feique 1.3.3 → 1.5.0

package/dist/bridge/service.js

@@ -1,7 +1,6 @@
 import fs from 'node:fs/promises';
 import { watch as watchFile } from 'node:fs';
 import path from 'node:path';
-import { randomUUID } from 'node:crypto';
 import { buildHelpText, buildFullHelpText, isReadOnlyCommand, normalizeIncomingText, parseBridgeCommand, } from './commands.js';
 import { buildConversationKey } from '../state/session-store.js';
 import { buildMessageCard, buildStatusCard } from '../feishu/cards.js';
@@ -11,38 +10,35 @@ import { IdempotencyStore } from '../state/idempotency-store.js';
 import { RunStateStore } from '../state/run-state-store.js';
 import { isProcessAlive, terminateProcess } from '../runtime/process.js';
 import { resolveKnowledgeRoots, searchKnowledgeBase } from '../knowledge/search.js';
-import { FeishuWikiClient } from '../feishu/wiki.js';
-import { FeishuDocClient } from '../feishu/doc.js';
-import { FeishuBaseClient } from '../feishu/base.js';
-import { FeishuTaskClient } from '../feishu/task.js';
 import { resolveMessageResources } from '../feishu/message-resource.js';
 import { MemoryStore } from '../state/memory-store.js';
-import { retrieveMemoryContext } from '../memory/retrieve.js';
-import { summarizeThreadTurn } from '../memory/summarize.js';
 import { CodexSessionIndex } from '../codex/session-index.js';
 import { resolveProjectBackendWithOverride, resolveProjectBackendName } from '../backend/factory.js';
+import { getBackendDefinition, listBackendNames } from '../backend/registry.js';
+import { buildQueueKey, isExecutionRunStatus, isVisibleRunStatus, mapRunStatusToPhase, buildMessageDedupeKey, buildCardDedupeKey, truncateExcerpt, friendlyErrorMessage, resolveAdminListTarget, buildConversationKeyForConversation, renderMemorySection, formatAgeFromNow, replaceObject, replaceProjects, } from './service-utils.js';
+import { handleDocCommand as handleDocCommandImpl, handleTaskCommand as handleTaskCommandImpl, handleBaseCommand as handleBaseCommandImpl, handleWikiCommand as handleWikiCommandImpl, } from './feishu-commands.js';
+import { handleMemoryCommand as handleMemoryCommandImpl } from './memory-commands.js';
+import { handleAdminConfigCommand as handleAdminConfigCommandImpl, parseProjectPatch as parseProjectPatchImpl, } from './admin-config.js';
+import { scheduleProjectExecution as scheduleProjectExecutionImpl, buildAcknowledgedRunReply, buildRunStatusSummary, } from './run-scheduler.js';
+import { formatQuotedReply, buildReplyTitle, sanitizeUserVisibleReply, supportsInteractiveCardActions, resolveRunLifecycleReplyMode, buildRunLifecycleCard, } from './reply-builders.js';
+import { executePrompt as executePromptImpl } from './run-pipeline.js';
+import { recoverRuntimeState as recoverRuntimeStateImpl, reloadConfig as reloadConfigImpl, runDigestCycle as runDigestCycleImpl, runMemoryMaintenance as runMemoryMaintenanceImpl, runAuditMaintenance as runAuditMaintenanceImpl, runMaintenanceCycle as runMaintenanceCycleImpl, } from './lifecycle.js';
+import { handleLearnCommand as handleLearnCommandImpl, handleRecallCommand as handleRecallCommandImpl, handleHandoffCommand as handleHandoffCommandImpl, handlePickupCommand as handlePickupCommandImpl, handleReviewCommand as handleReviewCommandImpl, handleApproveCommand as handleApproveCommandImpl, handleRejectCommand as handleRejectCommandImpl, handleInsightsCommand as handleInsightsCommandImpl, handleTrustCommand as handleTrustCommandImpl, handleDigestCommand as handleDigestCommandImpl, handleGapsCommand as handleGapsCommandImpl, handleTimelineCommand as handleTimelineCommandImpl, } from './collab-commands.js';
 import { bindProjectAlias, createProjectAlias, removeProjectAlias, updateProjectConfig, updateStringList } from '../config/mutate.js';
-import { buildFeishuPost, truncateForFeishuCard } from '../feishu/text.js';
+import { buildFeishuPost } from '../feishu/text.js';
 import { ConfigHistoryStore } from '../state/config-history-store.js';
 import { loadBridgeConfigFile } from '../config/load.js';
-import { writeUtf8Atomic } from '../utils/fs.js';
 import { expandHomePath } from '../utils/path.js';
 import { canAccessGlobalCapability, canAccessProject, canAccessProjectCapability, describeMinimumRole, filterAccessibleProjects, resolveProjectAccessRole } from '../security/access.js';
 import { adoptProjectSession as adoptSharedProjectSession, listBridgeSessions as listSharedBridgeSessions, switchProjectBinding as switchSharedProjectBinding } from '../control-plane/project-session.js';
-import { getProjectArchiveDir, getProjectAuditDir, getProjectAuditFile, getProjectCacheDir, getProjectDownloadsDir, getProjectTempDir } from '../projects/paths.js';
+import { getProjectAuditDir, getProjectCacheDir, getProjectDownloadsDir, getProjectTempDir } from '../projects/paths.js';
 import { buildTeamActivityView, detectOverlaps, formatTeamView, formatOverlapAlerts } from '../collaboration/awareness.js';
-import { extractInsights, buildLearnInput, formatRecallResults } from '../collaboration/knowledge.js';
-import { createHandoff, acceptHandoff, createReview, resolveReview, formatHandoff, formatReview, formatReviewResult } from '../collaboration/handoff.js';
-import { analyzeTeamHealth, formatInsightsReport } from '../collaboration/insights.js';
-import { classifyOperation, enforceTrustBoundary, recordRunOutcome, formatTrustState, DEFAULT_TRUST_POLICY } from '../collaboration/trust.js';
-import { buildProjectTimeline, buildOnboardingContext, formatTimeline, isNewActor } from '../collaboration/timeline.js';
+import { createReview } from '../collaboration/handoff.js';
+import { classifyOperation, enforceTrustBoundary } from '../collaboration/trust.js';
 import { HandoffStore } from '../state/handoff-store.js';
 import { TrustStore } from '../state/trust-store.js';
 import { IntentClassifier } from './intent-classifier.js';
-import { buildTeamDigest, formatTeamDigest, createDigestPeriod } from '../collaboration/digest.js';
-import { checkRunAlerts, checkLongRunningAlerts, formatAlert, DEFAULT_ALERT_RULES } from '../collaboration/proactive-alerts.js';
-import { detectKnowledgeGaps, formatKnowledgeGaps } from '../collaboration/knowledge-gaps.js';
-import { estimateCost } from '../observability/cost.js';
+import { checkRunAlerts, formatAlert, DEFAULT_ALERT_RULES } from '../collaboration/proactive-alerts.js';
 export class FeiqueService {
     config;
     feishuClient;
@@ -64,6 +60,10 @@ export class FeiqueService {
     activeRuns = new Map();
     runReplyTargets = new Map();
     chatRateWindows = new Map();
+    /** Dedupe admin notifications for backend failover: one alert per (from→to) direction per process lifetime. */
+    failoverNotified = new Set();
+    /** Dedupe rejected-chat notifications: one reply + one admin alert per chat_id per process lifetime. */
+    rejectedChatNotified = new Set();
     maintenanceTimer;
     digestTimer;
     configWatcher;
@@ -102,79 +102,14 @@ export class FeiqueService {
         }
     }
     async recoverRuntimeState() {
-        const recovered = await this.runStateStore.recoverOrphanedRuns();
-        for (const run of recovered) {
-            await this.auditLog.append({
-                type: 'codex.run.recovered',
-                run_id: run.run_id,
-                project_alias: run.project_alias,
-                conversation_key: run.conversation_key,
-                status: run.status,
-                pid: run.pid,
-            });
-        }
-        return recovered;
+        return recoverRuntimeStateImpl(this);
     }
-    /**
-     * Reload config from disk with validation, diff, and admin notification.
-     *
-     * Flow:
-     * 1. Parse new config — if invalid, reject and notify admin with error
-     * 2. Diff against current config — identify what changed
-     * 3. Apply new config to memory
-     * 4. Notify admin chat(s) with change summary
-     */
     async reloadConfig(configPath) {
-        let newConfig;
-        try {
-            const { config } = await loadBridgeConfigFile(configPath);
-            newConfig = config;
-        }
-        catch (error) {
-            const msg = error instanceof Error ? error.message : String(error);
-            this.logger.error({ configPath, error: msg }, 'Config reload rejected — invalid config');
-            // Notify admin about the broken config
-            const alertText = `🔴 配置变更被拒绝\n\n文件: ${configPath}\n原因: ${msg}\n\n当前服务继续使用旧配置运行。请修正后重新保存。`;
-            for (const chatId of this.config.security.admin_chat_ids) {
-                try {
-                    await this.feishuClient.sendText(chatId, alertText);
-                }
-                catch { /* best-effort */ }
-            }
-            await this.auditLog.append({
-                type: 'config.reload.rejected',
-                config_path: configPath,
-                error: msg,
-            });
-            return { ok: false, error: msg };
+        const result = await reloadConfigImpl(this, configPath);
+        if (result.newConfig) {
+            this.config = result.newConfig;
         }
-        // Diff: what changed?
-        const changes = diffConfigs(this.config, newConfig);
-        if (changes.length === 0) {
-            this.logger.debug({ configPath }, 'Config file changed but no effective differences');
-            return { ok: true, changes: [] };
-        }
-        // Apply
-        const oldConfig = this.config;
-        this.config = newConfig;
-        this.logger.info({ configPath, changeCount: changes.length }, 'Config reloaded');
-        // Notify admin
-        const changeList = changes.slice(0, 15).map((c) => `  • ${c}`).join('\n');
-        const truncated = changes.length > 15 ? `\n  …及其他 ${changes.length - 15} 项变更` : '';
-        const notifyText = `✅ 配置已热加载\n\n${changes.length} 项变更:\n${changeList}${truncated}`;
-        for (const chatId of (oldConfig.security.admin_chat_ids.length > 0 ? oldConfig.security.admin_chat_ids : newConfig.security.admin_chat_ids)) {
-            try {
-                await this.feishuClient.sendText(chatId, notifyText);
-            }
-            catch { /* best-effort */ }
-        }
-        await this.auditLog.append({
-            type: 'config.reload.applied',
-            config_path: configPath,
-            change_count: changes.length,
-            changes: changes.slice(0, 20),
-        });
-        return { ok: true, changes };
+        return { ok: result.ok, ...(result.error ? { error: result.error } : {}), ...(result.changes ? { changes: result.changes } : {}) };
     }
     /**
      * Watch config file for changes and auto-reload with validation.
@@ -247,120 +182,16 @@ export class FeiqueService {
         this.digestTimer.unref?.();
     }
     async runDigestCycle() {
-        const chatIds = this.config.service.team_digest_chat_ids;
-        if (chatIds.length === 0)
-            return;
-        try {
-            const period = createDigestPeriod(this.config.service.team_digest_interval_hours);
-            const runs = await this.runStateStore.listRuns();
-            const memories = this.config.service.memory_enabled
-                ? await this.memoryStore.listRecentMemories({ scope: 'project', project_alias: '' }, 100)
-                : [];
-            const auditEvents = await this.auditLog.tail(500);
-            const digest = buildTeamDigest(runs, memories, auditEvents, period);
-            if (digest.summary.total_runs === 0) {
-                return; // Nothing to report
-            }
-            const text = formatTeamDigest(digest);
-            for (const chatId of chatIds) {
-                try {
-                    await this.feishuClient.sendText(chatId, text);
-                }
-                catch (error) {
-                    this.logger.warn({ chatId, error }, 'Failed to send team digest');
-                }
-            }
-            await this.auditLog.append({
-                type: 'collaboration.digest.sent',
-                period_label: period.label,
-                total_runs: digest.summary.total_runs,
-                chat_ids: chatIds,
-            });
-            // Send per-project mini-digests to project notification chats
-            for (const projectDigest of digest.topProjects) {
-                const projectChatIds = this.config.projects[projectDigest.alias]?.notification_chat_ids ?? [];
-                if (projectChatIds.length === 0)
-                    continue;
-                const successPct = Math.round(projectDigest.success_rate * 100);
-                const miniDigestText = [
-                    `📊 项目摘要 [${projectDigest.alias}] — ${period.label}`,
-                    `运行: ${projectDigest.runs} | 成功率: ${successPct}%`,
-                    `参与者: ${projectDigest.actors.join(', ') || '无'}`,
-                ].join('\n');
-                for (const chatId of projectChatIds) {
-                    try {
-                        await this.feishuClient.sendText(chatId, miniDigestText);
-                    }
-                    catch { /* best-effort */ }
-                }
-            }
-        }
-        catch (error) {
-            this.logger.error({ error }, 'Failed to generate team digest');
-        }
+        return runDigestCycleImpl(this);
     }
     async runMemoryMaintenance() {
-        if (!this.config.service.memory_enabled) {
-            return 0;
-        }
-        const cleaned = await this.memoryStore.cleanupExpiredMemories();
-        if (cleaned > 0) {
-            await this.auditLog.append({
-                type: 'memory.archive.expired.maintenance',
-                count: cleaned,
-            });
-            this.logger.info({ cleaned }, 'Expired memories cleaned by background maintenance');
-        }
-        return cleaned;
+        return runMemoryMaintenanceImpl(this);
     }
     async runAuditMaintenance() {
-        const auditTargets = this.listManagedAuditTargets();
-        let scanned = 0;
-        let archived = 0;
-        let removed = 0;
-        for (const target of auditTargets) {
-            const auditLog = new AuditLog(target.stateDir, target.fileName);
-            const result = await auditLog.cleanup({
-                retentionDays: this.config.service.audit_retention_days,
-                archiveAfterDays: this.config.service.audit_archive_after_days,
-                archiveDir: target.archiveDir,
-            });
-            scanned += 1;
-            archived += result.archived;
-            removed += result.removed;
-        }
-        if (archived > 0 || removed > 0) {
-            await this.auditLog.append({
-                type: 'audit.cleanup.completed',
-                scanned,
-                archived,
-                removed,
-            });
-            this.logger.info({ scanned, archived, removed }, 'Audit retention cleanup completed');
-        }
-        return { scanned, archived, removed };
+        return runAuditMaintenanceImpl(this);
     }
     async runMaintenanceCycle() {
-        if (this.config.service.memory_enabled) {
-            await this.runMemoryMaintenance();
-        }
-        await this.runAuditMaintenance();
-        // Proactive: check for long-running tasks
-        try {
-            const activeRuns = await this.runStateStore.listRuns();
-            const longAlerts = checkLongRunningAlerts(activeRuns);
-            for (const alert of longAlerts) {
-                const text = formatAlert(alert);
-                for (const chatId of this.config.security.admin_chat_ids) {
-                    try {
-                        await this.feishuClient.sendText(chatId, text);
-                    }
-                    catch { /* best-effort */ }
-                }
-                await this.notifyProjectChats(alert.project_alias, text);
-            }
-        }
-        catch { /* best-effort */ }
+        return runMaintenanceCycleImpl(this);
     }
     async handleIncomingMessage(context) {
         this.currentMessageContext = context;
@@ -510,7 +341,7 @@ export class FeiqueService {
                     await this.handleGapsCommand(context);
                     return;
                 case 'prompt':
-                    await this.handlePromptMessage(context, selectionKey, command.prompt, context.text);
+                    await this.handlePromptMessage(context, selectionKey, command.prompt);
                     return;
             }
         }
@@ -655,430 +486,7 @@ export class FeiqueService {
         return this.runStateStore.listRuns();
     }
     async executePrompt(input) {
-        const conversation = (await this.sessionStore.getConversation(input.sessionKey)) ??
-            (await this.sessionStore.ensureConversation(input.sessionKey, {
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                tenant_key: input.tenantKey,
-                scope: input.project.session_scope,
-            }));
-        let currentSession = conversation.projects[input.projectAlias];
-        // Auto-adopt latest local session when no active session exists
-        if (!currentSession?.thread_id && this.config.service.project_switch_auto_adopt_latest) {
-            try {
-                const sessionBackendOverrideForAdopt = await this.sessionStore.getProjectBackend(input.sessionKey, input.projectAlias);
-                const backendForAdopt = this.resolveBackendByName(input.projectAlias, sessionBackendOverrideForAdopt);
-                const latestLocal = await backendForAdopt.findLatestSession(input.project.root);
-                if (latestLocal) {
-                    await this.sessionStore.upsertProjectSession(input.sessionKey, input.projectAlias, {
-                        thread_id: latestLocal.sessionId,
-                    });
-                    const refreshed = await this.sessionStore.getConversation(input.sessionKey);
-                    currentSession = refreshed?.projects[input.projectAlias];
-                    this.logger.info({ projectAlias: input.projectAlias, sessionId: latestLocal.sessionId, backend: latestLocal.backend }, 'Auto-adopted latest local session for prompt execution');
-                }
-            }
-            catch { /* auto-adopt is best-effort */ }
-        }
-        if (this.config.service.memory_enabled) {
-            await this.memoryStore.cleanupExpiredMemories();
-        }
-        const memoryContext = this.config.service.memory_enabled
-            ? await retrieveMemoryContext(this.memoryStore, {
-                conversationKey: input.sessionKey,
-                projectAlias: input.projectAlias,
-                threadId: currentSession?.thread_id,
-                query: input.prompt,
-                searchLimit: this.config.service.memory_search_limit,
-                groupChatId: input.incomingMessage.chat_type === 'group' ? input.incomingMessage.chat_id : undefined,
-                includeGroupMemories: this.config.service.memory_group_enabled && input.incomingMessage.chat_type === 'group',
-            })
-            : { pinnedMemories: [], relevantMemories: [], pinnedGroupMemories: [], relevantGroupMemories: [] };
-        // Direction 6: Inject onboarding context for new actors
-        let onboardingPrefix = '';
-        if (input.actorId && this.config.service.memory_enabled) {
-            try {
-                const allRuns = await this.runStateStore.listRuns();
-                if (isNewActor(input.actorId, allRuns, input.projectAlias)) {
-                    const memories = await this.memoryStore.listRecentMemories({ scope: 'project', project_alias: input.projectAlias }, 10);
-                    const timeline = buildProjectTimeline(allRuns, memories, [], input.projectAlias, 10);
-                    onboardingPrefix = buildOnboardingContext(timeline, memories, input.projectAlias);
-                }
-            }
-            catch { /* onboarding injection is best-effort */ }
-        }
-        const effectivePrompt = onboardingPrefix
-            ? `${onboardingPrefix}\n\n${input.prompt}`
-            : input.prompt;
-        const bridgePrompt = await this.buildBridgePrompt(input.projectAlias, input.project, input.incomingMessage, effectivePrompt, memoryContext);
-        const startedAt = Date.now();
-        const projectRoot = this.resolveProjectRoot(input.project);
-        const runId = input.runId ?? randomUUID();
-        let lastProgressUpdate = 0;
-        const activeRun = {
-            runId,
-            controller: new AbortController(),
-        };
-        this.activeRuns.set(input.queueKey, activeRun);
-        const sessionBackendOverride = await this.sessionStore.getProjectBackend(input.sessionKey, input.projectAlias);
-        const backend = this.resolveBackendByName(input.projectAlias, sessionBackendOverride);
-        const backendLabel = backend.name === 'claude' ? 'Claude' : 'Codex';
-        await this.updateRunStartedReply(input.chatId, input.projectAlias, runId, backendLabel);
-        await this.runStateStore.upsertRun(runId, {
-            queue_key: input.queueKey,
-            conversation_key: input.sessionKey,
-            project_alias: input.projectAlias,
-            chat_id: input.chatId,
-            actor_id: input.actorId,
-            actor_name: input.incomingMessage.actor_name,
-            session_id: currentSession?.thread_id,
-            project_root: projectRoot,
-            prompt_excerpt: truncateExcerpt(input.prompt),
-            status: 'running',
-            status_detail: undefined,
-        });
-        await this.auditLog.append({
-            type: 'codex.run.started',
-            run_id: runId,
-            chat_id: input.chatId,
-            actor_id: input.actorId,
-            project_alias: input.projectAlias,
-            conversation_key: input.sessionKey,
-            session_id: currentSession?.thread_id,
-            prompt: input.prompt,
-        });
-        await this.appendProjectAuditEvent(input.projectAlias, input.project, {
-            type: 'codex.run.started',
-            run_id: runId,
-            chat_id: input.chatId,
-            actor_id: input.actorId,
-            session_id: currentSession?.thread_id,
-            project_root: projectRoot,
-        });
-        this.logger.info({
-            runId,
-            queueKey: input.queueKey,
-            sessionKey: input.sessionKey,
-            projectAlias: input.projectAlias,
-            projectRoot,
-            sessionId: currentSession?.thread_id,
-        }, 'Codex run started');
-        this.metrics?.recordCodexTurnStarted(input.projectAlias, runId);
-        try {
-            const outputTokenLimit = backend.name === 'claude'
-                ? (this.config.claude?.output_token_limit ?? this.config.codex.output_token_limit)
-                : this.config.codex.output_token_limit;
-            const result = await backend.run({
-                workdir: input.project.root,
-                prompt: bridgePrompt,
-                sessionId: currentSession?.thread_id,
-                timeoutMs: backend.name === 'claude'
-                    ? (this.config.claude?.run_timeout_ms ?? this.config.codex.run_timeout_ms)
-                    : this.config.codex.run_timeout_ms,
-                signal: activeRun.controller.signal,
-                logger: this.logger,
-                projectConfig: backend.name === 'codex'
-                    ? {
-                        profile: input.project.profile ?? this.config.codex.default_profile,
-                        model: input.project.codex_model,
-                        sandbox: input.project.codex_sandbox ?? input.project.sandbox ?? this.config.codex.default_sandbox,
-                        tempDir: this.resolveProjectTempDir(input.projectAlias, input.project),
-                        cacheDir: this.resolveProjectCacheDir(input.projectAlias, input.project),
-                    }
-                    : {
-                        permissionMode: input.project.claude_permission_mode ?? this.config.claude?.default_permission_mode,
-                        model: input.project.claude_model ?? this.config.claude?.default_model,
-                        maxBudgetUsd: input.project.claude_max_budget_usd ?? this.config.claude?.max_budget_usd,
-                        allowedTools: input.project.claude_allowed_tools ?? this.config.claude?.allowed_tools,
-                        systemPromptAppend: input.project.claude_system_prompt_append ?? this.config.claude?.system_prompt_append,
-                    },
-                onSpawn: async (pid) => {
-                    activeRun.pid = pid;
-                    await this.runStateStore.upsertRun(runId, {
-                        queue_key: input.queueKey,
-                        conversation_key: input.sessionKey,
-                        project_alias: input.projectAlias,
-                        chat_id: input.chatId,
-                        actor_id: input.actorId,
-                        session_id: currentSession?.thread_id,
-                        project_root: projectRoot,
-                        prompt_excerpt: truncateExcerpt(input.prompt),
-                        status: 'running',
-                        status_detail: undefined,
-                        pid,
-                    });
-                },
-                onEvent: async (event) => {
-                    if (!this.config.service.emit_progress_updates) {
-                        return;
-                    }
-                    const message = backend.summarizeEvent(event);
-                    if (!message) {
-                        return;
-                    }
-                    const now = Date.now();
-                    if (now - lastProgressUpdate < this.config.service.progress_update_interval_ms) {
-                        return;
-                    }
-                    lastProgressUpdate = now;
-                    await this.updateRunProgressReply(input, runId, message, backendLabel);
-                },
-            });
-            const excerpt = result.finalMessage.slice(0, outputTokenLimit);
-            if (!excerpt.trim()) {
-                this.logger.warn({
-                    runId,
-                    queueKey: input.queueKey,
-                    sessionKey: input.sessionKey,
-                    projectAlias: input.projectAlias,
-                    sessionId: result.sessionId,
-                    durationMs: Date.now() - startedAt,
-                }, 'Codex run completed without a displayable final message');
-            }
-            // Extract and send any [SEND_FILE:path] markers before text reply
-            const { cleanText: excerptWithoutFiles, filePaths } = extractFileMarkers(excerpt);
-            if (filePaths.length > 0) {
-                for (const filePath of filePaths) {
-                    try {
-                        await this.feishuClient.sendFile(input.chatId, filePath);
-                        this.logger.info({ chatId: input.chatId, filePath }, 'Sent file to Feishu');
-                    }
-                    catch (err) {
-                        const msg = err instanceof Error ? err.message : String(err);
-                        this.logger.warn({ chatId: input.chatId, filePath, error: msg }, 'Failed to send file to Feishu');
-                        // Notify user about the failure inline
-                        excerptWithoutFiles === excerpt || await this.feishuClient.sendText(input.chatId, `⚠️ 文件发送失败: ${filePath}\n${msg}`);
-                    }
-                }
-            }
-            const finalExcerpt = excerptWithoutFiles.trim() || excerpt;
-            const cardSummary = truncateForFeishuCard(finalExcerpt || `${backendLabel} 已完成，但没有返回可显示文本。`);
-            await this.auditLog.append({
-                type: 'codex.run.completed',
-                run_id: runId,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                project_alias: input.projectAlias,
-                conversation_key: input.sessionKey,
-                session_id: result.sessionId,
-                exit_code: result.exitCode,
-                duration_ms: Date.now() - startedAt,
-                backend: backend.name,
-            });
-            await this.appendProjectAuditEvent(input.projectAlias, input.project, {
-                type: 'codex.run.completed',
-                run_id: runId,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                session_id: result.sessionId,
-                duration_ms: Date.now() - startedAt,
-                backend: backend.name,
-            });
-            this.logger.info({
-                runId,
-                queueKey: input.queueKey,
-                sessionKey: input.sessionKey,
-                projectAlias: input.projectAlias,
-                sessionId: result.sessionId,
-                exitCode: result.exitCode,
-                finalMessageChars: excerpt.length,
-                durationMs: Date.now() - startedAt,
-            }, 'Codex run completed');
-            await this.sessionStore.upsertProjectSession(input.sessionKey, input.projectAlias, {
-                thread_id: result.sessionId,
-                last_prompt: input.prompt,
-                last_response_excerpt: excerpt,
-            });
-            if (this.config.service.memory_enabled && result.sessionId) {
-                const summaryDraft = summarizeThreadTurn({
-                    previousSummary: memoryContext.threadSummary?.summary,
-                    prompt: input.prompt,
-                    responseExcerpt: excerpt,
-                    maxChars: this.config.service.thread_summary_max_chars,
-                });
-                const threadSummary = await this.memoryStore.upsertThreadSummary({
-                    conversation_key: input.sessionKey,
-                    project_alias: input.projectAlias,
-                    thread_id: result.sessionId,
-                    summary: summaryDraft.summary,
-                    recent_prompt: input.prompt,
-                    recent_response_excerpt: excerpt,
-                    files_touched: summaryDraft.filesTouched,
-                    open_tasks: summaryDraft.openTasks,
-                    decisions: summaryDraft.decisions,
-                });
-                await this.auditLog.append({
-                    type: 'memory.thread_summary.updated',
-                    run_id: runId,
-                    project_alias: input.projectAlias,
-                    conversation_key: input.sessionKey,
-                    thread_id: result.sessionId,
-                    files_touched: threadSummary.files_touched,
-                });
-            }
-            await this.enforceSessionHistoryLimit(input.sessionKey, input.projectAlias);
-            await this.runStateStore.upsertRun(runId, {
-                queue_key: input.queueKey,
-                conversation_key: input.sessionKey,
-                project_alias: input.projectAlias,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                session_id: result.sessionId,
-                project_root: projectRoot,
-                pid: activeRun.pid,
-                prompt_excerpt: truncateExcerpt(input.prompt),
-                status: 'success',
-                status_detail: undefined,
-                input_tokens: result.inputTokens,
-                output_tokens: result.outputTokens,
-                estimated_cost_usd: estimateCost(result.inputTokens, result.outputTokens, backend.name),
-            });
-            this.metrics?.recordCodexTurn('success', input.projectAlias, (Date.now() - startedAt) / 1000, runId);
-            // Record cost and token metrics
-            if (result.inputTokens || result.outputTokens) {
-                const costUsd = estimateCost(result.inputTokens, result.outputTokens, backend.name) ?? 0;
-                this.metrics?.recordCost(input.projectAlias, backend.name, costUsd);
-                this.metrics?.recordTokens(input.projectAlias, backend.name, result.inputTokens ?? 0, result.outputTokens ?? 0);
-            }
-            // Direction 5: Record trust outcome
-            try {
-                const trustState = await this.trustStore.getOrCreate(input.projectAlias);
-                const updated = recordRunOutcome(trustState, true, DEFAULT_TRUST_POLICY);
-                await this.trustStore.update(input.projectAlias, updated);
-                this.metrics?.recordTrustLevel(input.projectAlias, updated.current_level);
-            }
-            catch { /* trust tracking is best-effort */ }
-            // Proactive alerts: check if this run triggers any team alerts
-            try {
-                const completedRunState = await this.runStateStore.getRun(runId);
-                if (completedRunState) {
-                    await this.checkAndSendAlerts(completedRunState);
-                }
-            }
-            catch { /* alerts are best-effort */ }
-            // Direction 2: Auto-extract knowledge
-            if (this.config.service.memory_enabled && excerpt.length >= 100) {
-                try {
-                    const insight = extractInsights(input.prompt, excerpt, input.projectAlias);
-                    if (insight) {
-                        await this.memoryStore.saveProjectMemory({
-                            project_alias: insight.project_alias,
-                            title: insight.title,
-                            content: insight.content,
-                            tags: insight.tags,
-                            source: 'auto',
-                            created_by: input.actorId,
-                        });
-                    }
-                }
-                catch { /* auto-extraction is best-effort */ }
-            }
-            await this.sendOrUpdateRunOutcome({
-                input,
-                runId,
-                title: `${backendLabel} 已完成`,
-                body: finalExcerpt || `${backendLabel} 已完成，但没有返回可显示文本。`,
-                runStatus: 'success',
-                runPhase: '已完成',
-                cardSummary,
-                sessionId: result.sessionId,
-            });
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            const cancelled = error instanceof Error && error.name === 'AbortError' && activeRun.cancelReason === 'user';
-            const status = cancelled ? 'cancelled' : 'failure';
-            if (!cancelled && error instanceof Error && error.name === 'AbortError') {
-                activeRun.cancelReason = 'timeout';
-            }
-            if (!cancelled && activeRun.cancelReason === 'timeout') {
-                this.metrics?.recordCodexTurn('failure', input.projectAlias, (Date.now() - startedAt) / 1000, runId);
-            }
-            else {
-                this.metrics?.recordCodexTurn(cancelled ? 'cancelled' : 'failure', input.projectAlias, (Date.now() - startedAt) / 1000, runId);
-            }
-            await this.runStateStore.upsertRun(runId, {
-                queue_key: input.queueKey,
-                conversation_key: input.sessionKey,
-                project_alias: input.projectAlias,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                session_id: currentSession?.thread_id,
-                project_root: projectRoot,
-                pid: activeRun.pid,
-                prompt_excerpt: truncateExcerpt(input.prompt),
-                status,
-                status_detail: undefined,
-                error: message,
-            });
-            await this.auditLog.append({
-                type: cancelled ? 'codex.run.cancelled' : 'codex.run.failed',
-                run_id: runId,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                project_alias: input.projectAlias,
-                conversation_key: input.sessionKey,
-                error: message,
-            });
-            await this.appendProjectAuditEvent(input.projectAlias, input.project, {
-                type: cancelled ? 'codex.run.cancelled' : 'codex.run.failed',
-                run_id: runId,
-                chat_id: input.chatId,
-                actor_id: input.actorId,
-                error: message,
-            });
-            // Direction 5: Record trust failure (only for actual failures, not cancellations)
-            if (!cancelled) {
-                try {
-                    const trustState = await this.trustStore.getOrCreate(input.projectAlias);
-                    const updated = recordRunOutcome(trustState, false, DEFAULT_TRUST_POLICY);
-                    await this.trustStore.update(input.projectAlias, updated);
-                }
-                catch { /* trust tracking is best-effort */ }
-                // Notify project chats about the failure
-                await this.notifyProjectChats(input.projectAlias, `❌ 运行失败 [${input.projectAlias}]\n${message.slice(0, 200)}`);
-                // Proactive alerts on failure
-                try {
-                    const failedRunState = await this.runStateStore.getRun(runId);
-                    if (failedRunState) {
-                        await this.checkAndSendAlerts(failedRunState);
-                    }
-                }
-                catch { /* alerts are best-effort */ }
-            }
-            if (cancelled) {
-                this.logger.warn({
-                    runId,
-                    queueKey: input.queueKey,
-                    sessionKey: input.sessionKey,
-                    projectAlias: input.projectAlias,
-                    durationMs: Date.now() - startedAt,
-                }, 'Codex run cancelled');
-            }
-            else {
-                this.logger.error({
-                    error,
-                    runId,
-                    queueKey: input.queueKey,
-                    sessionKey: input.sessionKey,
-                    projectAlias: input.projectAlias,
-                    durationMs: Date.now() - startedAt,
-                }, 'Codex run failed');
-            }
-            await this.sendOrUpdateRunOutcome({
-                input,
-                runId,
-                title: cancelled ? '运行已取消' : '执行失败',
-                body: cancelled ? '当前运行已取消。' : ['执行失败。', '', friendlyErrorMessage(message)].join('\n'),
-                runStatus: cancelled ? 'cancelled' : 'failure',
-                runPhase: cancelled ? '已取消' : '失败',
-                cardSummary: truncateForFeishuCard(cancelled ? '当前运行已取消。' : friendlyErrorMessage(message)),
-            });
-        }
-        finally {
-            this.activeRuns.delete(input.queueKey);
-            this.runReplyTargets.delete(runId);
-        }
+        return executePromptImpl(this, input);
     }
     async handleProjectCommand(context, selectionKey, alias, followupPrompt) {
         if (!alias) {
@@ -1095,7 +503,7 @@ export class FeiqueService {
             await this.sendTextReply(context.chat_id, `当前 chat_id 无权切换到项目 ${alias}。至少需要 ${describeMinimumRole('viewer')} 权限。`, context.message_id, context.text);
             return;
         }
-        const project = this.requireProject(alias);
+        this.requireProject(alias); // throws if missing — validates the alias before switching
         const switched = await switchSharedProjectBinding(this.config, this.sessionStore, this.codexSessionIndex, {
             chatId: context.chat_id,
             actorId: context.actor_id,
@@ -1126,7 +534,7 @@ export class FeiqueService {
                 await this.handleReadOnlyFollowupCommand(context, selectionKey, followupCommand, followupPrompt);
                 return;
             }
-            await this.handlePromptMessage(context, selectionKey, followupPrompt, context.text);
+            await this.handlePromptMessage(context, selectionKey, followupPrompt);
             return;
         }
         await this.sendTextReply(context.chat_id, switched.text, context.message_id, context.text);
@@ -1175,13 +583,13 @@ export class FeiqueService {
                 await this.handleAdminCommand(context, selectionKey, command);
                 return;
             case 'prompt':
-                await this.handlePromptMessage(context, selectionKey, followupPrompt, context.text);
+                await this.handlePromptMessage(context, selectionKey, followupPrompt);
                 return;
             default:
-                await this.handlePromptMessage(context, selectionKey, followupPrompt, context.text);
+                await this.handlePromptMessage(context, selectionKey, followupPrompt);
         }
     }
-    async handlePromptMessage(context, selectionKey, rawPrompt, originalText) {
+    async handlePromptMessage(context, selectionKey, rawPrompt) {
         const prompt = normalizeIncomingText(rawPrompt) || (context.attachments.length > 0 ? '请结合这条飞书消息附带的多媒体信息继续处理。' : '');
         if (!prompt) {
             return;
@@ -1372,7 +780,6 @@ export class FeiqueService {
     }
     async handleSessionCommand(context, selectionKey, action, threadId) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const sessions = await this.sessionStore.listProjectSessions(projectContext.sessionKey, projectContext.projectAlias);
         const activeSessionId = (await this.sessionStore.getConversation(projectContext.sessionKey))?.projects[projectContext.projectAlias]?.thread_id;
         switch (action) {
             case 'list': {
@@ -1441,215 +848,39 @@ export class FeiqueService {
     // ── Direction 2: Knowledge Loop ──
     async handleLearnCommand(context, selectionKey, value) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const input = buildLearnInput(value, projectContext.projectAlias, context.actor_id, context.chat_id);
-        await this.memoryStore.saveProjectMemory({
-            project_alias: input.project_alias,
-            title: input.title,
-            content: input.content,
-            tags: input.tags,
-            source: input.source,
-            created_by: context.actor_id,
-        });
-        await this.auditLog.append({
-            type: 'collaboration.knowledge.learned',
-            project_alias: input.project_alias,
-            actor_id: context.actor_id,
-            title: input.title,
-        });
-        await this.sendTextReply(context.chat_id, `💡 团队知识已记录: "${input.title}"\n项目: ${input.project_alias}`, context.message_id, context.text);
+        return handleLearnCommandImpl(this, context, projectContext, value);
     }
     async handleRecallCommand(context, selectionKey, query) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const memories = await this.memoryStore.searchMemories({ scope: 'project', project_alias: projectContext.projectAlias }, query, 10);
-        const text = formatRecallResults(memories, query);
-        await this.sendTextReply(context.chat_id, text, context.message_id, context.text);
+        return handleRecallCommandImpl(this, context, projectContext, query);
     }
-    // ── Direction 3: Handoff & Review ──
     async handleHandoffCommand(context, selectionKey, summary) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const conversation = await this.sessionStore.getConversation(projectContext.sessionKey);
-        const projectState = conversation?.projects[projectContext.projectAlias];
-        const record = createHandoff({
-            from_actor_id: context.actor_id ?? 'unknown',
-            from_actor_name: context.actor_name,
-            project_alias: projectContext.projectAlias,
-            conversation_key: projectContext.sessionKey,
-            thread_id: projectState?.active_thread_id ?? projectState?.thread_id,
-            summary: summary ?? '会话交接',
-            last_prompt: projectState?.last_prompt,
-            last_response_excerpt: projectState?.last_response_excerpt,
-        });
-        await this.handoffStore.addHandoff(record);
-        await this.auditLog.append({
-            type: 'collaboration.handoff.created',
-            handoff_id: record.id,
-            from_actor_id: record.from_actor_id,
-            project_alias: record.project_alias,
-        });
-        await this.sendTextReply(context.chat_id, formatHandoff(record), context.message_id, context.text);
+        return handleHandoffCommandImpl(this, context, projectContext, summary);
     }
     async handlePickupCommand(context, selectionKey, id) {
-        let handoff = id
-            ? await this.handoffStore.updateHandoff(id, {}) // just to find it
-            : await this.handoffStore.getPendingHandoffForActor(context.actor_id ?? '', undefined);
-        if (id) {
-            handoff = await this.handoffStore.getPendingHandoff();
-            if (handoff && !handoff.id.startsWith(id)) {
-                handoff = null;
-            }
-        }
-        if (!handoff || handoff.status !== 'pending') {
-            await this.sendTextReply(context.chat_id, '没有找到待接手的交接任务。', context.message_id, context.text);
-            return;
-        }
-        const accepted = acceptHandoff(handoff, context.actor_id ?? 'unknown');
-        await this.handoffStore.updateHandoff(handoff.id, {
-            status: 'accepted',
-            accepted_at: accepted.accepted_at,
-            accepted_by: accepted.accepted_by,
-        });
-        // Adopt the session if there's a thread_id
-        if (handoff.thread_id) {
-            const projectContext = await this.resolveProjectContext(context, selectionKey);
-            await this.sessionStore.setActiveProjectSession(projectContext.sessionKey, handoff.project_alias, handoff.thread_id);
-        }
-        await this.auditLog.append({
-            type: 'collaboration.handoff.accepted',
-            handoff_id: handoff.id,
-            accepted_by: context.actor_id,
-            project_alias: handoff.project_alias,
-        });
-        await this.sendTextReply(context.chat_id, `✅ 已接手 ${handoff.from_actor_name ?? handoff.from_actor_id} 的交接任务 [${handoff.project_alias}]\n摘要: ${handoff.summary}`, context.message_id, context.text);
+        const projectContext = await this.resolveProjectContext(context, selectionKey);
+        return handlePickupCommandImpl(this, context, projectContext, id);
     }
     async handleReviewCommand(context, selectionKey) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const runs = await this.runStateStore.listRuns();
-        const latestRun = runs.find((r) => r.project_alias === projectContext.projectAlias && (r.status === 'success' || r.status === 'failure'));
-        if (!latestRun) {
-            await this.sendTextReply(context.chat_id, '没有找到最近的运行结果可供评审。', context.message_id, context.text);
-            return;
-        }
-        const review = createReview({
-            run_id: latestRun.run_id,
-            project_alias: projectContext.projectAlias,
-            chat_id: context.chat_id,
-            actor_id: context.actor_id ?? 'unknown',
-            content_excerpt: latestRun.prompt_excerpt,
-        });
-        await this.handoffStore.addReview(review);
-        await this.auditLog.append({
-            type: 'collaboration.review.created',
-            review_id: review.id,
-            run_id: review.run_id,
-            project_alias: review.project_alias,
-        });
-        await this.sendTextReply(context.chat_id, formatReview(review), context.message_id, context.text);
+        return handleReviewCommandImpl(this, context, projectContext);
     }
     async handleApproveCommand(context, comment) {
-        const pending = await this.handoffStore.getPendingReview(context.chat_id);
-        if (!pending) {
-            await this.sendTextReply(context.chat_id, '当前没有待评审的内容。', context.message_id, context.text);
-            return;
-        }
-        const resolved = resolveReview(pending, 'approved', context.actor_id ?? 'unknown', comment);
-        await this.handoffStore.updateReview(pending.id, {
-            status: 'approved',
-            reviewer_id: resolved.reviewer_id,
-            review_comment: resolved.review_comment,
-            resolved_at: resolved.resolved_at,
-        });
-        await this.auditLog.append({
-            type: 'collaboration.review.approved',
-            review_id: pending.id,
-            reviewer_id: context.actor_id,
-        });
-        await this.sendTextReply(context.chat_id, formatReviewResult(resolved), context.message_id, context.text);
+        return handleApproveCommandImpl(this, context, comment);
     }
     async handleRejectCommand(context, reason) {
-        const pending = await this.handoffStore.getPendingReview(context.chat_id);
-        if (!pending) {
-            await this.sendTextReply(context.chat_id, '当前没有待评审的内容。', context.message_id, context.text);
-            return;
-        }
-        const resolved = resolveReview(pending, 'rejected', context.actor_id ?? 'unknown', reason);
-        await this.handoffStore.updateReview(pending.id, {
-            status: 'rejected',
-            reviewer_id: resolved.reviewer_id,
-            review_comment: resolved.review_comment,
-            resolved_at: resolved.resolved_at,
-        });
-        await this.auditLog.append({
-            type: 'collaboration.review.rejected',
-            review_id: pending.id,
-            reviewer_id: context.actor_id,
-            reason,
-        });
-        await this.sendTextReply(context.chat_id, formatReviewResult(resolved), context.message_id, context.text);
+        return handleRejectCommandImpl(this, context, reason);
     }
-    // ── Direction 4: Insights ──
     async handleInsightsCommand(context) {
-        const runs = await this.runStateStore.listRuns();
-        const auditEvents = await this.auditLog.tail(500);
-        const insights = analyzeTeamHealth(runs, auditEvents);
-        const text = formatInsightsReport(insights);
-        await this.sendTextReply(context.chat_id, text, context.message_id, context.text);
+        return handleInsightsCommandImpl(this, context);
     }
-    // ── Direction 5: Trust ──
     async handleTrustCommand(context, selectionKey, action, level) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        if (action === 'set' && level) {
-            const TRUST_ORDER = ['observe', 'suggest', 'execute', 'autonomous'];
-            const validLevels = [...TRUST_ORDER];
-            const state = await this.trustStore.getOrCreate(projectContext.projectAlias);
-            // Handle relative promote/demote from natural language
-            let resolvedLevel = level;
-            if (level === '_promote') {
-                const idx = TRUST_ORDER.indexOf(state.current_level);
-                if (idx >= TRUST_ORDER.length - 1) {
-                    await this.sendTextReply(context.chat_id, `已经是最高信任等级 (${state.current_level})，无法继续提升。`, context.message_id, context.text);
-                    return;
-                }
-                resolvedLevel = TRUST_ORDER[idx + 1];
-            }
-            else if (level === '_demote') {
-                const idx = TRUST_ORDER.indexOf(state.current_level);
-                if (idx <= 0) {
-                    await this.sendTextReply(context.chat_id, `已经是最低信任等级 (${state.current_level})，无法继续降低。`, context.message_id, context.text);
-                    return;
-                }
-                resolvedLevel = TRUST_ORDER[idx - 1];
-            }
-            if (!validLevels.includes(resolvedLevel)) {
-                await this.sendTextReply(context.chat_id, `无效的信任等级。有效值: ${validLevels.join(', ')}`, context.message_id, context.text);
-                return;
-            }
-            state.current_level = resolvedLevel;
-            state.last_evaluated_at = new Date().toISOString();
-            await this.trustStore.update(projectContext.projectAlias, state);
-            this.metrics?.recordTrustLevel(projectContext.projectAlias, resolvedLevel);
-            await this.auditLog.append({
-                type: 'collaboration.trust.set',
-                project_alias: projectContext.projectAlias,
-                actor_id: context.actor_id,
-                level,
-            });
-            await this.sendTextReply(context.chat_id, `🛡️ 项目 ${projectContext.projectAlias} 的信任等级已设置为: ${level}`, context.message_id, context.text);
-            return;
-        }
-        const state = await this.trustStore.getOrCreate(projectContext.projectAlias);
-        await this.sendTextReply(context.chat_id, formatTrustState(state), context.message_id, context.text);
+        return handleTrustCommandImpl(this, context, projectContext, action, level);
     }
-    // ── Team Digest ──
     async handleDigestCommand(context) {
-        const period = createDigestPeriod(this.config.service.team_digest_interval_hours);
-        const runs = await this.runStateStore.listRuns();
-        const memories = this.config.service.memory_enabled
-            ? await this.memoryStore.listRecentMemories({ scope: 'project', project_alias: '' }, 100)
-            : [];
-        const auditEvents = await this.auditLog.tail(500);
-        const digest = buildTeamDigest(runs, memories, auditEvents, period);
-        const text = formatTeamDigest(digest);
-        await this.sendTextReply(context.chat_id, text, context.message_id, context.text);
+        return handleDigestCommandImpl(this, context);
     }
     // ── Proactive Alerts ──
     async checkAndSendAlerts(completedRun) {
@@ -1681,26 +912,12 @@ export class FeiqueService {
     }
     // ── Knowledge Gap Detection ──
     async handleGapsCommand(context) {
-        const runs = await this.runStateStore.listRuns();
-        const memories = this.config.service.memory_enabled
-            ? await this.memoryStore.listRecentMemories({ scope: 'project', project_alias: '' }, 200)
-            : [];
-        const gaps = detectKnowledgeGaps(runs, memories);
-        const text = formatKnowledgeGaps(gaps);
-        await this.sendTextReply(context.chat_id, text, context.message_id, context.text);
+        return handleGapsCommandImpl(this, context);
     }
     // ── Direction 6: Timeline ──
     async handleTimelineCommand(context, selectionKey, projectArg) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const projectAlias = projectArg ?? projectContext.projectAlias;
-        const runs = await this.runStateStore.listRuns();
-        const auditEvents = await this.auditLog.tail(200);
-        const memories = this.config.service.memory_enabled
-            ? await this.memoryStore.listRecentMemories({ scope: 'project', project_alias: projectAlias }, 20)
-            : [];
-        const timeline = buildProjectTimeline(runs, memories, auditEvents, projectAlias, 20);
-        const text = formatTimeline(timeline);
-        await this.sendTextReply(context.chat_id, text, context.message_id, context.text);
+        return handleTimelineCommandImpl(this, context, projectContext, projectArg);
     }
     async handleAdminCommand(context, selectionKey, command) {
         const runtimeConfigPath = this.runtimeControl?.configPath;
@@ -1758,37 +975,42 @@ export class FeiqueService {
                 await this.sendTextReply(context.chat_id, this.buildProjectsAdminText(globalAdmin || serviceObserver ? undefined : new Set(projectOperatorAliases)), context.message_id, context.text);
                 return;
             }
-            if (command.action === 'add' || command.action === 'create') {
+            if (command.action === 'add' || command.action === 'create' || command.action === 'setup') {
                 if (!(globalAdmin || globalConfigAdmin)) {
                     await this.sendTextReply(context.chat_id, '当前 chat_id 无权动态接入项目。', context.message_id, context.text);
                     return;
                 }
                 if (!command.alias || !command.value) {
-                    await this.sendTextReply(context.chat_id, command.action === 'create' ? '用法: /admin project create <alias> <root>' : '用法: /admin project add <alias> <root>', context.message_id, context.text);
+                    await this.sendTextReply(context.chat_id, command.action === 'setup'
+                        ? '用法: /admin project setup <alias> <root>\n一键创建项目并将当前群设为 operator。'
+                        : command.action === 'create' ? '用法: /admin project create <alias> <root>' : '用法: /admin project add <alias> <root>', context.message_id, context.text);
                     return;
                 }
-                if (command.action === 'create' && this.config.projects[command.alias]) {
+                const isCreate = command.action === 'create' || command.action === 'setup';
+                if (isCreate && this.config.projects[command.alias]) {
                     await this.sendTextReply(context.chat_id, `项目已存在: ${command.alias}`, context.message_id, context.text);
                     return;
                 }
                 const resolvedRoot = path.resolve(expandHomePath(command.value));
                 const snapshot = await this.snapshotConfigForAdminMutation(context, `project.${command.action}`, `${command.alias} -> ${resolvedRoot}`);
-                if (command.action === 'create') {
+                if (isCreate) {
                     await createProjectAlias({ configPath: runtimeConfigPath, alias: command.alias, root: command.value });
                 }
                 else {
                     await bindProjectAlias({ configPath: runtimeConfigPath, alias: command.alias, root: command.value });
                 }
+                // For setup: auto-add current chat as operator + viewer
+                const autoOperator = command.action === 'setup' ? [context.chat_id] : [];
                 this.config.projects[command.alias] = {
                     root: resolvedRoot,
                     session_scope: 'chat',
                     mention_required: true,
                     knowledge_paths: [],
                     wiki_space_ids: [],
-                    viewer_chat_ids: [],
-                    operator_chat_ids: [],
+                    viewer_chat_ids: [...autoOperator],
+                    operator_chat_ids: [...autoOperator],
                     admin_chat_ids: [],
-                    notification_chat_ids: [],
+                    notification_chat_ids: [...autoOperator],
                     session_operator_chat_ids: [],
                     run_operator_chat_ids: [],
                     config_admin_chat_ids: [],
@@ -1798,7 +1020,27 @@ export class FeiqueService {
                     chat_rate_limit_window_seconds: 60,
                     chat_rate_limit_max_runs: 20,
                 };
-                await this.sendTextReply(context.chat_id, `${command.action === 'create' ? '已创建并接入项目' : '已接入项目'}: ${command.alias}\n根目录: ${resolvedRoot}`, context.message_id, context.text);
+                // Persist the auto-added chat_ids to config file for setup
+                if (command.action === 'setup') {
+                    await updateProjectConfig(runtimeConfigPath, command.alias, {
+                        viewer_chat_ids: autoOperator,
+                        operator_chat_ids: autoOperator,
+                        notification_chat_ids: autoOperator,
+                    });
+                }
+                const replyLines = [
+                    `${isCreate ? '已创建并接入项目' : '已接入项目'}: ${command.alias}`,
+                    `根目录: ${resolvedRoot}`,
+                ];
+                if (command.action === 'setup') {
+                    replyLines.push(`已自动将当前群设为 operator + viewer + notification`);
+                    replyLines.push('');
+                    replyLines.push('可在其他群执行以下命令添加权限:');
+                    replyLines.push(`/admin project set ${command.alias} operator_chat_ids +<chat_id>`);
+                    replyLines.push('');
+                    replyLines.push(`切换到此项目: /project ${command.alias}`);
+                }
+                await this.sendTextReply(context.chat_id, replyLines.join('\n'), context.message_id, context.text);
                 await this.appendAdminAudit({
                     type: `admin.project.${command.action}`,
                     chat_id: context.chat_id,
@@ -1806,8 +1048,9 @@ export class FeiqueService {
                     project_alias: command.alias,
                     root: resolvedRoot,
                     snapshot_id: snapshot.id,
+                    auto_operator: command.action === 'setup' ? context.chat_id : undefined,
                 });
-                this.logger.info({ alias: command.alias, root: resolvedRoot, actorId: context.actor_id, created: command.action === 'create' }, command.action === 'create' ? 'Project created by Feishu admin' : 'Project added by Feishu admin');
+                this.logger.info({ alias: command.alias, root: resolvedRoot, actorId: context.actor_id, created: isCreate, setup: command.action === 'setup' }, command.action === 'setup' ? 'Project setup by Feishu admin' : isCreate ? 'Project created by Feishu admin' : 'Project added by Feishu admin');
                 return;
             }
             if (command.action === 'remove') {
@@ -1845,9 +1088,9 @@ export class FeiqueService {
                 await this.sendTextReply(context.chat_id, `当前 chat_id 无权修改项目 ${command.alias}。`, context.message_id, context.text);
                 return;
             }
-            const patch = this.parseProjectPatch(command.field, command.value);
+            const patch = parseProjectPatchImpl(this.config, command.field, command.value, command.alias);
             if (!patch) {
-                await this.sendTextReply(context.chat_id, '支持字段: root, profile, sandbox, session_scope, mention_required, description, viewer_chat_ids, operator_chat_ids, admin_chat_ids, session_operator_chat_ids, run_operator_chat_ids, config_admin_chat_ids, download_dir, temp_dir, cache_dir, log_dir, run_priority, chat_rate_limit_window_seconds, chat_rate_limit_max_runs', context.message_id, context.text);
+                await this.sendTextReply(context.chat_id, '支持字段: root, profile, sandbox, session_scope, mention_required, description, viewer_chat_ids, operator_chat_ids, admin_chat_ids, notification_chat_ids, session_operator_chat_ids, run_operator_chat_ids, config_admin_chat_ids, download_dir, temp_dir, cache_dir, log_dir, run_priority, chat_rate_limit_window_seconds, chat_rate_limit_max_runs\n\n列表字段支持增量操作: +value 添加, -value 移除', context.message_id, context.text);
                 return;
             }
             const snapshot = await this.snapshotConfigForAdminMutation(context, 'project.set', `${command.alias}.${command.field}=${command.value}`);
@@ -1928,8 +1171,9 @@ export class FeiqueService {
             return;
         }
         const normalized = name.toLowerCase();
-        if (normalized !== 'codex' && normalized !== 'claude') {
-            await this.sendTextReply(context.chat_id, `未知后端: ${name}\n可选值: codex | claude`, context.message_id, context.text);
+        if (!getBackendDefinition(normalized)) {
+            const known = listBackendNames().join(' | ');
+            await this.sendTextReply(context.chat_id, `未知后端: ${name}\n可选值: ${known}`, context.message_id, context.text);
             return;
         }
         const backendName = normalized;
@@ -1942,313 +1186,21 @@ export class FeiqueService {
             conversation_key: projectContext.sessionKey,
             backend: backendName,
         });
-        const label = backendName === 'claude' ? 'Claude Code' : 'Codex';
+        const label = backendName === 'claude' ? 'Claude Code' : backendName === 'qwen' ? 'Qwen Code' : 'Codex';
         await this.sendTextReply(context.chat_id, `项目 ${projectContext.projectAlias} 已切换到 ${label} 后端。\n下一条消息将使用 ${label} 执行。`, context.message_id, context.text);
     }
     async handleMemoryCommand(context, selectionKey, action, scope, value, filters) {
-        if (!this.config.service.memory_enabled) {
-            await this.sendTextReply(context.chat_id, '当前未启用记忆功能。请在配置里设置 `service.memory_enabled = true`。', context.message_id, context.text);
-            return;
-        }
-        try {
-            const explicitExpiredCleanup = action === 'forget' && value?.trim() === 'all-expired';
-            if (!explicitExpiredCleanup) {
-                await this.memoryStore.cleanupExpiredMemories();
-            }
-            const projectContext = await this.resolveProjectContext(context, selectionKey);
-            const conversation = await this.sessionStore.getConversation(projectContext.sessionKey);
-            const activeThreadId = conversation?.projects[projectContext.projectAlias]?.thread_id;
-            const groupMemoryAvailable = this.config.service.memory_group_enabled && context.chat_type === 'group';
-            if (action === 'status') {
-                if (scope === 'group') {
-                    const target = this.resolveMemoryTarget(context, 'group');
-                    const [count, pinnedCount] = await Promise.all([
-                        this.memoryStore.countGroupMemories(projectContext.projectAlias, target.chatId),
-                        this.memoryStore.countPinnedGroupMemories(projectContext.projectAlias, target.chatId),
-                    ]);
-                    await this.sendTextReply(context.chat_id, [
-                        `项目: ${projectContext.projectAlias}`,
-                        `群共享记忆数: ${count}`,
-                        `Pinned 群共享记忆数: ${pinnedCount}`,
-                        `群 chat_id: ${target.chatId}`,
-                    ].join('\n'), context.message_id, context.text);
-                    return;
-                }
-                const [count, pinnedCount, threadSummary, groupCount, groupPinnedCount] = await Promise.all([
-                    this.memoryStore.countProjectMemories(projectContext.projectAlias),
-                    this.memoryStore.countPinnedProjectMemories(projectContext.projectAlias),
-                    activeThreadId ? this.memoryStore.getThreadSummary(projectContext.sessionKey, projectContext.projectAlias, activeThreadId) : Promise.resolve(null),
-                    groupMemoryAvailable ? this.memoryStore.countGroupMemories(projectContext.projectAlias, context.chat_id) : Promise.resolve(0),
-                    groupMemoryAvailable ? this.memoryStore.countPinnedGroupMemories(projectContext.projectAlias, context.chat_id) : Promise.resolve(0),
-                ]);
-                await this.sendTextReply(context.chat_id, [
-                    `项目: ${projectContext.projectAlias}`,
-                    `项目记忆数: ${count}`,
-                    `Pinned 项目记忆数: ${pinnedCount}`,
-                    ...(groupMemoryAvailable ? [`群共享记忆数: ${groupCount}`, `Pinned 群共享记忆数: ${groupPinnedCount}`] : []),
-                    `当前会话: ${activeThreadId ?? '未开始'}`,
-                    '',
-                    threadSummary?.summary ?? '当前没有 thread summary。',
-                ].join('\n'), context.message_id, context.text);
-                return;
-            }
-            if (action === 'stats') {
-                const target = this.resolveMemoryTarget(context, scope);
-                const stats = await this.memoryStore.getMemoryStats({
-                    scope: target.scope,
-                    project_alias: projectContext.projectAlias,
-                    chat_id: target.chatId,
-                });
-                await this.sendTextReply(context.chat_id, [
-                    `项目: ${projectContext.projectAlias}`,
-                    `${target.label}统计:`,
-                    `active_count: ${stats.active_count}`,
-                    `expired_count: ${stats.expired_count}`,
-                    `pinned_count: ${stats.pinned_count}`,
-                    `archived_count: ${stats.archived_count}`,
-                    `latest_accessed_at: ${stats.latest_accessed_at ?? '-'}`,
-                    `latest_updated_at: ${stats.latest_updated_at ?? '-'}`,
-                    `latest_archived_at: ${stats.latest_archived_at ?? '-'}`,
-                ].join('\n'), context.message_id, context.text);
-                return;
-            }
-            if (action === 'recent') {
-                const target = this.resolveMemoryTarget(context, scope);
-                const recent = await this.memoryStore.listRecentMemories({ scope: target.scope, project_alias: projectContext.projectAlias, chat_id: target.chatId }, this.config.service.memory_recent_limit, filters);
-                if (recent.length === 0) {
-                    await this.sendTextReply(context.chat_id, [
-                        `项目: ${projectContext.projectAlias}`,
-                        `当前没有可展示的${target.label}。`,
-                        ...this.renderMemoryFilterLines(filters),
-                    ].join('\n'), context.message_id, context.text);
-                    return;
-                }
-                await this.sendTextReply(context.chat_id, [
-                    `项目: ${projectContext.projectAlias}`,
-                    `最近${target.label}:`,
-                    ...this.renderMemoryFilterLines(filters),
-                    '',
-                    ...recent.map((item, index) => [
-                        `${index + 1}. ${item.title}${item.pinned ? ' [pinned]' : ''}`,
-                        `   id: ${item.id}`,
-                        `   source: ${item.source}`,
-                        ...(item.created_by ? [`   created_by: ${item.created_by}`] : []),
-                        ...(item.tags.length > 0 ? [`   tags: ${item.tags.join(', ')}`] : []),
-                        `   updated_at: ${item.updated_at}`,
-                        ...(item.last_accessed_at ? [`   last_accessed_at: ${item.last_accessed_at}`] : []),
-                        ...(item.expires_at ? [`   expires_at: ${item.expires_at}`] : []),
-                        `   ${truncateExcerpt(item.content, 180)}`,
-                    ].join('\n')),
-                ].join('\n'), context.message_id, context.text);
-                return;
-            }
-            if (action === 'search') {
-                if (!value?.trim()) {
-                    await this.sendTextReply(context.chat_id, '用法: /memory search [--tag <tag>] [--source <source>] [--created-by <actor_id>] <query>', context.message_id, context.text);
-                    return;
-                }
-                const target = this.resolveMemoryTarget(context, scope);
-                const hits = await this.memoryStore.searchMemories({ scope: target.scope, project_alias: projectContext.projectAlias, chat_id: target.chatId }, value, this.config.service.memory_search_limit, filters);
-                await this.auditLog.append({
-                    type: 'memory.search',
-                    chat_id: context.chat_id,
-                    actor_id: context.actor_id,
-                    project_alias: projectContext.projectAlias,
-                    scope: target.scope,
-                    query: value,
-                    result_count: hits.length,
-                });
-                if (hits.length === 0) {
-                    await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `${target.label}搜索: ${value}`, ...this.renderMemoryFilterLines(filters), '未找到匹配记忆。'].join('\n'), context.message_id, context.text);
-                    return;
-                }
-                await this.sendTextReply(context.chat_id, [
-                    `项目: ${projectContext.projectAlias}`,
-                    `${target.label}搜索: ${value}`,
-                    ...this.renderMemoryFilterLines(filters),
-                    '',
-                    ...hits.map((hit, index) => [
-                        `${index + 1}. ${hit.title}${hit.pinned ? ' [pinned]' : ''}`,
-                        `   id: ${hit.id}`,
-                        `   source: ${hit.source}`,
-                        ...(hit.created_by ? [`   created_by: ${hit.created_by}`] : []),
-                        ...(hit.tags.length > 0 ? [`   tags: ${hit.tags.join(', ')}`] : []),
-                        ...(hit.last_accessed_at ? [`   last_accessed_at: ${hit.last_accessed_at}`] : []),
-                        `   ${truncateExcerpt(hit.content, 180)}`,
-                    ].join('\n')),
-                ].join('\n'), context.message_id, context.text);
-                return;
-            }
-            if (action === 'pin' || action === 'unpin' || action === 'forget' || action === 'restore') {
-                if (!value?.trim()) {
-                    const usage = action === 'forget'
-                        ? '用法: /memory forget <id> 或 /memory forget group <id>'
-                        : action === 'restore'
-                            ? '用法: /memory restore <id> 或 /memory restore group <id>'
-                            : `用法: /memory ${action} <id> 或 /memory ${action} group <id>`;
-                    await this.sendTextReply(context.chat_id, usage, context.message_id, context.text);
-                    return;
-                }
-                const target = this.resolveMemoryTarget(context, scope);
-                const selector = { scope: target.scope, project_alias: projectContext.projectAlias, chat_id: target.chatId };
-                if (action === 'forget' && value === 'all-expired') {
-                    const cleaned = await this.memoryStore.cleanupExpiredMemories(selector);
-                    await this.auditLog.append({
-                        type: 'memory.archive.expired',
-                        chat_id: context.chat_id,
-                        actor_id: context.actor_id,
-                        project_alias: projectContext.projectAlias,
-                        scope: target.scope,
-                        count: cleaned,
-                    });
-                    await this.sendTextReply(context.chat_id, `${target.label}已归档过期项: ${cleaned}`, context.message_id, context.text);
-                    return;
-                }
-                const existing = await this.memoryStore.getMemoryById(selector, value, { includeArchived: action === 'restore', includeExpired: action === 'restore' });
-                if (!existing) {
-                    await this.sendTextReply(context.chat_id, `未找到可更新的${target.label} ID: ${value}`, context.message_id, context.text);
-                    return;
-                }
-                if (action === 'forget') {
-                    const archived = await this.memoryStore.archiveMemory(selector, value, { archived_by: context.actor_id, reason: 'manual' });
-                    if (archived) {
-                        await this.auditLog.append({
-                            type: 'memory.archive',
-                            chat_id: context.chat_id,
-                            actor_id: context.actor_id,
-                            project_alias: projectContext.projectAlias,
-                            scope: target.scope,
-                            memory_id: value,
-                        });
-                    }
-                    await this.sendTextReply(context.chat_id, archived
-                        ? [`${target.label}已归档: ${archived.title}`, `memory_id: ${archived.id}`, `可用 /memory restore${target.scope === 'group' ? ' group' : ''} ${archived.id} 恢复`].join('\n')
-                        : `未找到可归档的${target.label} ID: ${value}`, context.message_id, context.text);
-                    return;
-                }
-                if (action === 'restore') {
-                    const restored = await this.memoryStore.restoreMemory(selector, value, context.actor_id);
-                    if (restored) {
-                        await this.auditLog.append({
-                            type: 'memory.restore',
-                            chat_id: context.chat_id,
-                            actor_id: context.actor_id,
-                            project_alias: projectContext.projectAlias,
-                            scope: target.scope,
-                            memory_id: value,
-                        });
-                    }
-                    await this.sendTextReply(context.chat_id, restored ? `${target.label}已恢复: ${restored.title}\nmemory_id: ${restored.id}` : `未找到可恢复的${target.label} ID: ${value}`, context.message_id, context.text);
-                    return;
-                }
-                const pinned = action === 'pin';
-                let agedOutMemoryTitle;
-                let agedOutMemoryId;
-                if (pinned && !existing.pinned) {
-                    const pinnedCount = await this.memoryStore.countPinnedMemories(selector);
-                    if (pinnedCount >= this.config.service.memory_max_pinned_per_scope) {
-                        if (this.config.service.memory_pin_overflow_strategy === 'age-out') {
-                            const oldest = await this.memoryStore.getOldestPinnedMemory(selector, this.config.service.memory_pin_age_basis);
-                            if (oldest && oldest.id !== existing.id) {
-                                await this.memoryStore.setMemoryPinned(selector, oldest.id, false);
-                                agedOutMemoryTitle = oldest.title;
-                                agedOutMemoryId = oldest.id;
-                                await this.auditLog.append({
-                                    type: 'memory.pin.aged_out',
-                                    chat_id: context.chat_id,
-                                    actor_id: context.actor_id,
-                                    project_alias: projectContext.projectAlias,
-                                    scope: target.scope,
-                                    memory_id: oldest.id,
-                                    replaced_by: existing.id,
-                                });
-                            }
-                            else {
-                                await this.sendTextReply(context.chat_id, `${target.label}置顶数量已达上限 (${this.config.service.memory_max_pinned_per_scope})。请先取消置顶旧记录。`, context.message_id, context.text);
-                                return;
-                            }
-                        }
-                        else {
-                            await this.sendTextReply(context.chat_id, `${target.label}置顶数量已达上限 (${this.config.service.memory_max_pinned_per_scope})。请先取消置顶旧记录。`, context.message_id, context.text);
-                            return;
-                        }
-                    }
-                }
-                const updated = await this.memoryStore.setMemoryPinned(selector, value, pinned);
-                if (!updated) {
-                    await this.sendTextReply(context.chat_id, `未找到可更新的${target.label} ID: ${value}`, context.message_id, context.text);
-                    return;
-                }
-                await this.auditLog.append({
-                    type: pinned ? 'memory.pin' : 'memory.unpin',
-                    chat_id: context.chat_id,
-                    actor_id: context.actor_id,
-                    project_alias: projectContext.projectAlias,
-                    scope: target.scope,
-                    memory_id: value,
-                });
-                await this.sendTextReply(context.chat_id, [
-                    `${target.label}${pinned ? '已置顶' : '已取消置顶'}: ${updated.title}`,
-                    `memory_id: ${updated.id}`,
-                    ...(agedOutMemoryId ? [`已自动老化旧置顶: ${agedOutMemoryTitle} (${agedOutMemoryId})`] : []),
-                ].join('\n'), context.message_id, context.text);
-                return;
-            }
-            const content = value?.trim();
-            if (!content) {
-                await this.sendTextReply(context.chat_id, '用法: /memory save <text> 或 /memory save group <text>', context.message_id, context.text);
-                return;
-            }
-            const target = this.resolveMemoryTarget(context, scope);
-            const title = truncateExcerpt(content.replace(/\s+/g, ' ').trim(), 60);
-            const expiresAt = this.buildMemoryExpiresAt();
-            const saved = await this.memoryStore.saveMemory({
-                scope: target.scope,
-                project_alias: projectContext.projectAlias,
-                chat_id: target.chatId,
-                title,
-                content,
-                tags: filters?.tag ? [filters.tag] : undefined,
-                source: filters?.source ?? 'manual',
-                created_by: context.actor_id,
-                expires_at: expiresAt,
-            });
-            await this.auditLog.append({
-                type: 'memory.save',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                scope: target.scope,
-                memory_id: saved.id,
-                title: saved.title,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                `已保存${target.label}: ${saved.title}`,
-                `memory_id: ${saved.id}`,
-                ...(saved.expires_at ? [`expires_at: ${saved.expires_at}`] : []),
-            ].join('\n'), context.message_id, context.text);
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            await this.sendTextReply(context.chat_id, message, context.message_id, context.text);
-        }
-    }
-    renderMemoryFilterLines(filters) {
-        return [
-            ...(filters?.tag ? [`tag: ${filters.tag}`] : []),
-            ...(filters?.source ? [`source: ${filters.source}`] : []),
-            ...(filters?.created_by ? [`created_by: ${filters.created_by}`] : []),
-        ];
-    }
-    async handleKnowledgeCommand(context, selectionKey, action, query) {
-        const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const roots = await resolveKnowledgeRoots(projectContext.project);
-        if (action === 'status') {
-            const message = roots.length
-                ? [`项目: ${projectContext.projectAlias}`, '知识库目录:', ...roots.map((root) => `- ${root}`)].join('\n')
-                : [`项目: ${projectContext.projectAlias}`, '当前没有可用知识库目录。', '可在项目配置中设置 knowledge_paths，或在项目根下提供 docs/README。'].join('\n');
-            await this.sendTextReply(context.chat_id, message, context.message_id, context.text);
+        const projectContext = await this.resolveProjectContext(context, selectionKey);
+        return handleMemoryCommandImpl(this, context, projectContext, action, scope, value, filters);
+    }
+    async handleKnowledgeCommand(context, selectionKey, action, query) {
+        const projectContext = await this.resolveProjectContext(context, selectionKey);
+        const roots = await resolveKnowledgeRoots(projectContext.project);
+        if (action === 'status') {
+            const message = roots.length
+                ? [`项目: ${projectContext.projectAlias}`, '知识库目录:', ...roots.map((root) => `- ${root}`)].join('\n')
+                : [`项目: ${projectContext.projectAlias}`, '当前没有可用知识库目录。', '可在项目配置中设置 knowledge_paths，或在项目根下提供 docs/README。'].join('\n');
+            await this.sendTextReply(context.chat_id, message, context.message_id, context.text);
             return;
         }
         if (!query) {
@@ -2282,449 +1234,19 @@ export class FeiqueService {
     }
     async handleDocCommand(context, selectionKey, action, value, extra) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        if (!canAccessProject(this.config, projectContext.projectAlias, context.chat_id, action === 'create' ? 'operator' : 'viewer')) {
-            await this.sendTextReply(context.chat_id, `当前 chat_id 无权${action === 'create' ? '写入' : '读取'}项目 ${projectContext.projectAlias} 关联的飞书文档。`, context.message_id, context.text);
-            return;
-        }
-        const docClient = new FeishuDocClient(this.feishuClient.createSdkClient());
-        if (action === 'create') {
-            const title = value?.trim();
-            if (!title) {
-                await this.sendTextReply(context.chat_id, '用法: /doc create <title>', context.message_id, context.text);
-                return;
-            }
-            const created = await docClient.create(title, extra?.trim());
-            await this.auditLog.append({
-                type: 'doc.create',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                document_id: created.documentId,
-                title: created.title,
-            });
-            await this.sendTextReply(context.chat_id, ['已创建飞书文档', `标题: ${created.title ?? title}`, `文档: ${created.documentId}`, ...(created.url ? [`链接: ${created.url}`] : [])].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (!value) {
-            await this.sendTextReply(context.chat_id, '用法: /doc read <url|token>', context.message_id, context.text);
-            return;
-        }
-        const document = await docClient.read(value);
-        await this.auditLog.append({
-            type: 'doc.read',
-            chat_id: context.chat_id,
-            actor_id: context.actor_id,
-            project_alias: projectContext.projectAlias,
-            document_id: document.documentId,
-            title: document.title,
-        });
-        await this.sendTextReply(context.chat_id, [
-            `标题: ${document.title ?? '未知'}`,
-            `文档: ${document.documentId}`,
-            ...(document.url ? [`链接: ${document.url}`] : []),
-            '',
-            truncateExcerpt(document.content?.replace(/\s+/g, ' ').trim() ?? '文档暂无可读取的纯文本内容。', 1200),
-        ].join('\n'), context.message_id, context.text);
+        return handleDocCommandImpl(this, context, projectContext, action, value, extra);
     }
     async handleTaskCommand(context, selectionKey, action, value) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        if (!canAccessProject(this.config, projectContext.projectAlias, context.chat_id, action === 'create' || action === 'complete' ? 'operator' : 'viewer')) {
-            await this.sendTextReply(context.chat_id, `当前 chat_id 无权${action === 'create' || action === 'complete' ? '写入' : '查看'}项目 ${projectContext.projectAlias} 关联的飞书任务。`, context.message_id, context.text);
-            return;
-        }
-        const taskClient = new FeishuTaskClient(this.feishuClient.createSdkClient());
-        if (action === 'list') {
-            const limit = clampListLimit(value, 10, 20);
-            const tasks = await taskClient.list(limit);
-            const lines = tasks.length > 0
-                ? tasks.map((task, index) => `${index + 1}. ${task.summary ?? '(无标题)'}\n   guid: ${task.guid}\n   status: ${task.status ?? 'unknown'}${task.url ? `\n   url: ${task.url}` : ''}`)
-                : ['当前没有可见任务。'];
-            await this.sendTextReply(context.chat_id, ['最近任务', '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'get') {
-            if (!value) {
-                await this.sendTextReply(context.chat_id, '用法: /task get <task_guid>', context.message_id, context.text);
-                return;
-            }
-            const task = await taskClient.get(value);
-            await this.auditLog.append({
-                type: 'task.read',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                task_guid: task.guid,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `任务: ${task.summary ?? '(无标题)'}`,
-                `guid: ${task.guid}`,
-                `status: ${task.status ?? 'unknown'}`,
-                ...(task.url ? [`链接: ${task.url}`] : []),
-                '',
-                task.description ?? '无描述',
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'create') {
-            const summary = value?.trim();
-            if (!summary) {
-                await this.sendTextReply(context.chat_id, '用法: /task create <summary>', context.message_id, context.text);
-                return;
-            }
-            const task = await taskClient.create(summary);
-            await this.auditLog.append({
-                type: 'task.create',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                task_guid: task.guid,
-                summary: task.summary,
-            });
-            await this.sendTextReply(context.chat_id, [`已创建任务`, `标题: ${task.summary ?? summary}`, `guid: ${task.guid}`, ...(task.url ? [`链接: ${task.url}`] : [])].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (!value) {
-            await this.sendTextReply(context.chat_id, '用法: /task complete <task_guid>', context.message_id, context.text);
-            return;
-        }
-        const task = await taskClient.complete(value);
-        await this.auditLog.append({
-            type: 'task.complete',
-            chat_id: context.chat_id,
-            actor_id: context.actor_id,
-            project_alias: projectContext.projectAlias,
-            task_guid: task.guid,
-            summary: task.summary,
-        });
-        await this.sendTextReply(context.chat_id, [`已完成任务`, `标题: ${task.summary ?? '(无标题)'}`, `guid: ${task.guid}`, `status: ${task.status ?? 'unknown'}`].join('\n'), context.message_id, context.text);
+        return handleTaskCommandImpl(this, context, projectContext, action, value);
     }
     async handleBaseCommand(context, selectionKey, action, appToken, tableId, recordId, value) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        if (!canAccessProject(this.config, projectContext.projectAlias, context.chat_id, action === 'create' || action === 'update' ? 'operator' : 'viewer')) {
-            await this.sendTextReply(context.chat_id, `当前 chat_id 无权${action === 'create' || action === 'update' ? '写入' : '查看'}项目 ${projectContext.projectAlias} 关联的多维表格。`, context.message_id, context.text);
-            return;
-        }
-        const baseClient = new FeishuBaseClient(this.feishuClient.createSdkClient());
-        if (action === 'tables') {
-            if (!appToken) {
-                await this.sendTextReply(context.chat_id, '用法: /base tables <app_token>', context.message_id, context.text);
-                return;
-            }
-            const tables = await baseClient.listTables(appToken, 20);
-            const lines = tables.length > 0
-                ? tables.map((table, index) => `${index + 1}. ${table.name ?? '(未命名表)'}\n   table_id: ${table.tableId}${table.revision !== undefined ? `\n   revision: ${table.revision}` : ''}`)
-                : ['当前 Base 中没有可见数据表。'];
-            await this.sendTextReply(context.chat_id, [`Base: ${appToken}`, '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'records') {
-            if (!appToken || !tableId) {
-                await this.sendTextReply(context.chat_id, '用法: /base records <app_token> <table_id> [limit]', context.message_id, context.text);
-                return;
-            }
-            const limit = clampListLimit(value, 10, 20);
-            const records = await baseClient.listRecords(appToken, tableId, limit);
-            const lines = records.length > 0
-                ? records.map((record, index) => `${index + 1}. ${record.recordId}\n   fields: ${truncateExcerpt(JSON.stringify(record.fields), 240)}${record.recordUrl ? `\n   url: ${record.recordUrl}` : ''}`)
-                : ['当前数据表没有可见记录。'];
-            await this.sendTextReply(context.chat_id, [`Base: ${appToken}`, `Table: ${tableId}`, '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'create') {
-            if (!appToken || !tableId || !value) {
-                await this.sendTextReply(context.chat_id, '用法: /base create <app_token> <table_id> <json>', context.message_id, context.text);
-                return;
-            }
-            const fields = parseJsonObject(value);
-            const record = await baseClient.createRecord(appToken, tableId, fields);
-            await this.auditLog.append({
-                type: 'base.record.create',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                app_token: appToken,
-                table_id: tableId,
-                record_id: record.recordId,
-            });
-            await this.sendTextReply(context.chat_id, [`已创建 Base 记录`, `app: ${appToken}`, `table: ${tableId}`, `record: ${record.recordId}`, `fields: ${truncateExcerpt(JSON.stringify(record.fields), 240)}`].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (!appToken || !tableId || !recordId || !value) {
-            await this.sendTextReply(context.chat_id, '用法: /base update <app_token> <table_id> <record_id> <json>', context.message_id, context.text);
-            return;
-        }
-        const fields = parseJsonObject(value);
-        const record = await baseClient.updateRecord(appToken, tableId, recordId, fields);
-        await this.auditLog.append({
-            type: 'base.record.update',
-            chat_id: context.chat_id,
-            actor_id: context.actor_id,
-            project_alias: projectContext.projectAlias,
-            app_token: appToken,
-            table_id: tableId,
-            record_id: record.recordId,
-        });
-        await this.sendTextReply(context.chat_id, [`已更新 Base 记录`, `app: ${appToken}`, `table: ${tableId}`, `record: ${record.recordId}`, `fields: ${truncateExcerpt(JSON.stringify(record.fields), 240)}`].join('\n'), context.message_id, context.text);
+        return handleBaseCommandImpl(this, context, projectContext, action, appToken, tableId, recordId, value);
     }
     async handleWikiCommand(context, selectionKey, action, value, extra, target, role) {
         const projectContext = await this.resolveProjectContext(context, selectionKey);
-        const wikiClient = new FeishuWikiClient(this.feishuClient.createSdkClient());
-        if (action === 'spaces') {
-            const spaces = await wikiClient.listSpaces(10);
-            const lines = spaces.length > 0
-                ? spaces.map((space) => `- ${space.name} (${space.id})${space.description ? ` | ${space.description}` : ''}`)
-                : ['当前应用可访问的知识空间为空。请确认机器人已被加入目标空间。'];
-            await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `配置过滤空间数: ${projectContext.project.wiki_space_ids.length}`, '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'search') {
-            if (!value) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki search <query>', context.message_id, context.text);
-                return;
-            }
-            const hits = await wikiClient.search(value, projectContext.project.wiki_space_ids, 5);
-            await this.auditLog.append({
-                type: 'wiki.search',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                query: value,
-                result_count: hits.length,
-            });
-            if (hits.length === 0) {
-                await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `飞书知识库搜索: ${value}`, '未找到匹配结果。', '', '提示: 确认机器人有目标空间访问权限，或在项目配置里设置 wiki_space_ids。'].join('\n'), context.message_id, context.text);
-                return;
-            }
-            const lines = hits.map((hit, index) => [
-                `${index + 1}. ${hit.title}`,
-                `   space: ${hit.spaceId}`,
-                `   token: ${hit.objToken}`,
-                ...(hit.url ? [`   url: ${hit.url}`] : []),
-            ].join('\n'));
-            await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `飞书知识库搜索: ${value}`, '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'members') {
-            const spaceId = value?.trim() || projectContext.project.wiki_space_ids[0];
-            if (!spaceId) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki members [space_id]，或先在项目配置里设置默认 wiki_space_ids。', context.message_id, context.text);
-                return;
-            }
-            const members = await wikiClient.listMembers(spaceId, 20);
-            await this.auditLog.append({
-                type: 'wiki.members',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                space_id: spaceId,
-                result_count: members.length,
-            });
-            const lines = members.length > 0
-                ? members.map((member, index) => `${index + 1}. ${member.memberId}\n   member_type: ${member.memberType}\n   role: ${member.memberRole}${member.type ? `\n   type: ${member.type}` : ''}`)
-                : ['当前知识空间没有可见成员，或机器人没有成员读取权限。'];
-            await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `知识空间成员: ${spaceId}`, '', ...lines].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'create') {
-            const defaultSpaceId = projectContext.project.wiki_space_ids[0];
-            const spaceId = extra ?? defaultSpaceId;
-            const title = value?.trim();
-            if (!title) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki create <title> 或 /wiki create <space_id> <title>', context.message_id, context.text);
-                return;
-            }
-            if (!spaceId) {
-                await this.sendTextReply(context.chat_id, '当前项目未配置默认 wiki_space_ids，请使用 `/wiki create <space_id> <title>`。', context.message_id, context.text);
-                return;
-            }
-            const created = await wikiClient.createDoc(spaceId, title);
-            await this.auditLog.append({
-                type: 'wiki.create',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                title,
-                space_id: created.spaceId,
-                obj_token: created.objToken,
-                node_token: created.nodeToken,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                `已创建飞书文档: ${created.title ?? title}`,
-                `空间: ${created.spaceId ?? spaceId}`,
-                ...(created.nodeToken ? [`节点: ${created.nodeToken}`] : []),
-                ...(created.objToken ? [`文档: ${created.objToken}`] : []),
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'grant') {
-            const spaceId = extra?.trim();
-            const memberType = target?.trim();
-            const memberId = value?.trim();
-            const memberRole = role?.trim() || 'member';
-            if (!spaceId || !memberType || !memberId) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki grant <space_id> <member_type> <member_id> [member|admin]', context.message_id, context.text);
-                return;
-            }
-            const granted = await wikiClient.addMember(spaceId, memberType, memberId, memberRole);
-            await this.auditLog.append({
-                type: 'wiki.member.grant',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                space_id: spaceId,
-                member_id: granted.memberId,
-                member_type: granted.memberType,
-                member_role: granted.memberRole,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                '已添加知识空间成员',
-                `空间: ${spaceId}`,
-                `member_type: ${granted.memberType}`,
-                `member_id: ${granted.memberId}`,
-                `role: ${granted.memberRole}`,
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'rename') {
-            const nodeToken = extra?.trim();
-            const title = value?.trim();
-            if (!nodeToken || !title) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki rename <node_token> <title>', context.message_id, context.text);
-                return;
-            }
-            await wikiClient.renameNode(nodeToken, title, projectContext.project.wiki_space_ids[0]);
-            await this.auditLog.append({
-                type: 'wiki.rename',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                node_token: nodeToken,
-                title,
-            });
-            await this.sendTextReply(context.chat_id, [`项目: ${projectContext.projectAlias}`, `已更新知识库节点标题`, `节点: ${nodeToken}`, `标题: ${title}`].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'copy') {
-            const nodeToken = value?.trim();
-            const targetSpaceId = extra?.trim() || projectContext.project.wiki_space_ids[0];
-            if (!nodeToken) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki copy <node_token> [target_space_id]', context.message_id, context.text);
-                return;
-            }
-            if (!targetSpaceId) {
-                await this.sendTextReply(context.chat_id, '当前项目未配置默认 wiki_space_ids，请显式传入 target_space_id。', context.message_id, context.text);
-                return;
-            }
-            const copied = await wikiClient.copyNode(nodeToken, targetSpaceId);
-            await this.auditLog.append({
-                type: 'wiki.copy',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                node_token: nodeToken,
-                target_space_id: copied.spaceId,
-                obj_token: copied.objToken,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                `已复制知识库节点`,
-                `源节点: ${nodeToken}`,
-                `目标空间: ${copied.spaceId ?? targetSpaceId}`,
-                ...(copied.nodeToken ? [`新节点: ${copied.nodeToken}`] : []),
-                ...(copied.objToken ? [`对象: ${copied.objToken}`] : []),
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'move') {
-            const sourceSpaceId = extra?.trim();
-            const nodeToken = value?.trim();
-            const targetSpaceId = target?.trim() || projectContext.project.wiki_space_ids[0];
-            if (!sourceSpaceId || !nodeToken) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki move <source_space_id> <node_token> [target_space_id]', context.message_id, context.text);
-                return;
-            }
-            if (!targetSpaceId) {
-                await this.sendTextReply(context.chat_id, '当前项目未配置默认 wiki_space_ids，请显式传入 target_space_id。', context.message_id, context.text);
-                return;
-            }
-            const moved = await wikiClient.moveNode(sourceSpaceId, nodeToken, targetSpaceId);
-            await this.auditLog.append({
-                type: 'wiki.move',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                node_token: nodeToken,
-                source_space_id: sourceSpaceId,
-                target_space_id: moved.spaceId,
-                obj_token: moved.objToken,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                `已移动知识库节点`,
-                `源空间: ${sourceSpaceId}`,
-                `源节点: ${nodeToken}`,
-                `目标空间: ${moved.spaceId ?? targetSpaceId}`,
-                ...(moved.nodeToken ? [`当前节点: ${moved.nodeToken}`] : []),
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (action === 'revoke') {
-            const spaceId = extra?.trim();
-            const memberType = target?.trim();
-            const memberId = value?.trim();
-            const memberRole = role?.trim() || 'member';
-            if (!spaceId || !memberType || !memberId) {
-                await this.sendTextReply(context.chat_id, '用法: /wiki revoke <space_id> <member_type> <member_id> [member|admin]', context.message_id, context.text);
-                return;
-            }
-            const revoked = await wikiClient.removeMember(spaceId, memberType, memberId, memberRole);
-            await this.auditLog.append({
-                type: 'wiki.member.revoke',
-                chat_id: context.chat_id,
-                actor_id: context.actor_id,
-                project_alias: projectContext.projectAlias,
-                space_id: spaceId,
-                member_id: revoked.memberId,
-                member_type: revoked.memberType,
-                member_role: revoked.memberRole,
-            });
-            await this.sendTextReply(context.chat_id, [
-                `项目: ${projectContext.projectAlias}`,
-                '已移除知识空间成员',
-                `空间: ${spaceId}`,
-                `member_type: ${revoked.memberType}`,
-                `member_id: ${revoked.memberId}`,
-                `role: ${revoked.memberRole}`,
-            ].join('\n'), context.message_id, context.text);
-            return;
-        }
-        if (!value) {
-            await this.sendTextReply(context.chat_id, '用法: /wiki read <url|token>', context.message_id, context.text);
-            return;
-        }
-        const result = await wikiClient.read(value);
-        await this.auditLog.append({
-            type: 'wiki.read',
-            chat_id: context.chat_id,
-            actor_id: context.actor_id,
-            project_alias: projectContext.projectAlias,
-            target: value,
-            obj_type: result.objType,
-            obj_token: result.objToken,
-        });
-        const summary = result.content ? truncateExcerpt(result.content.replace(/\s+/g, ' ').trim(), 1200) : '当前对象不是 docx 文档，暂不支持直接拉取纯文本内容。';
-        await this.sendTextReply(context.chat_id, [
-            `项目: ${projectContext.projectAlias}`,
-            `标题: ${result.title ?? '未知'}`,
-            `类型: ${result.objType ?? '未知'}`,
-            ...(result.spaceId ? [`空间: ${result.spaceId}`] : []),
-            ...(result.objToken ? [`对象: ${result.objToken}`] : []),
-            ...(result.url ? [`链接: ${result.url}`] : []),
-            '',
-            summary,
-        ].join('\n'), context.message_id, context.text);
+        return handleWikiCommandImpl(this, context, projectContext, action, value, extra, target, role);
     }
     async buildProjectsText(selectionKey, chatId) {
         const selected = await this.resolveProjectAlias(selectionKey);
@@ -2787,11 +1309,11 @@ export class FeiqueService {
         const session = conversation?.projects[projectAlias];
         const sessionCount = Object.keys(session?.sessions ?? {}).length;
         const isExecutableRun = activeRun ? isExecutionRunStatus(activeRun.status) : false;
-        const includeActions = this.supportsInteractiveCardActions();
+        const includeActions = supportsInteractiveCardActions(this.config);
         const actionChatId = conversation?.chat_id ?? activeRun?.chat_id ?? fallbackChatId;
         return buildStatusCard({
             title: '当前会话状态',
-            summary: this.buildRunStatusSummary(session?.last_response_excerpt, activeRun),
+            summary: buildRunStatusSummary(session?.last_response_excerpt, activeRun),
             projectAlias,
             sessionId: session?.thread_id,
             runStatus: activeRun?.status,
@@ -2962,32 +1484,6 @@ export class FeiqueService {
     shouldRequireMention(project) {
         return project.mention_required || this.config.security.require_group_mentions;
     }
-    resolveMemoryTarget(context, requestedScope) {
-        if (requestedScope === 'group') {
-            if (!this.config.service.memory_group_enabled) {
-                throw new Error('群共享记忆未启用。请在配置中设置 `service.memory_group_enabled = true`。');
-            }
-            if (context.chat_type !== 'group') {
-                throw new Error('群共享记忆只能在群聊中使用。');
-            }
-            return {
-                scope: 'group',
-                chatId: context.chat_id,
-                label: '群共享记忆',
-            };
-        }
-        return {
-            scope: 'project',
-            label: '项目记忆',
-        };
-    }
-    buildMemoryExpiresAt() {
-        const ttlDays = this.config.service.memory_default_ttl_days;
-        if (!ttlDays) {
-            return undefined;
-        }
-        return new Date(Date.now() + ttlDays * 24 * 60 * 60 * 1000).toISOString();
-    }
     async cancelActiveRun(queueKey, reason) {
         const live = this.activeRuns.get(queueKey);
         if (live) {
@@ -3017,112 +1513,7 @@ export class FeiqueService {
         return terminateProcess(persisted.pid, 'SIGTERM');
     }
     async scheduleProjectExecution(projectContext, metadata, task) {
-        const runId = randomUUID();
-        const queued = await this.prepareQueuedExecution(projectContext, metadata, runId);
-        const rootKey = buildProjectRootQueueKey(projectContext.project.root);
-        const startGate = createDeferred();
-        // Record queue depth when enqueuing
-        this.metrics?.recordQueueDepth(projectContext.projectAlias, this.queue.getPendingCount(projectContext.queueKey) + 1);
-        return {
-            runId,
-            queued,
-            release: () => startGate.resolve(),
-            completion: this.queue.run(projectContext.queueKey, async () => {
-                await this.projectRootQueue.run(rootKey, async () => {
-                    await startGate.promise;
-                    await task(runId);
-                }, { priority: projectContext.project.run_priority });
-                // Record queue depth after dequeue
-                this.metrics?.recordQueueDepth(projectContext.projectAlias, this.queue.getPendingCount(projectContext.queueKey));
-            }),
-        };
-    }
-    async prepareQueuedExecution(projectContext, metadata, runId) {
-        const queuePending = this.queue.getPendingCount(projectContext.queueKey);
-        const rootKey = buildProjectRootQueueKey(projectContext.project.root);
-        const rootPending = this.projectRootQueue.getPendingCount(rootKey);
-        if (queuePending <= 0 && rootPending <= 0) {
-            return null;
-        }
-        const projectRoot = this.resolveProjectRoot(projectContext.project);
-        const reason = queuePending > 0 ? 'project' : 'project-root';
-        const frontCount = reason === 'project' ? queuePending : rootPending;
-        const blockingRun = reason === 'project'
-            ? await this.runStateStore.getActiveRun(projectContext.queueKey)
-            : await this.runStateStore.getExecutionRunByProjectRoot(projectRoot);
-        const detail = this.buildQueuedStatusDetail(projectContext.projectAlias, reason, frontCount, blockingRun);
-        await this.runStateStore.upsertRun(runId, {
-            queue_key: projectContext.queueKey,
-            conversation_key: projectContext.sessionKey,
-            project_alias: projectContext.projectAlias,
-            chat_id: metadata.chatId,
-            actor_id: metadata.actorId,
-            actor_name: metadata.actorName,
-            project_root: projectRoot,
-            prompt_excerpt: truncateExcerpt(metadata.prompt),
-            status: 'queued',
-            status_detail: detail,
-        });
-        await this.auditLog.append({
-            type: 'codex.run.queued',
-            run_id: runId,
-            chat_id: metadata.chatId,
-            actor_id: metadata.actorId,
-            project_alias: projectContext.projectAlias,
-            conversation_key: projectContext.sessionKey,
-            project_root: projectRoot,
-            queue_reason: reason,
-            blocking_run_id: blockingRun?.run_id,
-            front_count: frontCount,
-        });
-        this.logger.warn({
-            runId,
-            queueKey: projectContext.queueKey,
-            sessionKey: projectContext.sessionKey,
-            projectAlias: projectContext.projectAlias,
-            projectRoot,
-            reason,
-            frontCount,
-            blockingStatus: blockingRun?.status,
-            blockingProjectAlias: blockingRun?.project_alias,
-        }, 'Codex run queued');
-        return {
-            runId,
-            detail,
-            reason,
-        };
-    }
-    buildAcknowledgedRunReply(projectAlias, phase, detail, mode) {
-        if (mode === 'text') {
-            return [`项目: ${projectAlias}`, `状态: ${phase}`, '', detail].join('\n');
-        }
-        return detail;
-    }
-    buildQueuedStatusDetail(projectAlias, reason, frontCount, blockingRun) {
-        const lines = [
-            reason === 'project' ? `当前项目 ${projectAlias} 已有任务在处理，已进入排队。` : '当前仓库正在被其他会话操作，已进入排队。',
-            frontCount > 0 ? `前方还有 ${frontCount} 个任务。` : null,
-        ];
-        if (blockingRun) {
-            const actorName = blockingRun.actor_name ?? blockingRun.actor_id ?? '其他成员';
-            lines.push(`当前执行: ${actorName}`);
-            const elapsedMs = Date.now() - new Date(blockingRun.started_at).getTime();
-            const elapsedMin = Math.round(elapsedMs / 60_000);
-            if (elapsedMin > 0) {
-                lines.push(`已运行: ${elapsedMin} 分钟`);
-            }
-            if (reason === 'project-root' && blockingRun.project_alias && blockingRun.project_alias !== projectAlias) {
-                lines.push(`占用项目: ${blockingRun.project_alias}`);
-            }
-        }
-        lines.push(`排队时间: ${new Date().toLocaleTimeString('zh-CN', { hour: '2-digit', minute: '2-digit' })}`);
-        return lines.filter(Boolean).join('\n');
-    }
-    buildRunStatusSummary(lastResponseExcerpt, activeRun) {
-        if (activeRun?.status === 'queued' && activeRun.status_detail) {
-            return [activeRun.status_detail, lastResponseExcerpt ? `\n上一轮摘要:\n${lastResponseExcerpt}` : null].filter(Boolean).join('\n');
-        }
-        return lastResponseExcerpt ?? '暂无会话摘要。';
+        return scheduleProjectExecutionImpl(this, projectContext, metadata, task);
     }
     isAdminChat(chatId) {
         return this.config.security.admin_chat_ids.includes(chatId);
@@ -3236,9 +1627,6 @@ export class FeiqueService {
     canMutateRuntimeConfig(chatId) {
         return canAccessGlobalCapability(this.config, chatId, 'config:mutate');
     }
-    canReadConfigHistory(chatId) {
-        return canAccessGlobalCapability(this.config, chatId, 'config:history') || this.canMutateRuntimeConfig(chatId);
-    }
     canAccessAdminCommand(command, currentProjectAlias, authorizedProjectAliases, operatorProjectAliases, globalCapabilities) {
         if (command.resource === 'project') {
             if (command.action === 'list') {
@@ -3267,56 +1655,7 @@ export class FeiqueService {
         return true;
     }
     async handleAdminConfigCommand(context, command) {
-        if (command.action === 'history' && !this.canReadConfigHistory(context.chat_id)) {
-            await this.sendTextReply(context.chat_id, '当前 chat_id 无权查看配置历史。', context.message_id, context.text);
-            return;
-        }
-        if (command.action === 'rollback' && !this.canMutateRuntimeConfig(context.chat_id)) {
-            await this.sendTextReply(context.chat_id, '当前 chat_id 无权回滚配置。', context.message_id, context.text);
-            return;
-        }
-        if (!this.runtimeControl?.configPath) {
-            await this.sendTextReply(context.chat_id, '当前运行实例没有可写配置路径，无法执行配置历史操作。', context.message_id, context.text);
-            return;
-        }
-        if (command.action === 'history') {
-            const snapshots = await this.configHistoryStore.listSnapshots();
-            if (snapshots.length === 0) {
-                await this.sendTextReply(context.chat_id, '当前没有可回滚的配置快照。', context.message_id, context.text);
-                return;
-            }
-            const lines = ['最近配置快照:'];
-            for (const snapshot of snapshots) {
-                lines.push(`- ${snapshot.id} | ${snapshot.at} | ${snapshot.action}${snapshot.summary ? ` | ${snapshot.summary}` : ''}`);
-            }
-            await this.sendTextReply(context.chat_id, lines.join('\n'), context.message_id, context.text);
-            return;
-        }
-        const target = await this.configHistoryStore.getSnapshot(command.value);
-        if (!target) {
-            await this.sendTextReply(context.chat_id, '未找到指定配置快照。可先执行 `/admin config history`。', context.message_id, context.text);
-            return;
-        }
-        const rollbackSnapshot = await this.snapshotConfigForAdminMutation(context, 'config.rollback', `rollback -> ${target.id}`);
-        const previousContent = rollbackSnapshot.content;
-        try {
-            await writeUtf8Atomic(this.runtimeControl.configPath, target.content);
-            await this.reloadRuntimeConfigFromDisk(this.runtimeControl.configPath);
-        }
-        catch (error) {
-            await writeUtf8Atomic(this.runtimeControl.configPath, previousContent);
-            await this.reloadRuntimeConfigFromDisk(this.runtimeControl.configPath);
-            throw error;
-        }
-        await this.appendAdminAudit({
-            type: 'admin.config.rollback',
-            chat_id: context.chat_id,
-            actor_id: context.actor_id,
-            target_snapshot_id: target.id,
-            snapshot_id: rollbackSnapshot.id,
-            config_path: this.runtimeControl.configPath,
-        });
-        await this.sendTextReply(context.chat_id, `已回滚配置。\n目标快照: ${target.id}\n回滚前快照: ${rollbackSnapshot.id}\n如需生效到某些运行时状态，请再执行 /admin service restart。`, context.message_id, context.text);
+        return handleAdminConfigCommandImpl(this, context, command);
     }
     async snapshotConfigForAdminMutation(context, action, summary) {
         if (!this.runtimeControl?.configPath) {
@@ -3343,65 +1682,6 @@ export class FeiqueService {
         replaceObject(this.config.feishu, nextConfig.feishu);
         replaceProjects(this.config.projects, nextConfig.projects);
     }
-    parseProjectPatch(field, value) {
-        switch (field) {
-            case 'root':
-                return { root: value };
-            case 'profile':
-                return { profile: value };
-            case 'sandbox':
-                if (value === 'read-only' || value === 'workspace-write' || value === 'danger-full-access') {
-                    return { sandbox: value };
-                }
-                return null;
-            case 'session_scope':
-                if (value === 'chat' || value === 'chat-user') {
-                    return { session_scope: value };
-                }
-                return null;
-            case 'mention_required':
-                if (value === 'true' || value === 'false') {
-                    return { mention_required: value === 'true' };
-                }
-                return null;
-            case 'description':
-                return { description: value };
-            case 'viewer_chat_ids':
-                return { viewer_chat_ids: splitCommaSeparatedValues(value) };
-            case 'operator_chat_ids':
-                return { operator_chat_ids: splitCommaSeparatedValues(value) };
-            case 'admin_chat_ids':
-                return { admin_chat_ids: splitCommaSeparatedValues(value) };
-            case 'session_operator_chat_ids':
-                return { session_operator_chat_ids: splitCommaSeparatedValues(value) };
-            case 'run_operator_chat_ids':
-                return { run_operator_chat_ids: splitCommaSeparatedValues(value) };
-            case 'config_admin_chat_ids':
-                return { config_admin_chat_ids: splitCommaSeparatedValues(value) };
-            case 'download_dir':
-                return { download_dir: value };
-            case 'temp_dir':
-                return { temp_dir: value };
-            case 'cache_dir':
-                return { cache_dir: value };
-            case 'log_dir':
-                return { log_dir: value };
-            case 'run_priority': {
-                const parsed = Number(value);
-                return Number.isInteger(parsed) && parsed >= 1 && parsed <= 1000 ? { run_priority: parsed } : null;
-            }
-            case 'chat_rate_limit_window_seconds': {
-                const parsed = Number(value);
-                return Number.isInteger(parsed) && parsed > 0 ? { chat_rate_limit_window_seconds: parsed } : null;
-            }
-            case 'chat_rate_limit_max_runs': {
-                const parsed = Number(value);
-                return Number.isInteger(parsed) && parsed > 0 ? { chat_rate_limit_max_runs: parsed } : null;
-            }
-            default:
-                return null;
-        }
-    }
     resolveProjectDownloadDir(projectAlias, project) {
         return getProjectDownloadsDir(this.config.storage.dir, projectAlias, project);
     }
@@ -3425,28 +1705,6 @@ export class FeiqueService {
             catch { /* best-effort */ }
         }
     }
-    listManagedAuditTargets() {
-        const targets = [
-            {
-                stateDir: this.config.storage.dir,
-                fileName: 'audit.jsonl',
-                archiveDir: path.join(this.config.storage.dir, 'archive'),
-            },
-            {
-                stateDir: this.config.storage.dir,
-                fileName: 'admin-audit.jsonl',
-                archiveDir: path.join(this.config.storage.dir, 'archive'),
-            },
-        ];
-        for (const [alias, project] of Object.entries(this.config.projects)) {
-            targets.push({
-                stateDir: getProjectAuditDir(this.config.storage.dir, alias, project),
-                fileName: path.basename(getProjectAuditFile(this.config.storage.dir, alias, project)),
-                archiveDir: getProjectArchiveDir(this.config.storage.dir, alias),
-            });
-        }
-        return targets;
-    }
     checkAndConsumeChatRateLimit(projectAlias, project, chatId) {
         const windowMs = project.chat_rate_limit_window_seconds * 1000;
         const maxRuns = project.chat_rate_limit_max_runs;
@@ -3500,12 +1758,108 @@ export class FeiqueService {
         }
         this.config.feishu.allowed_chat_ids = values;
     }
-    resolveProjectRoot(project) {
-        return path.resolve(project.root);
-    }
     resolveBackendByName(projectAlias, sessionOverride) {
         return resolveProjectBackendWithOverride(this.config, projectAlias, sessionOverride, this.codexSessionIndex);
     }
+    /**
+     * Called when resolveProjectBackendWithFailover returns a non-null failover.
+     * Responsibilities:
+     *   - Log a warning with structured context
+     *   - Emit an audit event
+     *   - Notify admin chats (deduped by from→to direction for the process lifetime)
+     *   - Send a user-visible notice into the current chat so the user knows
+     *     why their run is on a different backend than expected
+     */
+    async handleBackendFailover(chatId, projectAlias, runId, info) {
+        this.logger.warn({ projectAlias, runId, from: info.from, to: info.to, reason: info.reason }, 'Backend failover: primary probe failed, switched to alternate');
+        try {
+            await this.auditLog.append({
+                type: 'backend.failover',
+                project_alias: projectAlias,
+                run_id: runId,
+                from: info.from,
+                to: info.to,
+                reason: info.reason,
+            });
+        }
+        catch { /* best-effort */ }
+        const userNotice = `⚠️ ${info.from} 不可用，已临时切换到 ${info.to} 运行本次请求。\n原因: ${info.reason}`;
+        try {
+            await this.feishuClient.sendText(chatId, userNotice);
+        }
+        catch { /* best-effort */ }
+        const dedupeKey = `${info.from}->${info.to}`;
+        if (this.failoverNotified.has(dedupeKey))
+            return;
+        this.failoverNotified.add(dedupeKey);
+        const adminChatIds = this.config.security.admin_chat_ids ?? [];
+        if (adminChatIds.length === 0)
+            return;
+        const adminText = `🔁 Backend failover 已触发\n\n` +
+            `方向: ${info.from} → ${info.to}\n` +
+            `项目: ${projectAlias}\n` +
+            `原因: ${info.reason}\n\n` +
+            `后续同方向的切换不会重复通知，直到服务重启。`;
+        for (const adminChat of adminChatIds) {
+            try {
+                await this.feishuClient.sendText(adminChat, adminText);
+            }
+            catch { /* best-effort */ }
+        }
+    }
+    /**
+     * Called by the transport layer when an incoming chat is rejected by the
+     * allowlist (`feishu.allowed_chat_ids` / `allowed_group_ids`).
+     *
+     * Replaces the previous "silent drop" behavior with a pairing-style
+     * experience: tell the user what their chat_id is so an admin can add it,
+     * notify admins that a new chat is knocking, and record the rejection in
+     * the audit log. Deduped per chat_id for the process lifetime so repeated
+     * attempts from the same unauthorized chat do not spam either side.
+     *
+     * This is best-effort: any send failure is swallowed. We never want a
+     * rejection flow to throw out of the transport dispatcher.
+     */
+    async handleRejectedChat(chatId, chatType) {
+        if (this.rejectedChatNotified.has(chatId))
+            return;
+        this.rejectedChatNotified.add(chatId);
+        try {
+            await this.auditLog.append({
+                type: 'chat.rejected',
+                chat_id: chatId,
+                chat_type: chatType,
+            });
+        }
+        catch { /* best-effort */ }
+        const listHint = chatType === 'group'
+            ? '`feishu.allowed_group_ids`（群聊）'
+            : '`feishu.allowed_chat_ids`（私聊）';
+        const userText = `抱歉，该 chat 未被授权访问本 bot。\n` +
+            `你的 chat_id: ${chatId}\n\n` +
+            `请联系管理员并附上这个 id，请求加入 ${listHint}。`;
+        try {
+            await this.feishuClient.sendText(chatId, userText);
+        }
+        catch { /* best-effort */ }
+        const adminChatIds = this.config.security.admin_chat_ids ?? [];
+        if (adminChatIds.length === 0)
+            return;
+        const adminCommand = chatType === 'group'
+            ? `/admin group add ${chatId}`
+            : `/admin chat add ${chatId}`;
+        const adminText = `🔔 新 chat 请求接入\n\n` +
+            `chat_id: ${chatId}\n` +
+            `类型: ${chatType}\n\n` +
+            `如需授权，运行:\n${adminCommand}\n\n` +
+            `后续来自同一 chat 的请求不会重复通知，直到服务重启。`;
+        for (const adminChat of adminChatIds) {
+            try {
+                await this.feishuClient.sendText(adminChat, adminText);
+            }
+            catch { /* best-effort */ }
+        }
+    }
     async enforceSessionHistoryLimit(conversationKey, projectAlias) {
         const sessions = await this.sessionStore.listProjectSessions(conversationKey, projectAlias);
         const overflow = sessions.slice(this.config.service.session_history_limit);
@@ -3522,11 +1876,11 @@ export class FeiqueService {
             mentionPrefix = `<at user_id="${actor.actor_id}">${displayName}</at>\n`;
         }
         const bodyWithMention = mentionPrefix ? mentionPrefix + body : body;
-        const title = this.buildReplyTitle(this.sanitizeUserVisibleReply(body));
+        const title = buildReplyTitle(sanitizeUserVisibleReply(body));
         // Card mode uses replyToMessageId for threading — @mention tags render as
         // literal text inside card JSON, so use the clean body for cards.
-        const formattedBodyClean = this.sanitizeUserVisibleReply(this.formatQuotedReply(body, originalText));
-        const formattedBodyWithMention = this.sanitizeUserVisibleReply(this.formatQuotedReply(bodyWithMention, originalText));
+        const formattedBodyClean = sanitizeUserVisibleReply(formatQuotedReply(body, originalText));
+        const formattedBodyWithMention = sanitizeUserVisibleReply(formatQuotedReply(bodyWithMention, originalText));
         if (this.config.service.reply_mode === 'card') {
             const card = buildMessageCard({
                 title,
@@ -3568,7 +1922,7 @@ export class FeiqueService {
             return response;
         }
         if (this.config.service.reply_quote_user_message && replyToMessageId) {
-            const response = await this.feishuClient.sendText(chatId, this.sanitizeUserVisibleReply(bodyWithMention), { replyToMessageId });
+            const response = await this.feishuClient.sendText(chatId, sanitizeUserVisibleReply(bodyWithMention), { replyToMessageId });
             await this.auditLog.append({
                 type: 'message.replied',
                 chat_id: chatId,
@@ -3594,10 +1948,10 @@ export class FeiqueService {
         return this.feishuClient.sendCard(chatId, card);
     }
     async sendRunLifecycleReply(input) {
-        const lifecycleMode = this.resolveRunLifecycleReplyMode();
+        const lifecycleMode = resolveRunLifecycleReplyMode(this.config);
         const lifecycleReplyOptions = input.replyToMessageId ? { replyToMessageId: input.replyToMessageId } : undefined;
         if (lifecycleMode === 'card') {
-            const card = this.buildRunLifecycleCard({
+            const card = buildRunLifecycleCard({
                 title: input.title,
                 body: input.body,
                 projectAlias: input.projectAlias,
@@ -3618,8 +1972,8 @@ export class FeiqueService {
             return response;
         }
         if (lifecycleMode === 'post') {
-            const postBody = this.sanitizeUserVisibleReply(this.formatQuotedReply(input.body, input.originalText));
-            const title = this.buildReplyTitle(postBody);
+            const postBody = sanitizeUserVisibleReply(formatQuotedReply(input.body, input.originalText));
+            const title = buildReplyTitle(postBody);
             const post = buildFeishuPost(title, postBody);
             const response = lifecycleReplyOptions
                 ? await this.feishuClient.sendPost(input.chatId, post, lifecycleReplyOptions)
@@ -3635,7 +1989,7 @@ export class FeiqueService {
             return response;
         }
         const response = lifecycleReplyOptions
-            ? await this.feishuClient.sendText(input.chatId, this.sanitizeUserVisibleReply(this.formatQuotedReply(input.body, input.originalText)), lifecycleReplyOptions)
+            ? await this.feishuClient.sendText(input.chatId, sanitizeUserVisibleReply(formatQuotedReply(input.body, input.originalText)), lifecycleReplyOptions)
             : await this.sendTextReply(input.chatId, input.body, input.replyToMessageId, input.originalText);
         await this.auditLog.append({
             type: 'codex.run.replied',
@@ -3651,20 +2005,20 @@ export class FeiqueService {
         if (queued) {
             return {
                 title: '已加入排队',
-                body: this.buildAcknowledgedRunReply(projectAlias, '排队中', queued.detail, mode),
+                body: buildAcknowledgedRunReply(projectAlias, '排队中', queued.detail, mode),
                 runStatus: 'queued',
                 runPhase: '排队中',
             };
         }
         return {
             title: '已接收请求',
-            body: this.buildAcknowledgedRunReply(projectAlias, '已接收', '已收到你的消息，正在准备处理。', mode),
+            body: buildAcknowledgedRunReply(projectAlias, '已接收', '已收到你的消息，正在准备处理。', mode),
             runStatus: 'running',
             runPhase: '已接收',
         };
     }
     async sendInitialRunLifecycleReply(input) {
-        const lifecycleMode = this.resolveRunLifecycleReplyMode();
+        const lifecycleMode = resolveRunLifecycleReplyMode(this.config);
         const draft = this.buildInitialRunLifecycleReply(input.projectAlias, input.queued, lifecycleMode);
         try {
             const response = await this.sendRunLifecycleReply({
@@ -3684,7 +2038,7 @@ export class FeiqueService {
             this.logger.warn({ error, runId: input.runId, projectAlias: input.projectAlias }, 'Failed to send initial lifecycle reply');
         }
     }
-    async rememberRunReplyTarget(runId, response, mode = this.resolveRunLifecycleReplyMode()) {
+    async rememberRunReplyTarget(runId, response, mode = resolveRunLifecycleReplyMode(this.config)) {
         this.runReplyTargets.set(runId, {
             messageId: response.message_id,
             mode,
@@ -3696,7 +2050,7 @@ export class FeiqueService {
             return;
         }
         const label = backendLabel ?? 'AI';
-        const body = this.buildAcknowledgedRunReply(projectAlias, '处理中', '桥接器已开始处理你的请求。', target.mode);
+        const body = buildAcknowledgedRunReply(projectAlias, '处理中', '桥接器已开始处理你的请求。', target.mode);
         await this.updateRunLifecycleReply({
             chatId,
             projectAlias,
@@ -3714,7 +2068,7 @@ export class FeiqueService {
         }
         const label = backendLabel ?? 'AI';
         const body = [
-            this.buildAcknowledgedRunReply(input.projectAlias, '处理中', '桥接器正在持续处理你的请求。', target.mode),
+            buildAcknowledgedRunReply(input.projectAlias, '处理中', '桥接器正在持续处理你的请求。', target.mode),
             '最新进展:',
             progress,
         ]
@@ -3766,10 +2120,10 @@ export class FeiqueService {
         if (!target?.messageId) {
             return false;
         }
-        const sanitizedBody = this.sanitizeUserVisibleReply(input.body);
+        const sanitizedBody = sanitizeUserVisibleReply(input.body);
         if (target.mode === 'card') {
-            const includeActions = input.runStatus === 'success' && this.supportsInteractiveCardActions() && input.sessionKey !== undefined;
-            await this.feishuClient.updateCard(target.messageId, this.buildRunLifecycleCard({
+            const includeActions = input.runStatus === 'success' && supportsInteractiveCardActions(this.config) && input.sessionKey !== undefined;
+            await this.feishuClient.updateCard(target.messageId, buildRunLifecycleCard({
                 title: input.title,
                 body: input.body,
                 projectAlias: input.projectAlias,
@@ -3804,7 +2158,7 @@ export class FeiqueService {
             }));
         }
         else if (target.mode === 'post') {
-            const title = this.buildReplyTitle(sanitizedBody);
+            const title = buildReplyTitle(sanitizedBody);
             await this.feishuClient.updatePost(target.messageId, buildFeishuPost(title, sanitizedBody));
         }
         else {
@@ -3830,332 +2184,9 @@ export class FeiqueService {
         });
         return true;
     }
-    formatQuotedReply(body, originalText) {
-        return body;
-    }
-    buildReplyTitle(body) {
-        const firstLine = body
-            .split(/\r?\n/)
-            .map((line) => line.trim())
-            .find(Boolean);
-        return truncateExcerpt(firstLine ?? '飞鹊 (Feique)', 40);
-    }
-    sanitizeUserVisibleReply(body) {
-        return body
-            .split(/\r?\n/)
-            .filter((line) => !/^(运行|当前运行|阻塞运行|run[_ -]?id|session[_ -]?id|conversation[_ -]?key|chat[_ -]?id|tenant[_ -]?key|project[_ -]?root|pid):/i.test(line.trim()))
-            .join('\n')
-            .replace(/\n{3,}/g, '\n\n')
-            .trim();
-    }
-    supportsInteractiveCardActions() {
-        return this.config.feishu.transport === 'webhook';
-    }
-    resolveRunLifecycleReplyMode() {
-        if (this.config.service.reply_mode === 'post') {
-            return 'card';
-        }
-        return this.config.service.reply_mode;
-    }
-    buildRunLifecycleCard(input) {
-        const sanitizedBody = this.sanitizeUserVisibleReply(input.body);
-        if (input.includeActions) {
-            return buildStatusCard({
-                title: input.title,
-                summary: input.cardSummary ?? truncateForFeishuCard(this.stripLifecycleMetadata(sanitizedBody)),
-                projectAlias: input.projectAlias,
-                runStatus: input.runStatus,
-                runPhase: input.runPhase,
-                includeActions: true,
-                rerunPayload: input.rerunPayload,
-                newSessionPayload: input.newSessionPayload,
-                statusPayload: input.statusPayload,
-                cancelPayload: input.cancelPayload,
-            });
-        }
-        return buildMessageCard({
-            title: input.title,
-            body: this.stripLifecycleMetadata(sanitizedBody),
-            status: input.runStatus,
-            phase: input.runPhase,
-            projectAlias: input.projectAlias,
-        });
-    }
-    stripLifecycleMetadata(body) {
-        return body
-            .split(/\r?\n/)
-            .filter((line) => !/^(项目|处理状态|会话|当前会话|已保存会话数):/.test(line.trim()))
-            .join('\n')
-            .replace(/\n{3,}/g, '\n\n')
-            .trim();
-    }
-}
-export function buildQueueKey(conversationKey, projectAlias) {
-    return `${conversationKey}::project::${projectAlias}`;
-}
-export function buildProjectRootQueueKey(projectRoot) {
-    return `root::${path.resolve(projectRoot)}`;
-}
-function isExecutionRunStatus(status) {
-    return status === 'running' || status === 'orphaned';
-}
-function isVisibleRunStatus(status) {
-    return status === 'queued' || isExecutionRunStatus(status);
-}
-function buildMessageDedupeKey(context) {
-    return ['message', context.tenant_key ?? 'tenant', context.chat_id, context.message_id].join('::');
-}
-function buildCardDedupeKey(context, action) {
-    if (!context.open_message_id) {
-        return null;
-    }
-    return ['card', context.tenant_key ?? 'tenant', context.chat_id ?? 'chat', context.actor_id ?? 'actor', context.open_message_id, action].join('::');
-}
-/**
- * Extract [SEND_FILE:/path/to/file] markers from AI response text.
- * Returns cleaned text (markers removed) and list of file paths.
- */
-function extractFileMarkers(text) {
-    const FILE_MARKER_RE = /\[SEND_FILE:([^\]]+)\]/g;
-    const filePaths = [];
-    let match;
-    while ((match = FILE_MARKER_RE.exec(text)) !== null) {
-        const filePath = match[1]?.trim();
-        if (filePath) {
-            filePaths.push(filePath);
-        }
-    }
-    const cleanText = text.replace(FILE_MARKER_RE, '').replace(/\n{3,}/g, '\n\n').trim();
-    return { cleanText, filePaths };
-}
-/**
- * Shallow diff two BridgeConfig objects, returning human-readable change descriptions.
- */
-function diffConfigs(oldConfig, newConfig) {
-    const changes = [];
-    // Projects added/removed
-    const oldProjects = new Set(Object.keys(oldConfig.projects));
-    const newProjects = new Set(Object.keys(newConfig.projects));
-    for (const p of newProjects) {
-        if (!oldProjects.has(p))
-            changes.push(`项目新增: ${p}`);
-    }
-    for (const p of oldProjects) {
-        if (!newProjects.has(p))
-            changes.push(`项目移除: ${p}`);
-    }
-    // Project-level changes
-    for (const alias of newProjects) {
-        if (!oldProjects.has(alias))
-            continue;
-        const oldP = oldConfig.projects[alias];
-        const newP = newConfig.projects[alias];
-        if (!oldP || !newP)
-            continue;
-        const fields = ['root', 'backend', 'persona', 'codex_model', 'claude_model', 'mention_required', 'description', 'session_scope'];
-        for (const f of fields) {
-            const ov = String(oldP[f] ?? '');
-            const nv = String(newP[f] ?? '');
-            if (ov !== nv)
-                changes.push(`${alias}.${f}: ${ov || '(空)'} → ${nv || '(空)'}`);
-        }
-        // Array fields
-        const arrayFields = ['skills', 'admin_chat_ids', 'operator_chat_ids', 'notification_chat_ids'];
-        for (const f of arrayFields) {
-            const ov = JSON.stringify(oldP[f] ?? []);
-            const nv = JSON.stringify(newP[f] ?? []);
-            if (ov !== nv)
-                changes.push(`${alias}.${f} 变更`);
-        }
-    }
-    // Service-level changes
-    const serviceFields = ['default_project', 'reply_mode', 'persona', 'team_digest_enabled', 'intent_classifier_enabled'];
-    for (const f of serviceFields) {
-        const ov = String(oldConfig.service[f] ?? '');
-        const nv = String(newConfig.service[f] ?? '');
-        if (ov !== nv)
-            changes.push(`service.${f}: ${ov || '(空)'} → ${nv || '(空)'}`);
-    }
-    // Backend default
-    if (oldConfig.backend?.default !== newConfig.backend?.default) {
-        changes.push(`backend.default: ${oldConfig.backend?.default ?? 'codex'} → ${newConfig.backend?.default ?? 'codex'}`);
-    }
-    // Security admin changes
-    if (JSON.stringify(oldConfig.security.admin_chat_ids) !== JSON.stringify(newConfig.security.admin_chat_ids)) {
-        changes.push('security.admin_chat_ids 变更');
-    }
-    // Embedding provider
-    if (oldConfig.embedding.provider !== newConfig.embedding.provider) {
-        changes.push(`embedding.provider: ${oldConfig.embedding.provider} → ${newConfig.embedding.provider}`);
-    }
-    if (oldConfig.embedding.ollama_model !== newConfig.embedding.ollama_model) {
-        changes.push(`embedding.ollama_model: ${oldConfig.embedding.ollama_model} → ${newConfig.embedding.ollama_model}`);
-    }
-    return changes;
-}
-function truncateExcerpt(text, limit = 160) {
-    return text.length > limit ? `${text.slice(0, limit)}...` : text;
-}
-/** Map raw error strings to user-friendly Chinese messages. */
-function friendlyErrorMessage(error) {
-    const lower = error.toLowerCase();
-    if (lower.includes('econnrefused') || lower.includes('enotfound') || lower.includes('econnreset')) {
-        return '网络连接失败，请检查网络或稍后重试';
-    }
-    if (lower.includes('enoent') || lower.includes('enotdir')) {
-        return '文件路径不存在，请检查项目配置';
-    }
-    if (lower.includes('permission denied') || lower.includes('eacces')) {
-        return '权限不足，请检查文件权限';
-    }
-    if (lower.includes('timeout') || lower.includes('timed out') || lower.includes('etimedout')) {
-        return '执行超时，请尝试拆分为更小的任务';
-    }
-    if (lower.includes('rate limit') || lower.includes('429') || lower.includes('too many requests')) {
-        return 'API 频率限制，请稍后重试';
-    }
-    if (lower.includes('enomem') || lower.includes('out of memory')) {
-        return '内存不足，请关闭其他程序或减少并发任务';
-    }
-    // Default: show a truncated version of the raw error
-    const truncated = error.length > 100 ? error.slice(0, 100) + '...' : error;
-    return `执行异常: ${truncated}。如需帮助请联系管理员。`;
-}
-function splitCommaSeparatedValues(value) {
-    return value
-        .split(',')
-        .map((item) => item.trim())
-        .filter(Boolean);
-}
-function resolveAdminListTarget(resource) {
-    switch (resource) {
-        case 'viewer':
-            return { section: 'security', key: 'viewer_chat_ids' };
-        case 'operator':
-            return { section: 'security', key: 'operator_chat_ids' };
-        case 'admin':
-            return { section: 'security', key: 'admin_chat_ids' };
-        case 'service-observer':
-            return { section: 'security', key: 'service_observer_chat_ids' };
-        case 'service-restart':
-            return { section: 'security', key: 'service_restart_chat_ids' };
-        case 'config-admin':
-            return { section: 'security', key: 'config_admin_chat_ids' };
-        case 'group':
-            return { section: 'feishu', key: 'allowed_group_ids' };
-        case 'chat':
-            return { section: 'feishu', key: 'allowed_chat_ids' };
-    }
-}
-function buildConversationKeyForConversation(conversation) {
-    return buildConversationKey({
-        tenantKey: conversation.tenant_key,
-        chatId: conversation.chat_id,
-        actorId: conversation.actor_id,
-        scope: conversation.scope,
-    });
-}
-function renderMemorySection(title, items, budget) {
-    if (items.length === 0) {
-        return [];
-    }
-    const lines = ['', title];
-    let used = 0;
-    for (const item of items) {
-        const line = `- ${item.title}${item.pinned ? ' [pinned]' : ''}: ${item.content}`;
-        if (used + line.length > budget) {
-            break;
-        }
-        lines.push(truncateExcerpt(line, 280));
-        used += line.length;
-    }
-    return lines.length > 2 ? lines : [];
-}
-function formatAgeFromNow(isoTimestamp) {
-    const deltaMs = Date.now() - Date.parse(isoTimestamp);
-    if (!Number.isFinite(deltaMs) || deltaMs < 0) {
-        return '0s';
-    }
-    const totalSeconds = Math.floor(deltaMs / 1000);
-    if (totalSeconds < 60) {
-        return `${totalSeconds}s`;
-    }
-    const totalMinutes = Math.floor(totalSeconds / 60);
-    if (totalMinutes < 60) {
-        return `${totalMinutes}m`;
-    }
-    const totalHours = Math.floor(totalMinutes / 60);
-    if (totalHours < 24) {
-        return `${totalHours}h`;
-    }
-    return `${Math.floor(totalHours / 24)}d`;
-}
-function parseJsonObject(input) {
-    try {
-        const parsed = JSON.parse(input);
-        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
-            throw new Error('JSON payload must be an object.');
-        }
-        return parsed;
-    }
-    catch (error) {
-        throw new Error(`JSON 解析失败: ${error instanceof Error ? error.message : String(error)}`);
-    }
-}
-function clampListLimit(input, fallback, max) {
-    const parsed = Number(input ?? fallback);
-    if (!Number.isFinite(parsed) || parsed <= 0) {
-        return fallback;
-    }
-    return Math.min(Math.trunc(parsed), max);
-}
-function mapRunStatusToPhase(status) {
-    switch (status) {
-        case 'queued':
-            return '排队中';
-        case 'running':
-            return '执行中';
-        case 'success':
-            return '已完成';
-        case 'failure':
-            return '失败';
-        case 'cancelled':
-            return '已取消';
-        case 'stale':
-            return '中断';
-        case 'orphaned':
-            return '恢复中';
-        default:
-            return status;
-    }
-}
-function replaceObject(target, next) {
-    for (const key of Object.keys(target)) {
-        if (!(key in next)) {
-            delete target[key];
-        }
-    }
-    for (const [key, value] of Object.entries(next)) {
-        target[key] = value;
-    }
-}
-function replaceProjects(target, next) {
-    for (const key of Object.keys(target)) {
-        if (!(key in next)) {
-            delete target[key];
-        }
-    }
-    for (const [alias, project] of Object.entries(next)) {
-        target[alias] = project;
-    }
-}
-function createDeferred() {
-    let resolve;
-    let reject;
-    const promise = new Promise((innerResolve, innerReject) => {
-        resolve = innerResolve;
-        reject = innerReject;
-    });
-    return { promise, resolve, reject };
 }
+// Module-level helpers extracted to service-utils.ts (β step 1).
+// Re-exported here for backward compatibility (src/mcp/server.ts and
+// src/index.ts depend on these names being importable from this module).
+export { buildQueueKey, buildProjectRootQueueKey } from './service-utils.js';
 //# sourceMappingURL=service.js.map