xuym-codex-collab 0.4.0 → 0.4.2

package/apps/onboarding/web/app.js

@@ -1,7 +1,11 @@
 const $ = (id) => document.getElementById(id);
-let currentId, pending, discovery, timer, busy = false, reviewVersion = null, ownAdminId;
+let currentId, pending, discovery, timer, busy = false, reviewVersion = null, reviewId, ownAdminId, resetPlan, resetDiscovery;
+let viewEpoch = 0, currentView = 'home', completing = false;
+const storageKey = 'codex-collab-onboarding';
+function remember(value) { try { if (value) sessionStorage.setItem(storageKey, JSON.stringify(value)); else sessionStorage.removeItem(storageKey); } catch {} }
+function remembered() { try { return JSON.parse(sessionStorage.getItem(storageKey) || 'null'); } catch { return null; } }
 function notice(text) { $('notice').textContent = text; $('notice').hidden = !text; }
-function show(view) { for (const section of document.querySelectorAll('main>section')) section.hidden = section.id !== view; }
+function show(view) { if (view !== 'profile' || currentView === 'profile') { $('delivery-panel').hidden = true; $('delivery-password').value = ''; $('delivery-instructions').textContent = ''; } clearInterval(timer); clearTimeout(timer); viewEpoch++; currentView = view; for (const section of document.querySelectorAll('main>section')) section.hidden = section.id !== view; }
 async function api(path, body) {
   const response = await fetch(`/api/${path}`, body ? { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(body) } : {});
   const value = await response.json(); if (!response.ok) throw new Error(value.error); return value;
@@ -14,33 +18,116 @@ const values = (form) => Object.fromEntries(new FormData(form));
 function text(tag, value) { const node = document.createElement(tag); node.textContent = value; return node; }
 function button(label, fn) { const node = text('button', label); node.onclick = () => action(fn); return node; }
 async function overview() {
-  const value = await api('overview'); $('profiles').replaceChildren();
-  if (!value.profiles.length) $('profiles').append(text('p', '还没有接入项目。管理员选择“初始化团队”，成员选择“加入团队”。'));
+  const value = await api('overview'); $('profiles').replaceChildren(); $('removed-profiles').replaceChildren();
+  $('removed-projects').hidden = !(value.removed_profiles || []).length;
+  for (const profile of value.removed_profiles || []) {
+    const card = document.createElement('div'); card.className = 'card'; const info = document.createElement('div');
+    info.append(text('strong', profile.agent_id), text('p', profile.repo));
+    card.append(info, button('恢复接入', () => openReset(profile.id, 'restore'))); $('removed-profiles').append(card);
+  }
+  for (const draft of value.drafts || []) {
+    const card = document.createElement('div'); card.className = 'card';
+    card.append(text('span', `${draft.display_name || draft.agent_id} · 待完成群验证`), button('继续创建团队', () => openDraft(draft.id))); $('profiles').append(card);
+  }
+  if (!value.profiles.length && !(value.drafts || []).length) $('profiles').append(text('p', '还没有接入项目。管理员选择“初始化团队”，成员选择“加入团队”。'));
   for (const profile of value.profiles) {
     const card = document.createElement('div'); card.className = 'card'; const info = document.createElement('div');
-    info.append(text('strong', `${profile.agent_id} · ${profile.role === 'admin' ? '管理员' : '成员'}`), text('p', profile.repo));
+    info.append(text('strong', `${profile.display_name || profile.agent_id} · ${profile.role === 'admin' ? '管理员' : '成员'}`), text('p', profile.repo));
     card.append(info, button('打开项目', () => loadProfile(profile.id))); $('profiles').append(card);
   }
 }
+async function openDraft(id) {
+  const value = await api(`admin-draft?id=${id}`);
+  if (value.profile) { pending = null; await loadProfile(value.profile.id); return; }
+  pending = { type: 'admin', draft_id: id }; remember({ draft_id: id }); await verifyView(value);
+}
 async function verifyView(session) {
   discovery = session; show('verification'); $('code').textContent = session.message; updateConnection(session);
-  clearInterval(timer); timer = setInterval(async () => { if (busy) return; try { const value = await api(`discovery?id=${session.id}`); updateConnection(value); if (['verified', 'failed', 'expired', 'disconnected'].includes(value.status)) clearInterval(timer); } catch (error) { clearInterval(timer); notice(error.message); } }, 2000);
+  const epoch = viewEpoch;
+  const tick = async () => {
+    if (epoch !== viewEpoch) return;
+    if (busy) { timer = setTimeout(tick, 2000); return; }
+    try {
+      const value = await api(`discovery?id=${session.id}`); if (epoch !== viewEpoch) return; updateConnection(value);
+      if (value.status === 'verified') { await action(completeVerification); return; }
+      if (['failed', 'expired', 'disconnected'].includes(value.status)) return;
+      timer = setTimeout(tick, 2000);
+    } catch (error) { if (epoch === viewEpoch) { notice(error.message); $('retry-code').hidden = false; } }
+  };
+  timer = setTimeout(tick, session.status === 'verified' ? 0 : 2000);
+}
+function updateConnection(value) {
+  discovery = value; $('retry-code').hidden = !['failed', 'expired', 'disconnected'].includes(value.status);
+  const labels = { connecting: '正在连接企业微信…', authenticated: '机器人已连接，请发送下面的验证码。', verified: '群验证成功，正在继续配置…', failed: '连接失败，请检查凭据。', expired: '验证码已过期，请重新连接。', disconnected: '连接已断开，请重新连接。' };
+  $('connection').textContent = value.error || labels[value.status] || value.status;
+}
+async function completeVerification() {
+  if (completing || !pending) return;
+  completing = true; clearTimeout(timer);
+  const setup = pending; const epoch = viewEpoch; let profile;
+  try {
+    const session = await api(`discovery?id=${discovery.id}`);
+    if (epoch !== viewEpoch) return;
+    updateConnection(session); if (session.status !== 'verified') throw new Error('请先完成群验证码验证。');
+    try {
+      profile = setup.type === 'admin' ? await api('admin-complete', { draft_id: setup.draft_id, discovery_id: session.id }) : await api('verify', { id: setup.id, discovery_id: session.id });
+    } catch (error) {
+      if (epoch !== viewEpoch) return;
+      if (setup.type === 'admin') profile = (await api(`admin-draft?id=${setup.draft_id}`)).profile;
+      else profile = (await api('overview')).profiles.find((value) => value.id === setup.id);
+      if (!profile) { $('retry-code').hidden = false; throw error; }
+      pending = null; await loadProfile(profile.id); notice(`${error.message} 可在此继续接入。`); return;
+    }
+    if (epoch !== viewEpoch) return;
+    pending = null; await loadProfile(profile.id);
+  } finally { completing = false; }
+}
+function renderSteps(value) {
+  const verified = value.phase !== 'imported', approved = ['configuring', 'ready'].includes(value.phase);
+  const steps = [['项目与机器人资料', true], ['企业微信群身份验证', verified], ['管理员确认入队', value.role === 'admin' ? verified : approved], ['本机 MCP 与 Skill', value.phase === 'ready' && value.project_setup?.mcp_configured && value.project_setup?.skill_installed], ['绑定 Codex 对话', !!value.desktop?.binding], ['观察到对话轮询', !!value.poll_recent]];
+  $('setup-steps').replaceChildren(); let active = false;
+  for (const [label, done] of steps) { const row = text('li', `${done ? '✓ ' : ''}${label}`); row.className = done ? 'done' : !active ? 'active' : ''; if (!done) active = true; $('setup-steps').append(row); }
+  const stopped = value.phase === 'ready' && !value.runner?.online;
+  $('next-step').textContent = value.error ? '接入暂时停在这里。处理下方问题后点击“继续接入”。' : value.can_receive_tasks ? '已观察到实际轮询，可以在协作群 @ 机器人发送任务。请保持当前对话的协作自动化启用。' : value.phase === 'waiting' ? '申请已提交，正在自动等待管理员确认。管理员工作台会自动显示申请。' : value.phase !== 'ready' ? '按当前提示继续，完成后向导会自动进入下一步。' : stopped ? '机器人连接已停止。需要接任务时点击“启动机器人连接”。' : !value.desktop?.binding ? '在 Codex 打开下方项目，加载项目 MCP 和 Skill，再把启用指令发到要绑定的对话。' : '对话已绑定，正在等待实际轮询记录。';
+}
+function watchProfile(id, epoch) {
+  let failures = 0;
+  const tick = async () => {
+    if (epoch !== viewEpoch || currentId !== id) return;
+    if (busy) { timer = setTimeout(tick, 2000); return; }
+    try {
+      const value = await api('progress', { id, sync: true });
+      if (epoch !== viewEpoch || currentId !== id) return;
+      failures = 0; renderProfile(value, true);
+    } catch (error) {
+      if (epoch !== viewEpoch) return; failures++;
+      notice(`自动检查暂未成功，将重试。${error.message}`);
+    }
+    if (epoch === viewEpoch) timer = setTimeout(tick, Math.min(30000, 5000 * 2 ** failures));
+  };
+  timer = setTimeout(tick, 5000);
 }
-function updateConnection(value) { discovery = value; $('retry-code').hidden = !['failed', 'expired', 'disconnected'].includes(value.status); const labels = { connecting: '正在连接企业微信…', authenticated: '机器人已连接，请发送下面的验证码。', verified: '群验证成功，点击继续完成配置。', failed: '连接失败，请检查凭据。', expired: '验证码已过期，请重新连接。', disconnected: '连接已断开，请重新连接。' }; $('connection').textContent = value.error || labels[value.status] || value.status; }
 async function loadProfile(id) {
-  currentId = id; show('profile'); let value;
+  currentId = id; remember({ profile_id: id }); show('profile'); const epoch = viewEpoch; let value;
   try { value = await api(`profile?id=${id}`); } catch (error) { value = await api(`profile?id=${id}&local=1`); notice(`团队同步暂未成功，本机状态仍可查看。${error.message}`); }
-  $('profile-title').textContent = `${value.agent_id} · ${value.role === 'admin' ? '管理员' : '成员'}`; $('profile-repo').textContent = value.repo;
+  if (epoch !== viewEpoch) return;
+  if (value.phase === 'removed') { show('home'); await overview(); return; }
+  renderProfile(value); watchProfile(id, epoch); return value;
+}
+function renderProfile(value, automatic = false) {
+  const id = value.id; renderSteps(value);
+  $('reset-conversation').hidden = value.phase !== 'ready'; $('reset-robot').hidden = value.phase !== 'ready';
+  $('profile-title').textContent = `${value.display_name && value.display_name !== value.agent_id ? `${value.display_name}（${value.agent_id}）` : value.agent_id} · ${value.role === 'admin' ? '管理员' : '成员'}`; $('profile-repo').textContent = value.repo;
   $('profile-diagnostics').hidden = !value.config_path; $('config-path').textContent = value.config_path || '';
   $('checks').replaceChildren(); $('progress').replaceChildren(); $('binding').hidden = value.phase !== 'ready'; $('runner-actions').hidden = value.phase !== 'ready'; $('admin-tools').hidden = value.role !== 'admin' || value.phase !== 'ready';
   if (value.phase === 'ready') {
-    $('binding-text').textContent = value.binding_prompt;
+    $('binding-text').textContent = value.binding_prompt; $('binding-details').textContent = value.detailed_binding_prompt || value.binding_prompt;
     for (const [label, ok, wait] of [['项目 MCP', value.project_setup?.mcp_configured, '待配置'], ['项目 Skill', value.project_setup?.skill_installed, '待配置'], ['企业微信机器人', value.runner?.wecom === 'authenticated', value.runner?.online ? '连接中' : '已停止'], ['目标 Codex 对话', !!value.desktop?.binding, '待绑定'], ['对话实际轮询', value.poll_recent, value.poll_observed ? '最近未观察到轮询' : '待观察'], ['可接收任务', value.can_receive_tasks, '尚未满足条件']]) {
       const row = document.createElement('div'); row.className = 'check'; const badge = text('span', ok ? '已就绪' : wait); badge.className = `badge${ok ? '' : ' pending'}`; row.append(text('span', label), badge); $('checks').append(row);
     }
     $('checks').append(text('p', '轮询状态来自实际调用记录。自动化是否启用，请在绑定对话的 Codex 自动化中确认。'));
   } else {
-    const phases = { imported: '机器人配置已保存，等待群身份验证。', initializing: '团队初始化尚未完成。', configuring: '正在配置本机项目。', verified: '正在提交入队申请。', waiting: value.own_agent ? '申请已提交，点击继续完成本人机器人入队。' : '申请已提交，请管理员刷新工作台并确认，然后点击继续。' };
+    const phases = { imported: '机器人配置已保存，等待群身份验证。', initializing: '团队初始化尚未完成。', configuring: '正在配置本机项目。', verified: '正在提交入队申请。', waiting: value.own_agent ? '本人机器人申请已提交，正在自动完成入队。' : '申请已提交，正在自动等待管理员确认。' };
     $('progress').append(text('p', phases[value.phase] || value.phase), button(value.phase === 'imported' ? '连接分配的机器人' : '继续接入', async () => {
       if (value.phase === 'imported') { pending = { type: 'member', id }; await verifyView(await api('discovery', { profile_id: id })); }
       else { try { await api('resume', { id }); } finally { await loadProfile(id); } }
@@ -51,14 +138,15 @@ async function loadProfile(id) {
   for (const member of value.members || []) $('members').append(text('p', `${member.id} · ${member.role === 'admin' ? '管理员' : '成员'} · ${member.capabilities.join(', ')}`));
   for (const [capability, candidates] of Object.entries(value.routes || {})) $('routes').append(text('p', `${capability}：${candidates.join(' → ')}（首选 → 候补）`));
   for (const owner of value.owners || []) $('owners').append(text('p', `${owner.is_you ? '你的机器人' : '同一位同事的机器人'}：${owner.agent_ids.join('、')}`));
-  renderReviewRules(value);
+  if (!automatic || reviewId !== id || reviewVersion === null) renderReviewRules(value);
+  else if (value.version !== reviewVersion) $('review-policy-note').textContent = '团队规则已更新。当前未保存的编辑已保留；保存前请刷新并重新确认规则。';
   $('exports').replaceChildren(); $('requests').replaceChildren();
   for (const invitation of value.exports || []) {
-    const row = document.createElement('div'); row.className = 'card'; row.append(text('span', `${invitation.agent_id} · 有效至 ${new Date(invitation.expires_at).toLocaleDateString()}`));
+    const row = document.createElement('div'); row.className = 'card'; row.append(text('span', `${invitation.display_name && invitation.display_name !== invitation.agent_id ? `${invitation.display_name}（${invitation.agent_id}）` : invitation.agent_id} · 有效至 ${new Date(invitation.expires_at).toLocaleDateString()}`));
     if (invitation.own_agent) row.append(button('继续接入我的机器人', async () => {
       const profile = await api('own-agent-resume', { id, invite_id: invitation.invite_id }); await connectMember(profile);
     }));
-    else { const link = text('a', '下载加密接入包'); link.href = `/api/export?id=${id}&invite=${invitation.invite_id}`; link.download = invitation.filename; row.append(link); }
+    else { row.append(button('查看接入说明与密码', () => showDelivery(id, invitation.invite_id))); const link = text('a', '下载加密接入包'); link.href = `/api/export?id=${id}&invite=${invitation.invite_id}`; link.download = invitation.filename; row.append(link); }
     $('exports').append(row);
   }
   for (const request of value.requests || []) {
@@ -67,7 +155,7 @@ async function loadProfile(id) {
   if (!(value.requests || []).length) $('requests').append(text('p', '暂无待确认申请。'));
 }
 function renderReviewRules(profile) {
-  $('review-rules').replaceChildren(); reviewVersion = null;
+  $('review-rules').replaceChildren(); reviewVersion = null; reviewId = profile.id;
   const ready = profile.role === 'admin' && profile.phase === 'ready' && profile.routes && Number.isSafeInteger(profile.version);
   $('review-form').hidden = !ready;
   if (!ready) { $('review-policy-note').textContent = '团队同步成功后可设置审核规则。'; return; }
@@ -103,14 +191,34 @@ $('review-form').onsubmit = (event) => { event.preventDefault(); action(async ()
   await api('review-rules', { id: currentId, expected_version: reviewVersion, review_rules });
   await loadProfile(currentId); notice('审核规则已保存，新任务将使用此规则。');
 }); };
-for (const button of document.querySelectorAll('[data-view]')) button.onclick = () => action(async () => { clearInterval(timer); show(button.dataset.view); if (button.dataset.view === 'home') await overview(); });
-$('admin-form').onsubmit = (event) => { event.preventDefault(); action(async () => { const input = values(event.target); try { input.test_argv = JSON.parse(input.test_argv); } catch { throw new Error('验证命令必须是 JSON 字符串数组，例如 [\"npm\",\"test\"]。'); } if (!Array.isArray(input.test_argv) || !input.test_argv.length || input.test_argv.length > 32 || input.test_argv.some((part) => typeof part !== 'string' || !part || part.length > 2000)) throw new Error('验证命令必须是 JSON 字符串数组，例如 ["npm","test"]。'); pending = { type: 'admin', input, existing_ids: (await api('overview')).profiles.map((profile) => profile.id) }; const session = await api('discovery', { bot_id: input.bot_id, secret: input.secret, repo: input.repo }); pending.credentials = { bot_id: input.bot_id, secret: input.secret, repo: input.repo }; delete pending.input.secret; event.target.elements.secret.value = ''; await verifyView(session); }); };
+for (const button of document.querySelectorAll('[data-view]')) button.onclick = () => action(async () => { clearInterval(timer); if (resetPlan) { await api('reset-cancel', { id: resetPlan.id, preview_token: resetPlan.preview_token }); resetPlan = null; resetDiscovery = null; $('reset-secret').value = ''; } remember(null); show(button.dataset.view); if (button.dataset.view === 'home') await overview(); });
+function repoMode(prefix) {
+  const clone = $(`${prefix}-repo-mode`).value === 'clone'; $(`${prefix}-existing-repo`).hidden = clone; $(`${prefix}-clone-repo`).hidden = !clone;
+}
+for (const prefix of ['admin', 'join']) $(`${prefix}-repo-mode`).onchange = () => repoMode(prefix);
+$('check-project').onclick = () => action(async () => {
+  const selected = await api('project-check', values($('admin-form')));
+  const form = $('admin-form'); form.elements.repo.value = selected.repo; $('admin-repo-mode').value = 'existing'; repoMode('admin');
+  $('project-recommendation').textContent = `项目已检查：${selected.repo}。${selected.tests.length ? '推荐：' + selected.tests.map((test) => test.command).join(' / ') + '，请确认或修改。' : '未找到常见测试入口，请填写适合项目的验证命令。'}`;
+  if (!$('test-command').value && selected.tests.length) $('test-command').value = selected.tests[0].command;
+});
+$('admin-form').onsubmit = (event) => { event.preventDefault(); action(async () => {
+  const input = values(event.target);
+  const session = await api('admin-prepare', input); event.target.elements.secret.value = '';
+  pending = { type: 'admin', draft_id: session.draft_id }; remember({ draft_id: session.draft_id }); await verifyView(session);
+}); };
+async function invitationInput(form) { const input = values(form); input.content = await input.file.text(); delete input.file; return input; }
+$('inspect-invite').onclick = () => action(async () => {
+  const value = await api('inspect-invite', await invitationInput($('join-form')));
+  $('invite-info').hidden = false; $('invite-summary').textContent = `${value.display_name || value.agent_id}（${value.agent_id}）· 职责：${value.capabilities.join('、')}${value.team_name ? ' · ' + value.team_name : ''}`;
+  $('invite-remote').textContent = value.remote;
+  if (!$('join-form').elements.destination.value) $('join-form').elements.destination.value = value.suggested_repo;
+});
 $('join-form').onsubmit = (event) => { event.preventDefault(); action(async () => {
-  const input = values(event.target); input.content = await input.file.text(); delete input.file;
-  const profile = await api('import', input); event.target.elements.password.value = ''; await connectMember(profile);
+  const profile = await api('import', await invitationInput(event.target)); event.target.elements.password.value = ''; await connectMember(profile);
 }); };
 async function connectMember(profile) {
-  currentId = profile.id;
+  currentId = profile.id; remember({ profile_id: profile.id });
   if (profile.phase !== 'imported') { pending = null; await loadProfile(profile.id); return; }
   pending = { type: 'member', id: profile.id };
   try { await verifyView(await api('discovery', { profile_id: profile.id })); }
@@ -126,29 +234,99 @@ $('own-form').onsubmit = (event) => { event.preventDefault(); action(async () =>
   finally { event.target.elements.secret.value = ''; }
   await connectMember(profile);
 }); };
-$('retry-code').onclick = () => action(async () => { await verifyView(await api('discovery', pending.type === 'member' ? { profile_id: pending.id } : pending.credentials)); });
-$('confirm-code').onclick = () => action(async () => {
-  const session = await api(`discovery?id=${discovery.id}`);
-  if (session.status !== 'verified') { updateConnection(session); throw new Error('请先完成群验证码验证。'); }
-  clearInterval(timer);
-  const setup = pending; let profile;
-  try {
-    profile = setup.type === 'admin' ? await api('admin', { ...setup.input, discovery_id: discovery.id }) : await api('verify', { id: setup.id, discovery_id: discovery.id });
-  } catch (error) {
-    // Setup may be persisted before Git/MCP work fails; recover the same profile.
-    const profiles = (await api('overview')).profiles;
-    profile = profiles.find((value) => setup.type === 'member' ? value.id === setup.id : value.agent_id === setup.input.agent_id.trim() && value.role === 'admin' && !setup.existing_ids.includes(value.id));
-    if (!profile) throw error;
-    pending = null; await loadProfile(profile.id); notice(`${error.message} 可在此继续接入。`); return;
-  }
-  pending = null; await loadProfile(profile.id);
+$('retry-code').onclick = () => action(async () => {
+  if (pending.type === 'admin') { const session = await api('admin-retry', { id: pending.draft_id }); if (session.profile) await loadProfile(session.profile.id); else await verifyView(session); }
+  else await verifyView(await api('discovery', { profile_id: pending.id, reconnect: true }));
 });
+$('confirm-code').onclick = () => action(completeVerification);
 $('existing-form').onsubmit = (event) => { event.preventDefault(); action(async () => { const profile = await api('existing', values(event.target)); await loadProfile(profile.id); }); };
-$('issue-form').onsubmit = (event) => { event.preventDefault(); action(async () => { const input = values(event.target); input.id = currentId; input.prefer = event.target.elements.prefer.checked; input.commands_enabled = event.target.elements.commands_enabled.checked; await api('issue', input); event.target.reset(); await loadProfile(currentId); notice('接入包已生成。下载文件交给指定成员，密码请单独发送。'); }); };
+$('issue-form').onsubmit = (event) => { event.preventDefault(); action(async () => { const input = values(event.target); input.id = currentId; input.prefer = event.target.elements.prefer.checked; input.commands_enabled = event.target.elements.commands_enabled.checked; const result = await api('issue', input); event.target.reset(); await loadProfile(currentId); await showDelivery(currentId, result.invite_id); notice('接入包已生成。下载文件交给指定成员，密码请单独发送。'); }); };
 $('refresh').onclick = () => action(() => loadProfile(currentId));
 $('start').onclick = () => action(async () => { await api('runner', { id: currentId, command: 'start' }); await loadProfile(currentId); });
 $('stop').onclick = () => action(async () => { await api('runner', { id: currentId, command: 'stop' }); await loadProfile(currentId); });
 $('copy-config-path').onclick = () => action(() => navigator.clipboard.writeText($('config-path').textContent));
 $('copy-code').onclick = () => action(() => navigator.clipboard.writeText($('code').textContent));
+$('copy-binding-details').onclick = () => action(() => navigator.clipboard.writeText($('binding-details').textContent));
 $('copy-binding').onclick = () => action(() => navigator.clipboard.writeText($('binding-text').textContent));
-action(async () => { const token = location.hash.slice(1); if (token) { await api('session', { token }); history.replaceState(null, '', '/'); } await overview(); });
+async function openReset(id, kind) {
+  clearInterval(timer); clearTimeout(timer); viewEpoch++; resetPlan = null; resetDiscovery = null;
+  const plan = await api('reset-preview', { id, kind }); resetPlan = plan; currentId = id;
+  $('reset-title').textContent = plan.title; $('reset-target').textContent = `${plan.agent_id} · ${plan.repo}`;
+  $('reset-effects').replaceChildren(); for (const effect of plan.effects) $('reset-effects').append(text('li', effect));
+  $('reset-thread').textContent = plan.thread_id ? `当前对话 ID：${plan.thread_id}` : '当前没有绑定的 Codex 对话。';
+  $('reset-pause-label').hidden = !plan.requires_pause; $('reset-paused').checked = false;
+  $('reset-confirmation').value = ''; $('reset-confirmation').placeholder = plan.agent_id;
+  $('reset-secret-fields').hidden = kind !== 'robot'; $('reset-secret').value = ''; $('reset-verification').hidden = true;
+  $('reset-submit').textContent = kind === 'restore' ? '确认恢复' : '确认操作'; show('reset-view');
+}
+$('reset-conversation').onclick = () => action(() => openReset(currentId, 'conversation'));
+$('reset-robot').onclick = () => action(() => openReset(currentId, 'robot'));
+$('reset-project').onclick = () => action(() => openReset(currentId, 'project'));
+$('reset-cancel').onclick = () => action(async () => { const plan = resetPlan; clearInterval(timer); await api('reset-cancel', { id: plan.id, preview_token: plan.preview_token }); resetPlan = null; resetDiscovery = null; $('reset-secret').value = ''; if (plan.kind === 'restore') { show('home'); await overview(); } else { await loadProfile(plan.id); notice('已取消操作。如已验证新凭据，机器人连接仍停止，可在项目页面重新启动。'); } });
+$('reset-copy-code').onclick = () => action(() => navigator.clipboard.writeText($('reset-code').textContent));
+function resetConnection(value) {
+  const labels = { connecting: '正在验证新凭据…', authenticated: '连接成功，请发送群验证码。', verified: '群身份已验证，可以确认保存。', failed: '连接失败，请检查新 Secret 后重试。', expired: '验证码已过期，请重新验证。', disconnected: '连接已断开，请重新验证。' };
+  $('reset-connection').textContent = value.error || labels[value.status] || value.status;
+}
+$('reset-connect').onclick = () => action(async () => {
+  const secret = $('reset-secret').value; if (!secret.trim()) throw new Error('请填写新的机器人 Secret。');
+  const session = await api('reset-discovery', { id: resetPlan.id, kind: resetPlan.kind, preview_token: resetPlan.preview_token, secret });
+  $('reset-secret').value = ''; resetDiscovery = session; $('reset-verification').hidden = false; $('reset-code').textContent = session.message; resetConnection(session);
+  clearInterval(timer); timer = setInterval(async () => { if (busy || !resetPlan || !resetDiscovery) return; try {
+    const value = await api(`discovery?id=${resetDiscovery.id}`); resetDiscovery = value; resetConnection(value);
+    if (['verified', 'failed', 'expired', 'disconnected'].includes(value.status)) clearInterval(timer);
+  } catch (error) { clearInterval(timer); notice(error.message); } }, 2000);
+});
+$('reset-form').onsubmit = (event) => { event.preventDefault(); action(async () => {
+  if ($('reset-confirmation').value !== resetPlan.agent_id) throw new Error('请填写当前 Agent 名称确认操作。');
+  if (resetPlan.requires_pause && !$('reset-paused').checked) throw new Error('请先在原 Codex 对话暂停协作轮询，再勾选确认。');
+  const input = { id: resetPlan.id, kind: resetPlan.kind, preview_token: resetPlan.preview_token, confirmation: $('reset-confirmation').value, heartbeat_paused: $('reset-paused').checked };
+  if (resetPlan.kind === 'robot') {
+    if (!resetDiscovery) throw new Error('请先验证新凭据。');
+    const session = await api(`discovery?id=${resetDiscovery.id}`); resetConnection(session);
+    if (session.status !== 'verified') throw new Error('请先在原协作群完成验证码验证。');
+    input.discovery_id = resetDiscovery.id;
+  }
+  const result = await api('reset', input); clearInterval(timer); resetPlan = null; resetDiscovery = null;
+  if (result.kind === 'project') { show('home'); await overview(); } else await loadProfile(result.id);
+  notice(`${result.message} 本机恢复记录：${result.backup_path}`);
+}); };
+
+function assignmentRow() {
+  const card = document.createElement('fieldset'); card.className = 'assignment'; card.append(text('legend', '成员／机器人'));
+  const field = (label, name, { type = 'text', placeholder = '', required = false } = {}) => {
+    const wrapper = text('label', label), input = document.createElement('input'); input.name = name; input.dataset.field = name; input.type = type; input.placeholder = placeholder; input.required = required; input.autocomplete = 'off'; wrapper.append(input); return wrapper;
+  };
+  const row = document.createElement('div'); row.className = 'row';
+  const roleLabel = text('label', '职责'), role = document.createElement('select'); role.dataset.field = 'responsibility';
+  for (const [value, label] of [['frontend', '前端开发'], ['backend', '后端开发'], ['fullstack', '全栈开发'], ['testing', '测试'], ['docs', '文档'], ['general', '通用开发']]) { const option = text('option', label); option.value = value; role.append(option); }
+  role.value = 'backend'; roleLabel.append(role); row.append(field('显示名称', 'display_name', { required: true, placeholder: '例如 Bob 或李四' }), roleLabel); card.append(row);
+  const bots = document.createElement('div'); bots.className = 'row'; bots.append(field('Bot ID', 'bot_id', { required: true }), field('Secret', 'secret', { type: 'password', required: true })); card.append(bots);
+  const advanced = document.createElement('details'); advanced.append(text('summary', '自定义身份与分工'), field('内部 Agent ID（可选）', 'agent_id'), field('自定义职责（可选）', 'capabilities'));
+  for (const [name, label] of [['prefer', '作为这些职责的首选'], ['commands_enabled', '允许所有者通过此机器人发送群命令']]) { const wrapper = text('label', label), input = document.createElement('input'); input.type = 'checkbox'; input.dataset.field = name; input.checked = true; wrapper.className = 'checkbox'; wrapper.prepend(input); advanced.append(wrapper); }
+  card.append(advanced, button('移除此行', async () => { card.remove(); })); $('assignment-rows').append(card);
+}
+$('add-assignment').onclick = () => action(async () => { if ($('assignment-rows').children.length >= 25) throw new Error('每次最多分配 25 个机器人。'); assignmentRow(); });
+$('batch-form').onsubmit = (event) => { event.preventDefault(); action(async () => {
+  const members = [...$('assignment-rows').children].map((row) => Object.fromEntries([...row.querySelectorAll('[data-field]')].map((field) => [field.dataset.field, field.type === 'checkbox' ? field.checked : field.value])));
+  const id = currentId; const result = await api('issue-batch', { id, members });
+  $('assignment-rows').replaceChildren(); assignmentRow(); await loadProfile(id);
+  if (result.assignments.length === 1) await showDelivery(id, result.assignments[0].invite_id);
+  notice(`已分配 ${result.assignments.length} 个机器人。在“已分配的机器人”中逐个下载接入包、复制接入说明和密码。`);
+}); };
+async function showDelivery(id, inviteId) {
+  const epoch = viewEpoch, value = await api('delivery', { id, invite_id: inviteId }); if (epoch !== viewEpoch) return;
+  $('delivery-title').textContent = `${value.display_name}（${value.agent_id}）的接入说明`;
+  $('delivery-instructions').textContent = value.instructions; $('delivery-password').value = value.password || '';
+  $('copy-password').hidden = !value.password; $('delivery-panel').hidden = false;
+}
+$('copy-delivery').onclick = () => action(() => navigator.clipboard.writeText($('delivery-instructions').textContent));
+$('copy-password').onclick = () => action(() => navigator.clipboard.writeText($('delivery-password').value));
+$('hide-delivery').onclick = () => action(async () => { $('delivery-panel').hidden = true; $('delivery-password').value = ''; });
+assignmentRow();
+action(async () => {
+  const token = location.hash.slice(1); if (token) { await api('session', { token }); history.replaceState(null, '', '/'); }
+  const saved = remembered(); await overview();
+  try { if (saved?.draft_id) await openDraft(saved.draft_id); else if (saved?.profile_id) { const value = await loadProfile(saved.profile_id); if (value?.phase === 'imported') await connectMember(value); } }
+  catch (error) { remember(null); show('home'); notice(`上次接入暂时无法恢复，可以从项目列表继续。${error.message}`); }
+});

package/apps/onboarding/web/index.html

@@ -2,14 +2,37 @@
 <header><span class="brand">Codex Collab</span><span>本机团队工作台</span></header>
 <main><h1>把群里的任务，交给你的 Codex 对话</h1><p class="intro">管理员分配机器人，成员导入接入包。项目配置与连接检查集中在这里。</p><div id="notice" role="status" hidden></div>
 <nav><button data-view="home">我的项目</button><button data-view="admin">初始化团队</button><button data-view="join">加入团队</button><button data-view="existing">导入已有配置</button></nav>
-<section id="home"><h2>我的项目</h2><div id="profiles"></div></section>
+<section id="home"><h2>我的项目</h2><div id="profiles"></div><details id="removed-projects" hidden><summary>已移除的接入</summary><p class="muted">本机身份与恢复记录保留。恢复前请确保原 clone 未绑定其他身份。</p><div id="removed-profiles"></div></details></section>
 <section id="admin" hidden><h2>管理员初始化</h2><p>先在企业微信创建智能机器人并加入协作群。这里会通过群验证码自动获取群和你的 userid。</p>
-<form id="admin-form"><label>业务仓库的本机目录<input name="repo" required placeholder="业务仓库根目录的完整路径"></label><div class="row"><label>你的 Agent 名称<input name="agent_id" required placeholder="alice" pattern="[a-zA-Z0-9_-]{1,64}"></label><label>职责标签<input name="capabilities" required placeholder="frontend,backend"></label></div><label>验证命令（JSON 数组）<input name="test_argv" value='["sh","test.sh"]' required></label><div class="row"><label>你的机器人 Bot ID<input name="bot_id" required autocomplete="off"></label><label>机器人 Secret<input name="secret" type="password" required autocomplete="off"></label></div><button type="submit">连接机器人并验证群</button></form></section>
+<form id="admin-form">
+<label>团队名称<input name="team_name" placeholder="例如：产品研发团队" maxlength="80"></label>
+<fieldset><legend>选择业务项目</legend><label>项目来源<select id="admin-repo-mode" name="repo_mode"><option value="existing">使用本机已有项目</option><option value="clone">从 Git 地址拉取新项目</option></select></label>
+<label id="admin-existing-repo">项目目录<input name="repo" placeholder="Git 仓库根目录的完整路径"></label>
+<div id="admin-clone-repo" hidden><label>Git 仓库地址<input name="remote" placeholder="HTTPS 或 SSH 地址，不含 Token"></label><label>保存到新目录<input name="destination" placeholder="新目录的完整路径"></label></div>
+<button id="check-project" type="button" class="secondary">检查项目并推荐验证命令</button><p id="project-recommendation" class="muted">自动拉取使用你本机已有的 Git 登录。仓库需要已有 main 分支。</p>
+<label>验证命令<input id="test-command" name="test_command" required placeholder="例如 npm test、go test ./...、sh test.sh"></label><p class="muted">请确认这个命令适合项目。工具使用固定程序和参数执行，不运行管道或拼接命令。</p></fieldset>
+<div class="row"><label>你的显示名称<input name="display_name" required placeholder="例如 Alice 或张三" maxlength="80"></label><label>主要职责<select name="responsibility"><option value="fullstack">全栈开发</option><option value="frontend">前端开发</option><option value="backend">后端开发</option><option value="testing">测试</option><option value="docs">文档</option><option value="general">通用开发</option></select></label></div>
+<details><summary>自定义内部身份与职责</summary><label>内部 Agent ID（可选）<input name="agent_id" pattern="[a-zA-Z0-9_-]{1,64}" placeholder="留空自动生成"></label><label>自定义职责标签（可选）<input name="capabilities" placeholder="英文标签，以逗号分隔"></label></details>
+<div class="row"><label>你的机器人 Bot ID<input name="bot_id" required autocomplete="off"></label><label>机器人 Secret<input name="secret" type="password" required autocomplete="off"></label></div>
+<button type="submit">创建团队并连接机器人</button></form></section>
 <section id="own" hidden><h2>给自己增加机器人</h2><p>同一个企业微信账号可以拥有多个 Agent。每个 Agent 使用独立机器人、独立 clone 和独立 Codex 对话。验证后自动完成本机接入，无需下载接入包。</p>
 <form id="own-form"><label>另一个 clone 的本机目录<input name="repo" required placeholder="同一业务仓库的另一个独立 clone"></label><div class="row"><label>新的 Agent 名称<input name="agent_id" required pattern="[a-zA-Z0-9_-]{1,64}" placeholder="bob"></label><label>职责标签<input name="capabilities" required placeholder="backend"></label></div><div class="row"><label>新机器人 Bot ID<input name="bot_id" required autocomplete="off"></label><label>新机器人 Secret<input name="secret" type="password" required autocomplete="off"></label></div><label class="checkbox"><input name="prefer" type="checkbox" checked>该 Agent 为这些职责的首选执行者</label><button type="submit">连接我的新机器人</button><button id="own-cancel" type="button" class="secondary">返回原项目</button></form></section>
-<section id="join" hidden><h2>加入团队</h2><p>管理员会交给你一个接入包和单独的密码。选择已克隆的业务仓库；签名身份会在本机自动生成。</p><form id="join-form"><label>接入包文件<input name="file" type="file" accept=".json" required></label><label>接入包密码<input name="password" type="password" required autocomplete="off"></label><label>业务仓库的本机目录<input name="repo" required placeholder="业务仓库根目录的完整路径"></label><button type="submit">导入并连接机器人</button></form></section>
+<section id="join" hidden><h2>加入团队</h2><p>导入管理员提供的加密接入包。机器人、职责和仓库信息会自动带入，密码请向管理员单独获取。</p>
+<form id="join-form"><label>接入包文件<input name="file" type="file" accept=".json" required></label><label>接入包密码<input name="password" type="password" required autocomplete="off"></label>
+<button id="inspect-invite" type="button" class="secondary">读取接入信息</button><div id="invite-info" hidden><p id="invite-summary"></p><p id="invite-remote" class="muted"></p></div>
+<label>准备项目<select id="join-repo-mode" name="repo_mode"><option value="clone">帮我拉取到新目录</option><option value="existing">使用本机已有项目</option></select></label>
+<label id="join-clone-repo">新项目目录<input name="destination" placeholder="读取接入包后自动建议，亦可填写完整路径"></label>
+<label id="join-existing-repo" hidden>已有项目目录<input name="repo" placeholder="Git 仓库根目录的完整路径"></label>
+<button type="submit">接入我的机器人</button><p class="muted">工具使用本机 Git 登录拉取代码，不会改写已有目录。导入后请按提示在群里确认一次身份，审批和配置会自动继续。</p></form></section>
 <section id="existing" hidden><h2>导入已有协作项目</h2><p>先停止原 Runner。导入会保留原成员身份、任务和对话绑定，并重新启动机器人。旧团队由管理员先导入。</p><form id="existing-form"><label>已有私有 peer.json 路径<input name="config_path" required placeholder="完整路径"></label><button type="submit">导入已有项目</button></form></section>
-<section id="verification" hidden><h2>在群里确认身份</h2><p id="connection"></p><p>请用自己的企业微信账号，<strong>@ 刚刚分配的机器人</strong>，发送下面这条消息：</p><pre id="code"></pre><button id="copy-code">复制消息</button><button id="confirm-code">已发送，继续检查</button><button id="retry-code" class="secondary" hidden>重新连接</button></section>
-<section id="profile" hidden><div class="row"><h2 id="profile-title"></h2><button id="refresh">刷新项目状态</button></div><p id="profile-repo"></p><details id="profile-diagnostics" hidden><summary>查看本机配置路径</summary><pre id="config-path"></pre><button id="copy-config-path">复制配置路径</button></details><div id="checks"></div><div id="progress"></div><div id="binding" hidden><h3>最后一步：在你选定的 Codex 对话启用</h3><p>在 Codex 打开上面的项目，信任项目并加载 MCP，将下面的指令发到要绑定的对话。对话需要创建轮询自动化；本页会显示实际观察到的 MCP、Skill、机器人、对话绑定、轮询状态，以及是否已满足接收任务条件。</p><pre id="binding-text"></pre><button id="copy-binding">复制启用指令</button></div><div id="runner-actions" hidden><button id="start">启动机器人连接</button><button id="stop" class="secondary">停止机器人连接</button><p class="muted">停止连接仅断开群机器人。对话中的轮询自动化需要在 Codex 中单独暂停。</p></div>
-<div id="admin-tools" hidden><h3>团队 Agent 与分工</h3><div id="members"></div><div id="owners"></div><button id="add-own-agent" class="secondary">给自己增加机器人</button><div id="routes"></div><h3>真人审核与通知</h3><p>按职责设置：阶段结果提交后由谁审核、通知谁。关闭中间审核可直接接力；最终提交仍需真人审核，并由管理员完成任务。关闭审核的职责作为最后阶段时由管理员审核。</p><p id="review-policy-note" class="muted"></p><form id="review-form" hidden><div id="review-rules"></div><button type="submit">保存审核规则</button></form><p class="muted">规则保存后用于新任务。现有任务继续使用创建时的规则。审核通知附带分支、提交、测试和可复制的群命令；企业微信原生 @ 的显示效果需要在实际群中确认。</p><h3>分配机器人给同事</h3><p>为每个 Agent 创建独立机器人。同一位同事可以领取多份接入包，用同一个企业微信账号验证，分别选择独立 clone 并绑定不同对话。</p><form id="issue-form"><div class="row"><label>Agent 名称<input name="agent_id" required pattern="[a-zA-Z0-9_-]{1,64}" placeholder="bob"></label><label>职责标签<input name="capabilities" required placeholder="backend"></label></div><div class="row"><label>成员机器人 Bot ID<input name="bot_id" required autocomplete="off"></label><label>成员机器人 Secret<input name="secret" type="password" required autocomplete="off"></label></div><label>接入包密码（至少 12 个字符）<input name="password" type="password" minlength="12" required autocomplete="off"></label><label class="checkbox"><input name="prefer" type="checkbox" checked>该成员为这些职责的首选执行者</label><label class="checkbox"><input name="commands_enabled" type="checkbox" checked>允许所有者通过此机器人发送群命令</label><button type="submit">生成接入包</button></form><h3>已分配的机器人</h3><div id="exports"></div><h3>待确认的成员</h3><div id="requests"></div></div>
-</section></main><footer>配置仅保存在本机。任务与签名协议记录在业务仓库的 agent-collab 分支。</footer><script src="/app.js" defer></script></body></html>
+<section id="verification" hidden><h2>在群里确认身份</h2><p id="connection" role="status"></p><p class="muted">发送消息后页面会自动继续，无需回来确认。刷新页面可恢复当前接入进度。</p><p>请用自己的企业微信账号，<strong>@ 刚刚分配的机器人</strong>，发送下面这条消息：</p><pre id="code"></pre><button id="copy-code">复制消息</button><button id="confirm-code">立即检查</button><button id="retry-code" class="secondary" hidden>重新连接</button></section>
+<section id="profile" hidden><div class="row"><h2 id="profile-title"></h2><button id="refresh">刷新项目状态</button></div><p id="profile-repo"></p><details id="profile-diagnostics" hidden><summary>查看本机配置路径</summary><pre id="config-path"></pre><button id="copy-config-path">复制配置路径</button></details><p id="next-step" class="next-step" role="status"></p><ol id="setup-steps" class="setup-steps"></ol><details><summary>连接检查详情</summary><div id="checks"></div></details><div id="progress"></div><div id="binding" hidden><h3>最后一步：在你选定的 Codex 对话启用</h3><p>在 Codex 打开上面的项目，信任项目并加载 MCP，将下面的指令发到要绑定的对话。Skill 会完成身份检查、对话绑定和轮询启用。完成后本页自动更新实际连接状态。</p><pre id="binding-text"></pre><button id="copy-binding">复制启用指令</button><details><summary>无法识别 Skill 时使用详细指令</summary><pre id="binding-details"></pre><button id="copy-binding-details">复制详细指令</button></details></div><div id="runner-actions" hidden><button id="start">启动机器人连接</button><button id="stop" class="secondary">停止机器人连接</button><p class="muted">停止连接仅断开群机器人。对话中的轮询自动化需要在 Codex 中单独暂停。</p></div>
+<details id="manage-project"><summary>管理与重置</summary><p>选择要调整的配置，先查看影响，再确认。每次只操作当前 Agent 和 clone。</p><div class="manage-actions"><button id="reset-conversation" class="secondary">重新绑定对话</button><button id="reset-robot" class="secondary">更新机器人凭据</button><button id="reset-project" class="danger">移除本机接入</button></div></details>
+<div id="admin-tools" hidden><details><summary>团队分工、审核与通知设置</summary><h3>团队 Agent 与分工</h3><div id="members"></div><div id="owners"></div><button id="add-own-agent" class="secondary">给自己增加机器人</button><div id="routes"></div><h3>真人审核与通知</h3><p>按职责设置：阶段结果提交后由谁审核、通知谁。关闭中间审核可直接接力；最终提交仍需真人审核，并由管理员完成任务。关闭审核的职责作为最后阶段时由管理员审核。</p><p id="review-policy-note" class="muted"></p><form id="review-form" hidden><div id="review-rules"></div><button type="submit">保存审核规则</button></form><p class="muted">规则保存后用于新任务。现有任务继续使用创建时的规则。审核通知附带分支、提交、测试和可复制的群命令；企业微信原生 @ 的显示效果需要在实际群中确认。</p></details><h3>批量分配机器人给同事</h3><p>每行分配一个独立机器人。同一个同事可以领取多行，分别绑定独立项目和对话。接入包密码自动生成。</p>
+<form id="batch-form"><div id="assignment-rows"></div><div class="row"><button id="add-assignment" type="button" class="secondary">增加一位成员／机器人</button><button type="submit">生成全部接入包</button></div></form>
+<div id="delivery-panel" hidden><h3 id="delivery-title"></h3><p>接入包与密码请分开传递。下面的接入说明不包含密码或 Secret。</p><pre id="delivery-instructions"></pre><button id="copy-delivery">复制接入说明</button><label>接入包密码<input id="delivery-password" type="password" readonly></label><button id="copy-password" type="button" class="secondary">复制密码</button><button id="hide-delivery" type="button" class="secondary">收起</button></div>
+<details><summary>单独分配（兼容入口）</summary><form id="issue-form"><div class="row"><label>Agent ID<input name="agent_id" required pattern="[a-zA-Z0-9_-]{1,64}" placeholder="bob"></label><label>职责标签<input name="capabilities" required placeholder="backend"></label></div><div class="row"><label>机器人 Bot ID<input name="bot_id" required autocomplete="off"></label><label>机器人 Secret<input name="secret" type="password" required autocomplete="off"></label></div><label>自定义密码（可选，留空自动生成）<input name="password" type="password" minlength="12" autocomplete="off"></label><label class="checkbox"><input name="prefer" type="checkbox" checked>设为这些职责的首选执行者</label><label class="checkbox"><input name="commands_enabled" type="checkbox" checked>允许所有者通过此机器人发送群命令</label><button type="submit">生成接入包</button></form></details>
+<h3>已分配的机器人</h3><div id="exports"></div><h3>待确认的成员</h3><div id="requests"></div></div>
+</section>
+<section id="reset-view" hidden><h2 id="reset-title"></h2><p id="reset-target"></p><ul id="reset-effects"></ul><p id="reset-thread" class="muted"></p><form id="reset-form"><label id="reset-pause-label" class="checkbox"><input id="reset-paused" name="heartbeat_paused" type="checkbox">我已在原 Codex 对话暂停协作轮询</label><div id="reset-secret-fields" hidden><label>新的机器人 Secret<input id="reset-secret" name="secret" type="password" autocomplete="off"></label><p class="muted">保持原 Bot ID、群和本人身份。更换机器人或成员请移除本机接入后，由管理员提供新的接入包。</p><button id="reset-connect" type="button" class="secondary">验证新凭据</button><div id="reset-verification" hidden><p id="reset-connection"></p><p>用原绑定的企业微信本人账号，在原协作群 @ 当前机器人，发送：</p><pre id="reset-code"></pre><button id="reset-copy-code" type="button" class="secondary">复制验证码</button></div></div><label>输入 Agent 名称确认<input id="reset-confirmation" name="confirmation" required autocomplete="off"></label><div class="row"><button id="reset-submit" type="submit">确认操作</button><button id="reset-cancel" type="button" class="secondary">取消并返回</button></div></form><p class="muted">操作前自动保存本机恢复记录。向导不会删除 Codex 聊天，也无法替你暂停聊天中的自动化。移除接入保留私有身份与历史凭据；需要彻底删除时可按完成页显示的备份路径手动处理。</p></section>
+</main><footer>配置仅保存在本机。任务与签名协议记录在业务仓库的 agent-collab 分支。</footer><script src="/app.js" defer></script></body></html>

package/apps/onboarding/web/style.css

@@ -1,3 +1,7 @@
 :root{color-scheme:light;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC",sans-serif;color:#18312b;background:#f4f7f5}*{box-sizing:border-box}body{margin:0}header{background:#fff;border-bottom:1px solid #dbe6df;display:flex;gap:22px;padding:22px max(24px,calc((100vw - 980px)/2));font-size:14px;color:#677d72}.brand{font-weight:750;color:#126744;white-space:nowrap}main{max-width:980px;margin:40px auto;padding:0 24px}h1{font-size:30px;line-height:1.35;letter-spacing:-.5px}h2{font-size:22px;margin-top:0}h3{margin-top:30px;font-size:17px}p{line-height:1.8}.intro,.muted{color:#657970}.muted{font-size:13px}nav{display:flex;gap:10px;margin:25px 0;flex-wrap:wrap}nav button,.secondary{background:#fff;color:#285442;border:1px solid #c9dacf}button{font:inherit;background:#176b4a;color:#fff;border:1px solid transparent;border-radius:8px;padding:10px 16px;cursor:pointer;line-height:1.4}button:hover{filter:brightness(.95)}button:disabled{opacity:.55;cursor:wait}section{background:#fff;border:1px solid #dbe6df;border-radius:14px;padding:28px;box-shadow:0 8px 28px #18312b06}section[hidden],div[hidden]{display:none}form{display:grid;gap:17px;margin:24px 0}label{display:grid;gap:8px;font-size:14px}input{font:inherit;padding:12px;border:1px solid #c9dacf;border-radius:7px;width:100%;color:#18312b;background:#fff}input:focus{outline:2px solid #a4d0bb;outline-offset:1px}.row{display:flex;gap:20px;align-items:center}.row>*{flex:1;min-width:0}.row>button{flex:initial}.checkbox{display:flex;align-items:center}.checkbox input{width:auto}pre{background:#f0f5f2;border:1px solid #dce8df;padding:16px;border-radius:8px;white-space:pre-wrap;overflow-wrap:anywhere;font:13px/1.65 ui-monospace,SFMono-Regular,monospace}.card,.check{padding:15px 0;border-bottom:1px solid #e5ece7;display:flex;gap:12px;justify-content:space-between;align-items:center}.card p{margin:4px 0;font-size:13px;overflow-wrap:anywhere}.badge{font-size:13px;color:#176b4a;background:#e3f2e8;padding:5px 9px;border-radius:6px;white-space:nowrap}.pending{color:#896229;background:#fff3db}#notice{padding:14px 18px;border:1px solid #ebc8aa;background:#fff3e9;border-radius:8px;margin:20px 0;line-height:1.6}footer{text-align:center;font-size:12px;color:#6a7e72;padding:30px}#profile-repo{overflow-wrap:anywhere;font-size:14px;color:#657970}@media(max-width:640px){main{margin:25px auto;padding:0 16px}h1{font-size:24px}section{padding:20px}.row{flex-direction:column;align-items:stretch;gap:17px}.card{align-items:flex-start;flex-wrap:wrap}nav button{font-size:13px;padding:8px 10px}}
 
 form[hidden]{display:none}fieldset{border:1px solid #dbe6df;border-radius:9px;padding:16px;margin:0 0 16px;display:grid;gap:16px}legend{font-weight:600;padding:0 6px}select{font:inherit;padding:12px;border:1px solid #c9dacf;border-radius:7px;width:100%;color:#18312b;background:#fff}select:focus{outline:2px solid #a4d0bb;outline-offset:1px}
+
+button[hidden],details[hidden],label[hidden]{display:none}details{margin:24px 0}summary{cursor:pointer;font-weight:600;line-height:1.7}.manage-actions{display:flex;gap:12px;flex-wrap:wrap}.danger{background:#fff;border:1px solid #d9aca4;color:#943c30}#reset-effects{line-height:1.9;padding-left:24px}#reset-target{overflow-wrap:anywhere}#reset-verification{padding:16px;background:#f0f5f2;border-radius:8px}
+
+#setup-steps{display:flex;flex-wrap:wrap;gap:10px;list-style:none;padding:0;margin:22px 0}#setup-steps li{font-size:13px;border:1px solid #e0e7e2;border-radius:7px;padding:9px 12px;color:#738379}#setup-steps .done{color:#176b4a;background:#eaf5ed;border-color:#cbe4d3}#setup-steps .active{color:#845d26;background:#fff5e2;border-color:#ebd29f}#next-step{padding:14px 16px;background:#edf6f0;border-radius:8px}#delivery-panel{padding:18px;background:#f6f9f7;border:1px solid #dbe6df;border-radius:9px;margin-top:20px}#delivery-panel h3{margin-top:0}#delivery-panel button{margin:6px 6px 6px 0}.assignment details{margin:0}.assignment>button{justify-self:start;background:#fff;color:#657970;border-color:#c9dacf}#assignment-rows{display:grid;gap:14px}#assignment-rows fieldset{margin:0}@media(max-width:640px){#setup-steps{gap:7px}#setup-steps li{flex:1 1 42%}.card>a{display:inline-block}.card{gap:14px}}

package/apps/peer/desktop.mjs

@@ -21,12 +21,14 @@ export class DesktopExecutor {
   }
   checkBinding(state, threadId) {
     this.checkMode();
+    if (state.disabled) throw new Denied('local project integration was removed; restore it in the setup wizard');
     if (!threadPattern.test(threadId || '') || state.binding?.thread_id !== threadId || state.binding.agent_id !== this.service.agentId) throw new Denied('this conversation is not the bound desktop thread');
   }
   async bind(threadId) {
     this.checkMode();
     if (!threadPattern.test(threadId || '')) throw new Conflict('provide the actual target conversation ID; do not invent an ID');
     return this.private.locked(async (state) => {
+      if (state.disabled) throw new Denied('local project integration was removed; restore it in the setup wizard');
       if (state.binding && (state.binding.thread_id !== threadId || state.binding.agent_id !== this.service.agentId)) throw new Conflict('identity is already bound; explicitly unbind before choosing another conversation');
       state.binding ||= { agent_id: this.service.agentId, thread_id: threadId, bound_at: new Date().toISOString() };
       await this.private.write(state);

package/apps/peer/runtime.mjs

@@ -3,9 +3,10 @@ import { isAbsolute, resolve } from 'node:path';
 import { makeSigner, readPrivateJson, validateTeam } from '../../packages/peer/config.mjs';
 import { PeerGitStore } from '../../packages/peer/store.mjs';
 import { PeerService } from '../../packages/peer/service.mjs';
-export async function readPeerConfig(path) {
+export async function readPeerConfig(path, { allowDisabled = false } = {}) {
   if (!path) throw new Error('provide --config /absolute/path/to/private-peer.json');
   const config = await readPrivateJson(resolve(path));
+  if (config.local_disabled === true && !allowDisabled) throw new Error('此项目已移除本机接入，请通过向导恢复后重试。');
   if (config.schema_version !== 2 || ![config.repo, config.data_dir, config.team_file].every((p) => typeof p === 'string' && isAbsolute(p)) || typeof config.agent_id !== 'string') throw new Error('peer config needs v2 and absolute repo/data_dir/team_file paths');
   const team = validateTeam(JSON.parse(await readFile(config.team_file, 'utf8')));
   if (config.codex_home !== undefined && (typeof config.codex_home !== 'string' || !isAbsolute(config.codex_home))) throw new Error('codex_home must be an absolute path');

package/apps/peer/wecom.mjs

@@ -37,10 +37,12 @@ export async function dispatchPeerWecom(frame, { service, config, reply }) {
   const sender = body.from?.userid;
   const owner = !!sender && sender === service.team.agents[service.agentId]?.wecom_userid;
   const admin = config.allow_admin_commands === true && !!sender && Object.values(service.team.agents).some((agent) => agent.role === 'admin' && agent.wecom_userid === sender);
+  const member = !!sender && Object.values(service.team.agents).some((agent) => agent.role === 'member' && agent.wecom_userid === sender);
   // Shared owners do not merge agent roles: the receiving bot selects its signer.
-  // Admins may dispatch/query via a member bot. Review mutations must be signed by
-  // the human reviewer's own identity, never by impersonating another member.
-  if (!owner && !(admin && ['create', 'status', 'natural'].includes(command?.action || 'natural'))) return false;
+  // Enrolled team members may submit work to any bot; review/control mutations
+  // still require the bot owner. Admin dispatch retains its explicit config gate.
+  const dispatchOnly = ['create', 'status', 'natural'].includes(command?.action || 'natural');
+  if (!owner && !(dispatchOnly && (member || admin))) return false;
   const key = `wecom:${body.chatid}:${body.msgid}`;
   let text;
   try {
@@ -57,7 +59,7 @@ export async function dispatchPeerWecom(frame, { service, config, reply }) {
       if (config.execution_mode !== 'desktop_poll') {
         await reply(frame, '自然语言任务需要绑定已有 Codex 对话，并启用 desktop_poll 轮询。'); return true;
       }
-      const request = await service.receiveRequest({ chatId: body.chatid, messageId: body.msgid, senderId: sender, content, allowAdmin: config.allow_admin_commands === true });
+      const request = await service.receiveRequest({ chatId: body.chatid, messageId: body.msgid, senderId: sender, content, allowAdmin: admin });
       text = request.state.task_id ? `该消息已创建任务 ${request.state.task_id}，不会重复创建。`
         : request.state.status === 'answered' ? '这条消息已处理。'
         : request.state.status === 'clarification' ? `需求 ${request.spec.id} 等待你补充说明，请查看群里的追问。`

package/docs/desktop-poll.md

@@ -138,7 +138,7 @@ sh test.sh 要通过，完成后在群里发总结。
 已有绑定不需要重新创建身份。先处理正在执行的任务，再对每个 Agent 用其**项目 MCP 实际使用的私有配置路径**操作：
 
 ```sh
-npm install --global xuym-codex-collab@0.4.0
+npm install --global xuym-codex-collab@0.4.2
 codex-collab stop /absolute/private-peer.json
 codex-collab refresh-project /absolute/private-peer.json
 codex-collab start /absolute/private-peer.json