mu-agent-bridge 1.0.40 → 1.0.41

package/README.md

@@ -146,3 +146,19 @@ Windows 路径时，可设置 `DSH_INSTALL_DIR`。
 ## AUN 身份管理
 
 创建、连接、关联和 AUN 通信统一由独立 `agent-bridge-aun` 插件完成。安装并启动 AUN 后，在 ABWeb 的“通道 → AUN”创建或选择身份，再将已连接 AID 关联到已启动的 Agent；用 `mab status` 查看状态。Owner AID 仅作本地归属配置，不代表 AUN Owner 关系已激活。完整步骤见 [AUN 插件与 AID 身份管理](docs/aun-plugin-identities.md)；给 Codex、Claude Code 直接执行的 CLI 说明见 [使用说明](使用说明.md)。
+
+### 飞书凭据与办公 Agent 关联
+
+在 ABWeb 的“飞书通道 → 手动配置凭据”中填写 App ID、App Secret，并选择“关联办公 Agent”。Secret 使用密码框显示；已保存的密钥保持掩码，不通过状态接口返回。WorkBuddy、千问办公、豆包根据运行后台的机器上是否存在可执行文件检测，文件缺失或插件未就绪的选项置灰。自定义安装位置请在对应插件配置中填写 `executablePath`。
+
+也可以使用 CLI，Secret 在命令执行后隐藏输入，不写在命令参数中：
+
+```bash
+mab feishu configure cli_你的应用ID --agent workbuddy
+mab feishu agents
+mab feishu list
+mab feishu bind cli_你的应用ID workbuddy
+mab feishu unbind cli_你的应用ID
+```
+
+`configure` 保存凭据及可选关联后，需要在 ABWeb 重载飞书插件以连接机器人。非交互终端请使用网页密码框；不要把 Secret 写进命令行、脚本或仓库。

package/dist/src-ts/cli-commands.js

@@ -5,6 +5,7 @@ exports.resolveLocalControlHost = resolveLocalControlHost;
 exports.controlUrl = controlUrl;
 exports.runPluginCommand = runPluginCommand;
 exports.runCoreHelp = runCoreHelp;
+const secret_input_1 = require("./secret-input");
 const node_http_1 = require("node:http");
 const MAX_BODY_BYTES = 1024 * 1024;
 const PLUGIN_ID = /^[a-z][a-z0-9-]{1,63}$/;
@@ -108,6 +109,7 @@ function commandManifest(value, plugin) {
         || !Array.isArray(value.commands) || value.commands.some((command) => !object(command)
         || typeof command.name !== "string" || !/^[a-z][a-z0-9-]*$/.test(command.name)
         || typeof command.summary !== "string" || !command.summary.trim() || typeof command.usage !== "string" || !command.usage.trim()
+        || (command.secretPrompt !== undefined && (typeof command.secretPrompt !== "string" || !command.secretPrompt.trim()))
         || (command.examples !== undefined && (!Array.isArray(command.examples) || command.examples.some((example) => typeof example !== "string"))))) {
         throw new CliError("插件命令清单协议无效（需要 protocolVersion: 1）");
     }
@@ -126,7 +128,7 @@ async function runPluginCommand(id, args, port, options = {}) {
             throw new CliError(`插件“${id}”未安装；请先到 ABWeb 安装插件`, 2);
         if (!plugin.capabilities.includes("cli"))
             throw new CliError(`插件“${plugin.displayName}”未提供 CLI 命令；请升级对应插件`, 2);
-        if (plugin.status !== "ready")
+        if (!["ready", "degraded"].includes(plugin.status))
             throw new CliError(`插件“${plugin.displayName}”未就绪（${plugin.status}）`, 2);
         const path = `/api/plugins/${id}/commands`;
         const response = await requestJson(port, path, options);
@@ -146,7 +148,9 @@ async function runPluginCommand(id, args, port, options = {}) {
                 ])].join("\n");
             return output({ ok: true, message, data: { ...manifest, commands: selected } }, 0, json);
         }
-        const executed = await requestJson(port, path, options, { protocolVersion: 1, argv });
+        const prompt = manifest.commands.find((command) => command.name === argv[0])?.secretPrompt;
+        const secret = prompt ? await (options.readSecret ?? secret_input_1.readSecret)(prompt) : undefined;
+        const executed = await requestJson(port, path, options, { protocolVersion: 1, argv, ...(secret === undefined ? {} : { secret }) });
         const result = executed.value;
         if (!object(result) || typeof result.ok !== "boolean" || typeof result.message !== "string"
             || (executed.status >= 200 && executed.status < 300 ? !result.ok : result.ok)

package/dist/src-ts/control-server.js

@@ -251,6 +251,8 @@ class ControlServer {
                 const result = await identity.create(body.aid, body.ownerAid);
                 return this.json(res, result.status === "等待 Owner 确认" ? 202 : result.status === "existing" ? 200 : 201, result);
             }
+            if (method === "GET" && url.pathname === "/api/agents/availability")
+                return this.json(res, 200, { agents: await this.options.manager.availableAgents() });
             if (method === "GET" && url.pathname === "/api/plugins")
                 return this.json(res, 200, { ok: true, plugins: this.options.manager.list() });
             if (method === "GET" && url.pathname === "/api/plugins/catalog")

package/dist/src-ts/daemon-process.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.isDaemonCommand = isDaemonCommand;
 /** 只识别直接运行本安装 CLI 的后台进程，避免旧地址文件中的 PID 被其他程序复用。 */
 function isDaemonCommand(commandLine, cli) {
-    const args = [...commandLine.matchAll(/"([^"]*)"|(\S+)/g)].map((match) => (match[1] ?? match[2]).replaceAll("\\", "/").toLowerCase());
-    return args[1] === cli.replaceAll("\\", "/").toLowerCase() && ["start", "--serve"].includes(args[2]);
+    const normalize = (value) => value.replace(/[\\/]+/g, "/").toLowerCase();
+    const args = [...commandLine.matchAll(/"([^"]*)"|(\S+)/g)].map((match) => normalize(match[1] ?? match[2]));
+    return args[1] === normalize(cli) && ["start", "--serve"].includes(args[2]);
 }

package/dist/src-ts/plugin-manager.js

@@ -385,7 +385,7 @@ class PluginManager {
                         if (trustedChannel && (typeof message.peerId !== "string" || !message.peerId.trim() || [message.peerId, message.recipientId, message.chatId, message.threadId].some(value => value !== undefined && (typeof value !== "string" || value.length > 512 || /[\u0000-\u001f*]/.test(value)))))
                             throw new agent_1.AgentError("通道来源标识无效");
                         const target = message.agentPlugin || "qwenwork";
-                        if (/^\/sessions(?:\s|$)/.test(message.text.trimStart())) {
+                        if (/^\/sessions(?:\s|$)/.test(message.text.trimStart()) || (0, session_management_1.isDailySummaryRequest)(message.text)) {
                             if (!trustedChannel)
                                 throw new agent_1.AgentError("当前通道不支持会话管理");
                             const current = await this.sessions.current(message, target);

package/dist/src-ts/plugins/aun/index.js

@@ -671,7 +671,7 @@ class AunPlugin {
                 method,
                 headers: { accept: "application/json", ...(body === undefined ? {} : { "content-type": "application/json" }) },
                 ...(body === undefined ? {} : { body: JSON.stringify(body) }),
-                signal: AbortSignal.timeout(5000),
+                signal: AbortSignal.timeout(method === "PATCH" ? 120_000 : 5000),
                 redirect: "error",
             });
         }

package/dist/src-ts/plugins/chatgpt/cdp-client.js

@@ -111,7 +111,8 @@ class ChatgptCdpClient {
       if (selected?.getAttribute('data-app-action-sidebar-thread-id') !== ${JSON.stringify(session.id)}
         || selected?.getAttribute('data-app-action-sidebar-thread-host-id') !== ${JSON.stringify(session.host)}) return { supported: false, reason: '读取期间活动会话身份发生变化' };
       if (document.querySelector(${JSON.stringify(stopButtonSelector)})) return { supported: false, reason: 'ChatGPT 正在生成回复，暂不读取历史' };
-      const turns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const legacyTurns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const turns = legacyTurns.length ? legacyTurns : [...document.querySelectorAll('[data-content-search-turn-key]')];
       const output = [];
       const missingReasons = [];
       let chars = 0;
@@ -121,7 +122,7 @@ class ChatgptCdpClient {
         output.push({ role, text });
       };
       for (const turn of turns) {
-        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)});
+        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)}) || turn.getAttribute('data-content-search-turn-key');
         if (!turnId) {
           missingReasons.push('部分消息缺少可验证的 turn 身份');
           continue;

package/dist/src-ts/plugins/chatgpt/index.js

@@ -6,7 +6,7 @@ const cdp_client_1 = require("./cdp-client");
 const session_store_1 = require("./session-store");
 exports.chatgptManifest = {
     id: "chatgpt",
-    version: "1.0.9",
+    version: "1.0.10",
     displayName: "ChatGPT（Codex）",
     type: "agent",
     entry: "dist/index.js",

package/dist/src-ts/plugins/feishu/index.js

@@ -11,6 +11,7 @@ const commands = [
     { name: "status", summary: "查看飞书通道状态", usage: "mab feishu status" },
     { name: "list", summary: "列出机器人连接状态和关联 Agent", usage: "mab feishu list" },
     { name: "agents", summary: "列出已启动的 Agent 插件", usage: "mab feishu agents" },
+    { name: "configure", summary: "保存机器人凭据并关联办公 Agent", usage: "mab feishu configure <app-id> [--agent <plugin-id>]", secretPrompt: "请输入飞书 App Secret" },
     { name: "bind", summary: "将已连接的机器人关联到 Agent", usage: "mab feishu bind <bot-id> <plugin-id>" },
     { name: "unbind", summary: "解除机器人关联并保留凭据", usage: "mab feishu unbind <bot-id>" },
 ];
@@ -149,8 +150,10 @@ class FeishuPlugin {
         }
         if (body.protocolVersion !== 1 || !Array.isArray(body.argv) || !body.argv.every((arg) => typeof arg === "string"))
             return this.json(response, 400, { ok: false, message: "命令协议版本或 argv 无效" });
-        const [command, appId, pluginId] = body.argv;
-        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : 1;
+        const [command, appId, pluginArg] = body.argv;
+        const pluginId = command === "configure" && body.argv[2] === "--agent" ? body.argv[3] : pluginArg;
+        const secret = typeof body.secret === "string" ? body.secret.trim() : "";
+        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : command === "configure" ? (body.argv.length === 4 ? 4 : 2) : 1;
         if (!commands.some((item) => item.name === command) || body.argv.length !== expectedLength || body.argv.some((arg) => !arg.trim()))
             return this.json(response, 400, { ok: false, message: "命令或参数无效，请查看 mab feishu help" });
         if (command === "status") {
@@ -161,34 +164,44 @@ class FeishuPlugin {
             const bots = this.bots.map((bot) => ({ app_id: bot.app_id, status: this.botStates.get(bot.app_id)?.status || "degraded", pluginId: this.bindings[bot.app_id] || "" }));
             return this.json(response, 200, { ok: true, message: bots.map((bot) => `${bot.app_id}：${bot.status}，Agent：${bot.pluginId || "未关联"}`).join("\n") || "尚未配置飞书机器人", data: bots });
         }
-        if (command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
+        if (command === "configure" && (!appId || !secret || body.argv.length === 4 && (body.argv[2] !== "--agent" || !pluginId)))
+            return this.json(response, 400, { ok: false, message: "用法：mab feishu configure <app-id> [--agent <plugin-id>]，Secret 必须输入" });
+        if (command !== "configure" && command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
             return this.json(response, 400, { ok: false, message: "飞书机器人标识不存在" });
         if (command === "bind" && this.botStates.get(appId)?.status !== "ready")
             return this.json(response, 400, { ok: false, message: "飞书机器人当前未连接" });
-        if (command === "agents" || command === "bind") {
+        if (command === "agents" || command === "bind" || command === "configure" && pluginId) {
             const runtime = this.context?.runtime;
             const controlUrl = runtime && "controlUrl" in runtime ? runtime.controlUrl : undefined;
             if (typeof controlUrl !== "string" || !controlUrl)
                 return this.json(response, 503, { ok: false, message: "运行时未提供控制 API 地址，请升级核心并重启后台" });
             let agents;
             try {
-                const result = await fetch(new URL("/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
+                const result = await fetch(new URL(command === "configure" ? "/api/agents/availability" : "/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
                 if (!result.ok)
                     throw new Error("控制 API 请求失败");
                 const data = await result.json();
-                if (!Array.isArray(data.plugins))
+                const entries = command === "configure" ? data.agents : data.plugins;
+                if (!Array.isArray(entries))
                     throw new Error("控制 API 响应无效");
-                agents = data.plugins.filter((item) => item && item.type === "agent" && item.status === "ready" && typeof item.id === "string").map((item) => ({ id: item.id }));
+                agents = entries.filter((item) => item && typeof item.id === "string" && (command === "configure" ? item.available === true : item.type === "agent" && item.status === "ready")).map((item) => ({ id: item.id }));
             }
             catch {
                 return this.json(response, 502, { ok: false, message: "无法读取当前 Agent 插件，请检查后台控制 API" });
             }
             if (command === "agents")
                 return this.json(response, 200, { ok: true, message: agents.map((agent) => agent.id).join("\n") || "没有已启动的 Agent 插件", data: agents });
-            if (!agents.some((agent) => agent.id === pluginId))
+            if (pluginId && !agents.some((agent) => agent.id === pluginId))
                 return this.json(response, 400, { ok: false, message: "目标 Agent 插件未启动或类型无效" });
         }
         try {
+            if (command === "configure") {
+                this.saveBot(appId, secret);
+                await this.persist();
+                if (pluginId)
+                    await this.bindBot(appId, pluginId);
+                return this.json(response, 200, { ok: true, message: "飞书凭据已保存，请重载飞书插件以连接机器人", data: { app_id: appId, ...(pluginId ? { pluginId } : {}) } });
+            }
             await this.bindBot(appId, command === "bind" ? pluginId : "");
             this.json(response, 200, { ok: true, message: command === "bind" ? "飞书机器人已关联 Agent" : "飞书机器人已解除 Agent 关联", data: { app_id: appId, ...(command === "bind" ? { pluginId } : {}) } });
         }

package/dist/src-ts/plugins/feishu/public/app.js

@@ -29,9 +29,9 @@
     if (loading) return;
     loading = true;
     try {
-      const [state, plugins] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/plugins")]);
-      const agents = (plugins.plugins || []).filter((plugin) => plugin.type === "agent" && plugin.status === "ready");
-      const options = agents.map((agent) => new Option(agent.displayName || agent.id, agent.id));
+      const [state, availability] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/agents/availability")]);
+      const agents = availability.agents || [];
+      const agentOptions = () => agents.map((agent) => { const option = new Option(`${agent.displayName || agent.id}（${agent.available ? "可用" : agent.reason}）`, agent.id); option.disabled = !agent.available; return option; });
       bots = state.bots || [];
       botTable.replaceChildren();
       for (const bot of [...bots].sort((a, b) => Number(Boolean(b.pluginId)) - Number(Boolean(a.pluginId)) || Number(b.status === "ready") - Number(a.status === "ready") || (Date.parse(b.binding_time) || 0) - (Date.parse(a.binding_time) || 0))) {
@@ -39,18 +39,20 @@
         for (const text of [bot.app_id, bot.status === "ready" ? "已连接" : bot.message || "未连接", bot.pluginId || "未关联", bot.binding_time ? new Date(bot.binding_time).toLocaleString() : "—"]) { const cell = document.createElement("td"); cell.textContent = text; row.append(cell); }
         const controls = document.createElement("td");
         const select = document.createElement("select"); select.setAttribute("aria-label", `${bot.app_id} 关联 Agent`);
-        select.append(new Option("选择 Agent", ""), ...agents.map((agent) => new Option(agent.displayName || agent.id, agent.id))); select.value = bot.pluginId || "";
+        select.append(new Option("选择 Agent", ""), ...agentOptions()); select.value = bot.pluginId || "";
         function button(text, action) { const button = document.createElement("button"); button.type = "button"; button.textContent = text; button.onclick = async () => { button.disabled = true; try { await action(); } catch (error) { show(String(error), true); } finally { button.disabled = false; } }; return button; }
-        async function bind(pluginId) { await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
-        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
+        async function bind(pluginId) { if (pluginId && !agents.find((agent) => agent.id === pluginId)?.available) throw new Error("目标办公 Agent 不可用"); await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
+        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; credentials.elements.agent_plugin.value = bot.pluginId || ""; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
         row.append(controls); botTable.append(row);
       }
       if (refreshForm) {
-      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...options);
+      credentials.elements.agent_plugin.replaceChildren(new Option("保留原有关联", ""), ...agentOptions());
+      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...agentOptions());
       settings.elements.agent_plugin.value = state.agent_plugin || "";
       settings.elements.allow_from.value = state.allow_from || "";
       settings.elements.allow_chats.value = state.allow_chats || "";
       credentials.elements.app_id.value = state.app_id || "";
+      credentials.elements.agent_plugin.value = state.bindings?.[credentials.elements.app_id.value] || "";
       savedAppId = state.configured ? state.app_id : "";
       secretMasked = state.configured;
       credentials.elements.app_secret.value = secretMasked ? "********" : "";
@@ -120,14 +122,24 @@
   credentials.elements.app_id.oninput = () => {
 
     const changed = credentials.elements.app_id.value.trim() !== savedAppId;
+    if (changed) credentials.elements.agent_plugin.value = "";
     if (changed && secretMasked) { credentials.elements.app_secret.value = ""; secretMasked = false; }
     credentials.elements.app_secret.required = changed;
   };
   credentials.elements.app_secret.oninput = () => { secretMasked = false;  };
   credentials.elements.app_secret.addEventListener("invalid", () => show("首次配置或更换机器人时，App ID 和 App Secret 都需要填写", true));
+  function selectedAgentUnavailable() { return credentials.elements.agent_plugin.selectedOptions?.[0]?.disabled || false; }
   credentials.onsubmit = async (event) => {
     event.preventDefault(); const button = credentials.querySelector("button"); button.disabled = true; show("正在保存凭据并连接飞书");
-    try { await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value }); savedAppId = credentials.elements.app_id.value.trim(); secretMasked = true; credentials.elements.app_secret.value = "********"; await reconnect(); show("凭据已保存，机器人已连接"); }
+    try {
+      const agentPlugin = credentials.elements.agent_plugin.value;
+      if (agentPlugin && selectedAgentUnavailable()) throw new Error("目标办公 Agent 不可用");
+      await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value });
+      savedAppId = credentials.elements.app_id.value.trim();
+      secretMasked = true; credentials.elements.app_secret.value = "********";
+      if (agentPlugin) await request("/api/plugins/feishu/bind", "POST", { app_id: savedAppId, pluginId: agentPlugin });
+      await reconnect(); show("凭据已保存，机器人已连接");
+    }
     catch (error) { show(String(error), true); }
     finally { button.disabled = false; }
   };

package/dist/src-ts/plugins/feishu/public/index.html

@@ -8,7 +8,7 @@
     <dl><div><dt>连接状态</dt><dd id="connection">未配置</dd></div><div><dt>App ID</dt><dd id="app-id">未配置</dd></div><div><dt>关联 Agent</dt><dd id="bound-agent">未关联</dd></div></dl>
     <section><h2>机器人关联</h2><div class="table-wrap"><table><thead><tr><th>App ID</th><th>连接状态</th><th>关联 Agent</th><th>最近关联时间</th><th>操作</th></tr></thead><tbody id="bots"></tbody></table></div></section>
     <section><h2>创建设备授权</h2><div class="actions"><button id="begin" type="button">创建飞书机器人</button><a id="authorization-link" target="_blank" rel="noopener noreferrer" hidden>打开飞书创建链接</a></div><div id="authorization-details" hidden><img id="authorization-qr" width="256" height="256" alt="飞书机器人创建授权二维码"><p id="authorization-url"></p></div><p id="authorization-state" role="status"></p></section>
-    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label></div><button type="submit">保存并连接</button></form>
+    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label><label>关联办公 Agent<select name="agent_plugin"></select></label></div><button type="submit">保存并连接</button></form>
 
     <form id="settings"><h2>通道配置</h2><div class="fields"><label>默认 Agent<select name="agent_plugin"></select></label><label>允许的 open_id<input name="allow_from"></label><label>允许的 chat_id<input name="allow_chats"></label></div><button type="submit">保存配置</button></form>
   </main>

package/dist/src-ts/secret-input.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readSecret = readSecret;
+const node_readline_1 = require("node:readline");
+/** 密钥只在交互终端读取，不回显，也不进入 shell 历史。 */
+async function readSecret(prompt) {
+    const input = process.stdin;
+    if (!input.isTTY || !process.stderr.isTTY)
+        throw new Error("密钥需要在交互终端隐藏输入，请直接运行命令或使用网页密码框");
+    (0, node_readline_1.emitKeypressEvents)(input);
+    const wasRaw = input.isRaw;
+    input.setRawMode(true);
+    input.resume();
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const finish = (error) => {
+            input.removeListener("keypress", onKey);
+            input.removeListener("end", onEnd);
+            input.removeListener("error", onError);
+            input.setRawMode(wasRaw);
+            input.pause();
+            process.stderr.write("\n");
+            if (error)
+                reject(error);
+            else
+                resolve(value);
+        };
+        const onEnd = () => finish(new Error("密钥输入已中断"));
+        const onError = () => finish(new Error("无法读取密钥"));
+        const onKey = (text, key) => {
+            if (key.ctrl && ["c", "d"].includes(key.name || ""))
+                return onEnd();
+            if (key.name === "return" || key.name === "enter")
+                return finish(value.trim() ? undefined : new Error("App Secret 不能为空"));
+            if (key.name === "backspace") {
+                value = Array.from(value).slice(0, -1).join("");
+                return;
+            }
+            if (text && !key.ctrl && !key.meta && !/[\x00-\x1f\x7f]/.test(text))
+                value += text;
+        };
+        input.on("keypress", onKey);
+        input.once("end", onEnd);
+        input.once("error", onError);
+        process.stderr.write(`${prompt}（输入不显示）：`);
+    });
+}

package/dist/src-ts/session-management.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SessionManagement = void 0;
+exports.isDailySummaryRequest = isDailySummaryRequest;
 const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:fs/promises");
 const node_path_1 = require("node:path");
@@ -8,7 +9,11 @@ const session_archive_1 = require("./session-archive");
 const session_summary_1 = require("./session-summary");
 class ManagementError extends Error {
 }
-const usage = "用法：/sessions today [qwenwork|doubao|dsh] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
+const dailyPlugins = ["qwenwork", "workbuddy", "doubao", "chatgpt", "dsh"];
+const usage = "用法：/sessions today [插件ID] [--summary]；/sessions last <1–24>h [插件ID] [--summary]；/sessions list [插件ID] [--page 页码 --snapshot 编号]；/sessions show <编号>；/sessions native-list <插件ID>；/sessions native-show <编号>；/sessions summary --from <编号,...> [主题]";
+function isDailySummaryRequest(text) {
+    return /(?:今天|今日).{0,20}(?:聊了什么|聊了哪些|话题|小结|总结)|(?:小结|总结).{0,20}(?:今天|今日|对话)|最近\s*\d+\s*(?:小时|h).{0,20}(?:聊|话题|小结|总结|对话|消息)/i.test(text.trim());
+}
 class SessionManagement {
     directory;
     audit;
@@ -115,7 +120,8 @@ class SessionManagement {
         return { sessions: result.sessions.filter(item => sources.includes(item.source) && (!agentPlugin || item.agentPlugin === agentPlugin)), complete: result.complete };
     }
     async command(text, context) {
-        if (!/^\/sessions(?:\s|$)/.test(text.trimStart()))
+        const dailyRequest = isDailySummaryRequest(text);
+        if (!dailyRequest && !/^\/sessions(?:\s|$)/.test(text.trimStart()))
             return undefined;
         await this.load();
         const revision = this.revision;
@@ -127,7 +133,17 @@ class SessionManagement {
             if (!context.sessionId)
                 throw new ManagementError("当前逻辑会话无效");
             const input = text.trim();
-            const today = input.match(/^\/sessions today(?: (qwenwork|doubao|dsh))?( --summary)?$/);
+            const today = input.match(/^\/sessions today(?: (qwenwork|workbuddy|doubao|chatgpt|dsh))?( --summary)?$/);
+            const recent = input.match(/^\/sessions last (\d+)h(?: (qwenwork|workbuddy|doubao|chatgpt|dsh))?( --summary)?$/i);
+            const naturalRecent = dailyRequest ? input.match(/最近\s*(\d+)\s*(?:小时|h)/i) : undefined;
+            if (naturalRecent)
+                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer), Number(naturalRecent[1]));
+            if (recent)
+                return await this.summarizeToday(context, recent[2], Boolean(recent[3]), Number(recent[1]));
+            if (/^\/sessions last\b/i.test(input))
+                throw new ManagementError("时间范围须为最近1至24小时，例如 /sessions last 4h");
+            if (dailyRequest)
+                return await this.summarizeToday(context, undefined, Boolean(this.settings.summarizer));
             if (today)
                 return await this.summarizeToday(context, today[1], Boolean(today[2]));
             const nativeList = input.match(/^\/sessions native-list ([a-z][a-z0-9-]*)(?: --page ([1-9]\d*))?$/);
@@ -224,29 +240,34 @@ class SessionManagement {
     providers() {
         return this.nativeProviders().map(({ pluginId, provider, status }) => ({ pluginId, scope: provider.scope, mode: provider.mode, limitation: provider.limitation, status }));
     }
-    async summarizeToday(context, onlyPlugin, summarize = false) {
+    async summarizeToday(context, onlyPlugin, summarize = false, hours) {
         const revision = this.revision;
         const cutoff = Date.now();
         const configured = this.settings.summarizer?.model;
+        if (hours !== undefined && (!Number.isInteger(hours) || hours < 1 || hours > 24))
+            throw new ManagementError("时间范围须为最近1至24小时");
         if (summarize && !this.settings.summarizer)
-            throw new ManagementError("未配置本机只读总结模型，请先使用 /sessions today 获取今日全部对话材料");
-        const plugins = onlyPlugin ? [onlyPlugin] : ["qwenwork", "doubao", "dsh"];
+            throw new ManagementError("未配置本机只读总结模型，请先获取对话材料");
+        const plugins = onlyPlugin ? [onlyPlugin] : dailyPlugins;
         const expected = plugins.map(pluginId => {
             const current = this.currentNative(context, pluginId);
             return { ...current, scope: current.provider.scope };
         });
         const check = () => { this.checkRevision(revision); for (const record of expected)
             this.currentNative(context, record.pluginId, record); };
-        const start = new Date(new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date()) + "T00:00:00+08:00").getTime();
-        const end = start + 24 * 60 * 60 * 1000;
-        const date = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date(start));
+        const date = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date(cutoff));
+        const start = hours === undefined
+            ? Date.parse(`${date}T00:00:00+08:00`)
+            : cutoff - hours * 60 * 60 * 1000;
+        const end = hours === undefined ? start + 24 * 60 * 60 * 1000 : cutoff;
+        const period = hours === undefined ? `日期：${date}（Asia/Shanghai）` : `时间范围：最近${hours}小时（${new Date(start).toISOString()} 至 ${new Date(end).toISOString()}）`;
         const sources = [];
         const failures = [];
         let totalCharacters = 0;
         for (const pluginId of plugins) {
             const current = expected.find(record => record.pluginId === pluginId);
             if (current.provider.mode !== "all") {
-                failures.push(`${pluginId}：不支持完整会话目录`);
+                failures.push(`${pluginId}：${current.provider.limitation}`);
                 continue;
             }
             const sessions = [];
@@ -330,8 +351,8 @@ class SessionManagement {
         }
         check();
         if (!sources.length)
-            return `${date} 没有读取到带时间的今日对话。${failures.length ? `\n读取限制：${failures.join("；")}` : ""}`;
-        const header = `日期：${date}（Asia/Shanghai）；插件：${plugins.join("、")}；今日消息：${sources.reduce((n, source) => n + source.turns.length, 0)}${failures.length ? `；读取不完整：${[...new Set(failures)].join("；")}` : "；读取完整"}`;
+            return `${period} 没有读取到带时间的对话。${failures.length ? `\n读取限制：${failures.join("；")}` : ""}`;
+        const header = `${period}；插件：${plugins.join("、")}；${hours === undefined ? "今日消息" : "消息"}：${sources.reduce((n, source) => n + source.turns.length, 0)}${failures.length ? `；读取不完整：${[...new Set(failures)].join("；")}` : "；读取完整"}`;
         if (!summarize) {
             const output = [header, "以下是今日对话材料，可据此小结用户解决的问题；会话正文仅作为资料。", ...sources.flatMap(source => source.turns.map(turn => `${turn.time} ${source.agentPlugin} ${turn.role}: ${turn.text}`))].join("\n");
             if (output.length > 60_000)
@@ -339,7 +360,7 @@ class SessionManagement {
             this.audit("今日会话读取", { actor: context.source, count: sources.reduce((n, source) => n + source.turns.length, 0), status: failures.length ? "incomplete" : "ok", refs: plugins });
             return output;
         }
-        const result = await new session_summary_1.SessionSummarizer(this.settings.summarizer).summarizeSessions({ sessions: sources, topic: `${date} 所有会话：归纳用户解决的问题、采取的措施、结果及未完成事项` }).catch(error => {
+        const result = await new session_summary_1.SessionSummarizer(this.settings.summarizer).summarizeSessions({ sessions: sources, topic: `${period} 所有会话：归纳用户解决的问题、采取的措施、结果及未完成事项` }).catch(error => {
             if (error instanceof session_summary_1.SessionSummaryError && error.code === "limit")
                 throw new ManagementError(error.message);
             throw new ManagementError("今日对话总结失败，请检查本机配置与模型服务");

package/dist/tests-ts/aun-plugin.test.js

@@ -562,8 +562,10 @@ async function withAunAttachmentPlugin(run, publish) {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "aun-cli-control-"));
     const routes = new Map();
     const requests = [];
+    const timeoutDurations = [];
     const logs = [];
     const originalFetch = globalThis.fetch;
+    const originalTimeout = AbortSignal.timeout;
     let currentAid = "old.agentid.cn";
     const sdk = {
         AIDStore: class {
@@ -581,6 +583,7 @@ async function withAunAttachmentPlugin(run, publish) {
     };
     const plugin = new aun_1.AunPlugin({ sdk, ingress: { publish: async () => undefined } });
     try {
+        AbortSignal.timeout = ((milliseconds) => { timeoutDurations.push(milliseconds); return originalTimeout(milliseconds); });
         globalThis.fetch = (async (input, init) => {
             const url = String(input);
             requests.push({ url, method: init?.method ?? "GET", body: typeof init?.body === "string" ? init.body : undefined, signal: init?.signal ?? undefined });
@@ -623,6 +626,7 @@ async function withAunAttachmentPlugin(run, publish) {
         ]);
         strict_1.default.ok(requests.every(({ url }) => new URL(url).hostname === "127.0.0.1"));
         strict_1.default.ok(requests.every(({ signal }) => signal instanceof AbortSignal));
+        strict_1.default.deepEqual([...new Set(timeoutDurations)], [5000, 120_000]);
         strict_1.default.ok(JSON.stringify(created.body).includes("new.agentid.cn"));
         strict_1.default.doesNotMatch(JSON.stringify(created.body), /owner\.agentid\.cn/);
         strict_1.default.doesNotMatch(logs.join("\n"), /owner\.agentid\.cn/);
@@ -630,6 +634,7 @@ async function withAunAttachmentPlugin(run, publish) {
     }
     finally {
         globalThis.fetch = originalFetch;
+        AbortSignal.timeout = originalTimeout;
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });

package/dist/tests-ts/chatgpt-history.test.js

@@ -195,3 +195,36 @@ function fixture() {
     strict_1.default.ok(result.missingReasons.some(reason => /专用正文/.test(reason)), JSON.stringify(result.missingReasons));
     strict_1.default.ok(result.missingReasons.some(reason => /身份/.test(reason)));
 });
+(0, node_test_1.default)("ChatGPT 新版桌面通过搜索轮次身份读取用户正文与当前会话最终答复", async () => {
+    const client = new chatgpt_1.ChatgptCdpClient();
+    const user = { querySelector: () => ({ innerText: "回一句：你很帅" }) };
+    const assistant = {
+        innerText: "你很帅",
+        closest: (selector) => selector.includes("data-response-annotation") ? {
+            getAttribute: (name) => name.endsWith("conversation") ? "one" : "message-one",
+        } : null,
+    };
+    const turn = {
+        getAttribute: (name) => name === "data-content-search-turn-key" ? "turn-one" : null,
+        querySelectorAll: (selector) => selector === "[data-user-message-bubble]" ? [user]
+            : selector === '[data-markdown-text-style="assistant-message"]' ? [assistant] : [],
+    };
+    const document = {
+        querySelector: (selector) => selector.includes("sidebar-thread-selected") ? {
+            getAttribute: (name) => name.endsWith("host-id") ? active.host : name.endsWith("thread-id") ? active.id : active.title,
+        } : null,
+        querySelectorAll: (selector) => selector === "[data-content-search-turn-key]" ? [turn] : [],
+    };
+    Object.assign(client, { connected: () => true, evaluate: async (expression) => {
+            strict_1.default.doesNotMatch(expression, /\.click\(|\.focus\(|Input\.|fetch\(|import\(|innerText\s*=/);
+            return (0, node_vm_1.runInNewContext)(expression, { document });
+        } });
+    const result = await client.readSessionHistory(active);
+    strict_1.default.equal(result.supported, true);
+    if (!result.supported)
+        return;
+    strict_1.default.deepEqual(JSON.parse(JSON.stringify(result.turns)), [
+        { role: "user", text: "回一句：你很帅" },
+        { role: "assistant", text: "你很帅" },
+    ]);
+});

package/dist/tests-ts/cli-commands.test.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -303,3 +336,28 @@ function standardServer(onPost = (_request, response) => json(response, commandR
         await responseLimit.close();
     }
 });
+(0, node_test_1.default)("插件密钥通过隐藏输入和独立字段传递，不进入 argv 或输出", async () => {
+    let payload;
+    const server = await listen((request, response) => {
+        if (request.url === "/api/plugins")
+            return json(response, { plugins: [{ ...plugin, status: "degraded" }] });
+        if (request.method === "GET")
+            return json(response, { ...commands, commands: [{ name: "configure", summary: "配置凭据", usage: "mab demo configure", secretPrompt: "App Secret" }] });
+        void readBody(request).then((body) => { payload = JSON.parse(body); json(response, { ok: true, message: "已保存" }); });
+    });
+    try {
+        const result = await (0, cli_commands_1.runPluginCommand)("demo", ["configure"], server.port, { readSecret: async () => "测试密钥" });
+        strict_1.default.equal(result.exitCode, 0);
+        strict_1.default.deepEqual(payload.argv, ["configure"]);
+        strict_1.default.equal(payload.secret, "测试密钥");
+        strict_1.default.doesNotMatch(result.stdout + result.stderr, /测试密钥/);
+    }
+    finally {
+        await server.close();
+    }
+});
+(0, node_test_1.default)("非交互终端拒绝读取密钥", async () => {
+    const { readSecret } = await Promise.resolve().then(() => __importStar(require("../src-ts/secret-input")));
+    if (!process.stdin.isTTY || !process.stderr.isTTY)
+        await strict_1.default.rejects(readSecret("App Secret"), /交互终端/);
+});

package/dist/tests-ts/daemon-process.test.js

@@ -4,12 +4,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 const strict_1 = __importDefault(require("node:assert/strict"));
+const node_child_process_1 = require("node:child_process");
+const node_events_1 = require("node:events");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
 const node_test_1 = __importDefault(require("node:test"));
 const daemon_process_1 = require("../src-ts/daemon-process");
 const cli = "C:\\Users\\molian\\AppData\\Roaming\\npm\\node_modules\\mu-agent-bridge\\dist\\src-ts\\cli.js";
 (0, node_test_1.default)("识别同一安装的全部旧 daemon，兼容 Windows 路径与引号", () => {
     strict_1.default.equal((0, daemon_process_1.isDaemonCommand)(`"C:\\Program Files\\nodejs\\node.exe" ${cli.replaceAll("\\", "/")} start`, cli), true);
     strict_1.default.equal((0, daemon_process_1.isDaemonCommand)(`node.exe "${cli}" --serve`, cli), true);
+    strict_1.default.equal((0, daemon_process_1.isDaemonCommand)(`node.exe "${cli.replaceAll("\\", "\\\\")}" start`, cli), true);
 });
 (0, node_test_1.default)("清理进程时保留 CLI 操作、其他安装及普通 Node 程序", () => {
     for (const args of ["restart", "stop", "update", "status"])
@@ -18,3 +24,49 @@ const cli = "C:\\Users\\molian\\AppData\\Roaming\\npm\\node_modules\\mu-agent-br
     strict_1.default.equal((0, daemon_process_1.isDaemonCommand)(`node.exe -e "${cli} start"`, cli), false);
     strict_1.default.equal((0, daemon_process_1.isDaemonCommand)(`node.exe "${cli}.backup" start`, cli), false);
 });
+(0, node_test_1.default)("插件更新一直等待时，本地 API 和 AUN 仍已就绪", { skip: process.platform === "win32", timeout: 15_000 }, async () => {
+    // Windows 的真实进程清理另行验证，避免测试误结束同路径下的用户后台。
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-startup-"));
+    const plugin = (0, node_path_1.join)(root, "plugins", "aun");
+    const state = (0, node_path_1.join)(root, "state");
+    const preload = (0, node_path_1.join)(root, "hold-updates.cjs");
+    let child;
+    try {
+        await (0, promises_1.mkdir)(plugin, { recursive: true });
+        await (0, promises_1.writeFile)((0, node_path_1.join)(plugin, "plugin.json"), JSON.stringify({ id: "aun", version: "1.0.0", type: "channel", entry: "index.cjs", apiVersion: "1", capabilities: [] }));
+        await (0, promises_1.writeFile)((0, node_path_1.join)(plugin, "index.cjs"), "module.exports={activate:async()=>{},deactivate:async()=>{},health:async()=>({status:'ready'})};");
+        await (0, promises_1.writeFile)(preload, `require(${JSON.stringify((0, node_path_1.resolve)(__dirname, "../src-ts/plugin-manager.js"))}).PluginManager.prototype.checkPackageUpdates=async()=>{console.log('UPDATE_BLOCKED');return new Promise(()=>{});};`);
+        child = (0, node_child_process_1.spawn)(process.execPath, ["--require", preload, (0, node_path_1.resolve)(__dirname, "../src-ts/cli.js"), "start"], {
+            env: { ...process.env, AGENT_BRIDGE_STATE_DIR: state, AGENT_BRIDGE_PLUGINS_DIR: (0, node_path_1.join)(root, "plugins"), AGENT_BRIDGE_HOST: "127.0.0.1", AGENT_BRIDGE_PORT: "0", AGENT_BRIDGE_TOKEN: "" },
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+        let output = "";
+        child.stderr.on("data", chunk => { output += chunk; });
+        await new Promise((done, reject) => {
+            const timer = setTimeout(() => reject(new Error(`未进入更新检查：${output}`)), 5000);
+            child.stdout.on("data", chunk => {
+                output += chunk;
+                if (output.includes("UPDATE_BLOCKED")) {
+                    clearTimeout(timer);
+                    done();
+                }
+            });
+            child.once("error", error => { clearTimeout(timer); reject(error); });
+            child.once("exit", code => { clearTimeout(timer); reject(new Error(`后台提前退出：${code}，${output}`)); });
+        });
+        const address = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(state, "daemon-address.json"), "utf8"));
+        strict_1.default.equal(address.pid, child.pid);
+        const response = await fetch(`http://127.0.0.1:${address.port}/api/plugins`, { signal: AbortSignal.timeout(2000) });
+        strict_1.default.equal(response.status, 200);
+        const plugins = (await response.json()).plugins;
+        strict_1.default.equal(plugins.find((entry) => entry.id === "aun")?.status, "ready");
+    }
+    finally {
+        if (child?.pid && child.exitCode === null && child.signalCode === null) {
+            const exited = (0, node_events_1.once)(child, "exit");
+            child.kill("SIGKILL");
+            await exited;
+        }
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});

package/dist/tests-ts/feishu-page.test.js

@@ -12,7 +12,7 @@ const node_vm_1 = require("node:vm");
     const element = () => ({ children: [], value: "", required: false, placeholder: "", textContent: "", addEventListener() { }, setAttribute() { }, append(...items) { this.children.push(...items); }, replaceChildren(...items) { this.children = items; } });
     const field = element;
     const button = { disabled: false };
-    const credentials = { elements: { app_id: field(), app_secret: field() }, querySelector: () => button };
+    const credentials = { elements: { app_id: field(), app_secret: field(), agent_plugin: field() }, querySelector: () => button };
     const nodes = {
         "#credentials": credentials,
         "#binding": { elements: { pluginId: field() } },
@@ -25,15 +25,18 @@ const node_vm_1 = require("node:vm");
         document: { querySelector: (id) => nodes[id] ??= element(), createElement: element },
         localStorage: { getItem: () => null }, sessionStorage: { getItem: () => null },
         window: { addEventListener() { } }, AbortSignal, setTimeout, clearTimeout, setInterval() { }, clearInterval() { },
-        Option: function () { },
+        Option: function (text, value) { this.text = text; this.value = value; },
         fetch: async (path, init) => {
             if (path.endsWith("/bot") || path.endsWith("/bind"))
                 submitted.push(JSON.parse(init.body));
-            return { ok: true, json: async () => path.endsWith("/status") ? { app_id: "cli_1", configured: true, status, message: status === "ready" ? "已连接" : "连接失败", bots: [{ app_id: "cli_1", configured: true, status, message: "连接失败" }, { app_id: "cli_2", configured: true, status: "ready", pluginId: "dsh", binding_time: "2026-10-10T10:00:00Z" }] } : { plugins: [] } };
+            return { ok: true, json: async () => path.endsWith("/status") ? { app_id: "cli_1", configured: true, status, message: status === "ready" ? "已连接" : "连接失败", bots: [{ app_id: "cli_1", configured: true, status, message: "连接失败" }, { app_id: "cli_2", configured: true, status: "ready", pluginId: "dsh", binding_time: "2026-10-10T10:00:00Z" }] } : { agents: [{ id: "dsh", displayName: "DSH", available: true }, { id: "workbuddy", displayName: "WorkBuddy", available: false, reason: "未找到可执行文件" }] } };
         },
     });
     await new Promise((resolve) => setImmediate(resolve));
     strict_1.default.equal(nodes["#bots"].children.length, 2);
+    strict_1.default.equal(credentials.elements.agent_plugin.children[2].disabled, true);
+    strict_1.default.match(credentials.elements.agent_plugin.children[2].text, /未找到可执行文件/);
+    strict_1.default.equal(credentials.elements.agent_plugin.children[1].disabled, false);
     strict_1.default.equal(nodes["#bots"].children[0].children[0].textContent, "cli_2");
     await nodes["#bots"].children[0].children[4].children[1].onclick();
     strict_1.default.equal(submitted[0].app_id, "cli_2");
@@ -42,6 +45,10 @@ const node_vm_1 = require("node:vm");
     await credentials.onsubmit({ preventDefault() { } });
     strict_1.default.equal(submitted[1].app_secret, "");
     strict_1.default.equal(credentials.elements.app_secret.value, "********");
+    credentials.elements.agent_plugin.value = "dsh";
+    await credentials.onsubmit({ preventDefault() { } });
+    strict_1.default.equal(submitted.at(-1).pluginId, "dsh");
+    strict_1.default.equal(submitted.at(-1).app_id, "cli_1");
     status = "degraded";
     await credentials.onsubmit({ preventDefault() { } });
     strict_1.default.match(nodes["#notice"].textContent, /连接失败/);

package/dist/tests-ts/feishu-plugin.test.js

@@ -229,7 +229,7 @@ const feishu_1 = require("../src-ts/plugins/feishu");
         strict_1.default.equal(typeof postCommands, "function");
         await getCommands({}, response);
         const manifest = JSON.parse(response.body);
-        strict_1.default.deepEqual(manifest.commands.map((command) => command.name), ["status", "list", "agents", "bind", "unbind"]);
+        strict_1.default.deepEqual(manifest.commands.map((command) => command.name), ["status", "list", "agents", "configure", "bind", "unbind"]);
         strict_1.default.equal(manifest.protocolVersion, 1);
         strict_1.default.equal(manifest.version, "1.0.5");
         const run = async (...argv) => {
@@ -371,3 +371,26 @@ const feishu_1 = require("../src-ts/plugins/feishu");
         await (0, promises_1.rm)(state, { recursive: true, force: true });
     }
 });
+(0, node_test_1.default)("飞书 CLI 凭据配置保存密钥但不在响应中返回，并可同时关联 Agent", async () => {
+    const state = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "feishu-cli-configure-"));
+    const routes = new Map();
+    const originalFetch = globalThis.fetch;
+    const plugin = new feishu_1.FeishuPlugin({ client: { async start() { }, close() { } }, ingress: { publish: async () => undefined } });
+    try {
+        globalThis.fetch = async () => new Response(JSON.stringify({ agents: [{ id: "workbuddy", available: true }] }), { status: 200 });
+        await plugin.activate({ dataDir: state, config: {}, logger: { info() { }, warn() { }, error() { } }, http: { register(route) { routes.set(`${route.method} ${route.path}`, route.handler); return () => routes.delete(`${route.method} ${route.path}`); }, unregister() { } }, callPlugin: async () => ({ text: "" }), pluginStatus: () => "ready", runtime: { controlUrl: "http://127.0.0.1:1" } });
+        const handler = routes.get("POST /api/plugins/feishu/commands");
+        const response = { statusCode: 0, setHeader() { }, end(value) { this.body = value; } };
+        await handler(node_stream_1.Readable.from([JSON.stringify({ protocolVersion: 1, argv: ["configure", "cli_secretless", "--agent", "workbuddy"], secret: "never-return-this" })]), response);
+        strict_1.default.equal(response.statusCode, 200);
+        strict_1.default.doesNotMatch(response.body, /never-return-this/);
+        const saved = JSON.parse(await (0, promises_1.readFile)((0, node_path_1.join)(state, "config.json"), "utf8"));
+        strict_1.default.equal(saved.bots[0].app_secret, "never-return-this");
+        strict_1.default.equal(saved.bindings.cli_secretless, "workbuddy");
+    }
+    finally {
+        globalThis.fetch = originalFetch;
+        await plugin.deactivate("stop");
+        await (0, promises_1.rm)(state, { recursive: true, force: true });
+    }
+});

package/dist/tests-ts/installer-assets.test.js

@@ -0,0 +1,99 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const promises_1 = require("node:fs/promises");
+const node_test_1 = __importDefault(require("node:test"));
+const node_child_process_1 = require("node:child_process");
+const node_util_1 = require("node:util");
+(0, node_test_1.default)("Windows 安装向导隔离旧后台并固定 AUN 请求端口", { skip: process.platform !== "win32" }, async () => {
+    const { stdout } = await (0, node_util_1.promisify)(node_child_process_1.execFile)("powershell.exe", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", "tests/windows-installer.test.ps1"]);
+    strict_1.default.match(stdout, /验证通过/);
+});
+(0, node_test_1.default)("Windows 安装包包括中文向导、四类 Agent 和 per-user 卸载定义", async () => {
+    const [wxs, setup, launcher, build, qwenPlugin, workbuddyPlugin] = await Promise.all([
+        (0, promises_1.readFile)("installer/Product.wxs", "utf8"),
+        (0, promises_1.readFile)("installer/setup.ps1", "utf8"),
+        (0, promises_1.readFile)("installer/launch.cmd", "utf8"),
+        (0, promises_1.readFile)("scripts/build-installer.ps1", "utf8"),
+        (0, promises_1.readFile)("plugins/qwenwork/plugin.json", "utf8"),
+        (0, promises_1.readFile)("plugins/workbuddy/plugin.json", "utf8"),
+    ]);
+    strict_1.default.match(wxs, /Scope="perUser"/);
+    strict_1.default.match(wxs, /On="uninstall"/);
+    strict_1.default.match(wxs, /LaunchWizard/);
+    strict_1.default.match(launcher, /setup\.ps1/);
+    strict_1.default.match(build, /ProductVersion=\$installerVersion/);
+    strict_1.default.match(build, /\$packageVersion\.Build \+ 1/);
+    strict_1.default.match(setup, /22\.16\.0/);
+    strict_1.default.match(setup, /\$activeNodeVersion -lt \[version\]'22\.16\.0'/);
+    strict_1.default.match(setup, /node-v\$version-win-x64\.zip/);
+    strict_1.default.match(setup, /Environment\]::SetEnvironmentVariable\('Path', \$userPath, 'User'\)/);
+    strict_1.default.match(setup, /Get-Command npm\.cmd/);
+    strict_1.default.match(setup, /\$npmCommand\.Source prefix --global/);
+    strict_1.default.match(setup, /@\(\$nodeDirectory, \$npmDirectory, \$npmPrefix\)/);
+    strict_1.default.match(setup, /mu-agent-bridge@latest --engine-strict/);
+    strict_1.default.doesNotMatch(setup, /mu-agent-bridge@\d+\.\d+\.\d+/);
+    strict_1.default.match(setup, /api\/agents\/availability/);
+    strict_1.default.match(setup, /function Find-AgentExecutable/);
+    strict_1.default.match(setup, /Get-ChildItem -LiteralPath \$root -Filter \$app\.File -File -Recurse/);
+    strict_1.default.match(setup, /api\/plugins\/\$agent\/config/);
+    strict_1.default.match(setup, /TopMost = \$true/);
+    strict_1.default.match(setup, /BringToFront\(\)/);
+    strict_1.default.match(setup, /Invoke-AunCommand @\('list'\)/);
+    for (const id of ["qwenwork", "doubao", "workbuddy", "dsh"])
+        strict_1.default.ok(setup.includes(id), "缺少 Agent " + id);
+    strict_1.default.match(setup, /choices\[0\]\.message\.content/);
+    strict_1.default.match(setup, /existingBinding/);
+    strict_1.default.match(qwenPlugin, /https:\/\/qwenwork\.cn\/download/);
+    strict_1.default.match(workbuddyPlugin, /"displayName": "WorkBuddy"/);
+    strict_1.default.match(workbuddyPlugin, /https:\/\/www\.workbuddy\.ai\//);
+});
+(0, node_test_1.default)("MSI 重复安装时打开向导，卸载和静默运行时跳过", async () => {
+    const wxs = await (0, promises_1.readFile)("installer/Product.wxs", "utf8");
+    const condition = wxs.match(/<Custom Action="LaunchWizard"[^>]*Condition="([^"]+)"/);
+    strict_1.default.ok(condition, "缺少启动向导的执行条件");
+    strict_1.default.equal(condition[1], "NOT REMOVE AND NOT UPGRADINGPRODUCTCODE");
+    strict_1.default.match(wxs, /<InstallUISequence>\s*<Custom Action="LaunchWizard" After="ExecuteAction"/);
+});
+(0, node_test_1.default)("向导后台启动服务并提供缺失客户端的下载和重试入口", async () => {
+    const setup = await (0, promises_1.readFile)("installer/setup.ps1", "utf8");
+    strict_1.default.doesNotMatch(setup, /& mab\.cmd start/);
+    strict_1.default.match(setup, /Start-Process/);
+    strict_1.default.match(setup, /AddSeconds\(180\)/);
+    strict_1.default.match(setup, /System.Windows.Forms.LinkLabel/);
+    strict_1.default.match(setup, /重新检测/);
+    for (const domain of ["qwenwork.cn/download", "www.doubao.com", "www.workbuddy.ai", "github.com/deepseek-ai/deepseek-harness"])
+        strict_1.default.ok(setup.includes(domain));
+});
+(0, node_test_1.default)("先检测并显示缺失 App，再配置 AID，最后单独绑定 Agent", async () => {
+    const setup = await (0, promises_1.readFile)("installer/setup.ps1", "utf8");
+    const selectAid = setup.indexOf("$aid = Resolve-SetupAid");
+    const detect = setup.indexOf("$agents = Invoke-RestMethod");
+    const bind = setup.indexOf("Invoke-AunCommand @('bind'");
+    strict_1.default.ok(detect > 0 && detect < selectAid && selectAid < bind);
+    strict_1.default.match(setup, /新 AID（示例：workbuddy11\.agentid\.cn）/);
+    strict_1.default.match(setup, /Owner AID（示例：lihui7\.agentid\.cn）/);
+    strict_1.default.match(setup, /\$readyAgents.Count -lt 4/);
+    strict_1.default.match(setup, /\$InstalledIds -notcontains \$_.Id/);
+    strict_1.default.match(setup, /尚未就绪/);
+    strict_1.default.match(setup, /AID 关联失败/);
+    strict_1.default.match(setup, /setup\.log/);
+    strict_1.default.match(setup, /Write-SetupLog/);
+    strict_1.default.match(setup, /WorkBuddy 正在运行但未开启 CDP/);
+    strict_1.default.match(setup, /taskkill\.exe \/PID/);
+    strict_1.default.match(setup, /function Stop-BridgeDaemons/);
+    strict_1.default.match(setup, /api\/plugins\/aun\/commands/);
+    strict_1.default.doesNotMatch(setup, /Invoke-Mab/);
+    strict_1.default.match(setup, /Read-Host '输入 YES 关闭 WorkBuddy 并以 CDP 模式重启'\)\.Trim\(\) -ne 'YES'/);
+    strict_1.default.match(setup, /确认改为 \$agent？输入 YES 继续\"\)\.Trim\(\) -ne 'YES'/);
+    strict_1.default.doesNotMatch(setup, /-cne 'YES'/);
+    strict_1.default.match(setup, /qwenwork\.cn\/download/);
+    strict_1.default.match(setup, /检测到本机已有 AID/);
+    strict_1.default.match(setup, /IdentityConflictError/);
+    strict_1.default.match(setup, /返回 AID 输入步骤/);
+    strict_1.default.match(setup, /transport = 'cdp'/);
+    strict_1.default.match(setup, /workbuddy\/stop/);
+});

package/dist/tests-ts/plugin-manager.test.js

@@ -928,6 +928,9 @@ const channel_sessions_1 = require("../src-ts/channel-sessions");
         strict_1.default.equal(globalThis.historyCalls, before);
         strict_1.default.equal((await manager.sessionManagement.archive.listSessions()).sessions.length, 1);
         const admin = await manager.sessions.current(message("", "admin"), "agent");
+        await ingress.publish(message("最近 4 小时有哪些话题", "admin"));
+        strict_1.default.match(replies.at(-1), /无权/);
+        strict_1.default.equal(globalThis.historyCalls, before);
         await manager.sessionManagement.saveConfig({ enabled: true, grants: [{ managerSource: admin.source, managerSessionId: admin.logicalSessionId, sources: [archived[0].source] }], summarizer: { endpoint: `http://127.0.0.1:${summaryServer.address().port}/v1/chat/completions`, model: "read-only" } });
         await ingress.publish(message("/sessions list", "admin"));
         const ref = replies.at(-1).split("\n")[0].split(" ")[0];

package/dist/tests-ts/session-management.test.js

@@ -132,11 +132,11 @@ const source = (peer) => JSON.stringify(["aun", "local", "", peer, ""]);
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-today-summary-"));
     const today = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).format(new Date());
     const start = Date.parse(`${today}T00:00:00+08:00`);
-    const plugins = ["qwenwork", "doubao", "dsh"];
+    const plugins = ["qwenwork", "doubao", "dsh", "workbuddy", "chatgpt"];
     const providers = plugins.map(pluginId => ({
         pluginId, status: "ready", identity: {},
         provider: {
-            scope: `${pluginId}:scope`, mode: "all", limitation: "全量只读",
+            scope: `${pluginId}:scope`, mode: pluginId === "workbuddy" || pluginId === "chatgpt" ? "current" : "all", limitation: pluginId === "workbuddy" ? "无法证明完整历史" : pluginId === "chatgpt" ? "页面虚拟化影响" : "全量只读",
             async listSessions() { return { supported: true, sessions: [{ id: `${pluginId}-session`, title: pluginId, updatedAt: new Date(start - 1).toISOString() }], complete: true, missingReasons: [], readAt: new Date().toISOString() }; },
             async readSession(query) {
                 return { supported: true, session: { id: query.sessionId, title: pluginId }, turns: [
@@ -158,10 +158,12 @@ const source = (peer) => JSON.stringify(["aun", "local", "", peer, ""]);
     await new Promise(resolve => server.listen(0, "127.0.0.1", resolve));
     try {
         await service.saveConfig({ enabled: false, grants: [], nativeGrants: [{ managerSource: source("admin"), managerSessionId: "manager", providers: providers.map(item => ({ pluginId: item.pluginId, scope: item.provider.scope })) }], summarizer: { endpoint: `http://127.0.0.1:${server.address().port}/v1/chat/completions`, model: "test" } });
-        const result = await service.command("/sessions today --summary", { source: source("admin"), sessionId: "manager" });
+        const result = await service.command("今天有哪些话题聊了，给个小结", { source: source("admin"), sessionId: "manager" });
         strict_1.default.ok(result.includes(today));
         strict_1.default.match(result, /今日三个插件的问题均已解决/);
-        for (const plugin of plugins)
+        strict_1.default.match(result, /workbuddy：.*无法证明完整历史/);
+        strict_1.default.match(result, /chatgpt：.*虚拟化影响/);
+        for (const plugin of ["qwenwork", "doubao", "dsh"])
             strict_1.default.match(received, new RegExp(`${plugin} 今天已解决`));
         strict_1.default.ok(!received.includes("昨天旧内容"));
         const raw = await service.command("/sessions today", { source: source("admin"), sessionId: "manager" });
@@ -217,6 +219,38 @@ const source = (peer) => JSON.stringify(["aun", "local", "", peer, ""]);
         await (0, promises_1.rm)(root, { recursive: true, force: true });
     }
 });
+(0, node_test_1.default)("按最近整小时与自然语言筛选消息时间", async () => {
+    const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-recent-history-"));
+    const providers = ["qwenwork", "workbuddy", "doubao", "chatgpt", "dsh"].map(pluginId => {
+        const provider = {
+            scope: `${pluginId}:scope`, mode: pluginId === "workbuddy" || pluginId === "chatgpt" ? "current" : "all", limitation: "只读",
+            async listSessions() { return { supported: true, sessions: [{ id: "recent", title: "最近会话" }], complete: true, missingReasons: [], readAt: new Date().toISOString() }; },
+            async readSession(query) {
+                const start = Date.parse(query.since);
+                return { supported: true, session: { id: "recent", title: "最近会话" }, turns: [
+                        { role: "user", text: "窗口内消息", time: new Date(start + 60_000).toISOString() },
+                        { role: "assistant", text: "窗口外消息", time: new Date(start - 60_000).toISOString() },
+                    ], complete: true, missingReasons: [], readAt: new Date().toISOString() };
+            },
+        };
+        return { pluginId, provider, identity: provider, status: "ready" };
+    });
+    const service = new session_management_1.SessionManagement(root, undefined, undefined, () => providers);
+    try {
+        await service.saveConfig({ enabled: false, grants: [], nativeGrants: [{ managerSource: source("admin"), managerSessionId: "manager", providers: providers.map(item => ({ pluginId: item.pluginId, scope: item.provider.scope })) }] });
+        const context = { source: source("admin"), sessionId: "manager" };
+        const fourHours = await service.command("/sessions last 4h qwenwork", context);
+        strict_1.default.match(fourHours, /窗口内消息/);
+        strict_1.default.ok(!fourHours.includes("窗口外消息"));
+        const oneHour = await service.command("最近 1 小时有哪些话题", context);
+        strict_1.default.match(oneHour, /窗口内消息/);
+        strict_1.default.ok(!oneHour.includes("窗口外消息"));
+        strict_1.default.match(await service.command("/sessions last 25h", context) ?? "", /1至24小时/);
+    }
+    finally {
+        await (0, promises_1.rm)(root, { recursive: true, force: true });
+    }
+});
 (0, node_test_1.default)("读取期间撤销授权会阻止旧快照发往总结端点", async () => {
     const root = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "mab-management-revoke-"));
     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mu-agent-bridge",
-  "version": "1.0.40",
+  "version": "1.0.41",
   "description": "将 AUN Agent 连接到本地桌面 AI 客户端的插件平台。",
   "main": "dist/src-ts/cli.js",
   "bin": {
@@ -9,6 +9,7 @@
   },
   "files": [
     "dist/",
+    "!dist/installer/**",
     "plugins/",
     "README.md"
   ],
@@ -30,6 +31,7 @@
   "scripts": {
     "build": "tsc && node scripts/build-web.mjs",
     "build:packages": "npm run build && node scripts/build-packages.mjs",
+    "build:installer": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/build-installer.ps1",
     "publish:packages": "node scripts/publish-packages.mjs",
     "test": "npm run build:packages && node --test dist/tests-ts/*.test.js",
     "self-test": "npm run build && node dist/src-ts/cli.js --self-test",

package/plugins/aun/dist/src-ts/plugins/aun/index.js

@@ -671,7 +671,7 @@ class AunPlugin {
                 method,
                 headers: { accept: "application/json", ...(body === undefined ? {} : { "content-type": "application/json" }) },
                 ...(body === undefined ? {} : { body: JSON.stringify(body) }),
-                signal: AbortSignal.timeout(5000),
+                signal: AbortSignal.timeout(method === "PATCH" ? 120_000 : 5000),
                 redirect: "error",
             });
         }

package/plugins/chatgpt/dist/src-ts/plugins/chatgpt/cdp-client.js

@@ -111,7 +111,8 @@ class ChatgptCdpClient {
       if (selected?.getAttribute('data-app-action-sidebar-thread-id') !== ${JSON.stringify(session.id)}
         || selected?.getAttribute('data-app-action-sidebar-thread-host-id') !== ${JSON.stringify(session.host)}) return { supported: false, reason: '读取期间活动会话身份发生变化' };
       if (document.querySelector(${JSON.stringify(stopButtonSelector)})) return { supported: false, reason: 'ChatGPT 正在生成回复，暂不读取历史' };
-      const turns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const legacyTurns = [...document.querySelectorAll(${JSON.stringify(exports.turnSelector)})];
+      const turns = legacyTurns.length ? legacyTurns : [...document.querySelectorAll('[data-content-search-turn-key]')];
       const output = [];
       const missingReasons = [];
       let chars = 0;
@@ -121,7 +122,7 @@ class ChatgptCdpClient {
         output.push({ role, text });
       };
       for (const turn of turns) {
-        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)});
+        const turnId = turn.getAttribute(${JSON.stringify(turnIdAttribute)}) || turn.getAttribute('data-content-search-turn-key');
         if (!turnId) {
           missingReasons.push('部分消息缺少可验证的 turn 身份');
           continue;

package/plugins/chatgpt/dist/src-ts/plugins/chatgpt/index.js

@@ -6,7 +6,7 @@ const cdp_client_1 = require("./cdp-client");
 const session_store_1 = require("./session-store");
 exports.chatgptManifest = {
     id: "chatgpt",
-    version: "1.0.9",
+    version: "1.0.10",
     displayName: "ChatGPT（Codex）",
     type: "agent",
     entry: "dist/index.js",

package/plugins/chatgpt/package.json

@@ -1 +1 @@
-{"name":"agent-bridge-chatgpt","version":"1.0.9","description":"agent-bridge 的 ChatGPT Codex CDP 插件。","keywords":["mu-agent-bridge-plugin","mu-agent-bridge-agent"],"main":"dist/src-ts/plugins/chatgpt/index.js","files":["dist/","plugin.json","config.schema.json","README.md"],"agentBridge":{"plugin":"./plugin.json","type":"agent"},"engines":{"node":">=22"}}
+{"name":"agent-bridge-chatgpt","version":"1.0.10","description":"agent-bridge 的 ChatGPT Codex CDP 插件。","keywords":["mu-agent-bridge-plugin","mu-agent-bridge-agent"],"main":"dist/src-ts/plugins/chatgpt/index.js","files":["dist/","plugin.json","config.schema.json","README.md"],"agentBridge":{"plugin":"./plugin.json","type":"agent"},"engines":{"node":">=22"}}

package/plugins/chatgpt/plugin.json

@@ -1,14 +1 @@
-{
-  "id": "chatgpt",
-  "version": "1.0.9",
-  "type": "agent",
-  "displayName": "ChatGPT（Codex）",
-  "entry": "dist/src-ts/plugins/chatgpt/index.js",
-  "apiVersion": "1",
-  "process": "in-process",
-  "capabilities": [
-    "chat",
-    "health"
-  ],
-  "configSchema": "config.schema.json"
-}
+{"id":"chatgpt","version":"1.0.10","type":"agent","displayName":"ChatGPT（Codex）","entry":"dist/src-ts/plugins/chatgpt/index.js","apiVersion":"1","process":"in-process","capabilities":["chat","health"],"configSchema":"config.schema.json"}

package/plugins/feishu/dist/src-ts/plugins/feishu/index.js

@@ -11,6 +11,7 @@ const commands = [
     { name: "status", summary: "查看飞书通道状态", usage: "mab feishu status" },
     { name: "list", summary: "列出机器人连接状态和关联 Agent", usage: "mab feishu list" },
     { name: "agents", summary: "列出已启动的 Agent 插件", usage: "mab feishu agents" },
+    { name: "configure", summary: "保存机器人凭据并关联办公 Agent", usage: "mab feishu configure <app-id> [--agent <plugin-id>]", secretPrompt: "请输入飞书 App Secret" },
     { name: "bind", summary: "将已连接的机器人关联到 Agent", usage: "mab feishu bind <bot-id> <plugin-id>" },
     { name: "unbind", summary: "解除机器人关联并保留凭据", usage: "mab feishu unbind <bot-id>" },
 ];
@@ -149,8 +150,10 @@ class FeishuPlugin {
         }
         if (body.protocolVersion !== 1 || !Array.isArray(body.argv) || !body.argv.every((arg) => typeof arg === "string"))
             return this.json(response, 400, { ok: false, message: "命令协议版本或 argv 无效" });
-        const [command, appId, pluginId] = body.argv;
-        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : 1;
+        const [command, appId, pluginArg] = body.argv;
+        const pluginId = command === "configure" && body.argv[2] === "--agent" ? body.argv[3] : pluginArg;
+        const secret = typeof body.secret === "string" ? body.secret.trim() : "";
+        const expectedLength = command === "bind" ? 3 : command === "unbind" ? 2 : command === "configure" ? (body.argv.length === 4 ? 4 : 2) : 1;
         if (!commands.some((item) => item.name === command) || body.argv.length !== expectedLength || body.argv.some((arg) => !arg.trim()))
             return this.json(response, 400, { ok: false, message: "命令或参数无效，请查看 mab feishu help" });
         if (command === "status") {
@@ -161,34 +164,44 @@ class FeishuPlugin {
             const bots = this.bots.map((bot) => ({ app_id: bot.app_id, status: this.botStates.get(bot.app_id)?.status || "degraded", pluginId: this.bindings[bot.app_id] || "" }));
             return this.json(response, 200, { ok: true, message: bots.map((bot) => `${bot.app_id}：${bot.status}，Agent：${bot.pluginId || "未关联"}`).join("\n") || "尚未配置飞书机器人", data: bots });
         }
-        if (command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
+        if (command === "configure" && (!appId || !secret || body.argv.length === 4 && (body.argv[2] !== "--agent" || !pluginId)))
+            return this.json(response, 400, { ok: false, message: "用法：mab feishu configure <app-id> [--agent <plugin-id>]，Secret 必须输入" });
+        if (command !== "configure" && command !== "agents" && !this.bots.some((bot) => bot.app_id === appId))
             return this.json(response, 400, { ok: false, message: "飞书机器人标识不存在" });
         if (command === "bind" && this.botStates.get(appId)?.status !== "ready")
             return this.json(response, 400, { ok: false, message: "飞书机器人当前未连接" });
-        if (command === "agents" || command === "bind") {
+        if (command === "agents" || command === "bind" || command === "configure" && pluginId) {
             const runtime = this.context?.runtime;
             const controlUrl = runtime && "controlUrl" in runtime ? runtime.controlUrl : undefined;
             if (typeof controlUrl !== "string" || !controlUrl)
                 return this.json(response, 503, { ok: false, message: "运行时未提供控制 API 地址，请升级核心并重启后台" });
             let agents;
             try {
-                const result = await fetch(new URL("/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
+                const result = await fetch(new URL(command === "configure" ? "/api/agents/availability" : "/api/plugins", controlUrl), { signal: AbortSignal.timeout(5000) });
                 if (!result.ok)
                     throw new Error("控制 API 请求失败");
                 const data = await result.json();
-                if (!Array.isArray(data.plugins))
+                const entries = command === "configure" ? data.agents : data.plugins;
+                if (!Array.isArray(entries))
                     throw new Error("控制 API 响应无效");
-                agents = data.plugins.filter((item) => item && item.type === "agent" && item.status === "ready" && typeof item.id === "string").map((item) => ({ id: item.id }));
+                agents = entries.filter((item) => item && typeof item.id === "string" && (command === "configure" ? item.available === true : item.type === "agent" && item.status === "ready")).map((item) => ({ id: item.id }));
             }
             catch {
                 return this.json(response, 502, { ok: false, message: "无法读取当前 Agent 插件，请检查后台控制 API" });
             }
             if (command === "agents")
                 return this.json(response, 200, { ok: true, message: agents.map((agent) => agent.id).join("\n") || "没有已启动的 Agent 插件", data: agents });
-            if (!agents.some((agent) => agent.id === pluginId))
+            if (pluginId && !agents.some((agent) => agent.id === pluginId))
                 return this.json(response, 400, { ok: false, message: "目标 Agent 插件未启动或类型无效" });
         }
         try {
+            if (command === "configure") {
+                this.saveBot(appId, secret);
+                await this.persist();
+                if (pluginId)
+                    await this.bindBot(appId, pluginId);
+                return this.json(response, 200, { ok: true, message: "飞书凭据已保存，请重载飞书插件以连接机器人", data: { app_id: appId, ...(pluginId ? { pluginId } : {}) } });
+            }
             await this.bindBot(appId, command === "bind" ? pluginId : "");
             this.json(response, 200, { ok: true, message: command === "bind" ? "飞书机器人已关联 Agent" : "飞书机器人已解除 Agent 关联", data: { app_id: appId, ...(command === "bind" ? { pluginId } : {}) } });
         }

package/plugins/feishu/dist/src-ts/plugins/feishu/public/app.js

@@ -29,9 +29,9 @@
     if (loading) return;
     loading = true;
     try {
-      const [state, plugins] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/plugins")]);
-      const agents = (plugins.plugins || []).filter((plugin) => plugin.type === "agent" && plugin.status === "ready");
-      const options = agents.map((agent) => new Option(agent.displayName || agent.id, agent.id));
+      const [state, availability] = await Promise.all([request("/api/plugins/feishu/setup/status"), request("/api/agents/availability")]);
+      const agents = availability.agents || [];
+      const agentOptions = () => agents.map((agent) => { const option = new Option(`${agent.displayName || agent.id}（${agent.available ? "可用" : agent.reason}）`, agent.id); option.disabled = !agent.available; return option; });
       bots = state.bots || [];
       botTable.replaceChildren();
       for (const bot of [...bots].sort((a, b) => Number(Boolean(b.pluginId)) - Number(Boolean(a.pluginId)) || Number(b.status === "ready") - Number(a.status === "ready") || (Date.parse(b.binding_time) || 0) - (Date.parse(a.binding_time) || 0))) {
@@ -39,18 +39,20 @@
         for (const text of [bot.app_id, bot.status === "ready" ? "已连接" : bot.message || "未连接", bot.pluginId || "未关联", bot.binding_time ? new Date(bot.binding_time).toLocaleString() : "—"]) { const cell = document.createElement("td"); cell.textContent = text; row.append(cell); }
         const controls = document.createElement("td");
         const select = document.createElement("select"); select.setAttribute("aria-label", `${bot.app_id} 关联 Agent`);
-        select.append(new Option("选择 Agent", ""), ...agents.map((agent) => new Option(agent.displayName || agent.id, agent.id))); select.value = bot.pluginId || "";
+        select.append(new Option("选择 Agent", ""), ...agentOptions()); select.value = bot.pluginId || "";
         function button(text, action) { const button = document.createElement("button"); button.type = "button"; button.textContent = text; button.onclick = async () => { button.disabled = true; try { await action(); } catch (error) { show(String(error), true); } finally { button.disabled = false; } }; return button; }
-        async function bind(pluginId) { await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
-        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
+        async function bind(pluginId) { if (pluginId && !agents.find((agent) => agent.id === pluginId)?.available) throw new Error("目标办公 Agent 不可用"); await request("/api/plugins/feishu/bind", "POST", { app_id: bot.app_id, pluginId }); await load(false); show(`${bot.app_id} ${pluginId ? "已关联 " + pluginId : "已解除关联"}`); }
+        controls.append(select, button("关联", () => bind(select.value)), button("解除", () => bind("")), button("编辑凭据", async () => { credentials.elements.app_id.value = bot.app_id; credentials.elements.agent_plugin.value = bot.pluginId || ""; savedAppId = bot.app_id; secretMasked = true; credentials.elements.app_secret.value = "********"; credentials.elements.app_secret.required = false;  }));
         row.append(controls); botTable.append(row);
       }
       if (refreshForm) {
-      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...options);
+      credentials.elements.agent_plugin.replaceChildren(new Option("保留原有关联", ""), ...agentOptions());
+      settings.elements.agent_plugin.replaceChildren(new Option("默认 Agent", ""), ...agentOptions());
       settings.elements.agent_plugin.value = state.agent_plugin || "";
       settings.elements.allow_from.value = state.allow_from || "";
       settings.elements.allow_chats.value = state.allow_chats || "";
       credentials.elements.app_id.value = state.app_id || "";
+      credentials.elements.agent_plugin.value = state.bindings?.[credentials.elements.app_id.value] || "";
       savedAppId = state.configured ? state.app_id : "";
       secretMasked = state.configured;
       credentials.elements.app_secret.value = secretMasked ? "********" : "";
@@ -120,14 +122,24 @@
   credentials.elements.app_id.oninput = () => {
 
     const changed = credentials.elements.app_id.value.trim() !== savedAppId;
+    if (changed) credentials.elements.agent_plugin.value = "";
     if (changed && secretMasked) { credentials.elements.app_secret.value = ""; secretMasked = false; }
     credentials.elements.app_secret.required = changed;
   };
   credentials.elements.app_secret.oninput = () => { secretMasked = false;  };
   credentials.elements.app_secret.addEventListener("invalid", () => show("首次配置或更换机器人时，App ID 和 App Secret 都需要填写", true));
+  function selectedAgentUnavailable() { return credentials.elements.agent_plugin.selectedOptions?.[0]?.disabled || false; }
   credentials.onsubmit = async (event) => {
     event.preventDefault(); const button = credentials.querySelector("button"); button.disabled = true; show("正在保存凭据并连接飞书");
-    try { await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value }); savedAppId = credentials.elements.app_id.value.trim(); secretMasked = true; credentials.elements.app_secret.value = "********"; await reconnect(); show("凭据已保存，机器人已连接"); }
+    try {
+      const agentPlugin = credentials.elements.agent_plugin.value;
+      if (agentPlugin && selectedAgentUnavailable()) throw new Error("目标办公 Agent 不可用");
+      await request("/api/plugins/feishu/bot", "POST", { app_id: credentials.elements.app_id.value.trim(), app_secret: secretMasked ? "" : credentials.elements.app_secret.value });
+      savedAppId = credentials.elements.app_id.value.trim();
+      secretMasked = true; credentials.elements.app_secret.value = "********";
+      if (agentPlugin) await request("/api/plugins/feishu/bind", "POST", { app_id: savedAppId, pluginId: agentPlugin });
+      await reconnect(); show("凭据已保存，机器人已连接");
+    }
     catch (error) { show(String(error), true); }
     finally { button.disabled = false; }
   };

package/plugins/feishu/dist/src-ts/plugins/feishu/public/index.html

@@ -8,7 +8,7 @@
     <dl><div><dt>连接状态</dt><dd id="connection">未配置</dd></div><div><dt>App ID</dt><dd id="app-id">未配置</dd></div><div><dt>关联 Agent</dt><dd id="bound-agent">未关联</dd></div></dl>
     <section><h2>机器人关联</h2><div class="table-wrap"><table><thead><tr><th>App ID</th><th>连接状态</th><th>关联 Agent</th><th>最近关联时间</th><th>操作</th></tr></thead><tbody id="bots"></tbody></table></div></section>
     <section><h2>创建设备授权</h2><div class="actions"><button id="begin" type="button">创建飞书机器人</button><a id="authorization-link" target="_blank" rel="noopener noreferrer" hidden>打开飞书创建链接</a></div><div id="authorization-details" hidden><img id="authorization-qr" width="256" height="256" alt="飞书机器人创建授权二维码"><p id="authorization-url"></p></div><p id="authorization-state" role="status"></p></section>
-    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label></div><button type="submit">保存并连接</button></form>
+    <form id="credentials"><h2>手动配置凭据</h2><div class="fields"><label>App ID<input name="app_id" required autocomplete="off"></label><label>App Secret<input name="app_secret" type="password" required autocomplete="new-password"></label><label>关联办公 Agent<select name="agent_plugin"></select></label></div><button type="submit">保存并连接</button></form>
 
     <form id="settings"><h2>通道配置</h2><div class="fields"><label>默认 Agent<select name="agent_plugin"></select></label><label>允许的 open_id<input name="allow_from"></label><label>允许的 chat_id<input name="allow_chats"></label></div><button type="submit">保存配置</button></form>
   </main>