@jesonliu/lark-claudecode-bridge 1.4.3 → 2.0.1

package/dist/web/lifecycle.d.ts

@@ -36,6 +36,27 @@ export declare function spawnBridgeDetached(): {
  * server.ts 注入的 selfStop 优雅路径，不经本函数
  */
 export declare function stopBridgeByPid(pid: number): boolean;
+export interface PortOccupier {
+    isLcb: boolean;
+    pid: number | null;
+    version: string | null;
+}
+/** 反查监听指定端口的进程 PID（回退路径：占用者未提供顶层 pid 时使用）。
+ * win32=netstat -ano（LISTENING 行末列 PID）；darwin/linux= lsof -ti（缺失则放弃返回 null） */
+export declare function pidListeningOnPortAsync(port: number): Promise<number | null>;
+/** 探测 127.0.0.1:port 的占用者身份。端口无人监听（连接拒绝/超时）→ null */
+export declare function probePortOccupier(port: number): Promise<PortOccupier | null>;
+export interface PortFreeResult {
+    freed: boolean;
+    pid: number | null;
+    detail: string;
+}
+/**
+ * 端口实占清场：占用者是 LCB 进程（/api/status 带 version）→ 强制结束并轮询等端口释放；
+ * 非 LCB 占用者（别的软件占端口）不动，交由调用方按 EADDRINUSE 提示换端口。
+ * 防自杀：占用者即本进程时不杀（理论上启动清场阶段本进程尚未监听，纯防御）
+ */
+export declare function freeLcbOccupiedPort(port: number, timeoutMs?: number): Promise<PortFreeResult>;
 /** 重启桥接器：spawn detached helper 由其等待旧进程退出后拉起新进程（跨平台统一路径） */
 export declare function restartBridgeWithHelper(oldPid: number): {
     ok: true;

package/dist/web/lifecycle.js

@@ -1,8 +1,8 @@
-// 桥接器进程生命周期：PID 文件探活 / 后台拉起 / 跨进程停止 / 旧进程退出后重启。
+// 桥接器进程生命周期：PID 文件探活 / 后台拉起 / 跨进程停止 / 旧进程退出后重启 / 端口实占清场。
 // 消费方：Web 配置页 /api/bridge/* 端点（页面按钮启停）；startBridge 写/清 PID（src/index.ts）。
 // 路径参数可注入（默认 CONFIG_DIR），便于测试用临时目录
 import { existsSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
-import { spawn } from 'node:child_process';
+import { execFile, spawn } from 'node:child_process';
 import { join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { CONFIG_DIR } from '../config.js';
@@ -94,16 +94,93 @@ export function stopBridgeByPid(pid) {
         return false; // 已退出或无权限
     }
 }
+/** 反查监听指定端口的进程 PID（回退路径：占用者未提供顶层 pid 时使用）。
+ * win32=netstat -ano（LISTENING 行末列 PID）；darwin/linux= lsof -ti（缺失则放弃返回 null） */
+export async function pidListeningOnPortAsync(port) {
+    const exec = (cmd, args, timeoutMs = 5000) => new Promise((resolve, reject) => {
+        execFile(cmd, args, { timeout: timeoutMs, windowsHide: true, maxBuffer: 4 * 1024 * 1024 }, (e, stdout) => e ? reject(e) : resolve(String(stdout)));
+    });
+    try {
+        if (process.platform === 'win32') {
+            const out = await exec('netstat', ['-ano']);
+            // 行形如：TCP    127.0.0.1:17317    0.0.0.0:0    LISTENING    2708（IPv6 为 [::]:17317）
+            for (const line of out.split('\n')) {
+                const m = line.match(new RegExp(String.raw `^\s*TCP\s+\S+:${port}\s+\S+\s+LISTENING\s+(\d+)`, 'i'));
+                if (m)
+                    return Number.parseInt(m[1], 10);
+            }
+            return null;
+        }
+        const out = await exec('lsof', ['-ti', `tcp:${port}`]); // darwin / 装了 lsof 的 linux：每行一个 PID
+        const pid = Number.parseInt(out.trim().split('\n')[0] ?? '', 10);
+        return Number.isInteger(pid) && pid > 0 ? pid : null;
+    }
+    catch {
+        return null; // netstat/lsof 缺失或执行失败：拿不到 PID，调用方降级为仅凭 version 判断
+    }
+}
+/** 探测 127.0.0.1:port 的占用者身份。端口无人监听（连接拒绝/超时）→ null */
+export async function probePortOccupier(port) {
+    let st = null;
+    try {
+        const res = await fetch(`http://127.0.0.1:${port}/api/status`, {
+            signal: AbortSignal.timeout(2000),
+        });
+        st = (await res.json().catch(() => null));
+    }
+    catch {
+        return null; // 端口无人监听或非 HTTP 服务
+    }
+    const isLcb = typeof st?.version === 'string';
+    const respPid = typeof st?.pid === 'number' && Number.isInteger(st.pid) && st.pid > 0 ? st.pid : null;
+    const pid = respPid ?? (isLcb ? await pidListeningOnPortAsync(port) : null);
+    return { isLcb, pid, version: isLcb ? st.version : null };
+}
+/**
+ * 端口实占清场：占用者是 LCB 进程（/api/status 带 version）→ 强制结束并轮询等端口释放；
+ * 非 LCB 占用者（别的软件占端口）不动，交由调用方按 EADDRINUSE 提示换端口。
+ * 防自杀：占用者即本进程时不杀（理论上启动清场阶段本进程尚未监听，纯防御）
+ */
+export async function freeLcbOccupiedPort(port, timeoutMs = 10_000) {
+    const occ = await probePortOccupier(port);
+    if (!occ)
+        return { freed: true, pid: null, detail: '端口空闲' };
+    if (!occ.isLcb) {
+        return { freed: false, pid: occ.pid, detail: `端口被非 LCB 进程占用${occ.pid ? `（PID ${occ.pid}）` : ''}，不动` };
+    }
+    if (occ.pid === null) {
+        return { freed: false, pid: null, detail: `端口被 LCB 进程（v${occ.version}）占用，但未能定位 PID，无法自动清场` };
+    }
+    if (occ.pid === process.pid) {
+        return { freed: true, pid: occ.pid, detail: '占用者为本进程，跳过' };
+    }
+    if (!stopBridgeByPid(occ.pid)) {
+        return { freed: false, pid: occ.pid, detail: `向占用者（PID ${occ.pid}）发送停止信号失败（无权限或已退出）` };
+    }
+    const t0 = Date.now();
+    while (Date.now() - t0 < timeoutMs) {
+        if ((await probePortOccupier(port)) === null) {
+            return { freed: true, pid: occ.pid, detail: `已结束占用端口的旧 LCB 进程（PID ${occ.pid}）并释放端口` };
+        }
+        await new Promise((r) => setTimeout(r, 300));
+    }
+    return { freed: false, pid: occ.pid, detail: `已向占用者（PID ${occ.pid}）发送停止信号，但端口 ${timeoutMs / 1000}s 内未释放` };
+}
 /**
- * 内嵌重启 helper（CJS，node -e 执行）：轮询旧进程退出 → 拉起新桥接器 → 自退。
+ * 内嵌重启 helper（CJS，node -e 执行）：补刀杀旧进程 → 轮询确认退出 → 拉起新桥接器 → 自退。
  * 不能「先拉新再杀旧」：新进程的 Web 配置页会因端口仍被旧进程占用而启动失败，
  * 导致重启后页面失联。超时 30s 放弃（保留旧进程运行态，页面可重试）。
+ * 补刀延迟 500ms：embedded 模式 server.ts 的 selfStop 在 300ms 后优雅退出（关长连接/停受管
+ * 服务/清 PID），这刀落空（catch 忽略）；独立模式原本「只等不杀」——旧进程永生导致必撞
+ * 页面 120s 重启超时（2026-10-17 定性），这刀是关键修复。Windows 上 SIGTERM=硬杀，风险
+ * 与 stopBridgeByPid 同口径（状态逐消息落盘，可控）。
  * #7：stdio 走 ignore，日志由进程内 console tee 自管到 logs/bridge-YYYY-MM-DD.log
  */
 const RESTART_HELPER = `
 const { spawn } = require('node:child_process');
 const [oldPid, entry] = process.argv.slice(1);
 const t0 = Date.now();
+setTimeout(function () { try { process.kill(+oldPid, 'SIGTERM'); } catch (e) {} }, 500);
 (function wait() {
   try { process.kill(+oldPid, 0); } catch {
     try {

package/dist/web/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/web/lifecycle.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,0EAA0E;AAC1E,mCAAmC;AACnC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAChD;wEACwE;AAExE,wCAAwC;AACxC,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG;YAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAID,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACnD,IAAI,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,qFAAqF;IACrF,mDAAmD;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QACxD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,UAAU;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;CAetB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;QACtF,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAS,GAAG,MAAM,EAClB,OAAO,GAAW,QAAQ;IAE1B,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;IACrD,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACnG,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;IACnB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,eAAe;IAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAChE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC"}
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../src/web/lifecycle.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,0EAA0E;AAC1E,mCAAmC;AACnC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAChD;wEACwE;AAExE,wCAAwC;AACxC,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,IAAI,CAAC;QACH,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,GAAG;YAAE,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,kDAAkD;AAClD,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAID,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,OAAO,GAAW,QAAQ;IACrD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACnD,IAAI,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,qFAAqF;IACrF,mDAAmD;IACnD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,eAAe,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC;IAC5F,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED;yDACyD;AACzD,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;QACxD,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,UAAU;IAC1B,CAAC;AACH,CAAC;AAYD;gFACgF;AAChF,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAAY;IACxD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,SAAS,GAAG,IAAI,EAAmB,EAAE,CAC9E,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC9B,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACvG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5C,kFAAkF;YAClF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,iBAAiB,IAAI,4BAA4B,EAAE,GAAG,CAAC,CAAC,CAAC;gBACnG,IAAI,CAAC;oBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,oCAAoC;QAC5F,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,mDAAmD;IAClE,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,IAAI,EAAE,GAAgD,IAAI,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,aAAa,EAAE;YAC7D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAgD,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,mBAAmB;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,EAAE,EAAE,OAAO,KAAK,QAAQ,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,EAAE,EAAE,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5E,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,EAAG,CAAC,OAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,SAAS,GAAG,MAAM;IACxE,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,GAAG,CAAC,OAAO,sBAAsB,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,GAAG,oBAAoB,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,wBAAwB,GAAG,CAAC,GAAG,QAAQ,EAAE,CAAC;QACxF,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,GAAG,eAAe,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC;AAC7G,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;CAgBtB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE;QACtF,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAS,GAAG,MAAM,EAClB,OAAO,GAAW,QAAQ;IAE1B,MAAM,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;IACrD,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACnG,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;IACnB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,eAAe;IAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACtB,OAAO,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAChE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC"}

package/dist/web/logs-api.d.ts

@@ -0,0 +1,37 @@
+export interface LogFileEntry {
+    name: string;
+    size: number;
+    mtime: string;
+}
+export declare function listLogFiles(configPath: string): {
+    dir: string;
+    files: LogFileEntry[];
+};
+export interface LogTail {
+    name: string;
+    size: number;
+    /** true = 文件过大只读了末尾窗口，首行可能不完整（前端丢弃首行残缺即可） */
+    truncated: boolean;
+    lines: string[];
+}
+/** 取尾部 maxLines 行（默认 500，上限 5000） */
+export declare function tailLogFile(configPath: string, name: string, maxLines: number): LogTail | {
+    error: string;
+};
+export interface LogRangeTail {
+    from: string;
+    to: string;
+    /** 实际并入的日志文件（升序 = 时间序），前端可提示覆盖了哪些天 */
+    files: string[];
+    /** true = 达到总量上限或某文件只读了末尾窗口 */
+    truncated: boolean;
+    lines: string[];
+}
+/**
+ * 日期范围聚合尾读：from~to（含两端）每天的 bridge-YYYY-MM-DD.log 依时间序合并。
+ * 每文件最多 RANGE_PER_FILE_LINES 行（防止单日巨日志吃光配额），总量再按 maxLines 截尾。
+ * 单日文件过大只读末尾窗口时同样标记 truncated。
+ */
+export declare function tailLogRange(configPath: string, from: string, to: string, maxLines: number): LogRangeTail | {
+    error: string;
+};

package/dist/web/logs-api.js

@@ -0,0 +1,141 @@
+// 运行日志查看器 API（概览页「查看日志」抽屉数据源）：
+// - 列表：logs/ 目录下全部 *.log（现命名 bridge-YYYY-MM-DD.log，按天滚动），按修改时间倒序
+// - 单文件尾读：按文件名取尾部 N 行
+// - 日期范围（会话页主路径）：from~to 每天的日志依时间序合并尾读，前端不再列文件只选日期
+// 安全：文件名白名单 + 解析后必须仍落在 logs 目录内（防路径穿越读到配置/凭证）
+import { closeSync, openSync, readFileSync, readSync, readdirSync, statSync } from 'node:fs';
+import { join, resolve, sep } from 'node:path';
+const LOG_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*\.log$/;
+const RANGE_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+/** 尾读切块上限：超过就只读文件末尾这一段（首行可能被截断，标记 truncated 丢弃） */
+const TAIL_WINDOW_BYTES = 1_500_000;
+/** 日期范围查询的防呆上限（主人拍板：最多搜 7 天，跨天全量检索代价高且很少需要） */
+const RANGE_MAX_DAYS = 7;
+/** 单文件在范围查询里的行数配额（避免单日巨日志吃光总量配额） */
+const RANGE_PER_FILE_LINES = 1000;
+const logsDirOf = (configPath) => join(resolve(configPath, '..'), 'logs');
+export function listLogFiles(configPath) {
+    const dir = logsDirOf(configPath);
+    let files = [];
+    try {
+        files = readdirSync(dir)
+            .filter((n) => n.endsWith('.log'))
+            .map((name) => {
+            try {
+                const st = statSync(join(dir, name));
+                return { name, size: st.size, mtime: st.mtime.toISOString() };
+            }
+            catch {
+                return { name, size: 0, mtime: '' };
+            }
+        })
+            .filter((f) => f.mtime)
+            .sort((a, b) => b.mtime.localeCompare(a.mtime));
+    }
+    catch { /* logs 目录不存在（从未启动过桥）：空列表 */ }
+    return { dir, files };
+}
+/** 读取文件文本：>TAIL_WINDOW_BYTES 时只读末尾窗口（首行可能残缺） */
+function readTailText(fp, size) {
+    if (size > TAIL_WINDOW_BYTES) {
+        // 只读末尾窗口：开 fd 定位到 size-window 再读（避免整文件载入内存）
+        const fd = openSync(fp, 'r');
+        try {
+            const buf = Buffer.alloc(TAIL_WINDOW_BYTES);
+            const read = readSync(fd, buf, 0, TAIL_WINDOW_BYTES, size - TAIL_WINDOW_BYTES);
+            return { text: buf.subarray(0, read).toString('utf8'), truncated: true };
+        }
+        finally {
+            closeSync(fd);
+        }
+    }
+    return { text: readFileSync(fp, 'utf8'), truncated: false };
+}
+/** 取尾部 maxLines 行（默认 500，上限 5000） */
+export function tailLogFile(configPath, name, maxLines) {
+    if (!LOG_NAME_RE.test(name))
+        return { error: '文件名不合法' };
+    const dir = resolve(logsDirOf(configPath));
+    const fp = resolve(dir, name);
+    if (!fp.startsWith(dir + sep))
+        return { error: '路径不在日志目录内' };
+    const limit = Number.isFinite(maxLines) ? Math.min(Math.max(Math.floor(maxLines), 1), 5000) : 500;
+    let st;
+    try {
+        st = statSync(fp);
+    }
+    catch {
+        return { error: '日志文件不存在（可能已被 14 天滚动清理）' };
+    }
+    if (!st.isFile())
+        return { error: '不是文件' };
+    const { text, truncated } = readTailText(fp, st.size);
+    let lines = text.split(/\r?\n/);
+    if (truncated && lines.length > 0)
+        lines.shift(); // 末尾窗口首行大概率被切断
+    while (lines.length && lines[lines.length - 1] === '')
+        lines.pop();
+    return { name, size: st.size, truncated, lines: lines.slice(-limit) };
+}
+const pad2 = (n) => String(n).padStart(2, '0');
+/** 本地时区的 YYYY-MM-DD（日志文件名按本地日滚动，与 log-tee 命名同口径） */
+const localDate = (t) => {
+    const d = new Date(t);
+    return `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())}`;
+};
+/**
+ * 日期范围聚合尾读：from~to（含两端）每天的 bridge-YYYY-MM-DD.log 依时间序合并。
+ * 每文件最多 RANGE_PER_FILE_LINES 行（防止单日巨日志吃光配额），总量再按 maxLines 截尾。
+ * 单日文件过大只读末尾窗口时同样标记 truncated。
+ */
+export function tailLogRange(configPath, from, to, maxLines) {
+    if (!RANGE_DATE_RE.test(from) || !RANGE_DATE_RE.test(to))
+        return { error: '日期格式须为 YYYY-MM-DD' };
+    const startMs = new Date(`${from}T00:00:00`).getTime();
+    const endMs = new Date(`${to}T00:00:00`).getTime();
+    if (!Number.isFinite(startMs) || !Number.isFinite(endMs))
+        return { error: '日期不合法' };
+    if (endMs < startMs)
+        return { error: '结束日期不能早于开始日期' };
+    if ((endMs - startMs) / 86_400_000 > RANGE_MAX_DAYS - 1) {
+        return { error: `抱歉，最多只能搜索 ${RANGE_MAX_DAYS} 天范围内日志，请重新选择时间` };
+    }
+    const limit = Number.isFinite(maxLines) ? Math.min(Math.max(Math.floor(maxLines), 1), 5000) : 2000;
+    const dir = resolve(logsDirOf(configPath));
+    const files = [];
+    let truncated = false;
+    const lines = [];
+    for (let t = startMs; t <= endMs; t += 86_400_000) {
+        // 按 1 天步进在 DST/大小时由 localDate 归一（国内无 DST；跨月由 Date 自动进位）
+        const dateStr = localDate(t);
+        if (localDate(t + 12 * 3600_000) !== dateStr)
+            continue; // 极端时钟回拨防重复
+        const name = `bridge-${dateStr}.log`;
+        const fp = resolve(dir, name);
+        let st;
+        try {
+            st = statSync(fp);
+            if (!st.isFile())
+                continue;
+        }
+        catch {
+            continue; // 当天无日志（未运行/已被清理）：静默跳过
+        }
+        files.push(name);
+        const { text, truncated: tailCut } = readTailText(fp, st.size);
+        if (tailCut)
+            truncated = true;
+        let dayLines = text.split(/\r?\n/);
+        if (tailCut && dayLines.length > 0)
+            dayLines.shift();
+        while (dayLines.length && dayLines[dayLines.length - 1] === '')
+            dayLines.pop();
+        lines.push(...dayLines.slice(-RANGE_PER_FILE_LINES));
+        if (lines.length > limit * 2)
+            break; // 已远超总量：提前收尾（最后统一截尾）
+    }
+    if (files.length === 0)
+        return { error: '所选日期范围内没有日志文件（未运行过或已被 14 天滚动清理）' };
+    return { from, to, files, truncated: truncated || lines.length > limit, lines: lines.slice(-limit) };
+}
+//# sourceMappingURL=logs-api.js.map

package/dist/web/logs-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-api.js","sourceRoot":"","sources":["../../src/web/logs-api.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,iEAAiE;AACjE,sBAAsB;AACtB,mDAAmD;AACnD,8CAA8C;AAC9C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAE/C,MAAM,WAAW,GAAG,mCAAmC,CAAC;AACxD,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,mDAAmD;AACnD,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,+CAA+C;AAC/C,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,oCAAoC;AACpC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AAI1F,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClC,IAAI,KAAK,GAAmB,EAAE,CAAC;IAC/B,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAChE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACtC,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IACxC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAUD,gDAAgD;AAChD,SAAS,YAAY,CAAC,EAAU,EAAE,IAAY;IAC5C,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;QAC7B,4CAA4C;QAC5C,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,CAAC;YAC/E,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,IAAY,EAAE,QAAgB;IAC5E,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClG,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,eAAe;IACjE,OAAO,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACxE,CAAC;AAYD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/D,oDAAoD;AACpD,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE;IACtC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;AAC7E,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,IAAY,EAAE,EAAU,EAAE,QAAgB;IACzF,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAChG,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACpF,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACtD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,UAAU,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,aAAa,cAAc,iBAAiB,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEnG,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QAClD,wDAAwD;QACxD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,OAAO;YAAE,SAAS,CAAC,YAAY;QACpE,MAAM,IAAI,GAAG,UAAU,OAAO,MAAM,CAAC;QACrC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,EAAE,CAAC;QACP,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;YAClB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE;gBAAE,SAAS;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uBAAuB;QACnC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO;YAAE,SAAS,GAAG,IAAI,CAAC;QAC9B,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QACrD,OAAO,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,GAAG,CAAC;YAAE,MAAM,CAAC,qBAAqB;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACvG,CAAC"}

package/dist/web/server.js

@@ -25,10 +25,14 @@ import { ensureRuntimeDirs } from '../util/runtime-dirs.js';
 import { builtinCommands, createSlashApiClient, ensureBuiltins, expectedCommands, syncSlashCommands } from '../feishu/slash-commands.js';
 import { refreshMarketplaceIndex, removeMarketplaceIfUnused, resolvePluginMarketplace, runPluginCli, updateAllPlugins } from '../executor/plugin-manager.js';
 import { invalidatePluginCache, listAvailablePlugins, listInstalledPlugins, loadEnabledPlugins } from '../executor/plugin-discovery.js';
-import { bridgeStatus, resolveLcbEntry, restartBridgeWithHelper, spawnBridgeDetached, stopBridgeByPid } from './lifecycle.js';
+import { bridgeStatus, probePortOccupier, resolveLcbEntry, restartBridgeWithHelper, spawnBridgeDetached, stopBridgeByPid } from './lifecycle.js';
 import { getAutostartStatus, setAutostartEnabled } from './autostart.js';
 import { checkUpdate, hasNewerVersion, installMode, runUpdate } from './update.js';
 import { memoryStatus, testMemoryConnection } from './memory-api.js';
+import { chatsTree, chatTopics, chatTimeline, fetchUserNames } from './chats-api.js';
+import { AccessControl } from '../access/access-control.js';
+import { authMeta, authThrottleState, changePassword, clearAuthFailures, clearSessionCookie, createSession, dropOtherSessions, dropSession, readSessionToken, registerAuthFailure, resetPasswordToDefault, sessionCookie, setLockMinutes, touchSession, verifyPassword, } from './webauth.js';
+import { listLogFiles, tailLogFile, tailLogRange } from './logs-api.js';
 import { deleteMemoryUser, initMemoryUsers, listMemoryUsers, resetUserKey, revealRootKey, revealUserKey, } from './memory-users-api.js';
 import { MANAGED_OV_CONF, getInstallState, runInstall, runStartPipeline, stopManagedServer } from '../memory-installer.js';
 import { checkLarkCliAuth, checkLarkCliLatest, detectLarkCli, detectLarkCliSkill, getLarkCliConfigStatus, getLarkCliDeviceStatus, runLarkCliActionFlow, startLarkCliConfigFlow, startLarkCliDeviceAuth, } from '../lark-cli-manager.js';
@@ -122,7 +126,8 @@ function listSubdirs(input) {
         const dirs = readdirSync(abs, { withFileTypes: true })
             .filter((e) => e.isDirectory())
             .map((e) => e.name)
-            .sort((a, b) => a.localeCompare(b));
+            // 普通目录在前、点开头隐藏目录殿后（目录选择弹层网格的浏览主路径是普通目录）
+            .sort((a, b) => (a.startsWith('.') ? 1 : 0) - (b.startsWith('.') ? 1 : 0) || a.localeCompare(b));
         return { path: abs, parent: parentOf(abs), dirs };
     }
     catch (e) {
@@ -168,21 +173,17 @@ export function shouldShowTunnelHint(host) {
         return true;
     return process.platform === 'linux' && !process.env.DISPLAY && !process.env.WAYLAND_DISPLAY;
 }
-/** EADDRINUSE 报错文案：探测占用者身份（是否旧 lcb 配置页进程）+ 按平台给排查命令。
+/** EADDRINUSE 报错文案：探测占用者身份（是否旧 lcb 进程 + PID）+ 按平台给排查命令。
  * 裸 Node 错误（listen EADDRINUSE :::17317）对首装用户完全不可操作 */
 async function friendlyAddrInUse(host, port) {
-    const disp = host === '::1' ? '[::1]' : host;
+    void host; // 占用者探测固定走回环（probePortOccupier 内部 127.0.0.1），host 仅保留签名兼容
     let occupier = '';
-    try {
-        const res = await fetch(`http://${disp}:${port}/api/status`, { signal: AbortSignal.timeout(2000) });
-        if (res.ok) {
-            const st = await res.json().catch(() => null);
-            if (st && typeof st.version === 'string') {
-                occupier = `（占用者疑似旧 lcb 配置页进程 v${st.version}——npm 更新后旧进程未退出，需手动结束）`;
-            }
-        }
+    const occ = await probePortOccupier(port).catch(() => null);
+    if (occ?.isLcb) {
+        // 401 也带 version（鉴权网关对 /api/status 特批附版本）：加锁后的旧进程仍可被识别；
+        // PID 直取占用者自报（顶层 pid），lcb start 的启动清场（freeLcbOccupiedPort）据此自动接管
+        occupier = `（占用者疑似旧 lcb 进程 v${occ.version}${occ.pid ? `，PID ${occ.pid}` : ''}——npm 更新后旧进程未退出，需手动结束）`;
     }
-    catch { /* 探测失败/非 lcb 服务：走通用文案 */ }
     const probe = process.platform === 'win32'
         ? `netstat -ano | findstr :${port} 查 PID、taskkill /F /PID <pid> 停止`
         : process.platform === 'darwin'
@@ -238,6 +239,7 @@ export async function startWebServer(opts = {}) {
 async function handle(req, res, ctx) {
     const url = new URL(req.url ?? '/', 'http://localhost');
     const path = url.pathname;
+    const configPath = ctx.configPath; // 短别名：鉴权段大量引用
     // 每请求现查（不能用启动快照）：bootstrap 写盘成功后，后续请求立即按「已有配置」处理
     const firstRun = !existsSync(ctx.configPath);
     // 安全闸：Host / Origin 校验（防 DNS rebinding 拿本机页面读写配置）
@@ -246,6 +248,98 @@ async function handle(req, res, ctx) {
         res.end('Forbidden');
         return;
     }
+    // ---- 配置页密码闸：静态资源（html/js/css）公开（页面源码不含秘密）；锁屏本身在前端，
+    // 但数据全部挡在 API 层——所有 /api/*（除登录）必须携带有效会话 cookie，否则 401。
+    // 首装向导 /api/bootstrap 同样被拦：内网他人无法抢在主人之前 bootstrap 配置 ----
+    const sessionToken = readSessionToken(req.headers.cookie);
+    if (path.startsWith('/api/') && path !== '/api/auth/verify') {
+        // 每请求滑动续期：TTL 取当前锁屏设置（改设置即刻约束既有会话；webauth 文件随读随取，
+        // 顺带让 `lcb reset-password` 的改密对运行中的进程即时生效）
+        const okSession = !!sessionToken && touchSession(sessionToken, authMeta(configPath).lockMinutes);
+        if (!okSession) {
+            // /api/status 在 401 里特批附 version+pid：EADDRINUSE 端口占用探测靠它们识别运行中的
+            // lcb 并定位 PID（freeLcbOccupiedPort 自动清场、friendlyAddrInUse 报文案）
+            if (path === '/api/status')
+                return json(res, 401, { error: '配置页已锁定', version: VERSION, pid: process.pid });
+            return json(res, 401, { error: '配置页已锁定，请先解锁' });
+        }
+    }
+    // ---- 配置页密码：登录 / 登出 / 会话元信息 / 改密 / 恢复初始密码 / 锁屏设置 ----
+    if (path === '/api/auth/verify' && req.method === 'POST') {
+        const ip = req.socket.remoteAddress ?? 'unknown';
+        const th = authThrottleState(ip);
+        if (th.blocked)
+            return json(res, 429, { error: `密码尝试过于频繁，请 ${th.retryAfter} 秒后再试` });
+        const body = await readJsonBody(req).catch(() => ({}));
+        if (!verifyPassword(configPath, String(body.password ?? ''))) {
+            registerAuthFailure(ip);
+            return json(res, 401, { error: '密码错误，请重试' });
+        }
+        clearAuthFailures(ip);
+        const meta = authMeta(configPath);
+        const token = createSession(meta.lockMinutes);
+        res.setHeader('Set-Cookie', sessionCookie(token, meta.lockMinutes));
+        // isDefault：仍为默认密码 123456 时前端每次登录都弹「修改默认密码」引导
+        return json(res, 200, { ok: true, isDefault: meta.isDefault, lockMinutes: meta.lockMinutes });
+    }
+    if (path === '/api/auth/meta' && req.method === 'GET') {
+        // 能过鉴权闸才可能走到这里 ⇒ 会话有效；供设置弹窗取锁屏设置与默认密码状态
+        return json(res, 200, { ok: true, ...authMeta(configPath) });
+    }
+    if (path === '/api/auth/logout' && req.method === 'POST') {
+        dropSession(sessionToken);
+        res.setHeader('Set-Cookie', clearSessionCookie());
+        return json(res, 200, { ok: true });
+    }
+    if (path === '/api/auth/change' && req.method === 'POST') {
+        const body = await readJsonBody(req);
+        const r = changePassword(configPath, String(body.old ?? ''), String(body.next ?? ''));
+        if (!r.ok)
+            return json(res, 400, { error: r.error });
+        dropOtherSessions(sessionToken); // 其他标签页/旧会话全部失效，当前页保持登录
+        return json(res, 200, { ok: true, isDefault: false });
+    }
+    if (path === '/api/auth/reset-default' && req.method === 'POST') {
+        // 恢复初始密码 123456：必须验当前密码（防锁屏状态下被内网他人一键重置）
+        const body = await readJsonBody(req);
+        if (!verifyPassword(configPath, String(body.old ?? '')))
+            return json(res, 401, { error: '当前密码不正确' });
+        resetPasswordToDefault(configPath);
+        dropOtherSessions(sessionToken);
+        return json(res, 200, { ok: true, isDefault: true });
+    }
+    if (path === '/api/auth/settings' && req.method === 'PUT') {
+        const body = await readJsonBody(req);
+        const r = setLockMinutes(configPath, Number(body.lockMinutes));
+        if (!r.ok)
+            return json(res, 400, { error: r.error });
+        const lockMinutes = Number(body.lockMinutes);
+        if (sessionToken)
+            touchSession(sessionToken, lockMinutes); // 立即按新 TTL 续期
+        return json(res, 200, { ok: true, lockMinutes });
+    }
+    // ---- 运行日志（概览「查看日志」抽屉）：列表 + 尾部 N 行 + 日期范围聚合 ----
+    if (path === '/api/logs' && req.method === 'GET') {
+        return json(res, 200, listLogFiles(configPath));
+    }
+    if (path === '/api/logs/content' && req.method === 'GET') {
+        const from = url.searchParams.get('from');
+        const to = url.searchParams.get('to');
+        if (from || to) {
+            // 日期范围模式（前端主路径）：from~to 每天日志依时间序合并
+            const r = tailLogRange(configPath, from || to || '', to || from || '', Number(url.searchParams.get('lines')) || 2000);
+            if ('error' in r)
+                return json(res, 400, { error: r.error });
+            return json(res, 200, r);
+        }
+        const file = url.searchParams.get('file');
+        if (!file)
+            return json(res, 400, { error: '缺少查询参数：请传 from/to（日期范围）或 file（单文件名）' });
+        const r = tailLogFile(configPath, file, Number(url.searchParams.get('lines')) || 500);
+        if ('error' in r)
+            return json(res, 400, { error: r.error });
+        return json(res, 200, r);
+    }
     // 静态页与模块：入口单文件 + js/css 目录服务（防穿越见下）
     if (req.method === 'GET' && (path === '/' || path === '/index.html')) {
         try {
@@ -310,6 +404,9 @@ async function handle(req, res, ctx) {
         }
         return json(res, 200, {
             version: VERSION, uptimeMs: Date.now() - startedAt, configPath: ctx.configPath,
+            // 顶层 pid=应答进程自身：前端重启判定/端口占用探测（freeLcbOccupiedPort）直接取用，
+            // 不必回退 netstat 反查。与 bridge.pid（PID 文件内容）区分：独立模式下两者可能不同
+            pid: process.pid,
             firstRun, embedded: ctx.embedded,
             bridge: { ...bridgeStatus(), spawnable: resolveLcbEntry().ok },
             server: { host: ctx.host, port: ctx.port },
@@ -400,6 +497,30 @@ async function handle(req, res, ctx) {
             return json(res, 400, { error: e instanceof Error ? e.message : String(e) });
         }
     }
+    // ---- 会话记录（只读查看器）：LCB 本地 transcripts 时间线 + 话题聚合 + 飞书真群名 ----
+    if (path === '/api/chats/tree' && req.method === 'GET') {
+        if (firstRun)
+            return json(res, 404, { error: '尚无配置文件（首次安装），请先完成 bootstrap 向导' });
+        try {
+            return json(res, 200, await chatsTree(ctx.configPath));
+        }
+        catch (e) {
+            return json(res, 500, { error: `会话树扫描失败：${e instanceof Error ? e.message : String(e)}` });
+        }
+    }
+    if (path === '/api/chats/topics' && req.method === 'GET') {
+        return json(res, 200, chatTopics(url.searchParams.get('app') ?? '', url.searchParams.get('chat') ?? ''));
+    }
+    if (path === '/api/chats/timeline' && req.method === 'GET') {
+        const q = (k) => url.searchParams.get(k) ?? undefined;
+        const limit = Number(q('limit'));
+        return json(res, 200, chatTimeline(q('app') ?? '', q('chat') ?? '', {
+            date: q('date'),
+            session: q('session'),
+            user: q('user'),
+            ...(Number.isFinite(limit) && limit > 0 ? { limit } : {}),
+        }));
+    }
     // ---- B3 一键安装（§6.7 嵌入式流水线）：后台执行 + 进度轮询；失败步骤可整链重跑（幂等跳过） ----
     if (path === '/api/memory/install' && req.method === 'POST') {
         if (firstRun)
@@ -1205,6 +1326,68 @@ async function handle(req, res, ctx) {
         killTree();
         return json(res, 200, result);
     }
+    // ---- 接入申请（配对授权）：配置页「权限 → 接入申请」。数据层直读/直写 access.json——
+    // 桥内 AccessControl 每条消息前 reload，此处批准/拒绝后用户下一条消息即放行；
+    // 终端 lcb pair 双通道并存。申请人真名按 appId 借网关通讯录解析（失败降级原始 id） ----
+    if (path === '/api/access/pending' && req.method === 'GET') {
+        const items = AccessControl.load(join(CONFIG_DIR, 'access.json')).listPendingDetailed();
+        const byApp = new Map();
+        for (const it of items) {
+            if (!it.appId)
+                continue;
+            byApp.set(it.appId, [...(byApp.get(it.appId) ?? []), it.userId]);
+        }
+        const names = new Map();
+        for (const [appId, ids] of byApp) {
+            try {
+                for (const [uid, n] of await fetchUserNames(appId, ids))
+                    names.set(uid, n);
+            }
+            catch { /* 解析失败降级原始 id 展示 */ }
+        }
+        let appNames = new Map();
+        try {
+            appNames = new Map((loadConfig(ctx.configPath)?.apps ?? []).map((a) => [a.appId, a.name || a.appId]));
+        }
+        catch { /* 配置损坏降级 appId */ }
+        return json(res, 200, {
+            pending: items.map((it) => {
+                const n = names.get(it.userId);
+                return {
+                    userId: it.userId,
+                    name: it.name,
+                    code: it.code,
+                    appId: it.appId,
+                    appName: it.appId ? appNames.get(it.appId) : undefined,
+                    displayName: n && n !== it.userId ? n : undefined,
+                    expiresAt: it.expiresAt,
+                    expiresInSec: Math.max(0, Math.round((it.expiresAt - Date.now()) / 1000)),
+                };
+            }),
+        });
+    }
+    if (path === '/api/access/pending/approve' && req.method === 'POST') {
+        const body = await readJsonBody(req);
+        const code = String(body.code ?? '').trim();
+        if (!/^\d{6}$/.test(code))
+            return json(res, 400, { error: '配对码格式不正确（6 位数字）' });
+        const r = AccessControl.load(join(CONFIG_DIR, 'access.json')).approvePairing(code);
+        if (!r.ok)
+            return json(res, 404, { error: r.error ?? '配对码无效或已过期' });
+        console.log(`[配对] 配置页批准配对码 ${code}（用户 ${r.userId}${r.isFirstAdmin ? '，成为 admin' : '，member'}）`);
+        return json(res, 200, { ok: true, userId: r.userId, isFirstAdmin: r.isFirstAdmin });
+    }
+    if (path === '/api/access/pending/reject' && req.method === 'POST') {
+        const body = await readJsonBody(req);
+        const code = String(body.code ?? '').trim();
+        if (!/^\d{6}$/.test(code))
+            return json(res, 400, { error: '配对码格式不正确（6 位数字）' });
+        const ok = AccessControl.load(join(CONFIG_DIR, 'access.json')).rejectPairing(code);
+        if (!ok)
+            return json(res, 404, { error: '配对码无效或已过期' });
+        console.log(`[配对] 配置页拒绝配对码 ${code}`);
+        return json(res, 200, { ok: true });
+    }
     // ---- 桥接器进程启停（页面托管）。embedded 与 lcb ui 独立模式语义不同：embedded 停止/重启
     // 会连带本页所在进程，先回响应再走 selfStop 优雅关闭；独立模式经 PID 文件跨进程操作 ----
     if (path === '/api/bridge/action' && req.method === 'POST') {