feishu-codex-console 1.0.0-beta.6

package/dist/config.js

@@ -0,0 +1,198 @@
+import { existsSync, realpathSync } from "node:fs";
+import { homedir } from "node:os";
+import path from "node:path";
+function csv(value) {
+    return (value ?? "")
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean);
+}
+function bool(value, fallback) {
+    if (value === undefined || value.trim() === "")
+        return fallback;
+    if (["1", "true", "yes", "on"].includes(value.toLowerCase()))
+        return true;
+    if (["0", "false", "no", "off"].includes(value.toLowerCase()))
+        return false;
+    throw new Error(`Invalid boolean value: ${value}`);
+}
+function positiveInt(value, fallback, name) {
+    if (value === undefined || value.trim() === "")
+        return fallback;
+    const parsed = Number.parseInt(value, 10);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+        throw new Error(`${name} must be a positive integer`);
+    }
+    return parsed;
+}
+function optionalEnum(value, allowed, name) {
+    if (!value)
+        return undefined;
+    if (!allowed.includes(value)) {
+        throw new Error(`${name} must be one of: ${allowed.join(", ")}`);
+    }
+    return value;
+}
+function safeInstanceId(value) {
+    const normalized = (value?.trim() || "default")
+        .toLocaleLowerCase()
+        .replace(/[^a-z0-9_-]+/g, "-")
+        .replace(/^-+|-+$/g, "")
+        .slice(0, 40);
+    if (!normalized)
+        throw new Error("BRIDGE_INSTANCE_ID must contain letters or numbers");
+    return normalized;
+}
+function projectAcl(value) {
+    if (!value?.trim())
+        return new Map();
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new Error("FEISHU_PROJECT_ACL_JSON must be valid JSON");
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("FEISHU_PROJECT_ACL_JSON must be an object of project selectors to open_id arrays");
+    }
+    const result = new Map();
+    for (const [selector, actors] of Object.entries(parsed)) {
+        if (!Array.isArray(actors) || actors.some((actor) => typeof actor !== "string" || !actor.trim())) {
+            throw new Error(`FEISHU_PROJECT_ACL_JSON entry ${selector} must be an array of open_ids`);
+        }
+        result.set(selector.trim(), new Set(actors.map((actor) => actor.trim())));
+    }
+    return result;
+}
+function memberLabels(value) {
+    if (!value?.trim())
+        return new Map();
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new Error("FEISHU_MEMBER_LABELS_JSON must be valid JSON");
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        throw new Error("FEISHU_MEMBER_LABELS_JSON must be an object of open_ids to display names");
+    }
+    const result = new Map();
+    for (const [memberId, label] of Object.entries(parsed)) {
+        if (!memberId.trim() || typeof label !== "string" || !label.trim()) {
+            throw new Error("FEISHU_MEMBER_LABELS_JSON keys and display names must be non-empty strings");
+        }
+        if (label.trim().length > 60) {
+            throw new Error(`FEISHU_MEMBER_LABELS_JSON display name for ${memberId} is too long`);
+        }
+        result.set(memberId.trim(), label.trim());
+    }
+    return result;
+}
+export function loadConfig(env = process.env, projectDir = process.cwd()) {
+    const configVersion = positiveInt(env.BRIDGE_CONFIG_VERSION, 1, "BRIDGE_CONFIG_VERSION");
+    if (configVersion !== 1) {
+        throw new Error(`BRIDGE_CONFIG_VERSION ${configVersion} is newer than this bridge supports (1)`);
+    }
+    const senderIds = csv(env.ALLOWED_FEISHU_OPEN_IDS);
+    if (senderIds.length === 0) {
+        throw new Error("ALLOWED_FEISHU_OPEN_IDS is required. Refusing to start an unrestricted remote coding bot.");
+    }
+    const requestedWorkdir = path.resolve(env.CODEX_WORKDIR || projectDir);
+    if (!existsSync(requestedWorkdir)) {
+        throw new Error(`CODEX_WORKDIR does not exist: ${requestedWorkdir}`);
+    }
+    const workdir = realpathSync(requestedWorkdir);
+    const configuredRoots = csv(env.CODEX_PROJECT_ROOTS);
+    const projectRoots = [
+        ...new Set((configuredRoots.length > 0 ? configuredRoots : [workdir]).map((root) => {
+            const resolved = path.resolve(root);
+            if (!existsSync(resolved)) {
+                throw new Error(`CODEX_PROJECT_ROOTS entry does not exist: ${resolved}`);
+            }
+            return realpathSync(resolved);
+        })),
+    ];
+    if (!projectRoots.some((root) => isWithin(root, workdir)))
+        projectRoots.push(workdir);
+    const sandboxMode = optionalEnum(env.CODEX_SANDBOX_MODE || "workspace-write", ["read-only", "workspace-write", "danger-full-access"], "CODEX_SANDBOX_MODE");
+    if (!sandboxMode)
+        throw new Error("CODEX_SANDBOX_MODE is required");
+    const operatorSandboxMode = optionalEnum(env.CODEX_OPERATOR_SANDBOX_MODE ||
+        (sandboxMode === "danger-full-access" ? "workspace-write" : sandboxMode), ["read-only", "workspace-write", "danger-full-access"], "CODEX_OPERATOR_SANDBOX_MODE");
+    if (!operatorSandboxMode)
+        throw new Error("CODEX_OPERATOR_SANDBOX_MODE is required");
+    const sandboxRank = { "read-only": 0, "workspace-write": 1, "danger-full-access": 2 };
+    if (sandboxRank[operatorSandboxMode] > sandboxRank[sandboxMode]) {
+        throw new Error("CODEX_OPERATOR_SANDBOX_MODE cannot exceed CODEX_SANDBOX_MODE");
+    }
+    const webSearchMode = optionalEnum(env.CODEX_WEB_SEARCH_MODE || "disabled", ["disabled", "cached", "live"], "CODEX_WEB_SEARCH_MODE");
+    if (!webSearchMode)
+        throw new Error("CODEX_WEB_SEARCH_MODE is required");
+    const codexHome = path.resolve(env.CODEX_HOME?.trim() || path.join(homedir(), ".codex"));
+    const dataDir = path.resolve(env.BRIDGE_DATA_DIR?.trim() || path.join(projectDir, "var"));
+    const instanceId = safeInstanceId(env.BRIDGE_INSTANCE_ID);
+    const adminIds = csv(env.FEISHU_ADMIN_OPEN_IDS);
+    const bundledLarkCli = path.join(projectDir, "node_modules", ".bin", "lark-cli");
+    const reasoningEffort = optionalEnum(env.CODEX_REASONING_EFFORT, ["minimal", "low", "medium", "high", "xhigh", "ultra"], "CODEX_REASONING_EFFORT");
+    const config = {
+        configVersion: 1,
+        projectDir: realpathSync(projectDir),
+        dataDir,
+        instanceId,
+        serviceLabel: `com.feishu-codex-bridge.${instanceId}`,
+        workdir,
+        projectRoots,
+        projectScanDepth: positiveInt(env.CODEX_PROJECT_SCAN_DEPTH, 8, "CODEX_PROJECT_SCAN_DEPTH"),
+        maxProjects: positiveInt(env.MAX_CODEX_PROJECTS, 200, "MAX_CODEX_PROJECTS"),
+        syncSavedProjects: bool(env.CODEX_SYNC_SAVED_PROJECTS, false),
+        codexProjectStateFile: path.resolve(env.CODEX_PROJECT_STATE_FILE?.trim() || path.join(codexHome, ".codex-global-state.json")),
+        databaseFile: env.BRIDGE_DATABASE_FILE
+            ? path.resolve(projectDir, env.BRIDGE_DATABASE_FILE)
+            : path.join(dataDir, "state.sqlite"),
+        stateFile: env.BRIDGE_STATE_FILE
+            ? path.resolve(projectDir, env.BRIDGE_STATE_FILE)
+            : path.join(dataDir, "state.json"),
+        larkCliPath: env.LARK_CLI_PATH || (existsSync(bundledLarkCli) ? bundledLarkCli : "lark-cli"),
+        allowedSenderIds: new Set(senderIds),
+        adminSenderIds: new Set(adminIds.length > 0 ? adminIds : senderIds),
+        viewerSenderIds: new Set(csv(env.FEISHU_VIEWER_OPEN_IDS)),
+        allowedChatIds: new Set(csv(env.ALLOWED_FEISHU_CHAT_IDS)),
+        groupSessionScope: optionalEnum(env.FEISHU_GROUP_SESSION_SCOPE || "member", ["member", "chat"], "FEISHU_GROUP_SESSION_SCOPE") ?? "member",
+        projectAcl: projectAcl(env.FEISHU_PROJECT_ACL_JSON),
+        memberLabels: memberLabels(env.FEISHU_MEMBER_LABELS_JSON),
+        botMentionNames: csv(env.FEISHU_BOT_MENTION_NAMES),
+        sandboxMode,
+        operatorSandboxMode,
+        skipGitRepoCheck: bool(env.CODEX_SKIP_GIT_REPO_CHECK, false),
+        networkAccessEnabled: bool(env.CODEX_NETWORK_ACCESS, false),
+        webSearchMode,
+        multiAgentEnabled: bool(env.CODEX_MULTI_AGENT_ENABLED, false),
+        maxReplyChars: positiveInt(env.MAX_REPLY_CHARS, 12_000, "MAX_REPLY_CHARS"),
+        codexTimeoutMs: positiveInt(env.CODEX_TIMEOUT_MS, 20 * 60_000, "CODEX_TIMEOUT_MS"),
+        maxSeenEvents: positiveInt(env.MAX_SEEN_EVENTS, 2_000, "MAX_SEEN_EVENTS"),
+        maxConcurrentTasks: positiveInt(env.MAX_CONCURRENT_TASKS, 2, "MAX_CONCURRENT_TASKS"),
+        maxQueuedPerConversation: positiveInt(env.MAX_QUEUED_PER_CONVERSATION, 5, "MAX_QUEUED_PER_CONVERSATION"),
+        maxAttachmentBytes: positiveInt(env.MAX_ATTACHMENT_BYTES, 20 * 1024 * 1024, "MAX_ATTACHMENT_BYTES"),
+        maxTextAttachmentBytes: positiveInt(env.MAX_TEXT_ATTACHMENT_BYTES, 128 * 1024, "MAX_TEXT_ATTACHMENT_BYTES"),
+        attachmentRetentionHours: positiveInt(env.ATTACHMENT_RETENTION_HOURS, 72, "ATTACHMENT_RETENTION_HOURS"),
+        confirmationTtlMinutes: positiveInt(env.EXTERNAL_CONFIRMATION_TTL_MINUTES, 10, "EXTERNAL_CONFIRMATION_TTL_MINUTES"),
+        maxLogBytes: positiveInt(env.MAX_LOG_BYTES, 10 * 1024 * 1024, "MAX_LOG_BYTES"),
+        codexAllowedEnvVars: csv(env.CODEX_ALLOWED_ENV_VARS),
+        logMessageContent: bool(env.LOG_MESSAGE_CONTENT, false),
+        completionNotifications: bool(env.FEISHU_COMPLETION_NOTIFICATIONS, false),
+        autoOnboarding: bool(env.FEISHU_AUTO_ONBOARDING, true),
+    };
+    if (env.CODEX_MODEL?.trim())
+        config.model = env.CODEX_MODEL.trim();
+    if (env.CODEX_CLI_PATH?.trim())
+        config.codexCliPath = path.resolve(env.CODEX_CLI_PATH.trim());
+    if (reasoningEffort)
+        config.reasoningEffort = reasoningEffort;
+    return config;
+}
+function isWithin(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
+}

package/dist/confirmation-card.js

@@ -0,0 +1,135 @@
+import { redactSensitiveText } from "./redaction.js";
+const ACTION_LABELS = {
+    commit: "提交代码",
+    push: "推送远端",
+    deploy: "发布 / 部署",
+    pull_request: "创建 / 合并 PR",
+};
+export function renderExternalConfirmationCard(requestId, prompt, projectLabel, actions, state = "pending", ttlMinutes = 10) {
+    const labels = actions.map((action) => ACTION_LABELS[action]).join("、");
+    const elements = [
+        {
+            tag: "column_set",
+            element_id: "risk_summary",
+            flex_mode: "none",
+            columns: [
+                {
+                    tag: "column",
+                    width: "weighted",
+                    weight: 1,
+                    background_style: state === "pending" ? "orange-50" : "grey-50",
+                    padding: "12px 12px 12px 12px",
+                    vertical_spacing: "4px",
+                    elements: [
+                        {
+                            tag: "markdown",
+                            content: `**外部动作**\n${safeText(labels)}\n\n<font color='grey'>项目：${safeText(projectLabel)}</font>`,
+                        },
+                    ],
+                },
+            ],
+        },
+        {
+            tag: "markdown",
+            element_id: "request_text",
+            content: `**原始任务**\n${safeText(truncate(prompt, 1_500))}`,
+        },
+    ];
+    if (state === "pending") {
+        elements.push({
+            tag: "column_set",
+            element_id: "confirm_actions",
+            flex_mode: "none",
+            horizontal_spacing: "8px",
+            columns: [
+                buttonColumn("approve_btn", "确认并执行", "danger_filled", requestId, "approve_external", {
+                    title: "确认执行外部动作？",
+                    text: `Codex 将获得本次 ${labels} 的明确授权。`,
+                }),
+                buttonColumn("reject_btn", "取消", "default", requestId, "reject_external"),
+            ],
+        });
+    }
+    else {
+        elements.push({
+            tag: "markdown",
+            element_id: "decision",
+            text_align: "center",
+            content: state === "approved"
+                ? "<font color='green'>已确认，任务已进入执行队列</font>"
+                : state === "expired"
+                    ? "<font color='grey'>确认已过期，请重新发送任务</font>"
+                    : "<font color='grey'>已取消，本次任务未执行</font>",
+        });
+    }
+    return {
+        schema: "2.0",
+        config: {
+            update_multi: true,
+            width_mode: "default",
+            enable_forward: false,
+            summary: { content: `Codex 外部动作确认 · ${projectLabel}` },
+        },
+        header: {
+            title: { tag: "plain_text", content: "需要你的确认" },
+            subtitle: {
+                tag: "plain_text",
+                content: `外部动作不会被静默执行；确认 ${ttlMinutes} 分钟内有效`,
+            },
+            template: state === "pending" ? "orange" : state === "approved" ? "green" : "grey",
+            icon: { tag: "standard_icon", token: "warning_colorful" },
+            text_tag_list: [
+                {
+                    tag: "text_tag",
+                    text: { tag: "plain_text", content: "完全访问门禁" },
+                    color: "orange",
+                },
+            ],
+        },
+        body: {
+            direction: "vertical",
+            padding: "12px 12px 20px 12px",
+            vertical_spacing: "12px",
+            elements,
+        },
+    };
+}
+function buttonColumn(elementId, label, type, requestId, action, confirm) {
+    const button = {
+        tag: "button",
+        element_id: elementId,
+        text: { tag: "plain_text", content: label },
+        type,
+        width: "fill",
+        behaviors: [
+            {
+                type: "callback",
+                value: { bridge: "feishu-codex-v3", action, request_id: requestId },
+            },
+        ],
+    };
+    if (confirm) {
+        button.confirm = {
+            title: { tag: "plain_text", content: confirm.title },
+            text: { tag: "plain_text", content: confirm.text },
+        };
+    }
+    return {
+        tag: "column",
+        width: "weighted",
+        weight: 1,
+        elements: [button],
+    };
+}
+function safeText(value) {
+    return redactSensitiveText(value)
+        .replaceAll("<at", "＜at")
+        .replaceAll("</at>", "＜/at＞")
+        .replaceAll("<person", "＜person")
+        .replaceAll("</person>", "＜/person＞");
+}
+function truncate(value, max) {
+    if (value.length <= max)
+        return value;
+    return `${value.slice(0, max - 1)}…`;
+}

package/dist/control-card.js

@@ -0,0 +1,345 @@
+import { renderAccountQuotaSummary } from "./account-quota-card.js";
+export function renderControlCenterCard(snapshot) {
+    const models = modelOptions(snapshot.models, snapshot.selectedModel);
+    const selected = snapshot.models.find((model) => model.model === snapshot.selectedModel) ??
+        snapshot.models.find((model) => model.isDefault);
+    const readOnly = snapshot.role === "viewer";
+    const catalogEditable = !readOnly && snapshot.modelCatalogAvailable;
+    const efforts = uniqueEfforts(selected?.supportedReasoningEfforts.length
+        ? selected.supportedReasoningEfforts
+        : ["minimal", "low", "medium", "high", "xhigh"]);
+    const selectedEffort = efforts.includes(snapshot.selectedEffort)
+        ? snapshot.selectedEffort
+        : selected?.defaultReasoningEffort ?? efforts[0] ?? snapshot.selectedEffort;
+    return {
+        schema: "2.0",
+        config: {
+            update_multi: true,
+            width_mode: "default",
+            enable_forward: false,
+            summary: { content: `Codex 控制中心 · ${safe(snapshot.projectName)}` },
+        },
+        header: {
+            title: { tag: "plain_text", content: "Codex 控制中心" },
+            subtitle: {
+                tag: "plain_text",
+                content: readOnly ? "只读查看当前会话设置" : "模型、推理与权限会在下一轮真实生效",
+            },
+            template: "turquoise",
+            icon: { tag: "standard_icon", token: "settings_colorful" },
+            text_tag_list: [
+                {
+                    tag: "text_tag",
+                    text: { tag: "plain_text", content: roleLabel(snapshot.role) },
+                    color: snapshot.role === "admin" ? "violet" : "blue",
+                },
+                {
+                    tag: "text_tag",
+                    text: { tag: "plain_text", content: safe(snapshot.projectName).slice(0, 28) },
+                    color: "turquoise",
+                },
+                ...(!snapshot.modelCatalogAvailable
+                    ? [
+                        {
+                            tag: "text_tag",
+                            text: { tag: "plain_text", content: "兼容模式" },
+                            color: "neutral",
+                        },
+                    ]
+                    : []),
+            ],
+        },
+        body: {
+            direction: "vertical",
+            padding: "12px 12px 18px 12px",
+            vertical_spacing: "12px",
+            elements: [
+                ...(snapshot.feedback ? [feedbackPanel(snapshot.feedback)] : []),
+                ...(snapshot.accountQuota
+                    ? [renderAccountQuotaSummary(snapshot.accountQuota, "cq")]
+                    : []),
+                selectorPanel("model_panel", "模型", readOnly
+                    ? "由会话操作者管理"
+                    : snapshot.modelCatalogAvailable
+                        ? "选择 Codex 模型"
+                        : "当前 Codex 未提供模型目录，保留已有配置", !catalogEditable
+                    ? readOnlyValue("model_value", snapshot.selectedModel === "__default__"
+                        ? `Codex 默认${selected ? ` · ${selected.displayName}` : ""}`
+                        : selected?.displayName ?? snapshot.selectedModel)
+                    : {
+                        tag: "select_static",
+                        element_id: "model_select",
+                        name: "model",
+                        width: "fill",
+                        initial_option: snapshot.selectedModel,
+                        options: models,
+                        behaviors: [callback("select_model")],
+                    }),
+                selectorPanel("effort_panel", "推理强度", snapshot.modelCatalogAvailable
+                    ? effortDescription(selectedEffort)
+                    : "模型能力未知，沿用当前配置", !catalogEditable
+                    ? readOnlyValue("effort_value", reasoningEffortLabel(selectedEffort))
+                    : {
+                        tag: "select_static",
+                        element_id: "effort_select",
+                        name: "effort",
+                        width: "fill",
+                        initial_option: selectedEffort,
+                        options: efforts.map((effort) => ({
+                            text: { tag: "plain_text", content: reasoningEffortLabel(effort) },
+                            value: effort,
+                        })),
+                        behaviors: [callback("select_effort")],
+                    }),
+                selectorPanel("access_panel", "默认任务权限", `${sandboxDescription(snapshot.selectedSandbox)}；长期设置最高为工作区写入`, readOnly
+                    ? readOnlyValue("access_value", sandboxLabel(snapshot.selectedSandbox))
+                    : {
+                        tag: "select_static",
+                        element_id: "access_select",
+                        name: "sandbox",
+                        width: "fill",
+                        initial_option: snapshot.selectedSandbox,
+                        options: snapshot.sandboxModes.map((mode) => ({
+                            text: { tag: "plain_text", content: sandboxLabel(mode) },
+                            value: mode,
+                        })),
+                        behaviors: [callback("select_sandbox")],
+                    }),
+                ...(snapshot.fullAccessMaximum
+                    ? [
+                        fullAccessPanel(readOnly, snapshot.fullAccessLeaseLabel, snapshot.fullAccessSessionAvailable === true),
+                    ]
+                    : []),
+                actionGrid("control_actions", [
+                    button("历史会话", "settings_sessions", "default"),
+                    button("任务中心", "settings_tasks", "default"),
+                    ...(readOnly ? [] : [button("新会话", "settings_new", "primary")]),
+                    button("刷新", "settings_refresh", "default"),
+                ]),
+                {
+                    tag: "markdown",
+                    element_id: "control_safety",
+                    text_size: "notation",
+                    text_align: "center",
+                    content: readOnly
+                        ? "<font color='grey'>只读成员不能修改设置、创建会话或运行 Codex 任务。</font>"
+                        : "<font color='grey'>完全访问只通过临时租约启用；提交、推送、部署和 PR 始终需要单独确认。</font>",
+                },
+            ],
+        },
+    };
+}
+function fullAccessPanel(readOnly, activeLease, sessionAvailable) {
+    const elements = [
+        {
+            tag: "markdown",
+            element_id: "full_access_title",
+            content: `**临时完全访问**\n<font color='grey'>${activeLease ? `当前：${safe(activeLease)}；租约到期后自动回退` : "当前未启用；租约到期后自动回到默认任务权限"}</font>`,
+        },
+    ];
+    if (!readOnly) {
+        elements.push(actionGrid("lease_grant_actions", [
+            button("下一任务", "lease_full_once", "danger", {
+                title: "授权下一任务完全访问？",
+                text: "30 分钟内启动的下一项任务可执行本机命令，用完立即失效。",
+            }),
+            button("30 分钟", "lease_full_30m", "danger", {
+                title: "授权 30 分钟完全访问？",
+                text: "当前成员会话在 30 分钟内启动的任务都可使用完全访问。",
+            }),
+            ...(sessionAvailable
+                ? [
+                    button("当前会话", "lease_full_session", "danger", {
+                        title: "授权当前 Codex 会话？",
+                        text: "仅绑定当前 thread，最长 60 分钟；切换或重置会话后立即失效。",
+                    }),
+                ]
+                : []),
+        ]));
+        if (activeLease) {
+            elements.push(actionGrid("lease_revoke_actions", [
+                button("立即撤销", "lease_full_revoke", "default", {
+                    title: "撤销临时完全访问？",
+                    text: "不会中断已启动任务，但后续任务立即回到默认权限。",
+                }),
+            ]));
+        }
+    }
+    return {
+        tag: "column_set",
+        element_id: "full_access_panel",
+        flex_mode: "none",
+        columns: [
+            {
+                tag: "column",
+                width: "weighted",
+                weight: 1,
+                background_style: activeLease ? "orange-50" : "grey-50",
+                padding: "12px 12px 12px 12px",
+                vertical_spacing: "10px",
+                elements,
+            },
+        ],
+    };
+}
+function readOnlyValue(elementId, value) {
+    return {
+        tag: "markdown",
+        element_id: elementId,
+        content: `**${safe(value)}**`,
+    };
+}
+function selectorPanel(id, title, description, selector) {
+    return {
+        tag: "column_set",
+        element_id: id,
+        flex_mode: "none",
+        columns: [
+            {
+                tag: "column",
+                width: "weighted",
+                weight: 1,
+                background_style: "grey-50",
+                padding: "12px 12px 12px 12px",
+                vertical_spacing: "8px",
+                elements: [
+                    {
+                        tag: "markdown",
+                        element_id: `${id}_title`,
+                        content: `**${title}**\n<font color='grey'>${safe(description)}</font>`,
+                    },
+                    selector,
+                ],
+            },
+        ],
+    };
+}
+function feedbackPanel(feedback) {
+    return {
+        tag: "column_set",
+        element_id: "control_feedback",
+        flex_mode: "none",
+        columns: [
+            {
+                tag: "column",
+                width: "weighted",
+                weight: 1,
+                background_style: "green-50",
+                padding: "10px 12px 10px 12px",
+                elements: [
+                    {
+                        tag: "markdown",
+                        element_id: "feedback_text",
+                        content: `<font color='green'>${safe(feedback)}</font>`,
+                    },
+                ],
+            },
+        ],
+    };
+}
+function modelOptions(models, selectedModel) {
+    const defaultModel = models.find((model) => model.isDefault);
+    const options = [
+        {
+            text: {
+                tag: "plain_text",
+                content: `Codex 默认${defaultModel ? ` · ${defaultModel.displayName}` : ""}`.slice(0, 80),
+            },
+            value: "__default__",
+        },
+        ...models.slice(0, 39).map((model) => ({
+            text: {
+                tag: "plain_text",
+                content: `${model.displayName}${model.isDefault ? " · 固定" : ""}`.slice(0, 80),
+            },
+            value: model.model,
+        })),
+    ];
+    if (!options.some((option) => option.value === selectedModel)) {
+        options.unshift({
+            text: { tag: "plain_text", content: `${selectedModel} · 当前配置` },
+            value: selectedModel,
+        });
+    }
+    return options;
+}
+function callback(action) {
+    return { type: "callback", value: { bridge: "feishu-codex-v5", action } };
+}
+function button(text, action, type, confirm) {
+    const result = {
+        tag: "button",
+        element_id: action.slice(0, 20),
+        text: { tag: "plain_text", content: text },
+        type: type === "primary" ? "primary_filled" : type === "danger" ? "danger_filled" : "default",
+        width: "fill",
+        behaviors: [callback(action)],
+    };
+    if (confirm) {
+        result.confirm = {
+            title: { tag: "plain_text", content: confirm.title },
+            text: { tag: "plain_text", content: confirm.text },
+        };
+    }
+    return result;
+}
+function actionGrid(id, actions) {
+    return {
+        tag: "column_set",
+        element_id: id,
+        flex_mode: "none",
+        horizontal_spacing: "8px",
+        columns: actions.map((action) => ({
+            tag: "column",
+            width: "weighted",
+            weight: 1,
+            elements: [action],
+        })),
+    };
+}
+function uniqueEfforts(values) {
+    return [...new Set(values)];
+}
+export function reasoningEffortLabel(value) {
+    return {
+        minimal: "最低",
+        low: "轻度",
+        medium: "中",
+        high: "高",
+        xhigh: "极高",
+        ultra: "最高",
+    }[value];
+}
+function effortDescription(value) {
+    return `当前 ${reasoningEffortLabel(value)}；强度越高通常耗时越长`;
+}
+function sandboxLabel(value) {
+    if (value === "read-only")
+        return "只读分析";
+    if (value === "workspace-write")
+        return "工作区写入";
+    return "完全访问";
+}
+function sandboxDescription(value) {
+    if (value === "read-only")
+        return "只能读取和分析，不修改文件";
+    if (value === "workspace-write")
+        return "可修改当前项目，越界操作需要确认";
+    return "可执行本机命令；高风险外部动作仍需二次确认";
+}
+function roleLabel(role) {
+    if (role === "admin")
+        return "管理员";
+    if (role === "operator")
+        return "操作者";
+    return "只读成员";
+}
+function safe(value) {
+    return value
+        .replaceAll("&", "＆")
+        .replaceAll("<", "＜")
+        .replaceAll(">", "＞")
+        .replaceAll("*", "＊")
+        .replaceAll("_", "＿")
+        .replaceAll("`", "｀");
+}