cc-viewer 1.6.274 → 1.6.276

package/server/i18n.js

@@ -223,8 +223,8 @@ const i18nData = {
     "uk": "\nДля видалення виконайте: ccv --uninstall"
   },
   "cli.help": {
-    "zh": "CC Viewer CLI — Claude Code 的 Web Viewer 前端\n\n用法: ccv [选项] [命令] [提示词]\n\n默认启动交互式会话 + Web Viewer，所有参数透传给 claude。\n\n参数:\n  prompt                                    你的提示词\n\nCCV 专属选项:\n  -SDK, --sdk                               使用 Agent SDK 模式（无终端，结构化交互）\n  -logger                                   安装/修复 Claude Code Hook\n  --uninstall                               移除 CC Viewer 集成\n  --d                                       --dangerously-skip-permissions 的快捷方式\n  --ad                                      --allow-dangerously-skip-permissions 的快捷方式\n  --log-dir <path>                          自定义 JSONL 日志存储目录\n  --no-open                                 启动时不自动打开浏览器\n  --user-name <name>                        自定义显示名称\n  --user-avatar <path|url>                  自定义头像图片（文件路径或 URL）\n\nClaude 选项（透传）:\n  -c, --continue                            继续当前目录最近的对话\n  -r, --resume [value]                      通过会话 ID 恢复对话，或打开交互式选择器\n  -p, --print                               打印响应后退出（适用于管道）\n  -d, --debug [filter]                      启用调试模式\n  -w, --worktree [name]                     为此会话创建新的 git worktree\n  --model <model>                           当前会话使用的模型\n  --effort <level>                          努力级别 (low, medium, high, max)\n  --dangerously-skip-permissions            跳过所有权限检查\n  --allowedTools <tools...>                 允许的工具列表\n  --disallowedTools <tools...>              禁止的工具列表\n  --system-prompt <prompt>                  会话系统提示词\n  --append-system-prompt <prompt>           追加系统提示词\n  --mcp-config <configs...>                 加载 MCP 服务器配置\n  --permission-mode <mode>                  权限模式\n  --add-dir <directories...>                额外允许访问的目录\n  --max-budget-usd <amount>                 API 调用最大预算（仅 --print）\n  --output-format <format>                  输出格式（仅 --print）: text, json, stream-json\n  --json-schema <schema>                    结构化输出的 JSON Schema\n  --verbose                                 详细模式\n  -h, --help                                显示帮助\n  -v, --version                             显示版本\n\n  更多选项请参考: claude --help\n\n示例:\n  ccv                                       启动交互模式\n  ccv -c                                    继续上次对话\n  ccv -r                                    恢复对话\n  ccv -p \"hello\"                             打印模式\n  ccv --model opus                          指定模型\n  ccv --d                                   跳过权限确认（快捷方式）\n  ccv --ad                                  允许跳过权限（不立即启用，可通过 Shift+Tab 切换）\n  ccv -c --model sonnet --effort max        组合使用\n  ccv -SDK                                  Agent SDK 模式（无终端）\n  ccv -SDK --d                              SDK 模式 + 跳过权限\n  ccv -logger                               安装/修复 Hook\n  ccv --log-dir ~/my-logs                   使用自定义日志目录\n  ccv --no-open                             启动时不打开浏览器\n  ccv --user-name \"Alice\" --user-avatar ./avatar.png  自定义用户身份\n  ccv --log-dir /tmp/test --no-open         组合 CCV 选项",
-    "en": "CC Viewer CLI — Web Viewer frontend for Claude Code\n\nUsage: ccv [options] [command] [prompt]\n\nStarts an interactive session with Web Viewer by default. All args are passed\nthrough to claude.\n\nArguments:\n  prompt                                    Your prompt\n\nCCV Options:\n  -SDK, --sdk                               Use Agent SDK mode (no terminal, structured interaction)\n  -logger                                   Install/repair Claude Code hook\n  --uninstall                               Remove CC Viewer integration\n  --d                                       Shortcut for --dangerously-skip-permissions\n  --ad                                      Shortcut for --allow-dangerously-skip-permissions\n  --log-dir <path>                          Custom JSONL log storage directory\n  --no-open                                 Don't auto-open browser on startup\n  --user-name <name>                        Custom display name for this session\n  --user-avatar <path|url>                  Custom avatar image (file path or URL)\n\nClaude Options (passed through):\n  -c, --continue                            Continue the most recent conversation\n  -r, --resume [value]                      Resume a conversation by session ID, or open picker\n  -p, --print                               Print response and exit (useful for pipes)\n  -d, --debug [filter]                      Enable debug mode\n  -w, --worktree [name]                     Create a new git worktree for this session\n  --model <model>                           Model for the current session\n  --effort <level>                          Effort level (low, medium, high, max)\n  --dangerously-skip-permissions            Bypass all permission checks\n  --allowedTools <tools...>                 Allowed tool names\n  --disallowedTools <tools...>              Disallowed tool names\n  --system-prompt <prompt>                  System prompt for the session\n  --append-system-prompt <prompt>           Append to default system prompt\n  --mcp-config <configs...>                 Load MCP servers from JSON files or strings\n  --permission-mode <mode>                  Permission mode for the session\n  --add-dir <directories...>                Additional directories to allow access to\n  --max-budget-usd <amount>                 Max dollar amount for API calls (--print only)\n  --output-format <format>                  Output format (--print only): text, json, stream-json\n  --json-schema <schema>                    JSON Schema for structured output\n  --verbose                                 Enable verbose mode\n  -h, --help                                Show help\n  -v, --version                             Show version\n\n  For all options, see: claude --help\n\nExamples:\n  ccv                                       Start interactive mode\n  ccv -c                                    Continue last conversation\n  ccv -r                                    Resume a conversation\n  ccv -p \"hello\"                             Print mode\n  ccv --model opus                          Specify model\n  ccv --d                                   Skip permission prompts (shortcut)\n  ccv --ad                                  Allow bypass mode (not active, toggle via Shift+Tab)\n  ccv -c --model sonnet --effort max        Combine options\n  ccv -SDK                                  Agent SDK mode (no terminal)\n  ccv -SDK --d                              SDK mode + bypass permissions\n  ccv -logger                               Install/repair hook\n  ccv --log-dir ~/my-logs                   Use custom log directory\n  ccv --no-open                             Start without opening browser\n  ccv --user-name \"Alice\" --user-avatar ./avatar.png  Custom user profile\n  ccv --log-dir /tmp/test --no-open         Combine CCV options",
+    "zh": "CC Viewer CLI — Claude Code 的 Web Viewer 前端\n\n用法: ccv [选项] [命令] [提示词]\n\n默认启动交互式会话 + Web Viewer，所有参数透传给 claude。\n\n参数:\n  prompt                                    你的提示词\n\nCCV 专属选项:\n  -SDK, --sdk                               使用 Agent SDK 模式（无终端，结构化交互）\n  -logger                                   安装/修复 Claude Code Hook\n  --uninstall                               移除 CC Viewer 集成\n  --d                                       --dangerously-skip-permissions 的快捷方式\n  --ad                                      --allow-dangerously-skip-permissions 的快捷方式\n  --log-dir <path>                          自定义 JSONL 日志存储目录\n  --no-open                                 启动时不自动打开浏览器\n  --user-name <name>                        自定义显示名称\n  --user-avatar <path|url>                  自定义头像图片（文件路径或 URL）\n  --usePassword[=<pwd>]                     启用密码登录（远程访问需密码或 token；不带值则随机生成 8 位）\n\nClaude 选项（透传）:\n  -c, --continue                            继续当前目录最近的对话\n  -r, --resume [value]                      通过会话 ID 恢复对话，或打开交互式选择器\n  -p, --print                               打印响应后退出（适用于管道）\n  -d, --debug [filter]                      启用调试模式\n  -w, --worktree [name]                     为此会话创建新的 git worktree\n  --model <model>                           当前会话使用的模型\n  --effort <level>                          努力级别 (low, medium, high, max)\n  --dangerously-skip-permissions            跳过所有权限检查\n  --allowedTools <tools...>                 允许的工具列表\n  --disallowedTools <tools...>              禁止的工具列表\n  --system-prompt <prompt>                  会话系统提示词\n  --append-system-prompt <prompt>           追加系统提示词\n  --mcp-config <configs...>                 加载 MCP 服务器配置\n  --permission-mode <mode>                  权限模式\n  --add-dir <directories...>                额外允许访问的目录\n  --max-budget-usd <amount>                 API 调用最大预算（仅 --print）\n  --output-format <format>                  输出格式（仅 --print）: text, json, stream-json\n  --json-schema <schema>                    结构化输出的 JSON Schema\n  --verbose                                 详细模式\n  -h, --help                                显示帮助\n  -v, --version                             显示版本\n\n  更多选项请参考: claude --help\n\n示例:\n  ccv                                       启动交互模式\n  ccv -c                                    继续上次对话\n  ccv -r                                    恢复对话\n  ccv -p \"hello\"                             打印模式\n  ccv --model opus                          指定模型\n  ccv --d                                   跳过权限确认（快捷方式）\n  ccv --ad                                  允许跳过权限（不立即启用，可通过 Shift+Tab 切换）\n  ccv -c --model sonnet --effort max        组合使用\n  ccv -SDK                                  Agent SDK 模式（无终端）\n  ccv -SDK --d                              SDK 模式 + 跳过权限\n  ccv -logger                               安装/修复 Hook\n  ccv --log-dir ~/my-logs                   使用自定义日志目录\n  ccv --no-open                             启动时不打开浏览器\n  ccv --user-name \"Alice\" --user-avatar ./avatar.png  自定义用户身份\n  ccv --log-dir /tmp/test --no-open         组合 CCV 选项",
+    "en": "CC Viewer CLI — Web Viewer frontend for Claude Code\n\nUsage: ccv [options] [command] [prompt]\n\nStarts an interactive session with Web Viewer by default. All args are passed\nthrough to claude.\n\nArguments:\n  prompt                                    Your prompt\n\nCCV Options:\n  -SDK, --sdk                               Use Agent SDK mode (no terminal, structured interaction)\n  -logger                                   Install/repair Claude Code hook\n  --uninstall                               Remove CC Viewer integration\n  --d                                       Shortcut for --dangerously-skip-permissions\n  --ad                                      Shortcut for --allow-dangerously-skip-permissions\n  --log-dir <path>                          Custom JSONL log storage directory\n  --no-open                                 Don't auto-open browser on startup\n  --user-name <name>                        Custom display name for this session\n  --user-avatar <path|url>                  Custom avatar image (file path or URL)\n  --usePassword[=<pwd>]                     Enable password login (remote needs password or token; bare flag → random 8-char)\n\nClaude Options (passed through):\n  -c, --continue                            Continue the most recent conversation\n  -r, --resume [value]                      Resume a conversation by session ID, or open picker\n  -p, --print                               Print response and exit (useful for pipes)\n  -d, --debug [filter]                      Enable debug mode\n  -w, --worktree [name]                     Create a new git worktree for this session\n  --model <model>                           Model for the current session\n  --effort <level>                          Effort level (low, medium, high, max)\n  --dangerously-skip-permissions            Bypass all permission checks\n  --allowedTools <tools...>                 Allowed tool names\n  --disallowedTools <tools...>              Disallowed tool names\n  --system-prompt <prompt>                  System prompt for the session\n  --append-system-prompt <prompt>           Append to default system prompt\n  --mcp-config <configs...>                 Load MCP servers from JSON files or strings\n  --permission-mode <mode>                  Permission mode for the session\n  --add-dir <directories...>                Additional directories to allow access to\n  --max-budget-usd <amount>                 Max dollar amount for API calls (--print only)\n  --output-format <format>                  Output format (--print only): text, json, stream-json\n  --json-schema <schema>                    JSON Schema for structured output\n  --verbose                                 Enable verbose mode\n  -h, --help                                Show help\n  -v, --version                             Show version\n\n  For all options, see: claude --help\n\nExamples:\n  ccv                                       Start interactive mode\n  ccv -c                                    Continue last conversation\n  ccv -r                                    Resume a conversation\n  ccv -p \"hello\"                             Print mode\n  ccv --model opus                          Specify model\n  ccv --d                                   Skip permission prompts (shortcut)\n  ccv --ad                                  Allow bypass mode (not active, toggle via Shift+Tab)\n  ccv -c --model sonnet --effort max        Combine options\n  ccv -SDK                                  Agent SDK mode (no terminal)\n  ccv -SDK --d                              SDK mode + bypass permissions\n  ccv -logger                               Install/repair hook\n  ccv --log-dir ~/my-logs                   Use custom log directory\n  ccv --no-open                             Start without opening browser\n  ccv --user-name \"Alice\" --user-avatar ./avatar.png  Custom user profile\n  ccv --log-dir /tmp/test --no-open         Combine CCV options",
     "zh-TW": "CC Viewer CLI — Claude Code 的 Web Viewer 前端\n\n用法: ccv [選項] [命令] [提示詞]\n\n預設啟動互動式會話 + Web Viewer，所有參數透傳給 claude。\n\n參數:\n  prompt                                    你的提示詞\n\nCCV 專屬選項:\n  -SDK, --sdk                               使用 Agent SDK 模式（無終端，結構化互動）\n  -logger                                   安裝/修復 Claude Code Hook\n  --uninstall                               移除 CC Viewer 整合\n  --d                                       --dangerously-skip-permissions 的快捷方式\n  --ad                                      --allow-dangerously-skip-permissions 的快捷方式\n  --log-dir <path>                          自訂 JSONL 日誌儲存目錄\n  --no-open                                 啟動時不自動開啟瀏覽器\n  --user-name <name>                        自訂顯示名稱\n  --user-avatar <path|url>                  自訂頭像圖片（檔案路徑或 URL）\n\nClaude 選項（透傳）:\n  -c, --continue                            繼續當前目錄最近的對話\n  -r, --resume [value]                      透過會話 ID 恢復對話，或開啟互動式選擇器\n  -p, --print                               列印回應後退出（適用於管道）\n  -d, --debug [filter]                      啟用除錯模式\n  -w, --worktree [name]                     為此會話建立新的 git worktree\n  --model <model>                           當前會話使用的模型\n  --effort <level>                          努力級別 (low, medium, high, max)\n  --dangerously-skip-permissions            跳過所有權限檢查\n  --allowedTools <tools...>                 允許的工具列表\n  --disallowedTools <tools...>              禁止的工具列表\n  --system-prompt <prompt>                  會話系統提示詞\n  --append-system-prompt <prompt>           追加系統提示詞\n  --mcp-config <configs...>                 載入 MCP 伺服器設定\n  --permission-mode <mode>                  權限模式\n  --add-dir <directories...>                額外允許存取的目錄\n  --max-budget-usd <amount>                 API 呼叫最大預算（僅 --print）\n  --output-format <format>                  輸出格式（僅 --print）: text, json, stream-json\n  --json-schema <schema>                    結構化輸出的 JSON Schema\n  --verbose                                 詳細模式\n  -h, --help                                顯示說明\n  -v, --version                             顯示版本\n\n  更多選項請參考: claude --help\n\n範例:\n  ccv                                       啟動互動模式\n  ccv -c                                    繼續上次對話\n  ccv -r                                    恢復對話\n  ccv -p \"hello\"                             列印模式\n  ccv --model opus                          指定模型\n  ccv --d                                   跳過權限確認（快捷方式）\n  ccv --ad                                  允許跳過權限（不立即啟用，可透過 Shift+Tab 切換）\n  ccv -c --model sonnet --effort max        組合使用\n  ccv -SDK                                  Agent SDK 模式（無終端）\n  ccv -SDK --d                              SDK 模式 + 跳過權限\n  ccv -logger                               安裝/修復 Hook\n  ccv --log-dir ~/my-logs                   使用自訂日誌目錄\n  ccv --no-open                             啟動時不開啟瀏覽器\n  ccv --user-name \"Alice\" --user-avatar ./avatar.png  自訂使用者身份\n  ccv --log-dir /tmp/test --no-open         組合 CCV 選項"
   },
   "cli.cMode.notFound": {
@@ -487,6 +487,146 @@ const i18nData = {
     "tr": "  ➜ Network: {protocol}://{ip}:{port}?token={token}",
     "uk": "  ➜ Network: {protocol}://{ip}:{port}?token={token}"
   },
+  "server.passwordActive": {
+    "zh": "  🔒 密码保护已开启，密码: {password}",
+    "en": "  🔒 Password protection enabled. Password: {password}",
+    "zh-TW": "  🔒 密碼保護已開啟，密碼: {password}",
+    "ko": "  🔒 비밀번호 보호가 활성화되었습니다. 비밀번호: {password}",
+    "ja": "  🔒 パスワード保護が有効です。パスワード: {password}",
+    "de": "  🔒 Passwortschutz aktiviert. Passwort: {password}",
+    "es": "  🔒 Protección por contraseña activada. Contraseña: {password}",
+    "fr": "  🔒 Protection par mot de passe activée. Mot de passe : {password}",
+    "it": "  🔒 Protezione con password attivata. Password: {password}",
+    "da": "  🔒 Adgangskodebeskyttelse aktiveret. Adgangskode: {password}",
+    "pl": "  🔒 Ochrona hasłem włączona. Hasło: {password}",
+    "ru": "  🔒 Защита паролем включена. Пароль: {password}",
+    "ar": "  🔒 تم تفعيل الحماية بكلمة المرور. كلمة المرور: {password}",
+    "no": "  🔒 Passordbeskyttelse aktivert. Passord: {password}",
+    "pt-BR": "  🔒 Proteção por senha ativada. Senha: {password}",
+    "th": "  🔒 เปิดใช้การป้องกันด้วยรหัสผ่านแล้ว รหัสผ่าน: {password}",
+    "tr": "  🔒 Parola koruması etkin. Parola: {password}",
+    "uk": "  🔒 Захист паролем увімкнено. Пароль: {password}"
+  },
+  "server.passwordEmptyWarn": {
+    "zh": "  ⚠️  密码为空：远程访问无需任何验证，存在安全风险",
+    "en": "  ⚠️  Password is empty: remote access requires no verification — security risk",
+    "zh-TW": "  ⚠️  密碼為空：遠端存取無需任何驗證，存在安全風險",
+    "ko": "  ⚠️  비밀번호가 비어 있음: 원격 접속에 인증이 필요 없어 보안 위험이 있습니다",
+    "ja": "  ⚠️  パスワードが空です：リモートアクセスに認証が不要でセキュリティリスクがあります",
+    "de": "  ⚠️  Passwort ist leer: Fernzugriff erfordert keine Verifizierung – Sicherheitsrisiko",
+    "es": "  ⚠️  La contraseña está vacía: el acceso remoto no requiere verificación; riesgo de seguridad",
+    "fr": "  ⚠️  Mot de passe vide : l'accès distant ne nécessite aucune vérification — risque de sécurité",
+    "it": "  ⚠️  Password vuota: l'accesso remoto non richiede verifica — rischio di sicurezza",
+    "da": "  ⚠️  Adgangskode er tom: fjernadgang kræver ingen verificering – sikkerhedsrisiko",
+    "pl": "  ⚠️  Hasło jest puste: dostęp zdalny nie wymaga weryfikacji — ryzyko bezpieczeństwa",
+    "ru": "  ⚠️  Пароль пуст: удалённый доступ не требует проверки — угроза безопасности",
+    "ar": "  ⚠️  كلمة المرور فارغة: الوصول عن بُعد لا يتطلب أي تحقق — خطر أمني",
+    "no": "  ⚠️  Passordet er tomt: fjerntilgang krever ingen verifisering – sikkerhetsrisiko",
+    "pt-BR": "  ⚠️  A senha está vazia: o acesso remoto não exige verificação — risco de segurança",
+    "th": "  ⚠️  รหัสผ่านว่างเปล่า: การเข้าถึงระยะไกลไม่ต้องยืนยันตัวตน — มีความเสี่ยงด้านความปลอดภัย",
+    "tr": "  ⚠️  Parola boş: uzaktan erişim doğrulama gerektirmez — güvenlik riski",
+    "uk": "  ⚠️  Пароль порожній: віддалений доступ не потребує перевірки — загроза безпеці"
+  },
+  "server.auth.loginTitle": {
+    "zh": "请输入访问密码",
+    "en": "Enter access password",
+    "zh-TW": "請輸入存取密碼",
+    "ko": "접속 비밀번호를 입력하세요",
+    "ja": "アクセスパスワードを入力してください",
+    "de": "Zugangspasswort eingeben",
+    "es": "Introduce la contraseña de acceso",
+    "fr": "Saisissez le mot de passe d'accès",
+    "it": "Inserisci la password di accesso",
+    "da": "Indtast adgangskode",
+    "pl": "Wprowadź hasło dostępu",
+    "ru": "Введите пароль доступа",
+    "ar": "أدخل كلمة مرور الوصول",
+    "no": "Skriv inn tilgangspassord",
+    "pt-BR": "Digite a senha de acesso",
+    "th": "กรอกรหัสผ่านเพื่อเข้าถึง",
+    "tr": "Erişim parolasını girin",
+    "uk": "Введіть пароль доступу"
+  },
+  "server.auth.loginPlaceholder": {
+    "zh": "密码",
+    "en": "Password",
+    "zh-TW": "密碼",
+    "ko": "비밀번호",
+    "ja": "パスワード",
+    "de": "Passwort",
+    "es": "Contraseña",
+    "fr": "Mot de passe",
+    "it": "Password",
+    "da": "Adgangskode",
+    "pl": "Hasło",
+    "ru": "Пароль",
+    "ar": "كلمة المرور",
+    "no": "Passord",
+    "pt-BR": "Senha",
+    "th": "รหัสผ่าน",
+    "tr": "Parola",
+    "uk": "Пароль"
+  },
+  "server.auth.loginBtn": {
+    "zh": "登录",
+    "en": "Sign in",
+    "zh-TW": "登入",
+    "ko": "로그인",
+    "ja": "ログイン",
+    "de": "Anmelden",
+    "es": "Iniciar sesión",
+    "fr": "Se connecter",
+    "it": "Accedi",
+    "da": "Log ind",
+    "pl": "Zaloguj się",
+    "ru": "Войти",
+    "ar": "تسجيل الدخول",
+    "no": "Logg inn",
+    "pt-BR": "Entrar",
+    "th": "เข้าสู่ระบบ",
+    "tr": "Giriş yap",
+    "uk": "Увійти"
+  },
+  "server.auth.loginError": {
+    "zh": "密码错误",
+    "en": "Incorrect password",
+    "zh-TW": "密碼錯誤",
+    "ko": "비밀번호가 올바르지 않습니다",
+    "ja": "パスワードが正しくありません",
+    "de": "Falsches Passwort",
+    "es": "Contraseña incorrecta",
+    "fr": "Mot de passe incorrect",
+    "it": "Password errata",
+    "da": "Forkert adgangskode",
+    "pl": "Nieprawidłowe hasło",
+    "ru": "Неверный пароль",
+    "ar": "كلمة المرور غير صحيحة",
+    "no": "Feil passord",
+    "pt-BR": "Senha incorreta",
+    "th": "รหัสผ่านไม่ถูกต้อง",
+    "tr": "Parola yanlış",
+    "uk": "Невірний пароль"
+  },
+  "server.auth.togglePassword": {
+    "zh": "显示/隐藏密码",
+    "en": "Show/hide password",
+    "zh-TW": "顯示/隱藏密碼",
+    "ko": "비밀번호 표시/숨기기",
+    "ja": "パスワードの表示/非表示",
+    "de": "Passwort anzeigen/verbergen",
+    "es": "Mostrar/ocultar contraseña",
+    "fr": "Afficher/masquer le mot de passe",
+    "it": "Mostra/nascondi password",
+    "da": "Vis/skjul adgangskode",
+    "pl": "Pokaż/ukryj hasło",
+    "ru": "Показать/скрыть пароль",
+    "ar": "إظهار/إخفاء كلمة المرور",
+    "no": "Vis/skjul passord",
+    "pt-BR": "Mostrar/ocultar senha",
+    "th": "แสดง/ซ่อนรหัสผ่าน",
+    "tr": "Parolayı göster/gizle",
+    "uk": "Показати/сховати пароль"
+  },
   "update.updating": {
     "zh": "正在更新到 v{version}...",
     "en": "Updating to v{version}...",
@@ -2561,5 +2701,49 @@ export function t(key, params) {
   return text;
 }
 
+/**
+ * Like t(), but resolves against an explicit locale instead of the process-global
+ * currentLang. Used to render the login page in the remote browser's language
+ * without mutating shared state. Falls back to en → key.
+ */
+export function tFor(key, lang, params) {
+  let text = locales[lang]?.[key] || locales['en'][key] || key;
+  if (params) {
+    for (const [k, v] of Object.entries(params)) {
+      text = text.replaceAll(`{${k}}`, v);
+    }
+  }
+  return text;
+}
+
+/**
+ * Pick the best supported locale from an HTTP Accept-Language header
+ * (e.g. "en-US,en;q=0.9,zh;q=0.8"). Returns null if the header is empty/unusable
+ * so the caller can fall back to the server's configured language.
+ */
+export function localeFromAcceptLanguage(header) {
+  if (!header || typeof header !== 'string') return null;
+  const tags = header
+    .split(',')
+    .map((part) => {
+      const [tag, ...params] = part.trim().split(';');
+      let q = 1;
+      for (const param of params) {
+        const m = param.trim().match(/^q=([0-9.]+)$/);
+        if (m) q = parseFloat(m[1]);
+      }
+      return { tag: tag.trim(), q: Number.isFinite(q) ? q : 0 };
+    })
+    .filter((x) => x.tag && x.tag !== '*')
+    .sort((a, b) => b.q - a.q);
+  for (const { tag } of tags) {
+    const cleaned = tag.replace(/_/g, '-').toLowerCase();
+    if (LANG_MAP[cleaned]) return LANG_MAP[cleaned];
+    const primary = cleaned.split('-')[0];
+    if (LANG_MAP[primary]) return LANG_MAP[primary];
+  }
+  return null;
+}
+
 // 自动检测并设置语言
 setLang(detectLanguage());

package/server/lib/auth.js

@@ -0,0 +1,348 @@
+// Password-based LAN auth — pure logic, heavily unit-tested.
+//
+// cc-viewer's original LAN gate is URL `?token=<32-hex>` (server.js ACCESS_TOKEN,
+// random per boot, never persisted). This module adds an OPTIONAL second path:
+// a password that, once verified, is stored in a cookie (value = ACCESS_TOKEN).
+// Both paths coexist — token and cookie are equivalent.
+//
+// Everything here is side-effect-light and exported so the decision logic can be
+// unit-tested directly (loopback HTTP tests always look local, so they cannot
+// exercise the remote branch — `decideAuth` covers it as a pure function).
+import { randomBytes } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from 'node:fs';
+import { join, dirname } from 'node:path';
+import { LOG_DIR } from '../../findcc.js';
+import { tFor, localeFromAcceptLanguage } from '../i18n.js';
+
+// A-Z + 0-9 (36 chars). No lowercase / ambiguous-pair stripping: kept simple and
+// matches the user-facing "uppercase letters + digits" spec. Login compares
+// case-insensitively (see routes/auth.js), so lowercase input still works.
+const PASSWORD_CHARS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+
+/**
+ * Cryptographically uniform password from A-Z0-9 (default 6 chars).
+ * Rejection sampling discards bytes ≥ 252 (256 - 256%36) to avoid modulo bias.
+ */
+export function generatePassword(len = 6) {
+  const n = PASSWORD_CHARS.length; // 36
+  const limit = 256 - (256 % n);   // 252
+  let out = '';
+  while (out.length < len) {
+    const buf = randomBytes(len * 2);
+    for (let i = 0; i < buf.length && out.length < len; i++) {
+      if (buf[i] < limit) out += PASSWORD_CHARS[buf[i] % n];
+    }
+  }
+  return out;
+}
+
+const DEFAULT_CONFIG = { enabled: false, password: '' };
+
+/**
+ * Auth config is persisted as the `auth` key inside the same preferences.json the
+ * rest of cc-viewer uses (LOG_DIR/preferences.json) — NOT a separate global file.
+ * Path is computed fresh each call: LOG_DIR is a live binding (setLogDir) and tests
+ * redirect it via CCV_LOG_DIR before importing.
+ */
+export function getPrefsPath() {
+  return join(LOG_DIR, 'preferences.json');
+}
+
+function readPrefs() {
+  try {
+    const p = getPrefsPath();
+    if (!existsSync(p)) return {};
+    const obj = JSON.parse(readFileSync(p, 'utf-8'));
+    return obj && typeof obj === 'object' ? obj : {};
+  } catch {
+    return {};
+  }
+}
+
+function normalizeAuth(cfg) {
+  return {
+    enabled: !!(cfg && cfg.enabled),
+    password: cfg && typeof cfg.password === 'string' ? cfg.password : '',
+  };
+}
+
+// The password is kept in memory & over the admin API as plaintext (admin must be able
+// to view/copy it), but is base64-encoded on disk so preferences.json never shows the
+// raw password. This is light obfuscation, NOT real security — base64 is trivially
+// reversible; it only avoids the password sitting in literal plaintext in the file.
+function encodePassword(plain) {
+  return plain ? Buffer.from(plain, 'utf-8').toString('base64') : '';
+}
+function decodePassword(stored) {
+  if (!stored || typeof stored !== 'string') return '';
+  try { return Buffer.from(stored, 'base64').toString('utf-8'); } catch { return ''; }
+}
+
+// ─── Scoped persistence (global default + optional per-project override) ───
+// preferences.json:
+//   auth:          { enabled, password(b64) }                  ← global default
+//   authByProject: { "<projectDir>": { enabled, password(b64) } }  ← optional overrides
+// A project "has an override" iff a key exists for it (even if disabled). The gate
+// resolves: project override (if the key exists) else global. To inherit global again,
+// the override must be REMOVED (clearProjectOverride), not merely disabled.
+
+function decodeStored(a) {
+  return { enabled: !!(a && a.enabled), password: decodePassword(a && a.password) };
+}
+function encodeForDisk(normalized) {
+  return { enabled: normalized.enabled, password: encodePassword(normalized.password) };
+}
+
+/** Does this project have its own auth override? (key present, regardless of enabled) */
+function hasOverride(prefs, projectDir) {
+  return !!(projectDir && prefs.authByProject && Object.prototype.hasOwnProperty.call(prefs.authByProject, projectDir));
+}
+
+/**
+ * Resolve the EFFECTIVE auth config the gate should enforce for `projectDir`:
+ * the project override if one exists, otherwise the global default.
+ * Returns { enabled, password } (plaintext). projectDir null → always global.
+ */
+export function loadAuthConfig(projectDir = null) {
+  const prefs = readPrefs();
+  const src = hasOverride(prefs, projectDir) ? prefs.authByProject[projectDir] : prefs.auth;
+  return decodeStored(src);
+}
+
+/**
+ * Rich state for the admin API: the effective config + which scope produced it +
+ * whether a project override exists + the global default (all passwords plaintext;
+ * the route masks them for non-admins).
+ */
+export function loadAuthState(projectDir = null) {
+  const prefs = readPrefs();
+  const overridden = hasOverride(prefs, projectDir);
+  return {
+    effective: decodeStored(overridden ? prefs.authByProject[projectDir] : prefs.auth),
+    global: decodeStored(prefs.auth),
+    scope: overridden ? 'project' : 'global',
+    hasProjectOverride: overridden,
+    projectDir: projectDir || null,
+  };
+}
+
+function writePrefs(prefs) {
+  const p = getPrefsPath();
+  const dir = dirname(p);
+  if (!existsSync(dir)) mkdirSync(dir, { recursive: true, mode: 0o700 });
+  writeFileSync(p, JSON.stringify(prefs, null, 2), { mode: 0o600 });
+  // writeFileSync's mode only applies on creation; a pre-existing file keeps its old
+  // perms. Re-assert 0600 — preferences.json now carries the (base64) password.
+  try { chmodSync(p, 0o600); } catch { /* best-effort; non-POSIX or race */ }
+}
+
+/**
+ * Persist auth config (read-merge-write, preserving all other prefs). `opts.scope`
+ * 'global' → the `auth` key; 'project' → authByProject[opts.projectDir] (requires
+ * projectDir, else falls back to global). Password stored base64; returns the
+ * in-memory (plaintext) normalized shape.
+ */
+export function saveAuthConfig(cfg, opts = {}) {
+  const normalized = normalizeAuth(cfg);
+  const prefs = readPrefs();
+  const scope = opts.scope === 'project' && opts.projectDir ? 'project' : 'global';
+  if (scope === 'project') {
+    if (!prefs.authByProject || typeof prefs.authByProject !== 'object') prefs.authByProject = {};
+    prefs.authByProject[opts.projectDir] = encodeForDisk(normalized);
+  } else {
+    prefs.auth = encodeForDisk(normalized);
+  }
+  writePrefs(prefs);
+  return normalized;
+}
+
+/** Remove a project's override so it inherits the global default again. No-op if absent. */
+export function clearProjectOverride(projectDir) {
+  if (!projectDir) return;
+  const prefs = readPrefs();
+  if (prefs.authByProject && Object.prototype.hasOwnProperty.call(prefs.authByProject, projectDir)) {
+    delete prefs.authByProject[projectDir];
+    writePrefs(prefs);
+  }
+}
+
+/**
+ * Parse a Cookie header into an object.
+ * - Segments without `=` are skipped (malformed).
+ * - Duplicate keys: first occurrence wins (deterministic).
+ */
+export function parseCookies(header) {
+  const out = {};
+  if (!header || typeof header !== 'string') return out;
+  for (const part of header.split(';')) {
+    const idx = part.indexOf('=');
+    if (idx < 0) continue;
+    const key = part.slice(0, idx).trim();
+    if (!key || Object.prototype.hasOwnProperty.call(out, key)) continue;
+    out[key] = part.slice(idx + 1).trim();
+  }
+  return out;
+}
+
+/**
+ * Pure auth decision, shared by the HTTP request prelude and the WS upgrade handler.
+ *
+ * ctx = {
+ *   isStaticAsset, pathname, isLocal,
+ *   urlToken, cookieToken, accessToken,
+ *   enabled, password, wantsHtml
+ * }
+ * → { action: 'allow' | 'login-page' | 'unauthorized' | 'forbidden' }
+ *
+ * Caller invariants (see plan): 'login-page' / 'unauthorized' / 'forbidden' MUST
+ * terminate the request; only 'allow' falls through to the Host allowlist + routing.
+ */
+export function decideAuth(ctx) {
+  const {
+    isStaticAsset, pathname, isLocal,
+    urlToken, cookieToken, accessToken,
+    enabled, password, wantsHtml,
+  } = ctx;
+
+  if (
+    isStaticAsset ||
+    pathname === '/api/auth/login' || // login endpoint must be reachable unauthenticated
+    isLocal ||
+    urlToken === accessToken ||
+    cookieToken === accessToken ||
+    (enabled && password === '')      // empty password = explicitly no protection
+  ) {
+    return { action: 'allow' };
+  }
+
+  if (enabled) {
+    // Password auth on but no valid credential: HTML navigations get the login page,
+    // XHR/asset/WS get a plain 401.
+    return { action: wantsHtml ? 'login-page' : 'unauthorized' };
+  }
+  // Password auth off → preserve original token-only behaviour (403).
+  return { action: 'forbidden' };
+}
+
+function escapeHtml(s) {
+  return String(s)
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;');
+}
+
+/**
+ * Self-contained login page (inline CSS + JS, references NO /assets — static assets
+ * are auth-exempt but we don't want to surface the SPA bundle to unauthenticated
+ * remotes). On submit it POSTs to /api/auth/login and reloads on success.
+ *
+ * `lang` is a resolved locale code (caller derives it from Accept-Language).
+ */
+export function renderLoginPage({ lang = 'en', error = false } = {}) {
+  const dir = lang === 'ar' ? 'rtl' : 'ltr';
+  const title = escapeHtml(tFor('server.auth.loginTitle', lang));
+  const placeholder = escapeHtml(tFor('server.auth.loginPlaceholder', lang));
+  const btn = escapeHtml(tFor('server.auth.loginBtn', lang));
+  const errMsg = escapeHtml(tFor('server.auth.loginError', lang));
+  const toggleLabel = escapeHtml(tFor('server.auth.togglePassword', lang));
+  const errStyle = error ? '' : ' style="display:none"';
+  return `<!DOCTYPE html>
+<html lang="${escapeHtml(lang)}" dir="${dir}" data-theme="dark">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
+<meta name="robots" content="noindex">
+<title>${title}</title>
+<style>
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  body {
+    margin: 0; min-height: 100vh; display: flex; align-items: center; justify-content: center;
+    background: #1a1a1a; color: #e8e8e8;
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+  }
+  .card {
+    width: 100%; max-width: 340px; padding: 32px 28px; margin: 16px;
+    background: #242424; border: 1px solid #383838; border-radius: 14px;
+    box-shadow: 0 8px 32px rgba(0,0,0,0.4);
+  }
+  h1 { margin: 0 0 20px; font-size: 18px; font-weight: 600; text-align: center; }
+  input {
+    width: 100%; padding: 11px 14px; font-size: 15px; color: #e8e8e8;
+    background: #1a1a1a; border: 1px solid #3a3a3a; border-radius: 8px; outline: none;
+  }
+  input:focus { border-color: #6c8cff; }
+  /* Password field + reveal toggle. padding-inline-end leaves room for the eye;
+     inset-inline-end keeps it on the correct side under RTL (ar). */
+  .field { position: relative; }
+  .field input { padding-inline-end: 44px; }
+  .toggle {
+    position: absolute; top: 50%; inset-inline-end: 6px; transform: translateY(-50%);
+    width: 32px; height: 32px; margin: 0; padding: 0;
+    display: flex; align-items: center; justify-content: center;
+    background: transparent; border: none; border-radius: 6px; cursor: pointer; color: #9a9a9a;
+  }
+  .toggle:hover { color: #e8e8e8; background: #2e2e2e; }
+  .toggle svg { width: 18px; height: 18px; display: block; }
+  #b {
+    width: 100%; margin-top: 14px; padding: 11px 14px; font-size: 15px; font-weight: 600;
+    color: #fff; background: #4a6cf7; border: none; border-radius: 8px; cursor: pointer;
+  }
+  #b:hover { background: #3a5ce0; }
+  #b:disabled { opacity: 0.6; cursor: default; }
+  .error { margin-top: 12px; font-size: 13px; color: #ff7b7b; text-align: center; }
+</style>
+</head>
+<body>
+  <div class="card">
+    <h1>${title}</h1>
+    <form id="f" autocomplete="off">
+      <div class="field">
+        <input id="p" type="password" placeholder="${placeholder}" autofocus autocomplete="current-password">
+        <button id="tg" type="button" class="toggle" aria-label="${toggleLabel}" title="${toggleLabel}" aria-pressed="false">
+          <svg id="eyeOn" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7z"/><circle cx="12" cy="12" r="3"/></svg>
+          <svg id="eyeOff" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" style="display:none"><path d="M3 3l18 18"/><path d="M10.6 10.6a3 3 0 0 0 4.2 4.2"/><path d="M9.9 4.2A10.9 10.9 0 0 1 12 5c6.5 0 10 7 10 7a13.3 13.3 0 0 1-2.2 2.9"/><path d="M6.6 6.6A13.5 13.5 0 0 0 2 12s3.5 7 10 7a10.8 10.8 0 0 0 3.3-.5"/></svg>
+        </button>
+      </div>
+      <button id="b" type="submit">${btn}</button>
+      <div class="error" id="e"${errStyle}>${errMsg}</div>
+    </form>
+  </div>
+<script>
+(function () {
+  var f = document.getElementById('f'), p = document.getElementById('p'),
+      b = document.getElementById('b'), e = document.getElementById('e'),
+      tg = document.getElementById('tg'),
+      eOn = document.getElementById('eyeOn'), eOff = document.getElementById('eyeOff');
+  tg.addEventListener('click', function () {
+    var reveal = p.type === 'password';
+    p.type = reveal ? 'text' : 'password';
+    eOn.style.display = reveal ? 'none' : '';
+    eOff.style.display = reveal ? '' : 'none';
+    tg.setAttribute('aria-pressed', reveal ? 'true' : 'false');
+    p.focus();
+  });
+  f.addEventListener('submit', function (ev) {
+    ev.preventDefault();
+    b.disabled = true; e.style.display = 'none';
+    fetch('/api/auth/login', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ password: p.value })
+    }).then(function (r) { return r.json().catch(function () { return {}; }).then(function (j) { return { ok: r.ok, j: j }; }); })
+      .then(function (res) {
+        if (res.ok && res.j && res.j.ok) { location.reload(); }
+        else { e.style.display = ''; b.disabled = false; p.select(); }
+      })
+      .catch(function () { e.style.display = ''; b.disabled = false; });
+  });
+})();
+</script>
+</body>
+</html>`;
+}
+
+/** Re-export for callers that resolve the request's preferred locale. */
+export { localeFromAcceptLanguage };

package/server/lib/voice-pack-events.js

@@ -5,9 +5,9 @@
 //   - server/lib/voice-pack-manager.js (EVENT_KEYS for whitelist + reconcile)
 //   - server/server.js (preferences merge / reconcile)
 //   - src/AppBase.jsx (initial state default)
-//   - src/components/VoicePackSettings.jsx (UI rows + reset handler)
+//   - src/components/settings/VoicePackSettings.jsx (UI rows + reset handler)
 //   - scripts/gen-placeholder-voicepack.js (pattern table keys)
-//   - src/components/AskTimeoutCountdown.jsx (threshold list keys)
+//   - src/components/chat/AskTimeoutCountdown.jsx (threshold list keys)
 // Adding a 6th event meant editing 5+ files and any miss silently dropped audio
 //(). All consumers now import from here.
 

package/server/routes/_dispatch.js

@@ -0,0 +1,43 @@
+// Lightweight in-house HTTP route dispatcher (no framework).
+//
+// Replaces the giant `if (url === ... && method === ...)` chain that used to live
+// inside server.js's handleRequest. Each domain module under server/routes/ exports
+// an ordered array of route descriptors; server.js concatenates them IN THE SAME
+// ORDER as the original if-chain and hands the array here. dispatch() walks the list
+// top-to-bottom and invokes the first matching handler — byte-for-byte the same
+// matching semantics as the old chain (order is load-bearing for prefix-vs-exact and
+// method-distinguished duplicates like GET vs POST /api/file-content).
+//
+// Descriptor shape (one of):
+//   { method, match: 'exact'|'prefix', path, handler }
+//   { predicate: (url, method) => boolean, handler }   // for compound conditions
+//
+// Handler signature: (req, res, parsedUrl, isLocal, deps) => void | Promise<void>
+// `deps` is the singleton dependency bag built once in server.js (reassignable state
+// via getters, shared Maps by reference, helpers, constants).
+
+function matches(route, url, method) {
+  if (route.predicate) return route.predicate(url, method);
+  if (route.method !== method) return false;
+  return route.match === 'prefix' ? url.startsWith(route.path) : url === route.path;
+}
+
+/**
+ * Build a dispatcher over an ordered list of route descriptors.
+ * Returns an async function(req, res, parsedUrl, isLocal, deps) => boolean,
+ * resolving true if a route handled the request, false if none matched
+ * (caller then falls through to the static-file / 404 path).
+ */
+export function createDispatcher(routes) {
+  return async function dispatch(req, res, parsedUrl, isLocal, deps) {
+    const url = parsedUrl.pathname;
+    const method = req.method;
+    for (const route of routes) {
+      if (matches(route, url, method)) {
+        await route.handler(req, res, parsedUrl, isLocal, deps);
+        return true;
+      }
+    }
+    return false;
+  };
+}