diff --git a/package.json b/package.json
index 54143ca..865a025 100644
--- a/package.json
+++ b/package.json
@@ -7,7 +7,7 @@
   "scripts": {
     "start": "node scripts/start-dev.js",
     "dev": "node scripts/start-dev.js",
-    "patch": "node scripts/patch-i18n.js",
+    "patch": "node scripts/patch-copyright.js && node scripts/patch-i18n.js && node scripts/patch-sunset.js && node scripts/patch-devtools.js",
     "forge:package": "electron-forge package",
     "forge:make": "npm run patch && electron-forge make",
     "build": "npm run build:current",
diff --git a/scripts/STATSIG_GATES.md b/scripts/STATSIG_GATES.md
new file mode 100644
index 0000000..c613f4b
--- /dev/null
+++ b/scripts/STATSIG_GATES.md
@@ -0,0 +1,94 @@
+# Statsig 云控映射表
+
+> 通过 AST 分析 `index-MmO6ZWIv.js` 提取，ID 为 Statsig DJB2 哈希值（`(hash << 5) - hash + charCode`），原始名称仅存于服务端。
+
+## Feature Gates (30)
+
+| ID | 功能 | 组件/函数 | 说明 |
+|---|---|---|---|
+| `505458` | Composer Mode | `Pvn` / `Vvn` | 控制 composer 模式选项（code/ask 等） |
+| `30039772` | `enable_request_compression` | `HUn` | 请求压缩 |
+| `98625937` | 账户设置面板 A | `GNe` | 用户设置/认证下拉菜单 |
+| `351086149` | *(server-only)* | — | 客户端未引用 |
+| `351460523` | Follow-up 排队 | `Iwn` | 自动跟进建议 |
+| `1060282072` | 协作模式 UI | `mae` / `NRn` / `jjn` | 协作模式相关组件 |
+| `1156958996` | `collaboration_modes` | `HUn` | 协作模式功能开关 |
+| `1221508807` | Archive Thread | `ef` | 归档会话线程 |
+| `1230000863` | *(server-only)* | — | 客户端未引用 |
+| `1444479692` | `personality` | `LZe` / `HUn` | 个性化/人格 |
+| `1609556872` | Hotkey 窗口 | `jxn` | 快捷键窗口功能 |
+| `1823130936` | Image Input | `ICn` | 判断模型是否支持图片输入 |
+| `1846562237` | Onboarding 登录 | `TFn` | 登录流程/resume 控制 |
+| `2239678350` | *(server-only)* | — | |
+| `2313552244` | *(server-only)* | — | |
+| `2451719447` | *(server-only)* | — | |
+| `2761175068` | Feature Rollout 守卫 | `PXe` | 通用 gate 包裹组件 |
+| `2777274066` | *(server-only)* | — | |
+| `2878153158` | *(server-only)* | — | |
+| `2882842607` | 会话 Diff/评论 | `Uae` | 对话中的代码 diff 和评论 |
+| `2968710568` | *(server-only)* | — | |
+| `3075919032` | 主界面布局 | `iUt` | 拖拽/面板布局 |
+| `3189729426` | *(server-only)* | — | |
+| `3227700559` | ChatGPT 认证流 | `QBn` | ChatGPT auth 方式检测 |
+| `3390468622` | `request_rule` | `HUn` | 请求规则 |
+| `3798472673` | *(server-only)* | — | |
+| `4059535852` | *(server-only)* | — | |
+| `4100906017` | 语音输入/听写 | `Gxn` | dictation 功能 |
+| `4166894088` | 账户设置面板 B | `GNe` | 与 `98625937` 同函数 |
+| `4276547895` | *(server-only)* | — | |
+| **`2929582856`** | **App Sunset 强制更新** | **`aUn`** | **全屏遮罩阻止使用，需 patch** |
+
+### HUn 注册表中的 featureKey 映射
+
+```
+gate 30039772   → enable_request_compression
+gate 1786883712 → unified_exec
+gate 1615536597 → shell_snapshot
+gate 770526561  → remote_models
+gate 2828273915 → responses_websockets
+gate 2734851136 → responses_websockets_v2
+gate 1156958996 → collaboration_modes
+gate 1444479692 → personality
+gate 3390468622 → request_rule
+gate 2357796820 → apps
+gate 2911102190 → sqlite
+gate 2307253562 → codex_git_commit
+```
+
+> 注：以上 12 个 gate 在 HUn 中注册但部分未出现在实际下发的 30 个 gate 列表中，说明服务端仅下发与当前用户匹配的 gate 子集。
+
+## Dynamic Configs (15)
+
+| ID | 功能 | 组件/函数 | 说明 |
+|---|---|---|---|
+| `107580212` | 模型配置 | `ZEe` | 获取可用模型列表 |
+| `1121645430` | A/B 实验分组 | `zge` | 获取 experiment group name |
+| `3210878109` | Personality 配置 | `LZe` | 获取个性化设置参数 |
+| 其余 12 个 | *(server-only)* | — | 客户端未直接引用 |
+
+## Layers (6)
+
+| ID | 功能 | 组件/函数 | 说明 |
+|---|---|---|---|
+| `72216192` | i18n 配置层 | `jjt` / `Xkn` / `tWn` | `enable_i18n`、`locale_source` 等参数 |
+| `745800994` | WebSocket 特性层 | `HUn` | `responses_websockets` 相关 |
+| `3902942138` | Git Commit 特性层 | `HUn` | `codex_git_commit` 相关 |
+| 其余 3 个 | *(server-only)* | — | |
+
+## Patch 脚本
+
+| 脚本 | 目标 | 策略 |
+|---|---|---|
+| `patch-sunset.js` | gate `2929582856` | `Cs(i)` → `!1`，短路 sunset 守卫 |
+| `patch-statsig-logger.js` | `_setStatus()` | 注入日志，打印所有 gates/configs/layers 值 |
+| `patch-i18n.js` | `qNe()` | 注入 `en-US` 到语言选择器列表 |
+| `patch-devtools.js` | `allowInspectElement` / `devTools` | 属性值 → `!0` |
+| `patch-copyright.js` | About Dialog / setAboutPanelOptions | 替换版权文本 |
+| `patch-process-polyfill.js` | Windows `process` polyfill | 注入 `process.env`/`process.platform` |
+
+## 备注
+
+- Statsig DJB2 算法：`(hash << 5) - hash + charCode`，结果 `>>> 0` 转无符号
+- 哈希输入为服务端 gate/config/layer 的原始名称，客户端不保存原始名称
+- 所有 gate 在非登录/无网络状态下默认 `FALSE`
+- `2929582856` (sunset) 不在常规 30 个 gate 下发列表中，可能通过延迟加载或特定条件触发
diff --git a/scripts/patch-process-polyfill.js b/scripts/patch-process-polyfill.js
deleted file mode 100644
index bbe6e1e..0000000
--- a/scripts/patch-process-polyfill.js
+++ /dev/null
@@ -1,166 +0,0 @@
-/**
- * 构建后补丁脚本：注入 process polyfill（Windows 兼容性）
- *
- * Codex webview bundle 中存在对 `process` 全局对象的直接访问
- * （如 process.env、process.platform 等），这在浏览器环境中不存在。
- * macOS/Linux 的 Electron 预加载脚本会注入 process，
- * 但 Windows 环境下可能缺失，导致白屏。
- *
- * 此脚本：
- *   1. 生成 process-polyfill.js 文件
- *   2. 在 index.html 中注入 <script> 标签（bundle 之前加载）
- *
- * 用法：
- *   node scripts/patch-process-polyfill.js          # 执行 patch
- *   node scripts/patch-process-polyfill.js --check  # 仅检查状态，不修改
- */
-const fs = require("fs");
-const path = require("path");
-
-// ──────────────────────────────────────────────
-//  Polyfill 内容
-// ──────────────────────────────────────────────
-
-const POLYFILL_CONTENT = `// Process polyfill for browser/Windows compatibility
-(function() {
-  if (typeof window.process === "object" && typeof window.process.cwd === "function") return;
-  function detectPlatform() {
-    var ua = navigator.userAgent.toLowerCase();
-    if (ua.indexOf("win") !== -1) return "win32";
-    if (ua.indexOf("mac") !== -1) return "darwin";
-    if (ua.indexOf("linux") !== -1) return "linux";
-    return "browser";
-  }
-  window.process = window.process || {
-    cwd: function() { return "/"; },
-    env: {},
-    platform: detectPlatform(),
-    version: "",
-    versions: {},
-    nextTick: function(fn) { setTimeout(fn, 0); }
-  };
-})();
-`;
-
-const POLYFILL_FILENAME = "process-polyfill.js";
-const SCRIPT_TAG = `<script src="./assets/${POLYFILL_FILENAME}"></script>`;
-
-// ──────────────────────────────────────────────
-//  文件定位
-// ──────────────────────────────────────────────
-
-function locateFiles() {
-  const webviewDir = path.join(__dirname, "..", "src", "webview");
-  const indexHtml = path.join(webviewDir, "index.html");
-  const assetsDir = path.join(webviewDir, "assets");
-  const polyfillJs = path.join(assetsDir, POLYFILL_FILENAME);
-
-  if (!fs.existsSync(indexHtml)) {
-    console.error("❌ index.html 不存在:", indexHtml);
-    process.exit(1);
-  }
-
-  return { webviewDir, indexHtml, assetsDir, polyfillJs };
-}
-
-// ──────────────────────────────────────────────
-//  检查状态
-// ──────────────────────────────────────────────
-
-function checkStatus({ indexHtml, polyfillJs }) {
-  const htmlContent = fs.readFileSync(indexHtml, "utf-8");
-  const hasScriptTag = htmlContent.includes(POLYFILL_FILENAME);
-  const hasPolyfillFile = fs.existsSync(polyfillJs);
-
-  return { htmlContent, hasScriptTag, hasPolyfillFile };
-}
-
-// ──────────────────────────────────────────────
-//  主流程
-// ──────────────────────────────────────────────
-
-function main() {
-  const isCheck = process.argv.includes("--check");
-  const files = locateFiles();
-  const relHtml = path.relative(path.join(__dirname, ".."), files.indexHtml);
-  const relPolyfill = path.relative(path.join(__dirname, ".."), files.polyfillJs);
-
-  const status = checkStatus(files);
-
-  // ── --check 模式 ──
-  if (isCheck) {
-    console.log("\n── process polyfill 检查 (只读) ──\n");
-    console.log(`  📄 ${relPolyfill}: ${status.hasPolyfillFile ? "✅ 存在" : "🔧 缺失"}`);
-    console.log(`  📄 ${relHtml} <script> 标签: ${status.hasScriptTag ? "✅ 已注入" : "🔧 缺失"}`);
-
-    if (status.hasPolyfillFile && status.hasScriptTag) {
-      console.log("\n✅ process polyfill 已就绪");
-    } else {
-      console.log("\n💡 运行 node scripts/patch-process-polyfill.js 以修复");
-    }
-    return;
-  }
-
-  // ── patch 模式 ──
-  let changes = 0;
-
-  // 1. 确保 polyfill 文件存在
-  if (!status.hasPolyfillFile) {
-    fs.writeFileSync(files.polyfillJs, POLYFILL_CONTENT);
-    console.log(`  ✏️  创建 ${relPolyfill}`);
-    changes++;
-  } else {
-    // 检查内容是否需要更新
-    const existing = fs.readFileSync(files.polyfillJs, "utf-8");
-    if (existing !== POLYFILL_CONTENT) {
-      fs.writeFileSync(files.polyfillJs, POLYFILL_CONTENT);
-      console.log(`  ✏️  更新 ${relPolyfill}`);
-      changes++;
-    }
-  }
-
-  // 2. 确保 index.html 中有 <script> 标签
-  if (!status.hasScriptTag) {
-    let html = status.htmlContent;
-
-    // 在第一个 <script type="module" ...> 之前插入 polyfill script
-    const moduleScriptRegex = /<script\s+type="module"/;
-    const match = html.match(moduleScriptRegex);
-
-    if (match && match.index !== undefined) {
-      html =
-        html.slice(0, match.index) +
-        SCRIPT_TAG +
-        "\n    " +
-        html.slice(match.index);
-      fs.writeFileSync(files.indexHtml, html);
-      console.log(`  ✏️  注入 <script> 到 ${relHtml}`);
-      changes++;
-    } else {
-      // 回退：在 <title> 之后插入
-      const titleEnd = html.indexOf("</title>");
-      if (titleEnd !== -1) {
-        const insertPos = titleEnd + "</title>".length;
-        html =
-          html.slice(0, insertPos) +
-          "\n    " +
-          SCRIPT_TAG +
-          html.slice(insertPos);
-        fs.writeFileSync(files.indexHtml, html);
-        console.log(`  ✏️  注入 <script> 到 ${relHtml} (title 之后)`);
-        changes++;
-      } else {
-        console.error("❌ 无法定位 index.html 中的注入点");
-        process.exit(1);
-      }
-    }
-  }
-
-  if (changes === 0) {
-    console.log("ℹ️  process polyfill 已就绪, 无需修改");
-  } else {
-    console.log(`\n✅ process polyfill 已注入: ${changes} 处修改`);
-  }
-}
-
-main();
diff --git a/scripts/patch-statsig-logger.js b/scripts/patch-statsig-logger.js
new file mode 100644
index 0000000..34516ae
--- /dev/null
+++ b/scripts/patch-statsig-logger.js
@@ -0,0 +1,225 @@
+/**
+ * 构建后补丁脚本：注入 Statsig SDK 云控值实时日志
+ *
+ * 在 StatsigClientBase 的 _setStatus 方法中注入日志代码，
+ * 当 Statsig 完成初始化/更新（values_updated 事件）时，
+ * 遍历并打印所有 feature gates、dynamic configs、layers 的值。
+ *
+ * 拦截点：
+ *   _setStatus(g, v) { this.loadingStatus = g, ... }
+ *   → 在方法体头部注入 console 日志块
+ *
+ * 用法：
+ *   node scripts/patch-statsig-logger.js          # 执行 patch
+ *   node scripts/patch-statsig-logger.js --check  # 仅检查匹配
+ */
+const fs = require("fs");
+const path = require("path");
+const acorn = require(require.resolve("acorn", { paths: [path.join(__dirname, "..")] }));
+
+// ──────────────────────────────────────────────
+//  AST 遍历
+// ──────────────────────────────────────────────
+
+function walk(node, visitor, parent) {
+  if (!node || typeof node !== "object") return;
+  if (node.type) visitor(node, parent);
+  for (const key of Object.keys(node)) {
+    const child = node[key];
+    if (Array.isArray(child)) {
+      for (const item of child) {
+        if (item && typeof item === "object" && item.type) {
+          walk(item, visitor, node);
+        }
+      }
+    } else if (child && typeof child === "object" && child.type) {
+      walk(child, visitor, node);
+    }
+  }
+}
+
+function getPropertyName(node) {
+  if (!node) return null;
+  if (node.type === "Identifier") return node.name;
+  if (node.type === "Literal") return node.value;
+  return null;
+}
+
+// ──────────────────────────────────────────────
+//  注入代码模板
+// ──────────────────────────────────────────────
+
+const LOGGER_CODE = `
+try {
+  if (g === "Ready" && this._store) {
+    const _container = this._store._values;
+    const _raw = _container?._values || _container;
+    const _fg = _raw.feature_gates || {};
+    const _dc = _raw.dynamic_configs || {};
+    const _lc = _raw.layer_configs || {};
+    const _ps = _raw.param_stores || {};
+    const _vals = _raw.values || {};
+    console.group("[Statsig] values_updated — status:", g, "source:", this._store._source);
+
+    console.group("Feature Gates (" + Object.keys(_fg).length + ")");
+    for (const [k, v] of Object.entries(_fg)) {
+      console.log(k, "=", v?.v === true ? "TRUE" : "FALSE", v?.r ? "(rule:" + v.r + ")" : "");
+    }
+    console.groupEnd();
+
+    console.group("Dynamic Configs (" + Object.keys(_dc).length + ")");
+    for (const [k, v] of Object.entries(_dc)) {
+      console.log(k, "=", JSON.stringify(v?.v || {}), v?.r ? "(rule:" + v.r + ")" : "");
+    }
+    console.groupEnd();
+
+    console.group("Layers (" + Object.keys(_lc).length + ")");
+    for (const [k, v] of Object.entries(_lc)) {
+      const layerValues = _vals[v?.v] || v?.v || {};
+      console.log(k, "=", JSON.stringify(layerValues), v?.r ? "(rule:" + v.r + ")" : "");
+    }
+    console.groupEnd();
+
+    if (Object.keys(_ps).length > 0) {
+      console.group("Param Stores (" + Object.keys(_ps).length + ")");
+      for (const [k, v] of Object.entries(_ps)) {
+        console.log(k, "=", JSON.stringify(v));
+      }
+      console.groupEnd();
+    }
+
+    console.log("[raw keys]", Object.keys(_raw));
+    console.groupEnd();
+  }
+} catch(_e) { console.warn("[Statsig Logger] error:", _e); }
+`.trim();
+
+// ──────────────────────────────────────────────
+//  Patch 规则
+// ──────────────────────────────────────────────
+
+const RULES = [
+  {
+    id: "inject_statsig_logger",
+    description: "_setStatus 方法体注入云控值日志",
+    /**
+     * AST 匹配：
+     *   找到方法定义 _setStatus(g, v) { ... }
+     *   特征：方法体中包含 this.loadingStatus = g 和 "values_updated" 字符串
+     *   在函数体的 { 之后注入 logger 代码
+     */
+    match(node, source) {
+      // 匹配 Property: _setStatus: function(g, v) { ... }
+      // 或直接方法定义 _setStatus(g, v) { ... }
+      if (node.type !== "Property" && node.type !== "MethodDefinition") return null;
+
+      const keyName = getPropertyName(node.key);
+      if (keyName !== "_setStatus") return null;
+
+      const func = node.value || node;
+      if (!func.body || func.body.type !== "BlockStatement") return null;
+
+      // 验证：方法体中包含 "values_updated"
+      const funcSrc = source.slice(func.body.start, func.body.end);
+      if (!funcSrc.includes("values_updated")) return null;
+
+      // 幂等：检查是否已注入
+      if (funcSrc.includes("[Statsig] values_updated")) return null;
+
+      // 在 { 之后插入
+      const insertPos = func.body.start + 1;
+
+      return {
+        start: insertPos,
+        end: insertPos,
+        replacement: LOGGER_CODE,
+        original: "",
+      };
+    },
+  },
+];
+
+// ──────────────────────────────────────────────
+//  文件定位
+// ──────────────────────────────────────────────
+
+function locateBundle() {
+  const assetsDir = path.join(__dirname, "..", "src", "webview", "assets");
+  if (!fs.existsSync(assetsDir)) {
+    console.error("❌ 资源目录不存在:", assetsDir);
+    process.exit(1);
+  }
+
+  const files = fs.readdirSync(assetsDir).filter((f) => /^index-.*\.js$/.test(f));
+  if (files.length === 0) {
+    console.error("❌ 未找到 index-*.js bundle 文件");
+    process.exit(1);
+  }
+  if (files.length > 1) {
+    console.error("❌ 发现多个 index-*.js 文件:", files.join(", "));
+    process.exit(1);
+  }
+  return path.join(assetsDir, files[0]);
+}
+
+// ──────────────────────────────────────────────
+//  主流程
+// ──────────────────────────────────────────────
+
+function main() {
+  const isCheck = process.argv.includes("--check");
+  const bundlePath = locateBundle();
+  const relPath = path.relative(path.join(__dirname, ".."), bundlePath);
+
+  console.log(`📄 目标文件: ${relPath}`);
+
+  const source = fs.readFileSync(bundlePath, "utf-8");
+  console.log(`📏 文件大小: ${(source.length / 1024 / 1024).toFixed(1)} MB`);
+
+  const t0 = Date.now();
+  const ast = acorn.parse(source, {
+    ecmaVersion: "latest",
+    sourceType: "module",
+  });
+  console.log(`🔍 AST 解析: ${Date.now() - t0}ms`);
+
+  const patches = [];
+  const seen = new Set();
+
+  walk(ast, (node) => {
+    for (const rule of RULES) {
+      const result = rule.match(node, source);
+      if (result && !seen.has(result.start)) {
+        seen.add(result.start);
+        patches.push({ ...result, ruleId: rule.id, description: rule.description });
+      }
+    }
+  });
+
+  if (patches.length === 0) {
+    console.log("\n✅ 无需修改（日志已注入或 _setStatus 未匹配）");
+    return;
+  }
+
+  if (isCheck) {
+    console.log(`\n🔎 匹配报告: ${patches.length} 处`);
+    for (const p of patches) {
+      console.log(`  📍 [${p.ruleId}] 插入位置 ${p.start}`);
+      console.log(`     ${p.description}`);
+    }
+    return;
+  }
+
+  patches.sort((a, b) => b.start - a.start);
+
+  let code = source;
+  for (const p of patches) {
+    console.log(`  ✏️  [${p.ruleId}] 位置 ${p.start}: 注入 Statsig 云控值日志`);
+    code = code.slice(0, p.start) + p.replacement + code.slice(p.end);
+  }
+
+  fs.writeFileSync(bundlePath, code, "utf-8");
+  console.log(`\n✅ Statsig 云控值日志已注入: ${patches.length} 处`);
+}
+
+main();
diff --git a/scripts/patch-sunset.js b/scripts/patch-sunset.js
new file mode 100644
index 0000000..82e6301
--- /dev/null
+++ b/scripts/patch-sunset.js
@@ -0,0 +1,195 @@
+/**
+ * 构建后补丁脚本：禁用 appSunset 强制更新拦截
+ *
+ * Codex 通过 Statsig gate "2929582856" 控制版本淘汰（sunset）。
+ * 当 gate 返回 true 时，aUn 组件拦截整个 UI，显示 "Update Required" 全屏遮罩，
+ * 阻止用户正常使用应用。
+ *
+ * 本脚本通过 AST 精确匹配，将 Cs("2929582856") gate 检查替换为 !1（false），
+ * 使 sunset 守卫永远放行，渲染正常 children。
+ *
+ * 匹配模式：
+ *   aUn 函数中 Cs(i) 调用 → Cs 为 Statsig useGateValue
+ *   i 来自 memo cache 常量 "2929582856"
+ *   将 Cs(i) 替换为 !1，短路整个 gate 检查
+ *
+ * 用法：
+ *   node scripts/patch-sunset.js          # 执行 patch
+ *   node scripts/patch-sunset.js --check  # 仅检查匹配情况
+ */
+const fs = require("fs");
+const path = require("path");
+const acorn = require(require.resolve("acorn", { paths: [path.join(__dirname, "..")] }));
+
+// ──────────────────────────────────────────────
+//  AST 遍历
+// ──────────────────────────────────────────────
+
+function walk(node, visitor, parent) {
+  if (!node || typeof node !== "object") return;
+  if (node.type) visitor(node, parent);
+  for (const key of Object.keys(node)) {
+    const child = node[key];
+    if (Array.isArray(child)) {
+      for (const item of child) {
+        if (item && typeof item === "object" && item.type) {
+          walk(item, visitor, node);
+        }
+      }
+    } else if (child && typeof child === "object" && child.type) {
+      walk(child, visitor, node);
+    }
+  }
+}
+
+// ──────────────────────────────────────────────
+//  Patch 规则
+// ──────────────────────────────────────────────
+
+const SUNSET_GATE_ID = "2929582856";
+
+const RULES = [
+  {
+    id: "disable_sunset_gate",
+    description: `Cs(var) → !1  (gate "${SUNSET_GATE_ID}" 对应的 useGateValue 调用)`,
+    /**
+     * AST 匹配策略：
+     *   在包含字符串常量 "2929582856" 的函数中，
+     *   找到 Cs(identifier) 形式的 CallExpression，
+     *   将整个调用替换为 !1
+     *
+     * 匹配条件：
+     *   1. 函数体中存在 Literal "2929582856"
+     *   2. 该函数体中存在 CallExpression: Cs(Identifier)
+     *   3. Cs 是 Identifier（不是 MemberExpression）
+     */
+    match(node, source) {
+      // 寻找包含 sunset gate ID 的函数体
+      if (node.type !== "FunctionDeclaration" && node.type !== "FunctionExpression" &&
+          node.type !== "ArrowFunctionExpression") return null;
+
+      const funcSrc = source.slice(node.start, node.end);
+
+      // 快速预筛：函数体中必须包含 gate ID
+      if (!funcSrc.includes(SUNSET_GATE_ID)) return null;
+
+      // 在此函数的 AST 子树中找 Cs(xxx) 调用
+      const patches = [];
+
+      walk(node, (child) => {
+        if (child.type !== "CallExpression") return;
+        const callee = child.callee;
+        if (!callee || callee.type !== "Identifier" || callee.name !== "Cs") return;
+
+        // 确认参数是单个 Identifier（memo 缓存变量）
+        if (child.arguments.length !== 1) return;
+
+        const callSrc = source.slice(child.start, child.end);
+        // 已被 patch 过
+        if (callSrc === "!1") return;
+
+        patches.push({
+          start: child.start,
+          end: child.end,
+          replacement: "!1",
+          original: callSrc,
+        });
+      });
+
+      return patches.length > 0 ? patches : null;
+    },
+  },
+];
+
+// ──────────────────────────────────────────────
+//  文件定位
+// ──────────────────────────────────────────────
+
+function locateBundle() {
+  const assetsDir = path.join(__dirname, "..", "src", "webview", "assets");
+  if (!fs.existsSync(assetsDir)) {
+    console.error("❌ 资源目录不存在:", assetsDir);
+    process.exit(1);
+  }
+
+  const files = fs.readdirSync(assetsDir).filter((f) => /^index-.*\.js$/.test(f));
+
+  if (files.length === 0) {
+    console.error("❌ 未找到 index-*.js bundle 文件");
+    process.exit(1);
+  }
+  if (files.length > 1) {
+    console.error("❌ 发现多个 index-*.js 文件:", files.join(", "));
+    process.exit(1);
+  }
+
+  return path.join(assetsDir, files[0]);
+}
+
+// ──────────────────────────────────────────────
+//  主流程
+// ──────────────────────────────────────────────
+
+function main() {
+  const isCheck = process.argv.includes("--check");
+  const bundlePath = locateBundle();
+  const relPath = path.relative(path.join(__dirname, ".."), bundlePath);
+
+  console.log(`📄 目标文件: ${relPath}`);
+
+  const source = fs.readFileSync(bundlePath, "utf-8");
+  console.log(`📏 文件大小: ${(source.length / 1024 / 1024).toFixed(1)} MB`);
+
+  const t0 = Date.now();
+  const ast = acorn.parse(source, {
+    ecmaVersion: "latest",
+    sourceType: "module",
+  });
+  console.log(`🔍 AST 解析: ${Date.now() - t0}ms`);
+
+  // 收集所有 patches
+  const allPatches = [];
+
+  walk(ast, (node) => {
+    for (const rule of RULES) {
+      const result = rule.match(node, source);
+      if (result) {
+        const items = Array.isArray(result) ? result : [result];
+        for (const p of items) {
+          if (!allPatches.some((x) => x.start === p.start)) {
+            allPatches.push({ ...p, ruleId: rule.id, description: rule.description });
+          }
+        }
+      }
+    }
+  });
+
+  if (allPatches.length === 0) {
+    console.log("\n✅ 无需修改（sunset gate 已禁用或未匹配）");
+    return;
+  }
+
+  if (isCheck) {
+    console.log(`\n🔎 匹配报告: ${allPatches.length} 处`);
+    for (const p of allPatches) {
+      console.log(`  📍 [${p.ruleId}] 位置 ${p.start}`);
+      console.log(`     原始: ${p.original}`);
+      console.log(`     替换: ${p.replacement}`);
+    }
+    return;
+  }
+
+  // 按 start 降序（从后往前替换）
+  allPatches.sort((a, b) => b.start - a.start);
+
+  let code = source;
+  for (const p of allPatches) {
+    console.log(`  ✏️  [${p.ruleId}] 位置 ${p.start}: ${p.original} → ${p.replacement}`);
+    code = code.slice(0, p.start) + p.replacement + code.slice(p.end);
+  }
+
+  fs.writeFileSync(bundlePath, code, "utf-8");
+  console.log(`\n✅ sunset 强制更新已禁用: ${allPatches.length} 处 gate 调用 → !1`);
+}
+
+main();
diff --git a/scripts/start-dev.js b/scripts/start-dev.js
index de2f793..1d8bb49 100755
--- a/scripts/start-dev.js
+++ b/scripts/start-dev.js
@@ -35,12 +35,36 @@ if (!binDir) {
 }
 
 const cliName = platform === 'win32' ? 'codex.exe' : 'codex';
-const cliPath = path.join(__dirname, '..', 'resources', 'bin', binDir, cliName);
+const localCliPath = path.join(__dirname, '..', 'resources', 'bin', binDir, cliName);
+
+// 平台 -> target triple 映射（与 forge.config.js 保持一致）
+const TARGET_TRIPLE_MAP = {
+  'darwin-arm64': 'aarch64-apple-darwin',
+  'darwin-x64': 'x86_64-apple-darwin',
+  'linux-arm64': 'aarch64-unknown-linux-musl',
+  'linux-x64': 'x86_64-unknown-linux-musl',
+  'win32-x64': 'x86_64-pc-windows-msvc',
+};
+
+// 从 npm vendor 同步到 resources/bin/
+const triple = TARGET_TRIPLE_MAP[binDir];
+if (triple) {
+  const vendorPath = path.join(__dirname, '..', 'node_modules', '@cometix', 'codex', 'vendor', triple, 'codex', cliName);
+  if (fs.existsSync(vendorPath)) {
+    const localDir = path.join(__dirname, '..', 'resources', 'bin', binDir);
+    fs.mkdirSync(localDir, { recursive: true });
+    fs.copyFileSync(vendorPath, path.join(localDir, cliName));
+    try { fs.chmodSync(path.join(localDir, cliName), 0o755); } catch {}
+    console.log(`[start-dev] Synced codex binary: vendor → resources/bin/${binDir}/${cliName}`);
+  }
+}
+
+const cliPath = localCliPath;
 
 // Verify CLI exists
 if (!fs.existsSync(cliPath)) {
   console.error(`CLI not found at: ${cliPath}`);
-  console.error('Please ensure the CLI binary exists in resources/bin/');
+  console.error('Tried: resources/bin/ and node_modules/@cometix/codex/vendor/');
   process.exit(1);
 }