botmux 3.11.0 → 3.12.1

package/dist/cli/dashboard-endpoint.js

@@ -6,7 +6,7 @@ import { cliAuthBind, loadDashboardSecret, signCliAuth } from '../dashboard/auth
  * Classify a 404 from a `/__cli/*` request. A genuine "no token yet" only comes
  * from `/__cli/current` carrying `{ error: 'no_active_token' }`; everything else
  * means the port is answering for some other service (daemon IPC, a stray HTTP
- * server, …), not the dashboard rotate/current routes.
+ * server, …), not one of the dashboard CLI routes.
  */
 export function classifyDashboard404(path, bodyText) {
     let body = null;

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAmmHA,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAulPtE;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,qBAAqB,EAAE,SAAS,CAAC,EAC9F,KAAK,EAAE,MAAM,EACb,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC,GACzF,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0I7B"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAoqHA,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnG,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAqmPtE;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,qBAAqB,EAAE,SAAS,CAAC,EAC9F,KAAK,EAAE,MAAM,EACb,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,2BAA2B,EAAE,UAAU,GAAG,IAAI,CAAC,GACzF,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA0I7B"}

package/dist/cli.js

@@ -37,7 +37,7 @@ import { validateWorkingDir } from './core/working-dir.js';
 import { findAncestorSessionContext as findLiveAncestorSessionContext, resolveSessionContext, } from './core/session-marker.js';
 import { resolveBotmuxDataDir } from './core/data-dir.js';
 import { dashboardSecretPath } from './core/dashboard-secret.js';
-import { acceptedDispatchBotAppIds, activeConversationBotOpenIds, appendDispatchReportProtocol, appendLegacyDispatchReportProtocol, parseDispatchBotSpec, buildDispatchMessages, buildRepoPrimeText, buildReportContent, eligibleAutoMentionAliases, findDispatchRegistryEntry, foldableChatSessionAppIds, offTopicSubBotTopic, resolveReportPlacement, resolveReportRecipient, resolveReportTarget, resolveSendTarget, threadRootForReachability } from './core/dispatch.js';
+import { acceptedDispatchBotAppIds, activeConversationBotOpenIds, buildDispatchCompletionBrief, parseDispatchBotSpec, buildDispatchMessages, buildRepoPrimeText, buildReportContent, eligibleAutoMentionAliases, findDispatchRegistryEntry, foldableChatSessionAppIds, offTopicSubBotTopic, resolveReportPlacement, resolveReportRecipient, resolveReportTarget, resolveSendTarget, threadRootForReachability } from './core/dispatch.js';
 import { pickTurnReplyTarget, collectTurnWindowParticipants } from './core/reply-target.js';
 import { recordDispatchRegistryEntry } from './core/dispatch-registry.js';
 import { enableAutostart, disableAutostart, autostartStatus, refreshAutostart } from './autostart.js';
@@ -49,13 +49,14 @@ import { checkCliAvailability, hasAgentLaunchConfigChanged } from './setup/cli-a
 import { resolveSetupAppName } from './setup/app-name.js';
 import { blocksSetupBotStart, classifySetupOpenPlatformOutcome, scriptedSetupOpenPlatformReuseOnly, setupOpenPlatformOutcomeJson, setupOpenPlatformRetryCommand, } from './setup/open-platform-outcome.js';
 import { buildBotFromAddFlags, editInputFromFlags, isScriptedSetupInvocation, maskAppSecret, parseSetupCommand, SETUP_CLI_USAGE, } from './setup/setup-args.js';
+import { detectUnusableOwnerEntries, normalizeManagedOwnerEntries, resolveScannerAllowedUser, } from './setup/owner-identity.js';
 import { interactiveSelect, pickChoice, pickCliSelection } from './setup/interactive-select.js';
 import { buildPreset, serializePreset, presetFilename } from './setup/agent-preset.js';
 import { validateCodexAppManagedSendOrigin, } from './utils/codex-app-dispatch-ledger.js';
 import { hasProtectedSessionMutationOwnership } from './core/session-mutation-guard.js';
 import { logger } from './utils/logger.js';
 import { withFileLock, withFileLockSync } from './utils/file-lock.js';
-import { scrubClaudeSessionMarkerEnv, scrubSessionCliHomeEnv } from './utils/child-env.js';
+import { scrubClaudeSessionMarkerEnv, scrubSessionCliHomeEnv, scrubWorkflowWorkerEnv } from './utils/child-env.js';
 import { scheduleTimeZone } from './utils/timezone.js';
 import { expandHomePath, invalidWorkingDirs } from './utils/working-dir.js';
 import { firstPositional } from './cli/arg-utils.js';
@@ -82,6 +83,7 @@ import { assertIncludePm2RestartAdmission } from './cli/pm2-god-admission.js';
 import { requestAttestedDaemonShutdown, requestAttestedDaemonShutdownBatch, } from './cli/supervisor-shutdown-client.js';
 import { assertDaemonPm2GracefulExitPolicy, assertConfiguredPm2FleetReady, assertExactAttestedDaemonSet, classifyStartBotFleetAdmission, normalizeRawPm2StopExitCodes, reconcileLatePm2StartPublication, runBoundedPm2StartTransaction, } from './cli/pm2-start-transaction.js';
 import { callDashboard } from './cli/dashboard-endpoint.js';
+import { DASHBOARD_COMMAND_USAGE, executeDashboardCommand, formatDashboardFallbackFailure, } from './cli/dashboard-command.js';
 import { globalInstallUpdateLockTargetIn, installLatestBotmuxSync } from './core/maintenance.js';
 import { formatGlobalInstallCommand, resolveGlobalInstallPlan, UnsupportedGlobalInstallError, } from './utils/global-install.js';
 import { loadDashboardSecret } from './dashboard/auth.js';
@@ -96,7 +98,7 @@ import { formatBotInfoEntriesForCli, formatChatBotsForCli, } from './cli/bots-li
 import { ensureBotChatGrantMatrix, requestExactChatGrant } from './cli/exact-chat-grant-client.js';
 import { buildFooterAddressing, hasKnownBotMention, knownBotOpenIdsFromCrossRef, orderedFooterRecipients, stripCodeSpans, } from './utils/bot-routing.js';
 import { isLocale, localeForBot, setDefaultLocale, SUPPORTED_LOCALES, t } from './i18n/index.js';
-import { chatAppLink, larkHosts, normalizeBrand, sdkDomain } from './im/lark/lark-hosts.js';
+import { chatAppLink, larkHosts, normalizeBrand } from './im/lark/lark-hosts.js';
 import { mergeDashboardConfig, mergeGlobalConfig, readGlobalConfig, setGlobalLocale, globalConfigPath } from './global-config.js';
 import { createWhiteboard, ensureDefaultWhiteboard, getWhiteboard, listWhiteboards, readWhiteboard, whiteboardEnabled, whiteboardPath, } from './services/whiteboard-store.js';
 import { buildBridgeSendMarkerContent, buildBridgeSendPreviewText, } from './services/bridge-fallback-gate.js';
@@ -201,6 +203,10 @@ function pm2Env(home = PM2_HOME) {
     // they eventually flip transcript saving off fleet-wide once the tmux server
     // respawns from a poisoned daemon (see CLAUDE_SESSION_MARKER_ENV_KEYS).
     scrubClaudeSessionMarkerEnv(env);
+    // Workflow/goal markers identify one short-lived node worker. Persisting
+    // them in PM2 would make every daemon — and then every ordinary chat worker
+    // it forks — run in workflow mode after a restart initiated from that node.
+    scrubWorkflowWorkerEnv(env);
     return env;
 }
 function listPm2GodDaemonPids(home = PM2_HOME) {
@@ -1137,27 +1143,6 @@ async function obtainCredentials(rl) {
         return { ok: true, appId, appSecret, brand };
     }
 }
-/**
- * 用新应用自身凭证验证扫码链路拿到的 open_id。
- * 能解析 union_id 时写 on_；没有 union_id 但 open_id 对当前 app 有效时写 ou_。
- * 查询失败或用户不在当前 app 视角时返回 undefined，调用方不得 fallback 写入该 ou_。
- */
-async function resolveScannerAllowedUser(appId, appSecret, openId, brand = 'feishu') {
-    try {
-        const { Client } = await import('@larksuiteoapi/node-sdk');
-        // brand → 域名。Lark 扫码人 ou_→on_ 必须打 larksuite.com，否则失败丢掉 cross-app 稳定性。
-        const client = new Client({ appId, appSecret, domain: sdkDomain(brand) });
-        const res = await client.contact.v3.user.get({
-            path: { user_id: openId },
-            params: { user_id_type: 'open_id' },
-        });
-        if (res.code === 0 && res.data?.user) {
-            return res.data.user.union_id ?? openId;
-        }
-    }
-    catch { /* do not trust scanner open_id when verification fails */ }
-    return undefined;
-}
 /**
  * 手动建 bot 时（没有扫码人 open_id）必须指定至少一个 owner.
  * 循环追问直到给出合法条目（邮箱、union_id on_xxx 或 open_id ou_xxx），拒绝裸邮箱前缀与空输入.
@@ -1559,6 +1544,10 @@ function failSetupScripted(json, message, details = {}) {
         console.error(`❌ ${message}`);
     process.exitCode = 1;
 }
+function setupAddContinuationCommand(appId, brand, ownerPlaceholder = '<OWNER_EMAIL>') {
+    return `botmux setup add --app-id ${appId} --app-secret <APP_SECRET> ` +
+        `--allowed-users ${ownerPlaceholder}${brand === 'lark' ? ' --brand lark' : ''} --open-platform-auto`;
+}
 /** 某个（可能带 ~ 前缀的）路径若不存在/不是目录，返回展开后的绝对路径；合法返回 null。 */
 function missingDirResolved(raw) {
     const resolved = resolve(expandHomePath(raw));
@@ -1683,6 +1672,7 @@ async function cmdSetupScripted(argv) {
         let migratedEnv = false;
         let createdAppId;
         let createdAppName;
+        const requestedBrand = normalizeBrand(cmd.flags.brand);
         if (!existsSync(BOTS_JSON_FILE) && existsSync(ENV_FILE)) {
             const legacy = parseDotEnvToBotConfig();
             if (legacy.larkAppId && legacy.larkAppSecret) {
@@ -1690,6 +1680,34 @@ async function cmdSetupScripted(argv) {
                 migratedEnv = true;
             }
         }
+        // A managed Agent sees the daemon-frozen session owner as
+        // BOTMUX_OWNER_OPEN_ID in the source bot's app scope; it is not the
+        // current-turn sender. Copying that ou_ into a newly created/different app
+        // locks the owner out. Convert only that exact injected identity to on_
+        // through the source app before any real app is created.
+        try {
+            cmd.flags.allowedUsers = await normalizeManagedOwnerEntries(cmd.flags.allowedUsers, {
+                sourceAppId: process.env.BOTMUX_LARK_APP_ID,
+                sourceOwnerOpenId: process.env.BOTMUX_OWNER_OPEN_ID ?? process.env.__OWNER_OPEN_ID,
+                creatingApp: cmd.createApp,
+                targetAppId: cmd.createApp ? undefined : cmd.flags.appId?.trim(),
+            }, async (sourceAppId, sourceOwnerOpenId) => {
+                const sourceBot = existing.find(bot => bot?.larkAppId === sourceAppId);
+                if (!sourceBot?.larkAppSecret)
+                    return undefined;
+                // A deliberate account/platform switch may create under another
+                // developer tenant, where the source app's union_id is not stable.
+                // Require an explicit target-account identity before creating.
+                if (cmd.switchAccount || cmd.compatibilityMode || botBrand(sourceBot) !== requestedBrand) {
+                    return undefined;
+                }
+                return resolveScannerAllowedUser(sourceAppId, sourceBot.larkAppSecret, sourceOwnerOpenId, botBrand(sourceBot));
+            });
+        }
+        catch (err) {
+            failSetupScripted(cmd.json, `${err instanceof Error ? err.message : String(err)} 未创建应用、未写入配置。`);
+            return;
+        }
         // --create-app 会产生真实开放平台应用；先用占位凭证完成纯本地字段、owner、
         // CLI 与目录预检，避免参数错误发生在扫码建应用之后而留下孤儿应用。
         if (cmd.createApp) {
@@ -1720,7 +1738,6 @@ async function cmdSetupScripted(argv) {
                 return;
             }
             const appName = resolveSetupAppName(cmd.flags.appName, existing.length);
-            const requestedBrand = normalizeBrand(cmd.flags.brand);
             let credentials;
             let appliedAppName = false;
             if ((requestedBrand === 'lark' || cmd.compatibilityMode) && cmd.flags.appName?.trim()) {
@@ -1791,7 +1808,7 @@ async function cmdSetupScripted(argv) {
             }
             if (!credentials.ok) {
                 const continueCommand = credentials.appId
-                    ? `botmux setup add --app-id ${credentials.appId} --app-secret <APP_SECRET> --allowed-users <OWNER_EMAIL> --open-platform-auto`
+                    ? setupAddContinuationCommand(credentials.appId, requestedBrand)
                     : undefined;
                 failSetupScripted(cmd.json, `${credentials.message}${credentials.appId ? `；已创建 AppID ${credentials.appId}，请从开放平台读取 App Secret 后运行 ${continueCommand} 继续，未重复创建。` : ''}`, credentials.appId ? { partial: true, appId: credentials.appId, appName, continueCommand } : {});
                 return;
@@ -1836,17 +1853,39 @@ async function cmdSetupScripted(argv) {
         const v = await validateCredentials(bot.larkAppId, bot.larkAppSecret, botBrand(bot));
         if (!v.ok) {
             const continueCommand = createdAppId
-                ? `botmux setup add --app-id ${createdAppId} --app-secret <APP_SECRET> --allowed-users <OWNER_EMAIL> --open-platform-auto`
+                ? setupAddContinuationCommand(createdAppId, botBrand(bot))
                 : undefined;
             failSetupScripted(cmd.json, `凭证校验失败 (${v.error}): ${v.message}${createdAppId ? `；应用 ${createdAppId} 已创建，未重复创建。请运行 ${continueCommand} 继续。` : ''}`, createdAppId ? { partial: true, appId: createdAppId, ...(createdAppName ? { appName: createdAppName } : {}), continueCommand } : {});
             return;
         }
+        // Scripted add historically accepted any syntactically valid ou_ and wrote
+        // it verbatim. A source bot's open_id is syntactically valid but belongs to
+        // the wrong app, so canTalk/canOperate can never match it in the new bot.
+        // Match Dashboard onboarding: reject only identities the target app can
+        // definitively prove unusable; transient/scope failures remain inconclusive.
+        const unusableOwners = await detectUnusableOwnerEntries(bot.larkAppId, bot.larkAppSecret, botBrand(bot), bot.allowedUsers ?? []);
+        if (unusableOwners.length > 0) {
+            const continueCommand = createdAppId
+                ? setupAddContinuationCommand(createdAppId, botBrand(bot), '<OWNER_EMAIL_OR_UNION_ID>')
+                : undefined;
+            failSetupScripted(cmd.json, `--allowed-users 包含当前应用无法使用的 owner: ${unusableOwners.join(', ')}。` +
+                `open_id 仅对签发它的 Bot 有效，请改用完整邮箱、手机号或 on_ union_id。` +
+                (continueCommand ? ` 应用已创建但未写入配置；请运行 ${continueCommand} 继续。` : ' 未写入配置。'), createdAppId
+                ? {
+                    partial: true,
+                    appId: createdAppId,
+                    ...(createdAppName ? { appName: createdAppName } : {}),
+                    continueCommand,
+                }
+                : {});
+            return;
+        }
         try {
             writeBotsJsonAtomic([...existing, bot]);
         }
         catch (err) {
             const continueCommand = createdAppId
-                ? `botmux setup add --app-id ${createdAppId} --app-secret <APP_SECRET> --allowed-users <OWNER_EMAIL> --open-platform-auto`
+                ? setupAddContinuationCommand(createdAppId, botBrand(bot))
                 : undefined;
             failSetupScripted(cmd.json, `写入 bot 配置失败: ${err instanceof Error ? err.message : String(err)}${createdAppId ? `；应用 ${createdAppId} 已创建，未重复创建。请运行 ${continueCommand} 继续。` : ''}`, createdAppId ? { partial: true, appId: createdAppId, ...(createdAppName ? { appName: createdAppName } : {}), continueCommand } : {});
             return;
@@ -3658,7 +3697,7 @@ async function printDashboardHintWithRetry() {
     }
     // Soft fallback
     if (last?.reason === 'no-active-token') {
-        console.log('   面板: 运行 `botmux dashboard` 获取链接');
+        console.log('   面板: 运行 `botmux dashboard` 创建登录链接');
     }
     else if (last?.reason === 'no-secret') {
         console.log('   面板: dashboard 凭证未就绪，启动后可用 `botmux dashboard` 获取链接');
@@ -3670,13 +3709,22 @@ async function printDashboardHintWithRetry() {
         console.log('   面板: `botmux dashboard`（daemon 启动中，稍后可获取链接）');
     }
 }
-/**
- * Print a fresh dashboard URL by HMAC-authing to the dashboard process's
- * loopback rotation endpoint. Each call invalidates the previously-issued
- * token, so sharing a URL is the same as sharing a one-shot session.
- */
-async function cmdDashboard() {
-    const r = await callDashboardEndpoint('/__cli/rotate');
+/** Get or create the current dashboard URL, or explicitly rotate it. Bare
+ * `dashboard` is the non-rotating get-or-create form; help and invalid
+ * subcommands never call either credential endpoint. */
+async function cmdDashboard(args) {
+    const execution = await executeDashboardCommand(args, callDashboardEndpoint);
+    if (execution.kind === 'help') {
+        console.log(DASHBOARD_COMMAND_USAGE);
+        return;
+    }
+    if (execution.kind === 'invalid') {
+        console.error(`未知 dashboard 子命令: ${execution.argument}`);
+        console.error(DASHBOARD_COMMAND_USAGE);
+        process.exitCode = 2;
+        return;
+    }
+    const { action, result: r } = execution;
     if (r.ok) {
         // 首行保持纯 URL（脚本/复制取第一行即可）；走中心化平台时再补一行本地直连兜底。
         console.log(r.url);
@@ -3704,8 +3752,7 @@ async function cmdDashboard() {
             console.error(`  详情: ${r.detail}`);
     }
     else {
-        // `no-active-token` can't occur on rotate (it always mints); fall through.
-        console.error('Rotation failed:', r.detail ?? r.reason);
+        console.error(formatDashboardFallbackFailure(action, r));
     }
     process.exit(1);
 }
@@ -6065,7 +6112,10 @@ botmux v${getVersion()} — IM ↔ AI 编程 CLI 桥接
   logs        查看 daemon 日志（--lines N, --bot <0-based-index|pm2-name|appId>）
   status      查看 daemon 状态
   upgrade     升级到最新版本（别名：update）
-  dashboard   打印新的 Web Dashboard 一次性登录 URL（旧 token 同时失效）
+  dashboard current
+              获取当前 Web Dashboard 登录 URL（裸 \`dashboard\` 同义；没有则创建）
+  dashboard rotate
+              显式轮换 token，并打印新的登录 URL
   device enroll|status|logout
               在宿主终端注册、查看或清除 desktop device 凭证（AI CLI 会话内拒绝）
   list        列出活跃会话（交互式选择并连接 tmux）
@@ -9536,18 +9586,20 @@ async function cmdDispatch(rest) {
     }
     const bots = [...legacyBots, ...appBots]
         .filter((bot, index, all) => all.findIndex(candidate => candidate.openId === bot.openId) === index);
-    // Only an all-local stable-app dispatch can rely on this host's registry being
-    // visible to every receiver. Legacy or mixed --bot dispatches may cross hosts,
-    // so keep their context-derived compatibility report protocol.
+    const { readRoleDispatchCompletionEnabled } = await import('./core/role-resolver.js');
+    const sameTopicSendEnabled = readRoleDispatchCompletionEnabled(appId, targetChatId);
     const exactReportRootEnabled = parsedBotApps.length > 0 && legacyBots.length === 0;
-    const briefWithReportProtocol = (dispatchRootId) => exactReportRootEnabled
-        ? appendDispatchReportProtocol(brief, dispatchRootId)
-        : appendLegacyDispatchReportProtocol(brief);
+    const briefWithCompletionProtocol = (dispatchRootId) => buildDispatchCompletionBrief({
+        brief,
+        dispatchRootId,
+        exactReportRootEnabled,
+        sameTopicSendEnabled,
+    });
     let built;
     try {
         built = buildDispatchMessages({
             title: title.trim() || '子项目',
-            brief: intoRoot ? briefWithReportProtocol(intoRoot) : brief,
+            brief: intoRoot ? briefWithCompletionProtocol(intoRoot) : brief,
             bots,
         });
     }
@@ -9627,7 +9679,7 @@ async function cmdDispatch(rest) {
             // resident chat-scope session's mutable latest reply alias.
             const kickoffBuilt = buildDispatchMessages({
                 title: title.trim() || '子项目',
-                brief: briefWithReportProtocol(seedId),
+                brief: briefWithCompletionProtocol(seedId),
                 bots,
             });
             const kickoffBriefJson = JSON.stringify({ zh_cn: { title: '', content: kickoffBuilt.threadContent } });
@@ -9926,7 +9978,7 @@ async function cmdReport(rest) {
         }
         let response;
         try {
-            response = await fetch(`http://127.0.0.1:${daemon.ipcPort}/api/trigger`, {
+            response = await fetchDaemonIpc(daemon.ipcPort, '/api/trigger', {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
                 body: JSON.stringify({
@@ -12037,7 +12089,7 @@ switch (command) {
         cmdUpgrade();
         break;
     case 'dashboard':
-        await cmdDashboard();
+        await cmdDashboard(process.argv.slice(3));
         break;
     case 'bind': {
         // `botmux bind <code>` — 把本机绑定到中心化平台