269 Commits

Author	SHA1	Message	Date
iven	b853978771	feat(industry): Phase 3 Tauri 行业配置加载 — SaaS API mixin + industryStore + Tauri 命令 ... - 新增 saas-industry.ts mixin: listIndustries/getIndustryFullConfig/getMyIndustries - 新增 saas-types 行业类型: IndustryInfo/IndustryFullConfig/AccountIndustryItem - 新增 industryStore.ts: Zustand store + localStorage persist + Rust 注入 - 新增 viking_load_industry_keywords Tauri 命令: 接收 JSON configs → 全局存储 - 前端 bootstrap 后自动拉取行业配置并推送到 ButlerRouter	2026-04-12 17:18:53 +08:00
iven	29fbfbec59	feat(intelligence): Phase 2 学习循环基础 — 触发信号 + 经验行业维度 ... - 新增 triggers.rs: 5 种触发信号（痛点确认/正反馈/复杂工具链/用户纠正/行业模式） - ExperienceStore 增加 industry_context + source_trigger 字段 - experience.rs format_for_injection 支持行业标签 - intelligence_hooks.rs 集成触发信号评估 - 17 个测试全通过 (7 trigger + 10 experience)	2026-04-12 15:52:29 +08:00
iven	58aca753aa	chore: 发布前准备 — 版本号统一 + 安全加固 + 死组件清理 ... - Cargo.toml workspace version 0.1.0 → 0.9.0-beta.1 - CSP 添加 object-src 'none' 防止插件注入 - .env.example 补充 SaaS 关键环境变量模板 - 移除已废弃的 SkillMarket.tsx 组件	2026-04-11 23:51:58 +08:00
iven	e1af3cca03	fix(routing): 消除模型路由链路硬编码不匹配模型名 ... summarizer_adapter.rs 和 saas-relay-client.ts 中的 fallback 模型名 (glm-4-flash / glm-4-flash-250414) 在 SaaS relay 中不存在，导致请求被拒绝。 改为未配置时明确报错（fail fast），不再静默使用错误模型。	2026-04-11 23:08:06 +08:00
iven	9e0aa496cd	fix(runtime): 修复 Skill/MCP 调用链路3个断点 ... 1. Anthropic Driver ToolResult 格式修复 — ContentBlock 添加 ToolResult 变体, tool_call_id 不再被丢弃, 按 Anthropic API 规范发送 tool_result 格式 2. 前端 callMcpTool 参数名对齐 — serviceName/toolName/args 改为 service_name/tool_name/arguments, 后端支持 service_name 精确路由 3. MCP 工具桥接到 ToolRegistry — McpToolAdapter 添加 service_name/clone, 新建 McpToolWrapper 实现 Tool trait, Kernel 添加 mcp_adapters 共享状态, McpManagerState 与 Kernel 共享同一 Arc<RwLock<Vec>>, MCP 服务启停时 自动同步工具列表到 LLM 可见的 ToolRegistry	2026-04-11 16:20:38 +08:00
iven	2843bd204f	chore: 更新测试注释 — 阈值已从 5 降为 3	2026-04-11 14:26:53 +08:00
iven	05374f99b0	chore: 移除未使用的 loadConnectionModeTimestamp 函数	2026-04-11 14:26:52 +08:00
iven	c88e3ac630	fix(kernel): UserProfile 序列化失败时记录 warn 而非静默吞掉	2026-04-11 14:26:52 +08:00
iven	dc94a5323a	fix(butler): 降低痛点检测阈值 3→2/2→1，更早发现用户需求	2026-04-11 14:26:51 +08:00
iven	69d3feb865	fix(lint): IdentityChangeProposal console.error → createLogger	2026-04-11 14:26:50 +08:00
iven	730d50bc63	feat(ui): 管家 Tab 空状态增加引导文案 + 立即分析按钮 ... - 无数据时显示友好引导文案 - 分析按钮要求至少 2 条对话 - 分析中显示加载状态	2026-04-11 12:58:27 +08:00
iven	ce10befff1	fix(ui): 管家 Tab 统计栏显示管家专属摘要，不再显示聊天统计	2026-04-11 12:58:26 +08:00
iven	f5c6abf03f	feat(ui): 演化历史条目增加可展开差异视图 + 文件变更标签 ... 点击展开显示 soul/instructions/profile 变更内容，不再截断原因文本。	2026-04-11 12:58:25 +08:00
iven	b3f7328778	feat(ui): '我眼中的你' 双源渲染 — 静态Clone + 动态UserProfile ... - RightPanel 增加 userProfile state + fetch 逻辑 - 对话结束后通过 CustomEvent 触发画像刷新 - UserProfile 字段: 行业/角色/沟通偏好/近期话题 桥接 identity 系统 → 前端面板。	2026-04-11 12:51:28 +08:00
iven	d50d1ab882	feat(kernel): agent_get 返回值扩展 UserProfile 字段 ... - AgentInfo 增加 user_profile: Option<Value> (serde default) - SqliteStorage 增加 pool() getter - agent_get 命令查询 UserProfileStore 填充 user_profile - 前端 AgentInfo 类型同步更新 复用已有 UserProfileStore，不新增 Tauri 命令。	2026-04-11 12:51:27 +08:00
iven	d974af3042	fix(reflection): 修复 state restore 竞态 — peek+pop 替代直接 pop ... 根因: pop_restored_state 在 getHistory 读取前删除数据。 修复: 先 peek 非破坏性读取，apply 后再 pop，确保数据可被多次读取。	2026-04-11 12:51:26 +08:00
iven	8a869f6990	fix(reflection): 降低模式检测阈值 5→3/20→15 以产生更多有意义反思 ... - task/preference/lesson 累积: 5→3 - high-access memories: 3→2 - low-importance: >20 → >15 - 文案微调: "建议清理" → "可考虑清理"	2026-04-11 12:51:25 +08:00
iven	f7edc59abb	fix(auth): 修复重启后无法对话 — restoreSession 优先验证 SaaS token ... 根因: 心跳降级将 'tauri' 持久化到 localStorage，重启后盲信该值。 修复: token refresh 成功时强制恢复 'saas' 模式；connectionMode 携带时间戳。	2026-04-11 12:32:20 +08:00
iven	be01127098	fix(autonomy): hand_trigger 从 null 映射改为 handAutoTrigger 字段 ... 根因: autonomy-manager.ts:268 将 hand_trigger 硬编码为 null， 导致任何自主权级别都无法自动触发 Hand。 新增 handAutoTrigger 字段，autonomous 级别默认 true。 UI 增加对应开关。	2026-04-11 12:32:19 +08:00
iven	33c1bd3866	fix(memory): memory_search 空查询时默认 min_similarity=0.0 触发表扫描 ... 根因: FTS5 空查询返回 0 条，而 memory_stats 因设 min_similarity=Some(0.0) 走表扫描才正确计数。统一空查询行为。	2026-04-11 12:32:18 +08:00
iven	d871685e25	fix(auth): 5 BUG 修复 — refresh token 持久化 + 密码验证 + 浏览器兼容 ... BUG-1 (P1): LoginPage 注册密码验证从 6 位改为 8 位，与后端一致 BUG-2 (P0): refresh token 持久化到 OS keyring + restoreSession 三级恢复 (access token → refresh token → cookie auth) + saveSaaSSession 改为 await BUG-3 (P0): Tauri 聊天路由降级问题，根因同 BUG-2（会话恢复失败） BUG-4 (P1): App.tsx 跳过 Onboarding 改用 agentStore（兼容所有 client）， Workspace.tsx Tauri invoke 改为动态 import 避免浏览器崩溃 BUG-5: tauri.conf.json createUpdaterArtifacts 改为 boolean true	2026-04-11 09:43:17 +08:00
iven	33008c06c7	chore: 版本号 0.1.0 → 0.9.0-beta.1 + updater 插件预留 ... - package.json / tauri.conf.json: version 更新为 0.9.0-beta.1 - tauri.conf.json: 添加 plugins.updater 空壳配置 + createUpdaterArtifacts - Cargo.toml: 添加 tauri-plugin-updater 依赖 - lib.rs: 注册 updater 插件 (空壳，部署时配置 HTTPS 端点 + Ed25519 密钥)	2026-04-11 03:02:39 +08:00
iven	5e937d0ce2	refactor(ui): 移除空壳行业资讯 Tab + Provider URL 去重 ... - SimpleSidebar: 移除空壳"行业资讯" Tab 和 Newspaper icon import - ModelsAPI.tsx: AVAILABLE_PROVIDERS 引用 LLM_PROVIDER_URLS 常量 - models.ts: PROVIDER_DEFAULTS 引用 api-urls.ts，消除重复 URL 定义 - 所有 Provider URL 现在统一在 api-urls.ts 维护	2026-04-11 02:59:16 +08:00
iven	722d8a3a9e	fix(ui): UX 文案优化 — 区分新/老用户 + 去政务化 + 友好提示 ... - FirstConversationPrompt: 新用户显示"欢迎开始!"，老用户"欢迎回来!" - use-cold-start: 冷启动问候语改为通用语言，去掉政务场景特定文案 - LoginPage: 添加"忘记密码？请联系管理员重置"提示 - connectionStore: 错误提示改为用户友好的"暂时没有可用的 AI 模型"	2026-04-11 02:56:19 +08:00
iven	db1f8dcbbc	feat(desktop): Gateway URL 配置化 + Rust panic hook 崩溃报告 ... - api-urls.ts: GATEWAY_URLS 读 VITE_GATEWAY_HTTP/WS env - gateway-storage.ts: DEFAULT_GATEWAY_URL 读 VITE_GATEWAY_WS env - lib.rs: 添加 tracing_subscriber 初始化 + panic::set_hook 崩溃时自动写入 crash-reports/ 目录供诊断 - Cargo.toml: 添加 tracing-subscriber workspace 依赖	2026-04-11 02:54:23 +08:00
iven	4e641bd38d	refactor(desktop): SaaS URL 集中配置化，消除 5 处硬编码 ... - 新增 .env.development / .env.production (VITE_SAAS_URL) - saasStore.ts / LoginPage.tsx / saas-client.ts / SaaSLogin.tsx 统一读取 import.meta.env.VITE_SAAS_URL - 移除 LoginPage 中未使用的 isTauriRuntime import	2026-04-11 02:09:23 +08:00
iven	9772d6ec94	fix(ui): 空catch块添加日志 + ErrorBoundary覆盖高风险组件 ... 空catch块修复 (12处, 6文件): - ModelsAPI: 4处 localStorage 配置读写添加 console.warn - VikingPanel: 2处 viking 操作添加日志 - Workspace/MCPServices/SaaSStatus/TOTPSettings: 各1-3处 ErrorBoundary新增覆盖: - ChatArea: 两种UI模式均包裹(防白屏) - RightPanel: 两种UI模式均包裹 - AuditLogsPanel/HeartbeatConfig/VikingPanel: 设置页包裹	2026-04-11 00:26:24 +08:00
iven	717f2eab4f	chore: 清理40个死代码文件 (~9,639行) ... 删除无任何活跃渲染路径引用的组件: - Automation/ 全目录 (7文件, 2,598行) - WorkflowBuilder/ 全目录 (14文件, 1,539行) - SchedulerPanel + 依赖树 (5文件, 2,595行) - 独立死组件 (14文件, 2,907行) 含 SkillMarket, HandsPanel, ErrorNotification 等 - PipelineResultPreview 根目录副本 (534行, 活跃版在 pipeline/)	2026-04-11 00:26:04 +08:00
iven	4a5389510e	fix(ui): 深度审计修复 — RightPanel流式渲染优化 + SecurityStatus基线真实值 ... - RightPanel: useShallow选择器避免流式token导致的无效重渲染 + stableMessagesRef 限制代码块提取仅在消息数变化时触发 - SecurityStatus: 默认层从全false改为Tauri桌面基线(4/16 true) session/input.sanitization/input.schema/exec.sandbox	2026-04-10 23:59:24 +08:00
iven	550e525554	fix(ui): 审计修复 — 路径规范化/SkillInfo类型/分页offset/初始加载/显示统一 ... - workspace.rs: canonicalize() 解析 '..' 和符号链接 - Workspace.tsx: 组件挂载时调用 loadDirStats + 统一 KB 显示 - configStore: SkillInfo 接口补充 category 字段 + 空数组回退注释 - securityStore: localStorage 审计日志添加 offset 分页支持	2026-04-10 23:24:32 +08:00
iven	1d0e60d028	fix(ui): 9项端到端真实审计 — 修复记忆/技能/审计/工作区/MCP数据流断裂 ... 基于 Tauri MCP 实机排查发现并修复： 1. VikingPanel: viking_ls('/') 返回0 → 改为 viking_ls('') 返回100条记忆 2. 技能列表: loadSkillsCatalog 静默失败 → 添加直接 invoke('skill_list') 回退 3. 审计日志: 面板读Gateway API无数据 → 回退读localStorage双源数据 4. 工作区: 浏览按钮无事件 → 接入prompt选择 + workspace_dir_stats 命令 5. MCP: 空列表无引导 → 添加配置文件路径提示 6. 新增 workspace_dir_stats Tauri 命令 (Rust) 排查确认正常的功能: 安全存储(OS Keyring✅), 心跳引擎(运行中✅), 定时任务(管道连通), Kernel(已初始化✅), SaaS relay模式	2026-04-10 23:00:19 +08:00
iven	b2d5b4075c	fix(ui): P0-4 — SaaS settings page crash from paginated API response ... listRelayTasks() expected RelayTaskInfo[] but API returns {items:[], total:0, page:1, page_size:20}. When setTasks() received the paginated object, tasks.map() crashed during render, triggering the ErrorBoundary fallback "SaaS 平台加载失败". Fix: extract .items from paginated response with Array.isArray fallback. Also adds onError logging to ErrorBoundary wrappers for easier debugging. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-10 21:42:52 +08:00
iven	34ef41c96f	fix(test): P1-02 browser chat — add SaaS auth fixture for non-Tauri mode ... Root cause: Playwright external Chromium is not a Tauri runtime, so isTauriRuntime() returns false. The app needs SaaS session to route chat through relay, but tests never logged in. Fix: Auto-detect non-Tauri mode and pre-login via SaaS API, injecting session into localStorage before tests run.	2026-04-10 21:38:34 +08:00
iven	bd48de69ee	fix(test): P2-03 rate limit — share auth token across cross-system smoke tests ... 6 tests each called saasLogin() → 6 login requests in <60s → hit 5/min/IP rate limit on the 6th test. Now login once per worker, reuse token for all 6 tests. Reduces login API calls from 6 to 1.	2026-04-10 21:34:07 +08:00
iven	8163289454	fix(ui): show panel toggle button in all modes (not just non-compact)	2026-04-10 12:13:37 +08:00
iven	34043de685	fix(ui): panel toggle in header bar + message spacing ... - Move side panel toggle from floating button to chat header right side (Trae Solo style) via new PanelToggleButton component - Add px-6 py-4 padding to message list container - Add mb-5 gap between messages for readable vertical spacing	2026-04-10 12:03:29 +08:00
iven	99262efca4	test: execute 30 smoke tests + fix P0 CSS break + BREAKS.md report ... Layer 1 break detection results (21/30 pass, 63%): - SaaS API: 5/5 pass (S3 skip no LLM key) - Admin V2: 5/6 pass (A6 flaky auth guard) - Desktop Chat: 3/6 pass (D1 no chat response in browser; D2/D3 skip non-Tauri) - Desktop Feature: 6/6 pass - Cross-System: 2/6 pass (4 blocked by login rate limit 429) Bugs found: - P0-01: Account lockout not enforced (locked_until set but not checked) - P1-01: Refresh token still valid after logout - P1-02: Desktop browser chat no response (stores not exposed) - P1-03: Provider API requires display_name (undocumented) Fixes applied: - desktop/src/index.css: @import -> @plugin for Tailwind v4 compatibility - Admin tests: correct credentials admin/admin123 from .env - Cross tests: correct dashboard endpoint /stats/dashboard	2026-04-10 11:26:13 +08:00
iven	2e70e1a3f8	test: add 30 smoke tests for break detection across SaaS/Admin/Desktop ... Layer 1 断裂探测矩阵: - S1-S6: SaaS API 端到端 (auth/lockout/relay/permissions/billing/knowledge) - A1-A6: Admin V2 连通性 (login/dashboard/CRUD/knowledge/roles/models) - D1-D6: Desktop 聊天流 (gateway/kernel/relay/cancel/offline/error) - F1-F6: Desktop 功能闭环 (agent/hands/pipeline/memory/butler/skills) - X1-X6: 跨系统闭环 (provider→desktop/disabled user/knowledge/stats/totp/billing) Also adds: admin-v2 Playwright config, updated spec doc with cross-reference Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-10 09:47:35 +08:00
iven	2c8ab47e5c	fix: BUG-012/013/007 — panel overlap, Markdown rendering, authStore tests ... BUG-012: Reposition side panel toggle button (top-[52px]→top-20) to avoid overlap with header buttons in ResizableChatLayout. BUG-013: Install @tailwindcss/typography plugin and import in index.css to enable prose-* Markdown rendering classes in StreamingText. BUG-007: Rewrite authStore tests to match HttpOnly cookie auth model (login takes 1 arg, no token/refreshToken in state). Rewrite request interceptor tests for cookie-based auth. Update bug-tracker status.	2026-04-10 07:44:34 +08:00
iven	26336c3daa	fix(ui): button overlap + Markdown rendering (BUG-012, BUG-013) ... BUG-012: Move side panel toggle button below header (top-3 → top-[52px]) to avoid overlap with "详情" button in chat header. BUG-013: Add rich Markdown component overrides to StreamingText: - Code blocks: dark bg, border, rounded, overflow-x-auto - Inline code: subtle bg highlight - Tables: full borders, alternating header bg, proper padding - Lists: disc/decimal markers, spacing - Headings: proper hierarchy sizes - Blockquotes: left border + subtle bg - Links: blue underlined with hover	2026-04-09 23:58:00 +08:00
iven	ba586e5aa7	fix: BUG-009/010/011 — DataMasking, cancel button, SQL casts ... BUG-009 (P1): Add frontend DataMasking in saas-relay-client.ts - Masks ID cards, phones, emails, money, company names before relay - Unmasks tokens in AI response so user sees original data - Mirrors Rust DataMasking middleware patterns BUG-010 (P3): Send button transforms to Stop during streaming - Shows square icon when isStreaming, calls cancelStream() - Normal arrow icon when idle, calls handleSend() BUG-011 (P2): Add ::timestamptz casts for old TEXT timestamp columns - account/handlers.rs: dashboard stats query - telemetry/service.rs: reported_at comparisons - workers/aggregate_usage.rs: usage aggregation query	2026-04-09 23:45:19 +08:00
iven	9442471c98	fix(relay): send conversation history to SaaS relay (BUG-008) ... SaaS Relay was sending only the current message without conversation history, giving LLM no context from previous turns. Root cause: streamStore passed only `content` string to chatStream(), and saas-relay-client hard-coded a single-element messages array. Fix: - GatewayClient.chatStream() opts: add `history` field - streamStore: extract last 20 messages as history before calling chatStream - saas-relay-client: build messages array from history + current message	2026-04-09 22:41:56 +08:00
iven	bf728c34f3	fix: saasStore require() bug + health check pool formula + DEV error details ... - saasStore.ts: replace require('./chat/conversationStore') with await import() to fix ReferenceError in Vite ESM environment (P1) - main.rs: fix health check pool usage formula from max_connections - num_idle to pool.size() - num_idle, preventing false "degraded" status (P1) - error.rs: show detailed error messages in ZCLAW_SAAS_DEV=true mode - Update bug tracker with BUG-003 through BUG-007	2026-04-09 22:23:05 +08:00
iven	a081a97678	fix(relay): audit fixes — abort signal, model selector guard, SSE CRLF, SQL format ... Addresses findings from deep code audit: H-1: Pass abortController.signal to saasClient.chatCompletion() so user-cancelled streams actually abort the HTTP connection (was only stopping the read loop, leaving server-side SSE connection open). H-2: ModelSelector now shows only when (!isTauriRuntime() || isLoggedIn). Prevents decorative model list in Tauri local kernel mode where model selection has no effect (violates CLAUDE.md §5.2). M-1: Normalize CRLF to LF before SSE event boundary parsing (\n\n). Prevents buffer overflow when behind nginx/CDN with CRLF line endings. M-2: SQL window_minute comparison uses to_char(NOW()-interval, format) instead of (NOW()-interval)::TEXT, matching the stored format exactly. M-3: sort_candidates_by_quota uses same sliding 60s window as select_best_key. LOW: Fix misleading invalidate_cache doc comment.	2026-04-09 19:51:34 +08:00
iven	e6eb97dcaa	perf(relay): full-chain optimization — key pool, model sync, SSE stream ... Phase 1 (Key Pool correctness): - RPM: fixed-minute window → sliding 60s aggregation (prevents 2x burst) - Remove fallback-to-provider-key bypass when all keys rate-limited - SSE semaphore: 16→64 permits, cleanup delay 60s→5s - Default 429 cooldown: 5min→60s (better for Coding Plan quotas) - Expire old key_usage_window rows on record Phase 2 (Frontend model sync): - currentModel empty-string fallback to glm-4-flash-250414 in relay client - Merge duplicate listModels() calls in connectionStore SaaS path - Show ModelSelector in Tauri mode when models available - Clear currentModel on SaaS logout Phase 3 (Relay performance): - Key Pool: DashMap in-memory cache (TTL 5s) for select_best_key - Cache invalidation on 429 marking Phase 4 (SSE stream): - AbortController integration for user-cancelled streams - SSE parsing: split by event boundaries (\n\n) instead of per-line - streamStore cancelStream adapts to 0-arg and 1-arg cancel fns	2026-04-09 19:34:02 +08:00
iven	5c6964f52a	fix(desktop): error response improvements — content, retry, model selector ... P1: onError callback now sets content to error message instead of empty string. Previously API errors (404/429) produced empty assistant messages with only a visual error badge — now the error text is persisted in message content. P3: Retry button now re-sends the preceding user message via sendToGateway instead of copying to input. Works for both virtualized and non-virtualized message lists. Removed unused setInput prop from MessageBubble. Also hides model selector in Tauri runtime (SaaS token pool routes models).	2026-04-09 18:52:27 +08:00
iven	125da57436	fix: sync currentModel from SaaS available models on login ... Root cause: conversationStore hardcoded 'glm-4-flash' as default model, which may not exist in SaaS admin config, causing 404 on all chat requests. - conversationStore: default currentModel to empty string (runtime-resolved) - saasStore: after fetching available models, auto-switch currentModel to first available if the stored model is not in the list - SaaS relay getModel() already had fallback to first available model	2026-04-09 18:50:38 +08:00
iven	1965fa5269	fix: migrate glm-4-flash to glm-4-flash-250414 (model deprecated by Zhipu) ... Zhipu AI has deprecated glm-4-flash, causing 404 errors on all chat requests. Updated all references: - config: glm-4-flash → glm-4-flash-250414, added glm-z1-flash - frontend: defaultModel, conversationStore, ChatArea fallback, ModelsAPI	2026-04-09 18:42:47 +08:00
iven	5f47e62a46	fix(desktop): hide model selector in Tauri runtime — SaaS token pool routes models ... Model selector was cosmetic-only in desktop mode: chatStream never passes model param to backend. Hiding prevents user confusion and 404 errors when selecting models not in SaaS token pool. Also adds E2E test report covering 168 messages, 4 bugs found (P0 fixed).	2026-04-09 18:35:34 +08:00
iven	2f25316e83	feat(desktop): simple mode UI — ChatArea compact + SimpleSidebar + RightPanel dual-mode ... Adapt ChatArea for compact/butler mode: - Add onOpenDetail prop for expanding to full view - Remove inline export dialog (moved to detail view) - Replace SquarePen with ClipboardList icon Add SimpleSidebar component for butler simple mode: - Two tabs: 对话 / 行业资讯 - Quick suggestion buttons - Minimal navigation RightPanel refactoring for dual-mode support: - Detect simple vs professional mode - Conditional rendering based on butler mode state	2026-04-09 17:48:18 +08:00