npm - agim-cli - Versions diffs - 1.2.70 → 1.2.72 - Mend

agim-cli 1.2.70 → 1.2.72

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (163) hide show

package/dist/web/public/settings.html DELETED Viewed

@@ -1,2488 +0,0 @@
-<!DOCTYPE html>
-<html lang="en">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Agim — Settings</title>
-  <!-- Shared utilities: theme manager (applies before first paint), error
-       boundary (surfaces silent script failures), i18n + api helpers. -->
-  <script src="/_app.js"></script>
-  <script>
-    const LANGS = { en: 'English', zh: '中文' };
-    const savedLang = localStorage.getItem('im-hub-lang');
-    const browserLang = navigator.language.startsWith('zh') ? 'zh' : 'en';
-    window.__lang = savedLang && LANGS[savedLang] ? savedLang : browserLang;
-    document.documentElement.lang = window.__lang === 'zh' ? 'zh-CN' : 'en';
-    const T = {
-      en: {
-        title: 'Agim — Settings',
-        backToChat: 'Back to Chat',
-        settingsTitle: 'Agim Settings',
-        loading: 'Loading configuration...',
-        loadFailed: 'Failed to load config',
-        h1: 'Settings',
-        agents: 'Agents',
-        defaultAgent: 'Default Agent',
-        saveAgents: 'Save Agents',
-        messengers: 'Messengers (Channels)',
-        wechat: 'WeChat',
-        wechatHint: 'iLink QR scan login',
-        wechatBox: 'WeChat requires QR scan login. Run <code>agim config wechat</code> in terminal to set up.',
-        telegram: 'Telegram',
-        telegramHint: 'Bot token from @BotFather',
-        botToken: 'Bot Token',
-        channelId: 'Channel ID',
-        feishu: 'Feishu / Lark',
-        feishuHint: 'App ID and App Secret',
-        appId: 'App ID',
-        appSecret: 'App Secret',
-        saveMessengers: 'Save Messengers',
-        acpTitle: 'Remote Agents (ACP)',
-        acpNone: 'No remote agents configured',
-        name: 'Name',
-        endpoint: 'Endpoint',
-        auth: 'Auth',
-        enabled: 'Enabled',
-        test: 'Test',
-        del: 'Del',
-        addAgent: 'Add Remote Agent',
-        aliases: 'Aliases (comma-separated)',
-        endpointUrl: 'Endpoint URL',
-        authType: 'Auth Type',
-        none: 'None',
-        apikey: 'API Key',
-        bearer: 'Bearer Token',
-        token: 'Token',
-        testConn: 'Test Connection',
-        add: 'Add Agent',
-        general: 'General',
-        webPort: 'Web Chat Port',
-        save: 'Save',
-        saved: 'Saved',
-        testing: 'Testing...',
-        connected: 'Connected',
-        failed: 'Failed',
-        error: 'Error',
-        savedMsg: 'Saved',
-        saveFailed: 'Save failed',
-        enterEndpoint: 'Enter an endpoint URL',
-        nameRequired: 'Agent name is required',
-        endpointRequired: 'Endpoint URL is required',
-        installHint: 'npm i -g',
-        workspacesTitle: 'Workspaces',
-        workspacesNone: 'Only the default workspace exists. Add one to scope agents/rate-limits per team.',
-        workspaceId: 'ID',
-        workspaceName: 'Name',
-        workspaceAgents: 'Agents (comma)',
-        workspaceMembers: 'Members (comma userIds, blank = open)',
-        workspaceRateLimit: 'Rate limit',
-        workspaceRate: 'Rate / interval',
-        workspaceInterval: 'Interval (sec)',
-        workspaceBurst: 'Burst',
-        workspaceAdd: 'Add or update workspace',
-        workspaceEdit: 'Edit',
-        workspaceDelete: 'Delete',
-        workspaceReset: 'Reset',
-        workspaceConfirmDelete: 'Delete workspace "{id}"?',
-        workspaceSaved: 'Workspace saved',
-        workspaceDeleted: 'Workspace deleted',
-        workspaceIdHelp: 'Letters / digits / _ / - only',
-        workspaceDefaultLocked: 'default (locked)',
-        // ── messengers (extras for v1.0.5) ───────────────────────
-        wechatScan: 'Scan to log in',
-        wechatScanTitle: 'WeChat — scan to log in',
-        wechatGenerating: 'Generating QR code…',
-        wechatWaiting: 'Waiting for scan…',
-        wechatScanned: 'QR scanned — confirm on your phone…',
-        wechatConfirmed: '✓ Logged in (account {account})',
-        wechatExpired: 'QR code expired',
-        wechatRegen: 'Regenerate',
-        wechatClose: 'Close',
-        wechatFailed: 'Failed: {error}',
-        dingtalk: 'DingTalk',
-        dingtalkHint: 'Stream-mode app: Client ID + Client Secret',
-        dingtalkClientId: 'Client ID',
-        dingtalkClientSecret: 'Client Secret',
-        discord: 'Discord',
-        discordHint: 'Bot token from Discord Developer Portal',
-        discordToken: 'Bot Token',
-        discordGuilds: 'Allowed guilds (comma-separated IDs, blank = any)',
-        discordChannels: 'Allowed channels (comma-separated IDs, blank = any)',
-        configure: 'Configure',
-        reconfigure: 'Edit credentials',
-        // ── service control ──────────────────────────────────────
-        svcTitle: 'Service',
-        svcStateLoading: 'Checking…',
-        svcStateRunning: 'Running ({mode}, pid {pid}, up {uptime})',
-        svcStateRunningNoUp: 'Running ({mode}, pid {pid})',
-        svcStateNone: 'Not running',
-        svcStart: 'Start',
-        svcStop: 'Stop',
-        svcRestart: 'Restart',
-        svcConfirmStop: 'Stop Agim? The web console will go offline until you start it again from a terminal.',
-        svcConfirmRestart: 'Restart Agim? The web console will reconnect automatically in a few seconds.',
-        svcRestarting: 'Restarting — waiting for the service to come back…',
-        svcRestarted: '✓ Service restarted',
-        svcStopped: '✓ Service stopped (this page is now disconnected)',
-        svcFgWarning: 'Foreground service is running in another terminal — restart it there.',
-        // ── Safety / admin allowlist ─────────────────────────────
-        safetyTitle: 'Safety',
-        adminListTitle: 'Admin Allowlist',
-        adminListHint: 'Only these users can run /restart, /stop, and natural-language equivalents in IM. Edits persist to ~/.agim/env immediately — no restart needed.',
-        adminListLoading: 'Loading…',
-        adminListEmpty: '(no admins yet — IM service commands are disabled)',
-        adminUserIdPlaceholder: 'platform-specific user id (e.g. wxid_… / 123456 / ou_…)',
-        adminAdd: 'Add admin',
-        adminRemove: 'Remove',
-        adminConfirmRemove: 'Remove admin {p}:{u}?',
-        adminPublicBindWarn: '⚠️ Web is bound publicly — admin editor disabled to prevent random visitors from granting themselves access. Bind to 127.0.0.1 to enable.',
-        adminBootstrapHint: 'Bootstrap token exists at {path}. Run `cat` on the server, then send `/setup admin <token>` in IM to self-onboard.',
-        // ── Approval policy (timeout default) ─────────────────────
-        approvalPolicyTitle: 'Approval Policy',
-        approvalPolicyHint: 'What does Agim do when a tool-use approval times out (no IM reply within the budget)? Default deny is strict; switch to allow when you\'ll be away from IM and want the agent to keep moving.',
-        approvalTimeoutDefaultLabel: 'On approval timeout',
-        approvalTimeoutDeny: 'Deny (default — strict, human in the loop)',
-        approvalTimeoutAllow: 'Allow (user-away mode — agent proceeds silently)',
-        approvalPolicySave: 'Save',
-        approvalPolicySaved: 'Saved — applies to the next pending approval, no restart needed.',
-        approvalPolicyLoadFailed: 'Failed to load approval policy',
-        // ── Viewer (long-message web rendering) ────────────────────
-        viewerTitle: 'IM Long-Message Viewer',
-        viewerHint: 'When an agent reply is too long or contains a markdown table / large code block, Agim stores it locally in ~/.agim/viewer.db (permanent, never leaves this host) and sends the IM a short summary + a link. Set the public URL of your reverse-proxied Agim web here so the link is reachable from your phone.',
-        viewerEnabled: 'Enabled',
-        viewerDisabled: 'Disabled',
-        viewerEnabledLabel: 'Viewer mode',
-        viewerPublicUrl: 'Public base URL',
-        viewerPublicUrlHint: 'Your public URL pointing at this Agim web (e.g. https://agim.example.com). Use cloudflared / caddy / tailscale to expose port 3000.',
-        viewerChars: 'Char threshold',
-        viewerLines: 'Line threshold',
-        viewerCodeLines: 'Code-block line threshold',
-        viewerMaxPastes: 'Max stored pastes (LRU prune)',
-        viewerSave: 'Save',
-        viewerSaved: 'Saved — change takes effect on the next reply.',
-        viewerSaveFailed: 'Failed to save viewer settings',
-        viewerMissingUrl: '⚠️ Public URL is empty — Agim will fall back to inline text for long replies (no link can be built).',
-        viewerTunnelMode: 'Auto-tunnel (cloudflared)',
-        viewerTunnelHint: 'For users without a public domain. Agim launches a cloudflared quick tunnel on startup and auto-detects a temporary `*.trycloudflare.com` URL. Requires the `cloudflared` binary to be installed (`brew install cloudflared` / `apt install cloudflared`). URL changes per restart — old paste links die. Leave off when you have a static reverse proxy.',
-        viewerTunnelOff: 'Off (use Public URL above)',
-        viewerTunnelQuick: 'Quick tunnel (temporary URL, no domain needed)',
-        viewerTunnelStatus: 'Tunnel status',
-        viewerTunnelRunning: 'Running',
-        viewerTunnelNotRunning: 'Not running',
-        viewerTunnelBinaryMissing: 'cloudflared not installed',
-        viewerTunnelCurrentUrl: 'Current URL',
-        viewerTunnelRefresh: 'Refresh',
-        a2aNotifyTitle: 'A2A Notifications',
-        a2aNotifyHint: 'Push intermediate state to your IM thread when one agent calls another (e.g. Claude → Codex). Keeps you in the loop during long handoffs.',
-        a2aDefaultTimeout: 'Default A2A timeout (minutes)',
-        a2aDefaultTimeoutHint: 'How long agim waits for a child agent before timing out. Raised from 10 min to 30 min in v1.1.10 — long enough for Codex to do ~4 API pulls + write a report.',
-        a2aMaxTimeout: 'Max allowed timeout (minutes)',
-        a2aMaxTimeoutHint: 'Hard ceiling. Refuses caller-supplied timeoutMs larger than this so an agent can\'t block A2A forever.',
-        a2aNotifyMode: 'Notify mode',
-        a2aNotifyOff: 'Off',
-        a2aNotifyEssential: 'Essential (start + complete/timeout/failed)',
-        a2aNotifyVerbose: 'Verbose (add heartbeats on file changes)',
-        a2aMaxDepth: 'Max notify depth',
-        a2aMaxDepthHint: 'Only notify for callees up to this nesting depth (1 = direct child only). Avoids spamming on deep call chains.',
-        a2aHeartbeatMin: 'Heartbeat interval (minutes, verbose only)',
-        a2aHeartbeatHint: 'Checks the callee\'s _agim-output/ directory; pushes a note if files changed or a "still thinking" note otherwise.',
-        a2aSave: 'Save',
-        a2aSaved: 'Saved — applies to the next A2A invocation, no restart needed.',
-        a2aSaveFailed: 'Failed to save A2A settings',
-        memoryTitle: 'Long-term Memory',
-        memoryHint: 'After every reply, agim asynchronously extracts "facts worth remembering" (preferences / holdings / projects / …) from the exchange and stores them in ~/.agim/memory.db. Next turns get a small (~150-300 token) persona summary in the prompt header plus an on-demand memory_query MCP tool for specific facts. Adds one extra LLM call per turn using the same agent the user just talked to — watch the Cost & Health tab if you turn it on.',
-        memoryEnable: 'Enabled',
-        memoryDisable: 'Off',
-        memoryEnableLabel: 'Auto memory',
-        memorySave: 'Save',
-        memorySaved: 'Saved — fact accumulation begins after the next reply.',
-        memorySaveFailed: 'Failed to save memory settings',
-      },
-      zh: {
-        title: 'Agim — 设置',
-        backToChat: '返回对话',
-        settingsTitle: 'Agim 设置',
-        loading: '加载配置中...',
-        loadFailed: '加载配置失败',
-        h1: '设置',
-        agents: 'Agent',
-        defaultAgent: '默认 Agent',
-        saveAgents: '保存 Agent',
-        messengers: '消息通道 (Channels)',
-        wechat: '微信',
-        wechatHint: 'iLink 扫码登录',
-        wechatBox: '微信需要扫码登录。在终端运行 <code>agim config wechat</code> 进行配置。',
-        telegram: 'Telegram',
-        telegramHint: '从 @BotFather 获取 Bot Token',
-        botToken: 'Bot Token',
-        channelId: '频道 ID',
-        feishu: '飞书 / Lark',
-        feishuHint: 'App ID 和 App Secret',
-        appId: 'App ID',
-        appSecret: 'App Secret',
-        saveMessengers: '保存通道',
-        acpTitle: '远程 Agent (ACP)',
-        acpNone: '暂无远程 Agent',
-        name: '名称',
-        endpoint: '端点',
-        auth: '认证',
-        enabled: '启用',
-        test: '测试',
-        del: '删除',
-        addAgent: '添加远程 Agent',
-        aliases: '别名（逗号分隔）',
-        endpointUrl: '端点 URL',
-        authType: '认证方式',
-        none: '无',
-        apikey: 'API Key',
-        bearer: 'Bearer Token',
-        token: '令牌',
-        testConn: '测试连接',
-        add: '添加 Agent',
-        general: '通用',
-        webPort: 'Web 对话端口',
-        save: '保存',
-        saved: '已保存',
-        testing: '测试中...',
-        connected: '已连接',
-        failed: '失败',
-        error: '错误',
-        savedMsg: '已保存',
-        saveFailed: '保存失败',
-        enterEndpoint: '请输入端点 URL',
-        nameRequired: 'Agent 名称为必填项',
-        endpointRequired: '端点 URL 为必填项',
-        installHint: '安装命令：npm i -g',
-        workspacesTitle: '工作区',
-        workspacesNone: '仅有默认工作区。新增工作区可以为不同团队限定 agent 白名单与限流。',
-        workspaceId: 'ID',
-        workspaceName: '名称',
-        workspaceAgents: 'Agent（逗号分隔）',
-        workspaceMembers: '成员（逗号分隔 userId；空 = 开放）',
-        workspaceRateLimit: '限流',
-        workspaceRate: '速率 / 间隔',
-        workspaceInterval: '间隔（秒）',
-        workspaceBurst: '突发上限',
-        workspaceAdd: '新增 / 更新工作区',
-        workspaceEdit: '编辑',
-        workspaceDelete: '删除',
-        workspaceReset: '清空',
-        workspaceConfirmDelete: '确认删除工作区 "{id}" ？',
-        workspaceSaved: '工作区已保存',
-        workspaceDeleted: '工作区已删除',
-        workspaceIdHelp: '仅支持字母 / 数字 / _ / -',
-        workspaceDefaultLocked: '默认（不可改）',
-        // ── messengers (extras for v1.0.5) ───────────────────────
-        wechatScan: '扫码登录',
-        wechatScanTitle: '微信 — 扫码登录',
-        wechatGenerating: '生成二维码中…',
-        wechatWaiting: '等待扫描…',
-        wechatScanned: '已扫描，请在手机端确认…',
-        wechatConfirmed: '✓ 登录成功（账号 {account}）',
-        wechatExpired: '二维码已过期',
-        wechatRegen: '重新生成',
-        wechatClose: '关闭',
-        wechatFailed: '失败：{error}',
-        dingtalk: '钉钉',
-        dingtalkHint: 'Stream 模式应用：Client ID + Client Secret',
-        dingtalkClientId: 'Client ID',
-        dingtalkClientSecret: 'Client Secret',
-        discord: 'Discord',
-        discordHint: '在 Discord Developer Portal 获取 Bot Token',
-        discordToken: 'Bot Token',
-        discordGuilds: '允许的服务器（逗号分隔 ID，空 = 不限）',
-        discordChannels: '允许的频道（逗号分隔 ID，空 = 不限）',
-        configure: '配置',
-        reconfigure: '修改凭据',
-        // ── service control ──────────────────────────────────────
-        svcTitle: '服务',
-        svcStateLoading: '检查中…',
-        svcStateRunning: '运行中（{mode}，pid {pid}，已运行 {uptime}）',
-        svcStateRunningNoUp: '运行中（{mode}，pid {pid}）',
-        svcStateNone: '未运行',
-        svcStart: '启动',
-        svcStop: '停止',
-        svcRestart: '重启',
-        svcConfirmStop: '停止 Agim？停止后 web 控制台会离线，需要回终端用 `agim start` 再启动。',
-        svcConfirmRestart: '重启 Agim？web 控制台会在几秒后自动重连。',
-        svcRestarting: '重启中——等待服务恢复…',
-        svcRestarted: '✓ 服务已重启',
-        svcStopped: '✓ 服务已停止（页面已断开连接）',
-        svcFgWarning: '前台服务在另一个终端运行——回那个终端重启。',
-        // ── Safety / admin allowlist ─────────────────────────────
-        safetyTitle: '安全',
-        adminListTitle: '管理员白名单',
-        adminListHint: '只有列表里的用户能在 IM 里跑 /restart / /stop 或自然语言"重启服务"。改动会立即写入 ~/.agim/env，无需重启。',
-        adminListLoading: '加载中…',
-        adminListEmpty: '（还没有管理员 — IM 服务管理命令处于禁用状态）',
-        adminUserIdPlaceholder: '该平台的 user id（如 wxid_… / 123456 / ou_…）',
-        adminAdd: '添加管理员',
-        adminRemove: '移除',
-        adminConfirmRemove: '移除管理员 {p}:{u}？',
-        adminPublicBindWarn: '⚠️ web 控制台目前监听公开地址 — 为防止陌生访问者擅自给自己加 admin，此编辑器已禁用。绑回 127.0.0.1 后启用。',
-        adminBootstrapHint: '检测到一次性 token 文件在 {path}。在服务器上 `cat` 该文件取 token，然后在 IM 里发 /setup admin <token> 即可把自己设为 admin。',
-        // ── 审批策略 (超时默认决策) ───────────────────────────────
-        approvalPolicyTitle: '审批策略',
-        approvalPolicyHint: '当工具调用审批超时（IM 端没在限定时间内回复）时 Agim 该怎么办？默认 deny 严格、人在回路；切到 allow 是"出门模式"，让 agent 继续跑、不卡你。',
-        approvalTimeoutDefaultLabel: '审批超时时',
-        approvalTimeoutDeny: '拒绝（默认 — 严格，人工把关）',
-        approvalTimeoutAllow: '放行（出门模式 — agent 静默继续）',
-        approvalPolicySave: '保存',
-        approvalPolicySaved: '已保存 — 下一个挂起的审批起就生效，无需重启。',
-        approvalPolicyLoadFailed: '加载审批策略失败',
-        // ── Viewer (长内容 web 渲染) ─────────────────────────────
-        viewerTitle: 'IM 长内容 Viewer',
-        viewerHint: 'Agent 回答过长或含 markdown 表格 / 大段代码时，Agim 把全文存到本机 ~/.agim/viewer.db（永久保存，绝不离开本机），IM 里只发短摘要 + 跳转链接。这里填你反代到本机 Agim web 的公网域名，链接才能让手机/微信打开。',
-        viewerEnabled: '开启',
-        viewerDisabled: '关闭',
-        viewerEnabledLabel: 'Viewer 状态',
-        viewerPublicUrl: '公网域名',
-        viewerPublicUrlHint: '指向本机 Agim web 的公网域名（例如 https://agim.example.com）。用 cloudflared / caddy / tailscale 把 3000 端口暴露出去即可。',
-        viewerChars: '字符阈值',
-        viewerLines: '行数阈值',
-        viewerCodeLines: '代码块行数阈值',
-        viewerMaxPastes: '本机最多保留条数（LRU 淘汰）',
-        viewerSave: '保存',
-        viewerSaved: '已保存 — 下一条回复生效。',
-        viewerSaveFailed: '保存 Viewer 配置失败',
-        viewerMissingUrl: '⚠️ 公网域名为空 — 长回复将退回到内联文本（无法构造跳转链接）。',
-        viewerTunnelMode: '自动 tunnel（cloudflared）',
-        viewerTunnelHint: '给没有公网域名的用户。Agim 启动时自动拉起 cloudflared quick tunnel，拿一个临时 `*.trycloudflare.com` URL。需要先装 `cloudflared`（`brew install cloudflared` / `apt install cloudflared`）。**重启后 URL 会变，旧 paste 链接打不开**。有反代域名的话保持关闭即可。',
-        viewerTunnelOff: '关闭（用上面的公网域名）',
-        viewerTunnelQuick: 'Quick tunnel（临时 URL，无需域名）',
-        viewerTunnelStatus: 'Tunnel 状态',
-        viewerTunnelRunning: '运行中',
-        viewerTunnelNotRunning: '未运行',
-        viewerTunnelBinaryMissing: '未安装 cloudflared',
-        viewerTunnelCurrentUrl: '当前 URL',
-        viewerTunnelRefresh: '刷新',
-        a2aNotifyTitle: 'A2A 中间状态通知',
-        a2aNotifyHint: '当一个 agent 调另一个 agent（例如 Claude → Codex）时，把开始/进度/完成/超时的状态推到你的 IM 会话，避免长任务"哑巴等"。',
-        a2aDefaultTimeout: 'A2A 默认超时（分钟）',
-        a2aDefaultTimeoutHint: 'agim 等子 agent 的时长上限。v1.1.10 从 10 min 提到 30 min — 足够 Codex 拉几次 API + 写报告。',
-        a2aMaxTimeout: 'A2A 最大允许超时（分钟）',
-        a2aMaxTimeoutHint: '硬上限。agent 调用时即使传更大的 timeoutMs 也会被截到这个值。防止 A2A 被永久卡住。',
-        a2aNotifyMode: '通知模式',
-        a2aNotifyOff: '关闭',
-        a2aNotifyEssential: '精简（仅 start + 终态）',
-        a2aNotifyVerbose: '详细（额外在文件变化时推 heartbeat）',
-        a2aMaxDepth: '最大通知深度',
-        a2aMaxDepthHint: '只对嵌套深度 ≤ 此值的子调用发通知（1 = 仅直接子调用）。避免深度嵌套刷屏。',
-        a2aHeartbeatMin: 'Heartbeat 间隔（分钟，详细模式生效）',
-        a2aHeartbeatHint: '每隔这么久检查一次子 agent 的 _agim-output/ 目录；有新文件就推一条，没变化就推"仍在 think"。',
-        a2aSave: '保存',
-        a2aSaved: '已保存 — 下次 A2A 调用生效，无需重启。',
-        a2aSaveFailed: '保存 A2A 配置失败',
-        memoryTitle: '长期记忆',
-        memoryHint: 'agent 在每次回复后异步从对话中提取"值得长期记住的事实"（用户偏好 / 持仓 / 项目等），存入本机 ~/.agim/memory.db；下一次对话自动注入一个 ~150-300 字符的 persona 摘要到提示头部，并通过 memory_query MCP 工具按需检索具体事实。开启后会有额外 LLM 调用（用当前对话使用的 agent，不强制 Claude），可在 Cost & Health 里观察成本。',
-        memoryEnable: '启用',
-        memoryDisable: '关闭',
-        memoryEnableLabel: '自动化记忆',
-        memorySave: '保存',
-        memorySaved: '已保存 — 下次回复后开始累积事实。',
-        memorySaveFailed: '保存记忆配置失败',
-      },
-    };
-    function t(key) { return T[window.__lang][key] || T.en[key] || key; }
-    document.addEventListener('DOMContentLoaded', () => { document.title = t('title'); });
-  </script>
-  <style>
-    /* Three-state theming. `:root` defaults to light; explicit
-       data-theme="dark" forces dark; `prefers-color-scheme: dark` only
-       applies when the attribute is absent (mode === 'system'). */
-    :root {
-      color-scheme: light dark;
-      /* light defaults */
-      --bg: #f8f9fb;
-      --surface: #ffffff;
-      --surface2: #f1f3f6;
-      --border: #e1e4e8;
-      --text: #1a1f2e;
-      --text-dim: #6b7280;
-      --accent: #6366f1;
-      --accent-dim: #818cf8;
-      --green: #16a34a;
-      --red: #dc2626;
-      --yellow: #ca8a04;
-      --radius: 8px;
-    }
-    :root[data-theme="dark"] {
-      --bg: #0a0a0a;
-      --surface: #141414;
-      --surface2: #1e1e1e;
-      --border: #2a2a2a;
-      --text: #e5e5e5;
-      --text-dim: #888;
-      --accent: #6366f1;
-      --accent-dim: #4f46e5;
-      --green: #22c55e;
-      --red: #ef4444;
-      --yellow: #eab308;
-    }
-    @media (prefers-color-scheme: dark) {
-      :root:not([data-theme]) {
-        --bg: #0a0a0a;
-        --surface: #141414;
-        --surface2: #1e1e1e;
-        --border: #2a2a2a;
-        --text: #e5e5e5;
-        --text-dim: #888;
-        --accent-dim: #4f46e5;
-        --green: #22c55e;
-        --red: #ef4444;
-        --yellow: #eab308;
-      }
-    }
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', system-ui, sans-serif;
-      background: var(--bg);
-      color: var(--text);
-      min-height: 100vh;
-    }
-    .header {
-      display: flex;
-      align-items: center;
-      gap: 16px;
-      padding: 14px 28px;
-      border-bottom: 1px solid var(--border);
-      background: var(--surface);
-      position: sticky;
-      top: 0;
-      z-index: 5;
-    }
-    .header .brand {
-      display: flex;
-      align-items: baseline;
-      gap: 12px;
-      min-width: 0;
-    }
-    .header .brand a {
-      color: var(--text-dim);
-      font-size: 13px;
-      white-space: nowrap;
-    }
-    .header .brand a:hover { color: var(--accent); }
-    .header .brand .title {
-      font-weight: 600;
-      font-size: 15px;
-      color: var(--text);
-      letter-spacing: 0.2px;
-      white-space: nowrap;
-    }
-    .header .controls {
-      margin-left: auto;
-      display: flex;
-      align-items: center;
-      gap: 8px;
-      flex-shrink: 0;
-    }
-    .header .controls select,
-    .header .controls button {
-      width: auto;
-      min-width: 0;
-      margin: 0;
-      background: var(--surface2);
-      color: var(--text);
-      border: 1px solid var(--border);
-      border-radius: 6px;
-      padding: 6px 10px;
-      font-size: 12px;
-      cursor: pointer;
-      outline: none;
-      white-space: nowrap;
-    }
-    .header .controls select:hover,
-    .header .controls button:hover { border-color: var(--text-dim); }
-    .container {
-      max-width: 880px;
-      margin: 0 auto;
-      padding: 32px 28px 64px;
-    }
-    .container h1 {
-      font-size: 24px;
-      font-weight: 700;
-      margin-bottom: 24px;
-      letter-spacing: -0.2px;
-    }
-    /* Cards */
-    .card {
-      background: var(--surface);
-      border: 1px solid var(--border);
-      border-radius: 12px;
-      padding: 22px 24px;
-      margin-bottom: 18px;
-      box-shadow: 0 1px 2px rgba(0,0,0,0.03);
-    }
-    :root[data-theme="dark"] .card { box-shadow: none; }
-    @media (prefers-color-scheme: dark) {
-      :root:not([data-theme]) .card { box-shadow: none; }
-    }
-    .card h2 {
-      font-size: 15px;
-      font-weight: 600;
-      margin-bottom: 18px;
-      display: flex;
-      align-items: center;
-      gap: 8px;
-      letter-spacing: -0.1px;
-    }
-    .card h2 .badge {
-      font-size: 11px;
-      padding: 2px 8px;
-      border-radius: 10px;
-      background: var(--surface2);
-      color: var(--text-dim);
-      font-weight: 400;
-    }
-    /* Form elements */
-    label {
-      display: block;
-      font-size: 12px;
-      color: var(--text-dim);
-      margin-bottom: 4px;
-      font-weight: 600;
-    }
-    input, select, textarea {
-      width: 100%;
-      background: var(--surface2);
-      color: var(--text);
-      border: 1px solid var(--border);
-      border-radius: 6px;
-      padding: 8px 12px;
-      font-size: 13px;
-      font-family: inherit;
-      outline: none;
-      margin-bottom: 12px;
-    }
-    input:focus, select:focus, textarea:focus {
-      border-color: var(--accent);
-    }
-    input::placeholder { color: #555; }
-    .row {
-      display: flex;
-      gap: 12px;
-    }
-    .row > * { flex: 1; }
-    /* Buttons */
-    .btn {
-      display: inline-flex;
-      align-items: center;
-      gap: 4px;
-      padding: 7px 14px;
-      border-radius: 6px;
-      font-size: 13px;
-      cursor: pointer;
-      border: 1px solid var(--border);
-      background: var(--surface2);
-      color: var(--text);
-      transition: all 0.15s;
-    }
-    .btn:hover { border-color: var(--text-dim); }
-    .btn-primary {
-      background: var(--accent);
-      border-color: var(--accent);
-      color: #fff;
-    }
-    .btn-primary:hover { background: var(--accent-dim); }
-    .btn-danger { color: var(--red); }
-    .btn-danger:hover { background: var(--surface2); border-color: var(--red); }
-    .btn-sm { padding: 4px 10px; font-size: 12px; }
-    .btn:disabled { opacity: 0.5; cursor: not-allowed; }
-    .actions { display: flex; gap: 8px; margin-top: 12px; }
-    /* Status dots */
-    .status { display: inline-flex; align-items: center; gap: 6px; font-size: 13px; }
-    .dot {
-      width: 8px; height: 8px;
-      border-radius: 50%;
-      display: inline-block;
-    }
-    .dot-on { background: var(--green); }
-    .dot-off { background: var(--red); }
-    /* Agent list */
-    .agent-row {
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-      padding: 10px 0;
-      border-bottom: 1px solid var(--border);
-    }
-    .agent-row:last-child { border-bottom: none; }
-    .agent-row .left { display: flex; align-items: center; gap: 10px; }
-    .agent-row .name { font-weight: 600; font-size: 14px; }
-    .agent-row .hint { font-size: 12px; color: var(--text-dim); margin-top: 2px; }
-    .agent-row .aliases { font-size: 11px; color: var(--text-dim); }
-    /* ACP table */
-    .acp-table { width: 100%; border-collapse: collapse; margin-bottom: 12px; }
-    .acp-table th {
-      text-align: left;
-      font-size: 11px;
-      color: var(--text-dim);
-      padding: 6px 8px;
-      border-bottom: 1px solid var(--border);
-      font-weight: 600;
-    }
-    .acp-table td {
-      padding: 8px;
-      font-size: 13px;
-      border-bottom: 1px solid var(--border);
-      vertical-align: middle;
-    }
-    .acp-table tr:last-child td { border-bottom: none; }
-    /* Toggle */
-    .toggle {
-      position: relative;
-      width: 36px;
-      height: 20px;
-      background: var(--border);
-      border-radius: 10px;
-      cursor: pointer;
-      transition: background 0.2s;
-      flex-shrink: 0;
-    }
-    .toggle.active { background: var(--green); }
-    .toggle::after {
-      content: '';
-      position: absolute;
-      top: 2px; left: 2px;
-      width: 16px; height: 16px;
-      background: #fff;
-      border-radius: 50%;
-      transition: transform 0.2s;
-    }
-    .toggle.active::after { transform: translateX(16px); }
-    /* Toast */
-    .toast {
-      position: fixed;
-      bottom: 24px;
-      right: 24px;
-      padding: 10px 18px;
-      border-radius: 8px;
-      font-size: 13px;
-      z-index: 999;
-      opacity: 0;
-      transform: translateY(10px);
-      transition: all 0.3s;
-    }
-    .toast.show { opacity: 1; transform: translateY(0); }
-    .toast.success { background: var(--surface); border: 1px solid var(--green); color: var(--green); }
-    .toast.error { background: var(--surface); border: 1px solid var(--red); color: var(--red); }
-    /* Section hint */
-    .hint-box {
-      background: var(--surface2);
-      border-radius: 6px;
-      padding: 10px 14px;
-      font-size: 12px;
-      color: var(--text-dim);
-      margin-bottom: 12px;
-      line-height: 1.5;
-    }
-    .hint-box code {
-      background: var(--bg);
-      padding: 1px 5px;
-      border-radius: 3px;
-      font-family: 'SF Mono', monospace;
-      font-size: 11px;
-    }
-    /* Divider */
-    .divider { border: none; border-top: 1px solid var(--border); margin: 16px 0; }
-    /* Loading */
-    .loading {
-      text-align: center;
-      padding: 40px;
-      color: var(--text-dim);
-    }
-  </style>
-</head>
-<body>
-  <div class="header">
-    <div class="brand">
-      <a href="/" id="backToChat" aria-label="Back to chat"></a>
-      <span class="title" id="settingsTitle"></span>
-    </div>
-    <div class="controls">
-      <select id="langSelect">
-        <option value="en">EN</option>
-        <option value="zh">中文</option>
-      </select>
-      <button id="theme-toggle" type="button" aria-label="Toggle color theme"></button>
-    </div>
-  </div>
-  <div class="container" id="app">
-    <div class="loading">Loading configuration...</div>
-  </div>
-  <div class="toast" id="toast"></div>
-  <script>
-    function esc(s) {
-      return String(s || '').replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
-    }
-    // Apply i18n to static elements
-    function applyLang() {
-      document.title = t('title');
-      document.documentElement.lang = window.__lang === 'zh' ? 'zh-CN' : 'en';
-      document.getElementById('backToChat').textContent = t('backToChat');
-      document.getElementById('settingsTitle').textContent = t('settingsTitle');
-    }
-    // Theme toggle (light / dark / system). _app.js applied theme already;
-    // here we wire the click handler so cycling re-renders the icon/label.
-    if (window.imhub) imhub.theme.bindToggle(document.getElementById('theme-toggle'));
-    // Language selector
-    const langSelect = document.getElementById('langSelect');
-    langSelect.value = window.__lang;
-    langSelect.addEventListener('change', () => {
-      window.__lang = langSelect.value;
-      localStorage.setItem('im-hub-lang', window.__lang);
-      applyLang();
-      render();
-    });
-    // State
-    let config = null;
-    /** Workspace list pulled from /api/workspaces?full=1. Null until first
-     *  fetch completes; render falls through with empty rows in that case
-     *  and refetch happens after init() completes. */
-    let workspaceList = null;
-    let agentStatus = {};
-    // DOM
-    const app = document.getElementById('app');
-    const toastEl = document.getElementById('toast');
-    // Known built-in agents with install info
-    const BUILTIN_AGENTS = {
-      'claude-code': { aliases: ['cc', 'claude'], pkg: '@anthropic-ai/claude-code', cmd: 'claude' },
-      'codex': { aliases: ['cx'], pkg: '@openai/codex', cmd: 'codex' },
-      'opencode': { aliases: ['oc'], pkg: 'opencode-ai', cmd: 'opencode' },
-    };
-    // Helper: API requests share the page origin so the session cookie
-    // (if any reverse-proxy added one) is sent automatically.
-    function authFetch(url, init = {}) {
-      const headers = { ...(init.headers || {}) };
-      // v1.1.10: attach access token (Bearer + Cookie both work, but
-      // setting Bearer ensures direct curl-style usage from devtools also
-      // succeeds). 401 → redirect to /login with `next` set to current URL.
-      if (!headers['Authorization']) {
-        try {
-          const tk = localStorage.getItem('agim_token');
-          if (tk) headers['Authorization'] = `Bearer ${tk}`;
-        } catch { /* ignore */ }
-      }
-      return fetch(url, { ...init, headers, credentials: 'same-origin' }).then(r => {
-        if (r.status === 401) {
-          try { localStorage.removeItem('agim_token'); } catch {}
-          const next = encodeURIComponent(location.pathname + location.search);
-          location.href = `/login?next=${next}`;
-        }
-        return r;
-      });
-    }
-    // Fetch config on load
-    async function init() {
-      try {
-        const res = await authFetch('/api/config');
-        if (!res.ok) throw new Error(t('loadFailed'));
-        const data = await res.json();
-        config = data;
-        agentStatus = data.agentStatus || {};
-        // Workspaces come from a separate endpoint so the registry's
-        // runtime state (which may include extra/removed entries via
-        // REST CRUD since process start) is the source of truth.
-        try {
-          const wres = await authFetch('/api/workspaces?full=1');
-          if (wres.ok) workspaceList = (await wres.json()).workspaces || [];
-        } catch { /* fall through with workspaceList = null */ }
-        render();
-      } catch (err) {
-        app.innerHTML = `<div class="loading" style="color:var(--red)">${t('loadFailed')}: ${esc(err.message)}</div>`;
-      }
-    }
-    /** Refetch the workspace list and re-render just the workspaces card.
-     *  Cheaper than a full settings re-render for create/update/delete. */
-    async function reloadWorkspaces() {
-      try {
-        const wres = await authFetch('/api/workspaces?full=1');
-        if (wres.ok) workspaceList = (await wres.json()).workspaces || [];
-      } catch { /* keep stale list, surface via toast on next save */ }
-      render();
-    }
-    function render() {
-      app.innerHTML = `
-        <h1>${t('h1')}</h1>
-        ${renderServiceCard()}
-        ${renderSafetyCard()}
-        ${renderApprovalPolicyCard()}
-        ${renderAgentsCard()}
-        ${renderMessengersCard()}
-        ${renderAcpCard()}
-        ${renderWorkspacesCard()}
-        ${renderGeneralCard()}
-      `;
-      bindEvents();
-      // Service status loads asynchronously; the card renders with a
-      // placeholder, populated by the first /api/service/status response.
-      void loadServiceStatus();
-      // Admin allowlist list — loads via /api/admin-allowlist.
-      void loadAdminList();
-      // Approval policy (IMHUB_TIMEOUT_DEFAULT) — loaded via /api/env.
-      void loadApprovalPolicy();
-    }
-    // ==========================================
-    // Safety card — IM admin allowlist editor.
-    // The Claude --dangerously-skip-permissions toggle was removed in
-    // v1.0.12: Claude CLI refuses that flag when running as root, which
-    // is the default systemd deployment, so the toggle was a footgun.
-    // Operators who still want it can set IMHUB_DANGEROUSLY_SKIP_
-    // PERMISSIONS=1 in ~/.agim/env manually (non-root only).
-    // ==========================================
-    function renderSafetyCard() {
-      return `
-        <div class="card">
-          <h2>${t('safetyTitle')} ⚠️</h2>
-          <div style="font-size:13px;font-weight:600;margin-bottom:6px">${t('adminListTitle')}</div>
-          <div class="hint" style="margin-bottom:10px">${t('adminListHint')}</div>
-          <div id="admin-list" style="margin-bottom:10px">${t('adminListLoading')}</div>
-          <div class="row">
-            <div>
-              <label>Platform</label>
-              <input type="text" id="admin-platform" placeholder="wechat-ilink / telegram / feishu …">
-            </div>
-            <div>
-              <label>User ID</label>
-              <input type="text" id="admin-userid" placeholder="${t('adminUserIdPlaceholder')}">
-            </div>
-          </div>
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="admin-add">${t('adminAdd')}</button>
-          </div>
-          <div class="hint" id="admin-public-warn" style="margin-top:8px;display:none;color:var(--yellow)">
-            ${t('adminPublicBindWarn')}
-          </div>
-        </div>
-      `;
-    }
-    // ─── Admin allowlist editor ──────────────────────────────────
-    async function loadAdminList() {
-      const listEl = document.getElementById('admin-list');
-      const warnEl = document.getElementById('admin-public-warn');
-      if (!listEl) return;
-      try {
-        const data = await authFetch('/api/admin-allowlist').then(r => r.json());
-        const admins = data.admins || [];
-        if (admins.length === 0) {
-          let inner = `<div class="hint" style="font-style:italic">${esc(t('adminListEmpty'))}</div>`;
-          if (data.bootstrapAvailable) {
-            inner += `<div class="hint" style="margin-top:6px;color:var(--yellow)">${esc(t('adminBootstrapHint').replace('{path}', data.bootstrapTokenPath || '~/.agim/admin-bootstrap-token'))}</div>`;
-          }
-          listEl.innerHTML = inner;
-        } else {
-          listEl.innerHTML = admins.map(a => `
-            <div class="agent-row" style="padding:6px 0">
-              <div class="left">
-                <div>
-                  <div style="font-family:monospace;font-size:13px">${esc(a.platform)}:${esc(a.userId)}</div>
-                </div>
-              </div>
-              <button type="button" class="btn btn-sm btn-danger" data-admin-remove='${esc(JSON.stringify({platform: a.platform, userId: a.userId}))}'>${esc(t('adminRemove'))}</button>
-            </div>
-          `).join('');
-          // Wire the remove buttons
-          listEl.querySelectorAll('[data-admin-remove]').forEach(btn => {
-            btn.addEventListener('click', async () => {
-              const meta = JSON.parse(btn.getAttribute('data-admin-remove') || '{}');
-              if (!confirm(t('adminConfirmRemove').replace('{p}', meta.platform).replace('{u}', meta.userId))) return;
-              try {
-                const res = await authFetch('/api/admin-allowlist', {
-                  method: 'DELETE',
-                  headers: { 'Content-Type': 'application/json' },
-                  body: JSON.stringify(meta),
-                });
-                if (!res.ok) {
-                  const j = await res.json().catch(() => ({}));
-                  throw new Error(j.error || res.statusText);
-                }
-                await loadAdminList();
-              } catch (err) {
-                toast(t('error') + ': ' + (err && err.message ? err.message : err), 'error');
-              }
-            });
-          });
-        }
-      } catch (err) {
-        listEl.textContent = t('error') + ': ' + (err && err.message ? err.message : err);
-      }
-      // The public-bind warning shows when /api/service/status reports a
-      // non-loopback bind. Re-use that endpoint instead of adding another.
-      try {
-        const status = await authFetch('/api/service/status').then(r => r.json());
-        if (warnEl && status.web && status.web.bind && status.web.bind !== '127.0.0.1' && status.web.bind !== 'localhost' && status.web.bind !== '::1') {
-          warnEl.style.display = 'block';
-          // Also disable the Add button
-          const addBtn = document.getElementById('admin-add');
-          if (addBtn) addBtn.disabled = true;
-        }
-      } catch { /* non-fatal */ }
-    }
-    // ==========================================
-    // Service control card
-    // ==========================================
-    function renderServiceCard() {
-      return `
-        <div class="card">
-          <h2>${t('svcTitle')}</h2>
-          <div class="status" id="svc-state" style="margin-bottom:14px">
-            <span class="dot dot-off"></span>${t('svcStateLoading')}
-          </div>
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="svc-restart">${t('svcRestart')}</button>
-            <button type="button" class="btn" id="svc-stop">${t('svcStop')}</button>
-            <button type="button" class="btn" id="svc-start" disabled>${t('svcStart')}</button>
-          </div>
-        </div>
-      `;
-    }
-    // ==========================================
-    // Approval Policy card — IMHUB_TIMEOUT_DEFAULT (deny|allow).
-    // Hot-reloads via process.env mutation in handlePutEnv, no restart.
-    // ==========================================
-    function renderApprovalPolicyCard() {
-      return `
-        <div class="card">
-          <h2>${t('approvalPolicyTitle')}</h2>
-          <div class="hint" style="margin-bottom:10px">${t('approvalPolicyHint')}</div>
-          <div style="margin-bottom:8px">
-            <label for="approval-timeout-default">${t('approvalTimeoutDefaultLabel')}</label>
-            <select id="approval-timeout-default">
-              <option value="deny">${t('approvalTimeoutDeny')}</option>
-              <option value="allow">${t('approvalTimeoutAllow')}</option>
-            </select>
-          </div>
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="approval-policy-save">${t('approvalPolicySave')}</button>
-            <span id="approval-policy-status" class="hint" style="margin-left:10px"></span>
-          </div>
-        </div>
-      `;
-    }
-    async function loadApprovalPolicy() {
-      const sel = document.getElementById('approval-timeout-default');
-      const status = document.getElementById('approval-policy-status');
-      if (!sel) return;
-      try {
-        const res = await authFetch('/api/env?reveal=1');
-        if (!res.ok) throw new Error('HTTP ' + res.status);
-        const data = await res.json();
-        const v = (data.env && typeof data.env.IMHUB_TIMEOUT_DEFAULT === 'string')
-          ? data.env.IMHUB_TIMEOUT_DEFAULT.toLowerCase()
-          : 'deny';
-        sel.value = v === 'allow' ? 'allow' : 'deny';
-      } catch (err) {
-        if (status) status.textContent = t('approvalPolicyLoadFailed');
-      }
-    }
-    async function saveApprovalPolicy() {
-      const sel = document.getElementById('approval-timeout-default');
-      const status = document.getElementById('approval-policy-status');
-      if (!sel || !status) return;
-      const v = sel.value === 'allow' ? 'allow' : 'deny';
-      try {
-        // authFetch is a thin fetch wrapper that doesn't check res.ok — a
-        // 5xx from the server still resolves the promise. Without this guard
-        // the UI would lie ("已保存") on a failed write.
-        const res = await authFetch('/api/env', {
-          method: 'PUT',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ updates: { IMHUB_TIMEOUT_DEFAULT: v } }),
-        });
-        if (!res.ok) throw new Error('HTTP ' + res.status);
-        status.textContent = t('approvalPolicySaved');
-        setTimeout(() => { status.textContent = ''; }, 4000);
-      } catch (err) {
-        status.textContent = t('saveFailed');
-      }
-    }
-    // ==========================================
-    // Agents card
-    // ==========================================
-    function renderAgentsCard() {
-      const agents = Object.keys(BUILTIN_AGENTS);
-      const enabledAgents = config.agents || [];
-      const defaultAgent = config.defaultAgent || 'claude-code';
-      const rows = agents.map(name => {
-        const info = BUILTIN_AGENTS[name];
-        const available = agentStatus[name];
-        const enabled = enabledAgents.includes(name);
-        return `
-          <div class="agent-row" data-agent="${name}">
-            <div class="left">
-              <span class="dot ${available ? 'dot-on' : 'dot-off'}"></span>
-              <div>
-                <div class="name">${name}</div>
-                <div class="aliases">${info.aliases.map(a => `/${a}`).join(', ')}</div>
-                ${!available ? `<div class="hint">${t('installHint')} ${info.pkg}</div>` : ''}
-              </div>
-            </div>
-            <div class="toggle ${enabled ? 'active' : ''}" data-toggle-agent="${name}"></div>
-          </div>
-        `;
-      }).join('');
-      // Default-agent picker only lists agents that are BOTH enabled and
-      // installed — defaulting to a missing binary or a disabled adapter
-      // both break routing the first time someone sends a message.
-      const eligibleDefaults = agents.filter(a => enabledAgents.includes(a) && agentStatus[a]);
-      return `
-        <div class="card">
-          <h2>${t('agents')} <span class="badge">${agents.length}</span></h2>
-          ${rows}
-          <hr class="divider">
-          <label>${t('defaultAgent')}</label>
-          <select id="defaultAgent" ${eligibleDefaults.length === 0 ? 'disabled' : ''}>
-            ${eligibleDefaults.length === 0
-              ? `<option value="">— ${esc(t('agents'))} —</option>`
-              : eligibleDefaults.map(a =>
-                  `<option value="${esc(a)}" ${a === defaultAgent ? 'selected' : ''}>${esc(a)}</option>`
-                ).join('')
-            }
-          </select>
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="saveAgents">${t('saveAgents')}</button>
-          </div>
-        </div>
-      `;
-    }
-    // ==========================================
-    // Messengers card
-    // ==========================================
-    function renderMessengersCard() {
-      const messengers = config.messengers || [];
-      const tg = config.telegram || {};
-      const fs = config.feishu || {};
-      const dt = config.dingtalk || {};
-      const dc = config.discord || {};
-      const wechatEnabled = messengers.includes('wechat-ilink');
-      const telegramEnabled = messengers.includes('telegram');
-      const feishuEnabled = messengers.includes('feishu');
-      const dingtalkEnabled = messengers.includes('dingtalk');
-      const discordEnabled = messengers.includes('discord');
-      return `
-        <div class="card">
-          <h2>${t('messengers')} <span class="badge">${messengers.length}</span></h2>
-          <!-- WeChat -->
-          <div style="margin-bottom:16px">
-            <div class="agent-row">
-              <div class="left">
-                <div>
-                  <div class="name">${t('wechat')}</div>
-                  <div class="hint">${t('wechatHint')}</div>
-                </div>
-              </div>
-              <div class="toggle ${wechatEnabled ? 'active' : ''}" data-toggle-messenger="wechat-ilink"></div>
-            </div>
-            ${wechatEnabled ? `
-              <div class="actions">
-                <button type="button" class="btn" id="wechatScanBtn">${t('wechatScan')}</button>
-              </div>
-            ` : ''}
-          </div>
-          <!-- Telegram -->
-          <div style="margin-bottom:16px">
-            <div class="agent-row">
-              <div class="left">
-                <div>
-                  <div class="name">${t('telegram')}</div>
-                  <div class="hint">${t('telegramHint')}</div>
-                </div>
-              </div>
-              <div class="toggle ${telegramEnabled ? 'active' : ''}" data-toggle-messenger="telegram"></div>
-            </div>
-            ${telegramEnabled ? `
-              <div class="row">
-                <div>
-                  <label>${t('botToken')}</label>
-                  <input type="password" id="tgToken" value="${esc(tg.botToken || '')}" placeholder="123456:ABC-DEF...">
-                </div>
-                <div>
-                  <label>${t('channelId')}</label>
-                  <input type="text" id="tgChannel" value="${esc(tg.channelId || '')}" placeholder="default">
-                </div>
-              </div>
-            ` : ''}
-          </div>
-          <!-- Feishu -->
-          <div style="margin-bottom:16px">
-            <div class="agent-row">
-              <div class="left">
-                <div>
-                  <div class="name">${t('feishu')}</div>
-                  <div class="hint">${t('feishuHint')}</div>
-                </div>
-              </div>
-              <div class="toggle ${feishuEnabled ? 'active' : ''}" data-toggle-messenger="feishu"></div>
-            </div>
-            ${feishuEnabled ? `
-              <div class="row">
-                <div>
-                  <label>${t('appId')}</label>
-                  <input type="text" id="fsAppId" value="${esc(fs.appId || '')}" placeholder="cli_xxx">
-                </div>
-                <div>
-                  <label>${t('appSecret')}</label>
-                  <input type="password" id="fsAppSecret" value="${esc(fs.appSecret || '')}" placeholder="Your app secret">
-                </div>
-              </div>
-            ` : ''}
-          </div>
-          <!-- DingTalk -->
-          <div style="margin-bottom:16px">
-            <div class="agent-row">
-              <div class="left">
-                <div>
-                  <div class="name">${t('dingtalk')}</div>
-                  <div class="hint">${t('dingtalkHint')}</div>
-                </div>
-              </div>
-              <div class="toggle ${dingtalkEnabled ? 'active' : ''}" data-toggle-messenger="dingtalk"></div>
-            </div>
-            ${dingtalkEnabled ? `
-              <div class="row">
-                <div>
-                  <label>${t('dingtalkClientId')}</label>
-                  <input type="text" id="dtClientId" value="${esc(dt.clientId || '')}" placeholder="dingxxxxxx">
-                </div>
-                <div>
-                  <label>${t('dingtalkClientSecret')}</label>
-                  <input type="password" id="dtClientSecret" value="${esc(dt.clientSecret || '')}" placeholder="••••••••">
-                </div>
-              </div>
-            ` : ''}
-          </div>
-          <!-- Discord -->
-          <div>
-            <div class="agent-row">
-              <div class="left">
-                <div>
-                  <div class="name">${t('discord')}</div>
-                  <div class="hint">${t('discordHint')}</div>
-                </div>
-              </div>
-              <div class="toggle ${discordEnabled ? 'active' : ''}" data-toggle-messenger="discord"></div>
-            </div>
-            ${discordEnabled ? `
-              <div class="row">
-                <div>
-                  <label>${t('discordToken')}</label>
-                  <input type="password" id="dcToken" value="${esc(dc.botToken || '')}" placeholder="••••••••">
-                </div>
-                <div>
-                  <label>${t('channelId')}</label>
-                  <input type="text" id="dcChannel" value="${esc(dc.channelId || '')}" placeholder="default">
-                </div>
-              </div>
-              <div class="row">
-                <div>
-                  <label>${t('discordGuilds')}</label>
-                  <input type="text" id="dcGuilds" value="${esc((dc.allowedGuilds || []).join(', '))}" placeholder="123, 456">
-                </div>
-                <div>
-                  <label>${t('discordChannels')}</label>
-                  <input type="text" id="dcChannels" value="${esc((dc.allowedChannels || []).join(', '))}" placeholder="789, 101112">
-                </div>
-              </div>
-            ` : ''}
-          </div>
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="saveMessengers">${t('saveMessengers')}</button>
-          </div>
-        </div>
-      `;
-    }
-    // ==========================================
-    // ACP Remote Agents card
-    // ==========================================
-    function renderAcpCard() {
-      const agents = config.acpAgents || [];
-      const rows = agents.length > 0 ? agents.map((a, i) => `
-        <tr data-acp-idx="${i}">
-          <td><strong>${esc(a.name)}</strong><br><span style="font-size:11px;color:var(--text-dim)">${esc((a.aliases || []).join(', '))}</span></td>
-          <td style="font-family:monospace;font-size:12px">${esc(a.endpoint)}</td>
-          <td>${a.auth?.type || t('none')}</td>
-          <td><div class="toggle ${a.enabled !== false ? 'active' : ''}" data-toggle-acp="${i}"></div></td>
-          <td>
-            <button type="button" class="btn btn-sm" data-test-acp="${i}">${t('test')}</button>
-            <button type="button" class="btn btn-sm btn-danger" data-del-acp="${i}">${t('del')}</button>
-          </td>
-        </tr>
-      `).join('') : `<tr><td colspan="5" style="color:var(--text-dim);text-align:center;padding:20px">${t('acpNone')}</td></tr>`;
-      return `
-        <div class="card">
-          <h2>${t('acpTitle')} <span class="badge">${agents.length}</span></h2>
-          <table class="acp-table">
-            <thead>
-              <tr><th>${t('name')}</th><th>${t('endpoint')}</th><th>${t('auth')}</th><th>${t('enabled')}</th><th></th></tr>
-            </thead>
-            <tbody>
-              ${rows}
-            </tbody>
-          </table>
-          <hr class="divider">
-          <div style="font-size:13px;font-weight:600;margin-bottom:10px">${t('addAgent')}</div>
-          <div class="row">
-            <div>
-              <label>${t('name')}</label>
-              <input type="text" id="acpName" placeholder="my-agent">
-            </div>
-            <div>
-              <label>${t('aliases')}</label>
-              <input type="text" id="acpAliases" placeholder="ma, agent1">
-            </div>
-          </div>
-          <div class="row">
-            <div>
-              <label>${t('endpointUrl')}</label>
-              <input type="text" id="acpEndpoint" placeholder="http://localhost:8080">
-            </div>
-            <div>
-              <label>${t('authType')}</label>
-              <select id="acpAuthType">
-                <option value="none">${t('none')}</option>
-                <option value="apikey">${t('apikey')}</option>
-                <option value="bearer">${t('bearer')}</option>
-              </select>
-            </div>
-          </div>
-          <div class="row" id="acpTokenRow" style="display:none">
-            <div>
-              <label>${t('token')}</label>
-              <input type="password" id="acpToken" placeholder="Your auth token">
-            </div>
-            <div></div>
-          </div>
-          <div class="actions">
-            <button type="button" class="btn" id="testAcpNew">${t('testConn')}</button>
-            <button type="button" class="btn btn-primary" id="addAcp">${t('add')}</button>
-          </div>
-        </div>
-      `;
-    }
-    // ==========================================
-    // Workspaces card (PR-C)
-    // ==========================================
-    function renderWorkspacesCard() {
-      const list = workspaceList || [];
-      // Surface default at the top, locked. Custom workspaces follow.
-      const sorted = list.slice().sort((a, b) => {
-        if (a.id === 'default') return -1;
-        if (b.id === 'default') return 1;
-        return a.id.localeCompare(b.id);
-      });
-      const escHtml = (s) => String(s || '').replace(/[&<>"']/g, (c) => (
-        { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]
-      ));
-      const rows = sorted.length ? sorted.map((w) => {
-        const isDefault = w.id === 'default';
-        const rl = w.rateLimit
-          ? `${w.rateLimit.rate}/${w.rateLimit.intervalSec}s · burst ${w.rateLimit.burst}`
-          : '—';
-        const agents = (w.agents?.length) ? escHtml(w.agents.join(', ')) : '<span style="color:var(--text-dim)">*</span>';
-        const members = (w.members?.length) ? w.members.length : `<span style="color:var(--text-dim)">*</span>`;
-        return `
-          <tr data-ws-id="${escHtml(w.id)}">
-            <td>
-              <strong>${escHtml(w.id)}</strong>
-              ${isDefault ? `<br><span class="badge">${t('workspaceDefaultLocked')}</span>` : ''}
-              <br><span style="font-size:11px;color:var(--text-dim)">${escHtml(w.name || w.id)}</span>
-            </td>
-            <td style="font-family:monospace;font-size:12px;max-width:240px;word-break:break-word">${agents}</td>
-            <td>${members}</td>
-            <td style="font-size:12px">${rl}</td>
-            <td>
-              ${isDefault ? '' : `
-                <button type="button" class="btn btn-sm" data-edit-ws="${escHtml(w.id)}">${t('workspaceEdit')}</button>
-                <button type="button" class="btn btn-sm btn-danger" data-del-ws="${escHtml(w.id)}">${t('workspaceDelete')}</button>
-              `}
-            </td>
-          </tr>
-        `;
-      }).join('') : `<tr><td colspan="5" style="color:var(--text-dim);text-align:center;padding:20px">${t('workspacesNone')}</td></tr>`;
-      return `
-        <div class="card">
-          <h2>${t('workspacesTitle')} <span class="badge">${list.length}</span></h2>
-          <table class="acp-table">
-            <thead>
-              <tr>
-                <th>${t('workspaceId')}</th>
-                <th>${t('workspaceAgents')}</th>
-                <th>${t('workspaceMembers')}</th>
-                <th>${t('workspaceRateLimit')}</th>
-                <th></th>
-              </tr>
-            </thead>
-            <tbody>${rows}</tbody>
-          </table>
-          <hr class="divider">
-          <div style="font-size:13px;font-weight:600;margin-bottom:10px">${t('workspaceAdd')}</div>
-          <div class="row">
-            <div>
-              <label>${t('workspaceId')} <span style="font-weight:400;color:var(--text-dim);font-size:11px">(${t('workspaceIdHelp')})</span></label>
-              <input type="text" id="wsId" placeholder="team-data">
-            </div>
-            <div>
-              <label>${t('workspaceName')}</label>
-              <input type="text" id="wsName" placeholder="Data team">
-            </div>
-          </div>
-          <div class="row">
-            <div>
-              <label>${t('workspaceAgents')}</label>
-              <input type="text" id="wsAgents" placeholder="opencode, claude-code">
-            </div>
-            <div>
-              <label>${t('workspaceMembers')}</label>
-              <input type="text" id="wsMembers" placeholder="user-1, user-2">
-            </div>
-          </div>
-          <div class="row">
-            <div>
-              <label>${t('workspaceRate')}</label>
-              <input type="number" id="wsRate" placeholder="10" min="1">
-            </div>
-            <div>
-              <label>${t('workspaceInterval')}</label>
-              <input type="number" id="wsInterval" placeholder="60" min="1">
-            </div>
-            <div>
-              <label>${t('workspaceBurst')}</label>
-              <input type="number" id="wsBurst" placeholder="15" min="1">
-            </div>
-          </div>
-          <div class="actions">
-            <button type="button" class="btn" id="resetWs">${t('workspaceReset')}</button>
-            <button type="button" class="btn btn-primary" id="saveWs">${t('save')}</button>
-          </div>
-        </div>
-      `;
-    }
-    // ==========================================
-    // General card
-    // ==========================================
-    function renderGeneralCard() {
-      return `
-        <div class="card">
-          <h2>${t('general')}</h2>
-          <label>${t('webPort')}</label>
-          <input type="number" id="webPort" value="${config.webPort || 3000}" min="1024" max="65535" style="max-width:200px">
-          <div class="actions">
-            <button type="button" class="btn btn-primary" id="saveGeneral">${t('save')}</button>
-          </div>
-        </div>
-        <!-- SMTP (env-file) — feeds /remind email delivery -->
-        <div class="card">
-          <h2>📨 SMTP</h2>
-          <p class="muted" style="margin-top:-4px;margin-bottom:12px;font-size:13px">
-            Email delivery for <code>/remind email me@x.com …</code>. Credentials live in <code>~/.im-hub/env</code> (chmod 600). Leave blank to disable.
-          </p>
-          <div style="display:grid;grid-template-columns:1fr 1fr;gap:10px">
-            <div>
-              <label>Host</label>
-              <input type="text" id="smtpHost" placeholder="smtp.gmail.com" />
-            </div>
-            <div>
-              <label>Port</label>
-              <input type="number" id="smtpPort" placeholder="465" min="1" max="65535" />
-            </div>
-            <div>
-              <label>User (login email)</label>
-              <input type="text" id="smtpUser" placeholder="you@example.com" />
-            </div>
-            <div>
-              <label>Password / app token</label>
-              <input type="password" id="smtpPass" placeholder="••••••••" autocomplete="off" />
-            </div>
-            <div>
-              <label>From (defaults to user)</label>
-              <input type="text" id="smtpFrom" placeholder="" />
-            </div>
-            <div>
-              <label>TLS mode</label>
-              <select id="smtpSecure">
-                <option value="auto">auto</option>
-                <option value="true">true (SSL on connect, port 465)</option>
-                <option value="false">false (STARTTLS, port 587)</option>
-              </select>
-            </div>
-          </div>
-          <div class="actions" style="margin-top:12px">
-            <button type="button" class="btn btn-primary" id="saveSmtp">${t('save')}</button>
-            <button type="button" class="btn" id="clearSmtp">Disable SMTP</button>
-            <button type="button" class="btn" id="revealSmtp" title="Show the stored password">Reveal</button>
-          </div>
-          <p class="muted" id="smtpStatus" style="margin-top:8px;font-size:12px"></p>
-        </div>
-        <!-- Viewer (env-file) — long-message web rendering -->
-        <div class="card">
-          <h2>📄 ${t('viewerTitle')}</h2>
-          <p class="muted" style="margin-top:-4px;margin-bottom:12px;font-size:13px">${t('viewerHint')}</p>
-          <div style="display:flex;gap:16px;flex-wrap:wrap;align-items:center;margin-bottom:12px">
-            <label style="display:flex;gap:8px;align-items:center;font-weight:600">
-              <input type="checkbox" id="viewerEnabled" />
-              ${t('viewerEnabledLabel')}
-            </label>
-          </div>
-          <label>${t('viewerPublicUrl')}</label>
-          <input type="text" id="viewerPublicUrl" placeholder="https://agim.example.com" style="max-width:480px" />
-          <p class="muted" style="margin-top:4px;font-size:12px">${t('viewerPublicUrlHint')}</p>
-          <label style="margin-top:12px;display:block">${t('viewerTunnelMode')}</label>
-          <select id="viewerTunnelMode" style="max-width:480px">
-            <option value="off">${t('viewerTunnelOff')}</option>
-            <option value="quick">${t('viewerTunnelQuick')}</option>
-          </select>
-          <p class="muted" style="margin-top:4px;font-size:12px">${t('viewerTunnelHint')}</p>
-          <div id="viewerTunnelStatusBox" style="margin-top:6px;padding:8px 10px;border:1px solid var(--border, #d0d7de);border-radius:6px;font-size:12px;display:none">
-            <div><strong>${t('viewerTunnelStatus')}:</strong> <span id="viewerTunnelState">—</span></div>
-            <div style="margin-top:4px"><strong>${t('viewerTunnelCurrentUrl')}:</strong> <code id="viewerTunnelCurrentUrl" style="word-break:break-all">—</code></div>
-            <button type="button" class="btn" id="viewerTunnelRefreshBtn" style="margin-top:6px;padding:4px 10px;font-size:12px">${t('viewerTunnelRefresh')}</button>
-          </div>
-          <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(160px,1fr));gap:12px;margin-top:12px;max-width:720px">
-            <div>
-              <label>${t('viewerChars')}</label>
-              <input type="number" id="viewerChars" min="100" max="10000" placeholder="500" />
-            </div>
-            <div>
-              <label>${t('viewerLines')}</label>
-              <input type="number" id="viewerLines" min="5" max="200" placeholder="12" />
-            </div>
-            <div>
-              <label>${t('viewerCodeLines')}</label>
-              <input type="number" id="viewerCodeLines" min="5" max="200" placeholder="10" />
-            </div>
-            <div>
-              <label>${t('viewerMaxPastes')}</label>
-              <input type="number" id="viewerMaxPastes" min="100" max="1000000" placeholder="10000" />
-            </div>
-          </div>
-          <div class="actions" style="margin-top:12px">
-            <button type="button" class="btn btn-primary" id="saveViewer">${t('viewerSave')}</button>
-          </div>
-          <p class="muted" id="viewerStatus" style="margin-top:8px;font-size:12px"></p>
-        </div>
-        <!-- A2A Notifications (env-file) — push intermediate state during agent-to-agent handoffs -->
-        <div class="card">
-          <h2>🔀 ${t('a2aNotifyTitle')}</h2>
-          <p class="muted" style="margin-top:-4px;margin-bottom:12px;font-size:13px">${t('a2aNotifyHint')}</p>
-          <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:12px;max-width:720px">
-            <div>
-              <label>${t('a2aDefaultTimeout')}</label>
-              <input type="number" id="a2aDefaultTimeout" min="1" max="60" placeholder="30" />
-              <p class="muted" style="margin-top:4px;font-size:11px">${t('a2aDefaultTimeoutHint')}</p>
-            </div>
-            <div>
-              <label>${t('a2aMaxTimeout')}</label>
-              <input type="number" id="a2aMaxTimeout" min="1" max="180" placeholder="60" />
-              <p class="muted" style="margin-top:4px;font-size:11px">${t('a2aMaxTimeoutHint')}</p>
-            </div>
-          </div>
-          <label style="margin-top:12px;display:block">${t('a2aNotifyMode')}</label>
-          <select id="a2aNotifyMode" style="max-width:480px">
-            <option value="off">${t('a2aNotifyOff')}</option>
-            <option value="essential" selected>${t('a2aNotifyEssential')}</option>
-            <option value="verbose">${t('a2aNotifyVerbose')}</option>
-          </select>
-          <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:12px;margin-top:12px;max-width:720px">
-            <div>
-              <label>${t('a2aMaxDepth')}</label>
-              <input type="number" id="a2aMaxDepth" min="0" max="5" placeholder="1" />
-              <p class="muted" style="margin-top:4px;font-size:11px">${t('a2aMaxDepthHint')}</p>
-            </div>
-            <div>
-              <label>${t('a2aHeartbeatMin')}</label>
-              <input type="number" id="a2aHeartbeatMin" min="1" max="60" placeholder="5" />
-              <p class="muted" style="margin-top:4px;font-size:11px">${t('a2aHeartbeatHint')}</p>
-            </div>
-          </div>
-          <div class="actions" style="margin-top:12px">
-            <button type="button" class="btn btn-primary" id="saveA2A">${t('a2aSave')}</button>
-          </div>
-          <p class="muted" id="a2aStatus" style="margin-top:8px;font-size:12px"></p>
-        </div>
-        <!-- Long-term memory (env-file) — auto fact extraction + persona injection -->
-        <div class="card">
-          <h2>🧠 ${t('memoryTitle')}</h2>
-          <p class="muted" style="margin-top:-4px;margin-bottom:12px;font-size:13px">${t('memoryHint')}</p>
-          <div style="display:flex;gap:16px;flex-wrap:wrap;align-items:center;margin-bottom:12px">
-            <label style="display:flex;gap:8px;align-items:center;font-weight:600">
-              <input type="checkbox" id="memoryEnabled" />
-              ${t('memoryEnableLabel')}
-            </label>
-          </div>
-          <div class="actions" style="margin-top:12px">
-            <button type="button" class="btn btn-primary" id="saveMemory">${t('memorySave')}</button>
-          </div>
-          <p class="muted" id="memoryStatus" style="margin-top:8px;font-size:12px"></p>
-        </div>
-        <!-- Baidu Maps AK (env-file) — feeds /memo address geocoding -->
-        <div class="card">
-          <h2>🗺 Baidu Maps AK</h2>
-          <p class="muted" style="margin-top:-4px;margin-bottom:12px;font-size:13px">
-            Enables <code>/memo</code> address-to-coords lookup. Without it, /memo still works via raw coords or browser GPS share. Free AK: <a href="https://lbsyun.baidu.com/" target="_blank">lbsyun.baidu.com</a> → Console → 应用管理 → 创建应用 → 服务端 API.
-          </p>
-          <label>IMHUB_BAIDU_MAP_AK</label>
-          <input type="text" id="baiduAk" placeholder="32-char AK starting with non-digit" style="max-width:480px" />
-          <div class="actions" style="margin-top:12px">
-            <button type="button" class="btn btn-primary" id="saveBaidu">${t('save')}</button>
-            <button type="button" class="btn" id="clearBaidu">Clear</button>
-            <button type="button" class="btn" id="revealBaidu" title="Show the stored AK">Reveal</button>
-          </div>
-          <p class="muted" id="baiduStatus" style="margin-top:8px;font-size:12px"></p>
-        </div>
-      `;
-    }
-    async function refreshViewerTunnelStatus() {
-      const stateEl = document.getElementById('viewerTunnelState');
-      const urlEl = document.getElementById('viewerTunnelCurrentUrl');
-      if (!stateEl || !urlEl) return;
-      stateEl.textContent = '…';
-      urlEl.textContent = '—';
-      try {
-        const data = await authFetch('/api/viewer/tunnel').then(r => r.json());
-        const tun = data && data.tunnel ? data.tunnel : {};
-        if (!tun.binaryFound) {
-          stateEl.textContent = t('viewerTunnelBinaryMissing');
-          stateEl.style.color = '#c0392b';
-        } else if (tun.running) {
-          stateEl.textContent = '✓ ' + t('viewerTunnelRunning');
-          stateEl.style.color = '#16a34a';
-        } else {
-          stateEl.textContent = t('viewerTunnelNotRunning');
-          stateEl.style.color = '';
-        }
-        urlEl.textContent = tun.url || (data && data.effectivePublicUrl) || '—';
-      } catch (err) {
-        stateEl.textContent = 'error';
-        urlEl.textContent = (err && err.message) || String(err);
-      }
-    }
-    async function loadEnvSection(reveal) {
-      try {
-        const url = reveal ? '/api/env?reveal=1' : '/api/env';
-        const data = await authFetch(url).then(r => r.json());
-        const env = data.env || {};
-        const set = (id, key) => {
-          const el = document.getElementById(id);
-          if (el) el.value = env[key] != null ? env[key] : '';
-        };
-        set('smtpHost', 'IMHUB_SMTP_HOST');
-        set('smtpPort', 'IMHUB_SMTP_PORT');
-        set('smtpUser', 'IMHUB_SMTP_USER');
-        set('smtpPass', 'IMHUB_SMTP_PASS');
-        set('smtpFrom', 'IMHUB_SMTP_FROM');
-        const sec = document.getElementById('smtpSecure');
-        if (sec) sec.value = env['IMHUB_SMTP_SECURE'] || 'auto';
-        set('baiduAk', 'IMHUB_BAIDU_MAP_AK');
-        // Viewer card fields
-        const vEnabled = document.getElementById('viewerEnabled');
-        if (vEnabled) {
-          const v = (env['IMHUB_VIEWER_ENABLED'] || '').toLowerCase();
-          vEnabled.checked = v === '1' || v === 'true' || v === 'yes';
-        }
-        set('viewerPublicUrl', 'IMHUB_VIEWER_PUBLIC_BASE_URL');
-        set('viewerChars', 'IMHUB_VIEWER_CHARS');
-        set('viewerLines', 'IMHUB_VIEWER_LINES');
-        set('viewerCodeLines', 'IMHUB_VIEWER_CODE_LINES');
-        set('viewerMaxPastes', 'IMHUB_VIEWER_MAX_PASTES');
-        // Memory card — single boolean toggle.
-        const memoryEnabledEl = document.getElementById('memoryEnabled');
-        if (memoryEnabledEl) {
-          const v = (env['IMHUB_MEMORY_ENABLED'] || '').toLowerCase();
-          memoryEnabledEl.checked = v === '1' || v === 'true' || v === 'yes';
-        }
-        const memoryStatus = document.getElementById('memoryStatus');
-        if (memoryStatus) {
-          memoryStatus.textContent = memoryEnabledEl?.checked
-            ? '✓ ' + t('memoryEnable')
-            : t('memoryDisable');
-        }
-        // A2A card — values stored as ms / direct values; UI uses minutes for the timeouts.
-        const a2aDt = document.getElementById('a2aDefaultTimeout');
-        if (a2aDt) {
-          const ms = parseInt(env['IMHUB_A2A_TIMEOUT_DEFAULT_MS'] || '', 10);
-          a2aDt.value = Number.isFinite(ms) && ms > 0 ? String(Math.round(ms / 60000)) : '';
-        }
-        const a2aMt = document.getElementById('a2aMaxTimeout');
-        if (a2aMt) {
-          const ms = parseInt(env['IMHUB_A2A_MAX_TIMEOUT_MS'] || '', 10);
-          a2aMt.value = Number.isFinite(ms) && ms > 0 ? String(Math.round(ms / 60000)) : '';
-        }
-        const a2aMode = document.getElementById('a2aNotifyMode');
-        if (a2aMode) a2aMode.value = (env['IMHUB_A2A_NOTIFY_MODE'] || 'essential').toLowerCase();
-        set('a2aMaxDepth', 'IMHUB_A2A_NOTIFY_MAX_DEPTH');
-        set('a2aHeartbeatMin', 'IMHUB_A2A_HEARTBEAT_MIN');
-        const vTunnelMode = document.getElementById('viewerTunnelMode');
-        if (vTunnelMode) {
-          vTunnelMode.value = (env['IMHUB_VIEWER_TUNNEL_MODE'] || 'off').toLowerCase() === 'quick' ? 'quick' : 'off';
-        }
-        // Show tunnel status panel only when tunnel mode = quick.
-        const tunnelBox = document.getElementById('viewerTunnelStatusBox');
-        if (tunnelBox) {
-          tunnelBox.style.display = (vTunnelMode && vTunnelMode.value === 'quick') ? 'block' : 'none';
-          if (vTunnelMode && vTunnelMode.value === 'quick') void refreshViewerTunnelStatus();
-        }
-        const viewerStatus = document.getElementById('viewerStatus');
-        if (viewerStatus) {
-          if (!env['IMHUB_VIEWER_PUBLIC_BASE_URL']) {
-            viewerStatus.textContent = t('viewerMissingUrl');
-          } else if ((env['IMHUB_VIEWER_ENABLED'] || '').toLowerCase() === '1' ||
-                     (env['IMHUB_VIEWER_ENABLED'] || '').toLowerCase() === 'true') {
-            viewerStatus.textContent = `✓ ${t('viewerEnabled')} → ${env['IMHUB_VIEWER_PUBLIC_BASE_URL']}`;
-          } else {
-            viewerStatus.textContent = `${t('viewerDisabled')} (${env['IMHUB_VIEWER_PUBLIC_BASE_URL']})`;
-          }
-        }
-        const smtpStatus = document.getElementById('smtpStatus');
-        const baiduStatus = document.getElementById('baiduStatus');
-        if (smtpStatus) smtpStatus.textContent = env['IMHUB_SMTP_HOST']
-          ? `Loaded${reveal ? ' (raw)' : ' (password masked)'}`
-          : '(no SMTP credentials set)';
-        if (baiduStatus) baiduStatus.textContent = env['IMHUB_BAIDU_MAP_AK']
-          ? `Loaded${reveal ? ' (raw)' : ' (masked)'}`
-          : '(not set)';
-      } catch (err) {
-        const smtpStatus = document.getElementById('smtpStatus');
-        if (smtpStatus) smtpStatus.textContent = 'Failed to load: ' + (err && err.message ? err.message : err);
-      }
-    }
-    // ==========================================
-    // Event binding
-    // ==========================================
-    function bindEvents() {
-      // Populate SMTP / Baidu env-backed fields. Values come in masked;
-      // the Reveal buttons re-fetch with ?reveal=1 on demand.
-      void loadEnvSection();
-      // Service control card
-      document.getElementById('svc-restart')?.addEventListener('click', () => svcAction('restart'));
-      document.getElementById('svc-stop')?.addEventListener('click', () => svcAction('stop'));
-      document.getElementById('svc-start')?.addEventListener('click', () => svcAction('start'));
-      // Approval Policy card — IMHUB_TIMEOUT_DEFAULT toggle.
-      document.getElementById('approval-policy-save')?.addEventListener('click', saveApprovalPolicy);
-      // Add admin (Safety card → Admin Allowlist).
-      document.getElementById('admin-add')?.addEventListener('click', async () => {
-        const platform = (document.getElementById('admin-platform')?.value || '').trim();
-        const userId = (document.getElementById('admin-userid')?.value || '').trim();
-        if (!platform || !userId) {
-          toast(t('error') + ': platform + userId required', 'error');
-          return;
-        }
-        try {
-          const res = await authFetch('/api/admin-allowlist', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ platform, userId }),
-          });
-          if (!res.ok) {
-            const j = await res.json().catch(() => ({}));
-            throw new Error(j.error || res.statusText);
-          }
-          toast(t('savedMsg'), 'success');
-          // Clear inputs + reload list
-          document.getElementById('admin-platform').value = '';
-          document.getElementById('admin-userid').value = '';
-          await loadAdminList();
-        } catch (err) {
-          toast(`${t('error')}: ${err && err.message ? err.message : err}`, 'error');
-        }
-      });
-      // Agent toggles — flip config.agents in memory + auto-manage
-      // defaultAgent (promote / demote as needed), then re-render so the
-      // default-agent dropdown reflects the new eligible set.
-      document.querySelectorAll('[data-toggle-agent]').forEach(el => {
-        el.addEventListener('click', () => {
-          const id = el.getAttribute('data-toggle-agent');
-          const set = new Set(config.agents || []);
-          if (set.has(id)) {
-            set.delete(id);
-            // If we just removed the default, promote the next still-enabled
-            // agent (or clear). saveConfig() will sync to disk on Save.
-            if (config.defaultAgent === id) {
-              config.defaultAgent = Array.from(set)[0] || '';
-            }
-          } else {
-            set.add(id);
-            // First enabled agent inherits default when nothing was set.
-            if (!config.defaultAgent) config.defaultAgent = id;
-          }
-          config.agents = Array.from(set);
-          render();
-        });
-      });
-      // Default-agent dropdown — keep in-memory config in sync so the
-      // Save button persists what the user just picked.
-      document.getElementById('defaultAgent')?.addEventListener('change', (e) => {
-        config.defaultAgent = e.target.value;
-      });
-      // Save Agents button — pushes the in-memory agents[] + defaultAgent
-      // to /api/config PUT. Mirrors the saveMessengers pattern.
-      document.getElementById('saveAgents')?.addEventListener('click', async () => {
-        await saveConfig();
-      });
-      // Messenger toggles — flip in-memory config.messengers, then re-render.
-      document.querySelectorAll('[data-toggle-messenger]').forEach(el => {
-        el.addEventListener('click', () => {
-          const id = el.getAttribute('data-toggle-messenger');
-          const set = new Set(config.messengers || []);
-          if (set.has(id)) set.delete(id);
-          else set.add(id);
-          config.messengers = Array.from(set);
-          render();
-        });
-      });
-      // Save messengers — pull credentials from any visible fields, then PUT.
-      document.getElementById('saveMessengers')?.addEventListener('click', async () => {
-        const get = (id) => document.getElementById(id)?.value?.trim() ?? '';
-        const messengers = (config.messengers || []);
-        if (messengers.includes('telegram')) {
-          const botToken = get('tgToken');
-          const channelId = get('tgChannel') || 'default';
-          if (botToken) config.telegram = { ...(config.telegram || {}), botToken, channelId };
-          else if (config.telegram?.channelId !== channelId) config.telegram = { ...(config.telegram || {}), channelId };
-        }
-        if (messengers.includes('feishu')) {
-          const appId = get('fsAppId');
-          const appSecret = get('fsAppSecret');
-          config.feishu = {
-            ...(config.feishu || {}),
-            ...(appId ? { appId } : {}),
-            ...(appSecret ? { appSecret } : {}),
-          };
-        }
-        if (messengers.includes('dingtalk')) {
-          const clientId = get('dtClientId');
-          const clientSecret = get('dtClientSecret');
-          config.dingtalk = {
-            ...(config.dingtalk || {}),
-            ...(clientId ? { clientId } : {}),
-            ...(clientSecret ? { clientSecret } : {}),
-          };
-        }
-        if (messengers.includes('discord')) {
-          const botToken = get('dcToken');
-          const channelId = get('dcChannel') || 'default';
-          const guildsRaw = get('dcGuilds');
-          const channelsRaw = get('dcChannels');
-          config.discord = {
-            ...(config.discord || {}),
-            ...(botToken ? { botToken } : {}),
-            channelId,
-            allowedGuilds: guildsRaw ? guildsRaw.split(',').map(s => s.trim()).filter(Boolean) : undefined,
-            allowedChannels: channelsRaw ? channelsRaw.split(',').map(s => s.trim()).filter(Boolean) : undefined,
-          };
-        }
-        await saveConfig();
-      });
-      // WeChat — open QR modal on click.
-      document.getElementById('wechatScanBtn')?.addEventListener('click', () => {
-        openWechatQrModal();
-      });
-      // ACP toggles
-      document.querySelectorAll('[data-toggle-acp]').forEach(el => {
-        el.addEventListener('click', () => el.classList.toggle('active'));
-      });
-      // ACP delete buttons
-      document.querySelectorAll('[data-del-acp]').forEach(btn => {
-        btn.addEventListener('click', async () => {
-          const idx = parseInt(btn.dataset.delAcp, 10);
-          config.acpAgents.splice(idx, 1);
-          await saveConfig();
-          render();
-        });
-      });
-      // ACP test existing
-      document.querySelectorAll('[data-test-acp]').forEach(btn => {
-        btn.addEventListener('click', async () => {
-          const idx = parseInt(btn.dataset.testAcp, 10);
-          const agent = config.acpAgents[idx];
-          btn.disabled = true;
-          btn.textContent = t('testing');
-          try {
-            const res = await authFetch('/api/agents/acp/test', {
-              method: 'POST',
-              headers: { 'Content-Type': 'application/json' },
-              body: JSON.stringify({ endpoint: agent.endpoint, auth: agent.auth }),
-            });
-            const data = await res.json();
-            if (data.ok) {
-              toast(`${t('connected')}: ${data.name}${data.description ? ` — ${data.description}` : ''}`, 'success');
-            } else {
-              toast(`${t('failed')}: ${data.error}`, 'error');
-            }
-          } catch (err) {
-            toast(`${t('error')}: ${err.message}`, 'error');
-          }
-          btn.disabled = false;
-          btn.textContent = t('testConn');
-        });
-      });
-      // Add ACP
-      document.getElementById('addAcp')?.addEventListener('click', async () => {
-        const name = document.getElementById('acpName').value.trim();
-        const endpoint = document.getElementById('acpEndpoint').value.trim();
-        if (!name) { toast(t('nameRequired'), 'error'); return; }
-        if (!endpoint) { toast(t('endpointRequired'), 'error'); return; }
-        const aliases = document.getElementById('acpAliases').value.split(',').map(s => s.trim()).filter(Boolean);
-        const authType = document.getElementById('acpAuthType').value;
-        const token = document.getElementById('acpToken')?.value.trim();
-        const auth = authType === 'none' ? undefined : { type: authType, token };
-        if (!config.acpAgents) config.acpAgents = [];
-        config.acpAgents.push({ name, aliases, endpoint, auth, enabled: true });
-        await saveConfig();
-        render();
-      });
-      // Save general
-      document.getElementById('saveGeneral')?.addEventListener('click', async () => {
-        config.webPort = parseInt(document.getElementById('webPort').value, 10) || 3000;
-        await saveConfig();
-      });
-      // SMTP save: bundle all 6 fields into one /api/env PUT. Empty
-      // host treats it as "skip" — caller can also use the Disable button
-      // for an explicit clear of all 6 keys.
-      document.getElementById('saveSmtp')?.addEventListener('click', async () => {
-        const get = (id) => document.getElementById(id)?.value?.trim() ?? '';
-        const host = get('smtpHost'); const port = get('smtpPort');
-        const user = get('smtpUser'); const pass = get('smtpPass');
-        const from = get('smtpFrom'); const secure = get('smtpSecure');
-        if (!host) {
-          alert('Host is required (use Disable button to clear instead).');
-          return;
-        }
-        // pass === '' AND we have an existing masked value would erase the
-        // password. Detect: if pass starts with masked chars (4 plain + ****
-        // shape) we treat as "keep existing" by not sending the key.
-        const updates = {
-          IMHUB_SMTP_HOST: host,
-          IMHUB_SMTP_PORT: port || '465',
-          IMHUB_SMTP_USER: user,
-          IMHUB_SMTP_FROM: from || user,
-          IMHUB_SMTP_SECURE: secure || 'auto',
-        };
-        const looksMasked = pass && /\*{2,}/.test(pass);
-        if (pass && !looksMasked) updates.IMHUB_SMTP_PASS = pass;
-        else if (!pass) {
-          // Explicit blank — refuse, unless user clicks Disable.
-          alert('Password required (use Disable button to clear instead).');
-          return;
-        }
-        try {
-          await authFetch('/api/env', { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ updates }) });
-          alert('SMTP saved.');
-          await loadEnvSection();
-        } catch (err) {
-          alert('Save failed: ' + (err && err.message ? err.message : err));
-        }
-      });
-      document.getElementById('clearSmtp')?.addEventListener('click', async () => {
-        if (!confirm('Disable SMTP? Email reminder delivery will stop working.')) return;
-        const updates = {
-          IMHUB_SMTP_HOST: null, IMHUB_SMTP_PORT: null, IMHUB_SMTP_USER: null,
-          IMHUB_SMTP_PASS: null, IMHUB_SMTP_FROM: null, IMHUB_SMTP_SECURE: null,
-        };
-        try {
-          await authFetch('/api/env', { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ updates }) });
-          await loadEnvSection();
-        } catch (err) {
-          alert('Disable failed: ' + (err && err.message ? err.message : err));
-        }
-      });
-      document.getElementById('revealSmtp')?.addEventListener('click', () => loadEnvSection(true));
-      // Baidu AK
-      document.getElementById('saveBaidu')?.addEventListener('click', async () => {
-        const ak = document.getElementById('baiduAk')?.value?.trim() || '';
-        if (!ak) { alert('AK required (use Clear button to remove instead).'); return; }
-        const looksMasked = /\*{2,}/.test(ak);
-        if (looksMasked) { alert('Looks like the masked placeholder — enter the real AK or Reveal first.'); return; }
-        try {
-          await authFetch('/api/env', { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ updates: { IMHUB_BAIDU_MAP_AK: ak } }) });
-          alert('Baidu AK saved.');
-          await loadEnvSection();
-        } catch (err) {
-          alert('Save failed: ' + (err && err.message ? err.message : err));
-        }
-      });
-      document.getElementById('clearBaidu')?.addEventListener('click', async () => {
-        if (!confirm('Clear Baidu Maps AK? Address-based /memo lookups will stop.')) return;
-        try {
-          await authFetch('/api/env', { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ updates: { IMHUB_BAIDU_MAP_AK: null } }) });
-          await loadEnvSection();
-        } catch (err) {
-          alert('Clear failed: ' + (err && err.message ? err.message : err));
-        }
-      });
-      document.getElementById('revealBaidu')?.addEventListener('click', () => loadEnvSection(true));
-      // Memory card — save toggle.
-      document.getElementById('saveMemory')?.addEventListener('click', async () => {
-        const on = document.getElementById('memoryEnabled')?.checked ? '1' : '0';
-        const status = document.getElementById('memoryStatus');
-        try {
-          await authFetch('/api/env', {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ updates: { IMHUB_MEMORY_ENABLED: on } }),
-          });
-          if (status) status.textContent = t('memorySaved');
-          await loadEnvSection();
-        } catch (err) {
-          if (status) status.textContent = t('memorySaveFailed') + ': ' + (err && err.message ? err.message : err);
-        }
-      });
-      // A2A card — save timeouts (min → ms) + mode + depth + heartbeat.
-      document.getElementById('saveA2A')?.addEventListener('click', async () => {
-        const dtMin = parseInt(document.getElementById('a2aDefaultTimeout')?.value || '', 10);
-        const mtMin = parseInt(document.getElementById('a2aMaxTimeout')?.value || '', 10);
-        const mode = document.getElementById('a2aNotifyMode')?.value || 'essential';
-        const depth = (document.getElementById('a2aMaxDepth')?.value || '').trim();
-        const heartbeat = (document.getElementById('a2aHeartbeatMin')?.value || '').trim();
-        const status = document.getElementById('a2aStatus');
-        try {
-          await authFetch('/api/env', {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-              updates: {
-                IMHUB_A2A_TIMEOUT_DEFAULT_MS: Number.isFinite(dtMin) && dtMin > 0 ? String(dtMin * 60000) : null,
-                IMHUB_A2A_MAX_TIMEOUT_MS: Number.isFinite(mtMin) && mtMin > 0 ? String(mtMin * 60000) : null,
-                IMHUB_A2A_NOTIFY_MODE: mode,
-                IMHUB_A2A_NOTIFY_MAX_DEPTH: depth || null,
-                IMHUB_A2A_HEARTBEAT_MIN: heartbeat || null,
-              },
-            }),
-          });
-          if (status) status.textContent = t('a2aSaved');
-          await loadEnvSection();
-        } catch (err) {
-          if (status) status.textContent = t('a2aSaveFailed') + ': ' + (err && err.message ? err.message : err);
-        }
-      });
-      // Tunnel mode dropdown — show/hide status panel on change.
-      document.getElementById('viewerTunnelMode')?.addEventListener('change', (e) => {
-        const box = document.getElementById('viewerTunnelStatusBox');
-        if (box) box.style.display = e.target.value === 'quick' ? 'block' : 'none';
-      });
-      document.getElementById('viewerTunnelRefreshBtn')?.addEventListener('click', () => refreshViewerTunnelStatus());
-      // Viewer card — save toggle + URL + thresholds in one round-trip.
-      document.getElementById('saveViewer')?.addEventListener('click', async () => {
-        const enabled = document.getElementById('viewerEnabled')?.checked ? '1' : '0';
-        const url = (document.getElementById('viewerPublicUrl')?.value || '').trim();
-        const chars = (document.getElementById('viewerChars')?.value || '').trim();
-        const lines = (document.getElementById('viewerLines')?.value || '').trim();
-        const codeLines = (document.getElementById('viewerCodeLines')?.value || '').trim();
-        const maxPastes = (document.getElementById('viewerMaxPastes')?.value || '').trim();
-        const tunnelMode = document.getElementById('viewerTunnelMode')?.value || 'off';
-        const status = document.getElementById('viewerStatus');
-        try {
-          await authFetch('/api/env', {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-              updates: {
-                IMHUB_VIEWER_ENABLED: enabled,
-                IMHUB_VIEWER_PUBLIC_BASE_URL: url || null,
-                IMHUB_VIEWER_CHARS: chars || null,
-                IMHUB_VIEWER_LINES: lines || null,
-                IMHUB_VIEWER_CODE_LINES: codeLines || null,
-                IMHUB_VIEWER_MAX_PASTES: maxPastes || null,
-                IMHUB_VIEWER_TUNNEL_MODE: tunnelMode || 'off',
-              },
-            }),
-          });
-          if (status) status.textContent = t('viewerSaved');
-          await loadEnvSection();
-        } catch (err) {
-          if (status) status.textContent = t('viewerSaveFailed') + ': ' + (err && err.message ? err.message : err);
-        }
-      });
-      // ==========================================
-      // Workspaces (PR-C)
-      // ==========================================
-      // Click "Edit" on a row → pre-fill the form. The same form's Save
-      // button always POSTs, which the server-side handler treats as
-      // upsert (workspaceRegistry.add overwrites by id).
-      document.querySelectorAll('[data-edit-ws]').forEach((btn) => {
-        btn.addEventListener('click', () => {
-          const id = btn.getAttribute('data-edit-ws');
-          const w = (workspaceList || []).find((x) => x.id === id);
-          if (!w) return;
-          const set = (elId, v) => { const el = document.getElementById(elId); if (el) el.value = v; };
-          set('wsId', w.id);
-          set('wsName', w.name || w.id);
-          set('wsAgents', (w.agents || []).join(', '));
-          set('wsMembers', (w.members || []).join(', '));
-          set('wsRate', w.rateLimit?.rate ?? '');
-          set('wsInterval', w.rateLimit?.intervalSec ?? '');
-          set('wsBurst', w.rateLimit?.burst ?? '');
-          // Lock the id field on edit so a typo can't accidentally create
-          // a parallel row instead of updating the chosen one.
-          const idInput = document.getElementById('wsId');
-          if (idInput) idInput.readOnly = true;
-          // Scroll the form into view so the user sees what was filled.
-          document.getElementById('saveWs')?.scrollIntoView({ behavior: 'smooth', block: 'center' });
-        });
-      });
-      // Click "Delete" on a row → confirm + DELETE.
-      document.querySelectorAll('[data-del-ws]').forEach((btn) => {
-        btn.addEventListener('click', async () => {
-          const id = btn.getAttribute('data-del-ws');
-          if (!id) return;
-          if (!confirm(t('workspaceConfirmDelete').replace('{id}', id))) return;
-          try {
-            const res = await authFetch(`/api/workspaces/${encodeURIComponent(id)}`, {
-              method: 'DELETE',
-            });
-            if (!res.ok) {
-              const data = await res.json().catch(() => ({}));
-              throw new Error(data.error || res.statusText);
-            }
-            toast(t('workspaceDeleted'), 'success');
-            await reloadWorkspaces();
-          } catch (err) {
-            toast(`${t('error')}: ${err.message}`, 'error');
-          }
-        });
-      });
-      // Reset the form (clear inputs + unlock id field).
-      document.getElementById('resetWs')?.addEventListener('click', () => {
-        ['wsId', 'wsName', 'wsAgents', 'wsMembers', 'wsRate', 'wsInterval', 'wsBurst'].forEach((id) => {
-          const el = document.getElementById(id);
-          if (el) {
-            el.value = '';
-            if (id === 'wsId') el.readOnly = false;
-          }
-        });
-      });
-      // Save (create or upsert) workspace.
-      document.getElementById('saveWs')?.addEventListener('click', async () => {
-        const id = document.getElementById('wsId').value.trim();
-        if (!id) { toast(`${t('workspaceId')} required`, 'error'); return; }
-        if (id === 'default') { toast('"default" is reserved', 'error'); return; }
-        const splitCsv = (s) => String(s || '').split(',').map((x) => x.trim()).filter(Boolean);
-        const payload = {
-          id,
-          name: document.getElementById('wsName').value.trim() || id,
-          agents: splitCsv(document.getElementById('wsAgents').value),
-          members: splitCsv(document.getElementById('wsMembers').value),
-        };
-        const rate = parseInt(document.getElementById('wsRate').value, 10);
-        const intervalSec = parseInt(document.getElementById('wsInterval').value, 10);
-        const burst = parseInt(document.getElementById('wsBurst').value, 10);
-        if (Number.isFinite(rate) || Number.isFinite(intervalSec) || Number.isFinite(burst)) {
-          payload.rateLimit = {
-            rate: Number.isFinite(rate) ? rate : 10,
-            intervalSec: Number.isFinite(intervalSec) ? intervalSec : 60,
-            burst: Number.isFinite(burst) ? burst : 15,
-          };
-        }
-        try {
-          const res = await authFetch('/api/workspaces', {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify(payload),
-          });
-          if (!res.ok) {
-            const data = await res.json().catch(() => ({}));
-            throw new Error(data.error || res.statusText);
-          }
-          toast(t('workspaceSaved'), 'success');
-          // Reset form for next use; reloadWorkspaces re-renders so the
-          // new row appears immediately.
-          document.getElementById('resetWs')?.click();
-          await reloadWorkspaces();
-        } catch (err) {
-          toast(`${t('error')}: ${err.message}`, 'error');
-        }
-      });
-    }
-    function syncMessengerToggles() {
-      render();
-    }
-    // ==========================================
-    // WeChat QR-login modal
-    // ==========================================
-    let wechatPollTimer = null;
-    function closeWechatQrModal() {
-      if (wechatPollTimer) { clearTimeout(wechatPollTimer); wechatPollTimer = null; }
-      const m = document.getElementById('wechat-modal');
-      if (m) m.remove();
-    }
-    async function openWechatQrModal() {
-      // Tear down any prior modal first.
-      closeWechatQrModal();
-      const overlay = document.createElement('div');
-      overlay.id = 'wechat-modal';
-      overlay.style.cssText = 'position:fixed;inset:0;z-index:1000;display:flex;align-items:center;justify-content:center;background:rgba(0,0,0,0.55)';
-      overlay.innerHTML = `
-        <div style="background:var(--surface);border:1px solid var(--border);border-radius:12px;padding:24px 28px;max-width:380px;width:90%;text-align:center">
-          <div style="font-weight:600;font-size:15px;margin-bottom:14px">${esc(t('wechatScanTitle'))}</div>
-          <div id="wechat-qr-wrap" style="min-height:240px;display:flex;align-items:center;justify-content:center;background:var(--surface2);border-radius:8px;margin-bottom:12px">
-            <div style="color:var(--text-dim);font-size:13px">${esc(t('wechatGenerating'))}</div>
-          </div>
-          <div id="wechat-qr-status" style="font-size:13px;color:var(--text-dim);margin-bottom:14px;min-height:18px"></div>
-          <div style="display:flex;gap:8px;justify-content:center">
-            <button type="button" class="btn" id="wechat-regen">${esc(t('wechatRegen'))}</button>
-            <button type="button" class="btn" id="wechat-close">${esc(t('wechatClose'))}</button>
-          </div>
-        </div>
-      `;
-      document.body.appendChild(overlay);
-      document.getElementById('wechat-close')?.addEventListener('click', closeWechatQrModal);
-      document.getElementById('wechat-regen')?.addEventListener('click', () => { void startWechatQr(); });
-      overlay.addEventListener('click', (e) => { if (e.target === overlay) closeWechatQrModal(); });
-      await startWechatQr();
-    }
-    async function startWechatQr() {
-      if (wechatPollTimer) { clearTimeout(wechatPollTimer); wechatPollTimer = null; }
-      const wrap = document.getElementById('wechat-qr-wrap');
-      const statusEl = document.getElementById('wechat-qr-status');
-      if (!wrap || !statusEl) return;
-      wrap.innerHTML = `<div style="color:var(--text-dim);font-size:13px">${esc(t('wechatGenerating'))}</div>`;
-      statusEl.textContent = '';
-      let qrToken;
-      try {
-        const res = await authFetch('/api/messengers/wechat/qr-start', { method: 'POST' });
-        if (!res.ok) {
-          const j = await res.json().catch(() => ({}));
-          throw new Error(j.error || res.statusText);
-        }
-        const data = await res.json();
-        qrToken = data.qrToken;
-        // data.qrImage is a data: URL the server pre-rendered from the
-        // WeChat short URL (iLink returns plain text, not an image).
-        // data.qrUrl is the original short URL — only used as <img> alt
-        // / debug fallback in case server-side rendering ever fails.
-        const src = data.qrImage || data.qrUrl;
-        wrap.innerHTML = `<img src="${esc(src)}" alt="QR code" style="width:280px;height:280px;border-radius:6px;background:#fff;padding:8px">`;
-        statusEl.textContent = t('wechatWaiting');
-      } catch (err) {
-        wrap.innerHTML = `<div style="color:var(--red);font-size:13px">${esc(t('wechatFailed').replace('{error}', err && err.message ? err.message : err))}</div>`;
-        return;
-      }
-      // Begin polling.
-      const poll = async () => {
-        try {
-          const res = await authFetch('/api/messengers/wechat/qr-status?token=' + encodeURIComponent(qrToken));
-          if (!res.ok) {
-            const j = await res.json().catch(() => ({}));
-            throw new Error(j.error || res.statusText);
-          }
-          const data = await res.json();
-          if (data.status === 'wait') {
-            statusEl.textContent = t('wechatWaiting');
-            wechatPollTimer = setTimeout(poll, 1500);
-            return;
-          }
-          if (data.status === 'scaned') {
-            statusEl.textContent = t('wechatScanned');
-            wechatPollTimer = setTimeout(poll, 1000);
-            return;
-          }
-          if (data.status === 'confirmed') {
-            const account = (data.credentials && data.credentials.accountId) || '';
-            statusEl.innerHTML = '<span style="color:var(--green)">' + esc(t('wechatConfirmed').replace('{account}', account)) + '</span>';
-            // Refresh the underlying config (server added 'wechat-ilink' to messengers).
-            toast(t('savedMsg'), 'success');
-            setTimeout(() => { closeWechatQrModal(); void init(); }, 1500);
-            return;
-          }
-          if (data.status === 'expired') {
-            statusEl.innerHTML = '<span style="color:var(--red)">' + esc(t('wechatExpired')) + '</span>';
-            return;
-          }
-          // Unknown status — keep polling once, then stop.
-          wechatPollTimer = setTimeout(poll, 1500);
-        } catch (err) {
-          statusEl.innerHTML = '<span style="color:var(--red)">' + esc(t('wechatFailed').replace('{error}', err && err.message ? err.message : err)) + '</span>';
-        }
-      };
-      wechatPollTimer = setTimeout(poll, 1000);
-    }
-    // ==========================================
-    // Service-control card (status + start/stop/restart)
-    // ==========================================
-    let svcPollTimer = null;
-    async function loadServiceStatus() {
-      const stateEl = document.getElementById('svc-state');
-      const startBtn = document.getElementById('svc-start');
-      const stopBtn = document.getElementById('svc-stop');
-      const restartBtn = document.getElementById('svc-restart');
-      if (!stateEl) return;
-      try {
-        const res = await authFetch('/api/service/status');
-        if (!res.ok) throw new Error(res.statusText);
-        const d = await res.json();
-        if (d.mode === 'none') {
-          stateEl.innerHTML = '<span class="dot dot-off"></span>' + esc(t('svcStateNone'));
-        } else {
-          const tpl = d.uptime ? t('svcStateRunning') : t('svcStateRunningNoUp');
-          const label = tpl
-            .replace('{mode}', d.mode || '?')
-            .replace('{pid}', d.pid != null ? d.pid : '?')
-            .replace('{uptime}', d.uptime || '');
-          stateEl.innerHTML = '<span class="dot dot-on"></span>' + esc(label);
-        }
-        if (startBtn)   startBtn.disabled   = d.mode !== 'none';
-        if (stopBtn)    stopBtn.disabled    = d.mode === 'none';
-        if (restartBtn) restartBtn.disabled = d.mode === 'none' || d.mode === 'foreground';
-      } catch (err) {
-        stateEl.textContent = (t('error') + ': ' + (err && err.message ? err.message : err));
-      }
-    }
-    async function svcAction(action) {
-      const confirmKey = action === 'stop' ? 'svcConfirmStop' : action === 'restart' ? 'svcConfirmRestart' : null;
-      if (confirmKey && !confirm(t(confirmKey))) return;
-      const stateEl = document.getElementById('svc-state');
-      // v1.5 — Update UI BEFORE firing the fetch. The restart POST can
-      // take 5-10s server-side (systemctl restart waits for stop+start)
-      // and the previous code only updated state after that resolved —
-      // making the button look frozen + tempting double clicks. Also
-      // disable the action buttons so the user can't trigger a second
-      // restart while one is in flight.
-      const btns = ['svc-restart', 'svc-stop', 'svc-start']
-        .map(id => document.getElementById(id))
-        .filter(Boolean);
-      btns.forEach(b => b.disabled = true);
-      if (action === 'restart' && stateEl) {
-        stateEl.innerHTML = '<span class="dot dot-off"></span>' + esc(t('svcRestarting'));
-      } else if (action === 'stop' && stateEl) {
-        stateEl.innerHTML = '<span class="dot dot-off"></span>' + esc(t('svcStopped'));
-      }
-      try {
-        const res = await authFetch('/api/service/' + action, { method: 'POST' });
-        if (action === 'restart') {
-          await waitForServiceBack(stateEl);
-          if (stateEl) {
-            // loadServiceStatus refreshes the badge to live state.
-            await loadServiceStatus();
-            toast(t('svcRestarted'), 'success');
-          }
-          return;
-        }
-        if (action === 'stop') {
-          // Don't poll — the server is gone.
-          return;
-        }
-        if (!res.ok) {
-          const j = await res.json().catch(() => ({}));
-          throw new Error(j.error || res.statusText);
-        }
-        await loadServiceStatus();
-      } catch (err) {
-        toast(t('error') + ': ' + (err && err.message ? err.message : err), 'error');
-      } finally {
-        // loadServiceStatus re-enables the buttons based on live state.
-        // Restart re-enables them via the polling-back-up path; stop
-        // leaves them disabled (server is gone).
-      }
-    }
-    async function waitForServiceBack(stateEl) {
-      // v1.5 — wait for full readiness, not just HTTP up. /api/service/status
-      // returns bootPhase; we treat 'ready' as done. While waiting, show
-      // a phase-specific status text so the user sees real progress instead
-      // of a blank "..." spinner.
-      const phaseLabels = {
-        starting: '⏳ 启动中…',
-        messengers_loading: '⏳ 加载消息通道…',
-        web_ready: '⏳ Web 已就绪，等待全部子系统…',
-        ready: '✓ 完全就绪',
-      };
-      const start = Date.now();
-      let lastPhaseShown = null;
-      for (;;) {
-        if (Date.now() - start > 60000) {
-          if (stateEl) stateEl.innerHTML = '<span class="dot dot-off"></span>' + esc(t('error'));
-          return;
-        }
-        try {
-          const r = await fetch('/api/service/status', { credentials: 'same-origin' });
-          if (r.ok) {
-            const j = await r.json().catch(() => ({}));
-            const phase = j.bootPhase || 'starting';
-            if (phase === 'ready') return;
-            if (phase !== lastPhaseShown && stateEl) {
-              const label = phaseLabels[phase] || ('⏳ ' + phase);
-              stateEl.innerHTML = '<span class="dot dot-off"></span>' + esc(label);
-              lastPhaseShown = phase;
-            }
-          }
-        } catch { /* not back yet */ }
-        await new Promise(r => setTimeout(r, 500));
-      }
-    }
-    // ==========================================
-    // API helpers
-    // ==========================================
-    async function saveConfig() {
-      try {
-        const payload = {
-          messengers: config.messengers,
-          agents: config.agents,
-          defaultAgent: config.defaultAgent,
-          telegram: config.telegram,
-          feishu: config.feishu,
-          dingtalk: config.dingtalk,
-          discord: config.discord,
-          acpAgents: config.acpAgents,
-          webPort: config.webPort,
-        };
-        const res = await authFetch('/api/config', {
-          method: 'PUT',
-          headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify(payload),
-        });
-        if (!res.ok) {
-          const data = await res.json();
-          throw new Error(data.error || t('saveFailed'));
-        }
-        toast(t('savedMsg'), 'success');
-        await init();
-      } catch (err) {
-        toast(`${t('saveFailed')}: ${err.message}`, 'error');
-      }
-    }
-    let toastTimer;
-    function toast(msg, type) {
-      toastEl.textContent = msg;
-      toastEl.className = `toast ${type} show`;
-      clearTimeout(toastTimer);
-      toastTimer = setTimeout(() => {
-        toastEl.classList.remove('show');
-      }, 3000);
-    }
-    // Init
-    applyLang();
-    init();
-  </script>
-</body>
-</html>