botmux 3.16.0 → 3.17.0

package/dist/dashboard/web/bot-defaults-page.js

@@ -1,8 +1,8 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
+import { useCallback, useEffect, useId, useMemo, useRef, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { openBotOnboarding } from './bot-onboarding.js';
-import { agentSelectionKey, cliIdOf, createRefreshGate, displayCliId, fallbackCliOptionsState, fetchBotDefaults, fetchCliOptions, fmtSince, modelSuggestionsForOption, resolveSubstituteTarget, selectedCliOption, } from './bot-defaults.js';
+import { agentSelectionKey, cliIdOf, createRefreshGate, displayCliId, fallbackCliOptionsState, fetchBotDefaults, fetchCliOptions, fetchDetectedModels, fmtSince, mergeModelCandidates, modelSuggestionsForOption, resolveSubstituteTarget, selectedCliOption, } from './bot-defaults.js';
 import { isRemoteCliId } from '../../core/remote-cli-ids.js';
 import { mountReactPage } from './react-mount.js';
 import { useT } from './react-hooks.js';
@@ -228,7 +228,8 @@ function statusClass(status, extra = '') {
     return `oncall-status${extra ? ` ${extra}` : ''}${suffix}`;
 }
 function StatusSpan(props) {
-    return _jsx("span", { role: "status", "aria-live": "polite", className: statusClass(props.status), ...(props.attr ?? {}), children: props.status?.text ?? '' });
+    // key 随文案变化：成功状态 1.5s 后 CSS 淡出，新消息到达时重挂载以重启动画
+    return _jsx("span", { role: "status", "aria-live": "polite", className: statusClass(props.status), ...(props.attr ?? {}), children: props.status?.text ?? '' }, props.status?.text ?? '');
 }
 function InfoTip(props) {
     const ariaLabel = typeof props.children === 'string' ? props.children : undefined;
@@ -241,6 +242,43 @@ function DropdownField(props) {
     const tr = useT();
     return (_jsxs(_Fragment, { children: [_jsx(DropdownMenu, { id: `bd-menu-${props.dataInput}`, className: ['bd-field-menu', props.className].filter(Boolean).join(' '), ariaLabel: props.ariaLabel, disabled: props.disabled, label: dropdownLabel(props.options, props.value), value: props.value, options: props.options, searchable: props.searchable, searchPlaceholder: props.searchable ? tr('common.dropdownSearch') : undefined, searchEmptyLabel: props.searchable ? tr('common.dropdownSearchEmpty') : undefined, onChange: props.onChange }), _jsx("input", { type: "hidden", "data-input": props.dataInput, value: props.value, readOnly: true })] }));
 }
+const MODEL_PICKER_CUSTOM = '__custom__';
+/**
+ * 模型选择器：下拉候选（静态精选 + live 探测合并，由调用方 mergeModelCandidates 算好）
+ * + 「自定义模型…」自由输入。模型列表会过期，候选永不锁死。
+ * - value='' 表示跟随 CLI 默认，菜单显示 defaultLabel；
+ * - value 非空但不在候选中时，把当前值作为额外选项插在最前（旧配置/自定义值可见）；
+ * - 选中 customLabel 切到自定义输入模式（datalist 仍挂全部候选做自动补全），
+ *   返回按钮切回下拉模式；
+ * - busy（live 探测进行中）只在控件下方显示小转圈，不禁用选择。
+ */
+export function ModelPickerField(props) {
+    const tr = useT();
+    const [customMode, setCustomMode] = useState(false);
+    const datalistId = useId();
+    const current = props.value;
+    const dropdownOptions = useMemo(() => {
+        const opts = [];
+        if (current && !props.options.includes(current)) {
+            opts.push({ value: current, label: current });
+        }
+        for (const item of props.options)
+            opts.push({ value: item, label: item });
+        opts.push({ value: MODEL_PICKER_CUSTOM, label: props.customLabel });
+        return opts;
+    }, [current, props.options, props.customLabel]);
+    return (_jsxs("span", { className: "bd-model-picker", children: [customMode ? (_jsxs("span", { className: "bd-model-custom", children: [_jsx("input", { type: "text", "data-input": props.dataInput, list: datalistId, value: current, placeholder: props.defaultLabel, disabled: props.disabled, autoComplete: "off", autoCapitalize: "none", spellCheck: false, onChange: event => props.onChange(event.currentTarget.value) }), _jsx("button", { type: "button", className: "bd-model-back", disabled: props.disabled, onClick: () => setCustomMode(false), children: tr('botDefaults.modelPickerBack') }), _jsx("datalist", { id: datalistId, children: props.options.map(item => _jsx("option", { value: item }, item)) })] })) : (_jsxs(_Fragment, { children: [_jsx(DropdownMenu, { id: `bd-menu-${props.dataInput}`, className: ['bd-model-menu', props.menuClassName].filter(Boolean).join(' '), ariaLabel: props.ariaLabel, disabled: props.disabled, label: current || props.defaultLabel, value: current, options: dropdownOptions, searchable: true, searchPlaceholder: tr('common.dropdownSearch'), searchEmptyLabel: tr('common.dropdownSearchEmpty'), onChange: next => {
+                            if (next === MODEL_PICKER_CUSTOM) {
+                                setCustomMode(true);
+                                return;
+                            }
+                            props.onChange(next);
+                        } }), _jsx("input", { type: "hidden", "data-input": props.dataInput, value: current, onChange: event => props.onChange(event.currentTarget.value) })] })), props.busy
+                ? _jsx("small", { className: "bd-model-busy", children: _jsx("span", { className: "bd-model-spinner", "aria-hidden": "true" }) })
+                : null, typeof props.detectedCount === 'number' && props.detectedCount > 0 && props.detectedLabel
+                ? _jsx("small", { className: "bd-model-detected", children: props.detectedLabel })
+                : null] }));
+}
 function ToggleRow(props) {
     return (_jsxs("label", { className: props.className ? `toggle-row ${props.className}` : 'toggle-row', children: [_jsx("input", { type: "checkbox", "data-action": props.dataAction, checked: props.checked, disabled: props.disabled, onChange: event => props.onChange(event.currentTarget.checked) }), _jsx("span", { className: "switch", "aria-hidden": "true" }), _jsxs("span", { className: "toggle-tx", children: [_jsx("strong", { children: _jsx(FieldTitle, { help: props.help, children: props.title }) }), props.description ? _jsx("small", { children: props.description }) : null] })] }));
 }
@@ -938,6 +976,11 @@ export function BotAgentSection(props) {
     const [turnTimeoutMin, setTurnTimeoutMin] = useState(turnTimeoutMinFromMs(bot.turnTimeoutMs));
     const [turnTimeoutTouched, setTurnTimeoutTouched] = useState(false);
     const [turnTimeoutError, setTurnTimeoutError] = useState(null);
+    // dsh runtime variant: 'official' (JSON-RPC runner) or 'tui' (dsh-tui PTY).
+    // Defaults to 'official' so a bot that never touched the toggle stays on the
+    // headless runner. `touched` gates whether a save sends the field at all.
+    const [dshRuntime, setDshRuntime] = useState(bot.dshRuntime === 'tui' ? 'tui' : 'official');
+    const [dshRuntimeTouched, setDshRuntimeTouched] = useState(false);
     const [runtimeDraft, setRuntimeDraft] = useState(() => runtimeDraftFromBot(bot));
     const [runtimeTouched, setRuntimeTouched] = useState(false);
     const [runtimeStatus, setRuntimeStatus] = useState(null);
@@ -954,6 +997,8 @@ export function BotAgentSection(props) {
         setTurnTimeoutMin(turnTimeoutMinFromMs(bot.turnTimeoutMs));
         setTurnTimeoutTouched(false);
         setTurnTimeoutError(null);
+        setDshRuntime(bot.dshRuntime === 'tui' ? 'tui' : 'official');
+        setDshRuntimeTouched(false);
         setRuntimeDraft(runtimeDraftFromBot(bot));
         setRuntimeTouched(false);
         setSkillValue(skillInjectionResolved(bot));
@@ -964,6 +1009,7 @@ export function BotAgentSection(props) {
         bot.model,
         bot.reasoningEffort,
         bot.turnTimeoutMs,
+        bot.dshRuntime,
         runtimeConfigKey,
         bot.wrapperCli,
         bot.skillInjection,
@@ -973,11 +1019,28 @@ export function BotAgentSection(props) {
     const option = selectedCliOption(cliState.options, cliKey);
     const suggestions = modelSuggestionsForOption(option, cliState);
     const modelDisabledByCli = option?.gateway === 'ttadk' && option.acceptsModel === false;
-    const modelPlaceholder = modelDisabledByCli
-        ? tr('botOnboarding.modelTtadkCocoPlaceholder')
-        : option?.gateway === 'ttadk'
-            ? tr('botOnboarding.modelTtadkPlaceholder').replace('{model}', cliState.ttadkModelDefault)
-            : tr('botDefaults.agentModelPlaceholder');
+    // live 探测当前 CLI 的可用模型（ttadk 网关项保持现状，只用静态建议列表）。
+    const [detectedModels, setDetectedModels] = useState(null);
+    const [detectingModels, setDetectingModels] = useState(false);
+    useEffect(() => {
+        if (option?.gateway === 'ttadk') {
+            setDetectedModels(null);
+            setDetectingModels(false);
+            return;
+        }
+        // stale 标志防卸载/竞态：cliKey 快速切换时旧响应不得覆盖新 CLI 的候选。
+        let stale = false;
+        setDetectingModels(true);
+        fetchDetectedModels(cliKey)
+            .then(result => { if (!stale)
+            setDetectedModels(result); })
+            .finally(() => { if (!stale)
+            setDetectingModels(false); });
+        return () => { stale = true; };
+        // 只按 cliKey 重新探测；cliState 刷新带来的静态候选经 suggestions 合入，无需重探。
+    }, [cliKey]);
+    const modelCandidates = mergeModelCandidates(suggestions, detectedModels?.models ?? null);
+    const detectedLiveCount = detectedModels?.source === 'live' ? detectedModels.models.length : 0;
     function updateCli(nextKey) {
         const previousKey = cliKey;
         setCliKey(nextKey);
@@ -1072,6 +1135,9 @@ export function BotAgentSection(props) {
                 // it makes the daemon preserve the current value; non-dsh selections
                 // never send it (the daemon drops any stored value for non-dsh CLIs).
                 ...(cliKey === 'dsh' && turnTimeoutField !== undefined ? { turnTimeoutMs: turnTimeoutField } : {}),
+                // dsh-only runtime variant: only send when touched, same semantics as
+                // turnTimeoutMs. 'official' clears a stored 'tui' selection.
+                ...(cliKey === 'dsh' && dshRuntimeTouched ? { dshRuntime } : {}),
                 ...(runtimeTouched ? { cliRuntime } : {}),
             };
             const res = await sendJson('PUT', `/api/bots/${encodeURIComponent(bot.larkAppId)}/agent`, body);
@@ -1116,6 +1182,7 @@ export function BotAgentSection(props) {
                     model: res.body.model ?? '',
                     reasoningEffort: res.body.reasoningEffort ?? undefined,
                     turnTimeoutMs: typeof res.body.turnTimeoutMs === 'number' ? res.body.turnTimeoutMs : undefined,
+                    dshRuntime: typeof res.body.dshRuntime === 'string' ? res.body.dshRuntime : bot.dshRuntime ?? null,
                     agentSelectionKey: res.body.selectionKey ?? cliKey,
                 });
                 // Re-sync the minutes input from the authoritative saved ms and clear
@@ -1123,6 +1190,7 @@ export function BotAgentSection(props) {
                 setTurnTimeoutMin(turnTimeoutMinFromMs(typeof res.body.turnTimeoutMs === 'number' ? res.body.turnTimeoutMs : undefined));
                 setTurnTimeoutTouched(false);
                 setTurnTimeoutError(null);
+                setDshRuntimeTouched(false);
                 setRuntimeTouched(false);
                 if (cliRuntime) {
                     const probe = res.body.runtimeProbe;
@@ -1294,7 +1362,9 @@ export function BotAgentSection(props) {
                             ? 'botDefaults.runtimeOfficialNote'
                             : runtimeDraft.mode === 'legacy'
                                 ? 'botDefaults.runtimeLegacyNote'
-                                : 'botDefaults.runtimeCustomNote') }), runtimeDraft.mode === 'legacy' ? (_jsx("div", { className: "bd-runtime-fields", "data-runtime-legacy": "", children: _jsxs("label", { className: "bd-runtime-wide", children: [_jsx("span", { children: tr('botDefaults.runtimeLegacyPath') }), _jsx("input", { type: "text", value: runtimeDraft.legacyPath, readOnly: true, "aria-readonly": "true", "data-input": "agentRuntimeLegacyPath" })] }) })) : null, runtimeDraft.mode === 'custom' ? (_jsxs("div", { className: "bd-runtime-fields", children: [_jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimeIdHelp'), children: tr('botDefaults.runtimeId') }), _jsx("input", { type: "text", "data-input": "agentRuntimeId", value: runtimeDraft.id, disabled: agentBusy, autoComplete: "off", onChange: event => updateRuntimeDraft({ id: event.currentTarget.value }) })] }), _jsxs("label", { children: [_jsx("span", { children: tr('botDefaults.runtimeDisplayName') }), _jsx("input", { type: "text", "data-input": "agentRuntimeDisplayName", placeholder: tr('botDefaults.runtimeDisplayNamePlaceholder'), value: runtimeDraft.displayName, disabled: agentBusy, autoComplete: "off", onChange: event => updateRuntimeDraft({ displayName: event.currentTarget.value }) })] }), _jsxs("label", { className: "bd-runtime-wide", children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimeExecutableHelp'), children: tr('botDefaults.runtimeExecutable') }), _jsx("input", { type: "text", "data-input": "agentRuntimeExecutable", value: runtimeDraft.executable, disabled: agentBusy, autoCapitalize: "none", autoComplete: "off", spellCheck: false, onChange: event => updateRuntimeDraft({ executable: event.currentTarget.value }) })] }), _jsxs("div", { className: "bd-field", children: [_jsx("span", { children: tr('botDefaults.runtimeUpdateProvider') }), _jsx(DropdownField, { dataInput: "agentRuntimeUpdateProvider", ariaLabel: tr('botDefaults.runtimeUpdateProvider'), value: runtimeDraft.updateProvider, disabled: agentBusy, options: runtimeProviderOptions, onChange: updateProvider => updateRuntimeDraft({ updateProvider }) })] }), runtimeDraft.updateProvider === 'npm' ? (_jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimePackageHelp'), children: tr('botDefaults.runtimePackageName') }), _jsx("input", { type: "text", "data-input": "agentRuntimePackageName", value: runtimeDraft.packageName, disabled: agentBusy, autoCapitalize: "none", autoComplete: "off", spellCheck: false, onChange: event => updateRuntimeDraft({ packageName: event.currentTarget.value }) })] })) : null] })) : null, _jsx(StatusSpan, { status: runtimeStatus, attr: { 'data-runtime-status': '' } })] })) : null, !isRiff && (_jsx("div", { className: "bd-row", children: _jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.agentHelp'), children: tr('botDefaults.agentModel') }), _jsx("input", { type: "text", "data-input": "agentModel", list: `agent-model-suggestions-${bot.larkAppId}`, placeholder: modelPlaceholder, value: model, disabled: agentBusy || modelDisabledByCli, onChange: event => setModel(event.currentTarget.value) }), _jsx("datalist", { id: `agent-model-suggestions-${bot.larkAppId}`, children: suggestions.map(item => _jsx("option", { value: item }, item)) })] }) })), isDsh && (_jsx("div", { className: "bd-row", children: _jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.agentTurnTimeoutHelp'), children: tr('botDefaults.agentTurnTimeout') }), _jsx("input", { type: "number", min: 0, 
+                                : 'botDefaults.runtimeCustomNote') }), runtimeDraft.mode === 'legacy' ? (_jsx("div", { className: "bd-runtime-fields", "data-runtime-legacy": "", children: _jsxs("label", { className: "bd-runtime-wide", children: [_jsx("span", { children: tr('botDefaults.runtimeLegacyPath') }), _jsx("input", { type: "text", value: runtimeDraft.legacyPath, readOnly: true, "aria-readonly": "true", "data-input": "agentRuntimeLegacyPath" })] }) })) : null, runtimeDraft.mode === 'custom' ? (_jsxs("div", { className: "bd-runtime-fields", children: [_jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimeIdHelp'), children: tr('botDefaults.runtimeId') }), _jsx("input", { type: "text", "data-input": "agentRuntimeId", value: runtimeDraft.id, disabled: agentBusy, autoComplete: "off", onChange: event => updateRuntimeDraft({ id: event.currentTarget.value }) })] }), _jsxs("label", { children: [_jsx("span", { children: tr('botDefaults.runtimeDisplayName') }), _jsx("input", { type: "text", "data-input": "agentRuntimeDisplayName", placeholder: tr('botDefaults.runtimeDisplayNamePlaceholder'), value: runtimeDraft.displayName, disabled: agentBusy, autoComplete: "off", onChange: event => updateRuntimeDraft({ displayName: event.currentTarget.value }) })] }), _jsxs("label", { className: "bd-runtime-wide", children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimeExecutableHelp'), children: tr('botDefaults.runtimeExecutable') }), _jsx("input", { type: "text", "data-input": "agentRuntimeExecutable", value: runtimeDraft.executable, disabled: agentBusy, autoCapitalize: "none", autoComplete: "off", spellCheck: false, onChange: event => updateRuntimeDraft({ executable: event.currentTarget.value }) })] }), _jsxs("div", { className: "bd-field", children: [_jsx("span", { children: tr('botDefaults.runtimeUpdateProvider') }), _jsx(DropdownField, { dataInput: "agentRuntimeUpdateProvider", ariaLabel: tr('botDefaults.runtimeUpdateProvider'), value: runtimeDraft.updateProvider, disabled: agentBusy, options: runtimeProviderOptions, onChange: updateProvider => updateRuntimeDraft({ updateProvider }) })] }), runtimeDraft.updateProvider === 'npm' ? (_jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.runtimePackageHelp'), children: tr('botDefaults.runtimePackageName') }), _jsx("input", { type: "text", "data-input": "agentRuntimePackageName", value: runtimeDraft.packageName, disabled: agentBusy, autoCapitalize: "none", autoComplete: "off", spellCheck: false, onChange: event => updateRuntimeDraft({ packageName: event.currentTarget.value }) })] })) : null] })) : null, _jsx(StatusSpan, { status: runtimeStatus, attr: { 'data-runtime-status': '' } })] })) : null, !isRiff && (_jsx("div", { className: "bd-row", children: _jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.agentHelp'), children: tr('botDefaults.agentModel') }), _jsx(ModelPickerField, { value: model, onChange: setModel, options: modelCandidates, disabled: agentBusy || modelDisabledByCli, busy: detectingModels, dataInput: "agentModel", ariaLabel: tr('botDefaults.agentModel'), defaultLabel: tr('botDefaults.modelPickerDefault'), customLabel: tr('botDefaults.modelPickerCustom'), menuClassName: "bd-field-menu", detectedCount: detectedLiveCount || undefined, detectedLabel: detectedLiveCount > 0
+                                ? tr('botDefaults.modelPickerDetected', { count: detectedLiveCount })
+                                : undefined }, cliKey)] }) })), isDsh && (_jsx("div", { className: "bd-row", children: _jsxs("div", { className: "bd-field", children: [_jsx(FieldTitle, { help: tr('botDefaults.dshRuntimeHelp'), children: tr('botDefaults.dshRuntimeTitle') }), _jsxs("div", { className: "bd-runtime-mode", role: "group", "aria-label": tr('botDefaults.dshRuntimeTitle'), children: [_jsx("button", { type: "button", "data-action": "dsh-runtime-official", "aria-pressed": dshRuntime === 'official', disabled: agentBusy, onClick: () => { setDshRuntime('official'); setDshRuntimeTouched(true); }, children: tr('botDefaults.dshRuntimeOfficial') }), _jsx("button", { type: "button", "data-action": "dsh-runtime-tui", "aria-pressed": dshRuntime === 'tui', disabled: agentBusy, onClick: () => { setDshRuntime('tui'); setDshRuntimeTouched(true); }, children: tr('botDefaults.dshRuntimeTui') })] }), _jsx("p", { className: "bd-runtime-note", children: tr(dshRuntime === 'tui' ? 'botDefaults.dshRuntimeTuiNote' : 'botDefaults.dshRuntimeOfficialNote') })] }) })), isDsh && (_jsx("div", { className: "bd-row", children: _jsxs("label", { children: [_jsx(FieldTitle, { help: tr('botDefaults.agentTurnTimeoutHelp'), children: tr('botDefaults.agentTurnTimeout') }), _jsx("input", { type: "number", min: 0, 
                             // Allow non-whole minutes so a legal non-60000-multiple ms value
                             // (e.g. 90001ms ≈ 1.50002min) can be shown and edited losslessly.
                             step: "any", inputMode: "decimal", "data-input": "agentTurnTimeout", placeholder: tr('botDefaults.agentTurnTimeoutPlaceholder'), value: turnTimeoutMin, disabled: agentBusy, onChange: event => {
@@ -2528,6 +2598,13 @@ export function SessionGroupTagRow(props) {
     const [authBusy, setAuthBusy] = useState(false);
     const [modeBusy, setModeBusy] = useState(false);
     const [err, setErr] = useState(null);
+    // Remote-callback paste fallback (mirrors groups-page / sessions-page): when
+    // set, the overlay is shown so a browser that can't reach the daemon's
+    // 127.0.0.1:9768 loopback (远程 VM / 中心化平台 m-* 子域访问) can still finish
+    // by pasting the callback URL. authUrl also drives the "跳转飞书授权" retry button.
+    const [authUrl, setAuthUrl] = useState('');
+    const [callbackUrl, setCallbackUrl] = useState('');
+    const [submitting, setSubmitting] = useState(false);
     const lifecycle = useRef({ generation: 0, mounted: true });
     const fetchStatus = async (generation = lifecycle.current.generation) => {
         try {
@@ -2549,6 +2626,9 @@ export function SessionGroupTagRow(props) {
         setAuthBusy(false);
         setModeBusy(false);
         setErr(null);
+        setAuthUrl('');
+        setCallbackUrl('');
+        setSubmitting(false);
         void fetchStatus(generation);
         return () => {
             lifecycle.current.mounted = false;
@@ -2587,6 +2667,7 @@ export function SessionGroupTagRow(props) {
         const generation = ++lifecycle.current.generation;
         setAuthBusy(true);
         setErr(null);
+        setCallbackUrl('');
         try {
             const res = await sendJson('POST', `/api/bots/${encodeURIComponent(props.bot.larkAppId)}/session-group-tag-auth`, {});
             // A bot switch while the POST was in flight must neither surface the old
@@ -2597,17 +2678,35 @@ export function SessionGroupTagRow(props) {
                 setErr(responseErrorText(res));
                 return;
             }
-            window.open(res.body.authUrl, '_blank', 'noopener');
-            // 轮询授权结果：3s × 60 次（授权链接 5 分钟有效期同量级）。
+            const url = String(res.body.authUrl);
+            // Show the paste overlay up front (mirrors groups-page / sessions-page):
+            // same-machine browsers finish via the 127.0.0.1:9768 loopback and the
+            // poll below auto-closes it; remote browsers (远程 VM / 中心化平台 m-* 子
+            // 域) can't reach that loopback, so they finish by pasting the callback URL.
+            setAuthUrl(url);
+            window.open(url, '_blank', 'noopener');
+            // 轮询授权结果：3s × 60 次（授权链接 5 分钟有效期同量级）。轮询到 authorized
+            // 即收起弹窗；远程场景轮询不会命中，弹窗保持打开等用户手动粘贴，超时不报错。
             for (let i = 0; i < 60; i++) {
                 await new Promise(r => setTimeout(r, 3000));
                 if (!lifecycle.current.mounted || generation !== lifecycle.current.generation)
                     return;
-                if (await fetchStatus(generation))
+                if (await fetchStatus(generation)) {
+                    if (lifecycle.current.mounted && generation === lifecycle.current.generation) {
+                        // 本机 loopback 已完成授权（state 一次即焚、pending 文件已删）。bump
+                        // generation 丢弃任何在途的 completeAuth——否则用户几乎同时点了「完成
+                        // 授权」，其 POST 会因 pending 已消费而失败，在绿徽标旁弹出假红错。
+                        lifecycle.current.generation += 1;
+                        setAuthUrl('');
+                        setCallbackUrl('');
+                        setSubmitting(false);
+                        setAuthBusy(false);
+                        // 清掉可能残留的 not-confirmed 提示：completeAuth 曾因 status GET 瞬时
+                        // 失败弹过提示，此刻轮询自愈翻绿，别把旧提示留在绿徽标旁。
+                        setErr(null);
+                    }
                     return;
-            }
-            if (lifecycle.current.mounted && generation === lifecycle.current.generation) {
-                setErr(tr('botDefaults.sgTagAuthTimeout'));
+                }
             }
         }
         catch (e) {
@@ -2620,6 +2719,65 @@ export function SessionGroupTagRow(props) {
                 setAuthBusy(false);
         }
     }
+    // Remote-callback fallback: POST the pasted 127.0.0.1 callback URL to the
+    // dashboard's cross-process exchanger. The pending OAuth state (and the
+    // resulting token) are disk-backed, so the exchange completes and the daemon's
+    // status endpoint reflects it regardless of which process minted the auth URL.
+    async function completeAuth() {
+        const generation = lifecycle.current.generation;
+        const trimmed = callbackUrl.trim();
+        if (!trimmed)
+            return;
+        setSubmitting(true);
+        setErr(null);
+        // Shared closer for both the success path and the "already authorized"
+        // recovery below: bump generation to stop startAuth's in-flight poll, then
+        // clear the overlay.
+        const finish = () => {
+            if (!lifecycle.current.mounted || generation !== lifecycle.current.generation)
+                return;
+            lifecycle.current.generation += 1;
+            setAuthUrl('');
+            setCallbackUrl('');
+            setSubmitting(false);
+            setAuthBusy(false);
+        };
+        try {
+            const res = await sendJson('POST', '/api/feed-groups/oauth-callback', { callbackUrl: trimmed });
+            if (!lifecycle.current.mounted || generation !== lifecycle.current.generation)
+                return;
+            if (!res.ok || !res.body.ok) {
+                // Narrow race: the same-machine loopback may have consumed this one-shot
+                // state moments earlier (pending file deleted) while the poll hasn't
+                // ticked yet — the exchange then fails with "state 不匹配". Re-check
+                // status before surfacing a red error next to what is really a success.
+                if (await fetchStatus(generation))
+                    return void finish();
+                if (lifecycle.current.mounted && generation === lifecycle.current.generation) {
+                    // 服务端消息自带 ❌/✅ 前缀，剥掉——行内 err 渲染已统一加 ✗，否则双 emoji 叠加。
+                    const raw = String(res.body?.message || responseErrorText(res));
+                    setErr(raw.replace(/^[❌✅]\s*/u, ''));
+                }
+                return;
+            }
+            // 换 token 成功≠已授予 feed-group scope，且紧跟的 status GET 可能瞬时失败。
+            // 只有复查确认 authorized 才 finish 关弹窗；否则保留弹窗+提示，让用户能重试，
+            // 或看清「登录成功但没给标签权限」(与 groups-page 刷新失败保留弹窗同款)。
+            if (await fetchStatus(generation))
+                return void finish();
+            if (lifecycle.current.mounted && generation === lifecycle.current.generation) {
+                setErr(tr('botDefaults.sgTagAuthNotConfirmed'));
+            }
+        }
+        catch (e) {
+            if (lifecycle.current.mounted && generation === lifecycle.current.generation)
+                setErr(caughtErrorText(e));
+        }
+        finally {
+            if (lifecycle.current.mounted && generation === lifecycle.current.generation)
+                setSubmitting(false);
+        }
+    }
     const tagMode = status?.tagMode ?? 'feed-group';
     const authorized = status?.authorized === true;
     const modeOptions = [
@@ -2627,7 +2785,24 @@ export function SessionGroupTagRow(props) {
         { value: 'chat-tag', label: tr('botDefaults.sgTagModeChatTag') },
         { value: 'off', label: tr('botDefaults.sgTagModeOff') },
     ];
-    return (_jsx("div", { className: "bd-row", "data-session-group-tag-row": true, children: _jsxs("div", { className: "bd-field", children: [_jsx(FieldTitle, { help: tr('botDefaults.sgTagHelp'), children: tr('botDefaults.sgTag') }), _jsxs("div", { style: { display: 'flex', alignItems: 'center', gap: 10, flexWrap: 'wrap' }, children: [_jsx(DropdownField, { dataInput: "sessionGroupTagMode", ariaLabel: tr('botDefaults.sgTag'), value: tagMode, disabled: modeBusy || !status, options: modeOptions, onChange: next => void saveMode(next) }), tagMode === 'chat-tag' && (_jsx("span", { "data-sg-tag-state": "tenant", children: tr('botDefaults.sgTagChatTagNote') })), tagMode === 'feed-group' && (_jsxs(_Fragment, { children: [_jsx("span", { "data-sg-tag-state": authorized ? 'authorized' : 'unauthorized', children: authorized ? `🟢 ${tr('botDefaults.sgTagAuthorized')}` : `⚪ ${tr('botDefaults.sgTagUnauthorized')}` }), !authorized && (_jsx("button", { type: "button", className: "primary", "data-action": "session-group-tag-auth", disabled: authBusy, onClick: () => void startAuth(), children: authBusy ? tr('botDefaults.sgTagAuthWaiting') : tr('botDefaults.sgTagAuthStart') }))] })), err && _jsxs("span", { className: "status-error", children: ["\u2717 ", err] })] })] }) }));
+    return (_jsxs("div", { className: "bd-row", "data-session-group-tag-row": true, children: [_jsxs("div", { className: "bd-field", children: [_jsx(FieldTitle, { help: tr('botDefaults.sgTagHelp'), children: tr('botDefaults.sgTag') }), _jsxs("div", { style: { display: 'flex', alignItems: 'center', gap: 10, flexWrap: 'wrap' }, children: [_jsx(DropdownField, { dataInput: "sessionGroupTagMode", ariaLabel: tr('botDefaults.sgTag'), value: tagMode, disabled: modeBusy || !status, options: modeOptions, onChange: next => void saveMode(next) }), tagMode === 'chat-tag' && (_jsx("span", { "data-sg-tag-state": "tenant", children: tr('botDefaults.sgTagChatTagNote') })), tagMode === 'feed-group' && (_jsxs(_Fragment, { children: [_jsx("span", { "data-sg-tag-state": authorized ? 'authorized' : 'unauthorized', children: authorized ? `🟢 ${tr('botDefaults.sgTagAuthorized')}` : `⚪ ${tr('botDefaults.sgTagUnauthorized')}` }), !authorized && (_jsx("button", { type: "button", className: "primary", "data-action": "session-group-tag-auth", disabled: authBusy, onClick: () => void startAuth(), children: authBusy ? tr('botDefaults.sgTagAuthWaiting') : tr('botDefaults.sgTagAuthStart') }))] })), err && _jsxs("span", { className: "status-error", children: ["\u2717 ", err] })] })] }), authUrl && typeof document !== 'undefined' ? (
+            // Portal 到 body:此弹层内联渲染在 .page 页面容器的 DOM 里,而 .page 有
+            // `animation: dashboard-page-enter … both`——fill-mode:both 使动画结束后
+            // computed transform 持续为 identity matrix(而非关键字 none),会为后代
+            // position:fixed 建立包含块,于是 .feed-group-auth-overlay 虽写了
+            // fixed+inset:0 却相对 .page 而非视口定位,被约束进页面几何(表现为弹窗
+            // 不全屏、偏挂在按钮附近)。挂到 body 顶层逃出该包含块,与 FeishuLoginModal /
+            // auth-expired-overlay 一致,稳定全屏居中。
+            createPortal(_jsx("div", { className: "feed-group-auth-overlay", children: _jsxs("section", { className: "feed-group-auth-card", role: "dialog", "aria-modal": "true", "aria-labelledby": "sg-tag-auth-title", children: [_jsx("h3", { id: "sg-tag-auth-title", children: tr('botDefaults.sgTagAuthTitle') }), _jsx("p", { children: tr('botDefaults.sgTagAuthHint') }), _jsx("button", { type: "button", className: "primary feed-group-auth-open", onClick: () => window.open(authUrl, '_blank', 'noopener'), children: tr('botDefaults.sgTagAuthOpen') }), _jsxs("label", { children: [_jsx("span", { children: tr('botDefaults.sgTagAuthPasteLabel') }), _jsx("input", { type: "url", "data-input": "sessionGroupTagCallbackUrl", value: callbackUrl, placeholder: "http://127.0.0.1:9768/callback?code=\u2026&state=\u2026", onChange: event => setCallbackUrl(event.currentTarget.value) })] }), _jsxs("div", { className: "actions", children: [_jsx("button", { type: "button", "data-action": "session-group-tag-cancel", onClick: () => {
+                                        // 取消不仅关弹窗，还要停掉 startAuth 里仍在跑的 60 次轮询——否则
+                                        // authBusy 一直为 true，「一键授权」卡在禁用态最长 3 分钟。bump
+                                        // generation 让在途轮询的守卫失配即退出。
+                                        lifecycle.current.generation += 1;
+                                        setAuthUrl('');
+                                        setCallbackUrl('');
+                                        setSubmitting(false);
+                                        setAuthBusy(false);
+                                    }, children: tr('botDefaults.sgTagAuthCancel') }), _jsx("button", { type: "button", className: "primary", "data-action": "session-group-tag-complete", disabled: !callbackUrl.trim() || submitting, onClick: () => void completeAuth(), children: submitting ? tr('botDefaults.sgTagAuthSubmitting') : tr('botDefaults.sgTagAuthComplete') })] })] }) }), document.body)) : null] }));
 }
 function regularGroupMode(bot) {
     return bot.regularGroupReplyMode === 'chat' || bot.regularGroupReplyMode === 'new-topic' || bot.regularGroupReplyMode === 'shared'