@jesonliu/lark-claudecode-bridge 1.4.2 → 2.0.0

package/dist/web/logs-api.js

@@ -0,0 +1,141 @@
+// 运行日志查看器 API（概览页「查看日志」抽屉数据源）：
+// - 列表：logs/ 目录下全部 *.log（现命名 bridge-YYYY-MM-DD.log，按天滚动），按修改时间倒序
+// - 单文件尾读：按文件名取尾部 N 行
+// - 日期范围（会话页主路径）：from~to 每天的日志依时间序合并尾读，前端不再列文件只选日期
+// 安全：文件名白名单 + 解析后必须仍落在 logs 目录内（防路径穿越读到配置/凭证）
+import { closeSync, openSync, readFileSync, readSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve, sep } from 'node:path';
+const LOG_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*\.log$/;
+const RANGE_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+/** 尾读切块上限：超过就只读文件末尾这一段（首行可能被截断，标记 truncated 丢弃） */
+const TAIL_WINDOW_BYTES = 1_500_000;
+/** 日期范围查询的防呆上限（主人拍板：最多搜 7 天，跨天全量检索代价高且很少需要） */
+const RANGE_MAX_DAYS = 7;
+/** 单文件在范围查询里的行数配额（避免单日巨日志吃光总量配额） */
+const RANGE_PER_FILE_LINES = 1000;
+const logsDirOf = (configPath) => join(resolve(configPath, '..'), 'logs');
+export function listLogFiles(configPath) {
+    const dir = logsDirOf(configPath);
+    let files = [];
+    try {
+        files = readdirSync(dir)
+            .filter((n) => n.endsWith('.log'))
+            .map((name) => {
+            try {
+                const st = statSync(join(dir, name));
+                return { name, size: st.size, mtime: st.mtime.toISOString() };
+            }
+            catch {
+                return { name, size: 0, mtime: '' };
+            }
+        })
+            .filter((f) => f.mtime)
+            .sort((a, b) => b.mtime.localeCompare(a.mtime));
+    }
+    catch { /* logs 目录不存在（从未启动过桥）：空列表 */ }
+    return { dir, files };
+}
+/** 读取文件文本：>TAIL_WINDOW_BYTES 时只读末尾窗口（首行可能残缺） */
+function readTailText(fp, size) {
+    if (size > TAIL_WINDOW_BYTES) {
+        // 只读末尾窗口：开 fd 定位到 size-window 再读（避免整文件载入内存）
+        const fd = openSync(fp, 'r');
+        try {
+            const buf = Buffer.alloc(TAIL_WINDOW_BYTES);
+            const read = readSync(fd, buf, 0, TAIL_WINDOW_BYTES, size - TAIL_WINDOW_BYTES);
+            return { text: buf.subarray(0, read).toString('utf8'), truncated: true };
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    return { text: readFileSync(fp, 'utf8'), truncated: false };
+}
+/** 取尾部 maxLines 行（默认 500，上限 5000） */
+export function tailLogFile(configPath, name, maxLines) {
+    if (!LOG_NAME_RE.test(name))
+        return { error: '文件名不合法' };
+    const dir = resolve(logsDirOf(configPath));
+    const fp = resolve(dir, name);
+    if (!fp.startsWith(dir + sep))
+        return { error: '路径不在日志目录内' };
+    const limit = Number.isFinite(maxLines) ? Math.min(Math.max(Math.floor(maxLines), 1), 5000) : 500;
+    let st;
+    try {
+        st = statSync(fp);
+    }
+    catch {
+        return { error: '日志文件不存在（可能已被 14 天滚动清理）' };
+    }
+    if (!st.isFile())
+        return { error: '不是文件' };
+    const { text, truncated } = readTailText(fp, st.size);
+    let lines = text.split(/\r?\n/);
+    if (truncated && lines.length > 0)
+        lines.shift(); // 末尾窗口首行大概率被切断
+    while (lines.length && lines[lines.length - 1] === '')
+        lines.pop();
+    return { name, size: st.size, truncated, lines: lines.slice(-limit) };
+}
+const pad2 = (n) => String(n).padStart(2, '0');
+/** 本地时区的 YYYY-MM-DD（日志文件名按本地日滚动，与 log-tee 命名同口径） */
+const localDate = (t) => {
+    const d = new Date(t);
+    return `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())}`;
+};
+/**
+ * 日期范围聚合尾读：from~to（含两端）每天的 bridge-YYYY-MM-DD.log 依时间序合并。
+ * 每文件最多 RANGE_PER_FILE_LINES 行（防止单日巨日志吃光配额），总量再按 maxLines 截尾。
+ * 单日文件过大只读末尾窗口时同样标记 truncated。
+ */
+export function tailLogRange(configPath, from, to, maxLines) {
+    if (!RANGE_DATE_RE.test(from) || !RANGE_DATE_RE.test(to))
+        return { error: '日期格式须为 YYYY-MM-DD' };
+    const startMs = new Date(`${from}T00:00:00`).getTime();
+    const endMs = new Date(`${to}T00:00:00`).getTime();
+    if (!Number.isFinite(startMs) || !Number.isFinite(endMs))
+        return { error: '日期不合法' };
+    if (endMs < startMs)
+        return { error: '结束日期不能早于开始日期' };
+    if ((endMs - startMs) / 86_400_000 > RANGE_MAX_DAYS - 1) {
+        return { error: `抱歉，最多只能搜索 ${RANGE_MAX_DAYS} 天范围内日志，请重新选择时间` };
+    }
+    const limit = Number.isFinite(maxLines) ? Math.min(Math.max(Math.floor(maxLines), 1), 5000) : 2000;
+    const dir = resolve(logsDirOf(configPath));
+    const files = [];
+    let truncated = false;
+    const lines = [];
+    for (let t = startMs; t <= endMs; t += 86_400_000) {
+        // 按 1 天步进在 DST/大小时由 localDate 归一（国内无 DST；跨月由 Date 自动进位）
+        const dateStr = localDate(t);
+        if (localDate(t + 12 * 3600_000) !== dateStr)
+            continue; // 极端时钟回拨防重复
+        const name = `bridge-${dateStr}.log`;
+        const fp = resolve(dir, name);
+        let st;
+        try {
+            st = statSync(fp);
+            if (!st.isFile())
+                continue;
+        }
+        catch {
+            continue; // 当天无日志（未运行/已被清理）：静默跳过
+        }
+        files.push(name);
+        const { text, truncated: tailCut } = readTailText(fp, st.size);
+        if (tailCut)
+            truncated = true;
+        let dayLines = text.split(/\r?\n/);
+        if (tailCut && dayLines.length > 0)
+            dayLines.shift();
+        while (dayLines.length && dayLines[dayLines.length - 1] === '')
+            dayLines.pop();
+        lines.push(...dayLines.slice(-RANGE_PER_FILE_LINES));
+        if (lines.length > limit * 2)
+            break; // 已远超总量：提前收尾（最后统一截尾）
+    }
+    if (files.length === 0)
+        return { error: '所选日期范围内没有日志文件（未运行过或已被 14 天滚动清理）' };
+    return { from, to, files, truncated: truncated || lines.length > limit, lines: lines.slice(-limit) };
+}
+//# sourceMappingURL=logs-api.js.map

package/dist/web/logs-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-api.js","sourceRoot":"","sources":["../../src/web/logs-api.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,iEAAiE;AACjE,sBAAsB;AACtB,mDAAmD;AACnD,8CAA8C;AAC9C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,WAAW,GAAG,mCAAmC,CAAC;AACxD,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,mDAAmD;AACnD,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,+CAA+C;AAC/C,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAI1F,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,GAAmB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACtC,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAUD,gDAAgD;AAChD,SAAS,YAAY,CAAC,EAAU,EAAE,IAAY;IAC5C,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;QAC7B,4CAA4C;QAC5C,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,IAAY,EAAE,QAAgB;IAC5E,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClG,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,eAAe;IACjE,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACxE,CAAC;AAYD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/D,oDAAoD;AACpD,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE;IACtC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,IAAY,EAAE,EAAU,EAAE,QAAgB;IACzF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpF,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,aAAa,cAAc,iBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnG,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QAClD,wDAAwD;QACxD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,OAAO;YAAE,SAAS,CAAC,YAAY;QACpE,MAAM,IAAI,GAAG,UAAU,OAAO,MAAM,CAAC;QACrC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,SAAS;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uBAAuB;QACnC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,SAAS,GAAG,IAAI,CAAC;QAC9B,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,qBAAqB;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACvG,CAAC"}

package/dist/web/server.js

@@ -29,6 +29,9 @@ import { bridgeStatus, resolveLcbEntry, restartBridgeWithHelper, spawnBridgeDeta
 import { getAutostartStatus, setAutostartEnabled } from './autostart.js';
 import { checkUpdate, hasNewerVersion, installMode, runUpdate } from './update.js';
 import { memoryStatus, testMemoryConnection } from './memory-api.js';
+import { chatsTree, chatTopics, chatTimeline } from './chats-api.js';
+import { authMeta, authThrottleState, changePassword, clearAuthFailures, clearSessionCookie, createSession, dropOtherSessions, dropSession, readSessionToken, registerAuthFailure, resetPasswordToDefault, sessionCookie, setLockMinutes, touchSession, verifyPassword, } from './webauth.js';
+import { listLogFiles, tailLogFile, tailLogRange } from './logs-api.js';
 import { deleteMemoryUser, initMemoryUsers, listMemoryUsers, resetUserKey, revealRootKey, revealUserKey, } from './memory-users-api.js';
 import { MANAGED_OV_CONF, getInstallState, runInstall, runStartPipeline, stopManagedServer } from '../memory-installer.js';
 import { checkLarkCliAuth, checkLarkCliLatest, detectLarkCli, detectLarkCliSkill, getLarkCliConfigStatus, getLarkCliDeviceStatus, runLarkCliActionFlow, startLarkCliConfigFlow, startLarkCliDeviceAuth, } from '../lark-cli-manager.js';
@@ -122,7 +125,8 @@ function listSubdirs(input) {
         const dirs = readdirSync(abs, { withFileTypes: true })
             .filter((e) => e.isDirectory())
             .map((e) => e.name)
-            .sort((a, b) => a.localeCompare(b));
+            // 普通目录在前、点开头隐藏目录殿后（目录选择弹层网格的浏览主路径是普通目录）
+            .sort((a, b) => (a.startsWith('.') ? 1 : 0) - (b.startsWith('.') ? 1 : 0) || a.localeCompare(b));
         return { path: abs, parent: parentOf(abs), dirs };
     }
     catch (e) {
@@ -175,11 +179,10 @@ async function friendlyAddrInUse(host, port) {
     let occupier = '';
     try {
         const res = await fetch(`http://${disp}:${port}/api/status`, { signal: AbortSignal.timeout(2000) });
-        if (res.ok) {
-            const st = await res.json().catch(() => null);
-            if (st && typeof st.version === 'string') {
-                occupier = `（占用者疑似旧 lcb 配置页进程 v${st.version}——npm 更新后旧进程未退出，需手动结束）`;
-            }
+        // 401 也带 version（鉴权网关对 /api/status 特批附版本）：加锁后的新进程仍可被识别
+        const st = await res.json().catch(() => null);
+        if (st && typeof st.version === 'string') {
+            occupier = `（占用者疑似旧 lcb 配置页进程 v${st.version}——npm 更新后旧进程未退出，需手动结束）`;
         }
     }
     catch { /* 探测失败/非 lcb 服务：走通用文案 */ }
@@ -238,6 +241,7 @@ export async function startWebServer(opts = {}) {
 async function handle(req, res, ctx) {
     const url = new URL(req.url ?? '/', 'http://localhost');
     const path = url.pathname;
+    const configPath = ctx.configPath; // 短别名：鉴权段大量引用
     // 每请求现查（不能用启动快照）：bootstrap 写盘成功后，后续请求立即按「已有配置」处理
     const firstRun = !existsSync(ctx.configPath);
     // 安全闸：Host / Origin 校验（防 DNS rebinding 拿本机页面读写配置）
@@ -246,6 +250,97 @@ async function handle(req, res, ctx) {
         res.end('Forbidden');
         return;
     }
+    // ---- 配置页密码闸：静态资源（html/js/css）公开（页面源码不含秘密）；锁屏本身在前端，
+    // 但数据全部挡在 API 层——所有 /api/*（除登录）必须携带有效会话 cookie，否则 401。
+    // 首装向导 /api/bootstrap 同样被拦：内网他人无法抢在主人之前 bootstrap 配置 ----
+    const sessionToken = readSessionToken(req.headers.cookie);
+    if (path.startsWith('/api/') && path !== '/api/auth/verify') {
+        // 每请求滑动续期：TTL 取当前锁屏设置（改设置即刻约束既有会话；webauth 文件随读随取，
+        // 顺带让 `lcb reset-password` 的改密对运行中的进程即时生效）
+        const okSession = !!sessionToken && touchSession(sessionToken, authMeta(configPath).lockMinutes);
+        if (!okSession) {
+            // /api/status 在 401 里特批附 version：EADDRINUSE 端口占用探测靠它识别运行中的 lcb
+            if (path === '/api/status')
+                return json(res, 401, { error: '配置页已锁定', version: VERSION });
+            return json(res, 401, { error: '配置页已锁定，请先解锁' });
+        }
+    }
+    // ---- 配置页密码：登录 / 登出 / 会话元信息 / 改密 / 恢复初始密码 / 锁屏设置 ----
+    if (path === '/api/auth/verify' && req.method === 'POST') {
+        const ip = req.socket.remoteAddress ?? 'unknown';
+        const th = authThrottleState(ip);
+        if (th.blocked)
+            return json(res, 429, { error: `密码尝试过于频繁，请 ${th.retryAfter} 秒后再试` });
+        const body = await readJsonBody(req).catch(() => ({}));
+        if (!verifyPassword(configPath, String(body.password ?? ''))) {
+            registerAuthFailure(ip);
+            return json(res, 401, { error: '密码错误，请重试' });
+        }
+        clearAuthFailures(ip);
+        const meta = authMeta(configPath);
+        const token = createSession(meta.lockMinutes);
+        res.setHeader('Set-Cookie', sessionCookie(token, meta.lockMinutes));
+        // isDefault：仍为默认密码 123456 时前端每次登录都弹「修改默认密码」引导
+        return json(res, 200, { ok: true, isDefault: meta.isDefault, lockMinutes: meta.lockMinutes });
+    }
+    if (path === '/api/auth/meta' && req.method === 'GET') {
+        // 能过鉴权闸才可能走到这里 ⇒ 会话有效；供设置弹窗取锁屏设置与默认密码状态
+        return json(res, 200, { ok: true, ...authMeta(configPath) });
+    }
+    if (path === '/api/auth/logout' && req.method === 'POST') {
+        dropSession(sessionToken);
+        res.setHeader('Set-Cookie', clearSessionCookie());
+        return json(res, 200, { ok: true });
+    }
+    if (path === '/api/auth/change' && req.method === 'POST') {
+        const body = await readJsonBody(req);
+        const r = changePassword(configPath, String(body.old ?? ''), String(body.next ?? ''));
+        if (!r.ok)
+            return json(res, 400, { error: r.error });
+        dropOtherSessions(sessionToken); // 其他标签页/旧会话全部失效，当前页保持登录
+        return json(res, 200, { ok: true, isDefault: false });
+    }
+    if (path === '/api/auth/reset-default' && req.method === 'POST') {
+        // 恢复初始密码 123456：必须验当前密码（防锁屏状态下被内网他人一键重置）
+        const body = await readJsonBody(req);
+        if (!verifyPassword(configPath, String(body.old ?? '')))
+            return json(res, 401, { error: '当前密码不正确' });
+        resetPasswordToDefault(configPath);
+        dropOtherSessions(sessionToken);
+        return json(res, 200, { ok: true, isDefault: true });
+    }
+    if (path === '/api/auth/settings' && req.method === 'PUT') {
+        const body = await readJsonBody(req);
+        const r = setLockMinutes(configPath, Number(body.lockMinutes));
+        if (!r.ok)
+            return json(res, 400, { error: r.error });
+        const lockMinutes = Number(body.lockMinutes);
+        if (sessionToken)
+            touchSession(sessionToken, lockMinutes); // 立即按新 TTL 续期
+        return json(res, 200, { ok: true, lockMinutes });
+    }
+    // ---- 运行日志（概览「查看日志」抽屉）：列表 + 尾部 N 行 + 日期范围聚合 ----
+    if (path === '/api/logs' && req.method === 'GET') {
+        return json(res, 200, listLogFiles(configPath));
+    }
+    if (path === '/api/logs/content' && req.method === 'GET') {
+        const from = url.searchParams.get('from');
+        const to = url.searchParams.get('to');
+        if (from || to) {
+            // 日期范围模式（前端主路径）：from~to 每天日志依时间序合并
+            const r = tailLogRange(configPath, from || to || '', to || from || '', Number(url.searchParams.get('lines')) || 2000);
+            if ('error' in r)
+                return json(res, 400, { error: r.error });
+            return json(res, 200, r);
+        }
+        const file = url.searchParams.get('file');
+        if (!file)
+            return json(res, 400, { error: '缺少查询参数：请传 from/to（日期范围）或 file（单文件名）' });
+        const r = tailLogFile(configPath, file, Number(url.searchParams.get('lines')) || 500);
+        if ('error' in r)
+            return json(res, 400, { error: r.error });
+        return json(res, 200, r);
+    }
     // 静态页与模块：入口单文件 + js/css 目录服务（防穿越见下）
     if (req.method === 'GET' && (path === '/' || path === '/index.html')) {
         try {
@@ -400,6 +495,30 @@ async function handle(req, res, ctx) {
             return json(res, 400, { error: e instanceof Error ? e.message : String(e) });
         }
     }
+    // ---- 会话记录（只读查看器）：LCB 本地 transcripts 时间线 + 话题聚合 + 飞书真群名 ----
+    if (path === '/api/chats/tree' && req.method === 'GET') {
+        if (firstRun)
+            return json(res, 404, { error: '尚无配置文件（首次安装），请先完成 bootstrap 向导' });
+        try {
+            return json(res, 200, await chatsTree(ctx.configPath));
+        }
+        catch (e) {
+            return json(res, 500, { error: `会话树扫描失败：${e instanceof Error ? e.message : String(e)}` });
+        }
+    }
+    if (path === '/api/chats/topics' && req.method === 'GET') {
+        return json(res, 200, chatTopics(url.searchParams.get('app') ?? '', url.searchParams.get('chat') ?? ''));
+    }
+    if (path === '/api/chats/timeline' && req.method === 'GET') {
+        const q = (k) => url.searchParams.get(k) ?? undefined;
+        const limit = Number(q('limit'));
+        return json(res, 200, chatTimeline(q('app') ?? '', q('chat') ?? '', {
+            date: q('date'),
+            session: q('session'),
+            user: q('user'),
+            ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),
+        }));
+    }
     // ---- B3 一键安装（§6.7 嵌入式流水线）：后台执行 + 进度轮询；失败步骤可整链重跑（幂等跳过） ----
     if (path === '/api/memory/install' && req.method === 'POST') {
         if (firstRun)