@walkhi/code-relax 0.1.0-beta.7 → 0.1.0-beta.9

package/README.md

@@ -7,32 +7,31 @@ Bridge 让 HarmonyOS 客户端控制 Windows 上的 Codex Desktop。当前要求
 公开 beta 已发布到 npm，安装或更新使用：
 
 ```powershell
-npm i -g @walkhi/code-relax@beta --allow-scripts=@walkhi/code-relax
+npm i -g @walkhi/code-relax@beta --allow-scripts=@walkhi/code-relax --foreground-scripts
 ```
 
 首次安装前先保存工作，并从 Codex 菜单或 Windows 托盘完全退出 Codex。更新无需先停止正在运行的 Bridge；安装器会短暂停止、替换并恢复服务。npm 全局安装会自动执行 `setup` 和 Skill 安装。`setup` 将完整服务部署到 `%LOCALAPPDATA%\Programs\CodexRemote\service`，记录安装所用 Node 的绝对路径，不复制 Node。配置、日志和二维码以 `installation.json.stateRoot` 为准，通常位于 `%LOCALAPPDATA%\CodexRemote`，MSIX 环境可能解析到包缓存目录；附件位于 `%ProgramData%\CodexRemote\attachments`。
 
 `setup` 立即启动 Bridge 和固定 45839 受管 app-server，并启用当前用户登录自启；自启不打开 Codex。受管实例健康后配置当前用户 `CODEX_APP_SERVER_WS_URL`，之后正常启动的 Desktop 自动接入。若安装时 Desktop 仍在运行，不中断现有任务，允许两个 app-server 暂时共存，并在手机提示立即或稍后重启。
 
-## 基础控制与完整控制
+## Codex 内核
 
 ```powershell
-relax shortcuts       # 创建完整控制/基础控制两个桌面快捷方式
-relax shared-start    # 完整控制、Desktop、Bridge
-relax desktop-start   # 基础控制、Desktop、Bridge
+relax shortcuts       # 创建 Codex 内核桌面快捷方式
+relax shared-start    # Codex 内核、Desktop、Bridge
 relax start           # 启动/复用常驻 Bridge 和已配置中继
 relax pair            # 启动/复用服务并打开配对二维码
 relax status
 relax stop
 ```
 
-基础控制使用普通 Desktop 工具管道。完整控制由官方 `codex app-server --listen ws://127.0.0.1:45839` 提供执行服务，Desktop 和 Bridge 同时连接；它只监听回环地址。Bridge 独立报告 app-server 健康、Desktop 接入和手机可写状态；Desktop 离线时不允许手机发起任务。同一 thread 已被另一个实例持有时，手机只读且可重新检测。
+Codex 内核由官方 `codex app-server --listen ws://127.0.0.1:45839` 提供执行服务，Desktop 和 Bridge 均可连接；它只监听回环地址。Bridge 独立报告内核健康、Desktop 接入和手机可写状态；Desktop 退出后，手机仍可操作内核中的任务。同一 thread 已被另一个实例持有时，手机只读且可重新检测。
 
-手机工作站详情可确认启用完整控制，独立进程逐步执行并保留 Bridge/中继连接，见[启用流程](../docs/shared-recovery.md)。本地 `shared-start` / `desktop-start` 在控制方式不匹配时要求先自行退出 Desktop，不强制结束任务。Bridge 状态匹配且健康时直接复用；未知进程占用 45831/45839 时拒绝接管。`stop` 只停止 Bridge，不停止 Desktop 或完整控制使用的 app-server。
+手机工作站详情可确认让 Desktop 接入 Codex 内核，独立进程逐步执行并保留 Bridge/中继连接，见[启用流程](../docs/shared-recovery.md)。本地 `shared-start` 在 Desktop 未接入受管服务时要求先自行退出 Desktop，不强制结束任务。Bridge 状态匹配且健康时直接复用；未知进程占用 45831/45839 时拒绝接管。`stop` 只停止 Bridge，不停止 Desktop 或受管 app-server。
 
-完整控制使用的 app-server 通过隐藏控制台启动，使后续控制台子进程继承隐藏窗口。完整控制不等待 Desktop 工具管道：项目、任务列表和新建任务使用 app-server；Bridge 在后台发现工具管道并读取桌面排序、置顶信息，后续列表读取应用这些信息，项目和任务 ID 保持不变。工具通道断开后重新发现，不中断手机聊天；Desktop 页面跳转在通道就绪后可用。
+受管 app-server 通过隐藏控制台启动，使后续控制台子进程继承隐藏窗口。手机的项目、任务列表和新建任务均使用受管内核，不依赖 Desktop 工具管道；项目和任务 ID 保持原生值。
 
-基础控制聊天仍依赖 Desktop 工具管道；Bridge 启动不等待管道，后台发现成功后恢复聊天能力。管道缺失或多个候选时保留管理连接并报告执行不可用，不猜测目标。
+受管 app-server 未就绪时，手机停留在连接界面并显示“Codex 内核未就绪”；Bridge 保留健康和恢复接口，聊天请求返回错误。
 
 ## Code Relax 中继
 
@@ -47,7 +46,7 @@ relax relay-stop --json
 relax relay-revoke --json
 ```
 
-`relay-shared-start` 先准备完整控制和 Bridge，再连接公网私有中继。每台移动设备通过 `pair` 配对一次；新增设备不替换已有设备。连接器把 Windows hostname 和当前 Wi-Fi/有线网络候选经已认证 WebSocket 临时发送给手机，手机本地保存电脑名，只在设备身份验证通过后保存可达地址；服务器不持久化这些 Code Relax 中继 hostname、IP 或网络名。OpenAI 官方认证和设备配对仍直接访问 OpenAI；完成后，手机使用统一配对产生的设备凭据，通过独立元数据 WebSocket 把官方环境 ID、名称和 hostname 写入设备记录，不上传 OpenAI access token、配对码或登录态。停止连接器不撤销授权。
+`relay-shared-start` 先准备 Codex 内核和 Bridge，再连接公网私有中继。每台移动设备通过 `pair` 配对一次；新增设备不替换已有设备。连接器把 Windows hostname 和当前 Wi-Fi/有线网络候选经已认证 WebSocket 临时发送给手机，手机本地保存电脑名，只在设备身份验证通过后保存可达地址；服务器不持久化这些 Code Relax 中继 hostname、IP 或网络名。OpenAI 官方认证和设备配对仍直接访问 OpenAI；完成后，手机使用统一配对产生的设备凭据，通过独立元数据 WebSocket 把官方环境 ID、名称和 hostname 写入设备记录，不上传 OpenAI access token、配对码或登录态。停止连接器不撤销授权。
 
 ## Bridge 调试页面
 
@@ -57,14 +56,14 @@ relax dev-status --json
 relax dev-stop --json
 ```
 
-调试页面与 Bridge 共用进程和端口（默认 45831），只额外提供白名单静态资源，用于基础控制和完整控制的局域网页面调试。`dev-stop` 只关闭静态页面，不影响 Bridge WebSocket。Code Relax 中继和 OpenAI 中继均使用 HAP 内置页面。
+调试页面与 Bridge 共用进程和端口（默认 45831），只额外提供白名单静态资源，用于局域网页面调试。`dev-stop` 只关闭静态页面，不影响 Bridge WebSocket。Code Relax 中继和 OpenAI 中继均使用 HAP 内置页面。
 
 ## 更新与卸载
 
 更新固定服务：
 
 ```powershell
-npm i -g @walkhi/code-relax@beta --allow-scripts=@walkhi/code-relax
+npm i -g @walkhi/code-relax@beta --allow-scripts=@walkhi/code-relax --foreground-scripts
 ```
 
 `setup` 先暂存并校验新版本，再短暂停止 Bridge/中继完成切换；原服务此前正在运行时会自动恢复，新版本启动失败则回滚并启动旧版本。无需提前执行 `stop`。Node 路径变化或原 Node 被删除后需重新 setup。升级可能因 Node 可执行文件路径变化而再次触发 Windows 防火墙授权。
@@ -80,4 +79,4 @@ npm uninstall -g @walkhi/code-relax
 
 ## 发布边界
 
-registry 当前公开包为 `@walkhi/code-relax@0.1.0-beta.7`，主 CLI 为 `relax`，并保留 `code-relax` 兼容入口。该版沿用 beta6 的启动代次自动迁移，并在 npm 安装控制台明确报告 app-server 是否重启、迁移前后 PID、Bridge 恢复结果和安装日志路径；`doctor` 会区分安装版本与运行代次。通信协议仍为 7。详细规则见 [npm 分发](../docs/npm-distribution.md)。
+registry 测试包使用 `@walkhi/code-relax@beta`，主 CLI 为 `relax`，并保留 `code-relax` 兼容入口。安装摘要通过 `--foreground-scripts` 显示，首次安装或启动链迁移时干净重启 Desktop，分别报告已安装与实际运行版本；登录启动使用当前用户任务计划。通信协议仍为 7。详细规则见 [npm 分发](../docs/npm-distribution.md)。

package/dist/bin/codex-remote.mjs

@@ -19,15 +19,14 @@ import { requestRecovery, recoveryStatus, recoveryWarning } from '../src/shared-
 import { configureManagedEnvironment, clearManagedEnvironment } from '../src/platform/windows/user-environment.mjs';
 
 const help = `Code Relax（Windows）
-用法：relax <setup|doctor|skill-install|skill-remove|uninstall|start|shared-start|desktop-start|shortcuts|pair|status|stop> [--json]
+用法：relax <setup|doctor|skill-install|skill-remove|uninstall|start|shared-start|shortcuts|pair|status|stop> [--json]
   setup   部署并启动固定目录服务、受管 app-server 和登录自启动；安全配置 Desktop 后续接入
   start   启动或复用 Bridge，并恢复已配置的私有中继
-  shared-start 启动或复用完整控制，再启动 Bridge 和已配置的私有中继
-  shared-recover --confirm 重新打开 Desktop 并接入完整控制；不强制重启已有 app-server
+  shared-start 启动或复用 Codex 内核，再启动 Desktop、Bridge 和已配置的私有中继
+  shared-recover --confirm 重新打开 Desktop 并接入 Codex 内核；不强制重启已有内核
   shared-recovery-status 查看最近一次恢复的实际阶段和结果
   autostart-enable / autostart-disable / autostart-status 管理当前用户登录时启动 Bridge
-  desktop-start 恢复基础控制，再启动 Bridge（切换前须自行退出 Desktop）
-  shortcuts 创建完整控制/基础控制桌面快捷方式
+  shortcuts 创建 Codex 内核桌面快捷方式
   pair    启动或复用工作站服务，并打开一次性配对二维码
   status  查看服务健康状态
   stop    停止服务
@@ -35,7 +34,7 @@ const help = `Code Relax（Windows）
   dev-status 查看 Bridge 调试页面状态
   dev-stop 关闭调试页面，不停止 Bridge
   relay-start 启动或复用私有中继，已有授权直接恢复，首次授权生成二维码
-  relay-shared-start 启动完整控制和 Bridge 后连接私有中继（需先退出当前 Codex）
+  relay-shared-start 启动 Codex 内核和 Bridge 后连接私有中继（需先退出当前 Codex）
   relay-status 查看私有中继连接器及手机连接状态
   relay-stop 停止私有中继连接器，不停止 Bridge 或 Codex
   relay-revoke 撤销这台电脑的全部移动设备授权（停止连接器不会撤销授权）
@@ -52,7 +51,7 @@ async function main() {
     console.log(help);
     return;
   }
-  if (!['autostart-enable', 'autostart-disable', 'autostart-status', 'shared-recover', 'shared-recovery-status', 'relay-shared-start', 'relay-revoke', 'relay-start', 'relay-status', 'relay-stop', 'dev', 'dev-status', 'dev-stop', 'setup', 'doctor', 'skill-install', 'skill-remove', 'uninstall', 'shared-start', 'desktop-start', 'shortcuts', 'start', 'pair', 'status', 'stop'].includes(command)
+  if (!['autostart-enable', 'autostart-disable', 'autostart-status', 'shared-recover', 'shared-recovery-status', 'relay-shared-start', 'relay-revoke', 'relay-start', 'relay-status', 'relay-stop', 'dev', 'dev-status', 'dev-stop', 'setup', 'doctor', 'skill-install', 'skill-remove', 'uninstall', 'shared-start', 'shortcuts', 'start', 'pair', 'status', 'stop'].includes(command)
     || flags.some(flag => flag !== '--json' && !(command === 'shared-recover' && flag === '--confirm'))) {
     throw new Error('无效命令或参数。使用 --help 查看用法。');
   }
@@ -63,13 +62,13 @@ async function main() {
   if (['relay-shared-start', 'relay-revoke', 'relay-start', 'relay-status', 'relay-stop'].includes(command)) {
     if (command === 'relay-shared-start') {
       const existing = await selfRelay('relay-status', stateRoot);
-      if (existing.running && existing.transportMode !== 'lan-shared') throw new Error('基础控制的中继连接器仍在运行，请先执行 relay-stop；不会自动中断手机连接。');
+      if (existing.running && existing.transportMode !== 'lan-shared') throw new Error('旧连接器仍在运行，请先执行 relay-stop；不会自动中断手机连接。');
       const result = await new Promise((resolve, reject) => {
         const child = spawn(process.execPath, [fileURLToPath(import.meta.url), 'shared-start', '--json'], { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] });
         let output = '', errors = '';
         child.stdout.on('data', chunk => { output += chunk; }); child.stderr.on('data', chunk => { errors += chunk; });
         child.once('error', reject);
-        child.once('exit', code => { if (code) reject(new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || '完整控制启动失败')); else { try { resolve(JSON.parse(output)); } catch { reject(new Error('完整控制启动结果无法确认，未启动中继')); } } });
+        child.once('exit', code => { if (code) reject(new Error(errors.trim().replace(/^(?:Code Relax：)+/u, '') || 'Codex 内核启动失败')); else { try { resolve(JSON.parse(output)); } catch { reject(new Error('Codex 内核启动结果无法确认，未启动中继')); } } });
       });
       if (!result.bridgeReady) { console.log(json ? JSON.stringify(result) : result.displayText); return; }
     }
@@ -83,7 +82,7 @@ async function main() {
     return;
   }
   const installedEntry = path.join(serviceRoot, 'dist/bin/codex-remote.mjs');
-  if (['autostart-enable', 'autostart-disable', 'autostart-status', 'shared-recover', 'shared-recovery-status', 'shared-start', 'desktop-start', 'shortcuts', 'start', 'pair', 'status', 'stop'].includes(command) && path.resolve(fileURLToPath(import.meta.url)).toLowerCase() !== installedEntry.toLowerCase()) {
+  if (['autostart-enable', 'autostart-disable', 'autostart-status', 'shared-recover', 'shared-recovery-status', 'shared-start', 'shortcuts', 'start', 'pair', 'status', 'stop'].includes(command) && path.resolve(fileURLToPath(import.meta.url)).toLowerCase() !== installedEntry.toLowerCase()) {
     if (!fs.existsSync(installedEntry)) throw new Error('尚未部署服务，请先执行 relax setup。');
     const executable = readRecord(path.join(serviceRoot, 'installation.json'))?.nodeExecutable;
     if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新执行 relax setup。');
@@ -170,7 +169,9 @@ async function main() {
       const source = path.join(stateRoot, name), target = path.join(physicalStateRoot, name);
       if (fs.existsSync(source) && !fs.existsSync(target)) fs.copyFileSync(source, target, fs.constants.COPYFILE_EXCL);
     }
-    const previous = fs.existsSync(serviceRoot) ? await service.status() : { processRunning: false };
+    const hadInstalledService = fs.existsSync(path.join(serviceRoot, 'installation.json'));
+    const desktopBeforeSetup = await desktopHost.inspect();
+    const previous = hadInstalledService ? await service.status() : { processRunning: false };
     const previousRelay = await selfRelay('relay-status', stateRoot);
     const resumeAfterUpdate = previous.processRunning || previousRelay.running;
     const executable = fs.realpathSync(process.execPath);
@@ -211,7 +212,13 @@ async function main() {
       restarted: false,
       previousPid: bridge.managedAppServer.pid || null,
     };
+    let desktopRestarted = false;
+    let desktopRestartReason = null;
     if (managedAppServerMigration.required) {
+      const desktopInfo = await desktopHost.inspect();
+      const desktopAttached = desktopInfo.running
+        && (bridge.desktop?.attachedToManagedServer === true || Boolean(await host.sharedServiceUrl()));
+      if (desktopAttached) await desktopHost.closeDesktop(desktopInfo.desktop);
       await service.restartManagedAppServer();
       const migrationDeadline = Date.now() + 40_000;
       do {
@@ -226,9 +233,23 @@ async function main() {
       }
       managedAppServerMigrated = true;
       managedAppServerMigration.restarted = true;
+      if (desktopAttached) {
+        await launchDesktop('shared', { stateRoot: physicalStateRoot, host: desktopHost });
+        desktopRestarted = true;
+        desktopRestartReason = 'app-server-migration';
+        bridge = await service.status();
+      }
     }
     const autostart = await residentStartup(installed, 'enable');
     const environment = await configureManagedEnvironment(physicalStateRoot);
+    if (!hadInstalledService && desktopBeforeSetup.running && !desktopRestarted) {
+      const currentDesktop = await desktopHost.inspect();
+      if (currentDesktop.running) await desktopHost.closeDesktop(currentDesktop.desktop);
+      await launchDesktop('shared', { stateRoot: physicalStateRoot, host: desktopHost });
+      desktopRestarted = true;
+      desktopRestartReason = 'first-install';
+      bridge = await service.status();
+    }
     installed.autostart = autostart;
     installed.restarted = resumeAfterUpdate;
     installed.environment = environment;
@@ -237,10 +258,14 @@ async function main() {
     installed.managedAppServerMigration = { ...managedAppServerMigration,
       currentPid: bridge.managedAppServer.pid || null,
       launcherRevision: bridge.managedAppServer.launcherRevision ?? null };
+    installed.desktopRestarted = desktopRestarted;
+    installed.desktopRestartReason = desktopRestartReason;
     installed.desktop = bridge.desktop;
-    installed.desktopRestartRecommended = bridge.desktop?.state === 'ordinary';
+    installed.desktopRestartRecommended = !desktopRestarted && bridge.desktop?.state === 'ordinary';
     const migrationText = managedAppServerMigrated ? '已自动重建旧启动链的 app-server；安装前尚未完成的任务可能已中断。\n' : '';
-    const restartText = installed.desktopRestartRecommended
+    const restartText = desktopRestarted
+      ? 'Codex Desktop 已干净重启并重新接入受管 app-server。'
+      : installed.desktopRestartRecommended
       ? 'Codex 当前仍在使用原连接。可以在手机端选择“立即重启（推荐）”，或稍后自行完全退出再启动。'
       : '下次正常启动 Codex 时会连接受管 app-server。';
     console.log(json ? JSON.stringify({ ...installed, nextSteps: desktopSetupSteps, displayText: `${migrationText}${desktopSetupSteps.join('\n')}\n${restartText}` }) : `服务已安装：${installed.serviceRoot}\n使用已安装的 Node：${installed.nodeExecutable}\n受管 app-server 已就绪；首次联网可能需要 Windows 防火墙授权。\n${migrationText}${desktopSetupSteps.join('\n')}\n${restartText}`);
@@ -252,16 +277,16 @@ async function main() {
     return;
   }
   let desktop;
-  if (command === 'shared-start' || command === 'desktop-start') {
+  if (command === 'shared-start') {
     if (!json) console.log('正在检查 Codex 的启动模式…');
-    desktop = await launchDesktop(command === 'shared-start' ? 'shared' : 'ordinary', { stateRoot, host: desktopHost });
+    desktop = await launchDesktop('shared', { stateRoot, host: desktopHost });
     delete process.env.CODEX_APP_TOOLS_PIPE_PATH;
   }
   if (!json && (desktop || command === 'start')) console.log('正在检查电脑连接并准备 Bridge…');
   const result = await service[desktop ? 'start' : command]();
-  if (command === 'status') {
-    console.log(json ? JSON.stringify(result) : result.running
-      ? `服务正常：${result.mode}，端口 ${result.port}，PID ${result.pid}` : '服务未就绪。');
+  if (command === 'status') {
+    console.log(json ? JSON.stringify(result) : result.running
+      ? `服务正常：${result.mode}，版本 ${result.version || '未知'}，端口 ${result.port}，PID ${result.pid}` : '服务未就绪。');
     return;
   }
   const { accessUrl, qrPath: _legacyQrPath, ...metadata } = result;

package/dist/bin/self-relay-demo.mjs

@@ -3,7 +3,7 @@ import { startRelayDemo } from '../src/self-relay/demo.mjs';
 import fs from 'node:fs';
 import { spawnSync } from 'node:child_process';
 
-const mode = process.argv.includes('--legacy') ? 'lan-legacy' : 'lan-shared';
+const mode = 'lan-shared';
 let remoteRelay;
 if (process.env.RELAY_URL) {
   let hostKey;

package/dist/shared/app-server-events.cjs

@@ -272,9 +272,11 @@
     if (action === 'steer') {
       const item = (await readQueueItems(request, threadId)).find(item => item.id === queuedSubmissionId);
       if (!item) throw new Error('该排队消息已不在队列中');
-      const { thread } = await request('thread/read', { threadId, includeTurns: true });
-      const active = thread.turns.findLast(turn => turn.status === 'inProgress');
-      if (active) {
+      const page = await request('thread/turns/list', {
+        threadId, limit: 1, sortDirection: 'desc', itemsView: 'summary',
+      });
+      const active = page.data?.[0];
+      if (active?.status === 'inProgress') {
         await request('turn/steer', { threadId, expectedTurnId: active.id, input: item.input,
           clientUserMessageId: item.clientUserMessageId });
         const { deleted } = await request('thread/queue/delete', { threadId, queuedSubmissionId });

package/dist/src/desktop-launcher.mjs

@@ -5,10 +5,10 @@ import { readRecord, writeRecord } from './service-lifecycle.mjs';
 import { ManagedAppServer, managedAppServerUrl as sharedUrl, managedPortAvailable as portAvailable } from './managed-app-server.mjs';
 export { portAvailable };
 export async function launchDesktop(mode, { stateRoot, host, environment = process.env, available = portAvailable, wait = delay, timeout = 30000, recoveryId, progress = () => {} }) {
-  if (!['shared', 'ordinary'].includes(mode)) throw new Error('无效的 Desktop 启动模式。');
+  if (mode !== 'shared') throw new Error('只支持接入 Code Relax 管理的 Codex 内核。');
   fs.mkdirSync(stateRoot, { recursive: true });
   const recovery = readRecord(path.join(stateRoot, 'shared-recovery.lock'));
-  if (recovery && recovery.operationId !== recoveryId) throw new Error('完整控制正在启动，请先查看 shared-recovery-status。');
+  if (recovery && recovery.operationId !== recoveryId) throw new Error('Codex 内核正在启动，请先查看 shared-recovery-status。');
   const lock = path.join(stateRoot, 'desktop-launch.lock');
   let descriptor;
   let managed;
@@ -29,18 +29,15 @@ export async function launchDesktop(mode, { stateRoot, host, environment = proce
     }
     const childEnv = { ...environment };
     for (const key of ['CODEX_APP_SERVER_WS_URL', 'CODEX_APP_SERVER_FORCE_CLI', 'CODEX_APP_TOOLS_PIPE_PATH']) delete childEnv[key];
-    if (mode === 'shared') {
-      progress('starting-app-server');
-      managed = new ManagedAppServer({ stateRoot, host, environment, available, wait, timeout });
-      if (!await managed.start()) throw new Error(managed.snapshot().error || '受管 app-server 未就绪。');
-      childEnv.CODEX_APP_SERVER_WS_URL = sharedUrl;
-    }
-    // Ordinary Desktop must not terminate a shared server that may still be executing tasks.
+    progress('starting-app-server');
+    managed = new ManagedAppServer({ stateRoot, host, environment, available, wait, timeout });
+    if (!await managed.start()) throw new Error(managed.snapshot().error || '受管 app-server 未就绪。');
+    childEnv.CODEX_APP_SERVER_WS_URL = sharedUrl;
     progress('starting-desktop');
     await host.start(info.desktop, [], childEnv, []);
     const deadline = Date.now() + timeout;
     while (true) {
-      const ready = mode === 'shared' ? await host.sharedServiceUrl() : (await host.inspect()).running;
+      const ready = await host.sharedServiceUrl();
       if (ready) break;
       if (Date.now() >= deadline) throw new Error('Desktop 尚未按所选模式就绪，未启动 Bridge。请查看 Desktop 窗口后重试。');
       await wait(500);

package/dist/src/managed-app-server.mjs

@@ -77,6 +77,9 @@ export class ManagedAppServer extends EventEmitter {
         if (!await this.available()) throw new Error('45839 被未识别进程占用，未启动或结束任何进程。');
         const childEnvironment = { ...this.environment };
         for (const key of ['CODEX_APP_SERVER_WS_URL', 'CODEX_APP_SERVER_FORCE_CLI', 'CODEX_APP_TOOLS_PIPE_PATH']) delete childEnvironment[key];
+        for (const key of Object.keys(childEnvironment)) {
+          if (/^npm_/iu.test(key) || key.toUpperCase() === 'INIT_CWD') delete childEnvironment[key];
+        }
         const pid = await this.host.start(info.cli, ['app-server', '--listen', managedAppServerUrl], childEnvironment,
           [path.join(this.stateRoot, 'managed-app-server.stdout.log'), path.join(this.stateRoot, 'managed-app-server.stderr.log')]);
         const started = await this.host.process(pid);

package/dist/src/message-images.mjs

@@ -1,8 +1,3 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import crypto from 'node:crypto';
-import sharp from 'sharp';
-
 export function validateInlineImage(value) {
   const data = typeof value === 'string' ? value.slice(value.indexOf(',') + 1) : '';
   if (typeof value !== 'string' || value.length > Math.ceil(8 * 1024 * 1024 / 3) * 4 + 64 ||
@@ -12,16 +7,3 @@ export function validateInlineImage(value) {
   }
   return value;
 }
-
-// Only the Desktop tool compatibility path needs a file visible to the host.
-export async function persistLegacyImage(value, directory) {
-  validateInlineImage(value);
-  const input = Buffer.from(value.slice(value.indexOf(',') + 1), 'base64');
-  const buffer = await sharp(input, { limitInputPixels: 40_000_000 }).rotate()
-    .resize({ width: 2560, height: 2560, fit: 'inside', withoutEnlargement: true }).webp({ quality: 88 }).toBuffer();
-  const id = crypto.createHash('sha256').update(buffer).digest('hex');
-  await fs.mkdir(directory, { recursive: true });
-  const file = path.join(directory, `${id}.webp`);
-  await fs.writeFile(file, buffer);
-  return file;
-}

package/dist/src/onboarding.mjs

@@ -1,12 +1,12 @@
 export const connectionModesText = [
   '可选连接模式：',
   '• 局域网：启动时会把当前 Wi-Fi/有线网络候选临时发给已配对设备；App 验证后保存，也可手动输入 IP。',
-  '• 私有中继：同一设备授权可跨网络长期重连；基础控制/完整控制能力由电脑当前 Bridge 状态决定。',
+  '• 私有中继：同一设备授权可跨网络长期重连；Codex 内核就绪后才能进入聊天。',
   '• OpenAI 官方中继：在已配对电脑内使用官方账号和设备授权；认证仍直连 OpenAI。',
 ].join('\n');
 
 export function phonePairingSteps(transportMode, paired = false) {
-  const mode = transportMode === 'lan-shared' ? '局域网 · 完整控制' : transportMode === 'lan-legacy' ? '局域网 · 基础控制' : '局域网（按电脑实际控制方式选择）';
+  const mode = transportMode === 'lan-shared' ? '局域网 · Codex 内核已就绪' : '局域网（Codex 内核未就绪）';
   return paired ? [
     `已有移动设备授权。手机可继续使用私有中继；${mode} 会显示验证成功的当前网络和历史记录。`,
     '添加另一台设备时执行 relax pair；每台设备只需扫码配对一次。',
@@ -19,8 +19,7 @@ export function phonePairingSteps(transportMode, paired = false) {
 export const desktopSetupSteps = [
   'Code Relax Skill 已随 npm 包自动安装。',
   '安装完成后 Bridge 和受管 app-server 已启动，并默认在当前用户登录时启动。',
-  '如果安装时 Codex 仍在运行，手机完整控制仍可使用；可选择立即或稍后重启，让 Desktop 也接入同一受管服务。',
-  '基础控制首次聊天需要在 Codex 对话启动一次 Code Relax 绑定上下文；完整控制不需要。',
+  '如果安装时 Codex 仍在运行，手机可继续使用 Codex 内核；可选择立即或稍后重启，让 Desktop 也接入同一内核。',
   '尚无设备授权时执行 relax pair，打开并扫描配对二维码。',
   '若工作站提示 Desktop 尚未接入受管服务，可在手机确认重新打开 Desktop，无需电脑脚本或快捷方式。',
   '统一配对先建立电脑记录；进入该电脑后可另行完成 OpenAI 官方 Remote 配对。',

package/dist/src/platform/README.md

@@ -3,7 +3,7 @@
 当前只实现 Windows Codex：
 
 - `windows/runtime-paths.mjs`：固定服务、用户状态、Codex 数据、附件和长期凭据路径。
-- `windows/service-host.mjs`、`desktop-tools.mjs`：网卡、Desktop 工具管道、共享连接检测和旧状态迁移。
+- `windows/service-host.mjs`：网卡、Bridge 进程环境和旧状态迁移。
 - `windows/desktop-host.mjs`、PowerShell 脚本：普通/共享 Desktop、快捷方式和隐藏控制台启动。
 - `windows/credential-store.mjs/.ps1`：私有中继电脑凭据的 DPAPI 与 ACL。
 

package/dist/src/platform/windows/desktop-shortcut-run.ps1

@@ -1,4 +1,4 @@
-param([string]$NodePath, [string]$Entry, [ValidateSet('shared-start','desktop-start')][string]$Action)
+param([string]$NodePath, [string]$Entry, [ValidateSet('shared-start')][string]$Action)
 $ErrorActionPreference = 'Stop'
 [Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
 & $NodePath $Entry $Action

package/dist/src/platform/windows/desktop-shortcuts.ps1

@@ -4,7 +4,7 @@ $ErrorActionPreference = 'Stop'
 $shell = New-Object -ComObject WScript.Shell
 if (-not $Destination) { $Destination = $shell.SpecialFolders.Item('Desktop') }
 $launcher = Join-Path $PSScriptRoot 'desktop-shortcut-run.ps1'
-$items = @(@{Name='Code Relax - 完整控制'; Command='shared-start'}, @{Name='Code Relax - 基础控制'; Command='desktop-start'})
+$items = @(@{Name='Code Relax - Codex 内核'; Command='shared-start'})
 $results = @()
 foreach ($item in $items) {
     $target = Join-Path $Destination ($item.Name + '.lnk')

package/dist/src/platform/windows/resident-startup.ps1

@@ -1,27 +1,67 @@
 param([string]$NodePath, [string]$Entry, [ValidateSet('enable','disable','status')][string]$Action='status')
 $ErrorActionPreference = 'Stop'
 [Console]::OutputEncoding = New-Object System.Text.UTF8Encoding($false)
+
+$taskName = 'Code Relax Bridge'
+$taskSource = '@walkhi/code-relax'
+$taskPath = '\' + $taskName
+$arguments = '"' + $Entry + '" start --json'
+$currentUser = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+
+$scheduler = New-Object -ComObject 'Schedule.Service'
+$scheduler.Connect()
+$root = $scheduler.GetFolder('\')
+$registered = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+if ($registered.Count -gt 0 -and $registered[0].Definition.RegistrationInfo.Source -ne $taskSource) {
+    throw 'Scheduled task is not owned by this installation.'
+}
+
+# Remove only the legacy shortcut created by this package. A Startup LNK that
+# launches hidden PowerShell with ExecutionPolicy Bypass triggers AV heuristics.
 $shell = New-Object -ComObject WScript.Shell
-$target = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
-$launcher = Join-Path $PSScriptRoot 'resident-start.ps1'
-$powershell = Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
-$exists = Test-Path -LiteralPath $target
-if ($exists) {
-    $existing = $shell.CreateShortcut($target)
-    if ($existing.TargetPath -ne $powershell -or -not $existing.Arguments.Contains('"' + $launcher + '"')) {
-        throw 'Startup shortcut is not owned by this installation.'
+$legacyPath = Join-Path $shell.SpecialFolders.Item('Startup') 'Code Relax Bridge.lnk'
+$legacyLauncher = Join-Path $PSScriptRoot 'resident-start.ps1'
+$legacyExists = Test-Path -LiteralPath $legacyPath
+if ($Action -ne 'status' -and $legacyExists) {
+    $legacy = $shell.CreateShortcut($legacyPath)
+    if (-not $legacy.Arguments.Contains('"' + $legacyLauncher + '"')) {
+        throw 'Legacy startup shortcut is not owned by this installation.'
     }
 }
+
 if ($Action -eq 'enable') {
     if (-not (Test-Path -LiteralPath $NodePath) -or -not (Test-Path -LiteralPath $Entry)) { throw 'Installed runtime is missing.' }
-    $link = $shell.CreateShortcut($target)
-    $link.TargetPath = $powershell
-    $link.Arguments = '-NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File "' + $launcher + '" -NodePath "' + $NodePath + '" -Entry "' + $Entry + '"'
-    $link.WorkingDirectory = $env:USERPROFILE
-    $link.WindowStyle = 7
-    $link.Description = 'Code Relax resident computer connection'
-    $link.Save()
-} elseif ($Action -eq 'disable' -and $exists) {
-    Remove-Item -LiteralPath $target
+    $definition = $scheduler.NewTask(0)
+    $definition.RegistrationInfo.Description = 'Start the Code Relax Bridge when this user signs in.'
+    $definition.RegistrationInfo.Source = $taskSource
+    $definition.Principal.UserId = $currentUser
+    $definition.Principal.LogonType = 3 # TASK_LOGON_INTERACTIVE_TOKEN
+    $definition.Principal.RunLevel = 0 # TASK_RUNLEVEL_LUA
+    $definition.Settings.Enabled = $true
+    $definition.Settings.Hidden = $true
+    $definition.Settings.StartWhenAvailable = $true
+    $definition.Settings.DisallowStartIfOnBatteries = $false
+    $definition.Settings.StopIfGoingOnBatteries = $false
+    $definition.Settings.ExecutionTimeLimit = 'PT5M'
+    $definition.Settings.MultipleInstances = 2 # TASK_INSTANCES_IGNORE_NEW
+    $trigger = $definition.Triggers.Create(9) # TASK_TRIGGER_LOGON
+    $trigger.UserId = $currentUser
+    $trigger.Enabled = $true
+    $exec = $definition.Actions.Create(0) # TASK_ACTION_EXEC
+    $exec.Path = $NodePath
+    $exec.Arguments = $arguments
+    $exec.WorkingDirectory = $env:USERPROFILE
+    [void]$root.RegisterTaskDefinition($taskName, $definition, 6, $null, $null, 3, $null) # TASK_CREATE_OR_UPDATE
+} elseif ($Action -eq 'disable' -and $registered.Count -gt 0) {
+    $root.DeleteTask($taskName, 0)
 }
-@{ enabled=(Test-Path -LiteralPath $target); path=$target; scope='current-user-logon' } | ConvertTo-Json -Compress
+if ($Action -ne 'status' -and $legacyExists) { Remove-Item -LiteralPath $legacyPath }
+
+$active = @($root.GetTasks(1) | Where-Object { $_.Name -eq $taskName } | Select-Object -First 1)
+$taskEnabled = $active.Count -gt 0 -and $active[0].Enabled
+@{
+    enabled=($taskEnabled -or ($Action -eq 'status' -and $legacyExists))
+    path=$(if ($taskEnabled) { 'Task Scheduler:' + $taskPath } elseif ($legacyExists) { $legacyPath } else { 'Task Scheduler:' + $taskPath })
+    scope='current-user-logon'
+    mechanism=$(if ($taskEnabled) { 'task-scheduler' } elseif ($legacyExists) { 'legacy-startup-shortcut' } else { 'task-scheduler' })
+} | ConvertTo-Json -Compress

package/dist/src/platform/windows/service-host.mjs

@@ -28,16 +28,13 @@ export function migrateState(stateRoot) {
     if (!fs.existsSync(target) && fs.existsSync(old)) fs.copyFileSync(old, target, fs.constants.COPYFILE_EXCL);
   }
 }
-export async function desktopEnvironment(context, sharedUrl) {
-  const environment = { ...process.env };
-  environment.CODEX_THREAD_ID ||= environment.CODEX_SESSION_ID || context?.sourceThreadId;
-  if (sharedUrl) environment.CODEX_REMOTE_SHARED_WS_URL = sharedUrl;
-  else delete environment.CODEX_REMOTE_SHARED_WS_URL;
-  const installation = readRecord(path.join(runtimePaths(environment).serviceRoot, 'installation.json'));
+export async function bridgeEnvironment() {
+  const environment = { ...process.env };
+  const installation = readRecord(path.join(runtimePaths(environment).serviceRoot, 'installation.json'));
   const executable = installation?.nodeExecutable;
   if (!executable || !fs.existsSync(executable)) throw new Error('安装时选用的 Node 不存在，请重新安装 Code Relax。');
   environment.CODEX_MCP_NODE_PATH = executable;
   environment.CODEX_REMOTE_LEGACY_UPLOADS_ROOTS = JSON.stringify(installation.legacyUploadsRoots || []);
-  if (sharedUrl) delete environment.CODEX_APP_TOOLS_PIPE_PATH;
+  delete environment.CODEX_APP_TOOLS_PIPE_PATH;
   return { executable, environment };
 }

package/dist/src/platform/windows/stop-desktop.ps1

@@ -5,15 +5,18 @@ $package = Get-AppxPackage OpenAI.Codex | Select-Object -First 1
 if (-not $package -or $Executable -ne (Join-Path $package.InstallLocation 'app/ChatGPT.exe')) {
     throw 'Desktop executable identity changed; recovery stopped.'
 }
-# This action is only reached after explicit whole-workstation recovery confirmation.
-# Never kill an app-server process tree: the independent recovery worker must survive.
-$workers = @(Get-CimInstance Win32_Process -Filter "Name='ChatGPT.exe'" | Where-Object { $_.ExecutablePath -eq $Executable })
+# Never kill another user's Desktop or an app-server process tree. The independent
+# installer/recovery worker must survive and relaunch only in this interactive session.
+$currentSessionId = (Get-Process -Id $PID -ErrorAction Stop).SessionId
+$workers = @(Get-CimInstance Win32_Process -Filter "Name='ChatGPT.exe'" | Where-Object {
+    $_.ExecutablePath -eq $Executable -and $_.SessionId -eq $currentSessionId
+})
 foreach ($worker in $workers) {
     $actual = Get-CimInstance Win32_Process -Filter "ProcessId=$($worker.ProcessId)"
     if ($actual -and $actual.ExecutablePath -eq $worker.ExecutablePath -and $actual.CreationDate -eq $worker.CreationDate) {
         Stop-Process -Id $worker.ProcessId -Force -ErrorAction Stop
     }
 }
-if (Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $Executable }) {
+if (Get-Process ChatGPT -ErrorAction SilentlyContinue | Where-Object { $_.Path -eq $Executable -and $_.SessionId -eq $currentSessionId }) {
     throw 'Desktop did not exit; recovery stopped.'
 }

package/dist/src/self-relay/admin-page.mjs

@@ -0,0 +1,54 @@
+export function adminPage() {
+  return `<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Code Relax 管理</title>
+<style>
+:root{color-scheme:dark;font:14px/1.5 system-ui,"Microsoft YaHei",sans-serif;background:#101713;color:#edf4ee}
+*{box-sizing:border-box}body{margin:0}button,input,textarea{font:inherit}button{cursor:pointer;border:1px solid transparent;border-radius:9px;padding:9px 14px;background:#397e58;color:white;font-weight:600}button:hover{background:#46966b}button:disabled{opacity:.45;cursor:default}button.secondary{background:#26352c;color:#c8d7cd;border-color:#405548}button.secondary:hover{background:#34483a}button.danger{background:transparent;color:#eaa29c;border-color:#734947}button.danger:hover{background:#4a2929}button:focus-visible,input:focus-visible,textarea:focus-visible{outline:2px solid #8ad2a0;outline-offset:2px}
+main{max-width:1180px;margin:auto;padding:36px 24px 70px}.eyebrow{margin:0;color:#83b598;letter-spacing:.12em;font-size:11px;font-weight:700}h1{font-size:29px;line-height:1.2;margin:6px 0 8px}h2{font-size:17px;margin:0}p{margin:0}.subtle{color:#a3b4a8}.page-head{display:flex;align-items:end;justify-content:space-between;gap:16px;margin-bottom:24px}.page-head .subtle{margin-top:6px}.grid{display:grid;grid-template-columns:minmax(0,1.45fr) minmax(290px,.85fr);gap:18px;align-items:start}.stack{display:grid;gap:18px}.card{background:#19241d;border:1px solid #34463a;border-radius:16px;padding:22px;box-shadow:0 12px 30px #080e0a24}.card-head{display:flex;align-items:start;justify-content:space-between;gap:12px;margin-bottom:18px}.hint{font-size:12px;color:#9eafa3;margin-top:3px}.metrics{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.metric{background:#111b15;border:1px solid #2b3c30;border-radius:11px;padding:13px;color:#9eafa3;font-size:12px}.metric strong{display:block;color:#f0f6f0;font-size:24px;line-height:1.2;margin-bottom:5px;font-variant-numeric:tabular-nums}.metric small{display:block;color:#80b893}.field{display:grid;gap:7px;margin:15px 0}.field label{font-size:13px;font-weight:600;color:#c5d7c9}input,textarea{width:100%;background:#101913;border:1px solid #45614d;border-radius:9px;color:#f1f7f1;padding:10px 12px}textarea{min-height:145px;resize:vertical}.actions{display:flex;flex-wrap:wrap;gap:9px;align-items:center}.actions button{margin:0}.current{border:1px solid #385841;background:#112017;border-radius:11px;padding:15px;margin-bottom:18px}.current.empty{border-color:#34463a;background:#111b15}.badge{display:inline-block;background:#28583b;color:#c9f2d5;border-radius:100px;padding:2px 8px;font-size:11px;font-weight:700}.current h3,.history h3{font-size:15px;margin:8px 0 4px;overflow-wrap:anywhere}.current p,.history p{white-space:pre-wrap;overflow-wrap:anywhere;color:#c1d1c5}.date{font-size:12px;color:#94a99a}.history{display:grid;gap:10px}.history-item{border:1px solid #34463a;background:#141e17;border-radius:11px;padding:15px}.history-item.active{border-color:#4d865e}.history-top{display:flex;justify-content:space-between;align-items:start;gap:10px}.history-item p{margin:8px 0 12px;max-height:4.5em;overflow:hidden}.history-item .actions button{padding:6px 10px;font-size:12px}.empty-note{padding:24px;border:1px dashed #415748;border-radius:10px;color:#a3b4a8;text-align:center}.status{min-height:24px;margin-top:16px;color:#96d4a9}.status.error{color:#f0aaa2}@media(max-width:800px){main{padding:24px 16px 50px}.grid{grid-template-columns:1fr}.metrics{grid-template-columns:repeat(2,minmax(0,1fr))}}@media(max-width:500px){.page-head{align-items:start}.card{padding:17px}.metrics{gap:8px}.metric{padding:10px}.metric strong{font-size:21px}}
+</style>
+</head>
+<body><main>
+<header class="page-head"><div><p class="eyebrow">CODE RELAX / RELAY</p><h1>中继管理</h1><p class="subtle">查看运行状态，调整转发容量与系统公告。</p></div><button id="refresh" class="secondary" type="button">刷新状态</button></header>
+<div class="grid"><div class="stack">
+<section class="card"><div class="card-head"><div><h2>运行状态</h2><p class="hint">当前中继连接与转发占用</p></div></div><div id="metrics" class="metrics"></div></section>
+<section class="card"><div class="card-head"><div><h2>当前公告</h2><p class="hint">仅当前公告展示给手机并向在线设备推送</p></div></div><div id="current" class="current empty"></div><button id="withdraw" class="secondary" type="button">撤下当前公告</button></section>
+<section class="card"><div class="card-head"><div><h2>历史公告</h2><p id="historyCount" class="hint"></p></div></div><div id="history" class="history"></div></section>
+</div><div class="stack">
+<section class="card" id="editor"><div class="card-head"><div><h2>发布公告</h2><p class="hint">每次发布都会生成新的公告提醒</p></div></div><div class="field"><label for="title">标题</label><input id="title" maxlength="80" placeholder="输入公告标题"></div><div class="field"><label for="message">正文</label><textarea id="message" maxlength="2000" placeholder="输入公告内容"></textarea></div><div class="actions"><button id="publish" type="button">发布公告</button><button id="clear" class="secondary" type="button">清空</button></div></section>
+<section class="card"><div class="card-head"><div><h2>服务器转发容量</h2><p class="hint">限制经 WSS 转发的普通会话数</p></div></div><div class="field"><label for="limit">最大并发会话</label><input id="limit" type="number" min="1" max="256"></div><button id="saveLimit" type="button">保存设置</button></section>
+</div></div><p id="result" class="status" role="status" aria-live="polite"></p>
+</main><script>
+const el=id=>document.getElementById(id);
+let snapshot=null;
+const request=async(path,options={})=>{const response=await fetch(path,options);const body=await response.json();if(!response.ok)throw new Error(body.error||('HTTP '+response.status));return body};
+function setResult(message,error=false){el('result').textContent=message;el('result').classList.toggle('error',error)}
+function node(tag,className,text){const item=document.createElement(tag);if(className)item.className=className;if(text!==undefined)item.textContent=text;return item}
+function metric(value,label,detail){const item=node('div','metric');item.append(node('strong','',String(value)),node('span','',label));if(detail)item.append(node('small','',detail));return item}
+function date(value){return new Date(value).toLocaleString('zh-CN')}
+function render(state){snapshot=state;el('limit').value=state.maxRelaySessions;el('metrics').replaceChildren(
+  metric(state.activeRelaySessions,'受限转发','上限 '+state.maxRelaySessions),metric(state.activeExemptRelaySessions,'白名单转发'),
+  metric(state.websocketConnections,'WebSocket 连接'),metric(state.onlineComputers,'在线工作站'),metric(state.activePhones,'活动手机'));
+  const current=el('current');current.replaceChildren();current.classList.toggle('empty',!state.announcement);
+  if(state.announcement){const item=state.announcement;current.append(node('span','badge','正在展示'),node('h3','',item.title),node('p','',item.message),node('div','date','发布于 '+date(item.publishedAt)))}
+  else current.append(node('span','subtle','当前没有展示中的公告。'));
+  el('withdraw').disabled=!state.announcement;
+  const history=el('history');history.replaceChildren();el('historyCount').textContent='共 '+state.announcements.length+' 条已发布记录';
+  if(!state.announcements.length){history.append(node('div','empty-note','尚无历史公告'));return}
+  for(const item of state.announcements){const active=item.id===state.announcement?.id;const row=node('article','history-item'+(active?' active':''));
+    const top=node('div','history-top');const title=node('h3','',item.title);top.append(title);if(active)top.append(node('span','badge','当前'));
+    const actions=node('div','actions');const reuse=node('button','secondary','载入编辑');reuse.type='button';reuse.addEventListener('click',()=>{el('title').value=item.title;el('message').value=item.message;el('editor').scrollIntoView({behavior:'smooth',block:'start'});el('title').focus()});actions.append(reuse);
+    if(!active){const remove=node('button','danger','删除记录');remove.type='button';remove.addEventListener('click',()=>{if(confirm('确定删除这条历史公告？'))write('DELETE','/admin/api/announcements/'+encodeURIComponent(item.id),{},'历史公告已删除')});actions.append(remove)}
+    row.append(top,node('div','date','发布于 '+date(item.publishedAt)),node('p','',item.message),actions);history.append(row)}
+}
+async function load(){try{render(await request('/admin/api/status'))}catch(error){setResult(error.message,true);throw error}}
+async function write(method,path,body,message){try{await request(path,{method,headers:{'Content-Type':'application/json','X-Code-Relax-Admin':'1'},body:JSON.stringify(body)});await load();setResult(message)}catch(error){setResult(error.message,true)}}
+el('refresh').addEventListener('click',load);
+el('saveLimit').addEventListener('click',()=>write('PUT','/admin/api/settings',{maxRelaySessions:Number(el('limit').value)},'转发容量已保存'));
+el('publish').addEventListener('click',()=>{if(!el('title').value.trim()||!el('message').value.trim()){setResult('请填写标题和正文',true);return}write('PUT','/admin/api/announcement',{title:el('title').value,message:el('message').value},'公告已发布')});
+el('withdraw').addEventListener('click',()=>{if(snapshot?.announcement&&confirm('确定撤下当前公告？'))write('DELETE','/admin/api/announcement',{},'公告已撤下')});
+el('clear').addEventListener('click',()=>{el('title').value='';el('message').value='';el('title').focus()});load().catch(()=>{});
+</script></body></html>`;
+}