aws-runtime-bridge 1.9.9 → 1.9.20

package/dist/routes/dashboard.js

@@ -6,7 +6,7 @@
  */
 import { Router } from "express";
 import os from "node:os";
-import { getRegistrationState } from "../services/auto-register.js";
+import { execSync } from "node:child_process";
 import { getRuntimeBindingPublicState, getRuntimePairingCode } from "../services/runtime-binding.js";
 import { getAgentProcessManager } from "../services/agent-process-manager.js";
 import { collectSystemMetrics } from "../services/system-metrics.js";
@@ -14,7 +14,9 @@ import { loadPersistedSessions } from "../services/terminal-persistence.js";
 import { createLogger } from "../utils/logger.js";
 import { getBridgeVersion } from "../config.js";
 import { sdkSessions } from "./terminal.js";
-import { createSession, validateSession, destroySession, validateCredentials, } from "../services/panel-auth.js";
+import { createSession, getPanelCredentials, validateSession, destroySession, validateCredentials, hasConfiguredCredentials, isDefaultCredentials, setPanelCredentials, getAllSessions, getActiveSessionCount, } from "../services/panel-auth.js";
+import { getRecentLogs } from "../utils/logger.js";
+import { autoRegister, getRegistrationState, getAutoRegisterConfigFilePath } from "../services/auto-register.js";
 const log = createLogger("dashboard");
 // ── 内存缓存（两级） ─────────────────────────────────────
 // 一级：完整响应缓存，匹配前端轮询间隔（10s），避免大部分请求走 I/O
@@ -119,9 +121,10 @@ dashboardRouter.post("/runtime/login", (req, res) => {
         return;
     }
     const token = createSession();
+    const needSetup = !hasConfiguredCredentials();
     // 设置 HttpOnly cookie，24 小时过期
     res.setHeader("Set-Cookie", `${COOKIE_NAME}=${token}; HttpOnly; SameSite=Lax; Path=/; Max-Age=86400`);
-    res.json({ ok: true });
+    res.json({ ok: true, needSetup });
 });
 /** POST /runtime/logout 登出 */
 dashboardRouter.post("/runtime/logout", (req, res) => {
@@ -132,6 +135,170 @@ dashboardRouter.post("/runtime/logout", (req, res) => {
     res.setHeader("Set-Cookie", `${COOKIE_NAME}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`);
     res.json({ ok: true });
 });
+/**
+ * GET /runtime/credentials-status
+ * 返回当前凭据是否仍是默认值 root/root。
+ * 需要面板登录会话。
+ */
+dashboardRouter.get("/runtime/credentials-status", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const creds = getPanelCredentials();
+    res.json({ ok: true, isDefault: isDefaultCredentials(), configured: hasConfiguredCredentials(), username: creds.username });
+});
+/**
+ * POST /runtime/change-credentials
+ * 修改面板登录凭据，写入 ~/.aws-bridge/config.json。
+ * 需要面板登录会话。修改密码需校验原密码；用户名可同时修改。
+ */
+dashboardRouter.post("/runtime/change-credentials", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const { username, password, passwordConfirm, oldPassword } = req.body || {};
+    // 校验原密码（仅凭据已配置且新密码不为空时要求）
+    if (password && String(password).trim()) {
+        // 密码一致性校验
+        if (String(password) !== String(passwordConfirm)) {
+            res.status(400).json({ ok: false, error: "passwords do not match" });
+            return;
+        }
+        if (hasConfiguredCredentials()) {
+            if (!oldPassword) {
+                res.status(400).json({ ok: false, error: "old password required" });
+                return;
+            }
+            const current = getPanelCredentials();
+            if (String(oldPassword) !== current.password) {
+                res.status(403).json({ ok: false, error: "old password is incorrect" });
+                return;
+            }
+        }
+        // 首次设置时不校验原密码
+    }
+    // 至少需要用户名或密码的变更
+    if (!username || !String(username).trim()) {
+        res.status(400).json({ ok: false, error: "username required" });
+        return;
+    }
+    const finalPassword = (password && String(password).trim()) ? String(password).trim() : getPanelCredentials().password;
+    setPanelCredentials(String(username).trim(), finalPassword);
+    res.json({ ok: true });
+});
+/**
+ * GET /runtime/node-info
+ * 返回节点详细信息，供设置面板展示。
+ * 需要面板登录会话。
+ */
+dashboardRouter.get("/runtime/node-info", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const binding = getRuntimeBindingPublicState();
+    const reg = getRegistrationState();
+    res.json({
+        ok: true,
+        hostname: os.hostname(),
+        platform: os.platform(),
+        arch: os.arch(),
+        uptime: Math.floor(process.uptime()),
+        nodeVersion: process.version,
+        bridgeVersion,
+        configPath: getAutoRegisterConfigFilePath(),
+        homeDir: process.env.AWS_RUNTIME_HOME_DIR || os.homedir(),
+        bindingStatus: binding.status,
+        paired: binding.paired,
+        instanceId: binding.instanceId || reg.instanceId,
+        schedulerBaseUrl: binding.schedulerBaseUrl,
+        registered: reg.registered,
+        pairingCode: binding.pairingCode,
+        activeSessions: getActiveSessionCount(),
+    });
+});
+/**
+ * GET /runtime/logs
+ * 返回最近的 bridge 日志。
+ * 需要面板登录会话。
+ */
+dashboardRouter.get("/runtime/logs", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const level = req.query.level || undefined;
+    const maxCount = Math.min(Number(req.query.count) || 200, 500);
+    const validLevels = ['debug', 'info', 'warn', 'error'];
+    const filterLevel = level && validLevels.includes(level)
+        ? level
+        : undefined;
+    const logs = getRecentLogs(maxCount, filterLevel);
+    res.json({ ok: true, logs });
+});
+/**
+ * POST /runtime/re-register
+ * 向调度中心重新发起注册。
+ * 需要面板登录会话。
+ */
+dashboardRouter.post("/runtime/re-register", async (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    try {
+        const success = await autoRegister();
+        res.json({ ok: success });
+    }
+    catch (err) {
+        const e = err;
+        res.status(500).json({ ok: false, error: e.message });
+    }
+});
+/**
+ * GET /runtime/admin/sessions
+ * 列出当前所有活跃的面板登录会话。
+ * 需要面板登录会话。
+ */
+dashboardRouter.get("/runtime/admin/sessions", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const list = getAllSessions().map(s => ({
+        token: s.token.slice(0, 8) + "...",
+        createdAt: new Date(s.createdAt).toISOString(),
+        lastUsedAt: new Date(s.lastUsedAt).toISOString(),
+        age: Math.floor((Date.now() - s.createdAt) / 1000),
+    }));
+    res.json({ ok: true, sessions: list });
+});
+/**
+ * POST /runtime/admin/sessions/:token/destroy
+ * 强制销毁指定的面板会话。
+ * 需要面板登录会话。
+ */
+dashboardRouter.post("/runtime/admin/sessions/:token/destroy", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    destroySession(req.params.token);
+    res.json({ ok: true });
+});
+/**
+ * POST /runtime/kill-process
+ * 强制终止指定 PID 的进程。
+ * 需要面板登录会话。
+ */
+dashboardRouter.post("/runtime/kill-process", (req, res) => {
+    if (!requirePanelAuth(req, res))
+        return;
+    const pid = Number(req.body.pid);
+    if (!pid || !Number.isInteger(pid) || pid <= 0) {
+        res.status(400).json({ ok: false, error: "Invalid PID" });
+        return;
+    }
+    try {
+        const cmd = os.platform() === "win32" ? `taskkill /PID ${pid} /F` : `kill -9 ${pid}`;
+        execSync(cmd, { timeout: 5000 });
+        log.info("Killed process", { pid });
+        res.json({ ok: true });
+    }
+    catch (err) {
+        const e = err;
+        log.warn("Failed to kill process", { pid, error: e.message });
+        res.status(500).json({ ok: false, error: e.message });
+    }
+});
 /**
  * GET /runtime/dashboard
  * 聚合 bridge 所有状态数据。使用 2 秒缓存避免频繁 I/O，需要面板登录会话。
@@ -184,6 +351,9 @@ dashboardRouter.get("/runtime/dashboard", async (req, res) => {
                     managementStatus: p.managementStatus,
                     sessionId: record?.sessionId,
                     state: record?.state,
+                    command: p.command,
+                    cwd: p.cwd,
+                    startedAt: p.startedAt,
                 };
             });
             const sortOrder = { managed: 0, orphan: 1, unknown: 2 };
@@ -254,6 +424,7 @@ dashboardRouter.get("/login", (_req, res) => {
 /**
  * GET / 仪表盘主页
  * 需要面板登录会话，未登录时跳转到 /login。
+ * 当凭据仍是默认值 root/root 时跳转到 /setup 引导首次设置。
  * 支持 ?lang=en 切换英文，默认中文
  */
 dashboardRouter.get("/", (req, res) => {
@@ -262,10 +433,28 @@ dashboardRouter.get("/", (req, res) => {
         res.redirect("/login");
         return;
     }
+    // 如果 config.json 尚未配置过凭据，引导首次设置
+    if (!hasConfiguredCredentials()) {
+        res.redirect("/setup");
+        return;
+    }
     const lang = req.query.lang === "en" ? "en" : "zh";
     res.type("text/html; charset=utf-8");
     res.send(DASHBOARD_HTML.replace("{{LANG}}", lang));
 });
+/**
+ * GET /setup 首次登录设置页面
+ * 需要面板登录会话。提供用户名/密码修改表单，也支持跳过（保持 root/root）。
+ */
+dashboardRouter.get("/setup", (req, res) => {
+    const token = getSessionToken(req);
+    if (!token || !validateSession(token)) {
+        res.redirect("/login");
+        return;
+    }
+    res.type("text/html; charset=utf-8");
+    res.send(SETUP_HTML);
+});
 // ======================================================================
 // DASHBOARD HTML — 单页自包含，支持中文/英文界面，默认中文
 // ======================================================================
@@ -565,6 +754,7 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
       <span id="updateIndicator" style="display:none"></span>
     </span>
     <span class="lang-btn" id="langBtn" onclick="toggleLang()">中文</span>
+    <button onclick="openSettings()" id="settingsBtn" title="Settings / 设置">&#x2699;</button>
     <button onclick="refresh()" id="refreshBtn">&#x21bb;</button>
   </div>
 </div>
@@ -608,6 +798,200 @@ const DASHBOARD_HTML = `<!DOCTYPE html>
 <div class="section-title" id="sectionPersisted">Persisted Sessions <span class="count" id="persistedCount"></span></div>
 <div class="table-wrap" id="persistedTable"><div class="empty" id="loadingPersisted">Loading...</div></div>
 
+<!-- Settings Modal -->
+<div class="modal-overlay" id="settingsModal" style="display:none" onclick="closeSettings(event)">
+  <div class="settings-panel" onclick="event.stopPropagation()">
+    <div class="settings-head">
+      <span id="settingsTitle"></span>
+      <button class="settings-close" onclick="closeSettings()">&times;</button>
+    </div>
+    <div class="settings-body">
+      <div class="settings-nav" id="settingsNav">
+        <div class="settings-nav-item active" data-page="account" onclick="switchSettingsPage('account')"><span id="navAccount"></span></div>
+        <div class="settings-nav-item" data-page="node" onclick="switchSettingsPage('node')"><span id="navNode"></span></div>
+        <div class="settings-nav-item" data-page="logs" onclick="switchSettingsPage('logs')"><span id="navLogs"></span></div>
+        <div class="settings-nav-item" data-page="scheduler" onclick="switchSettingsPage('scheduler')"><span id="navScheduler"></span></div>
+        <div class="settings-nav-item" data-page="maintenance" onclick="switchSettingsPage('maintenance')"><span id="navMaintenance"></span></div>
+      </div>
+      <div class="settings-content">
+        <!-- Account page -->
+        <div class="settings-page active" id="pageAccount">
+          <form id="settingsForm" onsubmit="return saveSettings(event)">
+            <div class="s-field">
+              <label id="lblUsername"></label>
+              <input type="text" id="setUsername" name="username" autocomplete="username">
+            </div>
+            <div class="s-field">
+              <label id="lblCurrentPwd"></label>
+              <input type="password" id="setOldPassword" name="oldPassword" autocomplete="current-password">
+            </div>
+            <div class="s-field">
+              <label id="lblNewPwd"></label>
+              <input type="password" id="setNewPassword" name="newPassword" autocomplete="new-password">
+              <span class="s-hint" id="hintKeepUnchanged"></span>
+            </div>
+            <div class="s-field">
+              <label id="lblConfirmPwd"></label>
+              <input type="password" id="setPasswordConfirm" name="passwordConfirm" autocomplete="new-password">
+            </div>
+            <div class="s-msg" id="settingsMsg"></div>
+            <div class="s-actions">
+              <button type="submit" class="s-btn s-btn-primary" id="settingsSaveBtn"></button>
+            </div>
+          </form>
+        </div>
+        <!-- Node Info page -->
+        <div class="settings-page" id="pageNode">
+          <div class="s-info-grid" id="nodeInfoGrid">
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeHostname"></span><span class="s-info-value" id="valNodeHostname">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodePlatform"></span><span class="s-info-value" id="valNodePlatform">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeUptime"></span><span class="s-info-value" id="valNodeUptime">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeVersion"></span><span class="s-info-value" id="valNodeVersion">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeNodeVer"></span><span class="s-info-value" id="valNodeNodeVer">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeConfigPath"></span><span class="s-info-value" id="valNodeConfigPath">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeHomeDir"></span><span class="s-info-value" id="valNodeHomeDir">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeScheduler"></span><span class="s-info-value" id="valNodeScheduler">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeBinding"></span><span class="s-info-value" id="valNodeBinding">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeRegistered"></span><span class="s-info-value" id="valNodeRegistered">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeInstanceId"></span><span class="s-info-value" id="valNodeInstanceId">-</span></div>
+            <div class="s-info-row"><span class="s-info-label" id="lblNodeActiveSessions"></span><span class="s-info-value" id="valNodeActiveSessions">-</span></div>
+          </div>
+          <div class="s-actions">
+            <button class="s-btn s-btn-secondary" onclick="refreshNodeInfo()">Refresh / 🔄</button>
+          </div>
+        </div>
+        <!-- Logs page -->
+        <div class="settings-page" id="pageLogs">
+          <div class="s-log-toolbar">
+            <select id="logLevelFilter" onchange="refreshLogs()">
+              <option value="">All / 全部</option>
+              <option value="info">INFO</option>
+              <option value="warn">WARN</option>
+              <option value="error">ERROR</option>
+            </select>
+            <label class="s-log-toggle"><input type="checkbox" id="logAutoRefresh" checked> <span id="lblLogAutoRefresh"></span></label>
+            <button class="s-btn s-btn-sm" onclick="refreshLogs()" id="btnRefreshLogs">🔄</button>
+          </div>
+          <div class="s-log-list" id="logList"><div class="s-log-empty" id="logEmpty"></div></div>
+        </div>
+        <!-- Scheduler page -->
+        <div class="settings-page" id="pageScheduler">
+          <div class="s-field">
+            <label id="lblSchedUrl"></label>
+            <div class="s-info-row"><span class="s-info-value" id="valSchedUrl">-</span></div>
+          </div>
+          <div class="s-field">
+            <p class="s-desc" id="descSched"></p>
+          </div>
+          <div class="s-msg" id="schedMsg"></div>
+          <div class="s-actions">
+            <button class="s-btn s-btn-primary" id="btnReRegister" onclick="doReRegister()"></button>
+          </div>
+        </div>
+        <!-- Maintenance page -->
+        <div class="settings-page" id="pageMaintenance">
+          <div class="s-field">
+            <label id="lblRestartBridge"></label>
+            <p class="s-desc" id="descRestart"></p>
+          </div>
+          <div class="s-restart-msg" id="restartMsg"></div>
+          <div class="s-actions">
+            <button class="s-btn s-btn-danger" id="btnRestartBridge" onclick="confirmRestartBridge()"></button>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</div>
+
+<style>
+  .modal-overlay {
+    position: fixed; top: 0; left: 0; right: 0; bottom: 0;
+    background: rgba(0,0,0,0.55); z-index: 1000;
+    display: flex; align-items: center; justify-content: center;
+    padding: 20px;
+  }
+  .settings-panel {
+    background: var(--surface); border: 1px solid var(--border);
+    border-radius: var(--radius); width: 640px; max-width: 100%;
+    max-height: 90vh; display: flex; flex-direction: column;
+  }
+  .settings-head {
+    display: flex; align-items: center; justify-content: space-between;
+    padding: 16px 20px; border-bottom: 1px solid var(--border);
+  }
+  .settings-head span { font-size: 16px; font-weight: 600; }
+  .settings-close {
+    background: none; border: none; color: var(--text2);
+    font-size: 22px; cursor: pointer; padding: 0 4px; line-height: 1;
+  }
+  .settings-close:hover { color: var(--text); }
+  .settings-body { display: flex; flex: 1; min-height: 320px; }
+  .settings-nav { width: 100px; flex-shrink: 0; border-right: 1px solid var(--border); padding: 8px 0; }
+  .settings-nav-item { padding: 7px 14px; font-size: 13px; cursor: pointer; color: var(--text2); transition: all .15s; }
+  .settings-nav-item:hover { color: var(--text); background: rgba(255,255,255,0.03); }
+  .settings-nav-item.active { color: var(--accent); background: rgba(91,141,239,0.1); }
+  .settings-content { flex: 1; padding: 20px; overflow-y: auto; }
+  .settings-page { display: none; }
+  .settings-page.active { display: block; }
+  .s-field { margin-bottom: 16px; }
+  .s-field label { display: block; font-size: 13px; font-weight: 500; margin-bottom: 6px; color: var(--text2); }
+  .s-field input { width: 100%; padding: 9px 12px; background: var(--surface2); border: 1px solid var(--border); border-radius: 6px; color: var(--text); font-size: 14px; outline: none; }
+  .s-field input:focus { border-color: var(--accent); }
+  .s-hint { display: block; font-size: 11px; color: var(--text2); margin-top: 4px; }
+  .s-msg { padding: 8px 12px; border-radius: 6px; font-size: 13px; margin-bottom: 14px; display: none; }
+  .s-msg.error { display: block; background: rgba(240,84,84,0.12); color: var(--red); }
+  .s-msg.success { display: block; background: rgba(67,198,168,0.12); color: var(--green); }
+  .s-msg.info { display: block; background: rgba(91,141,239,0.12); color: var(--accent); }
+  .s-actions { margin-top: 12px; }
+  .s-btn { padding: 9px 24px; border-radius: 6px; font-size: 14px; font-weight: 600; cursor: pointer; transition: all .15s; border: none; }
+  .s-btn-sm { padding: 5px 12px; font-size: 13px; }
+  .s-btn-primary { background: var(--accent); color: #fff; }
+  .s-btn-primary:hover { background: var(--accent-hover); }
+  .s-btn-primary:disabled { opacity: 0.5; cursor: not-allowed; }
+  .s-btn-secondary { background: var(--surface2); color: var(--text); border: 1px solid var(--border); }
+  .s-btn-secondary:hover { background: var(--border); }
+  .s-btn-danger { background: var(--red); color: #fff; }
+  .s-btn-danger:hover { background: #d94a4a; }
+  .s-btn-danger:disabled { opacity: 0.5; cursor: not-allowed; }
+  .s-desc { font-size: 13px; color: var(--text2); line-height: 1.6; margin: 0; }
+  .s-restart-msg { padding: 8px 12px; border-radius: 6px; font-size: 13px; margin-bottom: 14px; display: none; }
+  .s-restart-msg.info { display: block; background: rgba(91,141,239,0.12); color: var(--accent); }
+  .s-restart-msg.error { display: block; background: rgba(240,84,84,0.12); color: var(--red); }
+  /* Info grid */
+  .s-info-grid { display: grid; gap: 2px; margin-bottom: 16px; }
+  .s-info-row { display: flex; padding: 7px 0; border-bottom: 1px solid var(--border); font-size: 13px; }
+  .s-info-label { color: var(--text2); min-width: 110px; flex-shrink: 0; }
+  .s-info-value { color: var(--text); word-break: break-all; }
+  /* Log viewer */
+  .s-log-toolbar { display: flex; align-items: center; gap: 10px; margin-bottom: 12px; flex-wrap: wrap; }
+  .s-log-toolbar select { background: var(--surface2); border: 1px solid var(--border); color: var(--text); padding: 5px 8px; border-radius: 4px; font-size: 12px; outline: none; }
+  .s-log-toolbar select:focus { border-color: var(--accent); }
+  .s-log-toggle { font-size: 12px; color: var(--text2); cursor: pointer; display: flex; align-items: center; gap: 4px; }
+  .s-log-toggle input { accent-color: var(--accent); }
+  .s-log-list { max-height: 360px; overflow-y: auto; font-family: "Cascadia Code", "Fira Code", "JetBrains Mono", Consolas, monospace; font-size: 11px; line-height: 1.7; background: var(--surface2); border: 1px solid var(--border); border-radius: 6px; padding: 8px; }
+  .s-log-entry { padding: 1px 4px; white-space: pre-wrap; word-break: break-all; }
+  .s-log-entry .ll { font-weight: 600; }
+  .s-log-entry .ll.INFO { color: var(--accent); }
+  .s-log-entry .ll.WARN { color: var(--orange); }
+  .s-log-entry .ll.ERROR { color: var(--red); }
+  .s-log-entry .ts { color: var(--text2); }
+  .s-log-empty { color: var(--text2); font-size: 13px; text-align: center; padding: 24px; }
+  /* Table */
+  .s-table-wrap { max-height: 320px; overflow-y: auto; }
+  .s-table { width: 100%; border-collapse: collapse; font-size: 12px; }
+  .s-table th { text-align: left; padding: 7px 10px; font-size: 11px; font-weight: 600; color: var(--text2); background: var(--surface2); border-bottom: 1px solid var(--border); white-space: nowrap; }
+  .s-table td { padding: 6px 10px; border-bottom: 1px solid var(--border); }
+  .s-table tr:last-child td { border-bottom: none; }
+  .s-tag { display: inline-block; padding: 1px 6px; border-radius: 3px; font-size: 11px; font-weight: 600; }
+  .s-tag.green { background: rgba(67,198,168,0.12); color: var(--green); }
+  .s-tag.red { background: rgba(240,84,84,0.12); color: var(--red); }
+  .s-tag.orange { background: rgba(240,160,48,0.12); color: var(--orange); }
+  .btn-kill { padding: 2px 10px; border-radius: 4px; font-size: 11px; font-weight: 600; cursor: pointer; border: 1px solid var(--red); background: transparent; color: var(--red); transition: all .15s; }
+  .btn-kill:hover { background: var(--red); color: #fff; }
+  .btn-kill:disabled { opacity: 0.4; cursor: not-allowed; }
+</style>
+
 <script>
 // ── 多语言翻译表 ──────────────────────────────────────────
 const T = {
@@ -651,6 +1035,7 @@ const T = {
     secUnknown: "\u5176\u4ed6\u8fdb\u7a0b",
     orphanBanner: "\u4ee5\u4e0b\u8fdb\u7a0b\u4ecd\u5728\u8fd0\u884c\u4f46\u8131\u79bb\u4e86 bridge \u7ba1\u7406",
     btnTerminate: "\u7ec8\u6b62",
+    btnKill: "\u6740\u6b7b",
     showUnknown: "\u663e\u793a",
     hideUnknown: "\u9690\u85cf",
     noOrphans: "\u65e0\u5b64\u513f\u8fdb\u7a0b",
@@ -674,8 +1059,62 @@ const T = {
     thWorkspace: "\u5de5\u4f5c\u533a",
     thProvider: "\u63d0\u4f9b\u65b9",
     thCommand: "\u547d\u4ee4",
+    thDirectory: "\u76ee\u5f55",
     thStarted: "\u5f00\u59cb\u65f6\u95f4",
     countManaged: "\u7ba1\u7406\u4e2d",
+    // 设置
+    setTitle: "\u8bbe\u7f6e",
+    setAccount: "\u8d26\u53f7",
+    setUsername: "\u7528\u6237\u540d",
+    setCurrentPwd: "\u5f53\u524d\u5bc6\u7801",
+    setNewPwd: "\u65b0\u5bc6\u7801",
+    setConfirmPwd: "\u786e\u8ba4\u65b0\u5bc6\u7801",
+    setSave: "\u4fdd\u5b58",
+    setCancel: "\u53d6\u6d88",
+    setKeepUnchanged: "\u4e0d\u586b\u5219\u4e0d\u4fee\u6539\u5bc6\u7801",
+    setPwdRequired: "\u4fee\u6539\u5bc6\u7801\u9700\u8981\u8f93\u5165\u5f53\u524d\u5bc6\u7801",
+    setPwdMismatch: "\u4e24\u6b21\u8f93\u5165\u7684\u65b0\u5bc6\u7801\u4e0d\u4e00\u81f4",
+    setPwdTooShort: "\u5bc6\u7801\u81f3\u5c114\u4f4d",
+    setSaved: "\u8bbe\u7f6e\u5df2\u4fdd\u5b58",
+    setSaveFailed: "\u4fdd\u5b58\u5931\u8d25",
+    setNetworkError: "\u7f51\u7edc\u9519\u8bef",
+    setMaintenance: "\u7ef4\u62a4",
+    setRestartBridge: "\u91cd\u542f Bridge",
+    setRestartDesc: "\u91cd\u542f\u6865\u63a5\u670d\u52a1\uff0c\u6b63\u5728\u8fd0\u884c\u7684\u4f1a\u8bdd\u4e0d\u53d7\u5f71\u54cd\u3002",
+    setRestartConfirm: "\u786e\u8ba4\u91cd\u542f Bridge\uff1f",
+    setRestarting: "\u91cd\u542f\u4e2d...",
+    // 节点信息
+    nodeTitle: "\u8282\u70b9\u4fe1\u606f",
+    nodeHostname: "\u4e3b\u673a\u540d",
+    nodePlatform: "\u5e73\u53f0",
+    nodeUptime: "\u8fd0\u884c\u65f6\u957f",
+    nodeVersion: "Bridge \u7248\u672c",
+    nodeNodeVer: "Node \u7248\u672c",
+    nodeConfigPath: "\u914d\u7f6e\u6587\u4ef6\u8def\u5f84",
+    nodeHomeDir: "\u8fd0\u884c\u65f6\u76ee\u5f55",
+    nodeScheduler: "\u8c03\u5ea6\u4e2d\u5fc3",
+    nodeBinding: "\u7ed1\u5b9a\u72b6\u6001",
+    nodeRegistered: "\u6ce8\u518c\u72b6\u6001",
+    nodeInstanceId: "\u5b9e\u4f8b ID",
+    nodeActiveSessions: "\u6d3b\u8dc3\u4f1a\u8bdd",
+    nodePaired: "\u5df2\u7ed1\u5b9a",
+    nodeUnpaired: "\u672a\u7ed1\u5b9a",
+    nodeRegYes: "\u5df2\u6ce8\u518c",
+    nodeRegNo: "\u672a\u6ce8\u518c",
+    // 日志
+    logTitle: "\u65e5\u5fd7",
+    logAutoRefresh: "\u81ea\u52a8\u5237\u65b0",
+    logLevelAll: "\u5168\u90e8",
+    logRefreshing: "\u5237\u65b0\u4e2d...",
+    logEmpty: "\u6682\u65e0\u65e5\u5fd7",
+    // 调度中心
+    schedTitle: "\u8c03\u5ea6\u4e2d\u5fc3",
+    schedUrl: "\u670d\u52a1\u5730\u5740",
+    schedReRegister: "\u91cd\u65b0\u6ce8\u518c",
+    schedReRegistering: "\u6ce8\u518c\u4e2d...",
+    schedReRegistered: "\u91cd\u65b0\u6ce8\u518c\u6210\u529f",
+    schedReRegisterFail: "\u91cd\u65b0\u6ce8\u518c\u5931\u8d25",
+    schedDesc: "\u5411\u8c03\u5ea6\u4e2d\u5fc3\u53d1\u8d77\u91cd\u65b0\u6ce8\u518c\uff0c\u5efa\u8bae\u5728\u8fde\u63a5\u5f02\u5e38\u65f6\u4f7f\u7528\u3002",
     // 状态文本
     stHealthy: "\u5065\u5eb7",
     stError: "\u5f02\u5e38",
@@ -726,6 +1165,7 @@ const T = {
     secUnknown: "Other Processes",
     orphanBanner: "These processes are running but no longer managed by bridge",
     btnTerminate: "Terminate",
+    btnKill: "Kill",
     showUnknown: "Show",
     hideUnknown: "Hide",
     noOrphans: "No orphan processes",
@@ -748,8 +1188,63 @@ const T = {
     thWorkspace: "Workspace",
     thProvider: "Provider",
     thCommand: "Command",
+    thDirectory: "Directory",
     thStarted: "Started",
     countManaged: "managed",
+    // Settings
+    setTitle: "Settings",
+    setAccount: "Account",
+    setUsername: "Username",
+    setCurrentPwd: "Current Password",
+    setNewPwd: "New Password",
+    setConfirmPwd: "Confirm New Password",
+    setSave: "Save",
+    setCancel: "Cancel",
+    setKeepUnchanged: "Leave blank to keep current password",
+    setPwdRequired: "Current password is required to change password",
+    setPwdMismatch: "New passwords do not match",
+    setPwdTooShort: "Password must be at least 4 characters",
+    setSaved: "Settings saved",
+    setSaveFailed: "Save failed",
+    setNetworkError: "Network error",
+    setMaintenance: "Maintenance",
+    setRestartBridge: "Restart Bridge",
+    setRestartDesc: "Restart the bridge service. Running sessions will be preserved.",
+    setRestartConfirm: "Are you sure you want to restart Bridge?",
+    setRestarting: "Restarting...",
+    // Node Info
+    nodeTitle: "Node Info",
+    nodeHostname: "Hostname",
+    nodePlatform: "Platform",
+    nodeUptime: "Uptime",
+    nodeVersion: "Bridge Version",
+    nodeNodeVer: "Node Version",
+    nodeConfigPath: "Config Path",
+    nodeHomeDir: "Home Directory",
+    nodeScheduler: "Scheduler",
+    nodeBinding: "Binding",
+    nodeRegistered: "Registration",
+    nodeInstanceId: "Instance ID",
+    nodeActiveSessions: "Active Sessions",
+    nodePaired: "Paired",
+    nodeUnpaired: "Unpaired",
+    nodeRegYes: "Registered",
+    nodeRegNo: "Not Registered",
+    // Logs
+    logTitle: "Logs",
+    logAutoRefresh: "Auto Refresh",
+    logLevelAll: "All",
+    logRefreshing: "Refreshing...",
+    logEmpty: "No logs yet",
+    // Scheduler
+    schedTitle: "Scheduler",
+    schedUrl: "Server URL",
+    schedReRegister: "Re-register",
+    schedReRegistering: "Registering...",
+    schedReRegistered: "Re-registered successfully",
+    schedReRegisterFail: "Re-registration failed",
+    schedDesc: "Re-register with the scheduler. Use when connection is abnormal.",
+    // 状态文本
     stHealthy: "Healthy",
     stError: "Error",
     stRunning: "Running",
@@ -783,6 +1278,10 @@ function toggleLang() {
   localStorage.setItem("dashboard-lang", lang);
   document.documentElement.lang = lang === "en" ? "en" : "zh-CN";
   document.getElementById("langBtn").textContent = t("langName");
+  if (document.getElementById("settingsModal").style.display === "flex") {
+    renderSettingsUI();
+    settingsLang = lang;
+  }
   if (lastData) render(lastData);
 }
 
@@ -815,6 +1314,20 @@ function fmtDuration(seconds) {
   parts.push(s + "s");
   return parts.join(" ");
 }
+function escHtml(s) {
+  if (typeof s !== "string") return "";
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
+function fmtShortDate(iso) {
+  if (!iso) return "-";
+  return iso.slice(0, 19).replace("T", " ");
+}
+function fmtShortPath(p) {
+  if (!p) return "-";
+  var parts = p.replace(/\\\\/g, "/").split("/").filter(Boolean);
+  if (parts.length <= 2) return p;
+  return parts.slice(-2).join("/");
+}
 
 function statusClass(v) {
   if (v === true || v === "healthy" || v === "paired" || v === "running" || v === "managed" || v === "registered") return "status-green";
@@ -976,7 +1489,7 @@ function render(data) {
         return '<tr><td>' + s.agentId + '</td><td>' + (pid ? '<code>' + pid + '</code>' : '<span class="status-muted">-</span>') + '</td>'
           + '<td><span class="' + statusClass(st) + '">' + (t("st" + st.charAt(0).toUpperCase() + st.slice(1)) || st) + '</span></td>'
           + '<td>' + (s.runtimeActionLabel || '-') + '</td>'
-          + '<td title="' + s.workspacePath + '">' + (s.workspacePath ? s.workspacePath.split(/[/\\\\]/).pop() : "-") + '</td>'
++ '<td title="' + s.workspacePath + '">' + (s.workspacePath ? s.workspacePath.replace(/\\\\/g, "/").split("/").pop() : "-") + '</td>'
           + '<td>' + (s.providerId || "-") + '</td></tr>';
       }).join("") +
       '</tbody></table>';
@@ -1004,9 +1517,9 @@ function render(data) {
     unknownTable.innerHTML = '<div class="empty">' + t("noProcesses") + '</div>';
   } else {
     unknownTable.innerHTML =
-      '<table><thead><tr><th>' + t("thPid") + '</th></tr></thead><tbody>' +
+      '<table><thead><tr><th>' + t("thPid") + '</th><th>' + t("thCommand") + '</th><th>' + t("thDirectory") + '</th><th>' + t("thStarted") + '</th><th>' + t("thAction") + '</th></tr></thead><tbody>' +
       unknownProcs.map(p =>
-        '<tr><td><code>' + p.pid + '</code></td></tr>'
+        '<tr><td><code>' + p.pid + '</code></td><td>' + escHtml(p.command || "-") + '</td><td title="' + escHtml(p.cwd || "") + '">' + escHtml(fmtShortPath(p.cwd)) + '</td><td>' + (p.startedAt ? fmtShortDate(p.startedAt) : "-") + '</td><td><button class="btn-kill" data-pid="' + p.pid + '">' + t("btnKill") + '</button></td></tr>'
       ).join("") +
       '</tbody></table>';
   }
@@ -1021,7 +1534,7 @@ function render(data) {
       '<table><thead><tr><th>' + t("thAgentId") + '</th><th>' + t("thStatus") + '</th><th>' + t("thWorkspace") + '</th><th>' + t("thCommand") + '</th><th>' + t("thStarted") + '</th></tr></thead><tbody>' +
       persisted.map(s =>
         '<tr><td>' + s.agentId + '</td><td>' + (s.status || "stopped") + '</td>'
-        + '<td title="' + s.workspacePath + '">' + (s.workspacePath ? s.workspacePath.split(/[/\\\\]/).pop() : "-") + '</td>'
+        + '<td title="' + s.workspacePath + '">' + (s.workspacePath ? s.workspacePath.replace(/\\\\/g, "/").split("/").pop() : "-") + '</td>'
         + '<td>' + (s.command || "-") + '</td>'
         + '<td>' + (s.startedAt ? new Date(s.startedAt).toLocaleString() : "-") + '</td></tr>'
       ).join("") +
@@ -1172,6 +1685,281 @@ render = function(data) {
 checkUpdate();
 // Also check periodically (every 5 minutes)
 setInterval(checkUpdate, 300000);
+
+// ── Settings Modal ────────────────────────────────────────
+let settingsLang = null;
+function renderSettingsUI() {
+  document.getElementById("settingsTitle").textContent = t("setTitle");
+  document.getElementById("navAccount").textContent = t("setAccount");
+  document.getElementById("lblUsername").textContent = t("setUsername");
+  document.getElementById("lblCurrentPwd").textContent = t("setCurrentPwd");
+  document.getElementById("lblNewPwd").textContent = t("setNewPwd");
+  document.getElementById("lblConfirmPwd").textContent = t("setConfirmPwd");
+  document.getElementById("hintKeepUnchanged").textContent = t("setKeepUnchanged");
+  document.getElementById("settingsSaveBtn").textContent = t("setSave");
+  document.getElementById("navMaintenance").textContent = t("setMaintenance");
+  document.getElementById("lblRestartBridge").textContent = t("setRestartBridge");
+  document.getElementById("descRestart").textContent = t("setRestartDesc");
+  document.getElementById("btnRestartBridge").textContent = t("setRestartBridge");
+  document.getElementById("navNode").textContent = t("nodeTitle");
+  document.getElementById("navLogs").textContent = t("logTitle");
+  document.getElementById("navScheduler").textContent = t("schedTitle");
+  document.getElementById("lblNodeHostname").textContent = t("nodeHostname");
+  document.getElementById("lblNodePlatform").textContent = t("nodePlatform");
+  document.getElementById("lblNodeUptime").textContent = t("nodeUptime");
+  document.getElementById("lblNodeVersion").textContent = t("nodeVersion");
+  document.getElementById("lblNodeNodeVer").textContent = t("nodeNodeVer");
+  document.getElementById("lblNodeConfigPath").textContent = t("nodeConfigPath");
+  document.getElementById("lblNodeHomeDir").textContent = t("nodeHomeDir");
+  document.getElementById("lblNodeScheduler").textContent = t("nodeScheduler");
+  document.getElementById("lblNodeBinding").textContent = t("nodeBinding");
+  document.getElementById("lblNodeRegistered").textContent = t("nodeRegistered");
+  document.getElementById("lblNodeInstanceId").textContent = t("nodeInstanceId");
+  document.getElementById("lblNodeActiveSessions").textContent = t("nodeActiveSessions");
+  document.getElementById("lblLogAutoRefresh").textContent = t("logAutoRefresh");
+  document.getElementById("logEmpty").textContent = t("logEmpty");
+  document.getElementById("lblSchedUrl").textContent = t("schedUrl");
+  document.getElementById("descSched").textContent = t("schedDesc");
+  document.getElementById("btnReRegister").textContent = t("schedReRegister");
+}
+function switchSettingsPage(page) {
+  document.querySelectorAll(".settings-nav-item").forEach(function(el) { el.classList.remove("active"); });
+  document.querySelectorAll(".settings-page").forEach(function(el) { el.classList.remove("active"); });
+  document.querySelector('.settings-nav-item[data-page="' + page + '"]').classList.add("active");
+  document.getElementById('page' + page.charAt(0).toUpperCase() + page.slice(1)).classList.add("active");
+}
+function openSettings() {
+  if (settingsLang !== lang) { renderSettingsUI(); settingsLang = lang; }
+  const modal = document.getElementById("settingsModal");
+  const msg = document.getElementById("settingsMsg");
+  msg.className = "s-msg";
+  msg.style.display = "none";
+  document.getElementById("settingsForm").reset();
+  document.getElementById("settingsSaveBtn").disabled = false;
+  document.getElementById("settingsSaveBtn").textContent = t("setSave");
+  switchSettingsPage("account");
+  // 预填当前用户名
+  fetch("/runtime/credentials-status").then(r => r.json()).then(d => {
+    if (d.ok) document.getElementById("setUsername").value = d.username || "root";
+  }).catch(() => {});
+  modal.style.display = "flex";
+}
+function closeSettings(e) {
+  if (e && e.target !== e.currentTarget) return;
+  document.getElementById("settingsModal").style.display = "none";
+}
+async function saveSettings(e) {
+  e.preventDefault();
+  const msg = document.getElementById("settingsMsg");
+  const btn = document.getElementById("settingsSaveBtn");
+  msg.className = "s-msg";
+  msg.style.display = "none";
+
+  const username = document.getElementById("setUsername").value.trim();
+  const oldPassword = document.getElementById("setOldPassword").value;
+  const newPassword = document.getElementById("setNewPassword").value;
+  const passwordConfirm = document.getElementById("setPasswordConfirm").value;
+
+  if (newPassword) {
+    if (!oldPassword) {
+      msg.textContent = t("setPwdRequired");
+      msg.className = "s-msg error";
+      return;
+    }
+    if (newPassword !== passwordConfirm) {
+      msg.textContent = t("setPwdMismatch");
+      msg.className = "s-msg error";
+      return;
+    }
+    if (newPassword.length < 4) {
+      msg.textContent = t("setPwdTooShort");
+      msg.className = "s-msg error";
+      return;
+    }
+  }
+
+  btn.disabled = true;
+  btn.textContent = "Saving...";
+
+  try {
+    const resp = await fetch("/runtime/change-credentials", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        username,
+        oldPassword,
+        password: newPassword || undefined,
+        passwordConfirm: newPassword || undefined,
+      }),
+    });
+    const data = await resp.json();
+    if (data.ok) {
+      msg.textContent = t("setSaved");
+      msg.className = "s-msg success";
+      setTimeout(() => closeSettings(), 1500);
+    } else {
+      msg.textContent = data.error || t("setSaveFailed");
+      msg.className = "s-msg error";
+      btn.disabled = false;
+      btn.textContent = t("setSave");
+    }
+  } catch (err) {
+    msg.textContent = t("setNetworkError");
+    msg.className = "s-msg error";
+    btn.disabled = false;
+    btn.textContent = t("setSave");
+  }
+}
+function confirmRestartBridge() {
+  const msg = document.getElementById("restartMsg");
+  msg.className = "s-restart-msg";
+  msg.style.display = "none";
+  if (!confirm(t("setRestartConfirm"))) return;
+  const btn = document.getElementById("btnRestartBridge");
+  btn.disabled = true;
+  btn.textContent = t("setRestarting");
+  msg.textContent = t("setRestarting");
+  msg.className = "s-restart-msg info";
+  doRestartBridge();
+}
+
+// ── Node Info ─────────────────────────────────────────────
+let nodeInfoTimer = null;
+function refreshNodeInfo() {
+  fetch("/runtime/node-info").then(function(r) { return r.json(); }).then(function(d) {
+    if (!d.ok) return;
+    document.getElementById("valNodeHostname").textContent = d.hostname;
+    document.getElementById("valNodePlatform").textContent = d.platform + " " + d.arch;
+    document.getElementById("valNodeUptime").textContent = fmtDuration(d.uptime);
+    document.getElementById("valNodeVersion").textContent = d.bridgeVersion;
+    document.getElementById("valNodeNodeVer").textContent = d.nodeVersion;
+    document.getElementById("valNodeConfigPath").textContent = d.configPath;
+    document.getElementById("valNodeHomeDir").textContent = d.homeDir;
+    document.getElementById("valNodeScheduler").textContent = d.schedulerBaseUrl || "-";
+    document.getElementById("valNodeBinding").textContent = d.paired ? t("nodePaired") : t("nodeUnpaired");
+    document.getElementById("valNodeRegistered").textContent = d.registered ? t("nodeRegYes") : t("nodeRegNo");
+    document.getElementById("valNodeInstanceId").textContent = d.instanceId || "-";
+    document.getElementById("valNodeActiveSessions").textContent = d.activeSessions;
+  }).catch(function() {});
+}
+
+// ── Logs ──────────────────────────────────────────────────
+let logTimer = null;
+function refreshLogs() {
+  var level = document.getElementById("logLevelFilter").value;
+  var url = "/runtime/logs?count=300";
+  if (level) url += "&level=" + level;
+  document.getElementById("btnRefreshLogs").textContent = t("logRefreshing");
+  fetch(url).then(function(r) { return r.json(); }).then(function(d) {
+    if (!d.ok) return;
+    var list = document.getElementById("logList");
+    if (!d.logs || d.logs.length === 0) {
+      list.innerHTML = '<div class="s-log-empty">' + t("logEmpty") + '</div>';
+      return;
+    }
+    var html = "";
+    for (var i = 0; i < d.logs.length; i++) {
+      var e = d.logs[i];
+      html += '<div class="s-log-entry"><span class="ts">' + escHtml(e.timestamp.slice(0, 19).replace("T", " ")) + '</span> <span class="ll ' + e.level.toUpperCase() + '">[' + e.level.toUpperCase() + ']</span>';
+      if (e.prefix) html += ' [' + escHtml(e.prefix) + ']';
+      html += ' ' + escHtml(e.message) + '</div>';
+    }
+    list.innerHTML = html;
+    list.scrollTop = 0;
+  }).catch(function() {}).then(function() {
+    document.getElementById("btnRefreshLogs").textContent = "\u21bb";
+  });
+}
+function startLogAutoRefresh() {
+  stopLogAutoRefresh();
+  if (document.getElementById("logAutoRefresh").checked) {
+    logTimer = setInterval(refreshLogs, 5000);
+  }
+}
+function stopLogAutoRefresh() {
+  if (logTimer) { clearInterval(logTimer); logTimer = null; }
+}
+// wire log auto-refresh toggle
+document.addEventListener("change", function(e) {
+  if (e.target && e.target.id === "logAutoRefresh") {
+    if (e.target.checked) { refreshLogs(); startLogAutoRefresh(); }
+    else { stopLogAutoRefresh(); }
+  }
+});
+
+// ── Scheduler ─────────────────────────────────────────────
+function doReRegister() {
+  var btn = document.getElementById("btnReRegister");
+  var msg = document.getElementById("schedMsg");
+  msg.className = "s-msg";
+  msg.style.display = "none";
+  btn.disabled = true;
+  btn.textContent = t("schedReRegistering");
+  fetch("/runtime/re-register", { method: "POST", headers: { "Content-Type": "application/json" } })
+    .then(function(r) { return r.json(); })
+    .then(function(d) {
+      if (d.ok) {
+        msg.textContent = t("schedReRegistered");
+        msg.className = "s-msg success";
+        refreshNodeInfo();
+      } else {
+        msg.textContent = t("schedReRegisterFail") + (d.error ? ": " + d.error : "");
+        msg.className = "s-msg error";
+      }
+    })
+    .catch(function() {
+      msg.textContent = t("schedReRegisterFail");
+      msg.className = "s-msg error";
+    })
+    .then(function() {
+      btn.disabled = false;
+      btn.textContent = t("schedReRegister");
+    });
+}
+
+// ── Kill process (unknown processes table) ────────────────
+function killProcess(pid) {
+  if (!confirm(t("btnKill") + " PID " + pid + "?")) return;
+  var btn = document.querySelector('[data-pid="' + pid + '"]');
+  if (btn) btn.disabled = true;
+  fetch("/runtime/kill-process", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ pid: pid }),
+  })
+    .then(function(r) { return r.json(); })
+    .then(function(d) {
+      if (d.ok) {
+        var row = btn ? btn.closest("tr") : null;
+        if (row) row.style.display = "none";
+      } else {
+        if (btn) btn.disabled = false;
+        alert(t("btnKill") + " " + t("setSaveFailed") + (d.error ? ": " + d.error : ""));
+      }
+    })
+    .catch(function() {
+      if (btn) btn.disabled = false;
+      alert(t("btnKill") + " " + t("setNetworkError"));
+    });
+}
+// Event delegation for kill buttons
+document.addEventListener("click", function(e) {
+  var btn = e.target.closest ? e.target.closest(".btn-kill") : null;
+  if (btn && btn.getAttribute("data-pid")) {
+    killProcess(parseInt(btn.getAttribute("data-pid"), 10));
+  }
+});
+
+// ── Switch settings page with data refresh ────────────────
+var __origSwitch = switchSettingsPage;
+switchSettingsPage = function(page) {
+  __origSwitch(page);
+  stopLogAutoRefresh();
+  if (nodeInfoTimer) { clearTimeout(nodeInfoTimer); nodeInfoTimer = null; }
+  if (page === "node") { refreshNodeInfo(); }
+  else if (page === "logs") { refreshLogs(); startLogAutoRefresh(); }
+  else if (page === "scheduler") { refreshNodeInfo(); }
+};
 </script>
 </body>
 </html>`;
@@ -1322,7 +2110,12 @@ async function doLogin(e) {
     });
 
     if (resp.ok) {
-      window.location.href = "/";
+      const data = await resp.json();
+      if (data.needSetup) {
+        window.location.href = "/setup";
+      } else {
+        window.location.href = "/";
+      }
       return;
     }
 
@@ -1345,3 +2138,294 @@ document.getElementById("loginForm").addEventListener("keydown", function(e) {
 </script>
 </body>
 </html>`;
+// ======================================================================
+// SETUP HTML — 首次登录设置页面
+// ======================================================================
+const SETUP_HTML = `<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Bridge Dashboard - Setup</title>
+<style>
+  :root {
+    --bg: #0f1117;
+    --surface: #1a1d2e;
+    --surface2: #232738;
+    --border: #2d3248;
+    --text: #e1e4f0;
+    --text2: #8b90a8;
+    --accent: #5b8def;
+    --accent-hover: #4a7de0;
+    --green: #43c6a8;
+    --red: #f05454;
+    --radius: 10px;
+  }
+  * { margin:0; padding:0; box-sizing:border-box; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans SC", sans-serif;
+    background: var(--bg);
+    color: var(--text);
+    min-height: 100vh;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 20px;
+  }
+  .setup-card {
+    background: var(--surface);
+    border: 1px solid var(--border);
+    border-radius: var(--radius);
+    padding: 40px 36px;
+    width: 400px;
+    max-width: 100%;
+  }
+  .setup-card h1 {
+    font-size: 20px;
+    font-weight: 600;
+    margin-bottom: 4px;
+    text-align: center;
+  }
+  .setup-card p.subtitle {
+    font-size: 13px;
+    color: var(--text2);
+    text-align: center;
+    margin-bottom: 24px;
+  }
+  .badge {
+    display: inline-block;
+    background: rgba(240,160,48,0.12);
+    color: #f0a030;
+    font-size: 12px;
+    padding: 2px 10px;
+    border-radius: 4px;
+    margin-bottom: 20px;
+    text-align: center;
+    width: 100%;
+  }
+  .form-group {
+    margin-bottom: 18px;
+  }
+  .form-group label {
+    display: block;
+    font-size: 13px;
+    font-weight: 500;
+    margin-bottom: 6px;
+    color: var(--text2);
+  }
+  .form-group input {
+    width: 100%;
+    padding: 10px 12px;
+    background: var(--surface2);
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    color: var(--text);
+    font-size: 14px;
+    outline: none;
+    transition: border-color .15s;
+  }
+  .form-group input:focus {
+    border-color: var(--accent);
+  }
+  .form-group input::placeholder {
+    color: var(--text2);
+    opacity: 0.6;
+  }
+  .btn-row {
+    display: flex;
+    gap: 12px;
+    margin-top: 24px;
+  }
+  .btn-row button {
+    flex: 1;
+    padding: 10px;
+    border-radius: 6px;
+    font-size: 14px;
+    font-weight: 600;
+    cursor: pointer;
+    transition: all .15s;
+    border: none;
+  }
+  .btn-primary {
+    background: var(--accent);
+    color: #fff;
+  }
+  .btn-primary:hover { background: var(--accent-hover); }
+  .btn-primary:disabled {
+    opacity: 0.5;
+    cursor: not-allowed;
+  }
+  .btn-skip {
+    background: var(--surface2);
+    color: var(--text);
+    border: 1px solid var(--border) !important;
+  }
+  .btn-skip:hover { background: var(--border); }
+  .error-msg {
+    background: rgba(240,84,84,0.12);
+    color: var(--red);
+    padding: 8px 12px;
+    border-radius: 6px;
+    font-size: 13px;
+    margin-bottom: 16px;
+    display: none;
+  }
+  .error-msg.visible { display: block; }
+  .success-msg {
+    background: rgba(67,198,168,0.12);
+    color: var(--green);
+    padding: 8px 12px;
+    border-radius: 6px;
+    font-size: 13px;
+    margin-bottom: 16px;
+    display: none;
+    text-align: center;
+  }
+  .success-msg.visible { display: block; }
+  .hint {
+    font-size: 12px;
+    color: var(--text2);
+    margin-top: 16px;
+    text-align: center;
+    line-height: 1.6;
+  }
+  .spinner {
+    display: inline-block;
+    width: 14px;
+    height: 14px;
+    border: 2px solid var(--text2);
+    border-top-color: var(--accent);
+    border-radius: 50%;
+    animation: spin .6s linear infinite;
+    vertical-align: middle;
+    margin-right: 6px;
+  }
+  @keyframes spin { to { transform: rotate(360deg); } }
+</style>
+</head>
+<body>
+<div class="setup-card" id="setupCard">
+  <h1>Bridge Dashboard</h1>
+  <p class="subtitle">First-time setup — 首次登录设置</p>
+  <div class="badge">Default credentials detected. Please set a new username and password.<br>检测到默认凭据，请设置新的用户名和密码</div>
+  <div class="error-msg" id="errorMsg"></div>
+  <div class="success-msg" id="successMsg">Credentials saved! Redirecting... / 凭据已保存，正在跳转...</div>
+  <form id="setupForm">
+    <div class="form-group">
+      <label for="username">Username / 用户名</label>
+      <input type="text" id="username" name="username" value="root" autocomplete="username" autofocus>
+    </div>
+    <div class="form-group">
+      <label for="password">New Password / 新密码</label>
+      <input type="password" id="password" name="password" placeholder="Enter new password" autocomplete="new-password">
+    </div>
+    <div class="form-group">
+      <label for="passwordConfirm">Confirm Password / 确认密码</label>
+      <input type="password" id="passwordConfirm" name="passwordConfirm" placeholder="Enter password again" autocomplete="new-password">
+    </div>
+    <div class="btn-row">
+      <button type="button" class="btn-skip" id="skipBtn" onclick="doSkip()">Skip / 跳过</button>
+      <button type="submit" class="btn-primary" id="saveBtn">Save / 保存</button>
+    </div>
+  </form>
+  <div class="hint">Skip to keep default credentials <b>root/root</b>. You can change them later via <code>~/.aws-bridge/config.json</code>.<br>跳过以保留默认凭据 <b>root/root</b>。</div>
+</div>
+<script>
+async function doSave(e) {
+  e.preventDefault();
+  const errorEl = document.getElementById("errorMsg");
+  const saveBtn = document.getElementById("saveBtn");
+  errorEl.classList.remove("visible");
+
+  const username = document.getElementById("username").value.trim();
+  const password = document.getElementById("password").value;
+  const passwordConfirm = document.getElementById("passwordConfirm").value;
+
+  if (!username) {
+    errorEl.textContent = "Username is required / 用户名不能为空";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (!password) {
+    errorEl.textContent = "Password is required / 密码不能为空";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (password !== passwordConfirm) {
+    errorEl.textContent = "Passwords do not match / 两次输入的密码不一致";
+    errorEl.classList.add("visible");
+    return;
+  }
+  if (password.length < 4) {
+    errorEl.textContent = "Password must be at least 4 characters / 密码至少4位";
+    errorEl.classList.add("visible");
+    return;
+  }
+
+  saveBtn.disabled = true;
+  saveBtn.innerHTML = '<span class="spinner"></span>Saving...';
+
+  try {
+    const resp = await fetch("/runtime/change-credentials", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username, password, passwordConfirm }),
+    });
+    const data = await resp.json();
+    if (data.ok) {
+      document.getElementById("successMsg").classList.add("visible");
+      document.getElementById("setupForm").style.display = "none";
+      document.querySelector(".hint").style.display = "none";
+      document.querySelector(".badge").style.display = "none";
+      setTimeout(() => { window.location.href = "/"; }, 1500);
+    } else {
+      errorEl.textContent = data.error || "Save failed";
+      errorEl.classList.add("visible");
+      saveBtn.disabled = false;
+      saveBtn.textContent = "Save / 保存";
+    }
+  } catch (err) {
+    errorEl.textContent = "Network error, please try again / 网络错误，请重试";
+    errorEl.classList.add("visible");
+    saveBtn.disabled = false;
+    saveBtn.textContent = "Save / 保存";
+  }
+}
+
+async function doSkip() {
+  const skipBtn = document.getElementById("skipBtn");
+  const errorEl = document.getElementById("errorMsg");
+  skipBtn.disabled = true;
+  skipBtn.textContent = "Skipping... / 跳过中...";
+
+  try {
+    const resp = await fetch("/runtime/change-credentials", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ username: "root", password: "root", passwordConfirm: "root" }),
+    });
+    const data = await resp.json();
+    if (data.ok) {
+      document.getElementById("successMsg").classList.add("visible");
+      document.getElementById("setupForm").style.display = "none";
+      document.querySelector(".hint").style.display = "none";
+      document.querySelector(".badge").style.display = "none";
+      setTimeout(() => { window.location.href = "/"; }, 1500);
+    } else {
+      errorEl.textContent = data.error || "Skip failed";
+      errorEl.classList.add("visible");
+      skipBtn.disabled = false;
+      skipBtn.textContent = "Skip / 跳过";
+    }
+  } catch (err) {
+    errorEl.textContent = "Network error, please try again / 网络错误，请重试";
+    errorEl.classList.add("visible");
+    skipBtn.disabled = false;
+    skipBtn.textContent = "Skip / 跳过";
+  }
+}
+
+document.getElementById("setupForm").addEventListener("submit", doSave);
+</script>
+</body>
+</html>`;