@yancyyu/openhermit 1.6.38 → 1.6.40

package/src/main/server.ts

@@ -41,6 +41,7 @@ import { fileURLToPath } from 'node:url';
 
 import cors from '@fastify/cors';
 import staticPlugin from '@fastify/static';
+import { Cron } from 'croner';
 import Fastify from 'fastify';
 
 import {
@@ -48,13 +49,22 @@ import {
   CROSS_TEAM_SOURCE,
   formatCrossTeamText,
 } from '@shared/constants/crossTeam';
-import type { CcAgentType } from '../shared/types/ccConnect';
+import type { CcAgentType, CcProjectPlatform } from '../shared/types/ccConnect';
 import { CcConnectBridge } from './services/ccConnect/CcConnectBridge';
 import { CcConnectClient } from './services/ccConnect/CcConnectClient';
 import { TeamProvisioningService } from './services/teams-mvp';
 import { TaskDispatchService } from './services/teams-mvp/TaskDispatchService';
+import { resolveCcProjectName } from './utils/teamProjectResolution';
 import { CollaborationBoardService } from './services/teams-mvp/CollaborationBoardService';
-import type { TaskBusConfig, TeamLaunchRequest } from '@shared/types/team';
+import { SystemManagerConfigService } from './services/system-manager/SystemManagerConfigService';
+import { SystemManagerPtyService } from './services/system-manager/SystemManagerPtyService';
+import { WorkflowPromptService } from './services/system-manager/WorkflowPromptService';
+import {
+  SYSTEM_MANAGER_BIND_PROJECT,
+  SYSTEM_MANAGER_DISPLAY_NAME,
+  SYSTEM_MANAGER_TEAM_NAME,
+} from '@shared/types/team';
+import type { SystemManagerSummary, TaskBusConfig, TeamLaunchRequest } from '@shared/types/team';
 import type { TeamManifest } from './services/teams-mvp/TeamWorkspaceService';
 import { UpdateService } from './services/UpdateService';
 import {
@@ -63,6 +73,11 @@ import {
   triggerScan,
   getTelemetryStatus,
 } from './services/session-intelligence/UsageTelemetryService';
+import {
+  ConversationTelemetryService,
+  shouldIncludeContent,
+} from './services/session-intelligence/ConversationTelemetryService';
+import { LocalSessionScanner } from './services/session-intelligence/LocalSessionScanner';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(path.join(__dirname, '../../package.json'), 'utf-8'));
@@ -72,6 +87,34 @@ const HOST = process.env.HOST ?? '127.0.0.1';
 const PORT = Number.parseInt(process.env.PORT ?? '5680', 10);
 const STATIC_DIR = process.env.STATIC_DIR ?? path.resolve(REPO_ROOT, 'dist-renderer');
 const HARNESS_BRIDGE_CONNECT_TIMEOUT_MS = 10_000;
+const CC_AGENT_TYPES: readonly CcAgentType[] = [
+  'claudecode',
+  'codex',
+  'cursor',
+  'gemini',
+  'iflow',
+  'kimi',
+  'devin',
+  'opencode',
+  'qoder',
+  'pi',
+  'acp',
+  'tmux',
+];
+const SYSTEM_MANAGER_DESCRIPTION =
+  '项目级 Claude Code 控制台，负责插件、MCP、Env、数字员工和统计数据的托管管理。';
+
+function toCcAgentType(value: string | undefined): CcAgentType {
+  return CC_AGENT_TYPES.includes(value as CcAgentType) ? (value as CcAgentType) : 'claudecode';
+}
+
+function isReservedSystemTeamName(teamName: string): boolean {
+  return (
+    teamName === 'default' ||
+    teamName === SYSTEM_MANAGER_BIND_PROJECT ||
+    teamName === SYSTEM_MANAGER_TEAM_NAME
+  );
+}
 
 // ===========================================================================
 // Hermit runtime config — ~/.hermit/config.json
@@ -144,8 +187,14 @@ function loadConfig(): HermitConfig {
       const raw = JSON.parse(readFileSync(HERMIT_CONFIG_FILE, 'utf-8')) as Partial<HermitConfig>;
       merged = { ...defaults, ...raw };
     }
-  } catch {
-    /* ignore parse errors */
+  } catch (err) {
+    const msg = err instanceof SyntaxError
+      ? `${HERMIT_CONFIG_FILE} 格式错误: ${err.message}。将使用默认配置并覆盖修复。`
+      : `读取 ${HERMIT_CONFIG_FILE} 失败: ${err instanceof Error ? err.message : String(err)}`;
+    console.warn(`[Hermit] ${msg}`);
+    // Auto-heal: rewrite the config file with valid defaults + any readable env overrides
+    mkdirSync(HERMIT_HOME, { recursive: true });
+    writeFileSync(HERMIT_CONFIG_FILE, JSON.stringify(defaults, null, 2), 'utf-8');
   }
   if (!merged.ccBridgeToken.trim()) {
     merged = { ...merged, ccBridgeToken: tomlBridgeToken || merged.ccToken };
@@ -175,7 +224,15 @@ function readHermitConfigRaw(): { path: string; content: string } {
 }
 
 function writeHermitConfigRaw(content: string): HermitConfig {
-  const parsed = JSON.parse(content) as unknown;
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(content);
+  } catch (err) {
+    if (err instanceof SyntaxError) {
+      throw new Error(`配置文件 JSON 格式错误: ${err.message}。请检查是否有尾逗号、单引号或注释等非法 JSON 语法。`);
+    }
+    throw err;
+  }
   if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
     throw new Error('Hermit 配置必须是 JSON 对象');
   }
@@ -198,6 +255,138 @@ const bridge = new CcConnectBridge({
   bridgeToken: runtimeConfig.ccBridgeToken || runtimeConfig.ccToken,
 });
 const svc = new TeamProvisioningService(cc, bridge);
+const systemManagerConfig = new SystemManagerConfigService(REPO_ROOT);
+const systemManagerPty = new SystemManagerPtyService();
+const workflowPromptService = new WorkflowPromptService();
+
+systemManagerPty.on('data', (event) => broadcastSse('terminal:data', event));
+systemManagerPty.on('exit', (event) => broadcastSse('terminal:exit', event));
+
+async function getSystemManagerWorkDir(): Promise<string> {
+  try {
+    return (await systemManagerConfig.getConfig()).selectedWorkDir;
+  } catch {
+    return REPO_ROOT;
+  }
+}
+
+async function syncSystemManagerManifestWorkDir(workDir: string): Promise<void> {
+  try {
+    const manifest = await svc.readTeamManifest(SYSTEM_MANAGER_TEAM_NAME);
+    if (manifest.workDir !== workDir) {
+      await svc.updateTeam(SYSTEM_MANAGER_TEAM_NAME, { workDir });
+    }
+  } catch {
+    // The console team may not exist yet; ensureSystemManager() will create it later.
+  }
+}
+
+let systemManagerEnsurePromise: Promise<SystemManagerSummary> | null = null;
+
+async function ensureSystemManagerUncached(): Promise<SystemManagerSummary> {
+  const workDir = await getSystemManagerWorkDir();
+  let ccConnectProjectStatus: SystemManagerSummary['ccConnectProjectStatus'] = 'bound';
+  try {
+    await cc.getProject(SYSTEM_MANAGER_BIND_PROJECT);
+  } catch {
+    ccConnectProjectStatus = 'missing';
+  }
+
+  let manifest: TeamManifest;
+  try {
+    manifest = await svc.readTeamManifest(SYSTEM_MANAGER_TEAM_NAME);
+  } catch {
+    const created = await svc.createTeam({
+      displayName: SYSTEM_MANAGER_TEAM_NAME,
+      bindProject: SYSTEM_MANAGER_BIND_PROJECT,
+      harness: 'claudecode',
+      workDir,
+      color: 'slate',
+      description: SYSTEM_MANAGER_DESCRIPTION,
+      collaboration: false,
+      createCcProject: false,
+      injectInstructions: false,
+    });
+    manifest = created.manifest;
+  }
+
+  if (
+    manifest.displayName !== SYSTEM_MANAGER_DISPLAY_NAME ||
+    manifest.bindProject !== SYSTEM_MANAGER_BIND_PROJECT ||
+    manifest.description !== SYSTEM_MANAGER_DESCRIPTION ||
+    manifest.color !== 'slate' ||
+    manifest.collaboration !== false ||
+    manifest.workDir !== workDir
+  ) {
+    manifest = await svc.updateTeam(manifest.slug, {
+      displayName: SYSTEM_MANAGER_DISPLAY_NAME,
+      bindProject: SYSTEM_MANAGER_BIND_PROJECT,
+      color: 'slate',
+      description: SYSTEM_MANAGER_DESCRIPTION,
+      collaboration: false,
+      workDir,
+    });
+  }
+
+  return {
+    teamName: SYSTEM_MANAGER_TEAM_NAME,
+    displayName: SYSTEM_MANAGER_DISPLAY_NAME,
+    bindProject: SYSTEM_MANAGER_BIND_PROJECT,
+    workDir: manifest.workDir || workDir,
+    projectPath: manifest.workDir || workDir,
+    description: manifest.description || SYSTEM_MANAGER_DESCRIPTION,
+    localStatus: 'ready',
+    ccConnectProjectStatus,
+    feishuStatus: 'unbound',
+  };
+}
+
+async function ensureSystemManager(): Promise<SystemManagerSummary> {
+  systemManagerEnsurePromise ??= ensureSystemManagerUncached().finally(() => {
+    systemManagerEnsurePromise = null;
+  });
+  return systemManagerEnsurePromise;
+}
+
+const conversationTelemetry = new ConversationTelemetryService({
+  cc,
+  listTeams: () => svc.listTeams(),
+  readTeamManifest: (teamName) => svc.readTeamManifest(teamName),
+});
+const localSessionScanner = new LocalSessionScanner();
+
+async function computeTeamStats(
+  workDir: string
+): Promise<{ sessions: number; messages: number; tokens: number; durationMs: number } | undefined> {
+  if (!workDir) return undefined;
+  try {
+    const sessions = await localSessionScanner.scanSummaries(workDir, '');
+    if (sessions.length === 0) return undefined;
+    let tokens = 0;
+    let messages = 0;
+    let earliest: string | null = null;
+    let latest: string | null = null;
+    for (const s of sessions) {
+      tokens += s.inputTokens + s.outputTokens;
+      messages += s.messageCount;
+      if (s.startTime && (!earliest || s.startTime < earliest)) earliest = s.startTime;
+      if (s.endTime && (!latest || s.endTime > latest)) latest = s.endTime;
+    }
+    let durationMs = 0;
+    if (earliest && latest) {
+      durationMs = Date.parse(latest) - Date.parse(earliest);
+      if (durationMs < 0) durationMs = 0;
+    }
+    return { sessions: sessions.length, messages, tokens, durationMs };
+  } catch {
+    return undefined;
+  }
+}
+
+async function resolveRouteCcProjectName(teamName: string): Promise<string> {
+  return resolveCcProjectName(teamName, (name) => svc.readTeamManifest(name));
+}
+
 const collabBoard = new CollaborationBoardService();
 const taskDispatch = new TaskDispatchService(svc['workspace'], collabBoard);
 
@@ -387,9 +576,37 @@ const app = Fastify({
 // Plugins
 // ===========================================================================
 
+const configuredCorsOrigins = process.env.CORS_ORIGIN?.split(',')
+  .map((origin) => origin.trim())
+  .filter(Boolean);
+const defaultWebPort = process.env.WEB_PORT?.trim() || '5174';
+const allowedCorsOrigins = configuredCorsOrigins?.length
+  ? configuredCorsOrigins
+  : [
+      `http://127.0.0.1:${PORT}`,
+      `http://localhost:${PORT}`,
+      `http://127.0.0.1:${defaultWebPort}`,
+      `http://localhost:${defaultWebPort}`,
+    ];
+const allowedOriginSet = new Set(allowedCorsOrigins);
+
+function isTrustedBrowserOrigin(origin: string | undefined): boolean {
+  if (!origin) return true;
+  return allowedOriginSet.has(origin);
+}
+
+function assertTrustedBrowserOrigin(request: import('fastify').FastifyRequest): void {
+  const origin = Array.isArray(request.headers.origin)
+    ? request.headers.origin[0]
+    : request.headers.origin;
+  if (!isTrustedBrowserOrigin(origin)) {
+    throw new Error(`Forbidden origin: ${origin}`);
+  }
+}
+
 await app.register(cors, {
-  origin: process.env.CORS_ORIGIN?.split(',') ?? true,
-  methods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],
+  origin: allowedCorsOrigins,
+  methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
 });
 
 // ===========================================================================
@@ -431,11 +648,28 @@ async function proxyToCcConnect(
   }
 
   const body = Buffer.from(await upstream.arrayBuffer());
+
+  // Detect non-JSON responses (HTML 404 pages, etc.) and return a clear error
+  // instead of forwarding garbage that will crash the frontend's JSON.parse.
+  const contentType = upstream.headers.get('content-type') ?? '';
+  if (!contentType.includes('json') && upstream.status >= 400) {
+    const snippet = body.toString('utf-8').slice(0, 100).trim();
+    request.log.warn(
+      { target, status: upstream.status, contentType, snippet },
+      'cc-connect returned non-JSON error response'
+    );
+    return reply.code(upstream.status).send({
+      ok: false,
+      error: `cc-connect 端点 ${subPath} 返回了非 JSON 响应 (HTTP ${upstream.status})。` +
+        '请检查 cc-connect 是否正在运行且支持该端点。',
+    });
+  }
+
   return reply
     .code(upstream.status)
     .header(
       'Content-Type',
-      upstream.headers.get('content-type') ?? 'application/json; charset=utf-8'
+      contentType || 'application/json; charset=utf-8'
     )
     .send(body);
 }
@@ -786,72 +1020,241 @@ app.post('/api/cc-reload', async () => {
 // Teams — cc-connect projects 即团队，本地 ~/.hermit/teams/ 仅存 tasks + 额外元数据
 // ===========================================================================
 
-// GET /api/teams → 从 cc-connect 读取 project 列表，合并本地元数据（displayName 等）
+// POST /api/system-manager/ensure → 确保项目级控制台存在
+app.post('/api/system-manager/ensure', async (_request, reply) => {
+  try {
+    return await ensureSystemManager();
+  } catch (err) {
+    return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
+  }
+});
+
+app.get('/api/system-manager/status', async (_request, reply) => {
+  try {
+    return await systemManagerConfig.getStatus();
+  } catch (err) {
+    return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
+  }
+});
+
+app.get('/api/system-manager/config', async (_request, reply) => {
+  try {
+    return await systemManagerConfig.getConfig();
+  } catch (err) {
+    return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
+  }
+});
+
+app.put<{ Body: { selectedWorkDir?: string; workflowFolder?: string | null } }>(
+  '/api/system-manager/config',
+  async (request, reply) => {
+    try {
+      const config = await systemManagerConfig.updateConfig(request.body ?? {});
+      await syncSystemManagerManifestWorkDir(config.selectedWorkDir);
+      return config;
+    } catch (err) {
+      return reply.code(400).send({ error: err instanceof Error ? err.message : String(err) });
+    }
+  }
+);
+
+app.post<{ Body: { folder?: string } }>(
+  '/api/system-manager/workflows/list',
+  async (request, reply) => {
+    try {
+      assertTrustedBrowserOrigin(request);
+      const config = await systemManagerConfig.getConfig();
+      const folder =
+        typeof request.body?.folder === 'string' ? request.body.folder : config.workflowFolder;
+      if (!folder) return { folder: '', prompts: [], warnings: [] };
+      const result = await workflowPromptService.list(folder);
+      await systemManagerConfig.updateConfig({ workflowFolder: result.folder });
+      return result;
+    } catch {
+      return { folder: '', prompts: [], warnings: [] };
+    }
+  }
+);
+
+app.post<{ Body: { id?: string } }>(
+  '/api/system-manager/workflows/read',
+  async (request, reply) => {
+    try {
+      assertTrustedBrowserOrigin(request);
+      const config = await systemManagerConfig.getConfig();
+      if (!config.workflowFolder)
+        return reply.code(400).send({ error: 'workflowFolder is not configured' });
+      const id = typeof request.body?.id === 'string' ? request.body.id : '';
+      return await workflowPromptService.read(config.workflowFolder, id);
+    } catch (err) {
+      return reply.code(400).send({ error: err instanceof Error ? err.message : String(err) });
+    }
+  }
+);
+
+app.post<{ Body: { command?: string; args?: string[]; cwd?: string; cols?: number; rows?: number } }>(
+  '/api/terminal/spawn',
+  async (request, reply) => {
+    try {
+      assertTrustedBrowserOrigin(request);
+      const requestedCwd = typeof request.body?.cwd === 'string' ? request.body.cwd.trim() : '';
+      const command = typeof request.body?.command === 'string' ? request.body.command : 'claude';
+      const args = Array.isArray(request.body?.args) ? request.body.args : [];
+
+      // Use requested cwd if provided; otherwise fall back to system manager config
+      let cwd: string;
+      if (requestedCwd) {
+        cwd = requestedCwd;
+        // Update system manager config to track the work dir
+        await systemManagerConfig.updateConfig({ selectedWorkDir: cwd });
+        await syncSystemManagerManifestWorkDir(cwd);
+      } else {
+        const config = await systemManagerConfig.getConfig();
+        cwd = config.selectedWorkDir;
+      }
+
+      const ptyId = await systemManagerPty.spawn({
+        command,
+        args,
+        cwd,
+        cols: request.body?.cols,
+        rows: request.body?.rows,
+      });
+      return { ptyId };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      return reply
+        .code(message.startsWith('Forbidden origin:') ? 403 : 500)
+        .send({ error: message });
+    }
+  }
+);
+
+app.post<{ Params: { ptyId: string }; Body: { data?: string } }>(
+  '/api/terminal/:ptyId/write',
+  async (request, reply) => {
+    try {
+      assertTrustedBrowserOrigin(request);
+      systemManagerPty.write(request.params.ptyId, request.body?.data ?? '');
+      return { ok: true };
+    } catch (err) {
+      return reply.code(404).send({ error: err instanceof Error ? err.message : String(err) });
+    }
+  }
+);
+
+app.post<{ Params: { ptyId: string }; Body: { cols?: number; rows?: number } }>(
+  '/api/terminal/:ptyId/resize',
+  async (request, reply) => {
+    try {
+      assertTrustedBrowserOrigin(request);
+      systemManagerPty.resize(
+        request.params.ptyId,
+        request.body?.cols ?? 120,
+        request.body?.rows ?? 34
+      );
+      return { ok: true };
+    } catch (err) {
+      return reply.code(403).send({ error: err instanceof Error ? err.message : String(err) });
+    }
+  }
+);
+
+app.delete<{ Params: { ptyId: string } }>('/api/terminal/:ptyId', async (request, reply) => {
+  try {
+    assertTrustedBrowserOrigin(request);
+    await systemManagerPty.kill(request.params.ptyId);
+    return { ok: true };
+  } catch (err) {
+    return reply.code(403).send({ error: err instanceof Error ? err.message : String(err) });
+  }
+});
+
+// POST /api/terminal/open-external — open command in system Terminal.app
+app.post<{ Body: { command: string; args?: string[]; cwd?: string } }>(
+  '/api/terminal/open-external',
+  async (request, reply) => {
+    try {
+      const { command, args = [], cwd } = request.body ?? {};
+      if (!command) return reply.code(400).send({ error: 'command is required' });
+      const cmd = [command, ...args].join(' ');
+      const script = cwd
+        ? `tell application "Terminal"\ndo script "cd ${cwd.replace(/"/g, '\\"')} && ${cmd.replace(/"/g, '\\"')}"\nactivate\nend tell`
+        : `tell application "Terminal"\ndo script "${cmd.replace(/"/g, '\\"')}"\nactivate\nend tell`;
+      const { execFile } = await import('node:child_process');
+      execFile('osascript', ['-e', script]);
+      return { ok: true };
+    } catch (err) {
+      return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
+    }
+  }
+);
+
+// GET /api/teams → Hermit 本地团队优先，裸 cc-connect project 作为历史兼容显示；过滤飞书/系统项目
 app.get('/api/teams', async () => {
   try {
-    const projects = await cc.listProjects();
-    const summaries = await Promise.all(
-      projects.map(async (p) => {
-        // platforms 从 listProjects 返回的是 string[]，有 platform 即认为在线
-        const isOnline = Array.isArray(p.platforms) && p.platforms.length > 0;
-
-        // 尝试从本地元数据读取 displayName 等信息
-        let displayName = p.name;
-        let color = 'blue';
-        let description = `${p.agent_type} · ${p.platforms?.join(', ') ?? ''}`;
-        let workDir = '';
-        let pendingDelete = false;
-        let restartRequired = false;
-        try {
-          const meta = await svc.readTeamManifest(p.name);
-          if (meta.displayName) displayName = meta.displayName;
-          if (meta.color) color = meta.color;
-          if (meta.description) description = meta.description;
-          pendingDelete = meta.pendingDelete === true;
-          restartRequired = meta.restartRequired === true;
-          if (typeof meta.workDir === 'string') {
-            workDir = meta.workDir.trim();
-          }
-        } catch {
-          /* no local manifest, use defaults */
-        }
+    const [projects, localTeams] = await Promise.all([
+      cc.listProjects().catch(() => []),
+      svc.listTeams().catch(() => []),
+    ]);
+    const projectByName = new Map(projects.map((project) => [project.name, project]));
+    const shouldHideProject = (name: string): boolean =>
+      isReservedSystemTeamName(name) || name.startsWith('feishu:');
 
-        // 兼容仅存在于 cc-connect 的团队：回退读取 project 详情拿 work_dir。
-        if (!workDir) {
-          try {
-            const detail = await cc.getProject(p.name);
-            if (typeof detail.work_dir === 'string') {
-              workDir = detail.work_dir.trim();
+    const summaries = await Promise.all(
+      localTeams
+        .filter((meta) => {
+          const bindProject = meta.bindProject || meta.slug;
+          return (
+            meta.pendingDelete !== true &&
+            !isReservedSystemTeamName(meta.slug) &&
+            !shouldHideProject(bindProject) &&
+            !meta.slug.startsWith('feishu:')
+          );
+        })
+        .map(async (meta) => {
+          const bindProject = meta.bindProject || meta.slug;
+          const project = projectByName.get(bindProject);
+          const isOnline = Array.isArray(project?.platforms) && project.platforms.length > 0;
+          let workDir = (meta.workDir || '').trim();
+          if (!workDir && project) {
+            try {
+              const detail = await cc.getProject(bindProject);
+              if (typeof detail.work_dir === 'string' && detail.work_dir.trim()) {
+                workDir = detail.work_dir.trim();
+              }
+            } catch {
+              // ignore detail read failure, keep manifest/default path
             }
-          } catch {
-            // ignore detail read failure, keep empty path
           }
-        }
+          const harness = toCcAgentType(project?.agent_type || meta.harness);
+          const color = meta.color || 'blue';
+          const displayName = meta.displayName || meta.slug;
 
-        return {
-          teamName: p.name,
-          displayName,
-          description,
-          color,
-          memberCount: 1,
-          members: [{ name: p.name, role: 'agent', agentId: p.agent_type, color }],
-          taskCount: 0,
-          lastActivity: null,
-          isAlive: isOnline,
-          harness: p.agent_type,
-          bindProject: p.name,
-          workDir,
-          projectPath: workDir || undefined,
-          sessionsCount: p.sessions_count,
-          heartbeatEnabled: p.heartbeat_enabled,
-          pendingDelete,
-          restartRequired,
-        };
-      })
-    );
-    return summaries.filter(
-      (team) => team.pendingDelete !== true && team.teamName !== 'my-project'
+          return {
+            teamName: meta.slug,
+            displayName,
+            description: meta.description || '本地数字员工',
+            color,
+            memberCount: 1,
+            members: [{ name: displayName, role: 'agent', agentId: harness, color }],
+            taskCount: 0,
+            lastActivity: null,
+            isAlive: isOnline,
+            harness,
+            bindProject,
+            workDir,
+            projectPath: workDir || undefined,
+            sessionsCount: project?.sessions_count ?? 0,
+            heartbeatEnabled: project?.heartbeat_enabled ?? false,
+            pendingDelete: meta.pendingDelete === true,
+            restartRequired: meta.restartRequired === true,
+            stats: await computeTeamStats(workDir),
+          };
+        })
     );
+
+    return summaries;
   } catch {
     return [];
   }
@@ -869,41 +1272,36 @@ app.post('/api/teams/create', async (request, reply) => {
     if (!name) return reply.code(400).send({ error: 'name required' });
     if (!workDir) return reply.code(400).send({ error: 'workDir required' });
 
+    // Check for duplicate displayName to prevent creating multiple teams with the same Chinese name
+    const existingTeams = await svc.listTeams().catch(() => []);
+    const normalizedName = displayName.toLowerCase();
+    const duplicate = existingTeams.find(
+      (t) => t.displayName?.toLowerCase() === normalizedName
+    );
+    if (duplicate) {
+      return reply.code(409).send({
+        error: `数字员工"${displayName}"已存在（ID: ${duplicate.slug}）。请使用不同的名称。`,
+      });
+    }
+
     // Normalize path: fullwidth tilde → regular tilde, expand ~ to home
     workDir = workDir.replace(/\uff5e/g, '~');
     if (workDir.startsWith('~')) {
       workDir = path.join(os.homedir(), workDir.slice(1));
     }
 
-    // 直接调用 cc-connect add-platform（project 自动创建）
-    const platformType = (body.platform as string) ?? 'feishu';
-    const result = await cc.createProject(name, harness, workDir, platformType, {});
-    try {
-      await svc.createTeam({
-        displayName,
-        bindProject: name,
-        harness,
-        workDir,
-        color: typeof body.color === 'string' ? body.color : undefined,
-        description: typeof body.description === 'string' ? body.description : undefined,
-        platform: platformType,
-        createCcProject: false,
-      });
-    } catch (err) {
-      request.log.warn({ err, teamName: name }, 'failed to persist local team metadata');
-    }
-
-    // Bind provider refs if specified
-    const providerRefs = Array.isArray(body.providerRefs) ? (body.providerRefs as string[]) : [];
-    if (providerRefs.length > 0) {
-      try {
-        await cc.setProviderRefs(name, providerRefs);
-      } catch (err) {
-        request.log.warn({ err, teamName: name, providerRefs }, 'failed to set provider refs');
-      }
-    }
+    // 本地创建只落 Hermit 团队目录；飞书/微信等外部平台在团队内按需绑定。
+    await svc.createTeam({
+      displayName,
+      bindProject: name,
+      harness,
+      workDir,
+      color: typeof body.color === 'string' ? body.color : undefined,
+      description: typeof body.description === 'string' ? body.description : undefined,
+      createCcProject: false,
+    });
 
-    return { ok: true, teamName: name, runId: null };
+    return { runId: `local:${name}:${Date.now()}` };
   } catch (err) {
     return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
   }
@@ -928,11 +1326,14 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
   let managedSources = '*';
   let disabledCommands: string[] = [];
   let platformAllowFrom: Record<string, string> = {};
+  let platformAllowChat: Record<string, string> = {};
+  let bindProject = name;
   try {
     const meta = await svc.readTeamManifest(name);
     if (meta.displayName) displayName = meta.displayName;
     if (meta.color) color = meta.color;
     if (meta.description) description = meta.description;
+    bindProject = meta.bindProject || name;
     collaboration = meta.collaboration ?? true;
     if (meta.workDir) workDir = meta.workDir;
     if (meta.harness) harness = meta.harness;
@@ -954,6 +1355,9 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
     if (meta.platformAllowFrom) {
       platformAllowFrom = normalizePlatformAllowFrom(meta.platformAllowFrom);
     }
+    if (meta.platformAllowChat) {
+      platformAllowChat = normalizePlatformAllowFrom(meta.platformAllowChat);
+    }
   } catch {
     /* no local manifest */
   }
@@ -963,7 +1367,8 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
   const teamTasks = rawTasks.map(toTeamTask);
 
   try {
-    const p = await cc.getProject(name);
+    bindProject = await resolveRouteCcProjectName(name);
+    const p = await cc.getProject(bindProject);
     const isOnline = Array.isArray(p.platforms) && p.platforms.some((pl) => pl.connected);
     const projectSettings = (p.settings ?? {}) as Record<string, unknown>;
     const resolvedLanguage =
@@ -998,12 +1403,21 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
       }
       return platformAllowFrom;
     })();
+    const resolvedPlatformAllowChat = (() => {
+      const normalized = normalizePlatformAllowFrom(
+        (projectSettings as Record<string, unknown>).platform_allow_chat
+      );
+      if (Object.keys(normalized).length > 0) {
+        return normalized;
+      }
+      return platformAllowChat;
+    })();
     const resolvedPermissionMode =
       typeof p.agent_mode === 'string' && p.agent_mode.trim().length > 0
         ? p.agent_mode.trim()
         : permissionMode;
     const [providerRefs, globalProviders] = await Promise.all([
-      cc.getProviderRefs(name).catch(() => []),
+      cc.getProviderRefs(bindProject).catch(() => []),
       cc.listProviders().catch(() => []),
     ]);
 
@@ -1022,6 +1436,7 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
         managedSources: resolvedManagedSources,
         disabledCommands: resolvedDisabledCommands,
         platformAllowFrom: resolvedPlatformAllowFrom,
+        platformAllowChat: resolvedPlatformAllowChat,
         projectPath: p.work_dir ?? workDir,
         members: [{ name: displayName, role: 'lead' }],
       },
@@ -1040,11 +1455,12 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
       kanbanState: { teamName: name, reviewers: [], tasks: {} },
       processes: [],
       isAlive: isOnline,
+      platforms: (p.platforms ?? []) as CcProjectPlatform[],
       harness: p.agent_type,
-      bindProject: name,
+      bindProject,
       collaboration,
       description,
-      workDir: p.work_dir ?? workDir,
+      workDir: workDir || p.work_dir,
       permissionMode: resolvedPermissionMode,
       providerRefs,
       globalProviders,
@@ -1057,6 +1473,7 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
         reply_footer: resolvedReplyFooter,
         inject_sender: resolvedInjectSender,
         platform_allow_from: resolvedPlatformAllowFrom,
+        platform_allow_chat: resolvedPlatformAllowChat,
       },
       heartbeat: p.heartbeat,
       activeSessions: p.active_session_keys ?? [],
@@ -1096,8 +1513,9 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/data', async (request, r
       kanbanState: { teamName: name, reviewers: [], tasks: {} },
       processes: [],
       isAlive: false,
+      platforms: [] as CcProjectPlatform[],
       harness,
-      bindProject: name,
+      bindProject,
       collaboration,
       description,
       workDir,
@@ -1137,8 +1555,8 @@ app.delete<{ Params: { name: string }; Querystring: { deleteFiles?: string } }>(
   '/api/teams/:name',
   async (request, reply) => {
     const teamName = request.params.name;
-    if (teamName === 'default' || teamName === 'my-project') {
-      return reply.code(403).send({ error: '该团队不可删除' });
+    if (isReservedSystemTeamName(teamName)) {
+      return reply.code(403).send({ error: '控制台不可删除' });
     }
     try {
       let restartRequired = false;
@@ -1347,7 +1765,8 @@ app.patch<{ Params: { name: string }; Body: { collaboration: boolean } }>(
 
 app.get<{ Params: { name: string } }>('/api/teams/:name/heartbeat', async (request, reply) => {
   try {
-    const data = await cc.getHeartbeat(request.params.name);
+    const bindProject = await resolveRouteCcProjectName(request.params.name);
+    const data = await cc.getHeartbeat(bindProject);
     return { ok: true, data };
   } catch (err) {
     return reply.code(404).send(reply500(err));
@@ -1358,7 +1777,8 @@ app.post<{ Params: { name: string } }>(
   '/api/teams/:name/heartbeat/enable',
   async (request, reply) => {
     try {
-      await cc.resumeHeartbeat(request.params.name);
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      await cc.resumeHeartbeat(bindProject);
       return { ok: true };
     } catch (err) {
       return reply.code(500).send(reply500(err));
@@ -1370,7 +1790,8 @@ app.post<{ Params: { name: string } }>(
   '/api/teams/:name/heartbeat/disable',
   async (request, reply) => {
     try {
-      await cc.pauseHeartbeat(request.params.name);
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      await cc.pauseHeartbeat(bindProject);
       return { ok: true };
     } catch (err) {
       return reply.code(500).send(reply500(err));
@@ -1382,7 +1803,8 @@ app.post<{ Params: { name: string } }>(
   '/api/teams/:name/heartbeat/pause',
   async (request, reply) => {
     try {
-      await cc.pauseHeartbeat(request.params.name);
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      await cc.pauseHeartbeat(bindProject);
       return { ok: true };
     } catch (err) {
       return reply.code(500).send(reply500(err));
@@ -1394,7 +1816,8 @@ app.post<{ Params: { name: string } }>(
   '/api/teams/:name/heartbeat/resume',
   async (request, reply) => {
     try {
-      await cc.resumeHeartbeat(request.params.name);
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      await cc.resumeHeartbeat(bindProject);
       return { ok: true };
     } catch (err) {
       return reply.code(500).send(reply500(err));
@@ -1407,8 +1830,9 @@ app.patch<{
   Body: { interval_mins?: number; only_when_idle?: boolean; silent?: boolean };
 }>('/api/teams/:name/heartbeat', async (request, reply) => {
   try {
-    await cc.updateProject(request.params.name, request.body as Record<string, unknown>);
-    const data = await cc.getHeartbeat(request.params.name);
+    const bindProject = await resolveRouteCcProjectName(request.params.name);
+    await cc.updateProject(bindProject, request.body as Record<string, unknown>);
+    const data = await cc.getHeartbeat(bindProject);
     return { ok: true, data };
   } catch (err) {
     return reply.code(500).send(reply500(err));
@@ -1420,21 +1844,6 @@ app.patch<{
 // GET /api/harnesses
 // ===========================================================================
 
-const CC_AGENT_TYPES = [
-  'claudecode',
-  'codex',
-  'cursor',
-  'gemini',
-  'iflow',
-  'kimi',
-  'devin',
-  'opencode',
-  'qoder',
-  'pi',
-  'acp',
-  'tmux',
-] as const;
-
 app.get('/api/harnesses', async () => {
   try {
     const projects = await cc.listProjects();
@@ -1487,26 +1896,29 @@ app.post<{ Params: { name: string }; Body: Partial<TeamLaunchRequest> }>(
           if (!workDir) {
             return reply.code(400).send({ error: '团队缺少项目路径，无法启动 cc-connect project' });
           }
-          const result = await cc.createProject(
-            bindProject,
-            harness,
-            workDir,
-            platformType,
-            platformOptions as Record<string, string>
-          );
-          if (result.restart_required) {
-            await cc.restart();
-          }
-          projectExists = true;
-        } else {
-          await cc.restart();
+          try {
+            await cc.createProject(
+              bindProject,
+              harness,
+              workDir,
+              platformType,
+              platformOptions as Record<string, string>
+            );
+            projectExists = true;
+          } catch { /* CC Connect project creation is best-effort */ }
         }
+        // Restart cc-connect to (re-)activate platform connections.
+        // Covers: newly created project, existing project with disconnected platform,
+        // Feishu/Lark IM that lost connection after cc-connect restart, etc.
+        try {
+          await cc.restart();
+        } catch { /* restart is best-effort */ }
       }
 
       return {
         runId: `cc-connect:${bindProject}:${Date.now()}`,
         ok: true,
-        data: { teamName: name, bindProject, projectExists, isOnline: true },
+        data: { teamName: name, bindProject, projectExists, isOnline },
       };
     } catch (err) {
       return reply.code(404).send(reply500(err));
@@ -1516,8 +1928,11 @@ app.post<{ Params: { name: string }; Body: Partial<TeamLaunchRequest> }>(
 
 app.post<{ Params: { name: string } }>('/api/teams/:name/stop', async (request) => {
   const name = request.params.name;
-  // Stop = delete project from cc-connect (this is the only way to stop agents)
-  await cc.stopProject(name);
+  const bindProject = await resolveRouteCcProjectName(name);
+  // Stop = delete project from cc-connect (best-effort, no restart)
+  try {
+    await cc.deleteProject(bindProject);
+  } catch { /* project may not exist in cc-connect */ }
   // Keep local team metadata intact by not deleting it
   // The team will show as offline (isAlive: false) on next data fetch
   return { ok: true };
@@ -2125,7 +2540,17 @@ function readAppConfig() {
       return mergeConfigDefaults(DEFAULT_APP_CONFIG, raw);
     }
   } catch (err) {
-    app.log.warn({ err }, 'failed to read app config, using defaults');
+    const msg = err instanceof SyntaxError
+      ? `${HERMIT_APP_CONFIG_FILE} 格式错误: ${err.message}。将使用默认配置并覆盖修复。`
+      : `读取 ${HERMIT_APP_CONFIG_FILE} 失败`;
+    app.log.warn({ err }, msg);
+    // Auto-heal: rewrite with valid defaults
+    try {
+      mkdirSync(HERMIT_HOME, { recursive: true });
+      writeFileSync(HERMIT_APP_CONFIG_FILE, JSON.stringify(DEFAULT_APP_CONFIG, null, 2), 'utf-8');
+    } catch {
+      // Give up if write also fails
+    }
   }
   return DEFAULT_APP_CONFIG;
 }
@@ -2323,11 +2748,26 @@ function mapCronJobToSchedule(
   createdAt: string;
   updatedAt: string;
   lastRunAt?: string;
+  nextRunAt?: string;
   launchConfig: { cwd: string; prompt: string };
 } {
   const lastRunAt = normalizeCronLastRun(cronJob.last_run);
   const status: 'active' | 'paused' = cronJob.enabled ? 'active' : 'paused';
 
+  // Compute next run time from cron expression
+  let nextRunAt: string | undefined;
+  if (cronJob.enabled && isNonEmptyString(cronJob.cron_expr)) {
+    try {
+      const job = new Cron(cronJob.cron_expr.trim(), { timezone: DEFAULT_SCHEDULE_TIMEZONE, paused: true });
+      const next = job.nextRun();
+      if (next) {
+        nextRunAt = (next instanceof Date ? next : new Date(next)).toISOString();
+      }
+    } catch {
+      // Invalid cron expression — leave nextRunAt undefined
+    }
+  }
+
   return {
     id: cronJob.id,
     teamName: cronJob.project,
@@ -2342,6 +2782,7 @@ function mapCronJobToSchedule(
     createdAt: cronJob.created_at,
     updatedAt: lastRunAt ?? cronJob.created_at,
     lastRunAt,
+    nextRunAt,
     launchConfig: {
       cwd,
       prompt: cronJob.prompt,
@@ -2781,7 +3222,6 @@ app.post<{ Body: { dirPath?: string } }>('/api/workspace/list', async (request)
   try {
     const entries = readdirSync(target, { withFileTypes: true });
     const files = entries
-      .filter((e) => !e.name.startsWith('.'))
       .slice(0, 500)
       .map((e) => {
         const fullPath = path.join(target, e.name);
@@ -3145,8 +3585,9 @@ app.get<{ Params: { name: string }; Querystring: { cursor?: string; limit?: stri
     );
     try {
       // Keep a bounded history snapshot in memory for pagination safety.
+      const bindProject = await resolveRouteCcProjectName(name);
       const msgs = await svc.readMessages(name, { limit: 5000 });
-      const sessions = await cc.listSessions(name).catch(() => []);
+      const sessions = await cc.listSessions(bindProject).catch(() => []);
       const sessionByKey = new Map(sessions.map((session) => [session.session_key, session]));
       const newestFirstMessages = [...msgs].reverse();
       const pageSlice = newestFirstMessages.slice(offset, offset + limit);
@@ -3261,63 +3702,68 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/lead-context', async ()
   return { usage: null };
 });
 
-// sessions — 从 cc-connect project sessions 获取，转换为前端 Session 格式
+// sessions — scan local JSONL files, optionally enrich with cc-connect identity metadata
 app.get<{ Params: { name: string } }>('/api/teams/:name/sessions', async (request) => {
   try {
-    const sessions = await cc.listSessions(request.params.name);
-    const sessionsByKey = new Map<string, (typeof sessions)[number]>();
-    const sessionScore = (session: (typeof sessions)[number]): number => {
-      const updatedAt = Date.parse(session.updated_at);
-      return (
-        (session.live ? 1_000_000_000_000_000 : 0) +
-        (session.active ? 1_000_000_000_000 : 0) +
-        (session.history_count ?? 0) * 1_000_000 +
-        (session.agent_type ? 10_000 : 0) +
-        (Number.isFinite(updatedAt) ? updatedAt / 1_000_000 : 0)
-      );
-    };
-    for (const session of sessions) {
-      const existing = sessionsByKey.get(session.session_key);
-      if (!existing || sessionScore(session) > sessionScore(existing)) {
-        sessionsByKey.set(session.session_key, session);
+    const team = await svc.readTeamManifest(request.params.name);
+    const workDir = team.workDir || team.bindProject || request.params.name;
+    const localSessions = await localSessionScanner.scanSummaries(workDir, request.params.name);
+
+    // Attempt to merge cc-connect identity metadata (platform/chatName/userName/lastMessage)
+    let ccById = new Map<string, { platform: string; userName: string | null; chatName: string | null; lastMessage: { role: string; content: string; timestamp: string } | null }>();
+    try {
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      const ccSessions = await cc.listSessions(bindProject);
+      for (const s of ccSessions) {
+        ccById.set(s.id, {
+          platform: s.platform,
+          userName: s.user_name ?? null,
+          chatName: s.chat_name ?? null,
+          lastMessage: s.last_message
+            ? { role: s.last_message.role, content: s.last_message.content, timestamp: s.last_message.timestamp }
+            : null,
+        });
       }
-    }
+    } catch { /* cc-connect unavailable — local-only data */ }
 
-    return [...sessionsByKey.values()].map((s) => ({
-      id: s.id,
-      title: s.user_name || s.chat_name || s.name || s.session_key,
-      projectId: request.params.name,
-      sessionKey: s.session_key,
-      platform: s.platform,
-      userName: s.user_name ?? null,
-      chatName: s.chat_name ?? null,
-      active: s.active,
-      live: s.live,
-      historyCount: s.history_count,
-      createdAt: s.created_at,
-      updatedAt: s.updated_at,
-      lastMessage: s.last_message
-        ? {
-            role: s.last_message.role,
-            content: s.last_message.content,
-            timestamp: s.last_message.timestamp,
-          }
-        : null,
-    }));
+    return localSessions.map((s) => {
+      const ccMeta = ccById.get(s.id);
+      return {
+        id: s.id,
+        title: s.title || s.id,
+        projectId: request.params.name,
+        sessionKey: s.id,
+        platform: ccMeta?.platform ?? 'local',
+        userName: ccMeta?.userName ?? null,
+        chatName: ccMeta?.chatName ?? null,
+        active: s.active,
+        live: s.live,
+        historyCount: s.messageCount,
+        createdAt: s.createdAt,
+        updatedAt: s.updatedAt,
+        lastMessage: ccMeta?.lastMessage ?? null,
+      };
+    });
   } catch {
     return [];
   }
 });
 
-// GET session detail — 通过 cc-connect API 获取会话详情（含历史消息）
-app.get<{ Params: { name: string; sessionId: string }; Querystring: { history_limit?: string } }>(
+// GET session detail — read local JSONL file for session history with pagination
+app.get<{ Params: { name: string; sessionId: string }; Querystring: { history_limit?: string; offset?: string } }>(
   '/api/teams/:name/sessions/:sessionId',
-  async (request) => {
-    const historyLimit = request.query.history_limit
+  async (request, reply) => {
+    const limit = request.query.history_limit
       ? parseInt(request.query.history_limit, 10)
       : 500;
-    const detail = await cc.getSession(request.params.name, request.params.sessionId, historyLimit);
-    return mapCcSessionDetail(detail);
+    const offset = request.query.offset
+      ? parseInt(request.query.offset, 10)
+      : 0;
+    const team = await svc.readTeamManifest(request.params.name);
+    const workDir = team.workDir || team.bindProject || request.params.name;
+    const detail = await localSessionScanner.readSessionDetail(workDir, request.params.sessionId, { offset, limit });
+    if (!detail) return reply.code(404).send({ error: 'Session not found' });
+    return detail;
   }
 );
 
@@ -3326,13 +3772,8 @@ app.delete<{ Params: { name: string; sessionId: string } }>(
   '/api/teams/:name/sessions/:sessionId',
   async (request, reply) => {
     try {
-      const detail = await cc.getSession(request.params.name, request.params.sessionId, 1);
-      await sendHarnessMessageViaBridge({
-        teamName: request.params.name,
-        sessionKey: detail.session_key,
-        text: '/stop',
-        msgId: `hermit-stop-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
-      });
+      const bindProject = await resolveRouteCcProjectName(request.params.name);
+      await cc.deleteSession(bindProject, request.params.sessionId);
       return { ok: true };
     } catch (err) {
       return reply
@@ -3345,7 +3786,11 @@ app.delete<{ Params: { name: string; sessionId: string } }>(
 // runtime/alive — 从 cc-connect 获取真实在线状态
 app.get('/api/teams/runtime/alive', async () => {
   try {
-    const projects = await cc.listProjects();
+    const [projects, localTeams] = await Promise.all([
+      cc.listProjects(),
+      svc.listTeams().catch(() => []),
+    ]);
+    const localByProject = new Map(localTeams.map((team) => [team.bindProject, team]));
     return await Promise.all(
       projects.map(async (p) => {
         let isAlive = false;
@@ -3355,7 +3800,7 @@ app.get('/api/teams/runtime/alive', async () => {
         } catch {
           /* degraded */
         }
-        return { teamName: p.name, isAlive, runId: p.name };
+        return { teamName: localByProject.get(p.name)?.slug ?? p.name, isAlive, runId: p.name };
       })
     );
   } catch {
@@ -3366,7 +3811,8 @@ app.get('/api/teams/runtime/alive', async () => {
 // process-alive — 查询 cc-connect project 在线状态
 app.get<{ Params: { name: string } }>('/api/teams/:name/process-alive', async (request) => {
   try {
-    const p = await cc.getProject(request.params.name);
+    const bindProject = await resolveRouteCcProjectName(request.params.name);
+    const p = await cc.getProject(bindProject);
     return Array.isArray(p.platforms) && p.platforms.some((pl) => pl.connected);
   } catch {
     return false;
@@ -3380,8 +3826,15 @@ app.post<{ Params: { name: string }; Body: { text?: string; message?: string } }
     try {
       const text = request.body?.text ?? request.body?.message ?? '';
       if (text) {
+        let targetProject = request.params.name;
+        try {
+          const manifest = await svc.readTeamManifest(request.params.name);
+          targetProject = manifest.bindProject || request.params.name;
+        } catch {
+          // request.params.name may already be a cc-connect project name.
+        }
         await sendHarnessMessageViaBridge({
-          teamName: request.params.name,
+          teamName: targetProject,
           text,
         });
       }
@@ -3628,6 +4081,21 @@ async function applyTeamConfigUpdate(
   const platformAllowFrom = body.platformAllowFrom
     ? normalizePlatformAllowFrom(body.platformAllowFrom)
     : undefined;
+  const platformAllowChat = body.platformAllowChat
+    ? normalizePlatformAllowFrom(body.platformAllowChat)
+    : undefined;
+
+  // Validate agent type CLI availability before saving
+  if (agentType && agentType !== 'claudecode') {
+    try {
+      const { execSync } = await import('node:child_process');
+      execSync(`which ${agentType}`, { stdio: 'pipe', timeout: 5000 });
+    } catch {
+      throw new Error(
+        `${agentType} CLI 未安装，无法切换到 ${agentType} 模式。请先安装对应的 CLI 工具。`
+      );
+    }
+  }
 
   const localPatch: Record<string, unknown> = {};
   if (name) localPatch.displayName = name;
@@ -3640,6 +4108,7 @@ async function applyTeamConfigUpdate(
   if (managedSources) localPatch.managedSources = managedSources;
   if (disabledCommands) localPatch.disabledCommands = disabledCommands;
   if (platformAllowFrom !== undefined) localPatch.platformAllowFrom = platformAllowFrom;
+  if (platformAllowChat !== undefined) localPatch.platformAllowChat = platformAllowChat;
   if (showContextIndicator !== undefined) localPatch.showContextIndicator = showContextIndicator;
   if (replyFooter !== undefined) localPatch.replyFooter = replyFooter;
   if (injectSender !== undefined) localPatch.injectSender = injectSender;
@@ -3671,19 +4140,26 @@ async function applyTeamConfigUpdate(
   if (managedSources) ccPatch.admin_from = managedSources;
   if (disabledCommands) ccPatch.disabled_commands = disabledCommands;
   if (platformAllowFrom !== undefined) ccPatch.platform_allow_from = platformAllowFrom;
+  if (platformAllowChat !== undefined) ccPatch.platform_allow_chat = platformAllowChat;
   if (showContextIndicator !== undefined) ccPatch.show_context_indicator = showContextIndicator;
   if (replyFooter !== undefined) ccPatch.reply_footer = replyFooter;
   if (injectSender !== undefined) ccPatch.inject_sender = injectSender;
 
   let ccSyncError: string | null = null;
+  let bindProject: string;
+  try {
+    bindProject = await resolveRouteCcProjectName(teamName);
+  } catch {
+    bindProject = teamName;
+  }
   if (Object.keys(ccPatch).length > 0) {
     try {
       const updateResult = await cc.updateProject(
-        teamName,
+        bindProject,
         ccPatch as Parameters<CcConnectClient['updateProject']>[1]
       );
       if (updateResult.restart_required) {
-        await cc.restart();
+        try { await cc.reload(); } catch { /* best effort */ }
       }
     } catch (err) {
       ccSyncError = err instanceof Error ? err.message : String(err);
@@ -3691,7 +4167,7 @@ async function applyTeamConfigUpdate(
   }
   if (providerRefs !== undefined) {
     try {
-      await cc.setProviderRefs(teamName, providerRefs);
+      await cc.setProviderRefs(bindProject, providerRefs);
     } catch (err) {
       ccSyncError = err instanceof Error ? err.message : String(err);
     }
@@ -3720,7 +4196,8 @@ async function applyTeamConfigUpdate(
 app.get<{ Params: { name: string } }>('/api/teams/:name/config', async (request, reply) => {
   try {
     const name = request.params.name;
-    const p = await cc.getProject(name);
+    let bindProject = await resolveRouteCcProjectName(name);
+    const p = await cc.getProject(bindProject);
     // local metadata overlay
     let color = 'blue';
     let description = '';
@@ -3732,6 +4209,7 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/config', async (request,
     let injectSender = false;
     let permissionMode = 'default';
     let platformAllowFrom: Record<string, string> = {};
+    let platformAllowChat: Record<string, string> = {};
     try {
       const meta = await svc.readTeamManifest(name);
       color = meta.color ?? color;
@@ -3744,6 +4222,7 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/config', async (request,
       injectSender = meta.injectSender ?? injectSender;
       permissionMode = meta.permissionMode ?? permissionMode;
       platformAllowFrom = normalizePlatformAllowFrom(meta.platformAllowFrom);
+      platformAllowChat = normalizePlatformAllowFrom(meta.platformAllowChat);
     } catch {
       /* ok */
     }
@@ -3780,12 +4259,21 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/config', async (request,
       }
       return platformAllowFrom;
     })();
+    const resolvedPlatformAllowChat = (() => {
+      const normalized = normalizePlatformAllowFrom(
+        (projectSettings as Record<string, unknown>).platform_allow_chat
+      );
+      if (Object.keys(normalized).length > 0) {
+        return normalized;
+      }
+      return platformAllowChat;
+    })();
     const resolvedPermissionMode =
       typeof p.agent_mode === 'string' && p.agent_mode.trim().length > 0
         ? p.agent_mode.trim()
         : permissionMode;
     const [providerRefs, globalProviders] = await Promise.all([
-      cc.getProviderRefs(name).catch(() => []),
+      cc.getProviderRefs(bindProject).catch(() => []),
       cc.listProviders().catch(() => []),
     ]);
     return {
@@ -3803,6 +4291,7 @@ app.get<{ Params: { name: string } }>('/api/teams/:name/config', async (request,
       injectSender: resolvedInjectSender,
       permissionMode: resolvedPermissionMode,
       platformAllowFrom: resolvedPlatformAllowFrom,
+      platformAllowChat: resolvedPlatformAllowChat,
       providerRefs,
       globalProviders,
       settings: {
@@ -4089,25 +4578,87 @@ app.get<{ Params: { name: string; taskId: string } }>(
   async () => ({ lines: [] })
 );
 
-// member-stats
+// member-stats — aggregate from local JSONL session summaries
 app.get<{ Params: { name: string; memberName: string } }>(
   '/api/teams/:name/member-stats/:memberName',
-  async () => ({
-    linesAdded: 0,
-    linesRemoved: 0,
-    filesTouched: [],
-    fileStats: {},
-    toolUsage: {},
-    inputTokens: 0,
-    outputTokens: 0,
-    cacheReadTokens: 0,
-    costUsd: 0,
-    tasksCompleted: 0,
-    messageCount: 0,
-    totalDurationMs: 0,
-    sessionCount: 0,
-    computedAt: new Date().toISOString(),
-  })
+  async (request) => {
+    try {
+      const team = await svc.readTeamManifest(request.params.name);
+      const workDir = team.workDir || team.bindProject || request.params.name;
+      const sessions = await localSessionScanner.scanSummaries(workDir, request.params.name);
+
+      let inputTokens = 0;
+      let outputTokens = 0;
+      let cacheReadTokens = 0;
+      let messageCount = 0;
+      let totalDurationMs = 0;
+
+      let earliestStart: string | null = null;
+      let latestEnd: string | null = null;
+
+      for (const s of sessions) {
+        inputTokens += s.inputTokens;
+        outputTokens += s.outputTokens;
+        cacheReadTokens += s.cacheReadTokens;
+        messageCount += s.messageCount;
+
+        if (s.startTime && (!earliestStart || s.startTime < earliestStart)) {
+          earliestStart = s.startTime;
+        }
+        if (s.endTime && (!latestEnd || s.endTime > latestEnd)) {
+          latestEnd = s.endTime;
+        }
+      }
+
+      if (earliestStart && latestEnd) {
+        totalDurationMs = Date.parse(latestEnd) - Date.parse(earliestStart);
+        if (totalDurationMs < 0) totalDurationMs = 0;
+      }
+
+      // Count completed tasks from the team's task board
+      let tasksCompleted = 0;
+      try {
+        const tasks = await svc['workspace'].readTasks(team.slug || request.params.name);
+        tasksCompleted = tasks.filter((t) => t.status === 'done').length;
+      } catch {
+        // board may not exist yet
+      }
+
+      return {
+        linesAdded: 0,
+        linesRemoved: 0,
+        filesTouched: [],
+        fileStats: {},
+        toolUsage: {},
+        inputTokens,
+        outputTokens,
+        cacheReadTokens,
+        costUsd: 0,
+        tasksCompleted,
+        messageCount,
+        totalDurationMs,
+        sessionCount: sessions.length,
+        computedAt: new Date().toISOString(),
+      };
+    } catch {
+      return {
+        linesAdded: 0,
+        linesRemoved: 0,
+        filesTouched: [],
+        fileStats: {},
+        toolUsage: {},
+        inputTokens: 0,
+        outputTokens: 0,
+        cacheReadTokens: 0,
+        costUsd: 0,
+        tasksCompleted: 0,
+        messageCount: 0,
+        totalDurationMs: 0,
+        sessionCount: 0,
+        computedAt: new Date().toISOString(),
+      };
+    }
+  }
 );
 
 // tool-approval stubs
@@ -4610,6 +5161,100 @@ app.post('/api/telemetry/scan', async (request, reply) => {
   }
 });
 
+// GET /api/telemetry/conversations → local Feishu/Lark conversation telemetry
+app.get<{
+  Querystring: {
+    teamName?: string;
+    platform?: string;
+    from?: string;
+    to?: string;
+    identityType?: 'person' | 'group' | 'unknown';
+    identityId?: string;
+    includeContent?: 'none' | 'summary' | 'full' | string;
+    includeToolResults?: string;
+    includeSystemMessages?: string;
+    limit?: string;
+    offset?: string;
+  };
+}>('/api/telemetry/conversations', async (request, reply) => {
+  try {
+    const result = await conversationTelemetry.getConversations({
+      teamName: request.query.teamName,
+      platform: request.query.platform,
+      from: request.query.from,
+      to: request.query.to,
+      identityType: request.query.identityType,
+      identityId: request.query.identityId,
+      includeContent: shouldIncludeContent(request.query.includeContent),
+      includeToolResults: request.query.includeToolResults !== 'false',
+      includeSystemMessages: request.query.includeSystemMessages !== 'false',
+      limit: request.query.limit ? Number(request.query.limit) : undefined,
+      offset: request.query.offset ? Number(request.query.offset) : undefined,
+    });
+    return result;
+  } catch (err) {
+    return reply.code(500).send({ error: String(err) });
+  }
+});
+
+// GET /api/telemetry/conversations/export → export local conversation telemetry
+app.get<{
+  Querystring: {
+    format?: 'csv' | 'json' | 'markdown' | 'plaintext' | string;
+    teamName?: string;
+    platform?: string;
+    from?: string;
+    to?: string;
+    identityType?: 'person' | 'group' | 'unknown';
+    identityId?: string;
+    includeContent?: 'none' | 'summary' | 'full' | string;
+    includeToolResults?: string;
+    includeSystemMessages?: string;
+  };
+}>('/api/telemetry/conversations/export', async (request, reply) => {
+  try {
+    const requestedFormat = request.query.format;
+    const format =
+      requestedFormat === 'json' ||
+      requestedFormat === 'markdown' ||
+      requestedFormat === 'plaintext' ||
+      requestedFormat === 'csv'
+        ? requestedFormat
+        : 'csv';
+    const result = await conversationTelemetry.exportConversations(format, {
+      teamName: request.query.teamName,
+      platform: request.query.platform,
+      from: request.query.from,
+      to: request.query.to,
+      identityType: request.query.identityType,
+      identityId: request.query.identityId,
+      includeContent: shouldIncludeContent(request.query.includeContent),
+      includeToolResults: request.query.includeToolResults !== 'false',
+      includeSystemMessages: request.query.includeSystemMessages !== 'false',
+    });
+    return result;
+  } catch (err) {
+    return reply.code(500).send({ error: String(err) });
+  }
+});
+
+// GET /api/telemetry/conversations/:sessionId → local conversation telemetry detail
+app.get<{
+  Params: { sessionId: string };
+  Querystring: { teamName?: string; platform?: string };
+}>('/api/telemetry/conversations/:sessionId', async (request, reply) => {
+  try {
+    const result = await conversationTelemetry.getConversationDetail(request.params.sessionId, {
+      ...request.query,
+      includeContent: 'full',
+    });
+    if (!result) return reply.code(404).send({ error: 'Conversation not found' });
+    return result;
+  } catch (err) {
+    return reply.code(500).send({ error: String(err) });
+  }
+});
+
 // GET /api/telemetry/status → current telemetry status (full stats)
 app.get('/api/telemetry/status', async (request, reply) => {
   try {
@@ -4697,6 +5342,13 @@ app.get('/api/teams/review/git-file-log', async () => ({ log: [] }));
 // ===========================================================================
 
 app.get('/api/events', (request, reply) => {
+  try {
+    assertTrustedBrowserOrigin(request);
+  } catch (err) {
+    reply.code(403).send({ error: err instanceof Error ? err.message : String(err) });
+    return;
+  }
+
   reply.raw.writeHead(200, {
     'Content-Type': 'text/event-stream; charset=utf-8',
     'Cache-Control': 'no-cache, no-transform',