cx-viewer 1.0.3 → 1.0.4

package/src/img/teammates/worker.svg

@@ -0,0 +1,29 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100" aria-hidden="true" stroke-linecap="round" stroke-linejoin="round">
+<path d="M38.5 69.5C33 71 27.5 74.5 24.5 79C22.6 82 22.2 84.5 22.2 86.5C28.5 91.5 38 93.6 47.5 93.6C57 93.6 66 91.5 72.8 86.5C72.8 84.5 72.4 82 70.5 79C67.5 74.5 62 71 56.5 69.5C51.5 72.8 43.5 72.8 38.5 69.5Z" fill="#3b6ea5"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.674;1" dur="0.86s" begin="0s" fill="freeze"/></path>
+<path d="M43 54.5L43 64C45.5 66 49.5 66 52 64L52 54.5C49.5 57.5 45.5 57.5 43 54.5Z" fill="#eec49c"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.633;1" dur="0.6s" begin="0s" fill="freeze"/></path>
+<path d="M43 55C45.5 57.8 49.5 57.8 52 55L52 58.5C49.5 60.8 45.5 60.8 43 58.5Z" fill="#dfa878"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.714;1" dur="0.7s" begin="0s" fill="freeze"/></path>
+<path d="M43 62.5L47.5 66.5L43 73L38 70C39 67 41 64.5 43 62.5ZM52 62.5L47.5 66.5L52 73L57 70C56 67 54 64.5 52 62.5Z" fill="#4a7cb0"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.694;1" dur="0.72s" begin="0s" fill="freeze"/></path>
+<path d="M35.2 34C35.2 26.8 40.6 23.6 47.5 23.6C54.4 23.6 60 27 60 34.2C60 43.5 58 50.8 54.2 54.8C50.4 58.8 44.6 58.7 40.9 54.6C37.2 50.4 35.2 43 35.2 34Z" fill="#eec49c"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.548;1" dur="0.62s" begin="0s" fill="freeze"/></path>
+<path d="M38.7 47.2a2.3 1.9 0 1 0 4.6 0a2.3 1.9 0 1 0-4.6 0ZM51.7 47.2a2.3 1.9 0 1 0 4.6 0a2.3 1.9 0 1 0-4.6 0Z" fill="rgba(201,64,58,0.3)"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.733;1" dur="0.75s" begin="0s" fill="freeze"/></path>
+<path d="M43.9 52.1C45.3 51.2 46.9 51.4 47.6 52C48.3 51.4 49.9 51.2 51.3 52.1C50 53.7 45.3 53.7 43.9 52.1Z" fill="#b56a68"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.652;1" dur="0.46s" begin="0s" fill="freeze"/></path>
+<path d="M40.9 42.6a1.8 1.5 0 1 0 3.6 0a1.8 1.5 0 1 0-3.6 0ZM51.1 42.6a1.8 1.5 0 1 0 3.6 0a1.8 1.5 0 1 0-3.6 0Z" fill="#2b2233"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.571;1" dur="0.42s" begin="0s" fill="freeze"/></path>
+<path d="M35.5 40C32.5 35 32.5 25 35 19C38 13 44 11.5 49.5 11.5C55 11.5 61 13 64 19C66.5 25 66.5 35 63.5 40C61 35.5 60 30 58 27C54.5 22.5 44.5 22.5 41 27C39 30 38 35.5 35.5 40Z" fill="#c9403a"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.517;1" dur="0.58s" begin="0s" fill="freeze"/></path>
+<path d="M45 13C46 8.5 53 8.5 54 13C55 11 57.5 10.5 59.5 12C58 14.5 54.5 14.5 54 13C52.5 15 46.5 15 45 13C44.5 14.5 41 14.5 39.5 12C41.5 10.5 44 11 45 13Z" fill="#c9403a"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.6;1" dur="0.6s" begin="0s" fill="freeze"/></path>
+<path d="M35.5 32a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0ZM42.5 18a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0ZM53.5 18a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0ZM61 32a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0ZM33 24a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0ZM63 24a1.5 1.5 0 1 0 3 0a1.5 1.5 0 1 0-3 0Z" fill="#f4e9d8"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.72;1" dur="0.72s" begin="0s" fill="freeze"/></path>
+<path d="M40.5 27.5C41 31 42.5 32.5 44 32.5C43.3 30.5 42.5 28.5 42 27ZM46.5 27C46.7 30 47.8 31.5 49.3 31.5C48.8 29.5 48.3 28 48 26.5ZM52.5 27C52.5 30 53.5 31.5 55 32C54.5 29.5 54 28 53.5 27Z" fill="#5a3d28"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.66;1" dur="0.64s" begin="0s" fill="freeze"/></path>
+<path d="M68.1 59.8L71.9 62.2L82.9 45.2L86 42L80.5 38.8L85.5 35.5L82 34C80 33.8 78.5 35.5 79.1 42.8Z" fill="#9aa0a8"><animate attributeName="opacity" values="0;0;1" keyTimes="0;0.787;1" dur="0.94s" begin="0s" fill="freeze"/></path>
+<path d="M35.4 33C34.8 40.5 36.2 48.8 40.9 54.6C44.4 58.6 50.4 58.7 54.2 54.8C58.4 50 59.8 41 59.6 33.5" fill="none" stroke="#2b2233" stroke-width="3.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;0" keyTimes="0;1" calcMode="spline" keySplines=".4 0 .2 1" dur="0.24s" begin="0s" fill="freeze"/></path>
+<path d="M40.4 39.2C41.6 38.2 43.6 38.1 44.8 38.9" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.467;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.3s" begin="0s" fill="freeze"/></path>
+<path d="M51 38.9C52.2 38.1 54.2 38.2 55.4 39.2" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.5;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.32s" begin="0s" fill="freeze"/></path>
+<path d="M47.4 43C47.2 45.4 46.9 47.2 46.3 48.4C47 49.1 48.2 49.1 48.9 48.5" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.529;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.34s" begin="0s" fill="freeze"/></path>
+<path d="M35.5 40C32.5 35 32.5 25 35 19C38 13 44 11.5 49.5 11.5C55 11.5 61 13 64 19C66.5 25 66.5 35 63.5 40" fill="none" stroke="#2b2233" stroke-width="3.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.238;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.42s" begin="0s" fill="freeze"/></path>
+<path d="M35.5 40C38 35.5 39 30 41 27C44.5 22.5 54.5 22.5 58 27C60 30 61 35.5 63.5 40M45 13C46 8.5 53 8.5 54 13M54 13C55 11 57.5 10.5 59.5 12M45 13C44 11 41.5 10.5 39.5 12" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.667;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.48s" begin="0s" fill="freeze"/></path>
+<path d="M43 56L43 63.2M52 56L52 63.2" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.769;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.52s" begin="0s" fill="freeze"/></path>
+<path d="M40 62C43.5 65.5 51.5 65.5 55 62" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.759;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.58s" begin="0s" fill="freeze"/></path>
+<path d="M43 62.5L47.5 67M52 62.5L47.5 67" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.774;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.62s" begin="0s" fill="freeze"/></path>
+<path d="M38.5 69.5C33 71 27.5 74.5 24.5 79C22.6 82 22.2 84.5 22.2 86.5" fill="none" stroke="#2b2233" stroke-width="3.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.714;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.7s" begin="0s" fill="freeze"/></path>
+<path d="M56.5 69.5C62 71 67.5 74.5 70.5 79C72.4 82 72.8 84.5 72.8 86.5" fill="none" stroke="#2b2233" stroke-width="3.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.73;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.74s" begin="0s" fill="freeze"/></path>
+<path d="M47.5 74L47.5 91" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.795;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="0.82s" begin="0s" fill="freeze"/></path>
+<path d="M68.1 59.8L71.9 62.2L82.9 45.2L86 42L80.5 38.8L85.5 35.5L82 34C80 33.8 78.5 35.5 79.1 42.8Z" fill="none" stroke="#2b2233" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.78;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="1s" begin="0s" fill="freeze"/></path>
+<path d="M74.5 55L79 48" fill="none" stroke="#f4e9d8" stroke-width="2.5" pathLength="1" stroke-dasharray="1"><animate attributeName="stroke-dashoffset" values="1.01;1.01;0" keyTimes="0;0.85;1" calcMode="spline" keySplines="0 0 1 1;.4 0 .2 1" dur="1.05s" begin="0s" fill="freeze"/></path>
+</svg>

package/src/main.jsx

@@ -0,0 +1,30 @@
+import './tokenInterceptor';
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+import './global.css';
+import { isMobile } from './env';
+import { reloadOnStaleChunk } from './utils/lazyWithReload';
+import { SettingsProvider } from './contexts/SettingsContext';
+
+const root = ReactDOM.createRoot(document.getElementById('root'));
+
+// 入口 chunk 加载失败：部署后陈旧 entry（index-*.js 缓存住了，App-*.js 哈希已变）触发整页 reload，
+// 5 分钟时间窗内不重复。这里没法 toast、没法 i18n —— antd 和 i18n 模块都在没加载下来的 App chunk 里；
+// reload 失败次数超限时退回英文静态文案让用户手动刷。
+const onLoadError = (err) => {
+  console.error('Failed to load app module:', err);
+  if (reloadOnStaleChunk(isMobile ? 'Mobile' : 'App')) return;
+  document.getElementById('root').textContent = 'Loading failed. Please refresh the page.';
+};
+
+// SettingsProvider 必须在 App/Mobile 之外:AppBase 通过 contextType 消费,要求它本身在 Provider 子树里。
+// constructor 内 fire fetch 让 AppBase.componentDidMount 时 _prefsReady Promise 已可用。
+if (isMobile) {
+  import('./Mobile').then(({ default: Mobile }) => {
+    root.render(<SettingsProvider><Mobile /></SettingsProvider>);
+  }).catch(onLoadError);
+} else {
+  import('./App').then(({ default: App }) => {
+    root.render(<SettingsProvider><App /></SettingsProvider>);
+  }).catch(onLoadError);
+}

package/src/tokenInterceptor.js

@@ -0,0 +1,60 @@
+// Token 拦截器：自动为所有 API 请求附加 token
+(function() {
+  let token = null;
+
+  // 从 URL 提取 token
+  function extractToken() {
+    if (token) return token;
+    const params = new URLSearchParams(window.location.search);
+    token = params.get('token') || '';
+    return token;
+  }
+
+  // 为 URL 添加 token 参数
+  function addToken(url) {
+    const t = extractToken();
+    if (!t) return url;
+
+    // 处理相对路径
+    if (url.startsWith('/')) {
+      const separator = url.includes('?') ? '&' : '?';
+      return `${url}${separator}token=${encodeURIComponent(t)}`;
+    }
+
+    // 处理完整 URL
+    try {
+      const urlObj = new URL(url);
+      // 只为同源请求添加 token
+      if (urlObj.origin === window.location.origin) {
+        urlObj.searchParams.set('token', t);
+        return urlObj.toString();
+      }
+    } catch {}
+
+    return url;
+  }
+
+  // 拦截 fetch
+  const originalFetch = window.fetch;
+  window.fetch = function(url, options) {
+    return originalFetch(addToken(url), options);
+  };
+
+  // 拦截 EventSource
+  const OriginalEventSource = window.EventSource;
+  window.EventSource = function(url, config) {
+    return new OriginalEventSource(addToken(url), config);
+  };
+
+  // 拦截 WebSocket
+  const OriginalWebSocket = window.WebSocket;
+  window.WebSocket = function(url, protocols) {
+    return new OriginalWebSocket(addToken(url), protocols);
+  };
+  // 保留静态常量（CONNECTING=0, OPEN=1, CLOSING=2, CLOSED=3）和原型链
+  window.WebSocket.prototype = OriginalWebSocket.prototype;
+  window.WebSocket.CONNECTING = OriginalWebSocket.CONNECTING;
+  window.WebSocket.OPEN = OriginalWebSocket.OPEN;
+  window.WebSocket.CLOSING = OriginalWebSocket.CLOSING;
+  window.WebSocket.CLOSED = OriginalWebSocket.CLOSED;
+})();

package/src/utils/apiUrl.js

@@ -0,0 +1,26 @@
+// 从 URL 中提取 LAN 访问 token，附加到所有 API 请求 / WebSocket 握手
+const _urlToken = new URLSearchParams(window.location.search).get('token');
+
+// 反向代理子路径部署: 从 <base> 标签或 SSR 注入的全局变量读取 base path，
+// 使 API/WebSocket 等动态请求也能正确路由到代理后端。
+export function getBasePath() {
+  if (typeof window !== 'undefined' && window.__CXV_BASE_PATH__) return window.__CXV_BASE_PATH__;
+  if (typeof document === 'undefined' || !document.querySelector) return '';
+  const base = document.querySelector('base');
+  if (base && base.href) return base.getAttribute('href');
+  return '';
+}
+
+// 把 token 追加到任意 URL（HTTP path 或 ws:// 完整 URL 皆可）。无 token 时原样返回。
+// WS 握手必须也带 token —— 否则启用鉴权后远程「?token=」终端会被 socket.destroy()。
+export function appendToken(url) {
+  if (!_urlToken) return url;
+  const sep = url.includes('?') ? '&' : '?';
+  return `${url}${sep}token=${_urlToken}`;
+}
+
+export function apiUrl(path) {
+  const base = getBasePath();
+  const fullPath = base ? base.replace(/\/$/, '') + path : path;
+  return appendToken(fullPath);
+}

package/src/utils/approvalReviewerOptions.js

@@ -0,0 +1,27 @@
+import {
+  APPROVALS_REVIEWER_AUTO,
+  APPROVALS_REVIEWER_OPTIONS,
+  APPROVALS_REVIEWER_USER,
+  normalizeApprovalsReviewer,
+} from '../../lib/approval-reviewer.js';
+
+export {
+  APPROVALS_REVIEWER_AUTO,
+  APPROVALS_REVIEWER_OPTIONS,
+  APPROVALS_REVIEWER_USER,
+  normalizeApprovalsReviewer,
+};
+
+export function approvalReviewerValueLabel(value, t) {
+  const reviewer = normalizeApprovalsReviewer(value);
+  return reviewer === APPROVALS_REVIEWER_AUTO
+    ? t('ui.permission.reviewer.auto')
+    : t('ui.permission.reviewer.user');
+}
+
+export function approvalReviewerSelectOptions(t) {
+  return APPROVALS_REVIEWER_OPTIONS.map(value => ({
+    value,
+    label: approvalReviewerValueLabel(value, t),
+  }));
+}

package/src/utils/askFallback.js

@@ -0,0 +1,21 @@
+// Decision helper for ApprovalModal's fallback AskQuestionForm.
+//
+// The Question modal body is normally filled by the transcript tool_use block
+// portaling an AskQuestionForm into the modal's ask slot (see askPortalMatcher.js).
+// When no block portals in — a stale replayed ask whose block is old history, or a
+// fresh ask arriving before transcript ingest — the modal would show an empty body.
+// The fallback renders a form directly from the authoritative pending-ask broadcast.
+//
+// Contract: `slotOccupied` is DOM occupancy of the ask slot (MutationObserver on
+// childList + sync initial read); `graceElapsed` flips true ASK_FALLBACK_GRACE_MS
+// after the ask becomes visible, giving the real portal one commit cycle so fresh
+// asks never flash the fallback before the portaled form mounts.
+
+export const ASK_FALLBACK_GRACE_MS = 120;
+
+export function shouldRenderAskFallback({ isAskActive, slotOccupied, graceElapsed, questions, submitHandler }) {
+  if (!isAskActive || slotOccupied || !graceElapsed) return false;
+  if (!Array.isArray(questions) || questions.length === 0) return false;
+  if (typeof submitHandler !== 'function') return false;
+  return true;
+}

package/src/utils/askOptionDesc.js

@@ -0,0 +1,55 @@
+import { isPlaceholderAskId } from './askPortalMatcher.js';
+
+// request_user_input options[].description is schema-optional; centralize fallback
+// so AskQuestionForm and ChatMessage recap stay aligned.
+
+export function optionAriaLabel(opt) {
+  if (!opt || opt.label == null) return '';
+  return opt.description
+    ? `${opt.label}: ${opt.description}`
+    : String(opt.label);
+}
+
+export function hasOptionDescription(opt) {
+  return Boolean(opt && opt.description);
+}
+
+// Pick the questions the interactive request_user_input card actually renders.
+//
+// The modal body is filled by the inline tool_use block (reconstructed from the log
+// stream) portaling into the modal's askSlot — it does not read pendingAsk.questions
+// (the authoritative copy broadcast over WS ask-hook-pending / sdk-ask-pending, fully
+// parsed server-side before the hook fires) directly. During streaming of a large
+// payload there is a window where the modal is already open but the reconstructed
+// block's input is still partial JSON. Crucially, partial-JSON parsing materializes
+// the outer questions[] array shape before the element content arrives, so the
+// streamed copy can be HOLLOW AT EQUAL LENGTH (e.g. two question objects with empty
+// text/options while big options[].preview strings are still streaming — the
+// 2026-07-04 blank-popup regression; a strictly-longer length heuristic missed it).
+//
+// So: for the currently pending ask (toolId === lastPendingAskId, id-matched), always
+// prefer the authoritative copy. It is complete by construction, and the submit path
+// (handleAskQuestionSubmit in askFlowController) maps answer indices through the same
+// authoritative _askHookQuestions copy — rendering it keeps rendered indices aligned
+// with the mapping array. Historical blocks never match lastPendingAskId and always
+// keep their own streamed questions (history view unchanged).
+//
+// Legacy/no-id servers use placeholder pendingAsk ids ('__ask__', 'ask_<ts>_<rnd>')
+// that can never equal the real tool_use id. There the authoritative copy is only
+// borrowed when the streamed render would otherwise be completely empty — it can fill
+// a blank popup but never override visible content (a stale legacy pendingAsk must
+// not inject a previous ask's questions over a rendered one).
+export function resolveAskQuestions(streamedQuestions, toolId, lastPendingAskId, pendingAsk) {
+  const streamed = Array.isArray(streamedQuestions) ? streamedQuestions : [];
+  if (!pendingAsk || toolId == null || toolId !== lastPendingAskId) {
+    return streamed;
+  }
+  const idMatches = pendingAsk.id === toolId;
+  if (!idMatches && !(isPlaceholderAskId(pendingAsk.id) && streamed.length === 0)) {
+    return streamed;
+  }
+  const authoritative = Array.isArray(pendingAsk.questions) ? pendingAsk.questions : [];
+  if (authoritative.length === 0) return streamed; // defensive: WS handlers guarantee non-empty
+  if (streamed.length > authoritative.length) return streamed; // never shrink (belt-and-braces)
+  return authoritative;
+}

package/src/utils/askPortalMatcher.js

@@ -0,0 +1,54 @@
+/**
+ * Portal 决策：判断 inline AskQuestionForm（在 ChatMessage 里渲染的某条 tool_use）
+ * 是否应该 createPortal 到 ApprovalModal 的 askSlot。
+ *
+ * activeAskId 三种合法形态（与 server 端协议绑定，改一边必须改另一边）：
+ *
+ *   1. `toolu_xxx` — SDK 模式 / 新版 Codex 透传的真实 tool_use_id
+ *      → 走 strict 匹配：activeAskId === toolId
+ *
+ *   2. `__ask__` — LEGACY 老 server（pre-Map 协议）的单槽占位
+ *      → 走 owner 通配：仅 owner-idx 锁定的那条 ChatMessage（lastPendingAskId === toolId）命中
+ *
+ *   3. `ask_${ts}_${rnd}` — 老 Codex PreToolUse hook payload 不带 tool_use_id 时
+ *      server.js 自生成的 fallback id（修复 modal 标题在但内容空白的根因）
+ *      → 走 owner 通配：与 __ask__ 同语义
+ *
+ * 协议锚点：
+ *   - server 端 fallback id 生成：server.js（搜索 `ask_${Date.now()}` 定位）
+ *   - server 端 LEGACY 占位推送：server.js 推送 ask-hook-pending 事件时 id 为 '__ask__'
+ *   - 前端 setState pendingAsk：src/components/chat/ChatView.jsx
+ *
+ * 改 server 端 fallback id 格式时，必须同步更新此文件的 isFallbackId 检测。
+ */
+
+const FALLBACK_ID_PREFIX = 'ask_';
+const LEGACY_PLACEHOLDER_ID = '__ask__';
+
+/**
+ * True when the given pending-ask id is a placeholder that can never equal a real
+ * tool_use id: the LEGACY single-slot '__ask__' or a server-generated 'ask_<ts>_<rnd>'
+ * fallback id. Consumers (e.g. resolveAskQuestions) use this to apply the same
+ * owner-wildcard semantics as shouldPortalAskForm on the legacy paths.
+ */
+export function isPlaceholderAskId(id) {
+  return id === LEGACY_PLACEHOLDER_ID
+    || (typeof id === 'string' && id.startsWith(FALLBACK_ID_PREFIX));
+}
+
+/**
+ * @param {*} activeAskId   ApprovalPortalContext.Consumer 提供的 activeAskId（modal 当前 active ask 的 id）
+ * @param {*} toolId        当前 ChatMessage 里 tool_use 块的 id（toolu_xxx）
+ * @param {*} lastPendingAskId  ChatMessage 收到的 owner-idx 派生信号；非 owner 永远为 null
+ * @returns {boolean} true 表示当前 ChatMessage 应该 portal 到 askSlot
+ */
+export function shouldPortalAskForm(activeAskId, toolId, lastPendingAskId) {
+  if (activeAskId == null) return false;
+  // strict：SDK / 新 Codex 真实 tool_use_id
+  if (String(activeAskId) === String(toolId)) return true;
+  // owner 通配：__ask__（LEGACY 老 server）∪ ask_*（server fallback）
+  // 必须同时满足 owner-idx 锁定（lastPendingAskId === toolId），否则会让历史所有真实 toolId
+  // 都被通配命中，重现旧的双份 portal bug
+  if (isPlaceholderAskId(activeAskId) && lastPendingAskId === toolId) return true;
+  return false;
+}

package/src/utils/autoApproveOptions.js

@@ -0,0 +1,23 @@
+// Plan 自动审批档位唯一事实源。权限审批使用 Codex 原生
+// approvalsReviewer（见 approvalReviewerOptions.js），不再按时间放行。
+// 三态语义(持久化于 approvalModal.planAutoApproveSeconds):
+//   0   = 关闭(手动审批 Plan)
+//   > 0 = 倒计时该秒数后自动批准
+//   -1  = 立即批准 Plan
+// 本模块不依赖 helpers.js(它带 .svg?raw 等 Vite 专属 import),保持 node --test 可直接引用。
+export const AUTO_APPROVE_INSTANT = -1;
+
+export const PLAN_AUTO_APPROVE_OPTIONS = [0, 10, 30, 60, AUTO_APPROVE_INSTANT];
+
+// 单个档位值 -> 显示文案;t 由调用方注入,避免本模块依赖前端 i18n。
+// 档位之外的历史值(如 Plan 旧 3/5)同样落在 `${v}s` 分支正常显示。
+export function autoApproveValueLabel(v, t) {
+  if (v === AUTO_APPROVE_INSTANT) return t('ui.permission.autoApprove.instant');
+  if (!v) return t('ui.permission.autoApprove.off');
+  return `${v}s`;
+}
+
+// 档位数组 -> antd Select options
+export function autoApproveSelectOptions(values, t) {
+  return values.map(v => ({ value: v, label: autoApproveValueLabel(v, t) }));
+}

package/src/utils/avatarAnimationPostPass.js

@@ -0,0 +1,46 @@
+import React from 'react';
+import { shouldAnimateTeammateAvatar, pickAvatarAnimationTargets } from './teammateAvatars';
+
+/**
+ * Avatar animation loading strategy — post-pass applied at the end of
+ * ChatView.buildAllItems, once every item is known. Teammate rows animate
+ * their one-shot draw-in only when within the 60s window of the newest item's
+ * timestamp; the single newest teammate row always animates ("welcome flourish"
+ * on historic logs). Losers get cloneElement({ animateAvatar: false }) —
+ * winners keep their original element reference so cached elements skip
+ * reconciliation entirely.
+ *
+ * The flags are frozen per build: the window is measured against the newest
+ * item's timestamp, NOT wall clock (do not "fix" with Date.now()); they
+ * refresh whenever new data rebuilds the list.
+ *
+ * @param {Array} items - freshly built ChatMessage element array; mutated in place
+ * @returns {Array} the same array, with stale teammate rows cloned to static
+ */
+export function applyAvatarAnimationTargets(items) {
+  const scanEntries = items.map((item) => ({
+    ts: item?.props?.timestamp,
+    isTeammateAvatar: isTeammateAvatarItem(item?.props),
+  }));
+  const { latestMs, newestTeammateIdx } = pickAvatarAnimationTargets(scanEntries);
+  if (newestTeammateIdx === -1) return items;
+  for (let i = 0; i < items.length; i++) {
+    if (!scanEntries[i].isTeammateAvatar) continue;
+    const animate = i === newestTeammateIdx ||
+      shouldAnimateTeammateAvatar(items[i].props.timestamp, latestMs);
+    if (!animate) items[i] = React.cloneElement(items[i], { animateAvatar: false });
+  }
+  return items;
+}
+
+// Mirrors ChatMessage.render()'s THREE teammate-avatar branches:
+// renderSubAgentChatMessage (role 'sub-agent-chat'), renderSubAgentMessage
+// (role 'sub-agent' — currently never constructed, covered defensively), and
+// renderTeammateMessage (role 'teammate-message'). If ChatMessage gains a new
+// teammate-avatar branch, add it here — rows missed by this predicate default
+// to animated forever.
+export function isTeammateAvatarItem(props) {
+  if (!props) return false;
+  return ((props.role === 'sub-agent-chat' || props.role === 'sub-agent') && props.isTeammate)
+    || props.role === 'teammate-message';
+}

package/src/utils/builtinPresets.js

@@ -0,0 +1,18 @@
+/**
+ * 内置预置快捷方式。
+ *
+ * builtinId 跨版本不变，用于追踪用户的删除/编辑。
+ * teamName / description 是 i18n key，渲染时通过 t() 解析。
+ */
+export const BUILTIN_PRESETS = [
+  {
+    builtinId: 'codereview-5',
+    teamName: 'ui.preset.codeReview5.name',
+    description: 'ui.preset.codeReview5.desc',
+  },
+  // 历史遗留 builtinId 已连同 i18n key 一并删除（用户反馈不常用）：
+  //   - 'scout-regiment'  / ui.preset.scoutRegiment.*
+  //   - 'codereview-2'    / ui.preset.codeReview2.*
+  // 若老用户的 preset 列表里已保存这些条目，i18n key 缺失时 t() 会回显原始 key，
+  // 视觉上难看但不崩；用户可在管理弹窗里手动删除。
+];

package/src/utils/clearCheckpoint.js

@@ -0,0 +1,154 @@
+/**
+ * 检测一个 mainAgent entry 是否是 /clear 之后的首个 checkpoint。
+ *
+ * 单独抽成无依赖的模块（不引 contentFilter，避免 node --test 走 bare import 失败）。
+ *
+ * 必要条件三选三：
+ *   1. entry._isCheckpoint === true（delta 重建器认为这是一个完整快照）
+ *   2. body.input.length 比 prevMessageCount 小（真正"缩短"，排除增量再快照）
+ *   3. input[0] 是 user 消息且含 `<command-name>/clear</command-name>` 标记
+ *
+ * 用于 _processEntries / sessionMerge 区分真实 /clear 起点 vs 普通 /compact 缩短。
+ * /compact 的 input[0] 是 summary，没有 /clear 标记，自然返回 false。
+ *
+ * @param {object} entry
+ * @param {number} [prevMessageCount=0]
+ * @returns {boolean}
+ */
+export function isPostClearCheckpoint(entry, prevMessageCount = 0) {
+  if (!entry || entry._isCheckpoint !== true) return false;
+  const msgs = entry.body && entry.body.input;
+  if (!Array.isArray(msgs) || msgs.length === 0) return false;
+  if (prevMessageCount > 0 && msgs.length >= prevMessageCount) return false;
+  const m0 = msgs[0];
+  if (!m0 || m0.role !== 'user' || !Array.isArray(m0.content)) return false;
+  for (let i = 0; i < m0.content.length; i++) {
+    const block = m0.content[i];
+    if (block && block.type === 'text' && typeof block.text === 'string' &&
+        block.text.indexOf('<command-name>/clear</command-name>') !== -1) {
+      return true;
+    }
+  }
+  return false;
+}
+
+// /compact 摘要续写检测：CLI 在 /compact（手动或自动 auto-compact）后，把整段历史压成一条
+// summary 作为新 input[0] 重新起流。其 input[0] 是 CLI 合成的 summary/continuation prompt，
+// 匹配下面两种固定开头之一（与 contentFilter.js 的 Compact 合成 prompt 判据同源，此处内联
+// 一份纯正则以保持本模块零依赖，可被 node --test 直接 bare import）。
+//
+// 用途：区分「大幅缩短的 mainAgent checkpoint」到底是——
+//   (a) /compact 续写：input[0] 命中本判据 → 属【同一会话延续】，不应触发新会话切换；
+//   (b) 全新终端会话：input[0] 是用户真实首个输入 → 不命中 → 属【新会话起点】。
+// 在同机器多终端场景下 user_id（device_id+account_uuid）完全相同，无法据此区分会话，
+// 故本判据是「大幅缩短」信号下把 /compact 和真·新会话拆开的唯一可靠依据。
+const COMPACT_SUMMARY_RE = /^(Your task is to create a detailed summary of the conversation|This session is being continued from a previous conversation)/i;
+export function isCompactContinuation(entry) {
+  const msgs = entry && entry.body && entry.body.input;
+  if (!Array.isArray(msgs) || msgs.length === 0) return false;
+  const m0 = msgs[0];
+  if (!m0 || m0.role !== 'user') return false;
+  let text = '';
+  if (typeof m0.content === 'string') {
+    text = m0.content;
+  } else if (Array.isArray(m0.content)) {
+    for (let i = 0; i < m0.content.length; i++) {
+      const block = m0.content[i];
+      if (block && block.type === 'text' && typeof block.text === 'string') {
+        text += block.text;
+      }
+    }
+  }
+  return COMPACT_SUMMARY_RE.test(text.trimStart());
+}
+
+export function getEntryUpstreamLane(entry) {
+  const explicit = entry?.authMode || entry?._authMode || entry?.upstreamAuthMode || null;
+  if (explicit && typeof explicit === 'string') {
+    return `auth:${explicit.toLowerCase()}`;
+  }
+
+  const url = entry?.upstreamUrl || entry?.proxyUrl || entry?.url || '';
+  if (!url || typeof url !== 'string') return null;
+
+  try {
+    const u = new URL(url);
+    const pathname = u.pathname || '';
+    if (u.hostname === 'chatgpt.com' && /^\/backend-api\/codex\/responses(?:\/|$)/.test(pathname)) {
+      return 'chatgpt-codex';
+    }
+    const match = pathname.match(/^(.*\/responses)(?:\/.*)?$/);
+    if (match && /\/responses(?:\/|$)/.test(pathname)) {
+      return `responses:${u.origin}${match[1]}`;
+    }
+  } catch {
+    if (url.includes('chatgpt.com/backend-api/codex/responses')) return 'chatgpt-codex';
+    const idx = url.indexOf('/v1/responses');
+    if (idx >= 0) return `responses:${url.slice(0, idx + '/v1/responses'.length)}`;
+  }
+
+  return null;
+}
+
+export function getMainAgentSessionKey(entry) {
+  const body = entry?.body || {};
+  const metadata = { ...(body.metadata || {}), ...(body.client_metadata || {}) };
+  const threadId = metadata.thread_id || metadata.threadId || metadata.conversation_id || metadata.conversationId
+    || entry?._threadId || entry?._agentThreadId || null;
+  const promptCacheKey = body.prompt_cache_key || body.promptCacheKey
+    || metadata.prompt_cache_key || metadata.promptCacheKey || null;
+  const upstreamLane = getEntryUpstreamLane(entry);
+  const parts = [];
+  if (threadId) parts.push(`thread:${threadId}`);
+  else if (promptCacheKey) parts.push(`prompt-cache:${promptCacheKey}`);
+  if (upstreamLane) parts.push(`lane:${upstreamLane}`);
+  return parts.length > 0 ? parts.join('|') : null;
+}
+
+/**
+ * Shared session-boundary predicate — the single source of truth for "does this
+ * mainAgent entry start a NEW logical session?", used by BOTH the batch path
+ * (applyBatchEntryTimestamps → _processOneEntry) and the live SSE path
+ * (_flushPendingEntries). Keeping the two paths on one predicate guarantees the
+ * session segmentation (and thus each session's stable id = messages[0]._timestamp)
+ * is identical live and after a reload, which the "only show current session"
+ * pin depends on.
+ *
+ * Rules:
+ *   1. Post-/clear checkpoint → always a boundary (bypasses everything else).
+ *   2. Big message-count drop (count < 50% of prev AND drop > 4) → boundary,
+ *      UNLESS the entry is a /compact continuation. Slimmed entries have
+ *      body.input emptied, so isCompactContinuation() can no longer see the
+ *      summary — the slimmer stamps `entry._compactContinuation` beforehand
+ *      (entry-slim.js) and we trust that flag here.
+ *   3. user_id change with an established previous session (prevCount > 0) →
+ *      boundary (different device/account writing into the same log).
+ *   4. Codex thread/upstream lane change with an established previous session →
+ *      boundary. Codex's durable conversation id is the app-server Thread; the
+ *      same local log can contain both ChatGPT-backed and API-key-backed
+ *      Responses traffic, and those lanes must not share one MainAgent chain.
+ *
+ * KEEP IN SYNC: the bigDrop formula (rule 2, minus the compact exclusion) is
+ * mirrored in entry-slim.js's three slimmer predicates (process/finalize/
+ * incremental), which stay intentionally divergent for restore-guard reasons —
+ * tune the 0.5 ratio or the >4 drop threshold in all four places together.
+ *
+ * @param {object} entry - mainAgent entry (may be _slimmed)
+ * @param {object} ctx
+ * @param {number} ctx.prevCount - message count accumulated before this entry
+ * @param {number} ctx.count - this entry's message count
+ * @param {string|null} ctx.prevUserId - user_id of the previous entry/session
+ * @param {string|null} ctx.userId - this entry's user_id
+ * @param {string|null} [ctx.prevSessionKey] - previous Codex thread/upstream lane key
+ * @param {string|null} [ctx.sessionKey] - current Codex thread/upstream lane key
+ * @returns {boolean}
+ */
+export function isSessionBoundary(entry, { prevCount, count, prevUserId, userId, prevSessionKey = null, sessionKey = null }) {
+  if (isPostClearCheckpoint(entry, prevCount)) return true;
+  if (prevCount > 0 && prevSessionKey && sessionKey && sessionKey !== prevSessionKey) return true;
+  const bigDrop = prevCount > 0 && count < prevCount * 0.5 && (prevCount - count) > 4;
+  const compactLike = (entry && entry._compactContinuation === true) || isCompactContinuation(entry);
+  if (bigDrop && !compactLike) return true;
+  if (prevCount > 0 && prevUserId && userId && userId !== prevUserId) return true;
+  return false;
+}

package/src/utils/commandValidator.js

@@ -0,0 +1,45 @@
+/**
+ * File and command validation utilities.
+ */
+
+const IMAGE_EXTS = new Set(['png', 'jpg', 'jpeg', 'gif', 'svg', 'bmp', 'ico', 'icns', 'webp', 'avif']);
+
+export function isImageFile(path) {
+  const ext = (path || '').split('.').pop().toLowerCase();
+  return IMAGE_EXTS.has(ext);
+}
+
+/**
+ * Regex matching shell commands that may mutate filesystem or git state.
+ * 命中任一即触发文件浏览器与 git 面板自动刷新（ToolFileChangeController 的 shell_command 路径依赖）。
+ *
+ * 覆盖类别：
+ * - delete：rm（含 rm -rf）、rmdir（删空目录）、unlink（POSIX 单文件删除）、find ... -delete
+ * - create/move：mkdir、mv、cp、touch、ln
+ * - metadata：chmod、chown
+ * - package/archive：npm/yarn/pnpm install/uninstall、pip install、tar、unzip、curl -o、wget
+ * - redirect write：> 与 >>（排除 2>、>= 等由 [^>]>(?!>)/>> 处理）
+ * - git mutating：checkout/reset/stash/merge/rebase/cherry-pick/restore/clean/rm
+ *
+ * 设计取舍（trade-off）：
+ *   \b 单词边界不能区分"作为命令"还是"作为参数/字面量"，因此 `echo unlink` 之类
+ *   会被命中。文件浏览器额外刷新成本极低（一次 GET），宁可多刷不漏刷。
+ *
+ * find -delete 子表达式 `\bfind\b[^|;&\n]*-delete\b` 限定单条命令内，
+ * 避免 `grep find . | echo "-delete"` 之类的跨管道/分号误匹配。
+ *
+ * @example
+ *   isMutatingCommand('rm -rf node_modules')           // true
+ *   isMutatingCommand('find . -name "*.log" -delete')  // true
+ *   isMutatingCommand('git status')                    // false
+ *   isMutatingCommand('echo hello')                    // false
+ */
+const MUTATING_CMD_RE = /\b(rm|rmdir|unlink|mkdir|mv|cp|touch|chmod|chown|ln|git\s+(checkout|reset|stash|merge|rebase|cherry-pick|restore|clean|rm)|npm\s+(install|uninstall|ci)|yarn\s+(add|remove)|pnpm\s+(add|remove|install)|pip\s+install|tar|unzip|curl\s+-[^\s]*o|wget)\b|\bfind\b[^|;&\n]*-delete\b|[^>]>(?!>)|>>/;
+
+/**
+ * @param {string} cmd  shell 命令字符串
+ * @returns {boolean}   true 表示命令可能修改文件树或 git 状态
+ */
+export function isMutatingCommand(cmd) {
+  return MUTATING_CMD_RE.test(cmd);
+}