botmux 2.86.0 → 2.88.0

package/dist/core/dashboard-ipc-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAqDjG,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAM/E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAE3F;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAiB,cAAc,EAAW,MAAM,aAAa,CAAC;AAI1E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAW1B,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhF;AAiBD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAyB7F,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AAwhBxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AAuvBD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAiC7F"}
+{"version":3,"file":"dashboard-ipc-server.d.ts","sourceRoot":"","sources":["../../src/core/dashboard-ipc-server.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAe,MAAM,WAAW,CAAC;AAsDjG,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAM/E,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAE3F;AACD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EAIpB,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAiC,cAAc,EAAW,MAAM,aAAa,CAAC;AAK1F,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,MAAM,OAAO,GAAG,CACpB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAW1B,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAM7E;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGhF;AAED,wBAAsB,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhF;AAiBD,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAgC;AAyB7F,YAAY,EAAE,UAAU,EAAE,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,CAAC;AAMtD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAA0B;AAKxE,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAA0B;AAkpBxE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IAC3C,cAAc,EAAE,MAAM,CAAC;CACxB;AAozBD,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAiC7F"}

package/dist/core/dashboard-ipc-server.js

@@ -28,11 +28,12 @@ import { readGlobalConfig } from '../global-config.js';
 import { normalizeChatReplyMode } from '../services/chat-reply-mode-store.js';
 import * as chatFirstSeenStore from '../services/chat-first-seen-store.js';
 import * as scheduler from './scheduler.js';
-import { listActiveSessions, findActiveBySessionId, closeSession, getActiveSessionsRegistry, transferSession, deliverWriteLinkCardToOwners } from './worker-pool.js';
+import { listActiveSessions, findActiveBySessionId, closeSession, getActiveSessionsRegistry, transferSession, deliverWriteLinkCardToOwners, forkWorker } from './worker-pool.js';
 import { listOnlineDaemons } from '../utils/daemon-discovery.js';
 import { getChatMode, replyMessage, sendMessage, resolveUnionIdFromOpenId, listThreadMessages, listChatMessages, getUserProfile } from '../im/lark/client.js';
 import { parseApiMessage, cardContentHasUpgradeFallback, resolveMergedCardContent } from '../im/lark/message-parser.js';
-import { resumeSession } from './session-manager.js';
+import { resumeSession, spawnDashboardSession, activateQueuedSession } from './session-manager.js';
+import { parseSpawnRequest } from './session-create.js';
 import { getCliDisplayName } from '../im/lark/card-builder.js';
 import { locateLimiter } from './dashboard-locate.js';
 import { buildTerminalUrl } from './terminal-url.js';
@@ -146,6 +147,63 @@ ipcRoute('POST', '/api/sessions/:sessionId/close', async (_req, res, params) =>
     const r = await closeSession(params.sessionId);
     jsonRes(res, 200, r);
 });
+/** Post a scope-aware "restarting" notice into the session's Lark thread/chat,
+ *  mirroring the /resume route — so a Feishu-side observer sees why the CLI just
+ *  restarted under them (the IM `/restart` command and the card button notify
+ *  too; the dashboard was the lone silent path). `fresh` = the worker was gone
+ *  and we re-forked it (revive) rather than doing an in-place CLI restart.
+ *  Best-effort and fire-and-forget; never blocks the HTTP response. */
+function postRestartNotice(ds, fresh) {
+    if (!ds.larkAppId)
+        return;
+    const loc = localeForBot(ds.larkAppId);
+    const cliName = getCliDisplayName(ds.session.cliId ?? 'claude-code');
+    const text = fresh
+        ? t('card.action.restarted_fresh', { cliName }, loc)
+        : t('cmd.restart.in_progress', { cliName }, loc);
+    const notice = JSON.stringify({ text });
+    if (ds.scope === 'chat' && ds.chatId) {
+        getChatMode(ds.larkAppId, ds.chatId, { forceRefresh: true })
+            .then((mode) => mode === 'topic' && ds.session.rootMessageId
+            ? replyMessage(ds.larkAppId, ds.session.rootMessageId, notice, 'text', true)
+            : sendMessage(ds.larkAppId, ds.chatId, notice, 'text'))
+            .catch(err => logger.debug(`[restart] failed to post chat-scope restart notice: ${err}`));
+    }
+    else if (ds.session.rootMessageId) {
+        replyMessage(ds.larkAppId, ds.session.rootMessageId, notice, 'text', true)
+            .catch(err => logger.debug(`[restart] failed to post thread-scope restart notice: ${err}`));
+    }
+}
+ipcRoute('POST', '/api/sessions/:sessionId/restart', (_req, res, params) => {
+    const ds = findActiveBySessionId(params.sessionId);
+    if (!ds)
+        return jsonRes(res, 404, { ok: false, error: 'session_not_active' });
+    // Adopt/observed sessions: botmux never owned the CLI — restarting would kill
+    // the user's real tmux/zellij pane. Hard-reject (the worker self-guards too).
+    if (ds.adoptedFrom || ds.initConfig?.adoptMode) {
+        return jsonRes(res, 409, { ok: false, error: 'adopt_restart_unsupported' });
+    }
+    const cliId = ds.session.cliId ?? 'unknown';
+    if (ds.worker && !ds.worker.killed) {
+        // Live worker → in-place CLI restart (kills the CLI, respawns with --resume).
+        try {
+            ds.worker.send({ type: 'restart' });
+        }
+        catch (err) {
+            return jsonRes(res, 502, { ok: false, error: String(err) });
+        }
+        postRestartNotice(ds, false);
+        return jsonRes(res, 200, { ok: true, sessionId: params.sessionId, cliId, revived: false });
+    }
+    // Worker is gone but the session is still active — idle-suspended (over the
+    // per-bot cap), lazy-restored after a daemon restart, or crash-loop-stopped.
+    // Revive it the same way the Feishu card restart does (forkWorker), so the
+    // dashboard isn't a dead-end: a 409 here would leave NO working control to
+    // bring the CLI back (the resume button only shows for closed sessions).
+    forkWorker(ds, '', ds.hasHistory);
+    postRestartNotice(ds, true);
+    jsonRes(res, 200, { ok: true, sessionId: params.sessionId, cliId, revived: true });
+});
 /** 解析 session（活跃优先，已关闭兜底）。活跃会话取 ds.session —— registry 与
  *  store 持有同一对象，改字段后 updateSession 即落盘。 */
 function findSessionRecord(sessionId) {
@@ -168,8 +226,15 @@ ipcRoute('POST', '/api/sessions/:sessionId/board', async (req, res, params) => {
     const session = findSessionRecord(params.sessionId);
     if (!session)
         return jsonRes(res, 404, { ok: false, error: 'session_not_found' });
-    if (column)
+    // 待办池(queued)会话被拖到「进行中」= 激活：把暂存内容当首轮发给 CLI 开跑。
+    // activateQueuedSession 内部会清 queued + 把列设成 in_progress + forkWorker。
+    const activeDs = findActiveBySessionId(params.sessionId);
+    if (column === 'in_progress' && activeDs?.session.queued) {
+        await activateQueuedSession(activeDs);
+    }
+    else if (column) {
         session.kanbanColumn = column;
+    }
     if (position !== null)
         session.kanbanPosition = position;
     sessionStore.updateSession(session);
@@ -177,11 +242,65 @@ ipcRoute('POST', '/api/sessions/:sessionId/board', async (req, res, params) => {
         type: 'session.update',
         body: {
             sessionId: params.sessionId,
-            patch: { kanbanColumn: session.kanbanColumn, kanbanPosition: session.kanbanPosition },
+            // queued 一并下发：激活后 session.queued 已为 false，前端浅合并若不带这个字段
+            // 会残留 queued=true（卡片仍显示「开始」、再点 409）。!!session.queued 始终反映现态。
+            patch: { kanbanColumn: session.kanbanColumn, kanbanPosition: session.kanbanPosition, queued: !!session.queued },
         },
     });
     jsonRes(res, 200, { ok: true });
 });
+// 待办池会话「开始」：把 parked 会话激活（发首轮、起 CLI），与拖到「进行中」同义。
+ipcRoute('POST', '/api/sessions/:sessionId/start', async (_req, res, params) => {
+    const ds = findActiveBySessionId(params.sessionId);
+    if (!ds)
+        return jsonRes(res, 404, { ok: false, error: 'session_not_found' });
+    if (!ds.session.queued)
+        return jsonRes(res, 409, { ok: false, error: 'not_queued' });
+    const r = await activateQueuedSession(ds);
+    if (!r.ok)
+        return jsonRes(res, 500, r);
+    sessionStore.updateSession(ds.session);
+    dashboardEventBus.publish({
+        type: 'session.update',
+        body: { sessionId: params.sessionId, patch: { kanbanColumn: ds.session.kanbanColumn, queued: false } },
+    });
+    jsonRes(res, 200, { ok: true });
+});
+// Dashboard「创建会话」spawn：在新建的群里为本 daemon 的 bot 拉起/暂存一条 chat-scope
+// 会话。aggregator 建完群后按模式(一起开工/lead 分配)对每个目标 bot 的 daemon 调一次。
+ipcRoute('POST', '/api/sessions/spawn', async (req, res) => {
+    if (!cachedLarkAppId)
+        return jsonRes(res, 503, { ok: false, error: 'bot_not_found' });
+    const activeSessions = getActiveSessionsRegistry();
+    if (!activeSessions)
+        return jsonRes(res, 503, { ok: false, error: 'registry_unavailable' });
+    let body;
+    try {
+        body = await readJsonBody(req);
+    }
+    catch {
+        return jsonRes(res, 400, { ok: false, error: 'invalid_json' });
+    }
+    const parsed = parseSpawnRequest(body);
+    if (!parsed.ok)
+        return jsonRes(res, 400, { ok: false, error: parsed.error });
+    const postBanner = !!body.postBanner;
+    const r = await spawnDashboardSession(activeSessions, undefined, {
+        larkAppId: cachedLarkAppId,
+        chatId: parsed.value.chatId,
+        content: parsed.value.content,
+        column: parsed.value.column,
+        role: parsed.value.role,
+        coworkers: parsed.value.coworkers,
+        title: parsed.value.title,
+        postBanner,
+        ownerOpenId: parsed.value.ownerOpenId,
+        ownerUnionId: parsed.value.ownerUnionId,
+    });
+    if (!r.ok)
+        return jsonRes(res, r.error === 'session_exists' ? 409 : 500, r);
+    jsonRes(res, 200, r);
+});
 // 会话历史：实时拉取该会话所在话题/群的飞书消息（与 botmux history 同链路，
 // 消息体不落盘），给 dashboard 的会话历史弹窗。复杂卡片的「请升级」兜底文本
 // 用 message.get 的完整表示补齐；merge_forward 保持占位符（原型不展开）。
@@ -454,7 +573,7 @@ ipcRoute('POST', '/api/sessions/:sessionId/sandbox-land/:action', (_req, res, pa
  * CLI command (via this HTTP route). The CLI route also drops a notice into
  * the original Lark thread so users see why the session is alive again.
  */
-ipcRoute('POST', '/api/sessions/:sessionId/resume', async (_req, res, params) => {
+ipcRoute('POST', '/api/sessions/:sessionId/resume', async (req, res, params) => {
     const sessionId = params.sessionId;
     const reg = getActiveSessionsRegistry();
     if (!reg)
@@ -465,6 +584,12 @@ ipcRoute('POST', '/api/sessions/:sessionId/resume', async (_req, res, params) =>
         return jsonRes(res, status, { ok: false, error: result.error, activeSessionId: result.activeSessionId });
     }
     const ds = result.ds;
+    // `?wake=1` is an opt-in operational hook (no UI/CLI caller wires it today —
+    // it's meant for direct `curl` recovery): instead of the default lazy
+    // cold-resume on the next inbound message, fork the worker immediately so the
+    // session is usable right away. Off by default keeps every existing caller's
+    // behaviour unchanged.
+    const wake = new URL(req.url ?? '/', 'http://localhost').searchParams.get('wake') === '1';
     // Tell the dashboard the row flipped back to active (mirror of session.update
     // emitted by closeSession). Use `null` for closedAt — `undefined` would be
     // dropped by JSON.stringify on the SSE wire and the aggregator's spread
@@ -496,9 +621,18 @@ ipcRoute('POST', '/api/sessions/:sessionId/resume', async (_req, res, params) =>
                 .catch(err => logger.debug(`[resume] failed to post thread-scope resume notice: ${err}`));
         }
     }
+    // Report the EFFECTIVE action, not the raw request flag: only fork when wake
+    // was asked AND there's no live worker to clobber. (resumeSession always hands
+    // back a worker:null ds today, so this matches `wake` in practice — but
+    // reporting the action keeps the response honest if the guard ever broadens.)
+    const woke = wake && (!ds.worker || ds.worker.killed);
+    if (woke) {
+        forkWorker(ds, '', true);
+    }
     jsonRes(res, 200, {
         ok: true,
         sessionId,
+        wake: woke,
         title: ds.session.title,
         chatId: ds.chatId,
         rootMessageId: ds.session.rootMessageId,
@@ -1061,6 +1195,16 @@ ipcRoute('GET', '/api/bot-default-oncall', async (_req, res) => {
             startupCommands = sc.join('\n');
     }
     catch { /* none */ }
+    // Per-bot env → pretty JSON for the dashboard textarea. The dashboard is
+    // owner-authenticated, so showing the real values here is acceptable (same
+    // as editing bots.json directly); the chat-facing /config get masks them.
+    let env = '';
+    try {
+        const e = getBot(cachedLarkAppId).config.env;
+        if (e && typeof e === 'object' && Object.keys(e).length)
+            env = JSON.stringify(e, null, 2);
+    }
+    catch { /* none */ }
     jsonRes(res, 200, {
         larkAppId: cachedLarkAppId,
         botName: getBotName(),
@@ -1078,10 +1222,12 @@ ipcRoute('GET', '/api/bot-default-oncall', async (_req, res) => {
         regularGroupMentionMode: cardPrefs.regularGroupMentionMode,
         docSubscribeDefaultMode: cardPrefs.docSubscribeDefaultMode,
         restrictGrantCommands: grantPrefs.restrictGrantCommands,
+        autoGrantRequestCards: grantPrefs.autoGrantRequestCards,
         messageQuotaDefaultLimit: grantPrefs.messageQuotaDefaultLimit,
         p2pMode,
         maxLiveWorkers,
         startupCommands,
+        env,
         skills: getBot(cachedLarkAppId).config.skills ?? null,
     });
 });
@@ -1130,6 +1276,7 @@ ipcRoute('PUT', '/api/bot-card-prefs', async (req, res) => {
 });
 // Per-bot 授权偏好。Body 任意子集：
 //   • restrictGrantCommands: boolean       — 限制被授权人只能纯对话
+//   • autoGrantRequestCards: boolean       — 未授权 @ 被挡住时是否发 grant 申请卡
 //   • messageQuotaDefaultLimit: number|null — 默认消息额度（null = 关闭，正整数 = 启用）
 ipcRoute('PUT', '/api/bot-grant-prefs', async (req, res) => {
     if (!cachedLarkAppId)
@@ -1149,6 +1296,8 @@ ipcRoute('PUT', '/api/bot-grant-prefs', async (req, res) => {
     const patch = {};
     if (typeof body.restrictGrantCommands === 'boolean')
         patch.restrictGrantCommands = body.restrictGrantCommands;
+    if (typeof body.autoGrantRequestCards === 'boolean')
+        patch.autoGrantRequestCards = body.autoGrantRequestCards;
     // null（含 JSON null）= 关闭默认额度；number = 设定（store 内再校验正整数）。
     if (body.messageQuotaDefaultLimit === null)
         patch.messageQuotaDefaultLimit = null;
@@ -1237,6 +1386,40 @@ ipcRoute('PUT', '/api/bot-startup-commands', async (req, res) => {
         return jsonRes(res, 400, { ok: false, error: r.reason });
     jsonRes(res, 200, { ok: true, startupCommands: (value ?? []).join('\n') });
 });
+// Per-bot 环境变量 env。Body `{ env: string }`（原始 JSON 文本，如
+// `{"ANTHROPIC_BASE_URL":"…","ANTHROPIC_AUTH_TOKEN":"…"}` 让本 bot 走 GLM/第三方
+// 服务商）：空白 → 清除；否则按 json kind 解析 + sanitizePerBotEnv 过滤后落盘。
+// 走 applyConfigField（与 /botconfig 同一写盘 + 内存热更新路径），next-session 生效
+// （下个会话起注入到 CLI 进程）。回包返回脱敏后的 pretty JSON 供 textarea 回填。
+ipcRoute('PUT', '/api/bot-env', async (req, res) => {
+    if (!cachedLarkAppId)
+        return jsonRes(res, 503, { error: 'larkAppId_not_set' });
+    let body;
+    try {
+        body = await readJsonBody(req);
+    }
+    catch {
+        return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+    }
+    const spec = findConfigField('env');
+    if (!spec)
+        return jsonRes(res, 500, { ok: false, error: 'spec_missing' });
+    const raw = typeof body.env === 'string' ? body.env : '';
+    let value;
+    if (!raw.trim()) {
+        value = null; // 清除
+    }
+    else {
+        const coerced = coerceConfigValue(spec, raw);
+        if (!coerced.ok)
+            return jsonRes(res, 400, { ok: false, error: coerced.reason });
+        value = coerced.value;
+    }
+    const r = await applyConfigField(cachedLarkAppId, spec, value);
+    if (!r.ok)
+        return jsonRes(res, 400, { ok: false, error: r.reason });
+    jsonRes(res, 200, { ok: true, env: value ? JSON.stringify(value, null, 2) : '' });
+});
 // Per-bot 最大同时活跃会话数 maxLiveWorkers。Body `{ maxLiveWorkers: number | null }`:
 //   • 正整数  → 设上限；超过后 idle-worker sweeper 把最久未用的会话休眠到上限内
 //   • null    → 清除（回落到内置默认 30）
@@ -1491,9 +1674,31 @@ ipcRoute('GET', '/api/events', (_req, res) => {
     });
     // Initial flush so the client sees the connection alive immediately.
     res.write('retry: 5000\n\n');
+    // Subscribe BEFORE snapshotting so no event published in the gap is missed.
     const off = dashboardEventBus.subscribe(ev => {
         res.write(`event: ${ev.type}\ndata: ${JSON.stringify(ev.body)}\n\n`);
     });
+    // Replay the current active sessions as `session.spawned` right after
+    // subscribing. `DashboardEventBus` has no buffer/replay, and the daemon
+    // publishes its discovery descriptor BEFORE restoreActiveSessions() runs
+    // (daemon.ts) — so a dashboard that hydrates (GET /api/sessions) during the
+    // descriptor→restore window gets an EMPTY snapshot, and any restore-time
+    // `announceSessionRow()` that fires before THIS subscription is established is
+    // dropped. Without this replay the aggregator would then have neither a
+    // snapshot row nor a spawned row, and later session.update/close patches would
+    // be discarded as unknown-row. Replaying here makes SSE attach deterministic:
+    // a row registered before subscribe arrives via this snapshot; one registered
+    // after arrives via the live subscription above. Idempotent — both the
+    // aggregator and the browser store upsert by sessionId, so any row also
+    // delivered live just refreshes the same entry.
+    try {
+        for (const ds of listActiveSessions()) {
+            res.write(`event: session.spawned\ndata: ${JSON.stringify({ session: composeRowFromActive(ds) })}\n\n`);
+        }
+    }
+    catch (err) {
+        logger.warn(`[dashboard-ipc] /api/events snapshot replay failed: ${err}`);
+    }
     const hb = setInterval(() => {
         res.write(`event: heartbeat\ndata: ${JSON.stringify({ ts: Date.now() })}\n\n`);
     }, 15_000);