botmux 2.87.0 → 2.88.0

package/dist/dashboard-web/style.css

@@ -2070,6 +2070,161 @@ fieldset legend {
 
 .bulk-bar[hidden] { display: none; }
 .bulk-bar #bulk-count { font-weight: 800; margin-right: 4px; }
+.idle-cleanup-bar {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 8px 12px;
+  margin: 10px 0 2px;
+  padding: 8px;
+  border-radius: var(--radius);
+  border: 1px solid var(--border-soft);
+  background: color-mix(in srgb, var(--surface) 92%, var(--bg));
+  box-shadow: 0 10px 26px rgba(15, 23, 42, 0.06);
+}
+.idle-cleanup-summary,
+.idle-cleanup-controls {
+  display: flex;
+  align-items: center;
+  min-width: 0;
+  gap: 8px;
+}
+.idle-cleanup-controls {
+  justify-content: flex-end;
+  flex-wrap: wrap;
+}
+.idle-cleanup-dot {
+  width: 8px;
+  height: 8px;
+  flex: 0 0 auto;
+  border-radius: 50%;
+  background: var(--danger);
+  box-shadow: 0 0 0 3px color-mix(in srgb, var(--danger) 12%, transparent);
+}
+.idle-cleanup-bar.is-empty .idle-cleanup-dot {
+  background: var(--muted);
+  box-shadow: none;
+}
+.idle-cleanup-count,
+.idle-cleanup-status,
+.idle-cleanup-label {
+  min-height: 32px;
+  display: inline-flex;
+  align-items: center;
+  white-space: nowrap;
+}
+.idle-cleanup-count {
+  padding: 0 12px;
+  border-radius: 999px;
+  background: var(--surface-muted);
+  border: 1px solid var(--border-soft);
+  color: var(--fg);
+  font-size: 12.5px;
+  font-weight: 800;
+  font-variant-numeric: tabular-nums;
+}
+.idle-cleanup-label {
+  color: var(--muted);
+  font-size: 12.5px;
+  font-weight: 700;
+}
+.idle-cleanup-thresholds {
+  display: inline-grid;
+  grid-auto-flow: column;
+  gap: 2px;
+  min-height: 32px;
+  padding: 2px;
+  border-radius: 999px;
+  border: 1px solid var(--border-soft);
+  background: var(--surface-muted);
+}
+.idle-cleanup-thresholds button {
+  min-height: 26px;
+  padding: 0 10px;
+  border: 0;
+  border-radius: 999px;
+  background: transparent;
+  box-shadow: none;
+  color: var(--muted);
+  font-size: 12px;
+  font-weight: 800;
+  font-variant-numeric: tabular-nums;
+}
+.idle-cleanup-thresholds button:hover:not(.active) {
+  color: var(--fg);
+  background: color-mix(in srgb, var(--border-soft) 60%, transparent);
+}
+.idle-cleanup-thresholds button.active {
+  background: var(--surface);
+  color: var(--fg);
+  box-shadow: 0 1px 4px rgba(15, 23, 42, 0.08);
+}
+.idle-cleanup-run {
+  min-height: 32px;
+  padding: 0 15px;
+  font-weight: 800;
+  transition: transform .16s ease, background-color .16s ease, border-color .16s ease, color .16s ease;
+}
+.idle-cleanup-run:hover:not(:disabled) {
+  transform: translateY(-1px);
+}
+.idle-cleanup-run:active:not(:disabled) {
+  transform: scale(.98);
+}
+.idle-cleanup-status {
+  grid-column: 1 / -1;
+  justify-self: end;
+  padding: 0 11px;
+  border-radius: 999px;
+  border: 1px solid color-mix(in srgb, var(--success) 24%, var(--border-soft));
+  background: color-mix(in srgb, var(--success) 8%, var(--surface));
+  color: var(--success);
+  font-size: 12px;
+  font-weight: 800;
+}
+.idle-cleanup-status:empty {
+  display: none;
+}
+:root[data-theme="dark"] .idle-cleanup-bar {
+  background: rgba(255, 255, 255, 0.035);
+  border-color: rgba(255, 255, 255, 0.08);
+  box-shadow: none;
+}
+:root[data-theme="dark"] .idle-cleanup-count,
+:root[data-theme="dark"] .idle-cleanup-thresholds button.active {
+  background: rgba(255, 255, 255, 0.06);
+}
+:root[data-theme="dark"] .idle-cleanup-thresholds {
+  background: rgba(255, 255, 255, 0.035);
+  border-color: rgba(255, 255, 255, 0.09);
+}
+:root[data-theme="dark"] .idle-cleanup-status {
+  background: color-mix(in srgb, var(--success) 12%, transparent);
+}
+@media (max-width: 720px) {
+  .idle-cleanup-bar {
+    grid-template-columns: 1fr;
+    align-items: stretch;
+  }
+  .idle-cleanup-controls {
+    justify-content: flex-start;
+  }
+  .idle-cleanup-thresholds {
+    flex: 1 1 180px;
+    grid-template-columns: repeat(3, minmax(0, 1fr));
+    grid-auto-flow: column;
+  }
+  .idle-cleanup-thresholds button {
+    min-width: 0;
+    padding: 0 8px;
+  }
+  .idle-cleanup-run {
+    flex: 1 1 118px;
+  }
+  .idle-cleanup-status {
+    justify-self: start;
+  }
+}
 input.row-select,
 #select-all { cursor: pointer; }
 
@@ -6850,12 +7005,66 @@ body.cp-fx-slice main { animation: cp-fx-slice 0.32s steps(2, end); }
 .insights-page .hbtrack { background: var(--ins-inner); border-radius: 6px; height: 14px; overflow: hidden; }
 .insights-page .hbfill { height: 100%; background: linear-gradient(90deg, var(--danger-soft), var(--bad)); border-radius: 6px; min-width: 3px; transform-origin: left; animation: insight-bar-grow .55s ease both; }
 .insights-page .hbval { font-size: 12px; color: var(--mut); text-align: right; white-space: nowrap; }
+.insights-page .hbval small { color: var(--ins-faint); font-size: 10px; margin-left: 5px; }
 
-/* workbench: session list | detail (master-detail) */
-.insight-workbench { display: grid; grid-template-columns: minmax(260px, 320px) minmax(0, 1fr); gap: 14px; align-items: start; }
-@media (max-width: 900px) { .insight-workbench { grid-template-columns: 1fr; } }
-.insight-workbench > *, .insight-list-panel, .insight-detail { min-width: 0; }
-.insight-list-panel, .insight-detail { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 12px 14px; }
+/* top-level tabs (总览 / 会话 / 分布 / 热点) — mirrors .detailtabbar */
+.insights-page .insight-tabs { display: flex; gap: 6px; border-bottom: 1px solid var(--line); margin: 4px 0 16px; }
+.insights-page .itab {
+  background: transparent; color: var(--mut); border: 1px solid transparent; border-bottom: 0;
+  border-radius: 8px 8px 0 0; padding: 8px 16px; font: inherit; font-size: 13px; cursor: pointer; margin-bottom: -1px;
+  transition: color .12s ease, background .12s ease;
+}
+.insights-page .itab:hover { color: var(--fg); }
+.insights-page .itab.on { color: var(--fg); background: var(--panel); border-color: var(--line); font-weight: 600; }
+.insights-page .insight-panel[hidden] { display: none; }
+
+/* filter-bar additions: project/time selects, analyzable toggle, clear */
+.insights-page .ins-select {
+  background: var(--ins-inner); color: var(--fg); border: 1px solid var(--line); border-radius: 8px;
+  padding: 6px 10px; font: inherit; font-size: 12px; max-width: 220px; cursor: pointer;
+}
+.insights-page .ins-toggle { display: inline-flex; align-items: center; gap: 5px; font-size: 12px; color: var(--mut); cursor: pointer; white-space: nowrap; }
+.insights-page .ins-toggle input { cursor: pointer; }
+.insights-page .ins-clear {
+  background: transparent; color: var(--mut); border: 1px solid var(--line); border-radius: 8px;
+  padding: 6px 12px; font: inherit; font-size: 12px; cursor: pointer;
+}
+.insights-page .ins-clear:hover { color: var(--fg); border-color: var(--acc); }
+
+/* distribution histograms + hotspots grids */
+.insights-page .ins-hint { margin: 0 0 12px; font-size: 12px; }
+.insights-page .ihist-grid,
+.insights-page .hot-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(320px, 1fr)); gap: 14px; align-items: start; }
+.insights-page .ihist-head { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; margin-bottom: 10px; }
+.insights-page .ihist-head h3 { margin: 0; }
+.insights-page .hot-sessions, .insights-page .hot-note { grid-column: 1 / -1; }
+.insights-page .hot-note { margin-top: 2px; }
+
+/* Sessions tab: full-width list ⇆ full-width detail (mirrors ASI 会话, replaces
+   the cramped master-detail side panel) */
+.insights-page #insight-list-view .insight-list-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap; margin-bottom: 12px; }
+.insights-page .sesssort { display: flex; flex-wrap: wrap; gap: 5px; align-items: center; }
+.insights-page .sesssort-label { font-size: 11px; margin-right: 2px; }
+.insights-page .ins-back {
+  background: transparent; color: var(--mut); border: 1px solid var(--line); border-radius: 8px;
+  padding: 6px 14px; font: inherit; font-size: 12px; cursor: pointer; margin-bottom: 12px;
+}
+.insights-page .ins-back:hover { color: var(--fg); border-color: var(--acc); }
+.insights-page #insight-detail-view .insight-detail { background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 14px 16px; }
+/* full-width rich rows */
+.insights-page .slist.wide { max-height: none; overflow: visible; gap: 10px; }
+.insights-page .slist.wide .srow { grid-template-columns: minmax(0, 1fr) auto; align-items: center; gap: 18px; padding: 13px 16px; }
+.insights-page .slist.wide .srmain strong { -webkit-line-clamp: 1; font-size: 14px; }
+.insights-page .slist.wide .mph { max-width: 440px; height: 8px; }
+.insights-page .slist.wide .srstats { flex-wrap: nowrap; justify-content: flex-end; align-items: center; }
+.insights-page .slist.wide .srmsg { justify-self: end; }
+@media (max-width: 760px) {
+  .insights-page .slist.wide .srow { grid-template-columns: 1fr; }
+  .insights-page .slist.wide .srstats { justify-content: flex-start; flex-wrap: wrap; }
+}
+
+/* session detail panel (full-width detail view) */
+.insight-detail { min-width: 0; background: var(--panel); border: 1px solid var(--line); border-radius: 10px; padding: 12px 14px; }
 .insight-list-head { display: flex; align-items: baseline; justify-content: space-between; gap: 10px; margin-bottom: 10px; }
 .insight-list-head h3 { font-size: 13px; margin: 0; }
 .insight-list-head span { font-size: 11px; color: var(--mut); }
@@ -7274,6 +7483,10 @@ body.cp-fx-slice main { animation: cp-fx-slice 0.32s steps(2, end); }
 .insights-page .cbub-body .md-body { font-size: 13px; }
 .insights-page .cbub-foot { display: flex; justify-content: flex-end; }
 .insights-page .cbub-ops { background: var(--ins-recess); max-width: 88%; }
+/* agent narration ("说了什么") inside the agent bubble, above its operations */
+.insights-page .cbub-saywrap { display: flex; flex-direction: column; gap: 6px; margin: 2px 0 8px; }
+.insights-page .cbub-say { font-size: 13px; color: var(--fg); border-left: 2px solid var(--acc); padding-left: 9px; overflow-wrap: anywhere; word-break: break-word; }
+.insights-page .cbub-say .md-body { font-size: 13px; }
 .insights-page .cbub-ops-list { display: flex; flex-direction: column; gap: 3px; }
 .insights-page .cop-line { display: flex; align-items: center; gap: 7px; flex-wrap: wrap; font-size: 12px; padding: 3px 5px; border-radius: 6px; }
 .insights-page .cop-line.clickable { cursor: pointer; }
@@ -7360,12 +7573,49 @@ body.cp-fx-slice main { animation: cp-fx-slice 0.32s steps(2, end); }
 @keyframes insight-bar-grow { from { transform: scaleX(0); } to { transform: scaleX(1); } }
 .insights-page .insights-metrics { animation: insight-fade-up .35s ease both; }
 .insights-page .insights-overview-grid { animation: insight-fade-up .35s ease both; animation-delay: .05s; }
-.insights-page .insight-workbench { animation: insight-fade-up .35s ease both; animation-delay: .1s; }
+.insights-page .insight-panel { animation: insight-fade-up .35s ease both; animation-delay: .1s; }
 @media (prefers-reduced-motion: reduce) {
   .insights-page .insights-metrics,
   .insights-page .insights-overview-grid,
-  .insights-page .insight-workbench,
+  .insights-page .insight-panel,
   .insights-page .hbfill { animation: none; }
   .insights-page .srow { transition: none; }
   .insights-page .srow:hover { transform: none; }
 }
+
+/* ─── 创建会话 modal ─────────────────────────────────────────────────────── */
+.create-session-btn { white-space: nowrap; }
+.create-session-modal .cs-card { padding: 20px; }
+.create-session-modal textarea {
+  width: 100%;
+  box-sizing: border-box;
+  resize: vertical;
+  font: inherit;
+  padding: 8px 10px;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  background: var(--surface-muted);
+  color: var(--fg);
+}
+.create-session-modal fieldset {
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  margin: 12px 0;
+  padding: 10px 12px;
+}
+.create-session-modal legend { padding: 0 6px; color: var(--muted); font-size: 13px; }
+.create-session-modal .cs-bots {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(160px, 1fr));
+  gap: 4px 12px;
+}
+.create-session-modal .cs-bot { display: flex; align-items: center; gap: 6px; cursor: pointer; }
+.create-session-modal .cs-mode label,
+.create-session-modal .cs-column label { display: inline-flex; align-items: center; gap: 6px; margin-right: 16px; cursor: pointer; }
+.create-session-modal fieldset small { display: block; margin-top: 6px; color: var(--muted); font-size: 12px; }
+.create-session-modal .cs-lead-row { margin: 12px 0; }
+.create-session-modal .cs-lead-row select { margin: 4px 0; padding: 6px 8px; }
+.create-session-modal .cs-advanced { margin: 12px 0; }
+.create-session-modal .cs-advanced summary { cursor: pointer; color: var(--muted); }
+.create-session-modal .cs-empty { color: var(--muted); margin: 0; }
+.create-session-modal .cs-warn { color: var(--warn, #c60); }

package/dist/dashboard.js

@@ -48,6 +48,9 @@ import { installDashboardSkill, parseDashboardSkillInstallRequest, parseInstallL
 import { botDefaultsPayload, botSummaryPayload } from './dashboard/bot-payload.js';
 import { isValidRoleProfileId } from './services/role-profile-store.js';
 import { mergeSafeInsightOverviews } from './services/insight/report.js';
+import { readPlatformBinding } from './platform/binding.js';
+import { startPlatformTunnelClient } from './platform/tunnel-client.js';
+import { cleanupIdleSessions, parseIdleCleanupHours } from './dashboard/session-cleanup.js';
 const SECRET_PATH = join(homedir(), '.botmux', '.dashboard-secret');
 const TOKEN_PATH = join(homedir(), '.botmux', '.dashboard-token');
 /** Per-daemon budget for the cross-daemon insight overview fan-out — bounds
@@ -792,6 +795,54 @@ const server = createServer(async (req, res) => {
             });
             return jsonRes(res, 200, { sessions });
         }
+        if (req.method === 'POST' && url.pathname === '/api/sessions/cleanup-idle') {
+            let body;
+            try {
+                body = await readJsonBody(req);
+            }
+            catch {
+                return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            }
+            const olderThanHours = parseIdleCleanupHours(body?.olderThanHours);
+            if (!olderThanHours)
+                return jsonRes(res, 400, { ok: false, error: 'invalid_threshold' });
+            // WYSIWYG: the UI scopes cleanup to the rows currently visible under the
+            // page filters and sends their sessionIds, so the closed set matches the
+            // confirmed count. We still hand the scoped rows to cleanupIdleSessions,
+            // which re-validates each is a genuine idle candidate — a stale/forged id
+            // can never close a non-idle session. Omitting sessionIds (e.g. an older
+            // client) falls back to a deployment-wide sweep. Cap the id set so a giant
+            // body can't blow up the Set build.
+            const idScope = Array.isArray(body?.sessionIds)
+                ? new Set(body.sessionIds.slice(0, 10000).map(String))
+                : null;
+            const rows = aggregator.getSessions();
+            const scoped = idScope ? rows.filter(s => idScope.has(s.sessionId)) : rows;
+            const result = await cleanupIdleSessions(scoped, olderThanHours, async (s) => {
+                try {
+                    const upstream = await proxyToDaemon(s.larkAppId, `/api/sessions/${encodeURIComponent(s.sessionId)}/close`, { method: 'POST' });
+                    const text = await upstream.text();
+                    let parsed = null;
+                    try {
+                        parsed = JSON.parse(text);
+                    }
+                    catch { /* tolerate */ }
+                    // The daemon close route always replies 200 {ok:true}; treat anything
+                    // else (incl. an unparseable/missing body) as a failure rather than a
+                    // silent success.
+                    const ok = upstream.ok && parsed?.ok === true;
+                    return {
+                        sessionId: s.sessionId,
+                        ok,
+                        error: ok ? undefined : (parsed?.error ?? `http_${upstream.status}`),
+                    };
+                }
+                catch (e) {
+                    return { sessionId: s.sessionId, ok: false, error: e?.message ?? String(e) };
+                }
+            });
+            return jsonRes(res, 200, result);
+        }
         if (req.method === 'GET' && url.pathname === '/api/insights/summary') {
             const limit = Math.min(Math.max(parseInt(url.searchParams.get('limit') ?? '200', 10) || 200, 1), 500);
             // Per-daemon timeout + isolate failures: an upstream insight parse can be
@@ -1249,7 +1300,7 @@ const server = createServer(async (req, res) => {
             return jsonRes(res, 200, { job });
         }
         let m;
-        if (req.method === 'POST' && (m = url.pathname.match(/^\/api\/sessions\/([^/]+)\/(close|locate|resume)$/))) {
+        if (req.method === 'POST' && (m = url.pathname.match(/^\/api\/sessions\/([^/]+)\/(close|locate|resume|restart|start)$/))) {
             const sid = decodeURIComponent(m[1]);
             const op = m[2];
             const owner = aggregator.ownerOf(sid);
@@ -1969,7 +2020,8 @@ const server = createServer(async (req, res) => {
             return;
         }
         // PUT /api/bots/:appId/grant-prefs — proxy to that bot's daemon. Body carries
-        // any subset of `{ restrictGrantCommands?: boolean, messageQuotaDefaultLimit?: number|null }`.
+        // any subset of `{ restrictGrantCommands?: boolean, autoGrantRequestCards?: boolean,
+        // messageQuotaDefaultLimit?: number|null }`.
         let mBotGrantPrefs;
         if (req.method === 'PUT' && (mBotGrantPrefs = url.pathname.match(/^\/api\/bots\/([^/]+)\/grant-prefs$/))) {
             const appId = decodeURIComponent(mBotGrantPrefs[1]);
@@ -2097,6 +2149,133 @@ const server = createServer(async (req, res) => {
             res.end(upstreamJson ? JSON.stringify(upstreamJson) : upstreamText);
             return;
         }
+        // Dashboard「创建会话」：建飞书群 + 拉选中的 bot，然后按协作模式给各 bot 拉起/暂存
+        // 一条 chat-scope 会话。一起开工=每个被选 bot 各起一条；lead 分配=只起 lead，由它
+        // 在群里 @ 拉起 sub bot。in_progress=立即开跑；backlog=入待办池（parked，等激活）。
+        if (req.method === 'POST' && url.pathname === '/api/sessions/create') {
+            let parsed;
+            try {
+                const chunks = [];
+                for await (const c of req)
+                    chunks.push(c);
+                parsed = JSON.parse(Buffer.concat(chunks).toString('utf8') || '{}');
+            }
+            catch {
+                return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            }
+            const content = typeof parsed.content === 'string' ? parsed.content.replace(/\s+$/u, '') : '';
+            if (!content.trim())
+                return jsonRes(res, 400, { ok: false, error: 'empty_content' });
+            if (content.length > 8000)
+                return jsonRes(res, 400, { ok: false, error: 'content_too_long' });
+            const selectedIds = Array.isArray(parsed.larkAppIds)
+                ? Array.from(new Set(parsed.larkAppIds.filter((x) => typeof x === 'string')))
+                : [];
+            if (selectedIds.length === 0)
+                return jsonRes(res, 400, { ok: false, error: 'larkAppIds_required' });
+            const mode = parsed.mode === 'lead' ? 'lead' : parsed.mode === 'all' ? 'all' : null;
+            if (!mode)
+                return jsonRes(res, 400, { ok: false, error: 'bad_mode' });
+            const column = parsed.column === 'backlog' ? 'backlog' : parsed.column === 'in_progress' ? 'in_progress' : null;
+            if (!column)
+                return jsonRes(res, 400, { ok: false, error: 'bad_column' });
+            const bindWorkingDir = typeof parsed.bindWorkingDir === 'string' && parsed.bindWorkingDir.trim()
+                ? parsed.bindWorkingDir.trim() : undefined;
+            const name = typeof parsed.name === 'string' && parsed.name.trim() ? parsed.name.trim().slice(0, 60) : undefined;
+            // 解析 creator：lead 模式 = lead bot；一起开工 = pickCreatorForGroup 在选中里挑一个在线的。
+            let creatorLarkAppId;
+            if (mode === 'lead') {
+                const leadLarkAppId = typeof parsed.leadLarkAppId === 'string' ? parsed.leadLarkAppId : '';
+                if (!leadLarkAppId || !selectedIds.includes(leadLarkAppId)) {
+                    return jsonRes(res, 400, { ok: false, error: 'bad_lead' });
+                }
+                if (!registry.getByAppId(leadLarkAppId))
+                    return jsonRes(res, 503, { ok: false, error: 'lead_offline' });
+                creatorLarkAppId = leadLarkAppId;
+            }
+            else {
+                const pick = pickCreatorForGroup(selectedIds, (id) => {
+                    const d = registry.getByAppId(id);
+                    return d ? { larkAppId: d.larkAppId, resolvedAllowedUsers: d.resolvedAllowedUsers ?? [] } : undefined;
+                });
+                if (!pick)
+                    return jsonRes(res, 503, { ok: false, error: 'no_online_daemon' });
+                creatorLarkAppId = pick.creatorLarkAppId;
+            }
+            // creator 作用域里的操作者 open_id（首个 ou_ allowedUser）——用于邀请进群 + 转群主 + @通知。
+            // 同时取 on_（union_id，租户内跨 app 稳定）做兜底邀请：lead 模式强制 creator=lead，
+            // 万一 lead 的 allowlist 没有 ou_ 条目，open_id 解析不到、操作者就进不了群——union_id
+            // 不受 app 作用域影响，仍能把人拉进来（createGroupWithBots 走 ownerUnionIds 通道）。
+            const creatorDesc = registry.getByAppId(creatorLarkAppId);
+            const allowed = creatorDesc.resolvedAllowedUsers ?? [];
+            const userOpenId = allowed.find(u => u.startsWith('ou_'));
+            const ownerUnionIds = allowed.filter(u => u.startsWith('on_'));
+            // 建群（拉所有选中 bot + 邀请操作者 + 转群主 + @通知 + 可选绑 oncall 工作目录）。
+            let groupResp = null;
+            try {
+                const groupUpstream = await proxyToDaemon(creatorLarkAppId, '/api/groups/create', {
+                    method: 'POST',
+                    headers: { 'content-type': 'application/json' },
+                    body: JSON.stringify({
+                        name,
+                        larkAppIds: selectedIds,
+                        userOpenIds: userOpenId ? [userOpenId] : [],
+                        ownerUnionIds,
+                        transferOwnerTo: userOpenId,
+                        notifyOwnerOpenId: userOpenId,
+                        bindWorkingDir,
+                    }),
+                });
+                groupResp = await groupUpstream.json().catch(() => null);
+                if (!groupUpstream.ok || !groupResp?.ok || typeof groupResp.chatId !== 'string') {
+                    return jsonRes(res, 502, { ok: false, error: groupResp?.error ?? `group_create_http_${groupUpstream.status}` });
+                }
+            }
+            catch {
+                return jsonRes(res, 502, { ok: false, error: 'group_create_proxy_failed' });
+            }
+            const chatId = groupResp.chatId;
+            const invalidBotIds = Array.isArray(groupResp.invalidBotIds) ? groupResp.invalidBotIds : [];
+            // spawn 目标：lead 模式只有 lead；一起开工是所有成功入群的选中 bot。
+            const joinedIds = selectedIds.filter(id => !invalidBotIds.includes(id) && !!registry.getByAppId(id));
+            const targets = mode === 'lead'
+                ? (joinedIds.includes(creatorLarkAppId) ? [creatorLarkAppId] : [])
+                : joinedIds;
+            if (targets.length === 0) {
+                return jsonRes(res, 200, { ok: true, chatId, shareLink: groupResp.shareLink, spawned: [], failed: [], warning: 'no_spawn_target' });
+            }
+            const bots = liveBots();
+            const nameOf = (id) => bots.find(b => b.larkAppId === id)?.botName ?? id;
+            const spawned = [];
+            const failed = [];
+            await Promise.all(targets.map(async (appId) => {
+                const role = mode === 'lead' ? 'lead' : (targets.length > 1 ? 'collab' : 'solo');
+                // lead 的 coworker = 所有 sub（除自己）；collab 的 coworker = 其它并列 bot（除自己）。
+                const coworkerIds = (mode === 'lead' ? selectedIds : targets).filter(id => id !== appId);
+                const coworkers = coworkerIds.map(id => ({ name: nameOf(id) }));
+                try {
+                    const up = await proxyToDaemon(appId, '/api/sessions/spawn', {
+                        method: 'POST',
+                        headers: { 'content-type': 'application/json' },
+                        body: JSON.stringify({
+                            chatId, content, column, role, coworkers,
+                            postBanner: appId === creatorLarkAppId,
+                        }),
+                    });
+                    const b = await up.json().catch(() => null);
+                    if (up.ok && b?.ok)
+                        spawned.push(appId);
+                    else
+                        failed.push({ larkAppId: appId, error: b?.error ?? `http_${up.status}` });
+                }
+                catch (e) {
+                    failed.push({ larkAppId: appId, error: e?.message ?? String(e) });
+                }
+            }));
+            return jsonRes(res, 200, {
+                ok: true, chatId, shareLink: groupResp.shareLink, mode, column, spawned, failed,
+            });
+        }
         // Public SSE — relays aggregator's listener events
         if (req.method === 'GET' && url.pathname === '/events') {
             res.writeHead(200, {
@@ -2155,6 +2334,7 @@ listenWithProbe({
         logger.warn(`[dashboard] Failed to persist port to ${PORT_PATH}: ${e.message}`);
     }
     logger.info(`[dashboard] listening on ${config.dashboard.host}:${port}`);
+    startPlatformTunnelIfBound();
 }).catch((err) => {
     logger.error(`[dashboard] could not bind near ${config.dashboard.host}:${config.dashboard.port} after probing — set BOTMUX_DASHBOARD_PORT to a free port. ${err.message}`);
     process.exit(1);
@@ -2169,12 +2349,43 @@ const federationSync = setInterval(() => {
         .catch(() => { });
 }, 2 * 60 * 1000);
 federationSync.unref();
+// 中心化平台隧道（已绑定才启动；每台机器一个，跑在 dashboard 进程里）
+let platformTunnel = null;
+function readBotmuxVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(join(dirname(__dirname), 'package.json'), 'utf8'));
+        return pkg.version || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function startPlatformTunnelIfBound() {
+    try {
+        const binding = readPlatformBinding();
+        if (!binding)
+            return;
+        const version = readBotmuxVersion();
+        platformTunnel = startPlatformTunnelClient({
+            binding,
+            getDashboardPort: () => boundDashboardPort,
+            getDashboardToken: () => activeToken,
+            getVersion: () => version,
+            log: (msg, extra) => logger.info(`[platform-tunnel] ${msg}${extra ? ' ' + JSON.stringify(extra) : ''}`),
+        });
+        logger.info(`[platform-tunnel] 绑定到 ${binding.platformUrl}，启动隧道`);
+    }
+    catch (e) {
+        logger.warn(`[platform-tunnel] 启动失败: ${e.message}`);
+    }
+}
 // Graceful shutdown
 function shutdown() {
     for (const off of subs.values())
         off();
     subs.clear();
     registry.stop();
+    platformTunnel?.stop();
     server.close(() => process.exit(0));
     // Hard-exit fallback after 5s
     setTimeout(() => process.exit(0), 5_000).unref();