botmux 3.10.0 → 3.11.0

package/dist/dashboard-web/style.css

@@ -2287,6 +2287,7 @@ button.primary {
 .status-analyzing { background: var(--warning-soft); color: var(--warning); }
 .status-starting { background: var(--success-soft); color: var(--success); }
 .status-limited { background: var(--danger-soft); color: var(--danger); }
+.status-stalled { background: var(--danger-soft); color: var(--danger); }
 
 /* ── Sessions board — "control-room signal wall" ─────────────────────────────
    Each column is a signal channel: a LED dot + uppercase channel label in the
@@ -4363,6 +4364,18 @@ td code,
   justify-content: flex-start;
 }
 
+#g-drawer.groups-create-modal .g-feed-group-new {
+  display: grid;
+  gap: 6px;
+  margin-top: 10px;
+}
+
+#g-drawer.groups-create-modal .g-feed-group-new > span {
+  color: var(--muted);
+  font-size: 12px;
+  font-weight: 700;
+}
+
 #g-drawer.groups-create-modal .g-create-status:empty {
   display: none;
 }
@@ -9201,6 +9214,7 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   color: var(--warning);
 }
 .status-limited { background: var(--danger-soft); color: var(--danger); }
+.status-stalled { background: var(--danger-soft); color: var(--danger); }
 
 /* ── 玻璃面板（dark 下生效；light 保持实底）─────────────────────────────── */
 :root[data-theme="dark"] .panel,
@@ -9901,6 +9915,7 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   border: 1px solid var(--border-soft);
   background: var(--surface);
   box-shadow: var(--shadow);
+  position: relative;
 }
 :root[data-theme="dark"] .mate {
   background: rgba(255, 255, 255, 0.045);
@@ -9913,8 +9928,33 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
 }
 .mate-off { opacity: 0.55; }
 .mate-top { display: flex; align-items: center; gap: 11px; }
+.mate-console {
+  position: absolute;
+  top: 11px;
+  right: 12px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 26px;
+  height: 26px;
+  border-radius: 8px;
+  color: var(--faint);
+  background: var(--surface-muted);
+  border: 1px solid var(--border-soft);
+  text-decoration: none;
+  transition: color 0.15s, border-color 0.15s, background 0.15s;
+}
+.mate-console:hover {
+  color: var(--accent);
+  background: var(--accent-soft);
+  border-color: color-mix(in srgb, var(--accent) 42%, transparent);
+}
+:root[data-theme="dark"] .mate-console { background: rgba(255, 255, 255, 0.07); border-color: rgba(255, 255, 255, 0.1); }
 .mate-id { min-width: 0; }
 .mate-id b { display: block; font-size: 14px; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+/* 只给名字这一行右侧留出 ↗ 按钮宽度：长名字（如「哆啦A(dev)-claude」）提前省略号，
+ * 不会滑到绝对定位的按钮底下；cliId 标签在下一行、按钮只占顶部，均不受影响。 */
+.mate-console ~ .mate-top .mate-id b { padding-right: 24px; }
 .mate-role {
   display: inline-block;
   margin-top: 3px;
@@ -9946,6 +9986,15 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   font-size: 11px;
   color: var(--faint);
 }
+/* 右侧活跃时间不换行、不被长状态 tag（如「执行中 · N 会话」）挤成两行；
+ * 窄卡 + 双长文本时由状态 tag 收缩省略来吸收溢出（时间短、优先保住）。 */
+.mate-foot > span { white-space: nowrap; flex: 0 0 auto; }
+.mate-foot .tag {
+  min-width: 0;
+  flex: 0 1 auto;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
 .tag {
   padding: 3px 10px;
   border-radius: var(--radius-sm);
@@ -10514,6 +10563,22 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   color: var(--faint);
   font-size: 10.5px;
 }
+.bd-profile-appid-row {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-wrap: wrap;
+}
+.bd-console-link {
+  display: inline-flex;
+  align-items: center;
+  gap: 3px;
+  font-size: 11px;
+  font-weight: 600;
+  color: var(--accent);
+  text-decoration: none;
+}
+.bd-console-link:hover { color: var(--accent-strong); text-decoration: underline; }
 /* 机器人改名（档案头 ✎ → 行内编辑器） */
 .bd-name-edit {
   position: absolute;
@@ -10599,6 +10664,7 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   align-items: center;
   justify-content: center;
   padding: 20px;
+  overflow: auto;
   background: var(--modal-backdrop);
   backdrop-filter: blur(3px);
 }
@@ -10606,6 +10672,11 @@ button.contrast:hover { background: var(--danger-soft); border-color: var(--dang
   position: relative;
   display: grid;
   gap: 12px;
+  /* margin:auto 让 modal 在极矮视口高于视口时,靠 overlay 的 overflow:auto 也能
+     完整滚到顶部。纯 flex 居中(align-items:center)下,超高子元素会上下等量溢出,
+     顶部溢出无法滚回(flexbox 通用行为),标题/关闭按钮够不着;auto margin 在负
+     可用空间下归 0、子元素落到滚动起点,正常视口仍由 auto margin 居中。 */
+  margin: auto;
   width: min(360px, 92vw);
   padding: 18px;
   border-radius: var(--radius-lg);
@@ -23149,6 +23220,20 @@ dialog select[multiple]:hover:not(:disabled) {
 }
 .bot-defaults-page .toggle-row .switch {
   margin-top: 0;
+  transition: background 140ms ease, transform 100ms ease;
+}
+.bot-defaults-page .toggle-row:active:not(:has(input:disabled)) .switch {
+  transform: scale(0.96);
+}
+.bot-defaults-page .toggle-row input:focus-visible + .switch {
+  outline: 2px solid var(--accent);
+  outline-offset: 3px;
+}
+.bot-defaults-page .toggle-row:has(input:disabled) {
+  cursor: not-allowed;
+}
+.bot-defaults-page .toggle-row input:disabled ~ .toggle-tx {
+  color: var(--faint);
 }
 
 .bot-defaults-page .bd-tile :where(input[type="text"], input[type="number"], textarea) {
@@ -23231,6 +23316,117 @@ dialog select[multiple]:hover:not(:disabled) {
   margin: 0;
 }
 
+.bot-defaults-page .bd-grant-defaults {
+  margin-top: 16px;
+}
+
+.bot-defaults-page .bd-grant-defaults > .actions {
+  justify-content: flex-end;
+}
+
+.bot-defaults-page .bd-field-error {
+  display: block;
+  margin-top: 6px;
+  color: var(--danger);
+  font-size: 11px;
+  line-height: 1.5;
+}
+
+.bot-defaults-page .bd-grant-defaults input[aria-invalid="true"] {
+  border-color: var(--danger);
+}
+
+.bot-defaults-page .bd-card-settings {
+  display: grid;
+  gap: 16px;
+  margin-top: 12px;
+}
+
+.bot-defaults-page .bd-card-setting-group {
+  min-width: 0;
+}
+
+.bot-defaults-page .bd-card-setting-group + .bd-card-setting-group {
+  padding-top: 16px;
+  border-top: 1px solid color-mix(in srgb, var(--border-soft) 82%, transparent);
+}
+
+.bot-defaults-page .bd-card-setting-heading {
+  margin: 0 0 8px;
+  color: var(--fg);
+  font-size: 12px;
+  font-weight: 700;
+  line-height: 1.35;
+}
+
+.bot-defaults-page .bd-card-setting-copy {
+  margin: -2px 0 8px;
+  color: var(--muted);
+  font-size: 11.5px;
+  line-height: 1.5;
+}
+
+.bot-defaults-page .bd-card-settings .toggle-row {
+  min-width: 0;
+  margin: 0;
+}
+
+.bot-defaults-page .bd-card-settings .toggle-tx small {
+  display: block;
+  overflow: visible;
+  margin-top: 3px;
+  color: var(--muted);
+  font-size: 11.5px;
+  line-height: 1.45;
+  -webkit-box-orient: initial;
+  -webkit-line-clamp: unset;
+}
+
+.bot-defaults-page .bd-card-primary-toggle {
+  padding: 4px 0;
+}
+
+.bot-defaults-page .bd-card-dependent {
+  display: grid;
+  gap: 7px;
+  margin: 8px 0 0 48px;
+  padding: 10px 12px;
+  border-left: 2px solid color-mix(in srgb, var(--accent) 58%, var(--border-soft));
+  border-radius: 0 var(--radius-md) var(--radius-md) 0;
+  background: color-mix(in srgb, var(--accent) 5%, transparent);
+}
+
+.bot-defaults-page .bd-card-dependent[hidden] {
+  display: none;
+}
+
+.bot-defaults-page .bd-card-dependent .toggle-row {
+  padding: 0;
+}
+
+.bot-defaults-page .bd-card-mode-note {
+  margin: 0 0 0 48px;
+  color: var(--muted);
+  font-size: 11.5px;
+  line-height: 1.5;
+}
+
+.bot-defaults-page .bd-card-setting-group > .bd-row {
+  margin-top: 0;
+}
+
+.bot-defaults-page .bd-card-control-list {
+  display: grid;
+  gap: 10px;
+  margin-top: 10px;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .bot-defaults-page .toggle-row .switch {
+    transition: none;
+  }
+}
+
 .bot-defaults-page .bd-substitute-target-list {
   display: grid;
   gap: 8px;
@@ -23333,6 +23529,10 @@ dialog select[multiple]:hover:not(:disabled) {
     grid-template-columns: 1fr;
   }
 
+  .bot-defaults-page .bd-card-dependent {
+    margin-left: 0;
+  }
+
   .bot-defaults-page .bd-runtime-fields {
     grid-template-columns: 1fr;
   }
@@ -25769,3 +25969,58 @@ button.ui-refresh-button.is-loading .ui-action-icon {
   color: var(--danger, #e5484d) !important;
   border-color: color-mix(in srgb, var(--danger, #e5484d) 48%, var(--border-soft)) !important;
 }
+.feed-group-auth-overlay {
+  position: fixed;
+  inset: 0;
+  z-index: 10000;
+  display: grid;
+  place-items: center;
+  padding: 20px;
+  background: rgb(15 23 42 / 62%);
+}
+
+.feed-group-auth-card {
+  width: min(520px, 100%);
+  padding: 24px;
+  border: 1px solid var(--border);
+  border-radius: 14px;
+  background: var(--panel, #fff);
+  color: #111827;
+  box-shadow: 0 24px 70px rgb(0 0 0 / 28%);
+}
+
+.feed-group-auth-card h3 { margin-top: 0; }
+.feed-group-auth-card p,
+.feed-group-auth-card label,
+.feed-group-auth-card label span { color: #111827; }
+.feed-group-auth-card label { display: grid; gap: 8px; margin-top: 18px; }
+.feed-group-auth-card input { width: 100%; box-sizing: border-box; color: #111827; background: #fff; }
+.feed-group-auth-card input::placeholder { color: #4b5563; opacity: 1; }
+.feed-group-auth-card .actions { margin-top: 20px; justify-content: flex-end; }
+.feed-group-auth-open {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 42px;
+  margin-top: 4px;
+  padding: 0 20px;
+  border: 1px solid #2563eb;
+  border-radius: 8px;
+  color: #fff;
+  background: #2563eb;
+  font-weight: 700;
+  cursor: pointer;
+}
+
+.feed-group-auth-open:hover { background: #1d4ed8; }
+
+.cs-advanced-fields .cs-feed-group {
+  min-width: 0;
+  margin: 0;
+  padding: 0;
+  border: 0;
+}
+
+.cs-advanced-fields .cs-feed-group > legend {
+  padding: 0;
+}

package/dist/dashboard.js

@@ -64,12 +64,14 @@ import { hd2dAssetPath, hd2dStatus, startHd2dDownload } from './dashboard/hd2d-a
 import { buildSkillInstallAuditSummary, installLocalSkillLinks, readSkillRegistry, removeInstalledSkill, removeInstalledSkills, updateInstalledSkillAsync, } from './services/skill-registry-store.js';
 import { redactGitUrlCredentials } from './core/skills/sources.js';
 import { effectiveDefaultWorkingDir, getBot, loadBotConfigs, parseBotConfigsFromText } from './bot-registry.js';
+import { addChatToFeedGroup, createFeedGroup, FEED_GROUP_SCOPES, FeedGroupApiError, listFeedGroups } from './dashboard/feed-groups.js';
+import { generateAuthUrl, handleCallbackUrl, isCallbackUrl } from './utils/user-token.js';
 import { findEntryIndex, readRawConfig, requireConfigPath, writeRawConfigAtomic } from './services/config-store.js';
 import { emitCodexNotifierOutboxItem, installCodexNotifierHook, isCodexNotifierWorkerStateFresh, isCodexNotifierHookInstalled, listCodexNotifierOutbox, readCodexNotifierWorkerState, resolveCodexNotifierConfig, runCodexSideConversationMonitor, runCodexNotifierWorkerSupervisor, } from './features/codex-notifier/index.js';
 import { discoverNativeCliSkillGroups } from './core/skills/discovery.js';
 import { analyzeSkillReferences } from './core/skills/references.js';
 import { discoverDashboardSkills, installDashboardSkill, parseDashboardSkillInstallRequest, parseInstallLocalLinksSources, MAX_LOCAL_LINK_SOURCES } from './dashboard/skill-install-request.js';
-import { botDefaultsPayload, botSummaryPayload } from './dashboard/bot-payload.js';
+import { botDefaultsPayload, botSummaryPayload, brandMapByAppId } from './dashboard/bot-payload.js';
 import { handleVcMeetingConsumerProfilesGet, handleVcMeetingConsumerProfilesPut, } from './dashboard/vc-consumer-profiles-api.js';
 import { buildVcMeetingConsumerBootstrapAgents, seedVcMeetingDefaultConsumerProfile, } from './services/vc-meeting-consumer-profile-bootstrap.js';
 import { evaluateVcMeetingConsumerIsolation } from './services/vc-meeting-consumer-isolation.js';
@@ -91,7 +93,7 @@ import { maybeInstallTraexPluginOnSettingsChange, TRAEX_RECOMMENDED_SOURCE, TRAE
 import { deriveCreateGroupName, selectCreateSessionTargets } from './core/session-create.js';
 import { parseDashboardImageUploads } from './core/dashboard-images.js';
 import { checkLarkCliVersion, MIN_LARK_CLI_VERSION_FOR_VC_BOT } from './vc-agent/polling-source.js';
-import { larkHosts } from './im/lark/lark-hosts.js';
+import { larkHosts, normalizeBrand } from './im/lark/lark-hosts.js';
 import { buildResourceMonitorDaemonSeeds, createResourceMonitorService, handleResourceMonitorApi, toResourceMonitorSessionSeed } from './dashboard/resource-monitor-service.js';
 import { readPluginRegistry } from './services/plugin-registry-store.js';
 import { pluginRuntimeDir, resolvePluginPath } from './core/plugins/paths.js';
@@ -1857,6 +1859,15 @@ function configuredCliIds() {
         return new Map();
     }
 }
+/**
+ * per-bot brand（feishu / lark）按 appId 的映射,供前端派生飞书后台深链 host。
+ * 失败安全逻辑在 brandMapByAppId（返回空 Map,与 configuredCliIds /
+ * configuredBotAgentFields 同款兜底,见其 doc）——冷缓存 /api/groups 与
+ * /api/bots 仍走 DaemonRegistry 降级 roster,前端 normalizeBrand 兜底 feishu。
+ */
+function configuredBrands() {
+    return brandMapByAppId(loadBotConfigs);
+}
 function configuredBotAgentFields() {
     try {
         return new Map(loadBotConfigs().map(b => [b.larkAppId, {
@@ -2137,7 +2148,11 @@ async function buildGroupsMatrix() {
         return (a.name ?? a.chatId).localeCompare(b.name ?? b.chatId);
     })
         .map(({ _firstSeenAt, ...rest }) => rest);
-    const bots = onlineBots.map(botSummaryPayload);
+    // brand 是 bots.json 的 per-bot 字段（DaemonRegistry 的心跳态不带它），
+    // 从 configuredBrands（失败安全,返空 Map）按 appId 补进 summary,供前端
+    // 派生飞书后台深链 host；冷缓存 / 缺配置时前端 normalizeBrand 兜底 feishu。
+    const brandByAppId = configuredBrands();
+    const bots = onlineBots.map(d => botSummaryPayload({ ...d, brand: brandByAppId.get(d.larkAppId) }));
     return { chats, bots };
 }
 /**
@@ -4322,7 +4337,14 @@ const server = createServer(async (req, res) => {
         // PUT  /api/bots/:appId/default-oncall   — proxy to that bot's daemon
         if (req.method === 'GET' && url.pathname === '/api/bots') {
             const agentFields = configuredBotAgentFields();
-            const onlineBots = [...registry.list()].map(b => withConfiguredCliId(b, agentFields)).sort((a, b) => a.botIndex - b.botIndex);
+            // brand 是 bots.json 的 per-bot 字段（DaemonRegistry 心跳态不带它），
+            // 从 configuredBrands（失败安全,返空 Map）按 appId 补进每个 descriptor,
+            // 供前端派生飞书后台深链 host;缺配置时前端 normalizeBrand 兜底 feishu。
+            const brandByAppId = configuredBrands();
+            const onlineBots = [...registry.list()]
+                .map(b => withConfiguredCliId(b, agentFields))
+                .map(b => ({ ...b, brand: brandByAppId.get(b.larkAppId) }))
+                .sort((a, b) => a.botIndex - b.botIndex);
             const out = await Promise.all(onlineBots.map(async (d) => {
                 try {
                     const r = await fetchDaemonIpc(d.ipcPort, '/api/bot-default-oncall');
@@ -4759,7 +4781,7 @@ const server = createServer(async (req, res) => {
         }
         // PUT /api/bots/:appId/grant-prefs — proxy to that bot's daemon. Body carries
         // any subset of `{ restrictGrantCommands?: boolean, autoGrantRequestCards?: boolean,
-        // messageQuotaDefaultLimit?: number|null }`.
+        // messageQuotaDefaultLimit?: number|null, grantDefaultDurationMs?: number|null }`.
         let mBotGrantPrefs;
         if (req.method === 'PUT' && (mBotGrantPrefs = url.pathname.match(/^\/api\/bots\/([^/]+)\/grant-prefs$/))) {
             const appId = decodeURIComponent(mBotGrantPrefs[1]);
@@ -4845,6 +4867,72 @@ const server = createServer(async (req, res) => {
             res.end(await upstream.text());
             return;
         }
+        // Native Feishu/Lark conversation labels (feed groups). These APIs are
+        // user-token-only, so the frontend pins subsequent create/assign calls to
+        // the same app whose OAuth token produced this list.
+        if (req.method === 'GET' && url.pathname === '/api/feed-groups/auth-url') {
+            const appId = url.searchParams.get('larkAppId') ?? '';
+            let bot;
+            try {
+                bot = loadBotConfigs().find(item => !item.apiOnly && (!appId || item.larkAppId === appId));
+            }
+            catch { /* handled below */ }
+            if (!bot)
+                return jsonRes(res, 404, { ok: false, error: 'bot_not_found' });
+            const { authUrl } = generateAuthUrl(bot.larkAppId, bot.larkAppSecret, normalizeBrand(bot.brand), [...FEED_GROUP_SCOPES]);
+            return jsonRes(res, 200, { ok: true, larkAppId: bot.larkAppId, authUrl });
+        }
+        if (req.method === 'POST' && url.pathname === '/api/feed-groups/oauth-callback') {
+            let body;
+            try {
+                body = await readJsonBody(req);
+            }
+            catch {
+                return jsonRes(res, 400, { ok: false, error: 'bad_json' });
+            }
+            const callbackUrl = typeof body.callbackUrl === 'string' ? body.callbackUrl.trim() : '';
+            if (!isCallbackUrl(callbackUrl)) {
+                return jsonRes(res, 400, { ok: false, error: 'invalid_callback_url', message: '请粘贴完整的 127.0.0.1 OAuth 回调 URL。' });
+            }
+            const message = await handleCallbackUrl(callbackUrl);
+            const ok = typeof message === 'string' && message.startsWith('✅');
+            return jsonRes(res, ok ? 200 : 400, { ok, error: ok ? undefined : 'oauth_exchange_failed', message });
+        }
+        if (req.method === 'GET' && url.pathname === '/api/feed-groups') {
+            const requestedAppId = url.searchParams.get('larkAppId') ?? '';
+            let bots;
+            try {
+                bots = loadBotConfigs().filter(bot => !bot.apiOnly);
+            }
+            catch {
+                return jsonRes(res, 500, { ok: false, error: 'bot_config_unavailable' });
+            }
+            const ordered = requestedAppId
+                ? [...bots.filter(bot => bot.larkAppId === requestedAppId), ...bots.filter(bot => bot.larkAppId !== requestedAppId)]
+                : bots;
+            let loginRequired = false;
+            for (const bot of ordered) {
+                try {
+                    const groups = await listFeedGroups(bot);
+                    return jsonRes(res, 200, { ok: true, larkAppId: bot.larkAppId, groups });
+                }
+                catch (error) {
+                    if (error instanceof FeedGroupApiError && error.code === 'user_login_required') {
+                        loginRequired = true;
+                        continue;
+                    }
+                    if (requestedAppId && bot.larkAppId === requestedAppId) {
+                        const e = error;
+                        return jsonRes(res, e.status ?? 502, { ok: false, error: e.code ?? 'feed_group_list_failed', message: e.message });
+                    }
+                }
+            }
+            return jsonRes(res, loginRequired ? 401 : 503, {
+                ok: false,
+                error: loginRequired ? 'user_login_required' : 'feed_group_api_unavailable',
+                message: loginRequired ? '尚未获得飞书标签权限，请点击「立即授权」按钮进行授权。' : '没有可用于读取标签的飞书机器人。',
+            });
+        }
         // Create a new chat — pick a creator from the user-selected larkAppIds
         // (Feishu makes the calling bot the implicit first member, so picking
         // anything else would silently add an unwanted bot). Auto-invite the
@@ -4938,6 +5026,26 @@ const server = createServer(async (req, res) => {
                 else {
                     upstreamJson.autoInvitedOpenId = autoInvited;
                 }
+                const existingFeedGroupId = typeof parsed.feedGroupId === 'string' ? parsed.feedGroupId.trim() : '';
+                const newFeedGroupName = typeof parsed.newFeedGroupName === 'string' ? parsed.newFeedGroupName.trim() : '';
+                const feedGroupAppId = typeof parsed.feedGroupAppId === 'string' ? parsed.feedGroupAppId.trim() : '';
+                if (upstream.ok && upstreamJson.ok && typeof upstreamJson.chatId === 'string' && (existingFeedGroupId || newFeedGroupName)) {
+                    try {
+                        const feedBot = loadBotConfigs().find(bot => bot.larkAppId === feedGroupAppId && !bot.apiOnly);
+                        if (!feedBot) {
+                            upstreamJson.feedGroupError = '读取标签所用的机器人当前不可用。群聊已创建，但未加入标签。';
+                        }
+                        else {
+                            const targetId = existingFeedGroupId || await createFeedGroup(feedBot, newFeedGroupName);
+                            await addChatToFeedGroup(feedBot, targetId, upstreamJson.chatId);
+                            upstreamJson.feedGroupId = targetId;
+                            upstreamJson.feedGroupName = newFeedGroupName || undefined;
+                        }
+                    }
+                    catch (error) {
+                        upstreamJson.feedGroupError = error instanceof Error ? error.message : String(error);
+                    }
+                }
             }
             if (upstream.ok && upstreamJson?.ok)
                 groupsMatrixSnapshot.invalidate();
@@ -5034,11 +5142,31 @@ const server = createServer(async (req, res) => {
             }
             const chatId = groupResp.chatId;
             const invalidBotIds = Array.isArray(groupResp.invalidBotIds) ? groupResp.invalidBotIds : [];
+            const existingFeedGroupId = typeof parsed.feedGroupId === 'string' ? parsed.feedGroupId.trim() : '';
+            const newFeedGroupName = typeof parsed.newFeedGroupName === 'string' ? parsed.newFeedGroupName.trim() : '';
+            let feedGroupId = '';
+            let feedGroupError = '';
+            if (existingFeedGroupId || newFeedGroupName) {
+                const feedGroupAppId = typeof parsed.feedGroupAppId === 'string' ? parsed.feedGroupAppId.trim() : '';
+                try {
+                    const feedBot = loadBotConfigs().find(bot => bot.larkAppId === feedGroupAppId && !bot.apiOnly);
+                    if (!feedBot) {
+                        feedGroupError = '读取标签所用的机器人当前不可用。';
+                    }
+                    else {
+                        feedGroupId = existingFeedGroupId || await createFeedGroup(feedBot, newFeedGroupName);
+                        await addChatToFeedGroup(feedBot, feedGroupId, chatId);
+                    }
+                }
+                catch (error) {
+                    feedGroupError = error instanceof Error ? error.message : String(error);
+                }
+            }
             // spawn 目标：lead 模式只有 lead；一起开工是所有成功入群的选中 bot。
             const joinedIds = selectedIds.filter(id => !invalidBotIds.includes(id) && !!registry.getByAppId(id));
             const targets = selectCreateSessionTargets(mode, joinedIds, creatorLarkAppId);
             if (targets.length === 0) {
-                return jsonRes(res, 200, { ok: true, chatId, shareLink: groupResp.shareLink, spawned: [], failed: [], warning: 'no_spawn_target' });
+                return jsonRes(res, 200, { ok: true, chatId, shareLink: groupResp.shareLink, spawned: [], failed: [], warning: 'no_spawn_target', feedGroupId, feedGroupError });
             }
             const bots = liveBots();
             const nameOf = (id) => bots.find(b => b.larkAppId === id)?.botName ?? id;
@@ -5070,7 +5198,7 @@ const server = createServer(async (req, res) => {
                 }
             }));
             return jsonRes(res, 200, {
-                ok: true, chatId, shareLink: groupResp.shareLink, mode, column, spawned, failed,
+                ok: true, chatId, shareLink: groupResp.shareLink, mode, column, spawned, failed, feedGroupId, feedGroupError,
             });
         }
         // Public SSE — relays aggregator's listener events
@@ -5127,6 +5255,41 @@ const server = createServer(async (req, res) => {
             jsonRes(res, 500, { error: String(err) });
     }
 });
+// OAuth loopback callback for browsers running on the same machine as BotMux.
+// Remote-browser deployments cannot reach this loopback listener; their
+// Dashboard keeps the manual callback-URL paste flow as a fallback.
+const oauthCallbackServer = createServer(async (req, res) => {
+    const url = new URL(req.url ?? '/', 'http://127.0.0.1:9768');
+    if (req.method !== 'GET' || url.pathname !== '/callback') {
+        res.writeHead(404, { 'content-type': 'text/plain; charset=utf-8' });
+        return res.end('Not found');
+    }
+    let ok = false;
+    try {
+        const message = await handleCallbackUrl(url.toString());
+        ok = typeof message === 'string' && message.startsWith('✅');
+    }
+    catch (error) {
+        logger.warn(`[dashboard] OAuth loopback callback failed: ${error.message}`);
+    }
+    res.writeHead(ok ? 200 : 400, {
+        'content-type': 'text/html; charset=utf-8',
+        'cache-control': 'no-store',
+    });
+    return res.end(`<!doctype html><meta charset="utf-8"><title>${ok ? '授权成功' : '授权失败'}</title><style>body{font-family:system-ui,sans-serif;max-width:560px;margin:80px auto;padding:24px;color:#111827}h1{font-size:28px}</style><h1>${ok ? '授权成功' : '授权失败'}</h1><p>${ok ? 'BotMux 已完成授权。你可以关闭此页面并返回 Dashboard。' : '授权链接无效或已过期。请返回 Dashboard 后重新发起授权。'}</p>`);
+});
+oauthCallbackServer.on('error', error => {
+    const code = error.code;
+    if (code === 'EADDRINUSE') {
+        logger.warn('[dashboard] OAuth loopback port 127.0.0.1:9768 is already in use; remote/manual callback fallback remains available');
+    }
+    else {
+        logger.warn(`[dashboard] OAuth loopback server error: ${error.message}`);
+    }
+});
+oauthCallbackServer.listen(9768, '127.0.0.1', () => {
+    logger.info('[dashboard] OAuth loopback callback listening on 127.0.0.1:9768');
+});
 // Web terminal WebSocket reverse-proxy: bridge `/s/*` upgrade requests through to
 // the local terminal proxy (which in turn bridges to the session worker). Raw
 // socket-to-socket bridge: dial 127.0.0.1:<terminalProxyPort>, replay the upgrade
@@ -5478,6 +5641,8 @@ function shutdown() {
     resourceMonitor.stop();
     platformTunnel?.stop();
     debugTerminalManager.shutdown();
+    if (oauthCallbackServer.listening)
+        oauthCallbackServer.close();
     server.close(() => process.exit(gracefulProcessExitCode()));
     // Hard-exit fallback after 5s
     setTimeout(() => process.exit(gracefulProcessExitCode()), 5_000).unref();