orbit-codex-bridge 0.0.0-stage → 0.1.0

package/lib/rpc.mjs

@@ -0,0 +1,203 @@
+import { EventEmitter } from 'node:events';
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+import fs from 'node:fs';
+import path from 'node:path';
+import WebSocket from 'ws';
+
+export function findCodexBinary() {
+  if (process.env.ORBIT_CODEX_BIN) return process.env.ORBIT_CODEX_BIN;
+  if (process.platform !== 'win32') return 'codex';
+  const base = path.join(process.env.LOCALAPPDATA || '', 'OpenAI', 'Codex', 'bin');
+  try {
+    const candidates = fs.readdirSync(base).map(folder => path.join(base, folder, 'codex.exe')).filter(file => fs.existsSync(file));
+    candidates.sort((left, right) => fs.statSync(right).mtimeMs - fs.statSync(left).mtimeMs);
+    if (candidates.length) return candidates[0];
+  } catch {}
+  throw new Error('没有找到 Codex 原生可执行文件，请设置 ORBIT_CODEX_BIN。');
+}
+
+export class CodexRpc extends EventEmitter {
+  constructor({ home, endpoint = '', tokenFile = '' }) {
+    super();
+    this.home = home;
+    this.endpoint = endpoint;
+    this.tokenFile = tokenFile;
+    this.pending = new Map();
+    this.approvals = new Map();
+    this.threads = new Map();
+    this.starting = new Set();
+    this.sequence = 0;
+    this.connected = false;
+    this.connecting = null;
+    this.transport = null;
+    this.child = null;
+  }
+
+  async connect() {
+    if (this.connected) return;
+    if (this.connecting) return this.connecting;
+    this.connecting = this.open().catch(error => { this.disconnect(error); throw error; }).finally(() => { this.connecting = null; });
+    return this.connecting;
+  }
+
+  async open() {
+    if (this.endpoint) {
+      const url = new URL(this.endpoint);
+      if (url.username || url.password || url.search || url.hash) throw new Error('App Server 地址不能携带凭据或查询参数。');
+      if (url.protocol !== 'wss:' && !(url.protocol === 'ws:' && ['127.0.0.1','localhost','[::1]'].includes(url.hostname))) throw new Error('远程 App Server 必须使用 WSS。');
+      const headers = {};
+      if (this.tokenFile) headers.Authorization = `Bearer ${fs.readFileSync(this.tokenFile, 'utf8').trim()}`;
+      const socket = new WebSocket(url, { headers, maxPayload: 8 * 1024 * 1024, handshakeTimeout: 10000 });
+      this.transport = socket;
+      socket.on('close', () => { if (this.transport === socket) this.disconnect(new Error('App Server 连接中断；不会自动重放消息。')); });
+      socket.on('error', () => {});
+      await new Promise((resolve, reject) => { socket.once('open', resolve); socket.once('error', reject); });
+      socket.on('message', raw => this.receive(raw.toString()));
+    } else {
+      const child = spawn(findCodexBinary(), ['app-server', '--listen', 'stdio://'], {
+        env: { ...process.env, CODEX_HOME: this.home }, windowsHide: true, stdio: ['pipe','pipe','pipe']
+      });
+      this.child = child;
+      this.transport = child.stdin;
+      createInterface({ input: child.stdout }).on('line', line => this.receive(line));
+      child.stderr.on('data', () => {});
+      child.stdin.on('error', error => { if (this.child === child) this.disconnect(error); });
+      child.on('error', error => { if (this.child === child) this.disconnect(error); });
+      child.on('exit', () => { if (this.child === child) this.disconnect(new Error('独立接续实例已停止。')); });
+    }
+    await this.request('initialize', { clientInfo: { name: 'orbit_local_bridge', title: 'Orbit', version: '0.1.0' }, capabilities: { experimentalApi: true } });
+    this.send({ method: 'initialized' });
+    this.connected = true;
+    this.emit('event', { method: 'orbit/engine', params: { connected: true, mode: this.endpoint ? 'endpoint' : 'cold-resume' } });
+  }
+
+  send(message) {
+    const encoded = JSON.stringify(message);
+    if (this.transport instanceof WebSocket) {
+      if (this.transport.readyState !== WebSocket.OPEN) throw new Error('App Server 尚未连接。');
+      this.transport.send(encoded);
+    } else {
+      if (!this.transport || this.transport.destroyed) throw new Error('App Server 尚未连接。');
+      this.transport.write(`${encoded}\n`);
+    }
+  }
+
+  request(method, params, timeout = 30000) {
+    const id = ++this.sequence;
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => { this.pending.delete(id); reject(new Error(`${method} 超时；为避免重复执行，请先检查会话状态。`)); }, timeout);
+      this.pending.set(id, { resolve, reject, timer });
+      try { this.send({ id, method, params }); }
+      catch (error) { clearTimeout(timer); this.pending.delete(id); reject(error); }
+    });
+  }
+
+  receive(raw) {
+    let message;
+    try { message = JSON.parse(raw); } catch { return; }
+    if (message.id !== undefined && !message.method) {
+      const pending = this.pending.get(message.id);
+      if (!pending) return;
+      clearTimeout(pending.timer);
+      this.pending.delete(message.id);
+      if (message.error) pending.reject(new Error(message.error.message || 'App Server 请求失败。'));
+      else pending.resolve(message.result);
+      return;
+    }
+    if (message.id !== undefined && message.method) {
+      const supported = ['item/commandExecution/requestApproval','item/fileChange/requestApproval','item/tool/requestUserInput','item/permissions/requestApproval'];
+      if (!supported.includes(message.method) || !this.threads.has(message.params?.threadId)) {
+        this.send({ id: message.id, error: { code: -32601, message: 'This client does not implement the requested host tool.' } });
+        return;
+      }
+      this.approvals.set(String(message.id), message);
+      this.emit('event', { method: 'orbit/approval', params: { requestId: String(message.id), method: message.method, ...message.params } });
+      return;
+    }
+    if (message.method === 'serverRequest/resolved') this.approvals.delete(String(message.params?.requestId));
+    if (message.method === 'turn/started' && this.threads.has(message.params?.threadId)) this.threads.get(message.params.threadId).turnId = message.params.turn.id;
+    if (message.method === 'turn/completed' && this.threads.has(message.params?.threadId)) {
+      const thread = this.threads.get(message.params.threadId);
+      thread.lastCompletedTurnId = message.params.turn.id;
+      if (thread.turnId === message.params.turn.id) thread.turnId = null;
+    }
+    if (message.method) this.emit('event', message);
+  }
+
+  async resume(id, writable) {
+    await this.connect();
+    if (this.threads.has(id)) return;
+    const result = await this.request('thread/resume', { threadId: id, excludeTurns: true, sandbox: writable ? 'workspace-write' : 'read-only', approvalPolicy: 'on-request' });
+    if (result.thread.id !== id) throw new Error('返回的会话 ID 不一致，已拒绝发送消息。');
+    this.threads.set(id, { turnId: null, lastCompletedTurnId: null });
+  }
+
+  async startTurn(id, text, writable, settings = null) {
+    if (this.starting.has(id)) throw new Error('此会话正在发送，请勿并发提交。');
+    this.starting.add(id);
+    try {
+      await this.resume(id, writable);
+      const thread = this.threads.get(id);
+      if (thread.turnId) throw new Error('此会话仍在执行，请等待完成或停止后再发送。');
+      const result = await this.request('turn/start', {
+        threadId: id, input: [{ type: 'text', text }], approvalPolicy: 'on-request',
+        sandboxPolicy: writable ? { type: 'workspaceWrite', networkAccess: false, excludeTmpdirEnvVar: true, excludeSlashTmp: true } : { type: 'readOnly' },
+        ...(settings ? { model: settings.model, effort: settings.effort } : {})
+      });
+      const completed = thread.lastCompletedTurnId === result.turn.id;
+      thread.turnId = completed ? null : result.turn.id;
+      return { threadId: id, turnId: result.turn.id, completed };
+    } finally { this.starting.delete(id); }
+  }
+
+  async interrupt(id) {
+    const turnId = this.threads.get(id)?.turnId;
+    if (!turnId) throw new Error('没有由当前桥接实例管理的活动任务。');
+    return this.request('turn/interrupt', { threadId: id, turnId });
+  }
+
+  replyApproval(id, body) {
+    const request = this.approvals.get(String(id));
+    if (!request) throw new Error('审批已结束或不属于当前桥接实例。');
+    let result;
+    if (request.method === 'item/tool/requestUserInput') {
+      const answers = {};
+      for (const question of request.params.questions || []) {
+        const value = body.answers?.[question.id];
+        if (typeof value !== 'string' || !value.trim() || value.length > 4000) throw new Error('请回答所有问题。');
+        answers[question.id] = { answers: [value] };
+      }
+      result = { answers };
+    } else if (request.method === 'item/permissions/requestApproval') {
+      if (body.decision !== 'decline') throw new Error('首版暂不支持扩大权限，请在本机处理。');
+      result = { permissions: {}, scope: 'turn' };
+    } else {
+      if (!['accept','decline'].includes(body.decision)) throw new Error('无效审批决定。');
+      result = { decision: body.decision };
+    }
+    this.send({ id: request.id, result });
+    this.approvals.delete(String(id));
+    return { resolved: true };
+  }
+
+  disconnect(error) {
+    this.connected = false;
+    const transport = this.transport;
+    const child = this.child;
+    this.transport = null;
+    this.child = null;
+    if (transport instanceof WebSocket) transport.terminate();
+    else child?.kill();
+    for (const pending of this.pending.values()) { clearTimeout(pending.timer); pending.reject(error); }
+    this.pending.clear();
+    this.threads.clear();
+    this.starting.clear();
+    this.approvals.clear();
+    this.emit('event', { method: 'orbit/engine', params: { connected: false } });
+  }
+
+  close() {
+    this.disconnect(new Error('服务已停止。'));
+  }
+}

package/lib/store.mjs

@@ -0,0 +1,162 @@
+import { DatabaseSync } from 'node:sqlite';
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+
+export function cleanText(text) {
+  return String(text ?? '').replace(/<(external_browser_tabs|environment_context|system_reminder|INSTRUCTIONS)>[\s\S]*?<\/\1>/g, '').trim();
+}
+
+export function messageFromItem(item, timestamp = null) {
+  if (item.type === 'userMessage' || item.type === 'steeringUserMessage') {
+    const content = Array.isArray(item.content) ? item.content : Array.isArray(item.input) ? item.input : [];
+    const text = item.text || content.filter(part => ['text','inputText','input_text'].includes(part.type)).map(part => part.text || '').join('\n');
+    const attachments = content.filter(part => ['image','image_url','input_image','file','input_file'].includes(part.type)).map(part => ({
+      type: part.type,
+      name: part.name || part.filename || (part.path ? path.basename(part.path) : null),
+      mimeType: part.mimeType || part.mime_type || null
+    }));
+    return { id: item.id, role: 'user', text: cleanText(text || (attachments.length ? '已附加文件' : '')), attachments, timestamp };
+  }
+  if (item.type === 'agentMessage') return { id: item.id, role: 'assistant', text: cleanText(item.text), timestamp };
+  if (item.type === 'commandExecution') return {
+    id: item.id, role: 'activity', kind: 'command', text: cleanText(item.command || '执行命令'),
+    output: item.aggregatedOutput === null || item.aggregatedOutput === undefined ? '' : cleanText(typeof item.aggregatedOutput === 'string' ? item.aggregatedOutput : JSON.stringify(item.aggregatedOutput)).slice(-60000),
+    cwd: cleanText(item.cwd || ''), exitCode: Number.isSafeInteger(item.exitCode) ? item.exitCode : null,
+    durationMs: Number.isFinite(item.durationMs) ? item.durationMs : null,
+    status: item.status || 'unknown', timestamp
+  };
+  if (item.type === 'fileChange') {
+    const changes = (Array.isArray(item.changes) ? item.changes : []).filter(change => change && typeof change.path === 'string').map(change => ({
+      path: cleanText(change.path).slice(0, 2000),
+      kind: cleanText(change.kind?.type || change.kind || ''),
+      diff: typeof change.diff === 'string' ? cleanText(change.diff).slice(0, 60000) : ''
+    }));
+    return { id: item.id, role: 'activity', kind: 'fileChange', text: changes.map(change => change.path).join('\n'), changes, status: item.status || 'unknown', timestamp };
+  }
+  if (item.type === 'mcpToolCall') {
+    const content = Array.isArray(item.result?.content) ? item.result.content : [];
+    const resultText = content.filter(part => part?.type === 'text').map(part => part.text).join('\n');
+    const errorText = typeof item.error === 'string' ? item.error : item.error?.message || (item.error ? JSON.stringify(item.error) : '');
+    const output = errorText || resultText || (item.result?.structuredContent ? JSON.stringify(item.result.structuredContent) : '');
+    const argumentsText = item.arguments === null || item.arguments === undefined ? null : JSON.stringify(item.arguments).slice(0, 30000);
+    return {
+      id: item.id, role: 'activity', kind: 'tool',
+      text: `${cleanText(item.server || '工具')} / ${cleanText(item.tool || '调用')}`,
+      server: cleanText(item.server || ''), tool: cleanText(item.tool || ''),
+      arguments: argumentsText, output: cleanText(output).slice(0, 60000),
+      durationMs: Number.isFinite(item.durationMs) ? item.durationMs : null,
+      status: item.status || 'unknown', timestamp
+    };
+  }
+  if (item.type === 'webSearch') return {
+    id: item.id, role: 'activity', kind: 'webSearch',
+    text: cleanText(item.query || item.action?.query || '网页搜索'),
+    status: 'completed', timestamp
+  };
+  if (item.type === 'imageView') return {
+    id: item.id, role: 'activity', kind: 'imageView', text: cleanText(item.path || '图像'),
+    timestamp
+  };
+  return null;
+}
+
+export class NativeStore {
+  constructor(home) {
+    this.home = path.resolve(home);
+    this.statePath = path.join(this.home, 'state_5.sqlite');
+    this.historyPath = path.join(this.home, 'thread_history_1.sqlite');
+    if (!fs.existsSync(this.statePath)) throw new Error('没有找到原生会话数据库，请检查 ORBIT_CODEX_HOME。');
+    this.state = new DatabaseSync(this.statePath, { readOnly: true });
+    this.state.exec('PRAGMA query_only=ON; PRAGMA busy_timeout=1500;');
+    this.columns = new Set(this.state.prepare('PRAGMA table_info(threads)').all().map(column => column.name));
+    this.history = null;
+    if (fs.existsSync(this.historyPath)) {
+      this.history = new DatabaseSync(this.historyPath, { readOnly: true });
+      this.history.exec('PRAGMA query_only=ON; PRAGMA busy_timeout=1500;');
+    }
+  }
+  close() { this.history?.close(); this.state.close(); }
+  locked(id) {
+    try { fs.readFileSync(path.join(this.home, 'thread-writer-locks', `${id}.lock`)); return false; }
+    catch (error) { return error.code !== 'ENOENT'; }
+  }
+  row(id) {
+    if (!/^[a-zA-Z0-9_-]{8,120}$/.test(id)) return null;
+    return this.state.prepare('SELECT * FROM threads WHERE id=?').get(id) || null;
+  }
+  summary(row, projects) {
+    const cwd = row.cwd || '';
+    const leaf = cwd.split(/[\\/]/).filter(Boolean).at(-1) || '未分组';
+    return {
+      id: row.id, title: row.name || row.title || '未命名会话',
+      preview: cleanText(row.preview || row.first_user_message || '').slice(0, 220), cwd,
+      projectId: row.project_id || cwd || 'ungrouped', projectName: projects.get(row.project_id)?.name || leaf,
+      source: row.source, provider: row.model_provider, model: row.model || null,
+      archived: Boolean(row.archived), pinned: Boolean(row.is_pinned), locked: this.locked(row.id),
+      createdAt: row.created_at_ms || row.created_at * 1000, updatedAt: row.updated_at_ms || row.updated_at * 1000,
+      branch: row.git_branch || null, historyMode: row.history_mode || 'legacy'
+    };
+  }
+  list() {
+    let projects = new Map();
+    try { projects = new Map(this.state.prepare('SELECT id,name FROM projects').all().map(project => [project.id, project])); } catch {}
+    return this.state.prepare('SELECT * FROM threads ORDER BY updated_at DESC').all().map(row => this.summary(row, projects));
+  }
+  historyFor(id, before = null, limit = 60) {
+    const row = this.row(id);
+    if (!row) return null;
+    const pageSize = Math.max(1, Math.min(100, Number(limit) || 60));
+    if (this.history && row.history_mode === 'paginated') {
+      const marker = Number.isSafeInteger(Number(before)) && before !== null ? Number(before) : Number.MAX_SAFE_INTEGER;
+      const records = this.history.prepare('SELECT item_json,rollout_ordinal,created_at_ms FROM thread_items WHERE thread_id=? AND rollout_ordinal<? AND item_type IN (\'userMessage\',\'steeringUserMessage\',\'agentMessage\',\'commandExecution\',\'fileChange\',\'mcpToolCall\',\'webSearch\',\'imageView\') ORDER BY rollout_ordinal DESC LIMIT ?').all(id, marker, pageSize + 1);
+      const hasMore = records.length > pageSize;
+      const page = records.slice(0, pageSize).reverse();
+      const messages = page.map(record => {
+        try { return messageFromItem(JSON.parse(record.item_json), record.created_at_ms); } catch { return null; }
+      }).filter(message => message && (message.text || message.role === 'activity'));
+      const turn = this.history.prepare('SELECT turn_id,status FROM thread_turns WHERE thread_id=? ORDER BY rollout_ordinal DESC LIMIT 1').get(id);
+      return { id, messages, nextCursor: hasMore ? page[0].rollout_ordinal : null, truncated: false, latestTurn: turn ? { id: turn.turn_id, status: turn.status } : null };
+    }
+    return this.legacyHistory(row, pageSize, before);
+  }
+  legacyHistory(row, limit, before) {
+    const filePath = path.resolve(row.rollout_path);
+    const relative = path.relative(this.home, filePath);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) throw new Error('原生会话日志位于 CODEX_HOME 以外，已拒绝读取。');
+    const descriptor = fs.openSync(filePath, 'r');
+    let raw;
+    let truncated = false;
+    try {
+      const size = fs.fstatSync(descriptor).size;
+      const length = Math.min(size, 4 * 1024 * 1024);
+      const buffer = Buffer.alloc(length);
+      fs.readSync(descriptor, buffer, 0, length, size - length);
+      raw = buffer.toString('utf8');
+      if (size > length) { raw = raw.slice(raw.indexOf('\n') + 1); truncated = true; }
+    } finally { fs.closeSync(descriptor); }
+    const messages = [];
+    let latestTurn = null;
+    for (const [index, line] of raw.split('\n').entries()) {
+      try {
+        const record = JSON.parse(line);
+        const payload = record.payload || {};
+        if (record.type === 'response_item' && payload.type === 'message' && ['user','assistant'].includes(payload.role)) {
+          const text = cleanText((payload.content || []).filter(part => ['input_text','output_text','text'].includes(part.type)).map(part => part.text).join('\n'));
+          if (text && !text.startsWith('# AGENTS.md instructions')) messages.push({ id: payload.id || `legacy-${index}`, role: payload.role, text, timestamp: Date.parse(record.timestamp) || null });
+        }
+        if (record.type === 'event_msg' && ['task_started','task_complete','turn_aborted'].includes(payload.type)) latestTurn = { id: payload.turn_id, status: payload.type === 'task_started' ? 'inProgress' : 'completed' };
+      } catch {}
+    }
+    const end = before === null ? messages.length : Math.max(0, Math.min(messages.length, Number(before) || 0));
+    const start = Math.max(0, end - limit);
+    return { id: row.id, messages: messages.slice(start, end), nextCursor: start ? start : null, truncated, latestTurn };
+  }
+  revision(id = null) {
+    const files = [this.statePath, `${this.statePath}-wal`, this.historyPath, `${this.historyPath}-wal`];
+    if (id) { const row = this.row(id); if (row) files.push(row.rollout_path); }
+    return crypto.createHash('sha1').update(files.map(file => {
+      try { const stat = fs.statSync(file); return `${stat.size}:${stat.mtimeMs}`; } catch { return 'missing'; }
+    }).join('|')).digest('hex');
+  }
+}

package/orbit

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import {runCli} from './cli.mjs';
+
+await runCli();

package/package.json

@@ -1,6 +1,35 @@
 {
   "name": "orbit-codex-bridge",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Connect your original Codex desktop conversations to Orbit on the web.",
+  "engines": { "node": ">=24" },
+  "bin": {
+    "orbit": "orbit"
+  },
+  "files": [
+    "cli.mjs",
+    "orbit",
+    "server.mjs",
+    "relay-agent.mjs",
+    "relay-server.mjs",
+    "relay-store.mjs",
+    "lib/",
+    "public/"
+  ],
+  "scripts": {
+    "start": "node --env-file-if-exists=.env.local server.mjs",
+    "relay": "node --env-file-if-exists=.env.relay relay-server.mjs",
+    "relay:agent": "node --env-file-if-exists=.env.local relay-agent.mjs",
+    "prepublishOnly": "npm run check && npm test",
+    "test": "node --test test/*.test.mjs",
+    "test:native": "node test/native-smoke.mjs",
+    "check": "node --check cli.mjs && node --check server.mjs && node --check lib/store.mjs && node --check lib/rpc.mjs && node --check lib/desktop.mjs && node --check lib/device-auth.mjs && node --check public/app.js && node --check public/connect.js && node --check relay-server.mjs && node --check relay-store.mjs && node --check relay-agent.mjs && node --check public/admin.js"
+  },
+  "dependencies": {
+    "dompurify": "^3.3.0",
+    "marked": "^17.0.0",
+    "qrcode": "^1.5.4",
+    "ws": "^8.18.3"
+  }
+}

package/public/admin.css

@@ -0,0 +1,67 @@
+:root{font-family:Inter,"Segoe UI","Microsoft YaHei",sans-serif;color:#27392f;background:#f5f7f2;font-size:14px;--line:#e3e8de;--green:#183c34;--accent:#d8edb2}
+*{box-sizing:border-box}
+body{margin:0}
+button,input,textarea{font:inherit}
+button{cursor:pointer;border:1px solid var(--line);background:#fff;color:inherit;border-radius:5px;padding:8px 12px}
+button:disabled{opacity:.55;cursor:not-allowed}
+[hidden]{display:none!important}
+.admin-shell{width:min(1240px,calc(100% - 40px));margin:0 auto}
+.admin-top{height:68px;display:flex;align-items:center;gap:16px;border-bottom:1px solid var(--line)}
+.brand{display:flex;align-items:center;gap:4px;color:var(--green);font-size:21px;font-weight:700;text-decoration:none}
+.brand-mark{display:grid;place-items:center;width:26px;height:26px;margin-right:4px;border-radius:7px;background:var(--green);color:var(--accent)}
+.brand-dot{color:#99b878}
+.brand small{margin-left:10px;font-size:9px;font-weight:600;letter-spacing:1px;color:#83907f}
+.status{margin-left:auto;font-size:11px;color:#768270}
+.login-section{min-height:calc(100dvh - 69px);display:grid;place-items:center}
+.login-form{width:min(420px,100%);padding:32px;background:#fff;border:1px solid var(--line);border-radius:8px}
+.eyebrow{font-size:9px;font-weight:700;letter-spacing:1.2px;color:#849379}
+h1{margin:12px 0;font-size:25px;font-weight:600}
+.login-form>p,.section-heading p{font-size:12px;line-height:1.8;color:#82907d}
+label{display:grid;gap:6px;font-size:11px;color:#63745e}
+input,textarea{width:100%;min-height:37px;padding:8px 10px;border:1px solid #dce4d6;border-radius:5px;background:#fff;color:#314332}
+.login-form label{margin:20px 0 11px}
+.primary{background:#204b36;color:#f2f6e8;border-color:#204b36}
+.login-form>.primary{width:100%;margin-top:8px}
+.error{min-height:18px;color:#b65e4a;font-size:11px}
+.overview{display:grid;grid-template-columns:repeat(6,minmax(0,1fr));gap:10px;padding:22px 0}
+.overview>div{display:flex;align-items:center;justify-content:space-between;min-height:72px;padding:15px 17px;border:1px solid var(--line);border-radius:6px;background:#fff}
+.overview span{font-size:11px;color:#82907d}
+.overview strong{font-size:21px;font-weight:600}
+.content-section{margin:0 0 24px;padding:20px;background:#fff;border:1px solid var(--line);border-radius:7px}
+.section-heading{display:flex;align-items:center;justify-content:space-between;margin-bottom:17px}
+.section-heading h2{margin:5px 0 0;font-size:18px;font-weight:600}
+.user-filters{display:grid;grid-template-columns:auto minmax(180px,320px) auto minmax(130px,180px) 1fr;align-items:center;gap:9px;margin:0 0 14px}
+.user-filters label{font-size:11px}
+.user-filters input,.user-filters select{min-width:0;min-height:36px;padding:7px 9px;border:1px solid #dce4d6;border-radius:5px;background:#fff;color:#314332;font:inherit}
+.user-filters span{text-align:right;color:#82907d;font-size:11px}
+.create-user-form{display:grid;grid-template-columns:repeat(6,minmax(100px,1fr)) auto;align-items:end;gap:10px;margin-bottom:20px;padding:14px;background:#f7f9f4;border:1px solid #e9eee4;border-radius:5px}
+.create-user-form label{min-width:0}
+.create-user-form input{font-size:12px}
+.users-list{display:grid;gap:9px}
+.user-row{display:grid;grid-template-columns:minmax(180px,1.1fr) minmax(120px,.7fr) minmax(140px,.8fr) auto;gap:13px;align-items:center;padding:13px;border-bottom:1px solid #edf0e9}
+.user-identity strong,.user-identity small{display:block;overflow-wrap:anywhere}
+.user-identity small,.user-meta{margin-top:4px;color:#879280;font-size:10px}
+.user-meta{line-height:1.8}
+.badge{display:inline-flex;padding:4px 7px;border-radius:4px;background:#edf2e6;color:#65804f;font-size:9px}
+.badge.suspended,.badge.revoked{background:#f5ece8;color:#a46250}
+.badge.offline{background:#f2f0e7;color:#928257}
+.user-actions{display:flex;flex-wrap:wrap;gap:6px;justify-content:flex-end}
+.user-settings{grid-column:1/-1;display:grid;grid-template-columns:minmax(140px,1.2fr) minmax(100px,.8fr) 100px 210px auto;align-items:end;gap:8px;padding:10px;background:#f7f9f5;border-radius:4px}
+.user-settings label{min-width:0}
+.user-settings input{font-size:11px}
+.device-list{grid-column:1/-1;display:grid;gap:6px;padding-top:7px}
+.device-row{display:flex;justify-content:space-between;gap:10px;padding:9px;background:#f7f9f5;border-radius:4px;font-size:10px}
+.pagination{display:flex;align-items:center;justify-content:center;gap:14px;padding:16px 0 2px;color:#82907d;font-size:11px}
+.pagination button{min-width:76px}
+.audit-list{display:grid}
+.audit-row{display:grid;grid-template-columns:180px 160px minmax(0,1fr);gap:12px;padding:10px 2px;border-bottom:1px solid #edf0e9;font-size:10px}
+.audit-row time,.audit-row span{color:#85907d;overflow-wrap:anywhere}
+dialog{width:min(520px,calc(100% - 28px));border:1px solid var(--line);border-radius:8px;padding:22px;background:#fff;color:#27392f}
+dialog::backdrop{background:#10282077}
+dialog h2{margin-top:0}
+dialog label{margin:14px 0 7px}
+dialog textarea{font-family:Consolas,monospace;overflow-wrap:anywhere;resize:vertical}
+@media(max-width:1100px){.overview{grid-template-columns:repeat(3,minmax(0,1fr))}}
+@media(max-width:900px){.create-user-form{grid-template-columns:repeat(3,minmax(0,1fr))}.user-row{grid-template-columns:minmax(140px,1fr) minmax(100px,.7fr) auto}.user-meta.secondary{display:none}.user-settings{grid-template-columns:repeat(3,minmax(0,1fr))}.user-settings button{grid-column:1/-1}}
+@media(max-width:600px){.admin-shell{width:calc(100% - 24px)}.admin-top{height:58px}.brand{font-size:18px}.brand small{font-size:8px}.overview{grid-template-columns:repeat(2,minmax(0,1fr));gap:8px;padding:12px 0}.overview>div{min-height:58px;padding:11px}.overview strong{font-size:18px}.content-section{padding:14px 11px}.user-filters{grid-template-columns:auto minmax(0,1fr);gap:8px}.user-filters input{grid-column:2}.user-filters select{grid-column:2}.user-filters span{grid-column:1/-1;text-align:left}.create-user-form{grid-template-columns:1fr 1fr}.create-user-form label:first-child,.create-user-form label:nth-child(2){grid-column:span 1}.create-user-form button{grid-column:1/-1}.user-row{grid-template-columns:1fr auto;gap:7px}.user-row>.user-meta{grid-column:1}.user-actions{grid-column:2;grid-row:1/3}.user-settings{grid-template-columns:1fr 100px}.user-settings label:first-child,.user-settings label:nth-child(2){grid-column:auto}.user-settings button{grid-column:1/-1}.device-row{align-items:flex-start;flex-direction:column}.audit-row{grid-template-columns:1fr auto}.audit-row span{grid-column:1/-1}}
+@media(max-width:600px){.create-user-form>*{min-width:0}.create-user-form input[type=datetime-local]{min-width:0;width:100%;font-size:10px;padding-left:5px;padding-right:5px}.user-settings input[type=datetime-local]{min-width:0;width:100%;font-size:10px;padding-left:5px;padding-right:5px}}

package/public/admin.html

@@ -0,0 +1,23 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#143a33"><title>Orbit Admin · 控制台</title><link rel="stylesheet" href="/admin.css"><script src="/admin.js" defer></script>
+</head>
+<body>
+<main class="admin-shell">
+  <header class="admin-top"><a class="brand" href="/"><span class="brand-mark">o</span>orbit<span class="brand-dot">.</span><small>CONTROL PLANE</small></a><span id="admin-status" class="status">等待管理员登录</span><button id="admin-logout" type="button" hidden>退出</button></header>
+  <section id="admin-login" class="login-section"><form id="admin-login-form" class="login-form"><span class="eyebrow">OPERATOR ACCESS</span><h1>管理控制台</h1><p>使用服务器管理员密钥登录。该密钥只用于创建账号和设备，不会发给手机或电脑代理。</p><label for="admin-token">管理员密钥</label><input id="admin-token" type="password" autocomplete="current-password" required><button class="primary" type="submit">登录</button><p id="admin-login-error" class="error" role="alert"></p></form></section>
+  <section id="admin-app" hidden>
+    <section class="overview"><div><span>用户总数</span><strong id="overview-users">0</strong></div><div><span>有效用户</span><strong id="overview-active-users">0</strong></div><div><span>已停用</span><strong id="overview-suspended-users">0</strong></div><div><span>已到期</span><strong id="overview-expired-users">0</strong></div><div><span>有效电脑</span><strong id="overview-devices">0</strong></div><div><span>在线电脑</span><strong id="overview-online">0</strong></div></section>
+    <section class="content-section"><div class="section-heading"><div><span class="eyebrow">TENANTS</span><h2>用户与设备</h2></div><button id="refresh-admin" type="button">刷新</button></div>
+      <div class="user-filters"><label for="user-search">搜索用户</label><input id="user-search" type="search" maxlength="100" placeholder="用户名或显示名称"><label for="user-status">账户状态</label><select id="user-status"><option value="all">全部状态</option><option value="active">有效</option><option value="suspended">已停用</option><option value="expired">已到期</option></select><span id="user-count" role="status"></span></div>
+      <form id="create-user-form" class="create-user-form"><label>登录名<input name="username" minlength="3" maxlength="64" autocomplete="off" required></label><label>显示名称<input name="displayName" maxlength="120"></label><label>初始密码<input name="password" type="password" minlength="12" autocomplete="new-password" placeholder="留空则自动生成"></label><label>套餐<input name="plan" value="standard" maxlength="40" required></label><label>设备上限<input name="maxDevices" type="number" min="1" max="50" value="2" required></label><label>账号到期<input name="expiresAt" type="datetime-local"></label><button class="primary" type="submit">创建账号</button></form>
+      <div id="admin-message" role="status" hidden></div><div id="users-list" class="users-list"></div>
+      <nav class="pagination" aria-label="用户列表分页"><button id="users-previous" type="button">上一页</button><span id="users-page">第 1 页</span><button id="users-next" type="button">下一页</button></nav>
+    </section>
+    <section class="content-section"><div class="section-heading"><div><span class="eyebrow">AUDIT</span><h2>管理事件</h2></div></div><div id="audit-list" class="audit-list"></div></section>
+  </section>
+</main>
+<dialog id="secret-dialog"><form method="dialog"><h2 id="secret-title">凭证已签发</h2><p id="secret-description"></p><label for="secret-value">仅显示一次</label><textarea id="secret-value" readonly rows="5"></textarea><button id="copy-secret" type="button">复制</button><button class="primary" value="close">完成</button></form></dialog>
+</body>
+</html>