@walkhi/code-relax 0.1.0-beta.30 → 0.1.0-beta.31

package/dist/src/server.mjs

@@ -1,1778 +1,1861 @@
-import crypto from 'node:crypto';
-import { RustDeskVideoProbe } from './platform/windows/rustdesk-video-probe.mjs';
-import fs from 'node:fs';
-import http from 'node:http';
-import path from 'node:path';
-import os from 'node:os';
-import { fileURLToPath } from 'node:url';
-import vm from 'node:vm';
-import sharp from 'sharp';
-import { attachLanSocket } from './lan-socket-server.mjs';
-import fileMentions from '../shared/file-mentions.cjs';
-import fileCitations from '../shared/file-citations.cjs';
-import { validateInlineImage } from './message-images.mjs';
-import { ThreadWriterConflictError } from './shared-app-server.mjs';
-import { ManagedAppServer, managedAppServerUrl } from './managed-app-server.mjs';
-import { RuntimeDiscovery } from './runtime-discovery.mjs';
-import { streamSharedThread, threadListNotificationMethods } from './shared-thread-stream.mjs';
-import appServerEvents from '../shared/app-server-events.cjs';
-import messageDelivery from '../shared/message-delivery.cjs';
-import fileChanges from '../shared/file-changes.cjs';
-import { runtimePaths } from './platform/runtime-paths.mjs';
-import { openControl } from './service-control.mjs';
-import { writeRecord, readRecord } from './service-lifecycle.mjs';
-import { ExecutionHealth } from './execution-health.mjs';
-import { authorizeLanDevice, onLanAuthorizationsChanged } from './self-relay/lan-authorizations.mjs';
-import { createRelayManager } from './self-relay/lifecycle.mjs';
-import { generateAndSetThreadTitle } from './thread-title-generation.mjs';
-import { desktopHost } from './platform/desktop-host.mjs';
-import { SharedCatalog } from './shared-catalog.mjs';
-import { DotsAppServer } from './dots-task-catalog.mjs';
-import { DotsChatServer } from './dots-chat-server.mjs';
-import { HostedHistoryCache } from './hosted-history-cache.mjs';
-import { readDotsSummaryTasks } from './dots-summary-tasks.mjs';
-import { readDotsSchedules } from './dots-schedules.mjs';
-import { DotsMessageImages } from './dots-message-images.mjs';
-import { desktopDotsProfiles } from './platform/windows/dots-profile.mjs';
-import { readPlanPricing } from './plan-pricing.mjs';
-import { requestRecovery, recoveryStatus } from './shared-recovery.mjs';
-import { requestServiceRestart } from './service-restart.mjs';
-import { TurnModelHistory } from './turn-model-history.mjs';
-import { browseCode } from './code-browser.mjs';
-import { fileRange, fileRevision, FileRangeError } from './file-transfer-range.mjs';
-import { browseProjectFolders, createProjectFolder, saveProject } from './project-management.mjs';
-import { projectLocations } from './platform/project-locations.mjs';
-import { createWorkstationProject } from './project-create.mjs';
-import { WorkstationDownloads } from './workstation-downloads.mjs';
-import { consumeUsageReset } from './usage-reset.mjs';
-import { DesktopHelper } from './platform/windows/desktop-helper.mjs';
-
-const turnModelHistory = new TurnModelHistory();
-const messageReceipts = new messageDelivery.Store();
-const desktopHelper = process.platform === 'win32' ? new DesktopHelper() : null;
-
-const MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
-const MAX_FILE_DOWNLOAD_BYTES = 20 * 1024 * 1024;
-const MAX_CACHED_ATTACHMENTS = 32;
-const MAX_CACHED_FILES = 64;
-const MAX_CONTEXT_TAIL_BYTES = 4 * 1024 * 1024;
-const MAX_LIVE_ACTIVITY_TAIL_BYTES = 1024 * 1024;
-const SHARED_HISTORY_PAGE_BYTES = 500 * 1024;
-const SHARED_HISTORY_PAGE_TURNS = 8;
-const MAX_SETTINGS_SCAN_BYTES = 64 * 1024 * 1024;
-const ALLOWED_THINKING = new Set(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']);
-
-class RequestError extends Error {
-  constructor(statusCode, message, details) {
-    super(message);
-    this.statusCode = statusCode;
-    this.details = details;
-    this.code = details?.code;
-  }
-}
-
-function readRuntimeVersion() {
-  let directory = path.dirname(fileURLToPath(import.meta.url));
-  while (true) {
-    const manifest = readRecord(path.join(directory, 'package.json'));
-    if (manifest?.name === '@walkhi/code-relax') return manifest.version || '未知';
-    const parent = path.dirname(directory);
-    if (parent === directory) return '未知';
-    directory = parent;
-  }
-}
-
-const options = parseOptions(process.argv.slice(2));
-const runtimeVersion = readRuntimeVersion();
-
-const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'web');
-const projectRoot = os.homedir();
-const { codexDataRoot, stateRoot, sessionsRoot, uploadsRoot } = runtimePaths();
-const desktopVideoProbe = process.platform === 'win32' ? new RustDeskVideoProbe({ stateRoot }) : null;
-process.once('exit', () => desktopVideoProbe?.stop());
-const workstationDownloads = new WorkstationDownloads(stateRoot);
-const markdownItScript = fs.readFileSync(path.join(webRoot, 'vendor', 'markdown-it.umd.min.js'));
-const markdownSandbox = { atob };
-vm.runInNewContext(markdownItScript.toString(), markdownSandbox);
-const imageMarkdown = markdownSandbox.markdownit({ html: false });
-fileCitations.install(imageMarkdown);
-const attachmentCache = new Map();
-const fileCache = new Map();
-const fileCapabilitySecret = crypto.randomBytes(32);
-const imageCapabilityKey = crypto.createHash('sha256')
-  .update('code-relax-image-capability\0').update(options.token || fileCapabilitySecret).digest();
-const sessionPathCache = new Map();
-const sessionSettingsCache = new Map();
-const liveActivityCache = new Map();
-let sharedServer = null;
-const managedAppServer = new ManagedAppServer({ stateRoot, host: desktopHost });
-const hostedHistoryCache = new HostedHistoryCache(stateRoot);
-const dotsServer = new DotsAppServer(managedAppServer.client, desktopDotsProfiles(codexDataRoot, stateRoot), hostedHistoryCache, { uploadsRoot });
-const dotsImages = new DotsMessageImages({ localServer: managedAppServer.client, identity: () => dotsServer.profileIdentity,
-  cache: attachmentCache, capabilityKey: imageCapabilityKey, maxEntries: MAX_CACHED_ATTACHMENTS, maxBytes: MAX_ATTACHMENT_BYTES });
-const dotsChat = new DotsChatServer(dotsServer, undefined, { uploadsRoot });
-const runtimeDiscovery = new RuntimeDiscovery({ stateRoot, host: desktopHost, url: managedAppServerUrl });
-const relayManager = createRelayManager(stateRoot);
-let sharedCatalog = null, executionMode = 'ordinary';
-function selectSharedExecution(enabled) {
-  const next = enabled ? managedAppServer.client : null;
-  if (sharedServer === next) return;
-  sharedServer = next;
-  sharedCatalog = sharedServer ? new SharedCatalog(sharedServer, dotsServer, dotsChat) : null;
-}
-const executionHealth = new ExecutionHealth(async () => {
-  await managedAppServer.ensure();
-  const managed = managedAppServer.snapshot();
-  // The managed app-server owns execution. Desktop is another client of the
-  // same service, so closing Desktop must not disable phone writes.
-  selectSharedExecution(managed.ready);
-  executionMode = sharedServer ? 'shared' : 'ordinary';
-  const managedRestarting = managed.state === 'restarting';
-  const ready = !managedRestarting && sharedServer?.ready === true;
-  const state = managedRestarting ? 'restarting'
-    : ready ? 'full' : 'unavailable';
-  return { state, ready, canWrite: ready, mode: executionMode };
-});
-async function refreshExecution() {
-  await executionHealth.refresh();
-  return { mode: executionMode };
-}
-async function requireExecutionWritable(threadId, client = sharedServer) {
-  const execution = await executionHealth.refresh();
-  if (!execution.canWrite) {
-    throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
-      { code: 'full_control_required', execution });
-  }
-  if (threadId && client) client.requireWritable(threadId);
-  return execution;
-}
-managedAppServer.client.on('subscription-error', error => console.error('Codex 内核任务取消订阅失败：', error.message));
-dotsServer.on('subscription-error', error => console.error('Dots 任务取消订阅失败：', error.message));
-dotsChat.on('subscription-error', error => console.error('Dots 对话取消订阅失败：', error.message));
-dotsChat.on('activity-error', error => console.error('点点状态通道不可用：', error.message));
-
-dotsServer.on('profile-error', error => console.error(error.message));
-async function handleRequest(request, response) {
-  let messageSubmissionStarted = false;
-  try {
-    const url = new URL(request.url || '/', `http://${request.headers.host || 'localhost'}`);
-
-    if (!request.socketRequest) {
-      sendJson(response, 404, { error: '此端口不提供网页。' });
-      return;
-    }
-
-    if (process.platform !== 'win32' && url.pathname.startsWith('/api/desktop/'))
-      throw new RequestError(501, 'Mac 版不提供远程桌面控制。', { code: 'desktop_control_unsupported' });
-
-    if (url.pathname === '/api/desktop/video-probe') {
-      if (request.method === 'POST') {
-        try { sendJson(response, 200, await desktopVideoProbe.begin()); }
-        catch (error) { throw new RequestError(error.statusCode || 502, error.message, { code: error.code || 'desktop_video_failed' }); }
-      }
-      else if (request.method === 'PUT' || request.method === 'DELETE') {
-        const body = await readJsonBody(request);
-        if (typeof body.leaseId !== 'string' || !/^[a-f0-9]{32}$/.test(body.leaseId)) throw new RequestError(400, '无效的视频会话');
-        sendJson(response, 200, request.method === 'PUT' ? desktopVideoProbe.renew(body.leaseId) : desktopVideoProbe.release(body.leaseId));
-      } else throw new RequestError(405, '不支持的操作');
-      return;
-    }
-    if (request.method === 'GET' && url.pathname === '/api/desktop/frame') {
-      const started = Date.now();
-      try {
-        const preview = url.searchParams.get('preview') === '1';
-        const frame = await desktopHelper.frame({ preview });
-        if (!preview) console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-frame', state: frame.state,
-          kind: frame.kind, width: frame.width, height: frame.height, bytes: frame.size, ms: Date.now() - started }));
-        if (response.writableEnded) { desktopHelper.release(frame.frameId); return; }
-        sendJson(response, 200, frame);
-      } catch (error) {
-        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-frame', state: 'failed',
-          error: error.message.slice(0, 160), ms: Date.now() - started }));
-        throw error;
-      }
-      return;
-    }
-    const desktopImage = /^\/api\/desktop\/frames\/([a-f0-9]{32})$/.exec(url.pathname);
-    if (request.method === 'GET' && desktopImage) {
-      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道读取桌面画面。');
-      const image = desktopHelper.image(desktopImage[1]);
-      const { offset, length } = fileRange(url.searchParams, image.length, desktopImage[1]);
-      const mimeType = desktopHelper.active.frame.mimeType;
-      response.filePart({ name: mimeType === 'image/jpeg' ? 'desktop.jpg' : 'desktop.png', size: image.length, offset, revision: desktopImage[1], mimeType },
-        image.subarray(offset, offset + length));
-      return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/desktop/move') {
-      try { sendJson(response, 200, await desktopHelper.move(await readJsonBody(request))); }
-      catch (error) {
-        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-move', state: 'failed',
-          code: error.code, error: error.message.slice(0, 160) }));
-        throw error;
-      }
-      return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/desktop/click') {
-      const started = Date.now();
-      console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: 'received' }));
-      try {
-        const result = await desktopHelper.click(await readJsonBody(request));
-        console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: result.state,
-          inputCount: result.inputCount, ms: Date.now() - started }));
-        sendJson(response, 200, result);
-      } catch (error) {
-        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: 'failed',
-          code: error.code, error: error.message.slice(0, 160), ms: Date.now() - started }));
-        throw error;
-      }
-      return;
-    }
-    if (request.method === 'DELETE' && url.pathname === '/api/desktop/frame') {
-      const body = await readJsonBody(request);
-      if (typeof body.sessionId !== 'string' || !/^[a-f0-9]{32}$/.test(body.sessionId)) throw new RequestError(400, '无效的桌面会话');
-      desktopHelper.release(undefined, body.sessionId);
-      sendJson(response, 200, { released: true });
-      return;
-    }
-
-    // These routes never wait on Desktop tools or a stuck thread. They remain
-    // available to authenticated paired controllers during an app-server stall.
-    if (request.method === 'GET' && url.pathname === '/api/shared-recovery/events') {
-      response.startEvents();
-      let stopped = false, timer, previous = '';
-      response.once('close', () => { stopped = true; clearTimeout(timer); });
-      const publish = async () => {
-        try {
-          const state = await recoveryStatus(stateRoot);
-          const serialized = JSON.stringify(state);
-          if (!stopped && serialized !== previous) { previous = serialized; response.event('progress', state); }
-        } catch (error) { if (!stopped) response.event('progress-error', { error: error.message }); }
-        if (!stopped) timer = setTimeout(publish, 1000);
-      };
-      void publish(); return;
-    }
-    if (request.method === 'GET' && url.pathname === '/api/shared-recovery') {
-      sendJson(response, 200, await recoveryStatus(stateRoot)); return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/shared-recovery') {
-      const body = await readJsonBody(request);
-      if (body.confirmed !== true || typeof body.operationId !== 'string') throw new RequestError(400, '请确认重新打开当前 Codex 并接入 Codex 内核后再继续。');
-      sendJson(response, 202, await requestRecovery(stateRoot, body)); return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/service/restart') {
-      const body = await readJsonBody(request);
-      if (body.confirmed !== true) throw new RequestError(400, '请确认重启工作站服务后再继续。');
-      sendJson(response, 202, await requestServiceRestart(stateRoot)); return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/managed-app-server/restart') {
-      const body = await readJsonBody(request);
-      if (body.confirmed !== true || typeof body.operationId !== 'string' || !body.operationId.trim()) {
-        throw new RequestError(400, '请先确认中断风险，再重启 Codex 内核。');
-      }
-      try {
-        sendJson(response, 202, managedAppServer.restart(body.operationId.trim()));
-      } catch (error) {
-        if (error?.code === 'managed_app_server_restarting') throw new RequestError(409, error.message);
-        throw error;
-      }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/official-remote/status') {
-      if (!managedAppServer.client.ready) throw new RequestError(503, 'Codex 内核未就绪，无法读取官方工作站状态。');
-      const result = await managedAppServer.client.request('remoteControl/status/read', {});
-      sendJson(response, 200, { status: result.status, environmentId: result.environmentId });
-      return;
-    }
-    if (request.method === 'POST' && url.pathname === '/api/official-remote/pairing') {
-      if (!managedAppServer.client.ready) throw new RequestError(503, 'Codex 内核未就绪，无法生成官方配对码。');
-      const status = await managedAppServer.client.request('remoteControl/status/read', {});
-      if (status.status !== 'connected') throw new RequestError(409, '当前 Codex 内核未连接 OpenAI Remote，无法配对。');
-      const result = await managedAppServer.client.request('remoteControl/pairing/start', { manualCode: true });
-      if (!result.manualPairingCode || !result.environmentId) throw new RequestError(502, 'Codex 内核未返回有效的官方配对码。');
-      // One-time code: return only to the authenticated station controller; never persist or log it.
-      sendJson(response, 200, { manualPairingCode: result.manualPairingCode,
-        environmentId: result.environmentId, expiresAt: result.expiresAt });
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/health') {
-      // Status readers consume the workstation's cached sample. A phone query
-      // must not trigger PowerShell, process-identity, or app-server checks.
-      const executionReady = executionHealth.state.ready && sharedServer?.ready === true;
-      sendJson(response, 200, {
-        status: 'ok', resident: true, version: runtimeVersion,
-        execution: { ...executionHealth.state, ready: executionReady, canWrite: executionReady,
-          mode: executionMode },
-        managedAppServer: managedAppServer.snapshot(),
-        ...runtimeDiscovery.state,
-        sharedAppServerConnected: sharedServer?.ready === true,
-        sharedRecoveryAvailable: runtimeDiscovery.state.desktop?.installed === true,
-        mode: options.lan ? 'lan' : 'loopback',
-        tokenRequired: Boolean(options.token),
-        nativeImageTransport: sharedServer ? 'shared-app-server' : null,
-        transportMode: sharedServer?.ready === true ? 'lan-shared' : 'unavailable',
-      });
-      return;
-    }
-
-    const fileLinkMatch = /^\/api\/files\/([a-f0-9]{64})\/link$/.exec(url.pathname);
-    if (request.method === 'GET' && fileLinkMatch) {
-      const attachment = attachmentCache.get(fileLinkMatch[1])
-        || dotsImages.restore(fileLinkMatch[1], url.searchParams.get('recovery') || '');
-      if (!attachment?.dotsFile) throw new RequestError(404, '此附件没有网络链接，请重新读取对话。');
-      sendJson(response, 200, { url: await dotsImages.fileLink(attachment) });
-      return;
-    }
-
-    const imageMatch = /^\/api\/images\/([a-f0-9]{64})$/.exec(url.pathname);
-    if (request.method === 'GET' && imageMatch) {
-      let image = attachmentCache.get(imageMatch[1])
-        || dotsImages.restore(imageMatch[1], url.searchParams.get('recovery') || '')
-        || recoverLocalImage(imageMatch[1], url.searchParams.get('recovery') || '');
-      const contextThreadId = url.searchParams.get('threadId') || '';
-      const contextTurnId = url.searchParams.get('turnId') || '';
-      if (!image && sharedServer && contextThreadId && contextTurnId
-        && contextThreadId.length <= 128 && contextTurnId.length <= 128) {
-        try {
-          normalizeTurn(await sharedServer.turnContext(contextThreadId, contextTurnId));
-          image = attachmentCache.get(imageMatch[1]);
-        } catch {}
-      }
-      if (!image) throw new RequestError(404, '这张图片已失效，无法从工作站重新读取。');
-      if (image.dotsFile) await dotsImages.load(image);
-      if (url.searchParams.get('variant') === 'thumbnail') {
-        const asset = await attachmentThumbnail(image);
-        sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
-        return;
-      }
-      const size = image.buffer.length;
-      if (size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '图片超过下载上限（20 MiB），无法下载。');
-      if (!size) throw new RequestError(400, '图片为空，无法下载。');
-      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道读取原图。');
-      const revision = imageMatch[1];
-      const { offset, length } = fileRange(url.searchParams, size, revision);
-      response.filePart({ name: image.name || '图片', size, offset, revision, mimeType: image.mimeType },
-        image.buffer.subarray(offset, offset + length));
-      return;
-    }
-
-    const localFileRequest = url.pathname === '/api/files/local';
-    const fileMatch = /^\/api\/files\/([a-f0-9]{64})$/.exec(url.pathname);
-    if (request.method === 'GET' && (fileMatch || localFileRequest)) {
-      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道下载附件。');
-      const hosted = !localFileRequest && (attachmentCache.get(fileMatch[1])
-        || dotsImages.restore(fileMatch[1], url.searchParams.get('recovery') || ''));
-      if (hosted?.dotsFile) {
-        const { bytes, ...metadata } = await dotsImages.readPart(hosted, url.searchParams);
-        response.filePart(metadata, bytes);
-        return;
-      }
-      const localPath = url.searchParams.get('path') || '';
-      if (localFileRequest && !/^[a-z]:[\\/]/i.test(localPath)) throw new RequestError(400, '无效的工作站文件路径。');
-      const file = localFileRequest ? describeLocalFile(localPath) : fileCache.get(fileMatch[1]);
-      if (!file) throw new RequestError(404, '电脑上的文件不存在或无法读取。');
-      if (file.externalIdentity) await dotsImages.authorization(file.externalIdentity);
-      const { offset, length } = fileRange(url.searchParams, file.size, file.revision);
-      let handle;
-      try { handle = fs.openSync(file.path, 'r'); }
-      catch (error) {
-        if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
-        throw error;
-      }
-      try {
-        const validate = () => {
-          const stat = fs.fstatSync(handle);
-          if (!stat.isFile() || fileRevision(stat) !== file.revision || fileRevision(fs.statSync(file.path)) !== file.revision) {
-            if (fileMatch) fileCache.delete(fileMatch[1]);
-            throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
-          }
-          if (stat.size > MAX_FILE_DOWNLOAD_BYTES) throw new RequestError(413, '文件超过下载上限（20 MiB），无法下载。');
-          if (!stat.size) throw new RequestError(400, '文件为空，无法下载。');
-        };
-        validate();
-        const data = Buffer.alloc(length);
-        let bytesRead = 0;
-        while (bytesRead < data.length) {
-          const count = fs.readSync(handle, data, bytesRead, data.length - bytesRead, offset + bytesRead);
-          if (!count) throw new RequestError(409, '电脑上的文件读取不完整，请重新读取对话。');
-          bytesRead += count;
-        }
-        validate();
-        response.filePart({ name: file.name, size: file.size, offset, revision: file.revision }, data);
-      } finally { fs.closeSync(handle); }
-      return;
-    }
-
-    if (url.pathname.startsWith('/api/app-server/') || url.pathname === '/api/wait') {
-      throw new RequestError(410, '此连接方式已停用。请检查 Codex 内核状态。', { code: 'unsupported_control' });
-    }
-    const taskPath = /^\/api\/threads\/([^/]+)/.exec(url.pathname);
-    if (taskPath && (url.pathname.endsWith('/takeover') || url.pathname === `/api/threads/${taskPath[1]}`)) {
-      throw new RequestError(410, '此连接方式已停用。', { code: 'unsupported_control' });
-    }
-    const hostId = url.searchParams.get('hostId') || 'local';
-    if (!['local', 'durable'].includes(hostId)) {
-      throw new RequestError(410, '此对话的连接方式已停用，请检查 Codex 内核状态。', { code: 'unsupported_control' });
-    }
-    if (!executionHealth.state.ready || sharedServer?.ready !== true) {
-      throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
-        { code: 'full_control_required' });
-    }
-    const rootChat = hostId === 'durable' && taskPath
-      && await dotsServer.source(decodeURIComponent(taskPath[1])) === 'aeon';
-    const execution = rootChat ? dotsChat : hostId === 'durable' ? dotsServer : sharedServer;
-
-    const dotsActivityMatch = /^\/api\/threads\/([^/]+)\/dots-activity-events$/.exec(url.pathname);
-    if (request.method === 'GET' && dotsActivityMatch) {
-      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此活动面板。');
-      response.startEvents();
-      const disconnected = () => response.end();
-      dotsChat.on('disconnected', disconnected);
-      const release = dotsChat.acquirePanelActivity(decodeURIComponent(dotsActivityMatch[1]), value => {
-        if (!response.destroyed) response.event('dots-activity', { threadId: value.threadId, activity: value.activity });
-      });
-      response.once('close', () => { release(); dotsChat.off('disconnected', disconnected); });
-      return;
-    }
-
-    const dotsTasksMatch = /^\/api\/threads\/([^/]+)\/dots-tasks$/.exec(url.pathname);
-    if (request.method === 'GET' && dotsTasksMatch) {
-      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此任务面板。');
-      sendJson(response, 200, await readDotsSummaryTasks(dotsServer, decodeURIComponent(dotsTasksMatch[1])));
-      return;
-    }
-
-    const dotsSchedulesMatch = /^\/api\/threads\/([^/]+)\/dots-schedules$/.exec(url.pathname);
-    if (request.method === 'GET' && dotsSchedulesMatch) {
-      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此定时任务列表。');
-      sendJson(response, 200, await readDotsSchedules(dotsServer, decodeURIComponent(dotsSchedulesMatch[1])));
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname.startsWith('/api/code/')) {
-      const operation = url.pathname.slice('/api/code/'.length);
-      if (hostId === 'durable' && operation !== 'change') throw new RequestError(405, 'Dots 委派任务尚未接入代码浏览。');
-      try {
-        if ((operation === 'image' || operation === 'binary') && !request.fileTransfer) throw new RequestError(400, '请通过文件通道读取预览文件。');
-        const result = await browseCode((method, params) => execution.request(method, params), operation, url.searchParams);
-        if (operation === 'image' || operation === 'binary') {
-          const { data, ...metadata } = result;
-          response.filePart(metadata, data);
-        } else sendJson(response, 200, result);
-      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/models') {
-      sendJson(response, 200, await execution.models());
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/threads') {
-      const limit = boundedInteger(url.searchParams.get('limit'), 20, 1, 200);
-      const archived = url.searchParams.get('archived') === 'true';
-      const scope = url.searchParams.get('scope') || 'all';
-      if (!['all', 'local', 'durable'].includes(scope)) { sendJson(response, 400, { error: '无效的会话列表范围' }); return; }
-      sendJson(response, 200, await sharedCatalog.threads(limit, archived, scope, url.searchParams.get('refresh') === '1'));
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/file-local-copy') {
-      const value = url.searchParams.get('source') || '';
-      const id = /^([a-f0-9]{64})(?:\?recovery=[A-Za-z0-9_-]{1,4096})?$/.exec(value)?.[1];
-      if (id && (fileCache.has(id) || attachmentCache.has(id) && !attachmentCache.get(id).dotsFile)) {
-        sendJson(response, 200, { external: false, localCopy: null }); return;
-      }
-      const asset = await externalDownloadAsset(value, url.searchParams.get('recovery'));
-      const copy = await workstationDownloads.copy(asset.id);
-      sendJson(response, 200, { external: true, localCopy: copy ? workstationCopyReference(copy, asset) : null,
-        cachedContent: asset.buffer ? { remotePath: asset.id, name: asset.name, size: asset.buffer.length, mimeType: asset.mimeType } : null });
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/file-save-locations') {
-      await requireExecutionWritable();
-      const locations = await projectLocations();
-      const projects = (await sharedCatalog.projects()).projects.filter(project => project.hostId === 'local' && project.roots?.length);
-      sendJson(response, 200, { projects, downloads: locations.downloads });
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/file-save-folders') {
-      await requireExecutionWritable();
-      sendJson(response, 200, await workstationDownloads.browse((method, params) => sharedServer.request(method, params),
-        await projectLocations(), Object.fromEntries(url.searchParams)));
-      return;
-    }
-
-    if (request.method === 'POST' && url.pathname === '/api/file-saves') {
-      await requireExecutionWritable();
-      const body = await readJsonBody(request);
-      const asset = await externalDownloadAsset(body.source, body.recovery);
-      const controller = new AbortController(), cancel = () => controller.abort();
-      response.once('close', cancel);
-      try {
-        const result = await workstationDownloads.save((method, params) => sharedServer.request(method, params),
-          await projectLocations(), body, asset, (file, query) => dotsImages.readPart(file, query), controller.signal);
-        sendJson(response, 201, { localCopy: workstationCopyReference(result, asset), warning: result.warning || '' });
-      } finally { response.off('close', cancel); }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/projects') {
-      sendJson(response, 200, { projects: (await sharedCatalog.projects()).projects });
-      return;
-    }
-
-    if (url.pathname === '/api/project-folders' && ['GET', 'POST'].includes(request.method)) {
-      await requireExecutionWritable();
-      try {
-        const rpc = (method, params) => sharedServer.request(method, params);
-        const result = request.method === 'GET'
-          ? await browseProjectFolders(rpc, await projectLocations(), url.searchParams.get('path'))
-          : await createProjectFolder(rpc, await readJsonBody(request));
-        sendJson(response, request.method === 'GET' ? 200 : 201, result);
-      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
-      return;
-    }
-
-    const updateProjectMatch = /^\/api\/projects\/([^/]+)$/.exec(url.pathname);
-    if (request.method === 'POST' && (url.pathname === '/api/projects' || updateProjectMatch)) {
-      await requireExecutionWritable();
-      const body = await readJsonBody(request);
-      try {
-        const result = !updateProjectMatch ? await createWorkstationProject(sharedServer, stateRoot, codexDataRoot, body)
-          : await saveProject((method, params) => sharedServer.request(method, params),
-          await projectLocations(), body, updateProjectMatch ? decodeURIComponent(updateProjectMatch[1]) : null);
-        sendJson(response, updateProjectMatch ? 200 : 201, result);
-      } catch (error) { throw new RequestError(error.statusCode || 502, error.message, error.details); }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/plan-pricing') {
-      sendJson(response, 200, await readPlanPricing(sharedServer));
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/usage-limits') {
-      sendJson(response, 200, await sharedServer.usage());
-      return;
-    }
-
-    if (request.method === 'POST' && url.pathname === '/api/usage-reset') {
-      await requireExecutionWritable();
-      const body = await readJsonBody(request);
-      try { sendJson(response, 200, await consumeUsageReset(sharedServer, body)); }
-      catch (error) { throw new RequestError(error.statusCode || 502, error.message,
-        error.code === 'usage_reset_not_submitted' ? { code: error.code, deliveryUnknown: false } : undefined); }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/usage-events') {
-      const execution = sharedServer;
-      response.startEvents();
-      const emit = value => { if (!response.destroyed) response.event('usage', value); };
-      const failed = error => { if (!response.destroyed) response.event('usage-error', { error: error.message }); };
-      const disconnected = () => response.end();
-      execution.on('usage', emit); execution.on('usage-error', failed); execution.on('disconnected', disconnected);
-      response.once('close', () => { execution.off('usage', emit); execution.off('usage-error', failed); execution.off('disconnected', disconnected); });
-      try { emit(await execution.usage()); } catch (error) { failed(error); }
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/thread-events') {
-      await sharedServer.connect();
-      const clients = [sharedServer, dotsServer, dotsChat];
-      response.startEvents();
-      const listener = ({ method, params }) => {
-        if (!threadListNotificationMethods.has(method) || response.destroyed) return;
-        response.event('thread-list-changed', { method, threadId: params.threadId || params.thread?.id || '',
-          ...(params.hostId ? { hostId: params.hostId } : {}),
-          ...(params.chatRevision !== undefined ? { chatRevision: params.chatRevision } : {}),
-          ...(params.updatedAt !== undefined ? { updatedAt: params.updatedAt } : {}),
-          ...(params.chatMessageRevision !== undefined ? { chatMessageRevision: params.chatMessageRevision } : {}),
-          ...(params.status ? { status: typeof params.status === 'string' ? params.status : params.status.type } : {}) });
-      };
-      const disconnected = () => response.end();
-      for (const client of clients) {
-        client.on('notification', listener);
-        client.on('disconnected', disconnected);
-      }
-      response.once('close', () => {
-        for (const client of clients) {
-          client.off('notification', listener);
-          client.off('disconnected', disconnected);
-        }
-      });
-      response.event('ready', {});
-      return;
-    }
-
-    if (request.method === 'GET' && url.pathname === '/api/turn-events') {
-      const clients = [sharedServer, dotsServer, dotsChat];
-      response.startEvents();
-      const listener = ({ method, params }) => {
-        if (!['turn/started', 'turn/completed'].includes(method)) return;
-        const threadId = params?.threadId, turnId = params?.turn?.id;
-        if (typeof threadId === 'string' && typeof turnId === 'string' && !response.destroyed) {
-          response.event('turn', { method, threadId, turnId });
-        }
-      };
-      const disconnected = () => response.end();
-      for (const client of clients) {
-        client.on('notification', listener);
-        client.on('disconnected', disconnected);
-      }
-      response.once('close', () => {
-        for (const client of clients) {
-          client.off('notification', listener);
-          client.off('disconnected', disconnected);
-        }
-      });
-      return;
-    }
-
-    const activeTurnMatch = /^\/api\/threads\/([^/]+)\/active-turn$/.exec(url.pathname);
-    if (request.method === 'GET' && activeTurnMatch) {
-      if (rootChat) { sendJson(response, 200, { turnId: null }); return; }
-      const threadId = decodeURIComponent(activeTurnMatch[1]);
-      await execution.connect();
-      const { thread } = await execution.request('thread/read', { threadId, includeTurns: false });
-      const status = typeof thread.status === 'string' ? thread.status : thread.status?.type;
-      let turnId = null;
-      if (status === 'active') {
-        const page = await execution.request('thread/turns/list', {
-          threadId, limit: 1, sortDirection: 'desc', itemsView: 'summary',
-        });
-        const latest = page.data?.[0];
-        if (latest?.status === 'inProgress') turnId = latest.id;
-      }
-      sendJson(response, 200, { turnId });
-      return;
-    }
-
-    const createThreadMatch = /^\/api\/projects\/([^/]+)\/threads$/.exec(url.pathname);
-    if (request.method === 'POST' && createThreadMatch) {
-      await requireExecutionWritable();
-      const projectId = decodeURIComponent(createThreadMatch[1]);
-      const body = await readJsonBody(request);
-      if (body.transport === 'app-server' || (body.hostId && body.hostId !== 'local')) {
-        throw new RequestError(410, '此连接方式已停用，请检查 Codex 内核状态。', { code: 'unsupported_control' });
-      }
-      const projects = (await sharedCatalog.projects()).projects;
-      const project = projects.find(item => item.projectId === projectId);
-      if (projectId !== '__unassigned__' && !project) throw new RequestError(404, '没有找到对应项目。');
-      const execution = sharedServer;
-      await execution.connect();
-      const rpc = (method, params) => execution.request(method, params);
-      let target = appServerEvents.projectlessThreadTarget(projectRoot);
-      if (project) {
-        const nativeProjects = await appServerEvents.readProjects(rpc);
-        const nativeProject = nativeProjects.find(item => item.id === project.projectId);
-        if (!nativeProject) throw new RequestError(404, 'Codex 内核中没有找到对应项目，请刷新项目列表。');
-        target = appServerEvents.projectThreadTarget(nativeProject);
-      }
-      const { input } = appServerTurnArguments('', body);
-      messageSubmissionStarted = true;
-      const created = await appServerEvents.createThread(rpc, target, input, body);
-      const prompt = input.filter(part => part.type === 'text').map(part => part.text).join('\n');
-      void generateAndSetThreadTitle({
-        request: rpc,
-        subscribe: listener => {
-          execution.on('notification', listener);
-          return () => execution.off('notification', listener);
-        },
-        threadId: created.threadId,
-        prompt,
-        cwd: target.cwd || null,
-      }).catch(error => console.error(`生成对话标题失败：${error.message}`));
-      sendJson(response, 201, { ...created, hostId:'local' });
-      return;
-    }
-
-    const timelineMatch = /^\/api\/threads\/([^/]+)\/timeline$/.exec(url.pathname);
-    if (request.method === 'GET' && timelineMatch) {
-      const threadId = decodeURIComponent(timelineMatch[1]);
-      const knownSeq = url.searchParams.get('knownSeq');
-      const knownSync = { id: url.searchParams.get('knownSyncId'),
-        epoch: url.searchParams.get('knownEpoch'), seq: knownSeq === null ? undefined : Number(knownSeq),
-        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
-      const pageOptions = sharedHistoryPageOptions();
-      pageOptions.reconcileObserved = url.searchParams.get('refresh') === '1';
-      if (request.socketRequest) {
-        pageOptions.onWindow = async window => {
-          if (response.writableEnded) return;
-          await response.historyPage(await prepareSharedTimeline(window));
-        };
-      }
-      const timeline = await prepareSharedTimeline(await execution.timeline(threadId, pageOptions, knownSync));
-      if (request.socketRequest) {
-        response.on('progress', () => execution.keepSnapshotAlive(threadId, timeline.sync));
-        response.once('close', () => execution.keepSnapshotAlive(threadId, timeline.sync));
-      }
-      sendJson(response, 200, timeline);
-      return;
-    }
-
-    const approvalMatch = /^\/api\/threads\/([^/]+)\/approvals$/.exec(url.pathname);
-    if (request.method === 'GET' && approvalMatch && rootChat) {
-      const threadId = decodeURIComponent(approvalMatch[1]);
-      sendJson(response, 200, await execution.inspectApproval(threadId, {
-        id: url.searchParams.get('requestId'), roomMessageId: url.searchParams.get('roomMessageId'),
-      })); return;
-    }
-    if (request.method === 'POST' && approvalMatch) {
-      const threadId = decodeURIComponent(approvalMatch[1]);
-      await requireExecutionWritable(threadId, execution);
-      const body = await readJsonBody(request);
-      sendJson(response, 200, await execution.respondApproval(threadId, body)); return;
-    }
-
-    const eventsMatch = /^\/api\/threads\/([^/]+)\/events$/.exec(url.pathname);
-    if (request.method === 'GET' && eventsMatch) {
-      const threadId = decodeURIComponent(eventsMatch[1]);
-      const after = Number(url.searchParams.get('afterSeq'));
-      const requestedSync = { id: url.searchParams.get('syncId'), epoch: url.searchParams.get('syncEpoch'),
-        after: Number.isSafeInteger(after) && after >= 0 ? after : undefined,
-        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
-      await streamSharedThread(response, threadId, execution,
-        prepareSharedTimeline, requestedSync);
-      return;
-    }
-
-    const modelChangesMatch = /^\/api\/threads\/([^/]+)\/model-changes$/.exec(url.pathname);
-    if (request.method === 'GET' && modelChangesMatch) {
-      const threadId = decodeURIComponent(modelChangesMatch[1]);
-      if (!/^[0-9a-f]{8}-[0-9a-f-]{20,55}$/i.test(threadId)) throw new RequestError(400, '对话 ID 无效。');
-      sendJson(response, 200, hostId === 'durable' ? [] : await turnModelHistory.read(findSessionPath(threadId), (url.searchParams.get('turnIds') || '').split(',').filter(Boolean)));
-      return;
-    }
-    const contextMatch = /^\/api\/threads\/([^/]+)\/context$/.exec(url.pathname);
-    if (request.method === 'GET' && contextMatch) {
-      const threadId = decodeURIComponent(contextMatch[1]);
-      const current = hostId === 'durable' ? { available: false } : readContextUsage(threadId);
-      const native = await execution.readContext(threadId, url.searchParams.get('refreshSettings') === 'true');
-      sendJson(response, 200, { ...current, ...(native.model ? { model: native.model, thinking: native.thinking, serviceTier: native.serviceTier,
-        permissionMode: native.permissionMode, permissionModes: native.permissionModes } : {}), ...(native.available ? native : {}) });
-      return;
-    }
-
-    const sharedAction = /^\/api\/threads\/([^/]+)\/(history|settings|permissions)$/.exec(url.pathname);
-    if (sharedAction) {
-      const id = decodeURIComponent(sharedAction[1]);
-      if (request.method === 'GET' && sharedAction[2] === 'history') {
-        const pageOptions = sharedHistoryPageOptions();
-        if (url.searchParams.has('itemLimit')) {
-          const itemLimit = Number(url.searchParams.get('itemLimit'));
-          if (!Number.isInteger(itemLimit) || itemLimit < 1 || itemLimit > 100) throw new RequestError(400, '历史条目数量无效。');
-          pageOptions.itemLimit = itemLimit;
-        }
-        const history = await execution.history(id, url.searchParams.get('cursor'), pageOptions);
-        sendJson(response, 200, await prepareSharedTimeline(history, hostId));
-        return;
-      }
-      if (request.method === 'POST' && sharedAction[2] === 'settings') {
-        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 模型设置。');
-        await requireExecutionWritable(id, execution);
-        const body = await readJsonBody(request);
-        sendJson(response, 200, await execution.settings(id, body.model, body.thinking, body.serviceTier));
-        return;
-      }
-      if (request.method === 'POST' && sharedAction[2] === 'permissions') {
-        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 权限设置。');
-        await requireExecutionWritable(id, execution);
-        const body = await readJsonBody(request);
-        sendJson(response, 200, await execution.permissions(id, body.mode));
-        return;
-      }
-    }
-
-    const archiveMatch = /^\/api\/threads\/([^/]+)\/(archive|unarchive)$/.exec(url.pathname);
-    if (request.method === 'POST' && archiveMatch) {
-      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供任务归档。');
-      const threadId = decodeURIComponent(archiveMatch[1]);
-      await requireExecutionWritable(threadId, execution);
-      await execution.request(`thread/${archiveMatch[2]}`, { threadId });
-      sendJson(response, 200, { threadId, archived: archiveMatch[2] === 'archive' });
-      return;
-    }
-
-    const queueMatch = /^\/api\/threads\/([^/]+)\/queue$/.exec(url.pathname);
-    if (queueMatch) {
-      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
-      const threadId = decodeURIComponent(queueMatch[1]);
-      await sharedServer.connect();
-      const rpc = (method, params) => sharedServer.request(method, params);
-      if (request.method === 'GET') { sendJson(response, 200, await appServerEvents.readQueue(rpc, threadId)); return; }
-      if (request.method === 'POST') {
-        await requireExecutionWritable(threadId);
-        const body = await readJsonBody(request);
-        const args = appServerTurnArguments(threadId, body);
-        sendJson(response, 202, await appServerEvents.addQueue(rpc, threadId, args.input, crypto.randomUUID(), body.containsVoiceInput)); return;
-      }
-    }
-
-    const queueItemMatch = /^\/api\/threads\/([^/]+)\/queue\/([a-f0-9-]+)(?:\/(steer))?$/.exec(url.pathname);
-    if (queueItemMatch) {
-      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
-      const threadId = decodeURIComponent(queueItemMatch[1]);
-      const itemId = queueItemMatch[2];
-      await sharedServer.connect();
-      const action = request.method === 'DELETE' ? 'delete' : queueItemMatch[3] === 'steer' ? 'steer' : null;
-      if (!action) throw new RequestError(405, '不支持的队列操作');
-      await requireExecutionWritable(threadId);
-      sendJson(response, 200, await appServerEvents.changeQueue((method, params) => sharedServer.request(method, params), threadId, itemId, action)); return;
-    }
-
-    const interruptMatch = /^\/api\/threads\/([^/]+)\/interrupt$/.exec(url.pathname);
-    if (request.method === 'POST' && interruptMatch) {
-      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供停止 Codex 任务的操作。');
-      const threadId = decodeURIComponent(interruptMatch[1]);
-      await requireExecutionWritable(threadId, execution);
-      const body = await readJsonBody(request);
-      if (!body.turnId) throw new RequestError(400, '缺少活动轮次 ID。');
-      await execution.interrupt(threadId, body.turnId);
-      sendJson(response, 200, { requested: true });
-      return;
-    }
-
-    const roomReadMatch = /^\/api\/threads\/([^/]+)\/read$/.exec(url.pathname);
-    if (request.method === 'POST' && roomReadMatch) {
-      if (!rootChat) throw new RequestError(405, '此对话不提供消息房间已读操作。');
-      await dotsChat.markRead(decodeURIComponent(roomReadMatch[1]), await readJsonBody(request));
-      sendJson(response, 200, { success: true });
-      return;
-    }
-
-    const messageStatusMatch = /^\/api\/threads\/([^/]+)\/messages\/([a-f0-9]{32})\/status$/.exec(url.pathname);
-    if (request.method === 'GET' && messageStatusMatch) {
-      sendJson(response, 200, messageReceipts.status([hostId, decodeURIComponent(messageStatusMatch[1])], messageStatusMatch[2]));
-      return;
-    }
-    const messageMatch = /^\/api\/threads\/([^/]+)\/messages$/.exec(url.pathname);
-    if (request.method === 'POST' && messageMatch) {
-      const threadId = decodeURIComponent(messageMatch[1]);
-      const body = await readJsonBody(request);
-      if (body.hostId && body.hostId !== hostId) throw new RequestError(400, '请求中的对话主机不一致。');
-      const result = await messageReceipts.submit([hostId, threadId], body.clientUserMessageId, async () => {
-        let args;
-        try { await requireExecutionWritable(threadId, execution); args = execution === dotsChat ? { ...body, threadId } : appServerTurnArguments(threadId, { ...body, hostId }); }
-        catch (error) { error.deliveryUnknown = false; throw error; }
-        messageSubmissionStarted = true;
-        const submitted = await execution.send(args);
-        return { success: true, data: submitted.result, usage: submitted.usage };
-      });
-      sendJson(response, 200, result);
-      return;
-    }
-
-    sendJson(response, 404, { error: '未找到请求的资源。' });
-  } catch (error) {
-    if (response.headersSent) {
-      if (!response.writableEnded) response.end();
-      return;
-    }
-    if (!messageSubmissionStarted && error.deliveryUnknown === undefined && request.method === 'POST'
-      && /^\/api\/threads\/[^/]+\/messages(?:\?|$)/.test(request.url || '')) error.deliveryUnknown = false;
-    const status = error instanceof RequestError || error instanceof ThreadWriterConflictError || error instanceof FileRangeError ? (error.statusCode || 409) : 502;
-    sendJson(response, status, {
-      error: error instanceof Error ? error.message : String(error),
-      code: error?.code,
-      threadId: error?.threadId,
-      readOnly: error?.readOnly,
-      details: error?.deliveryUnknown === undefined ? error?.details : { ...error?.details, deliveryUnknown: error.deliveryUnknown },
-    });
-  }
-}
-
-const server = http.createServer(handleRequest);
-const lanSocket = attachLanSocket(server, { token: options.token, dispatch: handleRequest,
-  uploadsRoot,
-  authorizeDevice: (clientId, credential) => authorizeLanDevice(stateRoot, clientId, credential),
-  onDeviceAuthorizationsChanged: listener => onLanAuthorizationsChanged(stateRoot, listener),
-});
-
-let control;
-void managedAppServer.start();
-executionHealth.start();
-runtimeDiscovery.start();
-server.on('error', error => {
-  console.error('桌面服务监听失败：', error.message);
-  process.exit(1);
-});
-server.listen(options.port, options.lan ? '0.0.0.0' : '127.0.0.1', async () => {
-  try {
-    if (process.env.CODEX_REMOTE_INSTANCE && process.env.CODEX_REMOTE_CONTROL_SECRET && process.env.CODEX_REMOTE_READY_PATH) {
-      control = await openControl({ instanceId: process.env.CODEX_REMOTE_INSTANCE,
-        secret: process.env.CODEX_REMOTE_CONTROL_SECRET, shutdown: shutDown, actions: {
-          'refresh-execution': refreshExecution,
-          'relay-start': () => relayManager.run('relay-start'),
-          'relay-status': () => relayManager.run('relay-status'),
-          'relay-stop': () => relayManager.run('relay-stop'),
-          'relay-pair': () => relayManager.run('relay-pair'),
-          'relay-revoke': () => relayManager.run('relay-revoke'),
-          'invite-create': details => relayManager.run('invite-create', details),
-          'invite-list': () => relayManager.run('invite-list'),
-          'invite-revoke': details => relayManager.run('invite-revoke', details),
-          'restart-managed-app-server': () => {
-            const state = managedAppServer.snapshot();
-            return state.launcherRestartRequired ? managedAppServer.restart(crypto.randomUUID()) : state;
-          },
-          'restart-managed-app-server-confirmed': () => managedAppServer.restart(crypto.randomUUID()),
-        } });
-      writeRecord(process.env.CODEX_REMOTE_READY_PATH, { instanceId: process.env.CODEX_REMOTE_INSTANCE,
-        pid: process.pid, controlPort: control.port });
-    }
-  } catch (error) {
-    console.error('桌面服务管理通道启动失败：', error.message);
-    process.exit(1);
-  }
-  console.log(`Code Relax 桌面服务已启动：http://127.0.0.1:${options.port}/`);
-  if (options.lan) {
-    console.log('LAN 模式使用鉴权 WebSocket，仅适合受信任局域网测试，不要暴露到公网。');
-  }
-});
-
-let shuttingDown = false;
-async function shutDown() {
-  if (shuttingDown) return;
-  shuttingDown = true;
-  desktopHelper?.release();
-  lanSocket.close();
-  server.close();
-  executionHealth?.stop();
-  runtimeDiscovery.stop();
-  await relayManager.close();
-  dotsServer.close();
-  dotsChat.close();
-  managedAppServer.close();
-  await control?.close();
-  process.exit(0);
-}
-process.on('SIGTERM', shutDown);
-process.on('SIGINT', shutDown);
-
-function readContextUsage(threadId) {
-  if (!/^[0-9a-f]{8}-[0-9a-f-]{20,55}$/i.test(threadId)) {
-    return { available: false };
-  }
-  const sessionPath = findSessionPath(threadId);
-  if (!sessionPath) return { available: false };
-
-  let handle;
-  try {
-    const stat = fs.statSync(sessionPath);
-    const readLength = Math.min(stat.size, MAX_CONTEXT_TAIL_BYTES);
-    const buffer = Buffer.allocUnsafe(readLength);
-    handle = fs.openSync(sessionPath, 'r');
-    fs.readSync(handle, buffer, 0, readLength, stat.size - readLength);
-    const lines = buffer.toString('utf8').split(/\r?\n/);
-    let usage = null;
-    let settings = null;
-    for (let index = lines.length - 1; index >= 0; index -= 1) {
-      let event;
-      if (!usage && lines[index].includes('"token_count"')) {
-        try { event = JSON.parse(lines[index]); } catch { event = null; }
-        if (event?.type === 'event_msg' && event?.payload?.type === 'token_count') {
-          const usedTokens = Number(event.payload.info?.last_token_usage?.total_tokens);
-          const contextWindow = Number(event.payload.info?.model_context_window);
-          if (Number.isFinite(usedTokens) && Number.isFinite(contextWindow) && contextWindow > 0) {
-            usage = {
-              available: true,
-              usedTokens,
-              contextWindow,
-              remainingTokens: Math.max(0, contextWindow - usedTokens),
-              usedPercent: Math.min(100, Math.max(0, usedTokens / contextWindow * 100)),
-              updatedAt: event.timestamp || null,
-            };
-          }
-        }
-      }
-      if (!settings && lines[index].includes('"type":"turn_context"')) {
-        try { event = JSON.parse(lines[index]); } catch { event = null; }
-        settings = turnSettings(event);
-      }
-      if (usage && settings) break;
-    }
-    settings ||= sessionSettingsCache.get(sessionPath) || readLatestTurnSettings(sessionPath);
-    if (settings) sessionSettingsCache.set(sessionPath, settings);
-    if (usage) return { ...usage, ...settings };
-    if (settings) return { available: false, ...settings };
-  } catch {
-    sessionPathCache.delete(threadId);
-  } finally {
-    if (handle !== undefined) fs.closeSync(handle);
-  }
-  return { available: false };
-}
-
-function readLatestTurnSettings(sessionPath) {
-  let handle;
-  try {
-    const stat = fs.statSync(sessionPath);
-    const readLength = Math.min(stat.size, MAX_SETTINGS_SCAN_BYTES);
-    const buffer = Buffer.allocUnsafe(readLength);
-    handle = fs.openSync(sessionPath, 'r');
-    fs.readSync(handle, buffer, 0, readLength, stat.size - readLength);
-    const text = buffer.toString('utf8');
-    let searchFrom = text.length;
-    while (searchFrom > 0) {
-      const marker = text.lastIndexOf('"type":"turn_context"', searchFrom);
-      if (marker < 0) break;
-      const lineStart = text.lastIndexOf('\n', marker) + 1;
-      const nextLine = text.indexOf('\n', marker);
-      const lineEnd = nextLine < 0 ? text.length : nextLine;
-      let event;
-      try { event = JSON.parse(text.slice(lineStart, lineEnd)); } catch { event = null; }
-      const settings = turnSettings(event);
-      if (settings) return settings;
-      searchFrom = Math.max(0, lineStart - 1);
-    }
-  } catch {
-    return null;
-  } finally {
-    if (handle !== undefined) fs.closeSync(handle);
-  }
-  return null;
-}
-
-function turnSettings(event) {
-  if (event?.type !== 'turn_context') return null;
-  const model = typeof event.payload?.model === 'string' && /^[a-z0-9.-]{1,80}$/i.test(event.payload.model)
-    ? event.payload.model
-    : '';
-  const thinking = typeof event.payload?.effort === 'string' && /^[a-z0-9_-]{1,32}$/i.test(event.payload.effort)
-    ? event.payload.effort
-    : '';
-  return model || thinking ? { model, thinking } : null;
-}
-
-function findSessionPath(threadId) {
-  const cached = sessionPathCache.get(threadId);
-  if (cached && fs.existsSync(cached)) return cached;
-  if (!fs.existsSync(sessionsRoot)) return null;
-
-  const suffix = `-${threadId}.jsonl`.toLowerCase();
-  const directories = [sessionsRoot];
-  while (directories.length) {
-    const directory = directories.pop();
-    let entries;
-    try {
-      entries = fs.readdirSync(directory, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const entry of entries) {
-      const fullPath = path.join(directory, entry.name);
-      if (entry.isDirectory()) directories.push(fullPath);
-      if (entry.isFile() && entry.name.toLowerCase().endsWith(suffix)) {
-        sessionPathCache.set(threadId, fullPath);
-        return fullPath;
-      }
-    }
-  }
-  return null;
-}
-
-function messagePayload(body) {
-  const prompt = typeof body.prompt === 'string' ? body.prompt.trim() : '';
-  if (body.images !== undefined && (!Array.isArray(body.images) || body.images.length > 4)) {
-    throw new RequestError(400, '每条消息最多 4 张图片。');
-  }
-  const images = (body.images || []).map(id => {
-    if (typeof id === 'string' && id.startsWith('data:')) return validateInlineImage(id);
-    if (typeof id !== 'string' || !/^[a-f0-9]{64}$/.test(id)) throw new RequestError(400, '无效的图片标识。');
-    const webpFile = path.join(uploadsRoot, `${id}.webp`);
-    const file = fs.existsSync(webpFile) ? webpFile : path.join(uploadsRoot, `${id}.png`);
-    if (!fs.existsSync(file)) throw new RequestError(400, '图片不存在，请重新添加。');
-    return file;
-  });
-  for (const input of fileMentions.originalInputs(body)) {
-    const incoming = fs.realpathSync(path.join(uploadsRoot, 'incoming'));
-    const imagePath = fs.realpathSync(input.path);
-    if (path.dirname(imagePath).toLowerCase() !== incoming.toLowerCase()) throw new RequestError(400, '原图必须来自上传目录。');
-    const stat = fs.statSync(imagePath);
-    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_ATTACHMENT_BYTES) throw new RequestError(400, '原图为空或超过 20 MiB。');
-    images.push(imagePath);
-  }
-  if (images.filter(image => image.startsWith('data:')).reduce((size, image) => size + Buffer.byteLength(image.slice(image.indexOf(',') + 1), 'base64'), 0) > 8 * 1024 * 1024) throw new RequestError(413, '本条消息图片合计不能超过 8 MiB。');
-  if (!prompt && !images.length) throw new RequestError(400, 'prompt 不能为空。');
-  if (prompt.length > 32_000) throw new RequestError(400, 'prompt 不能超过 32000 个字符。');
-
-  const payload = { prompt, images };
-  if (typeof body.hostId === 'string' && body.hostId.trim()) payload.hostId = body.hostId.trim();
-  if (typeof body.model === 'string' && body.model.trim()) {
-    payload.model = body.model.trim();
-  }
-  if (typeof body.thinking === 'string' && body.thinking.trim()) {
-    const thinking = body.thinking.trim();
-    if (!ALLOWED_THINKING.has(thinking)) throw new RequestError(400, '不支持的推理强度。');
-    if ((payload.model === 'gpt-5.5' || payload.model === 'gpt-5.3-codex-spark')
-      && (thinking === 'max' || thinking === 'ultra')) {
-      throw new RequestError(400, '所选模型不支持该推理强度。');
-    }
-    payload.thinking = thinking;
-  }
-  return payload;
-}
-
-function appServerTurnArguments(threadId, body) {
-  const payload = messagePayload(body);
-  const mentioned = payload.hostId === 'durable' ? fileMentions.parse(payload.prompt) : null;
-  if (mentioned?.files.length) payload.prompt = mentioned.text;
-  const input = [];
-  if (payload.prompt) input.push({ type: 'text', text: payload.prompt });
-  for (const image of payload.images) {
-    if (image.startsWith('data:')) input.push({ type: 'image', url: image });
-    else if (payload.hostId === 'durable') {
-      const mimeType = imageMimeType(image);
-      if (!mimeType) throw new RequestError(400, '云端图片格式无效。');
-      input.push({ type: 'image', url: `data:${mimeType};base64,${fs.readFileSync(image).toString('base64')}` });
-    } else input.push({ type: 'localImage', path: image });
-  }
-  const value = { threadId, input, ...appServerEvents.mobileTurnSource(body.clientUserMessageId, body.containsVoiceInput) };
-  if (mentioned?.files.length) value.uploadFiles = mentioned.files;
-  if (typeof body.clientUserMessageId === 'string' && /^[a-f0-9]{32}$/.test(body.clientUserMessageId)) value.clientUserMessageId = body.clientUserMessageId;
-  if (payload.model) value.model = payload.model;
-  if (payload.thinking) value.effort = payload.thinking;
-  return value;
-}
-
-function normalizeTimeline(data) {
-  const source = data && typeof data === 'object' ? data : {};
-  const sourceTurns = Array.isArray(source.turns) ? source.turns : source.thread?.turns;
-  const turns = Array.isArray(sourceTurns) ? sourceTurns.map(normalizeTurn) : [];
-  return {
-    schemaVersion: 1,
-    thread: normalizeThread(source.thread),
-    turns,
-  };
-}
-
-function normalizeSharedTimeline({ thread, nextCursor, sync, notModified, incremental }, hostId = thread?.hostId || 'local') {
-  const timeline = normalizeTimeline({ thread: { ...thread, title: thread.name || thread.title || '', hostId,
-    transport: 'shared-app-server' } });
-  return { ...timeline,
-    historyItemCount: (thread.turns || []).reduce((count, turn) => count + (turn.roomMessage ? 1 : turn.items?.length || 0), 0),
-    historyView: thread?.threadSource === 'aeon' ? 'chat-items-v1' : 'item-pages-v1',
-    ...(notModified ? { notModified: true } : {}),
-    ...(incremental ? { incremental: true } : {}),
-    ...(nextCursor !== undefined ? { nextCursor } : {}), ...(sync ? { sync } : {}) };
-}
-
-async function prepareSharedTimeline(value, hostId) {
-  if (value.thread?.threadSource !== 'aeon') return normalizeSharedTimeline(value, hostId);
-  const epoch = dotsChat.epoch, threadId = value.thread.id;
-  const current = () => {
-    if (epoch !== dotsChat.epoch) throw new Error('点点连接已变化，请重新同步。');
-  };
-  if (value.notModified) {
-    const record = dotsChat.threads.get(threadId);
-    if (await dotsImages.prepareTimeline(record?.thread)) {
-      current();
-      value = dotsChat.snapshot(threadId, record);
-    }
-  }
-  const snapshot = structuredClone(value);
-  await dotsImages.prepareTimeline(snapshot.thread);
-  current();
-  return normalizeSharedTimeline(snapshot, hostId);
-}
-
-function normalizeThread(thread) {
-  const source = thread && typeof thread === 'object' ? thread : {};
-  return {
-    id: source.id || '',
-    title: source.name || source.title || source.preview || '',
-    status: statusText(source.status),
-    updatedAt: Number(source.updatedAt) || 0,
-    recencyAt: Number(source.recencyAt ?? source.updatedAt) || 0,
-    projectId: source.projectId || '',
-    cwd: source.cwd || '',
-    hostId: source.hostId || '',
-    threadSource: source.threadSource || '',
-    ...(['aeon', 'aeon_child'].includes(source.threadSource) ? { chatRevision: source.chatRevision || '' } : {}),
-    ...(source.threadSource === 'aeon' ? { avatar: source.avatar || '', color: source.color || '',
-      chatMessageRevision: source.chatMessageRevision, messagingRoomId: source.messagingRoomId, lastMessageAt: source.lastMessageAt } : {}),
-    transport: source.transport || 'shared-app-server',
-    readOnly: source.readOnly === true,
-    readOnlyReason: source.readOnlyReason || '',
-  };
-}
-
-function normalizeTurn(turn) {
-  const source = turn && typeof turn === 'object' ? turn : {};
-  const turnId = source.id || '';
-  const entries = Array.isArray(source.items) ? source.items.map(normalizeItem).filter(Boolean) : [];
-  for (const entry of entries) {
-    const images = [...(entry.attachments || []), entry.image, ...Object.values(entry.imageAssets || {})].filter(Boolean);
-    for (const image of images) if (image.remotePath && !image.recoveryTurnId) image.recoveryTurnId = turnId;
-  }
-  return {
-    id: turnId,
-    status: statusText(source.status),
-    startedAt: source.startedAt || null,
-    completedAt: source.completedAt || null,
-    durationMs: source.durationMs ?? null,
-    error: source.error ?? null,
-    runtimeNotice: source.runtimeNotice ?? null,
-    ...(source.itemPage ? { itemPage: source.itemPage } : {}),
-    ...(source.roomMessage ? { roomMessage: true } : {}),
-    ...(source.deleted ? { deleted: true } : {}),
-    ...(source.historyOnly ? { historyOnly: true } : {}),
-    ...(source.cacheStub ? { cacheStub: true } : {}),
-    entries,
-  };
-}
-
-function normalizeItem(item) {
-  if (!item || typeof item !== 'object') return null;
-
-  if (item.type === 'approval') {
-    return { ...item, type: 'activity', kind: 'approval', title: item.params?.message || '需要你的批准' };
-  }
-
-  if (item.type === 'contextCompaction') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'contextCompaction',
-      title: '已自动压缩上下文',
-    };
-  }
-
-  const delegated = appServerEvents.toolDelegation(item);
-  if (delegated) {
-    return {
-      type: 'message', id: item.id || '', role: 'user', source: 'remote',
-      delegation: delegationSource(delegated), ...splitUploadedImages(delegated.input),
-    };
-  }
-
-  if (item.type === 'userMessage') {
-    const { text, files, delegation } = extractUserText(item.content);
-    const attachments = [...normalizeAttachments(item.content), ...files.map(file => file.fileId ? normalizeAttachment(file) : ({
-      ...file,
-      remotePath: file.path,
-      previewRemotePath: file.previewPath || '',
-    }))];
-    if (!text && !attachments.length) return null;
-    return {
-      clientId: item.clientId,
-      type: 'message',
-      id: item.id || '',
-      role: 'user',
-      text,
-      attachments,
-      ...(delegation ? { delegation: delegationSource(delegation) } : {}),
-    };
-  }
-
-  if (item.type === 'agentMessage') {
-    return {
-      type: 'message',
-      id: item.id || '',
-      role: 'assistant',
-      phase: item.phase || '',
-      delivery: item.delivery,
-      questions: item.questions,
-      text: item.text || '',
-      attachments: normalizeAttachments(item.attachments),
-      imageAssets: markdownImageAssets(item.text || ''),
-      fileAssets: markdownFileAssets(item.text || ''),
-    };
-  }
-
-  if (item.type === 'reasoning') {
-    const detail = Array.isArray(item.summary)
-      ? item.summary.map(summaryText).filter(Boolean).join('\n')
-      : summaryText(item.summary);
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'reasoning',
-      title: '思考摘要',
-      detail,
-    };
-  }
-
-  if (item.type === 'commandExecution') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'command',
-      title: '命令',
-      titleOnly: true,
-      status: statusText(item.status),
-      command: item.command,
-      cwd: item.cwd,
-      exitCode: item.exitCode,
-      durationMs: item.durationMs,
-    };
-  }
-
-  if (item.type === 'mcpToolCall') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'tool',
-      title: '工具',
-      titleOnly: true,
-      status: statusText(item.status),
-      server: item.server,
-      tool: item.tool,
-      arguments: item.arguments,
-      durationMs: item.durationMs,
-      error: item.error,
-    };
-  }
-
-  if (item.type === 'dynamicToolCall') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'tool',
-      title: '工具',
-      titleOnly: true,
-      status: statusText(item.status),
-      namespace: item.namespace,
-      tool: item.tool,
-      arguments: item.arguments,
-      durationMs: item.durationMs,
-      success: item.success,
-    };
-  }
-
-  if (item.type === 'fileChange') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'fileChange',
-      title: '文件修改',
-      titleOnly: true,
-      status: statusText(item.status),
-      changes: fileChanges.summarize(item.changes),
-    };
-  }
-
-  if (item.type === 'webSearch') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'webSearch',
-      title: '网页搜索',
-      titleOnly: true,
-      query: item.query || item.action?.query || '',
-      ...(item.action && typeof item.action === 'object' ? { action: item.action } : {}),
-    };
-  }
-
-  if (item.type === 'imageView') {
-    const image = typeof item.path === 'string' && item.path
-      ? normalizeAttachment({ type: 'localImage', path: item.path })
-      : null;
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'imageView',
-      title: '查看图片',
-      titleOnly: true,
-      path: item.path || '',
-      image,
-    };
-  }
-
-  if (item.type === 'imageGeneration') {
-    const result = typeof item.result === 'string' ? item.result.trim() : '';
-    const image = typeof item.savedPath === 'string' && item.savedPath
-      ? normalizeAttachment({ type: 'localImage', path: item.savedPath, name: '生成的图片' })
-      : result ? normalizeAttachment({ type: 'image', name: '生成的图片',
-        url: result.startsWith('data:image/') ? result : `data:image/png;base64,${result}` }) : null;
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'imageGeneration',
-      title: '生成图片',
-      titleOnly: true,
-      status: statusText(item.status),
-      image,
-      failure: item.failure || null,
-      transparentBackground: item.transparentBackground === true,
-    };
-  }
-
-  if (item.type === 'subAgentActivity') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'subAgent',
-      title: '子任务',
-      titleOnly: true,
-      status: statusText(item.kind),
-      agentPath: item.agentPath || '',
-      agentThreadId: item.agentThreadId || '',
-    };
-  }
-
-  if (item.type === 'collabAgentToolCall') {
-    return {
-      type: 'activity',
-      id: item.id || '',
-      kind: 'collaboration',
-      title: '任务协作',
-      titleOnly: true,
-      status: statusText(item.status),
-      tool: item.tool || '',
-      prompt: item.prompt || '',
-      senderThreadId: item.senderThreadId || '',
-      receiverThreadIds: Array.isArray(item.receiverThreadIds) ? item.receiverThreadIds : [],
-      model: item.model || '',
-      reasoningEffort: item.reasoningEffort || '',
-      agentsStates: item.agentsStates && typeof item.agentsStates === 'object' ? item.agentsStates : {},
-    };
-  }
-
-  return {
-    type: 'activity',
-    id: item.id || '',
-    kind: item.type || 'event',
-    title: item.type || '事件',
-    status: statusText(item.status),
-    detail: JSON.stringify(item, null, 2),
-  };
-}
-
-function sharedHistoryPageOptions() {
-  return {
-    maxTurns: SHARED_HISTORY_PAGE_TURNS,
-    maxBytes: SHARED_HISTORY_PAGE_BYTES,
-    measure: value => Buffer.byteLength(JSON.stringify(normalizeSharedTimeline(value))),
-  };
-}
-
-function normalizeAttachments(content) {
-  if (!Array.isArray(content)) return [];
-  const items = content.filter(item => item && !['text', 'input_text'].includes(item.type)).map(item => ({ ...item }));
-  const text = content.filter(item => ['text', 'input_text'].includes(item?.type)).map(item => item.text || '').join('\n');
-  const paths = [...new Set([...text.matchAll(/<image\b[^>]*\bpath="([^"]+)"[^>]*>/g)].map(match => match[1]))];
-  const images = items.filter(item => ['image', 'input_image', 'localImage'].includes(item.type));
-  for (const [index, imagePath] of paths.entries()) {
-    if (images.some(item => item.path === imagePath)) continue;
-    if (images[index] && !images[index].path) images[index].path = imagePath;
-    else items.push({ type: 'localImage', path: imagePath });
-  }
-  const seen = new Set();
-  return items.map(item => normalizeAttachment(item)).filter(item => {
-    if (!item.url) return true;
-    if (seen.has(item.url)) return false;
-    seen.add(item.url); return true;
-  });
-}
-
-function markdownImageAssets(text) {
-  const assets = Object.create(null);
-  function visit(tokens) {
-    for (const token of tokens) {
-      const value = token.type === 'image' ? token.attrGet('src')
-        : token.type === 'link_open' && !token.meta?.fileCitation ? token.attrGet('href') : null;
-      if (value && !Object.hasOwn(assets, value)) {
-        const localPath = fileCitations.localReference(value)?.path;
-        // Only paths actually referenced by Desktop messages become accessible.
-        // Do not expose a client-supplied filesystem path endpoint or UNC shares.
-        if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
-          const asset = normalizeAttachment({ type: 'localImage', path: localPath });
-          if (asset.available) assets[value] = asset;
-        }
-      }
-      if (token.children && token.type !== 'image') visit(token.children);
-    }
-  }
-  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
-  return assets;
-}
-
-function markdownFileAssets(text) {
-  const assets = Object.create(null);
-  function visit(tokens) {
-    for (const token of tokens) {
-      if (token.type === 'link_open') {
-        const value = token.attrGet('href');
-        if (value && !Object.hasOwn(assets, value)) {
-          const localPath = fileCitations.localReference(value)?.path;
-          if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
-            assets[value] = { remotePath: localPath, name: path.basename(localPath) };
-            // Link rendering must not depend on file existence or transient backend state.
-          }
-        }
-      }
-      if (token.children && token.type !== 'image') visit(token.children);
-    }
-  }
-  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
-  return assets;
-}
-
-function describeLocalFile(filePath) {
-  const resolved = path.resolve(filePath);
-  let stat;
-  try { stat = fs.statSync(resolved); }
-  catch (error) {
-    if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
-    if (error.code === 'EACCES' || error.code === 'EPERM') throw new RequestError(403, '电脑系统无法读取此文件：' + error.code);
-    throw error;
-  }
-  if (!stat.isFile()) throw new RequestError(400, '此路径不是文件。');
-  return { path: resolved, name: path.basename(resolved), size: stat.size, revision: fileRevision(stat) };
-}
-
-function splitUploadedImages(text) {
-  const tokens = imageMarkdown.parse(text, {});
-  const lines = text.split('\n');
-  const removed = new Set();
-  const attachments = [];
-  for (let index = 0; index < tokens.length - 1; index++) {
-    const block = tokens[index];
-    const inline = tokens[index + 1];
-    if (block.type !== 'paragraph_open' || !block.map || inline.type !== 'inline') continue;
-    const children = (inline.children || []).filter(token => token.type !== 'softbreak');
-    if (!children.length || children.some(token => token.type !== 'image')) continue;
-    const paths = children.map(token => {
-      try { return path.resolve(decodeURIComponent(token.attrGet('src') || '')); } catch { return ''; }
-    });
-    if (paths.some(file => path.dirname(file).toLowerCase() !== uploadsRoot.toLowerCase()
-      || !/^[a-f0-9]{64}\.(png|webp)$/.test(path.basename(file)))) continue;
-    for (const file of paths) attachments.push(normalizeAttachment({ type: 'localImage', path: file, name: '移动端图片' }));
-    for (let line = block.map[0]; line < block.map[1]; line++) removed.add(line);
-  }
-  const visibleText = lines.filter((line, index) => !removed.has(index)).join('\n').trim();
-  return { text: visibleText, attachments, imageAssets: markdownImageAssets(visibleText) };
-}
-
-async function externalDownloadAsset(value, recovery = '') {
-  const match = /^([a-f0-9]{64})(?:\?recovery=([A-Za-z0-9_-]{1,4096}))?$/.exec(value || '');
-  if (!match) throw new RequestError(400, '无效的外部文件标识。');
-  const asset = attachmentCache.get(match[1]) || dotsImages.restore(match[1], match[2] || recovery || '');
-  if (!asset?.dotsFile) throw new RequestError(404, '外部文件授权已失效，请重新读取对话。');
-  await dotsImages.authorization(asset.identity);
-  return asset;
-}
-
-function workstationCopyReference(copy, asset) {
-  const id = crypto.createHmac('sha256', fileCapabilitySecret).update(JSON.stringify([asset.id, copy.path, copy.revision])).digest('hex');
-  fileCache.set(id, { ...copy, id, externalIdentity: asset.identity });
-  while (fileCache.size > MAX_CACHED_FILES) fileCache.delete(fileCache.keys().next().value);
-  return { remotePath: id, path: copy.path, name: copy.name, size: copy.size, mimeType: copy.mimeType };
-}
-
-function normalizeAttachment(item, identity) {
-  const name = item.name || item.fileName || (typeof item.path === 'string' ? path.basename(item.path) : '');
-  let cached = null;
-  const isImage = ['image', 'input_image', 'localImage'].includes(item.type);
-  if (isImage || item.type === 'file') cached = dotsImages.remember(item, identity);
-  if (isImage && typeof item.path === 'string') {
-    cached = cacheLocalImage(item.path, name) || cached;
-  }
-  if (!cached) {
-    const dataUrl = typeof item.url === 'string' && item.url.startsWith('data:image/')
-      ? item.url
-      : (typeof item.image_url === 'string' && item.image_url.startsWith('data:image/') ? item.image_url : '');
-    if (dataUrl) cached = cacheDataImage(dataUrl, name);
-  }
-  return {
-    type: isImage ? 'image' : item.type || 'attachment',
-    name: cached?.name || name,
-    mimeType: cached?.mimeType || item.mimeType || '',
-    ...(cached?.size ? { size: cached.size } : {}),
-    ...(cached?.dotsFile ? { networkFile: true } : {}),
-    available: Boolean(cached),
-    remotePath: cached ? (isImage ? cached.id : `${cached.id}?recovery=${cached.recoveryToken}`) : '',
-    recoveryToken: cached?.recoveryToken || '',
-    url: '',
-    thumbnailUrl: '',
-  };
-}
-
-function cacheLocalImage(filePath, name) {
-  try {
-    const resolved = path.resolve(filePath);
-    const stat = fs.statSync(resolved);
-    const mimeType = imageMimeType(resolved);
-    if (!stat.isFile() || !mimeType || stat.size > MAX_ATTACHMENT_BYTES) return null;
-    const cached = rememberAttachment(fs.readFileSync(resolved), mimeType, name,
-      localImageRecoveryToken(resolved, stat));
-    void attachmentThumbnail(cached).catch(() => {});
-    return cached;
-  } catch {
-    return null;
-  }
-}
-
-function cacheDataImage(dataUrl, name) {
-  const match = /^data:(image\/(?:png|jpeg|gif|webp|bmp));base64,([a-z0-9+/=\r\n]+)$/i.exec(dataUrl);
-  if (!match) return null;
-  try {
-    const buffer = Buffer.from(match[2], 'base64');
-    if (!buffer.length || buffer.length > MAX_ATTACHMENT_BYTES) return null;
-    return rememberAttachment(buffer, match[1].toLowerCase(), name);
-  } catch {
-    return null;
-  }
-}
-
-function rememberAttachment(buffer, mimeType, name, recoveryToken = '') {
-  const id = crypto.createHash('sha256').update(buffer).digest('hex');
-  if (!attachmentCache.has(id)) {
-    while (attachmentCache.size >= MAX_CACHED_ATTACHMENTS) {
-      attachmentCache.delete(attachmentCache.keys().next().value);
-    }
-    attachmentCache.set(id, { id, buffer, mimeType, name, recoveryToken });
-  } else if (recoveryToken && !attachmentCache.get(id).recoveryToken) {
-    attachmentCache.get(id).recoveryToken = recoveryToken;
-  }
-  return attachmentCache.get(id);
-}
-
-function localImageRecoveryToken(filePath, stat) {
-  const iv = crypto.randomBytes(12);
-  const cipher = crypto.createCipheriv('aes-256-gcm', imageCapabilityKey, iv);
-  const payload = Buffer.from(JSON.stringify([filePath, stat.size, stat.mtimeMs]));
-  const encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);
-  return Buffer.concat([iv, cipher.getAuthTag(), encrypted]).toString('base64url');
-}
-
-function recoverLocalImage(id, token) {
-  if (!token || token.length > 2048) return null;
-  try {
-    const value = Buffer.from(token, 'base64url');
-    if (value.length < 29) return null;
-    const decipher = crypto.createDecipheriv('aes-256-gcm', imageCapabilityKey, value.subarray(0, 12));
-    decipher.setAuthTag(value.subarray(12, 28));
-    const [filePath, size, mtimeMs] = JSON.parse(Buffer.concat([
-      decipher.update(value.subarray(28)), decipher.final(),
-    ]).toString('utf8'));
-    if (typeof filePath !== 'string' || !path.isAbsolute(filePath)
-      || !Number.isSafeInteger(size) || size <= 0 || size > MAX_ATTACHMENT_BYTES
-      || typeof mtimeMs !== 'number' || !Number.isFinite(mtimeMs)) return null;
-    const stat = fs.statSync(filePath);
-    const mimeType = imageMimeType(filePath);
-    if (!stat.isFile() || stat.size !== size || stat.mtimeMs !== mtimeMs || !mimeType) return null;
-    const buffer = fs.readFileSync(filePath);
-    if (crypto.createHash('sha256').update(buffer).digest('hex') !== id) return null;
-    return rememberAttachment(buffer, mimeType, path.basename(filePath), token);
-  } catch {
-    return null;
-  }
-}
-
-async function attachmentThumbnail(image) {
-  if (!image.thumbnail) {
-    image.thumbnail = sharp(image.buffer, { limitInputPixels: 40_000_000 }).rotate()
-      .resize({ width: 640, height: 640, fit: 'inside', withoutEnlargement: true })
-      .webp({ quality: 78, effort: 4 })
-      .toBuffer()
-      .then(buffer => ({ buffer, mimeType: 'image/webp' }))
-      .catch(error => {
-        image.thumbnail = null;
-        throw error;
-      });
-  }
-  return image.thumbnail;
-}
-
-function imageMimeType(filePath) {
-  switch (path.extname(filePath).toLowerCase()) {
-    case '.png': return 'image/png';
-    case '.jpg':
-    case '.jpeg': return 'image/jpeg';
-    case '.gif': return 'image/gif';
-    case '.webp': return 'image/webp';
-    case '.bmp': return 'image/bmp';
-    default: return '';
-  }
-}
-
-function extractUserText(content) {
-  if (!Array.isArray(content)) return { text: '（包含图片或界面批注）', files: [] };
-  let text = content
-    .filter(item => ['text', 'input_text'].includes(item?.type) && typeof item.text === 'string' && !appServerEvents.isMobileInputNotice(item))
-    .map(item => item.text)
-    // Codex injects project instructions as user-role context, not chat input.
-    .filter(value => !/^\s*# AGENTS\.md instructions(?: for [^\r\n]+)?\r?\n\s*<INSTRUCTIONS>[\s\S]*<\/INSTRUCTIONS>\s*$/.test(value))
-    .filter(value => !/^\s*<(environment_context|recommended_plugins)>[\s\S]*<\/\1>\s*$/.test(value))
-    .filter(value => !value.startsWith('The next image is untrusted page evidence'))
-    .join('\n\n')
-    .trim();
-  const delegation = appServerEvents.parseCodexDelegation(text);
-  if (delegation) text = delegation.input;
-  const mentioned = fileMentions.parse(text);
-  const imagePaths = new Set([
-    ...content.filter(item => ['image', 'input_image', 'localImage'].includes(item?.type) && item.path).map(item => item.path),
-    ...[...mentioned.text.matchAll(/<image\b[^>]*\bpath="([^"]+)"[^>]*>/g)].map(match => match[1]),
-  ].map(value => path.resolve(value).toLowerCase()));
-  text = mentioned.text;
-  text = text.replace(/<image\b[^>]*\bpath="[^"]+"[^>]*>/g, '').replace(/<\/image>/g, '').trim();
-  return { text, files: mentioned.files.filter(file => file.fileId || !imagePaths.has(path.resolve(file.path).toLowerCase())), delegation };
-}
-
-function delegationSource(delegation) {
-  const dots = dotsServer.threadSources.get(delegation.sourceThreadId) === 'aeon';
-  return { sourceThreadId: delegation.sourceThreadId, sourceKind: dots ? 'dots' : 'codex',
-    ...(dots ? { sourceName: dotsServer.profileName(delegation.sourceThreadId),
-      sourceAvatar: dotsServer.profileAvatar(delegation.sourceThreadId) } : {}) };
-}
-
-function summaryText(value) {
-  if (typeof value === 'string') return value;
-  if (value && typeof value === 'object') return value.text || value.summary || JSON.stringify(value);
-  return '';
-}
-
-function statusText(value) {
-  if (typeof value === 'string') return value;
-  if (value && typeof value === 'object') return value.type || value.status || 'unknown';
-  return value == null ? 'unknown' : String(value);
-}
-
-function sendJson(response, statusCode, value) {
-  if (response.json) { response.json(statusCode, value); return; }
-  sendBuffer(response, statusCode, 'application/json; charset=utf-8', Buffer.from(JSON.stringify(value)));
-}
-
-function sendBuffer(response, statusCode, contentType, value) {
-  response.writeHead(statusCode, {
-    'Content-Type': contentType,
-    'Content-Length': value.length,
-    'Cache-Control': 'no-store',
-    'X-Content-Type-Options': 'nosniff',
-    'Content-Security-Policy': "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; media-src blob:",
-  });
-  response.end(value);
-}
-
-async function readJsonBody(request) {
-  return request.body;
-}
-
-function parseOptions(args) {
-  let port = Number.parseInt(process.env.CODEX_REMOTE_BRIDGE_PORT || '45831', 10);
-  let lan = process.env.CODEX_REMOTE_BRIDGE_LAN === 'true';
-  let token = process.env.CODEX_REMOTE_BRIDGE_TOKEN?.trim() || '';
-  if (process.env.CODEX_REMOTE_APP_SERVER === 'true') throw new Error('此连接方式已停用。');
-  for (let i = 0; i < args.length; i += 1) {
-    if (args[i] === '--lan') lan = true;
-    if (args[i] === '--app-server') throw new Error('此连接方式已停用。');
-    if (args[i] === '--port' && args[i + 1]) port = Number.parseInt(args[++i], 10);
-    if (args[i] === '--token' && args[i + 1]) token = args[++i];
-  }
-  if (!Number.isInteger(port) || port < 1024 || port > 65535) {
-    throw new Error('端口必须位于 1024 到 65535 之间。');
-  }
-  if (lan && !token) token = crypto.randomBytes(32).toString('base64url');
-  return { port, lan, token };
-}
-
-function boundedInteger(value, fallback, minimum, maximum) {
-  const parsed = Number.parseInt(value || '', 10);
-  return Number.isFinite(parsed) ? Math.min(maximum, Math.max(minimum, parsed)) : fallback;
-}
+import crypto from 'node:crypto';
+import { RustDeskVideoProbe } from './platform/windows/rustdesk-video-probe.mjs';
+import fs from 'node:fs';
+import http from 'node:http';
+import path from 'node:path';
+import os from 'node:os';
+import { fileURLToPath } from 'node:url';
+import vm from 'node:vm';
+import sharp from 'sharp';
+import { attachLanSocket } from './lan-socket-server.mjs';
+import fileMentions from '../shared/file-mentions.cjs';
+import fileCitations from '../shared/file-citations.cjs';
+import { validateInlineImage } from './message-images.mjs';
+import { ThreadWriterConflictError } from './shared-app-server.mjs';
+import { ManagedAppServer, managedAppServerUrl } from './managed-app-server.mjs';
+import { RuntimeDiscovery } from './runtime-discovery.mjs';
+import { streamSharedThread, threadListNotificationMethods } from './shared-thread-stream.mjs';
+import appServerEvents from '../shared/app-server-events.cjs';
+import questionAttention from '../shared/question-attention.cjs';
+import messageDelivery from '../shared/message-delivery.cjs';
+import fileChanges from '../shared/file-changes.cjs';
+import { runtimePaths } from './platform/runtime-paths.mjs';
+import { openControl } from './service-control.mjs';
+import { writeRecord, readRecord } from './service-lifecycle.mjs';
+import { ExecutionHealth } from './execution-health.mjs';
+import { authorizeLanDevice, onLanAuthorizationsChanged, recordLanConnection } from './self-relay/lan-authorizations.mjs';
+import { createRelayManager } from './self-relay/lifecycle.mjs';
+import { generateAndSetThreadTitle } from './thread-title-generation.mjs';
+import { desktopHost } from './platform/desktop-host.mjs';
+import { SharedCatalog } from './shared-catalog.mjs';
+import { DotsAppServer } from './dots-task-catalog.mjs';
+import { DotsChatServer } from './dots-chat-server.mjs';
+import { HostedHistoryCache } from './hosted-history-cache.mjs';
+import { readDotsSummaryTasks } from './dots-summary-tasks.mjs';
+import { readDotsSchedules } from './dots-schedules.mjs';
+import { DotsMessageImages } from './dots-message-images.mjs';
+import { desktopDotsProfiles } from './platform/windows/dots-profile.mjs';
+import { readPlanPricing } from './plan-pricing.mjs';
+import { requestRecovery, recoveryStatus } from './shared-recovery.mjs';
+import { requestServiceRestart } from './service-restart.mjs';
+import { TurnModelHistory } from './turn-model-history.mjs';
+import { browseCode } from './code-browser.mjs';
+import { fileRange, fileRevision, FileRangeError } from './file-transfer-range.mjs';
+import { browseProjectFolders, createProjectFolder } from './project-management.mjs';
+import { projectLocations } from './platform/project-locations.mjs';
+import { createWorkstationProject } from './project-create.mjs';
+import { removeWorkstationProject } from './project-remove.mjs';
+import { projectArchiveCandidates } from './project-archive.mjs';
+import { archivedThreadsPage } from './archived-threads.mjs';
+import { updateWorkstationProject } from './project-update.mjs';
+import { WorkstationDownloads } from './workstation-downloads.mjs';
+import { consumeUsageReset } from './usage-reset.mjs';
+import { DesktopHelper } from './platform/windows/desktop-helper.mjs';
+
+const turnModelHistory = new TurnModelHistory();
+const messageReceipts = new messageDelivery.Store();
+const desktopHelper = process.platform === 'win32' ? new DesktopHelper() : null;
+
+const MAX_ATTACHMENT_BYTES = 20 * 1024 * 1024;
+const MAX_FILE_DOWNLOAD_BYTES = 20 * 1024 * 1024;
+const MAX_CACHED_ATTACHMENTS = 32;
+const MAX_CACHED_FILES = 64;
+const MAX_CONTEXT_TAIL_BYTES = 4 * 1024 * 1024;
+const MAX_LIVE_ACTIVITY_TAIL_BYTES = 1024 * 1024;
+const SHARED_HISTORY_PAGE_BYTES = 500 * 1024;
+const SHARED_HISTORY_PAGE_TURNS = 8;
+const MAX_SETTINGS_SCAN_BYTES = 64 * 1024 * 1024;
+const ALLOWED_THINKING = new Set(['low', 'medium', 'high', 'xhigh', 'max', 'ultra']);
+
+class RequestError extends Error {
+  constructor(statusCode, message, details) {
+    super(message);
+    this.statusCode = statusCode;
+    this.details = details;
+    this.code = details?.code;
+  }
+}
+
+function readRuntimeVersion() {
+  let directory = path.dirname(fileURLToPath(import.meta.url));
+  while (true) {
+    const manifest = readRecord(path.join(directory, 'package.json'));
+    if (manifest?.name === '@walkhi/code-relax') return manifest.version || '未知';
+    const parent = path.dirname(directory);
+    if (parent === directory) return '未知';
+    directory = parent;
+  }
+}
+
+const options = parseOptions(process.argv.slice(2));
+const runtimeVersion = readRuntimeVersion();
+
+const webRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', 'web');
+const projectRoot = os.homedir();
+const { codexDataRoot, stateRoot, sessionsRoot, uploadsRoot } = runtimePaths();
+const desktopVideoProbe = process.platform === 'win32' ? new RustDeskVideoProbe({ stateRoot }) : null;
+process.once('exit', () => desktopVideoProbe?.stop());
+const workstationDownloads = new WorkstationDownloads(stateRoot);
+const markdownItScript = fs.readFileSync(path.join(webRoot, 'vendor', 'markdown-it.umd.min.js'));
+const markdownSandbox = { atob };
+vm.runInNewContext(markdownItScript.toString(), markdownSandbox);
+const imageMarkdown = markdownSandbox.markdownit({ html: false });
+fileCitations.install(imageMarkdown);
+const attachmentCache = new Map();
+const fileCache = new Map();
+const fileCapabilitySecret = crypto.randomBytes(32);
+const imageCapabilityKey = crypto.createHash('sha256')
+  .update('code-relax-image-capability\0').update(options.token || fileCapabilitySecret).digest();
+const sessionPathCache = new Map();
+const sessionSettingsCache = new Map();
+const liveActivityCache = new Map();
+let sharedServer = null;
+const managedAppServer = new ManagedAppServer({ stateRoot, host: desktopHost });
+const hostedHistoryCache = new HostedHistoryCache(stateRoot);
+const dotsServer = new DotsAppServer(managedAppServer.client, desktopDotsProfiles(codexDataRoot, stateRoot), hostedHistoryCache, { uploadsRoot });
+const dotsImages = new DotsMessageImages({ localServer: managedAppServer.client, identity: () => dotsServer.profileIdentity,
+  cache: attachmentCache, capabilityKey: imageCapabilityKey, maxEntries: MAX_CACHED_ATTACHMENTS, maxBytes: MAX_ATTACHMENT_BYTES });
+const dotsChat = new DotsChatServer(dotsServer, undefined, { uploadsRoot });
+const runtimeDiscovery = new RuntimeDiscovery({ stateRoot, host: desktopHost, url: managedAppServerUrl });
+const relayManager = createRelayManager(stateRoot);
+let sharedCatalog = null, executionMode = 'ordinary';
+function selectSharedExecution(enabled) {
+  const next = enabled ? managedAppServer.client : null;
+  if (sharedServer === next) return;
+  sharedServer = next;
+  sharedCatalog = sharedServer ? new SharedCatalog(sharedServer, dotsServer, dotsChat) : null;
+}
+const executionHealth = new ExecutionHealth(async () => {
+  await managedAppServer.ensure();
+  const managed = managedAppServer.snapshot();
+  // The managed app-server owns execution. Desktop is another client of the
+  // same service, so closing Desktop must not disable phone writes.
+  selectSharedExecution(managed.ready);
+  executionMode = sharedServer ? 'shared' : 'ordinary';
+  const managedRestarting = managed.state === 'restarting';
+  const ready = !managedRestarting && sharedServer?.ready === true;
+  const state = managedRestarting ? 'restarting'
+    : ready ? 'full' : 'unavailable';
+  return { state, ready, canWrite: ready, mode: executionMode };
+});
+async function refreshExecution() {
+  await executionHealth.refresh();
+  return { mode: executionMode };
+}
+async function requireExecutionWritable(threadId, client = sharedServer) {
+  const execution = await executionHealth.refresh();
+  if (!execution.canWrite) {
+    throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
+      { code: 'full_control_required', execution });
+  }
+  if (threadId && client) client.requireWritable(threadId);
+  return execution;
+}
+managedAppServer.client.on('subscription-error', error => console.error('Codex 内核任务取消订阅失败：', error.message));
+dotsServer.on('subscription-error', error => console.error('Dots 任务取消订阅失败：', error.message));
+dotsChat.on('subscription-error', error => console.error('Dots 对话取消订阅失败：', error.message));
+dotsChat.on('activity-error', error => console.error('点点状态通道不可用：', error.message));
+
+dotsServer.on('profile-error', error => console.error(error.message));
+async function handleRequest(request, response) {
+  let messageSubmissionStarted = false;
+  try {
+    const url = new URL(request.url || '/', `http://${request.headers.host || 'localhost'}`);
+
+    if (!request.socketRequest) {
+      sendJson(response, 404, { error: '此端口不提供网页。' });
+      return;
+    }
+
+    if (process.platform !== 'win32' && url.pathname.startsWith('/api/desktop/'))
+      throw new RequestError(501, 'Mac 版不提供远程桌面控制。', { code: 'desktop_control_unsupported' });
+
+    if (url.pathname === '/api/desktop/video-probe') {
+      if (request.method === 'POST') {
+        try { sendJson(response, 200, await desktopVideoProbe.begin()); }
+        catch (error) { throw new RequestError(error.statusCode || 502, error.message, { code: error.code || 'desktop_video_failed' }); }
+      }
+      else if (request.method === 'PUT' || request.method === 'DELETE') {
+        const body = await readJsonBody(request);
+        if (typeof body.leaseId !== 'string' || !/^[a-f0-9]{32}$/.test(body.leaseId)) throw new RequestError(400, '无效的视频会话');
+        sendJson(response, 200, request.method === 'PUT' ? desktopVideoProbe.renew(body.leaseId) : desktopVideoProbe.release(body.leaseId));
+      } else throw new RequestError(405, '不支持的操作');
+      return;
+    }
+    if (request.method === 'GET' && url.pathname === '/api/desktop/frame') {
+      const started = Date.now();
+      try {
+        const preview = url.searchParams.get('preview') === '1';
+        const frame = await desktopHelper.frame({ preview });
+        if (!preview) console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-frame', state: frame.state,
+          kind: frame.kind, width: frame.width, height: frame.height, bytes: frame.size, ms: Date.now() - started }));
+        if (response.writableEnded) { desktopHelper.release(frame.frameId); return; }
+        sendJson(response, 200, frame);
+      } catch (error) {
+        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-frame', state: 'failed',
+          error: error.message.slice(0, 160), ms: Date.now() - started }));
+        throw error;
+      }
+      return;
+    }
+    const desktopImage = /^\/api\/desktop\/frames\/([a-f0-9]{32})$/.exec(url.pathname);
+    if (request.method === 'GET' && desktopImage) {
+      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道读取桌面画面。');
+      const image = desktopHelper.image(desktopImage[1]);
+      const { offset, length } = fileRange(url.searchParams, image.length, desktopImage[1]);
+      const mimeType = desktopHelper.active.frame.mimeType;
+      response.filePart({ name: mimeType === 'image/jpeg' ? 'desktop.jpg' : 'desktop.png', size: image.length, offset, revision: desktopImage[1], mimeType },
+        image.subarray(offset, offset + length));
+      return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/desktop/move') {
+      try { sendJson(response, 200, await desktopHelper.move(await readJsonBody(request))); }
+      catch (error) {
+        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-move', state: 'failed',
+          code: error.code, error: error.message.slice(0, 160) }));
+        throw error;
+      }
+      return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/desktop/click') {
+      const started = Date.now();
+      console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: 'received' }));
+      try {
+        const result = await desktopHelper.click(await readJsonBody(request));
+        console.info(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: result.state,
+          inputCount: result.inputCount, ms: Date.now() - started }));
+        sendJson(response, 200, result);
+      } catch (error) {
+        console.error(JSON.stringify({ time: new Date().toISOString(), event: 'desktop-click', state: 'failed',
+          code: error.code, error: error.message.slice(0, 160), ms: Date.now() - started }));
+        throw error;
+      }
+      return;
+    }
+    if (request.method === 'DELETE' && url.pathname === '/api/desktop/frame') {
+      const body = await readJsonBody(request);
+      if (typeof body.sessionId !== 'string' || !/^[a-f0-9]{32}$/.test(body.sessionId)) throw new RequestError(400, '无效的桌面会话');
+      desktopHelper.release(undefined, body.sessionId);
+      sendJson(response, 200, { released: true });
+      return;
+    }
+
+    // These routes never wait on Desktop tools or a stuck thread. They remain
+    // available to authenticated paired controllers during an app-server stall.
+    if (request.method === 'GET' && url.pathname === '/api/shared-recovery/events') {
+      response.startEvents();
+      let stopped = false, timer, previous = '';
+      response.once('close', () => { stopped = true; clearTimeout(timer); });
+      const publish = async () => {
+        try {
+          const state = await recoveryStatus(stateRoot);
+          const serialized = JSON.stringify(state);
+          if (!stopped && serialized !== previous) { previous = serialized; response.event('progress', state); }
+        } catch (error) { if (!stopped) response.event('progress-error', { error: error.message }); }
+        if (!stopped) timer = setTimeout(publish, 1000);
+      };
+      void publish(); return;
+    }
+    if (request.method === 'GET' && url.pathname === '/api/shared-recovery') {
+      sendJson(response, 200, await recoveryStatus(stateRoot)); return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/shared-recovery') {
+      const body = await readJsonBody(request);
+      if (body.confirmed !== true || typeof body.operationId !== 'string') throw new RequestError(400, '请确认重新打开当前 Codex 并接入 Codex 内核后再继续。');
+      sendJson(response, 202, await requestRecovery(stateRoot, body)); return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/service/restart') {
+      const body = await readJsonBody(request);
+      if (body.confirmed !== true) throw new RequestError(400, '请确认重启工作站服务后再继续。');
+      sendJson(response, 202, await requestServiceRestart(stateRoot)); return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/managed-app-server/restart') {
+      const body = await readJsonBody(request);
+      if (body.confirmed !== true || typeof body.operationId !== 'string' || !body.operationId.trim()) {
+        throw new RequestError(400, '请先确认中断风险，再重启 Codex 内核。');
+      }
+      try {
+        sendJson(response, 202, managedAppServer.restart(body.operationId.trim()));
+      } catch (error) {
+        if (error?.code === 'managed_app_server_restarting') throw new RequestError(409, error.message);
+        throw error;
+      }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/official-remote/status') {
+      if (!managedAppServer.client.ready) throw new RequestError(503, 'Codex 内核未就绪，无法读取官方工作站状态。');
+      const result = await managedAppServer.client.request('remoteControl/status/read', {});
+      sendJson(response, 200, { status: result.status, environmentId: result.environmentId });
+      return;
+    }
+    if (request.method === 'POST' && url.pathname === '/api/official-remote/pairing') {
+      if (!managedAppServer.client.ready) throw new RequestError(503, 'Codex 内核未就绪，无法生成官方配对码。');
+      const status = await managedAppServer.client.request('remoteControl/status/read', {});
+      if (status.status !== 'connected') throw new RequestError(409, '当前 Codex 内核未连接 OpenAI Remote，无法配对。');
+      const result = await managedAppServer.client.request('remoteControl/pairing/start', { manualCode: true });
+      if (!result.manualPairingCode || !result.environmentId) throw new RequestError(502, 'Codex 内核未返回有效的官方配对码。');
+      // One-time code: return only to the authenticated station controller; never persist or log it.
+      sendJson(response, 200, { manualPairingCode: result.manualPairingCode,
+        environmentId: result.environmentId, expiresAt: result.expiresAt });
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/health') {
+      // Status readers consume the workstation's cached sample. A phone query
+      // must not trigger PowerShell, process-identity, or app-server checks.
+      const executionReady = executionHealth.state.ready && sharedServer?.ready === true;
+      sendJson(response, 200, {
+        status: 'ok', resident: true, version: runtimeVersion,
+        execution: { ...executionHealth.state, ready: executionReady, canWrite: executionReady,
+          mode: executionMode },
+        managedAppServer: managedAppServer.snapshot(),
+        ...runtimeDiscovery.state,
+        sharedAppServerConnected: sharedServer?.ready === true,
+        sharedRecoveryAvailable: runtimeDiscovery.state.desktop?.installed === true,
+        mode: options.lan ? 'lan' : 'loopback',
+        tokenRequired: Boolean(options.token),
+        nativeImageTransport: sharedServer ? 'shared-app-server' : null,
+        transportMode: sharedServer?.ready === true ? 'lan-shared' : 'unavailable',
+      });
+      return;
+    }
+
+    const fileLinkMatch = /^\/api\/files\/([a-f0-9]{64})\/link$/.exec(url.pathname);
+    if (request.method === 'GET' && fileLinkMatch) {
+      const attachment = attachmentCache.get(fileLinkMatch[1])
+        || dotsImages.restore(fileLinkMatch[1], url.searchParams.get('recovery') || '');
+      if (!attachment?.dotsFile) throw new RequestError(404, '此附件没有网络链接，请重新读取对话。');
+      sendJson(response, 200, { url: await dotsImages.fileLink(attachment) });
+      return;
+    }
+
+    const imageMatch = /^\/api\/images\/([a-f0-9]{64})$/.exec(url.pathname);
+    if (request.method === 'GET' && imageMatch) {
+      let image = attachmentCache.get(imageMatch[1])
+        || dotsImages.restore(imageMatch[1], url.searchParams.get('recovery') || '')
+        || recoverLocalImage(imageMatch[1], url.searchParams.get('recovery') || '');
+      const contextThreadId = url.searchParams.get('threadId') || '';
+      const contextTurnId = url.searchParams.get('turnId') || '';
+      if (!image && sharedServer && contextThreadId && contextTurnId
+        && contextThreadId.length <= 128 && contextTurnId.length <= 128) {
+        try {
+          normalizeTurn(await sharedServer.turnContext(contextThreadId, contextTurnId));
+          image = attachmentCache.get(imageMatch[1]);
+        } catch {}
+      }
+      if (!image) throw new RequestError(404, '这张图片已失效，无法从工作站重新读取。');
+      if (image.dotsFile) await dotsImages.load(image);
+      if (url.searchParams.get('variant') === 'thumbnail') {
+        const asset = await attachmentThumbnail(image);
+        sendJson(response, 200, { url: `data:${asset.mimeType};base64,${asset.buffer.toString('base64')}` });
+        return;
+      }
+      const size = image.buffer.length;
+      if (size > MAX_ATTACHMENT_BYTES) throw new RequestError(413, '图片超过下载上限（20 MiB），无法下载。');
+      if (!size) throw new RequestError(400, '图片为空，无法下载。');
+      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道读取原图。');
+      const revision = imageMatch[1];
+      const { offset, length } = fileRange(url.searchParams, size, revision);
+      response.filePart({ name: image.name || '图片', size, offset, revision, mimeType: image.mimeType },
+        image.buffer.subarray(offset, offset + length));
+      return;
+    }
+
+    const localFileRequest = url.pathname === '/api/files/local';
+    const fileMatch = /^\/api\/files\/([a-f0-9]{64})$/.exec(url.pathname);
+    if (request.method === 'GET' && (fileMatch || localFileRequest)) {
+      if (!request.fileTransfer) throw new RequestError(400, '请通过文件通道下载附件。');
+      const hosted = !localFileRequest && (attachmentCache.get(fileMatch[1])
+        || dotsImages.restore(fileMatch[1], url.searchParams.get('recovery') || ''));
+      if (hosted?.dotsFile) {
+        const { bytes, ...metadata } = await dotsImages.readPart(hosted, url.searchParams);
+        response.filePart(metadata, bytes);
+        return;
+      }
+      const localPath = url.searchParams.get('path') || '';
+      if (localFileRequest && !/^[a-z]:[\\/]/i.test(localPath)) throw new RequestError(400, '无效的工作站文件路径。');
+      const file = localFileRequest ? describeLocalFile(localPath) : fileCache.get(fileMatch[1]);
+      if (!file) throw new RequestError(404, '电脑上的文件不存在或无法读取。');
+      if (file.externalIdentity) await dotsImages.authorization(file.externalIdentity);
+      const { offset, length } = fileRange(url.searchParams, file.size, file.revision);
+      let handle;
+      try { handle = fs.openSync(file.path, 'r'); }
+      catch (error) {
+        if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
+        throw error;
+      }
+      try {
+        const validate = () => {
+          const stat = fs.fstatSync(handle);
+          if (!stat.isFile() || fileRevision(stat) !== file.revision || fileRevision(fs.statSync(file.path)) !== file.revision) {
+            if (fileMatch) fileCache.delete(fileMatch[1]);
+            throw new RequestError(409, '电脑上的文件已发生变化，请重新读取对话。');
+          }
+          if (stat.size > MAX_FILE_DOWNLOAD_BYTES) throw new RequestError(413, '文件超过下载上限（20 MiB），无法下载。');
+          if (!stat.size) throw new RequestError(400, '文件为空，无法下载。');
+        };
+        validate();
+        const data = Buffer.alloc(length);
+        let bytesRead = 0;
+        while (bytesRead < data.length) {
+          const count = fs.readSync(handle, data, bytesRead, data.length - bytesRead, offset + bytesRead);
+          if (!count) throw new RequestError(409, '电脑上的文件读取不完整，请重新读取对话。');
+          bytesRead += count;
+        }
+        validate();
+        response.filePart({ name: file.name, size: file.size, offset, revision: file.revision }, data);
+      } finally { fs.closeSync(handle); }
+      return;
+    }
+
+    if (url.pathname.startsWith('/api/app-server/') || url.pathname === '/api/wait') {
+      throw new RequestError(410, '此连接方式已停用。请检查 Codex 内核状态。', { code: 'unsupported_control' });
+    }
+    const taskPath = /^\/api\/threads\/([^/]+)/.exec(url.pathname);
+    if (taskPath && (url.pathname.endsWith('/takeover') || url.pathname === `/api/threads/${taskPath[1]}`)) {
+      throw new RequestError(410, '此连接方式已停用。', { code: 'unsupported_control' });
+    }
+    const hostId = url.searchParams.get('hostId') || 'local';
+    if (!['local', 'durable'].includes(hostId)) {
+      throw new RequestError(410, '此对话的连接方式已停用，请检查 Codex 内核状态。', { code: 'unsupported_control' });
+    }
+    if (!executionHealth.state.ready || sharedServer?.ready !== true) {
+      throw new RequestError(503, 'Codex 内核未就绪。请重启工作站服务；若仍失败，运行 relax doctor。',
+        { code: 'full_control_required' });
+    }
+    const rootChat = hostId === 'durable' && taskPath
+      && await dotsServer.source(decodeURIComponent(taskPath[1])) === 'aeon';
+    const execution = rootChat ? dotsChat : hostId === 'durable' ? dotsServer : sharedServer;
+
+    const dotsActivityMatch = /^\/api\/threads\/([^/]+)\/dots-activity-events$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsActivityMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此活动面板。');
+      response.startEvents();
+      const disconnected = () => response.end();
+      dotsChat.on('disconnected', disconnected);
+      const release = dotsChat.acquirePanelActivity(decodeURIComponent(dotsActivityMatch[1]), value => {
+        if (!response.destroyed) response.event('dots-activity', { threadId: value.threadId, activity: value.activity });
+      });
+      response.once('close', () => { release(); dotsChat.off('disconnected', disconnected); });
+      return;
+    }
+
+    const dotsTasksMatch = /^\/api\/threads\/([^/]+)\/dots-tasks$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsTasksMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此任务面板。');
+      sendJson(response, 200, await readDotsSummaryTasks(dotsServer, decodeURIComponent(dotsTasksMatch[1])));
+      return;
+    }
+
+    const dotsSchedulesMatch = /^\/api\/threads\/([^/]+)\/dots-schedules$/.exec(url.pathname);
+    if (request.method === 'GET' && dotsSchedulesMatch) {
+      if (!rootChat) throw new RequestError(405, '只有点点主聊天提供此定时任务列表。');
+      sendJson(response, 200, await readDotsSchedules(dotsServer, decodeURIComponent(dotsSchedulesMatch[1])));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname.startsWith('/api/code/')) {
+      const operation = url.pathname.slice('/api/code/'.length);
+      if (hostId === 'durable' && operation !== 'change') throw new RequestError(405, 'Dots 委派任务尚未接入代码浏览。');
+      try {
+        if ((operation === 'image' || operation === 'binary') && !request.fileTransfer) throw new RequestError(400, '请通过文件通道读取预览文件。');
+        const result = await browseCode((method, params) => execution.request(method, params), operation, url.searchParams);
+        if (operation === 'image' || operation === 'binary') {
+          const { data, ...metadata } = result;
+          response.filePart(metadata, data);
+        } else sendJson(response, 200, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/models') {
+      sendJson(response, 200, await execution.models());
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/archived-threads') {
+      sendJson(response, 200, await archivedThreadsPage(execution, sharedServer, hostId, url.searchParams.get('cursor')));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/threads') {
+      const limit = boundedInteger(url.searchParams.get('limit'), 20, 1, 200);
+      const archived = url.searchParams.get('archived') === 'true';
+      const scope = url.searchParams.get('scope') || 'all';
+      if (!['all', 'local', 'durable'].includes(scope)) { sendJson(response, 400, { error: '无效的会话列表范围' }); return; }
+      sendJson(response, 200, await sharedCatalog.threads(limit, archived, scope, url.searchParams.get('refresh') === '1'));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-local-copy') {
+      const value = url.searchParams.get('source') || '';
+      const id = /^([a-f0-9]{64})(?:\?recovery=[A-Za-z0-9_-]{1,4096})?$/.exec(value)?.[1];
+      if (id && (fileCache.has(id) || attachmentCache.has(id) && !attachmentCache.get(id).dotsFile)) {
+        sendJson(response, 200, { external: false, localCopy: null }); return;
+      }
+      const asset = await externalDownloadAsset(value, url.searchParams.get('recovery'));
+      const copy = await workstationDownloads.copy(asset.id);
+      sendJson(response, 200, { external: true, localCopy: copy ? workstationCopyReference(copy, asset) : null,
+        cachedContent: asset.buffer ? { remotePath: asset.id, name: asset.name, size: asset.buffer.length, mimeType: asset.mimeType } : null });
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-save-locations') {
+      await requireExecutionWritable();
+      const locations = await projectLocations();
+      const projects = (await sharedCatalog.projects()).projects.filter(project => project.hostId === 'local' && project.roots?.length);
+      sendJson(response, 200, { projects, downloads: locations.downloads });
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/file-save-folders') {
+      await requireExecutionWritable();
+      sendJson(response, 200, await workstationDownloads.browse((method, params) => sharedServer.request(method, params),
+        await projectLocations(), Object.fromEntries(url.searchParams)));
+      return;
+    }
+
+    if (request.method === 'POST' && url.pathname === '/api/file-saves') {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      const asset = await externalDownloadAsset(body.source, body.recovery);
+      const controller = new AbortController(), cancel = () => controller.abort();
+      response.once('close', cancel);
+      try {
+        const result = await workstationDownloads.save((method, params) => sharedServer.request(method, params),
+          await projectLocations(), body, asset, (file, query) => dotsImages.readPart(file, query), controller.signal);
+        sendJson(response, 201, { localCopy: workstationCopyReference(result, asset), warning: result.warning || '' });
+      } finally { response.off('close', cancel); }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/projects') {
+      sendJson(response, 200, { projects: (await sharedCatalog.projects()).projects });
+      return;
+    }
+
+    if (url.pathname === '/api/project-folders' && ['GET', 'POST'].includes(request.method)) {
+      await requireExecutionWritable();
+      try {
+        const rpc = (method, params) => sharedServer.request(method, params);
+        const result = request.method === 'GET'
+          ? await browseProjectFolders(rpc, !url.searchParams.get('path') || url.searchParams.get('locations') === '1' ? await projectLocations() : null, url.searchParams.get('path'))
+          : await createProjectFolder(rpc, await readJsonBody(request));
+        sendJson(response, request.method === 'GET' ? 200 : 201, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message); }
+      return;
+    }
+
+    const projectActionMatch = /^\/api\/projects\/([^/]+)\/(archive-candidates|remove|move)$/.exec(url.pathname);
+    if (projectActionMatch) {
+      await requireExecutionWritable();
+      const projectId = decodeURIComponent(projectActionMatch[1]);
+      if (request.method === 'POST' && projectActionMatch[2] === 'move') {
+        const { beforeProjectId } = await readJsonBody(request);
+        if (beforeProjectId !== null && (typeof beforeProjectId !== 'string' || !beforeProjectId.trim()) || beforeProjectId === projectId) {
+          throw new RequestError(400, '排序目标无效。');
+        }
+        await sharedServer.request('project/move', { projectId, beforeProjectId });
+        sendJson(response, 200, await sharedCatalog.projects().then(({ projects }) => ({ projects })));
+        return;
+      }
+      if (request.method === 'GET' && projectActionMatch[2] === 'archive-candidates') {
+        sendJson(response, 200, await projectArchiveCandidates(sharedServer, dotsServer, projectId));
+        return;
+      }
+      if (request.method === 'POST' && projectActionMatch[2] === 'remove') {
+        const result = await removeWorkstationProject(sharedServer, stateRoot, codexDataRoot, projectId, await readJsonBody(request));
+        sendJson(response, 200, result);
+        return;
+      }
+      throw new RequestError(405, '不支持的项目操作。');
+    }
+
+    const updateProjectMatch = /^\/api\/projects\/([^/]+)$/.exec(url.pathname);
+    if (request.method === 'POST' && (url.pathname === '/api/projects' || updateProjectMatch)) {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      try {
+        const result = !updateProjectMatch ? await createWorkstationProject(sharedServer, stateRoot, codexDataRoot, body)
+          : await updateWorkstationProject(sharedServer, stateRoot, codexDataRoot, decodeURIComponent(updateProjectMatch[1]), body);
+        sendJson(response, updateProjectMatch ? 200 : 201, result);
+      } catch (error) { throw new RequestError(error.statusCode || 502, error.message, error.details); }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/plan-pricing') {
+      sendJson(response, 200, await readPlanPricing(sharedServer));
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/usage-limits') {
+      sendJson(response, 200, await sharedServer.usage());
+      return;
+    }
+
+    if (request.method === 'POST' && url.pathname === '/api/usage-reset') {
+      await requireExecutionWritable();
+      const body = await readJsonBody(request);
+      try { sendJson(response, 200, await consumeUsageReset(sharedServer, body)); }
+      catch (error) { throw new RequestError(error.statusCode || 502, error.message,
+        error.code === 'usage_reset_not_submitted' ? { code: error.code, deliveryUnknown: false } : undefined); }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/usage-events') {
+      const execution = sharedServer;
+      response.startEvents();
+      const emit = value => { if (!response.destroyed) response.event('usage', value); };
+      const failed = error => { if (!response.destroyed) response.event('usage-error', { error: error.message }); };
+      const disconnected = () => response.end();
+      execution.on('usage', emit); execution.on('usage-error', failed); execution.on('disconnected', disconnected);
+      response.once('close', () => { execution.off('usage', emit); execution.off('usage-error', failed); execution.off('disconnected', disconnected); });
+      try { emit(await execution.usage()); } catch (error) { failed(error); }
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/thread-events') {
+      await sharedServer.connect();
+      const clients = [sharedServer, dotsServer, dotsChat];
+      response.startEvents();
+      const listener = ({ method, params }) => {
+        const questionChange = questionAttention.fromNotification(method, params);
+        if ((!threadListNotificationMethods.has(method) && !questionChange) || response.destroyed) return;
+        response.event('thread-list-changed', { method, threadId: params.threadId || params.thread?.id || '',
+          ...(questionChange ? { questionChange } : {}),
+          ...(params.hostId ? { hostId: params.hostId } : {}),
+          ...(params.chatRevision !== undefined ? { chatRevision: params.chatRevision } : {}),
+          ...(params.updatedAt !== undefined ? { updatedAt: params.updatedAt } : {}),
+          ...(params.chatMessageRevision !== undefined ? { chatMessageRevision: params.chatMessageRevision } : {}),
+          ...(params.status ? { status: typeof params.status === 'string' ? params.status : params.status.type } : {}) });
+      };
+      const disconnected = () => response.end();
+      for (const client of clients) {
+        client.on('notification', listener);
+        client.on('disconnected', disconnected);
+      }
+      response.once('close', () => {
+        for (const client of clients) {
+          client.off('notification', listener);
+          client.off('disconnected', disconnected);
+        }
+      });
+      response.event('ready', {});
+      return;
+    }
+
+    if (request.method === 'GET' && url.pathname === '/api/turn-events') {
+      const clients = [sharedServer, dotsServer, dotsChat];
+      response.startEvents();
+      const listener = ({ method, params }) => {
+        if (!['turn/started', 'turn/completed'].includes(method)) return;
+        const threadId = params?.threadId, turnId = params?.turn?.id;
+        if (typeof threadId === 'string' && typeof turnId === 'string' && !response.destroyed) {
+          response.event('turn', { method, threadId, turnId });
+        }
+      };
+      const disconnected = () => response.end();
+      for (const client of clients) {
+        client.on('notification', listener);
+        client.on('disconnected', disconnected);
+      }
+      response.once('close', () => {
+        for (const client of clients) {
+          client.off('notification', listener);
+          client.off('disconnected', disconnected);
+        }
+      });
+      return;
+    }
+
+    const activeTurnMatch = /^\/api\/threads\/([^/]+)\/active-turn$/.exec(url.pathname);
+    if (request.method === 'GET' && activeTurnMatch) {
+      if (rootChat) { sendJson(response, 200, { turnId: null }); return; }
+      const threadId = decodeURIComponent(activeTurnMatch[1]);
+      await execution.connect();
+      const { thread } = await execution.request('thread/read', { threadId, includeTurns: false });
+      const status = typeof thread.status === 'string' ? thread.status : thread.status?.type;
+      let turnId = null;
+      if (status === 'active') {
+        const page = await execution.request('thread/turns/list', {
+          threadId, limit: 1, sortDirection: 'desc', itemsView: 'summary',
+        });
+        const latest = page.data?.[0];
+        if (latest?.status === 'inProgress') turnId = latest.id;
+      }
+      sendJson(response, 200, { turnId });
+      return;
+    }
+
+    const createStatusMatch = /^\/api\/projects\/([^/]+)\/threads\/([a-f0-9]{32})\/status$/.exec(url.pathname);
+    if (request.method === 'GET' && createStatusMatch) {
+      sendJson(response, 200, messageReceipts.status(['project', decodeURIComponent(createStatusMatch[1])], createStatusMatch[2])); return;
+    }
+    const createThreadMatch = /^\/api\/projects\/([^/]+)\/threads$/.exec(url.pathname);
+    if (request.method === 'POST' && createThreadMatch) {
+      const projectId = decodeURIComponent(createThreadMatch[1]);
+      const body = await readJsonBody(request);
+      const result = await messageReceipts.submit(['project', projectId], body.clientUserMessageId, async () => {
+        try {
+          await requireExecutionWritable();
+          if (body.transport === 'app-server' || (body.hostId && body.hostId !== 'local')) {
+            throw new RequestError(410, '此连接方式已停用，请检查 Codex 内核状态。', { code: 'unsupported_control' });
+          }
+          const projects = (await sharedCatalog.projects()).projects;
+          const project = projects.find(item => item.projectId === projectId);
+          if (projectId !== '__unassigned__' && !project) throw new RequestError(404, '没有找到对应项目。');
+          const execution = sharedServer;
+          await execution.connect();
+          const rpc = (method, params) => execution.request(method, params);
+          let target = appServerEvents.projectlessThreadTarget(projectRoot);
+          if (project) {
+            const nativeProjects = await appServerEvents.readProjects(rpc);
+            const nativeProject = nativeProjects.find(item => item.id === project.projectId);
+            if (!nativeProject) throw new RequestError(404, 'Codex 内核中没有找到对应项目，请刷新项目列表。');
+            target = appServerEvents.projectThreadTarget(nativeProject);
+          }
+          const { input } = appServerTurnArguments('', body);
+          messageSubmissionStarted = true;
+          const created = await appServerEvents.createThread(rpc, target, input, body);
+          const prompt = input.filter(part => part.type === 'text').map(part => part.text).join('\n');
+          void generateAndSetThreadTitle({
+            request: rpc,
+            subscribe: listener => {
+              execution.on('notification', listener);
+              return () => execution.off('notification', listener);
+            },
+            threadId: created.threadId,
+            prompt,
+            cwd: target.cwd || null,
+          }).catch(error => console.error(`生成对话标题失败：${error.message}`));
+          return { ...created, hostId:'local' };
+        } catch (error) {
+          error.deliveryUnknown = messageSubmissionStarted;
+          if (error.deliveryResult) error.deliveryResult = error.deliveryResult.then(created => ({ ...created, hostId: 'local' }));
+          throw error;
+        }
+      });
+      sendJson(response, 201, result);
+      return;
+    }
+
+    const timelineMatch = /^\/api\/threads\/([^/]+)\/timeline$/.exec(url.pathname);
+    if (request.method === 'GET' && timelineMatch) {
+      const threadId = decodeURIComponent(timelineMatch[1]);
+      const knownSeq = url.searchParams.get('knownSeq');
+      const knownSync = { id: url.searchParams.get('knownSyncId'),
+        epoch: url.searchParams.get('knownEpoch'), seq: knownSeq === null ? undefined : Number(knownSeq),
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+      const pageOptions = sharedHistoryPageOptions();
+      pageOptions.reconcileObserved = url.searchParams.get('refresh') === '1';
+      if (request.socketRequest) {
+        pageOptions.onWindow = async window => {
+          if (response.writableEnded) return;
+          await response.historyPage(await prepareSharedTimeline(window));
+        };
+      }
+      const timeline = await prepareSharedTimeline(await execution.timeline(threadId, pageOptions, knownSync));
+      if (request.socketRequest) {
+        response.on('progress', () => execution.keepSnapshotAlive(threadId, timeline.sync));
+        response.once('close', () => execution.keepSnapshotAlive(threadId, timeline.sync));
+      }
+      sendJson(response, 200, timeline);
+      return;
+    }
+
+    const approvalMatch = /^\/api\/threads\/([^/]+)\/approvals$/.exec(url.pathname);
+    if (request.method === 'GET' && approvalMatch && rootChat) {
+      const threadId = decodeURIComponent(approvalMatch[1]);
+      sendJson(response, 200, await execution.inspectApproval(threadId, {
+        id: url.searchParams.get('requestId'), roomMessageId: url.searchParams.get('roomMessageId'),
+      })); return;
+    }
+    if (request.method === 'POST' && approvalMatch) {
+      const threadId = decodeURIComponent(approvalMatch[1]);
+      await requireExecutionWritable(threadId, execution);
+      const body = await readJsonBody(request);
+      sendJson(response, 200, await execution.respondApproval(threadId, body)); return;
+    }
+
+    const eventsMatch = /^\/api\/threads\/([^/]+)\/events$/.exec(url.pathname);
+    if (request.method === 'GET' && eventsMatch) {
+      const threadId = decodeURIComponent(eventsMatch[1]);
+      const after = Number(url.searchParams.get('afterSeq'));
+      const requestedSync = { id: url.searchParams.get('syncId'), epoch: url.searchParams.get('syncEpoch'),
+        after: Number.isSafeInteger(after) && after >= 0 ? after : undefined,
+        updatedAt: Number(url.searchParams.get('knownUpdatedAt')) };
+      await streamSharedThread(response, threadId, execution,
+        prepareSharedTimeline, requestedSync);
+      return;
+    }
+
+    const modelChangesMatch = /^\/api\/threads\/([^/]+)\/model-changes$/.exec(url.pathname);
+    if (request.method === 'GET' && modelChangesMatch) {
+      const threadId = decodeURIComponent(modelChangesMatch[1]);
+      if (!/^[0-9a-f]{8}-[0-9a-f-]{20,55}$/i.test(threadId)) throw new RequestError(400, '对话 ID 无效。');
+      sendJson(response, 200, hostId === 'durable' ? [] : await turnModelHistory.read(findSessionPath(threadId), (url.searchParams.get('turnIds') || '').split(',').filter(Boolean)));
+      return;
+    }
+    const contextMatch = /^\/api\/threads\/([^/]+)\/context$/.exec(url.pathname);
+    if (request.method === 'GET' && contextMatch) {
+      const threadId = decodeURIComponent(contextMatch[1]);
+      const current = hostId === 'durable' ? { available: false } : readContextUsage(threadId);
+      const native = await execution.readContext(threadId, url.searchParams.get('refreshSettings') === 'true');
+      sendJson(response, 200, { ...current, ...(native.model ? { model: native.model, thinking: native.thinking, serviceTier: native.serviceTier,
+        permissionMode: native.permissionMode, permissionModes: native.permissionModes } : {}), ...(native.available ? native : {}) });
+      return;
+    }
+
+    const sharedAction = /^\/api\/threads\/([^/]+)\/(history|settings|permissions)$/.exec(url.pathname);
+    if (sharedAction) {
+      const id = decodeURIComponent(sharedAction[1]);
+      if (request.method === 'GET' && sharedAction[2] === 'history') {
+        const pageOptions = sharedHistoryPageOptions();
+        if (url.searchParams.has('itemLimit')) {
+          const itemLimit = Number(url.searchParams.get('itemLimit'));
+          if (!Number.isInteger(itemLimit) || itemLimit < 1 || itemLimit > 100) throw new RequestError(400, '历史条目数量无效。');
+          pageOptions.itemLimit = itemLimit;
+        }
+        const history = await execution.history(id, url.searchParams.get('cursor'), pageOptions);
+        sendJson(response, 200, await prepareSharedTimeline(history, hostId));
+        return;
+      }
+      if (request.method === 'POST' && sharedAction[2] === 'settings') {
+        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 模型设置。');
+        await requireExecutionWritable(id, execution);
+        const body = await readJsonBody(request);
+        sendJson(response, 200, await execution.settings(id, body.model, body.thinking, body.serviceTier));
+        return;
+      }
+      if (request.method === 'POST' && sharedAction[2] === 'permissions') {
+        if (rootChat) throw new RequestError(405, 'Dots 主对话不提供 Codex 权限设置。');
+        await requireExecutionWritable(id, execution);
+        const body = await readJsonBody(request);
+        sendJson(response, 200, await execution.permissions(id, body.mode));
+        return;
+      }
+    }
+
+    const renameMatch = /^\/api\/threads\/([^/]+)\/name$/.exec(url.pathname);
+    if (request.method === 'POST' && renameMatch) {
+      if (rootChat) throw new RequestError(405, '点点主聊天名称由点点资料管理。');
+      const threadId = decodeURIComponent(renameMatch[1]);
+      await requireExecutionWritable(threadId, execution);
+      const body = await readJsonBody(request);
+      const name = typeof body.name === 'string' ? body.name.trim() : '';
+      if (!name || /[\r\n]/.test(name)) throw new RequestError(400, '请输入单行对话名称。');
+      await execution.request('thread/name/set', { threadId, name });
+      sendJson(response, 200, { threadId, name });
+      return;
+    }
+
+    const archiveMatch = /^\/api\/threads\/([^/]+)\/(archive|unarchive)$/.exec(url.pathname);
+    if (request.method === 'POST' && archiveMatch) {
+      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供任务归档。');
+      const threadId = decodeURIComponent(archiveMatch[1]);
+      await requireExecutionWritable(threadId, execution);
+      if (archiveMatch[2] === 'archive') {
+        const { thread } = await execution.request('thread/read', { threadId, includeTurns: false });
+        const status = typeof thread.status === 'string' ? thread.status : thread.status?.type;
+        if (['active', 'inProgress'].includes(status)) throw new RequestError(409, '对话正在运行，请先停止任务。');
+      }
+      await execution.request(`thread/${archiveMatch[2]}`, { threadId });
+      sendJson(response, 200, { threadId, archived: archiveMatch[2] === 'archive' });
+      return;
+    }
+
+    const queueMatch = /^\/api\/threads\/([^/]+)\/queue$/.exec(url.pathname);
+    if (queueMatch) {
+      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
+      const threadId = decodeURIComponent(queueMatch[1]);
+      await sharedServer.connect();
+      const rpc = (method, params) => sharedServer.request(method, params);
+      if (request.method === 'GET') { sendJson(response, 200, await appServerEvents.readQueue(rpc, threadId)); return; }
+      if (request.method === 'POST') {
+        const body = await readJsonBody(request);
+        const result = await messageReceipts.submit([hostId, threadId], body.clientUserMessageId, async () => {
+          let args;
+          try { await requireExecutionWritable(threadId); args = appServerTurnArguments(threadId, body); }
+          catch (error) { error.deliveryUnknown = false; throw error; }
+          messageSubmissionStarted = true;
+          try { return await appServerEvents.addQueue(rpc, threadId, args.input, body.clientUserMessageId, body.containsVoiceInput); }
+          catch (error) { if (messageDelivery.rejectedBeforeSubmission(error)) error.deliveryUnknown = false; throw error; }
+        });
+        sendJson(response, 202, result); return;
+      }
+    }
+
+    const queueItemMatch = /^\/api\/threads\/([^/]+)\/queue\/([a-f0-9-]+)(?:\/(steer))?$/.exec(url.pathname);
+    if (queueItemMatch) {
+      if (hostId === 'durable') throw new RequestError(405, '当前托管连接不提供排队消息。');
+      const threadId = decodeURIComponent(queueItemMatch[1]);
+      const itemId = queueItemMatch[2];
+      await sharedServer.connect();
+      const action = request.method === 'DELETE' ? 'delete' : queueItemMatch[3] === 'steer' ? 'steer' : null;
+      if (!action) throw new RequestError(405, '不支持的队列操作');
+      await requireExecutionWritable(threadId);
+      sendJson(response, 200, await appServerEvents.changeQueue((method, params) => sharedServer.request(method, params), threadId, itemId, action)); return;
+    }
+
+    const interruptMatch = /^\/api\/threads\/([^/]+)\/interrupt$/.exec(url.pathname);
+    if (request.method === 'POST' && interruptMatch) {
+      if (rootChat) throw new RequestError(405, 'Dots 主对话不提供停止 Codex 任务的操作。');
+      const threadId = decodeURIComponent(interruptMatch[1]);
+      await requireExecutionWritable(threadId, execution);
+      const body = await readJsonBody(request);
+      if (!body.turnId) throw new RequestError(400, '缺少活动轮次 ID。');
+      await execution.interrupt(threadId, body.turnId);
+      sendJson(response, 200, { requested: true });
+      return;
+    }
+
+    const roomReadMatch = /^\/api\/threads\/([^/]+)\/read$/.exec(url.pathname);
+    if (request.method === 'POST' && roomReadMatch) {
+      if (!rootChat) throw new RequestError(405, '此对话不提供消息房间已读操作。');
+      await dotsChat.markRead(decodeURIComponent(roomReadMatch[1]), await readJsonBody(request));
+      sendJson(response, 200, { success: true });
+      return;
+    }
+
+    const messageStatusMatch = /^\/api\/threads\/([^/]+)\/messages\/([a-f0-9]{32})\/status$/.exec(url.pathname);
+    if (request.method === 'GET' && messageStatusMatch) {
+      sendJson(response, 200, messageReceipts.status([hostId, decodeURIComponent(messageStatusMatch[1])], messageStatusMatch[2]));
+      return;
+    }
+    const messageMatch = /^\/api\/threads\/([^/]+)\/messages$/.exec(url.pathname);
+    if (request.method === 'POST' && messageMatch) {
+      const threadId = decodeURIComponent(messageMatch[1]);
+      const body = await readJsonBody(request);
+      if (body.hostId && body.hostId !== hostId) throw new RequestError(400, '请求中的对话主机不一致。');
+      const result = await messageReceipts.submit([hostId, threadId], body.clientUserMessageId, async () => {
+        let args;
+        try { await requireExecutionWritable(threadId, execution); args = execution === dotsChat ? { ...body, threadId } : appServerTurnArguments(threadId, { ...body, hostId }); }
+        catch (error) { error.deliveryUnknown = false; throw error; }
+        messageSubmissionStarted = true;
+        const responseFor = submitted => ({ success: true, data: submitted.result, usage: submitted.usage });
+        try { return responseFor(await execution.send(args)); }
+        catch (error) {
+          if (error.deliveryResult) error.deliveryResult = error.deliveryResult.then(responseFor);
+          throw error;
+        }
+      });
+      sendJson(response, 200, result);
+      return;
+    }
+
+    sendJson(response, 404, { error: '未找到请求的资源。' });
+  } catch (error) {
+    if (response.headersSent) {
+      if (!response.writableEnded) response.end();
+      return;
+    }
+    if (!messageSubmissionStarted && error.deliveryUnknown === undefined && request.method === 'POST'
+      && /^\/api\/threads\/[^/]+\/(?:messages|queue)(?:\?|$)/.test(request.url || '')) error.deliveryUnknown = false;
+    const status = error instanceof RequestError || error instanceof ThreadWriterConflictError || error instanceof FileRangeError ? (error.statusCode || 409) : 502;
+    sendJson(response, status, {
+      error: error instanceof Error ? error.message : String(error),
+      code: error?.code,
+      threadId: error?.threadId,
+      readOnly: error?.readOnly,
+      details: error?.deliveryUnknown === undefined ? error?.details : { ...error?.details, deliveryUnknown: error.deliveryUnknown },
+    });
+  }
+}
+
+const server = http.createServer(handleRequest);
+const lanSocket = attachLanSocket(server, { token: options.token, dispatch: handleRequest,
+  uploadsRoot,
+  authorizeDevice: (clientId, credential) => authorizeLanDevice(stateRoot, clientId, credential),
+  onDeviceAuthorizationsChanged: listener => onLanAuthorizationsChanged(stateRoot, listener),
+  onDeviceConnected: (clientId, info) => {
+    try { recordLanConnection(stateRoot, clientId, info); }
+    catch (error) { console.error('记录局域网设备连接失败：', error.message); }
+  },
+});
+
+let control;
+void managedAppServer.start();
+executionHealth.start();
+runtimeDiscovery.start();
+server.on('error', error => {
+  console.error('桌面服务监听失败：', error.message);
+  process.exit(1);
+});
+server.listen(options.port, options.lan ? '0.0.0.0' : '127.0.0.1', async () => {
+  try {
+    if (process.env.CODEX_REMOTE_INSTANCE && process.env.CODEX_REMOTE_CONTROL_SECRET && process.env.CODEX_REMOTE_READY_PATH) {
+      control = await openControl({ instanceId: process.env.CODEX_REMOTE_INSTANCE,
+        secret: process.env.CODEX_REMOTE_CONTROL_SECRET, shutdown: shutDown, actions: {
+          'refresh-execution': refreshExecution,
+          'relay-start': () => relayManager.run('relay-start'),
+          'relay-status': () => relayManager.run('relay-status'),
+          'relay-stop': () => relayManager.run('relay-stop'),
+          'relay-pair': () => relayManager.run('relay-pair'),
+          'relay-revoke': () => relayManager.run('relay-revoke'),
+          'invite-create': details => relayManager.run('invite-create', details),
+          'invite-list': () => relayManager.run('invite-list'),
+          'invite-revoke': details => relayManager.run('invite-revoke', details),
+          'devices-list': () => relayManager.run('devices-list'),
+          'device-revoke': details => relayManager.run('device-revoke', details),
+          'restart-managed-app-server': () => {
+            const state = managedAppServer.snapshot();
+            return state.launcherRestartRequired ? managedAppServer.restart(crypto.randomUUID()) : state;
+          },
+          'restart-managed-app-server-confirmed': () => managedAppServer.restart(crypto.randomUUID()),
+        } });
+      writeRecord(process.env.CODEX_REMOTE_READY_PATH, { instanceId: process.env.CODEX_REMOTE_INSTANCE,
+        pid: process.pid, controlPort: control.port });
+    }
+  } catch (error) {
+    console.error('桌面服务管理通道启动失败：', error.message);
+    process.exit(1);
+  }
+  console.log(`Code Relax 桌面服务已启动：http://127.0.0.1:${options.port}/`);
+  if (options.lan) {
+    console.log('LAN 模式使用鉴权 WebSocket，仅适合受信任局域网测试，不要暴露到公网。');
+  }
+});
+
+let shuttingDown = false;
+async function shutDown() {
+  if (shuttingDown) return;
+  shuttingDown = true;
+  desktopHelper?.release();
+  lanSocket.close();
+  server.close();
+  executionHealth?.stop();
+  runtimeDiscovery.stop();
+  await relayManager.close();
+  dotsServer.close();
+  dotsChat.close();
+  managedAppServer.close();
+  await control?.close();
+  process.exit(0);
+}
+process.on('SIGTERM', shutDown);
+process.on('SIGINT', shutDown);
+
+function readContextUsage(threadId) {
+  if (!/^[0-9a-f]{8}-[0-9a-f-]{20,55}$/i.test(threadId)) {
+    return { available: false };
+  }
+  const sessionPath = findSessionPath(threadId);
+  if (!sessionPath) return { available: false };
+
+  let handle;
+  try {
+    const stat = fs.statSync(sessionPath);
+    const readLength = Math.min(stat.size, MAX_CONTEXT_TAIL_BYTES);
+    const buffer = Buffer.allocUnsafe(readLength);
+    handle = fs.openSync(sessionPath, 'r');
+    fs.readSync(handle, buffer, 0, readLength, stat.size - readLength);
+    const lines = buffer.toString('utf8').split(/\r?\n/);
+    let usage = null;
+    let settings = null;
+    for (let index = lines.length - 1; index >= 0; index -= 1) {
+      let event;
+      if (!usage && lines[index].includes('"token_count"')) {
+        try { event = JSON.parse(lines[index]); } catch { event = null; }
+        if (event?.type === 'event_msg' && event?.payload?.type === 'token_count') {
+          const usedTokens = Number(event.payload.info?.last_token_usage?.total_tokens);
+          const contextWindow = Number(event.payload.info?.model_context_window);
+          if (Number.isFinite(usedTokens) && Number.isFinite(contextWindow) && contextWindow > 0) {
+            usage = {
+              available: true,
+              usedTokens,
+              contextWindow,
+              remainingTokens: Math.max(0, contextWindow - usedTokens),
+              usedPercent: Math.min(100, Math.max(0, usedTokens / contextWindow * 100)),
+              updatedAt: event.timestamp || null,
+            };
+          }
+        }
+      }
+      if (!settings && lines[index].includes('"type":"turn_context"')) {
+        try { event = JSON.parse(lines[index]); } catch { event = null; }
+        settings = turnSettings(event);
+      }
+      if (usage && settings) break;
+    }
+    settings ||= sessionSettingsCache.get(sessionPath) || readLatestTurnSettings(sessionPath);
+    if (settings) sessionSettingsCache.set(sessionPath, settings);
+    if (usage) return { ...usage, ...settings };
+    if (settings) return { available: false, ...settings };
+  } catch {
+    sessionPathCache.delete(threadId);
+  } finally {
+    if (handle !== undefined) fs.closeSync(handle);
+  }
+  return { available: false };
+}
+
+function readLatestTurnSettings(sessionPath) {
+  let handle;
+  try {
+    const stat = fs.statSync(sessionPath);
+    const readLength = Math.min(stat.size, MAX_SETTINGS_SCAN_BYTES);
+    const buffer = Buffer.allocUnsafe(readLength);
+    handle = fs.openSync(sessionPath, 'r');
+    fs.readSync(handle, buffer, 0, readLength, stat.size - readLength);
+    const text = buffer.toString('utf8');
+    let searchFrom = text.length;
+    while (searchFrom > 0) {
+      const marker = text.lastIndexOf('"type":"turn_context"', searchFrom);
+      if (marker < 0) break;
+      const lineStart = text.lastIndexOf('\n', marker) + 1;
+      const nextLine = text.indexOf('\n', marker);
+      const lineEnd = nextLine < 0 ? text.length : nextLine;
+      let event;
+      try { event = JSON.parse(text.slice(lineStart, lineEnd)); } catch { event = null; }
+      const settings = turnSettings(event);
+      if (settings) return settings;
+      searchFrom = Math.max(0, lineStart - 1);
+    }
+  } catch {
+    return null;
+  } finally {
+    if (handle !== undefined) fs.closeSync(handle);
+  }
+  return null;
+}
+
+function turnSettings(event) {
+  if (event?.type !== 'turn_context') return null;
+  const model = typeof event.payload?.model === 'string' && /^[a-z0-9.-]{1,80}$/i.test(event.payload.model)
+    ? event.payload.model
+    : '';
+  const thinking = typeof event.payload?.effort === 'string' && /^[a-z0-9_-]{1,32}$/i.test(event.payload.effort)
+    ? event.payload.effort
+    : '';
+  return model || thinking ? { model, thinking } : null;
+}
+
+function findSessionPath(threadId) {
+  const cached = sessionPathCache.get(threadId);
+  if (cached && fs.existsSync(cached)) return cached;
+  if (!fs.existsSync(sessionsRoot)) return null;
+
+  const suffix = `-${threadId}.jsonl`.toLowerCase();
+  const directories = [sessionsRoot];
+  while (directories.length) {
+    const directory = directories.pop();
+    let entries;
+    try {
+      entries = fs.readdirSync(directory, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      const fullPath = path.join(directory, entry.name);
+      if (entry.isDirectory()) directories.push(fullPath);
+      if (entry.isFile() && entry.name.toLowerCase().endsWith(suffix)) {
+        sessionPathCache.set(threadId, fullPath);
+        return fullPath;
+      }
+    }
+  }
+  return null;
+}
+
+function messagePayload(body) {
+  const prompt = typeof body.prompt === 'string' ? body.prompt.trim() : '';
+  if (body.images !== undefined && (!Array.isArray(body.images) || body.images.length > 4)) {
+    throw new RequestError(400, '每条消息最多 4 张图片。');
+  }
+  const images = (body.images || []).map(id => {
+    if (typeof id === 'string' && id.startsWith('data:')) return validateInlineImage(id);
+    if (typeof id !== 'string' || !/^[a-f0-9]{64}$/.test(id)) throw new RequestError(400, '无效的图片标识。');
+    const webpFile = path.join(uploadsRoot, `${id}.webp`);
+    const file = fs.existsSync(webpFile) ? webpFile : path.join(uploadsRoot, `${id}.png`);
+    if (!fs.existsSync(file)) throw new RequestError(400, '图片不存在，请重新添加。');
+    return file;
+  });
+  for (const input of fileMentions.originalInputs(body)) {
+    const incoming = fs.realpathSync(path.join(uploadsRoot, 'incoming'));
+    const imagePath = fs.realpathSync(input.path);
+    if (path.dirname(imagePath).toLowerCase() !== incoming.toLowerCase()) throw new RequestError(400, '原图必须来自上传目录。');
+    const stat = fs.statSync(imagePath);
+    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_ATTACHMENT_BYTES) throw new RequestError(400, '原图为空或超过 20 MiB。');
+    images.push(imagePath);
+  }
+  if (images.filter(image => image.startsWith('data:')).reduce((size, image) => size + Buffer.byteLength(image.slice(image.indexOf(',') + 1), 'base64'), 0) > 8 * 1024 * 1024) throw new RequestError(413, '本条消息图片合计不能超过 8 MiB。');
+  if (!prompt && !images.length) throw new RequestError(400, 'prompt 不能为空。');
+  if (prompt.length > 32_000) throw new RequestError(400, 'prompt 不能超过 32000 个字符。');
+
+  const payload = { prompt, images };
+  if (typeof body.hostId === 'string' && body.hostId.trim()) payload.hostId = body.hostId.trim();
+  if (typeof body.model === 'string' && body.model.trim()) {
+    payload.model = body.model.trim();
+  }
+  if (typeof body.thinking === 'string' && body.thinking.trim()) {
+    const thinking = body.thinking.trim();
+    if (!ALLOWED_THINKING.has(thinking)) throw new RequestError(400, '不支持的推理强度。');
+    if ((payload.model === 'gpt-5.5' || payload.model === 'gpt-5.3-codex-spark')
+      && (thinking === 'max' || thinking === 'ultra')) {
+      throw new RequestError(400, '所选模型不支持该推理强度。');
+    }
+    payload.thinking = thinking;
+  }
+  return payload;
+}
+
+function appServerTurnArguments(threadId, body) {
+  const payload = messagePayload(body);
+  const mentioned = payload.hostId === 'durable' ? fileMentions.parse(payload.prompt) : null;
+  if (mentioned?.files.length) payload.prompt = mentioned.text;
+  const input = [];
+  if (payload.prompt) input.push({ type: 'text', text: payload.prompt });
+  for (const image of payload.images) {
+    if (image.startsWith('data:')) input.push({ type: 'image', url: image });
+    else if (payload.hostId === 'durable') {
+      const mimeType = imageMimeType(image);
+      if (!mimeType) throw new RequestError(400, '云端图片格式无效。');
+      input.push({ type: 'image', url: `data:${mimeType};base64,${fs.readFileSync(image).toString('base64')}` });
+    } else input.push({ type: 'localImage', path: image });
+  }
+  const value = { threadId, input, ...appServerEvents.mobileTurnSource(body.clientUserMessageId, body.containsVoiceInput) };
+  if (mentioned?.files.length) value.uploadFiles = mentioned.files;
+  if (typeof body.clientUserMessageId === 'string' && /^[a-f0-9]{32}$/.test(body.clientUserMessageId)) value.clientUserMessageId = body.clientUserMessageId;
+  if (payload.model) value.model = payload.model;
+  if (payload.thinking) value.effort = payload.thinking;
+  return value;
+}
+
+function normalizeTimeline(data) {
+  const source = data && typeof data === 'object' ? data : {};
+  const sourceTurns = Array.isArray(source.turns) ? source.turns : source.thread?.turns;
+  const turns = Array.isArray(sourceTurns) ? sourceTurns.map(normalizeTurn) : [];
+  return {
+    schemaVersion: 1,
+    thread: normalizeThread(source.thread),
+    turns,
+  };
+}
+
+function normalizeSharedTimeline({ thread, nextCursor, sync, notModified, incremental }, hostId = thread?.hostId || 'local') {
+  const timeline = normalizeTimeline({ thread: { ...thread, title: thread.name || thread.title || '', hostId,
+    transport: 'shared-app-server' } });
+  return { ...timeline,
+    historyItemCount: (thread.turns || []).reduce((count, turn) => count + (turn.roomMessage ? 1 : turn.items?.length || 0), 0),
+    historyView: thread?.threadSource === 'aeon' ? 'chat-items-v1' : 'item-pages-v1',
+    ...(notModified ? { notModified: true } : {}),
+    ...(incremental ? { incremental: true } : {}),
+    ...(nextCursor !== undefined ? { nextCursor } : {}), ...(sync ? { sync } : {}) };
+}
+
+async function prepareSharedTimeline(value, hostId) {
+  if (value.thread?.threadSource !== 'aeon') return normalizeSharedTimeline(value, hostId);
+  const epoch = dotsChat.epoch, threadId = value.thread.id;
+  const current = () => {
+    if (epoch !== dotsChat.epoch) throw new Error('点点连接已变化，请重新同步。');
+  };
+  if (value.notModified) {
+    const record = dotsChat.threads.get(threadId);
+    if (await dotsImages.prepareTimeline(record?.thread)) {
+      current();
+      value = dotsChat.snapshot(threadId, record);
+    }
+  }
+  const snapshot = structuredClone(value);
+  await dotsImages.prepareTimeline(snapshot.thread);
+  current();
+  return normalizeSharedTimeline(snapshot, hostId);
+}
+
+function normalizeThread(thread) {
+  const source = thread && typeof thread === 'object' ? thread : {};
+  return {
+    id: source.id || '',
+    title: source.name || source.title || source.preview || '',
+    status: statusText(source.status),
+    updatedAt: Number(source.updatedAt) || 0,
+    recencyAt: Number(source.recencyAt ?? source.updatedAt) || 0,
+    projectId: source.projectId || '',
+    cwd: source.cwd || '',
+    hostId: source.hostId || '',
+    threadSource: source.threadSource || '',
+    ...(['aeon', 'aeon_child'].includes(source.threadSource) ? { chatRevision: source.chatRevision || '' } : {}),
+    ...(source.threadSource === 'aeon' ? { avatar: source.avatar || '', color: source.color || '',
+      chatMessageRevision: source.chatMessageRevision, messagingRoomId: source.messagingRoomId, lastMessageAt: source.lastMessageAt } : {}),
+    transport: source.transport || 'shared-app-server',
+    readOnly: source.readOnly === true,
+    readOnlyReason: source.readOnlyReason || '',
+  };
+}
+
+function normalizeTurn(turn) {
+  const source = turn && typeof turn === 'object' ? turn : {};
+  const turnId = source.id || '';
+  const entries = Array.isArray(source.items) ? source.items.map(normalizeItem).filter(Boolean) : [];
+  for (const entry of entries) {
+    const images = [...(entry.attachments || []), entry.image, ...Object.values(entry.imageAssets || {})].filter(Boolean);
+    for (const image of images) if (image.remotePath && !image.recoveryTurnId) image.recoveryTurnId = turnId;
+  }
+  return {
+    id: turnId,
+    status: statusText(source.status),
+    startedAt: source.startedAt || null,
+    completedAt: source.completedAt || null,
+    durationMs: source.durationMs ?? null,
+    error: source.error ?? null,
+    runtimeNotice: source.runtimeNotice ?? null,
+    ...(source.itemPage ? { itemPage: source.itemPage } : {}),
+    ...(source.roomMessage ? { roomMessage: true } : {}),
+    ...(source.deleted ? { deleted: true } : {}),
+    ...(source.historyOnly ? { historyOnly: true } : {}),
+    ...(source.cacheStub ? { cacheStub: true } : {}),
+    entries,
+  };
+}
+
+function normalizeItem(item) {
+  if (!item || typeof item !== 'object') return null;
+
+  if (item.type === 'approval') {
+    return { ...item, type: 'activity', kind: 'approval', title: item.params?.message || '需要你的批准' };
+  }
+
+  if (item.type === 'contextCompaction') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'contextCompaction',
+      title: '已自动压缩上下文',
+    };
+  }
+
+  const delegated = appServerEvents.toolDelegation(item);
+  if (delegated) {
+    return {
+      type: 'message', id: item.id || '', role: 'user', source: 'remote',
+      delegation: delegationSource(delegated), ...splitUploadedImages(delegated.input),
+    };
+  }
+
+  if (item.type === 'userMessage') {
+    const { text, files, delegation } = extractUserText(item.content);
+    const attachments = [...normalizeAttachments(item.content), ...files.map(file => file.fileId ? normalizeAttachment(file) : ({
+      ...file,
+      remotePath: file.path,
+      previewRemotePath: file.previewPath || '',
+    }))];
+    if (!text && !attachments.length) return null;
+    return {
+      clientId: item.clientId,
+      type: 'message',
+      id: item.id || '',
+      role: 'user',
+      text,
+      attachments,
+      ...(delegation ? { delegation: delegationSource(delegation) } : {}),
+    };
+  }
+
+  if (item.type === 'agentMessage') {
+    return {
+      type: 'message',
+      id: item.id || '',
+      role: 'assistant',
+      phase: item.phase || '',
+      delivery: item.delivery,
+      questions: item.questions,
+      text: item.text || '',
+      attachments: normalizeAttachments(item.attachments),
+      imageAssets: markdownImageAssets(item.text || ''),
+      fileAssets: markdownFileAssets(item.text || ''),
+    };
+  }
+
+  if (item.type === 'reasoning') {
+    const detail = Array.isArray(item.summary)
+      ? item.summary.map(summaryText).filter(Boolean).join('\n')
+      : summaryText(item.summary);
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'reasoning',
+      title: '思考摘要',
+      detail,
+    };
+  }
+
+  if (item.type === 'commandExecution') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'command',
+      title: '命令',
+      titleOnly: true,
+      status: statusText(item.status),
+      command: item.command,
+      cwd: item.cwd,
+      exitCode: item.exitCode,
+      durationMs: item.durationMs,
+    };
+  }
+
+  if (item.type === 'mcpToolCall') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'tool',
+      title: '工具',
+      titleOnly: true,
+      status: statusText(item.status),
+      server: item.server,
+      tool: item.tool,
+      arguments: item.arguments,
+      durationMs: item.durationMs,
+      error: item.error,
+    };
+  }
+
+  if (item.type === 'dynamicToolCall') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'tool',
+      title: '工具',
+      titleOnly: true,
+      status: statusText(item.status),
+      namespace: item.namespace,
+      tool: item.tool,
+      arguments: item.arguments,
+      durationMs: item.durationMs,
+      success: item.success,
+    };
+  }
+
+  if (item.type === 'fileChange') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'fileChange',
+      title: '文件修改',
+      titleOnly: true,
+      status: statusText(item.status),
+      changes: fileChanges.summarize(item.changes),
+    };
+  }
+
+  if (item.type === 'webSearch') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'webSearch',
+      title: '网页搜索',
+      titleOnly: true,
+      query: item.query || item.action?.query || '',
+      ...(item.action && typeof item.action === 'object' ? { action: item.action } : {}),
+    };
+  }
+
+  if (item.type === 'imageView') {
+    const image = typeof item.path === 'string' && item.path
+      ? normalizeAttachment({ type: 'localImage', path: item.path })
+      : null;
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'imageView',
+      title: '查看图片',
+      titleOnly: true,
+      path: item.path || '',
+      image,
+    };
+  }
+
+  if (item.type === 'imageGeneration') {
+    const result = typeof item.result === 'string' ? item.result.trim() : '';
+    const image = typeof item.savedPath === 'string' && item.savedPath
+      ? normalizeAttachment({ type: 'localImage', path: item.savedPath, name: '生成的图片' })
+      : result ? normalizeAttachment({ type: 'image', name: '生成的图片',
+        url: result.startsWith('data:image/') ? result : `data:image/png;base64,${result}` }) : null;
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'imageGeneration',
+      title: '生成图片',
+      titleOnly: true,
+      status: statusText(item.status),
+      image,
+      failure: item.failure || null,
+      transparentBackground: item.transparentBackground === true,
+    };
+  }
+
+  if (item.type === 'subAgentActivity') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'subAgent',
+      title: '子任务',
+      titleOnly: true,
+      status: statusText(item.kind),
+      agentPath: item.agentPath || '',
+      agentThreadId: item.agentThreadId || '',
+    };
+  }
+
+  if (item.type === 'collabAgentToolCall') {
+    return {
+      type: 'activity',
+      id: item.id || '',
+      kind: 'collaboration',
+      title: '任务协作',
+      titleOnly: true,
+      status: statusText(item.status),
+      tool: item.tool || '',
+      prompt: item.prompt || '',
+      senderThreadId: item.senderThreadId || '',
+      receiverThreadIds: Array.isArray(item.receiverThreadIds) ? item.receiverThreadIds : [],
+      model: item.model || '',
+      reasoningEffort: item.reasoningEffort || '',
+      agentsStates: item.agentsStates && typeof item.agentsStates === 'object' ? item.agentsStates : {},
+    };
+  }
+
+  return {
+    type: 'activity',
+    id: item.id || '',
+    kind: item.type || 'event',
+    title: item.type || '事件',
+    status: statusText(item.status),
+    detail: JSON.stringify(item, null, 2),
+  };
+}
+
+function sharedHistoryPageOptions() {
+  return {
+    maxTurns: SHARED_HISTORY_PAGE_TURNS,
+    maxBytes: SHARED_HISTORY_PAGE_BYTES,
+    measure: value => Buffer.byteLength(JSON.stringify(normalizeSharedTimeline(value))),
+  };
+}
+
+function normalizeAttachments(content) {
+  if (!Array.isArray(content)) return [];
+  const items = content.filter(item => item && !['text', 'input_text'].includes(item.type)).map(item => ({ ...item }));
+  const text = content.filter(item => ['text', 'input_text'].includes(item?.type)).map(item => item.text || '').join('\n');
+  const paths = [...new Set([...text.matchAll(/<image\b[^>]*\bpath="([^"]+)"[^>]*>/g)].map(match => match[1]))];
+  const images = items.filter(item => ['image', 'input_image', 'localImage'].includes(item.type));
+  for (const [index, imagePath] of paths.entries()) {
+    if (images.some(item => item.path === imagePath)) continue;
+    if (images[index] && !images[index].path) images[index].path = imagePath;
+    else items.push({ type: 'localImage', path: imagePath });
+  }
+  const seen = new Set();
+  return items.map(item => normalizeAttachment(item)).filter(item => {
+    if (!item.url) return true;
+    if (seen.has(item.url)) return false;
+    seen.add(item.url); return true;
+  });
+}
+
+function markdownImageAssets(text) {
+  const assets = Object.create(null);
+  function visit(tokens) {
+    for (const token of tokens) {
+      const value = token.type === 'image' ? token.attrGet('src')
+        : token.type === 'link_open' && !token.meta?.fileCitation ? token.attrGet('href') : null;
+      if (value && !Object.hasOwn(assets, value)) {
+        const localPath = fileCitations.localReference(value)?.path;
+        // Only paths actually referenced by Desktop messages become accessible.
+        // Do not expose a client-supplied filesystem path endpoint or UNC shares.
+        if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
+          const asset = normalizeAttachment({ type: 'localImage', path: localPath });
+          if (asset.available) assets[value] = asset;
+        }
+      }
+      if (token.children && token.type !== 'image') visit(token.children);
+    }
+  }
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
+  return assets;
+}
+
+function markdownFileAssets(text) {
+  const assets = Object.create(null);
+  function visit(tokens) {
+    for (const token of tokens) {
+      if (token.type === 'link_open') {
+        const value = token.attrGet('href');
+        if (value && !Object.hasOwn(assets, value)) {
+          const localPath = fileCitations.localReference(value)?.path;
+          if (localPath && /^[a-z]:[\\/]/i.test(localPath)) {
+            assets[value] = { remotePath: localPath, name: path.basename(localPath) };
+            // Link rendering must not depend on file existence or transient backend state.
+          }
+        }
+      }
+      if (token.children && token.type !== 'image') visit(token.children);
+    }
+  }
+  visit(imageMarkdown.parse(text, { allowFileCitations: true }));
+  return assets;
+}
+
+function describeLocalFile(filePath) {
+  const resolved = path.resolve(filePath);
+  let stat;
+  try { stat = fs.statSync(resolved); }
+  catch (error) {
+    if (error.code === 'ENOENT') throw new RequestError(404, '电脑上的文件已不存在。');
+    if (error.code === 'EACCES' || error.code === 'EPERM') throw new RequestError(403, '电脑系统无法读取此文件：' + error.code);
+    throw error;
+  }
+  if (!stat.isFile()) throw new RequestError(400, '此路径不是文件。');
+  return { path: resolved, name: path.basename(resolved), size: stat.size, revision: fileRevision(stat) };
+}
+
+function splitUploadedImages(text) {
+  const tokens = imageMarkdown.parse(text, {});
+  const lines = text.split('\n');
+  const removed = new Set();
+  const attachments = [];
+  for (let index = 0; index < tokens.length - 1; index++) {
+    const block = tokens[index];
+    const inline = tokens[index + 1];
+    if (block.type !== 'paragraph_open' || !block.map || inline.type !== 'inline') continue;
+    const children = (inline.children || []).filter(token => token.type !== 'softbreak');
+    if (!children.length || children.some(token => token.type !== 'image')) continue;
+    const paths = children.map(token => {
+      try { return path.resolve(decodeURIComponent(token.attrGet('src') || '')); } catch { return ''; }
+    });
+    if (paths.some(file => path.dirname(file).toLowerCase() !== uploadsRoot.toLowerCase()
+      || !/^[a-f0-9]{64}\.(png|webp)$/.test(path.basename(file)))) continue;
+    for (const file of paths) attachments.push(normalizeAttachment({ type: 'localImage', path: file, name: '移动端图片' }));
+    for (let line = block.map[0]; line < block.map[1]; line++) removed.add(line);
+  }
+  const visibleText = lines.filter((line, index) => !removed.has(index)).join('\n').trim();
+  return { text: visibleText, attachments, imageAssets: markdownImageAssets(visibleText) };
+}
+
+async function externalDownloadAsset(value, recovery = '') {
+  const match = /^([a-f0-9]{64})(?:\?recovery=([A-Za-z0-9_-]{1,4096}))?$/.exec(value || '');
+  if (!match) throw new RequestError(400, '无效的外部文件标识。');
+  const asset = attachmentCache.get(match[1]) || dotsImages.restore(match[1], match[2] || recovery || '');
+  if (!asset?.dotsFile) throw new RequestError(404, '外部文件授权已失效，请重新读取对话。');
+  await dotsImages.authorization(asset.identity);
+  return asset;
+}
+
+function workstationCopyReference(copy, asset) {
+  const id = crypto.createHmac('sha256', fileCapabilitySecret).update(JSON.stringify([asset.id, copy.path, copy.revision])).digest('hex');
+  fileCache.set(id, { ...copy, id, externalIdentity: asset.identity });
+  while (fileCache.size > MAX_CACHED_FILES) fileCache.delete(fileCache.keys().next().value);
+  return { remotePath: id, path: copy.path, name: copy.name, size: copy.size, mimeType: copy.mimeType };
+}
+
+function normalizeAttachment(item, identity) {
+  const name = item.name || item.fileName || (typeof item.path === 'string' ? path.basename(item.path) : '');
+  let cached = null;
+  const isImage = ['image', 'input_image', 'localImage'].includes(item.type);
+  if (isImage || item.type === 'file') cached = dotsImages.remember(item, identity);
+  if (isImage && typeof item.path === 'string') {
+    cached = cacheLocalImage(item.path, name) || cached;
+  }
+  if (!cached) {
+    const dataUrl = typeof item.url === 'string' && item.url.startsWith('data:image/')
+      ? item.url
+      : (typeof item.image_url === 'string' && item.image_url.startsWith('data:image/') ? item.image_url : '');
+    if (dataUrl) cached = cacheDataImage(dataUrl, name);
+  }
+  return {
+    type: isImage ? 'image' : item.type || 'attachment',
+    name: cached?.name || name,
+    mimeType: cached?.mimeType || item.mimeType || '',
+    ...(cached?.size ? { size: cached.size } : {}),
+    ...(cached?.dotsFile ? { networkFile: true } : {}),
+    available: Boolean(cached),
+    remotePath: cached ? (isImage ? cached.id : `${cached.id}?recovery=${cached.recoveryToken}`) : '',
+    recoveryToken: cached?.recoveryToken || '',
+    url: '',
+    thumbnailUrl: '',
+  };
+}
+
+function cacheLocalImage(filePath, name) {
+  try {
+    const resolved = path.resolve(filePath);
+    const stat = fs.statSync(resolved);
+    const mimeType = imageMimeType(resolved);
+    if (!stat.isFile() || !mimeType || stat.size > MAX_ATTACHMENT_BYTES) return null;
+    const cached = rememberAttachment(fs.readFileSync(resolved), mimeType, name,
+      localImageRecoveryToken(resolved, stat));
+    void attachmentThumbnail(cached).catch(() => {});
+    return cached;
+  } catch {
+    return null;
+  }
+}
+
+function cacheDataImage(dataUrl, name) {
+  const match = /^data:(image\/(?:png|jpeg|gif|webp|bmp));base64,([a-z0-9+/=\r\n]+)$/i.exec(dataUrl);
+  if (!match) return null;
+  try {
+    const buffer = Buffer.from(match[2], 'base64');
+    if (!buffer.length || buffer.length > MAX_ATTACHMENT_BYTES) return null;
+    return rememberAttachment(buffer, match[1].toLowerCase(), name);
+  } catch {
+    return null;
+  }
+}
+
+function rememberAttachment(buffer, mimeType, name, recoveryToken = '') {
+  const id = crypto.createHash('sha256').update(buffer).digest('hex');
+  if (!attachmentCache.has(id)) {
+    while (attachmentCache.size >= MAX_CACHED_ATTACHMENTS) {
+      attachmentCache.delete(attachmentCache.keys().next().value);
+    }
+    attachmentCache.set(id, { id, buffer, mimeType, name, recoveryToken });
+  } else if (recoveryToken && !attachmentCache.get(id).recoveryToken) {
+    attachmentCache.get(id).recoveryToken = recoveryToken;
+  }
+  return attachmentCache.get(id);
+}
+
+function localImageRecoveryToken(filePath, stat) {
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv('aes-256-gcm', imageCapabilityKey, iv);
+  const payload = Buffer.from(JSON.stringify([filePath, stat.size, stat.mtimeMs]));
+  const encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);
+  return Buffer.concat([iv, cipher.getAuthTag(), encrypted]).toString('base64url');
+}
+
+function recoverLocalImage(id, token) {
+  if (!token || token.length > 2048) return null;
+  try {
+    const value = Buffer.from(token, 'base64url');
+    if (value.length < 29) return null;
+    const decipher = crypto.createDecipheriv('aes-256-gcm', imageCapabilityKey, value.subarray(0, 12));
+    decipher.setAuthTag(value.subarray(12, 28));
+    const [filePath, size, mtimeMs] = JSON.parse(Buffer.concat([
+      decipher.update(value.subarray(28)), decipher.final(),
+    ]).toString('utf8'));
+    if (typeof filePath !== 'string' || !path.isAbsolute(filePath)
+      || !Number.isSafeInteger(size) || size <= 0 || size > MAX_ATTACHMENT_BYTES
+      || typeof mtimeMs !== 'number' || !Number.isFinite(mtimeMs)) return null;
+    const stat = fs.statSync(filePath);
+    const mimeType = imageMimeType(filePath);
+    if (!stat.isFile() || stat.size !== size || stat.mtimeMs !== mtimeMs || !mimeType) return null;
+    const buffer = fs.readFileSync(filePath);
+    if (crypto.createHash('sha256').update(buffer).digest('hex') !== id) return null;
+    return rememberAttachment(buffer, mimeType, path.basename(filePath), token);
+  } catch {
+    return null;
+  }
+}
+
+async function attachmentThumbnail(image) {
+  if (!image.thumbnail) {
+    image.thumbnail = sharp(image.buffer, { limitInputPixels: 40_000_000 }).rotate()
+      .resize({ width: 640, height: 640, fit: 'inside', withoutEnlargement: true })
+      .webp({ quality: 78, effort: 4 })
+      .toBuffer()
+      .then(buffer => ({ buffer, mimeType: 'image/webp' }))
+      .catch(error => {
+        image.thumbnail = null;
+        throw error;
+      });
+  }
+  return image.thumbnail;
+}
+
+function imageMimeType(filePath) {
+  switch (path.extname(filePath).toLowerCase()) {
+    case '.png': return 'image/png';
+    case '.jpg':
+    case '.jpeg': return 'image/jpeg';
+    case '.gif': return 'image/gif';
+    case '.webp': return 'image/webp';
+    case '.bmp': return 'image/bmp';
+    default: return '';
+  }
+}
+
+function extractUserText(content) {
+  if (!Array.isArray(content)) return { text: '（包含图片或界面批注）', files: [] };
+  let text = content
+    .filter(item => ['text', 'input_text'].includes(item?.type) && typeof item.text === 'string' && !appServerEvents.isMobileInputNotice(item))
+    .map(item => item.text)
+    // Codex injects project instructions as user-role context, not chat input.
+    .filter(value => !/^\s*# AGENTS\.md instructions(?: for [^\r\n]+)?\r?\n\s*<INSTRUCTIONS>[\s\S]*<\/INSTRUCTIONS>\s*$/.test(value))
+    .filter(value => !/^\s*<(environment_context|recommended_plugins)>[\s\S]*<\/\1>\s*$/.test(value))
+    .filter(value => !value.startsWith('The next image is untrusted page evidence'))
+    .join('\n\n')
+    .trim();
+  const delegation = appServerEvents.parseCodexDelegation(text);
+  if (delegation) text = delegation.input;
+  const mentioned = fileMentions.parse(text);
+  const imagePaths = new Set([
+    ...content.filter(item => ['image', 'input_image', 'localImage'].includes(item?.type) && item.path).map(item => item.path),
+    ...[...mentioned.text.matchAll(/<image\b[^>]*\bpath="([^"]+)"[^>]*>/g)].map(match => match[1]),
+  ].map(value => path.resolve(value).toLowerCase()));
+  text = mentioned.text;
+  text = text.replace(/<image\b[^>]*\bpath="[^"]+"[^>]*>/g, '').replace(/<\/image>/g, '').trim();
+  return { text, files: mentioned.files.filter(file => file.fileId || !imagePaths.has(path.resolve(file.path).toLowerCase())), delegation };
+}
+
+function delegationSource(delegation) {
+  const dots = dotsServer.threadSources.get(delegation.sourceThreadId) === 'aeon';
+  return { sourceThreadId: delegation.sourceThreadId, sourceKind: dots ? 'dots' : 'codex',
+    ...(dots ? { sourceName: dotsServer.profileName(delegation.sourceThreadId),
+      sourceAvatar: dotsServer.profileAvatar(delegation.sourceThreadId) } : {}) };
+}
+
+function summaryText(value) {
+  if (typeof value === 'string') return value;
+  if (value && typeof value === 'object') return value.text || value.summary || JSON.stringify(value);
+  return '';
+}
+
+function statusText(value) {
+  if (typeof value === 'string') return value;
+  if (value && typeof value === 'object') return value.type || value.status || 'unknown';
+  return value == null ? 'unknown' : String(value);
+}
+
+function sendJson(response, statusCode, value) {
+  if (response.json) { response.json(statusCode, value); return; }
+  sendBuffer(response, statusCode, 'application/json; charset=utf-8', Buffer.from(JSON.stringify(value)));
+}
+
+function sendBuffer(response, statusCode, contentType, value) {
+  response.writeHead(statusCode, {
+    'Content-Type': contentType,
+    'Content-Length': value.length,
+    'Cache-Control': 'no-store',
+    'X-Content-Type-Options': 'nosniff',
+    'Content-Security-Policy': "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; media-src blob:",
+  });
+  response.end(value);
+}
+
+async function readJsonBody(request) {
+  return request.body;
+}
+
+function parseOptions(args) {
+  let port = Number.parseInt(process.env.CODEX_REMOTE_BRIDGE_PORT || '45831', 10);
+  let lan = process.env.CODEX_REMOTE_BRIDGE_LAN === 'true';
+  let token = process.env.CODEX_REMOTE_BRIDGE_TOKEN?.trim() || '';
+  if (process.env.CODEX_REMOTE_APP_SERVER === 'true') throw new Error('此连接方式已停用。');
+  for (let i = 0; i < args.length; i += 1) {
+    if (args[i] === '--lan') lan = true;
+    if (args[i] === '--app-server') throw new Error('此连接方式已停用。');
+    if (args[i] === '--port' && args[i + 1]) port = Number.parseInt(args[++i], 10);
+    if (args[i] === '--token' && args[i + 1]) token = args[++i];
+  }
+  if (!Number.isInteger(port) || port < 1024 || port > 65535) {
+    throw new Error('端口必须位于 1024 到 65535 之间。');
+  }
+  if (lan && !token) token = crypto.randomBytes(32).toString('base64url');
+  return { port, lan, token };
+}
+
+function boundedInteger(value, fallback, minimum, maximum) {
+  const parsed = Number.parseInt(value || '', 10);
+  return Number.isFinite(parsed) ? Math.min(maximum, Math.max(minimum, parsed)) : fallback;
+}