chore: 提交所有工作进度 — SaaS 后端增强、Admin UI、桌面端集成

包含大量 SaaS 平台改进、Admin 管理后台更新、桌面端集成完善、
文档同步、测试文件重构等内容。为 QA 测试准备干净工作树。

desktop/src/lib/gateway-client.ts

@@ -151,7 +151,9 @@ function createIdempotencyKey(): string {
   if (typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function') {
     return crypto.randomUUID();
   }
-  return `idem_${Date.now()}_${Math.random().toString(36).slice(2, 10)}`;
+  const bytes = crypto.getRandomValues(new Uint8Array(6));
+  const suffix = Array.from(bytes).map(b => b.toString(36).padStart(2, '0')).join('');
+  return `idem_${Date.now()}_${suffix}`;
 }
 
 // === Client ===
@@ -474,7 +476,7 @@ export class GatewayClient {
   ): Promise<{ runId: string }> {
     const agentId = opts?.agentId || this.defaultAgentId;
     const runId = createIdempotencyKey();
-    const sessionId = opts?.sessionKey || `session_${Date.now()}`;
+    const sessionId = opts?.sessionKey || crypto.randomUUID();
 
     // If no agent ID, try to fetch from ZCLAW status (async, but we'll handle it in connectZclawStream)
     if (!agentId) {
@@ -732,7 +734,7 @@ export class GatewayClient {
     if (!response.ok) {
       const errorBody = await response.text().catch(() => '');
       log.error(`POST ${url} failed: ${response.status} ${response.statusText}`, errorBody);
-      const error = new Error(`REST API error: ${response.status} ${response.statusText}${errorBody ? ` - ${errorBody}` : ''}`);
+      const error = new Error(`REST API error: ${response.status} ${response.statusText}`);
       (error as any).status = response.status;
       (error as any).body = errorBody;
       throw error;