>
+      <span style="color:var(--muted)">${s.type === 'file' ? '📄文件' : '🔑变量'}</span>
+      <span style="color:var(--muted);font-family:monospace;flex:1">${escHtml(s.preview)}</span>
       <button class="btn-sm" style="padding:0.1rem 0.5rem" onclick="delSecret('${escHtml(s.name)}','${scope}','${escHtml(cwd || '')}')">删</button>
     </div>`;
     if (d.global && d.global.length) {
-      html += '<div style="color:#8b949e;font-size:0.72rem;margin:0.2rem 0">全局</div>';
+      html += '<div style="color:var(--text3);font-size:0.72rem;margin:0.2rem 0">全局</div>';
       html += d.global.map(s => row(s, 'global', '')).join('');
     }
     for (const p of (d.projects || [])) {
       if (!p.secrets.length) continue;
-      html += `<div style="color:#8b949e;font-size:0.72rem;margin:0.4rem 0 0.2rem;font-family:monospace">项目 ${escHtml(p.cwd)}</div>`;
+      html += `<div style="color:var(--text3);font-size:0.72rem;margin:0.4rem 0 0.2rem;font-family:monospace">项目 ${escHtml(p.cwd)}</div>`;
       html += p.secrets.map(s => row(s, 'project', p.cwd)).join('');
     }
-    box.innerHTML = html || '<div style="color:#6e7681;font-size:0.78rem">（暂无密钥）</div>';
+    box.innerHTML = html || '<div style="color:var(--muted);font-size:0.78rem">（暂无密钥）</div>';
   } catch {}
 }
 
@@ -330,11 +368,16 @@ async function refresh() {
       const cr = await fetch('/api/claude/version', { headers: H() });
       if (cr.ok) {
         const cd = await cr.json();
-        document.getElementById('cl-cur').textContent = cd.current ? ('v' + cd.current) : '未检测到';
+        document.getElementById('cl-cur').textContent = cd.current ? ('v' + cd.current) : '未安装';
         const clBtn = document.getElementById('btn-cl-up');
+        _clInstalled = !!cd.current;
         if (cd.upgrade?.running) {
-          document.getElementById('cl-latest').innerHTML = '<span style="color:#58a6ff">升级中...</span>';
-          clBtn.disabled = true; clBtn.textContent = '升级中...';
+          document.getElementById('cl-latest').innerHTML = '<span style="color:#58a6ff">' + (cd.current ? '升级' : '安装') + '中...</span>';
+          clBtn.disabled = true; clBtn.textContent = (cd.current ? '升级' : '安装') + '中...';
+        } else if (!cd.current) {
+          // 没装（npm 装 myhi 不会顺带装它）：别显示「已是最新」，给安装按钮
+          document.getElementById('cl-latest').innerHTML = '<span style="color:#f0883e">AI 任务需要它，这台电脑上还没有</span>' + (cd.latest ? '，最新版 v' + cd.latest : '');
+          clBtn.disabled = false; clBtn.classList.add('glow'); clBtn.textContent = '安装 Claude Code';
         } else if (cd.updateAvailable) {
           document.getElementById('cl-latest').innerHTML = '最新版本: <b>v' + cd.latest + '</b>';
           clBtn.disabled = false; clBtn.classList.add('glow'); clBtn.textContent = '升级到 v' + cd.latest;
@@ -348,28 +391,28 @@ async function refresh() {
     // 在线用户
     const ouEl = document.getElementById('online-users');
     if (!d.onlineUsers?.length) {
-      ouEl.innerHTML = '<div class="row" style="color:#6e7681">无在线用户</div>';
+      ouEl.innerHTML = '<div class="row" style="color:var(--muted)">无在线用户</div>';
     } else {
       ouEl.innerHTML = d.onlineUsers.map(u =>
-        `<div class="row"><span>${esc(u.name)}</span><span style="color:#6e7681">${esc(u.role)}</span></div>`
+        `<div class="row"><span>${esc(u.name)}</span><span style="color:var(--muted)">${esc(u.role)}</span></div>`
       ).join('');
     }
 
     // 活跃会话
     const asEl = document.getElementById('active-sessions');
     if (!d.sessions?.length) {
-      asEl.innerHTML = '<div class="row" style="color:#6e7681">无活跃会话</div>';
+      asEl.innerHTML = '<div class="row" style="color:var(--muted)">无活跃会话</div>';
     } else {
       asEl.innerHTML = d.sessions.map(s => {
         const tag = s.mode === 'agent'
           ? '<span style="display:inline-block;font-size:0.7rem;padding:0.1rem 0.4rem;border-radius:4px;background:rgba(124,58,237,0.2);color:#a78bfa">Agent</span>'
           : '<span style="display:inline-block;font-size:0.7rem;padding:0.1rem 0.4rem;border-radius:4px;background:rgba(63,185,80,0.2);color:#3fb950">PTY</span>';
-        return `<div class="row"><span>${tag} ${esc(s.title)} <span style="color:#6e7681">${esc(s.owner||'')}</span></span><span style="color:#6e7681">${s.viewers}人</span></div>`;
+        return `<div class="row"><span>${tag} ${esc(s.title)} <span style="color:var(--muted)">${esc(s.owner||'')}</span></span><span style="color:var(--muted)">${s.viewers}人</span></div>`;
       }).join('');
     }
 
     // 用户列表
-    renderUsers(d.users || []);
+    renderUsers(d.users || [], d.exclusive);
 
     // 运行时长
     if (d.uptime) {
@@ -379,20 +422,70 @@ async function refresh() {
   } catch {}
 }
 
-function renderUsers(users) {
+// 使用模式：有成员 = 多用户，没有 = 单用户（默认）
+let _users = [];
+function renderUsers(users, exclusive) {
+  _users = users;
+  const multi = users.length > 0;
+  document.getElementById('mode-status').innerHTML = multi
+    ? `<b>当前：多用户模式 · ${users.length} 个成员</b><small>成员用各自密码登录，可以升级 / 重启，不能改全局设置；你用管理密码或二维码登录，权限不变。</small>`
+    : `<b>当前：单用户模式</b><small>只有你在用，所有功能都能用。需要给别人用时再添加成员。</small>`;
+  document.getElementById('add-open').textContent = multi ? '＋ 添加成员' : '＋ 添加成员，开启多用户模式';
+  document.getElementById('excl-row').style.display = multi ? '' : 'none';
+  document.getElementById('excl-toggle').checked = !!exclusive;
+  document.getElementById('mode-foot').textContent = multi ? '删除全部成员即回到单用户模式。删除成员或重置密码后，他当前的登录会立即失效。' : '';
   const el = document.getElementById('user-list');
-  if (!users.length) { el.innerHTML = '<div class="row" style="color:#6e7681">暂无用户</div>'; return; }
   el.innerHTML = users.map(u => `
     <div class="row">
-      <span><b style="color:#e6edf3">${esc(u.name)}</b> <span style="color:#6e7681;font-size:0.75rem">${esc(u.password)}</span> <span style="color:#6e7681;font-size:0.72rem">${esc(u.dir)}</span></span>
+      <span><b style="color:var(--text)">${esc(u.name)}</b> <span style="color:var(--muted);font-size:0.72rem">${u.dir ? '📁 ' + esc(u.dir) : '不限目录'}</span></span>
       <div class="row-actions">
-        <button onclick="editUserPwd('${esc(u.name)}')">改密</button>
+        <button onclick="editUserPwd('${esc(u.name)}')">重置密码</button>
         <button class="del" onclick="delUser('${esc(u.name)}')">删除</button>
       </div>
     </div>
   `).join('');
 }
 
+function openAddMember() {
+  document.getElementById('add-member').style.display = '';
+  document.getElementById('add-open').style.display = 'none';
+  document.getElementById('u-name').focus();
+}
+function closeAddMember() {
+  document.getElementById('add-member').style.display = 'none';
+  document.getElementById('add-open').style.display = '';
+  document.getElementById('dir-pick').style.display = 'none';
+}
+function genPwd() {
+  const cs = 'abcdefghjkmnpqrstuvwxyz23456789';
+  const a = crypto.getRandomValues(new Uint32Array(8));
+  document.getElementById('u-pwd').value = [...a].map(n => cs[n % cs.length]).join('');
+}
+// 目录点选：复用 /api/dirs（主站以管理员身份登录时可用；不行就手动输入）
+async function pickDir(path) {
+  const box = document.getElementById('dir-pick');
+  box.style.display = '';
+  try {
+    const r = await fetch('/api/dirs' + (path ? '?path=' + encodeURIComponent(path) : ''));
+    const d = await r.json();
+    if (!r.ok) throw new Error(d.error || r.status);
+    document.getElementById('u-dir').value = d.current;
+    box.innerHTML = `<div class="cur">${esc(d.current)}</div>` +
+      (d.parent ? `<div data-p="${esc(d.parent)}">⬆ 上一级</div>` : '') +
+      (d.drives || []).map(x => `<div data-p="${esc(x)}">💽 ${esc(x)}</div>`).join('') +
+      d.dirs.map(x => `<div data-p="${esc(x.path)}">📁 ${esc(x.name)}</div>`).join('');
+    box.querySelectorAll('[data-p]').forEach(el => el.onclick = () => pickDir(el.dataset.p));
+  } catch (e) { box.innerHTML = `<div class="cur">无法浏览目录（${esc(e.message)}），请直接输入路径</div>`; }
+}
+
+async function setExclusive(on) {
+  try {
+    const r = await fetch('/api/admin/exclusive', { method: 'POST', headers: H(), body: JSON.stringify({ on }) });
+    const d = await r.json();
+    if (!d.ok) { alert(d.error || '失败'); refresh(); }
+  } catch { alert('连接失败'); refresh(); }
+}
+
 function esc(s) { return String(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;').replace(/'/g,'&#39;'); }
 
 async function addUser() {
@@ -400,17 +493,27 @@ async function addUser() {
   const name = document.getElementById('u-name').value.trim();
   const dir = document.getElementById('u-dir').value.trim();
   const msg = document.getElementById('u-msg');
-  if (!pwd || !name || !dir) { msg.className = 'msg msg-err'; msg.textContent = '密码、名称、目录都必填'; return; }
+  if (!name || !pwd) { msg.className = 'msg msg-err'; msg.textContent = '成员名称和登录密码必填'; return; }
+  // 第一个成员 = 从单用户切到多用户：先讲清楚会发生什么
+  if (!_users.length && !confirm(
+    '添加第一个成员后，myhi 进入「多用户模式」：\n\n' +
+    '· 成员用各自的密码登录' + (dir ? '，只能在绑定的目录里建任务' : '') + '；\n' +
+    '· 成员可以升级、重启，但不能改全局设置（本机显示名、语音、用户、网关等）；\n' +
+    '· 你（管理员）照常用管理密码或二维码登录，权限不变。\n\n' +
+    '以后删除全部成员即回到单用户模式。确定添加？')) return;
   try {
     const r = await fetch('/api/admin/user', { method: 'POST', headers: H(), body: JSON.stringify({ password: pwd, name, dir }) });
     const d = await r.json();
-    if (d.ok) { msg.className = 'msg msg-ok'; msg.textContent = '已添加'; document.getElementById('u-pwd').value = ''; document.getElementById('u-name').value = ''; document.getElementById('u-dir').value = ''; refresh(); }
-    else { msg.className = 'msg msg-err'; msg.textContent = d.error || '失败'; }
+    if (d.ok) {
+      msg.className = 'msg msg-ok'; msg.textContent = `已添加「${name}」，登录密码：${pwd}（请告知对方）`;
+      ['u-pwd', 'u-name', 'u-dir'].forEach(id => document.getElementById(id).value = '');
+      closeAddMember(); refresh();
+    } else { msg.className = 'msg msg-err'; msg.textContent = d.error || '失败'; }
   } catch { msg.className = 'msg msg-err'; msg.textContent = '连接失败'; }
 }
 
 async function editUserPwd(name) {
-  const newPwd = prompt(`修改 ${name} 的密码：`);
+  const newPwd = prompt(`为 ${name} 设置新的登录密码（至少 4 位，设置后他当前的登录会失效）：`);
   if (!newPwd) return;
   try {
     const r = await fetch('/api/admin/user/password', { method: 'POST', headers: H(), body: JSON.stringify({ name, password: newPwd }) });
@@ -421,7 +524,7 @@ async function editUserPwd(name) {
 }
 
 async function delUser(name) {
-  if (!confirm(`确定删除用户 ${name}？`)) return;
+  if (!confirm(`确定删除成员「${name}」？他当前的登录会立即失效。` + (_users.length === 1 ? '\n\n这是最后一个成员，删除后回到单用户模式。' : ''))) return;
   try {
     const r = await fetch('/api/admin/user', { method: 'DELETE', headers: H(), body: JSON.stringify({ name }) });
     const d = await r.json();
@@ -476,10 +579,14 @@ async function doUpgrade(force) {
   } catch { fail('连接失败'); }
 }
 
+let _clInstalled = true;
 async function doClaudeUpgrade() {
   const btn = document.getElementById('btn-cl-up'), msg = document.getElementById('cl-msg');
-  if (!confirm('升级 Claude Code？\nmyhi 会用 npm --include=optional 装全平台二进制，避免占位符坑。\n不影响正在跑的会话，升级后新查询生效。')) return;
-  btn.disabled = true; btn.textContent = '升级中...'; msg.className = 'status-msg'; msg.textContent = '正在下载安装（~260MB，可能几分钟）...'; msg.style.display = '';
+  const verb = _clInstalled ? '升级' : '安装';
+  if (!confirm(_clInstalled
+    ? '升级 Claude Code？\nmyhi 会用 npm --include=optional 装全平台二进制，避免占位符坑。\n不影响正在跑的会话，升级后新查询生效。'
+    : '安装 Claude Code（myhi 的 AI 引擎）？\n下载约 260MB，需要几分钟。装好后还要在这台电脑上运行一次 claude 登录，或配置下方的大模型网关。')) return;
+  btn.disabled = true; btn.textContent = verb + '中...'; msg.className = 'status-msg'; msg.textContent = '正在下载安装（~260MB，可能几分钟）...'; msg.style.display = '';
   try {
     const r = await fetch('/api/claude/update', { method: 'POST', headers: H() });
     const d = await r.json();
@@ -490,7 +597,7 @@ async function doClaudeUpgrade() {
         const s = await sr.json();
         if (!s.running) {
           clearInterval(poll);
-          if (s.ok) { msg.textContent = '已升级到 v' + s.version; setTimeout(refresh, 500); }
+          if (s.ok) { msg.textContent = (_clInstalled ? '已升级到 v' : '已安装 v') + s.version + (_clInstalled ? '' : '。还差一步：在这台电脑上运行一次 claude 登录，或配置下方的大模型网关'); setTimeout(refresh, 500); }
           else { msg.textContent = '失败: ' + (s.error||''); btn.disabled = false; btn.textContent = '重试'; }
         }
       } catch {}
@@ -515,7 +622,15 @@ async function waitReload() {
   document.getElementById('op-msg').textContent = '重启超时，请手动刷新';
 }
 
-if (T) showAdmin();
+// 主站已是管理员 → 直接换后台令牌免登录；否则沿用本标签页已有令牌（重启后会失效）或显示登录框
+(async () => {
+  try {
+    const r = await fetch('/api/admin/sso', { method: 'POST' });
+    const d = r.ok ? await r.json() : null;
+    if (d?.ok) { T = d.token; sessionStorage.setItem('myhi_admin', T); return showAdmin(); }
+  } catch {}
+  if (T) showAdmin();
+})();
 </script>
 </body>
 </html>