@seemseam/ccb 8.3.0 → 8.4.0

package/README/ar.md

@@ -6,7 +6,7 @@
 **نسّق Codex وClaude وGemini وغيرهم من وكلاء CLI ضمن سير عمل مرئي وقابل للتحكم والتدخل المباشر**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ ccb update mobile
 <details>
 <summary><b>تفاصيل Mobile App وحدود الأمان والمصدر</b></summary>
 
-يتضمن CCB 8.3.0 مصدر Flutter الخاص بـ CCB Mobile داخل [`mobile/`](../mobile/) وينشر Android APK عبر GitHub Releases:
+يتضمن CCB 8.4.0 مصدر Flutter الخاص بـ CCB Mobile داخل [`mobile/`](../mobile/) وينشر Android APK عبر GitHub Releases:
 
-- [تنزيل CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [تنزيل CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - مصدر التطبيق: [`mobile/app`](../mobile/app)
 - مصدر gateway الخادم: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ ccb update rich
 ## ملاحظات الإصدار
 
 <details open>
+<summary><b>v8.4.0</b> - Mobile Relay مشفر واقتران مبسط وهوية مشروع ثابتة وإعادة اتصال Codex</summary>
+
+- يضيف Relay مشفراً من طرف إلى طرف ودعوات أحادية الاستخدام وتدفقات متعددة ووضعاً رسمياً أو مستضافاً ذاتياً.
+- ينقل اختيار Tailscale أو LAN الخاص أو Relay إلى `ccb update mobile`، بينما يكتفي الهاتف بمسح QR أو إدخال رمز.
+- يتحقق من بيانات GitHub الرسمية والحجم وSHA-256 قبل تسليم APK الموقّع إلى Android.
+- يحافظ على هوية المشروع بعد نقله ويتبع سمة النظام ويدمج reconnect اختيارياً ومحدوداً لـ Codex.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - تحديثات Provider موحدة وتنظيف آمن للذاكرة المؤقتة ووصول ثابت إلى Config UI</summary>
+
+- يوحّد ترقيات Provider المدعومة داخل `ccb update` مع فحص الإصدار وخيارات الرفض أو تخطي الإصدار المحدد، من دون إعادة تشغيل panes النشطة.
+- يلغي ذاكرات Claude وGemini المؤقتة الخاصة بكل مشروع ويضيف تنظيفاً محدوداً يحافظ على المشاريع النشطة وبيانات الجلسات والمصادقة.
+- يضيف منفذ loopback ثابتاً ومصدر token محمياً لـ Config UI من دون إظهار قيمة token.
+- يحافظ على shutdown finalizers أثناء توقف الخادم ويستخدم تخطيط Yazi مدمجاً بعمودين في Rich mode.
+- يزامن CLI وnpm وLinux وmacOS وAndroid وجميع أصول الإصدار مع 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - دورات provider دقيقة وسلامة jobs وMobile terminal داخل المشروع</summary>
 
 - يربط Kimi وClaude وQoder بعقود turn وactivation وsession وcompletion الأصلية لكل منها.

package/README/de.md

@@ -6,7 +6,7 @@
 **Koordiniere Codex, Claude, Gemini und andere CLI-Agenten in sichtbaren, steuerbaren Workflows, die du direkt uebernehmen kannst**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ Dieser Befehl fuehrt durch Installation und Konfiguration.
 <details>
 <summary><b>Mobile-App-Details, Sicherheitsgrenze und Source</b></summary>
 
-CCB 8.3.0 enthaelt den Flutter-Quellcode von CCB Mobile in [`mobile/`](../mobile/) und veroeffentlicht das Android APK ueber GitHub Releases:
+CCB 8.4.0 enthaelt den Flutter-Quellcode von CCB Mobile in [`mobile/`](../mobile/) und veroeffentlicht das Android APK ueber GitHub Releases:
 
-- [CCB Mobile v8.3.0 APK herunterladen](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [CCB Mobile v8.4.0 APK herunterladen](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - App-Source: [`mobile/app`](../mobile/app)
 - Server-gateway-Source: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ Danke an [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar) fue
 ## Release Notes
 
 <details open>
+<summary><b>v8.4.0</b> - Verschluesseltes Mobile Relay, einfaches Pairing, stabile Projekt-ID und Codex-Reconnect</summary>
+
+- Fuegt Ende-zu-Ende-verschluesseltes Relay, einmalige Einladungen, multiplexte Streams sowie offizielle oder selbst gehostete Modi hinzu.
+- Verschiebt die Auswahl von Tailscale, privatem LAN oder Relay nach `ccb update mobile`; das Telefon scannt nur QR oder gibt einen Code ein.
+- Prueft offizielle GitHub-Metadaten, Groesse und SHA-256, bevor Android ein signiertes APK installiert.
+- Bewahrt die Projekt-ID nach Verschiebungen, folgt dem System-Theme und integriert begrenztes opt-in Codex reconnect.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Einheitliche Provider-Updates, sichere Cache-Ablösung und persistenter Config-UI-Zugriff</summary>
+
+- Buendelt unterstuetzte Provider-Upgrades in `ccb update`, einschliesslich exakter Versionspruefung, Ablehnen und versionsgenauem Ueberspringen, ohne aktive Panes neu zu starten.
+- Ersetzt projektbezogene Claude-/Gemini-Software-Caches und bereinigt nur eindeutig CCB-eigene Altlasten; aktive Projekte, Sessions und Auth-Daten bleiben erhalten.
+- Ermoeglicht einen festen Loopback-Port und eine geschuetzte Token-Quelle fuer die Config UI, ohne Token-Werte auszugeben.
+- Erhaelt Shutdown-Finalizer waehrend des Serverstopps und nutzt im Rich Mode ein kompaktes Yazi-Layout mit zwei Spalten.
+- Synchronisiert CLI, npm, Linux, macOS, Android und alle Release-Artefakte auf 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Exakte Provider-Turns, Job-Integritaet und projektgebundenes Mobile-Terminal</summary>
 
 - Bindet Kimi, Claude und Qoder an ihre nativen Turn-, Aktivierungs-, Session- und Completion-Vertraege.

package/README/es.md

@@ -6,7 +6,7 @@
 **Coordina Codex, Claude, Gemini y otros agentes CLI en flujos visibles y controlables que puedes tomar directamente**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ Este comando guía la instalación y configuración.
 <details>
 <summary><b>Detalles de Mobile App, límite de seguridad y fuente</b></summary>
 
-CCB 8.3.0 incluye el código Flutter de CCB Mobile en [`mobile/`](../mobile/) y publica el APK Android mediante GitHub Releases:
+CCB 8.4.0 incluye el código Flutter de CCB Mobile en [`mobile/`](../mobile/) y publica el APK Android mediante GitHub Releases:
 
-- [Descargar CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [Descargar CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - Fuente de la app: [`mobile/app`](../mobile/app)
 - Fuente del gateway del servidor: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ Gracias a [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar) po
 ## Notas de versión
 
 <details open>
+<summary><b>v8.4.0</b> - Relay móvil cifrado, emparejamiento simple, identidad estable y reconexión Codex</summary>
+
+- Añade Relay móvil cifrado de extremo a extremo, invitaciones de un solo uso, streams multiplexados y modos oficial o autohospedado.
+- Traslada la selección de Tailscale, LAN privada o Relay a `ccb update mobile`; el teléfono solo escanea un QR o introduce un código.
+- Verifica metadatos oficiales de GitHub, tamaño y SHA-256 antes de entregar una actualización APK firmada a Android.
+- Conserva la identidad al mover proyectos, sigue el tema del sistema e integra la reconexión opcional de Codex con límites estrictos.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Actualizaciones unificadas de providers, retiro seguro de cachés y acceso persistente a Config UI</summary>
+
+- Centraliza las actualizaciones compatibles de providers en `ccb update`, con comprobación exacta de versión, rechazo y omisión por versión, sin reiniciar panes activos.
+- Retira las cachés de software Claude/Gemini por proyecto y limpia solo datos heredados cuya propiedad está verificada; conserva proyectos activos, sesiones y autenticación.
+- Permite un puerto loopback estable y una fuente de token protegida para Config UI sin mostrar el valor del token.
+- Conserva los finalizadores de shutdown mientras se detiene el servidor y adopta un diseño Yazi compacto de dos columnas en Rich mode.
+- Sincroniza CLI, npm, Linux, macOS, Android y todos los artefactos de release con 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Turnos exactos de providers, integridad de jobs y terminal Mobile dentro del proyecto</summary>
 
 - Vincula Kimi, Claude y Qoder a sus contratos nativos de turno, activación, sesión y finalización.

package/README/fr.md

@@ -6,7 +6,7 @@
 **Coordonne Codex, Claude, Gemini et d'autres agents CLI dans des workflows visibles, contrôlables et reprenables directement**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ Cette commande guide l'installation et la configuration.
 <details>
 <summary><b>Détails de l'app mobile, frontière de sécurité et source</b></summary>
 
-CCB 8.3.0 inclut le code source Flutter de CCB Mobile dans [`mobile/`](../mobile/) et publie l'APK Android via GitHub Releases :
+CCB 8.4.0 inclut le code source Flutter de CCB Mobile dans [`mobile/`](../mobile/) et publie l'APK Android via GitHub Releases :
 
-- [Télécharger l'APK CCB Mobile v8.3.0](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [Télécharger l'APK CCB Mobile v8.4.0](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - Source de l'app : [`mobile/app`](../mobile/app)
 - Source du gateway serveur : [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ Merci à [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar) pou
 ## Notes de version
 
 <details open>
+<summary><b>v8.4.0</b> - Relay mobile chiffré, appairage simple, identité stable et reconnexion Codex</summary>
+
+- Ajoute un Relay chiffré de bout en bout, des invitations à usage unique, des flux multiplexés et des modes officiel ou auto-hébergé.
+- Déplace le choix Tailscale, LAN privé ou Relay dans `ccb update mobile` ; le téléphone ne fait que scanner un QR ou saisir un code.
+- Vérifie les métadonnées GitHub officielles, la taille et le SHA-256 avant de confier l'APK signé à Android.
+- Préserve l'identité après déplacement du projet, suit le thème système et intègre une reconnexion Codex optionnelle et bornée.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Mises à jour provider unifiées, retrait sûr des caches et accès Config UI persistant</summary>
+
+- Centralise les mises à niveau provider prises en charge dans `ccb update`, avec vérification exacte, refus et saut limité à une version, sans redémarrer les panes actifs.
+- Retire les caches logiciels Claude/Gemini par projet et ne nettoie que les données historiques dont CCB peut prouver la propriété ; projets actifs, sessions et authentification sont préservés.
+- Autorise un port loopback stable et une source de token protégée pour Config UI sans afficher la valeur du token.
+- Préserve les finalizers de shutdown pendant l'arrêt du serveur et adopte une vue Yazi compacte à deux colonnes en Rich mode.
+- Synchronise CLI, npm, Linux, macOS, Android et tous les artefacts de release avec 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Tours provider exacts, intégrité des jobs et terminal Mobile lié au projet</summary>
 
 - Lie Kimi, Claude et Qoder à leurs contrats natifs de tour, d'activation, de session et d'achèvement.

package/README/ja.md

@@ -6,7 +6,7 @@
 **Codex、Claude、Gemini などの CLI Agent を、見える・制御できる・直接引き継げるワークフローで連携**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ ccb update mobile
 <details>
 <summary><b>Mobile App の詳細、安全境界、ソース</b></summary>
 
-CCB 8.3.0 では Flutter 版 CCB Mobile のソースが [`mobile/`](../mobile/) に含まれ、Android APK は GitHub Releases で公開されています。
+CCB 8.4.0 では Flutter 版 CCB Mobile のソースが [`mobile/`](../mobile/) に含まれ、Android APK は GitHub Releases で公開されています。
 
-- [CCB Mobile v8.3.0 APK をダウンロード](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [CCB Mobile v8.4.0 APK をダウンロード](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - App ソース：[`mobile/app`](../mobile/app)
 - サーバー gateway ソース：[`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ sidebar のアイデアと示唆を提供してくれた [tmux-agent-sidebar](ht
 ## リリースノート
 
 <details open>
+<summary><b>v8.4.0</b> - 暗号化 Mobile Relay、簡単なペアリング、安定したプロジェクト ID、Codex 再接続</summary>
+
+- エンドツーエンド暗号化 Relay、1 回限りの招待、multiplex stream、公式またはセルフホスト構成を追加しました。
+- Tailscale、private LAN、Relay の選択を `ccb update mobile` に移し、スマートフォン側は QR またはコード入力だけにしました。
+- 署名済み APK を Android に渡す前に、公式 GitHub metadata、サイズ、SHA-256 を検証します。
+- プロジェクト移動後も ID を維持し、システム theme 追従と境界付きの Codex reconnect を追加しました。
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Provider 更新の一元化、安全なキャッシュ廃止、永続的な Config UI アクセス</summary>
+
+- 対応する Provider の更新を `ccb update` に集約し、正確なバージョン確認、辞退、バージョン単位のスキップを提供します。実行中の pane は自動再起動しません。
+- プロジェクト単位の Claude/Gemini ソフトウェアキャッシュを廃止し、所有権を検証できる旧データだけを削除します。稼働中のプロジェクト、session、認証情報は保持します。
+- token 値を表示せずに、Config UI の固定 loopback ポートと保護された token ソースを設定できます。
+- サーバー停止中も shutdown finalizer を維持し、Rich mode の Yazi をコンパクトな 2 カラム構成にしました。
+- CLI、npm、Linux、macOS、Android とすべてのリリース成果物を 8.3.1 に同期しました。
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - 正確な provider turn、job の整合性、プロジェクト内 Mobile ターミナル</summary>
 
 - Kimi、Claude、Qoder をそれぞれのネイティブな turn、activation、session、completion 契約に結び付けました。

package/README/ko.md

@@ -6,7 +6,7 @@
 **Codex, Claude, Gemini 등 CLI Agent를 보이고 제어 가능하며 직접 이어받을 수 있는 워크플로로 조율**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ ccb update mobile
 <details>
 <summary><b>Mobile App 세부 정보, 안전 경계, 소스</b></summary>
 
-CCB 8.3.0은 Flutter CCB Mobile 소스를 [`mobile/`](../mobile/)에 포함하며 Android APK를 GitHub Releases로 배포합니다.
+CCB 8.4.0은 Flutter CCB Mobile 소스를 [`mobile/`](../mobile/)에 포함하며 Android APK를 GitHub Releases로 배포합니다.
 
-- [CCB Mobile v8.3.0 APK 다운로드](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [CCB Mobile v8.4.0 APK 다운로드](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - 앱 소스: [`mobile/app`](../mobile/app)
 - 서버 gateway 소스: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ sidebar 아이디어와 영감을 준 [tmux-agent-sidebar](https://github.com/hi
 ## 릴리스 노트
 
 <details open>
+<summary><b>v8.4.0</b> - 암호화 Mobile Relay, 간단한 페어링, 안정적인 프로젝트 ID와 Codex 재연결</summary>
+
+- 종단 간 암호화 Relay, 일회용 초대, 다중화 stream, 공식 또는 자체 호스팅 모드를 추가했습니다.
+- Tailscale, private LAN, Relay 선택을 `ccb update mobile`로 옮기고 휴대폰은 QR 스캔이나 코드 입력만 하도록 단순화했습니다.
+- 서명된 APK를 Android에 전달하기 전에 공식 GitHub metadata, 크기와 SHA-256을 검증합니다.
+- 프로젝트 이동 후에도 ID를 유지하고 시스템 theme 연동과 제한된 Codex reconnect를 통합했습니다.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Provider 업데이트 통합, 안전한 캐시 폐기, 지속 가능한 Config UI 접근</summary>
+
+- 지원되는 Provider 업그레이드를 `ccb update`로 통합하고 정확한 버전 확인, 거절, 버전별 건너뛰기를 제공합니다. 활성 pane은 자동으로 재시작하지 않습니다.
+- 프로젝트별 Claude/Gemini 소프트웨어 캐시를 폐기하고 소유권이 검증된 레거시 데이터만 정리합니다. 활성 프로젝트, session, 인증 데이터는 보존합니다.
+- token 값을 노출하지 않으면서 Config UI의 고정 loopback 포트와 보호된 token 소스를 설정할 수 있습니다.
+- 서버가 중지되는 동안 shutdown finalizer를 유지하고 Rich mode의 Yazi를 간결한 2열 레이아웃으로 변경했습니다.
+- CLI, npm, Linux, macOS, Android와 모든 릴리스 산출물을 8.3.1로 동기화했습니다.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - 정확한 provider turn, job 무결성, 프로젝트 내부 Mobile 터미널</summary>
 
 - Kimi, Claude, Qoder 실행을 각각의 네이티브 turn, activation, session, completion 계약에 바인딩했습니다.

package/README/pt.md

@@ -6,7 +6,7 @@
 **Coordene Codex, Claude, Gemini e outros agentes CLI em fluxos visíveis e controláveis que você pode assumir diretamente**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ Esse comando orienta a instalação e a configuração.
 <details>
 <summary><b>Detalhes do Mobile App, limite de segurança e fonte</b></summary>
 
-O CCB 8.3.0 inclui o código Flutter do CCB Mobile em [`mobile/`](../mobile/) e publica o APK Android pelo GitHub Releases:
+O CCB 8.4.0 inclui o código Flutter do CCB Mobile em [`mobile/`](../mobile/) e publica o APK Android pelo GitHub Releases:
 
-- [Baixar CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [Baixar CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - Fonte do app: [`mobile/app`](../mobile/app)
 - Fonte do gateway servidor: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ Obrigado ao [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar)
 ## Notas de versão
 
 <details open>
+<summary><b>v8.4.0</b> - Relay móvel criptografado, pareamento simples, identidade estável e reconexão Codex</summary>
+
+- Adiciona Relay móvel com criptografia ponta a ponta, convites de uso único, streams multiplexados e modos oficial ou auto-hospedado.
+- Move a escolha de Tailscale, LAN privada ou Relay para `ccb update mobile`; o telefone apenas lê o QR ou informa um código.
+- Verifica metadados oficiais do GitHub, tamanho e SHA-256 antes de entregar uma atualização APK assinada ao Android.
+- Preserva a identidade após mover projetos, acompanha o tema do sistema e integra a reconexão opcional e limitada do Codex.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Atualizações de providers unificadas, retirada segura de caches e acesso persistente à Config UI</summary>
+
+- Centraliza upgrades de providers suportados em `ccb update`, com verificação exata, recusa e salto por versão, sem reiniciar panes ativos.
+- Retira caches de software Claude/Gemini por projeto e limpa apenas dados legados com propriedade comprovada; projetos ativos, sessões e autenticação são preservados.
+- Permite uma porta loopback estável e uma fonte de token protegida para a Config UI sem exibir o valor do token.
+- Preserva finalizadores de shutdown durante a parada do servidor e adota um layout Yazi compacto de duas colunas no Rich mode.
+- Sincroniza CLI, npm, Linux, macOS, Android e todos os artefatos de release com 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Turnos exatos dos providers, integridade dos jobs e terminal Mobile dentro do projeto</summary>
 
 - Vincula Kimi, Claude e Qoder aos contratos nativos de turno, ativação, sessão e conclusão.

package/README/ru.md

@@ -6,7 +6,7 @@
 **Координируйте Codex, Claude, Gemini и другие CLI Agent в видимых и управляемых процессах, которые можно напрямую взять под контроль**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -182,9 +182,9 @@ ccb update mobile
 <details>
 <summary><b>Детали Mobile App, граница безопасности и исходники</b></summary>
 
-CCB 8.3.0 включает Flutter source CCB Mobile в [`mobile/`](../mobile/) и публикует Android APK через GitHub Releases:
+CCB 8.4.0 включает Flutter source CCB Mobile в [`mobile/`](../mobile/) и публикует Android APK через GitHub Releases:
 
-- [Скачать CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [Скачать CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - Исходники app: [`mobile/app`](../mobile/app)
 - Исходники server gateway: [`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -263,6 +263,27 @@ CCB поддерживает [Agent Roles Spec](https://github.com/SeemSeam/agen
 ## Release Notes
 
 <details open>
+<summary><b>v8.4.0</b> - Шифрованный Mobile Relay, простое сопряжение, стабильный ID и переподключение Codex</summary>
+
+- Добавляет сквозное шифрование Relay, одноразовые приглашения, мультиплексированные потоки и официальный либо собственный сервер.
+- Переносит выбор Tailscale, private LAN или Relay в `ccb update mobile`; на телефоне остаётся QR или код сопряжения.
+- Проверяет официальные metadata GitHub, размер и SHA-256 перед передачей подписанного APK системе Android.
+- Сохраняет ID после переноса проекта, следует системной теме и интегрирует ограниченный opt-in reconnect для Codex.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Единое обновление providers, безопасный вывод кешей и постоянный доступ к Config UI</summary>
+
+- Объединяет поддерживаемые обновления providers в `ccb update`: точная проверка версии, отказ и пропуск конкретной версии без перезапуска активных panes.
+- Выводит из эксплуатации проектные кеши Claude/Gemini и удаляет только подтверждённые CCB legacy-данные; активные проекты, sessions и данные аутентификации сохраняются.
+- Позволяет задать стабильный loopback-порт и защищённый источник token для Config UI без вывода значения token.
+- Сохраняет shutdown finalizers во время остановки сервера и использует компактный двухколоночный Yazi layout в Rich mode.
+- Синхронизирует CLI, npm, Linux, macOS, Android и все release-артефакты с 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Точные provider-turn, целостность jobs и Mobile-терминал внутри проекта</summary>
 
 - Kimi, Claude и Qoder привязаны к своим нативным контрактам turn, активации, сессии и завершения.

package/README/zh.md

@@ -6,7 +6,7 @@
 **让 Codex、Claude、Gemini 等 CLI Agent 可见、可控、可接管地协同工作**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -68,6 +68,21 @@ ccb update
 
 在 npm 管理的安装中，`ccb update` 只会显示等价的 npm 命令，不会原地修改 npm vendored payload。
 
+CCB 托管的 provider pane 会关闭已知的 provider 原生启动更新提示。更新 CCB
+后，或者 CCB 已经是最新版时，`ccb update` 会统一检查已安装的 provider
+CLI，并只提示一次可安全管理的更新。可使用 `--providers check`、
+`--providers all` 或 `--providers none` 分别执行仅检查、非交互全部更新或
+本次跳过。选择“暂不更新”后，下次 `ccb update` 会再次提示；选择“跳过此
+版本”只会静默当前检测到的准确版本。该流程不会自动重启正在运行的
+provider pane；已接受的新版本会在 pane 下次启动或显式重启后生效。
+
+版本发生更新后，新安装的 CCB 还会迁移旧的项目级 Claude/Gemini 缓存：
+manifest 校验通过且项目已经删除的缓存会立即清理；当前项目已经停止时会
+立即清理，仍在运行或属于其他现存项目的缓存会保留到对应项目下一次成功
+执行 `ccb kill` 后再清理。未知 Provider、损坏的 manifest、外来符号链接、
+session/auth 和用户级 Gemini 缓存都不会被该迁移删除。单次更新可用
+`ccb update --no-cache-cleanup` 跳过。
+
 <details>
 <summary><b>GitHub release 包和源码安装兜底</b></summary>
 
@@ -117,6 +132,20 @@ mkdir -p .ccb
 
 点击 CCB sidebar 左上角的 **⚙ 设置** 图标即可打开本地配置控制面；也可以在项目目录运行 `ccb config ui`。
 
+#### 固化本地 Config UI 访问
+
+Config UI 始终只绑定 loopback。若需要固定本地端口和 token，请在 `.ccb/ccb.config` 中配置 token 的**来源**，不要将 token 明文写入该文件：
+
+```toml
+[config_ui]
+port = 43123
+token_env = "CCB_CONFIG_UI_TOKEN"
+# 或使用下面这一项替代 token_env：
+# token_file = ".ccb/config-ui.token"
+```
+
+`--port` 仍可覆盖单次启动端口。`token_file` 必须是项目内相对路径、不能是符号链接，并且在 POSIX 上应仅允许文件所有者读取（`chmod 600 .ccb/config-ui.token`）。未配置 token 来源时，CCB 保持原有的随机 token 与临时端口行为。CLI 只输出 loopback URL 和 token 来源，不会输出 token 值。
+
 <p align="center">
   <img src="../assets/readme_v7/config-control-panel.png" alt="CCB 配置控制面正在编辑默认 demo agent" width="960">
 </p>
@@ -182,9 +211,9 @@ ccb update mobile
 <details>
 <summary><b>Mobile App 详情、安全边界和源码</b></summary>
 
-CCB 8.3.0 已把 Flutter 版 CCB Mobile 源码放入 [`mobile/`](../mobile/)，并在 GitHub Release 中发布 Android APK：
+CCB 8.4.0 已把 Flutter 版 CCB Mobile 源码放入 [`mobile/`](../mobile/)，并在 GitHub Release 中发布 Android APK：
 
-- [下载 CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [下载 CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - App 源码：[`mobile/app`](../mobile/app)
 - 服务端 gateway 源码：[`lib/mobile_gateway`](../lib/mobile_gateway)
 
@@ -192,7 +221,8 @@ CCB 8.3.0 已把 Flutter 版 CCB Mobile 源码放入 [`mobile/`](../mobile/)，
 
 安全边界：
 
-- CCB gateway 只绑定 loopback，例如 `127.0.0.1:8787`。
+- CCB gateway 默认绑定 loopback，例如 `127.0.0.1:8787`。
+- 局域网直连时可绑定一个明确的私网网卡地址（拒绝通配地址和公网地址）：`ccb install mobile --route-provider lan --listen 192.168.31.155:8787`。配对 URL 会从 `--listen` 自动推导，无需额外转发进程或 `--public-url`。
 - 远程访问使用 Tailscale Serve，不启用 Tailscale Funnel。
 - CCB 不保存 Tailscale 密码、OAuth token、admin API token，也不会自动修改 tailnet ACL/grants。
 - 手机只获得 pairing profile 授权的 scope，例如 view、content、terminal、file upload 和 file download。
@@ -252,9 +282,11 @@ CCB 支持 [Agent Roles Spec](https://github.com/SeemSeam/agent-roles-spec)：
 - 微信: `seemseam-com`
 
 <p align="center">
-  <img src="../assets/weixin.png" alt="微信群" width="240">
+  <img src="../assets/weixin.png" alt="CCB 微信技术群 2" width="240">
 </p>
 
+> 微信群二维码有效期为 7 天。如果二维码已过期，请添加微信 `seemseam-com` 获取最新入群邀请。
+
 <a id="community"></a>
 
 ## 社区和致谢
@@ -268,6 +300,31 @@ CCB 支持 [Agent Roles Spec](https://github.com/SeemSeam/agent-roles-spec)：
 ## 新版本记录
 
 <details open>
+<summary><b>v8.4.0</b> - 加密 Mobile Relay、简化配对、稳定项目身份与 Codex 重连</summary>
+
+- 新增端到端加密的 CCB Mobile Relay，支持运营方签发的一次性邀请码、有边界的接入控制、多路复用流，以及官方或自建 Relay 两种部署方式。
+- 将路由选择收敛到 `ccb update mobile`：电脑端可选 Tailscale、经过校验的局域网私网地址、CCB Relay 或自建 Relay，手机端只需扫码或输入配对码。
+- 新增可信的 Android 应用内更新流程；交给系统安装前，会校验 GitHub 官方 Release 元数据、APK 大小和 SHA-256。
+- CCB 项目移动或改名后仍保持稳定身份，并让终端和配置界面支持跟随系统的浅色/深色主题。
+- 将可选的 Codex reconnect 监督集成到托管 home；保留有边界的终端错误证据，并在 pane 或 session 不匹配时拒绝恢复。
+- Relay 数据保持端到端加密；Relay 运营方只能看到连接元数据，不能读取任务提示、回复、终端内容或传输文件。
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - 统一 Provider 更新、安全回收缓存与持久化 Config UI 访问</summary>
+
+- 将受支持的 Provider 升级统一到 `ccb update`，提供准确版本检查、暂不更新和精确版本跳过，并且不会自动重启运行中的 pane。
+- 废弃项目级 Claude/Gemini 软件缓存，改用用户安装的 Claude 可执行文件和一份用户级 Gemini 缓存。
+- 增加有边界的更新后与关闭后清理，保留运行中的项目、未知内容、session、认证数据和用户自有缓存。
+- 支持固化 Config UI 的 loopback 端口与受保护的 token 来源，同时不暴露 token 值。
+- 新增原生 Qoder CLI CN 支持，隔离配置与 session 状态，并修正 Qoder 的 `--print` / `--config-dir` 执行协议。
+- 在服务停止阶段继续可靠执行 shutdown finalizer，并让 sidebar 发布校验和生成兼容不同主机。
+- 将 Rich 模式切换为紧凑的 Yazi 双栏布局，并把所有发布面同步到 8.3.1。
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - 精确 Provider 回合、作业完整性与项目内 Mobile 终端</summary>
 
 - 将 Kimi、Claude 和 Qoder 执行绑定到各自原生的回合、激活、会话和完成协议。

package/README.md

@@ -6,7 +6,7 @@
 **Coordinate Codex, Claude, Gemini, and other CLI agents in visible, controllable workflows you can take over**
 
 <p>
-  <img src="https://img.shields.io/badge/version-8.3.0-orange.svg" alt="version">
+  <img src="https://img.shields.io/badge/version-8.4.0-orange.svg" alt="version">
   <img src="https://img.shields.io/badge/platform-Linux%20%7C%20macOS%20%7C%20WSL-lightgrey.svg" alt="platform">
   <img src="https://img.shields.io/badge/providers-17%20CLI%20families-0B7285.svg" alt="providers">
 </p>
@@ -67,9 +67,27 @@ ccb update
 ```
 
 On an npm-managed install, `ccb update` prints the equivalent npm command and
-does not modify npm's vendored payload in place. To roll back a release-package
-install, use the transactional updater with an older released version, for
-example `ccb update 8.1.3`. CCB rejects a same-version artifact whose build
+does not modify npm's vendored payload in place.
+
+CCB-managed provider panes suppress known provider-native startup update prompts.
+After updating CCB—or immediately when CCB is already current—`ccb update`
+checks installed provider CLIs and offers supported updates once. Use
+`--providers check`, `--providers all`, or `--providers none` for explicit
+report-only, non-interactive update, or skip behavior. Declining prompts again
+on the next `ccb update`; skipping a version hides only that exact version.
+CCB never restarts active provider panes during this flow, so an accepted
+provider update applies when that pane next starts or is explicitly restarted.
+
+After a release change, the newly installed CCB also retires old
+project-scoped Claude/Gemini caches. Manifest-valid caches for deleted projects
+are removed immediately. A stopped current project is cleaned immediately;
+active or other existing projects are preserved and cleaned after their next
+successful `ccb kill`. Unknown providers, malformed manifests, foreign
+symlinks, sessions/auth, and the user-scoped Gemini cache are never removed by
+this migration. Use `ccb update --no-cache-cleanup` to skip it for one update.
+
+To roll back, use the same transactional updater with an older released version,
+for example `ccb update 8.1.3`. CCB rejects a same-version artifact whose build
 identity differs from the installed build, and restores the prior local prefix
 if the update transaction fails. If restoration itself cannot complete, CCB
 retains and reports the external recovery backup path.
@@ -123,6 +141,20 @@ A blank project starts light: CCB opens one `main` window with a single agent na
 
 Click the **⚙ Settings** icon at the top-left of the CCB sidebar to open the local configuration control panel. You can also run `ccb config ui` from the project directory.
 
+#### Persistent local Config UI access
+
+The Config UI always binds to loopback. To use a stable local port and token, configure a token **source** in `.ccb/ccb.config`; never put a literal token in that file:
+
+```toml
+[config_ui]
+port = 43123
+token_env = "CCB_CONFIG_UI_TOKEN"
+# Or use this instead of token_env:
+# token_file = ".ccb/config-ui.token"
+```
+
+`--port` remains a one-run override. `token_file` must be project-relative, non-symlinked, and owner-only (`chmod 600 .ccb/config-ui.token` on POSIX). Without a token source, CCB keeps the existing random token and ephemeral-port behavior. The CLI prints only the loopback URL and token source, never the token value.
+
 <p align="center">
   <img src="assets/readme_v7/config-control-panel.png" alt="CCB configuration control panel editing the default demo agent" width="960">
 </p>
@@ -188,9 +220,9 @@ This command guides installation and configuration.
 <details>
 <summary><b>Mobile App details, safety boundary, and source</b></summary>
 
-CCB 8.3.0 includes the Flutter CCB Mobile source in [`mobile/`](mobile/) and publishes the Android APK through GitHub Releases:
+CCB 8.4.0 includes the Flutter CCB Mobile source in [`mobile/`](mobile/) and publishes the Android APK through GitHub Releases:
 
-- [Download CCB Mobile v8.3.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.3.0/ccb-mobile-v8.3.0.apk)
+- [Download CCB Mobile v8.4.0 APK](https://github.com/SeemSeam/claude_codex_bridge/releases/download/v8.4.0/ccb-mobile-v8.4.0.apk)
 - App source: [`mobile/app`](mobile/app)
 - Server gateway source: [`lib/mobile_gateway`](lib/mobile_gateway)
 
@@ -198,7 +230,8 @@ The phone app is a remote controller for real CCB projects running on a server.
 
 Safety boundary:
 
-- The CCB gateway binds only to loopback, for example `127.0.0.1:8787`.
+- The CCB gateway binds to loopback by default, for example `127.0.0.1:8787`.
+- For direct LAN access, bind one specific private interface address (wildcard and public addresses are rejected): `ccb install mobile --route-provider lan --listen 192.168.31.155:8787`. The pairing URL is inferred from `--listen`; no forwarding process or `--public-url` is needed.
 - Remote access uses Tailscale Serve, not Tailscale Funnel.
 - CCB does not store Tailscale passwords, OAuth tokens, admin API tokens, or automatically modify tailnet ACLs/grants.
 - The phone receives only the scopes authorized by the pairing profile, such as view, content, terminal, file upload, and file download.
@@ -258,9 +291,11 @@ Use the **⚙ Settings** control panel for normal project configuration. If you
 - WeChat: `seemseam-com`
 
 <p align="center">
-  <img src="assets/weixin.png" alt="WeChat group" width="240">
+  <img src="assets/weixin.png" alt="CCB WeChat group 2" width="240">
 </p>
 
+> WeChat group QR codes are valid for seven days. If this one has expired, add `seemseam-com` to request the latest invitation.
+
 <a id="community"></a>
 
 ## Community And Credits
@@ -274,6 +309,31 @@ Thanks to [tmux-agent-sidebar](https://github.com/hiroppy/tmux-agent-sidebar) fo
 ## Release Notes
 
 <details open>
+<summary><b>v8.4.0</b> - Encrypted Mobile Relay, simpler pairing, stable project identity, and Codex reconnect</summary>
+
+- Added end-to-end encrypted CCB Mobile Relay transport with operator-issued one-time invitations, bounded admission, multiplexed streams, and official or self-hosted deployment modes.
+- Moved route selection to `ccb update mobile`: choose Tailscale, a validated private LAN address, CCB Relay, or a self-hosted Relay while the phone only scans a QR code or enters a pairing code.
+- Added trusted in-app Android updates that verify canonical GitHub release metadata, APK size, and SHA-256 before handing installation to the operating system.
+- Preserved project identity when a CCB project is moved or renamed, and added system-following light/dark themes across terminal and configuration surfaces.
+- Integrated opt-in Codex reconnect supervision into managed homes, retaining bounded terminal error evidence and refusing unsafe pane or session mismatches.
+- Kept Relay payloads encrypted end to end; Relay operators can observe connection metadata but not task prompts, replies, terminal content, or transferred files.
+
+</details>
+
+<details>
+<summary><b>v8.3.1</b> - Unified Provider updates, safe cache retirement, and persistent Config UI access</summary>
+
+- Centralized supported Provider upgrades under `ccb update`, with exact version checks, explicit decline/skip choices, and no automatic restart of active panes.
+- Retired project-scoped Claude/Gemini software caches in favor of the user-installed Claude executable and one user-scoped Gemini cache.
+- Added bounded post-update and post-shutdown cleanup that preserves active projects, unknown content, sessions, authentication data, and user-owned caches.
+- Added persistent Config UI loopback port and protected token-source settings without exposing token values.
+- Added native Qoder CLI CN support with isolated config/session state and corrected Qoder `--print` / `--config-dir` execution.
+- Preserved shutdown finalizers while the server is stopping and made sidebar release checksum generation portable.
+- Switched Rich mode to a compact two-column Yazi layout and synchronized all release surfaces to 8.3.1.
+
+</details>
+
+<details>
 <summary><b>v8.3.0</b> - Exact provider turns, job integrity, and project-bound Mobile terminal</summary>
 
 - Bound Kimi, Claude, and Qoder execution to their native turn, activation, session, and completion contracts.

package/VERSION

@@ -1 +1 @@
-8.3.0
+8.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seemseam/ccb",
-  "version": "8.3.0",
+  "version": "8.4.0",
   "description": "Lightweight multi-agent TUI and stable cross-provider collaboration layer for Codex, Claude, Gemini, Grok, Kimi, DeepSeek, and other CLI agents.",
   "license": "AGPL-3.0-only",
   "homepage": "https://github.com/SeemSeam/claude_codex_bridge#readme",