orbit-codex-bridge 0.1.1 → 0.1.3

package/README.md

@@ -29,11 +29,20 @@ orbit login
 
 1. 命令会打开电脑授权页面，登录或注册 Orbit 账号，确认添加这台电脑。
 2. 手机打开 [orbit.cubesugar.tech](https://orbit.cubesugar.tech)，登录同一账号。
-3. 扫描终端显示的配对二维码，选择这台电脑，完成首次连接。
+3. 登录后选择这台电脑；账号会自动完成安全配对，无需扫码或输入本机密钥。
 4. 选择原有会话，开始使用。尚未加载的会话可先在 Codex 桌面打开，再点“重新连接”。
 
 授权信息保存在电脑本地，下次启动会自动复用。连接器默认在当前用户的后台运行，可以关闭安装终端；断网后自动重连，工作进程异常退出后自动恢复。电脑需要保持开机、联网，Codex 桌面需要保持运行。电脑重启后运行 `orbit start` 恢复连接。
 
+## 会话输入
+
+- `普通`：按原会话的 Codex 模型、权限和设置继续。
+- `计划`：使用 Codex 原生 Plan 协作模式开始新一轮；不会改动正在运行的轮次。
+- `目标（本轮）`：将本轮消息作为明确目标继续推进。本版桌面 IPC 尚未开放持久 Goal 状态 API，因此不会伪装成 Codex 侧的长期目标追踪。
+- `添加文件`：每次最多 5 个、每个最多 8 MiB。文件经账号设备中继传到本机，并暂存在项目内 `.orbit-attachments`；Codex 读取原路径。待发送文件 30 分钟清理，已发送文件保留最多 24 小时，任务完成后会提前删除。
+- `电脑文件`：浏览当前会话项目并下载文件；限制在项目根目录内，排除 `.git`、`.codex`、密钥/环境文件和符号链接，单文件最大 8 MiB。
+- 文件附件仅支持已登录账号、在线的自有电脑，以及已加载并已自动热接管的 Codex 桌面原会话。归档会话、子代理和独立续接不支持。
+
 ## 常用命令
 
 | 命令 | 用途 |
@@ -90,6 +99,6 @@ npx.cmd --yes --package=orbit-codex-bridge@latest orbit rebind
 
 在 Codex 桌面打开同一条会话，再点击网页中的“重新连接”。桌面热接管依赖 Codex 内部接口，桌面版本更新后可能需要更新 Orbit。
 
-**配对二维码与密钥**
+**账号登录与设备安全**
 
-只在自己的设备上使用。每台电脑使用独立连接凭证，可在工作台移除电脑，或运行 `orbit logout` 撤销授权。连接中断时，Orbit 不会自动重发已提交的消息和审批。
+手机端只需使用 Orbit 账号登录。电脑连接凭证保存在本机，账号登录后由中继自动配对，不会要求输入或传输本机密钥。每台电脑使用独立连接凭证，可在工作台移除电脑，或运行 `orbit logout` 撤销授权。连接中断时，Orbit 不会自动重发已提交的消息和审批。

package/cli.mjs

@@ -6,7 +6,6 @@ import path from 'node:path';
 import process from 'node:process';
 import { spawn } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-import QRCode from 'qrcode';
 import { createOrbitServer } from './server.mjs';
 import { createRelayAgent } from './relay-agent.mjs';
 import {connectorStatus,installConnectorRuntime,startConnector,stopConnector,superviseConnector} from './lib/connector-service.mjs';
@@ -147,13 +146,6 @@ export async function existingOrbitUrl(port) {
   } catch { return null; }
 }
 
-async function printPairing(pairingKey, publicUrl) {
-  const pairingUrl = `${publicUrl}/#pair=${encodeURIComponent(pairingKey)}`;
-  console.log('本机配对二维码和密钥仅供自己的手机使用，请勿公开。');
-  console.log(await QRCode.toString(pairingUrl,{type:'terminal',errorCorrectionLevel:'L',small:true}));
-  console.log(`本机配对密钥：${pairingKey}`);
-}
-
 async function runComputer(config, background = false) {
   process.env.ORBIT_HOST = '127.0.0.1';
   process.env.ORBIT_PORT = String(config.port || 4318);
@@ -168,13 +160,14 @@ async function runComputer(config, background = false) {
       const info=await app.listen();
       localUrl=info.url;
       console.log(`Orbit 电脑端运行中：${localUrl}`);
-      if (!background) await printPairing(app.pairingKey,config.publicUrl);
     }
     agent = createRelayAgent({
       relayUrl:config.relayUrl,
       localUrl,
       deviceId:config.deviceId,
       agentToken:config.agentToken,
+      pairingKey:app?.pairingKey,
+      pairingKeyFile:path.join(configDirectory(),'pairing-key'),
       onReady:() => console.log(`电脑“${config.deviceName}”已安全连接 Orbit。`),
       onState:state => {
         if (background && process.connected) process.send({type:'connector-state',state:{...state,workerReady:true}},() => {});
@@ -184,6 +177,7 @@ async function runComputer(config, background = false) {
     agent.start();
     if(!app)console.log(`复用本机 Orbit：${localUrl}`);
     console.log(`手机工作台：${config.publicUrl}`);
+    console.log('手机登录同一 Orbit 账号，选择这台电脑即可，无需输入配对密钥。');
     if (!background) console.log('前台诊断模式；保持此窗口运行，按 Ctrl+C 停止。');
     await new Promise(resolve => {
       const stop = () => {
@@ -211,10 +205,7 @@ async function runBackground(config) {
   console.log('可以关闭此终端。断网自动重连，异常退出自动恢复；电脑休眠期间无法远程使用。');
   console.log('停止：orbit stop；状态：orbit status；前台诊断：orbit login --foreground');
   console.log(`诊断日志：${path.join(configDirectory(),'connector.log')}`);
-  try {
-    const key = (await fs.readFile(path.join(configDirectory(),'pairing-key'),'utf8')).trim();
-    if (key) await printPairing(key,config.publicUrl);
-  } catch (error) { if (error.code !== 'ENOENT') throw error; }
+  console.log('手机登录同一 Orbit 账号，选择这台电脑即可，无需输入配对密钥。');
 }
 
 async function revokeComputer(config) {

package/lib/desktop.mjs

@@ -1,5 +1,7 @@
 import net from 'node:net';
 import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
 import { EventEmitter } from 'node:events';
 import { messageFromItem } from './store.mjs';
 
@@ -261,6 +263,13 @@ export class DesktopRpc extends EventEmitter {
       permissionMode: state?.currentPermissions?.sandboxPolicy?.type || state?.latestThreadSettings?.sandboxPolicy?.type || 'desktop-inherited',
       model: state?.latestThreadSettings?.model || state?.latestModel || null,
       effort: state?.latestThreadSettings?.effort ?? state?.latestReasoningEffort ?? null,
+      collaborationMode:state?.latestCollaborationMode?.mode||'default',
+      goal:state?.threadGoal?{
+        objective:state.threadGoal.objective,
+        status:state.threadGoal.status,
+        tokenBudget:state.threadGoal.tokenBudget??null,
+        tokensUsed:state.threadGoal.tokensUsed??0
+      }:null,
       context: desktopContext(state),
       messages: state ? desktopMessages(state) : [],
       approvals: [...this.approvals.values()].filter(request => request.params.threadId === id).map(request => ({ ...request.params, requestId: String(request.id), method: request.method }))
@@ -297,8 +306,8 @@ export class DesktopRpc extends EventEmitter {
     return thread;
   }
 
-  async startTurn(id, text) { return this.writeMessage(id, text, false); }
-  async steer(id, text, expectedTurnId) { return this.writeMessage(id, text, true, expectedTurnId); }
+  async startTurn(id, text, options = {}) { return this.writeMessage(id, text, false, null, options); }
+  async steer(id, text, expectedTurnId, options = {}) { return this.writeMessage(id, text, true, expectedTurnId, options); }
 
   async updateThreadSettings(id, model, effort, expectedModel, expectedEffort) {
     if (this.starting.has(id) || this.updatingSettings.has(id)) throw new Error('会话正在处理另一项操作，请稍后重试。');
@@ -322,21 +331,50 @@ export class DesktopRpc extends EventEmitter {
     } finally { this.updatingSettings.delete(id); }
   }
 
-  async writeMessage(id, text, steering, expectedTurnId) {
+  async writeMessage(id, text, steering, expectedTurnId, options = {}) {
     if (this.starting.has(id) || this.updatingSettings.has(id)) throw new Error('此会话正在处理其他操作，请勿并发提交。');
     this.starting.add(id);
     try {
       const thread = await this.assertOwner(id);
       if (steering ? !expectedTurnId || thread.turnId !== expectedTurnId : Boolean(thread.turnId)) throw new Error('任务状态已变化，请刷新后选择续聊或追加指令。');
+      const mode=options.mode||'default';
+      if(!['default','plan','goal'].includes(mode))throw new Error('Codex 轮次模式无效。');
+      const attachments=Array.isArray(options.attachments)?options.attachments:[];
+      if(attachments.length>5||attachments.some(file=>{
+        if(!file||typeof file.label!=='string'||typeof file.path!=='string'||!path.isAbsolute(file.path)||file.fsPath!==file.path||!thread.state.cwd)return true;
+        try{
+          const workspace=fs.realpathSync(thread.state.cwd);
+          const filename=path.resolve(file.path);
+          const relative=path.relative(workspace,filename);
+          const attachmentRoot=path.join(workspace,'.orbit-attachments');
+          const resolved=fs.realpathSync(filename);
+          const stat=fs.lstatSync(filename);
+          return !relative||relative==='..'||relative.startsWith(`..${path.sep}`)||path.isAbsolute(relative)
+            ||path.dirname(filename)!==attachmentRoot||resolved!==filename||stat.isSymbolicLink()||!stat.isFile()||stat.size>8*1024*1024;
+        }catch{return true}
+      }))throw new Error('文件附件无效、位于工作区外或数量超限。');
+      const baseMode=thread.state.latestCollaborationMode||{mode:'default',settings:{}};
+      const selectedMode=mode==='plan'?'plan':baseMode.mode==='plan'?'default':baseMode.mode||'default';
+      const developerInstructions=baseMode.settings?.developer_instructions??null;
+      const collaborationMode={
+        mode:selectedMode,
+        settings:{
+          ...baseMode.settings,
+          model:baseMode.settings?.model||thread.state.latestThreadSettings?.model||thread.state.latestModel||'',
+          reasoning_effort:baseMode.settings?.reasoning_effort??thread.state.latestThreadSettings?.effort??thread.state.latestReasoningEffort??null,
+          developer_instructions:developerInstructions
+        }
+      };
       const messageId = crypto.randomUUID();
       const input = [{ type: 'text', text, text_elements: [] }];
-      const restoreMessage = { id: messageId, text, cwd: thread.state.cwd, createdAt: Date.now(), context: { prompt: text, addedFiles: [], fileAttachments: [], imageAttachments: [], ideContext: null, workspaceRoots: [thread.state.cwd] } };
+      const fileAttachments=attachments.map(({label,path:filename})=>({label,path:filename,fsPath:filename}));
+      const restoreMessage = { id: messageId, text, cwd: thread.state.cwd, createdAt: Date.now(), context: { prompt: text, addedFiles: [], fileAttachments, uploadedFileAttachments:[], imageAttachments: [], ideContext: null, workspaceRoots: [thread.state.cwd] } };
       let result;
-      if (steering) result = await this.request('thread-follower-steer-turn', { conversationId: id, input, restoreMessage, clientUserMessageId: messageId, attachments: [] }, thread.ownerClientId);
-      else result = await this.request('thread-follower-start-turn', { conversationId: id, turnStart: { request: { threadId: id, input, clientUserMessageId: messageId, turnTrigger: 'composer' }, context: { restoreMessage } } }, thread.ownerClientId);
+      if (steering) result = await this.request('thread-follower-steer-turn', { conversationId: id, input, restoreMessage, clientUserMessageId: messageId, attachments:fileAttachments }, thread.ownerClientId);
+      else result = await this.request('thread-follower-start-turn', { conversationId: id, turnStart: { request: { threadId: id, input, clientUserMessageId: messageId, turnTrigger: 'composer',collaborationMode }, context: { restoreMessage,attachments:fileAttachments,collaborationMode } } }, thread.ownerClientId);
       const response = result.result || result;
       const turnId = response.turnId || response.turn?.id || this.threads.get(id)?.turnId || null;
-      return { threadId: id, turnId, completed: typeof response.completed === 'boolean' ? response.completed : Boolean(!steering && !turnId), steering, sharedExecution: true };
+      return { threadId:id,turnId,completed:typeof response.completed==='boolean'?response.completed:Boolean(!steering&&!turnId),steering,sharedExecution:true,mode,attachments:attachments.map(file=>file.label) };
     } finally { this.starting.delete(id); }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orbit-codex-bridge",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "description": "Connect your original Codex desktop conversations to Orbit on the web.",
   "engines": {

package/public/app.js

@@ -25,7 +25,7 @@ const paths = {
 const icon = name => `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${paths[name] || paths.inbox}</svg>`;
 function decorate(parent = document) { parent.querySelectorAll('[data-icon]').forEach(element => { element.innerHTML = icon(element.dataset.icon); }); }
 function markdown(text) { return DOMPurify.sanitize(marked.parse(String(text || ''), { breaks: true }), { ALLOWED_TAGS: ['p','br','strong','b','em','i','s','del','ul','ol','li','blockquote','pre','code','h1','h2','h3','h4','h5','h6','hr','a','table','thead','tbody','tr','th','td','sup','sub','kbd','details','summary'], ALLOWED_ATTR: ['href','title','start','colspan','rowspan'], ALLOW_DATA_ATTR: false, ALLOW_ARIA_ATTR: false }); }
-const state = { threads: [], status: null, selected: null, selectionVersion: 0, historyStatus: 'idle', historyError: '', filter: 'all', project: null, search: '', view: 'sessions', socket: null, pending: new Map(), enabled: new Map(), baseMessages: [], olderMessages: [], cursor: null, liveMessages: new Map(), desktopMessages: [], desktopRuntime: null, selectedSettings: null, models: [], contextUsage: null, settingsBusy: false, reopenModelAfterGrant: false, pendingModelChoice: null, cloudMode: false, cloudUser: null, cloudDevices: [], cloudDeviceId: null, cloudPairCode: null, approvals: new Map(), reconnect: 0, loggedOut: false, busy: false, turnId: null };
+const state = { threads: [], status: null, selected: null, selectionVersion: 0, historyStatus: 'idle', historyError: '', filter: 'all', project: null, search: '', view: 'sessions', socket: null, pending: new Map(), enabled: new Map(), baseMessages: [], olderMessages: [], cursor: null, liveMessages: new Map(), desktopMessages: [], desktopRuntime: null, selectedSettings: null, models: [], contextUsage: null, settingsBusy: false, reopenModelAfterGrant: false, pendingModelChoice: null, cloudMode: false, cloudUser: null, cloudDevices: [], cloudDeviceId: null, approvals: new Map(), pendingAttachments: [], reconnect: 0, loggedOut: false, busy: false, turnId: null };
 let refreshTimer;
 let toastTimer;
 let reconnectTimer;
@@ -69,10 +69,9 @@ async function loadCloudConfig() {
   if (!cloudRegistrationEnabled) setCloudAuthMode(false);
 }
 
-function captureCloudPairCode() {
+function discardCloudPairCode() {
   const fragment=new URLSearchParams(location.hash.slice(1));
   if(!fragment.has('pair'))return;
-  state.cloudPairCode=fragment.get('pair');
   history.replaceState(null,'',location.pathname+location.search);
 }
 
@@ -94,7 +93,7 @@ async function api(url, body, signal) {
   const generation = workspaceGeneration;
   const headers = {};
   if (body !== undefined) headers['Content-Type'] = 'application/json';
-  if (state.cloudMode && state.cloudDeviceId && !url.startsWith('/api/cloud/')) headers['X-Orbit-Device-Id'] = state.cloudDeviceId;
+  if (state.cloudMode && state.cloudDeviceId && (!url.startsWith('/api/cloud/') || url === '/api/cloud/connect')) headers['X-Orbit-Device-Id'] = state.cloudDeviceId;
   const options = body === undefined ? { headers } : { method: 'POST', headers, body: JSON.stringify(body) };
   if (signal) options.signal = signal;
   let response;
@@ -113,7 +112,7 @@ async function api(url, body, signal) {
     if (response.status === 401 && state.cloudMode && (result.code === 'cloud_login_required' || url.startsWith('/api/cloud/') && url !== '/api/cloud/login')) {
       showCloudLogin(result.error);
       error.handled = true;
-    } else if (response.status === 401 && url !== '/api/pair' && !url.startsWith('/api/cloud/') && !state.cloudPairCode) {
+    } else if (response.status === 401 && !state.cloudMode && url !== '/api/pair' && !url.startsWith('/api/cloud/')) {
       showPairing();
       error.handled = true;
     }
@@ -127,9 +126,7 @@ function showPairing(error = '') {
   select('#workspace').hidden = true; select('#pair-screen').hidden = false;
   select('#cloud-login-screen').hidden = true; select('#cloud-device-screen').hidden = true;
   select('#pair-error').textContent = error;
-  select('#pair-screen .pair-form > p').textContent = state.cloudMode
-    ? `首次连接“${state.cloudDevices.find(device => device.id === state.cloudDeviceId)?.name || '这台电脑'}”，请扫描电脑终端中的配对二维码，或粘贴终端显示的本机配对密钥。`
-    : '输入电脑上的配对密钥。会话内容仅向已配对的设备开放。';
+  select('#pair-screen .pair-form > p').textContent = '输入电脑上的配对密钥。会话内容仅向已配对的设备开放。';
   const fragment = new URLSearchParams(location.hash.slice(1));
   if (fragment.has('pair')) { select('#pair-code').value = fragment.get('pair'); history.replaceState(null, '', location.pathname); }
 }
@@ -155,9 +152,7 @@ function showCloudDevices(message = '') {
   const quota = state.cloudUser?.maxDevices || 1;
   select('#cloud-devices-title').textContent = state.cloudDevices.length ? '选择要连接的电脑' : '连接你的第一台电脑';
   const greeting = `已登录 ${state.cloudUser?.displayName || state.cloudUser?.username}。`;
-  select('#cloud-device-message').textContent = state.cloudPairCode
-    ? `${greeting}选择发起连接的电脑，完成本机配对。${message ? ` ${message}` : ''}`
-    : message || greeting + (state.cloudDevices.length ? '选择一台电脑继续。' : '先添加你自己的电脑，连接后即可查看原有会话。');
+  select('#cloud-device-message').textContent = message || greeting + (state.cloudDevices.length ? '选择一台电脑继续，无需输入配对密钥。' : '先添加你自己的电脑，连接后即可查看原有会话。');
   select('#cloud-device-quota').textContent = `套餐 ${state.cloudUser?.plan || 'free'} · 已添加 ${state.cloudDevices.length} / ${quota} 台电脑`;
   select('#cloud-add-computer').disabled = state.cloudDevices.length >= quota;
   select('#cloud-add-computer').title = state.cloudDevices.length >= quota ? '已达到设备上限，可移除旧电脑或联系管理员调整额度。' : '';
@@ -186,19 +181,6 @@ async function connectCloudDevice(deviceId) {
     if (!device.online) { showCloudDevices(`电脑“${device.name}”尚未上线。请确认电脑已联网，在电脑终端运行 orbit login，后台启动后再点击连接。`); return; }
     state.cloudDeviceId = deviceId;
     localStorage.setItem('orbit_cloud_device_id', deviceId);
-    if (state.cloudPairCode) {
-      try {
-        await api('/api/pair', {code:state.cloudPairCode});
-        state.cloudPairCode = null;
-      } catch (error) {
-        if (error.status === 401 && !error.handled) {
-          state.cloudPairCode = null;
-          showPairing(error.message);
-          return;
-        }
-        throw error;
-      }
-    }
     await boot();
   } catch (error) {
     if (!error.handled && error.code !== 'STALE_WORKSPACE') showCloudDevices(error.message);
@@ -240,7 +222,7 @@ async function discoverCloudWorkspace() {
   catch (error) { throw new Error('无法连接工作台服务，请检查网络。'); }
   if (generation !== workspaceGeneration) return 'stale';
   if (response.status === 404) return 'local';
-  captureCloudPairCode();
+  discardCloudPairCode();
   let configError = '';
   try { await loadCloudConfig(); }
   catch (error) { configError = error.message; }
@@ -255,8 +237,8 @@ async function discoverCloudWorkspace() {
   state.cloudMode = true; state.loggedOut = false;
   state.cloudUser = workspace.user; state.cloudDevices = workspace.devices || [];
   const saved = localStorage.getItem('orbit_cloud_device_id');
-  if (!state.cloudPairCode && saved && state.cloudDevices.some(device => device.id === saved && device.status === 'active')) state.cloudDeviceId = saved;
-  else if (state.cloudDevices.length === 1 && state.cloudDevices[0].status === 'active' && !state.cloudPairCode) {
+  if (saved && state.cloudDevices.some(device => device.id === saved && device.status === 'active')) state.cloudDeviceId = saved;
+  else if (state.cloudDevices.length === 1 && state.cloudDevices[0].status === 'active') {
     state.cloudDeviceId = state.cloudDevices[0].id;
     localStorage.setItem('orbit_cloud_device_id',state.cloudDeviceId);
   } else {
@@ -280,6 +262,13 @@ async function boot() {
   try {
     const cloudState = await discoverCloudWorkspace();
     if (cloudState !== 'local' && cloudState !== 'ready') return;
+    if (cloudState === 'ready') {
+      try { await api('/api/cloud/connect',{}); }
+      catch (error) {
+        if (error.status === 404) throw new Error('云端尚未支持账号直接连接，请先更新云端 Orbit 服务到 0.1.2 或更高版本。');
+        throw error;
+      }
+    }
     state.status = await api('/api/status');
     if (generation !== workspaceGeneration) return;
     state.loggedOut = false;
@@ -388,6 +377,7 @@ function connectSocket() {
     setConnection(false);
     for (const pending of state.pending.values()) { clearTimeout(pending.timer); pending.reject(new Error('连接中断，消息不会自动重发。请先检查会话记录。')); }
     state.pending.clear();
+    state.pendingAttachments=[];
     scheduleReconnect();
   });
   socket.addEventListener('error', () => {});
@@ -397,6 +387,7 @@ function scheduleReconnect() {
   clearTimeout(reconnectTimer);
   reconnectTimer = setTimeout(async () => {
     try {
+      if (state.cloudMode) await api('/api/cloud/connect',{});
       state.status = await api('/api/status');
       state.enabled = new Map(Object.entries(state.status.execution.grants || {}));
       connectSocket();
@@ -426,6 +417,8 @@ async function subscribeThread(id) {
     state.turnId = result.turnId;
     state.busy = Boolean(result.turnId);
     state.approvals = new Map((result.approvals || []).map(approval => [approval.requestId, approval]));
+    state.pendingAttachments=result.attachments||[];
+    renderComposerAttachments();
     if (desktop && result.control) {
       controlRenewTimer = setTimeout(() => {
         if (state.selected?.id === id && state.socket?.readyState === WebSocket.OPEN && state.desktopRuntime?.attached) {
@@ -502,6 +495,8 @@ async function openThread(id) {
   if (select('#model-dialog').open) select('#model-dialog').close();
   const selectionVersion = ++state.selectionVersion;
   state.pendingModelChoice = null;
+  state.pendingAttachments=[];
+  select('#turn-mode').value='default';
   state.historyStatus = 'loading'; state.historyError = '';
   state.selected = thread; state.baseMessages = []; state.olderMessages = []; state.liveMessages.clear(); state.desktopMessages = []; state.desktopRuntime = null; state.selectedSettings = null; state.contextUsage = null; state.approvals.clear(); state.cursor = null; state.busy = false; state.turnId = null;
   select('#welcome').hidden = true; select('#chat').hidden = false; select('#workspace').classList.add('chat-open');
@@ -510,7 +505,7 @@ async function openThread(id) {
   select('#chat-details').innerHTML = `<dl><dt>原生会话 ID</dt><dd>${escapeHtml(id)}</dd><dt>工作目录</dt><dd>${escapeHtml(thread.cwd)}</dd><dt>记录来源 / 分支</dt><dd>${escapeHtml(thread.source)} / ${escapeHtml(thread.branch || '—')}</dd></dl>`;
   select('#chat-details').hidden = true;
   select('#messages').replaceChildren(); renderMessages();
-  renderList(); updateMode(); renderApprovals();
+  renderComposerAttachments();renderList();updateMode();renderApprovals();
   subscribeThread(id).catch(error => { if (selectionVersion === state.selectionVersion) toast(error.message); });
   try { await loadMessages(true); } catch (error) { if (selectionVersion === state.selectionVersion) toast(error.message); }
 }
@@ -752,9 +747,107 @@ function updateMode() {
   select('#send-message').title = state.busy && desktop ? '追加指令到当前桌面任务' : '沿用原会话发送';
   select('#stop-turn').hidden = !state.busy || !state.turnId || !control;
   select('#message-input').placeholder = state.busy && desktop ? '追加指令给电脑上正在运行的任务…' : control ? '沿着原来的上下文继续…' : desktop ? '连接原桌面会话后继续…' : '先确认接续方式，再沿着这条会话继续…';
-  select('#composer-note').textContent = control ? desktop ? '消息进入原 Codex 桌面会话；任务不会迁移或重启。断线不会自动重发。' : '原会话 ID 不变；断线不会自动重发消息。' : '只读查看不会唤醒或打断电脑上的执行。';
+  select('#turn-mode').disabled=!control||!desktop||desktopConnecting||state.busy;
+  select('#attach-files').disabled=!control||!desktop||desktopConnecting||state.pendingAttachments.length>=5||state.settingsBusy;
+  select('#file-input').disabled=select('#attach-files').disabled;
+  select('#turn-mode').title=state.busy?'当前桌面任务中无法切换模式。':!desktop?'仅 Codex 桌面原会话支持模式选择。':'模式仅作用于新一轮消息。';
+  const mode=select('#turn-mode').value;
+  select('#composer-note').textContent=mode==='plan'
+    ? '计划模式先分析并列出步骤，等待你确认后再执行。只影响下一轮。'
+    : mode==='goal'
+      ? '目标模式将本轮消息作为明确目标；Codex 桌面 IPC 暂不提供持久目标状态设置。'
+      : control ? desktop ? '消息进入原 Codex 桌面会话；任务不会迁移或重启。文件暂存 30 分钟。断线不会自动重发。' : '原会话 ID 不变；断线不会自动重发消息。'
+        : '只读查看不会唤醒或打断电脑上的执行。';
   renderModelStatus();
 }
+function renderComposerAttachments() {
+  select('#composer-attachments').innerHTML=state.pendingAttachments.map(file=>
+    `<span class="composer-attachment" data-attachment="${escapeHtml(file.id)}">${icon(file.mimeType?.startsWith('image/')?'image':'file')}<span>${escapeHtml(file.label)} · ${escapeHtml((file.size/1024).toFixed(file.size<1024*1024?0:1))} KB</span><button type="button" data-remove-attachment="${escapeHtml(file.id)}" aria-label="移除 ${escapeHtml(file.label)}">×</button></span>`
+  ).join('');
+}
+
+async function uploadFiles(fileList) {
+  if(!state.selected||!state.enabled.has(state.selected.id)||!state.desktopRuntime?.attached)return toast('请先连接并接管原 Codex 会话。');
+  const files=[...fileList];
+  if(state.pendingAttachments.length+files.length>5)return toast('单条消息最多添加 5 个文件。');
+  for(const file of files)if(file.size===0||file.size>8*1024*1024)return toast(`“${file.name}”为空或超过 8 MiB 限制。`);
+  const threadId=state.selected.id,selectionVersion=state.selectionVersion;
+  const button=select('#attach-files');
+  button.disabled=true;
+  try{
+    for(const file of files){
+      const headers={'Content-Type':file.type||'application/octet-stream'};
+      if(state.cloudMode&&state.cloudDeviceId)headers['X-Orbit-Device-Id']=state.cloudDeviceId;
+      const response=await fetch(`/api/threads/${encodeURIComponent(threadId)}/attachments?name=${encodeURIComponent(file.name)}`,{
+        method:'POST',headers,body:file,credentials:'same-origin',signal:AbortSignal.timeout(30000)
+      });
+      const result=await response.json().catch(()=>({}));
+      if(!response.ok)throw new Error(result.error||'文件上传失败。');
+      if(threadId!==state.selected?.id||selectionVersion!==state.selectionVersion){
+        await api(`/api/threads/${encodeURIComponent(threadId)}/attachments/remove`,{attachmentId:result.id});
+        return;
+      }
+      state.pendingAttachments.push(result);
+      renderComposerAttachments();updateMode();
+    }
+    toast(files.length===1?'文件已附加到待发送消息。':`已附加 ${files.length} 个文件。`);
+  }catch(error){toast(error.name==='TimeoutError'?'文件上传超时，请确认网络后重试。':error.message)}
+  finally{button.disabled=false;select('#file-input').value='';updateMode()}
+}
+
+async function browseProjectFiles(relativePath='') {
+  if(!state.selected)return;
+  const threadId=state.selected.id,selectionVersion=state.selectionVersion;
+  const list=select('#file-browser-list');
+  select('#file-browser-error').textContent='';
+  list.innerHTML='<p class="file-browser-empty">正在读取项目文件…</p>';
+  try{
+    const query=relativePath?`?path=${encodeURIComponent(relativePath)}`:'';
+    const result=await api(`/api/threads/${encodeURIComponent(threadId)}/files${query}`);
+    if(threadId!==state.selected?.id||selectionVersion!==state.selectionVersion)return;
+    select('#file-browser-path').textContent=result.path||'项目根目录';
+    const rows=[];
+    if(result.path){
+      const parent=result.path.split(/[\\/]/).slice(0,-1).join('/');
+      rows.push(`<button class="file-browser-entry file-browser-parent" type="button" data-file-directory="${escapeHtml(parent)}"><span>↰</span><strong>上一级</strong></button>`);
+    }
+    for(const entry of result.entries||[]){
+      rows.push(entry.type==='directory'
+        ? `<button class="file-browser-entry" type="button" data-file-directory="${escapeHtml(entry.path)}"><span>▸</span><strong>${escapeHtml(entry.name)}</strong></button>`
+        : `<button class="file-browser-entry" type="button" data-file-download="${escapeHtml(entry.path)}"><span>${icon('file')}</span><strong>${escapeHtml(entry.name)}</strong><small>${escapeHtml((entry.size/1024).toFixed(entry.size<1024*1024?0:1))} KB</small></button>`);
+    }
+    if(result.truncated)rows.push('<p class="file-browser-empty">列表已达到 1000 项上限，请打开子文件夹细看。</p>');
+    list.innerHTML=rows.join('')||'<p class="file-browser-empty">此文件夹为空。</p>';
+  }catch(error){
+    list.replaceChildren();
+    select('#file-browser-error').textContent=error.message;
+  }
+}
+
+async function downloadProjectFile(relativePath){
+  if(!state.selected)return;
+  const threadId=state.selected.id;
+  const headers={};
+  if(state.cloudMode&&state.cloudDeviceId)headers['X-Orbit-Device-Id']=state.cloudDeviceId;
+  try{
+    const response=await fetch(`/api/threads/${encodeURIComponent(threadId)}/file?path=${encodeURIComponent(relativePath)}`,{
+      headers,credentials:'same-origin',cache:'no-store',signal:AbortSignal.timeout(35000)
+    });
+    if(!response.ok){
+      const result=await response.json().catch(()=>({}));
+      if(response.status===401&&state.cloudMode){showCloudLogin(result.error);return}
+      throw new Error(result.error||'无法下载此项目文件。');
+    }
+    const disposition=response.headers.get('content-disposition')||'';
+    const encoded=disposition.match(/filename\*=UTF-8''([^;]+)/i)?.[1];
+    const filename=encoded?decodeURIComponent(encoded):relativePath.split(/[\\/]/).at(-1)||'project-file';
+    const url=URL.createObjectURL(await response.blob());
+    const anchor=document.createElement('a');
+    anchor.href=url;anchor.download=filename;anchor.click();
+    setTimeout(()=>URL.revokeObjectURL(url),30000);
+  }catch(error){toast(error.name==='TimeoutError'?'项目文件下载超时。':error.message)}
+}
+
 function renderApprovals() {
   select('#approvals').innerHTML = [...state.approvals.values()].map(approval => `<section class="approval-card" data-approval="${escapeHtml(approval.requestId)}"><strong>${approval.method === 'item/tool/requestUserInput' ? 'Codex 需要你的回答' : '等待你的审批'}</strong><p>${escapeHtml(approval.reason || '请核对操作范围后决定。')}</p>${approval.command ? `<pre>${escapeHtml(approval.command)}</pre>` : ''}${approval.method !== 'item/tool/requestUserInput' ? `<details><summary>查看完整审批范围</summary><pre>${escapeHtml(JSON.stringify(approval, null, 2))}</pre></details>` : ''}${approval.method === 'item/tool/requestUserInput' ? (approval.questions || []).map(question => `<label>${escapeHtml(question.question)}${question.options ? `<small> ${question.options.map(option => escapeHtml(option.label)).join(' / ')}</small>` : ''}<input data-question="${escapeHtml(question.id)}" placeholder="输入你的回答" maxlength="4000"></label>`).join('') + '<button class="button small" data-decision="answers">提交回答</button>' : `<button class="button small" data-decision="decline">拒绝</button>${approval.method !== 'item/permissions/requestApproval' ? '<button class="button small" data-decision="accept">仅允许本次</button>' : '<p>扩大环境权限请在本机处理，首版仅支持拒绝。</p>'}`}</section>`).join('');
 }
@@ -772,12 +865,18 @@ function renderDevices() {
   cloudRow.querySelector('span:last-child').classList.toggle('pending', !state.cloudMode);
   select('#copy-url').onclick = async () => { try { await navigator.clipboard.writeText(url); toast('连接地址已复制。'); } catch { toast('浏览器不允许复制，请手动复制地址。'); } };
   select('#show-qr').onclick = async () => {
+    if (state.cloudMode) return;
     try {
       const data = await api('/api/pair/qr', { url });
       select('#qr-container').innerHTML = `<img src="${escapeHtml(data.image)}" alt="敏感的设备配对二维码"><p>${escapeHtml(data.warning)}</p>`;
       select('#qr-container').hidden = false;
     } catch (error) { toast(error.message); }
   };
+  if (state.cloudMode) {
+    const card = select('#show-qr').closest('section');
+    card.querySelector('p').textContent = '手机打开工作台，登录同一 Orbit 账号并选择这台电脑，即可继续原有会话，无需扫码或输入密钥。';
+    select('#show-qr').hidden = true;
+  }
 }
 
 function closeNav() { select('#workspace').classList.remove('nav-open'); select('#scrim').hidden = true; }
@@ -1091,18 +1190,57 @@ select('#model-form').addEventListener('submit', async event => {
   finally { button.disabled = false; state.settingsBusy = false; updateMode(); }
 });
 select('#message-input').addEventListener('input', updateMode);
+select('#turn-mode').addEventListener('change',updateMode);
+select('#browse-files').onclick=()=>{
+  if(!state.selected)return;
+  browseProjectFiles();
+  select('#file-browser-dialog').showModal();
+};
+select('#close-file-browser').onclick=()=>select('#file-browser-dialog').close();
+select('#file-browser-list').addEventListener('click',event=>{
+  const folder=event.target.closest('[data-file-directory]');
+  if(folder){browseProjectFiles(folder.dataset.fileDirectory);return}
+  const file=event.target.closest('[data-file-download]');
+  if(file)downloadProjectFile(file.dataset.fileDownload);
+});
+select('#attach-files').onclick=()=>select('#file-input').click();
+select('#file-input').addEventListener('change',event=>uploadFiles(event.target.files));
+select('#composer-attachments').addEventListener('click',async event=>{
+  const button=event.target.closest('[data-remove-attachment]');
+  if(!button||!state.selected)return;
+  const id=button.dataset.removeAttachment;
+  const threadId=state.selected.id;
+  try{
+    await api(`/api/threads/${encodeURIComponent(threadId)}/attachments/remove`,{attachmentId:id});
+    state.pendingAttachments=state.pendingAttachments.filter(file=>file.id!==id);
+    renderComposerAttachments();updateMode();
+  }catch(error){toast(error.message)}
+});
 select('#message-input').addEventListener('keydown', event => {
   if (event.key === 'Enter' && !event.shiftKey && !event.isComposing && !matchMedia('(max-width:760px)').matches) { event.preventDefault(); if (!select('#send-message').disabled) select('#composer').requestSubmit(); }
 });
 select('#composer').addEventListener('submit', async event => {
   event.preventDefault(); if (select('#send-message').disabled) return;
-  const id = state.selected.id; const text = select('#message-input').value; const wasBusy = state.busy;
+  const id = state.selected.id; const inputText = select('#message-input').value.trim(); const wasBusy = state.busy;
   const turnId = state.turnId;
   const steering = wasBusy && state.status.execution.mode === 'desktop';
+  const mode=select('#turn-mode').value;
+  const attachmentIds=state.pendingAttachments.map(file=>file.id);
+  const text=inputText|| (attachmentIds.length?`请查看并处理以下附件：${state.pendingAttachments.map(file=>file.label).join('、')}`:'');
   state.busy = true; updateMode();
   try {
-    const result = await rpc(steering ? 'turn.steer' : 'turn.start', { threadId:id, text, ...(steering ? { turnId } : {}) });
-    if (state.selected?.id === id) { state.turnId = result.completed ? null : result.turnId || (steering ? turnId : null); state.busy = !result.completed; select('#message-input').value = ''; scheduleRefresh(); }
+    const result = await rpc(steering ? 'turn.steer' : 'turn.start', {
+      threadId:id,text,attachmentIds,mode,...(steering?{turnId}:{})
+    });
+    if (state.selected?.id === id) {
+      state.turnId = result.completed ? null : result.turnId || (steering ? turnId : null);
+      state.busy = !result.completed;
+      select('#message-input').value = '';
+      state.pendingAttachments=[];
+      renderComposerAttachments();
+      if(!steering)select('#turn-mode').value='default';
+      scheduleRefresh();
+    }
   } catch (error) { if (state.selected?.id === id) state.busy = wasBusy; toast(error.message); }
   updateMode();
 });

package/public/index.html

@@ -30,11 +30,11 @@
 </section>
 <section id="cloud-device-screen" class="devices-view cloud-device-screen" hidden>
 <header class="cloud-device-header"><div><span class="eyebrow">YOUR CONNECTED COMPUTERS</span><h1 id="cloud-devices-title">选择要连接的电脑</h1><p id="cloud-device-message">只显示绑定到你账号的设备。</p><p id="cloud-device-quota"></p></div><div class="cloud-device-actions"><button id="cloud-refresh-devices" class="button small" type="button">刷新状态</button><button id="cloud-add-computer" class="primary" type="button">添加电脑</button><button id="cloud-logout-picker" class="button small" type="button">退出登录</button></div></header>
-<section id="cloud-onboarding" class="cloud-onboarding" hidden><div><span class="mini-badge">FIRST CONNECTION</span><h2>一条命令，连接你的电脑</h2><p>电脑需要运行 Codex 桌面应用。Windows 用户复制下面命令到 PowerShell 运行。</p><ol><li>命令会检查 Node.js 24+，缺少时通过 winget 安装。</li><li>浏览器打开后登录此 Orbit 账号，确认添加这台电脑。</li><li>授权完成后，终端会启动 Orbit 并显示手机配对二维码；用手机扫描完成首次连接。</li></ol><div class="cloud-command-box"><pre class="cloud-install-command"><code id="cloud-install-command"></code></pre><button id="cloud-copy-install" class="button small" type="button">复制命令</button></div><p id="cloud-install-status" class="cloud-install-status" role="status"></p><p class="cloud-release-note">如果电脑没有 winget，请先从 nodejs.org 安装 Node.js 24+。winget 可能会请求系统安装授权。</p><p class="cloud-release-note">macOS / Linux：先安装 Node.js 24+，再运行 <code>npx --yes --package=orbit-codex-bridge orbit login</code>。</p></div></section>
+<section id="cloud-onboarding" class="cloud-onboarding" hidden><div><span class="mini-badge">FIRST CONNECTION</span><h2>一条命令，连接你的电脑</h2><p>电脑需要运行 Codex 桌面应用。Windows 用户复制下面命令到 PowerShell 运行。</p><ol><li>命令会检查 Node.js 24+，缺少时通过 winget 安装。</li><li>浏览器打开后登录此 Orbit 账号，确认添加这台电脑。</li><li>手机登录同一账号，选择已上线的电脑即可使用，无需扫码或输入配对密钥。</li></ol><div class="cloud-command-box"><pre class="cloud-install-command"><code id="cloud-install-command"></code></pre><button id="cloud-copy-install" class="button small" type="button">复制命令</button></div><p id="cloud-install-status" class="cloud-install-status" role="status"></p><p class="cloud-release-note">如果电脑没有 winget，请先从 nodejs.org 安装 Node.js 24+。winget 可能会请求系统安装授权。</p><p class="cloud-release-note">macOS / Linux：先安装 Node.js 24+，再运行 <code>npx --yes --package=orbit-codex-bridge@latest orbit login</code>。</p></div></section>
 <div id="cloud-devices-list" class="device-grid cloud-device-list"></div></section>
 <section id="pair-screen" class="pair-screen" hidden>
 <div class="pair-art"><a class="brand light" href="/"><img src="/icon.svg" alt=""><span>orbit<span class="brand-dot">.</span></span></a><div class="orbital-art"><div class="orbit-ring ring-one"></div><div class="orbit-ring ring-two"></div><div class="orbit-core">o</div><span class="orbit-point"></span></div><div class="pair-copy"><span class="eyebrow">YOUR WORK. IN YOUR ORBIT.</span><h1>会话留在电脑，<br>灵感随你出发。</h1><p>不复制上下文，不从头再来。<br>从熟悉的项目，找到原来的对话。</p></div><span class="art-caption">LOCAL FIRST / BUILT FOR CONTINUITY</span></div>
-<div class="pair-form-wrap"><div class="pair-form"><span class="mini-badge">PRIVATE WORKSPACE</span><h2>连接你的工作台</h2><p>输入电脑上的配对密钥。会话内容仅向已配对的设备开放。</p><form id="pair-form"><label for="pair-code">设备配对密钥</label><input id="pair-code" type="password" placeholder="粘贴本机配对密钥" autocomplete="off" required><button class="primary full" type="submit">安全连接 <span>↗</span></button><p id="pair-error" class="error" role="alert"></p></form><div class="pair-help"><span data-icon="shield"></span><div><strong>你的会话，不必搬家</strong><p>首版默认只读。不会自动恢复、停止或改写原有对话。</p></div></div><details><summary>在哪里找到密钥？</summary><p>在 Orbit 目录运行 <code>Get-Content .runtime\pairing-key</code>。仅用于可信设备；它不是模型 API Key。</p></details></div><footer>ORBIT / 0.1 PREVIEW <span>原生记录 · 本地优先</span></footer></div>
+<div class="pair-form-wrap"><div class="pair-form"><span class="mini-badge">PRIVATE WORKSPACE</span><h2>连接你的工作台</h2><p>输入电脑上的配对密钥。会话内容仅向已配对的设备开放。</p><form id="pair-form"><label for="pair-code">设备配对密钥</label><input id="pair-code" type="password" placeholder="粘贴本机配对密钥" autocomplete="off" required><button class="primary full" type="submit">安全连接 <span>↗</span></button><p id="pair-error" class="error" role="alert"></p></form><div class="pair-help"><span data-icon="shield"></span><div><strong>原会话始终留在电脑</strong><p>选择原会话后，消息和操作会发送到这台电脑上正在运行的 Codex。</p></div></div><details><summary>在哪里找到密钥？</summary><p>在 Orbit 目录运行 <code>Get-Content .runtime\pairing-key</code>。仅用于可信设备；它不是模型 API Key。</p></details></div><footer>ORBIT <span>原生会话 · 电脑执行</span></footer></div>
 </section>
 <div id="workspace" class="workspace" hidden>
 <button id="scrim" class="scrim" aria-label="收起导航" hidden></button>
@@ -47,11 +47,12 @@
 <header class="topbar"><div class="breadcrumbs"><button id="menu-button" class="icon-button mobile-only" aria-label="展开导航"><span data-icon="menu"></span></button><span data-icon="orbit"></span><span>工作空间</span><span class="slash">/</span><strong id="breadcrumb-current">所有会话</strong></div><div class="top-actions"><span class="live-pill" id="connection-pill"><i class="tiny-dot"></i> 正在连接</span><button id="connect-device" class="button small"><span data-icon="devices"></span><span class="desktop-label">连接设备</span></button><button id="cloud-device-switcher" class="button small" type="button" hidden></button><button id="logout" class="avatar-button" title="断开当前设备" aria-label="断开当前设备">O</button></div></header>
 <section id="sessions-view" class="sessions-view">
 <section class="thread-pane"><div class="pane-heading"><span class="eyebrow">YOUR CONVERSATIONS</span><div><h1 id="list-title">所有会话</h1><span id="thread-count" class="count-badge">—</span><button id="refresh" class="icon-button" aria-label="刷新会话"><span data-icon="refresh"></span></button></div><p>原来的项目，原来的上下文。</p></div><div class="search-box"><span data-icon="search"></span><input id="search" type="search" placeholder="搜索会话或项目" aria-label="搜索会话或项目"><kbd>⌘ K</kbd></div><div class="filters" role="group" aria-label="会话筛选"><button class="active" data-filter="all" aria-pressed="true">全部</button><button data-filter="locked" aria-pressed="false">已占用</button><button data-filter="pinned" aria-pressed="false">已置顶</button><button data-filter="archived" aria-pressed="false">已归档</button></div><div id="thread-list" class="thread-list" aria-label="原生会话列表"></div><div class="list-footer"><span data-icon="database"></span><span id="list-footer-text">读取 Codex 原生记录</span><i class="tiny-dot"></i></div></section>
-<section id="conversation" class="conversation"><div id="welcome" class="welcome"></div><div id="chat" class="chat" hidden><header class="chat-header"><button id="back" class="icon-button mobile-only" aria-label="返回会话列表"><span data-icon="back"></span></button><div class="chat-title"><h2 id="chat-title"></h2><p id="chat-subtitle"></p></div><button id="details-toggle" class="icon-button" aria-label="查看会话详情"><span data-icon="info"></span></button><button id="enable-control" class="button small">接续会话</button></header><div id="chat-details" class="chat-details" hidden></div><div id="mode-banner" class="mode-banner"></div><div id="messages" class="messages" aria-live="polite"></div><div id="approvals" class="approvals"></div><div class="composer-wrap"><div class="session-settings-bar"><button id="model-settings-button" class="model-settings-button" type="button" title="选择模型和推理级别" aria-label="选择模型和推理级别" disabled><span data-icon="settings"></span><span id="model-settings-label">当前模型</span></button><div id="context-meter" class="context-meter" title="暂无准确的上下文用量"><span>上下文</span><strong id="context-label">暂无用量</strong><span class="context-track" role="progressbar" aria-label="上下文已用比例" aria-valuemin="0" aria-valuemax="100" aria-valuenow="0" hidden><span id="context-fill"></span></span></div></div><form id="composer" class="composer"><textarea id="message-input" placeholder="先确认接续方式，再沿着这条会话继续…" rows="2" aria-label="发送消息"></textarea><div class="composer-toolbar"><span id="composer-mode"><span data-icon="shield"></span>只读镜像</span><button id="stop-turn" class="button small" type="button" hidden>停止任务</button><button id="send-message" class="send-button" aria-label="发送消息" disabled><span data-icon="arrow"></span></button></div></form><p class="composer-note" id="composer-note">查看不会唤醒会话，也不会打断电脑上的执行。</p></div></div></section>
+<section id="conversation" class="conversation"><div id="welcome" class="welcome"></div><div id="chat" class="chat" hidden><header class="chat-header"><button id="back" class="icon-button mobile-only" aria-label="返回会话列表"><span data-icon="back"></span></button><div class="chat-title"><h2 id="chat-title"></h2><p id="chat-subtitle"></p></div><button id="details-toggle" class="icon-button" aria-label="查看会话详情"><span data-icon="info"></span></button><button id="enable-control" class="button small">接续会话</button></header><div id="chat-details" class="chat-details" hidden></div><div id="mode-banner" class="mode-banner"></div><div id="messages" class="messages" aria-live="polite"></div><div id="approvals" class="approvals"></div><div class="composer-wrap"><div class="session-settings-bar"><button id="model-settings-button" class="model-settings-button" type="button" title="选择模型和推理级别" aria-label="选择模型和推理级别" disabled><span data-icon="settings"></span><span id="model-settings-label">当前模型</span></button><button id="browse-files" class="button small" type="button" aria-label="浏览电脑项目文件">电脑文件</button><div id="context-meter" class="context-meter" title="暂无准确的上下文用量"><span>上下文</span><strong id="context-label">暂无用量</strong><span class="context-track" role="progressbar" aria-label="上下文已用比例" aria-valuemin="0" aria-valuemax="100" aria-valuenow="0" hidden><span id="context-fill"></span></span></div></div><form id="composer" class="composer"><textarea id="message-input" placeholder="沿着这条会话继续…" rows="2" aria-label="发送消息"></textarea><div id="composer-attachments" class="composer-attachments" aria-live="polite"></div><div class="composer-toolbar"><label class="turn-mode-label" for="turn-mode">模式</label><select id="turn-mode" class="turn-mode-select" aria-label="本轮对话模式"><option value="default">普通</option><option value="plan">计划</option><option value="goal">目标（本轮）</option></select><input id="file-input" type="file" multiple hidden><button id="attach-files" class="button small" type="button" aria-label="添加附件">添加文件</button><span id="composer-mode"><span data-icon="shield"></span>只读镜像</span><button id="stop-turn" class="button small" type="button" hidden>停止任务</button><button id="send-message" class="send-button" aria-label="发送消息" disabled><span data-icon="arrow"></span></button></div></form><p class="composer-note" id="composer-note">查看不会唤醒会话，也不会打断电脑上的执行。</p></div></div></section>
 </section><section id="devices-view" class="devices-view" hidden></section>
 </main>
 </div>
 <dialog id="control-dialog"><form id="control-form"><span class="mini-badge">CONTINUE, NOT FORK</span><h2 id="control-title">授权热接管</h2><p id="control-description">保持原会话与桌面执行实例，不创建新会话或独立执行器。</p><div class="notice"><span data-icon="shield"></span><span id="control-notice">指令会交给原 Codex 桌面会话执行，并沿用其权限与审批策略。</span></div><label class="check-row" id="allow-write-row"><input id="allow-write" type="checkbox"><span>允许修改此会话的工作区文件<small>默认只读。扩大权限仍需要审批；不会启用无限制执行。</small></span></label><label class="check-row"><input id="control-confirm" type="checkbox" required><span id="control-confirm-copy">我确认授权此设备控制这条原生会话。</span></label><div class="dialog-actions"><button type="button" id="cancel-control" class="button">先只读查看</button><button class="primary" id="confirm-control-button" type="submit">授权热接管 <span>↗</span></button></div><p id="control-error" class="error" role="alert"></p></form></dialog>
 <dialog id="model-dialog"><form id="model-form"><h2>会话参数</h2><p id="model-description">更改将在这条会话的下一轮生效。</p><label for="model-select">模型</label><select id="model-select" required></select><label for="effort-select">推理级别</label><select id="effort-select"></select><p id="model-note" class="model-note"></p><p id="model-error" class="error" role="alert"></p><div class="dialog-actions"><button id="cancel-model" type="button" class="button">取消</button><button id="authorize-model" type="button" class="primary" hidden>先授权热接管</button><button id="apply-model" type="submit" class="primary">应用到下一轮</button></div></form></dialog>
+<dialog id="file-browser-dialog" class="file-browser-dialog"><section class="file-browser-panel"><header><div><h2>电脑项目文件</h2><p id="file-browser-path">项目根目录</p></div><button id="close-file-browser" class="button small" type="button">关闭</button></header><p class="file-browser-notice">仅浏览当前会话工作目录；系统目录、凭证文件及符号链接不会开放。单个文件最大 8 MiB。</p><div id="file-browser-list" class="file-browser-list" aria-live="polite"></div><p id="file-browser-error" class="error" role="alert"></p></section></dialog>
 <div id="toast" class="toast" role="status" hidden></div>
 </body></html>