@logicseek/hello-cc 1.0.2 → 1.1.0-rc.1

package/lib/web/tls.mjs

@@ -5,12 +5,18 @@ import { spawnSync } from 'node:child_process';
 import { createPublicKey, randomBytes, X509Certificate } from 'node:crypto';
 import { isIP } from 'node:net';
 import { CliError } from '../shared/errors.mjs';
-import { globalStateDir } from '../runtime/paths.mjs';
+import { ensurePrivateGlobalSubdirectory } from '../runtime/private-state.mjs';
+import { readPrivateTextFile } from '../runtime/private-file.mjs';
+import { unsafeDirectoryAcl } from '../runtime/project-trust.mjs';
 
 const CERT_RENEW_BEFORE_MS = 7 * 24 * 60 * 60 * 1000;
 const GENERATION_CLEANUP_GRACE_MS = 60 * 60 * 1000;
 const GENERATION_NAME_RE = /^generation-[a-z0-9-]+$/i;
 const OWNED_GENERATION_NAME_RE = /^generation-[a-z0-9]+-(\d+)-[a-f0-9]+$/i;
+const TLS_KEY_MAX_BYTES = 16384;
+const TLS_CERT_MAX_BYTES = 65536;
+const TLS_POINTER_MAX_BYTES = 16384;
+const TLS_MARKER_MAX_BYTES = 128;
 
 // hello-cc can serve the web console over HTTPS with an auto-generated
 // self-signed certificate. This protects against passive LAN sniffing of the
@@ -93,10 +99,48 @@ export function tlsCredentialsAreReusable({ key, cert, sanEntries, nowMs = Date.
   }
 }
 
+// The tls/ parent is validated before this module runs, but a generation may
+// have been planted while an older installation still left that parent public.
+// Do not follow or repair a foreign, redirected, or cross-UID-writable child.
+function trustedTlsDirectory(directory, { tighten = false } = {}) {
+  let fd;
+  try {
+    const before = fs.lstatSync(directory, { bigint: true });
+    if (before.isSymbolicLink() || !before.isDirectory() ||
+        before.uid !== BigInt(process.getuid())) return null;
+    fd = fs.openSync(directory, fs.constants.O_RDONLY |
+      fs.constants.O_DIRECTORY | fs.constants.O_NOFOLLOW);
+    let opened = fs.fstatSync(fd, { bigint: true });
+    if (!opened.isDirectory() || opened.dev !== before.dev || opened.ino !== before.ino ||
+        opened.uid !== before.uid || (opened.mode & 0o022n) !== 0n ||
+        unsafeDirectoryAcl(directory, opened)) return null;
+    if (tighten && (opened.mode & 0o777n) !== 0o700n) {
+      fs.fchmodSync(fd, 0o700);
+      opened = fs.fstatSync(fd, { bigint: true });
+      if ((opened.mode & 0o777n) !== 0o700n) return null;
+    }
+    const after = fs.lstatSync(directory, { bigint: true });
+    if (after.isSymbolicLink() || after.dev !== opened.dev || after.ino !== opened.ino ||
+        after.uid !== opened.uid) return null;
+    return opened;
+  } catch {
+    return null;
+  } finally {
+    if (fd !== undefined) fs.closeSync(fd);
+  }
+}
+
+function readPrivateMarker(file) {
+  try { return readPrivateTextFile(file, { maxBytes: TLS_MARKER_MAX_BYTES }); }
+  catch { return null; }
+}
+
 function readReusableCredentials(keyPath, certPath, sanEntries) {
   try {
-    const key = fs.readFileSync(keyPath, 'utf8');
-    const cert = fs.readFileSync(certPath, 'utf8');
+    if (!trustedTlsDirectory(path.dirname(keyPath), { tighten: true })) return null;
+    const key = readPrivateTextFile(keyPath, { maxBytes: TLS_KEY_MAX_BYTES });
+    const cert = readPrivateTextFile(certPath, { maxBytes: TLS_CERT_MAX_BYTES });
+    if (key === null || cert === null) return null;
     if (!tlsCredentialsAreReusable({ key, cert, sanEntries })) return null;
     return { key, cert, certPath };
   } catch {
@@ -165,7 +209,11 @@ function generateCredentials(dir, keyPath, certPath, sanEntries) {
 
 function readCurrentGeneration(dir) {
   try {
-    const pointer = JSON.parse(fs.readFileSync(path.join(dir, 'current.json'), 'utf8'));
+    const text = readPrivateTextFile(path.join(dir, 'current.json'), {
+      maxBytes: TLS_POINTER_MAX_BYTES
+    });
+    if (text === null) return null;
+    const pointer = JSON.parse(text);
     const generation = String(pointer?.generation || '');
     return GENERATION_NAME_RE.test(generation) ? generation : null;
   } catch {
@@ -188,12 +236,12 @@ function generationCreationIsActive(generationDir, generation) {
   const nameMatch = generation.match(OWNED_GENERATION_NAME_RE);
   const namePid = nameMatch ? Number.parseInt(nameMatch[1], 10) : null;
   try {
-    const ownerPid = Number.parseInt(fs.readFileSync(creatingPath, 'utf8').trim(), 10);
+    const ownerPid = Number.parseInt(readPrivateMarker(creatingPath)?.trim(), 10);
     if (Number.isInteger(ownerPid) && ownerPid > 0 && (!namePid || ownerPid === namePid)) {
       return processIsAlive(ownerPid);
     }
   } catch {}
-  if (fs.existsSync(path.join(generationDir, '.published'))) return false;
+  if (readPrivateMarker(path.join(generationDir, '.published')) !== null) return false;
 
   // Backward compatibility for generations created before lifecycle markers
   // were added, including the mkdir-to-marker window in a concurrent creator.
@@ -214,19 +262,23 @@ function writeGenerationCreatingMarker(generationDir) {
 function markGenerationPublished(generationDir) {
   const creatingPath = path.join(generationDir, '.creating');
   const publishedPath = path.join(generationDir, '.published');
+  if (readPrivateMarker(creatingPath) !== null) {
+    try { fs.renameSync(creatingPath, publishedPath); return; } catch {}
+  }
+  if (readPrivateMarker(publishedPath) !== null) return;
+  let fd;
   try {
-    fs.renameSync(creatingPath, publishedPath);
+    fd = fs.openSync(publishedPath, fs.constants.O_WRONLY | fs.constants.O_CREAT |
+      fs.constants.O_EXCL | fs.constants.O_NOFOLLOW, 0o600);
+    fs.writeFileSync(fd, `${process.pid}\n`);
   } catch {
-    try { fs.writeFileSync(publishedPath, `${process.pid}\n`, { mode: 0o600 }); } catch {}
-    if (fs.existsSync(publishedPath)) {
-      try { fs.rmSync(creatingPath, { force: true }); } catch {}
-    }
+    // A bad preexisting marker must not block use of otherwise safe credentials.
+  } finally {
+    if (fd !== undefined) fs.closeSync(fd);
   }
-  try { fs.chmodSync(publishedPath, 0o600); } catch {}
 }
 
 function currentGenerationCredentials(dir, sanEntries) {
-  const pointerPath = path.join(dir, 'current.json');
   try {
     const generation = readCurrentGeneration(dir);
     if (!generation) return null;
@@ -235,10 +287,6 @@ function currentGenerationCredentials(dir, sanEntries) {
     const certPath = path.join(generationDir, 'self-signed.crt');
     const credentials = readReusableCredentials(keyPath, certPath, sanEntries);
     if (!credentials) return null;
-    try { fs.chmodSync(generationDir, 0o700); } catch {}
-    try { fs.chmodSync(keyPath, 0o600); } catch {}
-    try { fs.chmodSync(certPath, 0o600); } catch {}
-    try { fs.chmodSync(pointerPath, 0o600); } catch {}
     markGenerationPublished(generationDir);
     return credentials;
   } catch {
@@ -252,7 +300,6 @@ function publishGeneration(dir, generation) {
   try {
     fs.writeFileSync(tmpPointerPath, `${JSON.stringify({ generation })}\n`, { mode: 0o600 });
     fs.renameSync(tmpPointerPath, pointerPath);
-    try { fs.chmodSync(pointerPath, 0o600); } catch {}
   } finally {
     try { fs.rmSync(tmpPointerPath, { force: true }); } catch {}
   }
@@ -266,11 +313,8 @@ function pruneOldGenerations(dir, t = Date.now()) {
     const generations = fs.readdirSync(dir, { withFileTypes: true })
       .filter((entry) => entry.isDirectory() && GENERATION_NAME_RE.test(entry.name))
       .map((entry) => {
-        try {
-          return { name: entry.name, mtimeMs: fs.statSync(path.join(dir, entry.name)).mtimeMs };
-        } catch {
-          return null;
-        }
+        const stat = trustedTlsDirectory(path.join(dir, entry.name));
+        return stat ? { name: entry.name, mtimeMs: Number(stat.mtimeMs), dev: stat.dev, ino: stat.ino } : null;
       })
       .filter(Boolean)
       .sort((a, b) => b.mtimeMs - a.mtimeMs);
@@ -279,12 +323,17 @@ function pruneOldGenerations(dir, t = Date.now()) {
     for (const generation of generations) {
       if (generation.name === current) continue;
       const generationDir = path.join(dir, generation.name);
-      const hasCreatingMarker = fs.existsSync(path.join(generationDir, '.creating'));
+      const hasCreatingMarker = readPrivateMarker(path.join(generationDir, '.creating')) !== null;
       if (generationCreationIsActive(generationDir, generation.name)) continue;
       let complete = false;
       try {
-        complete = fs.statSync(path.join(generationDir, 'self-signed.key')).size > 0 &&
-          fs.statSync(path.join(generationDir, 'self-signed.crt')).size > 0;
+        const key = readPrivateTextFile(path.join(generationDir, 'self-signed.key'), {
+          maxBytes: TLS_KEY_MAX_BYTES
+        });
+        const cert = readPrivateTextFile(path.join(generationDir, 'self-signed.crt'), {
+          maxBytes: TLS_CERT_MAX_BYTES
+        });
+        complete = Boolean(key?.length && cert?.length);
       } catch {}
       if (!keptPrevious && complete && !hasCreatingMarker) {
         keptPrevious = true;
@@ -293,9 +342,15 @@ function pruneOldGenerations(dir, t = Date.now()) {
       // A concurrently generated directory may not be published yet. Leave
       // recent candidates alone; a later startup will collect stale losers.
       if (t - generation.mtimeMs < GENERATION_CLEANUP_GRACE_MS) continue;
-      // current.json can change while this best-effort scan is running.
-      if (readCurrentGeneration(dir) === generation.name) continue;
+      // current.json can change while this best-effort scan is running. An
+      // unreadable or concurrently replaced pointer is not proof that this
+      // generation is stale, so leave cleanup for a later startup.
+      const latestCurrent = readCurrentGeneration(dir);
+      if (!latestCurrent) return;
+      if (latestCurrent === generation.name) continue;
       if (generationCreationIsActive(generationDir, generation.name)) continue;
+      const beforeDelete = trustedTlsDirectory(generationDir);
+      if (!beforeDelete || beforeDelete.dev !== generation.dev || beforeDelete.ino !== generation.ino) continue;
       try { fs.rmSync(generationDir, { recursive: true, force: true }); } catch {}
     }
   } catch {
@@ -338,10 +393,8 @@ function createGeneration(dir, sanEntries, source = null) {
  * browser trust decision is stable.
  */
 export function ensureSelfSignedCert(extraHosts = []) {
-  const dir = path.join(globalStateDir(), 'tls');
+  const dir = ensurePrivateGlobalSubdirectory('tls');
   const sanEntries = lanIpSanEntries(Array.isArray(extraHosts) ? extraHosts : [extraHosts]);
-  fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-  try { fs.chmodSync(dir, 0o700); } catch {}
 
   const existing = currentGenerationCredentials(dir, sanEntries);
   if (existing) {
@@ -356,8 +409,6 @@ export function ensureSelfSignedCert(extraHosts = []) {
     sanEntries
   );
   if (legacy) {
-    try { fs.chmodSync(path.join(dir, 'self-signed.key'), 0o600); } catch {}
-    try { fs.chmodSync(path.join(dir, 'self-signed.crt'), 0o600); } catch {}
     return createGeneration(dir, sanEntries, legacy);
   }
 

package/lib/web/tmux-sessions.mjs

@@ -801,7 +801,7 @@ export function createTmuxSessions(deps) {
 
   function writeSessionInput(session, data) {
     if (session.type === 'external') {
-      fs.appendFileSync(session.inFile, data);
+      fs.appendFileSync(session.inFile, data, { mode: 0o600 });
     } else if (session.type === 'tmux') {
       tmuxSendLiteral(session.pane, data);
       scheduleTmuxInputRefresh(session);
@@ -822,7 +822,7 @@ export function createTmuxSessions(deps) {
 
   function resizeSession(session, cols, rows) {
     if (session.type === 'external') {
-      try { fs.appendFileSync(session.resizeFile, JSON.stringify({ cols, rows }) + '\n'); } catch {}
+      try { fs.appendFileSync(session.resizeFile, JSON.stringify({ cols, rows }) + '\n', { mode: 0o600 }); } catch {}
     } else if (session.type === 'tmux') {
       // Resize the tmux window to match the browser terminal so the captured
       // mirror has identical geometry — a prerequisite for accurate cursor

package/lib/web/tmux-stream.mjs

@@ -7,12 +7,12 @@ import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { runTmux, tmuxCapturePane, tmuxCursorInfo, tmuxCursorPayload } from '../terminal/tmux.mjs';
 import { CliError } from '../shared/errors.mjs';
+import { ensurePrivateProjectBufferDirectory } from '../runtime/project-path.mjs';
 
 export function createTmuxStream({
   broadcast,
   now,
   refreshPeerIoHeartbeat,
-  bufferDirectory,
   withBufferDirectoryLease,
   shellQuoteArg,
   ctx
@@ -69,8 +69,7 @@ export function createTmuxStream({
   function startTmuxStream(session) {
     const safePane = String(session.pane).replace(/[^A-Za-z0-9_-]/g, '');
     const safeId = String(session.id).replace(/[^A-Za-z0-9_.-]/g, '_');
-    const streamDirectory = bufferDirectory(session.ctx || ctx);
-    fs.mkdirSync(streamDirectory, { recursive: true });
+    const streamDirectory = ensurePrivateProjectBufferDirectory((session.ctx || ctx).root);
     const pipeFile = path.join(streamDirectory, `tmux-${safePane}-${safeId}.pipe`);
     session.pipeFile = pipeFile;
     try { runTmux(['pipe-pane', '-t', session.pane]); } catch {}
@@ -89,7 +88,7 @@ export function createTmuxStream({
           const message = (mkfifo.stderr || mkfifo.stdout || '').trim() || 'mkfifo failed';
           throw new CliError('TMUX_STREAM_ERROR', message);
         }
-        try { fs.chmodSync(pipeFile, 0o600); } catch {}
+        fs.chmodSync(pipeFile, 0o600);
         session.streamFd = fs.openSync(pipeFile, fs.constants.O_RDONLY | fs.constants.O_NONBLOCK);
       });
     } catch (err) {

package/lib/web/ui-codex.mjs

@@ -42,6 +42,11 @@ export function codexPanelHtml() {
     .codex-code-header { display:flex; align-items:center; justify-content:space-between; padding:4px 8px; color:var(--muted); font-size:var(--small-font); border-bottom:1px solid var(--border); }
     .codex-code-header button { font-size:var(--small-font); min-height:28px; padding:3px 8px; }
     .codex-code pre { margin:0; padding:10px 12px; overflow:auto; white-space:pre; font-family:var(--mono); font-size:var(--small-font); line-height:1.6; }
+    .codex-segment-nav { display:flex; flex-wrap:wrap; align-items:center; gap:6px; padding:6px 8px; border-bottom:1px solid var(--border); }
+    .codex-segment-nav button { min-height:32px; font-size:var(--small-font); padding:4px 8px; }
+    .codex-segment-nav span { color:var(--muted); font-size:var(--small-font); margin-right:auto; }
+    .codex-code [data-segment-content] pre { max-height:360px; }
+    .codex-code-prose pre { white-space:pre-wrap; overflow-wrap:anywhere; font-family:inherit; font-size:var(--body-font); }
     .codex-diff-add { color:var(--ok); } .codex-diff-remove { color:var(--danger); } .codex-diff-header { color:var(--accent); }
     .codex-review { max-width:900px; margin:16px auto 0; border-top:1px solid var(--border); padding-top:12px; }
     .codex-review h3 { font-size:var(--small-font); margin:14px 0 6px; }
@@ -58,7 +63,11 @@ export function codexPanelHtml() {
     .hcc-interaction-form label { display:grid; gap:5px; overflow-wrap:anywhere; }
     .hcc-interaction-form label:has(input[type=checkbox]) { display:flex; align-items:flex-start; }
     .hcc-interaction-form input:not([type=checkbox]), .hcc-interaction-form select { width:100%; min-height:36px; min-width:0; background:var(--input-bg); color:var(--text); border:1px solid var(--border); border-radius:6px; padding:6px; }
-    .codex-approval-actions { display:flex; gap:8px; margin-top:12px; }
+    .hcc-mcp-field { min-width:0; border:1px solid var(--border); border-radius:6px; padding:10px; }
+    .hcc-mcp-field legend,.hcc-mcp-field p { overflow-wrap:anywhere; }
+    .hcc-mcp-field small { color:var(--muted); }
+    .hcc-mcp-field .sr-only { position:absolute; width:1px; height:1px; overflow:hidden; clip-path:inset(50%); }
+    .codex-approval-actions { display:flex; flex-wrap:wrap; gap:8px; margin-top:12px; }
     .codex-jump { flex:none; text-align:center; padding:6px; border-top:1px solid var(--border); }
     .codex-composer { flex:none; padding:12px 16px; border-top:1px solid var(--border); background:var(--panel); max-height:40%; overflow:auto; }
     .codex-composer-inner { max-width:900px; margin:auto; }
@@ -71,6 +80,8 @@ export function codexPanelHtml() {
       .codex-header, .codex-scroll, .codex-composer { padding-left:12px; padding-right:12px; }
       .codex-card { padding:10px; } .codex-card-agent { padding:2px; }
       .codex-composer-actions button { min-height:36px; }
+      .codex-segment-nav span { flex-basis:100%; }
+      .codex-segment-nav button { min-height:44px; flex:1; }
       .codex-approval dl { grid-template-columns:1fr; gap:3px; } .codex-approval dd { margin-bottom:6px; }
     }
   </style>
@@ -102,8 +113,11 @@ export function codexPanelScript() {
     const views = new Map();
     const approving = new Set();
     const PAGE_SIZE = 80;
+    const SEGMENT_CHARS = 12000, SEGMENT_LINES = 200;
     let copies = [], timelineHtml = '', timelineSignature = '', timelineCopies = [], entries = [];
+    let blocks = [], timelineBlocks = [], blockScope = '', blockOrder = 0;
     let state = null, key = '', pending = null, submitting = false;
+    let stateRevision = 0, subjectRevision = 0, readSequence = 0;
     const text = (en, zh) => window.hccUi.language === 'zh' ? zh : en;
     const bridge = () => window.hccHandoff;
     const escape = (value) => bridge().esc(String(value ?? ''));
@@ -118,7 +132,7 @@ export function codexPanelScript() {
     function turnId() { return state?.turnId || activeThread()?.activeTurnId || ''; }
     function view() {
       if (!views.has(key)) {
-        views.set(key, { top: 0, follow: true, unread: false, signature: '', details: new Map(), startKey: '', start: 0, end: 0, total: 0 });
+        views.set(key, { top: 0, follow: true, unread: false, signature: '', details: new Map(), textPages: new Map(), codeScroll: new Map(), startKey: '', start: 0, end: 0, total: 0 });
         if (views.size > 20) views.delete(views.keys().next().value);
       }
       return views.get(key);
@@ -145,16 +159,57 @@ export function codexPanelScript() {
       };
       return labels[status] || String(status || '');
     }
-    function codeBlock(value, language = '', diff = false) {
-      const content = String(value ?? ''), index = copies.push(content) - 1;
-      const body = diff ? content.split('\n').map(line => {
+    function segmentRanges(content) {
+      const ranges = [];
+      let start = 0;
+      while (start < content.length) {
+        let end = Math.min(content.length, start + SEGMENT_CHARS), cursor = start;
+        for (let lines = 0; lines < SEGMENT_LINES; lines += 1) {
+          const newline = content.indexOf('\n', cursor);
+          if (newline === -1 || newline >= end) break;
+          cursor = newline + 1;
+          if (lines === SEGMENT_LINES - 1) end = cursor;
+        }
+        // A page boundary must not split an emoji or another surrogate pair.
+        if (end < content.length && /[\uD800-\uDBFF]/.test(content[end - 1]) && /[\uDC00-\uDFFF]/.test(content[end])) end -= 1;
+        ranges.push([start, end]); start = end;
+      }
+      return ranges;
+    }
+    function codeBody(content, diff) {
+      return diff ? content.split('\n').map(line => {
         const cls = line.startsWith('@@') || line.startsWith('diff ') || line.startsWith('+++') || line.startsWith('---')
           ? 'codex-diff-header' : line.startsWith('+') ? 'codex-diff-add' : line.startsWith('-') ? 'codex-diff-remove' : '';
         return '<span class="' + cls + '">' + escape(line) + '</span>';
       }).join('\n') : escape(content);
-      return '<div class="codex-code"><div class="codex-code-header"><span>' + escape(language || text('Text', '文本'))
-        + '</span><button type="button" data-copy="' + index + '">' + escape(text('Copy', '复制'))
-        + '</button></div><pre><code>' + body + '</code></pre></div>';
+    }
+    function segmentBody(block, index) {
+      const [start, end] = block.ranges[block.page];
+      const button = (action, label, disabled) => '<button type="button" data-segment="' + index + '" data-segment-action="' + action + '"'
+        + (disabled ? ' disabled' : '') + '>' + escape(label) + '</button>';
+      return '<nav class="codex-segment-nav" aria-label="' + escape(text('Text sections', '内容分段')) + '"><span role="status" tabindex="-1">'
+        + escape(text('Section ', '第 ') + (block.page + 1) + text(' of ', ' / ') + block.ranges.length + text(' · Full text available', ' 段 · 可查阅全文'))
+        + '</span>' + button('first', text('First', '首段'), block.page === 0)
+        + button('previous', text('Previous', '上一段'), block.page === 0)
+        + button('next', text('Next', '下一段'), block.page === block.ranges.length - 1)
+        + button('last', text('Last', '末段'), block.page === block.ranges.length - 1)
+        + '</nav><pre tabindex="0" data-code-page="' + block.page + '"><code>' + codeBody(block.content.slice(start, end), block.diff) + '</code></pre>';
+    }
+    function codeBlock(value, language = '', diff = false, plain = false, identityScope = '') {
+      const content = String(value ?? ''), index = copies.push(content) - 1;
+      const ranges = segmentRanges(content), identity = identityScope || blockScope + ':' + blockOrder++;
+      let body, blockIndex = -1;
+      if (ranges.length > 1) {
+        blockIndex = blocks.length;
+        const page = Math.min(view().textPages.get(identity) || 0, ranges.length - 1);
+        const block = { content, ranges, diff, page, identity };
+        blocks.push(block);
+        body = '<div data-segment-content>' + segmentBody(block, blockIndex) + '</div>';
+      } else body = '<pre data-code-page="0"><code>' + codeBody(content, diff) + '</code></pre>';
+      return '<div class="codex-code' + (plain ? ' codex-code-prose' : '') + '" data-code-key="' + escape(identity) + '"' + (blockIndex < 0 ? '' : ' data-segment-block="' + blockIndex + '"')
+        + '><div class="codex-code-header"><span>' + escape(language || text('Text', '文本'))
+        + '</span><button type="button" data-copy="' + index + '">' + escape(ranges.length > 1 ? text('Copy full text', '复制全文') : text('Copy', '复制'))
+        + '</button></div>' + body + '</div>';
     }
     function inline(value, allowBold = true) {
       const tick = String.fromCharCode(96), source = String(value), fragments = [];
@@ -225,7 +280,9 @@ export function codexPanelScript() {
       return '<div class="codex-markdown">' + parts.join('') + '</div>';
     }
     function prose(value) {
-      const fence = String.fromCharCode(96).repeat(3), lines = String(value ?? '').split('\n');
+      const content = String(value ?? '');
+      if (segmentRanges(content).length > 1) return codeBlock(content, text('Long message · Plain-text sections', '长消息 · 纯文本分段'), false, true);
+      const fence = String.fromCharCode(96).repeat(3), lines = content.split('\n');
       let html = '', plain = [], code = [], language = '', inCode = false;
       const flush = () => { if (plain.length) html += markdown(plain.join('\n')); plain = []; };
       for (const line of lines) {
@@ -250,6 +307,7 @@ export function codexPanelScript() {
     }
     function itemCard(item, turn, index) {
       const type = item.type || '', id = turn.id + ':' + (item.id || index), content = itemText(item);
+      blockScope = 'item:' + id; blockOrder = 0;
       const error = item.status === 'failed' || item.error || (item.exitCode != null && item.exitCode !== 0);
       const status = '<span class="codex-status' + (error ? ' codex-status-failed' : '') + '">' + escape(error ? text('Failed', '失败') : statusLabel(item.status)) + '</span>';
       if (type === 'userMessage' || type === 'agentMessage') {
@@ -297,14 +355,64 @@ export function codexPanelScript() {
         node.addEventListener('toggle', () => { if (key === currentKey && node.isConnected !== false) view().details.set(node.dataset.detailsKey, node.open); });
       });
       container.querySelectorAll('button[data-copy]').forEach(button => {
-        const content = copies[Number(button.dataset.copy)];
         button.addEventListener('click', async () => {
+          if (key !== currentKey || button.isConnected === false) return;
+          // A hidden section may change while the visible HTML stays identical.
+          const content = copies[Number(button.dataset.copy)];
           try {
             await navigator.clipboard.writeText(content);
             button.textContent = text('Copied', '已复制');
           } catch (_) { button.textContent = text('Select text to copy', '请选择文本复制'); }
         });
       });
+      bindSegmentActions(container);
+      bindCodeScroll(container);
+    }
+    function bindCodeScroll(container) {
+      const currentKey = key;
+      container.querySelectorAll('pre[data-code-page]').forEach(pre => {
+        const identity = pre.closest('[data-code-key]')?.dataset.codeKey;
+        if (!identity) return;
+        const page = Number(pre.dataset.codePage), saved = view().codeScroll.get(identity);
+        if (saved?.page === page) { pre.scrollTop = saved.top; pre.scrollLeft = saved.left; }
+        // Scroll events from restoration are asynchronous. Ignore unchanged
+        // coordinates so restoring a block never opts out of follow mode.
+        let top = pre.scrollTop, left = pre.scrollLeft;
+        pre.addEventListener('scroll', () => {
+          if (key !== currentKey || pre.isConnected === false || (top === pre.scrollTop && left === pre.scrollLeft)) return;
+          top = pre.scrollTop; left = pre.scrollLeft;
+          const reading = view();
+          reading.codeScroll.set(identity, { page, top, left });
+          if (reading.codeScroll.size > 256) reading.codeScroll.delete(reading.codeScroll.keys().next().value);
+          if (top || left) { reading.follow = false; reading.top = scroller.scrollTop; updateJump(); }
+        });
+      });
+    }
+    function bindSegmentActions(container) {
+      const currentKey = key;
+      container.querySelectorAll('button[data-segment]').forEach(button => {
+        const index = Number(button.dataset.segment);
+        button.addEventListener('click', () => {
+          const block = blocks[index];
+          if (key !== currentKey || button.isConnected === false || !block) return;
+          const action = button.dataset.segmentAction;
+          block.page = Math.max(0, Math.min(block.ranges.length - 1,
+            action === 'first' ? 0 : action === 'last' ? block.ranges.length - 1 : block.page + (action === 'next' ? 1 : -1)));
+          view().textPages.set(block.identity, block.page);
+          view().codeScroll.delete(block.identity);
+          if (view().textPages.size > 256) view().textPages.delete(view().textPages.keys().next().value);
+          const wrapper = button.closest('[data-segment-block]'), body = wrapper.querySelector('[data-segment-content]');
+          const top = wrapper.getBoundingClientRect().top, oldTop = scroller.scrollTop;
+          view().follow = false;
+          body.innerHTML = segmentBody(block, index);
+          bindSegmentActions(body);
+          bindCodeScroll(body);
+          const focus = body.querySelector('button[data-segment-action="' + action + '"]:not(:disabled)') || body.querySelector('[role="status"]');
+          focus?.focus({ preventScroll: true });
+          scroller.scrollTop = oldTop + wrapper.getBoundingClientRect().top - top;
+          view().top = scroller.scrollTop; updateJump();
+        });
+      });
     }
     function renderTimeline(turns, reading) {
       // Page by items rather than turns: a single tool-heavy turn can contain hundreds of cards.
@@ -327,7 +435,7 @@ export function codexPanelScript() {
       if (!reading.follow && reading.signature && reading.signature !== updateSignature) reading.unread = true;
       reading.signature = updateSignature;
       if (signature !== timelineSignature) {
-        copies = [];
+        copies = []; blocks = [];
         let previousTurn = null;
         let html = visible.map(({ turn, turnIndex, item, index }) => {
           let heading = '';
@@ -344,8 +452,8 @@ export function codexPanelScript() {
           document.getElementById('codexTimeline').innerHTML = html;
           timelineHtml = html; bindReadActions(document.getElementById('codexTimeline'));
         }
-        timelineSignature = signature; timelineCopies = copies.slice();
-      } else copies = timelineCopies.slice();
+        timelineSignature = signature; timelineCopies = copies.slice(); timelineBlocks = blocks.slice();
+      } else { copies = timelineCopies.slice(); blocks = timelineBlocks.slice(); }
       document.getElementById('codexHistory').hidden = entries.length <= PAGE_SIZE;
       document.getElementById('codexHistory').setAttribute('aria-label', text('Conversation history', '会话历史'));
       document.getElementById('codexEarlier').textContent = text('Earlier', '更早记录');
@@ -358,9 +466,10 @@ export function codexPanelScript() {
     function sync() {
       const next = draftKey();
       if (next !== key) {
+        subjectRevision += 1;
         if (key && state) view().top = scroller.scrollTop || 0;
         key = next; pending = null; draft.value = ''; state = null;
-        timelineHtml = ''; timelineSignature = ''; timelineCopies = []; copies = []; entries = [];
+        timelineHtml = ''; timelineSignature = ''; timelineCopies = []; copies = []; entries = []; blocks = []; timelineBlocks = [];
         document.getElementById('codexHistory').hidden = true;
         for (const id of ['codexStatus', 'codexTimeline', 'codexDiff', 'codexPlan', 'codexApprovals', 'codexSubmission']) document.getElementById(id).textContent = '';
         document.getElementById('codexReview').open = view().details.get('review') || false;
@@ -397,7 +506,10 @@ export function codexPanelScript() {
         { method: 'POST', body: JSON.stringify({ ...body, action_token: target.token, epoch: target.epoch }) });
     }
     function render(value, resetScroll = false) {
-      sync(); state = value; sync();
+      sync();
+      // Local paging and preference redraws reuse state; incoming snapshots do not.
+      if (value !== state) stateRevision += 1;
+      state = value; sync();
       const thread = activeThread();
       document.getElementById('codexStatus').textContent = [text('Executor', '执行器') + ': ' + statusLabel(state.status),
         text('Thread', '会话') + ': ' + (thread?.id || ''), turnId() ? text('Turn', '当前轮') + ': ' + turnId() : text('Idle', '空闲'),
@@ -410,12 +522,13 @@ export function codexPanelScript() {
       renderTimeline(turns, reading);
       const last = turns[turns.length - 1];
       const plan = Array.isArray(last?.plan) ? last.plan : [];
+      blockScope = 'plan:' + last?.id; blockOrder = 0;
       document.getElementById('codexPlan').innerHTML = plan.length ? '<h3>' + escape(text('Plan', '执行计划')) + '</h3>'
         + (last.explanation ? prose(last.explanation) : '') + '<ol class="codex-plan">' + plan.map(step =>
           '<li data-status="' + escape(step.status || '') + '"><span>' + escape(statusLabel(step.status)) + '</span><span>'
           + escape(step.step || '') + '</span></li>').join('') + '</ol>' : '';
       document.getElementById('codexDiff').innerHTML = last?.diff ? '<h3>' + escape(text('Latest turn · Executor-reported changes', '最新一轮 · 执行器报告的变更'))
-        + '</h3>' + codeBlock(last.diff, text('Diff', '差异'), true) : '';
+        + '</h3>' + codeBlock(last.diff, text('Diff', '差异'), true, false, 'review:diff:' + last.id) : '';
       const review = document.getElementById('codexReview');
       review.hidden = !last?.diff && !plan.length;
       bindReadActions(document.getElementById('codexPlan'));
@@ -425,22 +538,28 @@ export function codexPanelScript() {
       const container = document.getElementById('codexApprovals');
       window.hccInteractions.remember(container);
       container.innerHTML = approvals.map((approval, index) => {
+        blockScope = 'approval:' + executorId + ':' + approval.requestId; blockOrder = 0;
         const params = approval.params || {}, fields = [
-          [text('Operation', '操作'), approval.kind === 'userInput' ? text('Answer questions', '回答问题') : approval.kind === 'permissions' ? text('Grant permissions', '授予权限') : approval.method?.includes('fileChange') ? text('Change files', '修改文件') : text('Run command', '执行命令')],
+          [text('Operation', '操作'), approval.kind === 'mcp' ? text('MCP request', 'MCP 请求') : approval.kind === 'userInput' ? text('Answer questions', '回答问题') : approval.kind === 'permissions' ? text('Grant permissions', '授予权限') : approval.method?.includes('fileChange') ? text('Change files', '修改文件') : text('Run command', '执行命令')],
           [text('Command', '命令'), params.command], [text('Directory', '目录'), params.cwd],
-          [text('Reason', '原因'), params.reason], [text('Path', '路径'), params.path],
+          [text('MCP server', 'MCP 服务'), params.serverName], [text('Reason', '原因'), params.reason || params.message], [text('Path', '路径'), params.path],
           [text('Permission root', '权限目录'), params.grantRoot]
         ].filter(([, value]) => value != null && value !== '');
-        return '<article class="codex-card codex-approval"><h3>' + escape(approval.kind === 'userInput' ? text('Your input is required', '等待您的答复') : text('Approval required', '等待人工审批'))
-          + '</h3><dl>' + fields.map(([label, value]) => '<dt>' + escape(label) + '</dt><dd>'
-          + escape(typeof value === 'string' ? value : JSON.stringify(value)) + '</dd>').join('') + '</dl>'
+        return '<article class="codex-card codex-approval"><h3>' + escape(window.hccInteractions.requiresInput(approval) ? text('Your input is required', '等待您的答复') : text('Approval required', '等待人工审批'))
+          + '</h3><dl>' + fields.map(([label, value], fieldIndex) => {
+            const fullValue = typeof value === 'string' ? value : JSON.stringify(value);
+            return '<dt>' + escape(label) + '</dt><dd>'
+              + (segmentRanges(fullValue).length > 1 ? codeBlock(fullValue, text('Full value', '完整字段'), false, true, blockScope + ':field:' + fieldIndex) : escape(fullValue))
+              + '</dd>';
+          }).join('') + '</dl>'
           + (approval.truncated ? '<p class="codex-prose">' + escape(text('Parameters are truncated. Read the full operation before deciding.', '参数已截断，请核对完整操作后再决定。')) + '</p>' : '')
           + details('approval:' + approval.requestId, '<strong>' + escape(text('Raw parameters', '原始参数')) + '</strong>',
-            codeBlock(JSON.stringify(params, null, 2), 'JSON'), false)
+            codeBlock(JSON.stringify(window.hccInteractions.previewParams(approval), null, 2), 'JSON'), false)
           + '<div class="hcc-interaction-form">' + window.hccInteractions.form(approval, approvalKey(target, executorId, approval.requestId), escape, text) + '</div>'
-          + '<div class="codex-approval-actions"><button data-approval="' + index + '" data-decision="accept" data-truncated="' + !!approval.truncated + '" data-request-key="' + escape(approvalKey(target, executorId, approval.requestId)) + '" type="button" class="primary">'
-          + escape(approval.kind === 'userInput' ? text('Send answers', '提交答复') : approval.kind === 'permissions' ? text('Grant selected permissions', '授予所选权限') : text('Approve once', '批准本次')) + '</button><button data-approval="' + index + '" data-decision="' + (approval.kind === 'userInput' ? 'cancel' : 'decline') + '" data-request-key="' + escape(approvalKey(target, executorId, approval.requestId)) + '" type="button">'
-          + escape(approval.kind === 'userInput' ? text('Cancel questions', '取消问答') : text('Decline', '拒绝')) + '</button></div></article>';
+          + '<div class="codex-approval-actions"><button data-approval="' + index + '" data-decision="accept" data-truncated="' + window.hccInteractions.approvalBlocked(approval) + '" data-request-key="' + escape(approvalKey(target, executorId, approval.requestId)) + '" type="button" class="primary">'
+          + escape(window.hccInteractions.acceptLabel(approval, text)) + '</button><button data-approval="' + index + '" data-decision="' + (approval.kind === 'userInput' ? 'cancel' : 'decline') + '" data-request-key="' + escape(approvalKey(target, executorId, approval.requestId)) + '" type="button">'
+          + escape(approval.kind === 'userInput' ? text('Cancel questions', '取消问答') : text('Decline', '拒绝')) + '</button>'
+          + (approval.kind === 'mcp' ? '<button data-approval="' + index + '" data-decision="cancel" data-request-key="' + escape(approvalKey(target, executorId, approval.requestId)) + '" type="button">' + escape(text('Cancel request', '取消请求')) + '</button>' : '') + '</div></article>';
       }).join('');
       window.hccInteractions.restore(container);
       bindReadActions(container);
@@ -452,11 +571,18 @@ export function codexPanelScript() {
           const requestKey = approvalKey(target, executorId, approval.requestId);
           approving.add(requestKey); sync();
           const requestTarget = { ...target, token: bridge().actionToken, epoch: bridge().epoch };
-          try { await action('approve', { executorId, threadId: approval.threadId,
+          let authorization;
+          try {
+            const payload = window.hccInteractions.payload(approval, ['userInput','permissions','mcp'].includes(approval.kind) ? button.closest('article') : null, button.dataset.decision);
+            authorization = window.hccInteractions.prepareUrl(approval, button.dataset.decision, text);
+            await action('approve', { executorId, threadId: approval.threadId,
             turnId: approval.turnId, requestId: approval.requestId,
-            ...window.hccInteractions.payload(approval, ['userInput','permissions'].includes(approval.kind) ? button.closest('article') : null, button.dataset.decision) }, requestTarget);
-            window.hccInteractions.forget(requestKey); }
-          catch (error) { if (matches(target)) message(error.detail || error.message); }
+            ...payload }, requestTarget);
+            window.hccInteractions.forget(requestKey);
+            const opened = authorization?.complete();
+            if (opened && matches(target)) message(opened);
+          }
+          catch (error) { authorization?.cancel(); if (matches(target)) message(error.detail || error.message); }
           finally { approving.delete(requestKey); if (matches(target)) sync(); }
         });
       });
@@ -533,12 +659,15 @@ export function codexPanelScript() {
     });
     document.getElementById('codexRecover').addEventListener('click', async () => {
       const b = bridge(), target = subject();
+      const subjectVersion = subjectRevision, sequence = ++readSequence;
+      const current = () => matches(target) && subjectVersion === subjectRevision && sequence === readSequence;
       try {
         await b.api(route(target, 'read'));
-        if (!matches(target)) return;
+        if (!current()) return;
+        const version = stateRevision;
         const result = await b.api(route(target, 'state'));
-        if (matches(target)) render(result.state);
-      } catch (error) { if (matches(target)) message(error.detail || error.message); }
+        if (current() && version === stateRevision) render(result.state);
+      } catch (error) { if (current()) message(error.detail || error.message); }
     });
     document.getElementById('codexClear').addEventListener('click', () => {
       if (!confirm(text('Clear this draft and its unconfirmed submission marker? Check thread history first.', '清除草稿及未确认提交标记？请先核对会话历史。'))) return;