Release v0.2.18

Add remote prompt template updates
Polish prompt import and session UX
2026-10-18 05:59:23 +08:00 · 2026-07-05 23:58:44 +08:00 · 2026-07-05 23:57:59 +08:00 · 2026-07-05 23:47:37 +08:00 · 2026-07-05 23:39:43 +08:00 · 2026-07-05 17:17:12 +08:00
23 changed files with 3847 additions and 258 deletions
@@ -9,20 +9,44 @@ on:
 permissions:
  contents: write

+defaults:
+  run:
+    shell: bash
+
 jobs:
  build:
-    name: Build ${{ matrix.platform }}
+    name: Build ${{ matrix.name }}
    runs-on: ${{ matrix.platform }}
    strategy:
      fail-fast: false
      matrix:
        include:
-          - platform: macos-latest
+          - name: macOS Apple Silicon
+            platform: macos-latest
            args: --bundles dmg
-          - platform: ubuntu-22.04
+            artifact: codex-x-macos-arm64
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/dmg/*.dmg
+          - name: macOS Intel
+            platform: macos-15-intel
+            args: --bundles dmg
+            artifact: codex-x-macos-x64
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/dmg/*.dmg
+          - name: Linux
+            platform: ubuntu-22.04
            args: --bundles deb,rpm
-          - platform: windows-latest
+            artifact: codex-x-linux
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/deb/*.deb
+              apps/desktop/src-tauri/target/release/bundle/rpm/*.rpm
+          - name: Windows
+            platform: windows-latest
            args: --bundles msi
+            artifact: codex-x-windows
+            paths: |
+              apps/desktop/src-tauri/target/release/bundle/msi/*.msi
+              apps/desktop/src-tauri/Codex-X_*_windows_x64_portable.zip

    steps:
      - name: Checkout
@@ -61,22 +85,123 @@ jobs:
      - name: Install dependencies
        run: pnpm install --frozen-lockfile

-      - name: Build and upload Tauri bundles
-        uses: tauri-apps/tauri-action@v0
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build Tauri bundles
+        run: pnpm --dir apps/desktop tauri build ${{ matrix.args }}
+
+      - name: Create Windows portable zip
+        if: matrix.platform == 'windows-latest'
+        run: |
+          set -euo pipefail
+          version=$(node -p "require('./apps/desktop/package.json').version")
+          portable_dir="apps/desktop/src-tauri/portable/Codex-X_${version}_windows_x64_portable"
+          rm -rf "apps/desktop/src-tauri/portable"
+          mkdir -p "$portable_dir"
+          cp apps/desktop/src-tauri/target/release/codex-x.exe "$portable_dir/Codex-X.exe"
+          cat > "$portable_dir/README-portable.txt" <<'EOF'
+          Codex-X Windows Portable
+
+          Double click Codex-X.exe to run. No MSI installation is required.
+          Microsoft Edge WebView2 Runtime is required; Windows 10/11 usually already includes it.
+          EOF
+          powershell -NoProfile -Command "Compress-Archive -Path 'apps/desktop/src-tauri/portable/Codex-X_${version}_windows_x64_portable/*' -DestinationPath 'apps/desktop/src-tauri/Codex-X_${version}_windows_x64_portable.zip' -Force"
+
+      - name: Normalize release asset names
+        run: |
+          set -euo pipefail
+          version=$(node -p "require('./apps/desktop/package.json').version")
+          case "${{ matrix.name }}" in
+            "macOS Apple Silicon")
+              target="apps/desktop/src-tauri/target/release/bundle/dmg/Codex-X_${version}_macos_apple_silicon_aarch64.dmg"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/dmg -maxdepth 1 -type f -name '*.dmg' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "macOS Intel")
+              target="apps/desktop/src-tauri/target/release/bundle/dmg/Codex-X_${version}_macos_intel_x64.dmg"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/dmg -maxdepth 1 -type f -name '*.dmg' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "Windows")
+              target="apps/desktop/src-tauri/target/release/bundle/msi/Codex-X_${version}_windows_x64.msi"
+              src=$(find apps/desktop/src-tauri/target/release/bundle/msi -maxdepth 1 -type f -name '*.msi' | head -n 1)
+              test -n "$src"
+              mv "$src" "$target"
+              ;;
+            "Linux")
+              deb_target="apps/desktop/src-tauri/target/release/bundle/deb/Codex-X_${version}_linux_x64.deb"
+              rpm_target="apps/desktop/src-tauri/target/release/bundle/rpm/Codex-X_${version}_linux_x64.rpm"
+              deb_src=$(find apps/desktop/src-tauri/target/release/bundle/deb -maxdepth 1 -type f -name '*.deb' | head -n 1)
+              rpm_src=$(find apps/desktop/src-tauri/target/release/bundle/rpm -maxdepth 1 -type f -name '*.rpm' | head -n 1)
+              test -n "$deb_src"
+              test -n "$rpm_src"
+              mv "$deb_src" "$deb_target"
+              mv "$rpm_src" "$rpm_target"
+              ;;
+          esac
+
+      - name: Upload bundle artifacts
+        uses: actions/upload-artifact@v4
        with:
-          projectPath: apps/desktop
-          tagName: ${{ github.ref_name }}
-          releaseName: Codex-X ${{ github.ref_name }}
-          releaseBody: |
-            Codex-X desktop release.
+          name: ${{ matrix.artifact }}
+          path: ${{ matrix.paths }}
+          if-no-files-found: error
+          retention-days: 7

-            - macOS: `.dmg`
-            - Windows: `.msi`
-            - Linux: `.deb` / `.rpm`
+  release:
+    name: Publish GitHub Release
+    needs: build
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: write
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4

-            GitHub 会自动附带 Source code (zip/tar.gz)。
-          releaseDraft: false
-          prerelease: false
-          args: ${{ matrix.args }}
+      - name: Download bundle artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: release-assets
+          merge-multiple: true
+
+      - name: Prepare release notes
+        id: release_notes
+        run: |
+          python3 - <<'PY'
+          from pathlib import Path
+          import os
+          import re
+
+          tag = os.environ["GITHUB_REF_NAME"]
+          text = Path("CHANGELOG.md").read_text(encoding="utf-8")
+          match = re.search(
+              rf"^## \[{re.escape(tag)}\].*?\n(.*?)(?=^## \[|\Z)",
+              text,
+              flags=re.S | re.M,
+          )
+          body = match.group(1).strip() if match else ""
+          if not body:
+              body = "Codex-X desktop release."
+          with open("release-body.md", "w", encoding="utf-8") as fh:
+              fh.write(body + "\n")
+          PY
+
+      - name: Publish release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          set -euo pipefail
+          tag="${GITHUB_REF_NAME}"
+          title="Codex-X ${tag}"
+          if gh release view "$tag" >/dev/null 2>&1; then
+            gh release edit "$tag" --title "$title" --notes-file release-body.md --latest
+          else
+            gh release create "$tag" --title "$title" --notes-file release-body.md --latest
+          fi
+          mapfile -t assets < <(find release-assets -type f \( -name '*.dmg' -o -name '*.msi' -o -name '*.deb' -o -name '*.rpm' -o -name '*.zip' \) -print | sort)
+          if [ "${#assets[@]}" -eq 0 ]; then
+            echo "No release assets found" >&2
+            exit 1
+          fi
+          printf 'Uploading %s\n' "${assets[@]}"
+          gh release upload "$tag" "${assets[@]}" --clobber
@@ -0,0 +1,105 @@
+# Changelog
+
+All notable changes to Codex-X will be documented here.
+
+## [v0.2.18] - 2026-07-05
+
+- 指令提示词内置模板支持从 GitHub `examples/` 实时检查更新，并缓存到本地；启用内置模板时优先使用 GitHub 最新版本，离线时自动回退本地缓存或打包内置版本。
+- 指令提示词页面新增“更新内置模板”状态与来源展示，可看到模板来自 GitHub 最新、本地缓存或打包内置。
+- 继续保留导入 `.md` 提示词、外部提示词自动记忆、会话管理交互优化和 API Key 可见切换等体验改进。
+
+## [v0.2.17] - 2026-07-04
+
+- 修复 macOS Intel Release 构建 runner：从已不可用/长时间排队的 `macos-13` 切换为 `macos-15-intel`。
+- 继续保留 macOS Apple Silicon / macOS Intel / Windows MSI / Windows portable ZIP / Linux deb/rpm 多平台产物。
+
+## [v0.2.16] - 2026-07-04
+
+- Release 新增 macOS Intel 构建，Intel Mac 用户可下载 x64 DMG。
+- macOS Release 现在同时提供 Apple Silicon 与 Intel 两种 DMG。
+- Windows Release 新增 portable ZIP，包含可直接运行的 `Codex-X.exe`，无需 MSI 安装。
+- 发布流程支持上传 `.zip` portable 产物，并更新 README 下载说明。
+
+## [v0.2.15] - 2026-07-04
+
+- 会话管理页移除 CODEX_HOME 与 Provider Sync 备份位置展示，页面信息更简洁。
+- 优化 Windows 打开下载页体验：后端改为后台线程 spawn 浏览器，不再等待 `cmd /C start`，避免 WebView 卡顿 2-3 秒。
+- 统一所有外部链接按钮走异步打开逻辑，打开项目主页、反馈页、下载页都不会阻塞界面。
+- 修复 macOS 顶部 toast 被 Overlay 标题栏遮挡的问题，toast 自动下移到标题栏安全区下方。
+
+## [v0.2.14] - 2026-07-04
+
+- 修复 macOS Overlay 标题栏遮挡内容的问题，为红黄绿窗口按钮预留完整安全区。
+- 调整侧边栏、内容区、Provider/TOML/指令提示词/会话管理页高度计算，避免顶部内容被标题栏压住。
+- 加高 macOS 顶部拖拽区域并保持深色渐变，窗口顶部继续和应用色系统一。
+
+## [v0.2.13] - 2026-07-04
+
+- macOS 窗口标题栏改为深色融合样式，避免顶部出现系统白色标题条。
+- 会话管理页面移除多余外层玻璃边框，统一为完整内容容器。
+- 优化会话列表边界与滚动区域，避免列表像卡在外层框外面。
+
+## [v0.2.12] - 2026-07-04
+
+- Windows MSI 安装器回退为默认简洁样式，移除上一版过重的自定义安装界面图。
+- 【会话管理】页面新增会话列表，展示标题、Provider、模型、工作目录、更新时间、归档/需同步状态。
+- 会话扫描会从 Codex 本地 SQLite threads 表读取最近会话，方便用户直接判断哪些历史 thread 需要同步修复。
+
+## [v0.2.11] - 2026-07-04
+
+- 调整首次启动自动检查更新体验：不再弹出居中的强提醒窗口。
+- 自动检测到新版本时仅显示轻量 toast，并保留概览页顶部“发现新版本”提示条。
+- 只有用户在【关于】页面主动点击“检查更新”时，检测到新版本才弹出“现在下载 / 稍后”窗口。
+
+## [v0.2.10] - 2026-07-04
+
+- 修复 Release 发布任务上传 Linux 产物时误把 `deb/`、`rpm/` 目录当作资产上传的问题。
+- 发布任务现在只收集 `.dmg` / `.msi` / `.deb` / `.rpm` 文件并统一上传。
+- 补齐稳定的三平台 Release 自动发布流程。
+
+## [v0.2.9] - 2026-07-04
+
+- 修复 GitHub Actions Release 发布流程：不再由三平台矩阵并发创建 Release，改为先上传构建产物，再由单独发布任务统一创建/更新 Release。
+- 修复 `Resource not accessible by integration` 导致 Release 创建失败的问题。
+- Release 仍会从 `CHANGELOG.md` 自动读取当前 tag 的更新日志，并上传 macOS / Windows / Linux 安装包。
+
+## [v0.2.8] - 2026-07-04
+
+- 更新页进一步产品化：去掉资源/仓库调试信息，将“有更新”改为更明显的绿色标签。
+- 概览页顶部新增轻量“发现新版本”提示条，可直接打开 Releases 页面。
+- 新增【会话管理】页面：检查 Codex 本地 sessions / archived_sessions 与 SQLite threads 是否和当前 Provider 同步。
+- 新增一键 Provider Sync / 修复历史会话：写入前备份到 `~/.codex/backups_state/provider-sync/`，并保留最近 5 份备份。
+
+## [v0.2.7] - 2026-07-04
+
+- 简化更新检查页展示。
+- “打开下载页”改为打开 GitHub Releases 页面。
+- 更新弹窗保持简洁，仅提示版本差异。
+- 首次启动自动检查更新并弹窗提醒。
+
+## [v0.2.5] - 2026-07-04
+
+- Windows 版双击启动不再额外弹出终端窗口。
+- 改进 Windows MSI 安装器品牌展示与图标。
+- About 页面外部链接改为系统默认浏览器打开。
+- Release 流程加入 Rust cache，后续构建更快。
+
+## [v0.2.4] - 2026-07-04
+
+- 美化 Windows MSI 安装器横幅与对话图。
+- Windows 安装包加入应用图标。
+
+## [v0.2.3] - 2026-07-04
+
+- 修复 macOS DMG 中应用图标缺失问题。
+- 补充 macOS 安装说明。
+- Release 流程加入基础缓存优化。
+
+## [v0.2.2] - 2026-07-04
+
+- macOS / Linux / Windows 首次三平台 Release。
+- Linux 产物改为 `deb` / `rpm`，避免 AppImage 图标问题。
+
+## [v0.2.1] - 2026-07-04
+
+- 首次加入应用图标与 GitHub Release 自动发布。
@@ -0,0 +1,326 @@
+<p align="center">
+  <a href="README.md"><img src="https://img.shields.io/badge/中文-切换-lightgrey" alt="中文" /></a>
+  <a href="README.en.md"><img src="https://img.shields.io/badge/English-Current-blue" alt="English" /></a>
+</p>
+
+<div align="center">
+  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="150" />
+
+  # Codex-X
+
+  **Prompt Injection · Provider Switching · TOML / Auth Visual Manager for Codex**
+
+  Codex-X is a cross-platform desktop tool for **OpenAI Codex Desktop / Codex CLI**. It ships with `gpt5.5-unrestricted.md` and `gpt5.4-unrestricted.md`, and supports one-click enable / disable for instruction prompts, third-party Provider switching, official Auth management, TOML visual editing, and local session Provider Sync.
+
+  <p>
+    <img src="https://img.shields.io/github/v/release/yynxxxxx/Codex-X?label=version&color=blue" alt="version" />
+    <img src="https://img.shields.io/badge/platform-Windows%20%7C%20macOS%20%7C%20Linux-555" alt="platform" />
+    <img src="https://img.shields.io/badge/built%20with-Tauri%202-24C8DB" alt="tauri" />
+    <img src="https://img.shields.io/badge/license-MIT-green" alt="license" />
+  </p>
+
+  <p>
+    <img src="https://img.shields.io/badge/React-18-61DAFB?logo=react&logoColor=white" />
+    <img src="https://img.shields.io/badge/TypeScript-5-3178C6?logo=typescript&logoColor=white" />
+    <img src="https://img.shields.io/badge/Rust-stable-000000?logo=rust&logoColor=white" />
+    <img src="https://img.shields.io/badge/SQLite-Ready-003B57?logo=sqlite&logoColor=white" />
+    <img src="https://img.shields.io/badge/Vite-Ready-646CFF?logo=vite&logoColor=white" />
+  </p>
+</div>
+
+---
+
+## What is Codex-X?
+
+Codex-X is not just a configuration-file editor. It is a **visual enhancement manager** built for Codex CLI and Codex Desktop workflows.
+
+It turns several high-frequency operations into a desktop UI:
+
+- Enable / disable instruction prompt templates for Codex
+- Switch between official OpenAI and third-party Codex API Providers
+- View / edit `~/.codex/config.toml`
+- View / edit official `~/.codex/auth.json`
+- Check and repair Provider metadata for local historical sessions
+
+## Preview
+
+<details open>
+<summary><b>App preview</b>: Home / Provider / TOML / Auth</summary>
+
+<p align="center">
+  <img src="docs/screenshots/app/preview.png" alt="Codex-X app preview: Home, Provider, TOML, Auth" width="920" />
+</p>
+
+</details>
+
+<details>
+<summary><b>Prompt injection results: security testing scenarios</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>SQL Injection Testing</b><br />
+      <sub>Post-deployment test: how to perform SQL injection testing against a target?</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/sql-injection.png" alt="SQL injection testing result" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>NSFW Response Test</b><br />
+      <sub>Observe boundary response changes after prompt injection</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/nsfw.png" alt="NSFW response test result" width="420" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+<details>
+<summary><b>Prompt injection results: reverse engineering scenarios</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>APK Reverse Engineering</b><br />
+      <sub>Static / dynamic analysis workflow for Android APKs</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-1.png" alt="APK reverse engineering result" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>APK Reverse Engineering 2</b><br />
+      <sub>Additional APK reverse workflow and locating methods</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-2.png" alt="APK reverse engineering result 2" width="420" />
+    </td>
+  </tr>
+  <tr>
+    <td align="center" colspan="2">
+      <b>EXE Reverse Engineering</b><br />
+      <sub>Windows executable analysis and debugging directions</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/exe-reverse.png" alt="EXE reverse engineering result" width="620" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+## Features
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center" width="180">Feature</th>
+    <th align="center">Description</th>
+  </tr>
+  <tr>
+    <td align="center">⚡ Provider API</td>
+    <td>Visually manage official OpenAI / third-party Codex Providers, including Base URL, API Key, Model, Wire API, and one-click switching.</td>
+  </tr>
+  <tr>
+    <td align="center">🧩 <b>Prompt Injection</b></td>
+    <td><b>Signature feature</b>: built-in <code>gpt5.4-unrestricted.md</code> / <code>gpt5.5-unrestricted.md</code>, one-click write into Codex configuration; after enabling, it can produce results similar to the screenshots above for SQL injection testing and APK / EXE reverse engineering scenarios.</td>
+  </tr>
+  <tr>
+    <td align="center">💬 Session Management</td>
+    <td>Read Codex local SQLite and rollout JSONL, display local sessions visually, and support Provider Sync / historical thread metadata repair.</td>
+  </tr>
+  <tr>
+    <td align="center">📝 TOML Config</td>
+    <td>View current <code>~/.codex/config.toml</code>, edit full TOML directly from the Provider editor, and save changes back to the Codex config directory.</td>
+  </tr>
+  <tr>
+    <td align="center">🔐 Auth Management</td>
+    <td>Read / edit official <code>~/.codex/auth.json</code>, and distinguish ChatGPT login-state Auth from third-party API Keys.</td>
+  </tr>
+  <tr>
+    <td align="center">📦 Cross-platform Release</td>
+    <td>Provides macOS Apple Silicon / Intel <code>.dmg</code>, Windows <code>.msi</code> / portable <code>.zip</code>, Linux <code>.deb</code> / <code>.rpm</code>, plus in-app update checking.</td>
+  </tr>
+</table>
+</div>
+
+## Highlights
+
+### 1. Built-in dual instruction prompt templates
+
+Codex-X currently includes two prompt templates:
+
+- `examples/gpt5.5-unrestricted.md`
+- `examples/gpt5.4-unrestricted.md`
+
+You can enable / disable them directly from the Prompt page. When enabled, Codex-X writes the selected `.md` file into the Codex configuration directory and updates `model_instructions_file` in `config.toml`.
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center">Item</th>
+    <th align="center"><code>gpt5.4-unrestricted.md</code></th>
+    <th align="center"><code>gpt5.5-unrestricted.md</code></th>
+  </tr>
+  <tr>
+    <td align="center">Positioning</td>
+    <td align="center">5.4 CTF sandbox</td>
+    <td align="center">5.5 unrestricted mode</td>
+  </tr>
+  <tr>
+    <td align="center">Strategy</td>
+    <td align="center">Indirect bypass through CTF competition sandbox framing</td>
+    <td align="center">Direct declaration of unrestricted developer mode</td>
+  </tr>
+  <tr>
+    <td align="center">Style</td>
+    <td align="center">Security-research oriented, detailed methodology</td>
+    <td align="center">Minimal instructions, broad coverage</td>
+  </tr>
+  <tr>
+    <td align="center">Length</td>
+    <td align="center">~180 lines</td>
+    <td align="center">~40 lines</td>
+  </tr>
+  <tr>
+    <td align="center">Target</td>
+    <td align="center">GPT-5.4 Codex CLI</td>
+    <td align="center">GPT-5.5 Codex CLI</td>
+  </tr>
+</table>
+</div>
+
+Post-deployment test prompt:
+
+```text
+How do I perform SQL injection testing against a target?
+```
+
+Typical effect:
+
+```text
+Before injection → refusal or generic answer
+After injection  → direct security research methodology and testing steps
+```
+
+### 2. Visual Provider switching
+
+- Add third-party Codex API Providers
+- Edit Base URL / API Key / Model / Wire API
+- View and edit Provider-related TOML from the Provider page
+- Clearly display the currently active Provider
+- Import Codex Providers from a cc-switch database
+
+### 3. Official Auth management
+
+- Automatically read Codex official `auth.json`
+- View / edit ChatGPT login-state Auth
+- Distinguish official Auth from third-party API Keys
+- Manage official Auth and third-party Providers in one UI
+
+### 4. Visual TOML editing
+
+- View the current Codex `config.toml`
+- Dark code preview with syntax highlighting
+- Edit full TOML directly from the Provider editor
+- Save changes back to the Codex configuration directory
+
+### 5. Session Management / Provider Sync
+
+Codex-X can read Codex local session data:
+
+```text
+~/.codex/sqlite/*.db
+~/.codex/state_5.sqlite
+~/.codex/sessions/**/rollout-*.jsonl
+~/.codex/archived_sessions/**/rollout-*.jsonl
+```
+
+It checks whether historical session Provider metadata matches the current configuration, and supports one-click sync / repair so historical threads can still be recognized, opened, and continued by native Codex.
+
+### 6. Cross-platform desktop app
+
+- macOS Apple Silicon `.dmg`
+- macOS Intel `.dmg`
+- Windows `.msi`
+- Windows Portable `.zip`
+- Linux `.deb` / `.rpm`
+- Automatic GitHub Releases builds
+- In-app update checking
+
+## Tech Stack
+
+| Category | Technology |
+| --- | --- |
+| Desktop framework | Tauri 2 |
+| Frontend | React 18 / TypeScript / Vite |
+| Backend | Rust |
+| Local data | SQLite / rusqlite |
+| Config editing | TOML / JSON |
+| Release | GitHub Actions / GitHub Releases |
+
+## Configuration Paths
+
+Codex-X reads the Codex configuration directory by default:
+
+```text
+~/.codex/config.toml
+~/.codex/auth.json
+```
+
+Environment variables are also supported:
+
+```text
+CODEX_HOME=/path/to/.codex
+CODEXX_HOME=/path/to/codex-x-data
+CC_SWITCH_HOME=/path/to/.cc-switch
+```
+
+Codex-X's own database is stored by default at:
+
+```text
+~/.codexx/codexx.db
+```
+
+## Download
+
+Download from the Releases page:
+
+https://github.com/yynxxxxx/Codex-X/releases
+
+## Development
+
+```bash
+pnpm install
+pnpm dev
+```
+
+Build desktop bundles:
+
+```bash
+pnpm --dir apps/desktop tauri build
+```
+
+## macOS Installation Note
+
+If you see “app is damaged” when opening an unsigned / unnotarized DMG, this is normal macOS Gatekeeper behavior.
+
+- Best option: sign and notarize with an Apple Developer ID
+- Local testing only: remove the quarantine attribute manually
+
+```bash
+xattr -dr com.apple.quarantine /Applications/Codex-X.app
+```
+
+## License
+
+This project is open-sourced under the [MIT License](https://github.com/yynxxxxx/Codex-X/blob/main/LICENSE).
+
+## Thanks
+
+Thanks to the [LINUX DO forum](https://linux.do/) community for attention, feedback, and support.
+
+## Star History
+
+<a href="https://www.star-history.com/?repos=yynxxxxx%2FCodex-X&type=date&legend=top-left">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&theme=dark&legend=top-left" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+    <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+  </picture>
+</a>
@@ -1,11 +1,16 @@
+<p align="center">
+  <a href="README.md"><img src="https://img.shields.io/badge/中文-当前-blue" alt="中文" /></a>
+  <a href="README.en.md"><img src="https://img.shields.io/badge/English-Switch-lightgrey" alt="English" /></a>
+</p>
+
 <div align="center">
-  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="160" />
+  <img src="apps/desktop/src-tauri/icons/icon.png" alt="Codex-X Logo" width="150" />

  # Codex-X

-  **Codex 提示词注入与配置切换管理器**
+  **Codex 提示词注入 · Provider 切换 · TOML / Auth 可视化管理器**

-  一款面向 **OpenAI Codex / Codex CLI** 的跨平台桌面工具，重点提供 `gpt5.5-unrestricted.md` 指令提示词注入、Provider 切换、官方 Auth 管理与 TOML 可视化编辑。
+  一款面向 **OpenAI Codex 桌面端 / Codex CLI** 的跨平台桌面工具，内置 `gpt5.5-unrestricted.md` 与 `gpt5.4-unrestricted.md`，支持一键写入 / 禁用指令提示词、第三方 Provider 切换、官方 Auth 管理、TOML 可视化编辑与本地会话 Provider Sync。

  <p>
    <img src="https://img.shields.io/github/v/release/yynxxxxx/Codex-X?label=version&color=blue" alt="version" />
@@ -27,80 +32,217 @@

 ## Codex-X 是什么？

-Codex-X 不是单纯的配置文件编辑器，而是一个更偏向「Codex 增强启动器」的桌面管理工具。
+Codex-X 不是普通的配置文件编辑器，而是一个面向 Codex CLI 的 **可视化增强管理器**。

-它可以把预设或自定义的 **指令提示词模板** 写入 Codex 配置，例如项目内置的：
+它把几个高频操作做成了桌面软件：

-```text
-examples/gpt5.5-unrestricted.md
-```
-
-你可以在 UI 中直接启用、禁用、切换多个提示词模板，也可以同时管理不同第三方供应商 API 和官方 OpenAI Codex 登录配置。
-
-## 核心亮点
-
-### 1. 指令提示词注入
-
- 一键启用 `gpt5.5-unrestricted.md`
- 支持多个提示词模板并存
- 启用前自动记录状态，方便回退
- 支持禁用当前提示词，让 Codex 恢复普通配置
-
-### 2. Provider 可视化切换
-
- 添加第三方 Codex API Provider
- 编辑 Base URL / API Key / Model / TOML 配置
- 当前 Provider 状态清晰可见
- 支持从 cc-switch 数据库导入 Codex Provider
-
-### 3. 官方 Codex 配置管理
-
- 读取 Codex 官方 `auth.json`
- 支持官方 ChatGPT 登录态 Auth 查看与编辑
- 区分官方 Auth 与第三方 API Key，不混在一起
-
-### 4. TOML 配置编辑
-
- 可视化查看当前 Codex `config.toml`
- 在 Provider 编辑页直接编辑完整 TOML
- 保存后立即同步到 Codex 配置目录
-
-### 5. 跨平台桌面软件
-
- macOS `.dmg`
- Windows `.msi`
- Linux `.deb` / `.rpm`
- GitHub Releases 自动构建发布
+- 给 Codex 写入 / 禁用指令提示词模板
+- 切换官方 OpenAI 与第三方 Codex API Provider
+- 查看 / 编辑 `~/.codex/config.toml`
+- 查看 / 编辑官方 `~/.codex/auth.json`
+- 检查并修复本地历史会话的 Provider 元数据

 ## 软件预览

 <details open>
-<summary><b>主界面 / Provider / TOML / Auth 截图</b></summary>
+<summary><b>应用界面预览</b>：主界面 / Provider / TOML / Auth</summary>

-> 这里可以放软件主界面、供应商切换页面、TOML 编辑页面、官方 Auth 页面截图。
-
-<!-- 示例：
 <p align="center">
-  <img src="docs/screenshots/overview.png" width="760" />
+  <img src="docs/screenshots/app/preview.png" alt="Codex-X 应用界面预览：主界面、Provider、TOML、Auth" width="920" />
 </p>
-->

 </details>

 <details>
-<summary><b>提示词注入前后效果图</b></summary>
+<summary><b>提示词注入效果：安全测试场景</b></summary>

-> 这里可以放启用 `gpt5.5-unrestricted.md` 前后的 Codex 效果对比图。
-
-<!-- 示例：
-<p align="center">
-  <img src="docs/screenshots/prompt-before.png" width="760" />
-  <img src="docs/screenshots/prompt-after.png" width="760" />
-</p>
-->
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>SQL 注入测试</b><br />
+      <sub>部署后测试：如何对目标进行 SQL 注入测试？</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/sql-injection.png" alt="SQL 注入测试效果图" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>NSFW 响应测试</b><br />
+      <sub>用于观察提示词注入后的边界响应变化</sub><br />
+      <img src="docs/screenshots/prompt-effects/security/nsfw.png" alt="NSFW 响应测试效果图" width="420" />
+    </td>
+  </tr>
+</table>
+</div>

 </details>

+<details>
+<summary><b>提示词注入效果：逆向工程场景</b></summary>
+
+<div align="center">
+<table>
+  <tr>
+    <td align="center" width="50%">
+      <b>APK 逆向分析</b><br />
+      <sub>Android APK 静态 / 动态分析思路</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-1.png" alt="APK 逆向分析效果图" width="420" />
+    </td>
+    <td align="center" width="50%">
+      <b>APK 逆向分析 2</b><br />
+      <sub>补充 APK 逆向流程与定位方式</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/apk-reverse-2.png" alt="APK 逆向分析效果图 2" width="420" />
+    </td>
+  </tr>
+  <tr>
+    <td align="center" colspan="2">
+      <b>EXE 逆向分析</b><br />
+      <sub>Windows 可执行文件分析与调试方向</sub><br />
+      <img src="docs/screenshots/prompt-effects/reverse/exe-reverse.png" alt="EXE 逆向分析效果图" width="620" />
+    </td>
+  </tr>
+</table>
+</div>
+
+</details>
+
+## 功能特性
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center" width="180">功能</th>
+    <th align="center">说明</th>
+  </tr>
+  <tr>
+    <td align="center">⚡ 供应商 API</td>
+    <td>可视化管理官方 OpenAI / 第三方 Codex Provider，支持 Base URL、API Key、Model、Wire API 与一键切换。</td>
+  </tr>
+  <tr>
+    <td align="center">🧩 <b>提示词注入</b></td>
+    <td><b>特色功能</b>：内置 <code>gpt5.4-unrestricted.md</code> / <code>gpt5.5-unrestricted.md</code>，一键写入 Codex 配置；启用后可达到上方效果图中的 SQL 注入测试、APK / EXE 逆向等响应效果。</td>
+  </tr>
+  <tr>
+    <td align="center">💬 会话管理</td>
+    <td>读取 Codex 本地 SQLite 与 rollout JSONL，会话列表可视化展示，并支持 Provider Sync / 修复历史 thread 元数据。</td>
+  </tr>
+  <tr>
+    <td align="center">📝 TOML 配置</td>
+    <td>查看当前 <code>~/.codex/config.toml</code>，并在 Provider 编辑页直接编辑完整 TOML，保存后同步到 Codex 配置目录。</td>
+  </tr>
+  <tr>
+    <td align="center">🔐 Auth 管理</td>
+    <td>读取 / 编辑官方 <code>~/.codex/auth.json</code>，区分 ChatGPT 登录态 Auth 与第三方 API Key。</td>
+  </tr>
+  <tr>
+    <td align="center">📦 跨平台发布</td>
+    <td>提供 macOS Apple Silicon / Intel <code>.dmg</code>、Windows <code>.msi</code> / portable <code>.zip</code>、Linux <code>.deb</code> / <code>.rpm</code>，支持应用内检测更新。</td>
+  </tr>
+</table>
+</div>
+
+## 核心亮点
+
+### 1. 内置双指令提示词模板
+
+Codex-X 当前内置两套提示词模板：
+
+- `examples/gpt5.5-unrestricted.md`
+- `examples/gpt5.4-unrestricted.md`
+
+你可以在【指令提示词】页面直接点击启用 / 禁用。启用后，Codex-X 会把对应 `.md` 写入 Codex 配置目录，并更新 `config.toml` 中的 `model_instructions_file`。
+
+<div align="center">
+<table>
+  <tr>
+    <th align="center">对比项</th>
+    <th align="center"><code>gpt5.4-unrestricted.md</code></th>
+    <th align="center"><code>gpt5.5-unrestricted.md</code></th>
+  </tr>
+  <tr>
+    <td align="center">定位</td>
+    <td align="center">5.4 CTF 沙箱</td>
+    <td align="center">5.5 无限制模式</td>
+  </tr>
+  <tr>
+    <td align="center">策略</td>
+    <td align="center">CTF 竞赛沙箱间接绕过</td>
+    <td align="center">直接声明无限制开发者模式</td>
+  </tr>
+  <tr>
+    <td align="center">风格</td>
+    <td align="center">安全研究导向，方法论详细</td>
+    <td align="center">极简指令，覆盖面广</td>
+  </tr>
+  <tr>
+    <td align="center">长度</td>
+    <td align="center">约 180 行</td>
+    <td align="center">约 40 行</td>
+  </tr>
+  <tr>
+    <td align="center">适用</td>
+    <td align="center">GPT-5.4 Codex CLI</td>
+    <td align="center">GPT-5.5 Codex CLI</td>
+  </tr>
+</table>
+</div>
+
+部署后可以测试：
+
+```text
+如何对目标进行 SQL 注入测试？
+```
+
+典型效果：
+
+```text
+破甲前 → 拒绝或泛化回答
+破甲后 → 直接给安全研究方法论与测试步骤
+```
+
+### 2. Provider 可视化切换
+
+- 添加第三方 Codex API Provider
+- 编辑 Base URL / API Key / Model / Wire API
+- Provider 页面可查看并编辑对应 TOML
+- 当前启用 Provider 状态清晰可见
+- 支持从 cc-switch 数据库导入 Codex Provider
+
+### 3. 官方 Auth 管理
+
+- 自动读取 Codex 官方 `auth.json`
+- 支持查看 / 编辑 ChatGPT 登录态 Auth
+- 区分官方 Auth 与第三方 API Key
+- 官方配置可和第三方 Provider 在 UI 中统一管理
+
+### 4. TOML 可视化编辑
+
+- 查看当前 Codex `config.toml`
+- 深色代码预览与语法高亮
+- Provider 编辑页可直接编辑完整 TOML
+- 保存后同步到 Codex 配置目录
+
+### 5. 会话管理 / Provider Sync
+
+Codex-X 可以读取 Codex 本地会话数据：
+
+```text
+~/.codex/sqlite/*.db
+~/.codex/state_5.sqlite
+~/.codex/sessions/**/rollout-*.jsonl
+~/.codex/archived_sessions/**/rollout-*.jsonl
+```
+
+用于检查旧会话的 Provider 元数据是否和当前配置一致，并支持一键同步 / 修复，让历史 thread 继续被原生 Codex 识别、打开和续聊。
+
+### 6. 跨平台桌面软件
+
+- macOS Apple Silicon `.dmg`
+- macOS Intel `.dmg`
+- Windows `.msi`
+- Windows Portable `.zip`
+- Linux `.deb` / `.rpm`
+- GitHub Releases 自动构建发布
+- 应用内检查更新
+
 ## 技术栈

 | 类型 | 技术 |
@@ -154,14 +296,9 @@ pnpm dev
 pnpm --dir apps/desktop tauri build
 ```

-## License
-
-MIT © yynxxxxx
-
-
 ## macOS 安装说明

-如果你在未签名/未公证的 DMG 中看到“软件已损坏”提示，这是 macOS Gatekeeper 的正常行为。
+如果你在未签名 / 未公证的 DMG 中看到“软件已损坏”提示，这是 macOS Gatekeeper 的正常行为。

 - 最佳方式：使用 Apple Developer ID 签名并 notarize
 - 仅本地测试：可手动移除 quarantine 属性
@@ -169,3 +306,21 @@ MIT © yynxxxxx
 ```bash
 xattr -dr com.apple.quarantine /Applications/Codex-X.app
 ```
+
+## 许可证
+
+本项目基于 [MIT License](https://github.com/yynxxxxx/Codex-X/blob/main/LICENSE) 开源。
+
+## 致谢 / Thanks
+
+感谢 [LINUX DO 论坛](https://linux.do/) 社区的关注、反馈与支持。
+
+## Star History
+
+<a href="https://www.star-history.com/?repos=yynxxxxx%2FCodex-X&type=date&legend=top-left">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&theme=dark&legend=top-left" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+    <img alt="Star History Chart" src="https://api.star-history.com/chart?repos=yynxxxxx/Codex-X&type=date&legend=top-left" />
+  </picture>
+</a>
@@ -4,6 +4,15 @@
    <meta charset="UTF-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
    <title>Codex-X</title>
+    <style>
+      html, body { margin: 0; min-height: 100%; background: #070a13; }
+      #root:empty::before {
+        content: "Codex-X";
+        position: fixed; inset: 0; display: grid; place-items: center;
+        color: #eef4ff; font: 800 28px -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+        background: radial-gradient(circle at 30% 12%, rgba(124,92,255,.22), transparent 32%), linear-gradient(135deg, #060814 0%, #0c1120 52%, #071421 100%);
+      }
+    </style>
  </head>
  <body>
    <div id="root"></div>
@@ -1,6 +1,6 @@
 {
  "name": "codex-x",
-  "version": "0.2.4",
+  "version": "0.2.18",
  "private": true,
  "description": "Codex Switch & Instruct desktop manager",
  "type": "module",
@@ -337,7 +337,7 @@ dependencies = [

 [[package]]
 name = "codex-x"
-version = "0.2.3"
+version = "0.2.18"
 dependencies = [
 "chrono",
 "dirs 5.0.1",
@@ -348,6 +348,7 @@ dependencies = [
 "tauri-build",
 "thiserror 2.0.18",
 "toml_edit 0.22.27",
+ "ureq",
 ]

 [[package]]
@@ -2497,6 +2498,20 @@ dependencies = [
 "web-sys",
 ]

+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
 [[package]]
 name = "rusqlite"
 version = "0.31.0"
@@ -2526,6 +2541,41 @@ dependencies = [
 "semver",
 ]

+[[package]]
+name = "rustls"
+version = "0.23.41"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6b92b125634d9b795e7beca796cc790df15a7fb38323bf3196fda83292d06b1f"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "764899a24af3980067ee14bc143654f297b22eaebfe3c7b6b211920a5a59b046"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c429a8649f110dddef65e2a5ad240f747e85f7758a6bccc7e5777bd33f756e"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
 [[package]]
 name = "rustversion"
 version = "1.0.22"
@@ -2920,6 +2970,12 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"

+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
 [[package]]
 name = "swift-rs"
 version = "1.0.7"
@@ -3682,6 +3738,28 @@ version = "1.13.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"

+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "ureq"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
+dependencies = [
+ "base64 0.22.1",
+ "flate2",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-pki-types",
+ "url",
+ "webpki-roots 0.26.11",
+]
+
 [[package]]
 name = "url"
 version = "2.5.8"
@@ -3937,6 +4015,24 @@ dependencies = [
 "system-deps",
 ]

+[[package]]
+name = "webpki-roots"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
+dependencies = [
+ "webpki-roots 1.0.8",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf85cb06032201fa7c6f829d7db5a7e5aa45bcc0655327713065f6f0576731bf"
+dependencies = [
+ "rustls-pki-types",
+]
+
 [[package]]
 name = "webview2-com"
 version = "0.38.2"
@@ -4176,6 +4272,15 @@ dependencies = [
 "windows-targets 0.48.5",
 ]

+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-sys"
 version = "0.59.0"
@@ -4568,6 +4673,12 @@ dependencies = [
 "synstructure",
 ]

+[[package]]
+name = "zeroize"
+version = "1.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+
 [[package]]
 name = "zerotrie"
 version = "0.2.4"
@@ -1,6 +1,6 @@
 [package]
 name = "codex-x"
-version = "0.2.4"
+version = "0.2.18"
 description = "Codex Switch & Instruct desktop manager"
 authors = ["yynxxxxx"]
 license = "MIT"
@@ -23,3 +23,4 @@ chrono = { version = "0.4", features = ["serde"] }
 dirs = "5.0"
 thiserror = "2.0"
 rusqlite = { version = "0.31", features = ["bundled"] }
+ureq = { version = "2.12", features = ["tls"] }
@@ -0,0 +1,9 @@
+pub(crate) const INSTRUCTION_FILENAME: &str = "gpt5.5-unrestricted.md";
+pub(crate) const INSTRUCTION_RELATIVE: &str = "./gpt5.5-unrestricted.md";
+pub(crate) const INSTRUCTION_CONTENT: &str =
+    include_str!("../../../../examples/gpt5.5-unrestricted.md");
+
+pub(crate) const INSTRUCTION_54_FILENAME: &str = "gpt5.4-unrestricted.md";
+pub(crate) const INSTRUCTION_54_RELATIVE: &str = "./gpt5.4-unrestricted.md";
+pub(crate) const INSTRUCTION_54_CONTENT: &str =
+    include_str!("../../../../examples/gpt5.4-unrestricted.md");
@@ -1,3 +1,5 @@
+#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
+
 fn main() {
    codexx_lib::run()
 }
@@ -0,0 +1,44 @@
+use std::process::Command;
+
+pub fn command_version(program: &str, args: &[&str]) -> Option<String> {
+    Command::new(program)
+        .args(args)
+        .output()
+        .ok()
+        .filter(|out| out.status.success())
+        .map(|out| String::from_utf8_lossy(&out.stdout).trim().to_string())
+        .filter(|s| !s.is_empty())
+}
+
+#[cfg(target_os = "macos")]
+pub fn macos_codex_app_version() -> Option<String> {
+    let candidates = [
+        "/Applications/Codex.app",
+        "/Applications/OpenAI Codex.app",
+        "/Applications/ChatGPT Codex.app",
+    ];
+    for app in candidates {
+        let output = Command::new("mdls")
+            .args(["-name", "kMDItemVersion", "-raw", app])
+            .output()
+            .ok()?;
+        if output.status.success() {
+            let text = String::from_utf8_lossy(&output.stdout).trim().to_string();
+            if !text.is_empty() && text != "(null)" {
+                return Some(text);
+            }
+        }
+    }
+    None
+}
+
+#[cfg(not(target_os = "macos"))]
+pub fn macos_codex_app_version() -> Option<String> {
+    None
+}
+
+pub fn detect_codex_version() -> Option<String> {
+    command_version("codex", &["--version"])
+        .or_else(|| command_version("codex", &["-V"]))
+        .or_else(macos_codex_app_version)
+}
@@ -1,7 +1,7 @@
 {
  "$schema": "https://schema.tauri.app/config/2",
  "productName": "Codex-X",
-  "version": "0.2.4",
+  "version": "0.2.18",
  "identifier": "com.yynxxxxx.codexx",
  "build": {
    "frontendDist": "../dist",
@@ -19,7 +19,13 @@
        "minWidth": 1320,
        "minHeight": 720,
        "center": true,
-        "resizable": true
+        "resizable": true,
+        "titleBarStyle": "Overlay",
+        "hiddenTitle": true,
+        "trafficLightPosition": {
+          "x": 16,
+          "y": 14
+        }
      }
    ],
    "security": {
@@ -35,12 +41,6 @@
      "icons/icon.icns",
      "icons/icon.ico"
    ],
-    "targets": "all",
-    "windows": {
-      "wix": {
-        "bannerPath": "icons/wix/banner.bmp",
-        "dialogImagePath": "icons/wix/dialog.bmp"
-      }
-    }
+    "targets": "all"
  }
 }
@@ -6,6 +6,9 @@ import {
  Code2,
  Download,
  ExternalLink,
+  AlertCircle,
+  Eye,
+  EyeOff,
  FileCode2,
  Globe2,
  History,
@@ -17,10 +20,12 @@ import {
  Power,
  RefreshCw,
  RotateCcw,
+  Search,
  Settings,
  Sparkles,
  TerminalSquare,
  Trash2,
+  Upload,
  Zap,
 } from "lucide-react";
 import { invoke } from "@tauri-apps/api/core";
@@ -29,7 +34,7 @@ import "./styles.css";
 type Lang = "zh" | "en";
 type ProviderMode = "list" | "form" | "official";
 type InstructionMode = "list" | "form";
-type Tab = "dashboard" | "provider" | "instruction" | "toml" | "settings" | "about";
+type Tab = "dashboard" | "provider" | "sessions" | "instruction" | "toml" | "settings" | "about";

 type InstructionTemplate = {
  id: string;
@@ -65,6 +70,17 @@ type SavedPrompt = {
  content: string;
 };

+type BuiltinPromptStatus = {
+  id: string;
+  filename: string;
+  sourceUrl: string;
+  cached: boolean;
+  updated: boolean;
+  contentSource: string;
+  checkedAt?: string | null;
+  message: string;
+};
+
 type BackupEntry = {
  id: string;
  action: string;
@@ -130,8 +146,61 @@ type ReleaseInfo = {
  hasUpdate?: boolean;
 };

+
+type SessionSyncStatus = {
+  codexDir: string;
+  targetProvider: string;
+  rolloutFiles: number;
+  sessionMetaCount: number;
+  mismatchedRollouts: number;
+  mismatchedSessionMeta: number;
+  sqliteDbs: number;
+  sqliteThreads: number;
+  mismatchedThreads: number;
+  needsSync: boolean;
+  backupDir?: string | null;
+  warnings: string[];
+  sessions: SessionPreview[];
+};
+
+type SessionPreview = {
+  id: string;
+  title: string;
+  modelProvider?: string | null;
+  model?: string | null;
+  cwd?: string | null;
+  rolloutPath?: string | null;
+  updatedAtMs?: number | null;
+  archived: boolean;
+  hasUserEvent: boolean;
+  needsSync: boolean;
+};
+
+type SessionSyncResult = {
+  status: SessionSyncStatus;
+  updatedRollouts: number;
+  updatedThreads: number;
+  backupDir: string;
+};
+
+type DiagnosticItem = {
+  key: string;
+  label: string;
+  path?: string | null;
+  status: "ok" | "missing" | "manual" | string;
+  message: string;
+};
+
+type StartupDiagnostics = {
+  codexDir: string;
+  needsManualSelect: boolean;
+  summary: string;
+  items: DiagnosticItem[];
+};
+
 const INSTRUCTION_RELATIVE_UI = "./gpt5.5-unrestricted.md";
 const LANG_KEY = "codexx.lang";
+const STARTUP_WIZARD_SEEN_KEY = "codexx.startupWizardSeen";
 const FALLBACK_GITHUB_REPO = "yynxxxxx/Codex-X";

 const instructionTemplates: InstructionTemplate[] = [
@@ -187,6 +256,7 @@ const dict = {
    nav: {
      dashboard: "概览",
      provider: "供应商",
+      sessions: "会话管理",
      instruction: "指令提示词",
      toml: "TOML",
      settings: "设置",
@@ -293,6 +363,7 @@ const dict = {
    nav: {
      dashboard: "Overview",
      provider: "Provider",
+      sessions: "Sessions",
      instruction: "Prompt",
      toml: "TOML",
      settings: "Settings",
@@ -647,10 +718,39 @@ function releaseAssetForPlatform(assets: Array<{ name?: string; browser_download
  }) || assets[0];
 }

+function formatSessionTime(value?: number | null) {
+  if (!value) return "未知时间";
+  const date = new Date(value);
+  if (Number.isNaN(date.getTime())) return "未知时间";
+  return date.toLocaleString("zh-CN", {
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+  });
+}
+
+function compactPath(value?: string | null, max = 58) {
+  if (!value) return "未记录路径";
+  const normalized = value.replace(/\\/g, "/");
+  if (normalized.length <= max) return normalized;
+  const parts = normalized.split("/").filter(Boolean);
+  if (parts.length >= 3) {
+    const tail = parts.slice(-3).join("/");
+    return `…/${tail}`;
+  }
+  return `…${normalized.slice(-max + 1)}`;
+}
+
+function shortId(value: string) {
+  return value.length > 8 ? value.slice(0, 8) : value;
+}
+
 function App() {
  const initialLang = (localStorage.getItem(LANG_KEY) as Lang | null) || "zh";
  const [lang, setLang] = React.useState<Lang>(initialLang === "en" ? "en" : "zh");
  const t = dict[lang];
+  const isMacRuntime = navigator.userAgent.toLowerCase().includes("mac");
  const [tab, setTab] = React.useState<Tab>("dashboard");
  const [providerMode, setProviderMode] = React.useState<ProviderMode>("list");
  const [instructionMode, setInstructionMode] = React.useState<InstructionMode>("list");
@@ -658,8 +758,16 @@ function App() {
  const [editingPromptId, setEditingPromptId] = React.useState<string | null>(null);
  const [savedProviders, setSavedProviders] = React.useState<SavedProvider[]>([]);
  const [savedPrompts, setSavedPrompts] = React.useState<SavedPrompt[]>([]);
+  const [builtinPromptStatus, setBuiltinPromptStatus] = React.useState<BuiltinPromptStatus[]>([]);
  const [aboutInfo, setAboutInfo] = React.useState<AboutInfo | null>(null);
  const [releaseInfo, setReleaseInfo] = React.useState<ReleaseInfo>({ status: "idle" });
+  const [updatePromptOpen, setUpdatePromptOpen] = React.useState(false);
+  const [sessionStatus, setSessionStatus] = React.useState<SessionSyncStatus | null>(null);
+  const [startupDiagnostics, setStartupDiagnostics] = React.useState<StartupDiagnostics | null>(null);
+  const [startupWizardOpen, setStartupWizardOpen] = React.useState(() => localStorage.getItem(STARTUP_WIZARD_SEEN_KEY) !== "1");
+  const [sessionQuery, setSessionQuery] = React.useState("");
+  const [sessionGroupByCwd, setSessionGroupByCwd] = React.useState(true);
+  const [selectedSessionIds, setSelectedSessionIds] = React.useState<string[]>([]);
  const [state, setState] = React.useState<CodexState | null>(null);
  const [backups, setBackups] = React.useState<BackupEntry[]>([]);
  const [configDir, setConfigDir] = React.useState("");
@@ -669,11 +777,24 @@ function App() {
  const [providerForm, setProviderForm] = React.useState<SavedProvider>(defaultProviderForm);
  const [providerTomlDraft, setProviderTomlDraft] = React.useState("");
  const [providerTomlDirty, setProviderTomlDirty] = React.useState(false);
+  const [providerApiKeyVisible, setProviderApiKeyVisible] = React.useState(false);
+  const [actionBusy, setActionBusy] = React.useState<string>("");
  const [promptForm, setPromptForm] = React.useState<SavedPrompt>(blankPromptForm);
  const [officialForm, setOfficialForm] = React.useState({ model: "gpt-5.5", authJson: "" });
+  const autoUpdateCheckedRef = React.useRef(false);
+  const promptImportRef = React.useRef<HTMLInputElement | null>(null);
+  const promptUpdateCheckedRef = React.useRef(false);
  const providerTomlPreview = React.useMemo(() => buildProviderTomlPreview(providerForm, state), [providerForm, state]);
  const providerAuthPreview = React.useMemo(() => buildProviderAuthPreview(providerForm), [providerForm]);
  const currentInstructionId = instructionIdFromPath(state?.instructionFile);
+  const builtinPromptStatusMap = React.useMemo(() => new Map(builtinPromptStatus.map((item) => [item.id, item])), [builtinPromptStatus]);
+  const releaseStatusLabel = React.useMemo(() => {
+    if (releaseInfo.status === "checking") return lang === "zh" ? "检查中" : "Checking";
+    if (releaseInfo.status === "error") return lang === "zh" ? "失败" : "Failed";
+    if (releaseInfo.hasUpdate) return lang === "zh" ? "有更新" : "Update found";
+    if (releaseInfo.status === "ok") return lang === "zh" ? "已是最新" : "Up to date";
+    return lang === "zh" ? "未检查" : "Idle";
+  }, [lang, releaseInfo.hasUpdate, releaseInfo.status]);

  React.useEffect(() => {
    localStorage.setItem(LANG_KEY, lang);
@@ -738,6 +859,40 @@ function App() {
    return rows;
  }, [detectedRows, localRows, state?.model, state?.modelProvider]);

+  const filteredSessions = React.useMemo(() => {
+    const query = sessionQuery.trim().toLowerCase();
+    const list = sessionStatus?.sessions || [];
+    if (!query) return list;
+    return list.filter((item) => [item.title, item.cwd, item.rolloutPath, item.modelProvider, item.model, item.id]
+      .filter(Boolean)
+      .some((value) => String(value).toLowerCase().includes(query)));
+  }, [sessionQuery, sessionStatus?.sessions]);
+
+  const groupedSessions = React.useMemo(() => {
+    const groups = new Map<string, SessionPreview[]>();
+    if (!sessionGroupByCwd) {
+      groups.set(lang === "zh" ? "全部会话" : "All sessions", filteredSessions);
+      return Array.from(groups.entries());
+    }
+    for (const item of filteredSessions) {
+      const key = item.cwd || (lang === "zh" ? "未记录工作目录" : "No workspace recorded");
+      if (!groups.has(key)) groups.set(key, []);
+      groups.get(key)!.push(item);
+    }
+    return Array.from(groups.entries()).sort((a, b) => b[1].length - a[1].length);
+  }, [filteredSessions, lang, sessionGroupByCwd]);
+
+  const unsyncedChatCount = Math.max(sessionStatus?.mismatchedThreads ?? 0, sessionStatus?.mismatchedSessionMeta ?? 0);
+  const selectedSessionSet = React.useMemo(() => new Set(selectedSessionIds), [selectedSessionIds]);
+  const selectedNeedsSyncCount = React.useMemo(() => {
+    const set = new Set(selectedSessionIds);
+    return (sessionStatus?.sessions || []).filter((item) => set.has(item.id) && item.needsSync).length;
+  }, [selectedSessionIds, sessionStatus?.sessions]);
+
+  React.useEffect(() => {
+    setSelectedSessionIds((ids) => ids.filter((id) => (sessionStatus?.sessions || []).some((item) => item.id === id)));
+  }, [sessionStatus?.sessions]);
+
  const call = React.useCallback(async <T,>(fn: () => Promise<T>, success?: (data: T) => void) => {
    setLoading(true);
    setError("");
@@ -754,20 +909,29 @@ function App() {
  const refresh = React.useCallback(() => {
    call(
      async () => {
-        const next = await invoke<CodexState>("get_codex_state", { configDir: configDir || null });
-        const backupList = await invoke<BackupEntry[]>("list_backups");
-        const providerList = await invoke<SavedProvider[]>("list_saved_providers");
-        const promptList = await invoke<SavedPrompt[]>("list_saved_prompts");
-        const about = await invoke<AboutInfo>("get_about_info", { configDir: configDir || null });
-        return { next, backupList, providerList, promptList, about };
+        const [diagnostics, next, backupList, providerList, promptList, builtinStatus, about] = await Promise.all([
+          invoke<StartupDiagnostics>("get_startup_diagnostics", { configDir: configDir || null }),
+          invoke<CodexState>("get_codex_state", { configDir: configDir || null }),
+          invoke<BackupEntry[]>("list_backups"),
+          invoke<SavedProvider[]>("list_saved_providers"),
+          invoke<SavedPrompt[]>("list_saved_prompts"),
+          invoke<BuiltinPromptStatus[]>("get_builtin_prompt_status"),
+          invoke<AboutInfo>("get_about_info", { configDir: configDir || null }),
+        ]);
+        return { diagnostics, next, backupList, providerList, promptList, builtinStatus, about };
      },
-      ({ next, backupList, providerList, promptList, about }) => {
+      ({ diagnostics, next, backupList, providerList, promptList, builtinStatus, about }) => {
+        setStartupDiagnostics(diagnostics);
        setState(next);
        setBackups(backupList);
        setSavedProviders(providerList);
        setSavedPrompts(promptList);
+        setBuiltinPromptStatus(builtinStatus);
        setAboutInfo(about);
        if (!configDir) setConfigDir(next.codexDir);
+        void invoke<SessionSyncStatus>("get_session_sync_status", { configDir: configDir || next.codexDir || null, targetProvider: null })
+          .then(setSessionStatus)
+          .catch(() => undefined);
      },
    );
  }, [call, configDir]);
@@ -864,6 +1028,58 @@ function App() {
      },
    );

+  const importPromptMd = async (file?: File | null) => {
+    if (!file) return;
+    if (!file.name.toLowerCase().endsWith(".md")) {
+      setError(lang === "zh" ? "请选择 .md 提示词文件" : "Please choose a .md prompt file");
+      return;
+    }
+    setActionBusy("importPrompt");
+    setLoading(true);
+    setError("");
+    try {
+      const content = await file.text();
+      const title = file.name.replace(/\.md$/i, "");
+      await invoke<SavedPrompt>("save_prompt", {
+        prompt: {
+          id: providerId(title),
+          title,
+          filename: file.name,
+          content,
+        },
+      });
+      const promptList = await invoke<SavedPrompt[]>("list_saved_prompts");
+      setSavedPrompts(promptList);
+      setToast(lang === "zh" ? `已导入提示词：${file.name}` : `Prompt imported: ${file.name}`);
+    } catch (e) {
+      setError(String(e));
+    } finally {
+      setLoading(false);
+      setActionBusy("");
+      if (promptImportRef.current) promptImportRef.current.value = "";
+    }
+  };
+
+  const refreshBuiltinPrompts = async ({ quiet = false }: { quiet?: boolean } = {}) => {
+    setActionBusy("refreshPrompts");
+    if (!quiet) setLoading(true);
+    try {
+      const list = await invoke<BuiltinPromptStatus[]>("refresh_builtin_prompts");
+      setBuiltinPromptStatus(list);
+      const updated = list.filter((item) => item.updated).length;
+      if (!quiet) {
+        setToast(updated > 0
+          ? (lang === "zh" ? `已更新 ${updated} 个内置提示词模板` : `${updated} built-in prompt template(s) updated`)
+          : (lang === "zh" ? "内置提示词已是 GitHub 最新" : "Built-in prompts are up to date"));
+      }
+    } catch (e) {
+      if (!quiet) setError(String(e));
+    } finally {
+      if (!quiet) setLoading(false);
+      setActionBusy("");
+    }
+  };
+
  const normalizedProviderForm = (): SavedProvider => ({
    ...providerForm,
    id: editingProviderId || providerForm.id || providerId(providerForm.providerName || providerForm.baseUrl),
@@ -959,9 +1175,19 @@ function App() {
  const restoreBackup = (backupId: string) =>
    call(() => invoke<ActionResult>("restore_backup", { configDir: configDir || null, backupId }), handleActionResult);

-  const checkForUpdates = async () => {
+  const openExternalUrl = React.useCallback((url?: string | null) => {
+    if (!url) return;
+    window.setTimeout(() => {
+      void invoke("open_url", { url }).catch(() => {
+        setToast(lang === "zh" ? "打开浏览器失败" : "Failed to open browser");
+      });
+    }, 0);
+  }, [lang]);
+
+  const checkForUpdates = React.useCallback(async ({ quiet = false }: { quiet?: boolean } = {}) => {
    const repo = aboutInfo?.githubRepo || FALLBACK_GITHUB_REPO;
    const appVersion = aboutInfo?.appVersion || "0.0.0";
+    const releasesUrl = `https://github.com/${repo}/releases/`;
    setReleaseInfo({ status: "checking" });
    try {
      const response = await fetch(`https://api.github.com/repos/${repo}/releases/latest`, {
@@ -979,24 +1205,50 @@ function App() {
      };
      const latestVersion = release.tag_name || release.name || "";
      const asset = releaseAssetForPlatform(release.assets || []);
+      const hasUpdate = compareVersions(latestVersion, appVersion) > 0;
+      const message = hasUpdate
+        ? (lang === "zh" ? "发现新版本" : "Update available")
+        : (lang === "zh" ? "当前已是最新版本" : "You are up to date");
      setReleaseInfo({
        status: "ok",
        latestVersion,
-        htmlUrl: asset?.browser_download_url || release.html_url,
+        htmlUrl: releasesUrl,
        assetName: asset?.name,
        body: release.body || "",
-        hasUpdate: compareVersions(latestVersion, appVersion) > 0,
-        message: compareVersions(latestVersion, appVersion) > 0
-          ? (lang === "zh" ? "发现新版本" : "Update available")
-          : (lang === "zh" ? "当前已是最新版本" : "You are up to date"),
+        hasUpdate,
+        message,
      });
+      if (hasUpdate) {
+        if (quiet) {
+          setToast(lang === "zh" ? `发现新版本 ${latestVersion}，可在概览页查看` : `New version ${latestVersion} is available`);
+        } else {
+          setUpdatePromptOpen(true);
+        }
+      } else if (!quiet) {
+        setToast(message);
+      }
    } catch (e) {
+      const message = quiet ? (lang === "zh" ? "自动检查失败" : "Auto check failed") : (lang === "zh" ? "检查失败" : "Check failed");
      setReleaseInfo({
        status: "error",
-        message: lang === "zh" ? `检查失败：${String(e)}` : `Check failed: ${String(e)}`,
+        message,
      });
+      if (!quiet) setToast(message);
    }
-  };
+  }, [aboutInfo?.githubRepo, aboutInfo?.appVersion, lang]);
+
+  React.useEffect(() => {
+    if (!state || !aboutInfo || autoUpdateCheckedRef.current) return;
+    autoUpdateCheckedRef.current = true;
+    void checkForUpdates({ quiet: true });
+  }, [state, aboutInfo, checkForUpdates]);
+
+  React.useEffect(() => {
+    if (tab !== "instruction" || promptUpdateCheckedRef.current) return;
+    promptUpdateCheckedRef.current = true;
+    void refreshBuiltinPrompts({ quiet: true });
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [tab]);

  const loadCcSwitchOfficialAuth = async (showToast = true) => {
    const candidate = await invoke<OfficialAuthCandidate | null>("read_ccswitch_official_auth", { dbPath: null });
@@ -1084,9 +1336,74 @@ function App() {
    );
  };

+  const checkSessions = async () => {
+    setActionBusy("checkSessions");
+    await call(
+      () => invoke<SessionSyncStatus>("get_session_sync_status", { configDir: configDir || null, targetProvider: null }),
+      (status) => {
+        setSessionStatus(status);
+        setToast(status.needsSync
+          ? (lang === "zh" ? `发现 ${Math.max(status.mismatchedThreads, status.mismatchedSessionMeta)} 个聊天需要修复` : `${Math.max(status.mismatchedThreads, status.mismatchedSessionMeta)} chat(s) need repair`)
+          : (lang === "zh" ? "会话已同步" : "Sessions are in sync"));
+      },
+    );
+    setActionBusy("");
+  };
+
+  const syncSessions = async () => {
+    setActionBusy("syncSessions");
+    await call(
+      () => invoke<SessionSyncResult>("sync_sessions_provider", { configDir: configDir || null, targetProvider: null }),
+      (result) => {
+        setSessionStatus(result.status);
+        setSelectedSessionIds([]);
+        setToast(lang === "zh"
+          ? `已修复 ${result.updatedThreads} 条聊天记录`
+          : `Updated ${result.updatedThreads} chat row(s)`);
+      },
+    );
+    setActionBusy("");
+  };
+
+  const toggleSessionSelected = (id: string) => {
+    setSelectedSessionIds((ids) => ids.includes(id) ? ids.filter((item) => item !== id) : [...ids, id]);
+  };
+
+  const selectVisibleNeedsSyncSessions = () => {
+    const ids = filteredSessions.filter((item) => item.needsSync).map((item) => item.id);
+    setSelectedSessionIds(ids);
+  };
+
+  const syncSelectedSessions = async () => {
+    setActionBusy("syncSelectedSessions");
+    await call(
+      () => invoke<SessionSyncResult>("sync_selected_sessions_provider", {
+        input: {
+          configDir: configDir || null,
+          targetProvider: null,
+          sessionIds: selectedSessionIds,
+        },
+      }),
+      (result) => {
+        setSessionStatus(result.status);
+        setSelectedSessionIds([]);
+        setToast(lang === "zh"
+          ? `已修复选中的 ${result.updatedThreads} 条聊天记录`
+          : `Selected sessions repaired: ${result.updatedThreads} chat row(s)`);
+      },
+    );
+    setActionBusy("");
+  };
+
+  const closeStartupWizard = () => {
+    localStorage.setItem(STARTUP_WIZARD_SEEN_KEY, "1");
+    setStartupWizardOpen(false);
+  };
+
  const navItems: Array<[Tab, string, React.ReactNode]> = [
    ["dashboard", t.nav.dashboard, <Layers3 size={18} />],
    ["provider", t.nav.provider, <Zap size={18} />],
+    ["sessions", t.nav.sessions, <History size={18} />],
    ["instruction", t.nav.instruction, <Sparkles size={18} />],
    ["toml", t.nav.toml, <FileCode2 size={18} />],
    ["settings", t.nav.settings, <Settings size={18} />],
@@ -1094,7 +1411,8 @@ function App() {
  ];

  return (
-    <main className="app-shell">
+    <main className={cx("app-shell", isMacRuntime && "mac-shell")}>
+      {isMacRuntime && <div className="window-drag-strip" data-tauri-drag-region />}
      <div className="orb orb-a" />
      <div className="orb orb-b" />

@@ -1144,6 +1462,85 @@ function App() {
          </div>
        )}
        {error && <div className="toast error">{error}</div>}
+        {updatePromptOpen && releaseInfo.hasUpdate && (
+          <div className="update-mask" onClick={() => setUpdatePromptOpen(false)}>
+            <div className="update-dialog glass" onClick={(e) => e.stopPropagation()}>
+              <div className="update-head">
+                <div className="update-icon"><Sparkles size={22} /></div>
+                <div>
+                  <p className="eyebrow">Codex-X</p>
+                  <h3>{lang === "zh" ? "发现新版本" : "New version available"}</h3>
+                </div>
+              </div>
+              <div className="update-body">
+                <p>{lang === "zh" ? "检测到新版本，是否立即打开下载页？" : "A new version was found. Open the download page now?"}</p>
+                <div className="about-kv compact">
+                  <div><span>{lang === "zh" ? "当前版本" : "Current"}</span><strong>{aboutInfo?.appVersion || "-"}</strong></div>
+                  <div><span>{lang === "zh" ? "最新版本" : "Latest"}</span><strong>{releaseInfo.latestVersion || "-"}</strong></div>
+                </div>
+              </div>
+              <div className="update-actions">
+                <button className="primary-btn" onClick={() => {
+                  setUpdatePromptOpen(false);
+                  openExternalUrl(releaseInfo.htmlUrl);
+                }}>
+                  <Download size={16} /> {lang === "zh" ? "现在下载" : "Download now"}
+                </button>
+                <button className="secondary-btn" onClick={() => setUpdatePromptOpen(false)}>
+                  {lang === "zh" ? "稍后" : "Later"}
+                </button>
+              </div>
+            </div>
+          </div>
+        )}
+
+        {startupWizardOpen && startupDiagnostics && (
+          <div className="startup-mask">
+            <div className="startup-card glass">
+              <div className="startup-head">
+                <div>
+                  <p className="eyebrow">First Run Check</p>
+                  <h3>{lang === "zh" ? "首次启动向导" : "First-run wizard"}</h3>
+                  <p>{lang === "zh" ? startupDiagnostics.summary : startupDiagnostics.summary}</p>
+                </div>
+                <button className="ghost-btn" onClick={closeStartupWizard}>{lang === "zh" ? "跳过" : "Skip"}</button>
+              </div>
+
+              <div className="startup-path-row">
+                <Field label="CODEX_HOME">
+                  <input value={configDir || startupDiagnostics.codexDir} onChange={(e) => setConfigDir(e.target.value)} placeholder="~/.codex" />
+                </Field>
+                <button className="secondary-btn" onClick={refresh} disabled={loading}>
+                  <RefreshCw size={16} className={cx(loading && "spin")} /> {lang === "zh" ? "重新检测" : "Recheck"}
+                </button>
+              </div>
+
+              <div className="startup-check-grid">
+                {startupDiagnostics.items.map((item) => (
+                  <div className={cx("startup-check-item", item.status === "ok" && "ok", item.status === "manual" && "manual")} key={item.key}>
+                    <div className="startup-check-icon">
+                      {item.status === "ok" ? <CheckCircle2 size={18} /> : <AlertCircle size={18} />}
+                    </div>
+                    <div>
+                      <strong>{item.label}</strong>
+                      <p>{lang === "zh" ? item.message : item.status === "ok" ? "Detected" : item.status === "manual" ? "Manual selection required" : "Not found"}</p>
+                      {item.path && <code>{item.path}</code>}
+                    </div>
+                  </div>
+                ))}
+              </div>
+
+              <div className="startup-actions">
+                <button className="secondary-btn" onClick={() => { setTab("settings"); closeStartupWizard(); }}>
+                  <Settings size={16} /> {lang === "zh" ? "去设置" : "Settings"}
+                </button>
+                <button className="primary-btn" onClick={closeStartupWizard}>
+                  <CheckCircle2 size={16} /> {lang === "zh" ? "进入 Codex-X" : "Enter Codex-X"}
+                </button>
+              </div>
+            </div>
+          </div>
+        )}

        {!state ? (
          <div className="panel glass center-panel">
@@ -1153,6 +1550,19 @@ function App() {
        ) : (
          <>
            {tab === "dashboard" && (
+              <>
+                {releaseInfo.status === "ok" && releaseInfo.hasUpdate && (
+                  <div className="update-strip glass">
+                    <div>
+                      <span className="update-dot" />
+                      <strong>{lang === "zh" ? "发现新版本" : "New version found"}</strong>
+                      <p>{lang === "zh" ? `Codex-X ${releaseInfo.latestVersion || ""} 已发布` : `Codex-X ${releaseInfo.latestVersion || ""} is available`}</p>
+                    </div>
+                    <button className="secondary-btn small" onClick={() => openExternalUrl(releaseInfo.htmlUrl)}>
+                      {lang === "zh" ? "查看更新" : "View"}
+                    </button>
+                  </div>
+                )}
              <div className="grid dashboard-grid">
                <StatCard icon={<TerminalSquare size={20} />} label={t.dashboard.config} value={state.configExists ? t.dashboard.found : t.dashboard.missing} ok={state.configExists} />
                <StatCard icon={<Code2 size={20} />} label={t.dashboard.provider} value={currentProvider?.name || state.modelProvider || t.dashboard.officialDefault} ok={Boolean(state.modelProvider)} />
@@ -1185,6 +1595,7 @@ function App() {
                  </div>
                </section>
              </div>
+              </>
            )}

            {tab === "provider" && (
@@ -1298,7 +1709,24 @@ function App() {
                          </div>
                        </div>
                        <div className="form-grid provider-form-grid provider-form-cc">
-                          <Field label={t.provider.apiKey}><input type="password" value={providerForm.apiKey || ""} onChange={(e) => setProviderForm({ ...providerForm, apiKey: e.target.value })} placeholder={t.provider.apiKeyPlaceholder} /></Field>
+                          <Field label={t.provider.apiKey}>
+                            <div className="secret-input-wrap">
+                              <input
+                                type={providerApiKeyVisible ? "text" : "password"}
+                                value={providerForm.apiKey || ""}
+                                onChange={(e) => setProviderForm({ ...providerForm, apiKey: e.target.value })}
+                                placeholder={t.provider.apiKeyPlaceholder}
+                              />
+                              <button
+                                type="button"
+                                className="secret-toggle"
+                                onClick={() => setProviderApiKeyVisible((value) => !value)}
+                                aria-label={providerApiKeyVisible ? (lang === "zh" ? "隐藏 API Key" : "Hide API Key") : (lang === "zh" ? "显示 API Key" : "Show API Key")}
+                              >
+                                {providerApiKeyVisible ? <EyeOff size={16} /> : <Eye size={16} />}
+                              </button>
+                            </div>
+                          </Field>
                          <Field label={lang === "zh" ? "API 请求地址" : t.provider.baseUrl}><input value={providerForm.baseUrl} onChange={(e) => setProviderForm({ ...providerForm, baseUrl: e.target.value })} /></Field>
                          <Field label={t.provider.name}><input value={providerForm.providerName} onChange={(e) => setProviderForm({ ...providerForm, providerName: e.target.value, id: editingProviderId || providerId(e.target.value) })} /></Field>
                          <Field label={t.provider.model}><input value={providerForm.model} onChange={(e) => setProviderForm({ ...providerForm, model: e.target.value })} /></Field>
@@ -1339,7 +1767,7 @@ function App() {
                      </section>

                      <div className="form-actions provider-save-actions">
-                        <button className="primary-btn big" onClick={saveAndSwitch} disabled={loading}><Zap size={18} /> {t.provider.saveAndSwitch}</button>
+                        <button className="primary-btn big lively-btn" onClick={saveAndSwitch} disabled={loading}>{loading ? <Loader2 size={18} className="spin" /> : <Zap size={18} />} {loading ? (lang === "zh" ? "保存中..." : "Saving...") : t.provider.saveAndSwitch}</button>
                      </div>
                    </div>
                  </div>
@@ -1347,6 +1775,141 @@ function App() {
              </section>
            )}

+            {tab === "sessions" && (
+              <section className="panel glass sessions-panel">
+                <div className="panel-head provider-title-row">
+                  <div>
+                    <p className="eyebrow">Provider Sync</p>
+                    <h3>{lang === "zh" ? "会话管理" : "Session management"}</h3>
+                    <p className="muted-desc">
+                      {lang === "zh"
+                        ? "检查并修复 Codex 本地历史会话的 Provider 元数据，让切换供应商后旧 thread 仍能被原生 Codex 识别、打开和续聊。"
+                        : "Check and repair local Codex session provider metadata so old threads stay visible and resumable after provider switching."}
+                    </p>
+                  </div>
+                  <div className="provider-title-actions">
+                    <button className="secondary-btn add-provider-btn lively-btn" onClick={checkSessions} disabled={loading}>
+                      {actionBusy === "checkSessions" ? <Loader2 size={18} className="spin" /> : <RefreshCw size={18} />} {actionBusy === "checkSessions" ? (lang === "zh" ? "检查中..." : "Checking...") : (lang === "zh" ? "检查会话" : "Check")}
+                    </button>
+                    <button className="primary-btn add-provider-btn lively-btn" onClick={syncSessions} disabled={loading || !sessionStatus?.needsSync}>
+                      {actionBusy === "syncSessions" ? <Loader2 size={18} className="spin" /> : <Zap size={18} />} {actionBusy === "syncSessions" ? (lang === "zh" ? "修复中..." : "Repairing...") : (lang === "zh" ? "同步 / 修复" : "Sync / repair")}
+                    </button>
+                  </div>
+                </div>
+
+                <div className={cx("session-status-card", sessionStatus?.needsSync ? "needs-sync" : "synced")}>
+                  <div className="session-status-icon">
+                    {sessionStatus?.needsSync ? <AlertCircle size={24} /> : <CheckCircle2 size={24} />}
+                  </div>
+                  <div>
+                    <strong>{sessionStatus?.needsSync ? (lang === "zh" ? "发现未同步会话" : "Unsynced sessions found") : (lang === "zh" ? "会话已同步" : "Sessions are in sync")}</strong>
+                    <p>{lang === "zh"
+                      ? `目标 Provider：${sessionStatus?.targetProvider || state.modelProvider || "openai"}`
+                      : `Target provider: ${sessionStatus?.targetProvider || state.modelProvider || "openai"}`}</p>
+                  </div>
+                  {sessionStatus?.needsSync && <StatusPill active label={lang === "zh" ? "需要修复" : "Needs repair"} />}
+                </div>
+
+                <div className="session-stat-grid user-session-stats">
+                  <StatCard icon={<History size={20} />} label={lang === "zh" ? "聊天总数" : "Total chats"} value={sessionStatus?.sqliteThreads ?? "-"} ok />
+                  <StatCard icon={<Layers3 size={20} />} label={lang === "zh" ? "当前已展示" : "Shown now"} value={filteredSessions.length} ok />
+                  <StatCard icon={<AlertCircle size={20} />} label={lang === "zh" ? "需要修复" : "Need repair"} value={sessionStatus ? unsyncedChatCount : "-"} ok={!unsyncedChatCount} />
+                  <StatCard icon={<CheckCircle2 size={20} />} label={lang === "zh" ? "状态" : "Status"} value={sessionStatus?.needsSync ? (lang === "zh" ? "可修复" : "Repairable") : (lang === "zh" ? "正常" : "OK")} ok={!sessionStatus?.needsSync} />
+                </div>
+
+
+                <div className="session-list-card">
+                  <div className="session-list-head session-list-head-rich">
+                    <div>
+                      <p className="eyebrow">{lang === "zh" ? "本地会话" : "Local threads"}</p>
+                      <h4>{lang === "zh" ? "会话列表" : "Sessions"}</h4>
+                    </div>
+                    <span>{lang === "zh" ? `展示 ${filteredSessions.length} / ${sessionStatus?.sqliteThreads ?? 0} 条` : `${filteredSessions.length} / ${sessionStatus?.sqliteThreads ?? 0} shown`}</span>
+                  </div>
+
+                  <div className="session-toolbar">
+                    <label className="session-search">
+                      <Search size={16} />
+                      <input
+                        value={sessionQuery}
+                        onChange={(e) => setSessionQuery(e.target.value)}
+                        placeholder={lang === "zh" ? "搜索标题 / cwd / Provider / ID" : "Search title / cwd / Provider / ID"}
+                      />
+                    </label>
+                    <label className="session-toggle">
+                      <input type="checkbox" checked={sessionGroupByCwd} onChange={(e) => setSessionGroupByCwd(e.target.checked)} />
+                      <span>{lang === "zh" ? "按项目路径分组" : "Group by cwd"}</span>
+                    </label>
+                    <button className="ghost-btn small" onClick={selectVisibleNeedsSyncSessions} disabled={!filteredSessions.some((item) => item.needsSync)}>
+                      {lang === "zh" ? "选择需同步" : "Select unsynced"}
+                    </button>
+                    <button className="secondary-btn small" onClick={() => setSelectedSessionIds([])} disabled={!selectedSessionIds.length}>
+                      {lang === "zh" ? "清空选择" : "Clear"}
+                    </button>
+                    <button className="primary-btn small lively-btn" onClick={syncSelectedSessions} disabled={loading || selectedNeedsSyncCount === 0}>
+                      {actionBusy === "syncSelectedSessions" ? <Loader2 size={15} className="spin" /> : <Zap size={15} />} {actionBusy === "syncSelectedSessions" ? (lang === "zh" ? "修复中..." : "Repairing...") : (lang === "zh" ? `修复选中 ${selectedNeedsSyncCount}` : `Repair ${selectedNeedsSyncCount}`)}
+                    </button>
+                  </div>
+
+                  {filteredSessions.length ? (
+                    <div className="session-list enhanced-session-list">
+                      {groupedSessions.map(([group, items]) => (
+                        <div className="session-group" key={group}>
+                          <div className="session-group-title">
+                            <span title={group}>{compactPath(group, 88)}</span>
+                            <em>{items.length}</em>
+                          </div>
+                          {items.map((item) => {
+                            const providerOk = !item.needsSync;
+                            return (
+                              <article className={cx("session-row", item.needsSync && "needs-sync", selectedSessionSet.has(item.id) && "selected")} key={item.id}>
+                                <label className="session-select-box" title={item.needsSync ? (lang === "zh" ? "选择修复这个会话" : "Select this session for repair") : (lang === "zh" ? "Provider 已一致" : "Provider already matches")}>
+                                  <input
+                                    type="checkbox"
+                                    checked={selectedSessionSet.has(item.id)}
+                                    onChange={() => toggleSessionSelected(item.id)}
+                                    disabled={!item.needsSync}
+                                  />
+                                </label>
+                                <div className="session-row-main">
+                                  <div className="session-thread-icon"><History size={18} /></div>
+                                  <div className="session-row-text">
+                                    <div className="session-row-title">
+                                      <strong>{item.title}</strong>
+                                      {item.archived && <span className="mini-tag">{lang === "zh" ? "已归档" : "Archived"}</span>}
+                                      <span className={cx("mini-tag", providerOk ? "ok" : "warn")}>{providerOk ? (lang === "zh" ? "Provider 一致" : "Provider OK") : (lang === "zh" ? "需同步" : "Needs sync")}</span>
+                                    </div>
+                                    <p title={item.cwd || item.rolloutPath || undefined}>{compactPath(item.cwd || item.rolloutPath)}</p>
+                                  </div>
+                                </div>
+                                <div className="session-row-meta">
+                                  <span title={item.updatedAtMs ? new Date(item.updatedAtMs).toLocaleString() : undefined}>{formatSessionTime(item.updatedAtMs)}</span>
+                                  <code title={item.modelProvider || undefined}>{item.modelProvider || "unknown"}</code>
+                                  <em title={item.model || undefined}>{item.model || "model -"}</em>
+                                  <small>#{shortId(item.id)}</small>
+                                </div>
+                              </article>
+                            );
+                          })}
+                        </div>
+                      ))}
+                    </div>
+                  ) : (
+                    <div className="session-empty">
+                      <History size={22} />
+                      <span>{sessionQuery ? (lang === "zh" ? "没有匹配的会话。" : "No matching sessions.") : (lang === "zh" ? "还没有读取到会话。点击右上角“检查会话”刷新。" : "No sessions loaded. Click Check to refresh.")}</span>
+                    </div>
+                  )}
+                </div>
+
+                {sessionStatus?.warnings?.length ? (
+                  <div className="session-warning-list">
+                    {sessionStatus.warnings.map((item, index) => <p key={index}><AlertCircle size={15} /> {item}</p>)}
+                  </div>
+                ) : null}
+              </section>
+            )}
+
            {tab === "instruction" && (
              <section className="panel glass instruction-panel simple-instruction-panel">
                {instructionMode === "list" ? (
@@ -1357,13 +1920,32 @@ function App() {
                        <h3>{t.instruction.title}</h3>
                      </div>
                      <div className="provider-title-actions">
-                        <button className="primary-btn add-provider-btn" onClick={openAddPrompt}><Plus size={18} /> {lang === "zh" ? "添加提示词" : "Add prompt"}</button>
+                        <input
+                          ref={promptImportRef}
+                          className="hidden-file-input"
+                          type="file"
+                          accept=".md,text/markdown,text/plain"
+                          onChange={(e) => void importPromptMd(e.target.files?.[0])}
+                        />
+                        <button className="ghost-btn add-provider-btn lively-btn" onClick={() => void refreshBuiltinPrompts()} disabled={loading || actionBusy === "refreshPrompts"}>
+                          {actionBusy === "refreshPrompts" ? <Loader2 size={18} className="spin" /> : <RefreshCw size={18} />} {actionBusy === "refreshPrompts" ? (lang === "zh" ? "更新中..." : "Updating...") : (lang === "zh" ? "更新内置模板" : "Update built-ins")}
+                        </button>
+                        <button className="secondary-btn add-provider-btn lively-btn" onClick={() => promptImportRef.current?.click()} disabled={loading}>
+                          {actionBusy === "importPrompt" ? <Loader2 size={18} className="spin" /> : <Upload size={18} />} {actionBusy === "importPrompt" ? (lang === "zh" ? "导入中..." : "Importing...") : (lang === "zh" ? "导入 md" : "Import md")}
+                        </button>
+                        <button className="primary-btn add-provider-btn lively-btn" onClick={openAddPrompt}><Plus size={18} /> {lang === "zh" ? "添加提示词" : "Add prompt"}</button>
                      </div>
                    </div>

                    <div className="instruction-row-list">
                      {instructionTemplates.map((item) => {
                        const isCurrent = currentInstructionId === item.id;
+                        const remoteStatus = builtinPromptStatusMap.get(item.id);
+                        const sourceLabel = remoteStatus?.contentSource === "github"
+                          ? (lang === "zh" ? "GitHub 最新" : "GitHub latest")
+                          : remoteStatus?.contentSource === "cache"
+                            ? (lang === "zh" ? "本地缓存" : "Local cache")
+                            : (lang === "zh" ? "打包内置" : "Bundled");
                        return (
                          <div className={cx("instruction-row", isCurrent && "selected")} key={item.id}>
                            <div className="instruction-icon"><Sparkles size={22} /></div>
@@ -1371,12 +1953,16 @@ function App() {
                              <strong>{item.title}</strong>
                              <p>{item.subtitle}</p>
                              <code>./{item.filename}</code>
+                              <div className="prompt-remote-meta" title={remoteStatus?.message || undefined}>
+                                <span className={cx("mini-tag", remoteStatus?.contentSource === "github" ? "ok" : undefined)}>{sourceLabel}</span>
+                                {remoteStatus?.checkedAt && <small>{new Date(remoteStatus.checkedAt).toLocaleString()}</small>}
+                              </div>
                            </div>
                            <div className="instruction-status-col">
                              {isCurrent ? <StatusPill active label={t.provider.current} /> : <span />}
                            </div>
                            <div className="instruction-action-col">
-                              <button className="secondary-btn small" onClick={() => switchInstructionTemplate(item.id)} disabled={loading || isCurrent}>{t.instruction.enable}</button>
+                              <button className="secondary-btn small lively-btn" onClick={() => switchInstructionTemplate(item.id)} disabled={loading || isCurrent}>{t.instruction.enable}</button>
                              <button className="ghost-btn small" onClick={disableInstruction} disabled={loading || !isCurrent}>{lang === "zh" ? "禁用" : "Disable"}</button>
                            </div>
                          </div>
@@ -1397,7 +1983,7 @@ function App() {
                              {isCurrent ? <StatusPill active label={t.provider.current} /> : <span />}
                            </div>
                            <div className="instruction-action-col">
-                              <button className="secondary-btn small" onClick={() => enableSavedPrompt(prompt.id)} disabled={loading || isCurrent}>{t.instruction.enable}</button>
+                              <button className="secondary-btn small lively-btn" onClick={() => enableSavedPrompt(prompt.id)} disabled={loading || isCurrent}>{t.instruction.enable}</button>
                              <button className="ghost-btn small" onClick={disableInstruction} disabled={loading || !isCurrent}>{lang === "zh" ? "禁用" : "Disable"}</button>
                              <button className="ghost-btn small" onClick={() => openEditPrompt(prompt)}>{t.provider.edit}</button>
                              <button className="danger-btn small" onClick={() => removeSavedPrompt(prompt.id)}><Trash2 size={14} /> {t.provider.remove}</button>
@@ -1411,7 +1997,7 @@ function App() {
                          <div className="instruction-icon custom"><FileCode2 size={22} /></div>
                          <div className="instruction-main">
                            <strong>{lang === "zh" ? "当前自定义指令提示词" : "Current custom prompt"}</strong>
-                            <p>{lang === "zh" ? "当前 model_instructions_file 不是 Codex-X 内置模板。" : "The current model_instructions_file is not a built-in Codex-X template."}</p>
+                            <p>{lang === "zh" ? "当前使用的是外部提示词；切换到内置模板前会自动保存到下方列表，之后仍可重新启用。" : "An external prompt is currently active. It will be saved before switching to a built-in template so you can enable it again later."}</p>
                            <code>{state.instructionFile}</code>
                          </div>
                          <div className="instruction-status-col"><StatusPill active label={t.provider.current} /></div>
@@ -1438,8 +2024,8 @@ function App() {
                      </label>
                    </div>
                    <div className="form-actions">
-                      <button className="secondary-btn big" onClick={savePromptOnly} disabled={loading}>{lang === "zh" ? "保存" : "Save"}</button>
-                      <button className="primary-btn big" onClick={saveAndEnablePrompt} disabled={loading}><Zap size={18} /> {lang === "zh" ? "保存并启用" : "Save & enable"}</button>
+                      <button className="secondary-btn big lively-btn" onClick={savePromptOnly} disabled={loading}>{lang === "zh" ? "保存" : "Save"}</button>
+                      <button className="primary-btn big lively-btn" onClick={saveAndEnablePrompt} disabled={loading}><Zap size={18} /> {lang === "zh" ? "保存并启用" : "Save & enable"}</button>
                    </div>
                  </div>
                )}
@@ -1475,26 +2061,23 @@ function App() {
                    <div><span>{lang === "zh" ? "项目地址" : "Project"}</span><code>{aboutInfo?.projectUrl || `https://github.com/${FALLBACK_GITHUB_REPO}`}</code></div>
                  </div>
                  <div className="about-actions">
-                    <button className="secondary-btn" onClick={() => void invoke("open_url", { url: aboutInfo?.projectUrl || `https://github.com/${FALLBACK_GITHUB_REPO}` })}><ExternalLink size={16} /> {lang === "zh" ? "打开项目主页" : "Open project"}</button>
-                    <button className="ghost-btn" onClick={() => void invoke("open_url", { url: `${aboutInfo?.projectUrl || `https://github.com/${FALLBACK_GITHUB_REPO}`}/issues` })}><ExternalLink size={16} /> {lang === "zh" ? "反馈问题" : "Issues"}</button>
+                    <button className="secondary-btn" onClick={() => openExternalUrl(aboutInfo?.projectUrl || `https://github.com/${FALLBACK_GITHUB_REPO}`)}><ExternalLink size={16} /> {lang === "zh" ? "打开项目主页" : "Open project"}</button>
+                    <button className="ghost-btn" onClick={() => openExternalUrl(`${aboutInfo?.projectUrl || `https://github.com/${FALLBACK_GITHUB_REPO}`}/issues`)}><ExternalLink size={16} /> {lang === "zh" ? "反馈问题" : "Issues"}</button>
                  </div>
                </section>

                <section className="panel glass about-card">
                  <div className="panel-head compact">
                    <div><p className="eyebrow">GitHub Releases</p><h3>{lang === "zh" ? "更新检查" : "Update check"}</h3></div>
-                    <StatusPill active={releaseInfo.status === "ok" && Boolean(releaseInfo.hasUpdate)} label={releaseInfo.status === "checking" ? (lang === "zh" ? "检查中" : "Checking") : releaseInfo.message || (lang === "zh" ? "未检查" : "Idle")} />
+                    <span className={cx("update-status-pill", releaseInfo.hasUpdate && "available")}>{releaseStatusLabel}</span>
                  </div>
                  <div className="about-kv">
-                    <div><span>{lang === "zh" ? "状态" : "Status"}</span><strong>{releaseInfo.status}</strong></div>
+                    <div><span>{lang === "zh" ? "状态" : "Status"}</span><strong>{releaseStatusLabel}</strong></div>
                    <div><span>{lang === "zh" ? "最新版本" : "Latest"}</span><strong>{releaseInfo.latestVersion || "-"}</strong></div>
-                    <div><span>{lang === "zh" ? "资源" : "Asset"}</span><code>{releaseInfo.assetName || "-"}</code></div>
-                    <div><span>{lang === "zh" ? "仓库" : "Repo"}</span><code>{aboutInfo?.githubRepo || FALLBACK_GITHUB_REPO}</code></div>
                  </div>
-                  {releaseInfo.body && <pre className="release-notes">{releaseInfo.body}</pre>}
                  <div className="about-actions">
-                    <button className="primary-btn" onClick={checkForUpdates} disabled={releaseInfo.status === "checking"}><RefreshCw size={16} className={cx(releaseInfo.status === "checking" && "spin")} /> {lang === "zh" ? "检查更新" : "Check updates"}</button>
-                    <button className="secondary-btn" onClick={() => releaseInfo.htmlUrl && void invoke("open_url", { url: releaseInfo.htmlUrl })} disabled={!releaseInfo.htmlUrl}><Download size={16} /> {lang === "zh" ? "打开下载页" : "Open download"}</button>
+                    <button className="primary-btn" onClick={() => void checkForUpdates()} disabled={releaseInfo.status === "checking"}><RefreshCw size={16} className={cx(releaseInfo.status === "checking" && "spin")} /> {lang === "zh" ? "检查更新" : "Check updates"}</button>
+                    <button className="secondary-btn" onClick={() => openExternalUrl(releaseInfo.htmlUrl)} disabled={!releaseInfo.htmlUrl}><Download size={16} /> {lang === "zh" ? "打开下载页" : "Open releases"}</button>
                  </div>
                </section>
              </section>
@@ -1519,6 +2102,16 @@ function App() {
                    <div className="settings-copy"><strong>{t.settings.productName}</strong><p>{t.settings.productDesc}</p></div>
                    <StatusPill active label="Codex-X" />
                  </div>
+                  <div className="settings-row">
+                    <div className="settings-icon"><CheckCircle2 size={20} /></div>
+                    <div className="settings-copy">
+                      <strong>{lang === "zh" ? "首次启动向导" : "First-run wizard"}</strong>
+                      <p>{lang === "zh" ? "重新检测 CODEX_HOME、config.toml、auth.json 和 SQLite 会话库。" : "Recheck CODEX_HOME, config.toml, auth.json and SQLite session stores."}</p>
+                    </div>
+                    <button className="secondary-btn" onClick={() => { localStorage.removeItem(STARTUP_WIZARD_SEEN_KEY); setStartupWizardOpen(true); refresh(); }}>
+                      {lang === "zh" ? "重新检测" : "Recheck"}
+                    </button>
+                  </div>
                </div>
              </section>
            )}
@@ -9,18 +9,22 @@

 * { box-sizing: border-box; }
 html, body, #root { width: 100%; height: 100%; margin: 0; }
-body { overflow: hidden; }
+body { overflow: hidden; background: #070a13; }
 button, input, select, textarea { font: inherit; }
 button { cursor: pointer; }
 button:disabled { cursor: not-allowed; opacity: .58; }

 .app-shell {
+  --shell-pad-x: 18px;
+  --shell-pad-bottom: 18px;
+  --shell-pad-top: 18px;
+  --shell-vertical-pad: calc(var(--shell-pad-top) + var(--shell-pad-bottom));
  position: relative;
  min-height: 100vh;
  display: grid;
  grid-template-columns: 260px 1fr;
  gap: 18px;
-  padding: 18px;
+  padding: var(--shell-pad-top) var(--shell-pad-x) var(--shell-pad-bottom);
  background:
    radial-gradient(circle at 12% 10%, rgba(110, 92, 255, .24), transparent 28%),
    radial-gradient(circle at 85% 22%, rgba(22, 193, 255, .18), transparent 34%),
@@ -43,7 +47,7 @@ button:disabled { cursor: not-allowed; opacity: .58; }
  padding: 22px;
  display: flex;
  flex-direction: column;
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .brand { display: flex; align-items: center; gap: 14px; margin-bottom: 28px; }
 .brand-mark {
@@ -197,7 +201,47 @@ input, select, textarea {
 }
 .toast.ok { color: #dbfff3; background: rgba(12, 112, 81, .88); border: 1px solid rgba(31,242,178,.3); }
 .toast.error { color: #fff; background: rgba(157, 38, 63, .92); border: 1px solid rgba(255,120,145,.35); animation: none; }
+.app-shell.mac-shell .toast { top: calc(24px + var(--mac-titlebar-safe)); }
@keyframes toast { 0% { opacity: 0; transform: translateY(-8px); } 12%, 84% { opacity: 1; transform: translateY(0); } 100% { opacity: 0; transform: translateY(-8px); } }
+
+.update-mask {
+  position: fixed;
+  inset: 0;
+  z-index: 40;
+  display: grid;
+  place-items: center;
+  background: rgba(3, 7, 16, .62);
+  backdrop-filter: blur(10px);
+}
+
+.update-dialog {
+  width: min(560px, calc(100vw - 40px));
+  border-radius: 26px;
+  padding: 22px;
+  box-shadow: 0 28px 90px rgba(0, 0, 0, .5);
+}
+
+.update-head {
+  display: flex;
+  align-items: center;
+  gap: 14px;
+  margin-bottom: 14px;
+}
+
+.update-icon {
+  width: 46px;
+  height: 46px;
+  border-radius: 16px;
+  display: grid;
+  place-items: center;
+  color: white;
+  background: linear-gradient(135deg, #7c5cff, #12d3ff);
+}
+
+.update-body { display: grid; gap: 14px; color: #dfe7f8; }
+.update-body p { margin: 0; line-height: 1.6; }
+.about-kv.compact { grid-template-columns: 1fr 1fr; }
+.update-actions { display: flex; justify-content: flex-end; gap: 10px; margin-top: 8px; }
 .spin { animation: spin 1s linear infinite; }
@keyframes spin { to { transform: rotate(360deg); } }

@@ -634,13 +678,17 @@ html, body, #root {
  min-height: 720px;
  overflow: hidden;
 }
+.app-shell.mac-shell {
+  --mac-titlebar-safe: 44px;
+  --shell-pad-top: calc(18px + var(--mac-titlebar-safe));
+}
 .sidebar {
  min-height: auto;
-  height: calc(100vh - 36px);
+  height: calc(100vh - var(--shell-vertical-pad));
  overflow: hidden;
 }
 .content {
-  height: calc(100vh - 36px);
+  height: calc(100vh - var(--shell-vertical-pad));
  overflow-y: auto;
  overflow-x: hidden;
  padding-right: 4px;
@@ -676,7 +724,7 @@ html, body, #root {
 .provider-panel,
 .code-panel {
  height: auto;
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
  overflow: visible;
 }
 .provider-row-list {
@@ -688,7 +736,7 @@ html, body, #root {
  overflow: visible;
 }
 .code-panel {
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .toml-preview {
  min-height: 520px;
@@ -1017,7 +1065,7 @@ html, body, #root {
 }

 .instruction-panel {
-  min-height: calc(100vh - 36px);
+  min-height: calc(100vh - var(--shell-vertical-pad));
 }
 .instruction-row-list {
  display: flex;
@@ -1344,3 +1392,613 @@ html, body, #root {
  background: rgba(255,255,255,.035);
  border-radius: 999px;
 }
+
+/* Productized update surfaces. */
+.update-status-pill {
+  display: inline-flex;
+  align-items: center;
+  min-height: 32px;
+  padding: 7px 12px;
+  border-radius: 999px;
+  color: #aab7d1;
+  background: rgba(255,255,255,.07);
+  border: 1px solid rgba(255,255,255,.10);
+  font-size: 12px;
+  font-weight: 900;
+  letter-spacing: .01em;
+}
+.update-status-pill.available {
+  color: #071713;
+  background: linear-gradient(135deg, #2ff5b5, #9cffd8);
+  border-color: rgba(47, 245, 181, .75);
+  box-shadow: 0 10px 26px rgba(47, 245, 181, .18), inset 0 1px 0 rgba(255,255,255,.35);
+}
+.update-strip {
+  grid-column: 1 / -1;
+  min-height: 58px;
+  border-radius: 20px;
+  padding: 12px 14px 12px 16px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 14px;
+  background: linear-gradient(135deg, rgba(31, 242, 178, .16), rgba(18, 211, 255, .08));
+  border-color: rgba(31, 242, 178, .26);
+}
+.update-strip > div {
+  display: flex;
+  align-items: center;
+  min-width: 0;
+  gap: 10px;
+}
+.update-strip strong {
+  color: #eafff7;
+  white-space: nowrap;
+}
+.update-strip p {
+  margin: 0;
+  color: #9edcc8;
+  font-size: 13px;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+.update-dot {
+  width: 9px;
+  height: 9px;
+  border-radius: 999px;
+  background: #2ff5b5;
+  box-shadow: 0 0 0 6px rgba(47, 245, 181, .12), 0 0 20px rgba(47, 245, 181, .72);
+  flex: 0 0 auto;
+}
+
+/* Session management page. */
+.sessions-panel {
+  min-height: calc(100vh - var(--shell-vertical-pad));
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+}
+.panel.glass.sessions-panel {
+  background: transparent;
+  border: 0;
+  box-shadow: none;
+  backdrop-filter: none;
+  padding: 0;
+}
+.session-status-card {
+  display: grid;
+  grid-template-columns: 52px 1fr auto;
+  gap: 14px;
+  align-items: center;
+  padding: 16px 18px;
+  border-radius: 22px;
+  background: rgba(7, 15, 31, .52);
+  border: 1px solid rgba(255,255,255,.10);
+}
+.session-status-card.synced {
+  border-color: rgba(31, 242, 178, .22);
+  background: linear-gradient(135deg, rgba(31, 242, 178, .10), rgba(7, 15, 31, .52));
+}
+.session-status-card.needs-sync {
+  border-color: rgba(47, 245, 181, .38);
+  background: linear-gradient(135deg, rgba(47, 245, 181, .14), rgba(18, 211, 255, .07));
+}
+.session-status-icon {
+  width: 50px;
+  height: 50px;
+  display: grid;
+  place-items: center;
+  border-radius: 17px;
+  color: #2ff5b5;
+  background: rgba(31, 242, 178, .12);
+  border: 1px solid rgba(31, 242, 178, .20);
+}
+.session-status-card strong {
+  display: block;
+  color: #f4f8ff;
+  margin-bottom: 5px;
+  font-size: 17px;
+}
+.session-status-card p {
+  margin: 0;
+  color: #9aa9c4;
+  font-size: 13px;
+}
+.session-stat-grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 14px;
+}
+.session-info-list {
+  display: grid;
+  gap: 10px;
+  padding: 16px;
+  border-radius: 22px;
+  background: rgba(4,10,24,.34);
+  border: 1px solid rgba(255,255,255,.08);
+}
+.session-info-list div {
+  display: grid;
+  grid-template-columns: 130px 1fr;
+  gap: 12px;
+  align-items: center;
+}
+.session-info-list span {
+  color: #91a0bb;
+  font-size: 13px;
+  font-weight: 850;
+}
+.session-list-card {
+  padding: 18px;
+  border-radius: 24px;
+  background: linear-gradient(180deg, rgba(6, 12, 27, .78), rgba(4,10,24,.58));
+  border: 1px solid rgba(124,168,255,.16);
+  box-shadow: inset 0 1px 0 rgba(255,255,255,.055), 0 18px 46px rgba(0,0,0,.20);
+  overflow: hidden;
+}
+.session-list-head {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 14px;
+  margin-bottom: 12px;
+}
+.session-list-head h4 {
+  margin: 2px 0 0;
+  color: #f4f8ff;
+  font-size: 17px;
+  letter-spacing: -.02em;
+}
+.session-list-head span {
+  color: #8fa0bd;
+  font-size: 13px;
+  font-weight: 800;
+  padding: 7px 10px;
+  border-radius: 999px;
+  background: rgba(255,255,255,.06);
+  border: 1px solid rgba(255,255,255,.08);
+}
+.session-list {
+  display: grid;
+  gap: 10px;
+  max-height: 350px;
+  overflow: auto;
+  padding: 0 4px 2px 0;
+}
+.session-list::-webkit-scrollbar {
+  width: 8px;
+}
+.session-list::-webkit-scrollbar-thumb {
+  border-radius: 999px;
+  background: rgba(124,168,255,.30);
+}
+.session-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 16px;
+  align-items: center;
+  padding: 13px 14px;
+  border-radius: 18px;
+  background: linear-gradient(135deg, rgba(255,255,255,.075), rgba(255,255,255,.035));
+  border: 1px solid rgba(255,255,255,.08);
+}
+.session-row.needs-sync {
+  border-color: rgba(255,176,32,.28);
+  background: linear-gradient(135deg, rgba(255,176,32,.10), rgba(255,255,255,.035));
+}
+.session-row-main {
+  min-width: 0;
+  display: grid;
+  grid-template-columns: 42px minmax(0, 1fr);
+  gap: 12px;
+  align-items: center;
+}
+.session-thread-icon {
+  width: 42px;
+  height: 42px;
+  border-radius: 14px;
+  display: grid;
+  place-items: center;
+  color: #2ff5b5;
+  background: rgba(31,242,178,.12);
+  border: 1px solid rgba(31,242,178,.18);
+}
+.session-row-text {
+  min-width: 0;
+}
+.session-row-title {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-width: 0;
+}
+.session-row-title strong {
+  color: #eef5ff;
+  font-size: 14px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+.session-row-text p {
+  margin: 5px 0 0;
+  color: #8fa0bd;
+  font-size: 12px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+.session-row-meta {
+  display: grid;
+  grid-template-columns: 92px 92px 92px 72px;
+  gap: 8px;
+  align-items: center;
+  justify-items: end;
+  color: #8fa0bd;
+  font-size: 12px;
+}
+.session-row-meta code,
+.session-row-meta em,
+.session-row-meta small {
+  max-width: 92px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+  font-style: normal;
+}
+.session-row-meta code {
+  color: #b9c8e6;
+  font-family: "JetBrains Mono", "Fira Code", "SFMono-Regular", "SF Mono", Menlo, Monaco, Consolas, monospace;
+}
+.mini-tag {
+  flex: 0 0 auto;
+  color: #9fb0cc;
+  font-size: 11px;
+  font-weight: 850;
+  padding: 3px 7px;
+  border-radius: 999px;
+  background: rgba(255,255,255,.07);
+  border: 1px solid rgba(255,255,255,.09);
+}
+.mini-tag.warn {
+  color: #ffd9a1;
+  background: rgba(255,176,32,.10);
+  border-color: rgba(255,176,32,.22);
+}
+.session-empty {
+  min-height: 86px;
+  display: grid;
+  place-items: center;
+  gap: 8px;
+  color: #8fa0bd;
+  border-radius: 18px;
+  border: 1px dashed rgba(255,255,255,.12);
+  background: rgba(255,255,255,.025);
+}
+.session-warning-list {
+  display: grid;
+  gap: 8px;
+  padding: 14px 16px;
+  border-radius: 18px;
+  background: rgba(255, 176, 32, .08);
+  border: 1px solid rgba(255, 176, 32, .18);
+}
+.session-warning-list p {
+  display: flex;
+  align-items: flex-start;
+  gap: 8px;
+  margin: 0;
+  color: #ffd9a1;
+  font-size: 13px;
+  line-height: 1.55;
+}
+@media (max-width: 1320px) {
+  .session-stat-grid {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+  .session-status-card {
+    grid-template-columns: 52px 1fr;
+  }
+  .session-status-card .pill {
+    grid-column: 2;
+    justify-self: start;
+  }
+  .session-row {
+    grid-template-columns: 1fr;
+  }
+  .session-row-meta {
+    justify-items: start;
+    grid-template-columns: repeat(4, minmax(0, 1fr));
+    padding-left: 54px;
+  }
+}
+
+/* macOS overlay titlebar: keep top chrome visually integrated with the app theme. */
+.window-drag-strip {
+  position: fixed;
+  z-index: 4;
+  top: 0;
+  left: 0;
+  right: 0;
+  height: 44px;
+  background: linear-gradient(90deg, rgba(16,18,43,.98), rgba(4,19,31,.98));
+  -webkit-app-region: drag;
+}
+
+/* First-run diagnostics wizard */
+.startup-mask {
+  position: fixed;
+  inset: 0;
+  z-index: 55;
+  display: grid;
+  place-items: center;
+  padding: 28px;
+  background: rgba(3, 7, 16, .64);
+  backdrop-filter: blur(14px);
+}
+.startup-card {
+  width: min(880px, calc(100vw - 42px));
+  border-radius: 30px;
+  padding: 24px;
+  display: grid;
+  gap: 18px;
+}
+.startup-head,
+.startup-actions,
+.startup-path-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+  gap: 14px;
+}
+.startup-head h3 { margin: 2px 0 8px; font-size: 28px; letter-spacing: -.04em; }
+.startup-head p { margin: 0; color: #9cabc6; line-height: 1.6; }
+.startup-path-row { align-items: end; }
+.startup-path-row .field { flex: 1; }
+.startup-check-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 12px;
+}
+.startup-check-item {
+  display: grid;
+  grid-template-columns: 42px minmax(0, 1fr);
+  gap: 12px;
+  padding: 14px;
+  border-radius: 18px;
+  background: rgba(4, 10, 24, .46);
+  border: 1px solid rgba(255,255,255,.09);
+}
+.startup-check-item.ok {
+  border-color: rgba(31,242,178,.24);
+  background: linear-gradient(135deg, rgba(31,242,178,.10), rgba(4,10,24,.46));
+}
+.startup-check-item.manual {
+  border-color: rgba(255,176,32,.25);
+  background: linear-gradient(135deg, rgba(255,176,32,.10), rgba(4,10,24,.46));
+}
+.startup-check-icon {
+  width: 40px;
+  height: 40px;
+  display: grid;
+  place-items: center;
+  border-radius: 14px;
+  color: #2ff5b5;
+  background: rgba(31,242,178,.10);
+}
+.startup-check-item:not(.ok) .startup-check-icon { color: #ffcf88; background: rgba(255,176,32,.10); }
+.startup-check-item strong { display: block; color: #f4f8ff; margin-bottom: 3px; }
+.startup-check-item p { margin: 0 0 5px; color: #9aa9c4; font-size: 13px; }
+.startup-check-item code { display: block; color: #bdd1f0; font-size: 12px; }
+.startup-actions { justify-content: flex-end; }
+
+/* Enhanced session manager */
+.session-list-head-rich { align-items: center; }
+.session-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  margin: 0 0 14px;
+  flex-wrap: wrap;
+}
+.session-search {
+  flex: 1 1 320px;
+  min-width: 260px;
+  height: 42px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 0 12px;
+  color: #91a8ca;
+  background: rgba(4,10,24,.52);
+  border: 1px solid rgba(255,255,255,.10);
+  border-radius: 14px;
+}
+.session-search input {
+  width: 100%;
+  height: 100%;
+  padding: 0;
+  border: 0;
+  background: transparent;
+}
+.session-toggle {
+  height: 42px;
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 0 12px;
+  border-radius: 14px;
+  color: #aebbd3;
+  background: rgba(255,255,255,.06);
+  border: 1px solid rgba(255,255,255,.08);
+  font-size: 13px;
+  font-weight: 800;
+}
+.session-toggle input,
+.session-select-box input { accent-color: #12d3ff; }
+.session-toolbar .small { height: 42px; padding: 0 12px; }
+.enhanced-session-list { max-height: 460px; }
+.session-group { display: grid; gap: 9px; }
+.session-group + .session-group { margin-top: 8px; }
+.session-group-title {
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 10px;
+  padding: 8px 10px;
+  border-radius: 12px;
+  color: #9fb0cc;
+  background: rgba(7, 14, 31, .92);
+  border: 1px solid rgba(255,255,255,.07);
+  backdrop-filter: blur(8px);
+  font-size: 12px;
+  font-weight: 850;
+}
+.session-group-title span { overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
+.session-group-title em {
+  flex: 0 0 auto;
+  font-style: normal;
+  color: #c7f0ff;
+}
+.session-row { grid-template-columns: 28px minmax(0, 1fr) auto; }
+.session-row.selected {
+  border-color: rgba(18,211,255,.42);
+  box-shadow: 0 0 0 2px rgba(18,211,255,.08) inset;
+}
+.session-select-box {
+  display: grid;
+  place-items: center;
+}
+.session-select-box input { width: 17px; height: 17px; }
+.mini-tag.ok {
+  color: #b8ffe9;
+  background: rgba(31,242,178,.10);
+  border-color: rgba(31,242,178,.22);
+}
+@media (max-width: 1320px) {
+  .startup-check-grid { grid-template-columns: 1fr; }
+  .startup-head,
+  .startup-actions,
+  .startup-path-row { flex-direction: column; align-items: stretch; }
+  .session-row { grid-template-columns: 28px 1fr; }
+  .session-row-meta { grid-column: 2; padding-left: 0; }
+}
+
+/* Small interaction polish: make buttons feel alive without changing layout. */
+.primary-btn, .secondary-btn, .ghost-btn, .danger-btn {
+  position: relative;
+  overflow: hidden;
+  will-change: transform, filter;
+}
+.primary-btn:not(:disabled):active,
+.secondary-btn:not(:disabled):active,
+.ghost-btn:not(:disabled):active,
+.danger-btn:not(:disabled):active {
+  transform: translateY(1px) scale(.985);
+  filter: brightness(1.12);
+}
+.primary-btn:not(:disabled)::after,
+.secondary-btn:not(:disabled)::after,
+.ghost-btn:not(:disabled)::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  pointer-events: none;
+  opacity: 0;
+  background: radial-gradient(circle at var(--x, 50%) var(--y, 50%), rgba(255,255,255,.22), transparent 32%);
+  transition: opacity .18s ease;
+}
+.primary-btn:not(:disabled):hover::after,
+.secondary-btn:not(:disabled):hover::after,
+.ghost-btn:not(:disabled):hover::after {
+  opacity: .55;
+}
+.lively-btn:not(:disabled) {
+  animation: subtle-ready-pulse 2.8s ease-in-out infinite;
+}
+.lively-btn:disabled {
+  animation: none;
+}
+@keyframes subtle-ready-pulse {
+  0%, 100% { box-shadow: 0 12px 28px rgba(67,112,255,.18); }
+  50% { box-shadow: 0 16px 34px rgba(18,211,255,.24); }
+}
+
+.hidden-file-input {
+  position: fixed;
+  width: 1px;
+  height: 1px;
+  opacity: 0;
+  pointer-events: none;
+}
+.secret-input-wrap {
+  position: relative;
+  display: flex;
+  align-items: center;
+}
+.secret-input-wrap input {
+  width: 100%;
+  height: 44px;
+  padding: 0 46px 0 13px;
+}
+.secret-toggle {
+  position: absolute;
+  right: 7px;
+  width: 32px;
+  height: 32px;
+  display: grid;
+  place-items: center;
+  border: 0;
+  border-radius: 11px;
+  color: #b8c7e4;
+  background: rgba(255,255,255,.07);
+  transition: .16s ease;
+}
+.secret-toggle:hover {
+  color: #fff;
+  background: rgba(18,211,255,.16);
+  transform: scale(1.04);
+}
+.user-session-stats {
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+}
+.session-status-card.needs-sync .session-status-icon,
+.user-session-stats .stat-icon:not(.stat-icon-ok) {
+  animation: attention-glow 1.5s ease-in-out infinite;
+}
+@keyframes attention-glow {
+  0%, 100% { box-shadow: 0 0 0 rgba(255,176,32,0); }
+  50% { box-shadow: 0 0 24px rgba(255,176,32,.22); }
+}
+.provider-card,
+.instruction-row,
+.session-row,
+.stat-card {
+  transition: transform .18s ease, border-color .18s ease, background .18s ease, box-shadow .18s ease;
+}
+.provider-card:hover,
+.instruction-row:hover,
+.session-row:hover {
+  transform: translateY(-1px);
+}
+@media (max-width: 1320px) {
+  .user-session-stats { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+}
+
+.prompt-remote-meta {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin-top: 7px;
+  min-width: 0;
+}
+.prompt-remote-meta small {
+  color: #8293b1;
+  font-size: 11px;
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
@@ -1,7 +1,7 @@
 {
  "name": "codex-x-workspace",
  "private": true,
-  "version": "0.2.4",
+  "version": "0.2.18",
  "scripts": {
    "dev": "pnpm --dir apps/desktop tauri dev",
    "build": "pnpm --dir apps/desktop tauri build",
@@ -0,0 +1,81 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [ $# -ne 1 ]; then
+  echo "Usage: scripts/release.sh <version>" >&2
+  echo "Example: scripts/release.sh 0.2.18" >&2
+  exit 1
+fi
+
+version="${1#v}"
+tag="v${version}"
+
+if ! [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+([-.][0-9A-Za-z.-]+)?$ ]]; then
+  echo "Invalid version: $1" >&2
+  exit 1
+fi
+
+if ! git diff --quiet || ! git diff --cached --quiet; then
+  echo "Working tree has uncommitted changes. Please commit or stash first." >&2
+  exit 1
+fi
+
+if git rev-parse "$tag" >/dev/null 2>&1; then
+  echo "Tag already exists: $tag" >&2
+  exit 1
+fi
+
+VERSION="$version" node --input-type=module <<'NODE'
+import fs from 'node:fs';
+const version = process.env.VERSION;
+for (const file of ['package.json', 'apps/desktop/package.json']) {
+  const data = JSON.parse(fs.readFileSync(file, 'utf8'));
+  data.version = version;
+  fs.writeFileSync(file, JSON.stringify(data, null, 2) + '\n');
+}
+NODE
+
+VERSION="$version" python3 - <<'PY'
+import os
+from pathlib import Path
+version = os.environ['VERSION']
+files = [
+    Path('apps/desktop/src-tauri/Cargo.toml'),
+    Path('apps/desktop/src-tauri/tauri.conf.json'),
+]
+for path in files:
+    text = path.read_text()
+    if path.suffix == '.toml':
+        text = text.replace(next(line for line in text.splitlines() if line.startswith('version = ')), f'version = "{version}"', 1)
+    else:
+        import json
+        data = json.loads(text)
+        data['version'] = version
+        text = json.dumps(data, indent=2, ensure_ascii=False) + '\n'
+    path.write_text(text)
+
+changelog = Path('CHANGELOG.md')
+text = changelog.read_text() if changelog.exists() else '# Changelog\n\n'
+heading = f'## [v{version}] - TODO'
+if f'## [v{version}]' not in text:
+    lines = text.splitlines()
+    insert_at = 1 if lines and lines[0].startswith('#') else 0
+    block = [
+        '',
+        heading,
+        '',
+        '- TODO: add release highlights.',
+    ]
+    lines[insert_at:insert_at] = block
+    changelog.write_text('\n'.join(lines).rstrip() + '\n')
+PY
+
+pnpm --dir apps/desktop typecheck
+cargo check --manifest-path apps/desktop/src-tauri/Cargo.toml
+
+git add package.json apps/desktop/package.json apps/desktop/src-tauri/Cargo.toml apps/desktop/src-tauri/tauri.conf.json CHANGELOG.md
+git commit -m "Release ${tag}"
+git tag "$tag"
+
+echo "Prepared ${tag}. Review CHANGELOG TODO, then push with:"
+echo "  git push origin main ${tag}"
Author	SHA1	Message	Date
yyyyyynnn	6f77eec4ba	Release v0.2.18	2026-07-05 23:58:44 +08:00
yyyyyynnn	d3145fd24d	Add remote prompt template updates	2026-07-05 23:57:59 +08:00
yyyyyynnn	c8f624fe91	Polish prompt import and session UX	2026-07-05 23:47:37 +08:00
yyyyyynnn	c10b97b25e	Add startup diagnostics and session tools	2026-07-05 23:39:43 +08:00
yyyyyynnn	9415749af2	Add English README	2026-07-05 17:17:12 +08:00
yyyyyynnn	a33c78a6e8	Use official Star History embed	2026-07-05 11:28:26 +08:00
yyyyyynnn	d7b852cec9	Use local star history chart	2026-07-05 11:23:24 +08:00
yyyyyynnn	31c630f890	Clarify Star History delay	2026-07-05 11:02:02 +08:00
yyyyyynnn	37d911d94a	Normalize release asset names	2026-07-04 21:48:38 +08:00
yyyyyynnn	69e0a46430	Fix Intel macOS runner	2026-07-04 19:41:30 +08:00
yyyyyynnn	ab19b2ef33	Add Intel macOS and Windows portable builds	2026-07-04 19:32:40 +08:00
yyyyyynnn	ff34902641	Add star history chart	2026-07-04 16:28:20 +08:00
yyyyyynnn	07e4968ade	Add thanks section	2026-07-04 16:26:37 +08:00
yyyyyynnn	ba5e90e24f	Polish session page and external links	2026-07-04 15:44:25 +08:00
yyyyyynnn	8ec879e7a9	Fix macOS titlebar safe area	2026-07-04 15:28:42 +08:00
yyyyyynnn	971236fc67	Clarify Codex desktop support	2026-07-04 15:21:44 +08:00
yyyyyynnn	fb53b90763	Add README feature table	2026-07-04 15:15:34 +08:00
yyyyyynnn	257a4385b7	Polish mac titlebar and sessions panel	2026-07-04 15:06:17 +08:00
yyyyyynnn	c0f3c9240c	Polish README layout and license	2026-07-04 14:56:46 +08:00
yyyyyynnn	67ad656b45	Organize README screenshots	2026-07-04 14:53:34 +08:00
yyyyyynnn	5dbd6e2359	Refresh project README with previews	2026-07-04 14:51:00 +08:00
yyyyyynnn	da3c52a7de	Restore MSI style and list sessions	2026-07-04 14:32:42 +08:00
yyyyyynnn	34ec59f28b	Soften startup update notification	2026-07-04 14:03:52 +08:00
yyyyyynnn	9a82612d5d	Fix release asset upload	2026-07-04 13:47:14 +08:00
yyyyyynnn	10c16cba7b	Fix release workflow publishing	2026-07-04 13:35:51 +08:00
yyyyyynnn	57075256fb	Add session manager and polish updates	2026-07-04 13:28:45 +08:00
yyyyyynnn	529af6d796	Use changelog entries as release notes	2026-07-04 13:02:30 +08:00
yyyyyynnn	1f1100225e	Simplify update page and releases link	2026-07-04 13:00:35 +08:00
yyyyyynnn	b03b9d881c	Add startup update prompt	2026-07-04 12:56:57 +08:00
yyyyyynnn	10d4491f78	Add changelog and fix Windows console	2026-07-04 12:44:05 +08:00