minecodex 2.0.5 → 2.0.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minecodex",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Lightweight, local-first plugins for the Codex desktop app.",
   "license": "MIT",
   "type": "module",
@@ -41,6 +41,7 @@
     "features/session-status/vendor/lucide-LICENSE",
     "features/session-status/vendor/phosphor-LICENSE",
     "apps/dashboard/app.js",
+    "apps/dashboard/assets",
     "apps/dashboard/favicon.svg",
     "apps/dashboard/index.html",
     "apps/dashboard/styles.css",
@@ -65,7 +66,13 @@
     "packages/codex-adapter/src",
     "packages/codex-adapter/package.json",
     "packages/ui/package.json",
-    "DESIGN.md"
+    "DESIGN.md",
+    "assets/brand/minecodex-icon.svg",
+    "assets/brand/minecodex-icon-light.svg",
+    "assets/brand/minecodex-icon-dark.svg",
+    "assets/brand/references/lucide-LICENSE.txt",
+    "assets/readme/hero.svg",
+    "packages/ui/assets"
   ],
   "engines": {
     "node": ">=22.5.0"
@@ -80,7 +87,8 @@
     "pack:check": "npm pack --dry-run",
     "pack:audit": "node scripts/audit-package.mjs",
     "prepublishOnly": "npm test && npm run check && npm run pack:audit",
-    "test:ui": "node --test packages/ui/test/*.test.mjs"
+    "test:ui": "node --test packages/ui/test/*.test.mjs",
+    "build:icons": "node scripts/build-brand-icons.mjs"
   },
   "repository": {
     "type": "git",

package/packages/cli/native/MineCodex.app/Contents/Info.plist

@@ -14,12 +14,14 @@
   <string>6.0</string>
   <key>CFBundleName</key>
   <string>MineCodex</string>
+  <key>CFBundleIconFile</key>
+  <string>MineCodex.icns</string>
   <key>CFBundlePackageType</key>
   <string>APPL</string>
   <key>CFBundleShortVersionString</key>
-  <string>1.0.0</string>
+  <string>1.0.1</string>
   <key>CFBundleVersion</key>
-  <string>1</string>
+  <string>2</string>
   <key>LSBackgroundOnly</key>
   <true/>
   <key>LSMinimumSystemVersion</key>

package/packages/cli/native/MineCodex.app/Contents/_CodeSignature/CodeResources

@@ -4,6 +4,10 @@
 <dict>
 	<key>files</key>
 	<dict>
+		<key>Resources/MineCodex.icns</key>
+		<data>
+		mSztCiWeEvLkAINXLTTBTVSA0f8=
+		</data>
 		<key>Resources/MineCodexServiceHost</key>
 		<data>
 		kB0iYBcULzqcS1yOgYpY3LZjeq4=
@@ -18,6 +22,13 @@
 			mGWkf+X17Pau3uy8xUUB1s+JXofeKYKNRzFPk3FXeaA=
 			</data>
 		</dict>
+		<key>Resources/MineCodex.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			Wg3Q9bbvnrEwou/t4h9Gk/nWmlwm0UGGt+qR4+LySAI=
+			</data>
+		</dict>
 		<key>Resources/MineCodexServiceHost</key>
 		<dict>
 			<key>hash2</key>

package/packages/cli/native/README.md

@@ -16,3 +16,34 @@ Rebuild deliberately with:
 ```bash
 npm run build:service
 ```
+
+## Icon bundle revision 1.0.1
+
+This is an explicit native resource revision: `CFBundleIconFile` now points to
+`Contents/Resources/MineCodex.icns`, bundle version is `2`, and the outer app is
+re-signed. The service host executable remains byte-for-byte unchanged. The
+manager's ad-hoc designated requirement changes when its Info.plist changes.
+The service identifier and launch-agent plist remain unchanged.
+
+The existing `MacPlatformAdapter.installService()` is the migration path: run the
+old installed manager's `unregister` before replacing its bundle; verify the new
+staged bundle; replace it; then register and kickstart the new service. An old
+registration failure aborts replacement. Use `mcx install` / the normal update
+flow; do not copy a new icon or re-sign the installed app in place. System approval
+may be required after re-registration; preserve macOS's decision and existing CLI
+reporting. Real Background Items approval and UI upgrade acceptance must be checked
+on a target installation before release.
+
+The icon uses the filled project mark on a neutral rounded backing so one ICNS
+remains legible in light and dark system surfaces. SVG artwork is generated at
+`assets/brand/minecodex-service-icon.svg` by `npm run build:icons`. Rasterize that
+SVG into an iconset at 16/32/128/256/512px and each size's @2x resolution, then run
+`iconutil -c icns <iconset> -o app-template/Contents/Resources/MineCodex.icns`.
+Commit the resulting template ICNS with any deliberate native artwork revision.
+`npm run build:service` copies it into the built bundle before signing. Ordinary
+JavaScript releases continue shipping the existing signed bundle unchanged.
+
+Validation for this revision: strict deep signature verification, universal
+architectures, ICNS structure and plist checks, system icon loading through
+`NSWorkspace`, installer regressions, and npm package audit. These checks do not
+register a background item or change an installed service.

package/packages/cli/src/browser-control-panel.mjs

@@ -0,0 +1,48 @@
+// 标签页枚举留在平台适配层；只匹配控制台 origin 的根页或一次性登录页。
+export const CONTROL_PANEL_BROWSER_SCRIPT = `
+ObjC.import('CoreServices');
+function run(argv) {
+  const url = argv[0], origin = argv[1];
+  const bundle = ObjC.unwrap(ObjC.castRefToObject($.LSCopyDefaultHandlerForURLScheme($('http'))));
+  const chromium = ['com.google.Chrome', 'com.google.Chrome.canary', 'org.chromium.Chromium', 'com.microsoft.edgemac', 'com.brave.Browser', 'com.vivaldi.Vivaldi'];
+  if (bundle !== 'com.apple.Safari' && chromium.indexOf(bundle) < 0) return JSON.stringify({mode:'open', reuseSupported:false});
+  const browser = Application(bundle);
+  if (!browser.running()) return JSON.stringify({mode:'open', reuseSupported:true});
+  try {
+    const windows = browser.windows();
+    for (let w = 0; w < windows.length; w++) {
+      const tabs = windows[w].tabs();
+      for (let t = 0; t < tabs.length; t++) {
+        const candidate = tabs[t].url();
+        if (candidate !== origin + '/' && candidate.indexOf(origin + '/auth?') !== 0) continue;
+        if (bundle === 'com.apple.Safari') windows[w].currentTab = tabs[t];
+        else windows[w].activeTabIndex = t + 1;
+        windows[w].minimized = false;
+        windows[w].index = 1;
+        browser.activate();
+        return JSON.stringify({mode:'reused', reuseSupported:true});
+      }
+    }
+    return JSON.stringify({mode:'open', reuseSupported:true});
+  } catch (error) {
+    return JSON.stringify({mode:'failed', code:error.errorNumber || 0});
+  }
+}`;
+
+export async function openMacControlPanel(execFile, url, origin) {
+  const target = new URL(url), base = new URL(origin);
+  if (target.origin !== base.origin || base.protocol !== "http:" || base.hostname !== "127.0.0.1"
+      || target.pathname !== "/auth" || !target.searchParams.get("exchange")) throw new Error("Invalid control panel URL");
+  let stdout;
+  try { ({ stdout } = await execFile("/usr/bin/osascript", ["-l", "JavaScript", "-e", CONTROL_PANEL_BROWSER_SCRIPT, url, base.origin], { timeout:10_000 })); }
+  catch { throw new Error("无法连接默认浏览器，请重试打开 MineCodex。"); }
+  const result = JSON.parse(stdout);
+  if (result.mode === "failed") {
+    throw new Error(result.code === -1743
+      ? "无法定位 MineCodex 标签页。请在系统设置的自动化权限中允许控制默认浏览器后重试。"
+      : "无法定位默认浏览器中的 MineCodex 标签页，请重试。");
+  }
+  if (result.mode === "reused") return result;
+  await execFile("/usr/bin/open", [url]);
+  return { mode:"opened", reuseSupported:result.reuseSupported };
+}

package/packages/cli/src/commands.mjs

@@ -187,7 +187,9 @@ async function openCommand({ paths, platform, output, serviceProbe, fetchImpl })
     if (!exchangeResponse.ok) throw new Error(`MineCodex browser exchange failed: HTTP ${exchangeResponse.status}`);
     const { exchange } = await exchangeResponse.json();
     if (!exchange) throw new Error("MineCodex browser exchange did not return a short-lived value.");
-    await platform.openBrowser(`${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`);
+    const url = `${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`;
+    if (platform.openControlPanel) await platform.openControlPanel(url, controlOrigin());
+    else await platform.openBrowser(url);
   };
   if (reporter) await reporter.step(2, 2, "Opening the control panel", openControlPanel);
   else await openControlPanel();

package/packages/cli/src/control-server.mjs

@@ -17,6 +17,7 @@ const CONTENT_TYPES = new Map([
   [".html", "text/html; charset=utf-8"],
   [".js", "text/javascript; charset=utf-8"],
   [".svg", "image/svg+xml"],
+  [".ttf", "font/ttf"],
 ]);
 
 function tokenMatches(candidate, expected) {
@@ -197,10 +198,10 @@ async function iconResponse(id, paths, response) {
     iconPath = path.join(paths.featuresRoot, id, "assets", "ui", "sparkles.svg");
   } else if (id === "notes") {
     iconPath = path.join(paths.featuresRoot, id, "assets", "icons", "book-open.svg");
-  } else if (["images", "hide-upsell-banner", "session-status", "usage-meter"].includes(id)) {
+  } else if (FEATURE_IDS.includes(id)) {
     const manifest = JSON.parse(await readFile(path.join(paths.featuresRoot, id, "codex-feature.json"), "utf8"));
     const viewBox = manifest.icon?.viewBox ?? "0 0 24 24";
-    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
+    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="2.1" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
     response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
     response.end(svg);
     return;
@@ -209,7 +210,9 @@ async function iconResponse(id, paths, response) {
     return;
   }
   response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
-  await pipeline(createReadStream(iconPath), response);
+  // 仅统一控制台图标，不改变插件在 Codex 内使用的原始资源。
+  const svg = (await readFile(iconPath, "utf8")).replace(/stroke-width="[^"]+"/g, 'stroke-width="2.1"');
+  response.end(svg);
 }
 
 async function staticResponse(url, paths, response) {

package/packages/cli/src/platform.mjs

@@ -1,3 +1,4 @@
+import { openMacControlPanel } from "./browser-control-panel.mjs";
 import { execFile as execFileCallback } from "node:child_process";
 import { mkdir, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import os from "node:os";
@@ -704,6 +705,10 @@ export class MacPlatformAdapter {
     await this.execFile("/usr/bin/open", [url]);
   }
 
+  async openControlPanel(url, origin) {
+    return openMacControlPanel(this.execFile, url, origin);
+  }
+
   async openNativeCodex({ cdpPort } = {}) {
     const installation = await this.codex();
     if (!Number.isInteger(cdpPort) || cdpPort <= 0 || cdpPort > 65_535) {

package/packages/runtime-host/README.md

@@ -1,13 +1,13 @@
 # Codex Runtime Host
 
-本机个人 Codex 功能的统一运行宿主。它是唯一的 Injector / Adapter，负责：
+本机个人 Codex 功能的统一运行宿主。它是统一 Injector 与生命周期宿主，负责：
 
 - 连接或启动支持 loopback CDP 的隔离 Codex 桌面实例；
 - 从同级项目的 `codex-feature.json` 注册 Sidebar 或 Conversation toolbar 入口；
 - 挂载 full-page、Pinned Summary，并把 Detail iframe Surface 优先注册为 Codex 原生右侧 Task Tab；
 - 把 Codex 当前 resolved Theme Tokens 同步给每个 Surface；
 - 执行经过 manifest allowlist、Surface 身份和 renderer token 校验的 Host actions；
-- 把所有易变的 Codex DOM / CDP 细节留在一个 Adapter 中。
+- 维护共享 CDP、注入与可信通信；插件专有的 Codex 协议由各功能 Adapter 维护。
 
 各功能项目继续拥有自己的数据、HTTP API 与页面。宿主不读取业务数据库；单个
 功能服务失效不会阻止 Codex 或其他功能运行。
@@ -173,8 +173,7 @@ Host 会再次发送当前状态。功能页面可据此暂停隐藏状态下的
 | `Runtime.addBinding`、`DOM.setFileInputFiles`、注入脚本 | high-risk CDP | 必须使用隔离 profile 验收 |
 | `togglePinnedSummary`、`composer.addFiles` 字符串 | 探索证据 | 当前实现不把它们当契约 |
 
-这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后应只
-在这个宿主中修复；各功能的数据和 Web UI不需要跟随重写。
+这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后按协议所有者修复：共享注入和生命周期归宿主，专有原生组件与 API 归对应插件 Adapter；领域规则与 Web UI不应直接跟随外部协议重写。
 
 
 ## 共享弹窗与浮层
@@ -197,8 +196,14 @@ config.ui.surface(popover); // 只统一材质，保留功能的定位与内容
 
 page-script 可以用 manifest 的 `entry.resources` 声明本功能内的 CSS/图标资源，宿主读取后通过 `config.resources` 一次传入。JSON 作为数据、其他文件作为文本；越出功能目录的路径会被拒绝。它不改变 host action、服务启动或消息协议。
 
-Images 提示词面板沿用原生 Version history 的特殊结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
+Images 提示词面板沿用原生 File info 的附属信息面板结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
 
 `entry.sourceFactory` 可声明本插件内的源码工厂，导出 `createPageScriptSource()` 并返回 Renderer 函数体字符串。工厂路径不能越出插件；纯领域函数由插件工厂序列化，宿主不维护规则副本。Images 使用这一接口共享图片提示词溯源规则。
 
 Model Slider 的模型规则、原生控制器适配和专有呈现位于插件 `src/domain` / `src/frontend`，安装源码由插件工厂组装。宿主仅提供配置、locale、共享 UI、图标与刷新调度，维护 ensure/dispose 接线；原生菜单开合和节点恢复由插件负责。
+
+## 项目控制台入口
+
+Runtime Host 在账号菜单 Settings 下挂载 MineCodex 项目入口，不属于可开关的插件。`minecodex/open-control-panel` 是独立 builtin action，必须通过对应 renderer 的 binding token 验证；它不接受任意 URL 或 shell 参数，固定调用包内 CLI 的 `gui` 命令。组件的项目图标、外链箭头与菜单模板由共享 UI 提供。
+
+CLI 继续通过一次性 browser exchange 打开控制台。macOS 默认 Safari 与 Chrome/Chromium、Edge、Brave、Vivaldi 支持查找现有控制台标签页并激活；没有匹配页才调用系统默认浏览器打开登录地址。自动化权限被拒绝时返回错误，不用重复开页掩盖失败。其他浏览器和 Windows 保留系统 URL 打开行为，目前不保证标签页复用。

package/packages/runtime-host/src/codex-injection.mjs

@@ -1,3 +1,4 @@
+import { readFileSync } from "node:fs";
 import { createCodexEnvironment } from "../../codex-adapter/src/renderer/environment.mjs";
 // 注入源生成：createInjectionSource 产出注入到 Codex Renderer 的自包含脚本字符串。
 // 该字符串经 CDP 注入后独立执行，因此 install 函数体必须自包含；
@@ -8,7 +9,9 @@ import { createUIInstallerSource } from "../../ui/src/install.mjs";
 import { randomBytes } from "node:crypto";
 import { CODEX_THEME_TOKENS, CODEX_THEME_TOKEN_ALIASES, MINECODEX_THEME_BINDINGS } from "../../ui/src/native/tokens.mjs";
 
-export const RUNTIME_VERSION = 107;
+export const RUNTIME_VERSION = 108;
+const PROJECT_ICON = readFileSync(new URL("../../../assets/brand/minecodex-icon.svg", import.meta.url), "utf8");
+const EXTERNAL_ICON = readFileSync(new URL("../../ui/assets/arrow-up-right.svg", import.meta.url), "utf8");
 export const HOST_BINDING_NAME = "__codexPersonalHostAction";
 export const CSP_BOOTSTRAP_VERSION = 1;
 export const CSP_BOOTSTRAP_KEY = "__mineCodexCspBootstrapVersion";
@@ -204,6 +207,8 @@ export function createInjectionSource(features, {
       } : null,
       hostActions: new Set(feature.hostActions ?? []),
     }));
+    featureUI.accountMenuEntry?.({ label:"MineCodex", icon:config.projectIcon, externalIcon:config.externalIcon,
+      onOpen:() => requestPageHostAction("minecodex", "open-control-panel", {}) });
     const featureById = new Map(features.map((feature) => [feature.id, feature]));
     const sidebarFeatures = features.filter((feature) => feature.entry?.kind === "sidebar");
     const toolbarFeatures = features.filter((feature) => feature.entry?.kind === "conversation-toolbar");
@@ -2170,14 +2175,14 @@ export function createInjectionSource(features, {
     }
 
     function requestPageHostAction(featureId, action, payload) {
-      if (!featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
+      if (!(featureId === "minecodex" && action === "open-control-panel") && !featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
       if (typeof globalThis[config.bindingName] !== "function") return Promise.reject(new Error("Host bridge is unavailable"));
       return new Promise((resolve, reject) => {
         const requestId = crypto.randomUUID();
         const timer = setTimeout(() => {
           pendingHostActions.delete(requestId);
           reject(new Error("Host request timed out"));
-        }, 10_000);
+        }, featureId === "minecodex" ? 30_000 : 10_000);
         pendingHostActions.set(requestId, { kind: "page-script", resolve, reject, timer });
         try {
           globalThis[config.bindingName](JSON.stringify({ token: config.bindingToken, featureId, requestId, action, payload }));
@@ -2438,6 +2443,8 @@ export function createInjectionSource(features, {
     } : null,
   }));
   return `(${install.toString()})(${JSON.stringify({
+    projectIcon: PROJECT_ICON,
+    externalIcon: EXTERNAL_ICON,
     version: RUNTIME_VERSION,
     sessionId: runtimeSessionId,
     bindingName,

package/packages/runtime-host/src/codex-runtime.mjs

@@ -1,3 +1,6 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { promisify } from "node:util";
+import { fileURLToPath } from "node:url";
 import { LocalImageSource } from "../../../features/images/src/backend/local-image-source.mjs";
 import { cloudImagesAction } from "../../../features/images/src/backend/cloud-library.mjs";
 // CodexRuntime：Codex Renderer 生命周期与 host action 执行。
@@ -76,7 +79,9 @@ export class CodexRuntime {
     onStatusChange = null,
     sitesService = null,
     onManagedCodexPidChange = null,
+    openControlPanel = () => promisify(execFileCallback)(process.execPath, [fileURLToPath(new URL("../../cli/bin/mcx.mjs", import.meta.url)), "gui"], { timeout:20_000 }),
   }) {
+    this.openControlPanel = openControlPanel;
     this.features = features;
     this.sitesService = sitesService ?? (features.some(feature => feature.id === "sites") ? new SitesService() : null);
     this.localImageSource = features.some(feature => feature.id === "images") ? new LocalImageSource({dataDir:path.join(profileDir,"minecodex-image-gen")}) : null;
@@ -524,6 +529,11 @@ export class CodexRuntime {
       return;
     }
     if (request.token !== this.bindingTokens.get(targetId) || typeof request.requestId !== "string") return;
+    if (request.featureId === "minecodex" && request.action === "open-control-panel") {
+      try { await this.openControlPanel(); await this.resolveHostAction(client, request.requestId, {ok:true,result:{opened:true}}); }
+      catch (error) { await this.resolveHostAction(client, request.requestId, {ok:false,error:{code:"CONTROL_PANEL_FAILED",message:error.stderr?.trim() || error.message}}); }
+      return;
+    }
     const feature = this.features.find((candidate) => candidate.id === request.featureId);
     if (feature?.id === "session-status" && request.action === "refresh-session-status") {
       if (this.sessionStatusReader && this.clients.get(targetId) === client && !this.stopping) {

package/packages/ui/DESIGN.md

@@ -23,7 +23,7 @@
 
 当前page-script通过 `config.ui` 使用公共能力；现有API包括 `heading`、`footer`、`action`、`overlay`、`surface`。`surface(node, kind, options)` 显式区分原生材质；`page`、`mount`、`trapFocus`、`composerMenu`、`tooltipSurface`、`navigationRail` 维护实际复用的层级、焦点与定位。`entry.resources` 通过 `config.resources` 提供插件自身 CSS 与图标，通用视觉仍由组件库维护。
 
-独立全页面且无专属二级导航的功能使用 `config.ui.page(node, { sidebar:"none" })`。移除页面前调用 `config.ui.releasePage(node)`；若用户正在主动选择原生导航，则传 `{ restoreNavigation:false }`，避免恢复动作覆盖用户选择。默认 `sidebar:"inherit"` 保留现有接入行为，不自动迁移其他功能。页面壳的产品规则与验收标准见根 DESIGN.md 的「全页面功能的页面壳选择」。
+独立全页面且无专属二级导航的功能使用 `config.ui.page(node, { sidebar:"none" })`。移除页面前调用 `config.ui.releasePage(node)`；若用户正在主动选择原生导航，则传 `{ restoreNavigation:false }`，避免恢复动作覆盖用户选择。`sidebar:"none"` 页面通过 `onNavigate` 接收原生路由提交后的退出通知；一级、二级和程序化导航共用该契约，悬浮展开与加载中的通知不关闭页面。Adapter 在通知前取消路由订阅并放弃恢复旧位置，功能回调负责移除内容与恢复自身状态。默认 `sidebar:"inherit"` 保留现有接入行为，不自动迁移其他功能。页面壳的产品规则与验收标准见根 DESIGN.md 的「全页面功能的页面壳选择」。
 
 Renderer安装函数经序列化注入，必须自包含。组件代码与Node/CDP隔离，宿主负责组装注入源码、生命周期和iframe主题桥；不为整理目录引入不必要的打包系统。
 
@@ -32,3 +32,7 @@ Renderer安装函数经序列化注入，必须自包含。组件代码与Node/C
 ## 验证边界
 
 组件验证关注可注入性、结构与回调、状态清理、挂载/焦点以及所选原生类型的实际行为，不镜像每条CSS写实现测试。布局、材质和原生状态变化按风险做隔离验收；只移动文件时验证导入、序列化、发布名单与已有功能回归。
+
+## 账号菜单接入
+
+`accountMenuEntry({label, icon, externalIcon, onOpen})` 通过 native/account-menu Adapter 获取原生 Settings 模板与关闭句柄。组件只修改脱离 React 的副本，负责重建去重、相邻键盘导航与卸载；回调拥有打开动作，组件不读取控制台 token 或浏览器状态。通用位置与视觉规则见根 DESIGN.md。

package/packages/ui/assets/arrow-up-right.svg

@@ -0,0 +1,14 @@
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="2"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M7 7h10v10" />
+  <path d="M7 17 17 7" />
+</svg>

package/packages/ui/assets/lucide-LICENSE.txt

@@ -0,0 +1,43 @@
+ISC License
+
+Copyright (c) 2026 Lucide Icons and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+---
+
+The following Lucide icons are derived from the Feather project:
+
+airplay, alert-circle, alert-octagon, alert-triangle, aperture, arrow-down-circle, arrow-down-left, arrow-down-right, arrow-down, arrow-left-circle, arrow-left, arrow-right-circle, arrow-right, arrow-up-circle, arrow-up-left, arrow-up-right, arrow-up, at-sign, calendar, cast, check, chevron-down, chevron-left, chevron-right, chevron-up, chevrons-down, chevrons-left, chevrons-right, chevrons-up, circle, clipboard, clock, code, columns, command, compass, corner-down-left, corner-down-right, corner-left-down, corner-left-up, corner-right-down, corner-right-up, corner-up-left, corner-up-right, crosshair, database, divide-circle, divide-square, dollar-sign, download, external-link, feather, frown, hash, headphones, help-circle, info, italic, key, layout, life-buoy, link-2, link, loader, lock, log-in, log-out, maximize, meh, minimize, minimize-2, minus-circle, minus-square, minus, monitor, moon, more-horizontal, more-vertical, move, music, navigation-2, navigation, octagon, pause-circle, percent, plus-circle, plus-square, plus, power, radio, rss, search, server, share, shopping-bag, sidebar, smartphone, smile, square, table-2, tablet, target, terminal, trash-2, trash, triangle, tv, type, upload, x-circle, x-octagon, x-square, x, zoom-in, zoom-out
+
+The MIT License (MIT) (for the icons listed above)
+
+Copyright (c) 2013-present Cole Bemis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/packages/ui/src/components/account-menu.mjs

@@ -0,0 +1,74 @@
+export function installAccountMenuEntry(signal, ui, native) {
+  function accountMenuEntry({ label, icon, externalIcon, onOpen }) {
+    const marker = "data-mcx-account-menu-entry";
+    let node, anchor, entryBindings, opening = false;
+    const bindings = new AbortController();
+    function svg(source, template = null) {
+      const result = new DOMParser().parseFromString(source, "image/svg+xml").documentElement;
+      result.setAttribute("aria-hidden", "true");
+      result.removeAttribute("role");
+      result.removeAttribute("aria-labelledby");
+      result.querySelectorAll("title, desc").forEach(n => n.remove());
+      result.setAttribute("class", template?.getAttribute("class") ?? "icon-xs shrink-0");
+      return result;
+    }
+    async function activate(event) {
+      event?.preventDefault();
+      event?.stopPropagation();
+      if (opening) return;
+      opening = true;
+      const close = anchor.close;
+      try { await onOpen(); close(); }
+      catch (error) { console.warn("[MineCodex] Control panel could not open", error); window.alert(error.message); }
+      finally { opening = false; }
+    }
+    function sync() {
+      if (signal.aborted) return;
+      const found = native.settings();
+      if (!found) { entryBindings?.abort(); node?.remove(); node = null; anchor = null; return; }
+      if (node?.isConnected && anchor.item === found.item) return;
+      entryBindings?.abort();
+      entryBindings = new AbortController();
+      node?.remove();
+      anchor = found;
+      // 只修改脱离 React 的副本，保留原生 Settings 节点及事件。
+      node = found.item.cloneNode(true);
+      for (const element of [node, ...node.querySelectorAll("*")]) {
+        for (const attr of [...element.attributes]) {
+          if (attr.name === "id" || attr.name === "title" || attr.name.startsWith("aria-")
+            || attr.name.startsWith("data-")) element.removeAttribute(attr.name);
+        }
+      }
+      node.setAttribute(marker, "");
+      node.setAttribute("role", "menuitem");
+      node.tabIndex = -1;
+      const [leading, title, trailing] = node.querySelector("div").children;
+      leading.replaceChildren(svg(icon, leading.querySelector("svg")));
+      title.textContent = label;
+      trailing.replaceChildren(svg(externalIcon));
+      node.addEventListener("click", activate, { signal:entryBindings.signal });
+      node.addEventListener("pointermove", () => node.focus({ preventScroll:true }), { signal:entryBindings.signal });
+      found.item.after(node);
+    }
+    function keyboard(event) {
+      if (!anchor || !node?.isConnected || !anchor.menu.contains(event.target)) return;
+      const current = event.target.closest('[role="menuitem"]');
+      let next;
+      if (current === anchor.item && event.key === "ArrowDown") next = node;
+      else if (current === node && event.key === "ArrowUp") next = anchor.item;
+      else if (current === node && event.key === "ArrowDown") {
+        const items = [...anchor.menu.querySelectorAll('[role="menuitem"]')];
+        next = items[items.indexOf(node) + 1] ?? items[0];
+      } else if (current === node && ["Enter", " "].includes(event.key)) { void activate(event); return; }
+      if (next) { event.preventDefault(); event.stopImmediatePropagation(); next.focus({ preventScroll:true }); }
+    }
+    document.addEventListener("keydown", keyboard, { capture:true, signal:bindings.signal });
+    const observer = new MutationObserver(sync);
+    observer.observe(document.documentElement, { childList:true, subtree:true });
+    const dispose = () => { observer.disconnect(); bindings.abort(); entryBindings?.abort(); node?.remove(); node = null; anchor = null; };
+    signal.addEventListener("abort", dispose, { once:true });
+    sync();
+    return { sync, dispose };
+  }
+  return { accountMenuEntry };
+}

package/packages/ui/src/components/page.mjs

@@ -2,8 +2,8 @@ export function installPage(signal, ui, native) {
   const pages = new Map();
   signal.addEventListener("abort", () => { for (const lease of pages.values()) lease.release(); pages.clear(); }, { once:true });
   return {
-    page(node, { transparent = false, sidebar = "inherit" } = {}) {
-      if (sidebar === "none" && !pages.has(node)) pages.set(node, native.standalone());
+    page(node, { transparent = false, sidebar = "inherit", onNavigate } = {}) {
+      if (sidebar === "none" && !pages.has(node)) pages.set(node, native.standalone({ onNavigate }));
       ui.surface(node, "page", { variant:transparent ? "transparent" : "opaque" });
       return ui.layer(node, "page");
     },

package/packages/ui/src/foundation/layers.mjs

@@ -4,6 +4,7 @@ export function installLayers(signal) {
   style.setAttribute("data-minecodex-ui-styles", "layers");
   style.textContent = `
     [data-mcx-ui-layer=page] { position:fixed; z-index:20; }
+    [data-mcx-ui-layer=notification] { position:fixed; z-index:30; }
     [data-mcx-ui-layer=floating], [data-mcx-ui-layer=modal] { position:fixed; z-index:50; }
   `;
   document.head.append(style);

package/packages/ui/src/install.mjs

@@ -1,3 +1,5 @@
+import { createNativeAccountMenuAdapter } from "./native/account-menu.mjs";
+import { installAccountMenuEntry } from "./components/account-menu.mjs";
 import { createNativeThemeAdapter } from "./native/theme.mjs";
 import { createNativePageAdapter } from "./native/page.mjs";
 import { createNativeRailAdapter } from "./native/navigation-rail.mjs";
@@ -19,6 +21,7 @@ export function createUIInstallerSource() {
     Object.assign(ui, (${installPage.toString()})(signal, ui, (${createNativePageAdapter.toString()})(context.codex)));
     Object.assign(ui, (${installNavigationRail.toString()})(signal, ui, (${createNativeRailAdapter.toString()})(context.codex)));
     Object.assign(ui, (${installFeatureTooltips.toString()})(signal));
+    Object.assign(ui, (${installAccountMenuEntry.toString()})(signal, ui, (${createNativeAccountMenuAdapter.toString()})(context.codex)));
     return ui;
   }`;
 }

package/packages/ui/src/native/account-menu.mjs

@@ -0,0 +1,21 @@
+export function createNativeAccountMenuAdapter(codex) {
+  function settings() {
+    for (const menu of document.querySelectorAll('[role="menu"]')) {
+      if (!menu.checkVisibility({ visibilityProperty:true })) continue;
+      for (const item of menu.querySelectorAll('[role="menuitem"]')) {
+        const profile = codex.props(item, p => typeof p.onOpenSettings === "function" && "settingsShortcut" in p);
+        if (!profile || !codex.props(item, p => p.onClick === profile.onOpenSettings)) continue;
+        const content = item.querySelector('[data-menu-row-content]');
+        const [leading, label, shortcut] = content?.children ?? [];
+        if (!leading?.querySelector('svg') || !label || !shortcut) continue;
+        const owner = codex.props(item, p => typeof p.onClose === "function" && "open" in p);
+        if (!owner) continue;
+        codex.report("account-menu", true);
+        return { menu, item, close:owner.onClose };
+      }
+    }
+    codex.report("account-menu", false, "profile-menu-unavailable");
+    return null;
+  }
+  return { settings };
+}

package/packages/ui/src/native/page.mjs

@@ -1,23 +1,38 @@
 // 原生页面壳由路由决定；借用 Projects 的无上下文侧栏壳，不改侧栏展开偏好。
 export function createNativePageAdapter(codex) {
-  function standalone() {
+  function standalone({ onNavigate } = {}) {
     const rail = codex.rail();
     const scope = codex.props(rail, props => Boolean((props.router ?? props.value?.router)?.navigate));
     const router = scope?.router ?? scope?.value?.router;
     const origin = router?.state?.location;
     if (!origin) throw new Error("The native page navigation was not found");
+    if (onNavigate && typeof router.subscribe !== "function") throw new Error("The native page navigation subscription was not found");
     const target = "/projects";
     const changed = origin.pathname !== target;
     if (changed) void router.navigate(target, { replace:true, state:origin.state });
     let released = false;
-    return {
+    let unsubscribe = null;
+    let shell = router.state.location.pathname === target ? router.state.location : null;
+    const lease = {
       release({ restoreNavigation=true } = {}) {
         if (released) return;
         released = true;
+        unsubscribe?.();
         if (changed && restoreNavigation && router.state.location.pathname === target)
           void router.navigate(origin, { replace:true, state:origin.state });
       },
     };
+    if (onNavigate) unsubscribe = router.subscribe(state => {
+      if (released || (state.navigation?.state && state.navigation.state !== "idle")) return;
+      const location = state.location;
+      // 等待借用页面壳的首次提交；hover 和 loader 通知不代表用户离开。
+      if (!shell && location === origin) return;
+      if (!shell && location.pathname === target) { shell = location; return; }
+      if (location === shell) return;
+      lease.release({ restoreNavigation:false });
+      onNavigate();
+    });
+    return lease;
   }
   return { standalone };
 }

package/packages/ui/src/native/tokens.mjs

@@ -39,6 +39,7 @@ export const CODEX_THEME_TOKENS = Object.freeze([
   "--color-background-elevated-primary-opaque",
   "--color-background-primary-ghost-hover",
   "--color-chart-blue",
+  "--color-chart-green",
   "--color-chart-purple",
   "--color-background-panel",
   "--color-background-control",