larkin 0.5.18 → 0.5.20

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.5.19
+
+The Feishu processing-eye OnIt reaction is no longer a config switch. After a successful deliver, Larkin reacts OnIt only for private chats (DM / p2p), when the inbound event already marked the bot as mentioned, or when the user is talking inside a topic the bot started (a Feishu topic whose root is a bot-owned message). Ordinary group messages without @ and outside a bot-started topic never get the reaction, including free-mention chats that still wake the Agent.
+
+The 0.5.18 `processingEye.enabled` key, `larkin config processing-eye`, and Dashboard 处理中表情 toggle are removed. Leftover keys in existing configs are ignored on load and dropped on the next config write. There is no on/off flag and no migration prompt.
+
 ## 0.5.18
 
 The Feishu processing-eye OnIt reaction is now off by default. New installs and existing configs that omit `processingEye` no longer auto-react on inbound messages after upgrade; there is no migration prompt. Opt back in with `larkin config processing-eye global on`, a per-Agent `on`/`off`/`inherit` override, or the Dashboard 处理中表情 toggle. Explicit `enabled: false` and a missing key both skip the reactions API.

package/README.md

@@ -114,16 +114,9 @@ larkin config inbox-audit global off
 
 When enabled, audit only revisits originally wake-eligible human group/topic work and does not wake a model for an empty work list. Reading an audit list does not complete it: the managed Agent follows the returned inspection instructions and explicitly confirms the receipt after checking. A failed check remains retryable; newer messages cannot be completed by an older receipt. Old audit-index records without proven eligibility or observation identity are ignored; ordinary Inbox messages and conversation history are preserved.
 
-### Optional processing eye (OnIt)
+### Processing eye (OnIt)
 
-The Feishu "processing eye" (OnIt reaction on inbound messages while the Agent works) is **off by default**. A missing `processingEye` key is treated as off, so upgrading to this version stops the auto-reaction without a migration prompt. In the Dashboard, use **Global settings → 处理中表情** or the selected Agent's **Configuration → 处理中表情**. The same settings are available through the CLI:
-
-```bash
-larkin config processing-eye global on
-larkin config processing-eye agent off --agent <App-ID>
-larkin config processing-eye agent inherit --agent <App-ID>
-larkin config processing-eye global off
-```
+The Feishu "processing eye" is an OnIt reaction on the inbound message while the Agent works. It is automatic and not configurable: Larkin adds it after a successful deliver only for private chats (DM / p2p), when the inbound event marked the bot as mentioned, or when the user is talking inside a topic the bot started. Ordinary group messages without @ and outside a bot-started topic never get the reaction. The 0.5.18 `processingEye` config key, CLI, and Dashboard toggle are removed; leftover keys are ignored.
 
 <details>
 <summary>Windows support and optional autostart</summary>

package/dist/agent/agent-state-store.cjs

@@ -232,17 +232,15 @@ function normalizeInboxState(value) {
 }
 function newInboxLockOwner(inspect) {
     const inspected = inspect(process.pid);
-    if (!inspected.ok || !inspected.startToken) {
-        throw new Error(`无法读取 Inbox lock owner 身份：${inspected.reason || "metadata incomplete"}`);
-    }
-    return { version: 1, pid: process.pid, processStartToken: inspected.startToken, nonce: crypto.randomUUID() };
+    const identity = inspected.ok && inspected.startToken ? { processStartToken: inspected.startToken } : {};
+    return { version: 1, pid: process.pid, ...identity, nonce: crypto.randomUUID() };
 }
 function validInboxLockOwner(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const owner = value;
     return owner.version === 1 && Number.isSafeInteger(owner.pid) && Number(owner.pid) > 0
-        && typeof owner.processStartToken === "string" && !!owner.processStartToken
+        && (owner.processStartToken === undefined || (typeof owner.processStartToken === "string" && !!owner.processStartToken))
         && typeof owner.nonce === "string" && /^[0-9a-f-]{36}$/i.test(owner.nonce);
 }
 class ContextOverflowRecoveryError extends Error {
@@ -308,6 +306,12 @@ class AgentStateStore {
             const age = Date.now() - stat.mtimeMs;
             return age >= INBOX_MALFORMED_LOCK_GRACE_MS ? "reclaimable" : "unknown";
         }
+        if (!(0, process_state_js_1.pidAlive)(owner.pid))
+            return "reclaimable";
+        // A live owner is reclaimed only when its start token proves the pid was reused. Without a
+        // token to compare, the lock may still be held, and its owner may still write back.
+        if (!owner.processStartToken)
+            return "unknown";
         const inspected = this.inspect(owner.pid);
         if (!inspected.ok)
             return inspected.dead ? "reclaimable" : "unknown";
@@ -333,7 +337,8 @@ class AgentStateStore {
             });
         }
         catch (error) {
-            if (/lock 已被|无法取得 lock|正在创建|暂不能接管/.test(error instanceof Error ? error.message : String(error)))
+            // A sandboxed process cannot record its own identity for the reclaim lock; it waits for another process to reclaim.
+            if (/lock 已被|无法取得 lock|正在创建|暂不能接管|无法读取当前进程身份/.test(error instanceof Error ? error.message : String(error)))
                 return false;
             throw error;
         }

package/dist/agent/agent-state-store.mjs

@@ -2,7 +2,7 @@ import * as fs from "node:fs";
 import * as crypto from "node:crypto";
 import * as path from "node:path";
 import { TargetRootLayout } from "../platform/root-layout.mjs";
-import { acquireProcessLock, inspectProcess } from "../platform/process-state.mjs";
+import { acquireProcessLock, inspectProcess, pidAlive } from "../platform/process-state.mjs";
 import { isWindows } from "../platform/secure-metadata.mjs";
 import { isCanonicalInboxTarget, isUserDeliveryTarget, RUNTIME_REMINDER_TARGET, targetKeyOfInboxEnvelope } from "./inbox-projection.mjs";
 import { buildStrictProviderErrorInput, classifyStrictProviderError } from "../runtime/provider-error-classifier.mjs";
@@ -195,17 +195,15 @@ function normalizeInboxState(value) {
 }
 function newInboxLockOwner(inspect) {
     const inspected = inspect(process.pid);
-    if (!inspected.ok || !inspected.startToken) {
-        throw new Error(`无法读取 Inbox lock owner 身份：${inspected.reason || "metadata incomplete"}`);
-    }
-    return { version: 1, pid: process.pid, processStartToken: inspected.startToken, nonce: crypto.randomUUID() };
+    const identity = inspected.ok && inspected.startToken ? { processStartToken: inspected.startToken } : {};
+    return { version: 1, pid: process.pid, ...identity, nonce: crypto.randomUUID() };
 }
 function validInboxLockOwner(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const owner = value;
     return owner.version === 1 && Number.isSafeInteger(owner.pid) && Number(owner.pid) > 0
-        && typeof owner.processStartToken === "string" && !!owner.processStartToken
+        && (owner.processStartToken === undefined || (typeof owner.processStartToken === "string" && !!owner.processStartToken))
         && typeof owner.nonce === "string" && /^[0-9a-f-]{36}$/i.test(owner.nonce);
 }
 export class ContextOverflowRecoveryError extends Error {
@@ -270,6 +268,12 @@ export class AgentStateStore {
             const age = Date.now() - stat.mtimeMs;
             return age >= INBOX_MALFORMED_LOCK_GRACE_MS ? "reclaimable" : "unknown";
         }
+        if (!pidAlive(owner.pid))
+            return "reclaimable";
+        // A live owner is reclaimed only when its start token proves the pid was reused. Without a
+        // token to compare, the lock may still be held, and its owner may still write back.
+        if (!owner.processStartToken)
+            return "unknown";
         const inspected = this.inspect(owner.pid);
         if (!inspected.ok)
             return inspected.dead ? "reclaimable" : "unknown";
@@ -295,7 +299,8 @@ export class AgentStateStore {
             });
         }
         catch (error) {
-            if (/lock 已被|无法取得 lock|正在创建|暂不能接管/.test(error instanceof Error ? error.message : String(error)))
+            // A sandboxed process cannot record its own identity for the reclaim lock; it waits for another process to reclaim.
+            if (/lock 已被|无法取得 lock|正在创建|暂不能接管|无法读取当前进程身份/.test(error instanceof Error ? error.message : String(error)))
                 return false;
             throw error;
         }

package/dist/agent/config-cli-contract.cjs

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CONFIG_CLI_VALUES = exports.CONFIG_CLI_USAGE = exports.CONFIG_CLI_OPERATIONS = void 0;
-exports.CONFIG_CLI_OPERATIONS = Object.freeze(["show", "runtime", "model", "effort", "mention", "inbox-audit", "processing-eye", "apply"]);
+exports.CONFIG_CLI_OPERATIONS = Object.freeze(["show", "runtime", "model", "effort", "mention", "inbox-audit", "apply"]);
 exports.CONFIG_CLI_USAGE = Object.freeze([
     "larkin config show [--agent <App ID>] [--chat <oc_id>] [--json]",
     "larkin config runtime <runtime> [--model <model>] [--agent <App ID>]",
@@ -12,8 +12,6 @@ exports.CONFIG_CLI_USAGE = Object.freeze([
     "larkin config mention chat <oc_id> <inherit|require|free> [--agent <App ID>]",
     "larkin config inbox-audit global <on|off> [--interval <15m|1h>]",
     "larkin config inbox-audit agent <inherit|on|off> [--agent <App ID>] [--interval <15m|inherit>]",
-    "larkin config processing-eye global <on|off>",
-    "larkin config processing-eye agent <inherit|on|off> [--agent <App ID>]",
     "larkin config apply [--agent <App ID>]",
 ]);
 exports.CONFIG_CLI_VALUES = Object.freeze({

package/dist/agent/config-cli-contract.mjs

@@ -1,4 +1,4 @@
-export const CONFIG_CLI_OPERATIONS = Object.freeze(["show", "runtime", "model", "effort", "mention", "inbox-audit", "processing-eye", "apply"]);
+export const CONFIG_CLI_OPERATIONS = Object.freeze(["show", "runtime", "model", "effort", "mention", "inbox-audit", "apply"]);
 export const CONFIG_CLI_USAGE = Object.freeze([
     "larkin config show [--agent <App ID>] [--chat <oc_id>] [--json]",
     "larkin config runtime <runtime> [--model <model>] [--agent <App ID>]",
@@ -9,8 +9,6 @@ export const CONFIG_CLI_USAGE = Object.freeze([
     "larkin config mention chat <oc_id> <inherit|require|free> [--agent <App ID>]",
     "larkin config inbox-audit global <on|off> [--interval <15m|1h>]",
     "larkin config inbox-audit agent <inherit|on|off> [--agent <App ID>] [--interval <15m|inherit>]",
-    "larkin config processing-eye global <on|off>",
-    "larkin config processing-eye agent <inherit|on|off> [--agent <App ID>]",
     "larkin config apply [--agent <App ID>]",
 ]);
 export const CONFIG_CLI_VALUES = Object.freeze({

package/dist/agent/transport-business-context.cjs

@@ -49,6 +49,7 @@ const reminder_routes_js_1 = require("./reminder-routes.cjs");
 const reminder_delivery_audit_js_1 = require("./reminder-delivery-audit.cjs");
 const transport_shell_js_1 = require("./transport-shell.cjs");
 const agent_lark_cli_workspace_js_1 = require("../app/agent-lark-cli-workspace.cjs");
+const host_processing_eye_js_1 = require("../feishu/host-processing-eye.cjs");
 function formatFeishuError(error, grantLink = null) {
     if (!error)
         return null;
@@ -139,6 +140,8 @@ function createTransportBusinessContext(env = process.env) {
     const appendConversation = (item) => {
         try {
             fs.appendFileSync(paths.conversation, `${JSON.stringify({ ...item, text: (0, transport_shell_js_1.safeConversationExcerpt)(item.text) })}\n`);
+            if (item.direction === "out")
+                (0, host_processing_eye_js_1.persistBotTopicRoot)(stateStore, typeof item.messageId === "string" ? item.messageId : null);
         }
         catch (error) {
             log(`conversation 写失败: ${error.message}`);

package/dist/agent/transport-business-context.mjs

@@ -12,6 +12,7 @@ import { createReminderRoutes } from "./reminder-routes.mjs";
 import { auditReminderDelivery } from "./reminder-delivery-audit.mjs";
 import { isImageMime, looksLikeMarkdown, resolveMappedChatId, safeConversationExcerpt } from "./transport-shell.mjs";
 import { managedOfficialLarkCli } from "../app/agent-lark-cli-workspace.mjs";
+import { persistBotTopicRoot } from "../feishu/host-processing-eye.mjs";
 export function formatFeishuError(error, grantLink = null) {
     if (!error)
         return null;
@@ -102,6 +103,8 @@ export function createTransportBusinessContext(env = process.env) {
     const appendConversation = (item) => {
         try {
             fs.appendFileSync(paths.conversation, `${JSON.stringify({ ...item, text: safeConversationExcerpt(item.text) })}\n`);
+            if (item.direction === "out")
+                persistBotTopicRoot(stateStore, typeof item.messageId === "string" ? item.messageId : null);
         }
         catch (error) {
             log(`conversation 写失败: ${error.message}`);

package/dist/app/agent-cli.mjs

@@ -256,23 +256,6 @@ function agentConfigRequest(argv, env, config, agent, dependencies) {
             agentId: targetId,
         });
     }
-    else if (operation === "processing-eye") {
-        const [scope, first] = options.positionals;
-        if (scope === "global")
-            assertOnlyFlags([]);
-        else if (scope === "agent")
-            assertOnlyFlags(["--agent"]);
-        else
-            assertOnlyFlags([]);
-        if (options.positionals.length !== 2) {
-            throw new Error("用法: larkin config processing-eye global <on|off> | processing-eye agent <inherit|on|off> [--agent <App ID>]");
-        }
-        mutation = larkinConfig.processingEyeMutationFromCli({
-            scope: scope || "",
-            enabled: first,
-            agentId: targetId,
-        });
-    }
     else if (operation === "apply") {
         assertOnlyFlags(["--agent"]);
         if (options.positionals.length)
@@ -286,7 +269,7 @@ function agentConfigRequest(argv, env, config, agent, dependencies) {
         }).catch((error) => { throw new Error(`配置已保存但未应用：${error instanceof Error ? error.message : String(error)}`); });
     }
     else
-        throw new Error("config 只支持 show/runtime/model/effort/mention/inbox-audit/processing-eye/apply；运行 larkin config --help");
+        throw new Error("config 只支持 show/runtime/model/effort/mention/inbox-audit/apply；运行 larkin config --help");
     const result = larkinConfig.mutateConfig(env, mutation, authority);
     return { ok: true, revision: result.revision, persisted: true, applyState: result.applyState, changedScope: result.changedScope };
 }

package/dist/app/agent-config.mjs

@@ -52,7 +52,7 @@ const die = (message) => {
     process.exit(1);
 };
 if (!kind || !["agents", "model", "runtime", "effort", "chats", "config"].includes(kind)) {
-    die("用法: larkin agents | larkin config <show|mention|inbox-audit|processing-eye|apply> | larkin model [<id>] | larkin runtime [<id>] [--model <id>] | larkin effort [<level>|clear] | larkin chats [free|strict <oc_id>]");
+    die("用法: larkin agents | larkin config <show|mention|inbox-audit|apply> | larkin model [<id>] | larkin runtime [<id>] [--model <id>] | larkin effort [<level>|clear] | larkin chats [free|strict <oc_id>]");
 }
 const allowedValueFlags = {
     agents: new Set(), model: new Set(["--agent"]), runtime: new Set(["--agent", "--model"]),
@@ -162,23 +162,13 @@ else if (kind === "config") {
         if (positionals.length !== 3)
             die("用法: larkin config inbox-audit agent <inherit|on|off> [--agent <App ID>] [--interval <15m|inherit>]");
     }
-    else if (operation === "processing-eye" && scope === "global") {
-        assertOnlyFlags([]);
-        if (positionals.length !== 3)
-            die("用法: larkin config processing-eye global <on|off>");
-    }
-    else if (operation === "processing-eye" && scope === "agent") {
-        assertOnlyFlags(["--agent"]);
-        if (positionals.length !== 3)
-            die("用法: larkin config processing-eye agent <inherit|on|off> [--agent <App ID>]");
-    }
     else if (operation === "apply") {
         assertOnlyFlags(["--agent"]);
         if (positionals.length !== 1)
             die("用法: larkin config apply [--agent <App ID>]");
     }
     else {
-        die("config 只支持 show/mention/inbox-audit/processing-eye/apply；运行 larkin config --help");
+        die("config 只支持 show/mention/inbox-audit/apply；运行 larkin config --help");
     }
 }
 const loaded = (() => {
@@ -362,20 +352,15 @@ if (kind === "config") {
             say(`全局群消息策略=${String(view.mentionPolicy)}（free 会唤醒所有继承它的 Agent）`);
             const inboxAudit = view.inboxAudit;
             say(`全局 Inbox Audit=${inboxAudit?.enabled ? "on" : "off"} interval=${larkinConfig.formatInboxAuditInterval(Number(inboxAudit?.intervalMs || larkinConfig.DEFAULT_INBOX_AUDIT_INTERVAL_MS))}（默认关闭；未 @ 的 require 群消息不会进入审计）`);
-            const processingEye = view.processingEye;
-            say(`全局处理中表情=${processingEye?.enabled ? "on" : "off"}（默认关闭；缺 key 视为关闭，升级后不再自动点 OnIt）`);
             for (const item of view.agents) {
                 const mention = item.mention;
                 const agentAudit = item.inboxAudit;
-                const agentEye = item.processingEye;
                 const apply = item.apply;
-                say(`agent=${item.agentId} runtime=${item.runtime} model=${item.model} effort=${item.effort || "default"} mention=${mention.override} inbox-audit=${agentAudit?.override?.enabled || "inherit"} processing-eye=${agentEye?.override?.enabled || "inherit"} apply=${apply.applyState || "unknown"}`);
+                say(`agent=${item.agentId} runtime=${item.runtime} model=${item.model} effort=${item.effort || "default"} mention=${mention.override} inbox-audit=${agentAudit?.override?.enabled || "inherit"} apply=${apply.applyState || "unknown"}`);
                 if (mention.chat)
                     say(`  chat=${mention.chat.chatId} override=${mention.chat.override} effective=${mention.chat.effective} source=${mention.chat.source}`);
                 if (agentAudit?.effective)
                     say(`  inbox-audit effective=${agentAudit.effective.enabled ? "on" : "off"} interval=${larkinConfig.formatInboxAuditInterval(Number(agentAudit.effective.intervalMs || larkinConfig.DEFAULT_INBOX_AUDIT_INTERVAL_MS))}`);
-                if (agentEye?.effective)
-                    say(`  processing-eye effective=${agentEye.effective.enabled ? "on" : "off"}`);
             }
         }
         process.exit(0);
@@ -420,20 +405,6 @@ if (kind === "config") {
         }
         process.exit(0);
     }
-    if (operation === "processing-eye") {
-        try {
-            const result = larkinConfig.mutateConfig(process.env, larkinConfig.processingEyeMutationFromCli({
-                scope: scope || "",
-                enabled: first,
-                agentId: scope === "agent" ? requireTarget() : (selected || keys[0] || ""),
-            }), authority);
-            say(JSON.stringify({ ok: true, revision: result.revision, persisted: result.persisted, applyState: result.applyState, changedScope: result.changedScope }, null, 2));
-        }
-        catch (error) {
-            die(error instanceof Error ? error.message : String(error));
-        }
-        process.exit(0);
-    }
     if (operation === "apply") {
         const agentId = requireTarget();
         const expectedSignature = larkinConfig.runtimeConfigSignature(config, agentId);
@@ -453,7 +424,7 @@ if (kind === "config") {
         }
         process.exit(0);
     }
-    die("config 只支持 show/mention/inbox-audit/processing-eye/apply");
+    die("config 只支持 show/mention/inbox-audit/apply");
 }
 let key = flagAgent;
 if (!key && runtimeAgentId)

package/dist/app/cli.mjs

@@ -87,7 +87,6 @@ Examples:
   larkin config runtime pi --agent cli_x --model default
   larkin config mention chat oc_x free --agent cli_x
   larkin config inbox-audit global on --interval 15m
-  larkin config processing-eye global on
 
 Credentials, internal paths, serverId, activeAgent, and raw config are never exposed here.`,
     session: `Usage: larkin session reset --agent <App ID> --json [--wait-ready <seconds>]

package/dist/app/dashboard.mjs

@@ -13,11 +13,10 @@ import "../platform/check-bun-version.cjs";
 import fs from "node:fs";
 import http from "node:http";
 import path from "node:path";
-import crypto from "node:crypto";
 import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { currentProcessMetadata, readJson } from "../platform/process-state.mjs";
-import { prepareDashboardLaunch } from "../dashboard/dashboard-lifecycle.mjs";
+import { loadDashboardCapability, prepareDashboardLaunch } from "../dashboard/dashboard-lifecycle.mjs";
 import { DASHBOARD_BUILD_FINGERPRINT, DASHBOARD_BUILD_VERSION, PACKAGE_VERSION, collectStatus, collectWorkspaceEntry, loadDashboardConfig, resolveDashboardAvatarSource } from "../dashboard/dashboard-view-model.mjs";
 import { renderDashboardHtml } from "../dashboard/dashboard-template.mjs";
 import { createDashboardConfigController, createPiModelDirectoryResolver } from "../dashboard/dashboard-config-controller.mjs";
@@ -64,7 +63,7 @@ if (preparedDashboard.action === "reuse") {
     process.exit(0);
 }
 const dashboardLaunchLock = { release: preparedDashboard.release };
-const csrfCapability = crypto.randomBytes(32).toString("base64url");
+const csrfCapability = loadDashboardCapability(path.join(startupConfig.larkinHome, "dashboard-capability"));
 const HTML = renderDashboardHtml(PACKAGE_VERSION, DASHBOARD_BUILD_VERSION, BUILD_FINGERPRINT, csrfCapability);
 const piModelResolver = createPiModelDirectoryResolver();
 const configController = createDashboardConfigController({ csrfCapability, piModelDirectoryResolver: piModelResolver });

package/dist/app/lark-cli.mjs

@@ -11,6 +11,7 @@ import * as larkinConfig from "../platform/config.mjs";
 import { resolveOfficialLarkCli } from "./official-lark-cli.mjs";
 import { assertAgentWorkspaceBound, managedLarkCliEnv } from "./agent-lark-cli-workspace.mjs";
 import { parseDocumentCommentTarget } from "../feishu/document-comment.mjs";
+import { persistBotTopicRoot } from "../feishu/host-processing-eye.mjs";
 import { SpanKind } from "@opentelemetry/api";
 import { loadTelemetryConfig } from "../platform/telemetry-config.mjs";
 import { telemetrySingleton } from "../platform/telemetry-tracing.mjs";
@@ -1294,6 +1295,9 @@ export function runLarkCli(argv, env = process.env, dependencies = {}) {
         const deliveryAnchor = currentReminder?.deliveryAnchor;
         const memo = !write.error && write.status === 0 && writeMessage
             ? recordImWriteMemo(store, intentKey, writeMessage.message_id, deliveryAnchor) : { duplicate: false };
+        if (!write.error && write.status === 0 && writeMessage?.message_id) {
+            persistBotTopicRoot(store, writeMessage.message_id);
+        }
         const duplicateOfEarlierReminder = memo.duplicate && Boolean(currentReminder)
             && memo.priorSourceMessageId !== currentReminder?.deliveryAnchor;
         const committedWrite = !write.error && write.status === 0 && !duplicateOfEarlierReminder;

package/dist/app/run.mjs

@@ -385,10 +385,12 @@ export async function main() {
     launchLock.release();
     console.error(`[start] unified supervisor pid=${process.pid} daemon=${daemon.pid} agents=${names.join(",")}`);
     console.error("[start] dashboard 已随服务启动；不会自动打开浏览器");
-    const requestStop = (signal) => {
+    const requestStop = (signal, received = signal) => {
         if (stopping)
             return;
         stopping = true;
+        // Name the stop signal so a service that vanished can be told apart from a crash (a crash logs its own line).
+        console.error(`[start] 收到 ${received}，停止服务 (pid=${process.pid} ppid=${process.ppid})`);
         if (daemonRestartTimer) {
             clearTimeout(daemonRestartTimer);
             daemonRestartTimer = null;
@@ -405,6 +407,8 @@ export async function main() {
     };
     process.once("SIGINT", () => requestStop("SIGINT"));
     process.once("SIGTERM", () => requestStop("SIGTERM"));
+    // A closed terminal would otherwise end the supervisor without a trace; stop the same way as SIGTERM.
+    process.once("SIGHUP", () => requestStop("SIGTERM", "SIGHUP"));
     const daemonResult = await daemonFinal;
     try {
         cleanupStaleAgentControlSocket(configDir, controlToken);

package/dist/dashboard/dashboard-config-controller.mjs

@@ -310,9 +310,12 @@ export function createClaudeModelDirectoryResolver(options = {}) {
         },
     };
 }
-async function sanitizedView(env, chatDirectoryResolver, onlyAgentId, chatId) {
+async function sanitizedView(env, chatDirectoryResolver, onlyAgentId, chatId, withChats = true) {
     const { config } = loadConfig(env);
     const view = safeConfigView(config, onlyAgentId, chatId, configApplyState(env, config));
+    // Group names come from Feishu, one lookup per Agent; callers that only need the global values skip them.
+    if (!withChats)
+        return view;
     for (const item of view.agents) {
         const agentId = String(item.agentId);
         const agent = config.agents[agentId];
@@ -367,6 +370,37 @@ function assertWriteRequest(req, csrfCapability) {
     if (!String(req.headers["content-type"] || "").toLowerCase().startsWith("application/json"))
         throw new Error("application/json required");
 }
+/**
+ * Map a failed dashboard request to a status and a message the page shows as is.
+ * The raw reason goes to the local log. A wrong capability means the page was opened before this dashboard
+ * (re)started; an unknown operation or field means the page is from another build; both are fixed by a reload.
+ */
+export function dashboardError(error, fallback) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.warn(`[dashboard] ${fallback}: ${message}`);
+    const reply = (status, text) => ({ status, body: { error: text } });
+    if (/^(?:csrf|capability) rejected$/.test(message))
+        return reply(403, "这个页面已过期，刷新页面后再操作。");
+    if (/^(?:invalid host|same-origin required)$/.test(message))
+        return reply(403, "请在本机用 http://localhost 打开 dashboard。");
+    if (message === "request too large")
+        return reply(413, "内容太大，无法保存。");
+    if (message === "unknown agent")
+        return reply(404, "这个 Agent 已不存在，刷新页面看看。");
+    if (/not in current (?:runtime|model) directory$/.test(message))
+        return reply(400, "所选的模型或推理强度已不在可用列表里，重新选择后再保存。");
+    if (/^(?:unsupported operation|invalid |JSON object required|application\/json required)/.test(message) || error instanceof SyntaxError) {
+        return reply(400, "页面和正在运行的 larkin 版本不一致。刷新页面后再操作。");
+    }
+    // Messages written for people (Chinese) are shown as is; anything else keeps the fallback plus its reason.
+    if (/[\u4e00-\u9fff]/.test(message))
+        return reply(400, message);
+    return reply(500, `${fallback}：${message.slice(0, 200)}`);
+}
+function sendError(res, error, fallback, extra = {}) {
+    const { status, body } = dashboardError(error, fallback);
+    json(res, status, { ...body, ...extra });
+}
 function assertPrivateReadRequest(req, csrfCapability) {
     const host = String(req.headers.host || "");
     if (!/^(?:localhost|127\.0\.0\.1):\d+$/.test(host))
@@ -402,17 +436,11 @@ function dashboardMutation(value) {
         "set-chat-mention": ["operation", "agentId", "chatId", "value"], "set-agent-runtime": ["operation", "agentId", "runtime", "model"],
         "set-agent-model": ["operation", "agentId", "model"], "set-agent-effort": ["operation", "agentId", "effort"],
         "set-global-inbox-audit": ["operation", "enabled", "intervalMs"], "set-agent-inbox-audit": ["operation", "agentId", "enabled", "intervalMs"],
-        "set-global-processing-eye": ["operation", "enabled"], "set-agent-processing-eye": ["operation", "agentId", "enabled"],
     };
     if (!allowed[operation] || Object.keys(value).some((key) => !allowed[operation].includes(key)))
         throw new Error("unsupported operation");
     if (operation === "set-global-mention")
         return { kind: operation, value: String(value.value) };
-    if (operation === "set-global-processing-eye") {
-        if (typeof value.enabled !== "boolean")
-            throw new Error("invalid processing-eye enabled");
-        return { kind: operation, enabled: value.enabled };
-    }
     if (operation === "set-global-inbox-audit") {
         if (value.enabled !== undefined && typeof value.enabled !== "boolean")
             throw new Error("invalid inbox-audit enabled");
@@ -428,11 +456,6 @@ function dashboardMutation(value) {
             throw new Error("invalid inbox-audit interval");
         return { kind: operation, agentId, ...(value.enabled !== undefined ? { enabled: value.enabled } : {}), ...(value.intervalMs !== undefined ? { intervalMs: value.intervalMs } : {}) };
     }
-    if (operation === "set-agent-processing-eye") {
-        if (value.enabled !== "inherit" && typeof value.enabled !== "boolean")
-            throw new Error("invalid processing-eye enabled");
-        return { kind: operation, agentId, enabled: value.enabled };
-    }
     if (operation === "set-agent-mention")
         return { kind: operation, agentId, value: String(value.value) };
     if (operation === "set-chat-mention")
@@ -519,13 +542,13 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                 try {
                     assertPrivateReadRequest(req, csrfCapability);
                     json(res, 200, {
-                        ...await sanitizedView(env, chatDirectoryResolver, requestUrl.searchParams.get("agent") || undefined, requestUrl.searchParams.get("chat") || undefined),
+                        ...await sanitizedView(env, chatDirectoryResolver, requestUrl.searchParams.get("agent") || undefined, requestUrl.searchParams.get("chat") || undefined, requestUrl.searchParams.get("chats") !== "0"),
                         runtimeModels: loadRuntimeModels(),
                         runtimeOptions: [...RUNTIME_OPTIONS],
                     });
                 }
                 catch (error) {
-                    json(res, error instanceof Error && /host|capability/.test(error.message) ? 403 : 500, { error: "configuration unavailable" });
+                    sendError(res, error, "读取配置失败");
                 }
                 return true;
             }
@@ -537,7 +560,7 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                     json(res, 200, { models });
                 }
                 catch (error) {
-                    json(res, error instanceof Error && /host|capability/.test(error.message) ? 403 : 500, { error: "Pi model directory unavailable" });
+                    sendError(res, error, "读取 Pi 模型列表失败");
                 }
                 return true;
             }
@@ -553,7 +576,7 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                     json(res, 200, { models });
                 }
                 catch (error) {
-                    json(res, error instanceof Error && /host|capability/.test(error.message) ? 403 : 500, { error: "Codex model directory unavailable" });
+                    sendError(res, error, "读取 Codex 模型列表失败");
                 }
                 return true;
             }
@@ -569,7 +592,7 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                     json(res, 200, { models });
                 }
                 catch (error) {
-                    json(res, error instanceof Error && /host|capability/.test(error.message) ? 403 : 500, { error: "Claude model directory unavailable" });
+                    sendError(res, error, "读取 Claude 模型列表失败");
                 }
                 return true;
             }
@@ -583,15 +606,10 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                     json(res, 200, { ok: true, revision: result.revision, persisted: true, applyState: result.applyState, changedScope: result.changedScope });
                 }
                 catch (error) {
-                    if (error instanceof RuntimePrerequisiteError) {
+                    if (error instanceof RuntimePrerequisiteError)
                         json(res, 400, { error: error.message, readiness: error.readiness });
-                    }
-                    else if (error instanceof Error && error.message.startsWith("未知 runtime")) {
-                        json(res, 400, { error: error.message });
-                    }
-                    else {
-                        json(res, 400, { error: "configuration update rejected" });
-                    }
+                    else
+                        sendError(res, error, "保存失败");
                 }
                 return true;
             }
@@ -608,15 +626,17 @@ export function createDashboardConfigController({ csrfCapability, env = process.
                     const expectedSignature = runtimeConfigSignature(config, agentId);
                     const result = await requestUpsert({ larkinHome: config.larkinHome, agentId });
                     if (!result.ok) {
-                        json(res, 409, { error: result.error || "configuration saved but apply failed",
+                        json(res, 409, { error: result.error || "配置已保存，但应用失败",
                             ...(result.readiness ? { readiness: result.readiness } : {}) });
                         return true;
                     }
                     markConfigApplied(env, agentId, expectedSignature);
                     json(res, 200, { ok: true, agentId, applyState: "applied" });
                 }
-                catch {
-                    json(res, 409, { error: "configuration saved but apply failed" });
+                catch (error) {
+                    const { status, body } = dashboardError(error, "配置已保存，但应用失败");
+                    // An unreachable runtime is a failed apply of a saved config, not a server error.
+                    json(res, status === 500 ? 409 : status, body);
                 }
                 return true;
             }

package/dist/dashboard/dashboard-lifecycle.cjs

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadDashboardCapability = loadDashboardCapability;
 exports.dashboardBuildFingerprint = dashboardBuildFingerprint;
 exports.dashboardReuseDecision = dashboardReuseDecision;
 exports.reconcileDashboardRecord = reconcileDashboardRecord;
@@ -12,6 +13,7 @@ const node_path_1 = __importDefault(require("node:path"));
 const node_fs_1 = __importDefault(require("node:fs"));
 const process_state_js_1 = require("../platform/process-state.cjs");
 const internal_command_js_1 = require("../app/internal-command.cjs");
+const secure_metadata_js_1 = require("../platform/secure-metadata.cjs");
 const PUBLISHED_RUNTIME_DIRS = ["dist", "assets"];
 const RUNTIME_EXTENSIONS = new Set([".cjs", ".mjs", ".js", ".css", ".json", ".node", ".svg", ".wasm"]);
 function publishedRuntimeFiles(root) {
@@ -39,6 +41,33 @@ function publishedRuntimeFiles(root) {
     return files.sort((a, b) => a.localeCompare(b, "en"));
 }
 /** Same semver can contain a different local build, so hash every published shell runtime byte. */
+/**
+ * The dashboard's CSRF capability, kept in an owned 0600 file so a page opened before a restart keeps working.
+ * A missing or unsafe file gets a new value; if it cannot be written, the value lasts for this process only.
+ */
+function loadDashboardCapability(file) {
+    try {
+        const stat = node_fs_1.default.lstatSync(file);
+        const value = node_fs_1.default.readFileSync(file, "utf8").trim();
+        if (stat.isFile() && (0, secure_metadata_js_1.exactMode)(stat, 0o600) && (typeof process.getuid !== "function" || stat.uid === process.getuid())
+            && /^[A-Za-z0-9_-]{43}$/.test(value))
+            return value;
+    }
+    catch { /* missing or unreadable: issue a new one */ }
+    const value = node_crypto_1.default.randomBytes(32).toString("base64url");
+    const temporary = `${file}.${process.pid}.tmp`;
+    try {
+        node_fs_1.default.writeFileSync(temporary, `${value}\n`, { mode: 0o600, flag: "wx" });
+        node_fs_1.default.renameSync(temporary, file);
+    }
+    catch {
+        try {
+            node_fs_1.default.unlinkSync(temporary);
+        }
+        catch { /* nothing was written */ }
+    }
+    return value;
+}
 function dashboardBuildFingerprint(root) {
     const hash = node_crypto_1.default.createHash("sha256");
     for (const relative of publishedRuntimeFiles(root)) {