@37chengshan/ompweb 4.0.4 → 4.0.7

package/.next/static/chunks/app/api/skills/install/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/skills/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/skills/search/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/skills/update/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/terminal/input/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/terminal/open/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/terminal/resize/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/terminal/session/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/terminal/stream/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/web-auth/session/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/api/worktrees/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/manifest.webmanifest/route-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/app/{page-e7e7426ef3ec9ec1.js → page-48b96ccb13ebd7bb.js}

@@ -1 +1 @@
-(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[8974],{5214:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorage",{enumerable:!0,get:function(){return r.workAsyncStorageInstance}});let r=n(17828)},17828:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorageInstance",{enumerable:!0,get:function(){return r}});let r=(0,n(64054).createAsyncLocalStorage)()},21957:(e,t,n)=>{"use strict";function r({moduleIds:e}){return null}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"PreloadChunks",{enumerable:!0,get:function(){return r}}),n(95155),n(47650),n(5214),n(2451),n(53887)},37206:(e,t,n)=>{"use strict";n.d(t,{default:()=>u.a});var r=n(75707),u=n.n(r)},41112:(e,t,n)=>{"use strict";function r({reason:e,children:t}){return t}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"BailoutToCSR",{enumerable:!0,get:function(){return r}}),n(1980)},50394:(e,t,n)=>{Promise.resolve().then(n.bind(n,66919))},64054:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n={bindSnapshot:function(){return s},createAsyncLocalStorage:function(){return a},createSnapshot:function(){return i}};for(var r in n)Object.defineProperty(t,r,{enumerable:!0,get:n[r]});let u=Object.defineProperty(Error("Invariant: AsyncLocalStorage accessed in runtime where it is not available"),"__NEXT_ERROR_CODE",{value:"E504",enumerable:!1,configurable:!0});class l{disable(){throw u}getStore(){}run(){throw u}exit(){throw u}enterWith(){throw u}static bind(e){return e}}let o="u">typeof globalThis&&globalThis.AsyncLocalStorage;function a(){return o?new o:new l}function s(e){return o?o.bind(e):l.bind(e)}function i(){return o?o.snapshot():function(e,...t){return e(...t)}}},66919:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>l});var r=n(95155);let u=(0,n(37206).default)(()=>Promise.all([n.e(3596),n.e(2584),n.e(1147)]).then(n.bind(n,91147)).then(e=>e.AppShell),{loadableGenerated:{webpack:()=>[91147]},ssr:!1});function l(){return(0,r.jsx)(u,{})}},68635:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return s}});let r=n(95155),u=n(12115),l=n(41112);function o(e){return{default:e&&"default"in e?e.default:e}}n(21957);let a={loader:()=>Promise.resolve(o(()=>null)),loading:null,ssr:!0},s=function(e){let t={...a,...e},n=(0,u.lazy)(()=>t.loader().then(o)),s=t.loading;function i(e){let o=s?(0,r.jsx)(s,{isLoading:!0,pastDelay:!0,error:null}):null,a=!t.ssr||!!t.loading,i=a?u.Suspense:u.Fragment,c=t.ssr?(0,r.jsxs)(r.Fragment,{children:[null,(0,r.jsx)(n,{...e})]}):(0,r.jsx)(l.BailoutToCSR,{reason:"next/dynamic",children:(0,r.jsx)(n,{...e})});return(0,r.jsx)(i,{...a?{fallback:o}:{},children:c})}return i.displayName="LoadableComponent",i}},75707:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return u}});let r=n(73623)._(n(68635));function u(e,t){let n={};"function"==typeof e&&(n.loader=e);let u={...n,...t};return(0,r.default)({...u,modules:u.loadableGenerated?.modules})}("function"==typeof t.default||"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=50394)),_N_E=e.O()}]);
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[8974],{5214:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorage",{enumerable:!0,get:function(){return r.workAsyncStorageInstance}});let r=n(17828)},17828:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"workAsyncStorageInstance",{enumerable:!0,get:function(){return r}});let r=(0,n(64054).createAsyncLocalStorage)()},21957:(e,t,n)=>{"use strict";function r({moduleIds:e}){return null}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"PreloadChunks",{enumerable:!0,get:function(){return r}}),n(95155),n(47650),n(5214),n(2451),n(53887)},37206:(e,t,n)=>{"use strict";n.d(t,{default:()=>u.a});var r=n(75707),u=n.n(r)},41112:(e,t,n)=>{"use strict";function r({reason:e,children:t}){return t}Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"BailoutToCSR",{enumerable:!0,get:function(){return r}}),n(1980)},50394:(e,t,n)=>{Promise.resolve().then(n.bind(n,66919))},64054:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n={bindSnapshot:function(){return s},createAsyncLocalStorage:function(){return a},createSnapshot:function(){return i}};for(var r in n)Object.defineProperty(t,r,{enumerable:!0,get:n[r]});let u=Object.defineProperty(Error("Invariant: AsyncLocalStorage accessed in runtime where it is not available"),"__NEXT_ERROR_CODE",{value:"E504",enumerable:!1,configurable:!0});class l{disable(){throw u}getStore(){}run(){throw u}exit(){throw u}enterWith(){throw u}static bind(e){return e}}let o="u">typeof globalThis&&globalThis.AsyncLocalStorage;function a(){return o?new o:new l}function s(e){return o?o.bind(e):l.bind(e)}function i(){return o?o.snapshot():function(e,...t){return e(...t)}}},66919:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>l});var r=n(95155);let u=(0,n(37206).default)(()=>Promise.all([n.e(6608),n.e(2584),n.e(7408)]).then(n.bind(n,57408)).then(e=>e.AppShell),{loadableGenerated:{webpack:()=>[57408]},ssr:!1});function l(){return(0,r.jsx)(u,{})}},68635:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return s}});let r=n(95155),u=n(12115),l=n(41112);function o(e){return{default:e&&"default"in e?e.default:e}}n(21957);let a={loader:()=>Promise.resolve(o(()=>null)),loading:null,ssr:!0},s=function(e){let t={...a,...e},n=(0,u.lazy)(()=>t.loader().then(o)),s=t.loading;function i(e){let o=s?(0,r.jsx)(s,{isLoading:!0,pastDelay:!0,error:null}):null,a=!t.ssr||!!t.loading,i=a?u.Suspense:u.Fragment,c=t.ssr?(0,r.jsxs)(r.Fragment,{children:[null,(0,r.jsx)(n,{...e})]}):(0,r.jsx)(l.BailoutToCSR,{reason:"next/dynamic",children:(0,r.jsx)(n,{...e})});return(0,r.jsx)(i,{...a?{fallback:o}:{},children:c})}return i.displayName="LoadableComponent",i}},75707:(e,t,n)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"default",{enumerable:!0,get:function(){return u}});let r=n(73623)._(n(68635));function u(e,t){let n={};"function"==typeof e&&(n.loader=e);let u={...n,...t};return(0,r.default)({...u,modules:u.loadableGenerated?.modules})}("function"==typeof t.default||"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)}},e=>{e.O(0,[8441,3794,7358],()=>e(e.s=50394)),_N_E=e.O()}]);

package/.next/static/chunks/app/remote/page-3f3f16f1d3808f92.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[3633],{5017:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>h});var i=r(95155),s=r(12115),a=r(73321),n=r(95e3),o=r(92571),l=r(64962);let c=(0,r(99537).A)("circle-x",[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m15 9-6 6",key:"1uzhvr"}],["path",{d:"m9 9 6 6",key:"z0biqf"}]]);var d=r(52584);function u(){let e=(0,a.useSearchParams)(),{t}=(0,d.s9)(),[r,u]=(0,s.useState)("pairing"),[h,p]=(0,s.useState)(null),m=(0,s.useRef)(!1);(0,s.useEffect)(()=>{if(m.current)return;m.current=!0;let t=e.get("token"),r=/iPhone|iPad|Android|Mobile/i.test(navigator.userAgent),i={"Content-Type":"application/json"};i["X-Requested-With"]="omp-web-remote",fetch("/api/pair/accept",{method:"POST",headers:i,body:JSON.stringify({token:t,mobile:r})}).then(e=>e.ok?e.json():null).then(e=>{e?(p(e.device.name),u("paired")):u("failed")}).catch(()=>u("failed"))},[e]);let f=window.location.origin;return(0,i.jsxs)("main",{style:{minHeight:"100dvh",display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",gap:16,padding:24,background:"var(--bg)",color:"var(--text)",fontFamily:"var(--font-sans, system-ui, sans-serif)"},children:[(0,i.jsxs)("div",{style:{display:"flex",alignItems:"center",gap:10},children:[(0,i.jsx)(n.A,{size:28,strokeWidth:1.8,style:{color:"var(--accent)"},"aria-hidden":"true"}),(0,i.jsx)("span",{style:{fontSize:18,fontWeight:600},children:t("remote.pairingTitle")})]}),"pairing"===r&&(0,i.jsxs)("div",{style:{display:"flex",alignItems:"center",gap:8,color:"var(--text-muted)",fontSize:14},children:[(0,i.jsx)(o.A,{size:18,className:"spin","aria-hidden":"true"}),t("remote.pairingInProgress")]}),"paired"===r&&(0,i.jsxs)("div",{style:{display:"flex",flexDirection:"column",alignItems:"center",gap:12},children:[(0,i.jsx)(l.A,{size:40,strokeWidth:1.6,style:{color:"var(--status-ok, #2e9e5b)"},"aria-hidden":"true"}),(0,i.jsx)("span",{style:{fontSize:15,fontWeight:500},children:t("remote.pairedSuccess",{device:h??"?"})}),(0,i.jsx)("a",{href:f,style:{padding:"10px 18px",borderRadius:"var(--radius-control)",background:"var(--accent)",color:"var(--bg)",textDecoration:"none",fontSize:14,fontWeight:600},children:t("remote.openApp")})]}),"failed"===r&&(0,i.jsxs)("div",{style:{display:"flex",flexDirection:"column",alignItems:"center",gap:12},children:[(0,i.jsx)(c,{size:40,strokeWidth:1.6,style:{color:"var(--status-error)"},"aria-hidden":"true"}),(0,i.jsx)("span",{style:{fontSize:14,color:"var(--text-muted)",textAlign:"center",lineHeight:1.5},children:t("remote.pairingFailed")})]})]})}function h(){return(0,i.jsx)(s.Suspense,{children:(0,i.jsx)(u,{})})}},64317:(e,t,r)=>{Promise.resolve().then(r.bind(r,5017))},64962:(e,t,r)=>{"use strict";r.d(t,{A:()=>i});let i=(0,r(99537).A)("circle-check",[["circle",{cx:"12",cy:"12",r:"10",key:"1mglay"}],["path",{d:"m9 12 2 2 4-4",key:"dzmm74"}]])},73321:(e,t,r)=>{"use strict";var i=r(74645);r.o(i,"useRouter")&&r.d(t,{useRouter:function(){return i.useRouter}}),r.o(i,"useSearchParams")&&r.d(t,{useSearchParams:function(){return i.useSearchParams}})},92571:(e,t,r)=>{"use strict";r.d(t,{A:()=>i});let i=(0,r(99537).A)("loader-circle",[["path",{d:"M21 12a9 9 0 1 1-6.219-8.56",key:"13zald"}]])},95e3:(e,t,r)=>{"use strict";r.d(t,{A:()=>i});let i=(0,r(99537).A)("smartphone",[["rect",{width:"14",height:"20",x:"5",y:"2",rx:"2",ry:"2",key:"1yt0o3"}],["path",{d:"M12 18h.01",key:"mhygvu"}]])},99537:(e,t,r)=>{"use strict";r.d(t,{A:()=>c});var i=r(12115);let s=(...e)=>e.filter((e,t,r)=>!!e&&""!==e.trim()&&r.indexOf(e)===t).join(" ").trim(),a=e=>{let t=e.replace(/^([A-Z])|[\s-_]+(\w)/g,(e,t,r)=>r?r.toUpperCase():t.toLowerCase());return t.charAt(0).toUpperCase()+t.slice(1)};var n={xmlns:"http://www.w3.org/2000/svg",width:24,height:24,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round"};let o=(0,i.createContext)({}),l=(0,i.forwardRef)(({color:e,size:t,strokeWidth:r,absoluteStrokeWidth:a,className:l="",children:c,iconNode:d,...u},h)=>{let{size:p=24,strokeWidth:m=2,absoluteStrokeWidth:f=!1,color:g="currentColor",className:y=""}=(0,i.useContext)(o)??{},x=a??f?24*Number(r??m)/Number(t??p):r??m;return(0,i.createElement)("svg",{ref:h,...n,width:t??p??n.width,height:t??p??n.height,stroke:e??g,strokeWidth:x,className:s("lucide",y,l),...!c&&!(e=>{for(let t in e)if(t.startsWith("aria-")||"role"===t||"title"===t)return!0;return!1})(u)&&{"aria-hidden":"true"},...u},[...d.map(([e,t])=>(0,i.createElement)(e,t)),...Array.isArray(c)?c:[c]])}),c=(e,t)=>{let r=(0,i.forwardRef)(({className:r,...n},o)=>(0,i.createElement)(l,{ref:o,iconNode:t,className:s(`lucide-${a(e).replace(/([a-z0-9])([A-Z])/g,"$1-$2").toLowerCase()}`,`lucide-${e}`,r),...n}));return r.displayName=a(e),r}}},e=>{e.O(0,[2584,8441,3794,7358],()=>e(e.s=64317)),_N_E=e.O()}]);

package/.next/static/chunks/next/dist/client/components/builtin/app-error-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/next/dist/client/components/builtin/forbidden-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/next/dist/client/components/builtin/not-found-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/next/dist/client/components/builtin/unauthorized-f97ee162e6cb1325.js

@@ -0,0 +1 @@
+(self.webpackChunk_N_E=self.webpackChunk_N_E||[]).push([[64,90,118,191,552,644,976,1004,1005,1097,1236,1337,1541,1907,1952,2053,2086,2138,2202,2246,2504,2795,2835,2837,3004,3425,3432,3507,3522,3805,3851,3943,3955,4016,4037,4288,4314,4721,4863,4896,5012,5221,5423,5517,5673,5715,5907,6072,6450,6671,6709,6819,6849,6919,6988,7067,7074,7453,7483,7513,7769,7812,7833,7851,8167,8429,8589,8658,8743,8933,9043,9156,9174,9183,9223,9477,9742,9747,9928,9968],{84441:()=>{}},_=>{_.O(0,[8441,3794,7358],()=>_(_.s=84441)),_N_E=_.O()}]);

package/.next/static/chunks/webpack-18d04f872fe12139.js

@@ -0,0 +1 @@
+(()=>{"use strict";var e,t,a,c,r,d,f,b,o,n={},i={};function l(e){var t=i[e];if(void 0!==t)return t.exports;var a=i[e]={exports:{}},c=!0;try{n[e].call(a.exports,a,a.exports,l),c=!1}finally{c&&delete i[e]}return a.exports}l.m=n,e=[],l.O=(t,a,c,r)=>{if(a){r=r||0;for(var d=e.length;d>0&&e[d-1][2]>r;d--)e[d]=e[d-1];e[d]=[a,c,r];return}for(var f=1/0,d=0;d<e.length;d++){for(var[a,c,r]=e[d],b=!0,o=0;o<a.length;o++)(!1&r||f>=r)&&Object.keys(l.O).every(e=>l.O[e](a[o]))?a.splice(o--,1):(b=!1,r<f&&(f=r));if(b){e.splice(d--,1);var n=c();void 0!==n&&(t=n)}}return t},l.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return l.d(t,{a:t}),t},a=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,l.t=function(e,c){if(1&c&&(e=this(e)),8&c||"object"==typeof e&&e&&(4&c&&e.__esModule||16&c&&"function"==typeof e.then))return e;var r=Object.create(null);l.r(r);var d={};t=t||[null,a({}),a([]),a(a)];for(var f=2&c&&e;"object"==typeof f&&!~t.indexOf(f);f=a(f))Object.getOwnPropertyNames(f).forEach(t=>d[t]=()=>e[t]);return d.default=()=>e,l.d(r,d),r},l.d=(e,t)=>{for(var a in t)l.o(t,a)&&!l.o(e,a)&&Object.defineProperty(e,a,{enumerable:!0,get:t[a]})},l.f={},l.e=e=>Promise.all(Object.keys(l.f).reduce((t,a)=>(l.f[a](e,t),t),[])),l.u=e=>2584===e?"static/chunks/2584-77204310e58868e3.js":"static/chunks/"+(({988:"993e5495",1048:"db9d41be",3888:"e868780c",7330:"d3ac728e",8133:"1ba63609",8747:"90542734",8924:"da12927c",9425:"bf2ff291"})[e]||e)+"."+({103:"23142a67b02246a8",268:"ec500965c1761e26",370:"8e8f3cf8eb0e29dd",394:"475e54c848486e3a",398:"ffa02af9062a3950",484:"c74eeb0fca9a9ddf",852:"e2bbfb3632f6b0fe",869:"7152372b662e31af",918:"6a9bbe564e4a2d0f",934:"9006461bd0548660",973:"9efc01efd9d768a5",988:"598a97aa1337298f",1032:"d9a9179233599785",1048:"27ee8fcc7bf00d70",1063:"775c442bdbeef08b",1133:"0f37525b2b215f36",1327:"09252bb80616cc3a",1708:"c3a1896e4cc9f8d9",1781:"9072b4c9586df549",2081:"47b6e9391094055f",2181:"ba21239d3ac39f81",2201:"d0a54d53ec6d60af",2258:"4defa30121ef44a5",2325:"23caf22075e51aa5",2356:"523277bb8c6bf72a",2414:"8b3662a85cd1b14e",2418:"b5d9e177e10a686e",2480:"cf27ca02e5b19761",2539:"c5a4f2fd8e421c70",2619:"9431a3f48da8eef4",2695:"b732ef1965253b3f",2703:"495a65ed14b2f094",2821:"934bcf60fbdc28c6",3251:"408c817adb161919",3308:"8e27b5c43a478f0d",3336:"a76f9485fe7cb762",3606:"ddd8065b4a3108bd",3651:"f68fccde22153b7d",3716:"72bf4c9d7325debd",3888:"0440c4cbaec74878",3995:"eca0f5bef1fc3ae5",4004:"74b9bcf5478b1663",4202:"8440832386f023c7",4238:"6f102dcbcf2ae339",4405:"7a19458960a1058e",4424:"fd0c93a807a333e1",4559:"2e7ed39ea2757280",4854:"b64a1daa15899219",4866:"d1060b4faf2ae1e2",4970:"8a63b4953b0e4946",5020:"9ac8d0dc8390bb6e",5137:"f163e94c74a94d01",5165:"2681017cd0bd291f",5242:"7b643c6b3394cac1",5361:"afc00ab2626bacbf",5521:"cfdf2cfc6db31407",5526:"ff46471041fdcb79",5658:"aab0a7c617597ba5",5681:"dd0e66b0de16e54b",6121:"eb9023b1cbc78ee2",6161:"4836cd7d031026bf",6195:"8710aa41b2319dff",6202:"f4317cf0a48876f9",6294:"24f510c0c3e3714c",6608:"d79f10dc7b2f3e7d",6654:"41440ef667144967",6794:"57bf1aff78682f3a",7256:"e07cf52d87d40252",7268:"2f59c671f26160f3",7330:"7964f816a1ca64e5",7331:"2add3c4e125a2dba",7408:"8fb61f7f23253d4d",7543:"89f7b805ed0f2901",8114:"8a8fdee4c3b7fd4b",8133:"b2ae90f43319a29e",8200:"a36b9f8c983c6b9e",8422:"475d97d0a80e2827",8747:"ae439f2382f58c51",8863:"fa0320ea586efb3b",8885:"d9308c756376780b",8901:"e117d206a917bda0",8924:"476aa688a637649c",9365:"a3e0e5ac101ccd02",9425:"244c8a7c1c14966a",9522:"c7c6e9c330f9ba6b",9614:"3221013d7f0af27f",9698:"4d09a99b9d99f3e5",9705:"40a82b97f214e28b",9754:"d67dec946fc871d4",9764:"2669775c6e107a01",9793:"4567af813117ad25",9974:"9a0f79beca65e8c4",9981:"678c7bcc42f24571"})[e]+".js",l.miniCssF=e=>"static/css/2f46e0db0d4a3aed.css",l.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),l.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),c={},l.l=(e,t,a,r)=>{if(c[e])return void c[e].push(t);if(void 0!==a)for(var d,f,b=document.getElementsByTagName("script"),o=0;o<b.length;o++){var n=b[o];if(n.getAttribute("src")==e||n.getAttribute("data-webpack")=="_N_E:"+a){d=n;break}}d||(f=!0,(d=document.createElement("script")).charset="utf-8",d.timeout=120,l.nc&&d.setAttribute("nonce",l.nc),d.setAttribute("data-webpack","_N_E:"+a),d.src=l.tu(e)),c[e]=[t];var i=(t,a)=>{d.onerror=d.onload=null,clearTimeout(s);var r=c[e];if(delete c[e],d.parentNode&&d.parentNode.removeChild(d),r&&r.forEach(e=>e(a)),t)return t(a)},s=setTimeout(i.bind(null,void 0,{type:"timeout",target:d}),12e4);d.onerror=i.bind(null,d.onerror),d.onload=i.bind(null,d.onload),f&&document.head.appendChild(d)},l.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.tt=()=>(void 0===r&&(r={createScriptURL:e=>e},"u">typeof trustedTypes&&trustedTypes.createPolicy&&(r=trustedTypes.createPolicy("nextjs#bundler",r))),r),l.tu=e=>l.tt().createScriptURL(e),l.p="/_next/",d={8068:0},l.f.miniCss=(e,t)=>{if(d[e])t.push(d[e]);else 0!==d[e]&&({5846:1})[e]&&t.push(d[e]=new Promise((t,a)=>{var c=l.miniCssF(e),r=l.p+c;if(((e,t)=>{for(var a=document.getElementsByTagName("link"),c=0;c<a.length;c++){var r=a[c],d=r.getAttribute("data-href")||r.getAttribute("href");if("stylesheet"===r.rel&&(d===e||d===t))return r}for(var f=document.getElementsByTagName("style"),c=0;c<f.length;c++){var r=f[c],d=r.getAttribute("data-href");if(d===e||d===t)return r}})(c,r))return t();((e,t,a,c)=>{var r=document.createElement("link");r.rel="stylesheet",r.type="text/css",r.onerror=r.onload=d=>{if(r.onerror=r.onload=null,"load"===d.type)a();else{var f=d&&("load"===d.type?"missing":d.type),b=d&&d.target&&d.target.href||t,o=Error("Loading CSS chunk "+e+" failed.\n("+b+")");o.code="CSS_CHUNK_LOAD_FAILED",o.type=f,o.request=b,r.parentNode.removeChild(r),c(o)}},r.href=t;if("function"==typeof _N_E_STYLE_LOAD){var d=r.href,f=r.onload,b=r.onerror;_N_E_STYLE_LOAD(0===d.indexOf(window.location.origin)?new URL(d).pathname:d).then(function(){f&&f.call(r,{type:"load"})},function(){b&&b.call(r,{})})}else document.head.appendChild(r)})(e,r,t,a)}).then(()=>{d[e]=0},t=>{throw delete d[e],t}))},f={8068:0,2859:0,2160:0,9894:0},l.f.j=(e,t)=>{var a=l.o(f,e)?f[e]:void 0;if(0!==a)if(a)t.push(a[2]);else if(/^(2160|2859|5846|8068|9894)$/.test(e))f[e]=0;else{var c=new Promise((t,c)=>a=f[e]=[t,c]);t.push(a[2]=c);var r=l.p+l.u(e),d=Error();l.l(r,t=>{if(l.o(f,e)&&(0!==(a=f[e])&&(f[e]=void 0),a)){var c=t&&("load"===t.type?"missing":t.type),r=t&&t.target&&t.target.src;d.message="Loading chunk "+e+" failed.\n("+c+": "+r+")",d.name="ChunkLoadError",d.type=c,d.request=r,a[1](d)}},"chunk-"+e,e)}},l.O.j=e=>0===f[e],b=(e,t)=>{var a,c,[r,d,b]=t,o=0;if(r.some(e=>0!==f[e])){for(a in d)l.o(d,a)&&(l.m[a]=d[a]);if(b)var n=b(l)}for(e&&e(t);o<r.length;o++)c=r[o],l.o(f,c)&&f[c]&&f[c][0](),f[c]=0;return l.O(n)},(o=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(b.bind(null,0)),o.push=b.bind(null,o.push.bind(o)),l.nc=void 0})();

package/desktop/main.js

@@ -17,13 +17,41 @@ const fs = require("fs");
 
 // Internal port for the hosted server (dev 30178 / cli 30177 stay free).
 const APP_PORT = Number(process.env.OMP_WEB_APP_PORT || 30179);
-const HOST = "127.0.0.1";
-const APP_URL = `http://${HOST}:${APP_PORT}`;
+// Listening on 0.0.0.0 is what makes phone/PC pairing work over the LAN;
+// the pairing gate (proxy.ts) denies every remote /api request without a
+// paired-device cookie, and token issuance is loopback-only, so exposing
+// the port is safe.
+const HOST = "0.0.0.0";
+const APP_URL = `http://127.0.0.1:${APP_PORT}`;
 
 const pkgDir = path.join(__dirname, "..");
 
 const APP_LOG_MAX_BYTES = 256 * 1024;
 
+// Lightweight startup page shown while the standalone server cold-starts
+// (no splash animation runs). Inline data URL: zero files, zero network.
+const STARTUP_PAGE = `data:text/html;charset=utf-8,${encodeURIComponent(`<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8">
+<style>
+  html, body { margin: 0; padding: 0; width: 100%; height: 100%; }
+  body { background: #faf9f6; color: #2b2b2b; display: flex; flex-direction: column; align-items: center; justify-content: center; gap: 18px; font-family: -apple-system, "Segoe UI", system-ui, sans-serif; }
+  .logo { font-size: 26px; font-weight: 700; letter-spacing: 0.5px; }
+  .logo span { color: #c98a1b; }
+  .bar { width: 180px; height: 3px; border-radius: 2px; background: #e8e4dc; overflow: hidden; }
+  .bar i { display: block; height: 100%; width: 40%; background: #c98a1b; border-radius: 2px; animation: slide 1.1s ease-in-out infinite; }
+  @keyframes slide { 0% { transform: translateX(-100%); } 100% { transform: translateX(450%); } }
+  .hint { font-size: 12px; color: #8a867e; }
+</style>
+</head>
+<body>
+  <div class="logo">Omp<span>Web</span></div>
+  <div class="bar"><i></i></div>
+  <div class="hint">正在启动…</div>
+</body>
+</html>`)}`;
+
 function appLog(message) {
   try {
     const logPath = path.join(app.getPath("userData"), "omp-app.log");
@@ -141,7 +169,10 @@ function waitForServer(attempt = 0, loadWhenReady = true) {
 function isFirstLaunchSplash() {
   const pref = readSplashPref();
   if (pref === "off") return false;
-  const markPath = path.join(app.getPath("userData"), "splash-shown");
+  // Version-scoped mark: the animation plays once per installed version, so
+  // an in-place upgrade (which keeps userData, including the old splash-shown
+  // file) shows it again instead of skipping silently forever.
+  const markPath = path.join(app.getPath("userData"), `splash-shown-${app.getVersion()}`);
   if (pref === "once" && fs.existsSync(markPath)) return false;
   const splashFile = path.join(pkgDir, "desktop", "splash.html");
   const splashVideo = app.isPackaged
@@ -194,8 +225,25 @@ function createWindow() {
   });
   mainWindow.webContents.on("console-message", (_e, _lvl, message) => appLog("window console: " + String(message).slice(0, 200)));
   mainWindow.webContents.on("did-finish-load", () => appLog("window loaded: " + mainWindow.webContents.getURL()));
+  // Cold-start race: the splash page navigates to APP_URL on its own timer,
+  // but on slow machines (first run, Windows Defender scanning the freshly
+  // installed standalone) the server may not be listening yet — the app then
+  // sits on a blank page until a manual refresh. Retry the navigation a few
+  // times until the server answers.
+  let splashReloads = 0;
+  mainWindow.webContents.on("did-fail-load", (_event, code, desc, url) => {
+    appLog(`did-fail-load ${code} ${desc} ${url}`);
+    if (!url.startsWith(APP_URL)) return;
+    if (splashReloads >= 8) return;
+    splashReloads += 1;
+    setTimeout(() => {
+      if (!mainWindow || mainWindow.isDestroyed()) return;
+      if (!quitting) mainWindow.loadURL(APP_URL);
+    }, 1200);
+  });
   mainWindow.on("closed", () => {
     mainWindow = null;
+    splashReloads = 0;
   });
 }
 
@@ -265,6 +313,10 @@ if (!gotLock) {
       waitForServer(0, false);
       void mainWindow?.loadFile(splashFile_, { query: { video: splashVideo_, app: APP_URL } });
     } else {
+      // No animation: show the startup page immediately so the window is
+      // never blank while the standalone server cold-starts, then load the
+      // app once it answers.
+      void mainWindow?.loadURL(STARTUP_PAGE);
       waitForServer();
     }
   });
@@ -272,6 +324,7 @@ if (!gotLock) {
   app.on("activate", () => {
     if (BrowserWindow.getAllWindows().length === 0) {
       createWindow();
+      void mainWindow?.loadURL(STARTUP_PAGE);
       waitForServer();
     }
   });
@@ -327,3 +380,59 @@ ipcMain.on("window-control", (_event, action) => {
   else if (action === "maximize") mainWindow.isMaximized() ? mainWindow.unmaximize() : mainWindow.maximize();
   else if (action === "close") mainWindow.close();
 });
+
+// ---------------------------------------------------------------------------
+// Desktop self-update (electron-updater). Only active in packaged builds;
+// dev runs use the plain CLI update flows. The renderer drives it from the
+// System & Updates tab: check -> download (progress) -> apply (restart).
+// ---------------------------------------------------------------------------
+let autoUpdater = null;
+if (app.isPackaged) {
+  try {
+    // eslint-disable-next-line @typescript-eslint/no-require-imports
+    const { autoUpdater: updater } = require("electron-updater");
+    autoUpdater = updater;
+    autoUpdater.autoDownload = false; // user confirms before downloading
+    autoUpdater.autoInstallOnAppQuit = false;
+    autoUpdater.autoRunAppAfterInstall = true;
+
+    const broadcast = (status, detail) => {
+      if (mainWindow && !mainWindow.isDestroyed()) {
+        mainWindow.webContents.send("desktop-update-status", { status, ...(detail ?? {}) });
+      }
+    };
+    autoUpdater.on("checking-for-update", () => broadcast("checking"));
+    autoUpdater.on("update-available", (info) => broadcast("available", { version: info.version }));
+    autoUpdater.on("update-not-available", () => broadcast("up-to-date"));
+    autoUpdater.on("download-progress", (progress) => broadcast("downloading", { percent: Math.round(progress.percent ?? 0) }));
+    autoUpdater.on("update-downloaded", (info) => broadcast("downloaded", { version: info.version }));
+    autoUpdater.on("error", (error) => {
+      appLog("updater: " + (error instanceof Error ? error.message : String(error)));
+      broadcast("error", { message: error instanceof Error ? error.message : String(error) });
+    });
+
+    ipcMain.handle("desktop-update-check", () => {
+      autoUpdater.checkForUpdates().catch((error) => appLog("updater check: " + error.message));
+      return true;
+    });
+    // Auto-check shortly after launch (quietly — only "available" and
+    // "downloaded" reach the renderer, so the user is prompted when an
+    // update exists instead of having to open Settings).
+    const autoCheckTimer = setTimeout(() => {
+      autoUpdater.checkForUpdates().catch((error) => appLog("updater auto-check: " + error.message));
+    }, 8000);
+    autoUpdater.on("checking-for-update", () => clearTimeout(autoCheckTimer));
+    ipcMain.handle("desktop-update-download", () => {
+      autoUpdater.downloadUpdate().catch((error) => appLog("updater download: " + error.message));
+      return true;
+    });
+    ipcMain.handle("desktop-update-apply", () => {
+      // quitAndInstall restarts the app into the new version — the user sees
+      // the app close and reopen with the update applied.
+      autoUpdater.quitAndInstall(false, true);
+      return true;
+    });
+  } catch (error) {
+    appLog("updater init failed: " + (error instanceof Error ? error.message : String(error)));
+  }
+}

package/next.config.ts

@@ -75,34 +75,51 @@ const nextConfig = (phase: string): NextConfig => {
         { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
         { key: "Content-Security-Policy", value: "default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' ws: wss:; font-src 'self' data:" },
       ];
-      const headers = [
-        {
-          source: "/:path*",
-          headers: securityHeaders,
-        },
-        {
-          // Hashed build output never changes, so browsers/proxies may cache it
-          // immutably for a year and skip revalidation entirely.
-          // NOTE: scoped to /_next/static/ only — broader /_next/ patterns would
-          // shadow the HMR WebSocket in development.
-          source: "/_next/static/:path*",
-          headers: [
-            { key: "Cache-Control", value: "public, max-age=31536000, immutable" },
-          ],
-        },
-        {
-          source: "/",
-          headers: [
-            { key: "Cache-Control", value: "private, no-cache, max-age=0, must-revalidate" },
-          ],
-        },
+      // /api/files streams workspace files whose document policy depends on the
+      // content type (strict CSP for SVG, the DOCX preview policy, none for
+      // media the browser renders natively). Config-level headers overwrite
+      // same-key headers set by route handlers, so the global CSP must not
+      // match these paths — it would both reopen script execution for SVG
+      // documents and block the same-origin <iframe> previews (DOCX/PDF) with
+      // frame-ancestors 'none'. The handler-agnostic protections stay here.
+      const fileResponseHeaders = [
+        { key: "X-Content-Type-Options", value: "nosniff" },
+        { key: "X-Frame-Options", value: "SAMEORIGIN" },
+        { key: "Referrer-Policy", value: "no-referrer" },
+        { key: "Permissions-Policy", value: "camera=(), microphone=(), geolocation=()" },
       ];
+      const globalRule = {
+        // Everything except /api/files (negative lookahead, same pattern style
+        // as the proxy matcher).
+        source: "/((?!api/files/).*)",
+        headers: securityHeaders,
+      };
+      const fileRule = {
+        source: "/api/files/:path*",
+        headers: fileResponseHeaders,
+      };
+      const rootNoCacheRule = {
+        source: "/",
+        headers: [
+          { key: "Cache-Control", value: "private, no-cache, max-age=0, must-revalidate" },
+        ],
+      };
+      const staticImmutableRule = {
+        // Hashed build output never changes, so browsers/proxies may cache it
+        // immutably for a year and skip revalidation entirely.
+        // NOTE: scoped to /_next/static/ only — broader /_next/ patterns would
+        // shadow the HMR WebSocket in development.
+        source: "/_next/static/:path*",
+        headers: [
+          { key: "Cache-Control", value: "public, max-age=31536000, immutable" },
+        ],
+      };
 
       // Dev chunks have stable URLs whose content changes in place; caching
       // them immutably would serve stale module factories after a restart.
-      if (isDev) return [headers[0], headers[2]];
+      if (isDev) return [globalRule, fileRule, rootNoCacheRule];
 
-      return headers;
+      return [globalRule, fileRule, staticImmutableRule, rootNoCacheRule];
     },
     env: {
       NEXT_PUBLIC_APP_VERSION: version,

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@37chengshan/ompweb",
-  "version": "4.0.4",
+  "version": "4.0.7",
   "description": "Web UI for the oh-my-pi (omp) coding agent",
   "homepage": "https://github.com/kahme247/ompweb#readme",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/kahme247/ompweb.git"
+    "url": "git+https://github.com/37chengshan/ompweb.git"
   },
   "bugs": {
     "url": "https://github.com/kahme247/ompweb/issues"
@@ -55,9 +55,11 @@
     "@xterm/addon-web-links": "^0.12.0",
     "@xterm/xterm": "^6.0.0",
     "cmdk": "^1.1.1",
+    "electron-updater": "^6.8.9",
     "lucide-react": "^1.27.0",
     "next": "16.3.0",
     "node-pty": "^1.2.0-beta.15",
+    "qrcode.react": "^4.2.0",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "react-syntax-highlighter": "^16.1.1",
@@ -104,7 +106,8 @@
     },
     "mac": {
       "target": [
-        "dmg"
+        "dmg",
+        "zip"
       ],
       "category": "public.app-category.developer-tools",
       "icon": "public/icon.png"
@@ -115,6 +118,15 @@
       ],
       "icon": "public/icon.png"
     },
+    "nsis": {
+      "oneClick": false,
+      "allowToChangeInstallationDirectory": true,
+      "perMachine": false,
+      "createDesktopShortcut": true,
+      "createStartMenuShortcut": true,
+      "shortcutName": "OmpWeb",
+      "artifactName": "OmpWeb-Setup-${version}.${ext}"
+    },
     "linux": {
       "target": [
         "AppImage"
@@ -147,6 +159,15 @@
         "from": "templates/desktop/splash.mp4",
         "to": "splash.mp4"
       }
+    ],
+    "publish": [
+      {
+        "provider": "github",
+        "owner": "37chengshan",
+        "repo": "ompweb",
+        "private": false
+      }
     ]
-  }
+  },
+  "author": "37chengshan"
 }