minecodex 2.0.5 → 2.0.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minecodex",
-  "version": "2.0.5",
+  "version": "2.0.7",
   "description": "Lightweight, local-first plugins for the Codex desktop app.",
   "license": "MIT",
   "type": "module",
@@ -41,6 +41,7 @@
     "features/session-status/vendor/lucide-LICENSE",
     "features/session-status/vendor/phosphor-LICENSE",
     "apps/dashboard/app.js",
+    "apps/dashboard/assets",
     "apps/dashboard/favicon.svg",
     "apps/dashboard/index.html",
     "apps/dashboard/styles.css",
@@ -65,7 +66,13 @@
     "packages/codex-adapter/src",
     "packages/codex-adapter/package.json",
     "packages/ui/package.json",
-    "DESIGN.md"
+    "DESIGN.md",
+    "assets/brand/minecodex-icon.svg",
+    "assets/brand/minecodex-icon-light.svg",
+    "assets/brand/minecodex-icon-dark.svg",
+    "assets/brand/references/lucide-LICENSE.txt",
+    "assets/readme/hero.svg",
+    "packages/ui/assets"
   ],
   "engines": {
     "node": ">=22.5.0"
@@ -80,7 +87,8 @@
     "pack:check": "npm pack --dry-run",
     "pack:audit": "node scripts/audit-package.mjs",
     "prepublishOnly": "npm test && npm run check && npm run pack:audit",
-    "test:ui": "node --test packages/ui/test/*.test.mjs"
+    "test:ui": "node --test packages/ui/test/*.test.mjs",
+    "build:icons": "node scripts/build-brand-icons.mjs"
   },
   "repository": {
     "type": "git",

package/packages/cli/native/MineCodex.app/Contents/Info.plist

@@ -14,12 +14,14 @@
   <string>6.0</string>
   <key>CFBundleName</key>
   <string>MineCodex</string>
+  <key>CFBundleIconFile</key>
+  <string>MineCodex.icns</string>
   <key>CFBundlePackageType</key>
   <string>APPL</string>
   <key>CFBundleShortVersionString</key>
-  <string>1.0.0</string>
+  <string>1.0.1</string>
   <key>CFBundleVersion</key>
-  <string>1</string>
+  <string>2</string>
   <key>LSBackgroundOnly</key>
   <true/>
   <key>LSMinimumSystemVersion</key>

package/packages/cli/native/MineCodex.app/Contents/_CodeSignature/CodeResources

@@ -4,6 +4,10 @@
 <dict>
 	<key>files</key>
 	<dict>
+		<key>Resources/MineCodex.icns</key>
+		<data>
+		mSztCiWeEvLkAINXLTTBTVSA0f8=
+		</data>
 		<key>Resources/MineCodexServiceHost</key>
 		<data>
 		kB0iYBcULzqcS1yOgYpY3LZjeq4=
@@ -18,6 +22,13 @@
 			mGWkf+X17Pau3uy8xUUB1s+JXofeKYKNRzFPk3FXeaA=
 			</data>
 		</dict>
+		<key>Resources/MineCodex.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			Wg3Q9bbvnrEwou/t4h9Gk/nWmlwm0UGGt+qR4+LySAI=
+			</data>
+		</dict>
 		<key>Resources/MineCodexServiceHost</key>
 		<dict>
 			<key>hash2</key>

package/packages/cli/native/README.md

@@ -16,3 +16,34 @@ Rebuild deliberately with:
 ```bash
 npm run build:service
 ```
+
+## Icon bundle revision 1.0.1
+
+This is an explicit native resource revision: `CFBundleIconFile` now points to
+`Contents/Resources/MineCodex.icns`, bundle version is `2`, and the outer app is
+re-signed. The service host executable remains byte-for-byte unchanged. The
+manager's ad-hoc designated requirement changes when its Info.plist changes.
+The service identifier and launch-agent plist remain unchanged.
+
+The existing `MacPlatformAdapter.installService()` is the migration path: run the
+old installed manager's `unregister` before replacing its bundle; verify the new
+staged bundle; replace it; then register and kickstart the new service. An old
+registration failure aborts replacement. Use `mcx install` / the normal update
+flow; do not copy a new icon or re-sign the installed app in place. System approval
+may be required after re-registration; preserve macOS's decision and existing CLI
+reporting. Real Background Items approval and UI upgrade acceptance must be checked
+on a target installation before release.
+
+The icon uses the filled project mark on a neutral rounded backing so one ICNS
+remains legible in light and dark system surfaces. SVG artwork is generated at
+`assets/brand/minecodex-service-icon.svg` by `npm run build:icons`. Rasterize that
+SVG into an iconset at 16/32/128/256/512px and each size's @2x resolution, then run
+`iconutil -c icns <iconset> -o app-template/Contents/Resources/MineCodex.icns`.
+Commit the resulting template ICNS with any deliberate native artwork revision.
+`npm run build:service` copies it into the built bundle before signing. Ordinary
+JavaScript releases continue shipping the existing signed bundle unchanged.
+
+Validation for this revision: strict deep signature verification, universal
+architectures, ICNS structure and plist checks, system icon loading through
+`NSWorkspace`, installer regressions, and npm package audit. These checks do not
+register a background item or change an installed service.

package/packages/cli/src/browser-control-panel.mjs

@@ -0,0 +1,48 @@
+// 标签页枚举留在平台适配层；只匹配控制台 origin 的根页或一次性登录页。
+export const CONTROL_PANEL_BROWSER_SCRIPT = `
+ObjC.import('CoreServices');
+function run(argv) {
+  const url = argv[0], origin = argv[1];
+  const bundle = ObjC.unwrap(ObjC.castRefToObject($.LSCopyDefaultHandlerForURLScheme($('http'))));
+  const chromium = ['com.google.Chrome', 'com.google.Chrome.canary', 'org.chromium.Chromium', 'com.microsoft.edgemac', 'com.brave.Browser', 'com.vivaldi.Vivaldi'];
+  if (bundle !== 'com.apple.Safari' && chromium.indexOf(bundle) < 0) return JSON.stringify({mode:'open', reuseSupported:false});
+  const browser = Application(bundle);
+  if (!browser.running()) return JSON.stringify({mode:'open', reuseSupported:true});
+  try {
+    const windows = browser.windows();
+    for (let w = 0; w < windows.length; w++) {
+      const tabs = windows[w].tabs();
+      for (let t = 0; t < tabs.length; t++) {
+        const candidate = tabs[t].url();
+        if (candidate !== origin + '/' && candidate.indexOf(origin + '/auth?') !== 0) continue;
+        if (bundle === 'com.apple.Safari') windows[w].currentTab = tabs[t];
+        else windows[w].activeTabIndex = t + 1;
+        windows[w].minimized = false;
+        windows[w].index = 1;
+        browser.activate();
+        return JSON.stringify({mode:'reused', reuseSupported:true});
+      }
+    }
+    return JSON.stringify({mode:'open', reuseSupported:true});
+  } catch (error) {
+    return JSON.stringify({mode:'failed', code:error.errorNumber || 0});
+  }
+}`;
+
+export async function openMacControlPanel(execFile, url, origin) {
+  const target = new URL(url), base = new URL(origin);
+  if (target.origin !== base.origin || base.protocol !== "http:" || base.hostname !== "127.0.0.1"
+      || target.pathname !== "/auth" || !target.searchParams.get("exchange")) throw new Error("Invalid control panel URL");
+  let stdout;
+  try { ({ stdout } = await execFile("/usr/bin/osascript", ["-l", "JavaScript", "-e", CONTROL_PANEL_BROWSER_SCRIPT, url, base.origin], { timeout:10_000 })); }
+  catch { throw new Error("无法连接默认浏览器，请重试打开 MineCodex。"); }
+  const result = JSON.parse(stdout);
+  if (result.mode === "failed") {
+    throw new Error(result.code === -1743
+      ? "无法定位 MineCodex 标签页。请在系统设置的自动化权限中允许控制默认浏览器后重试。"
+      : "无法定位默认浏览器中的 MineCodex 标签页，请重试。");
+  }
+  if (result.mode === "reused") return result;
+  await execFile("/usr/bin/open", [url]);
+  return { mode:"opened", reuseSupported:result.reuseSupported };
+}

package/packages/cli/src/commands.mjs

@@ -187,7 +187,9 @@ async function openCommand({ paths, platform, output, serviceProbe, fetchImpl })
     if (!exchangeResponse.ok) throw new Error(`MineCodex browser exchange failed: HTTP ${exchangeResponse.status}`);
     const { exchange } = await exchangeResponse.json();
     if (!exchange) throw new Error("MineCodex browser exchange did not return a short-lived value.");
-    await platform.openBrowser(`${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`);
+    const url = `${controlOrigin()}/auth?exchange=${encodeURIComponent(exchange)}`;
+    if (platform.openControlPanel) await platform.openControlPanel(url, controlOrigin());
+    else await platform.openBrowser(url);
   };
   if (reporter) await reporter.step(2, 2, "Opening the control panel", openControlPanel);
   else await openControlPanel();

package/packages/cli/src/control-server.mjs

@@ -17,6 +17,7 @@ const CONTENT_TYPES = new Map([
   [".html", "text/html; charset=utf-8"],
   [".js", "text/javascript; charset=utf-8"],
   [".svg", "image/svg+xml"],
+  [".ttf", "font/ttf"],
 ]);
 
 function tokenMatches(candidate, expected) {
@@ -197,10 +198,10 @@ async function iconResponse(id, paths, response) {
     iconPath = path.join(paths.featuresRoot, id, "assets", "ui", "sparkles.svg");
   } else if (id === "notes") {
     iconPath = path.join(paths.featuresRoot, id, "assets", "icons", "book-open.svg");
-  } else if (["images", "hide-upsell-banner", "session-status", "usage-meter"].includes(id)) {
+  } else if (FEATURE_IDS.includes(id)) {
     const manifest = JSON.parse(await readFile(path.join(paths.featuresRoot, id, "codex-feature.json"), "utf8"));
     const viewBox = manifest.icon?.viewBox ?? "0 0 24 24";
-    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
+    const svg = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox}" fill="none" stroke="currentColor" stroke-width="2.1" stroke-linecap="round" stroke-linejoin="round">${manifest.icon.markup}</svg>`;
     response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
     response.end(svg);
     return;
@@ -209,7 +210,9 @@ async function iconResponse(id, paths, response) {
     return;
   }
   response.writeHead(200, { "Content-Type": "image/svg+xml", "Cache-Control": "public, max-age=3600" });
-  await pipeline(createReadStream(iconPath), response);
+  // 仅统一控制台图标，不改变插件在 Codex 内使用的原始资源。
+  const svg = (await readFile(iconPath, "utf8")).replace(/stroke-width="[^"]+"/g, 'stroke-width="2.1"');
+  response.end(svg);
 }
 
 async function staticResponse(url, paths, response) {

package/packages/cli/src/platform.mjs

@@ -1,3 +1,4 @@
+import { openMacControlPanel } from "./browser-control-panel.mjs";
 import { execFile as execFileCallback } from "node:child_process";
 import { mkdir, readFile, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
 import os from "node:os";
@@ -704,6 +705,10 @@ export class MacPlatformAdapter {
     await this.execFile("/usr/bin/open", [url]);
   }
 
+  async openControlPanel(url, origin) {
+    return openMacControlPanel(this.execFile, url, origin);
+  }
+
   async openNativeCodex({ cdpPort } = {}) {
     const installation = await this.codex();
     if (!Number.isInteger(cdpPort) || cdpPort <= 0 || cdpPort > 65_535) {

package/packages/runtime-host/README.md

@@ -1,13 +1,13 @@
 # Codex Runtime Host
 
-本机个人 Codex 功能的统一运行宿主。它是唯一的 Injector / Adapter，负责：
+本机个人 Codex 功能的统一运行宿主。它是统一 Injector 与生命周期宿主，负责：
 
 - 连接或启动支持 loopback CDP 的隔离 Codex 桌面实例；
 - 从同级项目的 `codex-feature.json` 注册 Sidebar 或 Conversation toolbar 入口；
 - 挂载 full-page、Pinned Summary，并把 Detail iframe Surface 优先注册为 Codex 原生右侧 Task Tab；
 - 把 Codex 当前 resolved Theme Tokens 同步给每个 Surface；
 - 执行经过 manifest allowlist、Surface 身份和 renderer token 校验的 Host actions；
-- 把所有易变的 Codex DOM / CDP 细节留在一个 Adapter 中。
+- 维护共享 CDP、注入与可信通信；插件专有的 Codex 协议由各功能 Adapter 维护。
 
 各功能项目继续拥有自己的数据、HTTP API 与页面。宿主不读取业务数据库；单个
 功能服务失效不会阻止 Codex 或其他功能运行。
@@ -173,8 +173,7 @@ Host 会再次发送当前状态。功能页面可据此暂停隐藏状态下的
 | `Runtime.addBinding`、`DOM.setFileInputFiles`、注入脚本 | high-risk CDP | 必须使用隔离 profile 验收 |
 | `togglePinnedSummary`、`composer.addFiles` 字符串 | 探索证据 | 当前实现不把它们当契约 |
 
-这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后应只
-在这个宿主中修复；各功能的数据和 Web UI不需要跟随重写。
+这是非官方 CDP / DOM Adapter，不是公开的 Codex Contribution API。Codex 更新后按协议所有者修复：共享注入和生命周期归宿主，专有原生组件与 API 归对应插件 Adapter；领域规则与 Web UI不应直接跟随外部协议重写。
 
 
 ## 共享弹窗与浮层
@@ -197,8 +196,14 @@ config.ui.surface(popover); // 只统一材质，保留功能的定位与内容
 
 page-script 可以用 manifest 的 `entry.resources` 声明本功能内的 CSS/图标资源，宿主读取后通过 `config.resources` 一次传入。JSON 作为数据、其他文件作为文本；越出功能目录的路径会被拒绝。它不改变 host action、服务启动或消息协议。
 
-Images 提示词面板沿用原生 Version history 的特殊结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
+Images 提示词面板沿用原生 File info 的附属信息面板结构；iframe 页面继续通过宿主接收主题。会话统计与云 Library 业务归所属插件，Runtime Host 只组合业务能力和外部连接。领域规则与架构层参见根 [ARCHITECTURE.md](../../ARCHITECTURE.md)。
 
 `entry.sourceFactory` 可声明本插件内的源码工厂，导出 `createPageScriptSource()` 并返回 Renderer 函数体字符串。工厂路径不能越出插件；纯领域函数由插件工厂序列化，宿主不维护规则副本。Images 使用这一接口共享图片提示词溯源规则。
 
 Model Slider 的模型规则、原生控制器适配和专有呈现位于插件 `src/domain` / `src/frontend`，安装源码由插件工厂组装。宿主仅提供配置、locale、共享 UI、图标与刷新调度，维护 ensure/dispose 接线；原生菜单开合和节点恢复由插件负责。
+
+## 项目控制台入口
+
+Runtime Host 在账号菜单 Settings 下挂载 MineCodex 项目入口，不属于可开关的插件。`minecodex/open-control-panel` 是独立 builtin action，必须通过对应 renderer 的 binding token 验证；它不接受任意 URL 或 shell 参数，固定调用包内 CLI 的 `gui` 命令。组件的项目图标、外链箭头与菜单模板由共享 UI 提供。
+
+CLI 继续通过一次性 browser exchange 打开控制台。macOS 默认 Safari 与 Chrome/Chromium、Edge、Brave、Vivaldi 支持查找现有控制台标签页并激活；没有匹配页才调用系统默认浏览器打开登录地址。自动化权限被拒绝时返回错误，不用重复开页掩盖失败。其他浏览器和 Windows 保留系统 URL 打开行为，目前不保证标签页复用。

package/packages/runtime-host/src/codex-injection.mjs

@@ -1,3 +1,4 @@
+import { readFileSync } from "node:fs";
 import { createCodexEnvironment } from "../../codex-adapter/src/renderer/environment.mjs";
 // 注入源生成：createInjectionSource 产出注入到 Codex Renderer 的自包含脚本字符串。
 // 该字符串经 CDP 注入后独立执行，因此 install 函数体必须自包含；
@@ -8,7 +9,11 @@ import { createUIInstallerSource } from "../../ui/src/install.mjs";
 import { randomBytes } from "node:crypto";
 import { CODEX_THEME_TOKENS, CODEX_THEME_TOKEN_ALIASES, MINECODEX_THEME_BINDINGS } from "../../ui/src/native/tokens.mjs";
 
-export const RUNTIME_VERSION = 107;
+export const RUNTIME_VERSION = 108;
+const PROJECT_ICON = Object.fromEntries([16, 20].map(size => [size,
+  readFileSync(new URL(`../../ui/assets/minecodex-menu-${size}.svg`, import.meta.url), "utf8"),
+]));
+const EXTERNAL_ICON = readFileSync(new URL("../../ui/assets/arrow-up-right.svg", import.meta.url), "utf8");
 export const HOST_BINDING_NAME = "__codexPersonalHostAction";
 export const CSP_BOOTSTRAP_VERSION = 1;
 export const CSP_BOOTSTRAP_KEY = "__mineCodexCspBootstrapVersion";
@@ -204,6 +209,8 @@ export function createInjectionSource(features, {
       } : null,
       hostActions: new Set(feature.hostActions ?? []),
     }));
+    featureUI.accountMenuEntry?.({ label:"MineCodex", icon:config.projectIcon, externalIcon:config.externalIcon,
+      onOpen:() => requestPageHostAction("minecodex", "open-control-panel", {}) });
     const featureById = new Map(features.map((feature) => [feature.id, feature]));
     const sidebarFeatures = features.filter((feature) => feature.entry?.kind === "sidebar");
     const toolbarFeatures = features.filter((feature) => feature.entry?.kind === "conversation-toolbar");
@@ -2170,14 +2177,14 @@ export function createInjectionSource(features, {
     }
 
     function requestPageHostAction(featureId, action, payload) {
-      if (!featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
+      if (!(featureId === "minecodex" && action === "open-control-panel") && !featureById.get(featureId)?.hostActions.has(action)) return Promise.reject(new Error("Host action is not registered"));
       if (typeof globalThis[config.bindingName] !== "function") return Promise.reject(new Error("Host bridge is unavailable"));
       return new Promise((resolve, reject) => {
         const requestId = crypto.randomUUID();
         const timer = setTimeout(() => {
           pendingHostActions.delete(requestId);
           reject(new Error("Host request timed out"));
-        }, 10_000);
+        }, featureId === "minecodex" ? 30_000 : 10_000);
         pendingHostActions.set(requestId, { kind: "page-script", resolve, reject, timer });
         try {
           globalThis[config.bindingName](JSON.stringify({ token: config.bindingToken, featureId, requestId, action, payload }));
@@ -2438,6 +2445,8 @@ export function createInjectionSource(features, {
     } : null,
   }));
   return `(${install.toString()})(${JSON.stringify({
+    projectIcon: PROJECT_ICON,
+    externalIcon: EXTERNAL_ICON,
     version: RUNTIME_VERSION,
     sessionId: runtimeSessionId,
     bindingName,

package/packages/runtime-host/src/codex-runtime.mjs

@@ -1,3 +1,6 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { promisify } from "node:util";
+import { fileURLToPath } from "node:url";
 import { LocalImageSource } from "../../../features/images/src/backend/local-image-source.mjs";
 import { cloudImagesAction } from "../../../features/images/src/backend/cloud-library.mjs";
 // CodexRuntime：Codex Renderer 生命周期与 host action 执行。
@@ -76,7 +79,9 @@ export class CodexRuntime {
     onStatusChange = null,
     sitesService = null,
     onManagedCodexPidChange = null,
+    openControlPanel = () => promisify(execFileCallback)(process.execPath, [fileURLToPath(new URL("../../cli/bin/mcx.mjs", import.meta.url)), "gui"], { timeout:20_000 }),
   }) {
+    this.openControlPanel = openControlPanel;
     this.features = features;
     this.sitesService = sitesService ?? (features.some(feature => feature.id === "sites") ? new SitesService() : null);
     this.localImageSource = features.some(feature => feature.id === "images") ? new LocalImageSource({dataDir:path.join(profileDir,"minecodex-image-gen")}) : null;
@@ -524,6 +529,11 @@ export class CodexRuntime {
       return;
     }
     if (request.token !== this.bindingTokens.get(targetId) || typeof request.requestId !== "string") return;
+    if (request.featureId === "minecodex" && request.action === "open-control-panel") {
+      try { await this.openControlPanel(); await this.resolveHostAction(client, request.requestId, {ok:true,result:{opened:true}}); }
+      catch (error) { await this.resolveHostAction(client, request.requestId, {ok:false,error:{code:"CONTROL_PANEL_FAILED",message:error.stderr?.trim() || error.message}}); }
+      return;
+    }
     const feature = this.features.find((candidate) => candidate.id === request.featureId);
     if (feature?.id === "session-status" && request.action === "refresh-session-status") {
       if (this.sessionStatusReader && this.clients.get(targetId) === client && !this.stopping) {

package/packages/ui/DESIGN.md

@@ -23,7 +23,7 @@
 
 当前page-script通过 `config.ui` 使用公共能力；现有API包括 `heading`、`footer`、`action`、`overlay`、`surface`。`surface(node, kind, options)` 显式区分原生材质；`page`、`mount`、`trapFocus`、`composerMenu`、`tooltipSurface`、`navigationRail` 维护实际复用的层级、焦点与定位。`entry.resources` 通过 `config.resources` 提供插件自身 CSS 与图标，通用视觉仍由组件库维护。
 
-独立全页面且无专属二级导航的功能使用 `config.ui.page(node, { sidebar:"none" })`。移除页面前调用 `config.ui.releasePage(node)`；若用户正在主动选择原生导航，则传 `{ restoreNavigation:false }`，避免恢复动作覆盖用户选择。默认 `sidebar:"inherit"` 保留现有接入行为，不自动迁移其他功能。页面壳的产品规则与验收标准见根 DESIGN.md 的「全页面功能的页面壳选择」。
+独立全页面且无专属二级导航的功能使用 `config.ui.page(node, { sidebar:"none" })`。移除页面前调用 `config.ui.releasePage(node)`；若用户正在主动选择原生导航，则传 `{ restoreNavigation:false }`，避免恢复动作覆盖用户选择。`sidebar:"none"` 页面通过 `onNavigate` 接收原生路由提交后的退出通知；一级、二级和程序化导航共用该契约，悬浮展开与加载中的通知不关闭页面。Adapter 在通知前取消路由订阅并放弃恢复旧位置，功能回调负责移除内容与恢复自身状态。默认 `sidebar:"inherit"` 保留现有接入行为，不自动迁移其他功能。页面壳的产品规则与验收标准见根 DESIGN.md 的「全页面功能的页面壳选择」。
 
 Renderer安装函数经序列化注入，必须自包含。组件代码与Node/CDP隔离，宿主负责组装注入源码、生命周期和iframe主题桥；不为整理目录引入不必要的打包系统。
 
@@ -32,3 +32,7 @@ Renderer安装函数经序列化注入，必须自包含。组件代码与Node/C
 ## 验证边界
 
 组件验证关注可注入性、结构与回调、状态清理、挂载/焦点以及所选原生类型的实际行为，不镜像每条CSS写实现测试。布局、材质和原生状态变化按风险做隔离验收；只移动文件时验证导入、序列化、发布名单与已有功能回归。
+
+## 账号菜单接入
+
+`accountMenuEntry({label, icon, externalIcon, onOpen})` 通过 native/account-menu Adapter 获取原生 Settings 模板与关闭句柄。组件只修改脱离 React 的副本，负责重建去重、相邻键盘导航与卸载；回调拥有打开动作，组件不读取控制台 token 或浏览器状态。通用位置与视觉规则见根 DESIGN.md。

package/packages/ui/assets/arrow-up-right.svg

@@ -0,0 +1,13 @@
+<svg
+  xmlns="http://www.w3.org/2000/svg"
+  width="24"
+  height="24"
+  viewBox="0 0 24 24"
+  fill="none"
+  stroke="currentColor"
+  stroke-width="1.575"
+  stroke-linecap="round"
+  stroke-linejoin="round"
+>
+  <path d="M7 7h10v10M7 17 17 7" />
+</svg>

package/packages/ui/assets/lucide-LICENSE.txt

@@ -0,0 +1,43 @@
+ISC License
+
+Copyright (c) 2026 Lucide Icons and Contributors
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+---
+
+The following Lucide icons are derived from the Feather project:
+
+airplay, alert-circle, alert-octagon, alert-triangle, aperture, arrow-down-circle, arrow-down-left, arrow-down-right, arrow-down, arrow-left-circle, arrow-left, arrow-right-circle, arrow-right, arrow-up-circle, arrow-up-left, arrow-up-right, arrow-up, at-sign, calendar, cast, check, chevron-down, chevron-left, chevron-right, chevron-up, chevrons-down, chevrons-left, chevrons-right, chevrons-up, circle, clipboard, clock, code, columns, command, compass, corner-down-left, corner-down-right, corner-left-down, corner-left-up, corner-right-down, corner-right-up, corner-up-left, corner-up-right, crosshair, database, divide-circle, divide-square, dollar-sign, download, external-link, feather, frown, hash, headphones, help-circle, info, italic, key, layout, life-buoy, link-2, link, loader, lock, log-in, log-out, maximize, meh, minimize, minimize-2, minus-circle, minus-square, minus, monitor, moon, more-horizontal, more-vertical, move, music, navigation-2, navigation, octagon, pause-circle, percent, plus-circle, plus-square, plus, power, radio, rss, search, server, share, shopping-bag, sidebar, smartphone, smile, square, table-2, tablet, target, terminal, trash-2, trash, triangle, tv, type, upload, x-circle, x-octagon, x-square, x, zoom-in, zoom-out
+
+The MIT License (MIT) (for the icons listed above)
+
+Copyright (c) 2013-present Cole Bemis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/packages/ui/assets/minecodex-menu-16.svg

@@ -0,0 +1,7 @@
+<!-- Generated by scripts/build-brand-icons.mjs from assets/brand/minecodex-icon.svg. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16" fill="none">
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M6.23992 1.43098C7.46406 1.1031 8.54982 1.45396 9.38542 2.21516C10.5383 1.98366 11.9155 2.29793 12.8093 3.19172C13.6945 4.07741 14.0164 5.30994 13.7829 6.44953C14.5557 7.31992 14.8933 8.54971 14.569 9.76008C14.2447 10.9704 13.3375 11.8664 12.2331 12.2337C11.8657 13.3376 10.9704 14.2443 9.76042 14.5687C8.54999 14.893 7.32025 14.5555 6.44988 13.7825C5.3103 14.0161 4.07777 13.6943 3.19206 12.8089C2.30603 11.9228 1.98129 10.6886 2.2155 9.54817C1.44398 8.67777 1.10733 7.44883 1.43132 6.23957C1.7556 5.02965 2.66205 4.13253 3.76628 3.76496C4.13401 2.66129 5.0304 1.75519 6.23992 1.43098ZM8.84636 3.15461C8.21242 2.48417 7.42544 2.20118 6.51238 2.44563C5.58126 2.69512 4.90916 3.43143 4.69988 4.30989L4.62566 4.62434L4.3112 4.69953C3.43254 4.90862 2.69555 5.58058 2.44597 6.51203C2.19659 7.44329 2.49878 8.39365 3.15495 9.01399L3.38933 9.23567L3.29753 9.54524C3.03946 10.4106 3.25264 11.384 3.93425 12.0657C4.61596 12.7473 5.59015 12.9608 6.45574 12.7025L6.76531 12.6097L6.98699 12.845C7.6075 13.5014 8.55777 13.8045 9.48894 13.555C10.4198 13.3054 11.0903 12.5676 11.2995 11.6888L11.3747 11.3753L11.6891 11.3001C12.568 11.091 13.3058 10.4198 13.5553 9.4886C13.8048 8.55744 13.5017 7.60715 12.8454 6.98664L12.611 6.76496L12.7028 6.45539C12.961 5.59001 12.7483 4.61562 12.0671 3.93391C11.3946 3.26145 10.2567 3.03482 9.37761 3.29719L9.06804 3.38996L8.84636 3.15461Z" fill="currentColor"/>
+  <g transform="scale(0.6666666666666666)"><g id="pickaxe" transform="translate(6.24 6.24) scale(.48)" fill="currentColor">
+    <path d="M15.686 4.314 16.3 3.7a1 1 0 0 1 1.4 0l2.6 2.6a1 1 0 0 1 0 1.4l-.614.614a12.501 12.501 0 0 1 1.356 10.225 1 1 0 0 1-1.751-.119 22 22 0 0 0-3.393-6.319l-.198.199a1 1 0 0 1-1.4 0l-.219.169L6.619 20.38a1 1 0 1 1-3-3l7.912-7.912.169.232a1 1 0 0 1 0-1.4l.198-.197A22 22 0 0 0 5.58 4.71a1 1 0 0 1-.119-1.752 12.5 12.5 0 0 1 10.225 1.356Z"/>
+  </g></g>
+</svg>

package/packages/ui/assets/minecodex-menu-20.svg

@@ -0,0 +1,7 @@
+<!-- Generated by scripts/build-brand-icons.mjs from assets/brand/minecodex-icon.svg. -->
+<svg xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 20 20" fill="none">
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M7.79787 1.78095C9.33018 1.37054 10.6892 1.80862 11.7354 2.76044C13.1781 2.47254 14.8994 2.86492 16.0176 3.9831C17.1255 5.09146 17.5294 6.63391 17.2383 8.06025C18.2036 9.15 18.6252 10.6879 18.2197 12.2018C17.8139 13.7157 16.6796 14.8375 15.2988 15.2985C14.838 16.6794 13.7171 17.8134 12.2031 18.2194C10.689 18.6252 9.15041 18.2035 8.06057 17.238C6.63426 17.5291 5.09181 17.1254 3.98342 16.0173C2.87514 14.909 2.4696 13.3659 2.76076 11.9392C1.7958 10.8492 1.37577 9.31111 1.78127 7.79755C2.1869 6.28392 3.31944 5.16128 4.70022 4.69989C5.1615 3.31914 6.28421 2.18664 7.79787 1.78095ZM11.0518 3.94892C10.2613 3.11295 9.28034 2.76056 8.1426 3.06513C6.98179 3.37617 6.14459 4.29507 5.88381 5.39032L5.78908 5.78778L5.39065 5.88251C4.29532 6.14315 3.37656 6.98118 3.06545 8.14228C2.75466 9.30301 3.1314 10.4872 3.94924 11.2604L4.24709 11.5417L4.1299 11.9343C3.80831 13.013 4.07409 14.2271 4.92385 15.0768C5.77357 15.9262 6.98753 16.1917 8.06643 15.8698L8.459 15.7526L8.74025 16.0505C9.51379 16.8686 10.6978 17.2453 11.8584 16.9343C13.0186 16.6232 13.8554 15.7053 14.1162 14.6101L14.211 14.2116L14.6094 14.1169C15.705 13.8562 16.6245 13.0189 16.9356 11.8581C17.2464 10.6976 16.8687 9.51342 16.0508 8.73993L15.753 8.45868L15.8701 8.0661C16.192 6.98728 15.9265 5.77328 15.0772 4.92353C14.2391 4.08548 12.8208 3.80245 11.7246 4.12958L11.333 4.24677L11.0518 3.94892Z" fill="currentColor"/>
+  <g transform="scale(0.8333333333333334)"><g id="pickaxe" transform="translate(6.24 6.24) scale(.48)" fill="currentColor">
+    <path d="M15.686 4.314 16.3 3.7a1 1 0 0 1 1.4 0l2.6 2.6a1 1 0 0 1 0 1.4l-.614.614a12.501 12.501 0 0 1 1.356 10.225 1 1 0 0 1-1.751-.119 22 22 0 0 0-3.393-6.319l-.198.199a1 1 0 0 1-1.4 0l-.219.169L6.619 20.38a1 1 0 1 1-3-3l7.912-7.912.169.232a1 1 0 0 1 0-1.4l.198-.197A22 22 0 0 0 5.58 4.71a1 1 0 0 1-.119-1.752 12.5 12.5 0 0 1 10.225 1.356Z"/>
+  </g></g>
+</svg>

package/packages/ui/src/components/account-menu.mjs

@@ -0,0 +1,88 @@
+export function installAccountMenuEntry(signal, ui, native) {
+  function accountMenuEntry({ label, icon, externalIcon, onOpen }) {
+    const marker = "data-mcx-account-menu-entry";
+    let node, anchor, entryBindings, opening = false;
+    const bindings = new AbortController();
+    function svg(source, template = null) {
+      if (typeof source !== "string") source = source[Number(template.getAttribute("width"))];
+      const result = new DOMParser().parseFromString(source, "image/svg+xml").documentElement;
+      result.setAttribute("aria-hidden", "true");
+      result.removeAttribute("role");
+      result.removeAttribute("aria-labelledby");
+      result.querySelectorAll("title, desc").forEach(n => n.remove());
+      result.setAttribute("class", template?.getAttribute("class") ?? "icon-xs shrink-0");
+      if (template) {
+        // 原生 16/20px 图标由外层切换，品牌资源的 24px 不能覆盖它。
+        for (const name of ["width", "height", "style"]) {
+          const value = template.getAttribute(name);
+          if (value == null) result.removeAttribute(name);
+          else result.setAttribute(name, value);
+        }
+      }
+      return result;
+    }
+    async function activate(event) {
+      event?.preventDefault();
+      event?.stopPropagation();
+      if (opening) return;
+      opening = true;
+      const close = anchor.close;
+      try { await onOpen(); close(); }
+      catch (error) { console.warn("[MineCodex] Control panel could not open", error); window.alert(error.message); }
+      finally { opening = false; }
+    }
+    function sync() {
+      if (signal.aborted) return;
+      const found = native.settings();
+      if (!found) { entryBindings?.abort(); node?.remove(); node = null; anchor = null; return; }
+      if (node?.isConnected && anchor.item === found.item) return;
+      entryBindings?.abort();
+      entryBindings = new AbortController();
+      node?.remove();
+      anchor = found;
+      // 只修改脱离 React 的副本，保留原生 Settings 节点及事件。
+      node = found.item.cloneNode(true);
+      for (const element of [node, ...node.querySelectorAll("*")]) {
+        for (const attr of [...element.attributes]) {
+          if (attr.name === "id" || attr.name === "title" || attr.name.startsWith("aria-")
+            || attr.name.startsWith("data-")) element.removeAttribute(attr.name);
+        }
+      }
+      node.setAttribute(marker, "");
+      node.setAttribute("role", "menuitem");
+      node.tabIndex = -1;
+      const [leading, title, trailing] = node.querySelector("div").children;
+      // 保留紧凑/普通图标的原生容器及颜色、透明度和状态规则。
+      for (const template of leading.querySelectorAll("svg")) template.replaceWith(svg(icon, template));
+      title.textContent = label;
+      // 右侧提示沿用原生 Help 箭头的 tertiary 色，不套左侧图标的透明度。
+      trailing.style.color = "inherit";
+      const external = svg(externalIcon);
+      external.setAttribute("class", "icon-xs shrink-0 text-tertiary");
+      trailing.replaceChildren(external);
+      node.addEventListener("click", activate, { signal:entryBindings.signal });
+      node.addEventListener("pointermove", () => node.focus({ preventScroll:true }), { signal:entryBindings.signal });
+      found.item.after(node);
+    }
+    function keyboard(event) {
+      if (!anchor || !node?.isConnected || !anchor.menu.contains(event.target)) return;
+      const current = event.target.closest('[role="menuitem"]');
+      let next;
+      if (current === anchor.item && event.key === "ArrowDown") next = node;
+      else if (current === node && event.key === "ArrowUp") next = anchor.item;
+      else if (current === node && event.key === "ArrowDown") {
+        const items = [...anchor.menu.querySelectorAll('[role="menuitem"]')];
+        next = items[items.indexOf(node) + 1] ?? items[0];
+      } else if (current === node && ["Enter", " "].includes(event.key)) { void activate(event); return; }
+      if (next) { event.preventDefault(); event.stopImmediatePropagation(); next.focus({ preventScroll:true }); }
+    }
+    document.addEventListener("keydown", keyboard, { capture:true, signal:bindings.signal });
+    const observer = new MutationObserver(sync);
+    observer.observe(document.documentElement, { childList:true, subtree:true });
+    const dispose = () => { observer.disconnect(); bindings.abort(); entryBindings?.abort(); node?.remove(); node = null; anchor = null; };
+    signal.addEventListener("abort", dispose, { once:true });
+    sync();
+    return { sync, dispose };
+  }
+  return { accountMenuEntry };
+}

package/packages/ui/src/components/page.mjs

@@ -2,8 +2,8 @@ export function installPage(signal, ui, native) {
   const pages = new Map();
   signal.addEventListener("abort", () => { for (const lease of pages.values()) lease.release(); pages.clear(); }, { once:true });
   return {
-    page(node, { transparent = false, sidebar = "inherit" } = {}) {
-      if (sidebar === "none" && !pages.has(node)) pages.set(node, native.standalone());
+    page(node, { transparent = false, sidebar = "inherit", onNavigate } = {}) {
+      if (sidebar === "none" && !pages.has(node)) pages.set(node, native.standalone({ onNavigate }));
       ui.surface(node, "page", { variant:transparent ? "transparent" : "opaque" });
       return ui.layer(node, "page");
     },

package/packages/ui/src/foundation/layers.mjs

@@ -4,6 +4,7 @@ export function installLayers(signal) {
   style.setAttribute("data-minecodex-ui-styles", "layers");
   style.textContent = `
     [data-mcx-ui-layer=page] { position:fixed; z-index:20; }
+    [data-mcx-ui-layer=notification] { position:fixed; z-index:30; }
     [data-mcx-ui-layer=floating], [data-mcx-ui-layer=modal] { position:fixed; z-index:50; }
   `;
   document.head.append(style);

package/packages/ui/src/install.mjs

@@ -1,3 +1,5 @@
+import { createNativeAccountMenuAdapter } from "./native/account-menu.mjs";
+import { installAccountMenuEntry } from "./components/account-menu.mjs";
 import { createNativeThemeAdapter } from "./native/theme.mjs";
 import { createNativePageAdapter } from "./native/page.mjs";
 import { createNativeRailAdapter } from "./native/navigation-rail.mjs";
@@ -19,6 +21,7 @@ export function createUIInstallerSource() {
     Object.assign(ui, (${installPage.toString()})(signal, ui, (${createNativePageAdapter.toString()})(context.codex)));
     Object.assign(ui, (${installNavigationRail.toString()})(signal, ui, (${createNativeRailAdapter.toString()})(context.codex)));
     Object.assign(ui, (${installFeatureTooltips.toString()})(signal));
+    Object.assign(ui, (${installAccountMenuEntry.toString()})(signal, ui, (${createNativeAccountMenuAdapter.toString()})(context.codex)));
     return ui;
   }`;
 }

package/packages/ui/src/native/account-menu.mjs

@@ -0,0 +1,21 @@
+export function createNativeAccountMenuAdapter(codex) {
+  function settings() {
+    for (const menu of document.querySelectorAll('[role="menu"]')) {
+      if (!menu.checkVisibility({ visibilityProperty:true })) continue;
+      for (const item of menu.querySelectorAll('[role="menuitem"]')) {
+        const profile = codex.props(item, p => typeof p.onOpenSettings === "function" && "settingsShortcut" in p);
+        if (!profile || !codex.props(item, p => p.onClick === profile.onOpenSettings)) continue;
+        const content = item.querySelector('[data-menu-row-content]');
+        const [leading, label, shortcut] = content?.children ?? [];
+        if (!leading?.querySelector('svg') || !label || !shortcut) continue;
+        const owner = codex.props(item, p => typeof p.onClose === "function" && "open" in p);
+        if (!owner) continue;
+        codex.report("account-menu", true);
+        return { menu, item, close:owner.onClose };
+      }
+    }
+    codex.report("account-menu", false, "profile-menu-unavailable");
+    return null;
+  }
+  return { settings };
+}