diff --git a/.gitignore b/.gitignore
index 65512c2..d65ea02 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,31 +1,31 @@
 # ---- 依赖与构建产物 ----
 #
 # 前端只在**构建期**用到 npm：`npm run build` 出的 dist/ 被 cp 进
-# gateway/internal/static/static/ 再由 go:embed 编进二进制。
+# server/internal/static/static/ 再由 go:embed 编进二进制。
 # 部署机上没有 node，产物就是「一个二进制 + 一个 .db 文件」。
 # 因此这三样都不进版本库：装依赖与构建都能从 package-lock.json 复现。
-web/node_modules/
-web/dist/
+client/electron/node_modules/
+client/electron/dist/
 plugins/*/node_modules/
 
 # dsh-mail-bridge 是 TypeScript 写的，dist/ 是 tsc 的产物。
-# 与 web/dist 同一个理由：装依赖与构建都能从 package-lock.json 复现，
+# 与 client/electron/dist 同一个理由：装依赖与构建都能从 package-lock.json 复现，
 # 产物不进版本库。注意它**必须在装插件前构建**（package.json 的
 # main 指向 dist/index.js），deploy/install.sh 负责这一步。
 plugins/*/dist/
 
-# go:embed 的输入目录 = web/dist 的副本，同属构建产物。
+# go:embed 的输入目录 = client/electron/dist 的副本，同属构建产物。
 #
 # 但目录本身要留下：go:embed 要求它存在才能编译，否则新克隆连
 # `go test ./...` 都跑不起来 —— 只改后端的人不该被迫先装 node。
 # 因此忽略构建产物，只保留 placeholder.html（见该文件内注释：
 # 之所以不叫 index.html，是因为那正是 Vite 产物的名字，会被反复覆盖）。
-gateway/internal/static/static/*
-!gateway/internal/static/static/placeholder.html
+server/internal/static/static/*
+!server/internal/static/static/placeholder.html
 
 # Go 构建产物
-gateway/agentmail-gateway
-gateway/gw
+server/agentmail-gateway
+server/gw
 *.test
 
 # ---- 运行态数据 ----
diff --git a/README.md b/README.md
index 8eb0a06..776e449 100644
--- a/README.md
+++ b/README.md
@@ -32,12 +32,12 @@
 
 ```bash
 # 后端：默认用内置 SQLite，无需任何外部依赖
-cd gateway
+cd server
 ADMIN_USER=admin ADMIN_PASSWORD=你的密码 go run ./cmd/server
 # → http://localhost:8180
 
 # 前端（另开一个终端）
-cd web
+cd client/electron
 npm install
 npm run dev        # → http://localhost:5173，自动代理到 8180
 ```
@@ -75,10 +75,10 @@ bash deploy/redeploy-gateway.sh              # 落地
 ### 构建期依赖
 
 npm 只在构建期用到：Node ≥ 18（`npm run build`）与 Go ≥ 1.22。
-`web/dist` 会被复制进 `gateway/internal/static/static/` 再由 `go:embed` 编入二进制，
+`client/electron/dist` 会被复制进 `server/internal/static/static/` 再由 `go:embed` 编入二进制，
 **部署机上不需要 node**。
 
-`web/node_modules`、`web/dist`、`gateway/internal/static/static/` 的内容与编译出的二进制
+`client/electron/node_modules`、`client/electron/dist`、`server/internal/static/static/` 的内容与编译出的二进制
 都是构建产物，不进版本库（见 `.gitignore`）。
 
 新克隆**可以直接 `go build` / `go test`**：`static/` 目录里留了一个占位 index.html
@@ -87,9 +87,13 @@ npm 只在构建期用到：Node ≥ 18（`npm run build`）与 Go ≥ 1.22。
 `deploy/install.sh`，或手工：
 
 ```bash
-cd web && npm ci && npm run build
-rm -rf ../gateway/internal/static/static && cp -r dist ../gateway/internal/static/static
-cd ../gateway && go build ./cmd/server
+# 在仓库根目录执行
+npm --prefix client/electron ci
+npm --prefix client/electron run build
+rm -rf server/internal/static/static/assets
+rm -f server/internal/static/static/index.html
+cp -r client/electron/dist/. server/internal/static/static/
+(cd server && go build ./cmd/server)
 ```
 
 ### 数据库
@@ -186,7 +190,7 @@ agentmail/
 │   ├── PLAN.md              # 分阶段实施计划
 │   ├── MVP-SPEC.md          # MVP 技术规格书
 │   └── PLUGIN-CONTRACT.md   # Agent 平台插件契约（规格 + 验收清单）
-├── gateway/                 # 后端（Go，单二进制）
+├── server/                 # 后端（Go，单二进制）
 │   ├── cmd/server/          # 入口与路由表
 │   └── internal/
 │       ├── db/              # 连接 + 方言适配 + 内嵌迁移
@@ -200,8 +204,10 @@ agentmail/
 │   ├── opencode-mail-bridge/    # opencode（插件）
 │   ├── dsh-mail-bridge/         # DeepSeek Harness（Cordis 插件）
 │   └── pi-mail-bridge/          # pi（常驻守护进程，用 SDK 起会话）
-├── web/                     # 前端（React + Vite + Tailwind）
-│   └── test/manual/          # 浏览器实测脚本（量真实盒子与命中区，不进 npm test）
+├── client/
+│   ├── electron/              # Electron + React + Vite + Tailwind 客户端
+│   │   └── test/manual/       # 浏览器实测脚本（量真实盒子与命中区，不进 npm test）
+│   └── harmony/               # HarmonyOS ArkUI 客户端
 └── deploy/                  # systemd 单元 + 安装脚本
     ├── redeploy-gateway.sh   # 二进制热替换（.backup + 原子 install + 后置验证 + 自动回滚）
     └── remote-agent-demo.py  # 最小跨主机 Agent（纯标准库，验证协议层能力）
@@ -223,8 +229,8 @@ agentmail/
 ## 验证
 
 ```bash
-cd gateway && go build ./... && go test ./...   # 后端
-cd web && npm run typecheck && npm test         # 前端（含 Markdown XSS 回归测试）
+cd server && go build ./... && go test ./...   # 后端
+cd client/electron && npm run typecheck && npm test         # 前端（含 Markdown XSS 回归测试）
 ```
 
 ## WebAPI
diff --git a/web/.gitignore b/client/electron/.gitignore
similarity index 100%
rename from web/.gitignore
rename to client/electron/.gitignore
diff --git a/web/electron/main.cjs b/client/electron/electron/main.cjs
similarity index 96%
rename from web/electron/main.cjs
rename to client/electron/electron/main.cjs
index a934bc9..d687f2a 100644
--- a/web/electron/main.cjs
+++ b/client/electron/electron/main.cjs
@@ -5,10 +5,10 @@
  *   - 创建 BrowserWindow 加载前端（dev=<ELECTRON_START_URL>，prod=../dist/index.html）
  *   - 系统托盘（Phase 4 完整实现）
  *   - 离线缓存（Phase 4）
- *   - 把 Gateway 地址与用户密钥注入渲染进程（Phase 2：让 web/src 以独立客户端身份连任意 Gateway）
+ *   - 把 Gateway 地址与用户密钥注入渲染进程（Phase 2：让 client/electron/src 以独立客户端身份连任意 Gateway）
  *
  * 设计约束：
- *   - 渲染进程复用 web/src 的 React 代码，零改动
+ *   - 渲染进程复用 client/electron/src 的 React 代码，零改动
  *   - 只通过 contextBridge 暴露必要 API，不放开 nodeIntegration
  */
 
diff --git a/web/electron/preload.cjs b/client/electron/electron/preload.cjs
similarity index 93%
rename from web/electron/preload.cjs
rename to client/electron/electron/preload.cjs
index d9967b3..7fc26a9 100644
--- a/web/electron/preload.cjs
+++ b/client/electron/electron/preload.cjs
@@ -1,7 +1,7 @@
 /**
  * AgentMail Electron preload —— 通过 contextBridge 暴露安全 API 给渲染进程。
  *
- * 渲染进程是 web/src 的 React，跑在 sandbox: true 下（无 nodeIntegration）。
+ * 渲染进程是 client/electron/src 的 React，跑在 sandbox: true 下（无 nodeIntegration）。
  * 需要桌面能力时（文件选择、通知、托盘角标、SSE 转发）走这里暴露的桥。
  *
  * Phase 1 只暴露最小集；后续 Phase 逐步加。
diff --git a/web/index.html b/client/electron/index.html
similarity index 95%
rename from web/index.html
rename to client/electron/index.html
index fd4b893..0695bf1 100644
--- a/web/index.html
+++ b/client/electron/index.html
@@ -2,7 +2,7 @@
 <html lang="zh-CN">
   <head>
     <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover, interactive-widget=resizes-content" />
     <title>AgentMail</title>
     <script>
       /*
diff --git a/web/package-lock.json b/client/electron/package-lock.json
similarity index 100%
rename from web/package-lock.json
rename to client/electron/package-lock.json
diff --git a/web/package.json b/client/electron/package.json
similarity index 100%
rename from web/package.json
rename to client/electron/package.json
diff --git a/web/postcss.config.js b/client/electron/postcss.config.js
similarity index 100%
rename from web/postcss.config.js
rename to client/electron/postcss.config.js
diff --git a/web/src/App.tsx b/client/electron/src/App.tsx
similarity index 99%
rename from web/src/App.tsx
rename to client/electron/src/App.tsx
index f05a21a..2a225f0 100644
--- a/web/src/App.tsx
+++ b/client/electron/src/App.tsx
@@ -196,7 +196,7 @@ function PaneLoading() {
  */
 function NarrowShell({ children }: { children: React.ReactNode }) {
   return (
-    <div className="h-full flex flex-col bg-gray-50 overflow-hidden">
+    <div className="h-full flex flex-col bg-gray-50 overflow-hidden safe-frame">
       {children}
       <NarrowNav />
     </div>
diff --git a/web/src/api/client.ts b/client/electron/src/api/client.ts
similarity index 100%
rename from web/src/api/client.ts
rename to client/electron/src/api/client.ts
diff --git a/web/src/api/config.ts b/client/electron/src/api/config.ts
similarity index 100%
rename from web/src/api/config.ts
rename to client/electron/src/api/config.ts
diff --git a/web/src/api/sse.ts b/client/electron/src/api/sse.ts
similarity index 100%
rename from web/src/api/sse.ts
rename to client/electron/src/api/sse.ts
diff --git a/web/src/components/AccountPage.tsx b/client/electron/src/components/AccountPage.tsx
similarity index 100%
rename from web/src/components/AccountPage.tsx
rename to client/electron/src/components/AccountPage.tsx
diff --git a/web/src/components/AddressInput.tsx b/client/electron/src/components/AddressInput.tsx
similarity index 81%
rename from web/src/components/AddressInput.tsx
rename to client/electron/src/components/AddressInput.tsx
index 5a33819..dc2ea71 100644
--- a/web/src/components/AddressInput.tsx
+++ b/client/electron/src/components/AddressInput.tsx
@@ -30,6 +30,7 @@ export default function AddressInput({
   const [meta, setMeta] = useState<SessionCandidate[]>([]);
   const [kind, setKind] = useState<'name' | 'path' | 'session'>('name');
   const [active, setActive] = useState(0);
+  const [menuLayout, setMenuLayout] = useState({ flip: false, maxHeight: 288 });
   const boxRef = useRef<HTMLDivElement>(null);
 
   // 当前正在编辑的那一段（多地址时取最后一段）
@@ -96,6 +97,34 @@ export default function AddressInput({
     return () => document.removeEventListener('mousedown', onDocClick);
   }, []);
 
+  // 补全菜单根据 Visual Viewport 剩余空间向上翻转；软键盘出现后也实时重算。
+  useEffect(() => {
+    if (!open || items.length === 0) return;
+    const update = () => {
+      const box = boxRef.current;
+      if (!box) return;
+      const rect = box.getBoundingClientRect();
+      const viewport = window.visualViewport;
+      const top = viewport?.offsetTop ?? 0;
+      const bottom = top + (viewport?.height ?? window.innerHeight);
+      const above = Math.max(0, rect.top - top - 8);
+      const below = Math.max(0, bottom - rect.bottom - 8);
+      const flip = below < Math.min(240, above) && above > below;
+      setMenuLayout({ flip, maxHeight: Math.max(96, Math.min(288, flip ? above : below)) });
+    };
+    update();
+    window.addEventListener('resize', update, { passive: true });
+    window.addEventListener('scroll', update, { passive: true, capture: true });
+    window.visualViewport?.addEventListener('resize', update, { passive: true });
+    window.visualViewport?.addEventListener('scroll', update, { passive: true });
+    return () => {
+      window.removeEventListener('resize', update);
+      window.removeEventListener('scroll', update, { capture: true });
+      window.visualViewport?.removeEventListener('resize', update);
+      window.visualViewport?.removeEventListener('scroll', update);
+    };
+  }, [open, items.length]);
+
   /** 选中一个候选后拼回完整地址 */
   const apply = (choice: string) => {
     let next: string;
@@ -151,7 +180,12 @@ export default function AddressInput({
       />
 
       {open && items.length > 0 && (
-        <div className="absolute z-20 mt-1 w-full max-h-72 overflow-y-auto bg-white border border-gray-200 rounded-md shadow-lg">
+        <div
+          className={`absolute z-20 w-full overflow-y-auto bg-white border border-gray-200 rounded-md shadow-lg ${
+            menuLayout.flip ? 'bottom-full mb-1' : 'top-full mt-1'
+          }`}
+          style={{ maxHeight: menuLayout.maxHeight }}
+        >
           <div className="px-2.5 py-1 text-[10px] text-gray-400 border-b border-gray-100">
             {hint}
           </div>
@@ -182,7 +216,7 @@ export default function AddressInput({
                       一条已经在跑的会话，而不是继续一条已有的邮件往来 */}
                   {c?.source === 'platform' && (
                     <span
-                      className="shrink-0 px-1 py-0.5 rounded bg-purple-100 text-purple-700 text-[9px]"
+                      className="shrink-0 px-1 py-0.5 rounded bg-blue-100 text-blue-700 text-[9px]"
                       title="平台侧已有的会话，本站还没有对应的邮件往来"
                     >
                       平台
@@ -192,7 +226,7 @@ export default function AddressInput({
                     <span className="shrink-0 text-[10px] text-gray-400 font-sans">新建会话</span>
                   )}
                   {(c?.unread ?? 0) > 0 && (
-                    <span className="shrink-0 px-1 py-0.5 rounded bg-red-500 text-white text-[9px]">
+                    <span className="shrink-0 px-1 py-0.5 rounded bg-red-600 text-white text-[9px]">
                       {c!.unread}
                     </span>
                   )}
diff --git a/web/src/components/AdminUsersPage.tsx b/client/electron/src/components/AdminUsersPage.tsx
similarity index 98%
rename from web/src/components/AdminUsersPage.tsx
rename to client/electron/src/components/AdminUsersPage.tsx
index 5d67502..c0901c5 100644
--- a/web/src/components/AdminUsersPage.tsx
+++ b/client/electron/src/components/AdminUsersPage.tsx
@@ -173,7 +173,7 @@ function TabButton({ active, onClick, children }: {
     <button
       onClick={onClick}
       className={`tap flex items-center gap-1.5 px-3 py-1.5 text-sm rounded-md ${
-        active ? 'bg-gray-900 text-white' : 'text-gray-600 hover:bg-gray-100'
+        active ? 'bg-blue-600 text-white' : 'text-gray-600 hover:bg-gray-100'
       }`}
     >
       {children}
@@ -195,7 +195,7 @@ function UserCard({ user, scopes, expanded, onToggle, onSaved, onReload, setErro
         </button>
         <span className="font-mono text-sm text-gray-900 min-w-[100px]">{user.username}</span>
         <span className="tap text-[11px] text-gray-500">{user.display_name}</span>
-        <span className={`text-[10px] px-1.5 py-0.5 rounded ${user.role === 'admin' ? 'bg-purple-100 text-purple-700' : 'bg-gray-100 text-gray-600'}`}>
+        <span className={`text-[10px] px-1.5 py-0.5 rounded ${user.role === 'admin' ? 'bg-blue-100 text-blue-700' : 'bg-gray-100 text-gray-600'}`}>
           {user.role === 'admin' ? '管理员' : '用户'}
         </span>
         <span className={`text-[10px] px-1.5 py-0.5 rounded ${user.status === 'active' ? 'bg-green-100 text-green-700' : 'bg-gray-200 text-gray-500'}`}>
@@ -317,12 +317,12 @@ function UserEditor({ user, scopes, onSaved, onReload, setError }: {
         <button onClick={save} disabled={busy} className="tap px-4 py-1.5 text-xs font-medium rounded-md bg-blue-600 text-white hover:bg-blue-700 disabled:opacity-40 transition-colors">
           {busy ? '保存中' : '保存更改'}
         </button>
-        <div className="flex items-center gap-1.5 ml-auto">
+        <div className="flex items-center gap-1.5 ml-auto flex-wrap">
           <LockIcon className="w-3 h-3 text-gray-400" />
           <input type="password" value={pw} onChange={e => setPw(e.target.value)} placeholder="新密码（至少 8 位）"
             className="w-40 text-xs border border-gray-300 rounded-md px-2 py-1 focus:outline-none focus:ring-2 focus:ring-blue-100 focus:border-blue-400" />
           <button onClick={resetPassword} disabled={pw.length < 8 || busy}
-            className="tap inline-flex items-center gap-1 px-2 py-1 text-[11px] rounded bg-gray-700 text-white hover:bg-gray-800 disabled:opacity-40">
+            className="tap inline-flex items-center gap-1 px-2 py-1 text-[11px] rounded bg-chrome-700 text-white hover:bg-chrome-800 disabled:opacity-40">
             <CheckIcon className="w-3 h-3" /> 重置
           </button>
         </div>
diff --git a/web/src/components/Attachments.tsx b/client/electron/src/components/Attachments.tsx
similarity index 86%
rename from web/src/components/Attachments.tsx
rename to client/electron/src/components/Attachments.tsx
index 5a0b28f..e5c68b2 100644
--- a/web/src/components/Attachments.tsx
+++ b/client/electron/src/components/Attachments.tsx
@@ -114,32 +114,34 @@ export function AttachmentPicker({
         onChange={e => handleFiles(e.target.files)}
       />
 
-      <div className="flex items-center gap-2">
+      <div className="flex items-center gap-2 flex-wrap min-w-0">
         <button
+          type="button"
           onClick={pick}
           disabled={disabled || uploading !== null}
-          className="tap inline-flex items-center gap-1.5 text-xs px-2.5 py-1.5 border border-gray-300 rounded-md hover:bg-gray-50 disabled:opacity-40"
+          className="tap shrink-0 inline-flex items-center gap-1.5 text-xs px-2.5 py-1.5 border border-gray-300 rounded-md hover:bg-gray-50 disabled:opacity-40"
         >
           <PaperclipIcon className="w-3.5 h-3.5" />
           添加附件
         </button>
 
         {uploading && (
-          <span className="inline-flex items-center gap-1.5 text-[11px] text-gray-500">
-            <SpinnerIcon className="w-3.5 h-3.5 animate-spin" />
-            {uploading.name} {uploading.pct}%
+          <span className="min-w-0 flex-1 inline-flex items-center gap-1.5 text-[11px] text-gray-500">
+            <SpinnerIcon className="w-3.5 h-3.5 animate-spin shrink-0" />
+            <span className="truncate">{uploading.name}</span>
+            <span className="shrink-0">{uploading.pct}%</span>
           </span>
         )}
 
         {items.length > 0 && !uploading && (
-          <span className="text-[11px] text-gray-400">
+          <span className="text-[11px] text-gray-500 min-w-0 break-words">
             {items.length} 个附件 ·{' '}
             {api.formatSize(items.reduce((sum, a) => sum + a.size, 0))}
           </span>
         )}
       </div>
 
-      {error && <div className="text-[11px] text-red-600">{error}</div>}
+      {error && <div className="text-[11px] text-red-600 break-words">{error}</div>}
 
       {items.length > 0 && (
         <ul className="space-y-1">
@@ -152,10 +154,11 @@ export function AttachmentPicker({
               <span className="text-xs text-gray-800 truncate flex-1">{a.filename}</span>
               <span className="text-[10px] text-gray-400 shrink-0">{api.formatSize(a.size)}</span>
               <button
+                type="button"
                 onClick={() => remove(a)}
                 disabled={disabled}
                 title="移除"
-                className="shrink-0 text-gray-400 hover:text-red-600 disabled:opacity-40"
+                className="tap shrink-0 inline-flex items-center justify-center text-gray-500 hover:text-red-600 disabled:opacity-40"
               >
                 <CloseIcon className="w-3.5 h-3.5" />
               </button>
diff --git a/web/src/components/BackButton.tsx b/client/electron/src/components/BackButton.tsx
similarity index 100%
rename from web/src/components/BackButton.tsx
rename to client/electron/src/components/BackButton.tsx
diff --git a/web/src/components/CalendarEventEditor.tsx b/client/electron/src/components/CalendarEventEditor.tsx
similarity index 99%
rename from web/src/components/CalendarEventEditor.tsx
rename to client/electron/src/components/CalendarEventEditor.tsx
index 99158c0..2af301a 100644
--- a/web/src/components/CalendarEventEditor.tsx
+++ b/client/electron/src/components/CalendarEventEditor.tsx
@@ -641,7 +641,7 @@ export default function CalendarEventEditor({
         )}
       </div>
 
-      <div className="flex items-center gap-2 px-4 py-3 border-t border-gray-200 shrink-0">
+      <div className="flex items-center gap-2 px-4 py-3 border-t border-gray-200 shrink-0 flex-wrap">
         <button
           onClick={save}
           disabled={!canSave}
@@ -658,9 +658,9 @@ export default function CalendarEventEditor({
           取消
         </button>
         {editing && (
-          <div className="ml-auto">
+          <div className="w-full sm:w-auto sm:ml-auto">
             {confirmDelete ? (
-              <div className="flex items-center gap-2">
+              <div className="flex items-center gap-2 flex-wrap">
                 <span className="text-xs text-gray-600">确定删除？</span>
                 <button
                   onClick={remove}
diff --git a/web/src/components/CalendarView.tsx b/client/electron/src/components/CalendarView.tsx
similarity index 99%
rename from web/src/components/CalendarView.tsx
rename to client/electron/src/components/CalendarView.tsx
index 86b885f..feac3e8 100644
--- a/web/src/components/CalendarView.tsx
+++ b/client/electron/src/components/CalendarView.tsx
@@ -346,7 +346,7 @@ export default function CalendarView() {
   return (
     <div className="flex-1 min-w-0 flex min-h-0">
       {gridPane}
-      <div className="w-full md:w-[400px] shrink-0 border-l border-gray-200 bg-white flex flex-col min-h-0">
+      <div className="w-full lg:w-[400px] shrink-0 border-l border-gray-200 bg-white flex flex-col min-h-0">
         {sidePane}
       </div>
     </div>
diff --git a/web/src/components/ComposePage.tsx b/client/electron/src/components/ComposePage.tsx
similarity index 87%
rename from web/src/components/ComposePage.tsx
rename to client/electron/src/components/ComposePage.tsx
index 0dc7295..1e6c547 100644
--- a/web/src/components/ComposePage.tsx
+++ b/client/electron/src/components/ComposePage.tsx
@@ -7,6 +7,7 @@ import NarrowOnly from './NarrowOnly';
 import { useMailStore } from '../stores/mailStore';
 import { useSessionStore } from '../stores/sessionStore';
 import { useContactStore } from '../stores/contactStore';
+import { useIsNarrow } from '../hooks/useIsNarrow';
 import AddressInput from './AddressInput';
 import { AttachmentPicker, type PendingAttachment } from './Attachments';
 import { ComposeIcon, ChevronLeftIcon } from './icons';
@@ -19,6 +20,7 @@ export default function ComposePage() {
   const fetchSent = useMailStore(s => s.fetchSent);
   const fetchSessions = useSessionStore(s => s.fetchSessions);
   const fetchContacts = useContactStore(s => s.fetchContacts);
+  const isNarrow = useIsNarrow();
 
   const [to, setTo] = useState(prefill?.to ?? '');
   const [cc, setCc] = useState(prefill?.cc ?? '');
@@ -132,8 +134,8 @@ export default function ComposePage() {
   };
 
   return (
-    <div className="flex-1 min-w-0 flex flex-col bg-white">
-      <div className="px-4 md:px-6 py-3 border-b border-gray-200 flex items-center gap-2">
+    <div className="flex-1 min-w-0 min-h-0 flex flex-col overflow-y-auto lg:overflow-hidden overscroll-contain bg-white">
+      <div className="shrink-0 sticky top-0 z-10 lg:static px-4 md:px-6 py-3 border-b border-gray-200 bg-white flex items-center gap-2">
         {/* 窄屏下写信是盖在列表上的覆盖层，得有个退出口。
             用 cancelCompose 而不是 showList：写信态本身要一起结束，
             只滑走覆盖层的话下次进列表又会弹回来 */}
@@ -169,12 +171,12 @@ export default function ComposePage() {
         </button>
       </div>
 
-      <div className="px-4 md:px-6 py-4 space-y-3 border-b border-gray-200">
+      <div className="shrink-0 px-4 md:px-6 py-4 space-y-3 border-b border-gray-200">
         <Field label="收件人" hint="name@path.session：省略=默认会话，new=新建，别名=已有会话">
           <AddressInput
             value={to}
             onChange={setTo}
-            autoFocus
+            autoFocus={!isNarrow}
             placeholder="deepseekharness@/program.upadtefeature"
           />
         </Field>
@@ -247,8 +249,8 @@ export default function ComposePage() {
         </Field>
       </div>
 
-      <div className="flex-1 min-h-0 px-4 md:px-6 py-3 flex flex-col">
-        <div className="flex items-center gap-2 mb-1.5">
+      <div className="shrink-0 lg:flex-1 lg:min-h-0 px-4 md:px-6 py-3 flex flex-col">
+        <div className="shrink-0 flex items-center gap-2 mb-1.5">
           <span className="text-[11px] font-medium text-gray-500">正文（Markdown）</span>
           <div className="flex-1" />
           <Toggle active={!preview} onClick={() => setPreview(false)}>
@@ -260,7 +262,7 @@ export default function ComposePage() {
         </div>
 
         {preview ? (
-          <div className="flex-1 min-h-0 overflow-y-auto border border-gray-200 rounded-md p-4 prose prose-sm max-w-none">
+          <div className="markdown flex-1 min-h-[12rem] lg:min-h-0 overflow-y-auto border border-gray-200 rounded-md p-4">
             {body.trim() ? (
               <Markdown remarkPlugins={[remarkGfm]}>{body}</Markdown>
             ) : (
@@ -272,19 +274,21 @@ export default function ComposePage() {
             value={body}
             onChange={e => setBody(e.target.value)}
             placeholder={'## 需求\n\n请在 /program 下推进 update feature…'}
-            className="flex-1 min-h-0 w-full text-sm font-mono border border-gray-300 rounded-md p-4 resize-none focus:outline-none focus:ring-2 focus:ring-blue-100 focus:border-blue-400"
+            className="flex-1 min-h-[12rem] lg:min-h-0 w-full text-sm font-mono border border-gray-300 rounded-md p-4 resize-y lg:resize-none focus:outline-none focus:ring-2 focus:ring-blue-100 focus:border-blue-400"
           />
         )}
       </div>
 
-      <div className="px-4 md:px-6 pb-3">
+      {/* 窄屏底部操作栏是 sticky，会在矮视口里向上吸附；预留一栏高度，
+          避免它覆盖附件按钮。桌面操作栏回到普通文档流，不需要这段缓冲。 */}
+      <div className="shrink-0 px-4 md:px-6 pb-20 lg:pb-3">
         <AttachmentPicker items={attachments} onChange={setAttachments} disabled={sending} />
       </div>
 
-      <div className="px-4 md:px-6 py-3 border-t border-gray-200 flex items-center gap-3">
-        {error && <span className="text-xs text-red-600">{error}</span>}
-        {okMsg && <span className="text-xs text-green-600">{okMsg}</span>}
-        <div className="flex-1" />
+      <div className="shrink-0 sticky bottom-0 z-10 lg:static px-4 md:px-6 py-3 border-t border-gray-200 bg-white flex items-center gap-3 flex-wrap">
+        {error && <span className="min-w-0 text-xs text-red-600 break-words">{error}</span>}
+        {okMsg && <span className="min-w-0 text-xs text-green-700 break-words">{okMsg}</span>}
+        <div className="flex-1 min-w-2" />
         <button
           onClick={cancelCompose}
           className="px-4 py-2 text-sm text-gray-600 hover:text-gray-900"
@@ -336,7 +340,7 @@ function Toggle({
     <button
       onClick={onClick}
       className={`tap text-[11px] px-2 py-0.5 rounded ${
-        active ? 'bg-gray-900 text-white' : 'text-gray-500 hover:text-gray-800'
+        active ? 'bg-blue-600 text-white' : 'text-gray-500 hover:text-gray-800'
       }`}
     >
       {children}
diff --git a/web/src/components/ConnectionIndicator.tsx b/client/electron/src/components/ConnectionIndicator.tsx
similarity index 100%
rename from web/src/components/ConnectionIndicator.tsx
rename to client/electron/src/components/ConnectionIndicator.tsx
diff --git a/web/src/components/ContactPanel.tsx b/client/electron/src/components/ContactPanel.tsx
similarity index 98%
rename from web/src/components/ContactPanel.tsx
rename to client/electron/src/components/ContactPanel.tsx
index 79d1f23..dffb832 100644
--- a/web/src/components/ContactPanel.tsx
+++ b/client/electron/src/components/ContactPanel.tsx
@@ -58,7 +58,7 @@ export default function ContactPanel() {
     <div
       className={`w-full shrink-0 border-r border-gray-200 bg-white flex flex-col min-w-0 ${
         // 卡片要放两行摘要 + 预算条，320px 会挤；列表视图保持紧凑
-        view === 'card' ? 'md:w-[400px]' : 'md:w-[320px]'
+        view === 'card' ? 'lg:w-[400px]' : 'lg:w-[320px]'
       }`}
     >
       <div className="px-4 py-3 border-b border-gray-200 flex items-center gap-1">
@@ -82,7 +82,7 @@ export default function ContactPanel() {
         <button
           onClick={toggleArchivedView}
           className={`tap text-[11px] px-1.5 py-0.5 rounded ${
-            showArchived ? 'bg-gray-900 text-white' : 'text-gray-500 hover:text-gray-800'
+            showArchived ? 'bg-blue-600 text-white' : 'text-gray-500 hover:text-gray-800'
           }`}
         >
           归档
@@ -237,7 +237,7 @@ function ContactRow({
           </span>
           <span className="text-[10px] text-gray-400 font-mono truncate">{contact.path}</span>
           {contact.unread_count > 0 && (
-            <span className="ml-auto shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-500 text-white text-[9px] font-bold flex items-center justify-center">
+            <span className="ml-auto shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-600 text-white text-[9px] font-bold flex items-center justify-center">
               {contact.unread_count}
             </span>
           )}
diff --git a/web/src/components/KeyPanel.tsx b/client/electron/src/components/KeyPanel.tsx
similarity index 100%
rename from web/src/components/KeyPanel.tsx
rename to client/electron/src/components/KeyPanel.tsx
diff --git a/web/src/components/LoginPage.tsx b/client/electron/src/components/LoginPage.tsx
similarity index 100%
rename from web/src/components/LoginPage.tsx
rename to client/electron/src/components/LoginPage.tsx
diff --git a/web/src/components/MailList.tsx b/client/electron/src/components/MailList.tsx
similarity index 97%
rename from web/src/components/MailList.tsx
rename to client/electron/src/components/MailList.tsx
index db4ff36..d3e0991 100644
--- a/web/src/components/MailList.tsx
+++ b/client/electron/src/components/MailList.tsx
@@ -63,7 +63,7 @@ export default function MailList() {
   };
 
   return (
-    <div className="w-full md:w-[320px] shrink-0 border-r border-gray-200 bg-white flex flex-col min-w-0">
+    <div className="w-full lg:w-[320px] shrink-0 border-r border-gray-200 bg-white flex flex-col min-w-0">
       <div className="px-4 py-3 border-b border-gray-200 flex items-center gap-1">
         <h2 className="text-sm font-semibold text-gray-800">{isSent ? '发件箱' : '收件箱'}</h2>
         {/* 显示「会话数 · 邮件数」而不是只显示邮件数：分组之后前者才是
@@ -178,7 +178,7 @@ function SessionGroup({
 
         <div className="flex items-center gap-1.5 mt-0.5 pl-5">
           {g.unreadCount > 0 && (
-            <span className="shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-500 text-white text-[9px] font-bold flex items-center justify-center">
+            <span className="shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-600 text-white text-[9px] font-bold flex items-center justify-center">
               {g.unreadCount}
             </span>
           )}
@@ -200,7 +200,7 @@ function SessionGroup({
       </button>
 
       {open && (
-        <div className="pl-3 pr-1 pb-1.5 space-y-0.5">
+        <div className="pl-5 pr-1 pb-1.5 space-y-0.5">
           {g.mails.map(m => (
             <MailItem
               key={m.mail_id}
@@ -312,7 +312,7 @@ function MailItem({
           </span>
         )}
         {!compact && mail.session_alias && (
-          <span className="text-[10px] text-blue-500 font-mono">.{mail.session_alias}</span>
+          <span className="min-w-0 flex-1 truncate text-[10px] text-blue-600 font-mono">.{mail.session_alias}</span>
         )}
         {ccCount > 0 && <span className="text-[10px] text-gray-400">抄送 {ccCount}</span>}
         {attachCount > 0 && (
diff --git a/web/src/components/MailView.tsx b/client/electron/src/components/MailView.tsx
similarity index 97%
rename from web/src/components/MailView.tsx
rename to client/electron/src/components/MailView.tsx
index 6dac534..98e962d 100644
--- a/web/src/components/MailView.tsx
+++ b/client/electron/src/components/MailView.tsx
@@ -108,7 +108,7 @@ export default function MailView() {
         onThread={() => setThreadOf(currentMail.mail_id)}
       />
       <div className="flex-1 overflow-y-auto px-4 md:px-6 py-4">
-        <div className="prose prose-sm max-w-none">
+        <div className="markdown text-sm">
           <Markdown remarkPlugins={[remarkGfm]}>{currentMail.body}</Markdown>
         </div>
         <AttachmentList items={currentMail.attachments ?? []} />
@@ -322,7 +322,7 @@ function RenameProposalBar() {
             await accept();
             setBusy(false);
           }}
-          className="px-2.5 py-1 rounded bg-blue-500 text-white text-xs hover:bg-blue-600 disabled:opacity-50 shrink-0"
+          className="px-2.5 py-1 rounded bg-blue-600 text-white text-xs hover:bg-blue-600 disabled:opacity-50 shrink-0"
         >
           {busy ? '改名中' : '接受'}
         </button>
@@ -373,7 +373,7 @@ function ForwardBar({ mail, onClose }: { mail: Mail; onClose: () => void }) {
   };
 
   return (
-    <div className="border-t border-gray-200 bg-white px-4 md:px-6 py-3 space-y-2">
+    <div className="shrink-0 max-h-[min(65vh,calc(var(--app-height)-3rem))] overflow-y-auto overscroll-contain border-t border-gray-200 bg-white px-4 md:px-6 py-3 space-y-2">
       <div className="flex items-center gap-2">
         <ForwardIcon className="w-3.5 h-3.5 text-gray-500" />
         <span className="text-[11px] font-medium text-gray-600">
@@ -388,7 +388,7 @@ function ForwardBar({ mail, onClose }: { mail: Mail; onClose: () => void }) {
         </button>
       </div>
 
-      <AddressInput value={to} onChange={setTo} autoFocus placeholder="新收件人：pi@root.new" />
+      <AddressInput value={to} onChange={setTo} placeholder="新收件人：pi@root.new" />
 
       {ccOpen && (
         <AddressInput
@@ -406,8 +406,8 @@ function ForwardBar({ mail, onClose }: { mail: Mail; onClose: () => void }) {
         className="w-full h-16 text-sm border border-gray-300 rounded-md p-2.5 resize-none focus:outline-none focus:ring-2 focus:ring-blue-100 focus:border-blue-400"
       />
 
-      <div className="flex items-center gap-2">
-        {error && <span className="text-xs text-red-600">{error}</span>}
+      <div className="flex items-center gap-2 flex-wrap">
+        {error && <span className="text-xs text-red-600 min-w-0 break-words">{error}</span>}
         <div className="flex-1" />
         <button onClick={onClose} className="tap px-3 py-1.5 text-xs text-gray-500 hover:text-gray-800">
           取消
@@ -577,7 +577,7 @@ function ThreadCard({ mail, onForward }: { mail: Mail; onForward?: () => void })
           </button>
         )}
       </div>
-      <div className="prose prose-sm max-w-none">
+      <div className="markdown text-sm">
         <Markdown remarkPlugins={[remarkGfm]}>{mail.body}</Markdown>
       </div>
       <AttachmentList items={mail.attachments ?? []} />
@@ -635,7 +635,7 @@ export function PermissionPanel({ mail }: { mail: Mail }) {
             disabled={busy}
             className={`inline-flex items-center gap-1.5 px-3 py-1.5 text-xs font-medium rounded-md transition-colors disabled:opacity-40 ${
               isApprove(opt)
-                ? 'bg-green-600 text-white hover:bg-green-700'
+                ? 'bg-green-700 text-white hover:bg-green-800'
                 : 'bg-red-50 text-red-700 border border-red-200 hover:bg-red-100'
             }`}
           >
@@ -738,8 +738,8 @@ function ReplyBar({
   };
 
   return (
-    <div className="border-t border-gray-200 bg-white px-4 md:px-6 py-3">
-      <div className="flex items-center gap-2 mb-1">
+    <div className="shrink-0 max-h-[min(65vh,calc(var(--app-height)-3rem))] overflow-y-auto overscroll-contain border-t border-gray-200 bg-white px-4 md:px-6 py-3">
+      <div className="flex items-center gap-2 mb-1 flex-wrap">
         <p className="text-[10px] text-gray-400 font-mono min-w-0 truncate">回复 {target}</p>
         <div className="flex-1" />
         {(replyTo.cc_list?.length ?? 0) > 0 && (
diff --git a/web/src/components/ModelScopePanel.tsx b/client/electron/src/components/ModelScopePanel.tsx
similarity index 100%
rename from web/src/components/ModelScopePanel.tsx
rename to client/electron/src/components/ModelScopePanel.tsx
diff --git a/web/src/components/NarrowNav.tsx b/client/electron/src/components/NarrowNav.tsx
similarity index 97%
rename from web/src/components/NarrowNav.tsx
rename to client/electron/src/components/NarrowNav.tsx
index ad1bd3a..7d18457 100644
--- a/web/src/components/NarrowNav.tsx
+++ b/client/electron/src/components/NarrowNav.tsx
@@ -60,7 +60,7 @@ export default function NarrowNav() {
 
   return (
     <nav
-      className="shrink-0 border-t border-chrome-700 bg-chrome-900 flex items-stretch"
+      className="narrow-nav shrink-0 border-t border-chrome-700 bg-chrome-900 flex items-stretch"
       // 底部安全区：iPhone 的手势条会盖住最后一排
       style={{ paddingBottom: 'env(safe-area-inset-bottom)' }}
     >
@@ -90,7 +90,7 @@ export default function NarrowNav() {
               <span
                 className={`absolute top-1 right-[22%] min-w-[15px] h-[15px] px-1 rounded-full text-[9px] font-bold flex items-center justify-center ${
                   mode === 'inbox'
-                    ? 'bg-red-500 text-white'
+                    ? 'bg-red-600 text-white'
                     : mode === 'permissions'
                     ? 'bg-orange-700 text-white'
                     : 'bg-chrome-600 text-chrome-100'
diff --git a/web/src/components/NarrowOnly.tsx b/client/electron/src/components/NarrowOnly.tsx
similarity index 100%
rename from web/src/components/NarrowOnly.tsx
rename to client/electron/src/components/NarrowOnly.tsx
diff --git a/web/src/components/NarrowStack.tsx b/client/electron/src/components/NarrowStack.tsx
similarity index 95%
rename from web/src/components/NarrowStack.tsx
rename to client/electron/src/components/NarrowStack.tsx
index df47710..75cbbb1 100644
--- a/web/src/components/NarrowStack.tsx
+++ b/client/electron/src/components/NarrowStack.tsx
@@ -74,7 +74,7 @@ export default function NarrowStack({
 
       {mounted && (
         <div
-          className={`absolute inset-0 z-10 flex bg-white shadow-2xl transition-transform duration-200 ease-out motion-reduce:transition-none ${
+          className={`absolute inset-0 z-10 flex bg-white border-l border-gray-200 shadow-2xl transition-transform duration-200 ease-out motion-reduce:transition-none ${
             entered ? 'translate-x-0' : 'translate-x-full'
           }`}
         >
diff --git a/web/src/components/PermissionChip.tsx b/client/electron/src/components/PermissionChip.tsx
similarity index 98%
rename from web/src/components/PermissionChip.tsx
rename to client/electron/src/components/PermissionChip.tsx
index 2e1799c..9351752 100644
--- a/web/src/components/PermissionChip.tsx
+++ b/client/electron/src/components/PermissionChip.tsx
@@ -55,7 +55,7 @@ export default function PermissionChip({ mode, enforcement, compact }: Permissio
     ? 'bg-blue-50 text-blue-700 border-blue-200'
     : normalized === 'full'
       ? 'bg-amber-50 text-amber-700 border-amber-200'
-      : 'bg-emerald-50 text-emerald-700 border-emerald-200';
+      : 'bg-green-50 text-green-700 border-green-200';
 
   const hint = permissionModeHint(normalized, enforcement);
   const label = MODE_LABEL[normalized] ?? normalized;
diff --git a/web/src/components/PermissionList.tsx b/client/electron/src/components/PermissionList.tsx
similarity index 99%
rename from web/src/components/PermissionList.tsx
rename to client/electron/src/components/PermissionList.tsx
index 30cd0fa..f441f76 100644
--- a/web/src/components/PermissionList.tsx
+++ b/client/electron/src/components/PermissionList.tsx
@@ -54,7 +54,7 @@ export default function PermissionList() {
   };
 
   return (
-    <div className="w-full md:w-[340px] shrink-0 border-r border-gray-200 bg-white flex flex-col min-w-0">
+    <div className="w-full lg:w-[340px] shrink-0 border-r border-gray-200 bg-white flex flex-col min-w-0">
       <div className="px-4 py-3 border-b border-gray-200 flex items-center gap-1">
         <h2 className="text-sm font-semibold text-gray-800">授权</h2>
         {pendingTotal > 0 ? (
diff --git a/web/src/components/QuotaPanel.tsx b/client/electron/src/components/QuotaPanel.tsx
similarity index 100%
rename from web/src/components/QuotaPanel.tsx
rename to client/electron/src/components/QuotaPanel.tsx
diff --git a/web/src/components/SetupPage.tsx b/client/electron/src/components/SetupPage.tsx
similarity index 100%
rename from web/src/components/SetupPage.tsx
rename to client/electron/src/components/SetupPage.tsx
diff --git a/web/src/components/Sidebar.tsx b/client/electron/src/components/Sidebar.tsx
similarity index 96%
rename from web/src/components/Sidebar.tsx
rename to client/electron/src/components/Sidebar.tsx
index a545603..010a51d 100644
--- a/web/src/components/Sidebar.tsx
+++ b/client/electron/src/components/Sidebar.tsx
@@ -85,7 +85,7 @@ export default function Sidebar() {
                 <span
                   className={`absolute top-0.5 right-1 min-w-[15px] h-[15px] px-1 rounded-full text-[9px] font-bold flex items-center justify-center ${
                     mode === 'inbox'
-                      ? 'bg-red-500 text-white'
+                      ? 'bg-red-600 text-white'
                       : mode === 'permissions'
                       ? // 待决策的授权用橙色：它跟未读不是一类紧急 ——
                         // 未读是「有内容没看」，待决策是「有 Agent 卡在那儿等我」
@@ -106,7 +106,7 @@ export default function Sidebar() {
         onClick={() => startCompose()}
         title="新建邮件"
         className={`w-12 h-12 rounded-lg flex flex-col items-center justify-center gap-0.5 text-white transition-colors ${
-          composing ? 'bg-blue-500 ring-2 ring-blue-300' : 'bg-blue-600 hover:bg-blue-500'
+          composing ? 'bg-blue-700 ring-2 ring-blue-300' : 'bg-blue-600 hover:bg-blue-700'
         }`}
       >
         <ComposeIcon />
@@ -119,7 +119,7 @@ export default function Sidebar() {
           title={`${user?.display_name || user?.username}（点击管理账号）`}
           className={`relative w-9 h-9 rounded-full flex items-center justify-center text-[11px] font-semibold transition-colors ${
             viewMode === 'account' && !composing
-              ? 'bg-blue-500 text-white'
+              ? 'bg-blue-600 text-white'
               : 'bg-chrome-700 text-chrome-200 hover:bg-chrome-600'
           }`}
         >
diff --git a/web/src/components/ThemePicker.tsx b/client/electron/src/components/ThemePicker.tsx
similarity index 100%
rename from web/src/components/ThemePicker.tsx
rename to client/electron/src/components/ThemePicker.tsx
diff --git a/web/src/components/ThreadView.tsx b/client/electron/src/components/ThreadView.tsx
similarity index 99%
rename from web/src/components/ThreadView.tsx
rename to client/electron/src/components/ThreadView.tsx
index 9c5bdea..4404755 100644
--- a/web/src/components/ThreadView.tsx
+++ b/client/electron/src/components/ThreadView.tsx
@@ -253,7 +253,7 @@ function Node({
           <span className="text-xs font-mono text-gray-500 truncate">{node.to_name}</span>
           <div className="flex-1" />
           {isForward && (
-            <span className="px-1 py-0.5 rounded bg-purple-100 text-purple-700 text-[9px]">
+            <span className="px-1 py-0.5 rounded bg-blue-100 text-blue-700 text-[9px]">
               转发
             </span>
           )}
diff --git a/web/src/components/WorkCard.tsx b/client/electron/src/components/WorkCard.tsx
similarity index 98%
rename from web/src/components/WorkCard.tsx
rename to client/electron/src/components/WorkCard.tsx
index d6eee5b..164fad4 100644
--- a/web/src/components/WorkCard.tsx
+++ b/client/electron/src/components/WorkCard.tsx
@@ -55,7 +55,7 @@ export function WorkCard({
           <span className="text-xs font-semibold text-gray-900 truncate">{c.agent_name}</span>
           <span className="text-[10px] text-gray-400 font-mono truncate">{c.path}</span>
           {c.unread_count > 0 && (
-            <span className="ml-auto shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-500 text-white text-[9px] font-bold flex items-center justify-center">
+            <span className="ml-auto shrink-0 min-w-[16px] h-4 px-1 rounded-full bg-blue-600 text-white text-[9px] font-bold flex items-center justify-center">
               {c.unread_count}
             </span>
           )}
diff --git a/web/src/components/icons.tsx b/client/electron/src/components/icons.tsx
similarity index 100%
rename from web/src/components/icons.tsx
rename to client/electron/src/components/icons.tsx
diff --git a/web/src/hooks/useIsNarrow.ts b/client/electron/src/hooks/useIsNarrow.ts
similarity index 72%
rename from web/src/hooks/useIsNarrow.ts
rename to client/electron/src/hooks/useIsNarrow.ts
index 43d0e12..d54aab2 100644
--- a/web/src/hooks/useIsNarrow.ts
+++ b/client/electron/src/hooks/useIsNarrow.ts
@@ -3,13 +3,14 @@ import { useEffect, useState } from 'react';
 /**
  * 窄屏断点。
  *
- * 三栏布局需要 60（导航）+ 320（列表）+ 约 400（详情）≈ 780px 才不挤，
- * 因此以 768px 为界：以下只显示单栏。
+ * 三栏布局需要 60（导航）+ 320（列表）+ 至少 520（详情）≈ 900px；
+ * 还要给滚动条、长地址和触摸留余量，因此与 Tailwind 的 lg 断点统一：
+ * 1024px 以下（含常见 768/820px 竖屏平板）都使用单栏。
  *
  * 用 matchMedia 而不是监听 resize：后者每变化一像素都触发，还得自己节流；
  * matchMedia 只在跨过阈值时回调一次。
  */
-const NARROW_QUERY = '(max-width: 767px)';
+export const NARROW_QUERY = '(max-width: 1023px)';
 
 export function useIsNarrow(): boolean {
   const [narrow, setNarrow] = useState(() =>
diff --git a/web/src/index.css b/client/electron/src/index.css
similarity index 82%
rename from web/src/index.css
rename to client/electron/src/index.css
index 03702ea..945e0ef 100644
--- a/web/src/index.css
+++ b/client/electron/src/index.css
@@ -40,7 +40,8 @@
   --c-gray-100: 243 244 246;
   --c-gray-200: 229 231 235;
   --c-gray-300: 209 213 219;
-  --c-gray-400: 156 163 175;
+  /* 最小字号与 placeholder 也会使用这一档；在白底上保持至少 4.5:1。 */
+  --c-gray-400: 107 114 128;
   --c-gray-500: 107 114 128;
   --c-gray-600: 75 85 99;
   --c-gray-700: 55 65 81;
@@ -340,10 +341,21 @@
 }
 
 @layer base {
+  :root {
+    /* main.tsx 会用 Visual Viewport 覆盖；这里保证脚本执行前也有正确高度。 */
+    --app-height: 100vh;
+  }
+  @supports (height: 100dvh) {
+    :root {
+      --app-height: 100dvh;
+    }
+  }
   html, body, #root {
-    height: 100%;
+    height: var(--app-height);
+    min-height: 0;
   }
   body {
+    overflow: hidden;
     font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", "PingFang SC",
       "Hiragino Sans GB", "Microsoft YaHei", sans-serif;
     /*
@@ -353,6 +365,63 @@
     background-color: rgb(var(--c-gray-50));
     color: rgb(var(--c-gray-900));
   }
+
+  /* 统一作者样式，避免 Chromium/Electron autofill 在深色卡片上画白底。 */
+  input:not([type='checkbox']):not([type='radio']):not([type='file']),
+  textarea,
+  select {
+    background-color: rgb(var(--c-white));
+    color: rgb(var(--c-gray-900));
+  }
+  input::placeholder,
+  textarea::placeholder {
+    color: rgb(var(--c-gray-400));
+  }
+  input:-webkit-autofill,
+  input:-webkit-autofill:hover,
+  input:-webkit-autofill:focus {
+    -webkit-text-fill-color: rgb(var(--c-gray-900));
+    box-shadow: 0 0 0 1000px rgb(var(--c-white)) inset;
+    transition: background-color 9999s ease-out;
+  }
+}
+
+@layer components {
+  /* react-markdown 的本地排版层；不依赖固定色板的 typography 插件。 */
+  .markdown {
+    color: rgb(var(--c-gray-800));
+    overflow-wrap: anywhere;
+  }
+  .markdown > * + * { margin-top: 0.75rem; }
+  .markdown h1 { font-size: 1.5rem; line-height: 2rem; font-weight: 700; }
+  .markdown h2 { font-size: 1.25rem; line-height: 1.75rem; font-weight: 700; }
+  .markdown h3 { font-size: 1.05rem; line-height: 1.5rem; font-weight: 600; }
+  .markdown ul { list-style: disc; padding-left: 1.35rem; }
+  .markdown ol { list-style: decimal; padding-left: 1.35rem; }
+  .markdown li + li { margin-top: 0.25rem; }
+  .markdown a { color: rgb(var(--c-blue-600)); text-decoration: underline; }
+  .markdown blockquote {
+    border-left: 3px solid rgb(var(--c-gray-300));
+    padding-left: 0.75rem;
+    color: rgb(var(--c-gray-600));
+  }
+  .markdown code {
+    border-radius: 0.25rem;
+    background: rgb(var(--c-gray-100));
+    padding: 0.1rem 0.3rem;
+    font-size: 0.875em;
+  }
+  .markdown pre {
+    overflow-x: auto;
+    border: 1px solid rgb(var(--c-gray-200));
+    border-radius: 0.5rem;
+    background: rgb(var(--c-gray-100));
+    padding: 0.75rem;
+  }
+  .markdown pre code { background: transparent; padding: 0; }
+  .markdown table { width: 100%; border-collapse: collapse; display: block; overflow-x: auto; }
+  .markdown th, .markdown td { border: 1px solid rgb(var(--c-gray-200)); padding: 0.4rem 0.55rem; }
+  .markdown th { background: rgb(var(--c-gray-100)); text-align: left; }
 }
 
 @layer utilities {
@@ -368,7 +437,20 @@
    * 只在窄屏生效：桌面用鼠标，精度足够；而扩大后的命中区在密排的工具栏里
    * 会互相重叠，点一个可能命中隔壁那个。
    */
-  @media (max-width: 767px) {
+  /* 与 useIsNarrow / Tailwind lg 统一：竖屏平板也需要触摸命中区。 */
+  @media (max-width: 1023px) {
+    .safe-frame {
+      padding-top: env(safe-area-inset-top);
+      padding-left: env(safe-area-inset-left);
+      padding-right: env(safe-area-inset-right);
+    }
+    .narrow-nav {
+      padding-left: env(safe-area-inset-left);
+      padding-right: env(safe-area-inset-right);
+    }
+    .form-editing .narrow-nav {
+      display: none;
+    }
     .tap {
       position: relative;
     }
diff --git a/web/src/lib/calendar.ts b/client/electron/src/lib/calendar.ts
similarity index 100%
rename from web/src/lib/calendar.ts
rename to client/electron/src/lib/calendar.ts
diff --git a/web/src/lib/lunar.ts b/client/electron/src/lib/lunar.ts
similarity index 100%
rename from web/src/lib/lunar.ts
rename to client/electron/src/lib/lunar.ts
diff --git a/web/src/lib/mailGroups.ts b/client/electron/src/lib/mailGroups.ts
similarity index 100%
rename from web/src/lib/mailGroups.ts
rename to client/electron/src/lib/mailGroups.ts
diff --git a/web/src/lib/replyTarget.ts b/client/electron/src/lib/replyTarget.ts
similarity index 100%
rename from web/src/lib/replyTarget.ts
rename to client/electron/src/lib/replyTarget.ts
diff --git a/client/electron/src/main.tsx b/client/electron/src/main.tsx
new file mode 100644
index 0000000..4a4d7f1
--- /dev/null
+++ b/client/electron/src/main.tsx
@@ -0,0 +1,44 @@
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+import App from './App';
+import { initTheme } from './stores/themeStore';
+import './index.css';
+
+// 必须在 render 之前：晚一步就会让深色偏好的用户看到一帧白色闪屏。
+// index.html 里还有一段更早的内联脚本处理「JS bundle 到达前」那段空窗，
+// 这里做的是把 store 状态与 DOM 对齐并订阅系统主题变化。
+initTheme();
+
+/**
+ * 用 Visual Viewport 驱动应用高度。
+ *
+ * 手机软键盘通常只缩小「可见视口」，不缩小传统 100%/100vh；如果外壳还按
+ * 布局视口排版，正文和发送按钮就会落到键盘后面。dvh 是 CSS 兜底，这个变量
+ * 处理 iOS WebView 与部分旧 Chromium 对动态视口更新不及时的情况。
+ */
+const syncVisibleViewport = () => {
+  const viewport = window.visualViewport;
+  const height = viewport?.height ?? window.innerHeight;
+  document.documentElement.style.setProperty('--app-height', `${Math.round(height)}px`);
+};
+
+syncVisibleViewport();
+window.addEventListener('resize', syncVisibleViewport, { passive: true });
+window.visualViewport?.addEventListener('resize', syncVisibleViewport, { passive: true });
+window.visualViewport?.addEventListener('scroll', syncVisibleViewport, { passive: true });
+
+// 编辑表单时隐藏窄屏底栏，把有限的键盘上方空间留给正文与操作按钮。
+// focusout 要延后一帧：从一个输入框切到另一个时 activeElement 会短暂回到 body。
+const syncEditingState = () => {
+  const el = document.activeElement;
+  const editing = el instanceof HTMLInputElement || el instanceof HTMLTextAreaElement || el instanceof HTMLSelectElement;
+  document.documentElement.classList.toggle('form-editing', editing);
+};
+document.addEventListener('focusin', syncEditingState);
+document.addEventListener('focusout', () => requestAnimationFrame(syncEditingState));
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>
+);
diff --git a/web/src/stores/authStore.ts b/client/electron/src/stores/authStore.ts
similarity index 100%
rename from web/src/stores/authStore.ts
rename to client/electron/src/stores/authStore.ts
diff --git a/web/src/stores/contactStore.ts b/client/electron/src/stores/contactStore.ts
similarity index 100%
rename from web/src/stores/contactStore.ts
rename to client/electron/src/stores/contactStore.ts
diff --git a/web/src/stores/mailStore.ts b/client/electron/src/stores/mailStore.ts
similarity index 100%
rename from web/src/stores/mailStore.ts
rename to client/electron/src/stores/mailStore.ts
diff --git a/web/src/stores/sessionStore.ts b/client/electron/src/stores/sessionStore.ts
similarity index 100%
rename from web/src/stores/sessionStore.ts
rename to client/electron/src/stores/sessionStore.ts
diff --git a/web/src/stores/themeStore.ts b/client/electron/src/stores/themeStore.ts
similarity index 100%
rename from web/src/stores/themeStore.ts
rename to client/electron/src/stores/themeStore.ts
diff --git a/web/src/stores/uiStore.ts b/client/electron/src/stores/uiStore.ts
similarity index 100%
rename from web/src/stores/uiStore.ts
rename to client/electron/src/stores/uiStore.ts
diff --git a/web/src/types/index.ts b/client/electron/src/types/index.ts
similarity index 100%
rename from web/src/types/index.ts
rename to client/electron/src/types/index.ts
diff --git a/web/src/types/lunar-javascript.d.ts b/client/electron/src/types/lunar-javascript.d.ts
similarity index 100%
rename from web/src/types/lunar-javascript.d.ts
rename to client/electron/src/types/lunar-javascript.d.ts
diff --git a/web/src/vite-env.d.ts b/client/electron/src/vite-env.d.ts
similarity index 100%
rename from web/src/vite-env.d.ts
rename to client/electron/src/vite-env.d.ts
diff --git a/web/tailwind.config.js b/client/electron/tailwind.config.js
similarity index 100%
rename from web/tailwind.config.js
rename to client/electron/tailwind.config.js
diff --git a/web/test/components/AddressInput.test.tsx b/client/electron/test/components/AddressInput.test.tsx
similarity index 100%
rename from web/test/components/AddressInput.test.tsx
rename to client/electron/test/components/AddressInput.test.tsx
diff --git a/web/test/components/BudgetChip.test.tsx b/client/electron/test/components/BudgetChip.test.tsx
similarity index 100%
rename from web/test/components/BudgetChip.test.tsx
rename to client/electron/test/components/BudgetChip.test.tsx
diff --git a/web/test/components/PermissionPanel.test.tsx b/client/electron/test/components/PermissionPanel.test.tsx
similarity index 98%
rename from web/test/components/PermissionPanel.test.tsx
rename to client/electron/test/components/PermissionPanel.test.tsx
index a4a7267..43edbf0 100644
--- a/web/test/components/PermissionPanel.test.tsx
+++ b/client/electron/test/components/PermissionPanel.test.tsx
@@ -194,8 +194,8 @@ describe('PermissionPanel 决策', () => {
       screen.getByRole('button', { name: new RegExp(name) }).className;
 
     // 颜色是唯一的视觉提示：点错一次就放行了一个危险操作
-    expect(cls('允许')).toContain('bg-green-600');
-    expect(cls('approve')).toContain('bg-green-600');
+    expect(cls('允许')).toContain('bg-green-700');
+    expect(cls('approve')).toContain('bg-green-700');
     expect(cls('拒绝')).toContain('text-red-700');
     // 不在同意词表里的一律按「否」处理 —— 宁可让人多看一眼
     expect(cls('算了')).toContain('text-red-700');
diff --git a/web/test/components/calendar.test.tsx b/client/electron/test/components/calendar.test.tsx
similarity index 100%
rename from web/test/components/calendar.test.tsx
rename to client/electron/test/components/calendar.test.tsx
diff --git a/web/test/components/lunar.test.tsx b/client/electron/test/components/lunar.test.tsx
similarity index 100%
rename from web/test/components/lunar.test.tsx
rename to client/electron/test/components/lunar.test.tsx
diff --git a/web/test/components/mailGroups.test.tsx b/client/electron/test/components/mailGroups.test.tsx
similarity index 100%
rename from web/test/components/mailGroups.test.tsx
rename to client/electron/test/components/mailGroups.test.tsx
diff --git a/web/test/components/replyTarget.test.tsx b/client/electron/test/components/replyTarget.test.tsx
similarity index 100%
rename from web/test/components/replyTarget.test.tsx
rename to client/electron/test/components/replyTarget.test.tsx
diff --git a/web/test/components/setup.ts b/client/electron/test/components/setup.ts
similarity index 100%
rename from web/test/components/setup.ts
rename to client/electron/test/components/setup.ts
diff --git a/web/test/manual/README.md b/client/electron/test/manual/README.md
similarity index 100%
rename from web/test/manual/README.md
rename to client/electron/test/manual/README.md
diff --git a/web/test/manual/accent-verify.mjs b/client/electron/test/manual/accent-verify.mjs
similarity index 100%
rename from web/test/manual/accent-verify.mjs
rename to client/electron/test/manual/accent-verify.mjs
diff --git a/web/test/manual/addr-verify.mjs b/client/electron/test/manual/addr-verify.mjs
similarity index 100%
rename from web/test/manual/addr-verify.mjs
rename to client/electron/test/manual/addr-verify.mjs
diff --git a/web/test/manual/inbox-group-verify.mjs b/client/electron/test/manual/inbox-group-verify.mjs
similarity index 99%
rename from web/test/manual/inbox-group-verify.mjs
rename to client/electron/test/manual/inbox-group-verify.mjs
index 78b57e9..3b274f8 100644
--- a/web/test/manual/inbox-group-verify.mjs
+++ b/client/electron/test/manual/inbox-group-verify.mjs
@@ -13,7 +13,7 @@
  * 只有真实渲染才能验的事。
  *
  * 用法：ADMIN_PW=<密码> ADMIN_USER=jianf AGENTMAIL_URL=http://127.0.0.1:8180 \
- *       node web/test/manual/inbox-group-verify.mjs
+ *       node client/electron/test/manual/inbox-group-verify.mjs
  */
 import { openApp, WIDE } from './narrow-probe-helper.mjs';
 
diff --git a/web/test/manual/narrow-probe-helper.mjs b/client/electron/test/manual/narrow-probe-helper.mjs
similarity index 83%
rename from web/test/manual/narrow-probe-helper.mjs
rename to client/electron/test/manual/narrow-probe-helper.mjs
index ffd1394..65e3e49 100644
--- a/web/test/manual/narrow-probe-helper.mjs
+++ b/client/electron/test/manual/narrow-probe-helper.mjs
@@ -9,8 +9,8 @@
  * SVG 而不是导航按钮）只有这样才能发现。
  *
  * 用法：
- *   ADMIN_PW=<密码> node web/test/manual/narrow-verify.mjs
- *   ADMIN_PW=<密码> node web/test/manual/wide-regression.mjs
+ *   ADMIN_PW=<密码> node client/electron/test/manual/narrow-verify.mjs
+ *   ADMIN_PW=<密码> node client/electron/test/manual/wide-regression.mjs
  *
  * 环境变量：
  *   ADMIN_PW        必填，管理员密码
@@ -20,9 +20,22 @@
  */
 const PLAYWRIGHT = process.env.PLAYWRIGHT || '/usr/lib/node_modules/playwright/index.mjs';
 const { chromium } = await import(PLAYWRIGHT);
+const { readFile } = await import('node:fs/promises');
+const { extname, join } = await import('node:path');
 
 const CDP = process.env.CDP_URL || 'http://127.0.0.1:9222';
 const APP = (process.env.AGENTMAIL_URL || 'https://mail.jianfgit.xyz').replace(/\/$/, '');
+const DIST = process.env.AGENTMAIL_DIST?.replace(/\/$/, '');
+const contentTypes = {
+  '.css': 'text/css; charset=utf-8',
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.svg': 'image/svg+xml',
+  '.png': 'image/png',
+  '.webp': 'image/webp',
+  '.woff2': 'font/woff2'
+};
 
 export const PHONE = { width: 390, height: 844 };   // iPhone 14 Pro
 export const SMALL = { width: 320, height: 568 };   // iPhone SE 1 代
@@ -44,6 +57,35 @@ export async function openApp(viewport = PHONE) {
     }
   });
 
+  // 在不替换、不重启现有 Gateway 的前提下验证本次构建：仅把页面壳和静态资源
+  // 从 dist 注入当前标签页，API/SSE 仍由 APP 指向的真实 Gateway 提供。
+  if (DIST) {
+    const appOrigin = new URL(APP).origin;
+    await page.route(`${appOrigin}/**`, async route => {
+      const url = new URL(route.request().url());
+      if (url.pathname.startsWith('/api/')) {
+        await route.continue();
+        return;
+      }
+      const relative = url.pathname === '/' ? 'index.html' : url.pathname.replace(/^\/+/, '');
+      const file = join(DIST, relative);
+      if (!file.startsWith(DIST + '/') && file !== join(DIST, 'index.html')) {
+        await route.abort('blockedbyclient');
+        return;
+      }
+      try {
+        const body = await readFile(file);
+        await route.fulfill({
+          status: 200,
+          body,
+          contentType: contentTypes[extname(file)] || 'application/octet-stream'
+        });
+      } catch {
+        await route.continue();
+      }
+    });
+  }
+
   // 不能用 networkidle：SSE 是一条永不结束的长连接，networkidle 永远不触发
   await page.goto(APP + '/', { waitUntil: 'domcontentloaded', timeout: 30000 });
   await page.waitForTimeout(2500);
diff --git a/web/test/manual/narrow-verify.mjs b/client/electron/test/manual/narrow-verify.mjs
similarity index 98%
rename from web/test/manual/narrow-verify.mjs
rename to client/electron/test/manual/narrow-verify.mjs
index bf75d89..00c99c7 100644
--- a/web/test/manual/narrow-verify.mjs
+++ b/client/electron/test/manual/narrow-verify.mjs
@@ -5,7 +5,7 @@
  * 抽屉盖住底部导航、工具按钮只有 16px 高、看不见却按得动的「归档」、
  * 对话树缩进把卡片压成竖条、对话树没有返回出口。
  *
- * 用法：ADMIN_PW=<密码> node web/test/manual/narrow-verify.mjs
+ * 用法：ADMIN_PW=<密码> node client/electron/test/manual/narrow-verify.mjs
  */
 import {
   openApp,
diff --git a/client/electron/test/manual/responsive-verify.mjs b/client/electron/test/manual/responsive-verify.mjs
new file mode 100644
index 0000000..0108046
--- /dev/null
+++ b/client/electron/test/manual/responsive-verify.mjs
@@ -0,0 +1,221 @@
+import { readFile } from 'node:fs/promises';
+import { extname, join } from 'node:path';
+
+const PLAYWRIGHT = process.env.PLAYWRIGHT || '/usr/lib/node_modules/playwright/index.mjs';
+const { chromium } = await import(PLAYWRIGHT);
+const CDP = process.env.CDP_URL || 'http://127.0.0.1:9222';
+const APP = 'http://127.0.0.1:8180';
+const DIST = process.env.AGENTMAIL_DIST || '/home/program/agentmail/client/electron/dist';
+const types = {
+  '.css': 'text/css; charset=utf-8',
+  '.html': 'text/html; charset=utf-8',
+  '.js': 'text/javascript; charset=utf-8',
+  '.json': 'application/json; charset=utf-8',
+  '.svg': 'image/svg+xml',
+  '.png': 'image/png',
+  '.woff2': 'font/woff2'
+};
+
+const user = {
+  user_id: 'u-test', username: 'tester', display_name: '测试用户', role: 'admin',
+  status: 'active', allowed_agents: [], allowed_paths: [], created_at: '2025-01-01T00:00:00Z'
+};
+const mail = {
+  mail_id: 'm-test', session_id: 's-test', parent_mail_id: null,
+  from_name: 'deepseekharness', from_workspace: 'deepseekharness', to_name: 'tester', to_workspace: '',
+  cc_list: [], subject: '响应式布局测试邮件', body: '## 正文\n\n用于浏览器布局验证。', body_preview: '用于浏览器布局验证。',
+  mail_type: 'normal', permission_options: null, permission_result: null, status: 'unread',
+  created_at: '2025-01-02T03:04:00Z', session_alias: 'layout-test', session_workspace: '/program/test',
+  attachments: [], from_human: false, to_human: true
+};
+const contact = {
+  session_id: 's-test', agent_name: 'deepseekharness', path: '/program/test', session_alias: 'layout-test',
+  address: 'deepseekharness@/program/test.layout-test', status: 'active', mail_count: 1, unread_count: 1,
+  last_activity: '2025-01-02T03:04:00Z', subject: '响应式布局测试邮件', max_rounds: 0, used_rounds: 0,
+  last_from: 'deepseekharness', last_preview: '用于浏览器布局验证。'
+};
+
+function json(route, body, status = 200) {
+  return route.fulfill({ status, contentType: 'application/json; charset=utf-8', body: JSON.stringify(body) });
+}
+
+async function mockApi(route, url) {
+  const p = url.pathname.replace(/^\/api\/v1/, '');
+  if (p === '/auth/me') return json(route, { user });
+  if (p === '/setup/status') return json(route, { needs_setup: false });
+  if (p === '/me/mail/inbox') return json(route, { mails: [mail], total: 1 });
+  if (p === '/me/mail/sent') return json(route, { mails: [] });
+  if (p === '/me/sessions') return json(route, { sessions: [] });
+  if (p === '/contacts') return json(route, { contacts: [contact] });
+  if (p === '/contacts/suggest') {
+    return json(route, {
+      kind: 'name', suggestions: ['deepseekharness', 'pi', 'opencode'],
+      candidates: [
+        { alias: 'deepseekharness', source: 'mail', title: '布局测试', unread: 1 },
+        { alias: 'pi', source: 'platform', title: 'Pi' },
+        { alias: 'opencode', source: 'platform', title: 'OpenCode' }
+      ]
+    });
+  }
+  if (p === '/agents') return json(route, { agents: [] });
+  if (p === '/me/keys') return json(route, { keys: [] });
+  if (p === '/admin/users') return json(route, { users: [user] });
+  if (p === '/admin/scopes') return json(route, { agents: [], paths: [] });
+  if (p === '/admin/quotas') return json(route, { quotas: [] });
+  if (p === '/calendar/events') return json(route, { events: [] });
+  if (p === '/events/stream') {
+    return route.fulfill({ status: 200, contentType: 'text/event-stream', body: 'event: connected\ndata: {}\n\n' });
+  }
+  if (p === '/mail/m-test') return json(route, mail);
+  if (p === '/mail/m-test/read') return json(route, { status: 'ok' });
+  if (p === '/mail/m-test/thread') {
+    return json(route, { anchor_mail_id: 'm-test', root_mail_id: 'm-test', anchor_depth: 0, nodes: [], total: 0, hidden: 0, has_more: false, next_offset: 0 });
+  }
+  return json(route, { error: `unmocked ${p}` }, 404);
+}
+
+async function installRoutes(page) {
+  await page.route(`${APP}/**`, async route => {
+    const url = new URL(route.request().url());
+    if (url.pathname.startsWith('/api/v1/')) return mockApi(route, url);
+    const rel = url.pathname === '/' ? 'index.html' : url.pathname.replace(/^\/+/, '');
+    const file = join(DIST, rel);
+    try {
+      const body = await readFile(file);
+      return route.fulfill({ status: 200, body, contentType: types[extname(file)] || 'application/octet-stream' });
+    } catch {
+      return route.fulfill({ status: 404, body: 'not found' });
+    }
+  });
+}
+
+const browser = await chromium.connectOverCDP(CDP);
+const context = browser.contexts()[0];
+const failures = [];
+let passed = 0;
+function check(name, ok, detail = '') {
+  console.log(`  ${ok ? '通过' : '失败'}  ${name}${detail ? ` — ${detail}` : ''}`);
+  if (ok) passed++; else failures.push(name);
+}
+
+async function open(viewport) {
+  const page = await context.newPage();
+  await page.setViewportSize(viewport);
+  await installRoutes(page);
+  await page.goto(`${APP}/`, { waitUntil: 'domcontentloaded' });
+  await page.waitForSelector('text=收件箱');
+  await page.waitForTimeout(250);
+  return page;
+}
+
+async function openCompose(page, narrow) {
+  if (narrow) await page.locator('nav button').filter({ hasText: '新建' }).click();
+  else await page.locator('button[title="新建邮件"]').click();
+  await page.waitForSelector('textarea');
+}
+
+async function measureCompose(page, name, narrow) {
+  await openCompose(page, narrow);
+  const m = await page.evaluate(() => {
+    const ta = document.querySelector('textarea');
+    const attach = [...document.querySelectorAll('button')].find(b => b.textContent?.includes('添加附件'));
+    const send = [...document.querySelectorAll('button')].find(b => b.textContent?.trim() === '发送');
+    const root = ta?.closest('.overflow-y-auto, .lg\\:overflow-hidden');
+    attach?.scrollIntoView({ block: 'center' });
+    const tr = ta?.getBoundingClientRect();
+    const ar = attach?.getBoundingClientRect();
+    const sr = send?.parentElement?.getBoundingClientRect();
+    return {
+      textareaH: tr?.height || 0,
+      textareaBottom: tr?.bottom || 0,
+      attachmentTop: ar?.top || 0,
+      attachmentBottom: ar?.bottom || 0,
+      footerTop: sr?.top || 0,
+      separated: !!tr && !!ar && ar.top >= tr.bottom - 1,
+      footerSeparated: !!ar && !!sr && sr.top >= ar.bottom - 1,
+      docW: document.documentElement.clientWidth,
+      scrollW: document.documentElement.scrollWidth,
+      composeScrollH: root?.scrollHeight || 0,
+      composeClientH: root?.clientHeight || 0
+    };
+  });
+  check(
+    narrow ? `${name} 正文不少于 12rem` : `${name} 桌面正文占据剩余高度`,
+    m.textareaH >= (narrow ? 191 : 120),
+    `${Math.round(m.textareaH)}px`
+  );
+  check(
+    `${name} 附件不遮挡正文`,
+    m.separated,
+    `正文底=${Math.round(m.textareaBottom)} 附件顶=${Math.round(m.attachmentTop)}`
+  );
+  check(
+    `${name} 操作栏不遮挡附件`,
+    m.footerSeparated,
+    `附件底=${Math.round(m.attachmentBottom)} 操作栏顶=${Math.round(m.footerTop)}`
+  );
+  check(`${name} 无横向溢出`, m.scrollW <= m.docW, `${m.docW}/${m.scrollW}`);
+  return m;
+}
+
+for (const viewport of [
+  { width: 320, height: 568 }, { width: 390, height: 844 },
+  { width: 768, height: 900 }, { width: 820, height: 980 }
+]) {
+  const page = await open(viewport);
+  const label = `${viewport.width}x${viewport.height}`;
+  check(`${label} 使用单栏底部导航`, await page.locator('nav.narrow-nav').isVisible());
+  await measureCompose(page, label, true);
+  await page.close();
+}
+
+{
+  const page = await open({ width: 390, height: 420 });
+  const m = await measureCompose(page, '390x420 键盘态', true);
+  check('键盘态写信页可纵向滚动', m.composeScrollH > m.composeClientH, `${m.composeClientH}/${m.composeScrollH}`);
+  await page.locator('textarea').focus();
+  await page.waitForTimeout(50);
+  const navHidden = await page.locator('nav.narrow-nav').evaluate(el => getComputedStyle(el).display === 'none');
+  check('输入时隐藏底部导航', navHidden);
+  const to = page.locator('input[placeholder*="deepseekharness"]').first();
+  await to.fill('d');
+  await page.waitForTimeout(250);
+  const menu = page.locator('div.absolute.z-20').first();
+  const bounds = await menu.evaluate(el => {
+    const r = el.getBoundingClientRect();
+    return { top: r.top, bottom: r.bottom, vh: window.visualViewport?.height || innerHeight };
+  });
+  check('地址补全不越出可视视口', bounds.top >= 0 && bounds.bottom <= bounds.vh + 1, JSON.stringify(bounds));
+  await page.close();
+}
+
+for (const viewport of [{ width: 1024, height: 768 }, { width: 1280, height: 800 }]) {
+  const page = await open(viewport);
+  const label = `${viewport.width}x${viewport.height}`;
+  check(`${label} 使用桌面侧栏`, await page.locator('button[title="新建邮件"]').isVisible());
+  await measureCompose(page, label, false);
+  await page.close();
+}
+
+{
+  const page = await open({ width: 1280, height: 800 });
+  for (const mode of ['light', 'dark']) {
+    await page.evaluate(mode => {
+      localStorage.setItem('agentmail.theme', mode);
+      document.documentElement.classList.toggle('dark', mode === 'dark');
+      document.documentElement.style.colorScheme = mode;
+    }, mode);
+    const colors = await page.evaluate(() => ({
+      body: getComputedStyle(document.body).backgroundColor,
+      card: getComputedStyle(document.querySelector('.bg-white')).backgroundColor,
+      text: getComputedStyle(document.querySelector('.text-gray-900') || document.body).color
+    }));
+    check(`${mode} 主题颜色均已解析`, !Object.values(colors).some(c => c === 'rgba(0, 0, 0, 0)'), JSON.stringify(colors));
+  }
+  await page.close();
+}
+
+console.log(`\n响应式浏览器验收：${passed} 通过，${failures.length} 失败`);
+if (failures.length) console.log(failures.join('\n'));
+await browser.close();
+process.exit(failures.length ? 1 : 0);
diff --git a/web/test/manual/theme-verify.mjs b/client/electron/test/manual/theme-verify.mjs
similarity index 88%
rename from web/test/manual/theme-verify.mjs
rename to client/electron/test/manual/theme-verify.mjs
index 080834f..7b06eb5 100644
--- a/web/test/manual/theme-verify.mjs
+++ b/client/electron/test/manual/theme-verify.mjs
@@ -6,7 +6,7 @@
  *
  * 用法：
  *   ADMIN_USER=jianf ADMIN_PW=... AGENTMAIL_URL=http://127.0.0.1:8180 \
- *     node web/test/manual/theme-verify.mjs
+ *     node client/electron/test/manual/theme-verify.mjs
  */
 import { openApp, WIDE } from './narrow-probe-helper.mjs';
 
@@ -88,7 +88,10 @@ try {
         const r = el.getBoundingClientRect();
         if (r.width < 4 || r.height < 4) continue;
         const cs = getComputedStyle(el);
-        if (cs.visibility === 'hidden' || cs.opacity === '0') continue;
+        if (cs.visibility === 'hidden' || Number(cs.opacity) < 0.75) continue;
+        if (el.matches(':disabled, [aria-disabled="true"]')) continue;
+        // 方向箭头、分隔点与关闭符号是装饰/图标，不按正文文字审计。
+        if (/^[→·×↑↓]+$/.test(text)) continue;
         const fg = parse(cs.color);
         const bg = bgOf(el);
         if (!fg || !bg) continue;
@@ -112,10 +115,9 @@ try {
       return out;
     });
 
-    // 允许少量刻意的低对比装饰（占位符、禁用态）
-    const severe = bad.filter(x => x.ratio < 2.5);
-    check(`${mode}: 无严重低对比文本（< 2.5:1）`, severe.length === 0,
-      severe.slice(0, 4).map(x => `"${x.text}" ${x.ratio}`).join(' | '));
+    // 禁用态与纯图标已在页面端过滤，其余可见文字都应达到自身 AA 阈值。
+    check(`${mode}: 可见文字全部达到 WCAG AA`, bad.length === 0,
+      bad.slice(0, 4).map(x => `"${x.text}" ${x.ratio}/${x.need}`).join(' | '));
     if (bad.length) {
       console.log(`    （${bad.length} 处低于 AA 阈值，最差 ${Math.min(...bad.map(x => x.ratio))}:1）`);
       // 逐条列出来而不只报个数：不知道是哪一处就没法修
@@ -124,11 +126,6 @@ try {
       }
     }
 
-    // 白底白字的典型形态：前景与背景几乎相同
-    const invisible = bad.filter(x => x.ratio < 1.3);
-    check(`${mode}: 没有不可见文本（< 1.3:1）`, invisible.length === 0,
-      invisible.slice(0, 3).map(x => `"${x.text}"`).join(' | '));
-
     await page.screenshot({ path: `/tmp/theme-${mode}.png`, fullPage: false });
   }
 
diff --git a/web/test/manual/ui-sweep.mjs b/client/electron/test/manual/ui-sweep.mjs
similarity index 99%
rename from web/test/manual/ui-sweep.mjs
rename to client/electron/test/manual/ui-sweep.mjs
index 4ac89a8..9aa61df 100644
--- a/web/test/manual/ui-sweep.mjs
+++ b/client/electron/test/manual/ui-sweep.mjs
@@ -33,7 +33,7 @@
  *
  * 用法：
  *   ADMIN_PW=<密码> ADMIN_USER=jianf AGENTMAIL_URL=http://127.0.0.1:8180 \
- *     node web/test/manual/ui-sweep.mjs
+ *     node client/electron/test/manual/ui-sweep.mjs
  */
 import { openApp, WIDE } from './narrow-probe-helper.mjs';
 
diff --git a/web/test/manual/wide-regression.mjs b/client/electron/test/manual/wide-regression.mjs
similarity index 97%
rename from web/test/manual/wide-regression.mjs
rename to client/electron/test/manual/wide-regression.mjs
index dc69c04..7d3214b 100644
--- a/web/test/manual/wide-regression.mjs
+++ b/client/electron/test/manual/wide-regression.mjs
@@ -5,7 +5,7 @@
  *   - `.tap` 的伪元素命中区（桌面密排工具栏里会互相重叠）
  *   - `BackButton`（宽屏列表与详情并排，返回没有意义）
  *
- * 用法：ADMIN_PW=<密码> node web/test/manual/wide-regression.mjs
+ * 用法：ADMIN_PW=<密码> node client/electron/test/manual/wide-regression.mjs
  */
 import { openApp, WIDE } from './narrow-probe-helper.mjs';
 
diff --git a/web/test/markdown-xss.test.mjs b/client/electron/test/markdown-xss.test.mjs
similarity index 100%
rename from web/test/markdown-xss.test.mjs
rename to client/electron/test/markdown-xss.test.mjs
diff --git a/web/test/narrow-layout.test.mjs b/client/electron/test/narrow-layout.test.mjs
similarity index 83%
rename from web/test/narrow-layout.test.mjs
rename to client/electron/test/narrow-layout.test.mjs
index 8ce54b0..81dd5ef 100644
--- a/web/test/narrow-layout.test.mjs
+++ b/client/electron/test/narrow-layout.test.mjs
@@ -36,23 +36,20 @@ check(
   stack.includes('motion-reduce:transition-none')
 );
 
-// 2) 固定宽度的中间栏在窄屏必须让位。
-//    断言的是「w-full + md: 前缀的固定宽度」这个形态，不是某个具体像素值 ——
-//    ContactPanel 的卡片视图用 400px，列表视图用 320px。
+// 2) 手机与竖屏平板统一用单栏；三栏只在 Tailwind lg（1024px）启用。
+const narrowHook = read('../src/hooks/useIsNarrow.ts');
+check('JS 单栏断点与 lg 一致', narrowHook.includes('(max-width: 1023px)'));
 for (const f of ['MailList', 'PermissionList', 'ContactPanel', 'CalendarView']) {
   const src = read(`../src/components/${f}.tsx`);
   const narrowFullWidth = src.includes('w-full');
-  // 固定宽度只能出现在 md: 断点后面；裸 w-[NNNpx] 会在 375px 屏上挤掉详情。
-  // 只看 >=200px 的：min-w-[16px] 之类的徽标尺寸与布局无关
-  // （前置 (?<![-\w]) 排除 min-w- / max-w-，它们是约束不是宽度）。
   const bareFixed = (src.match(/(?<![-\w])w-\[(\d+)px\]/g) || []).filter(m => {
-    const px = Number(m.match(/\d+/)[0]);
-    return px >= 200 && !src.includes('md:' + m);
+    const px = Number(m.match(/\d+/)?.[0] || 0);
+    return px >= 200 && !src.includes('lg:' + m);
   });
   check(
-    `${f} 中间栏窄屏全宽，固定宽度仅在 md: 之后`,
-    narrowFullWidth && bareFixed.length === 0,
-    bareFixed.length ? `裸固定宽度：${bareFixed.join(', ')}` : '缺少 w-full'
+    `${f} 平板单栏全宽，固定宽度仅在 lg 之后`,
+    narrowFullWidth && bareFixed.length === 0 && !/md:w-\[/.test(src),
+    bareFixed.length ? `裸固定宽度：${bareFixed.join(', ')}` : '存在 md 固定栏或缺少 w-full'
   );
 }
 
@@ -102,9 +99,9 @@ check(
 //      .tap 用居中的透明伪元素扩大命中区，视觉尺寸不变。
 const css = read('../src/index.css');
 check(
-  '.tap 提供 44px 触摸命中区且只在窄屏生效',
+  '.tap 提供 44px 触摸命中区且覆盖手机与竖屏平板',
   /\.tap::after/.test(css) && css.includes('min-width: 44px') &&
-    css.includes('min-height: 44px') && /max-width:\s*767px/.test(css)
+    css.includes('min-height: 44px') && /max-width:\s*1023px/.test(css)
 );
 // 详情页那排工具按钮是实测最小的一组（「抄送」只有 20x15）
 const viewSrc = read('../src/components/MailView.tsx');
@@ -159,6 +156,23 @@ for (const f of ['LoginPage', 'SetupPage']) {
   );
 }
 
+// 5.8) 写信页不能靠 flex 把正文压成一行。
+//      软键盘出现时可见高度骤减：顶部字段和底部附件/按钮都是固定内容，原先唯一
+//      可收缩的正文区只有 min-h-0，于是会被压到接近 0。窄屏改为整页可滚，正文
+//      保留明确的最小高度；宽屏仍使用 flex 填满剩余空间。
+check(
+  '写信页窄屏整页可滚，正文有明确最小高度',
+  compose.includes('overflow-y-auto lg:overflow-hidden') &&
+    compose.includes('min-h-[12rem]') &&
+    compose.includes('lg:flex-1')
+);
+check(
+  '写信页附件与操作栏不参与正文压缩',
+  compose.includes('shrink-0 px-4 md:px-6 pb-20 lg:pb-3') &&
+    compose.includes('sticky bottom-0')
+);
+check('根视口使用 100dvh 跟随软键盘', css.includes('@supports (height: 100dvh)'));
+
 // 6) 横向内边距在窄屏收窄（px-6 在 375px 屏上白吃 48px）
 const wide = ['MailView', 'ComposePage', 'ThreadView', 'AccountPage', 'AdminUsersPage'];
 for (const f of wide) {
diff --git a/web/test/theme.test.mjs b/client/electron/test/theme.test.mjs
similarity index 88%
rename from web/test/theme.test.mjs
rename to client/electron/test/theme.test.mjs
index 511c9f6..07f1e28 100644
--- a/web/test/theme.test.mjs
+++ b/client/electron/test/theme.test.mjs
@@ -310,9 +310,9 @@ const sRgb = name => {
 };
 // 代码里真正出现过的「实心底 + 白字」组合
 const solidPairs = [
-  ['blue-600'], ['blue-700'], ['blue-500'],
-  ['red-500'], ['red-600'], ['red-700'],
-  ['green-600'], ['green-700'], ['orange-700']
+  ['blue-600'], ['blue-700'],
+  ['red-600'], ['red-700'],
+  ['green-700'], ['orange-700']
 ];
 const onAccentLight = rgbOf(lightBlock, 'on-accent') ||
   (lightBlock.match(/--c-on-accent:\s*(\d+)\s+(\d+)\s+(\d+)/) || []).slice(1).map(Number);
@@ -320,14 +320,12 @@ const weakButtons = [];
 for (const [name] of solidPairs) {
   const bg = sRgb(name);
   if (!bg) { weakButtons.push(`${name}:缺失`); continue; }
-  // 3:1 是 WCAG 对大号/粗体文字的下限。这些按钮文字是 11–14px 的 font-medium，
-  // 严格说该要 4.5 —— 但 Tailwind 官方 600 档普遍在 3–4.5 之间（green-600 = 3.05），
-  // 收紧到 4.5 就得偏离官方色值。取 3.0 作为门槛并把偏低的记在这里。
+  // 这些按钮文字只有 9–14px，按普通文字执行 WCAG AA 4.5:1。
   const r = contrast(onAccentLight, bg);
-  if (r < 3.0) weakButtons.push(`${name}:${r.toFixed(2)}`);
+  if (r < 4.5) weakButtons.push(`${name}:${r.toFixed(2)}`);
 }
 check(
-  '白字在实心按钮底上达到 3:1',
+  '白字在实心按钮底上达到 4.5:1',
   weakButtons.length === 0,
   weakButtons.join(' ')
 );
@@ -360,5 +358,38 @@ for (const f of chromeFiles) {
 }
 check('框架组件已全部改用 chrome 色阶', slateLeft.length === 0, slateLeft.join(' | '));
 
+// 27) 可逆灰阶不能作为白字实心按钮底。gray-700/800/900 在深色模式下会
+//     被反转成近白色，`bg-gray-900 text-white` 因而只剩约 1:1。
+const componentSources = readdirSync(compDir)
+  .filter(x => x.endsWith('.tsx'))
+  .map(f => [f, readFileSync(join(compDir, f), 'utf8')]);
+const graySolid = componentSources.flatMap(([f, src]) =>
+  (src.match(/(?:bg-gray-(?:700|800|900)[^'"\n]*text-white|text-white[^'"\n]*bg-gray-(?:700|800|900))/g) || [])
+    .map(hit => `${f}:${hit}`)
+);
+check('白字实心控件不使用可逆 gray 底色', graySolid.length === 0, graySolid.slice(0, 4).join(' | '));
+
+// 28) 未映射色族会绕过 CSS 变量主题，浅色值会原样落进深色页面。
+const unmapped = componentSources.flatMap(([f, src]) =>
+  (src.match(/(?:bg|text|border)-(?:emerald|purple)-\d+/g) || []).map(hit => `${f}:${hit}`)
+);
+check('组件未使用未映射的 emerald/purple 色族', unmapped.length === 0, unmapped.slice(0, 6).join(' | '));
+
+// 29) 本地 markdown 层替代未安装 typography 插件时无效的 prose 类。
+const inertProse = componentSources.flatMap(([f, src]) =>
+  (src.match(/\bprose(?:-sm)?\b/g) || []).map(hit => `${f}:${hit}`)
+);
+check('Markdown 内容使用本地 .markdown 排版层', inertProse.length === 0, inertProse.slice(0, 4).join(' | '));
+
+// 30) gray-400 承担 9–12px 元数据与 placeholder，白卡片上也必须达到 4.5:1。
+const lightCard = rgbOf(lightBlock, 'white');
+const lightSecondary = rgbOf(lightBlock, 'gray-400');
+const secondaryContrast = lightCard && lightSecondary ? contrast(lightCard, lightSecondary) : 0;
+check(
+  '浅色 gray-400 在白卡片上达到 4.5:1',
+  secondaryContrast >= 4.5,
+  secondaryContrast.toFixed(2)
+);
+
 console.log(`\n主题：${pass} 通过${fail ? `，${fail} 失败` : ''}`);
 process.exit(fail ? 1 : 0);
diff --git a/web/tsconfig.json b/client/electron/tsconfig.json
similarity index 100%
rename from web/tsconfig.json
rename to client/electron/tsconfig.json
diff --git a/web/vite.config.ts b/client/electron/vite.config.ts
similarity index 100%
rename from web/vite.config.ts
rename to client/electron/vite.config.ts
diff --git a/web/vitest.config.ts b/client/electron/vitest.config.ts
similarity index 84%
rename from web/vitest.config.ts
rename to client/electron/vitest.config.ts
index eb56e7a..35e4437 100644
--- a/web/vitest.config.ts
+++ b/client/electron/vitest.config.ts
@@ -12,6 +12,10 @@ import react from '@vitejs/plugin-react';
  * 它们不需要 DOM，套一层 vitest 只是变慢。
  */
 export default defineConfig({
+  // 测试必须使用含 act() 的 React 开发构建；宿主进程可能继承 NODE_ENV=production。
+  define: {
+    'process.env.NODE_ENV': JSON.stringify('test')
+  },
   plugins: [react()],
   test: {
     include: ['test/components/**/*.test.tsx'],
diff --git a/client/harmony/.gitignore b/client/harmony/.gitignore
new file mode 100644
index 0000000..d2ff201
--- /dev/null
+++ b/client/harmony/.gitignore
@@ -0,0 +1,12 @@
+/node_modules
+/oh_modules
+/local.properties
+/.idea
+**/build
+/.hvigor
+.cxx
+/.clangd
+/.clang-format
+/.clang-tidy
+**/.test
+/.appanalyzer
\ No newline at end of file
diff --git a/client/harmony/AppScope/app.json5 b/client/harmony/AppScope/app.json5
new file mode 100644
index 0000000..7082e60
--- /dev/null
+++ b/client/harmony/AppScope/app.json5
@@ -0,0 +1,10 @@
+{
+  "app": {
+    "bundleName": "com.agentmail.harmony",
+    "vendor": "example",
+    "versionCode": 1000000,
+    "versionName": "1.0.0",
+    "icon": "$media:layered_image",
+    "label": "$string:app_name"
+  }
+}
diff --git a/client/harmony/AppScope/resources/base/element/string.json b/client/harmony/AppScope/resources/base/element/string.json
new file mode 100644
index 0000000..d9e3345
--- /dev/null
+++ b/client/harmony/AppScope/resources/base/element/string.json
@@ -0,0 +1,8 @@
+{
+  "string": [
+    {
+      "name": "app_name",
+      "value": "AgentMailHarmony"
+    }
+  ]
+}
diff --git a/client/harmony/AppScope/resources/base/media/background.png b/client/harmony/AppScope/resources/base/media/background.png
new file mode 100644
index 0000000..e129e5a
Binary files /dev/null and b/client/harmony/AppScope/resources/base/media/background.png differ
diff --git a/client/harmony/AppScope/resources/base/media/foreground.png b/client/harmony/AppScope/resources/base/media/foreground.png
new file mode 100644
index 0000000..e129e5a
Binary files /dev/null and b/client/harmony/AppScope/resources/base/media/foreground.png differ
diff --git a/client/harmony/AppScope/resources/base/media/layered_image.json b/client/harmony/AppScope/resources/base/media/layered_image.json
new file mode 100644
index 0000000..fb49920
--- /dev/null
+++ b/client/harmony/AppScope/resources/base/media/layered_image.json
@@ -0,0 +1,7 @@
+{
+  "layered-image":
+  {
+    "background" : "$media:background",
+    "foreground" : "$media:foreground"
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/build-profile.json5 b/client/harmony/build-profile.json5
new file mode 100644
index 0000000..8ec6fbb
--- /dev/null
+++ b/client/harmony/build-profile.json5
@@ -0,0 +1,42 @@
+{
+  "app": {
+    "signingConfigs": [],
+    "products": [
+      {
+        "name": "default",
+        "signingConfig": "default",
+        "targetSdkVersion": "6.1.0(23)",
+        "compatibleSdkVersion": "6.1.0(23)",
+        "runtimeOS": "HarmonyOS",
+        "buildOption": {
+          "strictMode": {
+            "caseSensitiveCheck": true,
+            "useNormalizedOHMUrl": true
+          }
+        }
+      }
+    ],
+    "buildModeSet": [
+      {
+        "name": "debug",
+      },
+      {
+        "name": "release"
+      }
+    ]
+  },
+  "modules": [
+    {
+      "name": "entry",
+      "srcPath": "./entry",
+      "targets": [
+        {
+          "name": "default",
+          "applyToProducts": [
+            "default"
+          ]
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/code-linter.json5 b/client/harmony/code-linter.json5
new file mode 100644
index 0000000..073990f
--- /dev/null
+++ b/client/harmony/code-linter.json5
@@ -0,0 +1,32 @@
+{
+  "files": [
+    "**/*.ets"
+  ],
+  "ignore": [
+    "**/src/ohosTest/**/*",
+    "**/src/test/**/*",
+    "**/src/mock/**/*",
+    "**/node_modules/**/*",
+    "**/oh_modules/**/*",
+    "**/build/**/*",
+    "**/.preview/**/*"
+  ],
+  "ruleSet": [
+    "plugin:@performance/recommended",
+    "plugin:@typescript-eslint/recommended"
+  ],
+  "rules": {
+    "@security/no-unsafe-aes": "error",
+    "@security/no-unsafe-hash": "error",
+    "@security/no-unsafe-mac": "warn",
+    "@security/no-unsafe-dh": "error",
+    "@security/no-unsafe-dsa": "error",
+    "@security/no-unsafe-ecdsa": "error",
+    "@security/no-unsafe-rsa-encrypt": "error",
+    "@security/no-unsafe-rsa-sign": "error",
+    "@security/no-unsafe-rsa-key": "error",
+    "@security/no-unsafe-dsa-key": "error",
+    "@security/no-unsafe-dh-key": "error",
+    "@security/no-unsafe-3des": "error"
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/.gitignore b/client/harmony/entry/.gitignore
new file mode 100644
index 0000000..e2713a2
--- /dev/null
+++ b/client/harmony/entry/.gitignore
@@ -0,0 +1,6 @@
+/node_modules
+/oh_modules
+/.preview
+/build
+/.cxx
+/.test
\ No newline at end of file
diff --git a/client/harmony/entry/build-profile.json5 b/client/harmony/entry/build-profile.json5
new file mode 100644
index 0000000..6bd6457
--- /dev/null
+++ b/client/harmony/entry/build-profile.json5
@@ -0,0 +1,33 @@
+{
+  "apiType": "stageMode",
+  "buildOption": {
+    "resOptions": {
+      "copyCodeResource": {
+        "enable": false
+      }
+    }
+  },
+  "buildOptionSet": [
+    {
+      "name": "release",
+      "arkOptions": {
+        "obfuscation": {
+          "ruleOptions": {
+            "enable": false,
+            "files": [
+              "./obfuscation-rules.txt"
+            ]
+          }
+        }
+      }
+    },
+  ],
+  "targets": [
+    {
+      "name": "default"
+    },
+    {
+      "name": "ohosTest",
+    }
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/entry/hvigorfile.ts b/client/harmony/entry/hvigorfile.ts
new file mode 100644
index 0000000..52c2861
--- /dev/null
+++ b/client/harmony/entry/hvigorfile.ts
@@ -0,0 +1,7 @@
+// @ts-nocheck – Template file, only used when copied into a project directory
+import { hapTasks } from '@ohos/hvigor-ohos-plugin';
+
+export default {
+  system: hapTasks /* Built-in plugin of Hvigor. It cannot be modified. */,
+  plugins: [] /* Custom plugin to extend the functionality of Hvigor. */,
+};
diff --git a/client/harmony/entry/obfuscation-rules.txt b/client/harmony/entry/obfuscation-rules.txt
new file mode 100644
index 0000000..ded9d40
--- /dev/null
+++ b/client/harmony/entry/obfuscation-rules.txt
@@ -0,0 +1,20 @@
+# Define project specific obfuscation rules here.
+# You can include the obfuscation configuration files in the current module's build-profile.json5.
+
+# Obfuscation options:
+# -disable-obfuscation: disable all obfuscations
+# -enable-property-obfuscation: obfuscate the property names
+# -enable-toplevel-obfuscation: obfuscate the names in the global scope
+# -compact: remove unnecessary blank spaces and all line feeds
+# -remove-log: remove all console.* statements
+# -print-namecache: print the name cache that contains the mapping from the old names to new names
+# -apply-namecache: reuse the given cache file
+
+# Keep options:
+# -keep-property-name: specifies property names that you want to keep
+# -keep-global-name: specifies names that you want to keep in the global scope
+
+-enable-property-obfuscation
+-enable-toplevel-obfuscation
+-enable-filename-obfuscation
+-enable-export-obfuscation
\ No newline at end of file
diff --git a/client/harmony/entry/oh-package.json5 b/client/harmony/entry/oh-package.json5
new file mode 100644
index 0000000..248c3b7
--- /dev/null
+++ b/client/harmony/entry/oh-package.json5
@@ -0,0 +1,10 @@
+{
+  "name": "entry",
+  "version": "1.0.0",
+  "description": "Please describe the basic information.",
+  "main": "",
+  "author": "",
+  "license": "",
+  "dependencies": {}
+}
+
diff --git a/client/harmony/entry/src/main/ets/api/AccountManager.ets b/client/harmony/entry/src/main/ets/api/AccountManager.ets
new file mode 100644
index 0000000..e4a5e82
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/api/AccountManager.ets
@@ -0,0 +1,191 @@
+/*
+ * AgentMail 鸿蒙客户端 — 多账号管理器
+ * 支持多账号存储、切换、删除
+ * 每个账号存储: server, username, token, displayName
+ */
+import { preferences } from '@kit.ArkData';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+
+const DOMAIN = 0x0001;
+const TAG = 'AccountManager';
+const PREF_NAME = 'agentmail_accounts';
+const KEY_ACCOUNTS = 'accounts_json';
+const KEY_ACTIVE = 'active_account_id';
+
+/** 单个账号信息 */
+export class AccountInfo {
+  id: string = '';
+  server: string = '';
+  username: string = '';
+  token: string = '';
+  displayName: string = '';
+  createdAt: number = 0;
+}
+
+export class AccountManager {
+  private static instance: AccountManager | null = null;
+  private context: Context;
+  private accounts: AccountInfo[] = [];
+  private activeId: string = '';
+  private loaded: boolean = false;
+
+  static getInstance(context: Context): AccountManager {
+    if (AccountManager.instance === null || AccountManager.instance.context !== context) {
+      AccountManager.instance = new AccountManager(context);
+    }
+    return AccountManager.instance;
+  }
+
+  private constructor(context: Context) {
+    this.context = context;
+  }
+
+  /** 从 preferences 加载账号列表 */
+  async load(): Promise<void> {
+    if (this.loaded) {
+      return;
+    }
+    try {
+      const pref = await preferences.getPreferences(this.context, PREF_NAME);
+      const accountsJson: string = pref.getSync(KEY_ACCOUNTS, '[]') as string;
+      this.accounts = JSON.parse(accountsJson) as AccountInfo[];
+      this.activeId = pref.getSync(KEY_ACTIVE, '') as string;
+      // 如果有账号但没有活跃账号，默认选第一个
+      if (this.accounts.length > 0 && this.activeId.length === 0) {
+        this.activeId = this.accounts[0].id;
+      }
+      hilog.info(DOMAIN, TAG, 'loaded %{public}d accounts, active: %{public}s', this.accounts.length, this.activeId);
+    } catch (e) {
+      this.accounts = [];
+      this.activeId = '';
+    }
+    this.loaded = true;
+  }
+
+  /** 持久化账号列表 */
+  private async persist(): Promise<void> {
+    try {
+      const pref = await preferences.getPreferences(this.context, PREF_NAME);
+      pref.putSync(KEY_ACCOUNTS, JSON.stringify(this.accounts));
+      pref.putSync(KEY_ACTIVE, this.activeId);
+      await pref.flush();
+    } catch (e) {
+      hilog.error(DOMAIN, TAG, 'persist failed');
+    }
+  }
+
+  /** 获取所有账号。返回副本，避免页面直接改动内部持久化数组。 */
+  getAccounts(): AccountInfo[] {
+    return this.accounts.slice();
+  }
+
+  /** 获取当前活跃账号 */
+  getActiveAccount(): AccountInfo | null {
+    for (let i = 0; i < this.accounts.length; i++) {
+      if (this.accounts[i].id === this.activeId) {
+        return this.accounts[i];
+      }
+    }
+    if (this.accounts.length > 0) {
+      return this.accounts[0];
+    }
+    return null;
+  }
+
+  /** 获取当前活跃账号 ID */
+  getActiveId(): string {
+    return this.activeId;
+  }
+
+  /** 按 ID 获取账号；路由携带来源账号时使用。 */
+  getAccount(accountId: string): AccountInfo | null {
+    for (let i = 0; i < this.accounts.length; i++) {
+      if (this.accounts[i].id === accountId) {
+        return this.accounts[i];
+      }
+    }
+    return null;
+  }
+
+  /** 添加新账号 */
+  async addAccount(server: string, username: string, token: string, displayName: string): Promise<AccountInfo> {
+    const account: AccountInfo = new AccountInfo();
+    account.id = this.generateId();
+    account.server = server;
+    account.username = username;
+    account.token = token;
+    account.displayName = displayName.length > 0 ? displayName : username;
+    account.createdAt = Date.now();
+
+    this.accounts.push(account);
+    // 如果是第一个账号，自动设为活跃
+    if (this.accounts.length === 1) {
+      this.activeId = account.id;
+    }
+    await this.persist();
+    hilog.info(DOMAIN, TAG, 'added account: %{public}s', account.username);
+    return account;
+  }
+
+  /** 删除账号 */
+  async removeAccount(accountId: string): Promise<boolean> {
+    const idx: number = this.findIndex(accountId);
+    if (idx < 0) {
+      return false;
+    }
+    this.accounts.splice(idx, 1);
+    // 如果删除的是活跃账号，切换到第一个
+    if (this.activeId === accountId) {
+      this.activeId = this.accounts.length > 0 ? this.accounts[0].id : '';
+    }
+    await this.persist();
+    hilog.info(DOMAIN, TAG, 'removed account: %{public}s', accountId);
+    return true;
+  }
+
+  /** 切换活跃账号 */
+  async switchAccount(accountId: string): Promise<boolean> {
+    const idx: number = this.findIndex(accountId);
+    if (idx < 0) {
+      return false;
+    }
+    this.activeId = accountId;
+    await this.persist();
+    hilog.info(DOMAIN, TAG, 'switched to: %{public}s', accountId);
+    return true;
+  }
+
+  /** 更新账号信息（如 token 过期重新登录） */
+  async updateAccount(accountId: string, token: string, displayName: string): Promise<boolean> {
+    const idx: number = this.findIndex(accountId);
+    if (idx < 0) {
+      return false;
+    }
+    this.accounts[idx].token = token;
+    if (displayName.length > 0) {
+      this.accounts[idx].displayName = displayName;
+    }
+    await this.persist();
+    return true;
+  }
+
+  /** 获取账号数量 */
+  getCount(): number {
+    return this.accounts.length;
+  }
+
+  private findIndex(accountId: string): number {
+    for (let i = 0; i < this.accounts.length; i++) {
+      if (this.accounts[i].id === accountId) {
+        return i;
+      }
+    }
+    return -1;
+  }
+
+  private generateId(): string {
+    const now: number = Date.now();
+    const rand: number = Math.floor(Math.random() * 10000);
+    return 'acct_' + now.toString() + '_' + rand.toString();
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/api/ApiClient.ets b/client/harmony/entry/src/main/ets/api/ApiClient.ets
new file mode 100644
index 0000000..5d7bac2
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/api/ApiClient.ets
@@ -0,0 +1,291 @@
+/*
+ * AgentMail 鸿蒙客户端 — 统一 API 客户端
+ * 对应 WebUI src/api/client.ts：base + headers + 错误归一化 + 401 统一回落登录
+ */
+import { http } from '@kit.NetworkKit';
+import { BusinessError } from '@kit.BasicServicesKit';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+import { DEFAULT_API_BASE, PREF_KEY_API_BASE, PREF_KEY_TOKEN } from '../common/Config';
+import { preferences } from '@kit.ArkData';
+
+const DOMAIN = 0x0001;
+const TAG = 'AgentMailClient';
+
+/** 统一错误类型：code = HTTP 状态码，message = 服务端中文文案 */
+export class ApiError extends Error {
+  code: number = 0;
+  message: string = '';
+
+  constructor(code: number, message: string) {
+    super(message);
+    this.code = code;
+    this.message = message;
+  }
+}
+
+/** 空响应 2xx 的占位类型 */
+export class EmptyResult {
+  ok: boolean = true;
+}
+
+/** 请求选项 */
+export class RequestOptions {
+  method: string = 'GET';
+  path: string = '';
+  body: string = '';
+  query: string = '';
+  useKeyAuth: boolean = true;
+}
+
+export class ApiClient {
+  private static instance: ApiClient | null = null;
+  private apiBase: string = DEFAULT_API_BASE;
+  private token: string = '';
+  private context: Context;
+  /** 复用的 HTTP 请求实例：保持 Cookie 会话（登录后跨请求有效） */
+  private httpRequest: http.HttpRequest | null = null;
+
+  static getInstance(context: Context): ApiClient {
+    if (ApiClient.instance === null || ApiClient.instance.context !== context) {
+      if (ApiClient.instance !== null && ApiClient.instance.context !== context) {
+        // 不同 context 重建（测试环境），否则复用
+      }
+      ApiClient.instance = new ApiClient(context);
+    }
+    return ApiClient.instance;
+  }
+
+  constructor(context: Context) {
+    this.context = context;
+  }
+
+  /** 初始化：从 preferences 读 apiBase 与 token */
+  async init(): Promise<void> {
+    try {
+      const pref = await preferences.getPreferences(this.context, 'agentmail');
+      this.apiBase = pref.getSync(PREF_KEY_API_BASE, DEFAULT_API_BASE) as string;
+      this.token = pref.getSync(PREF_KEY_TOKEN, '') as string;
+    } catch (e) {
+      this.apiBase = DEFAULT_API_BASE;
+      this.token = '';
+    }
+  }
+
+  getBase(): string {
+    return this.apiBase;
+  }
+
+  setBase(base: string): void {
+    this.apiBase = base;
+  }
+
+  getToken(): string {
+    return this.token;
+  }
+
+  setToken(token: string): void {
+    this.token = token;
+  }
+
+  /** 持久化凭证 */
+  async persistToken(token: string): Promise<void> {
+    this.token = token;
+    try {
+      const pref = await preferences.getPreferences(this.context, 'agentmail');
+      pref.putSync(PREF_KEY_TOKEN, token);
+      await pref.flush();
+    } catch (e) {
+      // 持久化失败不阻断登录
+    }
+  }
+
+  async persistBase(base: string): Promise<void> {
+    this.apiBase = base;
+    try {
+      const pref = await preferences.getPreferences(this.context, 'agentmail');
+      pref.putSync(PREF_KEY_API_BASE, base);
+      await pref.flush();
+    } catch (e) {
+      // 忽略
+    }
+  }
+
+  /** 统一请求入口 */
+  async request<T>(opts: RequestOptions): Promise<T> {
+    const url: string = this.apiBase + opts.path + (opts.query.length > 0 ? '?' + opts.query : '');
+    // 复用会话级 http 实例，保住 Cookie（login 后 set-cookie 才能用于后续请求）
+    let httpRequest: http.HttpRequest;
+    if (this.httpRequest === null) {
+      httpRequest = http.createHttp();
+      this.httpRequest = httpRequest;
+    } else {
+      httpRequest = this.httpRequest;
+    }
+
+    try {
+      const header: Record<string, string> = {
+        'Content-Type': 'application/json'
+      };
+      if (this.token.length > 0 && opts.useKeyAuth) {
+        header['Authorization'] = 'Bearer ' + this.token;
+      }
+
+      hilog.info(DOMAIN, TAG, '→ %{public}s %{public}s', opts.method, url);
+      const response = await httpRequest.request(url, {
+        method: opts.method as http.RequestMethod,
+        header: header,
+        extraData: opts.body.length > 0 ? opts.body : undefined,
+        connectTimeout: 15000,
+        readTimeout: 30000
+      });
+
+      const code = response.responseCode;
+      const rawText = response.result as string;
+
+      if (code >= 200 && code < 300) {
+        if (rawText.length === 0) {
+          const empty = new EmptyResult();
+          return empty as T;
+        }
+        return JSON.parse(rawText) as T;
+      }
+
+      // 错误归一化：从服务端 {"error": "..."} 取文案
+      let message: string = 'HTTP ' + code;
+      try {
+        const parsed = JSON.parse(rawText) as Record<string, string>;
+        if (parsed['error'] !== undefined) {
+          message = parsed['error'];
+        }
+      } catch (e) {
+        message = rawText.length > 0 ? rawText : ('HTTP ' + code);
+      }
+
+      if (code === 401) {
+        // 清除本地凭证，交由登录页处理
+        this.clearAuth();
+      }
+
+      throw new ApiError(code, message);
+    } catch (e) {
+      if (e instanceof ApiError) {
+        throw e as ApiError;
+      }
+      const be = e as BusinessError;
+      const msg: string = be.message !== undefined ? be.message : '网络错误';
+      hilog.error(DOMAIN, TAG, '← %{public}s failed: %{public}s', url, msg);
+      throw new ApiError(0, msg);
+    }
+    // 不复用销毁：会话级实例保留 Cookie
+  }
+
+  /** GET 便捷 */
+  async get<T>(path: string, query?: string): Promise<T> {
+    const opts = new RequestOptions();
+    opts.method = 'GET';
+    opts.path = path;
+    opts.query = query ?? '';
+    return this.request<T>(opts);
+  }
+
+  /** POST 便捷（JSON body） */
+  async post<T>(path: string, bodyObj: Object, useKeyAuth?: boolean): Promise<T> {
+    const opts = new RequestOptions();
+    opts.method = 'POST';
+    opts.path = path;
+    opts.body = JSON.stringify(bodyObj);
+    opts.useKeyAuth = useKeyAuth ?? true;
+    return this.request<T>(opts);
+  }
+
+  /** PUT 便捷 */
+  async put<T>(path: string, bodyObj: Object): Promise<T> {
+    const opts = new RequestOptions();
+    opts.method = 'PUT';
+    opts.path = path;
+    opts.body = JSON.stringify(bodyObj);
+    return this.request<T>(opts);
+  }
+
+  /** DELETE 便捷 */
+  async del<T>(path: string): Promise<T> {
+    const opts = new RequestOptions();
+    opts.method = 'DELETE';
+    opts.path = path;
+    return this.request<T>(opts);
+  }
+
+  /** 上传文件（multipart/form-data）→ attachment_id */
+  async uploadFile(path: string, filePath: string, fileName: string): Promise<string> {
+    const url: string = this.apiBase + path;
+    const httpRequest = http.createHttp();
+    try {
+      const header: Record<string, string> = {};
+      const token: string = this.token;
+      if (token.length > 0) {
+        header['Authorization'] = 'Bearer ' + token;
+      }
+
+      const multiFormData: http.MultiFormData = {
+        name: 'file',
+        contentType: 'application/octet-stream',
+        remoteFileName: fileName,
+        filePath: filePath
+      };
+
+      const options: http.HttpRequestOptions = {
+        method: http.RequestMethod.POST,
+        header: header,
+        multiFormDataList: [multiFormData],
+        connectTimeout: 30000,
+        readTimeout: 60000
+      };
+
+      hilog.info(DOMAIN, TAG, '→ UPLOAD %{public}s', url);
+      const response = await httpRequest.request(url, options);
+      const code: number = response.responseCode;
+      const rawText: string = response.result as string;
+
+      if (code >= 200 && code < 300) {
+        // 服务端返回 {"attachment_id": "..."} 或直接返回 id 字符串
+        if (rawText.length === 0) {
+          return '';
+        }
+        try {
+          const parsed = JSON.parse(rawText) as Record<string, string>;
+          if (parsed['attachment_id'] !== undefined) {
+            return parsed['attachment_id'];
+          }
+          if (parsed['id'] !== undefined) {
+            return parsed['id'];
+          }
+        } catch (e) {
+          // 可能直接返回 id 字符串
+        }
+        return rawText;
+      }
+
+      throw new ApiError(code, rawText.length > 0 ? rawText : 'Upload failed');
+    } catch (e) {
+      if (e instanceof ApiError) {
+        throw e;
+      }
+      const be = e as BusinessError;
+      throw new ApiError(0, be.message !== undefined ? be.message : 'Upload error');
+    } finally {
+      httpRequest.destroy();
+    }
+  }
+
+  /** 清除本地认证态（401 时调用） */
+  clearAuth(): void {
+    this.token = '';
+    try {
+      const pref = preferences.getPreferencesSync(this.context, { name: 'agentmail' });
+      pref.putSync(PREF_KEY_TOKEN, '');
+      pref.flush();
+    } catch (e) {
+      // 忽略
+    }
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/api/AuthApi.ets b/client/harmony/entry/src/main/ets/api/AuthApi.ets
new file mode 100644
index 0000000..02c27c5
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/api/AuthApi.ets
@@ -0,0 +1,106 @@
+/*
+ * AgentMail 鸿蒙客户端 — 认证 API
+ * POST /auth/login / logout / GET /auth/me / POST /me/keys
+ */
+import { ApiClient, ApiError } from './ApiClient';
+import { Me, UserKey } from '../model/Models';
+
+/** 登录请求体 */
+export class LoginPayload {
+  username: string = '';
+  password: string = '';
+}
+
+/** 创建密钥请求体 */
+export class CreateKeyPayload {
+  label: string = '';
+  key_type: string = 'permanent';
+  expires_hours: number = 0;
+}
+
+/** 登录响应（含用户） */
+export class MeResponse {
+  user: Me = new Me();
+}
+
+/** 创建密钥响应 */
+export class CreateKeyResponse {
+  key: UserKey = new UserKey();
+}
+
+/** 密钥列表响应 */
+export class KeyListResponse {
+  keys: UserKey[] = [];
+}
+
+/** 空请求体（logout 等无 body 场景） */
+export class EmptyPayload {
+  empty: boolean = true;
+}
+
+export class AuthApi {
+  private client: ApiClient;
+
+  constructor(client: ApiClient) {
+    this.client = client;
+  }
+
+  /** 账号密码登录（Cookie 模式） */
+  async login(username: string, password: string): Promise<Me> {
+    const payload: LoginPayload = new LoginPayload();
+    payload.username = username;
+    payload.password = password;
+    // Cookie 由 http 模块自动管理；此处仍拿回 user
+    const resp = await this.client.post<MeResponse>('/auth/login', payload, false);
+    return resp.user;
+  }
+
+  /** 用户密钥登录（Bearer 模式）：直接用 key 调 /auth/me */
+  async loginWithKey(key: string): Promise<Me> {
+    this.client.setToken(key);
+    try {
+      const resp = await this.client.get<MeResponse>('/auth/me');
+      await this.client.persistToken(key);
+      return resp.user;
+    } catch (e) {
+      this.client.clearAuth();
+      throw e as ApiError;
+    }
+  }
+
+  /** 当前用户 */
+  async me(): Promise<Me> {
+    const resp = await this.client.get<MeResponse>('/auth/me');
+    return resp.user;
+  }
+
+  /** 退出登录 */
+  async logout(): Promise<void> {
+    try {
+      const empty: EmptyPayload = new EmptyPayload();
+      await this.client.post<EmptyPayload>('/auth/logout', empty);
+    } catch (e) {
+      // 忽略退出失败，本地清 token
+    }
+    this.client.clearAuth();
+  }
+
+  /** 创建客户端密钥 */
+  async createKey(label: string): Promise<UserKey> {
+    const payload: CreateKeyPayload = new CreateKeyPayload();
+    payload.label = label;
+    const resp = await this.client.post<CreateKeyResponse>('/me/keys', payload);
+    return resp.key;
+  }
+
+  /** 我的密钥列表 */
+  async listKeys(): Promise<UserKey[]> {
+    const resp = await this.client.get<KeyListResponse>('/me/keys');
+    return resp.keys;
+  }
+
+  /** 吊销密钥 */
+  async revokeKey(keyId: string): Promise<void> {
+    await this.client.del<Object>('/me/keys/' + keyId);
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/api/MailApi.ets b/client/harmony/entry/src/main/ets/api/MailApi.ets
new file mode 100644
index 0000000..bde5532
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/api/MailApi.ets
@@ -0,0 +1,155 @@
+/*
+ * AgentMail 鸿蒙客户端 — 邮件与会话 API
+ * GET /me/inbox, /me/sessions, /me/contacts, /me/mail/{id}, /sessions/{id}/thread
+ * POST /me/mail/send, /me/mail/{id}/forward
+ * PUT /sessions/{id}/permission, /sessions/{id}/alias, /sessions/{id}/budget
+ */
+
+import { ApiClient } from './ApiClient';
+import { MailSummary, Session, Contact, MailDetail, ThreadResponse, AttachmentInfo, SendMailRequest, SendMailResult } from '../model/Models';
+
+/** 收件箱响应 */
+export class InboxResponse {
+  mails: MailSummary[] = [];
+  total: number = 0;
+  unread: number = 0;
+}
+
+/** 会话列表响应 */
+export class SessionListResponse {
+  sessions: Session[] = [];
+  total: number = 0;
+}
+
+/** 联系人列表响应 */
+export class ContactListResponse {
+  contacts: Contact[] = [];
+  total: number = 0;
+}
+
+/** 邮件详情响应 */
+export class MailDetailResponse {
+  mail: MailDetail = new MailDetail();
+}
+
+/** 对话树响应 */
+export class ThreadApiResponse {
+  thread: ThreadResponse = new ThreadResponse();
+}
+
+/** 发信响应 */
+export class SendMailResponse {
+  result: SendMailResult = new SendMailResult();
+}
+
+/** 附件列表响应 */
+export class AttachmentListResponse {
+  attachments: AttachmentInfo[] = [];
+}
+
+/** 地址补全响应 */
+export class AddressSuggestionResponse {
+  suggestions: string[] = [];
+}
+
+/** 改权限请求体 */
+export class PermissionModePayload {
+  permission_mode: string = 'workspace';
+}
+
+/** 改别名请求体 */
+export class AliasPayload {
+  alias: string = '';
+}
+
+/** 改预算请求体 */
+export class BudgetPayload {
+  max_rounds: number = 0;
+}
+
+export class MailApi {
+  private client: ApiClient;
+
+  constructor(client: ApiClient) {
+    this.client = client;
+  }
+
+  /** 收件箱（status + limit） */
+  async inbox(status: string, limit: number): Promise<InboxResponse> {
+    const query: string = 'status=' + status + '&limit=' + limit;
+    return this.client.get<InboxResponse>('/me/mail/inbox', query);
+  }
+
+  /** 会话列表 */
+  async sessions(): Promise<SessionListResponse> {
+    return this.client.get<SessionListResponse>('/me/sessions');
+  }
+
+  /** 联系人列表 */
+  async contacts(): Promise<ContactListResponse> {
+    return this.client.get<ContactListResponse>('/contacts');
+  }
+
+  /** 邮件详情（API 返回裸对象） */
+  async mailDetail(mailId: string): Promise<MailDetail> {
+    return this.client.get<MailDetail>('/mail/' + mailId);
+  }
+
+  /** 对话树 */
+  async thread(mailId: string, dir?: string, limit?: number): Promise<ThreadApiResponse> {
+    let query: string = '';
+    const parts: string[] = [];
+    if (dir !== undefined) {
+      parts.push('dir=' + dir);
+    }
+    if (limit !== undefined) {
+      parts.push('limit=' + limit);
+    }
+    if (parts.length > 0) {
+      query = parts.join('&');
+    }
+    return this.client.get<ThreadApiResponse>('/mail/' + mailId + '/thread', query);
+  }
+
+  /** 发信 */
+  async send(req: SendMailRequest): Promise<SendMailResponse> {
+    return this.client.post<SendMailResponse>('/me/mail/send', req);
+  }
+
+  /** 转发 */
+  async forward(mailId: string, req: SendMailRequest): Promise<SendMailResponse> {
+    return this.client.post<SendMailResponse>('/me/mail/' + mailId + '/forward', req);
+  }
+
+  /** 改权限档位 */
+  async setPermissionMode(sessionId: string, mode: string): Promise<void> {
+    const payload: PermissionModePayload = new PermissionModePayload();
+    payload.permission_mode = mode;
+    await this.client.put<Object>('/sessions/' + sessionId + '/permission', payload);
+  }
+
+  /** 改会话别名 */
+  async setAlias(sessionId: string, alias: string): Promise<void> {
+    const payload: AliasPayload = new AliasPayload();
+    payload.alias = alias;
+    await this.client.put<Object>('/sessions/' + sessionId + '/alias', payload);
+  }
+
+  /** 改预算 */
+  async setBudget(sessionId: string, maxRounds: number): Promise<void> {
+    const payload: BudgetPayload = new BudgetPayload();
+    payload.max_rounds = maxRounds;
+    await this.client.put<Object>('/sessions/' + sessionId + '/budget', payload);
+  }
+
+  /** 归档联系人 */
+  async archiveContact(name: string, path: string): Promise<void> {
+    await this.client.del<Object>('/me/contacts/' + name + '/' + path);
+  }
+
+  /** 上传附件（multipart/form-data，字段名 file）→ attachment_id */
+  async uploadAttachment(filePath: string, fileName: string): Promise<string> {
+    const resp = await this.client.uploadFile('/me/attachments', filePath, fileName);
+    return resp;
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/api/SseService.ets b/client/harmony/entry/src/main/ets/api/SseService.ets
new file mode 100644
index 0000000..b0f0731
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/api/SseService.ets
@@ -0,0 +1,308 @@
+/*
+ * AgentMail 鸿蒙客户端 — SSE 多账号实时推送服务
+ * 每个账号各建一条 SSE 连接（各带自己的 user_key）
+ * AccountManager 维护连接集合，按 accountId 分发事件
+ */
+import { http } from '@kit.NetworkKit';
+import { BusinessError } from '@kit.BasicServicesKit';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+import { AccountManager, AccountInfo } from './AccountManager';
+
+const DOMAIN = 0x0001;
+const TAG = 'SseService';
+
+/** SSE 事件数据 */
+export class SseEvent {
+  type: string = '';
+  data: string = '';
+  accountId: string = '';
+}
+
+/** SSE 回调 */
+export type SseListener = (event: SseEvent) => void;
+
+/** SSE 连接状态 */
+export type SseStatus = 'disconnected' | 'connecting' | 'connected';
+
+/** SSE 状态回调 */
+export type SseStatusListener = (status: SseStatus) => void;
+
+/** 单个账号的 SSE 连接状态（纯数据） */
+export class SseConnection {
+  accountId: string = '';
+  server: string = '';
+  token: string = '';
+  httpRequest: http.HttpRequest | null = null;
+  listeners: SseListener[] = [];
+  status: SseStatus = 'disconnected';
+  reconnectTimer: number = 0;
+  buffer: string = '';
+  connected: boolean = false;
+}
+
+export class SseService {
+  private static instance: SseService | null = null;
+  private connections: Map<string, SseConnection> = new Map();
+  private globalListeners: SseListener[] = [];
+  private globalStatusListeners: SseStatusListener[] = [];
+
+  static getInstance(): SseService {
+    if (SseService.instance === null) {
+      SseService.instance = new SseService();
+    }
+    return SseService.instance;
+  }
+
+  private constructor() {}
+
+  /** 添加全局事件监听（所有账号的事件都会收到） */
+  addListener(listener: SseListener): void {
+    this.globalListeners.push(listener);
+  }
+
+  /** 移除全局事件监听 */
+  removeListener(listener: SseListener): void {
+    const idx: number = this.globalListeners.indexOf(listener);
+    if (idx >= 0) {
+      this.globalListeners.splice(idx, 1);
+    }
+  }
+
+  /** 添加全局状态监听 */
+  addStatusListener(listener: SseStatusListener): void {
+    this.globalStatusListeners.push(listener);
+  }
+
+  /** 移除全局状态监听 */
+  removeStatusListener(listener: SseStatusListener): void {
+    const idx: number = this.globalStatusListeners.indexOf(listener);
+    if (idx >= 0) {
+      this.globalStatusListeners.splice(idx, 1);
+    }
+  }
+
+  /** 为指定账号建立 SSE 连接 */
+  connectForAccount(accountId: string, server: string, token: string): void {
+    let conn: SseConnection | undefined = this.connections.get(accountId);
+    if (conn !== undefined && conn.connected) {
+      hilog.info(DOMAIN, TAG, 'account %{public}s already connected', accountId);
+      return;
+    }
+
+    if (conn === undefined) {
+      conn = new SseConnection();
+      conn.accountId = accountId;
+      this.connections.set(accountId, conn);
+    }
+
+    conn.server = server;
+    conn.token = token;
+    conn.connected = true;
+    this.setConnStatus(conn, 'connecting');
+    this.doConnect(conn);
+  }
+
+  /** 断开指定账号的 SSE 连接 */
+  disconnectAccount(accountId: string): void {
+    const conn: SseConnection | undefined = this.connections.get(accountId);
+    if (conn === undefined) {
+      return;
+    }
+    conn.connected = false;
+    if (conn.reconnectTimer !== 0) {
+      clearTimeout(conn.reconnectTimer);
+      conn.reconnectTimer = 0;
+    }
+    if (conn.httpRequest !== null) {
+      conn.httpRequest.destroy();
+      conn.httpRequest = null;
+    }
+    this.setConnStatus(conn, 'disconnected');
+    this.connections.delete(accountId);
+  }
+
+  /** 断开所有连接 */
+  disconnectAll(): void {
+    const keys: string[] = [];
+    this.connections.forEach((_conn: SseConnection, key: string) => {
+      keys.push(key);
+    });
+    for (let i = 0; i < keys.length; i++) {
+      this.disconnectAccount(keys[i]);
+    }
+  }
+
+  /** 根据 AccountManager 连接所有账号 */
+  async connectAll(acctMgr: AccountManager): Promise<void> {
+    await acctMgr.load();
+    const accounts: AccountInfo[] = acctMgr.getAccounts();
+    for (let i = 0; i < accounts.length; i++) {
+      const acct: AccountInfo = accounts[i];
+      this.connectForAccount(acct.id, acct.server, acct.token);
+    }
+  }
+
+  /** 获取指定账号的连接状态 */
+  getStatusForAccount(accountId: string): SseStatus {
+    const conn: SseConnection | undefined = this.connections.get(accountId);
+    if (conn === undefined) {
+      return 'disconnected';
+    }
+    return conn.status;
+  }
+
+  /** 给指定账号添加事件监听 */
+  addListenerForAccount(accountId: string, listener: SseListener): void {
+    let conn: SseConnection | undefined = this.connections.get(accountId);
+    if (conn === undefined) {
+      conn = new SseConnection();
+      conn.accountId = accountId;
+      this.connections.set(accountId, conn);
+    }
+    conn.listeners.push(listener);
+  }
+
+  /** 移除指定账号的事件监听 */
+  removeListenerForAccount(accountId: string, listener: SseListener): void {
+    const conn: SseConnection | undefined = this.connections.get(accountId);
+    if (conn !== undefined) {
+      const idx: number = conn.listeners.indexOf(listener);
+      if (idx >= 0) {
+        conn.listeners.splice(idx, 1);
+      }
+    }
+  }
+
+  private setConnStatus(conn: SseConnection, status: SseStatus): void {
+    if (conn.status !== status) {
+      conn.status = status;
+      hilog.info(DOMAIN, TAG, 'status[%{public}s]: %{public}s', conn.accountId, status);
+      for (let i = 0; i < this.globalStatusListeners.length; i++) {
+        this.globalStatusListeners[i](status);
+      }
+    }
+  }
+
+  private doConnect(conn: SseConnection): void {
+    if (!conn.connected) {
+      return;
+    }
+
+    const httpRequest = http.createHttp();
+    conn.httpRequest = httpRequest;
+
+    const url: string = conn.server + '/events/stream';
+    const header: Record<string, string> = {};
+    if (conn.token.length > 0) {
+      header['Authorization'] = 'Bearer ' + conn.token;
+    }
+
+    hilog.info(DOMAIN, TAG, 'connecting account %{public}s to %{public}s', conn.accountId, url);
+
+    httpRequest.on('dataReceive', (data: ArrayBuffer) => {
+      const text: string = this.arrayBufferToString(data);
+      conn.buffer += text;
+      this.processBuffer(conn);
+    });
+
+    httpRequest.on('dataEnd', () => {
+      hilog.info(DOMAIN, TAG, 'dataEnd for account %{public}s', conn.accountId);
+      this.setConnStatus(conn, 'disconnected');
+      this.scheduleReconnect(conn);
+    });
+
+    httpRequest.on('headersReceive', (_headers: Object) => {
+      hilog.info(DOMAIN, TAG, 'headers received for account %{public}s', conn.accountId);
+    });
+
+    const options: http.HttpRequestOptions = {
+      method: http.RequestMethod.GET,
+      header: header,
+      connectTimeout: 10000,
+      readTimeout: 0
+    };
+
+    httpRequest.requestInStream(url, options, (err: BusinessError, code: number) => {
+      if (err !== undefined && err !== null) {
+        hilog.error(DOMAIN, TAG, 'requestInStream error account %{public}s: %{public}s', conn.accountId, err.message);
+        this.setConnStatus(conn, 'disconnected');
+        this.scheduleReconnect(conn);
+        return;
+      }
+      hilog.info(DOMAIN, TAG, 'requestInStream code=%{public}d account=%{public}s', code, conn.accountId);
+      if (code === 200) {
+        this.setConnStatus(conn, 'connected');
+      } else {
+        hilog.error(DOMAIN, TAG, 'SSE failed code=%{public}d account=%{public}s', code, conn.accountId);
+        this.setConnStatus(conn, 'disconnected');
+        this.scheduleReconnect(conn);
+      }
+    });
+  }
+
+  private processBuffer(conn: SseConnection): void {
+    const lines: string[] = conn.buffer.split('\n');
+    conn.buffer = lines.pop() ?? '';
+
+    let eventType: string = '';
+    let eventData: string = '';
+
+    for (let i = 0; i < lines.length; i++) {
+      const line: string = lines[i];
+
+      if (line.length === 0) {
+        if (eventType.length > 0 || eventData.length > 0) {
+          const event: SseEvent = new SseEvent();
+          event.type = eventType.length > 0 ? eventType : 'message';
+          event.data = eventData;
+          event.accountId = conn.accountId;
+          this.dispatchEvent(conn, event);
+        }
+        eventType = '';
+        eventData = '';
+      } else if (line.startsWith('event:')) {
+        eventType = line.substring(6).trim();
+      } else if (line.startsWith('data:')) {
+        const newData: string = line.substring(5).trim();
+        if (eventData.length > 0) {
+          eventData += '\n' + newData;
+        } else {
+          eventData = newData;
+        }
+      }
+    }
+  }
+
+  private dispatchEvent(conn: SseConnection, event: SseEvent): void {
+    hilog.info(DOMAIN, TAG, 'event[%{public}s]: %{public}s data: %{public}s', conn.accountId, event.type,
+      event.data.substring(0, 100));
+    // 分发给账号级监听
+    for (let i = 0; i < conn.listeners.length; i++) {
+      conn.listeners[i](event);
+    }
+    // 分发给全局监听
+    for (let i = 0; i < this.globalListeners.length; i++) {
+      this.globalListeners[i](event);
+    }
+  }
+
+  private scheduleReconnect(conn: SseConnection): void {
+    if (!conn.connected) {
+      return;
+    }
+    const timer: number | undefined = setTimeout(() => {
+      conn.reconnectTimer = 0;
+      this.doConnect(conn);
+    }, 3000);
+    conn.reconnectTimer = timer ?? 0;
+  }
+
+  private arrayBufferToString(buffer: ArrayBuffer): string {
+    const uint8Array: Uint8Array = new Uint8Array(buffer);
+    let result: string = '';
+    for (let i = 0; i < uint8Array.length; i++) {
+      result += String.fromCharCode(uint8Array[i]);
+    }
+    return result;
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/common/Config.ets b/client/harmony/entry/src/main/ets/common/Config.ets
new file mode 100644
index 0000000..fc5ffc7
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/common/Config.ets
@@ -0,0 +1,15 @@
+/*
+ * AgentMail 鸿蒙客户端 — 全局配置
+ * apiBase 可运行时修改（设置页/登录页），persist 到 preferences
+ */
+
+/** 默认联调 Gateway（pi 提供，GUI 联调专用） */
+export const DEFAULT_API_BASE: string = 'http://192.168.2.60:8180/api/v1';
+
+/** 模拟器 NAT 访问宿主机地址（备用，若 LAN 直连不通） */
+export const EMULATOR_HOST_BASE: string = 'http://10.0.2.2:8180/api/v1';
+
+/** preferences 存储键 */
+export const PREF_KEY_API_BASE: string = 'api_base';
+export const PREF_KEY_TOKEN: string = 'user_token';
+export const PREF_KEY_USERNAME: string = 'username';
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/entryability/EntryAbility.ets b/client/harmony/entry/src/main/ets/entryability/EntryAbility.ets
new file mode 100644
index 0000000..816d220
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/entryability/EntryAbility.ets
@@ -0,0 +1,63 @@
+/*
+ * Copyright (c) 2026 Huawei Device Co., Ltd.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { AbilityConstant, ConfigurationConstant, UIAbility, Want } from '@kit.AbilityKit';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+import { window } from '@kit.ArkUI';
+
+const DOMAIN = 0x0000;
+
+export default class EntryAbility extends UIAbility {
+  onCreate(want: Want, launchParam: AbilityConstant.LaunchParam): void {
+    try {
+      this.context.getApplicationContext().setColorMode(ConfigurationConstant.ColorMode.COLOR_MODE_NOT_SET);
+    } catch (err) {
+      hilog.error(DOMAIN, 'testTag', 'Failed to set colorMode. Cause: %{public}s', JSON.stringify(err));
+    }
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onCreate');
+  }
+
+  onDestroy(): void {
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onDestroy');
+  }
+
+  onWindowStageCreate(windowStage: window.WindowStage): void {
+    // Main window is created, set main page for this ability
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onWindowStageCreate');
+
+    windowStage.loadContent('pages/LoginPage', (err) => {
+      if (err.code) {
+        hilog.error(DOMAIN, 'testTag', 'Failed to load the content. Cause: %{public}s', JSON.stringify(err));
+        return;
+      }
+      hilog.info(DOMAIN, 'testTag', 'Succeeded in loading the content.');
+    });
+  }
+
+  onWindowStageDestroy(): void {
+    // Main window is destroyed, release UI related resources
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onWindowStageDestroy');
+  }
+
+  onForeground(): void {
+    // Ability has brought to foreground
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onForeground');
+  }
+
+  onBackground(): void {
+    // Ability has back to background
+    hilog.info(DOMAIN, 'testTag', '%{public}s', 'Ability onBackground');
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/entrybackupability/EntryBackupAbility.ets b/client/harmony/entry/src/main/ets/entrybackupability/EntryBackupAbility.ets
new file mode 100644
index 0000000..f81bf43
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/entrybackupability/EntryBackupAbility.ets
@@ -0,0 +1,31 @@
+/*
+ * Copyright (c) 2026 Huawei Device Co., Ltd.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { hilog } from '@kit.PerformanceAnalysisKit';
+import { BackupExtensionAbility, BundleVersion } from '@kit.CoreFileKit';
+
+const DOMAIN = 0x0000;
+
+export default class EntryBackupAbility extends BackupExtensionAbility {
+  async onBackup() {
+    hilog.info(DOMAIN, 'testTag', 'onBackup ok');
+    await Promise.resolve();
+  }
+
+  async onRestore(bundleVersion: BundleVersion) {
+    hilog.info(DOMAIN, 'testTag', 'onRestore ok %{public}s', JSON.stringify(bundleVersion));
+    await Promise.resolve();
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/model/Models.ets b/client/harmony/entry/src/main/ets/model/Models.ets
new file mode 100644
index 0000000..e29481e
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/model/Models.ets
@@ -0,0 +1,178 @@
+/*
+ * AgentMail 鸿蒙客户端 — 领域模型
+ * 与 docs/API.md 字段一一对应（单一事实源）
+ */
+
+/** 当前登录用户 */
+export class Me {
+  user_id: string = '';
+  username: string = '';
+  display_name: string = '';
+  role: string = '';
+}
+
+/** 会话 */
+export class Session {
+  session_id: string = '';
+  session_alias: string = '';
+  from_agent: string = '';
+  subject: string = '';
+  status: string = '';
+  max_rounds: number = 0;
+  used_rounds: number = 0;
+  permission_mode: string = '';
+  permission_enforcement: string = '';
+  created_at: string = '';
+  updated_at: string = '';
+  mail_count: number = 0;
+  unread_count: number = 0;
+}
+
+/** 邮件摘要（收件箱/会话列表用） */
+export class MailSummary {
+  mail_id: string = '';
+  session_id: string = '';
+  from_name: string = '';
+  to_name: string = '';
+  subject: string = '';
+  body_preview: string = '';
+  created_at: string = '';
+  status: string = ''; // unread | read
+  is_read: boolean = true;
+  has_attachments: boolean = false;
+  permission_mode: string = '';
+  /** 客户端聚合字段：服务端不返回，由收件箱按来源账号填充。 */
+  source_account_id: string = '';
+  source_account_name: string = '';
+}
+
+/** 附件元数据 */
+export class AttachmentInfo {
+  attachment_id: string = '';
+  filename: string = '';
+  size: number = 0;
+  content_type: string = '';
+}
+
+/** 邮件详情 */
+export class MailDetail {
+  mail_id: string = '';
+  session_id: string = '';
+  from_name: string = '';
+  to_name: string = '';
+  cc: string[] = [];
+  subject: string = '';
+  body: string = '';
+  created_at: string = '';
+  status: string = '';
+  session_alias: string = '';
+  from_human: boolean = false;
+  to_human: boolean = false;
+  is_read: boolean = true;
+  attachments: AttachmentInfo[] = [];
+  permission_mode: string = '';
+  permission_enforcement: string = '';
+}
+
+/** 对话树节点 */
+export class ThreadNode {
+  mail_id: string = '';
+  parent_mail_id: string = '';
+  depth: number = 0;
+  from_name: string = '';
+  to_name: string = '';
+  subject: string = '';
+  body_preview: string = '';
+  attachment_count: number = 0;
+  detached: boolean = false;
+  parent_hidden: boolean = false;
+}
+
+/** 对话树响应 */
+export class ThreadResponse {
+  anchor_mail_id: string = '';
+  dir: string = '';
+  nodes: ThreadNode[] = [];
+  total: number = 0;
+  hidden: number = 0;
+  has_more_up: boolean = false;
+  has_more_down: boolean = false;
+  next_up: number = 0;
+  next_down: number = 0;
+}
+
+/** 联系人（= 一条三维地址） */
+export class Contact {
+  session_id: string = '';
+  agent_name: string = '';
+  path: string = '';
+  session_alias: string = '';
+  address: string = '';
+  status: string = '';
+  mail_count: number = 0;
+  unread_count: number = 0;
+  last_activity: string = '';
+  subject: string = '';
+  max_rounds: number = 0;
+  used_rounds: number = 0;
+  permission_mode: string = '';
+  permission_enforcement: string = '';
+  last_from: string = '';
+  last_preview: string = '';
+}
+
+/** 权限请求 */
+export class PermissionRequest {
+  mail_id: string = '';
+  session_id: string = '';
+  from_name: string = '';
+  question: string = '';
+  context: string = '';
+  options: string[] = [];
+  created_at: string = '';
+}
+
+/** 用户密钥（token_hint 仅前 8 位） */
+export class UserKey {
+  key_id: string = '';
+  label: string = '';
+  key_type: string = '';
+  token_hint: string = '';
+  status: string = '';
+  created_at: string = '';
+}
+
+/** 地址补全候选 */
+export class AddressSuggestion {
+  value: string = '';
+  kind: string = '';
+}
+
+/** 发信请求体 */
+export class SendMailRequest {
+  to: string = '';
+  cc: string = '';
+  subject: string = '';
+  body: string = '';
+  reply_to: string = '';
+  session_alias: string = '';
+  attachment_ids: string[] = [];
+  max_rounds: number = 0;
+  permission_mode: string = '';
+}
+
+/** 发信响应（含预算） */
+export class SendMailResult {
+  mail_id: string = '';
+  session_id: string = '';
+  session_alias: string = '';
+  budget_used: number = 0;
+  budget_max: number = 0;
+  budget_remaining: number = 0;
+}
+
+/** 登录响应 */
+export class LoginResult {
+  token: string = '';
+  user: Me = new Me();
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/model/RouteParams.ets b/client/harmony/entry/src/main/ets/model/RouteParams.ets
new file mode 100644
index 0000000..f961652
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/model/RouteParams.ets
@@ -0,0 +1,13 @@
+/* AgentMail 页面路由参数：集中声明，避免各页重复定义或使用无类型对象字面量。 */
+
+export interface MailDetailParams {
+  mail_id: string;
+  account_id: string;
+}
+
+export interface ComposeParams {
+  to: string;
+  reply_to: string;
+  session_alias: string;
+  account_id: string;
+}
diff --git a/client/harmony/entry/src/main/ets/pages/ComposePage.ets b/client/harmony/entry/src/main/ets/pages/ComposePage.ets
new file mode 100644
index 0000000..91b4fee
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/ComposePage.ets
@@ -0,0 +1,321 @@
+/*
+ * AgentMail 鸿蒙客户端 — 写邮件页
+ * 收件人 / 主题 / 正文 / 附件选择 / 发送
+ * 路由参数可选: to, reply_to, session_alias
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { MailApi } from '../api/MailApi';
+import { AccountManager, AccountInfo } from '../api/AccountManager';
+import { SendMailRequest } from '../model/Models';
+import { ComposeParams } from '../model/RouteParams';
+import { promptAction } from '@kit.ArkUI';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+import { picker } from '@kit.CoreFileKit';
+
+@Entry
+@Component
+struct ComposePage {
+  @State to: string = '';
+  @State subject: string = '';
+  @State body: string = '';
+  @State replyTo: string = '';
+  @State sessionAlias: string = '';
+  @State attachmentIds: string[] = [];
+  @State attachmentNames: string[] = [];
+  @State sending: boolean = false;
+  @State uploading: boolean = false;
+  @State status: string = '';
+  // 发信账号选择
+  @State accountList: AccountInfo[] = [];
+  @State selectedAccountId: string = '';
+  @State showAccountPicker: boolean = false;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx === undefined) {
+      return;
+    }
+    const params = this.getUIContext().getRouter().getParams() as ComposeParams;
+    const routeAccountId: string = params?.account_id ?? '';
+    this.to = params?.to ?? '';
+    this.replyTo = params?.reply_to ?? '';
+    this.sessionAlias = params?.session_alias ?? '';
+
+    const accountManager: AccountManager = AccountManager.getInstance(ctx);
+    accountManager.load().then(() => {
+      this.accountList = accountManager.getAccounts();
+      let selectedId: string = routeAccountId;
+      if (accountManager.getAccount(selectedId) === null) {
+        const active: AccountInfo | null = accountManager.getActiveAccount();
+        selectedId = active !== null ? active.id : '';
+      }
+      this.selectedAccountId = selectedId;
+    });
+  }
+
+  getSelectedAccount(): AccountInfo | null {
+    for (let i = 0; i < this.accountList.length; i++) {
+      if (this.accountList[i].id === this.selectedAccountId) {
+        return this.accountList[i];
+      }
+    }
+    return null;
+  }
+
+  createSelectedMailApi(ctx: Context): MailApi | null {
+    const account: AccountInfo | null = this.getSelectedAccount();
+    if (account === null) {
+      return null;
+    }
+    const accountClient: ApiClient = new ApiClient(ctx);
+    accountClient.setBase(account.server);
+    accountClient.setToken(account.token);
+    return new MailApi(accountClient);
+  }
+
+  /** 选择附件（通过文件选择器） */
+  async pickAttachment(): Promise<void> {
+    const ctx: Context | undefined = this.getUIContext().getHostContext();
+    if (ctx === undefined || this.uploading) {
+      return;
+    }
+    try {
+      const documentPicker = new picker.DocumentViewPicker(ctx);
+      const result: string[] = await documentPicker.select({
+        maxSelectNumber: 5,
+        fileSuffixFilters: ['*']
+      });
+      if (result.length === 0) {
+        return;
+      }
+
+      const mailApi: MailApi | null = this.createSelectedMailApi(ctx);
+      if (mailApi === null) {
+        promptAction.showToast({ message: '请先选择发信账号' });
+        return;
+      }
+      this.uploading = true;
+      this.status = '上传中…';
+      for (let i = 0; i < result.length; i++) {
+        const fileUri: string = result[i];
+        const nameStart: number = fileUri.lastIndexOf('/');
+        const name: string = nameStart >= 0 ? fileUri.substring(nameStart + 1) : fileUri;
+        try {
+          const attachmentId: string = await mailApi.uploadAttachment(fileUri, name);
+          this.attachmentIds.push(attachmentId);
+          this.attachmentNames.push(name);
+          hilog.info(0x0001, 'Compose', 'uploaded: %{public}s → %{public}s', name, attachmentId);
+        } catch (e) {
+          const apiError = e as ApiError;
+          promptAction.showToast({ message: '上传失败: ' + name + ' - ' + apiError.message });
+        }
+      }
+      this.status = this.attachmentIds.length + ' 个附件已上传';
+    } catch (e) {
+      this.status = '';
+    } finally {
+      this.uploading = false;
+    }
+  }
+
+  /** 移除附件 */
+  removeAttachment(index: number): void {
+    if (index >= 0 && index < this.attachmentIds.length) {
+      this.attachmentIds.splice(index, 1);
+      this.attachmentNames.splice(index, 1);
+    }
+  }
+
+  /** 发送邮件 */
+  async doSend(): Promise<void> {
+    if (this.sending) {
+      return;
+    }
+    if (this.to.length === 0) {
+      promptAction.showToast({ message: '请填写收件人' });
+      return;
+    }
+    if (this.subject.length === 0) {
+      promptAction.showToast({ message: '请填写主题' });
+      return;
+    }
+    const ctx: Context | undefined = this.getUIContext().getHostContext();
+    if (ctx === undefined) {
+      return;
+    }
+    const mailApi: MailApi | null = this.createSelectedMailApi(ctx);
+    if (mailApi === null) {
+      promptAction.showToast({ message: '请先选择发信账号' });
+      return;
+    }
+
+    this.sending = true;
+    try {
+      const request: SendMailRequest = new SendMailRequest();
+      request.to = this.to;
+      request.subject = this.subject;
+      request.body = this.body;
+      if (this.replyTo.length > 0) {
+        request.reply_to = this.replyTo;
+      }
+      if (this.sessionAlias.length > 0) {
+        request.session_alias = this.sessionAlias;
+      }
+      if (this.attachmentIds.length > 0) {
+        request.attachment_ids = this.attachmentIds;
+      }
+      await mailApi.send(request);
+      promptAction.showToast({ message: '✅ 邮件已发送' });
+      this.getUIContext().getRouter().back();
+    } catch (e) {
+      const apiError = e as ApiError;
+      promptAction.showToast({ message: '发送失败: ' + apiError.message });
+    } finally {
+      this.sending = false;
+    }
+  }
+
+  /** 获取选中的账号显示名 */
+  getSelectedAccountName(): string {
+    const account: AccountInfo | null = this.getSelectedAccount();
+    return account !== null ? account.displayName : '选择账号';
+  }
+
+  build() {
+    Column() {
+      // 顶栏
+      Row() {
+        Text('取消')
+          .fontSize(15).fontColor('#FF4444')
+          .onClick(() => { this.getUIContext().getRouter().back(); })
+        Blank()
+        Text('写邮件').fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+        Blank()
+        Button(this.sending ? '发送中…' : '发送')
+          .fontSize(13).height(32)
+          .backgroundColor('#1A73E8')
+          .enabled(!this.sending && !this.uploading)
+          .onClick(() => { this.doSend(); })
+      }
+      .width('100%').height(56)
+      .padding({ left: 12, right: 12 })
+      .backgroundColor('#FFFFFF')
+
+      Divider().color('#EEEEEE')
+
+      // 发信账号选择（多账号时显示）
+      if (this.accountList.length > 1) {
+        Row() {
+          Text('发信账号').fontSize(13).fontColor('#999999').width(72)
+          // 显示当前选中的账号名
+          Text(this.getSelectedAccountName())
+            .fontSize(13).fontColor('#1A73E8')
+            .layoutWeight(1)
+            .onClick(() => { this.showAccountPicker = !this.showAccountPicker; })
+          Text(' ▾').fontSize(12).fontColor('#999999')
+            .onClick(() => { this.showAccountPicker = !this.showAccountPicker; })
+        }
+        .width('100%').height(40).padding({ left: 12, right: 12 })
+        .backgroundColor('#FFFFFF')
+
+        // 账号选择下拉
+        if (this.showAccountPicker) {
+          ForEach(this.accountList, (acct: AccountInfo) => {
+            Row() {
+              Text(acct.displayName)
+                .fontSize(13)
+                .fontColor(this.selectedAccountId === acct.id ? '#1A73E8' : '#333333')
+                .fontWeight(this.selectedAccountId === acct.id ? FontWeight.Bold : FontWeight.Normal)
+                .layoutWeight(1)
+              if (this.selectedAccountId === acct.id) {
+                Text('✓').fontSize(14).fontColor('#1A73E8')
+              }
+            }
+            .width('100%').height(40).padding({ left: 40, right: 12 })
+            .backgroundColor(this.selectedAccountId === acct.id ? '#F0F7FF' : '#FFFFFF')
+            .onClick(() => {
+              this.selectedAccountId = acct.id;
+              this.showAccountPicker = false;
+            })
+          }, (acct: AccountInfo) => acct.id)
+        }
+
+        Divider().color('#F0F0F0')
+      }
+
+      // 收件人
+      Row() {
+        Text('收件人').fontSize(14).fontColor('#999999').width(60)
+        TextInput({ placeholder: 'name@path.session', text: this.to })
+          .layoutWeight(1).fontSize(14).backgroundColor('#00000000')
+          .onChange((v: string) => { this.to = v; })
+      }
+      .width('100%').height(48).padding({ left: 12, right: 12 })
+      .backgroundColor('#FFFFFF')
+
+      Divider().color('#F0F0F0')
+
+      // 主题
+      Row() {
+        Text('主题').fontSize(14).fontColor('#999999').width(60)
+        TextInput({ placeholder: '邮件主题', text: this.subject })
+          .layoutWeight(1).fontSize(14).backgroundColor('#00000000')
+          .onChange((v: string) => { this.subject = v; })
+      }
+      .width('100%').height(48).padding({ left: 12, right: 12 })
+      .backgroundColor('#FFFFFF')
+
+      Divider().color('#F0F0F0')
+
+      // 正文
+      TextArea({ placeholder: '输入邮件正文…' })
+        .layoutWeight(1).width('100%')
+        .fontSize(14)
+        .backgroundColor('#FFFFFF')
+        .onChange((v: string) => { this.body = v; })
+
+      // 附件区
+      if (this.attachmentNames.length > 0) {
+        Column() {
+          ForEach(this.attachmentNames, (name: string, idx: number) => {
+            Row() {
+              Text('📎 ' + name)
+                .fontSize(12).fontColor('#333333')
+                .layoutWeight(1)
+                .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+              Text('✕')
+                .fontSize(14).fontColor('#FF4444')
+                .onClick(() => { this.removeAttachment(idx); })
+            }
+            .width('100%').height(32)
+            .padding({ left: 12, right: 12 })
+            .backgroundColor('#F8F9FA')
+          }, (_name: string, idx: number) => idx.toString())
+        }
+        .width('100%')
+      }
+
+      // 底部工具栏
+      Row() {
+        Text('📎 添加附件')
+          .fontSize(13).fontColor('#1A73E8')
+          .onClick(() => { this.pickAttachment(); })
+
+        if (this.uploading) {
+          Text(this.status)
+            .fontSize(11).fontColor('#666666')
+            .margin({ left: 12 })
+        } else if (this.status.length > 0) {
+          Text(this.status)
+            .fontSize(11).fontColor('#4CAF50')
+            .margin({ left: 12 })
+        }
+      }
+      .width('100%').height(44)
+      .padding({ left: 12, right: 12 })
+      .backgroundColor('#FFFFFF')
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/InboxPage.ets b/client/harmony/entry/src/main/ets/pages/InboxPage.ets
new file mode 100644
index 0000000..39b750d
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/InboxPage.ets
@@ -0,0 +1,210 @@
+/*
+ * AgentMail 鸿蒙客户端 — 收件箱页
+ * GET /me/inbox 分页，列表展示邮件摘要
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { MailApi } from '../api/MailApi';
+import { MailSummary, Me } from '../model/Models';
+import { promptAction, router } from '@kit.ArkUI';
+
+@Entry
+@Component
+struct InboxPage {
+  @State mails: MailSummary[] = [];
+  @State loading: boolean = false;
+  @State limit: number = 20;
+  @State total: number = 0;
+  @State unread: number = 0;
+  @State me: Me = new Me();
+  @State error: string = '';
+
+  private client: ApiClient | null = null;
+  private mailApi: MailApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      const client: ApiClient = ApiClient.getInstance(ctx);
+      this.client = client;
+      this.mailApi = new MailApi(client);
+      this.loadInbox();
+    }
+  }
+
+  async loadInbox(): Promise<void> {
+    const c: ApiClient | null = this.client;
+    const m: MailApi | null = this.mailApi;
+    if (c === null || m === null) {
+      return;
+    }
+    this.loading = true;
+    this.error = '';
+    try {
+      const resp = await m.inbox('all', this.limit);
+      this.mails = resp.mails;
+      this.total = resp.total;
+      // 客户端统计未读（API 未提供顶层 unread）
+      let unreadCount: number = 0;
+      for (let i = 0; i < this.mails.length; i++) {
+        if (this.mails[i].status === 'unread') {
+          unreadCount++;
+        }
+      }
+      this.unread = unreadCount;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.message.length > 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  build() {
+    Column() {
+      // 顶栏
+      Row() {
+        Text('收件箱')
+          .fontSize(20).fontWeight(FontWeight.Bold).fontColor('#333333')
+        Blank()
+        if (this.unread > 0) {
+          Text(this.unread + ' 未读')
+            .fontSize(13).fontColor('#FFFFFF')
+            .backgroundColor('#FF4444')
+            .borderRadius(10)
+            .padding({ left: 8, right: 8, top: 2, bottom: 2 })
+        }
+      }
+      .width('100%')
+      .height(56)
+      .padding({ left: 16, right: 16 })
+      .backgroundColor('#FFFFFF')
+
+      // 列表
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+          Text('加载中…').fontSize(14).fontColor('#999999').margin({ top: 8 })
+        }
+        .width('100%').height('80%')
+        .justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+          Button('重试').margin({ top: 12 }).onClick(() => { this.loadInbox(); })
+        }
+        .width('100%').height('80%')
+        .justifyContent(FlexAlign.Center)
+      } else if (this.mails.length === 0) {
+        Column() {
+          Text('📭 收件箱为空').fontSize(16).fontColor('#999999')
+        }
+        .width('100%').height('80%')
+        .justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.mails, (mail: MailSummary) => {
+            ListItem() {
+              this.MailItem(mail)
+            }
+            .height(80)
+            .backgroundColor(mail.status === 'unread' ? '#F0F7FF' : '#FFFFFF')
+            .onClick(() => {
+              this.getUIContext().getRouter().pushUrl({
+                url: 'pages/MailDetailPage',
+                params: { mail_id: mail.mail_id }
+              });
+            })
+          }, (mail: MailSummary) => mail.mail_id)
+        }
+        .width('100%')
+        .layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+
+      // 底部 Tab 栏（预留系统导航栏空间）
+      Column() {
+        Row() {
+          Column() {
+            Text('📬').fontSize(20)
+            Text('收件箱').fontSize(11).fontColor('#1A73E8')
+          }
+          .layoutWeight(1).height('100%')
+          .justifyContent(FlexAlign.Center)
+          .backgroundColor('#E3F2FD')
+
+          Column() {
+            Text('💬').fontSize(20)
+            Text('会话').fontSize(11).fontColor('#666666')
+          }
+          .layoutWeight(1).height('100%')
+          .justifyContent(FlexAlign.Center)
+          .onClick(() => {
+            this.getUIContext().getRouter().pushUrl({ url: 'pages/SessionsPage' });
+          })
+
+          Column() {
+            Text('👤').fontSize(20)
+            Text('联系人').fontSize(11).fontColor('#666666')
+          }
+          .layoutWeight(1).height('100%')
+          .justifyContent(FlexAlign.Center)
+        }
+        .width('100%').height(56)
+        .backgroundColor('#FFFFFF')
+      }
+      .width('100%')
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  @Builder
+  MailItem(mail: MailSummary) {
+    Row() {
+      // 未读圆点
+      Column() {
+        if (mail.status === 'unread') {
+          Circle({ width: 8, height: 8 }).fill('#1A73E8')
+        }
+      }
+      .width(20).height('100%')
+      .justifyContent(FlexAlign.Center)
+
+      // 正文
+      Column() {
+        Row() {
+          Text(mail.from_name).fontSize(14).fontWeight(mail.is_read ? FontWeight.Normal : FontWeight.Bold).fontColor('#333333')
+          Blank()
+          Text(mail.created_at).fontSize(11).fontColor('#999999')
+        }
+        .width('100%')
+
+        Text(mail.subject).fontSize(13).fontColor('#333333')
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+          .margin({ top: 2 })
+        Text(mail.body_preview).fontSize(12).fontColor('#999999')
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+          .margin({ top: 2 })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .padding({ left: 8 })
+
+      // 附件图标
+      if (mail.has_attachments) {
+        Text('📎').fontSize(14).margin({ right: 8 })
+      }
+
+      // 权限档位徽标
+      if (mail.permission_mode.length > 0) {
+        Text(mail.permission_mode)
+          .fontSize(10).fontColor('#666666')
+          .backgroundColor('#EEEEEE').borderRadius(4)
+          .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+      }
+    }
+    .width('100%').height('100%')
+    .padding({ left: 12, right: 12 })
+    .alignItems(VerticalAlign.Center)
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/Index.ets b/client/harmony/entry/src/main/ets/pages/Index.ets
new file mode 100644
index 0000000..55f7603
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/Index.ets
@@ -0,0 +1,38 @@
+/*
+ * Copyright (c) 2026 Huawei Device Co., Ltd.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+@Entry
+@Component
+struct Index {
+  @State message: string = 'Hello World';
+
+  build() {
+    RelativeContainer() {
+      Text(this.message)
+        .id('HelloWorld')
+        .fontSize($r('app.float.page_text_font_size'))
+        .fontWeight(FontWeight.Bold)
+        .alignRules({
+          center: { anchor: '__container__', align: VerticalAlign.Center },
+          middle: { anchor: '__container__', align: HorizontalAlign.Center }
+        })
+        .onClick(() => {
+          this.message = 'Welcome';
+        })
+    }
+    .height('100%')
+    .width('100%')
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/LoginPage.ets b/client/harmony/entry/src/main/ets/pages/LoginPage.ets
new file mode 100644
index 0000000..8c397c2
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/LoginPage.ets
@@ -0,0 +1,213 @@
+/*
+ * AgentMail 鸿蒙客户端 — 登录页
+ * 两种模式：账号密码（Cookie） / 用户密钥（Bearer）
+ * 服务器地址可配置（跨设备/模拟器场景）
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { AuthApi } from '../api/AuthApi';
+import { AccountManager } from '../api/AccountManager';
+import { SseService } from '../api/SseService';
+import { Me } from '../model/Models';
+import { DEFAULT_API_BASE, EMULATOR_HOST_BASE } from '../common/Config';
+import { promptAction } from '@kit.ArkUI';
+import { hilog } from '@kit.PerformanceAnalysisKit';
+
+@Entry
+@Component
+struct LoginPage {
+  @State serverAddr: string = DEFAULT_API_BASE;
+  @State username: string = '';
+  @State password: string = '';
+  @State userKey: string = '';
+  @State mode: number = 1; // 0 = 账号密码, 1 = 用户密钥
+  @State loading: boolean = false;
+  @State loggedIn: boolean = false;
+  @State me: Me = new Me();
+
+  private client: ApiClient | null = null;
+  private authApi: AuthApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      const client: ApiClient = ApiClient.getInstance(ctx);
+      this.client = client;
+      this.authApi = new AuthApi(client);
+      // 检查多账号管理器：已有账号则自动恢复
+      const acctMgr: AccountManager = AccountManager.getInstance(ctx);
+      acctMgr.load().then(() => {
+        const active = acctMgr.getActiveAccount();
+        if (active !== null) {
+          // 恢复活跃账号的 token
+          client.setBase(active.server);
+          client.setToken(active.token);
+          this.serverAddr = active.server;
+          // 为所有账号建立 SSE 连接
+          SseService.getInstance().connectAll(acctMgr);
+          this.getUIContext().getRouter().pushUrl({ url: 'pages/MainPage' });
+          return;
+        }
+        // 无账号，走正常登录流程
+        client.init().then(() => {
+          const base: string = client.getBase();
+          this.serverAddr = base;
+          const token: string = client.getToken();
+          if (token.length > 0) {
+            this.tryRestore(token);
+          }
+        });
+      });
+    }
+  }
+
+  async tryRestore(token: string): Promise<void> {
+    this.loading = true;
+    try {
+      const c: ApiClient | null = this.client;
+      if (c === null) {
+        return;
+      }
+      const user = await new AuthApi(c).loginWithKey(token);
+      this.me = user;
+      this.loggedIn = true;
+    } catch (e) {
+      const c2: ApiClient | null = this.client;
+      if (c2 !== null) {
+        c2.clearAuth();
+      }
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  async doLogin(): Promise<void> {
+    if (this.loading) {
+      return;
+    }
+    const c: ApiClient | null = this.client;
+    const a: AuthApi | null = this.authApi;
+    if (c === null || a === null) {
+      return;
+    }
+    this.loading = true;
+    try {
+      // 保存服务器地址（覆盖默认）
+      await c.setBase(this.stripTrailingSlash(this.serverAddr));
+      await c.persistBase(this.stripTrailingSlash(this.serverAddr));
+      hilog.info(0x0001, 'LoginPage', 'base saved, calling login');
+
+      let user: Me;
+      if (this.mode === 0) {
+        // 账号密码：调 login 拿 user，token 交给 cookie 管理
+        user = await a.login(this.username, this.password);
+      } else {
+        // 用户密钥
+        user = await a.loginWithKey(this.userKey.trim());
+      }
+      hilog.info(0x0001, 'LoginPage', 'login ok: %{public}s', user.username);
+      this.me = user;
+      this.loggedIn = true;
+      // 存入多账号管理器
+      const ctx: Context | undefined = this.getUIContext().getHostContext();
+      if (ctx !== undefined) {
+        const acctMgr: AccountManager = AccountManager.getInstance(ctx);
+        await acctMgr.load();
+        const token: string = this.mode === 1 ? this.userKey.trim() : c.getToken();
+        const server: string = c.getBase();
+        const acct = await acctMgr.addAccount(server, user.username, token, user.display_name.length > 0 ? user.display_name : user.username);
+        // 为该账号建立 SSE 连接
+        SseService.getInstance().connectForAccount(acct.id, acct.server, acct.token);
+      }
+      // 跳转主界面（含 Tab 导航）
+      await this.getUIContext().getRouter().pushUrl({ url: 'pages/MainPage' });
+    } catch (e) {
+      const ae = e as ApiError;
+      const msg: string = ae.code === 0 ? ae.message : (ae.message.length > 0 ? ae.message : '登录失败');
+      hilog.error(0x0001, 'LoginPage', 'login failed: code=%{public}d msg=%{public}s', ae.code, msg);
+      promptAction.showToast({ message: msg });
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  stripTrailingSlash(s: string): string {
+    let v: string = s.trim();
+    while (v.length > 0 && v.endsWith('/')) {
+      v = v.substring(0, v.length - 1);
+    }
+    return v;
+  }
+
+  build() {
+    Column() {
+      // 标题区
+      Column() {
+        Text('AgentMail')
+          .fontSize(28)
+          .fontWeight(FontWeight.Bold)
+          .fontColor('#1A73E8')
+        Text('邮件驱动 · 多智能体协作平台')
+          .fontSize(14)
+          .fontColor('#666666')
+          .margin({ top: 6 })
+      }
+      .margin({ top: 100, bottom: 48 })
+
+      // 服务器地址
+      TextInput({ placeholder: '服务器地址', text: this.serverAddr })
+        .width('85%')
+        .height(48)
+        .margin({ bottom: 12 })
+        .onChange((v: string) => { this.serverAddr = v; })
+
+      // 切换登录方式
+      Row() {
+        Text('账号密码').fontSize(14).fontColor(this.mode === 0 ? '#1A73E8' : '#999999')
+          .onClick(() => { this.mode = 0; })
+        Text(' | ').fontSize(14).fontColor('#cccccc')
+        Text('用户密钥').fontSize(14).fontColor(this.mode === 1 ? '#1A73E8' : '#999999')
+          .onClick(() => { this.mode = 1; })
+      }
+      .margin({ bottom: 16 })
+
+      if (this.mode === 0) {
+        TextInput({ placeholder: '用户名', text: this.username })
+          .width('85%').height(48).margin({ bottom: 12 })
+          .onChange((v: string) => { this.username = v; })
+        TextInput({ placeholder: '密码', text: this.password })
+          .width('85%').height(48).margin({ bottom: 24 })
+          .type(InputType.Password)
+          .onChange((v: string) => { this.password = v; })
+      } else {
+        TextInput({ placeholder: '粘贴用户密钥 (Bearer token)', text: this.userKey })
+          .width('85%').height(48).margin({ bottom: 24 })
+          .onChange((v: string) => { this.userKey = v; })
+      }
+
+      Button(this.loading ? '登录中…' : '登 录')
+        .width('85%').height(48)
+        .backgroundColor('#1A73E8')
+        .fontSize(16)
+        .enabled(!this.loading)
+        .onClick(() => {
+          hilog.info(0x0001, 'LoginPage', 'onClick fired, loading=%{public}s', this.loading.toString());
+          this.doLogin();
+        })
+
+      // 模拟器备选地址提示
+      Text('模拟器 NAT 不通时用 ' + EMULATOR_HOST_BASE)
+        .fontSize(11).fontColor('#aaaaaa').margin({ top: 20 })
+
+      if (this.loggedIn) {
+        // 登录成功 → 进入主界面（占位，后续 M2 替换）
+        Blank()
+        Text('登录成功：' + this.me.username)
+          .fontSize(16).fontColor('#1A73E8').margin({ bottom: 60 })
+      }
+    }
+    .width('100%')
+    .height('100%')
+    .backgroundColor('#F5F7FA')
+    .alignItems(HorizontalAlign.Center)
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/MailDetailPage.ets b/client/harmony/entry/src/main/ets/pages/MailDetailPage.ets
new file mode 100644
index 0000000..55a9ce0
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/MailDetailPage.ets
@@ -0,0 +1,316 @@
+/*
+ * AgentMail 鸿蒙客户端 — 邮件详情页
+ * GET /mail/{id} 展示单封完整内容 + 回复按钮
+ * 路由参数：mail_id
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { MailApi } from '../api/MailApi';
+import { AccountManager, AccountInfo } from '../api/AccountManager';
+import { MailDetail, SendMailRequest } from '../model/Models';
+import { MailDetailParams } from '../model/RouteParams';
+import { promptAction } from '@kit.ArkUI';
+
+@Entry
+@Component
+struct MailDetailPage {
+  @State mailId: string = '';
+  @State accountId: string = '';
+  @State subject: string = '';
+  @State fromName: string = '';
+  @State toName: string = '';
+  @State body: string = '';
+  @State createdAt: string = '';
+  @State permissionMode: string = '';
+  @State sessionAlias: string = '';
+  @State loading: boolean = true;
+  @State error: string = '';
+  @State showReplyBox: boolean = false;
+  @State replyBody: string = '';
+  @State sending: boolean = false;
+  @State sessionId: string = '';
+  @State switchingPerm: boolean = false;
+
+  private mailApi: MailApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx === undefined) {
+      this.loading = false;
+      this.error = '无法获取应用上下文';
+      return;
+    }
+    const params = this.getUIContext().getRouter().getParams() as MailDetailParams;
+    this.mailId = params?.mail_id ?? '';
+    this.accountId = params?.account_id ?? '';
+    const accountManager: AccountManager = AccountManager.getInstance(ctx);
+    accountManager.load().then(() => {
+      let account: AccountInfo | null = accountManager.getAccount(this.accountId);
+      if (account === null) {
+        account = accountManager.getActiveAccount();
+      }
+      if (account === null) {
+        this.loading = false;
+        this.error = '找不到邮件所属账号';
+        return;
+      }
+      this.accountId = account.id;
+      const accountClient: ApiClient = new ApiClient(ctx);
+      accountClient.setBase(account.server);
+      accountClient.setToken(account.token);
+      this.mailApi = new MailApi(accountClient);
+      if (this.mailId.length === 0) {
+        this.loading = false;
+        this.error = '缺少邮件 ID';
+        return;
+      }
+      this.loadMail(this.mailId);
+    });
+  }
+
+  async loadMail(mailId: string): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    if (m === null) {
+      return;
+    }
+    this.loading = true;
+    this.error = '';
+    try {
+      const mail: MailDetail = await m.mailDetail(mailId);
+      this.subject = mail.subject;
+      this.fromName = mail.from_name;
+      this.toName = mail.to_name;
+      this.body = mail.body;
+      this.createdAt = mail.created_at;
+      this.permissionMode = mail.permission_mode;
+      this.sessionAlias = mail.session_alias;
+      this.sessionId = mail.session_id;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.code === 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  async switchPermission(mode: string): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    const sid: string = this.sessionId;
+    if (m === null || sid.length === 0 || this.switchingPerm) {
+      return;
+    }
+    this.switchingPerm = true;
+    try {
+      await m.setPermissionMode(sid, mode);
+      this.permissionMode = mode;
+      promptAction.showToast({ message: '权限已切换为 ' + mode });
+    } catch (e) {
+      const ae = e as ApiError;
+      promptAction.showToast({ message: '切换失败: ' + ae.message });
+    } finally {
+      this.switchingPerm = false;
+    }
+  }
+
+  build() {
+    Column() {
+      // 顶栏
+      Row() {
+        Text('‹')
+          .fontSize(24).fontColor('#1A73E8')
+          .width(40).height(40)
+          .textAlign(TextAlign.Center)
+          .onClick(() => {
+            this.getUIContext().getRouter().back();
+          })
+        Text(this.subject.length > 20 ? this.subject.substring(0, 20) + '…' : this.subject)
+          .fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+          .layoutWeight(1)
+        Text(this.permissionMode)
+          .fontSize(11).fontColor('#666666')
+          .backgroundColor(this.permissionMode === 'full' ? '#E8F5E9' : '#FFF3E0')
+          .borderRadius(4).padding({ left: 6, right: 6, top: 2, bottom: 2 })
+      }
+      .width('100%').height(56)
+      .padding({ left: 8, right: 12 })
+      .backgroundColor('#FFFFFF')
+
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+          Text('加载中…').fontSize(14).fontColor('#999999').margin({ top: 8 })
+        }
+        .width('100%').layoutWeight(1)
+        .justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+          Button('重试').margin({ top: 12 }).onClick(() => { this.loadMail(this.mailId); })
+        }
+        .width('100%').layoutWeight(1)
+        .justifyContent(FlexAlign.Center)
+      } else {
+        Scroll() {
+          Column() {
+            // 元信息卡片
+            Column() {
+              Row() {
+                Text('发件人').fontSize(12).fontColor('#999999').width(60)
+                Text(this.fromName).fontSize(14).fontColor('#333333')
+              }.width('100%').margin({ bottom: 6 })
+
+              Row() {
+                Text('收件人').fontSize(12).fontColor('#999999').width(60)
+                Text(this.toName).fontSize(14).fontColor('#333333')
+              }.width('100%').margin({ bottom: 6 })
+
+              if (this.sessionAlias.length > 0) {
+                Row() {
+                  Text('会话').fontSize(12).fontColor('#999999').width(60)
+                  Text(this.sessionAlias).fontSize(13).fontColor('#1A73E8')
+                }.width('100%').margin({ bottom: 6 })
+              }
+
+              Row() {
+                Text('时间').fontSize(12).fontColor('#999999').width(60)
+                Text(this.createdAt).fontSize(13).fontColor('#666666')
+              }.width('100%').margin({ bottom: 6 })
+
+              Row() {
+                Text('权限').fontSize(12).fontColor('#999999').width(60)
+                if (this.switchingPerm) {
+                  LoadingProgress().width(16).height(16)
+                } else {
+                  ForEach(['plan', 'workspace', 'full'], (mode: string) => {
+                    Text(mode)
+                      .fontSize(11)
+                      .fontColor(this.permissionMode === mode ? '#FFFFFF' : '#666666')
+                      .backgroundColor(this.permissionMode === mode ? '#1A73E8' : '#F0F0F0')
+                      .borderRadius(4)
+                      .padding({ left: 8, right: 8, top: 3, bottom: 3 })
+                      .margin({ right: 6 })
+                      .onClick(() => { this.switchPermission(mode); })
+                  }, (mode: string) => mode)
+                }
+              }.width('100%')
+            }
+            .width('100%')
+            .padding(16)
+            .backgroundColor('#F8F9FA')
+            .borderRadius(8)
+            .margin({ left: 12, right: 12, top: 8 })
+
+            // 邮件正文
+            Text(this.subject)
+              .fontSize(20)
+              .fontWeight(FontWeight.Bold)
+              .fontColor('#333333')
+              .width('100%')
+              .padding({ left: 16, right: 16, top: 16, bottom: 8 })
+
+            Text(this.body)
+              .fontSize(15)
+              .fontColor('#444444')
+              .width('100%')
+              .padding({ left: 16, right: 16, bottom: 16 })
+              .lineHeight(24)
+
+            Blank().height(60)
+          }
+          .width('100%')
+        }
+        .layoutWeight(1)
+        .scrollBar(BarState.Off)
+
+        // 底部回复按钮
+        Row() {
+          Button('↩ 回复')
+            .width('90%').height(44)
+            .backgroundColor('#1A73E8')
+            .fontSize(15)
+            .onClick(() => {
+              this.showReplyBox = true;
+            })
+        }
+        .width('100%').height(56)
+        .justifyContent(FlexAlign.Center)
+        .backgroundColor('#FFFFFF')
+
+        // 回复弹层
+        if (this.showReplyBox) {
+          Column() {
+            // 遮罩
+            Column()
+              .width('100%').layoutWeight(1)
+              .backgroundColor('#80000000')
+              .onClick(() => { this.showReplyBox = false; })
+
+            // 回复框
+            Column() {
+              Text('回复给 ' + this.fromName)
+                .fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+                .margin({ bottom: 12 })
+
+              TextArea({ placeholder: '输入回复内容…' })
+                .layoutWeight(1).width('100%')
+                .fontSize(14)
+                .onChange((v: string) => { this.replyBody = v; })
+
+              Row() {
+                Button('取消')
+                  .width(80).height(36)
+                  .backgroundColor('#F5F5F5')
+                  .fontColor('#666666')
+                  .fontSize(13)
+                  .onClick(() => { this.showReplyBox = false; })
+
+                Blank()
+
+                Button(this.sending ? '发送中…' : '发送')
+                  .width(80).height(36)
+                  .backgroundColor('#1A73E8')
+                  .fontSize(13)
+                  .enabled(!this.sending && this.replyBody.length > 0)
+                  .onClick(() => { this.doReply(); })
+              }
+              .width('100%')
+              .margin({ top: 12 })
+            }
+            .width('100%')
+            .height('60%')
+            .padding(16)
+            .backgroundColor('#FFFFFF')
+            .borderRadius({ topLeft: 12, topRight: 12 })
+          }
+          .width('100%').height('100%')
+          .position({ x: 0, y: 0 })
+        }
+      }
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  async doReply(): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    if (m === null || this.replyBody.length === 0) {
+      return;
+    }
+    this.sending = true;
+    try {
+      const req: SendMailRequest = new SendMailRequest();
+      req.to = this.fromName + '@';
+      req.subject = 'Re: ' + this.subject;
+      req.body = this.replyBody;
+      req.reply_to = this.mailId;
+      await m.send(req);
+      this.showReplyBox = false;
+      this.replyBody = '';
+      promptAction.showToast({ message: '回复已发送' });
+    } catch (e) {
+      const ae = e as ApiError;
+      promptAction.showToast({ message: '发送失败: ' + ae.message });
+    } finally {
+      this.sending = false;
+    }
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/MainPage.ets b/client/harmony/entry/src/main/ets/pages/MainPage.ets
new file mode 100644
index 0000000..c0d53e9
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/MainPage.ets
@@ -0,0 +1,648 @@
+/*
+ * AgentMail 鸿蒙客户端 — 主框架（底部 Tab 导航）
+ * 收件箱 / 会话 / 联系人 三个 TabContent
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { MailApi, InboxResponse } from '../api/MailApi';
+import { AccountManager, AccountInfo } from '../api/AccountManager';
+import { SseService, SseEvent } from '../api/SseService';
+import { MailSummary, Session, Contact } from '../model/Models';
+import { MailDetailParams, ComposeParams } from '../model/RouteParams';
+import { promptAction } from '@kit.ArkUI';
+
+@Component
+struct InboxTab {
+  @State mails: MailSummary[] = [];
+  @State loading: boolean = false;
+  @State total: number = 0;
+  @State unread: number = 0;
+  @State error: string = '';
+  @State accountName: string = '';
+  @State accountFilter: string = 'all'; // 'all' 或 accountId
+  @State showAccountPicker: boolean = false;
+  @State accountList: AccountInfo[] = [];
+  private sseService: SseService | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      this.sseService = SseService.getInstance();
+      // 加载账号列表
+      const acctMgr: AccountManager = AccountManager.getInstance(ctx);
+      acctMgr.load().then(() => {
+        const active = acctMgr.getActiveAccount();
+        if (active !== null) {
+          this.accountName = active.displayName;
+        }
+        this.accountList = acctMgr.getAccounts();
+        if (this.accountList.length <= 1) {
+          this.accountFilter = 'all';
+        }
+      });
+      this.loadData();
+      // 全局 SSE 监听（所有账号的事件都会收到）；保存同一函数引用以便页面退出时移除。
+      this.sseService.addListener(this.onSseEvent);
+    }
+  }
+
+  aboutToDisappear(): void {
+    if (this.sseService !== null) {
+      this.sseService.removeListener(this.onSseEvent);
+    }
+  }
+
+  private onSseEvent = (event: SseEvent): void => {
+    if (event.type === 'new_mail') {
+      let sourceName: string = '';
+      for (let i = 0; i < this.accountList.length; i++) {
+        if (this.accountList[i].id === event.accountId) {
+          sourceName = this.accountList[i].displayName;
+          break;
+        }
+      }
+      promptAction.showToast({ message: sourceName.length > 0 ? '📨 ' + sourceName + ' 收到新邮件' : '📨 新邮件到达' });
+      this.loadData();
+    }
+  };
+
+  async loadData(): Promise<void> {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx === undefined) {
+      return;
+    }
+    this.loading = true;
+    this.error = '';
+    try {
+      const acctMgr: AccountManager = AccountManager.getInstance(ctx);
+      await acctMgr.load();
+      const allAccounts: AccountInfo[] = acctMgr.getAccounts();
+      this.accountList = allAccounts;
+
+      let filterExists: boolean = this.accountFilter === 'all';
+      for (let i = 0; i < allAccounts.length; i++) {
+        if (allAccounts[i].id === this.accountFilter) {
+          filterExists = true;
+          this.accountName = allAccounts[i].displayName;
+          break;
+        }
+      }
+      if (!filterExists) {
+        this.accountFilter = 'all';
+        this.accountName = '全部邮箱';
+      }
+
+      const mergedMails: MailSummary[] = [];
+      let mergedTotal: number = 0;
+
+      for (let i = 0; i < allAccounts.length; i++) {
+        const acct: AccountInfo = allAccounts[i];
+        if (this.accountFilter !== 'all' && this.accountFilter !== acct.id) {
+          continue;
+        }
+        try {
+          const accountClient: ApiClient = new ApiClient(ctx);
+          accountClient.setBase(acct.server);
+          accountClient.setToken(acct.token);
+          const response: InboxResponse = await new MailApi(accountClient).inbox('all', 50);
+          for (let j = 0; j < response.mails.length; j++) {
+            const mail: MailSummary = response.mails[j];
+            mail.source_account_id = acct.id;
+            mail.source_account_name = acct.displayName;
+            mergedMails.push(mail);
+          }
+          mergedTotal += response.total;
+        } catch (e) {
+          if (this.accountFilter !== 'all') {
+            throw e as ApiError;
+          }
+        }
+      }
+
+      mergedMails.sort((a: MailSummary, b: MailSummary) => {
+        if (a.created_at > b.created_at) {
+          return -1;
+        }
+        if (a.created_at < b.created_at) {
+          return 1;
+        }
+        return 0;
+      });
+      this.mails = mergedMails;
+      this.total = mergedTotal;
+
+      let unreadCount: number = 0;
+      for (let i = 0; i < this.mails.length; i++) {
+        if (this.mails[i].status === 'unread') {
+          unreadCount++;
+        }
+      }
+      this.unread = unreadCount;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.message.length > 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  openCompose(): void {
+    let accountId: string = this.accountFilter === 'all' ? '' : this.accountFilter;
+    if (accountId.length === 0) {
+      const ctx = this.getUIContext().getHostContext();
+      if (ctx !== undefined) {
+        accountId = AccountManager.getInstance(ctx).getActiveId();
+      }
+    }
+    const params: ComposeParams = {
+      to: '',
+      reply_to: '',
+      session_alias: '',
+      account_id: accountId
+    };
+    this.getUIContext().getRouter().pushUrl({ url: 'pages/ComposePage', params: params });
+  }
+
+  build() {
+    Column() {
+      Row() {
+        Column() {
+          Row() {
+            Text('收件箱').fontSize(20).fontWeight(FontWeight.Bold).fontColor('#333333')
+            if (this.accountList.length > 1) {
+              Text(' ▾').fontSize(14).fontColor('#999999')
+                .onClick(() => { this.showAccountPicker = !this.showAccountPicker; })
+            }
+          }
+          Text(this.accountFilter === 'all' ? '全部邮箱' : this.accountName)
+            .fontSize(11).fontColor('#999999').margin({ top: 2 })
+            .onClick(() => { if (this.accountList.length > 1) { this.showAccountPicker = !this.showAccountPicker; } })
+        }
+        .alignItems(HorizontalAlign.Start)
+        Blank()
+        if (this.unread > 0) {
+          Text(this.unread + ' 未读')
+            .fontSize(13).fontColor('#FFFFFF')
+            .backgroundColor('#FF4444')
+            .borderRadius(10)
+            .padding({ left: 8, right: 8, top: 2, bottom: 2 })
+        }
+        Text('⚙')
+          .fontSize(20).fontColor('#666666')
+          .width(36).height(36).textAlign(TextAlign.Center)
+          .onClick(() => {
+            this.getUIContext().getRouter().pushUrl({ url: 'pages/SettingsPage' });
+          })
+      }
+      .width('100%').height(56).padding({ left: 16, right: 8 })
+      .backgroundColor('#FFFFFF')
+
+      // 账号选择器下拉
+      if (this.showAccountPicker && this.accountList.length > 1) {
+        Column() {
+          Text('全部邮箱')
+            .fontSize(14).fontColor(this.accountFilter === 'all' ? '#1A73E8' : '#333333')
+            .fontWeight(this.accountFilter === 'all' ? FontWeight.Bold : FontWeight.Normal)
+            .width('100%').height(40).padding({ left: 16 })
+            .backgroundColor(this.accountFilter === 'all' ? '#F0F7FF' : '#FFFFFF')
+            .onClick(() => {
+              this.accountFilter = 'all';
+              this.accountName = '全部邮箱';
+              this.showAccountPicker = false;
+              this.loadData();
+            })
+          ForEach(this.accountList, (acct: AccountInfo) => {
+            Row() {
+              Column() {
+                Text(acct.displayName)
+                  .fontSize(14)
+                  .fontColor(this.accountFilter === acct.id ? '#1A73E8' : '#333333')
+                  .fontWeight(this.accountFilter === acct.id ? FontWeight.Bold : FontWeight.Normal)
+                Text(acct.username)
+                  .fontSize(11).fontColor('#999999')
+              }
+              .alignItems(HorizontalAlign.Start)
+              .layoutWeight(1)
+            }
+            .width('100%').height(48).padding({ left: 16 })
+            .backgroundColor(this.accountFilter === acct.id ? '#F0F7FF' : '#FFFFFF')
+            .onClick(() => {
+              this.accountFilter = acct.id;
+              this.accountName = acct.displayName;
+              this.showAccountPicker = false;
+              this.loadData();
+            })
+          }, (acct: AccountInfo) => acct.id)
+        }
+        .width('100%')
+        .backgroundColor('#FFFFFF')
+        .border({ width: { bottom: 1 }, color: '#EEEEEE' })
+      }
+
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+          Button('重试').margin({ top: 12 }).onClick(() => { this.loadData(); })
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.mails.length === 0) {
+        Column() {
+          Text('📭 收件箱为空').fontSize(16).fontColor('#999999')
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.mails, (mail: MailSummary) => {
+            ListItem() {
+              this.MailItem(mail)
+            }
+            .height(80)
+            .backgroundColor(mail.status === 'unread' ? '#F0F7FF' : '#FFFFFF')
+            .onClick(() => {
+              const params: MailDetailParams = {
+                mail_id: mail.mail_id,
+                account_id: mail.source_account_id
+              };
+              this.getUIContext().getRouter().pushUrl({
+                url: 'pages/MailDetailPage',
+                params: params
+              });
+            })
+          }, (mail: MailSummary) => mail.source_account_id + ':' + mail.mail_id)
+        }
+        .width('100%').layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+
+      // 底部信息栏 + 悬浮写邮件按钮
+      Stack({ alignContent: Alignment.BottomEnd }) {
+        Row() {
+          Text('共 ' + this.total + ' 封').fontSize(12).fontColor('#999999')
+          Blank()
+          Text('未读 ' + this.unread).fontSize(12).fontColor('#999999')
+        }
+        .width('100%').height(36).padding({ left: 16, right: 16 })
+        .backgroundColor('#FFFFFF')
+
+        Text('+')
+          .fontSize(28).fontColor('#FFFFFF')
+          .width(56).height(56)
+          .borderRadius(28)
+          .backgroundColor('#1A73E8')
+          .textAlign(TextAlign.Center)
+          .margin({ right: 20, bottom: 44 })
+          .onClick(() => {
+            this.openCompose();
+          })
+      }
+      .width('100%')
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+    .bindSheet($$this.composeVisible, this.ComposeSheet())
+  }
+
+  @State composeVisible: boolean = false;
+
+  @Builder
+  ComposeSheet() {
+    Column() {
+      Text('写邮件').fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+        .margin({ top: 16, bottom: 8 })
+      Button('新建邮件')
+        .width('90%').height(44).backgroundColor('#1A73E8')
+        .onClick(() => {
+          this.composeVisible = false;
+          this.openCompose();
+        })
+      Button('取消')
+        .width('90%').height(40).backgroundColor('#F5F5F5').fontColor('#666666')
+        .margin({ top: 8 })
+        .onClick(() => { this.composeVisible = false; })
+    }
+    .width('100%').height(180).padding(16)
+  }
+
+  @Builder
+  MailItem(mail: MailSummary) {
+    Row() {
+      Column() {
+        if (mail.status === 'unread') {
+          Circle({ width: 8, height: 8 }).fill('#1A73E8')
+        }
+      }
+      .width(20).height('100%').justifyContent(FlexAlign.Center)
+
+      Column() {
+        Row() {
+          Text(mail.from_name).fontSize(14).fontWeight(mail.status === 'unread' ? FontWeight.Bold : FontWeight.Normal).fontColor('#333333')
+          if (this.accountFilter === 'all' && mail.source_account_name.length > 0) {
+            Text(mail.source_account_name)
+              .fontSize(10).fontColor('#1A73E8')
+              .backgroundColor('#E8F0FE').borderRadius(4)
+              .padding({ left: 5, right: 5, top: 1, bottom: 1 })
+              .margin({ left: 6 })
+          }
+          Blank()
+          Text(mail.created_at).fontSize(11).fontColor('#999999')
+        }
+        .width('100%')
+
+        Text(mail.subject).fontSize(13).fontColor('#333333')
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+          .margin({ top: 2 })
+        Text(mail.body_preview).fontSize(12).fontColor('#999999')
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+          .margin({ top: 2 })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .padding({ left: 8 })
+
+      if (mail.permission_mode.length > 0) {
+        Text(mail.permission_mode)
+          .fontSize(10).fontColor('#666666')
+          .backgroundColor('#EEEEEE').borderRadius(4)
+          .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+      }
+    }
+    .width('100%').height('100%')
+    .padding({ left: 12, right: 12 })
+    .alignItems(VerticalAlign.Center)
+  }
+}
+
+@Component
+struct SessionsTab {
+  @State sessions: Session[] = [];
+  @State loading: boolean = false;
+  @State error: string = '';
+  private mailApi: MailApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      this.mailApi = new MailApi(ApiClient.getInstance(ctx));
+      this.loadData();
+    }
+  }
+
+  async loadData(): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    if (m === null) {
+      return;
+    }
+    this.loading = true;
+    try {
+      const resp = await m.sessions();
+      this.sessions = resp.sessions;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.message.length > 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  build() {
+    Column() {
+      Row() {
+        Text('会话').fontSize(20).fontWeight(FontWeight.Bold).fontColor('#333333')
+      }
+      .width('100%').height(56).padding({ left: 16 })
+      .backgroundColor('#FFFFFF')
+
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.sessions.length === 0) {
+        Column() {
+          Text('📭 暂无会话').fontSize(16).fontColor('#999999')
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.sessions, (s: Session, idx: number) => {
+            ListItem() {
+              this.SessionItem(s, idx)
+            }
+            .height(90)
+          }, (_s: Session, idx: number) => idx.toString())
+        }
+        .width('100%').layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  @Builder
+  SessionItem(s: Session, idx: number) {
+    Row() {
+      Column() {
+        Row() {
+          Text(s.session_alias.length > 0 ? s.session_alias : ('会话 #' + (idx + 1)))
+            .fontSize(14).fontWeight(FontWeight.Bold).fontColor('#333333')
+            .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+            .layoutWeight(1)
+          if (s.max_rounds > 0) {
+            Text(s.used_rounds + '/' + s.max_rounds)
+              .fontSize(11).fontColor(s.used_rounds >= s.max_rounds ? '#FF4444' : '#666666')
+              .backgroundColor(s.used_rounds >= s.max_rounds ? '#FFEBEE' : '#F5F5F5')
+              .borderRadius(4).padding({ left: 4, right: 4, top: 1, bottom: 1 })
+          }
+        }
+        .width('100%')
+
+        Text('对方: ' + s.from_agent).fontSize(12).fontColor('#666666').margin({ top: 4 })
+
+        Row() {
+          Text(s.permission_mode.length > 0 ? s.permission_mode : '—')
+            .fontSize(11).fontColor('#666666')
+            .backgroundColor('#F0F0F0').borderRadius(4)
+            .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+          Blank()
+          Text(s.mail_count + ' 封').fontSize(11).fontColor('#999999')
+          Text(' · ' + s.status).fontSize(11).fontColor(s.status === 'active' ? '#4CAF50' : '#999999')
+        }
+        .width('100%').margin({ top: 4 })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .justifyContent(FlexAlign.SpaceBetween)
+    }
+    .width('100%').height('100%')
+    .padding({ left: 16, right: 16, top: 12, bottom: 12 })
+    .alignItems(VerticalAlign.Center)
+  }
+}
+
+@Component
+struct ContactsTab {
+  @State contacts: Contact[] = [];
+  @State loading: boolean = false;
+  @State error: string = '';
+  private mailApi: MailApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      this.mailApi = new MailApi(ApiClient.getInstance(ctx));
+      this.loadData();
+    }
+  }
+
+  async loadData(): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    if (m === null) {
+      return;
+    }
+    this.loading = true;
+    try {
+      const resp = await m.contacts();
+      this.contacts = resp.contacts;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.message.length > 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  build() {
+    Column() {
+      Row() {
+        Text('联系人').fontSize(20).fontWeight(FontWeight.Bold).fontColor('#333333')
+      }
+      .width('100%').height(56).padding({ left: 16 })
+      .backgroundColor('#FFFFFF')
+
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+          Button('重试').margin({ top: 12 }).onClick(() => { this.loadData(); })
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else if (this.contacts.length === 0) {
+        Column() {
+          Text('📭 暂无联系人').fontSize(16).fontColor('#999999')
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.contacts, (c: Contact, idx: number) => {
+            ListItem() {
+              this.ContactItem(c, idx)
+            }
+            .height(85)
+          }, (_c: Contact, idx: number) => idx.toString())
+        }
+        .width('100%').layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  @Builder
+  ContactItem(c: Contact, idx: number) {
+    Row() {
+      Column() {
+        Row() {
+          Text(c.agent_name).fontSize(14).fontWeight(FontWeight.Bold).fontColor('#333333')
+          Blank()
+          if (c.unread_count > 0) {
+            Text(c.unread_count + '')
+              .fontSize(11).fontColor('#FFFFFF')
+              .backgroundColor('#FF4444')
+              .borderRadius(10).width(20).height(20)
+              .textAlign(TextAlign.Center)
+          }
+        }
+        .width('100%')
+
+        Text(c.subject.length > 0 ? c.subject : c.session_alias)
+          .fontSize(12).fontColor('#666666')
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+          .margin({ top: 3 })
+
+        Row() {
+          Text(c.permission_mode.length > 0 ? c.permission_mode : '—')
+            .fontSize(10).fontColor('#666666')
+            .backgroundColor('#F0F0F0').borderRadius(4)
+            .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+          Blank()
+          Text(c.last_preview.length > 0 ? c.last_preview : '—')
+            .fontSize(11).fontColor('#999999')
+            .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+            .layoutWeight(1)
+        }
+        .width('100%').margin({ top: 3 })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .justifyContent(FlexAlign.SpaceBetween)
+    }
+    .width('100%').height('100%')
+    .padding({ left: 16, right: 16, top: 10, bottom: 10 })
+    .alignItems(VerticalAlign.Center)
+  }
+}
+
+@Entry
+@Component
+struct MainPage {
+  @State currentIndex: number = 0;
+
+  @Builder
+  TabBarBuilder(title: string, icon: string) {
+    Column() {
+      Text(icon).fontSize(20)
+      Text(title).fontSize(11).fontColor(this.currentIndex === 0 ? '#1A73E8' : '#666666')
+    }
+    .width('100%')
+    .justifyContent(FlexAlign.Center)
+  }
+
+  build() {
+    Tabs({ barPosition: BarPosition.End }) {
+      TabContent() {
+        InboxTab()
+      }
+      .tabBar(this.TabBarBuilder('收件箱', '📬'))
+
+      TabContent() {
+        SessionsTab()
+      }
+      .tabBar(this.TabBarBuilder('会话', '💬'))
+
+      TabContent() {
+        ContactsTab()
+      }
+      .tabBar(this.TabBarBuilder('联系人', '👤'))
+    }
+    .onChange((index: number) => {
+      this.currentIndex = index;
+    })
+    .width('100%')
+    .height('100%')
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/SessionsPage.ets b/client/harmony/entry/src/main/ets/pages/SessionsPage.ets
new file mode 100644
index 0000000..3d27d14
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/SessionsPage.ets
@@ -0,0 +1,153 @@
+/*
+ * AgentMail 鸿蒙客户端 — 会话列表页
+ * GET /me/sessions 展示所有会话摘要
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { MailApi } from '../api/MailApi';
+import { Session } from '../model/Models';
+
+@Entry
+@Component
+struct SessionsPage {
+  @State sessions: Session[] = [];
+  @State loading: boolean = false;
+  @State error: string = '';
+
+  private client: ApiClient | null = null;
+  private mailApi: MailApi | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      const client: ApiClient = ApiClient.getInstance(ctx);
+      this.client = client;
+      this.mailApi = new MailApi(client);
+      this.loadSessions();
+    }
+  }
+
+  async loadSessions(): Promise<void> {
+    const m: MailApi | null = this.mailApi;
+    if (m === null) {
+      return;
+    }
+    this.loading = true;
+    this.error = '';
+    try {
+      const resp = await m.sessions();
+      this.sessions = resp.sessions;
+    } catch (e) {
+      const ae = e as ApiError;
+      this.error = ae.code === 0 ? ae.message : '加载失败';
+    } finally {
+      this.loading = false;
+    }
+  }
+
+  build() {
+    Column() {
+      // 顶栏
+      Row() {
+        Text('会话')
+          .fontSize(20).fontWeight(FontWeight.Bold).fontColor('#333333')
+      }
+      .width('100%').height(56)
+      .padding({ left: 16 })
+      .backgroundColor('#FFFFFF')
+
+      if (this.loading) {
+        Column() {
+          LoadingProgress().width(40).height(40)
+          Text('加载中…').fontSize(14).fontColor('#999999').margin({ top: 8 })
+        }
+        .width('100%').layoutWeight(1)
+        .justifyContent(FlexAlign.Center)
+      } else if (this.error.length > 0) {
+        Column() {
+          Text(this.error).fontSize(14).fontColor('#FF4444')
+          Button('重试').margin({ top: 12 }).onClick(() => { this.loadSessions(); })
+        }
+        .width('100%').layoutWeight(1)
+        .justifyContent(FlexAlign.Center)
+      } else if (this.sessions.length === 0) {
+        Column() {
+          Text('📭 暂无会话').fontSize(16).fontColor('#999999')
+        }
+        .width('100%').layoutWeight(1)
+        .justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.sessions, (s: Session) => {
+            ListItem() {
+              this.SessionItem(s)
+            }
+            .height(90)
+          }, (s: Session) => s.session_id)
+        }
+        .width('100%').layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+
+      // 底栏
+      Row() {
+        Text('共 ' + this.sessions.length + ' 个会话').fontSize(12).fontColor('#999999')
+      }
+      .width('100%').height(40).padding({ left: 16 })
+      .backgroundColor('#FFFFFF')
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  @Builder
+  SessionItem(s: Session) {
+    Row() {
+      Column() {
+        Row() {
+          Text(s.session_alias.length > 0 ? s.session_alias : s.subject)
+            .fontSize(14).fontWeight(FontWeight.Bold).fontColor('#333333')
+            .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+            .layoutWeight(1)
+
+          // 预算进度
+          if (s.max_rounds > 0) {
+            Text(s.used_rounds + '/' + s.max_rounds)
+              .fontSize(11).fontColor(s.used_rounds >= s.max_rounds ? '#FF4444' : '#666666')
+              .backgroundColor(s.used_rounds >= s.max_rounds ? '#FFEBEE' : '#F5F5F5')
+              .borderRadius(4).padding({ left: 4, right: 4, top: 1, bottom: 1 })
+          }
+
+          // 未读
+          if (s.unread_count > 0) {
+            Text(s.unread_count + '')
+              .fontSize(11).fontColor('#FFFFFF')
+              .backgroundColor('#FF4444')
+              .borderRadius(10).width(20).height(20)
+              .textAlign(TextAlign.Center)
+              .margin({ left: 6 })
+          }
+        }
+        .width('100%')
+
+        Text('对方: ' + s.from_agent).fontSize(12).fontColor('#666666').margin({ top: 4 })
+
+        Row() {
+          Text(s.permission_mode.length > 0 ? s.permission_mode : '—')
+            .fontSize(11).fontColor('#666666')
+            .backgroundColor('#F0F0F0').borderRadius(4)
+            .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+          Blank()
+          Text(s.mail_count + ' 封').fontSize(11).fontColor('#999999')
+          Text(' · ' + s.status).fontSize(11).fontColor(s.status === 'active' ? '#4CAF50' : '#999999')
+        }
+        .width('100%').margin({ top: 4 })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .justifyContent(FlexAlign.SpaceBetween)
+    }
+    .width('100%').height('100%')
+    .padding({ left: 16, right: 16, top: 12, bottom: 12 })
+    .alignItems(VerticalAlign.Center)
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/ets/pages/SettingsPage.ets b/client/harmony/entry/src/main/ets/pages/SettingsPage.ets
new file mode 100644
index 0000000..6d5ed1b
--- /dev/null
+++ b/client/harmony/entry/src/main/ets/pages/SettingsPage.ets
@@ -0,0 +1,269 @@
+/*
+ * AgentMail 鸿蒙客户端 — 设置页（账号管理）
+ * 多账号列表 / 添加新账号 / 删除 / 切换默认账号
+ */
+import { ApiClient, ApiError } from '../api/ApiClient';
+import { AuthApi } from '../api/AuthApi';
+import { AccountManager, AccountInfo } from '../api/AccountManager';
+import { SseService } from '../api/SseService';
+import { promptAction } from '@kit.ArkUI';
+
+@Entry
+@Component
+struct SettingsPage {
+  @State accounts: AccountInfo[] = [];
+  @State activeId: string = '';
+  @State showAddDialog: boolean = false;
+  @State newDisplayName: string = '';
+  @State newServer: string = '';
+  @State newUsername: string = '';
+  @State newToken: string = '';
+  @State adding: boolean = false;
+
+  private client: ApiClient | null = null;
+  private acctMgr: AccountManager | null = null;
+
+  aboutToAppear(): void {
+    const ctx = this.getUIContext().getHostContext();
+    if (ctx !== undefined) {
+      this.client = ApiClient.getInstance(ctx);
+      this.acctMgr = AccountManager.getInstance(ctx);
+      this.acctMgr.load().then(() => {
+        this.refreshList();
+      });
+    }
+  }
+
+  refreshList(): void {
+    const manager: AccountManager | null = this.acctMgr;
+    if (manager === null) {
+      return;
+    }
+    this.accounts = manager.getAccounts();
+    this.activeId = manager.getActiveId();
+  }
+
+  normalizeServer(server: string): string {
+    let normalized: string = server.trim();
+    while (normalized.length > 0 && normalized.endsWith('/')) {
+      normalized = normalized.substring(0, normalized.length - 1);
+    }
+    return normalized;
+  }
+
+  async switchTo(accountId: string): Promise<void> {
+    const manager: AccountManager | null = this.acctMgr;
+    const client: ApiClient | null = this.client;
+    if (manager === null || client === null) {
+      return;
+    }
+    const switched: boolean = await manager.switchAccount(accountId);
+    if (!switched) {
+      return;
+    }
+    const account: AccountInfo | null = manager.getActiveAccount();
+    if (account !== null) {
+      client.setBase(account.server);
+      client.setToken(account.token);
+      promptAction.showToast({ message: '默认发信账号已设为 ' + account.displayName });
+    }
+    this.refreshList();
+  }
+
+  async removeAccount(accountId: string): Promise<void> {
+    const manager: AccountManager | null = this.acctMgr;
+    const client: ApiClient | null = this.client;
+    if (manager === null) {
+      return;
+    }
+    const removed: boolean = await manager.removeAccount(accountId);
+    if (!removed) {
+      return;
+    }
+    SseService.getInstance().disconnectAccount(accountId);
+    const active: AccountInfo | null = manager.getActiveAccount();
+    if (client !== null) {
+      if (active !== null) {
+        client.setBase(active.server);
+        client.setToken(active.token);
+      } else {
+        client.setToken('');
+      }
+    }
+    this.refreshList();
+    promptAction.showToast({ message: '账号已删除' });
+  }
+
+  async addNewAccount(): Promise<void> {
+    const manager: AccountManager | null = this.acctMgr;
+    const ctx = this.getUIContext().getHostContext();
+    if (manager === null || ctx === undefined || this.adding) {
+      return;
+    }
+    const displayName: string = this.newDisplayName.trim();
+    const server: string = this.normalizeServer(this.newServer);
+    const token: string = this.newToken.trim();
+    const optionalUsername: string = this.newUsername.trim();
+    if (displayName.length === 0 || server.length === 0 || token.length === 0) {
+      promptAction.showToast({ message: '请填写显示名称、Gateway 地址和 user_key' });
+      return;
+    }
+
+    this.adding = true;
+    try {
+      const validationClient: ApiClient = new ApiClient(ctx);
+      validationClient.setBase(server);
+      validationClient.setToken(token);
+      const user = await new AuthApi(validationClient).me();
+      const username: string = optionalUsername.length > 0 ? optionalUsername : user.username;
+      const account: AccountInfo = await manager.addAccount(server, username, token, displayName);
+      SseService.getInstance().connectForAccount(account.id, account.server, account.token);
+      promptAction.showToast({ message: '✅ 添加成功: ' + account.displayName });
+      this.showAddDialog = false;
+      this.newDisplayName = '';
+      this.newServer = '';
+      this.newUsername = '';
+      this.newToken = '';
+      this.refreshList();
+    } catch (e) {
+      const apiError = e as ApiError;
+      promptAction.showToast({ message: '验证失败: ' + apiError.message });
+    } finally {
+      this.adding = false;
+    }
+  }
+
+  build() {
+    Column() {
+      Row() {
+        Text('‹').fontSize(24).fontColor('#1A73E8').width(40).height(40)
+          .textAlign(TextAlign.Center)
+          .onClick(() => { this.getUIContext().getRouter().back(); })
+        Text('账号管理').fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+          .layoutWeight(1)
+        Text('+').fontSize(24).fontColor('#1A73E8').width(40).height(40)
+          .textAlign(TextAlign.Center)
+          .onClick(() => { this.showAddDialog = true; })
+      }
+      .width('100%').height(56).padding({ left: 8, right: 8 })
+      .backgroundColor('#FFFFFF')
+
+      Divider().color('#EEEEEE')
+
+      if (this.accounts.length === 0) {
+        Column() {
+          Text('📭 暂无账号').fontSize(16).fontColor('#777777')
+          Button('添加第一个账号')
+            .margin({ top: 16 }).backgroundColor('#1A73E8')
+            .onClick(() => { this.showAddDialog = true; })
+        }
+        .width('100%').layoutWeight(1).justifyContent(FlexAlign.Center)
+      } else {
+        List({ space: 1 }) {
+          ForEach(this.accounts, (account: AccountInfo) => {
+            ListItem() {
+              this.AccountItem(account)
+            }
+            .height(72)
+          }, (account: AccountInfo) => account.id)
+        }
+        .width('100%').layoutWeight(1)
+        .divider({ strokeWidth: 1, color: '#EEEEEE', startMargin: 16, endMargin: 16 })
+      }
+
+      if (this.showAddDialog) {
+        Column() {
+          Column()
+            .width('100%').layoutWeight(1)
+            .backgroundColor('#80000000')
+            .onClick(() => { this.showAddDialog = false; })
+
+          Column() {
+            Text('添加新账号').fontSize(16).fontWeight(FontWeight.Bold).fontColor('#333333')
+              .margin({ bottom: 16 })
+
+            TextInput({ placeholder: '显示名称（必填）', text: this.newDisplayName })
+              .width('100%').height(44).margin({ bottom: 10 })
+              .onChange((value: string) => { this.newDisplayName = value; })
+
+            TextInput({ placeholder: 'Gateway 地址（必填）', text: this.newServer })
+              .width('100%').height(44).margin({ bottom: 10 })
+              .onChange((value: string) => { this.newServer = value; })
+
+            TextInput({ placeholder: '用户名（可选）', text: this.newUsername })
+              .width('100%').height(44).margin({ bottom: 10 })
+              .onChange((value: string) => { this.newUsername = value; })
+
+            TextInput({ placeholder: 'user_key（必填）', text: this.newToken })
+              .width('100%').height(44).margin({ bottom: 16 })
+              .type(InputType.Password)
+              .onChange((value: string) => { this.newToken = value; })
+
+            Row() {
+              Button('取消')
+                .width(80).height(36).backgroundColor('#F5F5F5').fontColor('#555555')
+                .onClick(() => { this.showAddDialog = false; })
+              Blank()
+              Button(this.adding ? '验证中…' : '添加')
+                .width(80).height(36).backgroundColor('#1A73E8')
+                .enabled(!this.adding)
+                .onClick(() => { this.addNewAccount(); })
+            }
+            .width('100%')
+          }
+          .width('100%').height('68%')
+          .padding(16).backgroundColor('#FFFFFF')
+          .borderRadius({ topLeft: 12, topRight: 12 })
+        }
+        .width('100%').height('100%')
+        .position({ x: 0, y: 0 })
+      }
+    }
+    .width('100%').height('100%')
+    .backgroundColor('#F5F7FA')
+  }
+
+  @Builder
+  AccountItem(account: AccountInfo) {
+    Row() {
+      Column() {
+        Row() {
+          Text(account.displayName)
+            .fontSize(15).fontWeight(FontWeight.Bold)
+            .fontColor(account.id === this.activeId ? '#1A73E8' : '#333333')
+          if (account.id === this.activeId) {
+            Text(' 默认')
+              .fontSize(11).fontColor('#1A73E8')
+              .backgroundColor('#E3F2FD').borderRadius(4)
+              .padding({ left: 4, right: 4, top: 1, bottom: 1 })
+              .margin({ left: 6 })
+          }
+        }
+        .width('100%')
+
+        Text((account.username.length > 0 ? account.username + ' · ' : '') + account.server)
+          .fontSize(12).fontColor('#777777')
+          .margin({ top: 3 })
+          .maxLines(1).textOverflow({ overflow: TextOverflow.Ellipsis })
+      }
+      .layoutWeight(1).height('100%')
+      .alignItems(HorizontalAlign.Start)
+      .justifyContent(FlexAlign.Center)
+
+      if (account.id !== this.activeId) {
+        Text('设为默认')
+          .fontSize(12).fontColor('#1A73E8')
+          .margin({ right: 12 })
+          .onClick(() => { this.switchTo(account.id); })
+      }
+
+      Text('删除')
+        .fontSize(12).fontColor('#D93025')
+        .onClick(() => { this.removeAccount(account.id); })
+    }
+    .width('100%').height('100%')
+    .padding({ left: 16, right: 16 })
+    .alignItems(VerticalAlign.Center)
+    .backgroundColor(account.id === this.activeId ? '#F0F7FF' : '#FFFFFF')
+  }
+}
diff --git a/client/harmony/entry/src/main/module.json5 b/client/harmony/entry/src/main/module.json5
new file mode 100644
index 0000000..6891be4
--- /dev/null
+++ b/client/harmony/entry/src/main/module.json5
@@ -0,0 +1,55 @@
+{
+  "module": {
+    "name": "entry",
+    "type": "entry",
+    "description": "$string:module_desc",
+    "mainElement": "EntryAbility",
+    "deviceTypes": [
+      "phone"
+    ],
+    "deliveryWithInstall": true,
+    "installationFree": false,
+    "pages": "$profile:main_pages",
+    "abilities": [
+      {
+        "name": "EntryAbility",
+        "srcEntry": "./ets/entryability/EntryAbility.ets",
+        "description": "$string:EntryAbility_desc",
+        "icon": "$media:layered_image",
+        "label": "$string:EntryAbility_label",
+        "startWindowIcon": "$media:startIcon",
+        "startWindowBackground": "$color:start_window_background",
+        "exported": true,
+        "skills": [
+          {
+            "entities": [
+              "entity.system.home"
+            ],
+            "actions": [
+              "ohos.want.action.home"
+            ]
+          }
+        ]
+      }
+    ],
+    "requestPermissions": [
+      {
+        "name": "ohos.permission.INTERNET"
+      }
+    ],
+    "extensionAbilities": [
+      {
+        "name": "EntryBackupAbility",
+        "srcEntry": "./ets/entrybackupability/EntryBackupAbility.ets",
+        "type": "backup",
+        "exported": false,
+        "metadata": [
+          {
+            "name": "ohos.extension.backup",
+            "resource": "$profile:backup_config"
+          }
+        ],
+      }
+    ]
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/base/element/color.json b/client/harmony/entry/src/main/resources/base/element/color.json
new file mode 100644
index 0000000..3c71296
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/element/color.json
@@ -0,0 +1,8 @@
+{
+  "color": [
+    {
+      "name": "start_window_background",
+      "value": "#FFFFFF"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/base/element/float.json b/client/harmony/entry/src/main/resources/base/element/float.json
new file mode 100644
index 0000000..33ea223
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/element/float.json
@@ -0,0 +1,8 @@
+{
+  "float": [
+    {
+      "name": "page_text_font_size",
+      "value": "50fp"
+    }
+  ]
+}
diff --git a/client/harmony/entry/src/main/resources/base/element/string.json b/client/harmony/entry/src/main/resources/base/element/string.json
new file mode 100644
index 0000000..8409b2e
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/element/string.json
@@ -0,0 +1,16 @@
+{
+  "string": [
+    {
+      "name": "module_desc",
+      "value": "module description"
+    },
+    {
+      "name": "EntryAbility_desc",
+      "value": "description"
+    },
+    {
+      "name": "EntryAbility_label",
+      "value": "AgentMailHarmony"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/base/media/background.png b/client/harmony/entry/src/main/resources/base/media/background.png
new file mode 100644
index 0000000..e129e5a
Binary files /dev/null and b/client/harmony/entry/src/main/resources/base/media/background.png differ
diff --git a/client/harmony/entry/src/main/resources/base/media/foreground.png b/client/harmony/entry/src/main/resources/base/media/foreground.png
new file mode 100644
index 0000000..e129e5a
Binary files /dev/null and b/client/harmony/entry/src/main/resources/base/media/foreground.png differ
diff --git a/client/harmony/entry/src/main/resources/base/media/layered_image.json b/client/harmony/entry/src/main/resources/base/media/layered_image.json
new file mode 100644
index 0000000..fb49920
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/media/layered_image.json
@@ -0,0 +1,7 @@
+{
+  "layered-image":
+  {
+    "background" : "$media:background",
+    "foreground" : "$media:foreground"
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/base/media/startIcon.png b/client/harmony/entry/src/main/resources/base/media/startIcon.png
new file mode 100644
index 0000000..e129e5a
Binary files /dev/null and b/client/harmony/entry/src/main/resources/base/media/startIcon.png differ
diff --git a/client/harmony/entry/src/main/resources/base/profile/backup_config.json b/client/harmony/entry/src/main/resources/base/profile/backup_config.json
new file mode 100644
index 0000000..78f40ae
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/profile/backup_config.json
@@ -0,0 +1,3 @@
+{
+  "allowToBackupRestore": true
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/base/profile/main_pages.json b/client/harmony/entry/src/main/resources/base/profile/main_pages.json
new file mode 100644
index 0000000..dd9d3ff
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/base/profile/main_pages.json
@@ -0,0 +1,11 @@
+{
+  "src": [
+    "pages/LoginPage",
+    "pages/MainPage",
+    "pages/MailDetailPage",
+    "pages/ComposePage",
+    "pages/SettingsPage",
+    "pages/SessionsPage",
+    "pages/Index"
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/entry/src/main/resources/dark/element/color.json b/client/harmony/entry/src/main/resources/dark/element/color.json
new file mode 100644
index 0000000..79b11c2
--- /dev/null
+++ b/client/harmony/entry/src/main/resources/dark/element/color.json
@@ -0,0 +1,8 @@
+{
+  "color": [
+    {
+      "name": "start_window_background",
+      "value": "#000000"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/client/harmony/hvigor/hvigor-config.json5 b/client/harmony/hvigor/hvigor-config.json5
new file mode 100644
index 0000000..20f88f3
--- /dev/null
+++ b/client/harmony/hvigor/hvigor-config.json5
@@ -0,0 +1,23 @@
+{
+  "modelVersion": "6.1.0",
+  "dependencies": {
+  },
+  "execution": {
+    // "analyze": "normal",                     /* Define the build analyze mode. Value: [ "normal" | "advanced" | "ultrafine" | false ]. Default: "normal" */
+    // "daemon": true,                          /* Enable daemon compilation. Value: [ true | false ]. Default: true */
+    // "incremental": true,                     /* Enable incremental compilation. Value: [ true | false ]. Default: true */
+    // "parallel": true,                        /* Enable parallel compilation. Value: [ true | false ]. Default: true */
+    // "typeCheck": false,                      /* Enable typeCheck. Value: [ true | false ]. Default: false */
+    // "optimizationStrategy": "memory"         /* Define the optimization strategy. Value: [ "memory" | "performance" ]. Default: "memory" */
+  },
+  "logging": {
+    // "level": "info"                          /* Define the log level. Value: [ "debug" | "info" | "warn" | "error" ]. Default: "info" */
+  },
+  "debugging": {
+    // "stacktrace": false                      /* Disable stacktrace compilation. Value: [ true | false ]. Default: false */
+  },
+  "nodeOptions": {
+    // "maxOldSpaceSize": 8192                  /* Enable nodeOptions maxOldSpaceSize compilation. Unit M. Used for the daemon process. Default: 8192*/
+    // "exposeGC": true                         /* Enable to trigger garbage collection explicitly. Default: true*/
+  }
+}
diff --git a/client/harmony/hvigorfile.ts b/client/harmony/hvigorfile.ts
new file mode 100644
index 0000000..8890d28
--- /dev/null
+++ b/client/harmony/hvigorfile.ts
@@ -0,0 +1,7 @@
+// @ts-nocheck – Template file, only used when copied into a project directory
+import { appTasks } from '@ohos/hvigor-ohos-plugin';
+
+export default {
+  system: appTasks /* Built-in plugin of Hvigor. It cannot be modified. */,
+  plugins: [] /* Custom plugin to extend the functionality of Hvigor. */,
+};
diff --git a/client/harmony/oh-package-lock.json5 b/client/harmony/oh-package-lock.json5
new file mode 100644
index 0000000..c5a91ec
--- /dev/null
+++ b/client/harmony/oh-package-lock.json5
@@ -0,0 +1,28 @@
+{
+  "meta": {
+    "stableOrder": true,
+    "enableUnifiedLockfile": false
+  },
+  "lockfileVersion": 3,
+  "ATTENTION": "THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.",
+  "specifiers": {
+    "@ohos/hamock@1.0.0": "@ohos/hamock@1.0.0",
+    "@ohos/hypium@1.0.25": "@ohos/hypium@1.0.25"
+  },
+  "packages": {
+    "@ohos/hamock@1.0.0": {
+      "name": "@ohos/hamock",
+      "version": "1.0.0",
+      "integrity": "sha512-K6lDPYc6VkKe6ZBNQa9aoG+ZZMiwqfcR/7yAVFSUGIuOAhPvCJAo9+t1fZnpe0dBRBPxj2bxPPbKh69VuyAtDg==",
+      "resolved": "https://ohpm.openharmony.cn/ohpm/@ohos/hamock/-/hamock-1.0.0.har",
+      "registryType": "ohpm"
+    },
+    "@ohos/hypium@1.0.25": {
+      "name": "@ohos/hypium",
+      "version": "1.0.25",
+      "integrity": "sha512-l6uO2pjl8HyEKdekLqQt7tUpWbDqX/42zoAzkagtUVZAW9jT6lMvbe54MVjoLxq/RwQGygRvi6j4GpypSMFSHw==",
+      "resolved": "https://ohpm.openharmony.cn/ohpm/@ohos/hypium/-/hypium-1.0.25.har",
+      "registryType": "ohpm"
+    }
+  }
+}
\ No newline at end of file
diff --git a/client/harmony/oh-package.json5 b/client/harmony/oh-package.json5
new file mode 100644
index 0000000..41eb3e0
--- /dev/null
+++ b/client/harmony/oh-package.json5
@@ -0,0 +1,10 @@
+{
+  "modelVersion": "6.1.0",
+  "description": "Please describe the basic information.",
+  "dependencies": {
+  },
+  "devDependencies": {
+    "@ohos/hypium": "1.0.25",
+    "@ohos/hamock": "1.0.0"
+  }
+}
diff --git a/deploy/install.sh b/deploy/install.sh
index c8783a2..d27d19d 100755
--- a/deploy/install.sh
+++ b/deploy/install.sh
@@ -15,8 +15,8 @@ ETC=/etc/agentmail
 [[ $EUID -eq 0 ]] || { echo "需要 root：sudo $0" >&2; exit 1; }
 
 echo "==> 构建前端"
-( cd "$REPO/web" && npm ci --no-audit --no-fund 2>/dev/null || npm install --no-audit --no-fund )
-( cd "$REPO/web" && npm run typecheck && npm test && npm run build )
+( cd "$REPO/client/electron" && npm ci --no-audit --no-fund 2>/dev/null || npm install --no-audit --no-fund )
+( cd "$REPO/client/electron" && npm run typecheck && npm test && npm run build )
 
 echo "==> 校验插件共用模块同源"
 # lib/ 下的纯函数模块在三个插件里逐字节相同（见 docs/PLUGIN-CONTRACT.md 第六节）。
@@ -34,7 +34,7 @@ fi
 # DSH 插件：先构建再跑测试。
 #
 # 它是 TypeScript 写的，package.json 的 main 指向 dist/index.js，而 dist/ 不进版本库
-# （与 web/dist 同理）—— 新克隆里不先 tsc，DSH 加载插件时会直接找不到入口。
+# （与 client/electron/dist 同理）—— 新克隆里不先 tsc，DSH 加载插件时会直接找不到入口。
 # 测试本身只碰 lib/ 下的纯函数（不依赖 dist），但先构建能把类型错误也当成门禁。
 #
 # 盖住的三类约定都是「错了不当场报错、只在深处炸一个无关错误」：
@@ -64,18 +64,18 @@ echo "==> 前端产物嵌入 Gateway"
 # 只清构建产物，不能 rm -rf 整个目录：
 # placeholder.html 在版本库里（让 go:embed 在新克隆里能编译），
 # 删掉它会让 git 看到一个本地删除，下一次 commit -a 就把它从仓库里带走了。
-rm -rf "$REPO/gateway/internal/static/static/assets"
-rm -f "$REPO/gateway/internal/static/static/index.html"
-cp -r "$REPO/web/dist/." "$REPO/gateway/internal/static/static/"
+rm -rf "$REPO/server/internal/static/static/assets"
+rm -f "$REPO/server/internal/static/static/index.html"
+cp -r "$REPO/client/electron/dist/." "$REPO/server/internal/static/static/"
 
 echo "==> 构建 Gateway（单二进制，内含前端 + SQLite）"
 # 先删再建：go build -o 到已存在的路径时可能拿到 stale 二进制（此坑中过多次）
-rm -f "$REPO/gateway/agentmail-gateway"
-( cd "$REPO/gateway" && go vet ./... && go test ./... && go build -o "$REPO/gateway/agentmail-gateway" ./cmd/server )
+rm -f "$REPO/server/agentmail-gateway"
+( cd "$REPO/server" && go vet ./... && go test ./... && go build -o "$REPO/server/agentmail-gateway" ./cmd/server )
 
 echo "==> 安装到 $PREFIX"
 install -d "$PREFIX" "$PREFIX/data" "$ETC"
-install -m 0755 "$REPO/gateway/agentmail-gateway" "$PREFIX/agentmail-gateway"
+install -m 0755 "$REPO/server/agentmail-gateway" "$PREFIX/agentmail-gateway"
 
 # ---- env 文件：仅在缺失时生成，密码随机 ----
 if [[ ! -f "$ETC/gateway.env" ]]; then
diff --git a/deploy/redeploy-gateway.sh b/deploy/redeploy-gateway.sh
index 635a48f..e06b544 100755
--- a/deploy/redeploy-gateway.sh
+++ b/deploy/redeploy-gateway.sh
@@ -64,7 +64,7 @@ run() {
   eval "$@"
 }
 
-[ -d "$REPO/gateway" ] || { bad "找不到 $REPO/gateway"; exit 2; }
+[ -d "$REPO/server" ] || { bad "找不到 $REPO/server"; exit 2; }
 command -v sqlite3 >/dev/null 2>&1 || { bad "缺少 sqlite3，无法安全备份数据库"; exit 2; }
 
 say "0. 计划"
@@ -75,17 +75,17 @@ printf '  服务     : %s\n' "$SERVICE"
 [ "$DRY_RUN" = 1 ] && printf '  模式     : DRY-RUN（不落地）\n' || printf '  模式     : 真实执行\n'
 
 # ---------------------------------------------------------------- 1 前端产物
-if [ "$SYNC_WEB" = 1 ] && [ -d "$REPO/web/dist/assets" ]; then
+if [ "$SYNC_WEB" = 1 ] && [ -d "$REPO/client/electron/dist/assets" ]; then
   say "1. 同步前端产物进 go:embed 目录"
   # 只清构建产物：placeholder.html 在版本库里（让 go:embed 在新克隆里能编译），
   # 删掉它会让 git 看到一个本地删除，下一次 commit -a 就把它从仓库带走。
-  run "rm -rf '$REPO/gateway/internal/static/static/assets'"
-  run "rm -f '$REPO/gateway/internal/static/static/index.html'"
-  run "cp -r '$REPO/web/dist/.' '$REPO/gateway/internal/static/static/'"
+  run "rm -rf '$REPO/server/internal/static/static/assets'"
+  run "rm -f '$REPO/server/internal/static/static/index.html'"
+  run "cp -r '$REPO/client/electron/dist/.' '$REPO/server/internal/static/static/'"
   ok "前端产物已同步"
 else
   say "1. 跳过前端同步"
-  [ "$SYNC_WEB" = 0 ] && ok "--skip-web" || warn "web/dist 不存在，先跑 cd web && npm run build"
+  [ "$SYNC_WEB" = 0 ] && ok "--skip-web" || warn "client/electron/dist 不存在，先跑 cd client/electron && npm run build"
 fi
 
 # ---------------------------------------------------------------- 2 静态检查与测试
@@ -93,12 +93,12 @@ say "2. 构建前检查"
 if [ "$DRY_RUN" = 1 ]; then
   printf '  [dry-run] go vet ./... && go test ./...\n'
 else
-  ( cd "$REPO/gateway" && go vet ./... ) || { bad "go vet 不过，终止"; exit 1; }
+  ( cd "$REPO/server" && go vet ./... ) || { bad "go vet 不过，终止"; exit 1; }
   ok "go vet 通过"
   if [ "$SKIP_TESTS" = 1 ]; then
     warn "--skip-tests：跳过测试（急救模式，事后必须补跑）"
   else
-    ( cd "$REPO/gateway" && timeout 280 go test ./... -timeout 250s ) \
+    ( cd "$REPO/server" && timeout 280 go test ./... -timeout 250s ) \
       || { bad "测试不过，终止部署"; exit 1; }
     ok "go test 全包通过"
   fi
@@ -110,9 +110,9 @@ STAGE="/tmp/agentmail-gateway-build-$TS"
 # 先删再建：go build -o 到已存在的路径时可能拿到 stale 二进制（此坑中过多次）
 run "rm -f '$STAGE'"
 if [ "$DRY_RUN" = 1 ]; then
-  printf '  [dry-run] (cd gateway && go build -o %s ./cmd/server)\n' "$STAGE"
+  printf '  [dry-run] (cd server && go build -o %s ./cmd/server)\n' "$STAGE"
 else
-  ( cd "$REPO/gateway" && go build -o "$STAGE" ./cmd/server ) \
+  ( cd "$REPO/server" && go build -o "$STAGE" ./cmd/server ) \
     || { bad "构建失败"; exit 1; }
   ok "构建完成 $(du -h "$STAGE" | cut -f1)"
 fi
diff --git a/deploy/service-failure-notify.mjs b/deploy/service-failure-notify.mjs
new file mode 100644
index 0000000..ea186aa
--- /dev/null
+++ b/deploy/service-failure-notify.mjs
@@ -0,0 +1,248 @@
+#!/usr/bin/env node
+/**
+ * systemd 服务异常退出邮件上报器。
+ *
+ * 两种调用：
+ *   service-failure-notify.mjs --report --service pi-mail-bridge.service
+ *   service-failure-notify.mjs --flush  --service pi-mail-bridge.service
+ *
+ * `--report` 供 ExecStopPost 使用。systemd 会把 SERVICE_RESULT / EXIT_CODE /
+ * EXIT_STATUS / INVOCATION_ID 注入命令环境；正常 stop/restart 不上报，只有
+ * exit-code、signal、oom-kill、timeout、watchdog 等异常结果才发信。
+ *
+ * Gateway 暂时不可达时，报告只把**不含密钥**的邮件 payload 落到本地 spool；
+ * 下次服务启动由 `--flush` 补发。relay_key 取 systemd invocation id，立即发送与
+ * 补发即使竞态也只会入库一封。
+ */
+
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, readdir, readFile, rename, rm, stat, writeFile } from 'node:fs/promises';
+import { basename, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const DEFAULT_GATEWAY = 'http://127.0.0.1:8180';
+const DEFAULT_RECIPIENT = 'jianf@';
+const DEFAULT_SPOOL = '/var/lib/agentmail/failure-spool';
+const MAX_SPOOL_FILES = 100;
+const REQUEST_TIMEOUT_MS = 5_000;
+
+function argValue(argv, name) {
+  const i = argv.indexOf(name);
+  return i >= 0 && i + 1 < argv.length ? argv[i + 1] : '';
+}
+
+export function isAbnormalExit(env = process.env) {
+  const result = String(env.SERVICE_RESULT || '').trim();
+  if (result) return result !== 'success';
+
+  const code = String(env.EXIT_CODE || '').trim();
+  const status = String(env.EXIT_STATUS || '').trim();
+  if (!code && !status) return false;
+  return !(code === 'exited' && (status === '' || status === '0'));
+}
+
+function cleanServiceName(value, agentName) {
+  const raw = String(value || '').trim();
+  if (raw) return basename(raw).replace(/[^A-Za-z0-9_.@-]/g, '-').slice(0, 96);
+  return `${String(agentName || 'agent').replace(/[^A-Za-z0-9_.@-]/g, '-')}-bridge`;
+}
+
+function redact(value, env) {
+  let out = String(value || '');
+  for (const secret of [env.AGENTMAIL_AGENT_KEY, env.AGENTMAIL_AGENT_SECRET]) {
+    if (secret) out = out.split(String(secret)).join('[REDACTED]');
+  }
+  return out
+    .replace(/Bearer\s+[A-Za-z0-9._~+\/-]+/gi, 'Bearer [REDACTED]')
+    .replace(/\b(?:ak_[A-Za-z0-9_-]+|sk-[A-Za-z0-9_-]{12,})\b/g, '[REDACTED]')
+    .slice(0, 1_500);
+}
+
+function relayKeyFor(env, serviceName) {
+  const invocation = String(env.INVOCATION_ID || '').trim();
+  if (invocation) return `service-failure:${invocation}`;
+  const seed = `${serviceName}:${Date.now()}:${randomUUID()}`;
+  return `service-failure:${createHash('sha256').update(seed).digest('hex')}`;
+}
+
+export function buildFailurePayload({
+  env = process.env,
+  serviceName = '',
+  reason = '',
+  error = null,
+  now = new Date(),
+} = {}) {
+  const agentName = String(env.AGENTMAIL_AGENT_NAME || 'unknown-agent').trim();
+  const service = cleanServiceName(serviceName || env.AGENTMAIL_SERVICE_NAME, agentName);
+  const result = String(env.SERVICE_RESULT || reason || 'unexpected-exit');
+  const exitCode = String(env.EXIT_CODE || 'unknown');
+  const exitStatus = String(env.EXIT_STATUS || 'unknown');
+  const detail = redact(error?.stack || error?.message || error || reason, env);
+
+  const lines = [
+    `**${agentName}** 的宿主服务 **${service}** 异常终止。`,
+    '',
+    `- 时间：${now.toISOString()}`,
+    `- systemd 结果：${result}`,
+    `- 退出类型：${exitCode}`,
+    `- 退出状态：${exitStatus}`,
+    `- invocation：${String(env.INVOCATION_ID || 'unknown')}`,
+  ];
+  if (detail) lines.push('', '**异常详情（已脱敏）**：', '```text', detail, '```');
+  lines.push(
+    '',
+    'systemd 已按指数退避策略自动重启该服务；如果邮件连续出现，请检查：',
+    `\`journalctl -u ${service} -n 100 --no-pager\``,
+  );
+
+  return {
+    to: String(env.AGENTMAIL_FAILURE_RECIPIENT || DEFAULT_RECIPIENT),
+    subject: `[${agentName}] 桥服务异常终止`,
+    body: lines.join('\n'),
+    relay: 'summary',
+    relay_key: relayKeyFor(env, service),
+  };
+}
+
+async function postPayload(payload, env = process.env) {
+  const key = String(env.AGENTMAIL_AGENT_KEY || '').trim();
+  if (!key) throw new Error('AGENTMAIL_AGENT_KEY 未配置');
+
+  const base = String(env.AGENTMAIL_GATEWAY_URL || DEFAULT_GATEWAY).replace(/\/+$/, '');
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+  try {
+    const res = await fetch(`${base}/api/v1/mail/send`, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${key}`,
+        'X-Agent-Name': String(env.AGENTMAIL_AGENT_NAME || ''),
+        'Content-Type': 'application/json',
+      },
+      body: JSON.stringify(payload),
+      signal: controller.signal,
+    });
+    const responseBody = await res.text();
+    if (!res.ok) throw new Error(`Gateway HTTP ${res.status}: ${responseBody.slice(0, 300)}`);
+    return responseBody;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+function safeAgentName(env) {
+  return String(env.AGENTMAIL_AGENT_NAME || 'unknown-agent')
+    .replace(/[^A-Za-z0-9_.@-]/g, '-')
+    .slice(0, 96);
+}
+
+function spoolDirFor(env) {
+  return join(String(env.AGENTMAIL_FAILURE_SPOOL || DEFAULT_SPOOL), safeAgentName(env));
+}
+
+function safeSpoolName(payload) {
+  return `${createHash('sha256').update(String(payload.relay_key)).digest('hex')}.json`;
+}
+
+async function pruneSpool(spoolDir) {
+  const names = (await readdir(spoolDir).catch(() => []))
+    .filter((name) => name.endsWith('.json'));
+  if (names.length <= MAX_SPOOL_FILES) return;
+
+  const entries = await Promise.all(names.map(async (name) => ({
+    name,
+    mtime: (await stat(join(spoolDir, name))).mtimeMs,
+  })));
+  entries.sort((a, b) => a.mtime - b.mtime);
+  for (const entry of entries.slice(0, entries.length - MAX_SPOOL_FILES)) {
+    await rm(join(spoolDir, entry.name), { force: true });
+  }
+}
+
+export async function spoolPayload(payload, env = process.env) {
+  // 每个 Agent 独立目录：否则 pi 启动时可能拿自己的密钥去补发 dsh 的报告，
+  // 发件身份与正文主体会错位，relay_key 的幂等范围也变了。
+  const spoolDir = spoolDirFor(env);
+  await mkdir(spoolDir, { recursive: true, mode: 0o700 });
+  const target = join(spoolDir, safeSpoolName(payload));
+  const temp = `${target}.${process.pid}.${randomUUID()}.tmp`;
+  await writeFile(temp, `${JSON.stringify({ payload }, null, 2)}\n`, { mode: 0o600 });
+  await rename(temp, target);
+  await pruneSpool(spoolDir);
+  return target;
+}
+
+export async function notifyCrash(reason, error, options = {}) {
+  const env = options.env || process.env;
+  const payload = buildFailurePayload({
+    env,
+    serviceName: options.serviceName,
+    reason,
+    error,
+    now: options.now,
+  });
+  try {
+    await postPayload(payload, env);
+    return { sent: true, spooled: false, payload };
+  } catch (sendError) {
+    if (options.spool === false) throw sendError;
+    const path = await spoolPayload(payload, env);
+    return { sent: false, spooled: true, path, payload, error: sendError };
+  }
+}
+
+export async function flushSpool(env = process.env) {
+  const spoolDir = spoolDirFor(env);
+  const names = (await readdir(spoolDir).catch(() => []))
+    .filter((name) => name.endsWith('.json'))
+    .sort();
+  let sent = 0;
+  let failed = 0;
+
+  for (const name of names) {
+    const path = join(spoolDir, name);
+    try {
+      const record = JSON.parse(await readFile(path, 'utf8'));
+      await postPayload(record.payload, env);
+      await rm(path, { force: true });
+      sent++;
+    } catch {
+      failed++;
+    }
+  }
+  return { total: names.length, sent, failed };
+}
+
+async function main(argv = process.argv.slice(2), env = process.env) {
+  const serviceName = argValue(argv, '--service');
+  if (argv.includes('--flush')) {
+    const result = await flushSpool(env);
+    if (result.sent || result.failed) {
+      console.error(`[agentmail-failure-notify] spool: sent=${result.sent} failed=${result.failed}`);
+    }
+    return;
+  }
+  if (!argv.includes('--report')) throw new Error('需要 --report 或 --flush');
+  if (!isAbnormalExit(env)) return;
+
+  if (argv.includes('--dry-run')) {
+    console.log(JSON.stringify(buildFailurePayload({ env, serviceName }), null, 2));
+    return;
+  }
+
+  const result = await notifyCrash(env.SERVICE_RESULT || 'unexpected-exit', null, {
+    env,
+    serviceName,
+  });
+  console.error(result.sent
+    ? `[agentmail-failure-notify] ${serviceName} 异常已上报`
+    : `[agentmail-failure-notify] Gateway 不可达，报告已暂存 ${result.path}`);
+}
+
+const isCLI = process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url);
+if (isCLI) {
+  main().catch((error) => {
+    console.error(`[agentmail-failure-notify] ${error?.message || error}`);
+    process.exitCode = 1;
+  });
+}
diff --git a/docs/MVP-SPEC.md b/docs/MVP-SPEC.md
index 5fefe1e..bd4d084 100644
--- a/docs/MVP-SPEC.md
+++ b/docs/MVP-SPEC.md
@@ -110,7 +110,7 @@
 
 以下 DDL 以 PostgreSQL 方言书写。SQLite 侧结构与语义完全一致，仅方言不同
 （`UUID`→`TEXT`、`TIMESTAMPTZ`→`DATETIME`、`JSONB`→`TEXT`、`VARCHAR(n)`→`TEXT`），
-见 `gateway/internal/db/migrations/init_sqlite.sql`。
+见 `server/internal/db/migrations/init_sqlite.sql`。
 
 ### 3.1 agents 表
 
diff --git a/docs/PHASE7-REMAINING.md b/docs/PHASE7-REMAINING.md
index dbf59fb..3a0223c 100644
--- a/docs/PHASE7-REMAINING.md
+++ b/docs/PHASE7-REMAINING.md
@@ -105,10 +105,10 @@ SSE 连接的 handler 在首次连接时从缓冲区头部开始（客户端传
 **修法**：同上，sessionrate.go 重写为调用 RateLimitCheckAndRecord。
 
 ### P2 — 组件级测试
-**现状**：有结构性回归（`web/test/narrow-layout.test.mjs`，28 条断言，
+**现状**：有结构性回归（`client/electron/test/narrow-layout.test.mjs`，28 条断言，
 读源码验形态）与一套 playwright 手工脚本，但**没有渲染组件跑断言的测试**。
 **范围**：关键组件（AddressInput 补全、PermissionPanel 决策、WorkCard 预算渲染）。
-**已有的浏览器实测**：`web/test/manual/`（`npm run test:narrow` /
+**已有的浏览器实测**：`client/electron/test/manual/`（`npm run test:narrow` /
 `npm run test:wide`）—— 连本机共享 Chromium 量真实盒子与命中区。
 不在 `npm test` 里，因为要一个跑着的浏览器加一个活的 Gateway。
 剩下的是把它接进 CI（需要一个 headless 环境与一个测试用 Gateway 实例）。
@@ -176,7 +176,7 @@ playwright 端到端 18 项全通过（含「底部导航六项都命中自己
 「工具按钮命中区 >= 44px」、五个页面各有纵向滚动容器、无横向溢出、
 320px 无横向溢出）；宽屏回归 5 项全通过（三栏并排、常驻侧栏仍有退出登录、
 无返回按钮、`.tap` 伪元素在宽屏不生效、无溢出）。
-`web/test/narrow-layout.test.mjs` 从 20 条扩到 37 条，把上述每一条都钉住。
+`client/electron/test/narrow-layout.test.mjs` 从 20 条扩到 37 条，把上述每一条都钉住。
 
 滚动检查的判据是「**有**滚动容器」而不是「当前正在滚动」：
 内容暂时不够高时后者为假，但页面是健康的 —— 真正的 bug 是根本没有那一层。
@@ -342,7 +342,7 @@ T 前的 `M`（月）与正号 trigger 一律忽略而不是乱换算）。
   **TRIGGER duration 全形态**/**导出导入往返**/**默认模板必须是变量形式**
 - `internal/scheduler/calendar_test.go`：模板渲染 7 例（含**本地时区**与
   **同一时刻不同 Location 渲染一致**）
-- `web/test/components/calendar.test.tsx` 35 例
+- `client/electron/test/components/calendar.test.tsx` 35 例
 - 生产端到端：建事件 → 30 秒内触发 → 邮件入库、正文变量已替换成本地时间 →
   重复事件推进到次日 → **连续两个 tick 零重发**（修复前每 tick 一封）→
   iCal 导入 `-PT45M`/`FREQ=WEEKLY` 正确落库 → 导出再导入闭环一致 →
diff --git a/docs/PLAN.md b/docs/PLAN.md
index 71fc6e1..6863f19 100644
--- a/docs/PLAN.md
+++ b/docs/PLAN.md
@@ -22,12 +22,12 @@ Phase 6 (Week 6+)   进阶功能         — 对话树 / 转发 / 配额 / DSH 
 
 ### 1.1 项目初始化 ✅
 
-- [x] 创建项目目录 `gateway/`
+- [x] 创建项目目录 `server/`
 - [x] `go mod init github.com/agentmail/gateway`
 - [x] 目录结构规划：
 
 ```
-gateway/
+server/
 ├── cmd/
 │   └── server/
 │       └── main.go              # 入口，启动 HTTP 服务
@@ -213,7 +213,7 @@ GET  /api/v1/events/status            → SSE 连接状态
 - [x] 两份 schema：`migrations/init.sql`（PG）与 `migrations/init_sqlite.sql`
 - [x] `DATABASE_URL` 识别 `postgres://`、`sqlite://`、`file:`、裸 `.db` 路径；空值 = 内置 SQLite
 - [x] SQLite 连接开 `WAL` + `busy_timeout=5000` + `foreign_keys=ON`，连接池限 1（单写者）
-- [x] 删除 `docker-compose.yml` 与重复的 `gateway/migrations/`
+- [x] 删除 `docker-compose.yml` 与重复的 `server/migrations/`
 
 ### 1.9 部署：systemd 单元
 
@@ -305,12 +305,12 @@ Agent 不需要手动调工具。opencode 的插件契约没有提供拦截这
 
 ### 3.1 项目初始化
 
-- [x] `web/` 目录，Vite + React + TypeScript + TailwindCSS
+- [x] `client/electron/` 目录，Vite + React + TypeScript + TailwindCSS
 
 ### 3.2 目录结构（已落地）
 
 ```
-web/src/
+client/electron/src/
 ├── api/          client.ts（HTTP）/ sse.ts（EventSource + 指数退避重连）
 ├── stores/       mail / session / contact / ui / auth（Zustand）
 ├── components/   Sidebar / MailList / MailView / ComposePage / ContactPanel
@@ -743,7 +743,7 @@ execute: {
       缺头回 `Missing X-Agent-Name or X-Agent-Secret header`
 - [x] 畸形三维地址：缺 name 位、空 to、别名不存在均有明确错误文案
 - [x] 邮件内容 XSS 防护：react-markdown 默认不解析 raw HTML 且清空非 http(s)/mailto 协议 URL，
-      新增回归测试 `web/test/markdown-xss.test.mjs`（`npm test`）守住这两个前提，
+      新增回归测试 `client/electron/test/markdown-xss.test.mjs`（`npm test`）守住这两个前提，
       防止日后为「支持 HTML 邮件」加上 rehype-raw 而无声开口子
 - [x] 并发安全：`sse.Manager` 用 `sync.RWMutex`；`go build -race` 通过；
       实测 10 客户端并发连接（断开后计数归零）+ 20 封并发发信全部成功（SQLite WAL + busy_timeout）
@@ -1018,7 +1018,7 @@ execute: {
       **只有这两个端点接受 query 令牌**，其余一律 401 —— URL 里的令牌会进访问日志与 Referer；
       附件下载因此单独挂在 `UserAuthAllowQueryToken` 中间件下
 - [x] CORS 暴露 `Content-Disposition` 与 `Content-Length`（前者是取文件名所必需）
-- [x] `web/src/api/config.ts` 集中基地址与令牌：
+- [x] `client/electron/src/api/config.ts` 集中基地址与令牌：
       `VITE_API_BASE` 构建期注入、`window.__AGENTMAIL_API_BASE__` 运行时覆盖、`setToken()` 切凭证。
       业务代码不感知 Cookie 与密钥的差异，`src/api/` 可整体抽成 SDK
 - [x] `docs/API.md`：完整接口清单、三类调用者的认证边界、错误码约定
@@ -1343,7 +1343,7 @@ MVP 计划（Phase 1-6）已全部落地并在 systemd 部署态实测通过。
       只滑走覆盖层的话下次进列表又会弹回来
 - [x] `narrowPane` 在宽屏下**也维护**：否则从窄屏拖宽再拖回来，
       用户会发现自己回到了列表，刚打开的邮件不见了
-- [x] `web/test/narrow-layout.test.mjs`：结构性断言（现 28 条），
+- [x] `client/electron/test/narrow-layout.test.mjs`：结构性断言（现 28 条），
       钉住「覆盖而非分栏」「延迟卸载」「双层 rAF」「条件渲染而非 md:hidden」
       「无裸 px-6」等不变量。不做像素级视觉快照 —— 字体差异下极脆
 
@@ -1388,7 +1388,7 @@ MVP 计划（Phase 1-6）已全部落地并在 systemd 部署态实测通过。
       空间不足时自动退化为 0，于是矮屏变成正常的顶对齐可滚布局，
       而高屏仍然垂直居中（390x844 与 1280x800 实测 centered=true）
 
-验证：`web/test/manual/`（`npm run test:narrow` / `test:wide`）
+验证：`client/electron/test/manual/`（`npm run test:narrow` / `test:wide`）
 窄屏 18 项 + 宽屏 5 项全通过；结构性断言从 20 条扩到 37 条，
 把每一条修复都钉住。
 
@@ -1589,7 +1589,7 @@ plan/workspace/full **一一对应** —— 不是巧合，是同一个问题的
 
 - 前端有 Markdown XSS 与窄屏结构性回归，但没有**渲染组件跑断言**的测试
 - 深色主题未做
-- 窄屏实测脚本已入库（`web/test/manual/`），但没进 CI ——
+- 窄屏实测脚本已入库（`client/electron/test/manual/`），但没进 CI ——
   要一个 headless 环境加一个测试用 Gateway 实例
 - 登录限速与新建会话限速已改为 DB 事务（rate_limits 表），多实例部署不再各自计数
 - SQLite 抄送查询走 `json_each` 全表展开，无索引；单机量级下够用，
@@ -1680,6 +1680,67 @@ $ sqlite3 "SELECT COUNT(*) FROM attachments WHERE mail_id='2a64fdc8…'"
 - [ ] C：`GET /mail/{id}` 返回 `from_human` / `to_human`；`addr-verify` 两项转绿
 - [ ] D：契约文档有 `B-5.6` 条款；demo 按 `from_human` 决定是否回信
 
+### 7.14 DSH 主动询问邮件桥接（严重阻塞缺口）
+
+本轮生产问题：DSH 邮件会话调用 `ask_user_question` 后一直停在询问状态，AgentMail
+里没有任何待处理邮件。根因不是 SSE 或 Gateway 丢信，而是桥只监听了
+`approval/request`（危险工具的审批 seam），没有接管 `ask_user_question` 使用的
+`ctx.userQuestions` seam。DSH Web UI 是后者唯一 provider；邮件驱动会话没有人在 DSH
+页面作答，所以工具 Promise 永远不返回。
+
+修复边界：
+
+1. 在 DSH 的 `tools/execute` around-dispatch 中只拦截**邮件驱动会话**的
+   `ask_user_question`，不替换全局 `userQuestions` provider（该服务只允许一个 provider，
+   强行注册会与 Web UI 冲突）。
+2. 每个问题按原始 `id/question/options/multi_select` 生成一封 Gateway 待处理邮件；
+   单选保留选项原文，自由文本与多选用备注输入承载。多问题按顺序询问，全部回答后
+   还原 DSH 要求的 `{answers:[{id,selected,custom?}]}` 工具结果。
+3. Gateway 的权限请求端点增加 `kind=question`：复用现有决策人追溯、幂等 relay_key、
+   待办列表与 SSE 回传，但**不套权限档位判定**（plan/full 也可能需要补充信息）。
+   `kind=permission` 保持原行为。
+4. 待决映射必须在发 HTTP 请求前登记，堵住“人快速作答、SSE 先于 map 写入”的竞态；
+   abort、插件卸载、永久 HTTP 失败均 fail closed，不留下悬挂 Promise。
+5. 前端把询问类待办显示为“等待回答”，自由文本/多选回答未填写时禁止提交；仍复用
+   现有待处理入口，避免再造第二套不可见队列。
+
+验收：
+
+- [ ] 单选询问经邮件选择后，DSH 工具拿到原始选项标签并继续运行
+- [ ] 无选项询问要求填写文本，空回答不能提交
+- [ ] 多选询问可提交多个原始标签，未知标签不被伪造为有效选择
+- [ ] 两个问题按顺序往返，最终答案数组保持原始 question id 与顺序
+- [ ] plan/workspace/full 三档中的主动询问均可送达；危险工具审批仍只在 workspace 产生
+- [ ] 非邮件驱动 DSH 会话继续使用 Web UI provider，不受桥影响
+
+### 7.13 桥进程异常上报与可靠重试
+
+本轮起因：桥进程意外终止只留在 journal，用户邮箱没有任何提示；同时“自动重连”
+与“处理中任务重试”被混为一谈。现状其实已有两层：systemd 对进程做指数退避重启，
+四桥 SSE 断线后自动重连；但它们不能回答“刚才正在处理的那封邮件怎么办”。
+
+按三层修复，职责不能混：
+
+1. **进程层由 systemd 自愈**：保留 `Restart=` + `RestartSteps=6` +
+   `RestartMaxDelaySec=5min`。插件不在进程内部造第二个 supervisor。
+2. **异常退出必须发邮件**：共用 `deploy/service-failure-notify.mjs` 挂到
+   `ExecStopPost`，读取 systemd 的 `SERVICE_RESULT/EXIT_CODE/EXIT_STATUS`；正常停止不报，
+   exit-code/signal/oom-kill/timeout/watchdog 才报。Gateway 暂不可达时落本地 spool，
+   下次 `ExecStartPost --flush` 补发。通知用稳定 `relay_key` 幂等，避免即时发送与补发重复。
+3. **处理中任务必须重试**：pi worker 无 `done` 就按 1s/2s 有界重投，最多 3 次；
+   `done(ok=false)` 属于已经给出明确失败结论，不盲目重跑。重试耗尽后给原发件人一封
+   故障邮件。整进程重启后仍由未读补拉兜底；homeagent 已有落盘 ledger，保留现状。
+4. **网络层继续重连**：SSE 3–5 秒重连、心跳下一周期再试，不把短暂网络抖动升级成
+   进程重启。
+
+验收：
+
+- [ ] notifier dry-run 能区分正常停止与异常退出，敏感密钥不进入正文/日志
+- [ ] Gateway 暂不可达时报告落盘，`--flush` 后只发一次
+- [ ] pi worker 首次异常退出后自动重投，同一会话仍串行
+- [ ] 连续三次异常后停止重试并调用失败回报，不形成无限崩溃循环
+- [ ] 四个桥宿主服务保留指数退避重启；正常 `systemctl restart` 不产生误报警邮件
+
 ---
 
 ## 文件清单（完整）
@@ -1689,7 +1750,7 @@ agentmail/
 ├── docs/
 │   ├── MVP-SPEC.md            # MVP 技术规格书
 │   └── PLAN.md                # 本文件
-├── gateway/
+├── server/
 │   ├── cmd/server/main.go     # 入口 + 路由编排
 │   ├── internal/
 │   │   ├── config/config.go
@@ -1730,7 +1791,7 @@ agentmail/
 │   └── opencode-mail-bridge/      # 第一个接入平台
 │       ├── package.json
 │       └── index.js               # 凭证 + HTTP + SSE + 四个工具 + event 钩子
-├── web/
+├── client/electron/
 │   ├── src/
 │   │   ├── api/
 │   │   │   ├── client.ts
diff --git a/docs/PLUGIN-CONTRACT.md b/docs/PLUGIN-CONTRACT.md
index 17f4d5e..1869b0e 100644
--- a/docs/PLUGIN-CONTRACT.md
+++ b/docs/PLUGIN-CONTRACT.md
@@ -1665,7 +1665,7 @@ socat 被 `Requires` 带停后再没起来。加 `PartOf` 后又发现 `start` 
 ### 9.14 改名提议的标记拼错是**静默失败**
 
 `<!-- agentmail:rename-session alias="x" reason="y" -->` 由服务端正则解析
-（`gateway/internal/handler/rename_proposal.go`）。少个空格、把双引号写成单引号、
+（`server/internal/handler/rename_proposal.go`）。少个空格、把双引号写成单引号、
 或把 `reason=""` 写成空属性 —— 邮件照常发出，提议凭空消失，而模型以为自己提过了，
 在后续对话里当作已完成的事引用。
 
diff --git a/plugins/dsh-mail-bridge/lib/rename-proposal.js b/plugins/dsh-mail-bridge/lib/rename-proposal.js
index 346efea..f469cce 100644
--- a/plugins/dsh-mail-bridge/lib/rename-proposal.js
+++ b/plugins/dsh-mail-bridge/lib/rename-proposal.js
@@ -32,7 +32,7 @@
  *
  * # 为什么必须共用
  *
- * 标记格式是**服务端正则的镜像**（`gateway/internal/handler/rename_proposal.go`）。
+ * 标记格式是**服务端正则的镜像**（`server/internal/handler/rename_proposal.go`）。
  * 各平台各写一遍拼接，某一处少个空格或把双引号写成单引号，服务端匹配不上 ——
  * 而失败是静默的：邮件照常发出，提议凭空消失，模型以为自己提过了。
  */
diff --git a/plugins/dsh-mail-bridge/src/index.ts b/plugins/dsh-mail-bridge/src/index.ts
index a81c579..63b75a4 100644
--- a/plugins/dsh-mail-bridge/src/index.ts
+++ b/plugins/dsh-mail-bridge/src/index.ts
@@ -1789,6 +1789,23 @@ export function apply(ctx: any, config: PluginConfig): void {
         case 'permission_decision':
           handlePermissionDecision(data);
           break;
+        case 'session_update': {
+          // 人类在 WebUI 切换权限档位后，DSH 运行时必须立刻更新 sandbox/mode +
+          // approval/policy，否则模型仍按旧档位执行。
+          const sid = String(data?.session_id || '');
+          const pm = String(data?.permission_mode || '');
+          if (sid && pm) {
+            const bound = sessionMap.peek(sid);
+            if (bound) {
+              const live = ctx.agents.get(bound.dshSessionId);
+              if (live?.session) {
+                applyPermissionMode(live.session, pm);
+                console.error(`[dsh-mail-bridge] session_update ${sid} -> 权限档位 ${pm}`);
+              }
+            }
+          }
+          break;
+        }
         case 'session_archived':
           // 会话归档 = 那条会话再也不会收信，映射可以确定性地清掉（不必等上限淘汰）。
           forgetSession(String(data?.session_id || ''));
diff --git a/plugins/dsh-mail-bridge/test/rename-proposal.test.mjs b/plugins/dsh-mail-bridge/test/rename-proposal.test.mjs
index 960d079..0a3fd98 100644
--- a/plugins/dsh-mail-bridge/test/rename-proposal.test.mjs
+++ b/plugins/dsh-mail-bridge/test/rename-proposal.test.mjs
@@ -7,7 +7,7 @@ import {
 } from '../lib/rename-proposal.js';
 
 // 这一组测试钉住的是「插件拼的标记与服务端正则逐字符对应」。
-// 服务端那条正则在 gateway/internal/handler/rename_proposal.go：
+// 服务端那条正则在 server/internal/handler/rename_proposal.go：
 //   <!--\s*agentmail:rename-session\s+alias="([^"]*)"(?:\s+reason="([^"]*)")?\s*-->
 // 拼错不会报错 —— 邮件照常发出，提议凭空消失。
 
diff --git a/plugins/opencode-mail-bridge/lib/crash-notify.js b/plugins/opencode-mail-bridge/lib/crash-notify.js
new file mode 100644
index 0000000..09dc94e
--- /dev/null
+++ b/plugins/opencode-mail-bridge/lib/crash-notify.js
@@ -0,0 +1,55 @@
+/**
+ * 崩溃/异常终止时通过 Gateway API 发送邮件通知用户。
+ *
+ * 约束同 pi-mail-bridge/lib/crash-notify.mjs：
+ * - 不依赖外部库，只用 Node 内置 http
+ * - 所有错误静默
+ * - 只在崩溃路径调用
+ */
+
+const http = require('http');
+
+const GATEWAY_URL = process.env.AGENTMAIL_GATEWAY_URL || 'http://127.0.0.1:8180';
+const AGENT_NAME = process.env.AGENTMAIL_AGENT_NAME || 'opencode';
+const AGENT_KEY = process.env.AGENTMAIL_AGENT_KEY || '';
+
+function notifyCrash(reason, err) {
+  if (!AGENT_KEY) return;
+
+  const body = JSON.stringify({
+    to: 'jianf@',
+    subject: `[${AGENT_NAME}] 桥进程异常终止`,
+    body: [
+      `**${AGENT_NAME}** 桥进程遇到未处理异常，已终止。`,
+      '',
+      `**原因**：${reason}`,
+      err ? `**错误信息**：${err.message || String(err)}` : '',
+      err?.stack ? `\n**堆栈**（首 500 字）：\n\`\`\`\n${err.stack.slice(0, 500)}\n\`\`\`` : '',
+      '',
+      `**自动重启**：systemd 将在 10 秒内自动拉起。`,
+      `如果反复崩溃，请检查日志：`,
+      `- \`journalctl -u ${AGENT_NAME}-serve -n 50 --no-pager\``,
+    ].filter(Boolean).join('\n'),
+  });
+
+  const parsed = new URL(`${GATEWAY_URL}/api/v1/agent/send`);
+  const req = http.request({
+    hostname: parsed.hostname,
+    port: parsed.port || 80,
+    path: parsed.pathname,
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'X-API-Key': AGENT_KEY,
+      'Content-Length': Buffer.byteLength(body),
+    },
+    timeout: 5000,
+  }, () => {});
+
+  req.on('error', () => {});
+  req.on('timeout', () => { req.destroy(); });
+  req.write(body);
+  req.end();
+}
+
+module.exports = { notifyCrash };
diff --git a/plugins/opencode-mail-bridge/lib/rename-proposal.js b/plugins/opencode-mail-bridge/lib/rename-proposal.js
index 346efea..f469cce 100644
--- a/plugins/opencode-mail-bridge/lib/rename-proposal.js
+++ b/plugins/opencode-mail-bridge/lib/rename-proposal.js
@@ -32,7 +32,7 @@
  *
  * # 为什么必须共用
  *
- * 标记格式是**服务端正则的镜像**（`gateway/internal/handler/rename_proposal.go`）。
+ * 标记格式是**服务端正则的镜像**（`server/internal/handler/rename_proposal.go`）。
  * 各平台各写一遍拼接，某一处少个空格或把双引号写成单引号，服务端匹配不上 ——
  * 而失败是静默的：邮件照常发出，提议凭空消失，模型以为自己提过了。
  */
diff --git a/plugins/opencode-mail-bridge/test/rename-proposal.test.mjs b/plugins/opencode-mail-bridge/test/rename-proposal.test.mjs
index 960d079..0a3fd98 100644
--- a/plugins/opencode-mail-bridge/test/rename-proposal.test.mjs
+++ b/plugins/opencode-mail-bridge/test/rename-proposal.test.mjs
@@ -7,7 +7,7 @@ import {
 } from '../lib/rename-proposal.js';
 
 // 这一组测试钉住的是「插件拼的标记与服务端正则逐字符对应」。
-// 服务端那条正则在 gateway/internal/handler/rename_proposal.go：
+// 服务端那条正则在 server/internal/handler/rename_proposal.go：
 //   <!--\s*agentmail:rename-session\s+alias="([^"]*)"(?:\s+reason="([^"]*)")?\s*-->
 // 拼错不会报错 —— 邮件照常发出，提议凭空消失。
 
diff --git a/plugins/pi-mail-bridge/lib/crash-notify.mjs b/plugins/pi-mail-bridge/lib/crash-notify.mjs
new file mode 100644
index 0000000..6c5536e
--- /dev/null
+++ b/plugins/pi-mail-bridge/lib/crash-notify.mjs
@@ -0,0 +1,68 @@
+/**
+ * 崩溃/异常终止时通过 Gateway API 发送邮件通知用户。
+ *
+ * 设计约束：
+ * - 不依赖任何外部库（崩溃场景下库可能已损坏）
+ * - 只用 Node.js 内置 http/https
+ * - 所有错误静默——通知失败不能让进程挂得更久
+ * - 只在崩溃路径（uncaughtException/unhandledRejection/exit(1)）调用
+ *
+ * Gateway 环境变量（同插件主进程）：
+ * - AGENTMAIL_GATEWAY_URL（默认 http://127.0.0.1:8180）
+ * - AGENTMAIL_AGENT_KEY（agent 密钥，用于 API 认证）
+ * - AGENTMAIL_AGENT_NAME（发送者名称，如 pi/dsh/opencode）
+ *
+ * 注意：如果 Gateway 本身不可达（崩溃根因是 Gateway 挂了），通知发不出去——
+ * 这是可接受的：Gateway 挂了邮件也发不出去，用户应该监控 Gateway 的 systemd 状态。
+ */
+
+import http from 'node:http';
+
+const GATEWAY_URL = process.env.AGENTMAIL_GATEWAY_URL || 'http://127.0.0.1:8180';
+const AGENT_NAME = process.env.AGENTMAIL_AGENT_NAME || 'unknown-bridge';
+const AGENT_KEY = process.env.AGENTMAIL_AGENT_KEY || '';
+
+/**
+ * 向 Gateway 发送崩溃通知邮件。
+ * @param {string} reason  终止原因描述
+ * @param {Error}  [err]   原始错误对象（可选）
+ */
+export function notifyCrash(reason, err) {
+  if (!AGENT_KEY) return; // 没有密钥，没法发
+
+  const body = JSON.stringify({
+    to: 'jianf@',
+    subject: `[${AGENT_NAME}] 桥进程异常终止`,
+    body: [
+      `**${AGENT_NAME}** 桥进程遇到未处理异常，已终止。`,
+      '',
+      `**原因**：${reason}`,
+      err ? `**错误信息**：${err.message || String(err)}` : '',
+      err?.stack ? `\n**堆栈**（首 500 字）：\n\`\`\`\n${err.stack.slice(0, 500)}\n\`\`\`` : '',
+      '',
+      `**自动重启**：systemd 将在 5~10 秒内自动拉起。`,
+      `如果反复崩溃，请检查日志：`,
+      `- \`journalctl -u ${AGENT_NAME}-bridge -n 50 --no-pager\``,
+      `- \`journalctl -u ${AGENT_NAME} -n 50 --no-pager\``,
+    ].filter(Boolean).join('\n'),
+  });
+
+  const parsed = new URL(`${GATEWAY_URL}/api/v1/agent/send`);
+  const req = http.request({
+    hostname: parsed.hostname,
+    port: parsed.port || 80,
+    path: parsed.pathname,
+    method: 'POST',
+    headers: {
+      'Content-Type': 'application/json',
+      'X-API-Key': AGENT_KEY,
+      'Content-Length': Buffer.byteLength(body),
+    },
+    timeout: 5000, // 5 秒超时
+  }, () => {});
+
+  req.on('error', () => {}); // 静默
+  req.on('timeout', () => { req.destroy(); });
+  req.write(body);
+  req.end();
+}
diff --git a/plugins/pi-mail-bridge/lib/rename-proposal.js b/plugins/pi-mail-bridge/lib/rename-proposal.js
index 346efea..f469cce 100644
--- a/plugins/pi-mail-bridge/lib/rename-proposal.js
+++ b/plugins/pi-mail-bridge/lib/rename-proposal.js
@@ -32,7 +32,7 @@
  *
  * # 为什么必须共用
  *
- * 标记格式是**服务端正则的镜像**（`gateway/internal/handler/rename_proposal.go`）。
+ * 标记格式是**服务端正则的镜像**（`server/internal/handler/rename_proposal.go`）。
  * 各平台各写一遍拼接，某一处少个空格或把双引号写成单引号，服务端匹配不上 ——
  * 而失败是静默的：邮件照常发出，提议凭空消失，模型以为自己提过了。
  */
diff --git a/plugins/pi-mail-bridge/src/index.mjs b/plugins/pi-mail-bridge/src/index.mjs
index e38ff57..2ebf44d 100644
--- a/plugins/pi-mail-bridge/src/index.mjs
+++ b/plugins/pi-mail-bridge/src/index.mjs
@@ -399,5 +399,7 @@ function shutdown(reason) {
 main().catch((e) => {
   log(`启动失败: ${describeError(e)}`);
   releaseLock();
+  // 故障邮件由 systemd ExecStopPost 统一发送：它还能覆盖 SIGKILL/OOM，
+  // 而进程内的 uncaughtException 钩子覆盖不了这些真正的意外终止。
   process.exit(1);
 });
diff --git a/plugins/pi-mail-bridge/test/rename-proposal.test.mjs b/plugins/pi-mail-bridge/test/rename-proposal.test.mjs
index 960d079..0a3fd98 100644
--- a/plugins/pi-mail-bridge/test/rename-proposal.test.mjs
+++ b/plugins/pi-mail-bridge/test/rename-proposal.test.mjs
@@ -7,7 +7,7 @@ import {
 } from '../lib/rename-proposal.js';
 
 // 这一组测试钉住的是「插件拼的标记与服务端正则逐字符对应」。
-// 服务端那条正则在 gateway/internal/handler/rename_proposal.go：
+// 服务端那条正则在 server/internal/handler/rename_proposal.go：
 //   <!--\s*agentmail:rename-session\s+alias="([^"]*)"(?:\s+reason="([^"]*)")?\s*-->
 // 拼错不会报错 —— 邮件照常发出，提议凭空消失。
 
diff --git a/gateway/cmd/server/main.go b/server/cmd/server/main.go
similarity index 100%
rename from gateway/cmd/server/main.go
rename to server/cmd/server/main.go
diff --git a/gateway/go.mod b/server/go.mod
similarity index 100%
rename from gateway/go.mod
rename to server/go.mod
diff --git a/gateway/go.sum b/server/go.sum
similarity index 100%
rename from gateway/go.sum
rename to server/go.sum
diff --git a/gateway/internal/blob/list_test.go b/server/internal/blob/list_test.go
similarity index 100%
rename from gateway/internal/blob/list_test.go
rename to server/internal/blob/list_test.go
diff --git a/gateway/internal/blob/store.go b/server/internal/blob/store.go
similarity index 100%
rename from gateway/internal/blob/store.go
rename to server/internal/blob/store.go
diff --git a/gateway/internal/blob/store_test.go b/server/internal/blob/store_test.go
similarity index 100%
rename from gateway/internal/blob/store_test.go
rename to server/internal/blob/store_test.go
diff --git a/gateway/internal/config/config.go b/server/internal/config/config.go
similarity index 100%
rename from gateway/internal/config/config.go
rename to server/internal/config/config.go
diff --git a/gateway/internal/db/db.go b/server/internal/db/db.go
similarity index 100%
rename from gateway/internal/db/db.go
rename to server/internal/db/db.go
diff --git a/gateway/internal/db/migrate.go b/server/internal/db/migrate.go
similarity index 90%
rename from gateway/internal/db/migrate.go
rename to server/internal/db/migrate.go
index cd585a5..612e3d6 100644
--- a/gateway/internal/db/migrate.go
+++ b/server/internal/db/migrate.go
@@ -117,6 +117,14 @@ var sqliteAddColumns = []struct{ table, column, ddl string }{
 	// 与 sessions.permission_enforcement 的区别：这里是平台的能力，那里是
 	// 某条会话建立时的事实快照 —— 插件升级后能力会变，已结束的会话不该被改写。
 	{"agents", "mode_enforcement", "ALTER TABLE agents ADD COLUMN mode_enforcement TEXT NOT NULL DEFAULT 'advisory'"},
+	// 待决请求类型（permission/question）与多选语义，供 ask_user_question 桥接使用。
+	// 旧库默认 'permission'/0：历史请求是危险工具审批，语义不变。
+	{"permission_requests", "kind", "ALTER TABLE permission_requests ADD COLUMN kind TEXT NOT NULL DEFAULT 'permission'"},
+	{"permission_requests", "multi_select", "ALTER TABLE permission_requests ADD COLUMN multi_select INTEGER NOT NULL DEFAULT 0"},
+	// 邮件上的请求类型与多选标记（与 permission_requests 表一致）。
+	// 旧库默认 ''/0：历史权限邮件按单选审批渲染。
+	{"mails", "permission_kind", "ALTER TABLE mails ADD COLUMN permission_kind TEXT NOT NULL DEFAULT ''"},
+	{"mails", "permission_multi_select", "ALTER TABLE mails ADD COLUMN permission_multi_select INTEGER NOT NULL DEFAULT 0"},
 }
 
 // sqliteAddIndexes 是建表后才能建的索引（依赖上面补的列）。
diff --git a/gateway/internal/db/migrations/init.sql b/server/internal/db/migrations/init.sql
similarity index 96%
rename from gateway/internal/db/migrations/init.sql
rename to server/internal/db/migrations/init.sql
index 36c2e0b..de92bb3 100644
--- a/gateway/internal/db/migrations/init.sql
+++ b/server/internal/db/migrations/init.sql
@@ -182,7 +182,11 @@ CREATE TABLE IF NOT EXISTS permission_requests (
     question      TEXT NOT NULL,
     options       JSONB NOT NULL DEFAULT '["同意", "拒绝"]',
     context       TEXT DEFAULT '',
-    result        VARCHAR(32),
+    -- permission = 危险操作审批；question = Agent 主动补充询问。
+    kind          VARCHAR(16) NOT NULL DEFAULT 'permission',
+    -- ask_user_question 的多选语义；普通权限审批恒为 false。
+    multi_select  BOOLEAN NOT NULL DEFAULT FALSE,
+    result        TEXT,
     decided_at    TIMESTAMPTZ,
     created_at    TIMESTAMPTZ DEFAULT NOW()
 );
@@ -190,6 +194,11 @@ CREATE TABLE IF NOT EXISTS permission_requests (
 CREATE INDEX IF NOT EXISTS idx_perm_agent ON permission_requests(agent_name, result);
 CREATE INDEX IF NOT EXISTS idx_perm_pending ON permission_requests(result) WHERE result IS NULL;
 
+-- 已部署库补齐主动询问元数据，并解除旧 result VARCHAR(32) 对长文本回答的限制。
+ALTER TABLE permission_requests ADD COLUMN IF NOT EXISTS kind VARCHAR(16) NOT NULL DEFAULT 'permission';
+ALTER TABLE permission_requests ADD COLUMN IF NOT EXISTS multi_select BOOLEAN NOT NULL DEFAULT FALSE;
+ALTER TABLE permission_requests ALTER COLUMN result TYPE TEXT;
+
 -- 历史邮件里的字面量 'human' 迁移到默认管理员账号
 -- （管理员由 Go 侧 EnsureAdminUser 首启创建，此处只做数据重写）
 DO $$
diff --git a/gateway/internal/db/migrations/init_sqlite.sql b/server/internal/db/migrations/init_sqlite.sql
similarity index 98%
rename from gateway/internal/db/migrations/init_sqlite.sql
rename to server/internal/db/migrations/init_sqlite.sql
index 9a4f673..8ab59c9 100644
--- a/gateway/internal/db/migrations/init_sqlite.sql
+++ b/server/internal/db/migrations/init_sqlite.sql
@@ -168,6 +168,9 @@ CREATE TABLE IF NOT EXISTS mails (
     mail_type      TEXT NOT NULL DEFAULT 'normal',
     permission_options TEXT,
     permission_result  TEXT,
+    -- permission = 危险操作审批；question = Agent 主动补充询问。
+    permission_kind TEXT NOT NULL DEFAULT '',
+    permission_multi_select INTEGER NOT NULL DEFAULT 0,
 
     status         TEXT NOT NULL DEFAULT 'unread',
     created_at     DATETIME DEFAULT (strftime('%Y-%m-%d %H:%M:%f','now')),
@@ -197,6 +200,10 @@ CREATE TABLE IF NOT EXISTS permission_requests (
     question   TEXT NOT NULL,
     options    TEXT NOT NULL DEFAULT '["同意","拒绝"]',
     context    TEXT DEFAULT '',
+    -- permission = 危险操作审批；question = Agent 主动补充询问。
+    kind       TEXT NOT NULL DEFAULT 'permission',
+    -- ask_user_question 的多选语义；普通权限审批恒为 0。
+    multi_select INTEGER NOT NULL DEFAULT 0,
     result     TEXT,
     decided_at DATETIME,
     created_at DATETIME DEFAULT (strftime('%Y-%m-%d %H:%M:%f','now'))
diff --git a/gateway/internal/handler/agent_calendar.go b/server/internal/handler/agent_calendar.go
similarity index 100%
rename from gateway/internal/handler/agent_calendar.go
rename to server/internal/handler/agent_calendar.go
diff --git a/gateway/internal/handler/agent_discovery.go b/server/internal/handler/agent_discovery.go
similarity index 100%
rename from gateway/internal/handler/agent_discovery.go
rename to server/internal/handler/agent_discovery.go
diff --git a/gateway/internal/handler/agents.go b/server/internal/handler/agents.go
similarity index 100%
rename from gateway/internal/handler/agents.go
rename to server/internal/handler/agents.go
diff --git a/gateway/internal/handler/alias_test.go b/server/internal/handler/alias_test.go
similarity index 100%
rename from gateway/internal/handler/alias_test.go
rename to server/internal/handler/alias_test.go
diff --git a/gateway/internal/handler/attachments.go b/server/internal/handler/attachments.go
similarity index 100%
rename from gateway/internal/handler/attachments.go
rename to server/internal/handler/attachments.go
diff --git a/gateway/internal/handler/attachments_test.go b/server/internal/handler/attachments_test.go
similarity index 100%
rename from gateway/internal/handler/attachments_test.go
rename to server/internal/handler/attachments_test.go
diff --git a/gateway/internal/handler/auth.go b/server/internal/handler/auth.go
similarity index 100%
rename from gateway/internal/handler/auth.go
rename to server/internal/handler/auth.go
diff --git a/gateway/internal/handler/calendar.go b/server/internal/handler/calendar.go
similarity index 99%
rename from gateway/internal/handler/calendar.go
rename to server/internal/handler/calendar.go
index 1a380f4..ce99366 100644
--- a/gateway/internal/handler/calendar.go
+++ b/server/internal/handler/calendar.go
@@ -85,7 +85,7 @@ func CreateCalendarEvent(w http.ResponseWriter, r *http.Request) {
 		//
 		// 变量形式由 scheduler.RenderReminder 在**触发时**替换，
 		// 每一次触发都拿当时的 event_time。前端的 DEFAULT_TEMPLATE
-		// 也是这一份（web/src/components/CalendarEventEditor.tsx），
+		// 也是这一份（client/electron/src/components/CalendarEventEditor.tsx），
 		// 两处必须一致，否则预览与实发不符。
 		req.ReminderText = defaultReminderTemplate
 	}
diff --git a/gateway/internal/handler/contacts.go b/server/internal/handler/contacts.go
similarity index 100%
rename from gateway/internal/handler/contacts.go
rename to server/internal/handler/contacts.go
diff --git a/gateway/internal/handler/decode_test.go b/server/internal/handler/decode_test.go
similarity index 100%
rename from gateway/internal/handler/decode_test.go
rename to server/internal/handler/decode_test.go
diff --git a/gateway/internal/handler/events.go b/server/internal/handler/events.go
similarity index 100%
rename from gateway/internal/handler/events.go
rename to server/internal/handler/events.go
diff --git a/gateway/internal/handler/forward.go b/server/internal/handler/forward.go
similarity index 100%
rename from gateway/internal/handler/forward.go
rename to server/internal/handler/forward.go
diff --git a/gateway/internal/handler/forward_test.go b/server/internal/handler/forward_test.go
similarity index 100%
rename from gateway/internal/handler/forward_test.go
rename to server/internal/handler/forward_test.go
diff --git a/gateway/internal/handler/helpers.go b/server/internal/handler/helpers.go
similarity index 100%
rename from gateway/internal/handler/helpers.go
rename to server/internal/handler/helpers.go
diff --git a/gateway/internal/handler/ics_test.go b/server/internal/handler/ics_test.go
similarity index 99%
rename from gateway/internal/handler/ics_test.go
rename to server/internal/handler/ics_test.go
index d344c78..3d20d12 100644
--- a/gateway/internal/handler/ics_test.go
+++ b/server/internal/handler/ics_test.go
@@ -272,7 +272,7 @@ func TestParseICSTriggerVariants(t *testing.T) {
 // 永远写着第一天的日期，且不报任何错。
 //
 // 同时锁住「与前端 DEFAULT_TEMPLATE 逐字一致」：
-// web/src/components/CalendarEventEditor.tsx 用它作预览，
+// client/electron/src/components/CalendarEventEditor.tsx 用它作预览，
 // 两边不同会让人看到的预览与 Agent 实收的正文不是一回事。
 func TestDefaultReminderTemplateUsesVariables(t *testing.T) {
 	for _, v := range []string{"{title}", "{time}", "{description}"} {
diff --git a/gateway/internal/handler/keys.go b/server/internal/handler/keys.go
similarity index 100%
rename from gateway/internal/handler/keys.go
rename to server/internal/handler/keys.go
diff --git a/gateway/internal/handler/mail.go b/server/internal/handler/mail.go
similarity index 100%
rename from gateway/internal/handler/mail.go
rename to server/internal/handler/mail.go
diff --git a/gateway/internal/handler/me.go b/server/internal/handler/me.go
similarity index 100%
rename from gateway/internal/handler/me.go
rename to server/internal/handler/me.go
diff --git a/gateway/internal/handler/models_scope.go b/server/internal/handler/models_scope.go
similarity index 100%
rename from gateway/internal/handler/models_scope.go
rename to server/internal/handler/models_scope.go
diff --git a/gateway/internal/handler/permission.go b/server/internal/handler/permission.go
similarity index 89%
rename from gateway/internal/handler/permission.go
rename to server/internal/handler/permission.go
index baf6b0e..a32d6ca 100644
--- a/gateway/internal/handler/permission.go
+++ b/server/internal/handler/permission.go
@@ -27,6 +27,12 @@ type permissionRequestRequest struct {
 	// 这里要的只是**幂等**：permission.updated 事件会重复触发，插件也会重连重放，
 	// 没有幂等键就会给同一次询问生成好几封邮件。
 	RelayKey string `json:"relay_key"`
+	// Kind 区分待办类型："permission"（危险工具审批，默认）或 "question"
+	// （Agent 主动询问）。主动询问不套权限档位判定 —— plan/full 档也可能需要
+	// 补充信息，审批档不能拦它。
+	Kind string `json:"kind"`
+	// MultiSelect 仅 question 使用：ask_user_question 的多选语义。
+	MultiSelect bool `json:"multi_select"`
 }
 
 type permissionDecideRequest struct {
@@ -52,6 +58,16 @@ func RequestPermission(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// 校验请求类型。空串按 permission 处理（历史客户端不传也不会被拒）。
+	kind := strings.TrimSpace(req.Kind)
+	if kind == "" {
+		kind = "permission"
+	}
+	if kind != "permission" && kind != "question" {
+		Error(w, http.StatusBadRequest, `kind 只能是 ""、"permission" 或 "question"`)
+		return
+	}
+
 	options := req.Options
 	if len(options) == 0 {
 		options = []string{"同意", "拒绝"}
@@ -99,9 +115,10 @@ func RequestPermission(w http.ResponseWriter, r *http.Request) {
 		sessionID = id
 	}
 
-	// 权限档位决定这次询问该不该存在。
+	// 权限档位决定审批型询问该不该存在。**主动询问（question）不受此约束**：
+	// 无论 plan/full，模型都可能需要向人补充信息，拦住就是阻塞整个任务。
 	//
-	// 只有 workspace 档需要人：
+	// 审批型只有 workspace 档需要人：
 	//   - plan 档 → 409。该档的语义就是「这轮不动手」，没什么可问人的，
 	//     模型该做的是把方案写在回信里。
 	//   - full 档 → 409。已经声明全权，再问一遍只是噪音；插件本不该发这封信，
@@ -110,7 +127,8 @@ func RequestPermission(w http.ResponseWriter, r *http.Request) {
 	// 这也是为什么下面不再有「退回第一个管理员」的兜底：
 	// 既然只有一档需要人，那一档里找不到人就是 409，没有中间形态。
 	mode := repo.SessionPermissionMode(r.Context(), sessionID)
-	if !models.ModeNeedsHuman(mode) {
+	needHuman := kind != "question" && !models.ModeNeedsHuman(mode)
+	if needHuman {
 		if relayKey != "" {
 			_ = repo.ReleaseRelay(r.Context(), agentName, relayKey)
 		}
@@ -190,7 +208,7 @@ func RequestPermission(w http.ResponseWriter, r *http.Request) {
 	if body == "" {
 		body = req.Question
 	}
-	mailID, err := repo.CreatePermissionMail(r.Context(), sessionID, agentName, decider, req.Question, body, options)
+	mailID, err := repo.CreatePermissionMail(r.Context(), sessionID, agentName, decider, req.Question, body, options, kind, req.MultiSelect)
 	if err != nil {
 		// 归还幂等键，否则这次询问永远转不出来了
 		if relayKey != "" {
@@ -202,7 +220,7 @@ func RequestPermission(w http.ResponseWriter, r *http.Request) {
 	if relayKey != "" {
 		_ = repo.BindRelayMail(r.Context(), agentName, relayKey, mailID)
 	}
-	if err := repo.CreatePermissionRequest(r.Context(), mailID, sessionID, agentName, req.Question, options, req.Context); err != nil {
+	if err := repo.CreatePermissionRequest(r.Context(), mailID, sessionID, agentName, req.Question, options, req.Context, kind, req.MultiSelect); err != nil {
 		Error(w, http.StatusInternalServerError, "Failed to create permission request")
 		return
 	}
@@ -279,8 +297,9 @@ func DecidePermission(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	// 决策选项必须在候选内
-	if !contains(perm.Options, req.Decision) {
+	// 决策选项必须在候选内 —— 仅限审批型。主动询问允许自由文本回答，
+	// 多选时 decision 是多个原始标签（前端用换行分隔），同样不套暂时选项表。
+	if perm.Kind != "question" && !contains(perm.Options, req.Decision) {
 		Error(w, http.StatusBadRequest, "决策必须是候选项之一")
 		return
 	}
@@ -307,6 +326,8 @@ func DecidePermission(w http.ResponseWriter, r *http.Request) {
 		"decision":         req.Decision,
 		"note":             req.Note,
 		"decided_by":       user.Username,
+		"kind":             perm.Kind,
+		"multi_select":     perm.MultiSelect,
 		// 会话 id：插件重启丢了待决映射时，会退化成「把决策当一封通知投进会话」，
 		// 那条路径要靠这个字段找到原会话，否则会凭空另开一个。
 		"session_id": perm.SessionID.String(),
@@ -359,3 +380,4 @@ func contains(list []string, v string) bool {
 	}
 	return false
 }
+
diff --git a/gateway/internal/handler/ratelimit.go b/server/internal/handler/ratelimit.go
similarity index 100%
rename from gateway/internal/handler/ratelimit.go
rename to server/internal/handler/ratelimit.go
diff --git a/gateway/internal/handler/relay_test.go b/server/internal/handler/relay_test.go
similarity index 100%
rename from gateway/internal/handler/relay_test.go
rename to server/internal/handler/relay_test.go
diff --git a/gateway/internal/handler/rename_proposal.go b/server/internal/handler/rename_proposal.go
similarity index 100%
rename from gateway/internal/handler/rename_proposal.go
rename to server/internal/handler/rename_proposal.go
diff --git a/gateway/internal/handler/rename_proposal_test.go b/server/internal/handler/rename_proposal_test.go
similarity index 100%
rename from gateway/internal/handler/rename_proposal_test.go
rename to server/internal/handler/rename_proposal_test.go
diff --git a/gateway/internal/handler/sessions.go b/server/internal/handler/sessions.go
similarity index 100%
rename from gateway/internal/handler/sessions.go
rename to server/internal/handler/sessions.go
diff --git a/gateway/internal/handler/strictdecode_test.go b/server/internal/handler/strictdecode_test.go
similarity index 100%
rename from gateway/internal/handler/strictdecode_test.go
rename to server/internal/handler/strictdecode_test.go
diff --git a/gateway/internal/handler/thread.go b/server/internal/handler/thread.go
similarity index 100%
rename from gateway/internal/handler/thread.go
rename to server/internal/handler/thread.go
diff --git a/gateway/internal/handler/thread_test.go b/server/internal/handler/thread_test.go
similarity index 100%
rename from gateway/internal/handler/thread_test.go
rename to server/internal/handler/thread_test.go
diff --git a/gateway/internal/lunar/lunar.go b/server/internal/lunar/lunar.go
similarity index 100%
rename from gateway/internal/lunar/lunar.go
rename to server/internal/lunar/lunar.go
diff --git a/gateway/internal/lunar/lunar_test.go b/server/internal/lunar/lunar_test.go
similarity index 100%
rename from gateway/internal/lunar/lunar_test.go
rename to server/internal/lunar/lunar_test.go
diff --git a/gateway/internal/middleware/auth.go b/server/internal/middleware/auth.go
similarity index 100%
rename from gateway/internal/middleware/auth.go
rename to server/internal/middleware/auth.go
diff --git a/gateway/internal/middleware/user.go b/server/internal/middleware/user.go
similarity index 100%
rename from gateway/internal/middleware/user.go
rename to server/internal/middleware/user.go
diff --git a/gateway/internal/models/address.go b/server/internal/models/address.go
similarity index 100%
rename from gateway/internal/models/address.go
rename to server/internal/models/address.go
diff --git a/gateway/internal/models/address_test.go b/server/internal/models/address_test.go
similarity index 100%
rename from gateway/internal/models/address_test.go
rename to server/internal/models/address_test.go
diff --git a/gateway/internal/models/calendar.go b/server/internal/models/calendar.go
similarity index 100%
rename from gateway/internal/models/calendar.go
rename to server/internal/models/calendar.go
diff --git a/gateway/internal/models/models.go b/server/internal/models/models.go
similarity index 94%
rename from gateway/internal/models/models.go
rename to server/internal/models/models.go
index 00f6dd6..5aae0ab 100644
--- a/gateway/internal/models/models.go
+++ b/server/internal/models/models.go
@@ -148,11 +148,13 @@ type Mail struct {
 	CCList        []Address  `json:"cc_list"`
 	Subject       string     `json:"subject"`
 	Body          string     `json:"body"`
-	MailType      string     `json:"mail_type"`
-	PermOptions   []string   `json:"permission_options,omitempty"`
-	PermResult    string     `json:"permission_result,omitempty"`
-	Status        string     `json:"status"`
-	CreatedAt     time.Time  `json:"created_at"`
+	MailType       string    `json:"mail_type"`
+	PermOptions    []string  `json:"permission_options,omitempty"`
+	PermResult     string    `json:"permission_result,omitempty"`
+	PermissionKind string    `json:"permission_kind,omitempty"`
+	PermissionMulti bool     `json:"permission_multi_select,omitempty"`
+	Status         string    `json:"status"`
+	CreatedAt      time.Time `json:"created_at"`
 	HopLimit      int        `json:"hop_limit"`
 
 	SessionAlias string `json:"session_alias,omitempty"`
@@ -218,10 +220,12 @@ type PermissionRequest struct {
 	AgentName string     `json:"agent_name"`
 	Question  string     `json:"question"`
 	Options   []string   `json:"options"`
-	Context   string     `json:"context"`
-	Result    *string    `json:"result"`
-	DecidedAt *time.Time `json:"decided_at"`
-	CreatedAt time.Time  `json:"created_at"`
+	Context     string     `json:"context"`
+	Kind        string     `json:"kind"`         // permission | question
+	MultiSelect bool       `json:"multi_select"` // 仅 question 使用
+	Result      *string    `json:"result"`
+	DecidedAt   *time.Time `json:"decided_at"`
+	CreatedAt   time.Time  `json:"created_at"`
 }
 
 // SSE 事件类型
diff --git a/gateway/internal/models/permission_mode.go b/server/internal/models/permission_mode.go
similarity index 100%
rename from gateway/internal/models/permission_mode.go
rename to server/internal/models/permission_mode.go
diff --git a/gateway/internal/models/permission_mode_test.go b/server/internal/models/permission_mode_test.go
similarity index 100%
rename from gateway/internal/models/permission_mode_test.go
rename to server/internal/models/permission_mode_test.go
diff --git a/gateway/internal/notify/mail.go b/server/internal/notify/mail.go
similarity index 100%
rename from gateway/internal/notify/mail.go
rename to server/internal/notify/mail.go
diff --git a/gateway/internal/notify/notify_test.go b/server/internal/notify/notify_test.go
similarity index 100%
rename from gateway/internal/notify/notify_test.go
rename to server/internal/notify/notify_test.go
diff --git a/gateway/internal/repo/adopt_alias_test.go b/server/internal/repo/adopt_alias_test.go
similarity index 100%
rename from gateway/internal/repo/adopt_alias_test.go
rename to server/internal/repo/adopt_alias_test.go
diff --git a/gateway/internal/repo/adopt_test.go b/server/internal/repo/adopt_test.go
similarity index 100%
rename from gateway/internal/repo/adopt_test.go
rename to server/internal/repo/adopt_test.go
diff --git a/gateway/internal/repo/agent_calendar_test.go b/server/internal/repo/agent_calendar_test.go
similarity index 100%
rename from gateway/internal/repo/agent_calendar_test.go
rename to server/internal/repo/agent_calendar_test.go
diff --git a/gateway/internal/repo/agent_disable_test.go b/server/internal/repo/agent_disable_test.go
similarity index 100%
rename from gateway/internal/repo/agent_disable_test.go
rename to server/internal/repo/agent_disable_test.go
diff --git a/gateway/internal/repo/attachments.go b/server/internal/repo/attachments.go
similarity index 100%
rename from gateway/internal/repo/attachments.go
rename to server/internal/repo/attachments.go
diff --git a/gateway/internal/repo/attachments_test.go b/server/internal/repo/attachments_test.go
similarity index 100%
rename from gateway/internal/repo/attachments_test.go
rename to server/internal/repo/attachments_test.go
diff --git a/gateway/internal/repo/autoalias.go b/server/internal/repo/autoalias.go
similarity index 100%
rename from gateway/internal/repo/autoalias.go
rename to server/internal/repo/autoalias.go
diff --git a/gateway/internal/repo/autoalias_test.go b/server/internal/repo/autoalias_test.go
similarity index 100%
rename from gateway/internal/repo/autoalias_test.go
rename to server/internal/repo/autoalias_test.go
diff --git a/gateway/internal/repo/budget_test.go b/server/internal/repo/budget_test.go
similarity index 100%
rename from gateway/internal/repo/budget_test.go
rename to server/internal/repo/budget_test.go
diff --git a/gateway/internal/repo/calendar.go b/server/internal/repo/calendar.go
similarity index 100%
rename from gateway/internal/repo/calendar.go
rename to server/internal/repo/calendar.go
diff --git a/gateway/internal/repo/calendar_test.go b/server/internal/repo/calendar_test.go
similarity index 100%
rename from gateway/internal/repo/calendar_test.go
rename to server/internal/repo/calendar_test.go
diff --git a/gateway/internal/repo/defaultsession_test.go b/server/internal/repo/defaultsession_test.go
similarity index 100%
rename from gateway/internal/repo/defaultsession_test.go
rename to server/internal/repo/defaultsession_test.go
diff --git a/gateway/internal/repo/deliverable_test.go b/server/internal/repo/deliverable_test.go
similarity index 100%
rename from gateway/internal/repo/deliverable_test.go
rename to server/internal/repo/deliverable_test.go
diff --git a/gateway/internal/repo/keys.go b/server/internal/repo/keys.go
similarity index 100%
rename from gateway/internal/repo/keys.go
rename to server/internal/repo/keys.go
diff --git a/gateway/internal/repo/markread_test.go b/server/internal/repo/markread_test.go
similarity index 100%
rename from gateway/internal/repo/markread_test.go
rename to server/internal/repo/markread_test.go
diff --git a/gateway/internal/repo/models_scope.go b/server/internal/repo/models_scope.go
similarity index 100%
rename from gateway/internal/repo/models_scope.go
rename to server/internal/repo/models_scope.go
diff --git a/gateway/internal/repo/models_scope_test.go b/server/internal/repo/models_scope_test.go
similarity index 100%
rename from gateway/internal/repo/models_scope_test.go
rename to server/internal/repo/models_scope_test.go
diff --git a/gateway/internal/repo/nearesthuman_test.go b/server/internal/repo/nearesthuman_test.go
similarity index 100%
rename from gateway/internal/repo/nearesthuman_test.go
rename to server/internal/repo/nearesthuman_test.go
diff --git a/gateway/internal/repo/participants.go b/server/internal/repo/participants.go
similarity index 100%
rename from gateway/internal/repo/participants.go
rename to server/internal/repo/participants.go
diff --git a/gateway/internal/repo/participants_test.go b/server/internal/repo/participants_test.go
similarity index 100%
rename from gateway/internal/repo/participants_test.go
rename to server/internal/repo/participants_test.go
diff --git a/gateway/internal/repo/permission_mode.go b/server/internal/repo/permission_mode.go
similarity index 100%
rename from gateway/internal/repo/permission_mode.go
rename to server/internal/repo/permission_mode.go
diff --git a/gateway/internal/repo/permission_mode_test.go b/server/internal/repo/permission_mode_test.go
similarity index 100%
rename from gateway/internal/repo/permission_mode_test.go
rename to server/internal/repo/permission_mode_test.go
diff --git a/gateway/internal/repo/platform_owner_test.go b/server/internal/repo/platform_owner_test.go
similarity index 100%
rename from gateway/internal/repo/platform_owner_test.go
rename to server/internal/repo/platform_owner_test.go
diff --git a/gateway/internal/repo/platform_sessions.go b/server/internal/repo/platform_sessions.go
similarity index 100%
rename from gateway/internal/repo/platform_sessions.go
rename to server/internal/repo/platform_sessions.go
diff --git a/gateway/internal/repo/platform_sessions_test.go b/server/internal/repo/platform_sessions_test.go
similarity index 100%
rename from gateway/internal/repo/platform_sessions_test.go
rename to server/internal/repo/platform_sessions_test.go
diff --git a/gateway/internal/repo/quota.go b/server/internal/repo/quota.go
similarity index 100%
rename from gateway/internal/repo/quota.go
rename to server/internal/repo/quota.go
diff --git a/gateway/internal/repo/quota_test.go b/server/internal/repo/quota_test.go
similarity index 100%
rename from gateway/internal/repo/quota_test.go
rename to server/internal/repo/quota_test.go
diff --git a/gateway/internal/repo/ratelimit.go b/server/internal/repo/ratelimit.go
similarity index 100%
rename from gateway/internal/repo/ratelimit.go
rename to server/internal/repo/ratelimit.go
diff --git a/gateway/internal/repo/relay.go b/server/internal/repo/relay.go
similarity index 100%
rename from gateway/internal/repo/relay.go
rename to server/internal/repo/relay.go
diff --git a/gateway/internal/repo/relayhops.go b/server/internal/repo/relayhops.go
similarity index 100%
rename from gateway/internal/repo/relayhops.go
rename to server/internal/repo/relayhops.go
diff --git a/gateway/internal/repo/relayhops_test.go b/server/internal/repo/relayhops_test.go
similarity index 100%
rename from gateway/internal/repo/relayhops_test.go
rename to server/internal/repo/relayhops_test.go
diff --git a/gateway/internal/repo/repo.go b/server/internal/repo/repo.go
similarity index 97%
rename from gateway/internal/repo/repo.go
rename to server/internal/repo/repo.go
index 23a0123..8518e25 100644
--- a/gateway/internal/repo/repo.go
+++ b/server/internal/repo/repo.go
@@ -336,13 +336,17 @@ func CreateMail(ctx context.Context, sessionID uuid.UUID, parentMailID *uuid.UUI
 //
 // 取会话的 workspace 而不是传参：会话的工作目录在它建立时就定下了，
 // 而询问发起于那条会话里。
-func CreatePermissionMail(ctx context.Context, sessionID uuid.UUID, fromName, toUser, question, body string, options []string) (uuid.UUID, error) {
+func CreatePermissionMail(ctx context.Context, sessionID uuid.UUID, fromName, toUser, question, body string, options []string, kind string, multiSelect bool) (uuid.UUID, error) {
 	optsJSON, _ := json.Marshal(options)
+	var multiSelectInt int
+	if multiSelect {
+		multiSelectInt = 1
+	}
 	var id uuid.UUID
 	err := db.DB.QueryRowContext(ctx,
-		`INSERT INTO mails (session_id, from_name, from_workspace, to_name, subject, body, mail_type, permission_options, created_at)
-		 VALUES ($1, $2, COALESCE((SELECT workspace FROM sessions WHERE session_id = $1), ''), $3, $4, $5, 'permission_request', $6, NOW()) RETURNING mail_id`,
-		sessionID, fromName, toUser, "权限请求: "+question, body, optsJSON,
+		`INSERT INTO mails (session_id, from_name, from_workspace, to_name, subject, body, mail_type, permission_options, permission_kind, permission_multi_select, created_at)
+		 VALUES ($1, $2, COALESCE((SELECT workspace FROM sessions WHERE session_id = $1), ''), $3, $4, $5, 'permission_request', $6, $7, $8, NOW()) RETURNING mail_id`,
+		sessionID, fromName, toUser, "权限请求: "+question, body, optsJSON, kind, multiSelectInt,
 	).Scan(&id)
 	return id, err
 }
@@ -543,12 +547,16 @@ func GetSessionMails(ctx context.Context, sessionID uuid.UUID) ([]models.Mail, e
 
 // ---------- Permission ----------
 
-func CreatePermissionRequest(ctx context.Context, mailID, sessionID uuid.UUID, agentName, question string, options []string, contextStr string) error {
+func CreatePermissionRequest(ctx context.Context, mailID, sessionID uuid.UUID, agentName, question string, options []string, contextStr string, kind string, multiSelect bool) error {
 	optsJSON, _ := json.Marshal(options)
+	var multiSelectInt int
+	if multiSelect {
+		multiSelectInt = 1
+	}
 	_, err := db.DB.ExecContext(ctx,
-		`INSERT INTO permission_requests (mail_id, session_id, agent_name, question, options, context)
-		 VALUES ($1, $2, $3, $4, $5, $6)`,
-		mailID, sessionID, agentName, question, optsJSON, contextStr)
+		`INSERT INTO permission_requests (mail_id, session_id, agent_name, question, options, context, kind, multi_select)
+		 VALUES ($1, $2, $3, $4, $5, $6, $7, $8)`,
+		mailID, sessionID, agentName, question, optsJSON, contextStr, kind, multiSelectInt)
 	return err
 }
 
@@ -578,7 +586,7 @@ func DecidePermission(ctx context.Context, mailID uuid.UUID, decision string) (*
 
 func ListPendingPermissions(ctx context.Context) ([]models.PermissionRequest, error) {
 	rows, err := db.DB.QueryContext(ctx,
-		`SELECT request_id, mail_id, session_id, agent_name, question, options, context, result, decided_at, created_at
+		`SELECT request_id, mail_id, session_id, agent_name, question, options, context, kind, multi_select, result, decided_at, created_at
 		 FROM permission_requests WHERE result IS NULL
 		 ORDER BY created_at DESC`)
 	if err != nil {
@@ -591,7 +599,7 @@ func ListPendingPermissions(ctx context.Context) ([]models.PermissionRequest, er
 		var pr models.PermissionRequest
 		var optsJSON []byte
 		if err := rows.Scan(&pr.ID, &pr.MailID, &pr.SessionID, &pr.AgentName, &pr.Question,
-			&optsJSON, &pr.Context, &pr.Result, &pr.DecidedAt, &pr.CreatedAt); err != nil {
+			&optsJSON, &pr.Context, &pr.Kind, &pr.MultiSelect, &pr.Result, &pr.DecidedAt, &pr.CreatedAt); err != nil {
 			return nil, err
 		}
 		json.Unmarshal(optsJSON, &pr.Options)
@@ -606,10 +614,10 @@ func GetPermissionByMailID(ctx context.Context, mailID uuid.UUID) (*models.Permi
 	var pr models.PermissionRequest
 	var optsJSON []byte
 	err := db.DB.QueryRowContext(ctx,
-		`SELECT request_id, mail_id, session_id, agent_name, question, options, context, result, decided_at, created_at
+		`SELECT request_id, mail_id, session_id, agent_name, question, options, context, kind, multi_select, result, decided_at, created_at
 		 FROM permission_requests WHERE mail_id = $1`, mailID,
 	).Scan(&pr.ID, &pr.MailID, &pr.SessionID, &pr.AgentName, &pr.Question,
-		&optsJSON, &pr.Context, &pr.Result, &pr.DecidedAt, &pr.CreatedAt)
+		&optsJSON, &pr.Context, &pr.Kind, &pr.MultiSelect, &pr.Result, &pr.DecidedAt, &pr.CreatedAt)
 	if err != nil {
 		return nil, err
 	}
@@ -1205,7 +1213,7 @@ func ListSentBy(ctx context.Context, fromName string, limit int) ([]models.Mail,
 // ListPendingPermissionsFor 列出待决权限请求；forUser 非空时只列发给该用户的
 func ListPendingPermissionsFor(ctx context.Context, forUser string) ([]models.PermissionRequest, error) {
 	q := `SELECT pr.request_id, pr.mail_id, pr.session_id, pr.agent_name, pr.question,
-	             pr.options, pr.context, pr.result, pr.decided_at, pr.created_at
+	             pr.options, pr.context, COALESCE(pr.kind, '') AS kind, pr.multi_select, pr.result, pr.decided_at, pr.created_at
 	      FROM permission_requests pr
 	      JOIN mails m ON m.mail_id = pr.mail_id
 	      JOIN sessions s ON s.session_id = pr.session_id
@@ -1228,7 +1236,7 @@ func ListPendingPermissionsFor(ctx context.Context, forUser string) ([]models.Pe
 		var pr models.PermissionRequest
 		var optsJSON []byte
 		if err := rows.Scan(&pr.ID, &pr.MailID, &pr.SessionID, &pr.AgentName, &pr.Question,
-			&optsJSON, &pr.Context, &pr.Result, &pr.DecidedAt, &pr.CreatedAt); err != nil {
+			&optsJSON, &pr.Context, &pr.Kind, &pr.MultiSelect, &pr.Result, &pr.DecidedAt, &pr.CreatedAt); err != nil {
 			return nil, err
 		}
 		json.Unmarshal(optsJSON, &pr.Options)
diff --git a/gateway/internal/repo/repo_test.go b/server/internal/repo/repo_test.go
similarity index 100%
rename from gateway/internal/repo/repo_test.go
rename to server/internal/repo/repo_test.go
diff --git a/gateway/internal/repo/sessionrate.go b/server/internal/repo/sessionrate.go
similarity index 100%
rename from gateway/internal/repo/sessionrate.go
rename to server/internal/repo/sessionrate.go
diff --git a/gateway/internal/repo/sessionrate_test.go b/server/internal/repo/sessionrate_test.go
similarity index 100%
rename from gateway/internal/repo/sessionrate_test.go
rename to server/internal/repo/sessionrate_test.go
diff --git a/gateway/internal/repo/thread.go b/server/internal/repo/thread.go
similarity index 100%
rename from gateway/internal/repo/thread.go
rename to server/internal/repo/thread.go
diff --git a/gateway/internal/repo/thread_test.go b/server/internal/repo/thread_test.go
similarity index 100%
rename from gateway/internal/repo/thread_test.go
rename to server/internal/repo/thread_test.go
diff --git a/gateway/internal/repo/users.go b/server/internal/repo/users.go
similarity index 100%
rename from gateway/internal/repo/users.go
rename to server/internal/repo/users.go
diff --git a/gateway/internal/repo/usersession_time_test.go b/server/internal/repo/usersession_time_test.go
similarity index 100%
rename from gateway/internal/repo/usersession_time_test.go
rename to server/internal/repo/usersession_time_test.go
diff --git a/gateway/internal/scheduler/calendar.go b/server/internal/scheduler/calendar.go
similarity index 100%
rename from gateway/internal/scheduler/calendar.go
rename to server/internal/scheduler/calendar.go
diff --git a/gateway/internal/scheduler/calendar_test.go b/server/internal/scheduler/calendar_test.go
similarity index 100%
rename from gateway/internal/scheduler/calendar_test.go
rename to server/internal/scheduler/calendar_test.go
diff --git a/gateway/internal/sse/e2e_test.go b/server/internal/sse/e2e_test.go
similarity index 100%
rename from gateway/internal/sse/e2e_test.go
rename to server/internal/sse/e2e_test.go
diff --git a/gateway/internal/sse/manager.go b/server/internal/sse/manager.go
similarity index 100%
rename from gateway/internal/sse/manager.go
rename to server/internal/sse/manager.go
diff --git a/gateway/internal/sse/manager_test.go b/server/internal/sse/manager_test.go
similarity index 100%
rename from gateway/internal/sse/manager_test.go
rename to server/internal/sse/manager_test.go
diff --git a/gateway/internal/static/static.go b/server/internal/static/static.go
similarity index 100%
rename from gateway/internal/static/static.go
rename to server/internal/static/static.go
diff --git a/gateway/internal/static/static/placeholder.html b/server/internal/static/static/placeholder.html
similarity index 90%
rename from gateway/internal/static/static/placeholder.html
rename to server/internal/static/static/placeholder.html
index 30cd9fe..ec247e5 100644
--- a/gateway/internal/static/static/placeholder.html
+++ b/server/internal/static/static/placeholder.html
@@ -56,10 +56,11 @@
       <p>构建并嵌入前端：</p>
       <pre>sudo ./deploy/install.sh</pre>
       <p>或者手工：</p>
-      <pre>cd web &amp;&amp; npm ci &amp;&amp; npm run build
-rm -rf ../gateway/internal/static/static/assets
-cp -r dist/. ../gateway/internal/static/static/
-cd ../gateway &amp;&amp; go build ./cmd/server</pre>
+      <pre>cd client/electron &amp;&amp; npm ci &amp;&amp; npm run build
+cd ../..
+rm -rf server/internal/static/static/assets
+cp -r client/electron/dist/. server/internal/static/static/
+cd server &amp;&amp; go build ./cmd/server</pre>
       <p class="dim">
         构建产物不进版本库；这个占位文件的存在只是为了让
         <code>go:embed</code> 在新克隆里能编译通过。
diff --git a/server/server b/server/server
new file mode 100755
index 0000000..0eee8de
Binary files /dev/null and b/server/server differ
diff --git a/web/src/main.tsx b/web/src/main.tsx
deleted file mode 100644
index d04ff09..0000000
--- a/web/src/main.tsx
+++ /dev/null
@@ -1,16 +0,0 @@
-import React from 'react';
-import ReactDOM from 'react-dom/client';
-import App from './App';
-import { initTheme } from './stores/themeStore';
-import './index.css';
-
-// 必须在 render 之前：晚一步就会让深色偏好的用户看到一帧白色闪屏。
-// index.html 里还有一段更早的内联脚本处理「JS bundle 到达前」那段空窗，
-// 这里做的是把 store 状态与 DOM 对齐并订阅系统主题变化。
-initTheme();
-
-ReactDOM.createRoot(document.getElementById('root')!).render(
-  <React.StrictMode>
-    <App />
-  </React.StrictMode>
-);