codex-weixin 0.2.1

package/CHANGELOG.md

@@ -0,0 +1,45 @@
+# Changelog
+
+All notable changes to `codex-weixin` are documented in this file.
+
+## [0.2.1] - 2026-07-14
+
+### Changed
+
+- Restored the README logo, feature-status tables, and screenshot locations for phone-based WeChat examples.
+- Added a sanitized Web session-management preview generated from the actual local management page.
+
+### Fixed
+
+- Marked the built server entry point executable so npm keeps the `codex-weixin` command in the published package.
+
+## [0.2.0] - 2026-07-14
+
+### Added
+
+- Local-only Web management page for account, session, workspace, model, and reasoning-effort settings.
+- Concurrent multi-account WeChat login and monitoring with local account remarks and sender authorization.
+- Managed Codex sessions grouped by WeChat account, including history, Markdown rendering, continued chat, and create, rename, activate, reset, and delete actions.
+- Web prompt attachments and history playback, preview, or download for images, videos, and files.
+- WeChat inbound and outbound image, audio, video, and file handling.
+- Codex app-server V2 support with dynamic model metadata and `codex exec` fallback.
+- GPT-5.6 Sol, Terra, and Luna model options for the IkunCoding provider.
+- Web typing state and `/status` output for the effective model and reasoning effort.
+
+### Changed
+
+- Replaced the command-oriented CLI with the `codex-weixin` local server entry point.
+- Unified service state and the default Codex workspace under `~/.codex-weixin`.
+- Made app-server the preferred backend for both new and resumed sessions.
+
+### Fixed
+
+- Prevented duplicate WeChat deliveries from producing duplicate Codex replies.
+- Preserved session ownership and numbering per WeChat account when creating sessions from the Web page.
+- Restored connection and history continuation for newly created Web sessions.
+- Displayed Codex-generated media in Web session history.
+- Kept GPT-5.6 options available after selecting a different model.
+- Removed extra message spacing and hid internal WeChat and Codex routing identifiers from the normal UI.
+
+[0.2.1]: https://github.com/XavierJiezou/codex-weixin/releases/tag/v0.2.1
+[0.2.0]: https://github.com/XavierJiezou/codex-weixin/releases/tag/v0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Xuechao Zou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -0,0 +1,5 @@
+codex-weixin is a clean-room independent WeChat bridge for OpenAI Codex.
+
+The project structure and protocol boundaries were informed by the MIT-licensed
+Tencent/openclaw-weixin package and by public documentation in the WeChat/Codex
+bridge ecosystem. Source code from AGPL-licensed projects is not copied.

package/README.en.md

@@ -0,0 +1,200 @@
+<h1 align="center">codex-weixin</h1>
+
+<p align="center">
+  <img src="docs/images/codex-weixin-logo.png" alt="codex-weixin logo" width="480" />
+</p>
+
+<p align="center">
+  <a href="./README.md">中文</a> | <strong>English</strong>
+</p>
+
+<p align="center">
+  <strong>Connect multiple personal WeChat accounts to a local OpenAI Codex installation.</strong>
+</p>
+
+`codex-weixin` is a cross-platform, local-only WeChat service dedicated to Codex. Starting it opens a Web management page where users scan a WeChat QR code, manage accounts and workspaces, and switch Codex sessions.
+
+```text
+Multiple WeChat accounts <-> codex-weixin <-> local Codex <-> allowed workspaces
+```
+
+It is not a general messaging gateway. The management page is never exposed to the LAN or public Internet.
+
+## Feature status
+
+Screenshots live under `docs/images/screenshots/`. The Web management screenshot is included; rows that require a phone view reserve stable filenames for later WeChat captures.
+
+| Status | Feature | Details | Screenshot |
+| --- | --- | --- | --- |
+| ✅ | Local Web management | A `127.0.0.1`-only page manages WeChat accounts, sessions, workspaces, and Codex settings. | [Web sessions](docs/images/screenshots/web-session-management.png) |
+| ✅ | Multiple WeChat accounts | One service runs multiple accounts with local remarks and isolated authorization, attachments, and sessions. | [Web sessions](docs/images/screenshots/web-session-management.png) |
+| ✅ | Browser QR connection | Shows waiting, scanned, connected, and expired QR states. | Pending: `docs/images/screenshots/wechat-qr-login.png` |
+| ✅ | Session management | Grouped account tabs, Markdown history, continued Codex threads, and create, rename, activate, reset, and delete actions. | [Web sessions](docs/images/screenshots/web-session-management.png) |
+| ✅ | Web text and attachments | Send text with up to 10 files (50 MB total), with media playback, preview, and download in history. | Pending: `docs/images/screenshots/web-attachments.png` |
+| ✅ | WeChat private-chat control | Supports regular messages plus `/status`, `/new`, `/bind`, `/prompt start`, `/prompt done`, and `/stop`. | Pending: `docs/images/screenshots/wechat-chat.png` |
+| ✅ | WeChat media input | Accepts transcribed voice, images, audio, video, and files as local Codex attachments. | Pending: `docs/images/screenshots/wechat-media-input.png` |
+| ✅ | File delivery to WeChat | Codex can return local images, videos, and files as native WeChat messages. | Pending: `docs/images/screenshots/wechat-media-output.png` |
+| ✅ | Models and reasoning effort | Model-aware dropdowns loaded from app-server, including GPT-5.6 Sol, Terra, and Luna for IkunCoding. | Pending: `docs/images/screenshots/web-model-settings.png` |
+| ✅ | Typing state and deduplication | Web typing state plus persistent sync cursors and message IDs prevent duplicate replies. | Pending: `docs/images/screenshots/wechat-typing.png` |
+| ✅ | App-server first | New and resumed sessions prefer Codex app-server V2 and fall back to `codex exec` when unavailable. | Pending: `docs/images/screenshots/wechat-status.png` |
+
+## Web management preview
+
+<p align="center">
+  <img src="docs/images/screenshots/web-session-management.png" alt="codex-weixin Web session management" width="100%" />
+</p>
+
+## Requirements
+
+- Node.js `>=22`
+- Git
+- An installed and authenticated Codex CLI
+
+```bash
+npm install -g @openai/codex
+codex --version
+codex
+```
+
+## Install and start
+
+Install globally from npm:
+
+```bash
+npm install -g codex-weixin
+codex-weixin
+```
+
+Or install from source:
+
+```bash
+git clone https://github.com/XavierJiezou/codex-weixin.git
+cd codex-weixin
+npm install
+npm run build
+npm install -g .
+codex-weixin
+```
+
+The service opens [http://127.0.0.1:8787](http://127.0.0.1:8787). To run without a global install:
+
+```bash
+npm start
+```
+
+## First connection
+
+1. Open Settings and confirm the default and allowed Codex workspaces.
+2. Select Add WeChat, scan the QR code, and confirm in WeChat.
+3. Send any message to the connected account.
+4. Return to WeChat Accounts and allow the pending sender.
+5. Send the message again to start a Codex turn.
+
+Repeat the QR flow to add more accounts. Every account has its own monitor, sender authorization, inbound directory, and managed-session state. A failed account does not stop the others.
+
+## Session management
+
+The Sessions page manages conversations created and used by this server. It does not scan or take ownership of every Codex conversation created in other terminals.
+
+Selecting a session reads its user messages and final replies from Codex's own persisted thread. The Web composer can submit text and multiple files as one turn and continues that same thread, so context remains shared with later WeChat messages. Uploads are isolated by account and session under `~/.codex-weixin/inbound/`, with at most 10 files and 50 MB total per turn.
+
+The UI does not display `@im.bot`, `@im.wechat`, or Codex thread IDs. The first two are internal iLink routing identifiers, not profile names. Each account can have a local remark edited from the WeChat Accounts page; the remark is reused by session tabs, with `WeChat Account 1` used only as a fallback. The current QR and messaging APIs do not expose WeChat nicknames, avatars, or a profile lookup endpoint, so the page uses a default icon while retaining those identifiers only in local state for correct routing.
+
+- Each authorized WeChat account has one active session and may own multiple named sessions.
+- Activate chooses which Codex thread receives the sender's next message.
+- Reset clears the recorded thread so the next message starts fresh context.
+- Delete removes only the bridge record, not Codex's own history files.
+- `/new` creates a new managed session for the current sender.
+
+## WeChat commands
+
+```text
+/help                         Show commands
+/status                       Show session, workspace, thread, backend, effective model, and reasoning effort
+/bind <absolute-path>          Bind to an allowed workspace
+/new                          Create a new managed Codex session
+/prompt start                 Buffer multiple WeChat messages
+/prompt done                  Submit the buffer as one Codex turn
+/stop                         Interrupt the current Codex task
+```
+
+Regular messages enter the active session. Images, files, videos, and voice/audio without transcription are saved under the account's inbound directory and added to the prompt by local path. WeChat voice transcription is preferred when available.
+
+## Sending local files
+
+Codex can request local-file delivery in its final response:
+
+````text
+```codex-weixin-actions
+{
+  "send": [
+    { "type": "image", "path": "/absolute/path/chart.png" },
+    { "type": "video", "path": "/absolute/path/demo.mp4" },
+    { "type": "file", "path": "/absolute/path/report.pdf" }
+  ]
+}
+```
+````
+
+Only absolute local paths are accepted. Native outbound types are `image`, `video`, and `file`; audio is sent as a regular file. Remote URLs are not uploaded as local files.
+
+## Codex backend
+
+The default `codexBackend` is `auto`. On the first Codex message, the service starts one persistent `codex app-server --stdio` process and uses the current `initialize`, `thread/*`, and `turn/*` protocol. New and resumed conversations prefer app-server; startup, handshake, or request failures automatically fall back to `codex exec` or `codex exec resume`.
+
+WeChat does not currently expose Codex approval prompts, so app-server uses `approvalPolicy: "never"` and operates only within the configured Codex sandbox instead of waiting for an approval that cannot be answered in WeChat. The management page can still pin the backend to `app-server` or `exec` for diagnostics.
+
+## Models and reasoning effort
+
+The Settings page loads available models and model-specific reasoning efforts from Codex app-server. Leaving a field on "Use Codex settings" preserves the Codex configuration; choosing and saving an explicit value applies it to later Web and WeChat turns.
+
+The IkunCoding provider also exposes `gpt-5.6-sol`, `gpt-5.6-terra`, and `gpt-5.6-luna`. These options remain available after switching to another model. Send `/status` in WeChat to inspect the effective model and reasoning effort.
+
+## Local data
+
+Service state and the default Codex workspace share this directory:
+
+```text
+~/.codex-weixin/
+  accounts/                 One credential file per WeChat account
+  runtime/<account-id>/     Sender authorization and managed sessions
+  inbound/<account-id>/     Inbound WeChat attachments
+  config.json               Codex and workspace configuration
+  logs/
+```
+
+Do not commit or share this directory. The management API never returns WeChat tokens to the browser.
+
+## Startup settings
+
+The server always binds to `127.0.0.1`. Environment variables can change its port and state directory or disable automatic browser opening:
+
+```text
+CODEX_WEIXIN_PORT=8787
+CODEX_WEIXIN_STATE_DIR=/absolute/private/path
+CODEX_WEIXIN_OPEN=0
+```
+
+## Security model
+
+- Non-local Host and Origin values are rejected.
+- Every mutating API call requires an in-memory page token.
+- WeChat credentials never reach the management page.
+- Unknown senders are denied until explicitly allowed.
+- `/bind` accepts only absolute paths under the workspace allowlist.
+- `danger-full-access` bypasses the Codex filesystem sandbox and must be enabled only when full-machine access is acceptable.
+- Concurrent accounts share local compute resources and Codex quotas.
+
+## Development
+
+```bash
+npm install
+npm run dev
+npm test
+npm run typecheck
+npm run build
+```
+
+The project is a clean-room independent implementation under the MIT License. Its iLink integration shape references `Tencent/openclaw-weixin`, along with public Codex/WeChat projects for app-server, media-transfer, and security-boundary practices. No AGPL source code was copied.
+
+See [CHANGELOG.md](./CHANGELOG.md) for release history.

package/README.md

@@ -0,0 +1,210 @@
+<h1 align="center">codex-weixin</h1>
+
+<p align="center">
+  <img src="docs/images/codex-weixin-logo.png" alt="codex-weixin logo" width="480" />
+</p>
+
+<p align="center">
+  <strong>中文</strong> | <a href="./README.en.md">English</a>
+</p>
+
+<p align="center">
+  <strong>把多个个人微信账号接入本机 OpenAI Codex。</strong>
+</p>
+
+`codex-weixin` 是一个跨平台、本机运行的微信到 Codex 专用服务。启动后会打开 Web 管理页；用户在页面扫码登录微信，即可从微信私聊控制本机 Codex、管理工作目录和切换会话。
+
+```text
+多个微信账号 <-> codex-weixin <-> 本机 Codex <-> 允许的工作目录
+```
+
+它不是通用消息网关，不接入其他聊天平台，也不把管理页面开放到局域网或公网。
+
+## 功能状态
+
+截图统一放在 `docs/images/screenshots/`。Web 管理页截图已补齐；需要手机微信画面的功能保留了固定文件名，后续可直接补图。
+
+| 状态 | 功能 | 说明 | 截图 |
+| --- | --- | --- | --- |
+| ✅ | 本机 Web 管理 | 页面只监听 `127.0.0.1`，集中管理微信账号、会话、工作目录和 Codex 设置。 | [Web 会话管理](docs/images/screenshots/web-session-management.png) |
+| ✅ | 多微信账号 | 一个服务并行运行多个微信账号，支持本机备注、独立授权、独立附件与会话状态。 | [Web 会话管理](docs/images/screenshots/web-session-management.png) |
+| ✅ | 网页扫码接入 | 显示等待扫码、已扫码、已连接和二维码过期状态。 | 待补：`docs/images/screenshots/wechat-qr-login.png` |
+| ✅ | 会话管理 | 按微信账号分类，查看 Markdown 历史并继续同一 Codex thread；支持新建、重命名、切换、重置和删除。 | [Web 会话管理](docs/images/screenshots/web-session-management.png) |
+| ✅ | Web 文本与附件 | 一次发送文本和最多 10 个文件（合计 50 MB），历史中可播放、预览或下载媒体。 | 待补：`docs/images/screenshots/web-attachments.png` |
+| ✅ | 微信私聊控制 | 支持普通消息和 `/status`、`/new`、`/bind`、`/prompt start`、`/prompt done`、`/stop`。 | 待补：`docs/images/screenshots/wechat-chat.png` |
+| ✅ | 微信多媒体输入 | 接收语音转写、图片、音频、视频和文件，并以本机附件交给 Codex。 | 待补：`docs/images/screenshots/wechat-media-input.png` |
+| ✅ | 文件回传微信 | Codex 可把本机图片、视频和文件作为微信原生消息发回。 | 待补：`docs/images/screenshots/wechat-media-output.png` |
+| ✅ | 模型和推理强度 | 从 app-server 读取模型能力并通过下拉列表切换；IkunCoding 支持 GPT-5.6 Sol、Terra 和 Luna。 | 待补：`docs/images/screenshots/web-model-settings.png` |
+| ✅ | 输入状态与去重 | Web 显示“对方正在输入…”，并持久记录同步游标和消息 ID，防止重复回复。 | 待补：`docs/images/screenshots/wechat-typing.png` |
+| ✅ | App-server 优先 | 新旧会话优先使用 Codex app-server V2；不可用时自动回退到 `codex exec`。 | 待补：`docs/images/screenshots/wechat-status.png` |
+
+## Web 管理页预览
+
+<p align="center">
+  <img src="docs/images/screenshots/web-session-management.png" alt="codex-weixin Web 会话管理页面" width="100%" />
+</p>
+
+## 环境要求
+
+- Node.js `>=22`
+- Git
+- 已安装并登录 Codex CLI
+
+```bash
+npm install -g @openai/codex
+codex --version
+codex
+```
+
+## 安装
+
+推荐从 npm 全局安装：
+
+```bash
+npm install -g codex-weixin
+codex-weixin
+```
+
+也可以从源码安装：
+
+```bash
+git clone https://github.com/XavierJiezou/codex-weixin.git
+cd codex-weixin
+npm install
+npm run build
+npm install -g .
+```
+
+服务会自动打开 [http://127.0.0.1:8787](http://127.0.0.1:8787)。如果不希望全局安装，也可以在项目目录运行：
+
+```bash
+npm start
+```
+
+## 第一次接入微信
+
+1. 打开管理页，在“设置”中确认 Codex 默认工作目录和允许的工作目录。
+2. 点击“添加微信”，使用微信扫描页面二维码并确认登录。
+3. 在微信中给新接入的账号发送任意消息。
+4. 回到“微信账号”，允许页面中出现的待授权联系人。
+5. 再次从微信发送消息，Codex 会在默认工作目录中开始处理。
+
+继续添加账号时重复扫码即可。每个账号都有独立的轮询任务、联系人授权、入站文件和会话状态；单个账号发生错误不会停止其他账号。
+
+## 会话管理
+
+“会话”页面只管理由本服务创建和使用的 Codex 会话，不扫描或接管其他终端产生的全部 Codex 历史记录。
+
+选择一个会话后，右侧会从 Codex 自身保存的 thread 中读取历史用户消息和最终回复。可以直接在页面底部继续聊天，并通过回形针按钮将文本提示词和多个文件作为同一个 turn 发送；Web 和微信共用同一个 thread，上下文会保持连续。上传文件按微信账号和会话隔离保存在 `~/.codex-weixin/inbound/`，每次最多 10 个、合计不超过 50 MB。
+
+页面不显示 `@im.bot`、`@im.wechat` 和 Codex thread id。前两者是微信 iLink 用于账号、联系人路由的内部标识，并不是昵称。可以在“微信账号”页面给账号设置只保存在本机的备注；备注会同步用于会话标签。未设置备注时才使用“微信账号 1”这类默认名称。当前扫码和消息接口没有提供微信昵称、头像或个人资料查询能力，因此页面使用默认图标；这些内部标识仍只在本机状态文件中保存，以保证消息能投递到正确账号和联系人。
+
+- 每个已授权微信账号有一个当前活动会话，也可以拥有多个命名会话。
+- “切换”决定该联系人下一条微信消息继续哪个 Codex thread。
+- “重置”清空本服务记录的 thread，下一条消息创建新上下文。
+- “删除”只删除本服务中的会话记录，不删除 Codex 自身保存的历史文件。
+- 微信中的 `/new` 会立即为当前联系人创建新的受管会话。
+
+## 微信内命令
+
+```text
+/help                         查看命令
+/status                       查看当前会话、工作目录、thread、backend、实际模型和推理强度
+/bind <absolute-path>          绑定到允许列表内的工作目录
+/new                          创建新的受管 Codex 会话
+/prompt start                 开始缓冲多条微信消息
+/prompt done                  将缓冲内容作为一次 Codex turn 提交
+/stop                         中断当前 Codex 任务
+```
+
+普通消息直接进入当前活动会话。图片、文件、视频和无转写语音会先保存到账号独立的入站目录，再以本地路径加入 prompt；有微信转写文本的语音优先使用转写文本。
+
+## 文件回传
+
+Codex 可以在最终回复中声明需要发送的本机文件：
+
+````text
+```codex-weixin-actions
+{
+  "send": [
+    { "type": "image", "path": "/absolute/path/chart.png" },
+    { "type": "video", "path": "/absolute/path/demo.mp4" },
+    { "type": "file", "path": "/absolute/path/report.pdf" }
+  ]
+}
+```
+````
+
+只接受本机绝对路径。原生出站类型为 `image`、`video` 和 `file`；音频按普通文件发送。远程 URL 不会被当作本机文件上传。
+
+## Codex 后端
+
+默认的 `codexBackend` 是 `auto`。第一次收到 Codex 消息时，服务会启动一个持久的 `codex app-server --stdio` 进程，并使用新版 `initialize`、`thread/*` 和 `turn/*` 协议。新会话和已有会话都优先通过 app-server 运行；如果 app-server 无法启动、握手或处理请求，会自动回退到 `codex exec` 或 `codex exec resume`。
+
+微信端目前没有 Codex 审批弹窗，因此 app-server 使用 `approvalPolicy: "never"`，只在现有 Codex sandbox 权限内执行，不会等待一个无法在微信中回答的本机审批请求。管理页仍可把后端固定为 `app-server` 或 `exec`，用于排查问题。
+
+## 模型和推理强度
+
+“设置”页面会从 Codex app-server 读取可用模型和各模型支持的推理强度。选择“沿用 Codex 设置”时使用 Codex 自身配置；选择具体模型或推理强度并保存后，后续 Web 和微信消息都会使用该配置。
+
+IkunCoding 提供方会额外显示 `gpt-5.6-sol`、`gpt-5.6-terra` 和 `gpt-5.6-luna`。切换到其他模型后，这三项仍会保留在下拉列表中。微信发送 `/status` 可以查看当前生效的模型和推理强度。
+
+## 本地数据
+
+服务状态和默认 Codex 工作目录统一放在：
+
+```text
+~/.codex-weixin/
+  accounts/                 微信账号凭据，每个账号一个文件
+  runtime/<account-id>/     联系人授权和受管会话状态
+  inbound/<account-id>/     微信入站附件
+  config.json               Codex 和工作区配置
+  logs/
+```
+
+不要提交或分享该目录。管理 API 不会把微信 token 返回给浏览器。
+
+## 启动设置
+
+服务始终只绑定 `127.0.0.1`。可以通过环境变量改变端口、状态目录或关闭自动打开浏览器：
+
+```text
+CODEX_WEIXIN_PORT=8787
+CODEX_WEIXIN_STATE_DIR=/absolute/private/path
+CODEX_WEIXIN_OPEN=0
+```
+
+Windows PowerShell 示例：
+
+```powershell
+$env:CODEX_WEIXIN_OPEN="0"
+codex-weixin
+```
+
+## 安全边界
+
+- Web 服务只监听本机，拒绝非本机 Host 和 Origin。
+- 所有修改 API 都需要页面运行时临时令牌。
+- 微信凭据永远不返回管理页面。
+- 未知联系人默认拒绝，必须在管理页明确允许。
+- `/bind` 只能选择允许列表内的绝对工作目录。
+- `danger-full-access` 会绕过 Codex 文件系统 sandbox；只有接受整机访问风险时才启用。
+- 多账号可以并行触发 Codex，会共同占用本机 CPU、内存和 Codex 配额。
+
+## 开发
+
+```bash
+npm install
+npm run dev
+npm test
+npm run typecheck
+npm run build
+```
+
+开发入口同样只启动本机 Web 服务。浏览器页面、JSON API、多账号运行时、扫码状态机和受管会话都有自动化测试。
+
+## 参考与许可
+
+项目是独立实现，微信 iLink 接入形态参考 `Tencent/openclaw-weixin`，并参考了公开的 Codex/微信桥接项目在 Codex app-server、媒体传输和安全边界方面的实践。项目未复制 AGPL 项目源码，使用 MIT License。
+
+版本变更见 [CHANGELOG.md](./CHANGELOG.md)。

package/dist/bridge/access.d.ts

@@ -0,0 +1,21 @@
+export type AccessDecision = {
+    allowed: true;
+    message: string;
+} | {
+    allowed: false;
+    message: string;
+};
+export type AccessControllerOptions = {
+    allowedSenderIds?: string[];
+    pairedSenderIds?: string[];
+};
+export declare class AccessController {
+    private readonly configuredAllowlist;
+    private readonly pairedSenderIds;
+    constructor(options?: AccessControllerOptions);
+    isAllowed(senderId: string): boolean;
+    requireAccess(senderId: string): AccessDecision;
+    allow(senderId: string): void;
+    remove(senderId: string): void;
+    listPairedSenderIds(): string[];
+}

package/dist/bridge/access.js

@@ -0,0 +1,31 @@
+export class AccessController {
+    configuredAllowlist;
+    pairedSenderIds;
+    constructor(options = {}) {
+        this.configuredAllowlist = new Set(options.allowedSenderIds ?? []);
+        this.pairedSenderIds = new Set(options.pairedSenderIds ?? []);
+    }
+    isAllowed(senderId) {
+        return this.configuredAllowlist.has(senderId) || this.pairedSenderIds.has(senderId);
+    }
+    requireAccess(senderId) {
+        if (this.isAllowed(senderId)) {
+            return { allowed: true, message: "sender is allowed" };
+        }
+        return {
+            allowed: false,
+            message: `Access denied. Open the codex-weixin management page and allow sender: ${senderId}`
+        };
+    }
+    allow(senderId) {
+        this.pairedSenderIds.add(senderId);
+    }
+    remove(senderId) {
+        this.pairedSenderIds.delete(senderId);
+        this.configuredAllowlist.delete(senderId);
+    }
+    listPairedSenderIds() {
+        return [...this.pairedSenderIds].sort();
+    }
+}
+//# sourceMappingURL=access.js.map

package/dist/bridge/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../../src/bridge/access.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,gBAAgB;IACV,mBAAmB,CAAc;IACjC,eAAe,CAAc;IAE9C,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtF,CAAC;IAED,aAAa,CAAC,QAAgB;QAC5B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QACzD,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,0EAA0E,QAAQ,EAAE;SAC9F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC;IAED,mBAAmB;QACjB,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;CACF"}

package/dist/bridge/actions.d.ts

@@ -0,0 +1,21 @@
+export type SendAction = {
+    type: "image" | "file" | "video";
+    path: string;
+};
+export type ControlAction = {
+    type: "workspace.set";
+    path: string;
+} | {
+    type: "workspace.reset";
+} | {
+    type: "thread.reset";
+};
+export type BridgeActions = {
+    send: SendAction[];
+    control: ControlAction[];
+};
+export type ParsedActionBlocks = {
+    visibleText: string;
+    actions: BridgeActions;
+};
+export declare function parseActionBlocks(text: string): ParsedActionBlocks;