minecodex 2.0.4 → 2.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minecodex",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "Lightweight, local-first plugins for the Codex desktop app.",
   "license": "MIT",
   "type": "module",
@@ -41,6 +41,7 @@
     "features/session-status/vendor/lucide-LICENSE",
     "features/session-status/vendor/phosphor-LICENSE",
     "apps/dashboard/app.js",
+    "apps/dashboard/assets",
     "apps/dashboard/favicon.svg",
     "apps/dashboard/index.html",
     "apps/dashboard/styles.css",
@@ -65,7 +66,13 @@
     "packages/codex-adapter/src",
     "packages/codex-adapter/package.json",
     "packages/ui/package.json",
-    "DESIGN.md"
+    "DESIGN.md",
+    "assets/brand/minecodex-icon.svg",
+    "assets/brand/minecodex-icon-light.svg",
+    "assets/brand/minecodex-icon-dark.svg",
+    "assets/brand/references/lucide-LICENSE.txt",
+    "assets/readme/hero.svg",
+    "packages/ui/assets"
   ],
   "engines": {
     "node": ">=22.5.0"
@@ -80,7 +87,8 @@
     "pack:check": "npm pack --dry-run",
     "pack:audit": "node scripts/audit-package.mjs",
     "prepublishOnly": "npm test && npm run check && npm run pack:audit",
-    "test:ui": "node --test packages/ui/test/*.test.mjs"
+    "test:ui": "node --test packages/ui/test/*.test.mjs",
+    "build:icons": "node scripts/build-brand-icons.mjs"
   },
   "repository": {
     "type": "git",

package/packages/cli/native/MineCodex.app/Contents/Info.plist

@@ -14,12 +14,14 @@
   <string>6.0</string>
   <key>CFBundleName</key>
   <string>MineCodex</string>
+  <key>CFBundleIconFile</key>
+  <string>MineCodex.icns</string>
   <key>CFBundlePackageType</key>
   <string>APPL</string>
   <key>CFBundleShortVersionString</key>
-  <string>1.0.0</string>
+  <string>1.0.1</string>
   <key>CFBundleVersion</key>
-  <string>1</string>
+  <string>2</string>
   <key>LSBackgroundOnly</key>
   <true/>
   <key>LSMinimumSystemVersion</key>

package/packages/cli/native/MineCodex.app/Contents/_CodeSignature/CodeResources

@@ -4,6 +4,10 @@
 <dict>
 	<key>files</key>
 	<dict>
+		<key>Resources/MineCodex.icns</key>
+		<data>
+		mSztCiWeEvLkAINXLTTBTVSA0f8=
+		</data>
 		<key>Resources/MineCodexServiceHost</key>
 		<data>
 		kB0iYBcULzqcS1yOgYpY3LZjeq4=
@@ -18,6 +22,13 @@
 			mGWkf+X17Pau3uy8xUUB1s+JXofeKYKNRzFPk3FXeaA=
 			</data>
 		</dict>
+		<key>Resources/MineCodex.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			Wg3Q9bbvnrEwou/t4h9Gk/nWmlwm0UGGt+qR4+LySAI=
+			</data>
+		</dict>
 		<key>Resources/MineCodexServiceHost</key>
 		<dict>
 			<key>hash2</key>

package/packages/cli/native/README.md

@@ -16,3 +16,34 @@ Rebuild deliberately with:
 ```bash
 npm run build:service
 ```
+
+## Icon bundle revision 1.0.1
+
+This is an explicit native resource revision: `CFBundleIconFile` now points to
+`Contents/Resources/MineCodex.icns`, bundle version is `2`, and the outer app is
+re-signed. The service host executable remains byte-for-byte unchanged. The
+manager's ad-hoc designated requirement changes when its Info.plist changes.
+The service identifier and launch-agent plist remain unchanged.
+
+The existing `MacPlatformAdapter.installService()` is the migration path: run the
+old installed manager's `unregister` before replacing its bundle; verify the new
+staged bundle; replace it; then register and kickstart the new service. An old
+registration failure aborts replacement. Use `mcx install` / the normal update
+flow; do not copy a new icon or re-sign the installed app in place. System approval
+may be required after re-registration; preserve macOS's decision and existing CLI
+reporting. Real Background Items approval and UI upgrade acceptance must be checked
+on a target installation before release.
+
+The icon uses the filled project mark on a neutral rounded backing so one ICNS
+remains legible in light and dark system surfaces. SVG artwork is generated at
+`assets/brand/minecodex-service-icon.svg` by `npm run build:icons`. Rasterize that
+SVG into an iconset at 16/32/128/256/512px and each size's @2x resolution, then run
+`iconutil -c icns <iconset> -o app-template/Contents/Resources/MineCodex.icns`.
+Commit the resulting template ICNS with any deliberate native artwork revision.
+`npm run build:service` copies it into the built bundle before signing. Ordinary
+JavaScript releases continue shipping the existing signed bundle unchanged.
+
+Validation for this revision: strict deep signature verification, universal
+architectures, ICNS structure and plist checks, system icon loading through
+`NSWorkspace`, installer regressions, and npm package audit. These checks do not
+register a background item or change an installed service.

package/packages/cli/src/browser-control-panel.mjs

@@ -0,0 +1,48 @@
+// 标签页枚举留在平台适配层；只匹配控制台 origin 的根页或一次性登录页。
+export const CONTROL_PANEL_BROWSER_SCRIPT = `
+ObjC.import('CoreServices');
+function run(argv) {
+  const url = argv[0], origin = argv[1];
+  const bundle = ObjC.unwrap(ObjC.castRefToObject($.LSCopyDefaultHandlerForURLScheme($('http'))));
+  const chromium = ['com.google.Chrome', 'com.google.Chrome.canary', 'org.chromium.Chromium', 'com.microsoft.edgemac', 'com.brave.Browser', 'com.vivaldi.Vivaldi'];
+  if (bundle !== 'com.apple.Safari' && chromium.indexOf(bundle) < 0) return JSON.stringify({mode:'open', reuseSupported:false});
+  const browser = Application(bundle);
+  if (!browser.running()) return JSON.stringify({mode:'open', reuseSupported:true});
+  try {
+    const windows = browser.windows();
+    for (let w = 0; w < windows.length; w++) {
+      const tabs = windows[w].tabs();
+      for (let t = 0; t < tabs.length; t++) {
+        const candidate = tabs[t].url();
+        if (candidate !== origin + '/' && candidate.indexOf(origin + '/auth?') !== 0) continue;
+        if (bundle === 'com.apple.Safari') windows[w].currentTab = tabs[t];
+        else windows[w].activeTabIndex = t + 1;
+        windows[w].minimized = false;
+        windows[w].index = 1;
+        browser.activate();
+        return JSON.stringify({mode:'reused', reuseSupported:true});
+      }
+    }
+    return JSON.stringify({mode:'open', reuseSupported:true});
+  } catch (error) {
+    return JSON.stringify({mode:'failed', code:error.errorNumber || 0});
+  }
+}`;
+
+export async function openMacControlPanel(execFile, url, origin) {
+  const target = new URL(url), base = new URL(origin);
+  if (target.origin !== base.origin || base.protocol !== "http:" || base.hostname !== "127.0.0.1"
+      || target.pathname !== "/auth" || !target.searchParams.get("exchange")) throw new Error("Invalid control panel URL");
+  let stdout;
+  try { ({ stdout } = await execFile("/usr/bin/osascript", ["-l", "JavaScript", "-e", CONTROL_PANEL_BROWSER_SCRIPT, url, base.origin], { timeout:10_000 })); }
+  catch { throw new Error("无法连接默认浏览器，请重试打开 MineCodex。"); }
+  const result = JSON.parse(stdout);
+  if (result.mode === "failed") {
+    throw new Error(result.code === -1743
+      ? "无法定位 MineCodex 标签页。请在系统设置的自动化权限中允许控制默认浏览器后重试。"
+      : "无法定位默认浏览器中的 MineCodex 标签页，请重试。");
+  }
+  if (result.mode === "reused") return result;
+  await execFile("/usr/bin/open", [url]);
+  return { mode:"opened", reuseSupported:result.reuseSupported };
+}

package/packages/cli/src/commands.mjs

@@ -187,7 +187,9 @@ async function openCommand({ paths, platform, output, serviceProbe, fetchImpl })
     if (!exchangeResponse.ok) throw new Error(`MineCodex browser exchange failed: HTTP ${exchangeResponse.status}`);
     const { exchange } = await exchangeResponse.json();
     if (!exchange) throw new Error("MineCodex browser exchange did not return a short-lived value.");
-    await platform.openBrowser(`${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`);
+    const url = `${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`;
+    if (platform.openControlPanel) await platform.openControlPanel(url, controlOrigin());
+    else await platform.openBrowser(url);
   };
   if (reporter) await reporter.step(2, 2, "Opening the control panel", openControlPanel);
   else await openControlPanel();

package/packages/cli/src/control-server.mjs

@@ -17,6 +17,7 @@ const CONTENT_TYPES = new Map([
   [".html", "text/html; charset=utf-8"],
   [".js", "text/javascript; charset=utf-8"],
   [".svg", "image/svg+xml"],
+  [".ttf", "font/ttf"],
 ]);
 
 function tokenMatches(candidate, expected) {
@@ -197,10 +198,10 @@ async function iconResponse(id, paths, response) {
     iconPath = path.join(paths.featuresRoot, id, "assets", "ui", "sparkles.svg");
   } else if (id === "notes") {
     iconPath = path.join(paths.featuresRoot, id, "assets", "icons", "book-open.svg");
-  } else if (["images", "hide-upsell-banner", "session-status", "usage-meter"].includes(id)) {
+  } else if (FEATURE_IDS.includes(id)) {
     const manifest = JSON.parse(await readFile(path.join(paths.featuresRoot, id, "codex-feature.json"), "utf8"));
     const viewBox = manifest.icon?.viewBox ?? "0 0 24 24";
-    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
+    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="2.1" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
     response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
     response.end(svg);
     return;
@@ -209,7 +210,9 @@ async function iconResponse(id, paths, response) {
     return;
   }
   response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
-  await pipeline(createReadStream(iconPath), response);
+  // 仅统一控制台图标，不改变插件在 Codex 内使用的原始资源。
+  const svg = (await readFile(iconPath, "utf8")).replace(/stroke-width="[^"]+"/g, 'stroke-width="2.1"');
+  response.end(svg);
 }
 
 async function staticResponse(url, paths, response) {

package/packages/cli/src/platform.mjs

@@ -1,3 +1,4 @@
+import { openMacControlPanel } from "./browser-control-panel.mjs";
 import { execFile as execFileCallback } from "node:child_process";
 import { mkdir, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import os from "node:os";
@@ -704,6 +705,10 @@ export class MacPlatformAdapter {
     await this.execFile("/usr/bin/open", [url]);
   }
 
+  async openControlPanel(url, origin) {
+    return openMacControlPanel(this.execFile, url, origin);
+  }
+
   async openNativeCodex({ cdpPort } = {}) {
     const installation = await this.codex();
     if (!Number.isInteger(cdpPort) || cdpPort <= 0 || cdpPort > 65_535) {

package/packages/codex-adapter/README.md

@@ -6,8 +6,9 @@
 
 | 接口 | 结果与约束 |
 | --- | --- |
-| `composer(element?, {threadOnly}?)` | 默认仅可见的 thread 输入框；Prompts 显式传 false 支持首页输入框。返回 editable/root/body/add/threadId；非thread不提供身份，隐藏祖先返回 null |
+| `composer(element?, {threadOnly, purpose}?)` | 默认仅可见的 Codex thread 输入框；Prompts 使用 `purpose:"insertion"` 支持 Chat、Work、Codex、Temporary Chat 与面板 chat bar。优先当前焦点所在输入框，并可显式绑定插入目标。返回 editable/root/body/add/threadId；非thread不提供身份，隐藏祖先返回 null |
 | `currentThreadId(element?)` | 从合格输入框取得 UUID；不从残留 sidebar 选中项猜当前线程 |
+| `composerSurface(element?)` | 返回可见正式会话外壳 root/threadId，独立于编辑区是否存在或暂时 inert；供会话状态呈现与宿主统计订阅使用。真正隐藏、移入浮层、切换 home 或卸载时返回 null；不能作为文字插入许可 |
 | `rail()` / `railSlot(ownGroup)` | 可见原生 rail 与模板/滚动区/固定组句柄；不包含插件菜单策略 |
 | `currentFiber(element)` / `props(element,predicate,limit?)` | 仅供 native Adapter 使用；优先匹配当前 committed props，支持最近祖先的 scope |
 | `report(name,available,reason?)` / `diagnostics()` | 最新能力状态的副本；不持有凭据、原始账户数据或用户内容 |

package/packages/codex-adapter/src/renderer/environment.mjs

@@ -18,12 +18,17 @@ export function createCodexEnvironment() {
     }
     return null;
   }
-  function composer(element = null, {threadOnly=true} = {}) {
-    const candidates = element ? [element] : document.querySelectorAll('[data-codex-composer="true"][contenteditable="true"]');
+  function composer(element = null, {threadOnly=true, purpose="thread"} = {}) {
+    const insertion = purpose === "insertion";
+    const rootSelector = insertion ? '[data-codex-composer-root], [data-chatgpt-composer]' : '[data-codex-composer-root]';
+    const candidates = element ? [element] : [...document.querySelectorAll(insertion
+      ? '[data-codex-composer="true"][contenteditable="true"], [data-chatgpt-composer] [data-composer-markdown][contenteditable="true"]'
+      : '[data-codex-composer="true"][contenteditable="true"]')];
+    if (!element && insertion) candidates.sort((a,b) => Number(Boolean(b.closest(rootSelector)?.contains(document.activeElement))) - Number(Boolean(a.closest(rootSelector)?.contains(document.activeElement))));
     for (const editable of candidates) {
-      const root = editable.closest('[data-codex-composer-root]');
-      if (!editable.isConnected || !root || (threadOnly && root.getAttribute('data-composer-placement') !== 'thread')
-        || editable.closest('[hidden], [inert], [aria-hidden="true"], [data-floating-chat-surface], [data-right-panel-composer-overlay-content]')
+      const root = editable.closest(rootSelector);
+      if (!editable.isConnected || !root || (!insertion && threadOnly && root.getAttribute('data-composer-placement') !== 'thread')
+        || editable.closest(insertion ? '[hidden], [inert], [aria-hidden="true"]' : '[hidden], [inert], [aria-hidden="true"], [data-floating-chat-surface], [data-right-panel-composer-overlay-content]')
         || !editable.checkVisibility({ visibilityProperty:true })) continue;
       const value = root.getAttribute('data-composer-placement') === 'thread' ? root.querySelector('[data-above-composer-portal]')?.getAttribute('data-above-composer-conversation-id') : null;
       const threadId = value?.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0] ?? null;
@@ -34,6 +39,19 @@ export function createCodexEnvironment() {
     report("composer", false, "active-thread-composer-unavailable");
     return null;
   }
+  // 状态属于会话外壳；发送时编辑区可能 inert 或重建，不代表离开会话。
+  function composerSurface(element = null) {
+    const roots = element ? [element.closest('[data-codex-composer-root]')] : document.querySelectorAll('[data-codex-composer-root]');
+    for (const root of roots) {
+      if (!root?.isConnected || root.getAttribute('data-composer-placement') !== 'thread'
+        || root.closest('[hidden], [aria-hidden="true"], [data-floating-chat-surface], [data-right-panel-composer-overlay-content]')
+        || !root.checkVisibility({visibilityProperty:true})) continue;
+      const value = root.querySelector('[data-above-composer-portal]')?.getAttribute('data-above-composer-conversation-id');
+      const threadId = value?.match(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i)?.[0] ?? null;
+      return {root,threadId};
+    }
+    return null;
+  }
   function rail() {
     const node = [...document.querySelectorAll('[data-app-navigation-rail]')].find(node => node.getBoundingClientRect().width > 0) ?? null;
     report("navigation-rail", Boolean(node), node ? null : "rail-unavailable");
@@ -47,7 +65,7 @@ export function createCodexEnvironment() {
     const group = [...(scroll?.children ?? [])].find(child => child !== ownGroup && child.classList.contains('flex-col') && child.classList.contains('shrink-0'));
     return node && template && scroll ? { rail:node, template, scroll, group } : null;
   }
-  return { composer, rail, railSlot, currentThreadId:element => composer(element)?.threadId ?? null,
+  return { composer, composerSurface, rail, railSlot, currentThreadId:element => composer(element)?.threadId ?? null,
     // 仅供 UI／插件 native Adapter 使用，交互层不读取 React props。
     currentFiber, props, report, diagnostics:() => [...capabilities.values()].map(item => ({...item})) };
 }

package/packages/runtime-host/README.md

@@ -1,13 +1,13 @@
 # Codex Runtime Host
 
-本机个人 Codex 功能的统一运行宿主。它是唯一的 Injector / Adapter，负责：
+本机个人 Codex 功能的统一运行宿主。它是统一 Injector 与生命周期宿主，负责：
 
 - 连接或启动支持 loopback CDP 的隔离 Codex 桌面实例；
 - 从同级项目的 `codex-feature.json` 注册 Sidebar 或 Conversation toolbar 入口；
 - 挂载 full-page、Pinned Summary，并把 Detail iframe Surface 优先注册为 Codex 原生右侧 Task Tab；
 - 把 Codex 当前 resolved Theme Tokens 同步给每个 Surface；
 - 执行经过 manifest allowlist、Surface 身份和 renderer token 校验的 Host actions；
-- 把所有易变的 Codex DOM / CDP 细节留在一个 Adapter 中。
+- 维护共享 CDP、注入与可信通信；插件专有的 Codex 协议由各功能 Adapter 维护。
 
 各功能项目继续拥有自己的数据、HTTP API 与页面。宿主不读取业务数据库；单个
 功能服务失效不会阻止 Codex 或其他功能运行。
@@ -173,8 +173,7 @@ Host 会再次发送当前状态。功能页面可据此暂停隐藏状态下的
 | `Runtime.addBinding`、`DOM.setFileInputFiles`、注入脚本 | high-risk CDP | 必须使用隔离 profile 验收 |
 | `togglePinnedSummary`、`composer.addFiles` 字符串 | 探索证据 | 当前实现不把它们当契约 |
 
-这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后应只
-在这个宿主中修复；各功能的数据和 Web UI不需要跟随重写。
+这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后按协议所有者修复：共享注入和生命周期归宿主，专有原生组件与 API 归对应插件 Adapter；领域规则与 Web UI不应直接跟随外部协议重写。
 
 
 ## 共享弹窗与浮层
@@ -197,8 +196,14 @@ config.ui.surface(popover); // 只统一材质，保留功能的定位与内容
 
 page-script 可以用 manifest 的 `entry.resources` 声明本功能内的 CSS/图标资源，宿主读取后通过 `config.resources` 一次传入。JSON 作为数据、其他文件作为文本；越出功能目录的路径会被拒绝。它不改变 host action、服务启动或消息协议。
 
-Images 提示词面板沿用原生 Version history 的特殊结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
+Images 提示词面板沿用原生 File info 的附属信息面板结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
 
 `entry.sourceFactory` 可声明本插件内的源码工厂，导出 `createPageScriptSource()` 并返回 Renderer 函数体字符串。工厂路径不能越出插件；纯领域函数由插件工厂序列化，宿主不维护规则副本。Images 使用这一接口共享图片提示词溯源规则。
 
 Model Slider 的模型规则、原生控制器适配和专有呈现位于插件 `src/domain` / `src/frontend`，安装源码由插件工厂组装。宿主仅提供配置、locale、共享 UI、图标与刷新调度，维护 ensure/dispose 接线；原生菜单开合和节点恢复由插件负责。
+
+## 项目控制台入口
+
+Runtime Host 在账号菜单 Settings 下挂载 MineCodex 项目入口，不属于可开关的插件。`minecodex/open-control-panel` 是独立 builtin action，必须通过对应 renderer 的 binding token 验证；它不接受任意 URL 或 shell 参数，固定调用包内 CLI 的 `gui` 命令。组件的项目图标、外链箭头与菜单模板由共享 UI 提供。
+
+CLI 继续通过一次性 browser exchange 打开控制台。macOS 默认 Safari 与 Chrome/Chromium、Edge、Brave、Vivaldi 支持查找现有控制台标签页并激活；没有匹配页才调用系统默认浏览器打开登录地址。自动化权限被拒绝时返回错误，不用重复开页掩盖失败。其他浏览器和 Windows 保留系统 URL 打开行为，目前不保证标签页复用。

package/packages/runtime-host/src/codex-injection.mjs

@@ -1,3 +1,4 @@
+import { readFileSync } from "node:fs";
 import { createCodexEnvironment } from "../../codex-adapter/src/renderer/environment.mjs";
 // 注入源生成：createInjectionSource 产出注入到 Codex Renderer 的自包含脚本字符串。
 // 该字符串经 CDP 注入后独立执行，因此 install 函数体必须自包含；
@@ -8,7 +9,9 @@ import { createUIInstallerSource } from "../../ui/src/install.mjs";
 import { randomBytes } from "node:crypto";
 import { CODEX_THEME_TOKENS, CODEX_THEME_TOKEN_ALIASES, MINECODEX_THEME_BINDINGS } from "../../ui/src/native/tokens.mjs";
 
-export const RUNTIME_VERSION = 107;
+export const RUNTIME_VERSION = 108;
+const PROJECT_ICON = readFileSync(new URL("../../../assets/brand/minecodex-icon.svg", import.meta.url), "utf8");
+const EXTERNAL_ICON = readFileSync(new URL("../../ui/assets/arrow-up-right.svg", import.meta.url), "utf8");
 export const HOST_BINDING_NAME = "__codexPersonalHostAction";
 export const CSP_BOOTSTRAP_VERSION = 1;
 export const CSP_BOOTSTRAP_KEY = "__mineCodexCspBootstrapVersion";
@@ -204,6 +207,8 @@ export function createInjectionSource(features, {
       } : null,
       hostActions: new Set(feature.hostActions ?? []),
     }));
+    featureUI.accountMenuEntry?.({ label:"MineCodex", icon:config.projectIcon, externalIcon:config.externalIcon,
+      onOpen:() => requestPageHostAction("minecodex", "open-control-panel", {}) });
     const featureById = new Map(features.map((feature) => [feature.id, feature]));
     const sidebarFeatures = features.filter((feature) => feature.entry?.kind === "sidebar");
     const toolbarFeatures = features.filter((feature) => feature.entry?.kind === "conversation-toolbar");
@@ -812,10 +817,7 @@ export function createInjectionSource(features, {
     }
 
     function currentComposer() {
-      const marked = document.querySelector('[data-codex-composer="true"][contenteditable="true"]');
-      if (marked) return marked;
-      return Array.from(document.querySelectorAll('[contenteditable="true"][role="textbox"]'))
-        .find((element) => isVisibleToolbarControl(element)) ?? null;
+      return codex.composer(null, { purpose: "insertion" })?.editable ?? null;
     }
 
     function rememberComposerSelection() {
@@ -828,9 +830,9 @@ export function createInjectionSource(features, {
       savedComposerThread = threadIdentity();
     }
 
-    function insertComposerText(text) {
+    function insertComposerText(text, target = null) {
       if (typeof text !== "string" || !text) throw new Error("Text is required");
-      const composer = currentComposer();
+      const composer = target ? codex.composer(target, { purpose: "insertion" })?.editable : currentComposer();
       if (!composer) throw new Error("The active Composer was not found");
       const selection = document.getSelection();
       let fallback = true;
@@ -2173,14 +2175,14 @@ export function createInjectionSource(features, {
     }
 
     function requestPageHostAction(featureId, action, payload) {
-      if (!featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
+      if (!(featureId === "minecodex" && action === "open-control-panel") && !featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
       if (typeof globalThis[config.bindingName] !== "function") return Promise.reject(new Error("Host bridge is unavailable"));
       return new Promise((resolve, reject) => {
         const requestId = crypto.randomUUID();
         const timer = setTimeout(() => {
           pendingHostActions.delete(requestId);
           reject(new Error("Host request timed out"));
-        }, 10_000);
+        }, featureId === "minecodex" ? 30_000 : 10_000);
         pendingHostActions.set(requestId, { kind: "page-script", resolve, reject, timer });
         try {
           globalThis[config.bindingName](JSON.stringify({ token: config.bindingToken, featureId, requestId, action, payload }));
@@ -2441,6 +2443,8 @@ export function createInjectionSource(features, {
     } : null,
   }));
   return `(${install.toString()})(${JSON.stringify({
+    projectIcon: PROJECT_ICON,
+    externalIcon: EXTERNAL_ICON,
     version: RUNTIME_VERSION,
     sessionId: runtimeSessionId,
     bindingName,

package/packages/runtime-host/src/codex-runtime.mjs

@@ -1,3 +1,7 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { promisify } from "node:util";
+import { fileURLToPath } from "node:url";
+import { LocalImageSource } from "../../../features/images/src/backend/local-image-source.mjs";
 import { cloudImagesAction } from "../../../features/images/src/backend/cloud-library.mjs";
 // CodexRuntime：Codex Renderer 生命周期与 host action 执行。
 // 注入源（createInjectionSource）与 CDP 客户端分别在 codex-injection.mjs / codex-cdp.mjs。
@@ -34,6 +38,7 @@ import {
 } from "./host-actions.mjs";
 import { SitesService } from "../../../features/sites/src/backend/sites-service.mjs";
 import { SessionStatusReader, threadIdFromLocation } from "../../../features/session-status/src/adapters/codex/session-reader.mjs";
+import { createCodexEnvironment } from "../../codex-adapter/src/renderer/environment.mjs";
 
 
 // 保持公共入口兼容：历史 import 从本文件继续可用。
@@ -48,11 +53,9 @@ export {
 } from "./codex-injection.mjs";
 
 export const SESSION_STATUS_THREAD_ID_EXPRESSION = `(() => {
-  return [...new Set([...document.querySelectorAll('[data-codex-composer="true"][contenteditable="true"]')].map(composer => {
-    const card = composer.closest('[data-codex-composer-root]');
-    if (card?.getAttribute('data-composer-placement') !== 'thread') return null;
-    return card.querySelector('[data-above-composer-portal]')?.getAttribute('data-above-composer-conversation-id');
-  }).filter(Boolean))];
+  const codex = (${createCodexEnvironment.toString()})();
+  return [...new Set([...document.querySelectorAll('[data-codex-composer-root]')]
+    .map(root => codex.composerSurface(root)?.threadId).filter(Boolean))];
 })()`;
 
 export class CodexRuntime {
@@ -76,9 +79,12 @@ export class CodexRuntime {
     onStatusChange = null,
     sitesService = null,
     onManagedCodexPidChange = null,
+    openControlPanel = () => promisify(execFileCallback)(process.execPath, [fileURLToPath(new URL("../../cli/bin/mcx.mjs", import.meta.url)), "gui"], { timeout:20_000 }),
   }) {
+    this.openControlPanel = openControlPanel;
     this.features = features;
     this.sitesService = sitesService ?? (features.some(feature => feature.id === "sites") ? new SitesService() : null);
+    this.localImageSource = features.some(feature => feature.id === "images") ? new LocalImageSource({dataDir:path.join(profileDir,"minecodex-image-gen")}) : null;
     this.profileDir = profileDir;
     this.appPath = appPath;
     this.cdpPort = cdpPort;
@@ -523,6 +529,11 @@ export class CodexRuntime {
       return;
     }
     if (request.token !== this.bindingTokens.get(targetId) || typeof request.requestId !== "string") return;
+    if (request.featureId === "minecodex" && request.action === "open-control-panel") {
+      try { await this.openControlPanel(); await this.resolveHostAction(client, request.requestId, {ok:true,result:{opened:true}}); }
+      catch (error) { await this.resolveHostAction(client, request.requestId, {ok:false,error:{code:"CONTROL_PANEL_FAILED",message:error.stderr?.trim() || error.message}}); }
+      return;
+    }
     const feature = this.features.find((candidate) => candidate.id === request.featureId);
     if (feature?.id === "session-status" && request.action === "refresh-session-status") {
       if (this.sessionStatusReader && this.clients.get(targetId) === client && !this.stopping) {
@@ -549,6 +560,15 @@ export class CodexRuntime {
       });
       return;
     }
+    if (feature.id === "images" && request.action === "local-image-source") {
+      try {
+        const result = await this.localImageSource.action(request.payload);
+        await this.resolveHostAction(client, request.requestId, {ok:true,result});
+      } catch (error) {
+        await this.resolveHostAction(client, request.requestId, {ok:false,error:{code:"LOCAL_IMAGE_SOURCE_FAILED",message:error.message}});
+      }
+      return;
+    }
     if (feature.id === "sites" && request.action === "sites") {
       try {
         const result = await this.sitesService.action(request.payload);
@@ -812,6 +832,7 @@ export class CodexRuntime {
     if (this.stopPromise) return this.stopPromise;
     this.stopPromise = (async () => {
       this.stopping = true;
+      await this.localImageSource?.close();
       this.targetRefreshQueued = false;
       this.monitorWake?.();
       await this.monitorPromise?.catch(() => {});

package/packages/runtime-host/src/feature-registry.mjs

@@ -17,6 +17,7 @@ const HOST_ACTIONS = new Set([
   "resolve-file-paths",
   "import-generated-image",
   "list-cloud-images",
+  "local-image-source",
   "import-cloud-image",
   "create-image-edit-thread",
 ]);

package/packages/ui/DESIGN.md

@@ -13,15 +13,18 @@
 - 原生适配层：解析实际token、主题、zoom和能力状态；共享锚点仅包含真实跨插件需求。原生事实遵循根规范，不在每个组件重新猜测。
 - 材质与层级基础：按Dialog、Dropdown、Popover、ComposerMenu、Page的原生分支提供有限选项，将遮罩与Portal规则同所选组件匹配。
 - Dialog：提供容器、标题、Close及操作区的结构；插件填表单、列表或确认内容。
-- Button：表达操作角色和状态，保留Cancel ghost、实际次级outline与主操作solid的语义区分；业务动作由插件传入。
-- Navbar：使用成对 default/selected 图标管理展示状态；原生图标与选中状态适配集中在 native 层，保留原生路由与 sidebar hover。
+- Button：通过 `action(node, "danger-solid")` 提供原生实色警戒分支，保留既有 `danger` soft 分支；通用 token 与适用规则见根 DESIGN.md。表达操作角色和状态，保留Cancel ghost、实际次级outline与主操作solid的语义区分；业务动作由插件传入。
+- Navbar：使用成对 default/selected 图标管理展示状态；原生图标与选中状态适配集中在 native 层，保留原生路由与 sidebar hover。退出注入页面时按当前 committed 原生状态恢复选中属性，不回放进入时的旧状态；原生目的地变化时及时移除替身图标，原节点复用或重渲染后仍保证只显示一个图标。
 - Tooltip：处理声明式标记、hover/focus、aria关联、关闭与卸载，不接管原生Tooltip。
+- Page 的 `sidebar:"none"` 分支通过 native/page Adapter 取得原生无上下文侧栏页面壳；`releasePage` 释放时区分返回原页面和用户主动导航，禁用时清理。
 - 页面、菜单与浮层：提供对应类型的外壳、挂载和通用交互，不读取提示词、会话或站点业务数据。
 
 ## 接入约束
 
 当前page-script通过 `config.ui` 使用公共能力；现有API包括 `heading`、`footer`、`action`、`overlay`、`surface`。`surface(node, kind, options)` 显式区分原生材质；`page`、`mount`、`trapFocus`、`composerMenu`、`tooltipSurface`、`navigationRail` 维护实际复用的层级、焦点与定位。`entry.resources` 通过 `config.resources` 提供插件自身 CSS 与图标，通用视觉仍由组件库维护。
 
+独立全页面且无专属二级导航的功能使用 `config.ui.page(node, { sidebar:"none" })`。移除页面前调用 `config.ui.releasePage(node)`；若用户正在主动选择原生导航，则传 `{ restoreNavigation:false }`，避免恢复动作覆盖用户选择。`sidebar:"none"` 页面通过 `onNavigate` 接收原生路由提交后的退出通知；一级、二级和程序化导航共用该契约，悬浮展开与加载中的通知不关闭页面。Adapter 在通知前取消路由订阅并放弃恢复旧位置，功能回调负责移除内容与恢复自身状态。默认 `sidebar:"inherit"` 保留现有接入行为，不自动迁移其他功能。页面壳的产品规则与验收标准见根 DESIGN.md 的「全页面功能的页面壳选择」。
+
 Renderer安装函数经序列化注入，必须自包含。组件代码与Node/CDP隔离，宿主负责组装注入源码、生命周期和iframe主题桥；不为整理目录引入不必要的打包系统。
 
 通用生命周期契约由组件库维护。原生已经提供的焦点圈定、Escape和关闭机制优先复用；插件继续拥有业务状态、内容更新和具体回调。迁移时同步触发点焦点恢复、异步卸载及原生节点归属验证。
@@ -29,3 +32,7 @@ Renderer安装函数经序列化注入，必须自包含。组件代码与Node/C
 ## 验证边界
 
 组件验证关注可注入性、结构与回调、状态清理、挂载/焦点以及所选原生类型的实际行为，不镜像每条CSS写实现测试。布局、材质和原生状态变化按风险做隔离验收；只移动文件时验证导入、序列化、发布名单与已有功能回归。
+
+## 账号菜单接入
+
+`accountMenuEntry({label, icon, externalIcon, onOpen})` 通过 native/account-menu Adapter 获取原生 Settings 模板与关闭句柄。组件只修改脱离 React 的副本，负责重建去重、相邻键盘导航与卸载；回调拥有打开动作，组件不读取控制台 token 或浏览器状态。通用位置与视觉规则见根 DESIGN.md。

package/packages/ui/assets/arrow-up-right.svg

@@ -0,0 +1,14 @@
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M7 7h10v10" />
+  <path d="M7 17 17 7" />
+</svg>

package/packages/ui/assets/lucide-LICENSE.txt

@@ -0,0 +1,43 @@
+ISC License
+
+Copyright (c) 2026 Lucide Icons and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+---
+
+The following Lucide icons are derived from the Feather project:
+
+airplay, alert-circle, alert-octagon, alert-triangle, aperture, arrow-down-circle, arrow-down-left, arrow-down-right, arrow-down, arrow-left-circle, arrow-left, arrow-right-circle, arrow-right, arrow-up-circle, arrow-up-left, arrow-up-right, arrow-up, at-sign, calendar, cast, check, chevron-down, chevron-left, chevron-right, chevron-up, chevrons-down, chevrons-left, chevrons-right, chevrons-up, circle, clipboard, clock, code, columns, command, compass, corner-down-left, corner-down-right, corner-left-down, corner-left-up, corner-right-down, corner-right-up, corner-up-left, corner-up-right, crosshair, database, divide-circle, divide-square, dollar-sign, download, external-link, feather, frown, hash, headphones, help-circle, info, italic, key, layout, life-buoy, link-2, link, loader, lock, log-in, log-out, maximize, meh, minimize, minimize-2, minus-circle, minus-square, minus, monitor, moon, more-horizontal, more-vertical, move, music, navigation-2, navigation, octagon, pause-circle, percent, plus-circle, plus-square, plus, power, radio, rss, search, server, share, shopping-bag, sidebar, smartphone, smile, square, table-2, tablet, target, terminal, trash-2, trash, triangle, tv, type, upload, x-circle, x-octagon, x-square, x, zoom-in, zoom-out
+
+The MIT License (MIT) (for the icons listed above)
+
+Copyright (c) 2013-present Cole Bemis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.