codex-to-im 0.1.2 → 0.1.6

package/dist/ui-server.mjs

@@ -4566,7 +4566,9 @@ var require_lib = __commonJS({
 
 // src/ui-server.ts
 import http from "node:http";
+import crypto4 from "node:crypto";
 import net from "node:net";
+import os5 from "node:os";
 
 // src/config.ts
 import fs from "node:fs";
@@ -4574,6 +4576,7 @@ import os from "node:os";
 import path from "node:path";
 var LEGACY_CTI_HOME = path.join(os.homedir(), ".claude-to-im");
 var DEFAULT_CTI_HOME = path.join(os.homedir(), ".codex-to-im");
+var DEFAULT_WORKSPACE_ROOT = path.join(os.homedir(), "cx2im");
 function resolveDefaultCtiHome() {
   if (fs.existsSync(DEFAULT_CTI_HOME)) return DEFAULT_CTI_HOME;
   if (fs.existsSync(LEGACY_CTI_HOME)) return LEGACY_CTI_HOME;
@@ -4581,6 +4584,14 @@ function resolveDefaultCtiHome() {
 }
 var CTI_HOME = process.env.CTI_HOME || resolveDefaultCtiHome();
 var CONFIG_PATH = path.join(CTI_HOME, "config.env");
+function expandHomePath(value) {
+  if (!value) return value;
+  if (value === "~") return os.homedir();
+  if (value.startsWith("~/") || value.startsWith("~\\")) {
+    return path.join(os.homedir(), value.slice(2));
+  }
+  return value;
+}
 function parseEnvFile(content) {
   const entries = /* @__PURE__ */ new Map();
   for (const line of content.split("\n")) {
@@ -4614,6 +4625,18 @@ function parsePositiveInt(value) {
   if (!Number.isFinite(parsed) || parsed <= 0) return void 0;
   return Math.floor(parsed);
 }
+function parseSandboxMode(value) {
+  if (value === "read-only" || value === "workspace-write" || value === "danger-full-access") {
+    return value;
+  }
+  return void 0;
+}
+function parseReasoningEffort(value) {
+  if (value === "minimal" || value === "low" || value === "medium" || value === "high" || value === "xhigh") {
+    return value;
+  }
+  return void 0;
+}
 function loadConfig() {
   const env = loadRawConfigEnv();
   const rawRuntime = env.get("CTI_RUNTIME") || "codex";
@@ -4621,11 +4644,16 @@ function loadConfig() {
   return {
     runtime,
     enabledChannels: splitCsv(env.get("CTI_ENABLED_CHANNELS")) ?? ["feishu"],
-    defaultWorkDir: env.get("CTI_DEFAULT_WORKDIR") || process.cwd(),
+    defaultWorkDir: expandHomePath(env.get("CTI_DEFAULT_WORKDIR")) || process.cwd(),
+    defaultWorkspaceRoot: expandHomePath(env.get("CTI_DEFAULT_WORKSPACE_ROOT")) || DEFAULT_WORKSPACE_ROOT,
     defaultModel: env.get("CTI_DEFAULT_MODEL") || void 0,
     defaultMode: env.get("CTI_DEFAULT_MODE") || "code",
     historyMessageLimit: parsePositiveInt(env.get("CTI_HISTORY_MESSAGE_LIMIT")) ?? 8,
     codexSkipGitRepoCheck: env.has("CTI_CODEX_SKIP_GIT_REPO_CHECK") ? env.get("CTI_CODEX_SKIP_GIT_REPO_CHECK") === "true" : true,
+    codexSandboxMode: parseSandboxMode(env.get("CTI_CODEX_SANDBOX_MODE")) ?? "workspace-write",
+    codexReasoningEffort: parseReasoningEffort(env.get("CTI_CODEX_REASONING_EFFORT")) ?? "medium",
+    uiAllowLan: env.get("CTI_UI_ALLOW_LAN") === "true",
+    uiAccessToken: env.get("CTI_UI_ACCESS_TOKEN") || void 0,
     tgBotToken: env.get("CTI_TG_BOT_TOKEN") || void 0,
     tgChatId: env.get("CTI_TG_CHAT_ID") || void 0,
     tgAllowedUsers: splitCsv(env.get("CTI_TG_ALLOWED_USERS")),
@@ -4634,6 +4662,7 @@ function loadConfig() {
     feishuDomain: env.get("CTI_FEISHU_DOMAIN") || void 0,
     feishuAllowedUsers: splitCsv(env.get("CTI_FEISHU_ALLOWED_USERS")),
     feishuStreamingEnabled: env.has("CTI_FEISHU_STREAMING_ENABLED") ? env.get("CTI_FEISHU_STREAMING_ENABLED") === "true" : true,
+    feishuCommandMarkdownEnabled: env.has("CTI_FEISHU_COMMAND_MARKDOWN_ENABLED") ? env.get("CTI_FEISHU_COMMAND_MARKDOWN_ENABLED") === "true" : true,
     discordBotToken: env.get("CTI_DISCORD_BOT_TOKEN") || void 0,
     discordAllowedUsers: splitCsv(env.get("CTI_DISCORD_ALLOWED_USERS")),
     discordAllowedChannels: splitCsv(
@@ -4648,6 +4677,7 @@ function loadConfig() {
     weixinBaseUrl: env.get("CTI_WEIXIN_BASE_URL") || void 0,
     weixinCdnBaseUrl: env.get("CTI_WEIXIN_CDN_BASE_URL") || void 0,
     weixinMediaEnabled: env.has("CTI_WEIXIN_MEDIA_ENABLED") ? env.get("CTI_WEIXIN_MEDIA_ENABLED") === "true" : void 0,
+    weixinCommandMarkdownEnabled: env.has("CTI_WEIXIN_COMMAND_MARKDOWN_ENABLED") ? env.get("CTI_WEIXIN_COMMAND_MARKDOWN_ENABLED") === "true" : false,
     autoApprove: env.get("CTI_AUTO_APPROVE") === "true"
   };
 }
@@ -4664,12 +4694,17 @@ function saveConfig(config) {
     config.enabledChannels.join(",")
   );
   out += formatEnvLine("CTI_DEFAULT_WORKDIR", config.defaultWorkDir);
+  out += formatEnvLine("CTI_DEFAULT_WORKSPACE_ROOT", config.defaultWorkspaceRoot);
   if (config.defaultModel) out += formatEnvLine("CTI_DEFAULT_MODEL", config.defaultModel);
   out += formatEnvLine("CTI_DEFAULT_MODE", config.defaultMode);
   if (config.historyMessageLimit !== void 0)
     out += formatEnvLine("CTI_HISTORY_MESSAGE_LIMIT", String(config.historyMessageLimit));
   if (config.codexSkipGitRepoCheck !== void 0)
     out += formatEnvLine("CTI_CODEX_SKIP_GIT_REPO_CHECK", String(config.codexSkipGitRepoCheck));
+  out += formatEnvLine("CTI_CODEX_SANDBOX_MODE", config.codexSandboxMode);
+  out += formatEnvLine("CTI_CODEX_REASONING_EFFORT", config.codexReasoningEffort);
+  out += formatEnvLine("CTI_UI_ALLOW_LAN", String(config.uiAllowLan === true));
+  out += formatEnvLine("CTI_UI_ACCESS_TOKEN", config.uiAccessToken);
   out += formatEnvLine("CTI_TG_BOT_TOKEN", config.tgBotToken);
   out += formatEnvLine("CTI_TG_CHAT_ID", config.tgChatId);
   out += formatEnvLine(
@@ -4688,6 +4723,11 @@ function saveConfig(config) {
       "CTI_FEISHU_STREAMING_ENABLED",
       String(config.feishuStreamingEnabled)
     );
+  if (config.feishuCommandMarkdownEnabled !== void 0)
+    out += formatEnvLine(
+      "CTI_FEISHU_COMMAND_MARKDOWN_ENABLED",
+      String(config.feishuCommandMarkdownEnabled)
+    );
   out += formatEnvLine("CTI_DISCORD_BOT_TOKEN", config.discordBotToken);
   out += formatEnvLine(
     "CTI_DISCORD_ALLOWED_USERS",
@@ -4715,6 +4755,12 @@ function saveConfig(config) {
   out += formatEnvLine("CTI_WEIXIN_CDN_BASE_URL", config.weixinCdnBaseUrl);
   if (config.weixinMediaEnabled !== void 0)
     out += formatEnvLine("CTI_WEIXIN_MEDIA_ENABLED", String(config.weixinMediaEnabled));
+  if (config.weixinCommandMarkdownEnabled !== void 0)
+    out += formatEnvLine(
+      "CTI_WEIXIN_COMMAND_MARKDOWN_ENABLED",
+      String(config.weixinCommandMarkdownEnabled)
+    );
+  out += formatEnvLine("CTI_AUTO_APPROVE", String(config.autoApprove === true));
   fs.mkdirSync(CTI_HOME, { recursive: true });
   const tmpPath = CONFIG_PATH + ".tmp";
   fs.writeFileSync(tmpPath, out, { mode: 384 });
@@ -4763,6 +4809,10 @@ function configToSettings(config) {
     "bridge_feishu_streaming_enabled",
     config.feishuStreamingEnabled === false ? "false" : "true"
   );
+  m.set(
+    "bridge_feishu_command_markdown_enabled",
+    config.feishuCommandMarkdownEnabled === false ? "false" : "true"
+  );
   m.set(
     "bridge_qq_enabled",
     config.enabledChannels.includes("qq") ? "true" : "false"
@@ -4781,11 +4831,18 @@ function configToSettings(config) {
   );
   if (config.weixinMediaEnabled !== void 0)
     m.set("bridge_weixin_media_enabled", String(config.weixinMediaEnabled));
+  m.set(
+    "bridge_weixin_command_markdown_enabled",
+    config.weixinCommandMarkdownEnabled === true ? "true" : "false"
+  );
   if (config.weixinBaseUrl)
     m.set("bridge_weixin_base_url", config.weixinBaseUrl);
   if (config.weixinCdnBaseUrl)
     m.set("bridge_weixin_cdn_base_url", config.weixinCdnBaseUrl);
   m.set("bridge_default_work_dir", config.defaultWorkDir);
+  if (config.defaultWorkspaceRoot) {
+    m.set("bridge_default_workspace_root", config.defaultWorkspaceRoot);
+  }
   if (config.defaultModel) {
     m.set("bridge_default_model", config.defaultModel);
     m.set("default_model", config.defaultModel);
@@ -4799,6 +4856,14 @@ function configToSettings(config) {
     "bridge_codex_skip_git_repo_check",
     config.codexSkipGitRepoCheck === true ? "true" : "false"
   );
+  m.set(
+    "bridge_codex_sandbox_mode",
+    config.codexSandboxMode || "workspace-write"
+  );
+  m.set(
+    "bridge_codex_reasoning_effort",
+    config.codexReasoningEffort || "medium"
+  );
   return m;
 }
 
@@ -4862,6 +4927,8 @@ var MIME_EXT = {
 };
 function toApprovalPolicy(permissionMode) {
   switch (permissionMode) {
+    case "never":
+      return "never";
     case "acceptEdits":
       return "on-failure";
     case "plan":
@@ -4878,6 +4945,18 @@ function shouldPassModelToCodex() {
 function shouldSkipGitRepoCheck() {
   return process.env.CTI_CODEX_SKIP_GIT_REPO_CHECK === "true";
 }
+function normalizeSandboxMode(mode) {
+  if (mode === "read-only" || mode === "workspace-write" || mode === "danger-full-access") {
+    return mode;
+  }
+  return "workspace-write";
+}
+function normalizeReasoningEffort(value) {
+  if (value === "minimal" || value === "low" || value === "medium" || value === "high" || value === "xhigh") {
+    return value;
+  }
+  return void 0;
+}
 function shouldRetryFreshThread(message) {
   const lower = message.toLowerCase();
   return lower.includes("resuming session with different model") || lower.includes("no such session") || lower.includes("resume") && lower.includes("session");
@@ -4925,10 +5004,14 @@ var CodexProvider = class {
             let savedThreadId = inMemoryThreadId || params.sdkSessionId || void 0;
             const approvalPolicy = toApprovalPolicy(params.permissionMode);
             const passModel = shouldPassModelToCodex();
+            const sandboxMode = normalizeSandboxMode(params.sandboxMode);
+            const modelReasoningEffort = normalizeReasoningEffort(params.modelReasoningEffort);
             const threadOptions = {
               ...passModel && params.model ? { model: params.model } : {},
               ...params.workingDirectory ? { workingDirectory: params.workingDirectory } : {},
               ...shouldSkipGitRepoCheck() ? { skipGitRepoCheck: true } : {},
+              sandboxMode,
+              ...modelReasoningEffort ? { modelReasoningEffort } : {},
               approvalPolicy
             };
             const imageFiles = params.files?.filter(
@@ -5130,8 +5213,10 @@ var CodexProvider = class {
 import fs3 from "node:fs";
 import os3 from "node:os";
 import path3 from "node:path";
+import crypto from "node:crypto";
 var ACTIVE_WINDOW_MS = 15 * 60 * 1e3;
 var MAX_SESSION_META_BYTES = 4 * 1024 * 1024;
+var MAX_SESSION_TITLE_SCAN_BYTES = 512 * 1024;
 var TITLE_MAX_CHARS = 72;
 function getCodexHome() {
   return process.env.CODEX_HOME || path3.join(os3.homedir(), ".codex");
@@ -5189,6 +5274,24 @@ function readFirstLine(filePath, maxBytes = MAX_SESSION_META_BYTES) {
     fs3.closeSync(fd);
   }
 }
+function readFilePrefix(filePath, maxBytes = MAX_SESSION_TITLE_SCAN_BYTES) {
+  const fd = fs3.openSync(filePath, "r");
+  try {
+    const buffer = Buffer.alloc(Math.min(maxBytes, 64 * 1024));
+    const chunks = [];
+    let offset = 0;
+    while (offset < maxBytes) {
+      const bytesToRead = Math.min(buffer.length, maxBytes - offset);
+      const bytesRead = fs3.readSync(fd, buffer, 0, bytesToRead, offset);
+      if (bytesRead <= 0) break;
+      chunks.push(Buffer.from(buffer.subarray(0, bytesRead)));
+      offset += bytesRead;
+    }
+    return Buffer.concat(chunks).toString("utf-8");
+  } finally {
+    fs3.closeSync(fd);
+  }
+}
 function walkSessionFiles(dirPath, target) {
   let entries;
   try {
@@ -5210,6 +5313,7 @@ function walkSessionFiles(dirPath, target) {
 function isDesktopLike(meta) {
   const originator = meta?.originator?.toLowerCase() || "";
   const source = meta?.source?.toLowerCase() || "";
+  if (source === "exec") return false;
   return originator.includes("desktop") || source === "vscode" || source === "desktop";
 }
 function loadThreadNameIndex(archivedThreadIds) {
@@ -5241,6 +5345,27 @@ function loadThreadNameIndex(archivedThreadIds) {
   }
   return new Map(Array.from(titles.entries()).map(([threadId, entry]) => [threadId, entry.title]));
 }
+function buildFallbackTitle(threadId, filePath, cwd) {
+  try {
+    const content = readFilePrefix(filePath);
+    for (const line of content.split(/\r?\n/)) {
+      if (!line.trim()) continue;
+      let parsed;
+      try {
+        parsed = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (!isSessionEventLine(parsed) || parsed.payload?.type !== "user_message") continue;
+      const firstUserMessage = trimTitle(normalizeFreeText(parsed.payload.message || ""));
+      if (firstUserMessage) return firstUserMessage;
+    }
+  } catch {
+  }
+  const dirName = trimTitle(path3.basename(cwd || ""));
+  if (dirName) return dirName;
+  return `Session ${threadId.slice(0, 8)}`;
+}
 function parseDesktopSession(filePath, threadNames, archivedThreadIds) {
   const firstLine = readFirstLine(filePath);
   if (!firstLine) return null;
@@ -5266,8 +5391,7 @@ function parseDesktopSession(filePath, threadNames, archivedThreadIds) {
   const lastEventAt = stat.mtime.toISOString();
   const firstSeenAt = parsed.payload.timestamp || parsed.timestamp || stat.birthtime.toISOString();
   const threadId = parsed.payload.id;
-  const title = threadNames.get(threadId);
-  if (!title) return null;
+  const title = threadNames.get(threadId) || buildFallbackTitle(threadId, filePath, cwd);
   return {
     threadId,
     filePath,
@@ -5287,12 +5411,17 @@ function trimTitle(text2) {
   if (normalized.length <= TITLE_MAX_CHARS) return normalized;
   return `${normalized.slice(0, TITLE_MAX_CHARS - 3).trimEnd()}...`;
 }
+function normalizeFreeText(text2) {
+  return text2.replace(/\s+/g, " ").trim();
+}
+function isSessionEventLine(line) {
+  return line.type === "event_msg";
+}
 function listDesktopSessions(limit = 12) {
   const root = getCodexSessionsRoot();
   if (!fs3.existsSync(root)) return [];
   const archivedThreadIds = loadArchivedThreadIds();
   const threadNames = loadThreadNameIndex(archivedThreadIds);
-  if (threadNames.size === 0) return [];
   const files = [];
   walkSessionFiles(root, files);
   const sessions = [];
@@ -5313,10 +5442,15 @@ function isArchivedDesktopThread(threadId) {
 // src/session-bindings.ts
 import path4 from "node:path";
 function getSessionName(session) {
+  if (session.session_type === "draft") return "\u4E34\u65F6\u8349\u7A3F\u7EBF\u7A0B";
+  if (session.session_type === "history_summary") return "\u5386\u53F2\u6458\u8981\u7EBF\u7A0B";
   if (session.name?.trim()) return session.name.trim();
   if (session.working_directory) return path4.basename(session.working_directory);
   return session.id.slice(0, 8);
 }
+function getSessionMode(store, session) {
+  return session.preferred_mode || store.getSetting("bridge_default_mode") || "code";
+}
 function bindStoreToSession(store, channelType, chatId, sessionId) {
   const session = store.getSession(sessionId);
   if (!session) return null;
@@ -5326,7 +5460,8 @@ function bindStoreToSession(store, channelType, chatId, sessionId) {
     codepilotSessionId: session.id,
     sdkSessionId: session.sdk_session_id || "",
     workingDirectory: session.working_directory,
-    model: session.model
+    model: session.model,
+    mode: getSessionMode(store, session)
   });
 }
 function bindStoreToSdkSession(store, channelType, chatId, sdkSessionId, opts) {
@@ -5338,7 +5473,8 @@ function bindStoreToSdkSession(store, channelType, chatId, sdkSessionId, opts) {
       codepilotSessionId: existing.id,
       sdkSessionId,
       workingDirectory: opts?.workingDirectory || existing.working_directory,
-      model: opts?.model || existing.model
+      model: opts?.model || existing.model,
+      mode: getSessionMode(store, existing)
     });
   }
   const workingDirectory = opts?.workingDirectory || store.getSetting("bridge_default_work_dir") || process.env.HOME || "";
@@ -5358,7 +5494,8 @@ function bindStoreToSdkSession(store, channelType, chatId, sdkSessionId, opts) {
     codepilotSessionId: session.id,
     sdkSessionId,
     workingDirectory: workingDirectory || session.working_directory,
-    model: model || session.model
+    model: model || session.model,
+    mode: getSessionMode(store, session)
   });
 }
 function listBindingTargetOptions(_store, desktopLimit = 12) {
@@ -5395,7 +5532,11 @@ function listBindingSummaries(store) {
       currentTargetLabel,
       currentSessionId: binding.codepilotSessionId,
       currentSessionName: session ? getSessionName(session) : binding.codepilotSessionId.slice(0, 8),
-      currentThreadId
+      currentThreadId,
+      runtimeStatus: session?.runtime_status,
+      queuedCount: session?.queued_count,
+      mirrorStatus: session?.mirror_status,
+      mirrorLastEventAt: session?.mirror_last_event_at
     };
   }).sort((a, b) => {
     if (a.channelType !== b.channelType) return a.channelType.localeCompare(b.channelType);
@@ -5449,6 +5590,7 @@ var bridgePidFile = path5.join(runtimeDir, "bridge.pid");
 var bridgeStatusFile = path5.join(runtimeDir, "status.json");
 var uiStatusFile = path5.join(runtimeDir, "ui-server.json");
 var uiPort = 4781;
+var WINDOWS_HIDE = process.platform === "win32" ? { windowsHide: true } : {};
 function ensureDirs() {
   fs4.mkdirSync(runtimeDir, { recursive: true });
   fs4.mkdirSync(logsDir, { recursive: true });
@@ -5550,7 +5692,8 @@ async function startBridge() {
     cwd: packageRoot,
     detached: true,
     env: buildDaemonEnv(),
-    stdio: ["ignore", stdoutFd, stderrFd]
+    stdio: ["ignore", stdoutFd, stderrFd],
+    ...WINDOWS_HIDE
   });
   child.unref();
   const status = await waitForBridgeRunning();
@@ -5567,7 +5710,8 @@ async function stopBridge() {
   if (process.platform === "win32") {
     await new Promise((resolve) => {
       const killer = spawn("cmd", ["/c", "taskkill", "/PID", String(status.pid), "/T", "/F"], {
-        stdio: "ignore"
+        stdio: "ignore",
+        ...WINDOWS_HIDE
       });
       killer.on("exit", () => resolve());
       killer.on("error", () => resolve());
@@ -5635,7 +5779,7 @@ function isCodexIntegrationInstalled() {
 // src/store.ts
 import fs5 from "node:fs";
 import path6 from "node:path";
-import crypto from "node:crypto";
+import crypto2 from "node:crypto";
 var DATA_DIR = path6.join(CTI_HOME, "data");
 var MESSAGES_DIR = path6.join(DATA_DIR, "messages");
 function ensureDir(dir) {
@@ -5658,13 +5802,14 @@ function writeJson(filePath, data) {
   atomicWrite(filePath, JSON.stringify(data, null, 2));
 }
 function uuid() {
-  return crypto.randomUUID();
+  return crypto2.randomUUID();
 }
 function now() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 var JsonFileStore = class {
   settings;
+  dynamicSettings;
   sessions = /* @__PURE__ */ new Map();
   bindings = /* @__PURE__ */ new Map();
   messages = /* @__PURE__ */ new Map();
@@ -5673,8 +5818,9 @@ var JsonFileStore = class {
   dedupKeys = /* @__PURE__ */ new Map();
   locks = /* @__PURE__ */ new Map();
   auditLog = [];
-  constructor(settingsMap) {
+  constructor(settingsMap, options) {
     this.settings = settingsMap;
+    this.dynamicSettings = options?.dynamicSettings === true;
     ensureDir(DATA_DIR);
     ensureDir(MESSAGES_DIR);
     this.loadAll();
@@ -5769,7 +5915,19 @@ var JsonFileStore = class {
     return msgs;
   }
   // ── Settings ──
+  refreshSettings() {
+    if (!this.dynamicSettings) return;
+    try {
+      const next = configToSettings(loadConfig());
+      this.settings = new Map([
+        ...this.settings,
+        ...next
+      ]);
+    } catch {
+    }
+  }
   getSetting(key) {
+    this.refreshSettings();
     return this.settings.get(key) ?? null;
   }
   // ── Channel Bindings ──
@@ -5788,6 +5946,7 @@ var JsonFileStore = class {
         sdkSessionId: data.sdkSessionId ?? existing.sdkSessionId,
         workingDirectory: data.workingDirectory,
         model: data.model,
+        mode: data.mode ?? existing.mode,
         updatedAt: now()
       };
       this.bindings.set(key, updated);
@@ -5802,7 +5961,7 @@ var JsonFileStore = class {
       sdkSessionId: data.sdkSessionId ?? "",
       workingDirectory: data.workingDirectory,
       model: data.model,
-      mode: this.settings.get("bridge_default_mode") || "code",
+      mode: data.mode || this.getSetting("bridge_default_mode") || "code",
       active: true,
       createdAt: now(),
       updatedAt: now()
@@ -5845,14 +6004,23 @@ var JsonFileStore = class {
     }
     return null;
   }
-  createSession(name, model, systemPrompt, cwd, _mode) {
+  createSession(name, model, systemPrompt, cwd, mode, options) {
     this.reloadSessions();
+    const timestamp = now();
     const session = {
       id: uuid(),
       name,
-      working_directory: cwd || this.settings.get("bridge_default_work_dir") || process.cwd(),
+      working_directory: cwd || this.getSetting("bridge_default_work_dir") || process.cwd(),
       model,
-      system_prompt: systemPrompt
+      preferred_mode: mode,
+      system_prompt: systemPrompt,
+      reasoning_effort: options?.reasoningEffort,
+      session_type: options?.sessionType || "normal",
+      hidden: options?.hidden === true,
+      parent_session_id: options?.parentSessionId,
+      expires_at: options?.expiresAt,
+      created_at: timestamp,
+      updated_at: timestamp
     };
     this.sessions.set(session.id, session);
     this.persistSessions();
@@ -5863,9 +6031,40 @@ var JsonFileStore = class {
     const s = this.sessions.get(sessionId);
     if (s) {
       s.provider_id = providerId;
+      s.updated_at = now();
       this.persistSessions();
     }
   }
+  updateSession(sessionId, updates) {
+    this.reloadSessions();
+    const session = this.sessions.get(sessionId);
+    if (!session) return;
+    const next = {
+      ...session,
+      ...updates,
+      id: session.id,
+      updated_at: now()
+    };
+    this.sessions.set(sessionId, next);
+    this.persistSessions();
+  }
+  deleteSession(sessionId) {
+    this.reloadSessions();
+    this.reloadBindings();
+    this.sessions.delete(sessionId);
+    for (const [key, binding] of this.bindings) {
+      if (binding.codepilotSessionId === sessionId) {
+        this.bindings.delete(key);
+      }
+    }
+    this.messages.delete(sessionId);
+    try {
+      fs5.rmSync(path6.join(MESSAGES_DIR, `${sessionId}.json`), { force: true });
+    } catch {
+    }
+    this.persistSessions();
+    this.persistBindings();
+  }
   // ── Messages ──
   addMessage(sessionId, role, content, _usage) {
     const msgs = this.loadMessages(sessionId);
@@ -5905,6 +6104,26 @@ var JsonFileStore = class {
     }
   }
   setSessionRuntimeStatus(_sessionId, _status) {
+    this.reloadSessions();
+    const session = this.sessions.get(_sessionId);
+    if (!session) return;
+    const queuedCount = session.queued_count && session.queued_count > 0 ? session.queued_count : 0;
+    let runtimeStatus;
+    if (_status === "running") {
+      runtimeStatus = queuedCount > 0 ? "queued" : "running";
+    } else if (_status === "idle") {
+      runtimeStatus = queuedCount > 0 ? "queued" : "idle";
+    } else {
+      runtimeStatus = session.runtime_status;
+    }
+    const next = {
+      ...session,
+      runtime_status: runtimeStatus,
+      last_runtime_update_at: now(),
+      updated_at: now()
+    };
+    this.sessions.set(_sessionId, next);
+    this.persistSessions();
   }
   // ── SDK Session ──
   updateSdkSessionId(sessionId, sdkSessionId) {
@@ -5913,6 +6132,7 @@ var JsonFileStore = class {
     const s = this.sessions.get(sessionId);
     if (s) {
       s.sdk_session_id = sdkSessionId;
+      s.updated_at = now();
       this.persistSessions();
     }
     for (const [key, b] of this.bindings) {
@@ -5927,6 +6147,7 @@ var JsonFileStore = class {
     const s = this.sessions.get(sessionId);
     if (s) {
       s.model = model;
+      s.updated_at = now();
       this.persistSessions();
     }
   }
@@ -5983,6 +6204,7 @@ var JsonFileStore = class {
       permissionRequestId: link.permissionRequestId,
       chatId: link.chatId,
       messageId: link.messageId,
+      sessionId: link.sessionId,
       resolved: false,
       suggestions: link.suggestions
     };
@@ -6025,7 +6247,7 @@ import path8 from "node:path";
 import { spawn as spawn2 } from "node:child_process";
 
 // src/adapters/weixin/weixin-api.ts
-import crypto2 from "node:crypto";
+import crypto3 from "node:crypto";
 
 // src/adapters/weixin/weixin-types.ts
 var DEFAULT_BASE_URL = "https://ilinkai.weixin.qq.com";
@@ -6316,7 +6538,7 @@ function openQrHtml() {
       return true;
     }
     if (process.platform === "win32") {
-      const child2 = spawn2("cmd", ["/c", "start", "", HTML_PATH], { detached: true, stdio: "ignore" });
+      const child2 = spawn2("cmd", ["/c", "start", "", HTML_PATH], { detached: true, stdio: "ignore", windowsHide: true });
       child2.unref();
       return true;
     }
@@ -6438,6 +6660,7 @@ if (isMainModule) {
 var port = 4781;
 var serverStartTime = (/* @__PURE__ */ new Date()).toISOString();
 var supportedChannels = ["feishu", "weixin"];
+var AUTH_COOKIE_NAME = "cti_ui_auth";
 function parsePreferredPort() {
   const raw = Number(process.env.CTI_UI_PORT || "4781");
   if (!Number.isInteger(raw) || raw <= 0 || raw > 65535) return 4781;
@@ -6448,7 +6671,7 @@ async function canListen(portToCheck) {
     const probe = net.createServer();
     probe.unref();
     probe.once("error", () => resolve(false));
-    probe.listen(portToCheck, "127.0.0.1", () => {
+    probe.listen(portToCheck, "0.0.0.0", () => {
       probe.close(() => resolve(true));
     });
   });
@@ -6462,7 +6685,7 @@ async function resolveUiPort(preferredPort) {
     const probe = net.createServer();
     probe.unref();
     probe.once("error", reject);
-    probe.listen(0, "127.0.0.1", () => {
+    probe.listen(0, "0.0.0.0", () => {
       const address = probe.address();
       const dynamicPort = typeof address === "object" && address ? address.port : preferredPort;
       probe.close((error) => {
@@ -6525,43 +6748,128 @@ function parsePositiveInt2(value, fallback) {
 function createUiStore() {
   return new JsonFileStore(configToSettings(loadConfig()));
 }
+function generateAccessToken() {
+  return crypto4.randomBytes(18).toString("base64url");
+}
+function timingSafeMatch(left, right) {
+  if (!left || !right) return false;
+  const leftBuffer = Buffer.from(left);
+  const rightBuffer = Buffer.from(right);
+  if (leftBuffer.length !== rightBuffer.length) return false;
+  return crypto4.timingSafeEqual(leftBuffer, rightBuffer);
+}
+function parseCookies(request) {
+  const header = request.headers.cookie;
+  if (!header) return /* @__PURE__ */ new Map();
+  return new Map(
+    header.split(";").map((part) => part.trim()).filter(Boolean).map((part) => {
+      const separator = part.indexOf("=");
+      if (separator === -1) return [part, ""];
+      return [part.slice(0, separator), decodeURIComponent(part.slice(separator + 1))];
+    })
+  );
+}
+function makeAuthCookie(token) {
+  return `${AUTH_COOKIE_NAME}=${encodeURIComponent(token)}; Path=/; HttpOnly; SameSite=Lax; Max-Age=2592000`;
+}
+function clearAuthCookie() {
+  return `${AUTH_COOKIE_NAME}=; Path=/; HttpOnly; SameSite=Lax; Max-Age=0`;
+}
+function redirect(response, location, cookie) {
+  const headers = { Location: location };
+  if (cookie) headers["Set-Cookie"] = cookie;
+  response.writeHead(302, headers);
+  response.end();
+}
+function getRemoteAddress(request) {
+  return request.socket.remoteAddress || "";
+}
+function isLoopbackAddress(address) {
+  return address === "127.0.0.1" || address === "::1" || address === "::ffff:127.0.0.1";
+}
+function isLocalRequest(request) {
+  return isLoopbackAddress(getRemoteAddress(request));
+}
+function getLanUrls(currentPort) {
+  const interfaces = os5.networkInterfaces();
+  const urls = /* @__PURE__ */ new Set();
+  for (const records of Object.values(interfaces)) {
+    for (const record of records || []) {
+      if (!record || record.internal || record.family !== "IPv4") continue;
+      urls.add(`http://${record.address}:${currentPort}`);
+    }
+  }
+  return Array.from(urls).sort();
+}
+function buildUiAccessInfo(currentPort, config, request) {
+  return {
+    allowLan: config.uiAllowLan === true,
+    localUrl: getUiServerUrl(currentPort),
+    lanUrls: getLanUrls(currentPort),
+    accessToken: config.uiAccessToken || "",
+    requestIsLocal: request ? isLocalRequest(request) : true,
+    authenticated: request ? isRemoteAuthenticated(request, config) : true
+  };
+}
+function isRemoteAuthenticated(request, config) {
+  if (isLocalRequest(request)) return true;
+  if (config.uiAllowLan !== true) return false;
+  return timingSafeMatch(parseCookies(request).get(AUTH_COOKIE_NAME), config.uiAccessToken);
+}
 function configToPayload(config) {
   return {
     runtime: config.runtime,
     enabledChannels: config.enabledChannels,
     defaultWorkDir: config.defaultWorkDir,
+    defaultWorkspaceRoot: config.defaultWorkspaceRoot || "",
     defaultModel: config.defaultModel || "",
     defaultMode: config.defaultMode,
     historyMessageLimit: config.historyMessageLimit ?? 8,
     codexSkipGitRepoCheck: config.codexSkipGitRepoCheck === true,
+    codexSandboxMode: config.codexSandboxMode || "workspace-write",
+    codexReasoningEffort: config.codexReasoningEffort || "medium",
+    uiAllowLan: config.uiAllowLan === true,
+    uiAccessToken: config.uiAccessToken || "",
     autoApprove: config.autoApprove === true,
     feishuAppId: config.feishuAppId || "",
     feishuAppSecret: config.feishuAppSecret || "",
     feishuDomain: config.feishuDomain || "https://open.feishu.cn",
     feishuAllowedUsers: config.feishuAllowedUsers?.join(",") || "",
     feishuStreamingEnabled: config.feishuStreamingEnabled !== false,
-    weixinMediaEnabled: config.weixinMediaEnabled === true
+    feishuCommandMarkdownEnabled: config.feishuCommandMarkdownEnabled !== false,
+    weixinMediaEnabled: config.weixinMediaEnabled === true,
+    weixinCommandMarkdownEnabled: config.weixinCommandMarkdownEnabled === true
   };
 }
 function mergeConfig(payload) {
   const current = loadConfig();
   const requestedChannels = Array.isArray(payload.enabledChannels) ? payload.enabledChannels.filter((value) => typeof value === "string") : current.enabledChannels;
+  const uiAllowLan = payload.uiAllowLan === true;
+  const requestedUiAccessToken = asString(payload.uiAccessToken);
+  const uiAccessToken = requestedUiAccessToken || current.uiAccessToken || (uiAllowLan ? generateAccessToken() : void 0);
   return {
     ...current,
     runtime: payload.runtime === "claude" || payload.runtime === "auto" ? payload.runtime : "codex",
     enabledChannels: requestedChannels.filter((channel) => supportedChannels.includes(channel)),
     defaultWorkDir: asString(payload.defaultWorkDir) || current.defaultWorkDir || process.cwd(),
+    defaultWorkspaceRoot: asString(payload.defaultWorkspaceRoot),
     defaultModel: asString(payload.defaultModel),
     defaultMode: payload.defaultMode === "plan" || payload.defaultMode === "ask" ? payload.defaultMode : "code",
     historyMessageLimit: asPositiveInt(payload.historyMessageLimit) || current.historyMessageLimit || 8,
     codexSkipGitRepoCheck: payload.codexSkipGitRepoCheck === true,
+    codexSandboxMode: payload.codexSandboxMode === "read-only" || payload.codexSandboxMode === "danger-full-access" ? payload.codexSandboxMode : "workspace-write",
+    codexReasoningEffort: payload.codexReasoningEffort === "minimal" || payload.codexReasoningEffort === "low" || payload.codexReasoningEffort === "high" || payload.codexReasoningEffort === "xhigh" ? payload.codexReasoningEffort : "medium",
+    uiAllowLan,
+    uiAccessToken,
     autoApprove: payload.autoApprove === true,
     feishuAppId: asString(payload.feishuAppId),
     feishuAppSecret: asString(payload.feishuAppSecret),
     feishuDomain: asString(payload.feishuDomain) || "https://open.feishu.cn",
     feishuAllowedUsers: parseCsv(payload.feishuAllowedUsers),
     feishuStreamingEnabled: payload.feishuStreamingEnabled !== false,
-    weixinMediaEnabled: payload.weixinMediaEnabled === true
+    feishuCommandMarkdownEnabled: payload.feishuCommandMarkdownEnabled !== false,
+    weixinMediaEnabled: payload.weixinMediaEnabled === true,
+    weixinCommandMarkdownEnabled: payload.weixinCommandMarkdownEnabled === true
   };
 }
 function getWeixinAccountsPayload() {
@@ -6643,6 +6951,182 @@ async function testCodexConnection(config) {
     clearTimeout(timeout);
   }
 }
+function renderLoginHtml() {
+  return `<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Codex to IM \u767B\u5F55</title>
+    <style>
+      :root {
+        --bg: #f5f7fa;
+        --surface: #ffffff;
+        --border: #e5e7eb;
+        --border-strong: #d0d7e2;
+        --text: #111827;
+        --muted: #667085;
+        --primary: #1677ff;
+        --primary-strong: #0958d9;
+        --danger: #dc2626;
+      }
+      * { box-sizing: border-box; }
+      body {
+        margin: 0;
+        min-height: 100vh;
+        display: grid;
+        place-items: center;
+        padding: 24px;
+        background: var(--bg);
+        color: var(--text);
+        font: 14px/1.5 "PingFang SC", "Microsoft YaHei", "Noto Sans SC", sans-serif;
+      }
+      .auth-card {
+        width: min(420px, 100%);
+        background: var(--surface);
+        border: 1px solid var(--border);
+        border-radius: 10px;
+        padding: 24px;
+      }
+      h1 {
+        margin: 0 0 8px;
+        font-size: 24px;
+        line-height: 1.2;
+      }
+      p {
+        margin: 0 0 18px;
+        color: var(--muted);
+      }
+      label {
+        display: grid;
+        gap: 6px;
+        color: var(--muted);
+        font-weight: 500;
+      }
+      input {
+        width: 100%;
+        border: 1px solid var(--border-strong);
+        border-radius: 8px;
+        padding: 10px 12px;
+        font: inherit;
+      }
+      input:focus {
+        outline: 2px solid rgba(22, 119, 255, 0.14);
+        border-color: var(--primary);
+      }
+      button {
+        margin-top: 16px;
+        width: 100%;
+        border: 1px solid var(--primary);
+        background: var(--primary);
+        color: #ffffff;
+        border-radius: 8px;
+        padding: 10px 14px;
+        font: inherit;
+        cursor: pointer;
+      }
+      button:hover {
+        background: var(--primary-strong);
+        border-color: var(--primary-strong);
+      }
+      .message {
+        display: none;
+        margin-top: 14px;
+        padding: 10px 12px;
+        border-radius: 8px;
+        background: rgba(220, 38, 38, 0.08);
+        color: var(--danger);
+      }
+      .message.show { display: block; }
+    </style>
+  </head>
+  <body>
+    <section class="auth-card">
+      <h1>\u8BBF\u95EE Codex to IM</h1>
+      <p>\u5F53\u524D\u5DE5\u4F5C\u53F0\u5DF2\u5F00\u542F\u5C40\u57DF\u7F51\u8BBF\u95EE\u3002\u8BF7\u8F93\u5165\u8BBF\u95EE token\uFF0C\u9A8C\u8BC1\u901A\u8FC7\u540E\u624D\u80FD\u67E5\u770B\u548C\u4FEE\u6539\u914D\u7F6E\u3002</p>
+      <form id="loginForm">
+        <label>
+          \u8BBF\u95EE token
+          <input id="token" name="token" autocomplete="off" spellcheck="false" />
+        </label>
+        <button type="submit">\u767B\u5F55</button>
+      </form>
+      <div class="message" id="message"></div>
+    </section>
+    <script>
+      const form = document.getElementById('loginForm');
+      const message = document.getElementById('message');
+      const tokenInput = document.getElementById('token');
+      form.addEventListener('submit', async (event) => {
+        event.preventDefault();
+        message.className = 'message';
+        message.textContent = '';
+
+        try {
+          const response = await fetch('/api/auth/login', {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ token: tokenInput.value }),
+          });
+          const text = await response.text();
+          const data = text ? JSON.parse(text) : {};
+          if (!response.ok) {
+            throw new Error(data.error || '\u767B\u5F55\u5931\u8D25');
+          }
+          window.location.href = '/';
+        } catch (error) {
+          message.className = 'message show';
+          message.textContent = error instanceof Error ? error.message : String(error);
+        }
+      });
+    </script>
+  </body>
+</html>`;
+}
+function renderAccessDeniedHtml() {
+  return `<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Codex to IM</title>
+    <style>
+      body {
+        margin: 0;
+        min-height: 100vh;
+        display: grid;
+        place-items: center;
+        padding: 24px;
+        background: #f5f7fa;
+        color: #111827;
+        font: 14px/1.5 "PingFang SC", "Microsoft YaHei", "Noto Sans SC", sans-serif;
+      }
+      .card {
+        width: min(420px, 100%);
+        background: #ffffff;
+        border: 1px solid #e5e7eb;
+        border-radius: 10px;
+        padding: 24px;
+      }
+      h1 {
+        margin: 0 0 8px;
+        font-size: 24px;
+        line-height: 1.2;
+      }
+      p {
+        margin: 0;
+        color: #667085;
+      }
+    </style>
+  </head>
+  <body>
+    <section class="card">
+      <h1>\u5F53\u524D\u672A\u5F00\u653E\u5C40\u57DF\u7F51\u8BBF\u95EE</h1>
+      <p>\u8FD9\u4E2A Web \u5DE5\u4F5C\u53F0\u76EE\u524D\u53EA\u5141\u8BB8\u672C\u673A\u8BBF\u95EE\u3002\u8BF7\u5148\u5728\u672C\u673A\u914D\u7F6E\u9875\u4E2D\u52FE\u9009\u201C\u5141\u8BB8\u5C40\u57DF\u7F51\u8BBF\u95EE Web \u63A7\u5236\u53F0\u201D\u3002</p>
+    </section>
+  </body>
+</html>`;
+}
 function renderHtml() {
   return `<!doctype html>
 <html lang="zh-CN">
@@ -6956,43 +7440,80 @@ function renderHtml() {
 
       .message {
         display: none;
-        margin-top: 14px;
-        padding: 10px 12px;
-        border-radius: 8px;
       }
 
-      .message.show { display: block; }
-      .message.success { background: rgba(21, 128, 61, 0.10); color: var(--success); }
-      .message.error { background: rgba(220, 38, 38, 0.10); color: var(--danger); }
-
       .global-message-host {
         position: fixed;
-        top: 20px;
+        top: 18px;
         left: 50%;
         transform: translateX(-50%);
         display: grid;
-        gap: 10px;
-        z-index: 2000;
+        gap: 12px;
+        z-index: 2400;
         pointer-events: none;
       }
 
       .global-message {
-        min-width: 240px;
-        max-width: min(560px, calc(100vw - 32px));
-        padding: 10px 14px;
-        border-radius: 8px;
-        border: 1px solid var(--border);
-        background: rgba(255, 255, 255, 0.96);
+        display: inline-flex;
+        align-items: center;
+        gap: 10px;
+        min-width: 260px;
+        max-width: min(640px, calc(100vw - 32px));
+        padding: 11px 14px;
+        border-radius: 10px;
+        border: 1px solid rgba(208, 215, 226, 0.88);
+        background: rgba(255, 255, 255, 0.98);
         box-shadow: 0 8px 24px rgba(15, 23, 42, 0.12);
         color: var(--text);
+        line-height: 1.45;
+        animation: message-enter 160ms ease;
       }
 
       .global-message.success {
-        border-color: rgba(21, 128, 61, 0.16);
+        border-color: rgba(22, 163, 74, 0.22);
       }
 
       .global-message.error {
-        border-color: rgba(220, 38, 38, 0.16);
+        border-color: rgba(220, 38, 38, 0.24);
+      }
+
+      .global-message-icon {
+        flex: 0 0 auto;
+        width: 18px;
+        height: 18px;
+        border-radius: 999px;
+        display: inline-flex;
+        align-items: center;
+        justify-content: center;
+        font-size: 12px;
+        font-weight: 700;
+        background: rgba(15, 23, 42, 0.06);
+      }
+
+      .global-message.success .global-message-icon {
+        color: var(--success);
+        background: rgba(22, 163, 74, 0.12);
+      }
+
+      .global-message.error .global-message-icon {
+        color: var(--danger);
+        background: rgba(220, 38, 38, 0.10);
+      }
+
+      .global-message-content {
+        min-width: 0;
+        word-break: break-word;
+      }
+
+      @keyframes message-enter {
+        from {
+          opacity: 0;
+          transform: translateY(-6px);
+        }
+        to {
+          opacity: 1;
+          transform: translateY(0);
+        }
       }
 
       .info-list {
@@ -7210,11 +7731,24 @@ function renderHtml() {
         display: grid;
       }
 
+      .command-list-head,
       .command-item {
         display: grid;
-        grid-template-columns: 280px minmax(0, 1fr);
+        grid-template-columns: 220px 320px minmax(0, 1fr);
         gap: 16px;
         padding: 10px 14px;
+        align-items: start;
+      }
+
+      .command-list-head {
+        padding-top: 12px;
+        padding-bottom: 8px;
+        color: var(--muted);
+        font-size: 12px;
+        font-weight: 700;
+        text-transform: uppercase;
+        letter-spacing: .04em;
+        background: #fcfcfd;
         border-top: 1px solid var(--border);
       }
 
@@ -7226,6 +7760,15 @@ function renderHtml() {
         word-break: break-all;
       }
 
+      .command-col-command,
+      .command-col-original {
+        min-width: 0;
+      }
+
+      .command-col-desc {
+        color: #475467;
+      }
+
       .channel-tab {
         border: 0;
         border-bottom: 2px solid transparent;
@@ -7398,6 +7941,7 @@ function renderHtml() {
         .field-row,
         .field-row.triple,
         .command-item,
+        .command-list-head,
         .binding-controls { grid-template-columns: 1fr; }
         .status-grid { grid-template-columns: repeat(2, minmax(0, 1fr)); }
       }
@@ -7539,7 +8083,7 @@ function renderHtml() {
           </div>
 
           <section class="panel" id="desktop">
-            <div class="notice">\u8FD9\u91CC\u53EA\u5C55\u793A\u5728 Codex \u684C\u9762\u7D22\u5F15\u91CC\u6709\u540D\u5B57\u7684\u7EBF\u7A0B\uFF0C\u548C Windows App \u5DE6\u4FA7\u5217\u8868\u4FDD\u6301\u4E00\u81F4\u3002</div>
+            <div class="notice">\u8FD9\u91CC\u53EA\u5C55\u793A\u5728 Codex \u684C\u9762\u7D22\u5F15\u91CC\u6709\u540D\u5B57\u7684\u7EBF\u7A0B\uFF0C\u548C Codex Desktop App \u5DE6\u4FA7\u5217\u8868\u4FDD\u6301\u4E00\u81F4\u3002</div>
             <div class="notice" style="margin-top: 12px;">\u6700\u77ED\u8DEF\u5F84\uFF1A\u627E\u5230\u76EE\u6807 thread\uFF0C\u7136\u540E\u628A <code>/thread 019d1da4</code> \u8FD9\u6837\u7684\u547D\u4EE4\u53D1\u7ED9\u98DE\u4E66\u673A\u5668\u4EBA\uFF0C\u6216\u76F4\u63A5\u5230\u201C\u901A\u9053\u201D\u9875\u5207\u6362\u7ED1\u5B9A\u3002</div>
             <div class="small" id="desktopSessionMeta" style="margin: 14px 0 16px;">\u6B63\u5728\u52A0\u8F7D\u2026</div>
             <div class="session-list" id="desktopSessionsList"></div>
@@ -7559,7 +8103,7 @@ function renderHtml() {
             <div class="panel-header">
               <div>
                 <h2>\u57FA\u7840\u914D\u7F6E</h2>
-                <p>\u4FDD\u5B58\u540E\u4F1A\u5199\u5165\u672C\u5730\u914D\u7F6E\u76EE\u5F55\uFF1B\u6D89\u53CA\u8FD0\u884C\u65F6\u7684\u9009\u9879\u901A\u5E38\u9700\u8981\u91CD\u542F Bridge \u624D\u751F\u6548\u3002</p>
+                <p>\u4FDD\u5B58\u540E\u4F1A\u5199\u5165\u672C\u5730\u914D\u7F6E\u76EE\u5F55\u3002\u9ED8\u8BA4\u76EE\u5F55\u3001\u9ED8\u8BA4\u5DE5\u4F5C\u7A7A\u95F4\u3001Sandbox\u3001\u601D\u8003\u7EA7\u522B\u7B49\u4F1A\u5728\u4E0B\u4E00\u6B21\u8BF7\u6C42\u751F\u6548\uFF1B\u901A\u9053\u542F\u505C\u4F1A\u81EA\u52A8\u540C\u6B65\uFF1B\u53EA\u6709\u5C11\u6570\u8FD0\u884C\u65F6\u914D\u7F6E\u9700\u8981\u91CD\u542F Bridge\u3002</p>
               </div>
               <div class="toolbar">
                 <button class="primary" id="saveConfigBtn">\u4FDD\u5B58\u914D\u7F6E</button>
@@ -7593,10 +8137,36 @@ function renderHtml() {
                 \u9ED8\u8BA4\u5DE5\u4F5C\u76EE\u5F55
                 <input id="defaultWorkDir" placeholder="D:\\workspace\\project" />
               </label>
+              <label>
+                \u9ED8\u8BA4\u5DE5\u4F5C\u7A7A\u95F4
+                <input id="defaultWorkspaceRoot" placeholder="\u7559\u7A7A\u65F6\u4F7F\u7528 ~/cx2im" />
+              </label>
               <label>
                 \u9ED8\u8BA4\u6A21\u578B
                 <input id="defaultModel" placeholder="\u7559\u7A7A\u5219\u4F7F\u7528 runtime \u9ED8\u8BA4\u6A21\u578B" />
               </label>
+              <div class="field-row">
+                <label>
+                  Codex \u6587\u4EF6\u7CFB\u7EDF\u6743\u9650
+                  <select id="codexSandboxMode">
+                    <option value="workspace-write">workspace-write</option>
+                    <option value="read-only">read-only</option>
+                    <option value="danger-full-access">danger-full-access</option>
+                  </select>
+                </label>
+                <label>
+                  Codex \u601D\u8003\u7EA7\u522B
+                  <select id="codexReasoningEffort">
+                    <option value="medium">medium</option>
+                    <option value="minimal">minimal</option>
+                    <option value="low">low</option>
+                    <option value="high">high</option>
+                    <option value="xhigh">xhigh</option>
+                  </select>
+                </label>
+              </div>
+              <div class="small">\u201C\u9ED8\u8BA4\u5DE5\u4F5C\u76EE\u5F55\u201D\u7528\u4E8E\u65B0\u4F1A\u8BDD\u9ED8\u8BA4 cwd\uFF1B\u201C\u9ED8\u8BA4\u5DE5\u4F5C\u7A7A\u95F4\u201D\u7528\u4E8E <code>/new proj1</code> \u8FD9\u7C7B\u76F8\u5BF9\u9879\u76EE\u540D\u3002\u7559\u7A7A\u65F6\u4F1A\u6309\u5F53\u524D\u7CFB\u7EDF\u81EA\u52A8\u56DE\u9000\u5230 <code>~/cx2im</code>\u3002\u6587\u4EF6\u7CFB\u7EDF\u6743\u9650\u662F\u5168\u5C40\u9ED8\u8BA4\u503C\uFF0C\u601D\u8003\u7EA7\u522B\u53EF\u5728 IM \u4F1A\u8BDD\u91CC\u518D\u5355\u72EC\u8986\u76D6\u3002</div>
+              <div class="small">\u5F53\u524D\u9700\u8981\u91CD\u542F Bridge \u7684\u914D\u7F6E\uFF1A<code>Runtime</code>\u3001<code>\u81EA\u52A8\u6279\u51C6\u5DE5\u5177\u6743\u9650</code>\u3001<code>\u5141\u8BB8\u5728\u672A\u4FE1\u4EFB Git \u76EE\u5F55\u8FD0\u884C Codex</code>\u3001\u98DE\u4E66 <code>App ID</code>/<code>App Secret</code>/<code>Domain</code>\u3002</div>
               <div class="checkbox-row">
                 <label class="checkbox"><input id="channelFeishu" type="checkbox" checked /> \u542F\u7528\u98DE\u4E66</label>
                 <label class="checkbox"><input id="channelWeixin" type="checkbox" /> \u542F\u7528\u5FAE\u4FE1</label>
@@ -7606,6 +8176,28 @@ function renderHtml() {
                 <label class="checkbox"><input id="codexSkipGitRepoCheck" type="checkbox" checked /> \u5141\u8BB8\u5728\u672A\u4FE1\u4EFB Git \u76EE\u5F55\u8FD0\u884C Codex</label>
               </div>
               <div class="small">\u5982\u679C\u65B0\u5EFA\u4F1A\u8BDD\u62A5 \u201CNot inside a trusted directory\u201D\uFF0C\u53EF\u4EE5\u6253\u5F00\u8FD9\u4E2A\u9009\u9879\u3002\u4FEE\u6539\u540E\u9700\u8981\u91CD\u542F Bridge \u624D\u4F1A\u751F\u6548\u3002</div>
+              <div class="checkbox-row" style="margin-top: 12px;">
+                <label class="checkbox"><input id="uiAllowLan" type="checkbox" /> \u5141\u8BB8\u5C40\u57DF\u7F51\u8BBF\u95EE Web \u63A7\u5236\u53F0</label>
+              </div>
+              <div class="notice" id="uiAccessSummary">\u9ED8\u8BA4\u4EC5\u5141\u8BB8\u672C\u673A\u8BBF\u95EE\u5F53\u524D\u5DE5\u4F5C\u53F0\u3002</div>
+              <div id="uiLanDetails" hidden>
+                <div class="field-row" style="margin-top: 16px;">
+                  <label>
+                    \u8BBF\u95EE token
+                    <input id="uiAccessToken" readonly />
+                  </label>
+                  <div style="display: grid; gap: 10px; align-content: end;">
+                    <div class="toolbar">
+                      <button type="button" id="copyUiTokenBtn">\u590D\u5236 token</button>
+                      <button type="button" id="regenerateUiTokenBtn">\u91CD\u65B0\u751F\u6210 token</button>
+                    </div>
+                    <div class="toolbar">
+                      <button type="button" id="copyUiLanLinkBtn">\u590D\u5236\u5C40\u57DF\u7F51\u767B\u5F55\u94FE\u63A5</button>
+                    </div>
+                  </div>
+                </div>
+                <div class="info-list" id="uiAccessUrls" style="margin-top: 16px;"></div>
+              </div>
             </div>
 
             <div class="message" id="configMessage"></div>
@@ -7628,45 +8220,42 @@ function renderHtml() {
               </div>
             </div>
 
-            <div class="notice" style="margin-bottom: 16px;">\u6700\u77ED\u4F7F\u7528\u8DEF\u5F84\uFF1A\u5148\u53D1 <code>/threads</code> \u67E5\u770B\u6700\u8FD1\u684C\u9762\u4F1A\u8BDD\uFF0C\u518D\u53D1 <code>/thread 1</code> \u63A5\u7BA1\uFF1B\u4E4B\u540E\u76F4\u63A5\u53D1\u9001\u6587\u672C\u5373\u53EF\u7EE7\u7EED\u5F53\u524D\u4F1A\u8BDD\u3002</div>
+            <div class="notice" style="margin-bottom: 16px;">\u6700\u77ED\u4F7F\u7528\u8DEF\u5F84\uFF1A\u5148\u53D1 <code>/t</code> \u67E5\u770B\u6700\u8FD1\u4F1A\u8BDD\uFF0C\u518D\u53D1 <code>/t 1</code> \u63A5\u7BA1\uFF1B\u4E4B\u540E\u76F4\u63A5\u53D1\u9001\u6587\u672C\u5373\u53EF\u7EE7\u7EED\u5F53\u524D\u4F1A\u8BDD\u3002\u8FD9\u91CC\u4FDD\u7559\u539F\u59CB\u547D\u4EE4\uFF0C\u4EC5\u7528\u4E8E\u540E\u53F0\u67E5\u9605\u548C\u517C\u5BB9\u65E7\u7528\u6CD5\u3002</div>
 
             <div class="command-sections">
               <section class="command-section">
                 <h3 class="command-section-title">\u6700\u5E38\u7528</h3>
                 <div class="command-list">
-                  <div class="command-item"><code>/help</code><div>\u67E5\u770B\u5B8C\u6574\u547D\u4EE4\u8BF4\u660E\u3002</div></div>
-                  <div class="command-item"><code>/threads</code><div>\u5217\u51FA\u6700\u8FD1\u684C\u9762\u4F1A\u8BDD\u3002</div></div>
-                  <div class="command-item"><code>/thread &lt;thread-id | \u5E8F\u53F7&gt;</code><div>\u7ED1\u5B9A\u684C\u9762 thread\uFF0C\u63A5\u7BA1\u684C\u9762\u4F1A\u8BDD\u3002</div></div>
-                  <div class="command-item"><code>\u76F4\u63A5\u53D1\u9001\u6587\u672C</code><div>\u7EE7\u7EED\u5F53\u524D\u5DF2\u7ED1\u5B9A\u4F1A\u8BDD\u3002</div></div>
-                  <div class="command-item"><code>/status</code><div>\u67E5\u770B\u5F53\u524D\u804A\u5929\u7ED1\u5B9A\u5230\u4E86\u54EA\u6761\u4F1A\u8BDD\u3001thread\u3001\u76EE\u5F55\u548C\u6A21\u5F0F\u3002</div></div>
-                  <div class="command-item"><code>/history</code><div>\u67E5\u770B\u5F53\u524D\u4F1A\u8BDD\u6700\u8FD1 N \u6761\u6D88\u606F\u3002</div></div>
-                </div>
-              </section>
-
-              <section class="command-section">
-                <h3 class="command-section-title">\u5207\u6362\u4E0E\u7ED1\u5B9A</h3>
-                <div class="command-list">
-                  <div class="command-item"><code>/sessions</code><div>\u5217\u51FA\u5185\u90E8\u4F1A\u8BDD\u3002</div></div>
-                  <div class="command-item"><code>/use &lt;session-id | \u5E8F\u53F7&gt;</code><div>\u5207\u6362\u5230\u5DF2\u6709\u5185\u90E8\u4F1A\u8BDD\u3002</div></div>
-                  <div class="command-item"><code>/bind &lt;session-id | thread-id | \u5E8F\u53F7&gt;</code><div>\u667A\u80FD\u7ED1\u5B9A\uFF0C\u517C\u5BB9\u65E7\u7528\u6CD5\uFF1B\u53EF\u7ED1\u5B9A\u5185\u90E8\u4F1A\u8BDD\u6216\u684C\u9762 thread\u3002</div></div>
+                  <div class="command-list-head"><div>\u547D\u4EE4</div><div>\u539F\u59CB\u547D\u4EE4</div><div>\u8BF4\u660E</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/</code></div><div class="command-col-original"><code>/status</code></div><div class="command-col-desc">\u67E5\u770B\u5F53\u524D\u4F1A\u8BDD\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/h</code></div><div class="command-col-original"><code>/help</code></div><div class="command-col-desc">\u67E5\u770B\u5E2E\u52A9\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/t</code></div><div class="command-col-original"><code>/threads</code></div><div class="command-col-desc">\u5217\u51FA\u6700\u8FD1\u684C\u9762\u4F1A\u8BDD\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/t &lt;\u5E8F\u53F7&gt;</code></div><div class="command-col-original"><code>/thread &lt;\u5E8F\u53F7&gt;</code></div><div class="command-col-desc">\u6309\u5E8F\u53F7\u63A5\u7BA1\u684C\u9762\u4F1A\u8BDD\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/n [\u7EDD\u5BF9\u8DEF\u5F84 | \u9879\u76EE\u540D]</code></div><div class="command-col-original"><code>/new [\u7EDD\u5BF9\u8DEF\u5F84 | \u9879\u76EE\u540D]</code></div><div class="command-col-desc">\u65B0\u5EFA\u4F1A\u8BDD\uFF1B\u76F8\u5BF9\u9879\u76EE\u540D\u4F1A\u5728\u201C\u9ED8\u8BA4\u5DE5\u4F5C\u7A7A\u95F4\u201D\u4E0B\u521B\u5EFA\u76EE\u5F55\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>\u76F4\u63A5\u53D1\u9001\u6587\u672C</code></div><div class="command-col-original">\u2014</div><div class="command-col-desc">\u7EE7\u7EED\u5F53\u524D\u5DF2\u7ED1\u5B9A\u4F1A\u8BDD\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/his</code></div><div class="command-col-original"><code>/history</code></div><div class="command-col-desc">\u67E5\u770B\u5F53\u524D\u4F1A\u8BDD\u6574\u7406\u540E\u7684\u6458\u8981\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/his raw</code></div><div class="command-col-original"><code>/history raw</code></div><div class="command-col-desc">\u67E5\u770B\u6700\u8FD1 N \u6761\u539F\u59CB\u6D88\u606F\u3002</div></div>
                 </div>
               </section>
 
               <section class="command-section">
-                <h3 class="command-section-title">\u4F1A\u8BDD\u8BBE\u7F6E</h3>
+                <h3 class="command-section-title">\u8BBE\u7F6E\u4E0E\u5207\u6362</h3>
                 <div class="command-list">
-                  <div class="command-item"><code>/new [\u7EDD\u5BF9\u8DEF\u5F84]</code><div>\u65B0\u5EFA\u4F1A\u8BDD\uFF1B\u53EF\u9009\u5730\u6307\u5B9A\u5DE5\u4F5C\u76EE\u5F55\u3002</div></div>
-                  <div class="command-item"><code>/cwd /path/to/project</code><div>\u4FEE\u6539\u5F53\u524D\u4F1A\u8BDD\u5DE5\u4F5C\u76EE\u5F55\u3002</div></div>
-                  <div class="command-item"><code>/mode plan|code|ask</code><div>\u4FEE\u6539\u5F53\u524D\u4F1A\u8BDD\u6A21\u5F0F\u3002</div></div>
-                  <div class="command-item"><code>/stop</code><div>\u505C\u6B62\u5F53\u524D\u4EFB\u52A1\u3002</div></div>
+                  <div class="command-list-head"><div>\u547D\u4EE4</div><div>\u539F\u59CB\u547D\u4EE4</div><div>\u8BF4\u660E</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/m</code></div><div class="command-col-original"><code>/mode</code></div><div class="command-col-desc">\u67E5\u770B\u5F53\u524D\u6A21\u5F0F\uFF1B\u53EF\u9009 <code>code</code>\u3001<code>plan</code>\u3001<code>ask</code>\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/r</code></div><div class="command-col-original"><code>/reasoning</code></div><div class="command-col-desc">\u67E5\u770B\u5F53\u524D\u601D\u8003\u7EA7\u522B\uFF1B\u53EF\u9009 <code>1=minimal</code>\u3001<code>2=low</code>\u3001<code>3=medium</code>\u3001<code>4=high</code>\u3001<code>5=xhigh</code>\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/t 0</code></div><div class="command-col-original"><code>/thread 0</code></div><div class="command-col-desc">\u5207\u6362\u5230\u5F53\u524D\u804A\u5929\u7684\u4E34\u65F6\u8349\u7A3F\u7EBF\u7A0B\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>/t 0 reset</code></div><div class="command-col-original"><code>/thread 0 reset</code></div><div class="command-col-desc">\u4E22\u5F03\u5F53\u524D\u8349\u7A3F\u4E0A\u4E0B\u6587\u5E76\u91CD\u5EFA\u4E00\u6761\u65B0\u7684\u8349\u7A3F\u7EBF\u7A0B\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command">\u2014</div><div class="command-col-original"><code>/stop</code></div><div class="command-col-desc">\u505C\u6B62\u5F53\u524D\u4EFB\u52A1\u3002</div></div>
                 </div>
               </section>
 
               <section class="command-section">
                 <h3 class="command-section-title">\u6743\u9650</h3>
                 <div class="command-list">
-                  <div class="command-item"><code>/perm allow|allow_session|deny &lt;id&gt;</code><div>\u6587\u672C\u65B9\u5F0F\u5904\u7406\u4E00\u4E2A\u5F85\u6279\u51C6\u6743\u9650\u3002</div></div>
-                  <div class="command-item"><code>1 / 2 / 3</code><div>\u5FEB\u901F\u5904\u7406\u5355\u4E2A\u5F85\u6279\u51C6\u6743\u9650\u3002</div></div>
+                  <div class="command-list-head"><div>\u547D\u4EE4</div><div>\u539F\u59CB\u547D\u4EE4</div><div>\u8BF4\u660E</div></div>
+                  <div class="command-item"><div class="command-col-command">\u2014</div><div class="command-col-original"><code>/perm allow|allow_session|deny &lt;id&gt;</code></div><div class="command-col-desc">\u6587\u672C\u65B9\u5F0F\u5904\u7406\u4E00\u4E2A\u5F85\u6279\u51C6\u6743\u9650\u3002</div></div>
+                  <div class="command-item"><div class="command-col-command"><code>1 / 2 / 3</code></div><div class="command-col-original">\u2014</div><div class="command-col-desc">\u5FEB\u901F\u5904\u7406\u5355\u4E2A\u5F85\u6279\u51C6\u6743\u9650\u3002</div></div>
                 </div>
               </section>
             </div>
@@ -7697,6 +8286,7 @@ function renderHtml() {
                 <div class="toolbar">
                   <button id="saveFeishuChannelBtn">\u4FDD\u5B58\u901A\u9053\u914D\u7F6E</button>
                   <button id="testFeishuBtn">\u6D4B\u8BD5\u98DE\u4E66\u51ED\u636E</button>
+                  <button id="refreshFeishuStateBtn">\u5237\u65B0\u72B6\u6001</button>
                 </div>
               </div>
 
@@ -7724,7 +8314,12 @@ function renderHtml() {
                 <div class="checkbox-row">
                   <label class="checkbox"><input id="feishuStreamingEnabled" type="checkbox" checked /> \u542F\u7528\u98DE\u4E66\u6D41\u5F0F\u54CD\u5E94\u5361\u7247</label>
                 </div>
+                <div class="checkbox-row">
+                  <label class="checkbox"><input id="feishuCommandMarkdownEnabled" type="checkbox" checked /> \u547D\u4EE4\u53CD\u9988\u4F7F\u7528 Markdown</label>
+                </div>
                 <div class="small">\u9700\u8981\u98DE\u4E66\u4FA7\u5DF2\u5F00\u901A\u53EF\u66F4\u65B0\u5361\u7247\u7684\u76F8\u5173\u80FD\u529B\uFF1B\u5982\u679C\u6743\u9650\u4E0D\u8DB3\uFF0C\u4F1A\u81EA\u52A8\u56DE\u9000\u4E3A\u6700\u7EC8\u7ED3\u679C\u6D88\u606F\u3002</div>
+                <div class="small">\u53EA\u5F71\u54CD <code>/h</code>\u3001<code>/status</code>\u3001<code>/threads</code> \u8FD9\u7C7B\u7CFB\u7EDF\u53CD\u9988\uFF0C\u4E0D\u5F71\u54CD Codex \u539F\u59CB\u56DE\u590D\u3002</div>
+                <div class="small">\u4FEE\u6539\u98DE\u4E66 <code>App ID</code>\u3001<code>App Secret</code>\u3001<code>Domain</code> \u540E\uFF0C\u9700\u8981\u91CD\u542F Bridge \u8BA9\u5BA2\u6237\u7AEF\u91CD\u65B0\u521D\u59CB\u5316\uFF1B\u767D\u540D\u5355\u3001\u6D41\u5F0F\u5F00\u5173\u3001Markdown \u5F00\u5173\u4F1A\u5373\u65F6\u751F\u6548\u3002</div>
               </div>
 
               <div class="panel-block">
@@ -7751,6 +8346,7 @@ function renderHtml() {
                 <div class="toolbar">
                   <button id="saveWeixinChannelBtn">\u4FDD\u5B58\u901A\u9053\u914D\u7F6E</button>
                   <button id="weixinLoginBtn">\u5F00\u59CB\u5FAE\u4FE1\u626B\u7801</button>
+                  <button id="refreshWeixinStateBtn">\u5237\u65B0\u72B6\u6001</button>
                 </div>
               </div>
 
@@ -7758,7 +8354,11 @@ function renderHtml() {
                 <div class="checkbox-row">
                   <label class="checkbox"><input id="weixinMediaEnabled" type="checkbox" /> \u542F\u7528\u56FE\u7247 / \u6587\u4EF6 / \u89C6\u9891\u5165\u7AD9\u4E0B\u8F7D</label>
                 </div>
+                <div class="checkbox-row">
+                  <label class="checkbox"><input id="weixinCommandMarkdownEnabled" type="checkbox" /> \u547D\u4EE4\u53CD\u9988\u4F7F\u7528 Markdown</label>
+                </div>
               </div>
+              <div class="small">\u53EA\u5F71\u54CD <code>/h</code>\u3001<code>/status</code>\u3001<code>/threads</code> \u8FD9\u7C7B\u7CFB\u7EDF\u53CD\u9988\uFF0C\u4E0D\u5F71\u54CD Codex \u539F\u59CB\u56DE\u590D\u3002\u9ED8\u8BA4\u5173\u95ED\u3002</div>
               <div class="panel-block">
                 <p class="panel-subtitle">\u901A\u9053\u72B6\u6001</p>
                 <div class="small" id="weixinRuntimeMeta">\u6B63\u5728\u52A0\u8F7D\u2026</div>
@@ -7801,6 +8401,7 @@ function renderHtml() {
     <script>
       const state = {
         config: null,
+        uiAccess: null,
         bridgeStatus: null,
         desktopSessions: [],
         bindings: [],
@@ -7890,8 +8491,13 @@ function renderHtml() {
           defaultMode: document.getElementById('defaultMode').value,
           historyMessageLimit: document.getElementById('historyMessageLimit').value,
           defaultWorkDir: document.getElementById('defaultWorkDir').value,
+          defaultWorkspaceRoot: document.getElementById('defaultWorkspaceRoot').value,
           defaultModel: document.getElementById('defaultModel').value,
           codexSkipGitRepoCheck: document.getElementById('codexSkipGitRepoCheck').checked,
+          codexSandboxMode: document.getElementById('codexSandboxMode').value,
+          codexReasoningEffort: document.getElementById('codexReasoningEffort').value,
+          uiAllowLan: document.getElementById('uiAllowLan').checked,
+          uiAccessToken: document.getElementById('uiAccessToken').value,
           enabledChannels: enabledChannelsFromForm(),
           autoApprove: document.getElementById('autoApprove').checked,
           feishuAppId: document.getElementById('feishuAppId').value,
@@ -7899,15 +8505,19 @@ function renderHtml() {
           feishuDomain: document.getElementById('feishuDomain').value,
           feishuAllowedUsers: document.getElementById('feishuAllowedUsers').value,
           feishuStreamingEnabled: document.getElementById('feishuStreamingEnabled').checked,
+          feishuCommandMarkdownEnabled: document.getElementById('feishuCommandMarkdownEnabled').checked,
           weixinMediaEnabled: document.getElementById('weixinMediaEnabled').checked,
+          weixinCommandMarkdownEnabled: document.getElementById('weixinCommandMarkdownEnabled').checked,
         };
       }
 
       function showMessage(id, type, message) {
         const node = document.getElementById(id);
-        if (!node) return;
-        node.className = 'message show ' + type;
-        node.textContent = message;
+        if (node) {
+          node.className = 'message';
+          node.textContent = '';
+        }
+        showGlobalMessage(type, message);
       }
 
       function showGlobalMessage(type, message) {
@@ -7916,7 +8526,16 @@ function renderHtml() {
 
         const item = document.createElement('div');
         item.className = 'global-message ' + (type || 'success');
-        item.textContent = message;
+        const icon = document.createElement('span');
+        icon.className = 'global-message-icon';
+        icon.textContent = type === 'error' ? '!' : '\u2713';
+
+        const content = document.createElement('div');
+        content.className = 'global-message-content';
+        content.textContent = message;
+
+        item.appendChild(icon);
+        item.appendChild(content);
         host.appendChild(item);
 
         window.setTimeout(() => {
@@ -8043,11 +8662,136 @@ function renderHtml() {
         return Boolean(state.bridgeStatus && state.bridgeStatus.running && runningChannels().includes(channelType));
       }
 
-      function bridgeNeedsRestart() {
-        if (!state.config || !state.bridgeStatus || !state.bridgeStatus.running) return false;
-        const configured = (state.config.enabledChannels || []).slice().sort().join(',');
-        const running = runningChannels().slice().sort().join(',');
-        return configured !== running;
+      const CONFIG_FIELD_LABELS = {
+        runtime: 'Runtime',
+        enabledChannels: '\u901A\u9053\u542F\u7528\u72B6\u6001',
+        defaultWorkDir: '\u9ED8\u8BA4\u5DE5\u4F5C\u76EE\u5F55',
+        defaultWorkspaceRoot: '\u9ED8\u8BA4\u5DE5\u4F5C\u7A7A\u95F4',
+        defaultModel: '\u9ED8\u8BA4\u6A21\u578B',
+        defaultMode: '\u9ED8\u8BA4\u6A21\u5F0F',
+        historyMessageLimit: '/history \u8FD4\u56DE\u6761\u6570',
+        codexSkipGitRepoCheck: '\u5141\u8BB8\u5728\u672A\u4FE1\u4EFB Git \u76EE\u5F55\u8FD0\u884C Codex',
+        codexSandboxMode: 'Codex \u6587\u4EF6\u7CFB\u7EDF\u6743\u9650',
+        codexReasoningEffort: 'Codex \u601D\u8003\u7EA7\u522B',
+        uiAllowLan: '\u5141\u8BB8\u5C40\u57DF\u7F51\u8BBF\u95EE Web \u63A7\u5236\u53F0',
+        uiAccessToken: '\u5C40\u57DF\u7F51\u8BBF\u95EE token',
+        autoApprove: '\u81EA\u52A8\u6279\u51C6\u5DE5\u5177\u6743\u9650',
+        feishuAppId: '\u98DE\u4E66 App ID',
+        feishuAppSecret: '\u98DE\u4E66 App Secret',
+        feishuDomain: '\u98DE\u4E66 Domain',
+        feishuAllowedUsers: '\u98DE\u4E66 Allowed Users',
+        feishuStreamingEnabled: '\u98DE\u4E66\u6D41\u5F0F\u54CD\u5E94\u5361\u7247',
+        feishuCommandMarkdownEnabled: '\u98DE\u4E66\u547D\u4EE4 Markdown',
+        weixinMediaEnabled: '\u5FAE\u4FE1\u56FE\u7247/\u6587\u4EF6/\u89C6\u9891\u5165\u7AD9\u4E0B\u8F7D',
+        weixinCommandMarkdownEnabled: '\u5FAE\u4FE1\u547D\u4EE4 Markdown',
+      };
+
+      const BRIDGE_RESTART_FIELDS = new Set([
+        'runtime',
+        'codexSkipGitRepoCheck',
+        'autoApprove',
+        'feishuAppId',
+        'feishuAppSecret',
+        'feishuDomain',
+      ]);
+
+      const AUTO_SYNC_FIELDS = new Set([
+        'enabledChannels',
+      ]);
+
+      const IMMEDIATE_FIELDS = new Set([
+        'defaultWorkDir',
+        'defaultWorkspaceRoot',
+        'defaultModel',
+        'defaultMode',
+        'historyMessageLimit',
+        'codexSandboxMode',
+        'codexReasoningEffort',
+        'uiAllowLan',
+        'uiAccessToken',
+        'feishuAllowedUsers',
+        'feishuStreamingEnabled',
+        'feishuCommandMarkdownEnabled',
+        'weixinMediaEnabled',
+        'weixinCommandMarkdownEnabled',
+      ]);
+
+      const SAVE_SCOPE_FIELDS = {
+        all: null,
+        feishu: new Set([
+          'enabledChannels',
+          'feishuAppId',
+          'feishuAppSecret',
+          'feishuDomain',
+          'feishuAllowedUsers',
+          'feishuStreamingEnabled',
+          'feishuCommandMarkdownEnabled',
+        ]),
+        weixin: new Set([
+          'enabledChannels',
+          'weixinMediaEnabled',
+          'weixinCommandMarkdownEnabled',
+        ]),
+      };
+
+      function normalizeConfigValue(value) {
+        if (Array.isArray(value)) {
+          return value.slice().map((item) => String(item)).sort().join('|');
+        }
+        if (value === undefined || value === null) return '';
+        if (typeof value === 'boolean') return value ? 'true' : 'false';
+        return String(value);
+      }
+
+      function listChangedConfigFields(before, after, scope) {
+        const allowedFields = SAVE_SCOPE_FIELDS[scope] || null;
+        const keys = new Set([
+          ...Object.keys(before || {}),
+          ...Object.keys(after || {}),
+        ]);
+
+        return Array.from(keys).filter((key) => {
+          if (allowedFields && !allowedFields.has(key)) return false;
+          return normalizeConfigValue(before ? before[key] : undefined) !== normalizeConfigValue(after ? after[key] : undefined);
+        });
+      }
+
+      function formatFieldLabels(fields) {
+        return fields
+          .map((field) => CONFIG_FIELD_LABELS[field] || field)
+          .join('\u3001');
+      }
+
+      function buildConfigSaveMessage(before, after, scope) {
+        const changed = listChangedConfigFields(before, after, scope);
+        if (changed.length === 0) {
+          return '\u914D\u7F6E\u672A\u53D8\u66F4\u3002';
+        }
+
+        const restartFields = changed.filter((field) => BRIDGE_RESTART_FIELDS.has(field));
+        const autoSyncFields = changed.filter((field) => AUTO_SYNC_FIELDS.has(field));
+        const immediateFields = changed.filter((field) => IMMEDIATE_FIELDS.has(field));
+        const notes = [];
+
+        if (immediateFields.length > 0) {
+          notes.push('\u5DF2\u5373\u65F6\u751F\u6548\uFF1A' + formatFieldLabels(immediateFields));
+        }
+        if (autoSyncFields.length > 0) {
+          notes.push(
+            (state.bridgeStatus && state.bridgeStatus.running)
+              ? '\u4F1A\u5728\u51E0\u79D2\u5185\u81EA\u52A8\u540C\u6B65\uFF1A' + formatFieldLabels(autoSyncFields)
+              : '\u4F1A\u5728\u4E0B\u6B21\u542F\u52A8 Bridge \u65F6\u751F\u6548\uFF1A' + formatFieldLabels(autoSyncFields),
+          );
+        }
+        if (restartFields.length > 0) {
+          notes.push(
+            (state.bridgeStatus && state.bridgeStatus.running)
+              ? '\u9700\u8981\u91CD\u542F Bridge \u540E\u751F\u6548\uFF1A' + formatFieldLabels(restartFields)
+              : '\u4F1A\u5728\u4E0B\u6B21\u542F\u52A8 Bridge \u65F6\u751F\u6548\uFF1A' + formatFieldLabels(restartFields),
+          );
+        }
+
+        return '\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002' + (notes.length > 0 ? ' ' + notes.join('\uFF1B') + '\u3002' : '');
       }
 
       function channelLabel(channelType) {
@@ -8063,7 +8807,7 @@ function renderHtml() {
           return label + '\u5DF2\u542F\u7528\uFF0C\u4F46 Bridge \u8FD8\u6CA1\u542F\u52A8\u3002\u542F\u52A8 Bridge \u540E\u624D\u4F1A\u771F\u6B63\u63A5\u901A\u3002';
         }
         if (!isChannelRunning(channelType)) {
-          return label + '\u5DF2\u5199\u5165\u914D\u7F6E\uFF0C\u4F46\u5F53\u524D\u8FD0\u884C\u4E2D\u7684 Bridge \u8FD8\u6CA1\u52A0\u8F7D\u8FD9\u4E2A\u901A\u9053\u3002\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002';
+          return label + '\u5DF2\u5199\u5165\u914D\u7F6E\uFF0CBridge \u4F1A\u5728\u51E0\u79D2\u5185\u81EA\u52A8\u540C\u6B65\u8FD9\u4E2A\u901A\u9053\uFF1B\u5982\u679C\u9875\u9762\u8FD8\u6CA1\u66F4\u65B0\uFF0C\u53EF\u624B\u52A8\u70B9\u201C\u5237\u65B0\u72B6\u6001\u201D\u3002';
         }
         return label + '\u5DF2\u63A5\u901A\u5230\u5F53\u524D\u8FD0\u884C\u4E2D\u7684 Bridge\u3002';
       }
@@ -8077,7 +8821,7 @@ function renderHtml() {
           return label + '\u5DF2\u542F\u7528\uFF0C\u4F46 Bridge \u8FD8\u6CA1\u542F\u52A8\u3002\u542F\u52A8\u540E\u624D\u4F1A\u521B\u5EFA\u7ED1\u5B9A\u3002';
         }
         if (!isChannelRunning(channelType)) {
-          return label + '\u5DF2\u542F\u7528\uFF0C\u4F46\u5F53\u524D\u8FD0\u884C\u4E2D\u7684 Bridge \u8FD8\u6CA1\u52A0\u8F7D\u8FD9\u4E2A\u901A\u9053\u3002\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002';
+          return label + '\u5DF2\u542F\u7528\uFF0CBridge \u4F1A\u5728\u51E0\u79D2\u5185\u81EA\u52A8\u540C\u6B65\u8FD9\u4E2A\u901A\u9053\uFF1B\u5982\u679C\u9875\u9762\u8FD8\u6CA1\u66F4\u65B0\uFF0C\u53EF\u624B\u52A8\u70B9\u201C\u5237\u65B0\u72B6\u6001\u201D\u3002';
         }
         return label + '\u5F53\u524D\u8FD8\u6CA1\u6709\u804A\u5929\u63A5\u5165\u3002\u5148\u4ECE' + label + '\u53D1\u4E00\u6761\u6D88\u606F\uFF0Cbridge \u624D\u4F1A\u521B\u5EFA\u7ED1\u5B9A\u3002';
       }
@@ -8091,7 +8835,7 @@ function renderHtml() {
           return { disabled: true, title: 'Bridge \u8FD8\u6CA1\u542F\u52A8\u3002\u542F\u52A8\u540E\u518D\u5207\u6362' + label + '\u4F1A\u8BDD\u3002' };
         }
         if (!isChannelRunning(channelType)) {
-          return { disabled: true, title: label + '\u5DF2\u5199\u5165\u914D\u7F6E\uFF0C\u4F46\u5F53\u524D\u8FD0\u884C\u4E2D\u7684 Bridge \u8FD8\u6CA1\u52A0\u8F7D\u3002\u8BF7\u5148\u91CD\u542F Bridge\u3002' };
+          return { disabled: true, title: label + '\u5DF2\u5199\u5165\u914D\u7F6E\uFF0CBridge \u4F1A\u5728\u51E0\u79D2\u5185\u81EA\u52A8\u540C\u6B65\uFF1B\u540C\u6B65\u5B8C\u6210\u540E\u518D\u5207\u6362\u4F1A\u8BDD\u3002' };
         }
 
         const bindings = state.bindings.filter((item) => item.channelType === channelType);
@@ -8128,6 +8872,30 @@ function renderHtml() {
         return marks;
       }
 
+      function bindingRuntimeText(binding) {
+        const status = binding.runtimeStatus || 'idle';
+        const queuedCount = Number(binding.queuedCount || 0);
+        if (status === 'queued') {
+          return queuedCount > 0 ? '\u6392\u961F\u4E2D\uFF08' + queuedCount + '\uFF09' : '\u6392\u961F\u4E2D';
+        }
+        if (status === 'running') {
+          return '\u8FD0\u884C\u4E2D';
+        }
+        return '\u7A7A\u95F2';
+      }
+
+      function bindingMirrorText(binding) {
+        if (binding.mirrorStatus === 'watching') {
+          return binding.mirrorLastEventAt
+            ? '\u76D1\u542C\u4E2D \xB7 \u6700\u8FD1\u540C\u6B65 ' + formatTime(binding.mirrorLastEventAt)
+            : '\u76D1\u542C\u4E2D';
+        }
+        if (binding.mirrorStatus === 'stale') {
+          return '\u5F85\u6062\u590D\uFF08\u6682\u65F6\u6CA1\u5B9A\u4F4D\u5230\u684C\u9762 thread \u6587\u4EF6\uFF09';
+        }
+        return '\u672A\u76D1\u542C';
+      }
+
       function renderDesktopSessionCard(session) {
         const feishuSwitch = quickSwitchState('feishu');
         const weixinSwitch = quickSwitchState('weixin');
@@ -8171,7 +8939,7 @@ function renderHtml() {
 
         const list = document.getElementById('desktopSessionsList');
         if (state.desktopSessions.length === 0) {
-          list.innerHTML = '<div class="notice ghost">\u5F53\u524D\u6CA1\u6709\u53D1\u73B0\u684C\u9762\u7AEF\u4F1A\u8BDD\u3002\u5148\u5728 Codex Windows App \u4E2D\u6253\u5F00\u6216\u8FD0\u884C\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u518D\u56DE\u5230\u8FD9\u91CC\u5237\u65B0\u3002</div>';
+          list.innerHTML = '<div class="notice ghost">\u5F53\u524D\u6CA1\u6709\u53D1\u73B0\u684C\u9762\u7AEF\u4F1A\u8BDD\u3002\u5148\u5728 Codex Desktop App \u4E2D\u6253\u5F00\u6216\u8FD0\u884C\u4E00\u4E2A\u4F1A\u8BDD\uFF0C\u518D\u56DE\u5230\u8FD9\u91CC\u5237\u65B0\u3002</div>';
           rerenderBindingPanels();
           return;
         }
@@ -8240,6 +9008,8 @@ function renderHtml() {
             +   '<div class="binding-detail">\u5F53\u524D\u4F1A\u8BDD\uFF1A<code>' + escapeHtml(binding.currentSessionId.slice(0, 8)) + '...</code> \xB7 ' + escapeHtml(binding.currentSessionName) + '</div>'
             +   '<div class="binding-detail">\u5F53\u524D\u76EE\u6807\uFF1A' + escapeHtml(binding.currentTargetLabel || '\u672A\u7ED1\u5B9A') + '</div>'
             +   '<div class="binding-detail">\u5F53\u524D thread\uFF1A<code>' + escapeHtml(binding.currentThreadId || 'not-shared') + '</code></div>'
+            +   '<div class="binding-detail">\u8FD0\u884C\u72B6\u6001\uFF1A' + escapeHtml(bindingRuntimeText(binding)) + '</div>'
+            +   '<div class="binding-detail">\u5171\u4EAB\u955C\u50CF\uFF1A' + escapeHtml(bindingMirrorText(binding)) + '</div>'
             +   '<div class="binding-detail">\u76EE\u5F55\uFF1A' + escapeHtml(binding.workingDirectory || '~') + '</div>'
             +   renderBindingTable(binding)
             + '</article>';
@@ -8291,14 +9061,63 @@ function renderHtml() {
         rerenderDesktopSessions();
       }
 
+      function renderUiAccess() {
+        const config = state.config || {};
+        const uiAccess = state.uiAccess || {};
+        const allowLan = config.uiAllowLan === true;
+        const token = config.uiAccessToken || '';
+        const lanUrls = Array.isArray(uiAccess.lanUrls) ? uiAccess.lanUrls : [];
+        const localUrl = uiAccess.localUrl || window.location.origin;
+        const summary = document.getElementById('uiAccessSummary');
+        const details = document.getElementById('uiLanDetails');
+        const tokenInput = document.getElementById('uiAccessToken');
+        const urlList = document.getElementById('uiAccessUrls');
+        const copyTokenBtn = document.getElementById('copyUiTokenBtn');
+        const copyLanLinkBtn = document.getElementById('copyUiLanLinkBtn');
+
+        document.getElementById('uiAllowLan').checked = allowLan;
+        tokenInput.value = token;
+        details.hidden = !allowLan;
+        copyTokenBtn.disabled = !allowLan || !token;
+        copyLanLinkBtn.disabled = !allowLan || !token || lanUrls.length === 0;
+
+        if (!allowLan) {
+          summary.textContent = '\u9ED8\u8BA4\u4EC5\u5141\u8BB8\u672C\u673A\u8BBF\u95EE\u5F53\u524D\u5DE5\u4F5C\u53F0\u3002\u5F00\u542F\u540E\uFF0C\u5C40\u57DF\u7F51\u8BBE\u5907\u9700\u8981\u5148\u8F93\u5165\u8BBF\u95EE token\u3002';
+          urlList.innerHTML = '';
+          return;
+        }
+
+        summary.textContent = '\u5C40\u57DF\u7F51\u8BBF\u95EE\u5DF2\u5F00\u542F\u3002\u975E\u672C\u673A\u8BBE\u5907\u8BBF\u95EE\u65F6\u9700\u8981\u5148\u8F93\u5165 token\uFF1B\u672C\u673A\u8BBF\u95EE\u4ECD\u7136\u4E0D\u53D7\u5F71\u54CD\u3002';
+        const items = [
+          '<div class="info-item"><strong>\u672C\u673A\u5730\u5740</strong><div class="mono">' + escapeHtml(localUrl) + '</div></div>',
+        ];
+
+        if (lanUrls.length === 0) {
+          items.push('<div class="info-item"><strong>\u5C40\u57DF\u7F51\u5730\u5740</strong><div>\u672A\u68C0\u6D4B\u5230\u53EF\u7528\u7684 IPv4 \u5730\u5740\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u8FDE\u63A5\u3002</div></div>');
+        } else {
+          for (const lanUrl of lanUrls) {
+            items.push(
+              '<div class="info-item"><strong>\u5C40\u57DF\u7F51\u5730\u5740</strong><div class="mono">' + escapeHtml(lanUrl) + '</div><div class="small">\u767B\u5F55\u94FE\u63A5\uFF1A' + escapeHtml(lanUrl + '/?token=' + token) + '</div></div>'
+            );
+          }
+        }
+
+        urlList.innerHTML = items.join('');
+      }
+
       function fillForm(config) {
         state.config = config;
         document.getElementById('runtime').value = config.runtime || 'codex';
         document.getElementById('defaultMode').value = config.defaultMode || 'code';
         document.getElementById('historyMessageLimit').value = String(config.historyMessageLimit || 8);
         document.getElementById('defaultWorkDir').value = config.defaultWorkDir || '';
+        document.getElementById('defaultWorkspaceRoot').value = config.defaultWorkspaceRoot || '';
         document.getElementById('defaultModel').value = config.defaultModel || '';
         document.getElementById('codexSkipGitRepoCheck').checked = config.codexSkipGitRepoCheck === true;
+        document.getElementById('codexSandboxMode').value = config.codexSandboxMode || 'workspace-write';
+        document.getElementById('codexReasoningEffort').value = config.codexReasoningEffort || 'medium';
+        document.getElementById('uiAllowLan').checked = config.uiAllowLan === true;
+        document.getElementById('uiAccessToken').value = config.uiAccessToken || '';
         document.getElementById('channelFeishu').checked = (config.enabledChannels || []).includes('feishu');
         document.getElementById('channelWeixin').checked = (config.enabledChannels || []).includes('weixin');
         document.getElementById('autoApprove').checked = config.autoApprove === true;
@@ -8307,7 +9126,10 @@ function renderHtml() {
         document.getElementById('feishuDomain').value = config.feishuDomain || 'https://open.feishu.cn';
         document.getElementById('feishuAllowedUsers').value = config.feishuAllowedUsers || '';
         document.getElementById('feishuStreamingEnabled').checked = config.feishuStreamingEnabled !== false;
+        document.getElementById('feishuCommandMarkdownEnabled').checked = config.feishuCommandMarkdownEnabled !== false;
         document.getElementById('weixinMediaEnabled').checked = config.weixinMediaEnabled === true;
+        document.getElementById('weixinCommandMarkdownEnabled').checked = config.weixinCommandMarkdownEnabled === true;
+        renderUiAccess();
         rerenderDesktopSessions();
       }
 
@@ -8326,6 +9148,7 @@ function renderHtml() {
       async function loadStatus() {
         const status = await api('/api/status');
         const config = await api('/api/config');
+        state.uiAccess = status.uiAccess || null;
         state.bridgeStatus = status.bridge || null;
         state.weixinAccounts = status.weixin && Array.isArray(status.weixin.linkedAccounts) ? status.weixin.linkedAccounts : [];
         fillForm(config);
@@ -8360,19 +9183,21 @@ function renderHtml() {
         renderBindings(result);
       }
 
-      async function saveConfig() {
+      async function saveConfig(options) {
+        const opts = options || {};
+        const beforeConfig = state.config || {};
         const saved = await api('/api/config', {
           method: 'POST',
           body: JSON.stringify(formPayload()),
         });
         fillForm(saved.config);
-        showMessage(
-          'configMessage',
-          'success',
-          bridgeNeedsRestart()
-            ? '\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002\u5F53\u524D Bridge \u8FD8\u5728\u4F7F\u7528\u65E7\u901A\u9053\u914D\u7F6E\uFF0C\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002'
-            : '\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002'
-        );
+        if (opts.messageId) {
+          showMessage(
+            opts.messageId,
+            'success',
+            buildConfigSaveMessage(beforeConfig, saved.config, opts.scope || 'all'),
+          );
+        }
         return saved;
       }
 
@@ -8391,9 +9216,41 @@ function renderHtml() {
 
       window.addEventListener('hashchange', syncPageFromHash);
 
+      document.getElementById('copyUiTokenBtn').addEventListener('click', async () => {
+        try {
+          await copyText(document.getElementById('uiAccessToken').value, '\u8BBF\u95EE token \u5DF2\u590D\u5236\u3002');
+        } catch (error) {
+          showMessage('configMessage', 'error', error.message);
+        }
+      });
+
+      document.getElementById('copyUiLanLinkBtn').addEventListener('click', async () => {
+        try {
+          const urls = state.uiAccess && Array.isArray(state.uiAccess.lanUrls) ? state.uiAccess.lanUrls : [];
+          const token = document.getElementById('uiAccessToken').value;
+          if (!urls.length || !token) {
+            throw new Error('\u5F53\u524D\u8FD8\u6CA1\u6709\u53EF\u590D\u5236\u7684\u5C40\u57DF\u7F51\u767B\u5F55\u94FE\u63A5\u3002');
+          }
+          await copyText(urls[0] + '/?token=' + token, '\u5C40\u57DF\u7F51\u767B\u5F55\u94FE\u63A5\u5DF2\u590D\u5236\u3002');
+        } catch (error) {
+          showMessage('configMessage', 'error', error.message);
+        }
+      });
+
+      document.getElementById('regenerateUiTokenBtn').addEventListener('click', () => {
+        if (!window.crypto || typeof window.crypto.randomUUID !== 'function') {
+          showMessage('configMessage', 'error', '\u5F53\u524D\u6D4F\u89C8\u5668\u4E0D\u652F\u6301\u751F\u6210 token\u3002');
+          return;
+        }
+        document.getElementById('uiAccessToken').value =
+          window.crypto.randomUUID().replaceAll('-', '') + window.crypto.randomUUID().replaceAll('-', '');
+        renderUiAccess();
+        showMessage('configMessage', 'success', '\u5DF2\u751F\u6210\u65B0\u7684\u8BBF\u95EE token\uFF0C\u70B9\u51FB\u201C\u4FDD\u5B58\u914D\u7F6E\u201D\u540E\u751F\u6548\u3002');
+      });
+
       document.getElementById('saveConfigBtn').addEventListener('click', async () => {
         try {
-          await saveConfig();
+          await saveConfig({ messageId: 'configMessage', scope: 'all' });
           await loadStatus();
           await loadBindings();
         } catch (error) {
@@ -8403,16 +9260,9 @@ function renderHtml() {
 
       document.getElementById('saveFeishuChannelBtn').addEventListener('click', async () => {
         try {
-          await saveConfig();
+          await saveConfig({ messageId: 'feishuMessage', scope: 'feishu' });
           await loadStatus();
           await loadBindings();
-          showMessage(
-            'feishuMessage',
-            'success',
-            bridgeNeedsRestart()
-              ? '\u98DE\u4E66\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002\u5F53\u524D Bridge \u8FD8\u5728\u4F7F\u7528\u65E7\u901A\u9053\u914D\u7F6E\uFF0C\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002'
-              : '\u98DE\u4E66\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002'
-          );
         } catch (error) {
           showMessage('feishuMessage', 'error', error.message);
         }
@@ -8430,18 +9280,33 @@ function renderHtml() {
         }
       });
 
+      document.getElementById('refreshFeishuStateBtn').addEventListener('click', async () => {
+        try {
+          await loadStatus();
+          await loadBindings();
+          await loadDesktopSessions();
+          showMessage('feishuMessage', 'success', '\u98DE\u4E66\u901A\u9053\u72B6\u6001\u5DF2\u5237\u65B0\u3002');
+        } catch (error) {
+          showMessage('feishuMessage', 'error', error.message);
+        }
+      });
+
       document.getElementById('saveWeixinChannelBtn').addEventListener('click', async () => {
         try {
-          await saveConfig();
+          await saveConfig({ messageId: 'weixinMessage', scope: 'weixin' });
           await loadStatus();
           await loadBindings();
-          showMessage(
-            'weixinMessage',
-            'success',
-            bridgeNeedsRestart()
-              ? '\u5FAE\u4FE1\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002\u5F53\u524D Bridge \u8FD8\u5728\u4F7F\u7528\u65E7\u901A\u9053\u914D\u7F6E\uFF0C\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002'
-              : '\u5FAE\u4FE1\u914D\u7F6E\u5DF2\u4FDD\u5B58\u3002'
-          );
+        } catch (error) {
+          showMessage('weixinMessage', 'error', error.message);
+        }
+      });
+
+      document.getElementById('refreshWeixinStateBtn').addEventListener('click', async () => {
+        try {
+          await loadStatus();
+          await loadBindings();
+          await loadDesktopSessions();
+          showMessage('weixinMessage', 'success', '\u5FAE\u4FE1\u901A\u9053\u72B6\u6001\u5DF2\u5237\u65B0\u3002');
         } catch (error) {
           showMessage('weixinMessage', 'error', error.message);
         }
@@ -8456,7 +9321,7 @@ function renderHtml() {
           await loadBindings();
           const followup = isChannelRunning('weixin')
             ? '\u5FAE\u4FE1\u8D26\u53F7\u5DF2\u4FDD\u5B58\u3002\u5F53\u524D Bridge \u5DF2\u52A0\u8F7D\u5FAE\u4FE1\u901A\u9053\uFF0C\u51E0\u79D2\u540E\u4F1A\u81EA\u52A8\u63A5\u5165\u65B0\u8D26\u53F7\u3002'
-            : '\u5FAE\u4FE1\u8D26\u53F7\u5DF2\u4FDD\u5B58\u3002\u5F53\u524D\u8FD0\u884C\u4E2D\u7684 Bridge \u8FD8\u6CA1\u52A0\u8F7D\u5FAE\u4FE1\u901A\u9053\uFF0C\u70B9\u51FB\u201C\u91CD\u542F Bridge\u201D\u540E\u751F\u6548\u3002';
+            : '\u5FAE\u4FE1\u8D26\u53F7\u5DF2\u4FDD\u5B58\u3002Bridge \u4F1A\u5728\u51E0\u79D2\u5185\u81EA\u52A8\u540C\u6B65\u5FAE\u4FE1\u901A\u9053\uFF1B\u5982\u679C\u9875\u9762\u8FD8\u6CA1\u66F4\u65B0\uFF0C\u53EF\u624B\u52A8\u70B9\u201C\u5237\u65B0\u72B6\u6001\u201D\u3002';
           showMessage('weixinMessage', result.ok ? 'success' : 'error', followup);
         } catch (error) {
           showMessage('weixinMessage', 'error', error.message);
@@ -8628,6 +9493,10 @@ function renderHtml() {
       Promise.all([loadStatus(), loadBindings(), loadDesktopSessions(), loadLogs()]).catch((error) => {
         showMessage('opsMessage', 'error', error.message);
       });
+
+      setInterval(() => {
+        loadBindings().catch(() => {});
+      }, 4000);
     </script>
   </body>
 </html>`;
@@ -8635,7 +9504,63 @@ function renderHtml() {
 var server = http.createServer(async (request, response) => {
   try {
     const url = new URL(request.url || "/", getUiServerUrl(port));
+    const config = loadConfig();
+    const localRequest = isLocalRequest(request);
+    const queryToken = asString(url.searchParams.get("token"));
+    if (request.method === "GET" && !localRequest && config.uiAllowLan === true && timingSafeMatch(queryToken, config.uiAccessToken)) {
+      const redirectUrl = new URL(url.pathname || "/", getUiServerUrl(port));
+      redirect(response, `${redirectUrl.pathname}${redirectUrl.search}`, makeAuthCookie(config.uiAccessToken || ""));
+      return;
+    }
+    if (request.method === "GET" && url.pathname === "/login") {
+      if (localRequest || isRemoteAuthenticated(request, config)) {
+        redirect(response, "/");
+        return;
+      }
+      if (config.uiAllowLan !== true) {
+        html(response, renderAccessDeniedHtml());
+        return;
+      }
+      html(response, renderLoginHtml());
+      return;
+    }
+    if (request.method === "POST" && url.pathname === "/api/auth/login") {
+      if (config.uiAllowLan !== true) {
+        json(response, 403, { error: "\u5F53\u524D\u672A\u5F00\u542F\u5C40\u57DF\u7F51\u8BBF\u95EE\u3002" });
+        return;
+      }
+      const payload = await readJsonBody(request);
+      const token = asString(payload.token);
+      if (!timingSafeMatch(token, config.uiAccessToken)) {
+        json(response, 401, { error: "\u8BBF\u95EE token \u4E0D\u6B63\u786E\u3002" });
+        return;
+      }
+      response.writeHead(200, {
+        "Content-Type": "application/json; charset=utf-8",
+        "Set-Cookie": makeAuthCookie(config.uiAccessToken || "")
+      });
+      response.end(JSON.stringify({ ok: true }));
+      return;
+    }
+    if (request.method === "POST" && url.pathname === "/api/auth/logout") {
+      response.writeHead(200, {
+        "Content-Type": "application/json; charset=utf-8",
+        "Set-Cookie": clearAuthCookie()
+      });
+      response.end(JSON.stringify({ ok: true }));
+      return;
+    }
     if (request.method === "GET" && url.pathname === "/") {
+      if (!localRequest) {
+        if (config.uiAllowLan !== true) {
+          html(response, renderAccessDeniedHtml());
+          return;
+        }
+        if (!isRemoteAuthenticated(request, config)) {
+          html(response, renderLoginHtml());
+          return;
+        }
+      }
       html(response, renderHtml());
       return;
     }
@@ -8643,10 +9568,21 @@ var server = http.createServer(async (request, response) => {
       json(response, 200, { ok: true });
       return;
     }
+    if (!localRequest) {
+      if (config.uiAllowLan !== true) {
+        json(response, 403, { error: "\u5F53\u524D\u672A\u5F00\u542F\u5C40\u57DF\u7F51\u8BBF\u95EE\u3002" });
+        return;
+      }
+      if (!isRemoteAuthenticated(request, config)) {
+        json(response, 401, { error: "\u9700\u8981\u5148\u767B\u5F55\u5E76\u63D0\u4F9B\u8BBF\u95EE token\u3002" });
+        return;
+      }
+    }
     if (request.method === "GET" && url.pathname === "/api/status") {
       json(response, 200, {
         bridge: getBridgeStatus(),
         ui: getUiServerStatus(),
+        uiAccess: buildUiAccessInfo(port, config, request),
         home: CTI_HOME,
         packageRoot: getPackageRoot(),
         codexIntegrationInstalled: isCodexIntegrationInstalled(),
@@ -8658,7 +9594,7 @@ var server = http.createServer(async (request, response) => {
       return;
     }
     if (request.method === "GET" && url.pathname === "/api/config") {
-      json(response, 200, configToPayload(loadConfig()));
+      json(response, 200, configToPayload(config));
       return;
     }
     if (request.method === "GET" && url.pathname === "/api/desktop-sessions") {
@@ -8683,8 +9619,8 @@ var server = http.createServer(async (request, response) => {
     }
     if (request.method === "POST" && url.pathname === "/api/config") {
       const payload = await readJsonBody(request);
-      const config = mergeConfig(payload);
-      saveConfig(config);
+      const config2 = mergeConfig(payload);
+      saveConfig(config2);
       json(response, 200, { ok: true, config: configToPayload(loadConfig()) });
       return;
     }
@@ -8765,7 +9701,7 @@ async function startServer() {
   port = await resolveUiPort(parsePreferredPort());
   await new Promise((resolve, reject) => {
     server.once("error", reject);
-    server.listen(port, "127.0.0.1", () => {
+    server.listen(port, "0.0.0.0", () => {
       server.removeListener("error", reject);
       resolve();
     });