npm - @wu529778790/open-im - Versions diffs - 1.7.1-beta.2 → 1.7.1-beta.4 - Mend

@wu529778790/open-im 1.7.1-beta.2 → 1.7.1-beta.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (6) hide show

package/README.md CHANGED Viewed

@@ -14,19 +14,6 @@ Multi-platform IM bridge for AI CLI tools. Connect Telegram, Feishu, WeCom, Ding
 - Isolated sessions: each user gets an independent local session, and `/new` resets it
 - Built-in commands: `/help`, `/new`, `/cd`, `/pwd`, `/status`
-## Coverage Matrix
-Capability levels: `Native` = fully supported in-channel, `Fallback` = degraded behavior or text fallback, `None` = not currently supported.
-| Platform | Text Inbound | Image Inbound | File Inbound | Voice Inbound | Video Inbound | Streaming Reply | Image Reply | Card Reply |
-| ---- | ---- | ---- | ---- | ---- | ---- | ---- | ---- | ---- |
-| Telegram | Native | Native | Native | Native | Native | Native | Native | Native |
-| Feishu | Native | Native | Native | Fallback | Fallback | Native | Native | Native |
-| QQ | Native | Fallback | Fallback | Fallback | Fallback | None | Fallback | Fallback |
-| WeCom | Native | Fallback | Fallback | Fallback | Fallback | Native | Native | Native |
-| DingTalk | Native | Fallback | Fallback | Fallback | Fallback | Native | Fallback | Native |
-| WeChat (experimental) | Native | Fallback | Fallback | Fallback | Fallback | Native | Fallback | Native |
 ## Requirements
 - Node.js >= 20
@@ -50,12 +37,13 @@ The config file is stored at `~/.open-im/config.json` by default.
 ## CLI Commands
-| Command | Description |
-| ---- | ---- |
-| `open-im init` | Initialize or append configuration without starting the service |
-| `open-im start` | Run the service in the background |
-| `open-im stop` | Stop the background service |
-| `open-im dev` | Run in the foreground for development/debugging |
+| Command           | Description                                                      |
+| ----------------- | ---------------------------------------------------------------- |
+| `open-im init`    | Initialize or append configuration without starting the service |
+| `open-im start`   | Run the service in the background                                |
+| `open-im stop`    | Stop the background service                                      |
+| `open-im dev`     | Run in the foreground for development/debugging                  |
+| `open-im dashboard` | Run only the config web UI (no bridge)                        |
 ## Server Deployment & Config Page
@@ -65,106 +53,50 @@ Open the config page at [`http://127.0.0.1:39282`](http://127.0.0.1:39282) (or t
 - **Dashboard** – Configured / Enabled platform count and service status (Idle or Running)
 - **Platforms** – Enable and configure Telegram, Feishu, QQ, WeCom, and DingTalk (credentials, proxy, per-platform AI tool, allowed user IDs). Each platform has a “Test Configuration” button.
-- **AI Tooling** – **General**: default AI tool (Claude / Codex / CodeBuddy), work directory, hook port, log level. **Per-tool tabs**: Claude (CLI path, timeout, proxy, config path, ANTHROPIC_* fields), Codex (CLI path, timeout, proxy), CodeBuddy (CLI path, timeout).
+- **AI Tooling** – **General**: default AI tool (Claude / Codex / CodeBuddy), work directory, hook port, log level. **Per-tool tabs**: Claude (CLI path, timeout, proxy, config path, ANTHROPIC\_\* fields), Codex (CLI path, timeout, proxy), CodeBuddy (CLI path, timeout).
 - **Service control** – Validate config, Save, Start bridge, Stop bridge.
 WeChat is not in the web UI; configure it in `~/.open-im/config.json` or via `open-im init` if needed.
-- `open-im start` serves both the config page and the bridge.
+- `open-im start` serves both the config page and the bridge on your local machine.
 - `open-im dev` opens the page automatically only when setup is incomplete.
-- To open the page when config already exists, run `open-im start` and visit the URL above.
-### On a headless server (no GUI)
-Many servers do not have a desktop environment or browser. In that case, trying to auto-launch a browser (`xdg-open`, `open`, `start`) is unnecessary and may even fail. Use these patterns instead.
-#### 1) Disable automatic browser launch
-On the server:
-```bash
-export OPEN_IM_NO_BROWSER=1
-open-im start
-```
-This starts the bridge and the config web server in the background without attempting to open a browser.
-#### 2) Verify that the config page is listening on the server
-On the server:
-```bash
-ss -lntp | grep 39282        # or: netstat -lntp | grep 39282
-curl -v http://127.0.0.1:39282/
-```
-If you see a `LISTEN` line for `127.0.0.1:39282` and `curl` returns HTML, the config UI is running.
-#### 3) Safest option: SSH tunnel to local browser
-Instead of exposing port 39282 to the public internet, use SSH port forwarding:
-```bash
-# On your local machine:
-ssh -L 39282:127.0.0.1:39282 user@your-server-ip
-```
-Then open in your local browser:
-```text
-http://127.0.0.1:39282/
-```
-This safely tunnels the config page from the server to your local browser.
-#### 4) Optional: Remote access with one-time login link
-If you want to open the config UI directly from another device without SSH tunneling, you can bind the web config server to all interfaces and use a one-time login URL:
+- To open the page when config already exists, you can also run `open-im dashboard` to launch the config UI only (without starting the bridge).
-- **Bind to all interfaces and keep the browser closed on the server:**
+### Recommended server workflow
-  ```bash
-  export OPEN_IM_NO_BROWSER=1
-  export OPEN_IM_WEB_HOST=0.0.0.0
-  open-im start
-  ```
+On a remote server, the simplest and safest pattern is:
-  - By default, `OPEN_IM_WEB_HOST` is `127.0.0.1` (local only).
-  - Setting it to `0.0.0.0` makes the config page listen on all interfaces.
+1. **Use `dashboard` to configure via browser**
-- **On startup, open-im will log a one-time login URL**, for example:
+   On the server:
-  ```text
-  ━━━━━━━━ Web Config Login ━━━━━━━━
-  Host binding : 0.0.0.0
-  Login URL    : http://127.0.0.1:39282/?login_token=xxxx
-  Note: replace 127.0.0.1 with your server IP or hostname when opening from another device.
-  This login link is valid for approximately 15 minutes and can be used only once.
-  After login, subsequent requests will use a short-lived session cookie.
-  ```
+   ```bash
+   export OPEN_IM_NO_BROWSER=1
+   # Optional: bind to all interfaces if you want to open from another device
+   # export OPEN_IM_WEB_HOST=0.0.0.0
+   open-im dashboard
+   ```
-- **From your laptop/phone**, replace `127.0.0.1` with the server IP or hostname and open the URL in a browser:
+   - This starts only the config web UI (no bridge yet).
+   - If `OPEN_IM_WEB_HOST` is `0.0.0.0`, the server will print a one-time login URL like:
-  ```text
-  http://your-server-ip:39282/?login_token=xxxx
-  ```
+     ```text
+     http://your-server-ip:39282/?login_token=xxxx
+     ```
-  The first successful visit:
+   - Open this URL in your browser, complete all platform/AI settings, then click **Start bridge** in the web UI.
-  - Consumes the one-time `login_token` (subsequent uses will fail with 401);
-  - Creates a short-lived session and sets a `openim_session` cookie in your browser;
-  - Redirects you to the config page without query parameters.
+2. **Run the bridge as a background service**
-  After that, as long as the `openim_session` cookie is valid and the process is still running, you can continue visiting:
+   After configuration is saved, you have two options:
+   - Start from the web UI: use the **Start bridge** button on the Service panel.
+   - Or start from the CLI:
-  ```text
-  http://your-server-ip:39282/
-  ```
+     ```bash
+     open-im start
+     ```
-> Security notes:
->
-> - Binding `OPEN_IM_WEB_HOST=0.0.0.0` exposes the config port on all interfaces. Always combine this with firewall rules / security groups and consider fronting the port with HTTPS + auth via a reverse proxy.
-> - When in doubt, prefer SSH tunneling (step 3) over direct exposure.
+   This runs the full bridge in the background using the saved config.
 ## Session Behavior
@@ -315,46 +247,46 @@ The following is valid JSON and can be saved directly as `~/.open-im/config.json
 ### Common Environment Variables
-| Variable | Description |
-| ---- | ---- |
-| `AI_COMMAND` | Select `claude`, `codex`, or `codebuddy` |
-| `CLAUDE_WORK_DIR` | Default session working directory |
-| `LOG_DIR` | Log directory |
-| `LOG_LEVEL` | Log level |
-| `HOOK_PORT` | Permission service port |
-| `CODEX_PROXY` | Proxy used by Codex to access `chatgpt.com` |
-| `OPENAI_API_KEY` | Codex API key, can replace `codex login` |
-| `CODEBUDDY_CLI_PATH` | Override CodeBuddy CLI path |
-| `CODEBUDDY_TIMEOUT_MS` | Override CodeBuddy timeout |
-| `CODEBUDDY_SKIP_PERMISSIONS` | Override CodeBuddy skip-permissions behavior |
-| `CODEBUDDY_IDLE_TIMEOUT_MS` | Abort CodeBuddy when it stays silent for too long |
-| `CODEBUDDY_API_KEY` | CodeBuddy API key, can replace `codebuddy login` |
-| `CODEBUDDY_AUTH_TOKEN` | CodeBuddy auth token, can replace `codebuddy login` |
-| `TELEGRAM_BOT_TOKEN` | Telegram bot token |
-| `TELEGRAM_PROXY` | Telegram proxy URL |
-| `TELEGRAM_ALLOWED_USER_IDS` | Telegram allowlist |
-| `FEISHU_APP_ID` | Feishu app ID |
-| `FEISHU_APP_SECRET` | Feishu app secret |
-| `FEISHU_ALLOWED_USER_IDS` | Feishu allowlist |
-| `QQ_BOT_APPID` | QQ bot app ID |
-| `QQ_BOT_SECRET` | QQ bot app secret |
-| `QQ_BOT_SANDBOX` | QQ bot sandbox mode (`1` / `true` to enable, disabled by default) |
-| `QQ_ALLOWED_USER_IDS` | QQ allowlist |
-| `DINGTALK_CLIENT_ID` | DingTalk client ID / AppKey |
-| `DINGTALK_CLIENT_SECRET` | DingTalk client secret / AppSecret |
-| `DINGTALK_CARD_TEMPLATE_ID` | DingTalk AI card template ID; enables single-message streaming replies |
-| `DINGTALK_ALLOWED_USER_IDS` | DingTalk allowlist |
-| `WEWORK_CORP_ID` | WeCom bot ID |
-| `WEWORK_SECRET` | WeCom secret |
-| `WEWORK_WS_URL` | WeCom WebSocket URL |
-| `WEWORK_ALLOWED_USER_IDS` | WeCom allowlist |
-| `WECHAT_APP_ID` | WeChat standard mode app ID |
-| `WECHAT_APP_SECRET` | WeChat standard mode app secret |
-| `WECHAT_TOKEN` | WeChat AGP mode token |
-| `WECHAT_GUID` | WeChat AGP mode GUID |
-| `WECHAT_USER_ID` | WeChat AGP mode user ID |
-| `WECHAT_WS_URL` | WeChat WebSocket URL |
-| `WECHAT_ALLOWED_USER_IDS` | WeChat allowlist |
+| Variable                     | Description                                                            |
+| ---------------------------- | ---------------------------------------------------------------------- |
+| `AI_COMMAND`                 | Select `claude`, `codex`, or `codebuddy`                               |
+| `CLAUDE_WORK_DIR`            | Default session working directory                                      |
+| `LOG_DIR`                    | Log directory                                                          |
+| `LOG_LEVEL`                  | Log level                                                              |
+| `HOOK_PORT`                  | Permission service port                                                |
+| `CODEX_PROXY`                | Proxy used by Codex to access `chatgpt.com`                            |
+| `OPENAI_API_KEY`             | Codex API key, can replace `codex login`                               |
+| `CODEBUDDY_CLI_PATH`         | Override CodeBuddy CLI path                                            |
+| `CODEBUDDY_TIMEOUT_MS`       | Override CodeBuddy timeout                                             |
+| `CODEBUDDY_SKIP_PERMISSIONS` | Override CodeBuddy skip-permissions behavior                           |
+| `CODEBUDDY_IDLE_TIMEOUT_MS`  | Abort CodeBuddy when it stays silent for too long                      |
+| `CODEBUDDY_API_KEY`          | CodeBuddy API key, can replace `codebuddy login`                       |
+| `CODEBUDDY_AUTH_TOKEN`       | CodeBuddy auth token, can replace `codebuddy login`                    |
+| `TELEGRAM_BOT_TOKEN`         | Telegram bot token                                                     |
+| `TELEGRAM_PROXY`             | Telegram proxy URL                                                     |
+| `TELEGRAM_ALLOWED_USER_IDS`  | Telegram allowlist                                                     |
+| `FEISHU_APP_ID`              | Feishu app ID                                                          |
+| `FEISHU_APP_SECRET`          | Feishu app secret                                                      |
+| `FEISHU_ALLOWED_USER_IDS`    | Feishu allowlist                                                       |
+| `QQ_BOT_APPID`               | QQ bot app ID                                                          |
+| `QQ_BOT_SECRET`              | QQ bot app secret                                                      |
+| `QQ_BOT_SANDBOX`             | QQ bot sandbox mode (`1` / `true` to enable, disabled by default)      |
+| `QQ_ALLOWED_USER_IDS`        | QQ allowlist                                                           |
+| `DINGTALK_CLIENT_ID`         | DingTalk client ID / AppKey                                            |
+| `DINGTALK_CLIENT_SECRET`     | DingTalk client secret / AppSecret                                     |
+| `DINGTALK_CARD_TEMPLATE_ID`  | DingTalk AI card template ID; enables single-message streaming replies |
+| `DINGTALK_ALLOWED_USER_IDS`  | DingTalk allowlist                                                     |
+| `WEWORK_CORP_ID`             | WeCom bot ID                                                           |
+| `WEWORK_SECRET`              | WeCom secret                                                           |
+| `WEWORK_WS_URL`              | WeCom WebSocket URL                                                    |
+| `WEWORK_ALLOWED_USER_IDS`    | WeCom allowlist                                                        |
+| `WECHAT_APP_ID`              | WeChat standard mode app ID                                            |
+| `WECHAT_APP_SECRET`          | WeChat standard mode app secret                                        |
+| `WECHAT_TOKEN`               | WeChat AGP mode token                                                  |
+| `WECHAT_GUID`                | WeChat AGP mode GUID                                                   |
+| `WECHAT_USER_ID`             | WeChat AGP mode user ID                                                |
+| `WECHAT_WS_URL`              | WeChat WebSocket URL                                                   |
+| `WECHAT_ALLOWED_USER_IDS`    | WeChat allowlist                                                       |
 ### Platform Setup Sources
@@ -375,15 +307,15 @@ DingTalk AI card templates are already compatible with the official "Search Resu
 ## IM Commands
-| Command | Description |
-| ---- | ---- |
-| `/help` | Show help |
-| `/new` | Start a new session |
-| `/status` | Show AI tool, version, session directory, and session ID |
-| `/cd <path>` | Change the session working directory |
-| `/pwd` | Show the current session working directory |
-| `/allow` `/y` | Approve a permission request |
-| `/deny` `/n` | Reject a permission request |
+| Command       | Description                                              |
+| ------------- | -------------------------------------------------------- |
+| `/help`       | Show help                                                |
+| `/new`        | Start a new session                                      |
+| `/status`     | Show AI tool, version, session directory, and session ID |
+| `/cd <path>`  | Change the session working directory                     |
+| `/pwd`        | Show the current session working directory               |
+| `/allow` `/y` | Approve a permission request                             |
+| `/deny` `/n`  | Reject a permission request                              |
 ## Troubleshooting

package/README.zh-CN.md CHANGED Viewed

@@ -14,19 +14,6 @@
 - 会话隔离：每个用户独立维护本地会话，`/new` 可重置
 - 常用命令：支持 `/help`、`/new`、`/cd`、`/pwd`、`/status`
-## 覆盖矩阵
-能力等级说明：`Native` 表示平台内原生支持，`Fallback` 表示有降级方案或文本兜底，`None` 表示当前暂不支持。
-| 平台 | 文本输入 | 图片输入 | 文件输入 | 语音输入 | 视频输入 | 流式回复 | 图片回复 | 卡片回复 |
-| ---- | ---- | ---- | ---- | ---- | ---- | ---- | ---- | ---- |
-| Telegram | Native | Native | Native | Native | Native | Native | Native | Native |
-| 飞书 | Native | Native | Native | Fallback | Fallback | Native | Native | Native |
-| QQ | Native | Fallback | Fallback | Fallback | Fallback | None | Fallback | Fallback |
-| 企业微信 | Native | Fallback | Fallback | Fallback | Fallback | Native | Native | Native |
-| 钉钉 | Native | Fallback | Fallback | Fallback | Fallback | Native | Fallback | Native |
-| 微信（测试中） | Native | Fallback | Fallback | Fallback | Fallback | Native | Fallback | Native |
 ## 环境要求
 - Node.js >= 20
@@ -50,12 +37,13 @@ open-im start
 ## CLI 命令
-| 命令 | 说明 |
-| ---- | ---- |
-| `open-im init` | 初始化或追加配置，不启动服务 |
-| `open-im start` | 后台运行服务 |
-| `open-im stop` | 停止后台服务 |
-| `open-im dev` | 前台运行（调试模式） |
+| 命令              | 说明                           |
+| ----------------- | ------------------------------ |
+| `open-im init`    | 初始化或追加配置，不启动服务   |
+| `open-im start`   | 后台运行服务                   |
+| `open-im stop`    | 停止后台服务                   |
+| `open-im dev`     | 前台运行（调试模式）           |
+| `open-im dashboard` | 仅启动 Web 配置页（不启动桥接服务） |
 ## 服务器部署与图形化配置
@@ -71,106 +59,50 @@ open-im start
 - **概览** – 已配置/已启用平台数量、服务状态（未启动或运行中）
 - **平台配置** – 启用并填写 Telegram、飞书、QQ、企业微信、钉钉的凭证（Bot Token/App ID/Secret、代理、该平台使用的 AI 工具、白名单用户 ID）。每个平台提供「校验配置」按钮
-- **AI 工具配置** – **公共**：默认 AI 工具（Claude / Codex / CodeBuddy）、工作目录、Hook 端口、日志级别。**分工具**：Claude（CLI 路径、超时、代理、配置路径、ANTHROPIC_* 等）、Codex（CLI 路径、超时、代理）、CodeBuddy（CLI 路径、超时）
+- **AI 工具配置** – **公共**：默认 AI 工具（Claude / Codex / CodeBuddy）、工作目录、Hook 端口、日志级别。**分工具**：Claude（CLI 路径、超时、代理、配置路径、ANTHROPIC\_\* 等）、Codex（CLI 路径、超时、代理）、CodeBuddy（CLI 路径、超时）
 - **服务控制** – 校验配置、保存、启动桥接、停止桥接
 微信暂不在网页中配置，如需使用请在 `~/.open-im/config.json` 中手动配置或通过 `open-im init` 引导。
-- `open-im start` 会同时启动桥接服务并提供该配置页
-- `open-im dev` 仅在未完成配置时自动打开页面
-- 已有配置但想手动打开时，执行 `open-im start` 后访问上述地址即可
-### 在服务器上部署（无图形界面）
-很多服务器没有桌面环境和浏览器，此时「自动打开浏览器」既没意义，还可能因为缺少 `xdg-open` 报错。推荐如下用法：
-#### 1）关闭自动打开浏览器
-在服务器上设置环境变量，然后启动：
-```bash
-export OPEN_IM_NO_BROWSER=1
-open-im start
-```
-这样只会在后台启动服务与配置页面，不会尝试执行 `xdg-open` / `open` / `start`。
-#### 2）检查配置页面是否已在服务器本机监听
-在服务器上执行：
-```bash
-ss -lntp | grep 39282        # 或 netstat -lntp | grep 39282
-curl -v http://127.0.0.1:39282/
-```
-若看到 `LISTEN 0 ... 127.0.0.1:39282` 且 `curl` 返回 HTML，则说明 Web 配置页已正常启动。
-#### 3）推荐方式：通过 SSH 隧道在本地浏览器访问
-不建议直接对外开放 39282 端口，而是使用 SSH 端口转发：
-```bash
-# 在本地电脑执行，将本地 39282 转发到服务器 127.0.0.1:39282
-ssh -L 39282:127.0.0.1:39282 user@your-server-ip
-```
-然后在本地浏览器访问：
-```text
-http://127.0.0.1:39282/
-```
-即可打开服务器上的配置页面。
-#### 4）可选：在服务器上直接访问的一次性登录链接
-如果你确实希望在服务器上绑定到公网 IP，从其他设备直接访问配置页面，可以：
+- `open-im start` 会同时启动桥接服务并提供该配置页（本机场景）。
+- `open-im dev` 仅在未完成配置时自动打开页面。
+- 已有配置但想单独打开配置页时，可以使用 `open-im dashboard` 启动仅 Web 配置服务。
-- **将 Web 配置服务绑定到所有网卡：**
+### 推荐的服务器端使用方式
-  ```bash
-  export OPEN_IM_NO_BROWSER=1
-  export OPEN_IM_WEB_HOST=0.0.0.0
-  open-im start
-  ```
+在远程服务器上，建议的最简单、安全的方式是：
-  - 默认情况下，`OPEN_IM_WEB_HOST` 为 `127.0.0.1`（仅本机访问）。
-  - 设置为 `0.0.0.0` 后，配置页面会监听在所有网卡上。
+1. **先通过 `dashboard` 在浏览器里完成配置**
-- **启动后，open-im 会在日志中输出一次性登录链接**，类似：
+   在服务器上执行：
-  ```text
-  ━━━━━━━━ Web Config Login ━━━━━━━━
-  Host binding : 0.0.0.0
-  Login URL    : http://127.0.0.1:39282/?login_token=xxxx
-  Note: replace 127.0.0.1 with your server IP or hostname when opening from another device.
-  This login link is valid for approximately 15 minutes and can be used only once.
-  After login, subsequent requests will use a short-lived session cookie.
-  ```
+   ```bash
+   export OPEN_IM_NO_BROWSER=1
+   # 可选：如果希望从其他设备访问配置页，可以绑定到所有网卡
+   # export OPEN_IM_WEB_HOST=0.0.0.0
+   open-im dashboard
+   ```
-- **在本地电脑或手机浏览器中**，将 `127.0.0.1` 换成服务器 IP 或域名，打开该链接：
+   - 这只会启动 Web 配置页，不会同时启动桥接服务。
+   - 若设置了 `OPEN_IM_WEB_HOST=0.0.0.0`，服务端会输出一次性登录链接，例如：
-  ```text
-  http://your-server-ip:39282/?login_token=xxxx
-  ```
+     ```text
+     http://your-server-ip:39282/?login_token=xxxx
+     ```
-  第一次成功访问会：
+   - 在浏览器中打开该链接，按照页面提示完成各个平台 / AI 工具配置，最后在页面中点击 **「Start bridge」** 按钮启动桥接服务。
-  - 消费掉这枚一次性 `login_token`（后续再访问同一链接会 401）；
-  - 在浏览器中创建一个短期会话，设置 `openim_session` Cookie；
-  - 自动重定向到不带参数的配置页。
+2. **后台运行桥接服务**
-  之后，只要 `openim_session` Cookie 仍然有效、进程仍在运行，就可以直接访问：
+   配置保存后，有两种启动方式：
+   - 在 Web 页面 Service 面板中直接点击 **「Start bridge」**；
+   - 或者在服务器上运行：
-  ```text
-  http://your-server-ip:39282/
-  ```
+     ```bash
+     open-im start
+     ```
-> 安全提示：
->
-> - 将 `OPEN_IM_WEB_HOST=0.0.0.0` 意味着该端口会对所有网卡开放，请务必结合防火墙/安全组、尽量配合 HTTPS + 反向代理（例如 Nginx/Caddy 的 Basic Auth 或 OIDC 登录）一起使用。
-> - 如无把握，优先使用上面的 SSH 隧道方案（第 3 步），安全性更高。
+   这会根据已保存的配置，在后台长期运行桥接服务。
 ## 会话说明
@@ -321,46 +253,46 @@ codebuddy login
 ### 常用环境变量
-| 变量 | 说明 |
-| ---- | ---- |
-| `AI_COMMAND` | 选择 `claude` / `codex` / `codebuddy` |
-| `CLAUDE_WORK_DIR` | 默认会话目录 |
-| `LOG_DIR` | 日志目录 |
-| `LOG_LEVEL` | 日志级别 |
-| `HOOK_PORT` | 权限服务端口 |
-| `CODEX_PROXY` | Codex 访问 `chatgpt.com` 的代理 |
-| `OPENAI_API_KEY` | Codex API Key，可替代 `codex login` |
-| `CODEBUDDY_CLI_PATH` | 覆盖 CodeBuddy CLI 路径 |
-| `CODEBUDDY_TIMEOUT_MS` | 覆盖 CodeBuddy 超时 |
-| `CODEBUDDY_SKIP_PERMISSIONS` | 覆盖 CodeBuddy 的跳过权限确认行为 |
-| `CODEBUDDY_IDLE_TIMEOUT_MS` | CodeBuddy 长时间无输出时自动终止 |
-| `CODEBUDDY_API_KEY` | CodeBuddy API Key，可替代 `codebuddy login` |
-| `CODEBUDDY_AUTH_TOKEN` | CodeBuddy Auth Token，可替代 `codebuddy login` |
-| `TELEGRAM_BOT_TOKEN` | Telegram Bot Token |
-| `TELEGRAM_PROXY` | Telegram 代理地址 |
-| `TELEGRAM_ALLOWED_USER_IDS` | Telegram 白名单 |
-| `FEISHU_APP_ID` | 飞书 App ID |
-| `FEISHU_APP_SECRET` | 飞书 App Secret |
-| `FEISHU_ALLOWED_USER_IDS` | 飞书白名单 |
-| `QQ_BOT_APPID` | QQ 机器人 App ID |
-| `QQ_BOT_SECRET` | QQ 机器人 App Secret |
-| `QQ_BOT_SANDBOX` | QQ 机器人沙箱模式（`1`/`true` 启用，默认关闭） |
-| `QQ_ALLOWED_USER_IDS` | QQ 白名单 |
-| `DINGTALK_CLIENT_ID` | 钉钉应用 Client ID / AppKey |
-| `DINGTALK_CLIENT_SECRET` | 钉钉应用 Client Secret / AppSecret |
-| `DINGTALK_CARD_TEMPLATE_ID` | 钉钉 AI 卡片模板 ID，配置后启用单条流式回复 |
-| `DINGTALK_ALLOWED_USER_IDS` | 钉钉白名单 |
-| `WEWORK_CORP_ID` | 企业微信 Bot ID |
-| `WEWORK_SECRET` | 企业微信 Secret |
-| `WEWORK_WS_URL` | 企业微信 WebSocket 地址 |
-| `WEWORK_ALLOWED_USER_IDS` | 企业微信白名单 |
-| `WECHAT_APP_ID` | 微信标准模式 App ID |
-| `WECHAT_APP_SECRET` | 微信标准模式 App Secret |
-| `WECHAT_TOKEN` | 微信 AGP 模式 Token |
-| `WECHAT_GUID` | 微信 AGP 模式 GUID |
-| `WECHAT_USER_ID` | 微信 AGP 模式 User ID |
-| `WECHAT_WS_URL` | 微信 WebSocket 地址 |
-| `WECHAT_ALLOWED_USER_IDS` | 微信白名单 |
+| 变量                         | 说明                                           |
+| ---------------------------- | ---------------------------------------------- |
+| `AI_COMMAND`                 | 选择 `claude` / `codex` / `codebuddy`          |
+| `CLAUDE_WORK_DIR`            | 默认会话目录                                   |
+| `LOG_DIR`                    | 日志目录                                       |
+| `LOG_LEVEL`                  | 日志级别                                       |
+| `HOOK_PORT`                  | 权限服务端口                                   |
+| `CODEX_PROXY`                | Codex 访问 `chatgpt.com` 的代理                |
+| `OPENAI_API_KEY`             | Codex API Key，可替代 `codex login`            |
+| `CODEBUDDY_CLI_PATH`         | 覆盖 CodeBuddy CLI 路径                        |
+| `CODEBUDDY_TIMEOUT_MS`       | 覆盖 CodeBuddy 超时                            |
+| `CODEBUDDY_SKIP_PERMISSIONS` | 覆盖 CodeBuddy 的跳过权限确认行为              |
+| `CODEBUDDY_IDLE_TIMEOUT_MS`  | CodeBuddy 长时间无输出时自动终止               |
+| `CODEBUDDY_API_KEY`          | CodeBuddy API Key，可替代 `codebuddy login`    |
+| `CODEBUDDY_AUTH_TOKEN`       | CodeBuddy Auth Token，可替代 `codebuddy login` |
+| `TELEGRAM_BOT_TOKEN`         | Telegram Bot Token                             |
+| `TELEGRAM_PROXY`             | Telegram 代理地址                              |
+| `TELEGRAM_ALLOWED_USER_IDS`  | Telegram 白名单                                |
+| `FEISHU_APP_ID`              | 飞书 App ID                                    |
+| `FEISHU_APP_SECRET`          | 飞书 App Secret                                |
+| `FEISHU_ALLOWED_USER_IDS`    | 飞书白名单                                     |
+| `QQ_BOT_APPID`               | QQ 机器人 App ID                               |
+| `QQ_BOT_SECRET`              | QQ 机器人 App Secret                           |
+| `QQ_BOT_SANDBOX`             | QQ 机器人沙箱模式（`1`/`true` 启用，默认关闭） |
+| `QQ_ALLOWED_USER_IDS`        | QQ 白名单                                      |
+| `DINGTALK_CLIENT_ID`         | 钉钉应用 Client ID / AppKey                    |
+| `DINGTALK_CLIENT_SECRET`     | 钉钉应用 Client Secret / AppSecret             |
+| `DINGTALK_CARD_TEMPLATE_ID`  | 钉钉 AI 卡片模板 ID，配置后启用单条流式回复    |
+| `DINGTALK_ALLOWED_USER_IDS`  | 钉钉白名单                                     |
+| `WEWORK_CORP_ID`             | 企业微信 Bot ID                                |
+| `WEWORK_SECRET`              | 企业微信 Secret                                |
+| `WEWORK_WS_URL`              | 企业微信 WebSocket 地址                        |
+| `WEWORK_ALLOWED_USER_IDS`    | 企业微信白名单                                 |
+| `WECHAT_APP_ID`              | 微信标准模式 App ID                            |
+| `WECHAT_APP_SECRET`          | 微信标准模式 App Secret                        |
+| `WECHAT_TOKEN`               | 微信 AGP 模式 Token                            |
+| `WECHAT_GUID`                | 微信 AGP 模式 GUID                             |
+| `WECHAT_USER_ID`             | 微信 AGP 模式 User ID                          |
+| `WECHAT_WS_URL`              | 微信 WebSocket 地址                            |
+| `WECHAT_ALLOWED_USER_IDS`    | 微信白名单                                     |
 ### 平台配置来源
@@ -381,15 +313,15 @@ codebuddy login
 ## IM 内命令
-| 命令 | 说明 |
-| ---- | ---- |
-| `/help` | 显示帮助 |
-| `/new` | 开始新会话 |
-| `/status` | 显示 AI 工具、版本、会话目录、会话 ID |
-| `/cd <路径>` | 切换会话目录 |
-| `/pwd` | 显示当前会话目录 |
-| `/allow` `/y` | 允许权限请求 |
-| `/deny` `/n` | 拒绝权限请求 |
+| 命令          | 说明                                  |
+| ------------- | ------------------------------------- |
+| `/help`       | 显示帮助                              |
+| `/new`        | 开始新会话                            |
+| `/status`     | 显示 AI 工具、版本、会话目录、会话 ID |
+| `/cd <路径>`  | 切换会话目录                          |
+| `/pwd`        | 显示当前会话目录                      |
+| `/allow` `/y` | 允许权限请求                          |
+| `/deny` `/n`  | 拒绝权限请求                          |
 ## 故障排除

package/dist/cli.js CHANGED Viewed

@@ -60,6 +60,13 @@ async function cmdStart() {
     console.log("\nopen-im started in the background.");
     console.log(`  pid: ${child.pid}`);
     console.log(`  config page: ${getWebConfigUrl()}`);
+    if (process.env.OPEN_IM_WEB_HOST && process.env.OPEN_IM_WEB_HOST !== "127.0.0.1") {
+        console.log("");
+        console.log("NOTE:");
+        console.log("  The config page is bound to OPEN_IM_WEB_HOST.");
+        console.log("  A one-time login URL (with login_token) has been printed by the config-web server logger.");
+        console.log("  Please use that URL (replacing 127.0.0.1 with your server IP/hostname) for the first login.");
+    }
 }
 async function cmdStop() {
     const status = getManagerStatus();

package/dist/config-web.d.ts CHANGED Viewed

@@ -5,6 +5,7 @@ export interface StartedWebConfigServer {
     close: () => Promise<void>;
     url: string;
     waitForResult: Promise<WebFlowResult>;
+    loginUrl?: string;
 }
 export declare function getHealthPlatformSnapshot(file: FileConfig, env?: NodeJS.ProcessEnv): Record<string, {
     configured: boolean;

package/dist/config-web.js CHANGED Viewed

@@ -830,6 +830,7 @@ export async function startWebConfigServer(options) {
         if (timer)
             clearTimeout(timer);
     });
+    let loginUrlForReturn;
     // 当绑定到非 127.0.0.1（例如 0.0.0.0）时，为远程访问生成一次性登录链接
     if (host !== "127.0.0.1") {
         const loginTtlMs = 15 * 60 * 1000; // 15 分钟内有效
@@ -837,6 +838,7 @@ export async function startWebConfigServer(options) {
         const displayHost = host === "0.0.0.0" ? "127.0.0.1" : host;
         const baseUrl = `http://${displayHost}:${port}`;
         const loginUrl = `${baseUrl}/?login_token=${encodeURIComponent(loginToken)}`;
+        loginUrlForReturn = loginUrl;
         log.info("━━━━━━━━ Web Config Login ━━━━━━━━");
         log.info(`Host binding : ${host}`);
         log.info(`Login URL    : ${loginUrl}`);
@@ -854,13 +856,15 @@ export async function startWebConfigServer(options) {
             settle("cancel");
         },
         url: `http://127.0.0.1:${port}`,
+        loginUrl: loginUrlForReturn,
         waitForResult,
     };
 }
 export async function runWebConfigFlow(options) {
     const started = await startWebConfigServer(options);
-    openBrowser(started.url);
-    log.info(`Opened local configuration page: ${started.url}`);
+    const targetUrl = started.loginUrl ?? started.url;
+    openBrowser(targetUrl);
+    log.info(`Opened local configuration page: ${targetUrl}`);
     log.info(process.env.OPEN_IM_NO_BROWSER === "1" ? "Browser launch disabled. Open the URL manually." : "Save the configuration in your browser to continue.");
     return started.waitForResult;
 }

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@wu529778790/open-im",
-  "version": "1.7.1-beta.2",
+  "version": "1.7.1-beta.4",
   "description": "Multi-platform IM bridge for AI CLI tools (Claude, Codex, CodeBuddy)",
   "type": "module",
   "main": "dist/index.js",