bothouse-dsh 0.1.46 → 0.1.48

package/collab/desk.mjs

@@ -2,8 +2,8 @@
 //
 // 事件契约见 Issue #876：`board-events.jsonl` 与 board.jsonl 同目录（BOARD_DIR），
 // 一行一个 JSON，只追加；这里只读不改，写入归 gate 的 board.py。
-import { closeSync, openSync, readFileSync, readSync, statSync } from 'node:fs';
-import { join } from 'node:path';
+import { closeSync, mkdirSync, openSync, readFileSync, readSync, renameSync, statSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
 import { CollabError, publicMessage } from './store.mjs';
 // #876 P: 回放消息的 @ 由这里解析，规则与 hub 路由同一套（mentions.mjs），页面不再自己猜文本。
 import { mentions as mentionsOf } from './mentions.mjs';
@@ -130,8 +130,56 @@ export function deskPage() {
   try { return readFileSync(new URL('./desk/index.html', import.meta.url), 'utf8'); } catch { return PLACEHOLDER_PAGE; }
 }
 
-/** /collab/desk 与 /collab/api/desk/replay；返回 true 表示已处理，未匹配返回 undefined。 */
-export function deskRoute(req, res, url, { store, boardDir, members = [] }) {
+// 名牌自定义名：成员 id → 名字，存插件数据目录，刷新、换设备都还在；空名 = 恢复默认（roster.name）。
+export const DESK_NAMES_FILE = 'desk-names.json';
+export const DESK_NAME_MAX = 24;
+
+export function readDeskNames(file) {
+  if (!file) return {};
+  try {
+    const value = JSON.parse(readFileSync(file, 'utf8'));
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+  } catch { return {}; }
+}
+
+/** 改一个成员的名牌名；name 去空白后为空就删掉，回到默认名。返回改后的全表。 */
+export function setDeskName(file, id, name) {
+  const key = String(id ?? '').trim();
+  if (!key) throw new CollabError('invalid', 'id is required');
+  const value = String(name ?? '').replace(/\s+/g, ' ').trim();
+  if (Array.from(value).length > DESK_NAME_MAX) throw new CollabError('invalid', `name must be at most ${DESK_NAME_MAX} characters`);
+  const names = readDeskNames(file);
+  if (value) names[key] = value; else delete names[key];
+  mkdirSync(dirname(file), { recursive: true });
+  const tmp = `${file}.${process.pid}.tmp`;
+  writeFileSync(tmp, JSON.stringify(names, null, 2) + '\n');
+  renameSync(tmp, file);
+  return names;
+}
+
+function sendJson(res, status, value) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(JSON.stringify(value));
+}
+
+async function namesRoute(req, res, namesFile) {
+  if (!namesFile) return sendJson(res, 404, { error: 'desk names are not configured' });
+  if (req.method === 'GET') return sendJson(res, 200, { names: readDeskNames(namesFile) });
+  let raw = '';
+  try {
+    for await (const chunk of req) { raw += chunk; if (raw.length > 4096) return sendJson(res, 413, { error: 'body too large' }); }
+    const body = JSON.parse(raw || '{}');
+    return sendJson(res, 200, { names: setDeskName(namesFile, body?.id, body?.name) });
+  } catch (error) {
+    if (error instanceof CollabError) return sendJson(res, 400, { error: error.message, code: error.code });
+    if (error instanceof SyntaxError) return sendJson(res, 400, { error: 'invalid JSON body' });
+    return sendJson(res, 500, { error: 'save failed' });
+  }
+}
+
+/** /collab/desk、/collab/api/desk/replay、/collab/api/desk/names；返回 true（或 Promise）表示已处理，未匹配返回 undefined。 */
+export function deskRoute(req, res, url, { store, boardDir, members = [], namesFile } = {}) {
+  if (url.pathname.replace(/\/+$/, '') === '/collab/api/desk/names' && (req.method === 'GET' || req.method === 'PUT')) return namesRoute(req, res, namesFile);
   if (url.pathname.replace(/\/+$/, '') !== '/collab/desk' && url.pathname.replace(/\/+$/, '') !== '/collab/api/desk/replay') return undefined;
   if (req.method !== 'GET') return undefined;
   if (url.pathname.replace(/\/+$/, '') === '/collab/desk') {

package/collab/dsh-member.mjs

@@ -26,7 +26,7 @@ export function teamModeRules(mode = DEFAULT_DISPATCH_MODE) {
 /** #597 G24: the open-workspace command, for the selected primary role only, never in bridge prompts. */
 export function workspaceHint(hub, later, memberId, roomId) {
   if (!later?.workspaceInstructions || hub?.primaryIn?.(roomId)?.id !== memberId) return '';
-  return later.workspaceInstructions(memberId, roomId);
+  return later.workspaceInstructions(memberId, roomId) + (later.teamInstructions?.(memberId, roomId) ?? '');
 }
 /**
  * #597 G24: DSH members have no bridge session, so the shared line about `bothouse workspace new` /
@@ -201,11 +201,39 @@ export function friendlyFailure(raw) {
   const text = String(raw);
   if (/no.{0,12}(api.?key|key)|missing.{0,12}(key|credential)|api.?key.{0,12}(missing|not set|required)|未配置.*key/i.test(text)) return '还没有配置模型的 API Key，请先去配置模型。';
   if (/model.{0,30}(not found|unavailable|not available|unsupported)|unknown model|模型.*不可用|404/i.test(text)) return '这个模型暂时不可用，请检查模型名称或换一个模型。';
+  // An unreachable provider is a setting or network problem. Echoing the transport wording
+  // ("Connection error.") behind "请检查配置" told the user nothing about which setting to fix.
+  if (/connection error|econnrefused|econnreset|enotfound|etimedout|eai_again|fetch failed|socket hang up|network ?(error|request failed)|timed out|timeout/i.test(text)) return '连不上模型服务：中转站地址或网络不通。请检查设置里的模型地址和 Key，或换一个中转站再试。';
   if (/login|log.?in|auth|unauthorized|401|未登录/i.test(text)) return '模型或 CLI 还没有登录，或登录已过期。请先登录后再试。';
   if (/exit|ENOENT|spawn|没有输出文字/i.test(text)) return '本机 CLI 未能正常运行或已退出，请检查安装和登录状态。';
+  // A Host older than this plugin has no scope lease on its preset registry, so no member can be
+  // composed. Name the cause and the fix instead of showing the bare TypeError.
+  if (/agentPresets\.\w+ is not a function/i.test(text)) return '当前 DSH 宿主缺少频道插件需要的预设接口（agentPresets），成员无法启动。请把 DSH 升级到与本插件匹配的版本后重试。';
   return `这次没能完成，请检查配置后重试。原始错误：${text}`;
 }
 
+/**
+ * Lease one preset revision while an Agent joins it, or undefined when the Host's
+ * registry has no scope lease. `acquireScope` shipped in a later registry than
+ * `resolve`/`mount`, so a Host can serve presets without it; the lease only keeps
+ * that revision alive during assembly. Skipping it there keeps members usable
+ * instead of failing every turn with a bare "is not a function" TypeError.
+ * @param ctx - Host context carrying the preset registry.
+ * @param presetId - Preset identity the Agent joins.
+ * @returns Something with an async disposer, or undefined when unsupported.
+ */
+export async function presetScope(ctx, presetId) {
+  const registry = ctx?.agentPresets;
+  if (typeof registry?.acquireScope !== 'function') return undefined;
+  return await registry.acquireScope(presetId);
+}
+
+/** Release a presetScope result; a Host without the lease releases nothing. */
+export async function releasePresetScope(scope) {
+  const dispose = scope?.[Symbol.asyncDispose];
+  if (typeof dispose === 'function') await dispose();
+}
+
 /**
  * Card text of one approval request, in cc-connect's permission prompt layout:
  * the tool, what it wants to run (the call's first argument), and DSH's reason.
@@ -838,6 +866,24 @@ export class DshMembers {
     if (this.closed) return;
     const job = this.store.job(jobId);
     if (job === undefined || !this.store.finishJob(jobId, state)) return;
+    // A restart is not a configuration problem: the member is healthy and only the turn it was
+    // running is lost, so it takes a retry button and leaves the member online. Reporting it as
+    // "成员出错 / 去配置模型" also cooled the provider quota for what was a process restart.
+    if (state === 'interrupted') {
+      this.hub.setError(job.member_id, undefined);
+      this.hub.post(job.room_id, {
+        authorKind: 'system', author: 'system', name: 'system', text: String(notice), clientKey: `dsh-job-${jobId}-${state}-${Date.now()}`,
+        card: JSON.stringify({
+          title: '被中断',
+          state: 'failed',
+          action: 'retry',
+          job_id: jobId,
+          member_id: job.member_id,
+          trigger_id: job.trigger_id,
+        }),
+      });
+      return;
+    }
     this.hub.quota?.observe(job.member_id, job.room_id, { error: String(notice) });
     const error = friendlyFailure(notice);
     this.hub.setError(job.member_id, error);
@@ -911,7 +957,7 @@ export class DshMembers {
   async createAgent(member, room) {
     const { ctx } = this.rt;
     const preset = await ctx.agentPresets.resolve(member.agentPreset);
-    const scope = await ctx.agentPresets.acquireScope(preset.id);
+    const scope = await presetScope(ctx, preset.id);
     const sessionId = `collab-${randomUUID()}`;
     let handle;
     let workspace;
@@ -932,7 +978,7 @@ export class DshMembers {
         },
       });
     } finally {
-      await scope[Symbol.asyncDispose]();
+      await releasePresetScope(scope);
     }
     await workspace.attachSession(sessionId);
     // setup ran before the Agent existed, so record it here: liveAgent must not hook it again.
@@ -1006,7 +1052,7 @@ export class DshMembers {
     // Installing only the request hook left a resumed Session with just the
     // built-in tools after a DSH restart.
     const preset = await ctx.agentPresets.resolve(member.agentPreset);
-    const scope = await ctx.agentPresets.acquireScope(preset.id);
+    const scope = await presetScope(ctx, preset.id);
     let handle;
     try {
       handle = await ctx.agents.resume({
@@ -1018,7 +1064,7 @@ export class DshMembers {
         },
       });
     } finally {
-      await scope[Symbol.asyncDispose]();
+      await releasePresetScope(scope);
     }
     this.hooked.add(handle.agent);
     if (member.permissionPreset !== undefined) ctx.permissionPresets.set(handle.agent.session, member.permissionPreset);

package/collab/later.mjs

@@ -104,6 +104,18 @@ export class Later {
     const curl = `curl -sS -X POST ${quote(url)} -H 'content-type: application/json' -H ${quote(`X-Later-Ticket: ${ticket}`)} -d '{"title":"任务标题","owner":"接活人id（省略=你自己）","reason":"交接说明"}'`;
     return `\n【开工作区】整块活要交出去时，建工作区=这一条，任务和十分钟看门会自动开，不要另调 /tasks（它不认票据）。${local}或等价的接口 POST /collab/api/rooms/${room}/workspaces：\n${curl}\n一步建好工作区、开任务、挂十分钟看门并叫醒接活人；不要再在频道里 @ 同一件活。返回不是 200 就把返回原样告诉用户，不要悄悄自己做。工作区里的接活人是新会话，只看得到交接说明：里面要写清用户原话、参照的现成实现、以哪个分支为底、验收标准。\n`;
   }
+  /**
+   * 一句话拉团队 (user 11-04): how the primary role builds a channel of new roles in one call.
+   * Primary-only like workspaceInstructions (dsh-member.mjs workspaceHint).
+   */
+  teamInstructions(member, room) {
+    const quote = value => "'" + String(value).replaceAll("'", "'\\''") + "'";
+    const ticket = this.ticket(member, room);
+    const json = '{"channel":"小团队","model":"模型id（用户没说就省略=DSH默认模型）","members":[{"name":"写手","persona":"你是写手，负责写和改博客文章。"},{"name":"程序员","persona":"你是程序员，负责写代码和审代码。"}]}';
+    const local = this.origin ? `本机命令（改 JSON 里的内容）：\n${quote(process.execPath)} ${quote(fileURLToPath(import.meta.url))} team ${quote(this.origin)} ${quote(ticket)} ${quote(json)}\n` : '';
+    const url = `${this.origin ?? 'http://<本机 DSH 地址>'}/collab/api/rooms/${room}/team`;
+    return `\n【建团队】用户要你建几个角色、拉个群/频道时，一条就建好：新频道、每个角色（名字、人设、模型），你是新频道的主角色。${local}或 POST ${url}（头 X-Later-Ticket: ${ticket}，JSON 同上）。名字不带空格和 @；人设一两句写清分工；用户说了模型就填 model（如 deepseek-v4.1-flash），没说就省略。返回不是 200 就把返回原样告诉用户。建好后告诉用户频道名、每个角色和模型，问要不要丢个题目试跑。\n`;
+  }
   tick() {
     for (const row of this.db.prepare('SELECT * FROM member_later WHERE announced = 0').all()) {
       this.hub.post(row.room_id, { authorKind: 'system', author: 'system', name: '回查登记',
@@ -134,6 +146,15 @@ if (process.argv[1] === fileURLToPath(import.meta.url) && process.argv[2] === 'w
   const body = await res.text();
   if (!res.ok) { console.error(`workspace: ${res.status} ${body}`); process.exit(1); }
   console.log(body);
+} else if (process.argv[1] === fileURLToPath(import.meta.url) && process.argv[2] === 'team') {
+  const [origin, ticket, spec] = process.argv.slice(3);
+  const room = ticketClaims(ticket)?.r;
+  if (!origin || !Number.isSafeInteger(room) || !spec) { console.error('usage: later.mjs team <origin> <ticket> \'{"channel":"…","model":"…","members":[{"name":"…","persona":"…"}]}\''); process.exit(2); }
+  const res = await fetch(new URL(`/collab/api/rooms/${room}/team`, origin), { method: 'POST',
+    headers: { 'content-type': 'application/json', 'x-later-ticket': ticket }, body: spec });
+  const body = await res.text();
+  if (!res.ok) { console.error(`team: ${res.status} ${body}`); process.exit(1); }
+  console.log(body);
 } else if (process.argv[1] === fileURLToPath(import.meta.url)) {
   const [origin, ticket, delay, title, todo] = process.argv.slice(2);
   const room = ticketClaims(ticket)?.r;

package/collab/page.html

@@ -258,6 +258,27 @@
     font-variant-numeric: tabular-nums;
   }
   .msg.cont:hover .stamp { display: block; }
+  /* 自己的消息：悬停时右上角出现「撤回」，撤回会连同这条消息发起的回答一起停下。 */
+  .msg .ops {
+    position: absolute;
+    top: 2px;
+    right: max(var(--pad-x), env(safe-area-inset-right));
+    display: none;
+    gap: 4px;
+  }
+  .msg:hover .ops, .msg:focus-within .ops { display: flex; }
+  .msg .ops button {
+    font: inherit;
+    font-size: var(--fs-xs);
+    line-height: 1.4;
+    color: var(--muted);
+    background: var(--surface);
+    border: 1px solid var(--line);
+    border-radius: var(--r-sm);
+    padding: 1px 6px;
+    cursor: pointer;
+  }
+  .msg .ops button:hover { color: var(--text-strong); background: var(--hover); }
 
   .avatar {
     width: var(--avatar);
@@ -505,6 +526,8 @@
 <div class="scrim" id="scrim" aria-hidden="true"></div>
 
 <script>
+// 经面板 /dsh/ 转发时页面挂在前缀下：接口和链接都按当前地址带上前缀，直连时前缀为空。
+const ROOT = (location.pathname.match(/^(.*?)\/collab(?:\/|$)/) || ['', ''])[1];
 const state = { me: 'owner', rooms: [], members: [], thinking: {}, room: null, synced: 0, mode: 'mixed' };
 const $ = id => document.getElementById(id);
 // crypto.randomUUID only exists in secure contexts (https/localhost); plain-http LAN/Tailscale pages fall back to getRandomValues.
@@ -527,7 +550,7 @@ const GROUP_WINDOW_MS = 5 * 60 * 1000;
 // 768px 是 U2 交接里定的窄屏阈值
 const narrow = window.matchMedia('(max-width: 768px)');
 
-const avatarSrc = v => !v ? '' : /^https?:/.test(v) ? v : '/collab/avatars/' + encodeURIComponent(v) + '.png';
+const avatarSrc = v => !v ? '' : /^https?:/.test(v) ? v : ROOT + '/collab/avatars/' + encodeURIComponent(v) + '.png';
 function avatar(id, name) {
   const m = state.members.find(m => m.id === id);
   const a = el('div', 'avatar', (name || id).slice(0, 1)); a.style.background = color(id);
@@ -634,7 +657,7 @@ function messageNode(m) {
       const bar = el('div', 'actions');
       for (const a of meta.actions) {
         const b = el('button', '', a.label);
-        b.onclick = () => { bar.querySelectorAll('button').forEach(x => { x.disabled = true; }); api(`/collab/api/messages/${m.id}/permission`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ decision: a.decision }) }); };
+        b.onclick = () => { bar.querySelectorAll('button').forEach(x => { x.disabled = true; }); api(`${ROOT}/collab/api/messages/${m.id}/permission`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ decision: a.decision }) }); };
         bar.append(b);
       }
       card.append(bar);
@@ -642,6 +665,21 @@ function messageNode(m) {
     col.append(card);
   } else col.append(el('div', 'body', m.text));
   row.append(col);
+  // 自己发的普通消息：悬停出现「撤回」。撤回后后端广播 deleted，这一行随之消失；
+  // 这条消息触发的回答也会一起停下（后端 recall 会取消对应 turn）。
+  if (!system && !m.card && m.author === state.me) {
+    const ops = el('div', 'ops');
+    const b = el('button', '', '撤回');
+    b.type = 'button';
+    b.title = '撤回这条消息（正在进行的回答也会停下）';
+    b.onclick = async () => {
+      if (!confirm('撤回这条消息？正在进行的回答也会停下。')) return;
+      try { await api(`${ROOT}/collab/api/messages/${m.id}`, { method: 'DELETE' }); }
+      catch (err) { alert('撤回失败：' + err.message); }
+    };
+    ops.append(b);
+    row.append(ops);
+  }
   return row;
 }
 
@@ -702,10 +740,10 @@ async function openRoom(id) {
   $('input').disabled = true;
   closeDrawer();
   try {
-    const setting = await api(`/collab/api/rooms/${id}/mode`);
+    const setting = await api(`${ROOT}/collab/api/rooms/${id}/mode`);
     state.mode = setting.dispatch_mode;
     renderRooms(); renderMembers();
-    const { messages } = await api(`/collab/api/rooms/${id}/messages?limit=100`);
+    const { messages } = await api(`${ROOT}/collab/api/rooms/${id}/messages?limit=100`);
     if (state.room !== id) return;
     const log = $('log');
     log.querySelector('.state')?.remove();
@@ -725,7 +763,7 @@ async function openRoom(id) {
 $('mode').addEventListener('change', async (e) => {
   if (state.room == null) return;
   try {
-    const result = await api(`/collab/api/rooms/${state.room}/mode`, {
+    const result = await api(`${ROOT}/collab/api/rooms/${state.room}/mode`, {
       method: 'PATCH', headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ dispatch_mode: e.target.value }),
     });
@@ -739,7 +777,7 @@ async function catchUp() {
   const room = state.room;
   if (room == null) return;
   for (;;) {
-    const { messages } = await api(`/collab/api/rooms/${room}/messages?after=${state.synced}&limit=200`);
+    const { messages } = await api(`${ROOT}/collab/api/rooms/${room}/messages?after=${state.synced}&limit=200`);
     if (state.room !== room) return;
     messages.forEach(upsert);
     if (messages.length) state.synced = messages[messages.length - 1].id;
@@ -748,7 +786,7 @@ async function catchUp() {
 }
 
 function connect() {
-  const es = new EventSource('/collab/api/events');
+  const es = new EventSource(ROOT + '/collab/api/events');
   es.onopen = () => catchUp().catch(console.warn);
   es.onmessage = (e) => {
     const ev = JSON.parse(e.data);
@@ -769,7 +807,7 @@ $('form').addEventListener('submit', async (e) => {
   if (!text || state.room == null) return;
   $('input').value = ''; $('input').style.height = 'auto';
   try {
-    const { message } = await api(`/collab/api/rooms/${state.room}/messages`, {
+    const { message } = await api(`${ROOT}/collab/api/rooms/${state.room}/messages`, {
       method: 'POST', headers: { 'content-type': 'application/json' },
       body: JSON.stringify({ text, client_key: uuid() }),
     });
@@ -778,7 +816,7 @@ $('form').addEventListener('submit', async (e) => {
 });
 
 (async () => {
-  const s = await api('/collab/api/state');
+  const s = await api(ROOT + '/collab/api/state');
   Object.assign(state, { me: s.me, rooms: s.rooms, members: s.members, thinking: s.thinking });
   connect();
   await openRoom(s.rooms[0].id);

package/collab/panel.mjs

@@ -0,0 +1,160 @@
+// The bothouse management panel inside DSH (#105): the sidebar's "bothouse" entry frames
+// /collab/panel/, and this owner-only route forwards it to the bridge management server.
+//
+// The panel API needs the management token. The browser must not hold it, so on each
+// request the route reads [management] from the bridge config file and signs the upstream
+// call itself. The panel page learns it is behind such a proxy from an injected
+// <meta name="bothouse-auth" content="proxy">, and <base href> is rewritten to the mount
+// path so its relative asset and API URLs land back here (bridge/web/src/lib/basePath.ts).
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { Readable } from 'node:stream';
+
+export const PANEL_PREFIX = '/collab/panel';
+// 来源：bothouse 管理接口默认端口（bridge config.example.toml [management] port）
+const DEFAULT_PORT = 9820;
+// Request headers the panel page may pass upstream; everything else (cookies, Authorization,
+// Origin, Host) stays on this side.
+const PASS_REQUEST = ['accept', 'accept-language', 'content-type', 'if-none-match', 'if-modified-since', 'range'];
+// Response headers worth keeping; Set-Cookie and CORS headers from the panel are dropped.
+const PASS_RESPONSE = ['content-type', 'cache-control', 'etag', 'last-modified', 'content-disposition', 'content-range', 'accept-ranges'];
+
+/**
+ * Default bridge config path: $BOTHOUSE_CONFIG, else <data dir>/config.toml.
+ * @param {NodeJS.ProcessEnv} env
+ * @returns {string}
+ */
+export function defaultBridgeConfig(env = process.env) {
+  const explicit = String(env.BOTHOUSE_CONFIG ?? '').trim();
+  if (explicit !== '') return explicit;
+  const dataDir = String(env.BOTHOUSE_DATA_DIR ?? '').trim() || join(env.HOME || homedir(), '.bothouse');
+  return join(dataDir, 'config.toml');
+}
+
+/** Value of one TOML scalar (quoted string, number or bare word); comments stripped. */
+function scalar(raw) {
+  const s = raw.trim();
+  const quoted = /^"((?:[^"\\]|\\.)*)"|^'([^']*)'/.exec(s);
+  if (quoted !== null) return quoted[1] !== undefined ? JSON.parse(`"${quoted[1]}"`) : quoted[2];
+  return s.replace(/\s+#.*$/, '').trim();
+}
+
+/**
+ * Read host/port/token/enabled from the [management] table of a bridge config.
+ * Only flat `key = value` lines are needed, so a full TOML parser is not pulled in.
+ * @param {string} text - config.toml contents.
+ * @returns {{ enabled: boolean, host: string, port: number, token: string }}
+ */
+export function managementSettings(text) {
+  const out = { enabled: false, host: '', port: DEFAULT_PORT, token: '' };
+  let inside = false;
+  for (const line of text.split(/\r?\n/)) {
+    const header = /^\s*\[\s*([^\]]+?)\s*\]/.exec(line);
+    if (header !== null) { inside = header[1] === 'management'; continue; }
+    if (!inside) continue;
+    const kv = /^\s*([A-Za-z_][A-Za-z0-9_-]*)\s*=\s*(.*)$/.exec(line);
+    if (kv === null) continue;
+    const value = scalar(kv[2]);
+    if (kv[1] === 'enabled') out.enabled = value === 'true';
+    else if (kv[1] === 'host') out.host = String(value);
+    else if (kv[1] === 'port' && Number.isInteger(Number(value)) && Number(value) > 0) out.port = Number(value);
+    else if (kv[1] === 'token') out.token = String(value);
+  }
+  return out;
+}
+
+/** Loopback address to dial for a configured listen host. */
+function dialHost(host) {
+  if (host === '' || host === '0.0.0.0' || host === '::' || host === '[::]') return '127.0.0.1';
+  return host.includes(':') && !host.startsWith('[') ? `[${host}]` : host;
+}
+
+function sendJSON(res, status, body) {
+  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(JSON.stringify(body));
+}
+
+/** Text shown inside the frame when the panel cannot be reached. */
+function sendNotice(res, status, reason) {
+  res.writeHead(status, { 'content-type': 'text/html; charset=utf-8', 'cache-control': 'no-store' });
+  res.end(`<!doctype html><meta charset="utf-8"><title>bothouse</title><body style="font:14px system-ui;padding:24px;color:#888">打不开 bothouse 管理面板：${reason
+    .replace(/[&<>"]/g, c => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;' })[c])}</body>`);
+}
+
+/**
+ * Point the panel page at the mount path and mark it as proxy-signed.
+ * @param {string} html - the panel's index.html.
+ * @param {string} prefix - mount path, e.g. /collab/panel.
+ * @returns {string}
+ */
+export function rewritePanelHTML(html, prefix = PANEL_PREFIX) {
+  const head = `<base href="${prefix}/" />\n    <meta name="bothouse-auth" content="proxy" />`;
+  if (/<base\s[^>]*>/i.test(html)) return html.replace(/<base\s[^>]*>/i, head);
+  return html.replace(/<head(\s[^>]*)?>/i, m => `${m}\n    ${head}`);
+}
+
+/**
+ * Forward /collab/panel/* to the bridge management server. Callers must have checked the owner.
+ * @returns {Promise<true> | undefined} undefined when the path is not ours.
+ */
+export function panelRoute(req, res, url, { bridgeConfig, fetchImpl = fetch }) {
+  if (url.pathname !== PANEL_PREFIX && !url.pathname.startsWith(`${PANEL_PREFIX}/`)) return undefined;
+  if (url.pathname === PANEL_PREFIX) {
+    res.writeHead(308, { location: `${PANEL_PREFIX}/${url.search}` });
+    res.end();
+    return Promise.resolve(true);
+  }
+  return (async () => {
+    const rest = url.pathname.slice(PANEL_PREFIX.length) || '/';
+    const isAPI = rest.startsWith('/api/');
+    const fail = (status, reason) => (isAPI ? sendJSON(res, status, { ok: false, error: reason }) : sendNotice(res, status, reason), true);
+    let settings;
+    try {
+      settings = managementSettings(readFileSync(bridgeConfig, 'utf8'));
+    } catch {
+      return fail(503, '读不到主桥配置');
+    }
+    if (!settings.enabled) return fail(503, '主桥配置里管理接口没打开');
+    const upstream = `http://${dialHost(settings.host)}:${settings.port}${rest}${url.search}`;
+    const headers = {};
+    for (const name of PASS_REQUEST) {
+      const v = req.headers[name];
+      if (typeof v === 'string') headers[name] = v;
+    }
+    if (settings.token !== '') headers.authorization = `Bearer ${settings.token}`;
+    const hasBody = req.method !== 'GET' && req.method !== 'HEAD';
+    let reply;
+    try {
+      reply = await fetchImpl(upstream, {
+        method: req.method,
+        headers,
+        body: hasBody ? Readable.toWeb(req) : undefined,
+        duplex: hasBody ? 'half' : undefined,
+        redirect: 'manual',
+      });
+    } catch {
+      return fail(502, '连不上主桥管理接口');
+    }
+    const out = {};
+    for (const name of PASS_RESPONSE) {
+      const v = reply.headers.get(name);
+      if (v !== null) out[name] = v;
+    }
+    const type = reply.headers.get('content-type') ?? '';
+    if (!isAPI && type.startsWith('text/html')) {
+      const html = rewritePanelHTML(await reply.text());
+      res.writeHead(reply.status, { ...out, 'cache-control': 'no-store' });
+      res.end(html);
+      return true;
+    }
+    res.writeHead(reply.status, out);
+    if (reply.body === null || req.method === 'HEAD') { res.end(); return true; }
+    // Stream so NDJSON/SSE answers (plugin install, logs) arrive as they are produced.
+    const body = Readable.fromWeb(reply.body);
+    body.on('error', () => res.destroy());
+    req.on('close', () => body.destroy());
+    body.pipe(res);
+    return true;
+  })();
+}