lark-remote 0.1.5 → 0.1.6

package/dist/card/run-state.js

@@ -32,8 +32,204 @@ export function reduceRunState(state, event) {
         return reducePlanEvent(state, event);
     if (event.type === 'file_change')
         return reduceFileChangeEvent(state, event);
+    if (event.type === 'turn_started')
+        return reduceTurnStartedEvent(state, event);
+    if (event.type === 'turn_diff')
+        return reduceTurnDiffEvent(state, event);
+    if (event.type === 'approval_requested') {
+        const approvals = state.approvals ?? [];
+        const next = { view: event.view, expired: false };
+        const idx = approvals.findIndex((a) => a.view.requestId === event.requestId);
+        if (idx >= 0) {
+            // 同一 requestId 重复到达：原地替换，保持槽位顺序。
+            return {
+                ...state,
+                approvals: approvals.map((a, i) => (i === idx ? next : a)),
+            };
+        }
+        return { ...state, approvals: [...approvals, next] };
+    }
+    if (event.type === 'approval_resolved') {
+        return {
+            ...state,
+            approvals: (state.approvals ?? []).filter((a) => a.view.requestId !== event.requestId),
+        };
+    }
+    if (event.type === 'approval_view_updated') {
+        return {
+            ...state,
+            approvals: (state.approvals ?? []).map((a) => a.view.requestId === event.requestId ? { ...a, view: event.view } : a),
+        };
+    }
+    if (event.type === 'approval_expired') {
+        return {
+            ...state,
+            approvals: (state.approvals ?? []).map((a) => a.view.requestId === event.requestId ? { ...a, expired: true } : a),
+        };
+    }
     return state;
 }
+/** Handle app-server turn_started — records the operation kind (turn vs compact). */
+function reduceTurnStartedEvent(state, event) {
+    if (event.type !== 'turn_started')
+        return state;
+    return {
+        ...state,
+        operationKind: event.operationKind,
+        footer: state.footer ?? 'thinking',
+    };
+}
+/**
+ * Handle app-server turn_diff events. The translator emits FULL per-item
+ * snapshots (accumulated text/reasoning/tool output/plan, current file-change
+ * set). Each snapshot is scoped to a thread item (event.itemId); the block is
+ * replaced in place to avoid duplication, and a NEW block is appended on the
+ * item's first sight — so interleaved items keep their real chronology and
+ * the active streaming content sits at the bottom, like the exec path.
+ */
+function reduceTurnDiffEvent(state, event) {
+    if (event.type !== 'turn_diff')
+        return state;
+    let next = state;
+    const ts = event.timestamp;
+    const complete = event.complete === true;
+    if (event.text !== undefined) {
+        const blocks = markThinkingInactive(next.blocks);
+        next = {
+            ...next,
+            blocks: keepLatestBlocks(upsertSnapshotBlock(blocks, (b) => b.kind === 'text' && b.itemId === event.itemId, () => ({
+                kind: 'text',
+                itemId: event.itemId,
+                content: keepLatest(event.text, MAX_TEXT_CHARS),
+                timestamp: ts,
+                ...(complete ? { completedAt: ts } : {}),
+            }), (existing) => {
+                const textBlock = existing;
+                return {
+                    ...textBlock,
+                    content: keepLatest(event.text, MAX_TEXT_CHARS),
+                    ...(complete ? { completedAt: ts } : {}),
+                };
+            }, !complete)),
+            footer: 'streaming',
+        };
+    }
+    if (event.reasoning !== undefined) {
+        next = {
+            ...next,
+            blocks: keepLatestBlocks(upsertSnapshotBlock(next.blocks, (b) => b.kind === 'thinking' && b.itemId === event.itemId, () => ({
+                kind: 'thinking',
+                itemId: event.itemId,
+                content: keepLatest(event.reasoning, MAX_REASONING_CHARS),
+                active: !complete,
+                timestamp: ts,
+                ...(complete ? { completedAt: ts } : {}),
+            }), (existing) => {
+                const thinkingBlock = existing;
+                return {
+                    ...thinkingBlock,
+                    content: keepLatest(event.reasoning, MAX_REASONING_CHARS),
+                    active: !complete,
+                    ...(complete ? { completedAt: ts } : {}),
+                };
+            }, !complete)),
+            footer: 'thinking',
+        };
+    }
+    if (event.toolOutput !== undefined) {
+        next = {
+            ...next,
+            blocks: keepLatestBlocks(upsertSnapshotBlock(next.blocks, (b) => b.kind === 'tool' && b.tool.id === event.itemId, () => ({
+                kind: 'tool',
+                tool: {
+                    id: event.itemId,
+                    name: 'command',
+                    input: '',
+                    output: keepLatest(event.toolOutput, MAX_TOOL_DETAIL_CHARS),
+                    status: complete ? (event.toolStatus ?? 'ok') : 'running',
+                    startedAt: ts,
+                    ...(complete ? { completedAt: ts } : {}),
+                },
+            }), (existing) => ({
+                kind: 'tool',
+                tool: {
+                    ...existing.tool,
+                    output: keepLatest(event.toolOutput, MAX_TOOL_DETAIL_CHARS),
+                    status: complete
+                        ? (event.toolStatus ?? 'ok')
+                        : existing.tool.status,
+                    ...(complete ? { completedAt: ts } : {}),
+                },
+            }), !complete)),
+            footer: 'tool_running',
+        };
+    }
+    if (event.plan !== undefined) {
+        const newPlan = keepLatest(event.plan, MAX_REASONING_CHARS * 2);
+        next = {
+            ...next,
+            plan: newPlan,
+            blocks: keepLatestBlocks(upsertSnapshotBlock(next.blocks, (b) => b.kind === 'plan' && b.itemId === event.itemId, () => ({
+                kind: 'plan',
+                itemId: event.itemId,
+                content: newPlan,
+                active: !complete,
+                timestamp: ts,
+                ...(complete ? { completedAt: ts } : {}),
+            }), (existing) => {
+                const planBlock = existing;
+                return {
+                    ...planBlock,
+                    content: newPlan,
+                    active: !complete,
+                    ...(complete ? { completedAt: ts } : {}),
+                };
+            }, !complete)),
+        };
+    }
+    if (event.fileChanges !== undefined) {
+        let blocks = next.blocks;
+        for (const fc of event.fileChanges) {
+            const fileBlock = {
+                kind: 'file_change',
+                itemId: event.itemId,
+                path: fc.path,
+                operation: fc.kind === 'add' ? 'create' : fc.kind === 'delete' ? 'delete' : 'edit',
+                diff: fc.diff,
+                timestamp: ts,
+                ...(complete ? { completedAt: ts } : {}),
+            };
+            // 同一 item 的同一路径原地替换（权威 diff 校正），新路径/新 item 追加。
+            blocks = upsertSnapshotBlock(blocks, (b) => b.kind === 'file_change' && b.itemId === event.itemId && b.path === fc.path, () => fileBlock, () => fileBlock, !complete);
+        }
+        next = { ...next, blocks: keepLatestBlocks(blocks) };
+    }
+    return next;
+}
+/**
+ * Replace the last block matching `predicate` with `make`; if none matches,
+ * append a block built by `fallback`. Snapshot semantics for app-server
+ * turn_diff streams.
+ *
+ * `moveToEndWhenNotLast`: 当命中块不在数组末尾且为流式更新（complete=false）
+ * 时，把更新后的块移到末尾。正常协议下 item 串行、流式块总是最后一个，
+ * 此分支不触发；若真实 server 在同一个 item 上跨其他 item 续流 delta（违反
+ * item 生命周期），流式内容仍会出现在卡片底部，而不是钉在旧位置。
+ */
+function upsertSnapshotBlock(blocks, predicate, fallback, update, moveToEndWhenNotLast = false) {
+    for (let i = blocks.length - 1; i >= 0; i--) {
+        if (predicate(blocks[i])) {
+            const copy = blocks.slice();
+            copy[i] = update ? update(blocks[i]) : fallback();
+            if (moveToEndWhenNotLast && i < copy.length - 1) {
+                const [moved] = copy.splice(i, 1);
+                copy.push(moved);
+            }
+            return copy;
+        }
+    }
+    return [...blocks, fallback()];
+}
 /** Handle system init and compact_boundary events. */
 function reduceSystemEvent(state, event) {
     if (event.type !== 'system')
@@ -71,8 +267,13 @@ function reduceResultEvent(state, event) {
     const resultEvent = event;
     const incomingSubtype = event.subtype;
     const incomingErrorMsg = incomingSubtype === 'error' ? (resultEvent.errorMessage ?? 'Agent 返回错误结果') : undefined;
-    // 合并 subtype：error 优先（任一为 error 即 error）
-    const mergedSubtype = state.resultSubtype === 'error' || incomingSubtype === 'error' ? 'error' : 'success';
+    // 合并 subtype：error 优先，其次 interrupted（任一为 error 即 error；
+    // 否则任一为 interrupted 即 interrupted；interrupted 不得并入 success）。
+    const mergedSubtype = state.resultSubtype === 'error' || incomingSubtype === 'error'
+        ? 'error'
+        : state.resultSubtype === 'interrupted' || incomingSubtype === 'interrupted'
+            ? 'interrupted'
+            : 'success';
     // 合并 errorMsg：首个非 undefined 胜出（existing ?? incoming）
     const mergedErrorMsg = state.errorMsg ?? incomingErrorMsg;
     return {

package/dist/config/dir.js

@@ -79,7 +79,7 @@ export function printHelp() {
         'Options:',
         '  --config-dir <path>   自定义配置目录（默认 ~/.lark-remote，可用于同机多实例）',
         '  --settings <path>     指定 Claude 配置文件路径',
-        '  --dev                 开发模式：标记从源码 bun src/index.ts 启动（空闲超时自动停止据此选择拉起方式）',
+        '  --dev                 开发模式：标记从源码 bun src/index.ts 启动（看门狗据此选择拉起方式）',
         '  --update              升级到最新版本后退出（用于 cron/脚本自动化升级）',
         '  -h, --help            显示本帮助信息',
         '  -v, --version         显示版本号',

package/dist/config/index.d.ts

@@ -10,6 +10,8 @@ export declare const PI_THINKING_LEVELS: readonly ["off", "minimal", "low", "med
  * instead of re-literalizing `5000` (Clean Code P3-1, G25).
  */
 export declare const DEFAULT_STOP_GRACE_MS: 5000;
+/** Codex app-server turn idle timeout default (minutes). */
+export declare const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES: 10;
 /** 模型 ID → alias 映射。 */
 export declare const MODEL_ID_TO_ALIAS: Record<string, string>;
 /** alias → model ID 反向映射。 */
@@ -31,6 +33,26 @@ export declare const CodexConfigSchema: z.ZodObject<{
     modelProvider: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodString>;
     stopGraceMs: z.ZodDefault<z.ZodNumber>;
+    serviceMode: z.ZodOptional<z.ZodEnum<{
+        exec: "exec";
+        "app-server": "app-server";
+    }>>;
+    approvalPolicy: z.ZodOptional<z.ZodEnum<{
+        untrusted: "untrusted";
+        "on-request": "on-request";
+        never: "never";
+    }>>;
+    sandbox: z.ZodOptional<z.ZodEnum<{
+        "danger-full-access": "danger-full-access";
+        "read-only": "read-only";
+        "workspace-write": "workspace-write";
+    }>>;
+    appServer: z.ZodOptional<z.ZodObject<{
+        binary: z.ZodDefault<z.ZodString>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+        idleTtlMs: z.ZodDefault<z.ZodNumber>;
+        turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** OpenCode-specific configuration (run mode: opencode run --format json --auto). */
 declare const OpencodeConfigSchema: z.ZodObject<{
@@ -82,6 +104,26 @@ export declare const AppConfigSchema: z.ZodObject<{
             modelProvider: z.ZodOptional<z.ZodString>;
             reasoningEffort: z.ZodOptional<z.ZodString>;
             stopGraceMs: z.ZodDefault<z.ZodNumber>;
+            serviceMode: z.ZodOptional<z.ZodEnum<{
+                exec: "exec";
+                "app-server": "app-server";
+            }>>;
+            approvalPolicy: z.ZodOptional<z.ZodEnum<{
+                untrusted: "untrusted";
+                "on-request": "on-request";
+                never: "never";
+            }>>;
+            sandbox: z.ZodOptional<z.ZodEnum<{
+                "danger-full-access": "danger-full-access";
+                "read-only": "read-only";
+                "workspace-write": "workspace-write";
+            }>>;
+            appServer: z.ZodOptional<z.ZodObject<{
+                binary: z.ZodDefault<z.ZodString>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                idleTtlMs: z.ZodDefault<z.ZodNumber>;
+                turnIdleTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         opencode: z.ZodOptional<z.ZodObject<{
             providerID: z.ZodDefault<z.ZodString>;

package/dist/config/index.js

@@ -16,6 +16,7 @@ const DEFAULTS = {
     CLAUDE_MODEL: 'claude-opus-4-8',
     STOP_GRACE_MS: 5000,
     IDLE_WATCHDOG_MINUTES: 15,
+    TURN_IDLE_TIMEOUT_MINUTES: 10,
 };
 /**
  * Default SIGTERM→SIGKILL grace period (ms). Exported so runners (SpawningRunner)
@@ -23,6 +24,8 @@ const DEFAULTS = {
  * instead of re-literalizing `5000` (Clean Code P3-1, G25).
  */
 export const DEFAULT_STOP_GRACE_MS = DEFAULTS.STOP_GRACE_MS;
+/** Codex app-server turn idle timeout default (minutes). */
+export const DEFAULT_TURN_IDLE_TIMEOUT_MINUTES = DEFAULTS.TURN_IDLE_TIMEOUT_MINUTES;
 /** 模型 ID → alias 映射。 */
 export const MODEL_ID_TO_ALIAS = {
     'claude-opus-4-8': 'opus',
@@ -47,13 +50,24 @@ const ClaudeConfigSchema = z.object({
     // permissionMode 硬编码为 bypassPermissions（runner 内部），不通过 config 配置
     stopGraceMs: z.number().int().min(0).default(DEFAULTS.STOP_GRACE_MS),
 });
+/** Codex app-server connection configuration. */
+const CodexAppServerConfigSchema = z.object({
+    /** Path to the codex binary for app-server mode. */
+    binary: z.string().default('codex'),
+    /** Request timeout in milliseconds. */
+    requestTimeoutMs: z.number().int().min(0).default(60000),
+    /** Idle TTL for connection pool in milliseconds. */
+    idleTtlMs: z.number().int().min(0).default(1800000),
+    /** Turn idle timeout in minutes: no app-server output for this long triggers
+     *  turn/interrupt and fails the run. 0 disables the timeout. */
+    turnIdleTimeoutMinutes: z.number().int().min(0).default(DEFAULT_TURN_IDLE_TIMEOUT_MINUTES),
+});
 /** Codex-specific configuration. */
 export const CodexConfigSchema = z.object({
     /** model to use. Undefined → codex reads from its config.toml. */
     model: z.string().optional(),
     /** model provider, e.g. 'volcengine-coding-plan'. Undefined → codex reads from its config.toml. */
     modelProvider: z.string().optional(),
-    // approvalPolicy 和 sandboxPolicy 在 runner 内硬编码（exec 模式使用 approval_policy=never）
     /**
      * Reasoning effort level。codex 标准档位 minimal/low/medium/high/xhigh/max/ultra
      * 之外还接受 none 与模型自定义值（ReasoningEffort::Custom），目录声明什么就存什么
@@ -63,6 +77,14 @@ export const CodexConfigSchema = z.object({
     reasoningEffort: z.string().min(1).optional(),
     /** Stop grace period in milliseconds. */
     stopGraceMs: z.number().int().min(0).default(5000),
+    /** Service mode: 'exec' (spawn-per-message) or 'app-server' (persistent connection). */
+    serviceMode: z.enum(['exec', 'app-server']).optional(),
+    /** Approval policy (Codex 官方 AskForApproval 标准值). 仅 app-server 模式有效（exec 固定 approval_policy="never"）。 */
+    approvalPolicy: z.enum(['untrusted', 'on-request', 'never']).optional(),
+    /** Sandbox mode (Codex 官方 SandboxMode 标准值). 仅 app-server 模式有效（exec 固定 --sandbox danger-full-access）。 */
+    sandbox: z.enum(['read-only', 'workspace-write', 'danger-full-access']).optional(),
+    /** App-server connection configuration. */
+    appServer: CodexAppServerConfigSchema.optional(),
 });
 /** OpenCode-specific configuration (run mode: opencode run --format json --auto). */
 const OpencodeConfigSchema = z.object({

package/dist/connector/index.d.ts

@@ -68,6 +68,11 @@ export declare class FeishuConnector {
     /** Format error for logging without causing circular serialization */
     private formatError;
     addReaction(messageId: string, emoji: string): Promise<void>;
+    /**
+     * Remove a reaction by emoji (e.g. retract the Typing indicator).
+     * The SDK resolves the reaction id internally; missing reaction is a no-op.
+     */
+    removeReactionByEmoji(messageId: string, emoji: string): Promise<void>;
     /**
      * Upload a file to Feishu and send it to the specified chat.
      * Uses the im/v1/files upload API.

package/dist/connector/index.js

@@ -264,6 +264,18 @@ export class FeishuConnector {
             getLogger().error('[feishu] addReaction failed:', this.formatError(err));
         }
     }
+    /**
+     * Remove a reaction by emoji (e.g. retract the Typing indicator).
+     * The SDK resolves the reaction id internally; missing reaction is a no-op.
+     */
+    async removeReactionByEmoji(messageId, emoji) {
+        try {
+            await this.channel.removeReactionByEmoji(messageId, emoji);
+        }
+        catch (err) {
+            getLogger().error('[feishu] removeReactionByEmoji failed:', this.formatError(err));
+        }
+    }
     /**
      * Upload a file to Feishu and send it to the specified chat.
      * Uses the im/v1/files upload API.

package/dist/index.js

@@ -3,7 +3,7 @@ import { resolveAgentChoices, } from './runner/index.js';
 import { ensureConfig } from './config/wizard.js';
 import { parseCliArgs, resolveConfigDir, setConfigDir, printHelp, printVersion, } from './config/dir.js';
 import { FeishuConnector } from './connector/index.js';
-import { ClaudeRunner, CodexExecRunner, OpencodeExecRunner, PiRunner, KimiRunner, } from './runner/index.js';
+import { ClaudeRunner, createCodexRunner, OpencodeExecRunner, PiRunner, KimiRunner, } from './runner/index.js';
 import { AgentRegistry } from './runner/registry.js';
 import { probeAllAgents } from './runner/probe.js';
 import { SessionReaderRegistry, SessionStore } from './session/index.js';
@@ -21,11 +21,11 @@ import { classifyRejection } from './error-classification.js';
 import { WorkspaceStore } from './workspace/index.js';
 import { markdownDiv } from './card/collapsible.js';
 import { sessionEventPanel } from './router/card-helpers.js';
-import { newSessionButton, agentDisplayName } from './card/card-shared.js';
+import { newSessionButton, resumeCompactButton, agentDisplayName } from './card/card-shared.js';
 import path from 'node:path';
 import fs from 'node:fs';
 /** Send auto-resume card for a restored session */
-async function sendAutoResumeCard(connector, contact, cwd, session, state) {
+async function sendAutoResumeCard(connector, contact, cwd, session, state, compactSupported = false) {
     if (!contact.userId)
         return;
     const recipient = contact.chatId ?? contact.userId;
@@ -64,17 +64,21 @@ async function sendAutoResumeCard(connector, contact, cwd, session, state) {
         const usageStr = formatUsageStats(state.usage);
         elements.push(markdownDiv(usageStr));
     }
-    // Add new session button - use column_set+column (div+elements not supported in 2.0)
-    const newSessionBtn = newSessionButton();
+    // Add action buttons - use column_set+column (div+elements not supported in 2.0)
+    const actionButtons = [];
+    // Compact 按钮：仅 codex app-server 模式（runner 有 runCompact）且未在跑。
+    // 启动自动恢复时不会存在该会话的 activeRun，直接渲染。
+    if (compactSupported) {
+        actionButtons.push(resumeCompactButton(session.sessionId, state.agentKind ?? 'codex'));
+    }
+    actionButtons.push(newSessionButton());
     elements.push({
         tag: 'column_set',
-        columns: [
-            {
-                tag: 'column',
-                width: 'auto',
-                elements: [newSessionBtn],
-            },
-        ],
+        columns: actionButtons.map((btn) => ({
+            tag: 'column',
+            width: 'auto',
+            elements: [btn],
+        })),
     });
     const card = {
         schema: '2.0',
@@ -163,15 +167,17 @@ function initializeRunner(config, configDir, cliArgs) {
             workspace: ws,
         });
     });
-    // Register CodexExecRunner (codex exec --json, approval_policy=never).
-    // Factory reads latest config from container.current so runtime config changes
-    // (reasoningEffort, model, etc.) take effect after bridge.setConfig() + clearRunners().
+    // Register Codex runner. Factory reads latest config from container.current
+    // so runtime config changes (serviceMode, model, sandbox, approvalPolicy,
+    // reasoningEffort, etc.) take effect after bridge.setConfig() + clearRunners().
+    // serviceMode=app-server → CodexAppServerRunner (persistent connection with
+    // approval + sandbox); otherwise CodexExecRunner (codex exec --json).
     const codexSessionReader = new CodexSessionReader({ codexHome: process.env.CODEX_HOME });
     agentRegistry.register('codex', (ws) => {
         const container = agentRegistry.getConfigContainer();
         const latestConfig = container?.current ?? config;
         const codexConfig = getAgentConfig(latestConfig, 'codex');
-        return new CodexExecRunner({
+        return createCodexRunner({
             model: codexConfig?.model,
             modelProvider: codexConfig?.modelProvider,
             reasoningEffort: codexConfig?.reasoningEffort,
@@ -179,6 +185,13 @@ function initializeRunner(config, configDir, cliArgs) {
             pidDir: configDir,
             workspace: ws,
             sessionReader: codexSessionReader,
+            serviceMode: codexConfig?.serviceMode,
+            sandbox: codexConfig?.sandbox,
+            approvalPolicy: codexConfig?.approvalPolicy,
+            appServerBinary: codexConfig?.appServer?.binary,
+            appServerRequestTimeoutMs: codexConfig?.appServer?.requestTimeoutMs,
+            appServerIdleTtlMs: codexConfig?.appServer?.idleTtlMs,
+            appServerTurnIdleTimeoutMinutes: codexConfig?.appServer?.turnIdleTimeoutMinutes,
         });
     });
     // Register OpencodeExecRunner (run mode)
@@ -479,11 +492,15 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
             inputValue: action.raw?.action?.input_value ??
                 action.action.input_value,
         };
-        // queue.input 和 config.save 返回 CardActionResponse toast 给点击用户即时反馈。
-        // 必须直接返回值 -- enqueueImmediate / enqueueConfigAction 是 fire-and-forget，
-        // 会吞掉返回值。queue.input 只做一次卡片更新 + toast，快速且不需要串行队列序列化。
-        // config.save 内部已有 enqueueConfigAction 串行化保证，但返回值需要直接返回给飞书。
-        if (actionValue.cmd === 'queue.input' || actionValue.cmd === 'config.save') {
+        // queue.input / config.save / approval.respond / approval.toggle 返回
+        // CardActionResponse toast 给点击用户即时反馈。必须直接返回值 --
+        // enqueueImmediate / enqueueConfigAction 是 fire-and-forget，会吞掉返回值。
+        // 审批响应尤其不能落串行队列：run 任务占用队列头直到 turn 结束，审批响应
+        // 排在后面会形成死锁（run 不结束不执行、run 结束 coordinator 已删响应空转）。
+        if (actionValue.cmd === 'queue.input' ||
+            actionValue.cmd === 'config.save' ||
+            actionValue.cmd === 'approval.respond' ||
+            actionValue.cmd === 'approval.toggle') {
             return router.handleCardAction(fullValue, { userId, chatId, messageId });
         }
         // order.exec → equivalent queued message (Plan A): resolve the order text
@@ -514,6 +531,8 @@ function setupMessageHandlers(connector, router, bridge, sessionStore, workspace
                     chatId,
                     messageId,
                     messagePreview: `card action: ${actionValue.cmd}`,
+                    // Compact 是单向操作，排队卡不允许编辑（编辑预览无意义）。
+                    editable: actionValue.cmd !== 'codex.compact' && actionValue.cmd !== 'resume.compact',
                 },
             });
         }
@@ -663,7 +682,10 @@ async function main() {
                         recap: content.recap,
                         displayTitle: content.displayTitle,
                         agentKind: config.defaultAgent,
-                    });
+                    }, 
+                    // Compact 仅 codex app-server 模式有实现（runner.runCompact）。
+                    config.defaultAgent === 'codex' &&
+                        getAgentConfig(config, 'codex')?.serviceMode === 'app-server');
                 }
                 catch (err) {
                     getLogger().warn('[startup] sendAutoResumeCard failed:', err);

package/dist/router/config/codex.d.ts

@@ -2,7 +2,7 @@
  * Codex config builder — builds fields and handles field changes for Codex agent.
  */
 import type { AgentConfigCardBuilder, ConfigField } from './types.js';
-import type { AppConfig } from '../../config/index.js';
+import { type AppConfig } from '../../config/index.js';
 export declare class CodexConfigBuilder implements AgentConfigCardBuilder {
     buildFields(displayConfig: AppConfig): ConfigField[];
     handleFieldChange(key: string, value: unknown, config: AppConfig): Array<{

package/dist/router/config/codex.js

@@ -2,6 +2,7 @@
  * Codex config builder — builds fields and handles field changes for Codex agent.
  */
 import { loadCodexConfig, getReasoningEffortOptions, getDefaultReasoningEffort, } from '../../config/codex-config.js';
+import { DEFAULT_TURN_IDLE_TIMEOUT_MINUTES } from '../../config/index.js';
 export class CodexConfigBuilder {
     buildFields(displayConfig) {
         const fields = [];
@@ -43,6 +44,54 @@ export class CodexConfigBuilder {
             options: getReasoningEffortOptions(currentCodexModel),
             currentValue: currentReasoningEffort,
         });
+        // Service mode (exec vs app-server)
+        const currentServiceMode = displayConfig.agents?.codex?.serviceMode ?? 'exec';
+        fields.push({
+            key: 'agents.codex.serviceMode',
+            label: '运行模式',
+            type: 'select',
+            options: ['exec', 'app-server'],
+            currentValue: currentServiceMode,
+        });
+        // 审批策略与沙箱模式仅 app-server 模式可配置（CodexAppServerRunner 读取）；
+        // exec 模式在 runner 层固定 `--sandbox danger-full-access` +
+        // `approval_policy="never"`（src/runner/codex/argv.ts），卡片不暴露选项，
+        // 只用说明行把默认语义呈现给用户。
+        if (currentServiceMode === 'app-server') {
+            // Approval policy (Codex 官方 AskForApproval 标准值；on-request 为 codex 默认)
+            const currentApprovalPolicy = displayConfig.agents?.codex?.approvalPolicy ?? 'on-request';
+            fields.push({
+                key: 'agents.codex.approvalPolicy',
+                label: '审批策略',
+                type: 'select',
+                options: ['untrusted', 'on-request', 'never'],
+                currentValue: currentApprovalPolicy,
+            });
+            // Sandbox mode (Codex 官方 SandboxMode 标准值)
+            const currentSandbox = displayConfig.agents?.codex?.sandbox ?? 'danger-full-access';
+            fields.push({
+                key: 'agents.codex.sandbox',
+                label: '沙箱模式',
+                type: 'select',
+                options: ['read-only', 'workspace-write', 'danger-full-access'],
+                currentValue: currentSandbox,
+            });
+            const currentTurnIdleTimeoutMinutes = displayConfig.agents?.codex?.appServer?.turnIdleTimeoutMinutes ??
+                DEFAULT_TURN_IDLE_TIMEOUT_MINUTES;
+            fields.push({
+                key: 'agents.codex.appServer.turnIdleTimeoutMinutes',
+                label: 'Turn 空闲超时(分钟, 0关闭)',
+                type: 'input',
+                currentValue: String(currentTurnIdleTimeoutMinutes),
+            });
+        }
+        else {
+            fields.push({
+                key: 'agents.codex.modeNote',
+                label: '命令行模式固定为完全访问（danger-full-access）且无需审批（approval never），不提供审批策略/沙箱配置',
+                type: 'note',
+            });
+        }
         return fields;
     }
     handleFieldChange(key, value, config) {

package/dist/router/config/common/render.js

@@ -19,6 +19,10 @@ function buildFieldElements(fields, displayConfig) {
         else if (field.type === 'select' && field.options) {
             elements.push(buildSelectElement(field, currentValue));
         }
+        else if (field.type === 'note') {
+            // 纯说明行：无 config.* 回调，只渲染 label 为 markdown 文本。
+            elements.push({ tag: 'div', text: { tag: 'lark_md', content: field.label } });
+        }
         else {
             elements.push(buildInputElement(field, currentValue));
         }

package/dist/router/config/types.d.ts

@@ -9,7 +9,7 @@ import type { AppConfig } from '../../config/index.js';
 export interface ConfigField {
     key: string;
     label: string;
-    type: 'boolean' | 'select' | 'input';
+    type: 'boolean' | 'select' | 'input' | 'note';
     /** For select type: the list of options shown in the dropdown. */
     options?: readonly string[];
     /** Override the currentValue shown in the card (takes priority over getConfigValue). */