feat: generic extra_sys_prompts slot replaces hardcoded commit_signature module

- stapp.py: add loop mode (auto-inject prompt after each reply)
- stapp.py: replace DOM-based idle monitor with st.fragment timer
- stapp.py: i18n for all new UI text and LLM prompts
- launch.pyw: remove inject/get_last_reply_time/idle_monitor, keep only paste hook
- agentmain/ga: raise max_turns 80->180, DANGER thresholds accordingly
- remove obsolete tool_usable_history.json

.gitattributes

@@ -1,12 +0,0 @@
-# Keep byte-exact tracked text stable across Windows and Unix checkouts.
-* text=auto eol=lf
-
-# Keep platform-specific scripts with safe line endings.
-*.sh text eol=lf
-*.command text eol=lf
-*.ps1 text eol=crlf
-*.bat text eol=crlf
-
-# Preserve the byte-exact third-party notice in source and generated delivery trees.
-frontends/desktop/public/THIRD_PARTY_NOTICES.txt text eol=lf
-frontends/desktop/dist/THIRD_PARTY_NOTICES.txt text eol=lf

.github/workflows/desktop-ci.yml

@@ -1,168 +0,0 @@
-name: Desktop 2.0 Quality Gates
-
-on:
-  push:
-    branches: [main]
-    paths:
-      - "agentmain.py"
-      - "llmcore.py"
-      - "llmcore/**"
-      - "frontends/conductor.py"
-      - "frontends/cost_tracker.py"
-      - "frontends/data_backup.py"
-      - "frontends/desktop_bridge.py"
-      - "frontends/desktop_settings.py"
-      - "frontends/ga_contract_probe.py"
-      - "frontends/tests/**"
-      - "frontends/desktop/**"
-      - ".gitattributes"
-      - ".github/workflows/desktop-ci.yml"
-      - ".github/workflows/desktop-release-package.yml"
-  pull_request:
-    branches: [main]
-    paths:
-      - "agentmain.py"
-      - "llmcore.py"
-      - "llmcore/**"
-      - "frontends/conductor.py"
-      - "frontends/cost_tracker.py"
-      - "frontends/data_backup.py"
-      - "frontends/desktop_bridge.py"
-      - "frontends/desktop_settings.py"
-      - "frontends/ga_contract_probe.py"
-      - "frontends/tests/**"
-      - "frontends/desktop/**"
-      - ".gitattributes"
-      - ".github/workflows/desktop-ci.yml"
-      - ".github/workflows/desktop-release-package.yml"
-  workflow_dispatch:
-
-concurrency:
-  group: desktop-v2-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-env:
-  PYTHONUNBUFFERED: "1"
-  CARGO_TERM_COLOR: always
-
-jobs:
-  distribution-contract:
-    name: Compiled distribution contract
-    runs-on: ubuntu-24.04
-    timeout-minutes: 10
-    steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: 22
-      - name: Verify tracked React distribution and package metadata
-        working-directory: frontends/desktop
-        run: npm run test:dist
-      - name: Verify packaging helper syntax
-        run: |
-          bash -n frontends/desktop/packaging/scripts/macos/install_macos.sh
-          bash -n frontends/desktop/scripts/post-dmg.sh
-          python3 -m py_compile frontends/desktop/scripts/gen_ds_store.py
-      - name: Reject source and local-development leakage
-        run: |
-          test -z "$(git ls-files -- \
-            'frontends/desktop/src/**' \
-            'frontends/desktop/public/**' \
-            'frontends/desktop/vite.config.*' \
-            'frontends/desktop/tsconfig*.json' \
-            '.agents/**' '.codex/**' '.trellis/**')"
-          test -z "$(find frontends/desktop/dist -type f \
-            \( -name '*.map' -o -name '*.ts' -o -name '*.tsx' -o -name '*.jsx' \) -print)"
-          ! git grep -nE '^(<<<<<<<|=======|>>>>>>>)' -- .github frontends
-
-  python-contracts:
-    name: Python ${{ matrix.python-version }}
-    needs: distribution-contract
-    runs-on: ubuntu-24.04
-    timeout-minutes: 15
-    strategy:
-      fail-fast: false
-      matrix:
-        python-version: ["3.10", "3.11", "3.12", "3.13"]
-    steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-        with:
-          python-version: ${{ matrix.python-version }}
-          cache: pip
-          cache-dependency-path: frontends/tests/requirements.txt
-      - name: Install Desktop test dependencies
-        run: python -m pip install -r frontends/tests/requirements.txt
-      - name: Run bridge, conductor, cost and backup contracts
-        run: >-
-          python -m pytest frontends/tests -q
-          --ignore=frontends/tests/test_release_qualification.py
-      - name: Run release qualification tooling contracts
-        if: matrix.python-version == '3.12'
-        run: python -m pytest frontends/tests/test_release_qualification.py -q
-
-  rust-contracts:
-    name: Rust ${{ matrix.feature.name }}
-    needs: distribution-contract
-    runs-on: ubuntu-24.04
-    timeout-minutes: 35
-    strategy:
-      fail-fast: false
-      matrix:
-        feature:
-          - name: production
-            args: ""
-          - name: e2e
-            args: "--features e2e"
-    steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - name: Install Tauri system dependencies
-        run: >-
-          sudo apt-get update && sudo apt-get install -y
-          libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
-      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
-        with:
-          toolchain: "1.95.0"
-          components: clippy, rustfmt
-      - uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
-        with:
-          workspaces: frontends/desktop/src-tauri -> target
-      - name: Verify Rust formatting
-        run: cargo fmt --manifest-path frontends/desktop/src-tauri/Cargo.toml --check
-      - name: Lint Tauri shell
-        run: cargo clippy --manifest-path frontends/desktop/src-tauri/Cargo.toml --all-targets ${{ matrix.feature.args }} -- -D warnings
-      - name: Run Tauri shell contracts
-        run: cargo test --manifest-path frontends/desktop/src-tauri/Cargo.toml ${{ matrix.feature.args }}
-
-  linux-tauri-build:
-    name: Linux Tauri build smoke
-    needs: [distribution-contract, python-contracts, rust-contracts]
-    runs-on: ubuntu-24.04
-    timeout-minutes: 45
-    steps:
-      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-      - name: Install Tauri system dependencies
-        run: >-
-          sudo apt-get update && sudo apt-get install -y
-          libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
-        with:
-          toolchain: "1.95.0"
-      - uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
-        with:
-          workspaces: frontends/desktop/src-tauri -> target
-      - name: Install Tauri CLI only
-        working-directory: frontends/desktop
-        run: |
-          npm install --package-lock=false
-          node -e "const v=require('./node_modules/@tauri-apps/cli/package.json').version; if(v!=='2.11.4') throw new Error('unexpected Tauri CLI '+v)"
-          test ! -e package-lock.json
-      - name: Build tracked Desktop 2.0 distribution into the native shell
-        working-directory: frontends/desktop
-        run: npm run tauri build -- --no-bundle

.github/workflows/desktop-release-package.yml

@@ -1,887 +0,0 @@
-name: Build Desktop Portable Packages
-
-# Triggers:
-#   - workflow_dispatch  -> build CI artifacts for testing (choose a target platform)
-#   - push tag desktop-portable-*  -> build all three platforms and publish them
-#     together into ONE GitHub Release (tag = the pushed tag)
-# Plain pushes to branches do NOT build (avoids 3 heavy Rust builds per commit).
-"on":
-  push:
-    tags:
-      - "desktop-portable-*"
-  workflow_dispatch:
-    inputs:
-      target:
-        description: "Which platform(s) to build (artifacts only; release happens on tag push)"
-        required: false
-        default: "all"
-        type: choice
-        options:
-          - "all"
-          - "windows"
-          - "linux"
-          - "macos"
-
-permissions:
-  contents: read
-
-env:
-  NODE_VERSION: "22.23.2"
-  RUST_TOOLCHAIN: "1.95.0"
-  PBS_RELEASE: "20260814"
-  PBS_PYTHON_VERSION: "3.12.14"
-  MACOS_PACKAGING_PYTHON_VERSION: "3.12.10"
-  PYTHONDONTWRITEBYTECODE: "1"
-
-jobs:
-  # ----------------------------------------------------------------------------
-  build-windows:
-    name: Windows portable
-    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'windows')) }}
-    runs-on: windows-2025
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-
-      - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-
-      - name: Set up Rust
-        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
-        with:
-          toolchain: ${{ env.RUST_TOOLCHAIN }}
-
-      - name: Cache Rust build
-        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
-        with:
-          workspaces: frontends/desktop/src-tauri -> target
-
-      - name: Install desktop dependencies
-        working-directory: frontends/desktop
-        run: |
-          npm install --package-lock=false
-          node -e "const v=require('./node_modules/@tauri-apps/cli/package.json').version; if(v!=='2.11.4') throw new Error('unexpected Tauri CLI '+v)"
-          test ! -e package-lock.json
-
-      - name: Verify tracked compiled renderer bytes
-        working-directory: frontends/desktop
-        run: npm run test:dist
-
-      - name: Build Windows desktop exe
-        working-directory: frontends/desktop
-        run: npm run tauri build -- --bundles nsis
-
-      - name: Assemble self-contained portable bundle
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          purge_runtime_bytecode() {
-            local runtime_root="$1"
-            find "$runtime_root" -type d -name '__pycache__' -prune -exec rm -rf {} +
-            find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -delete
-            if find "$runtime_root" -type d -name '__pycache__' -print -quit | grep -q .; then
-              echo "Python bytecode cache directory remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-            if find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -print -quit | grep -q .; then
-              echo "Python bytecode remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-          }
-
-          EXE_SRC="$(find frontends/desktop/src-tauri/target/release -maxdepth 1 -type f -name 'ga-desktop.exe' | head -n 1)"
-          [[ -n "$EXE_SRC" ]] || { echo "ga-desktop.exe not found" >&2; exit 1; }
-
-          PKG="artifacts/windows/GenericAgent-Desktop-Windows-Portable"
-          RUNTIME="$PKG/runtime"
-          mkdir -p "$RUNTIME"
-
-          # exe at the top level, named GenericAgent (typical portable form)
-          cp "$EXE_SRC" "$PKG/GenericAgent.exe"
-          cp frontends/desktop/packaging/scripts/windows/install_windows.ps1 "$RUNTIME/install_windows.ps1"
-          cp frontends/desktop/packaging/scripts/merge_desktop_settings.py "$RUNTIME/merge_desktop_settings.py"
-          # Uninstaller: double-click entry at top level, worker script under runtime/.
-          cp frontends/desktop/packaging/scripts/windows/uninstall.bat "$PKG/uninstall.bat"
-          cp frontends/desktop/packaging/scripts/windows/uninstall_windows.ps1 "$RUNTIME/uninstall_windows.ps1"
-
-          # Fixed python-build-standalone Windows x86_64 archive.
-          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-x86_64-pc-windows-msvc-install_only.tar.gz"
-          PBS_SHA256="7330282b47cd43a66b702d39078d2e5a88e580cee351d82f95045f21f5ee042a"
-          command -v cygpath >/dev/null 2>&1 || { echo "cygpath not found on Windows runner" >&2; exit 1; }
-          RUNNER_TEMP_POSIX="$(cygpath -u "$RUNNER_TEMP")"
-          [[ "$RUNNER_TEMP_POSIX" == /* ]] || { echo "cygpath did not return an absolute POSIX path" >&2; exit 1; }
-          PBS_ARCHIVE="${RUNNER_TEMP_POSIX}/pbs-windows-x86_64.tar.gz"
-          echo "Python build-standalone: $PBS_URL"
-          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
-          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | sha256sum --check --strict -
-          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME"   # extracts a 'python/' dir (python.exe at top)
-          PY="$RUNTIME/python/python.exe"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine().lower() in ("amd64", "x86_64"); print(sys.version)'
-
-          # App-local UCRT: python-build-standalone links the Universal CRT dynamically
-          # and does NOT bundle it. Win10/11 ship UCRT in-box, but stripped/older images
-          # may not -> python.exe fails to load (missing api-ms-win-crt-*.dll). Copy the
-          # redistributable UCRT DLLs next to python.exe (Microsoft-supported app-local
-          # deployment). Pure SDK source, no System32 fallback, hard-fail if absent so we
-          # never ship a bundle from an unexpected source.
-          UCRT_SRC="$(ls -d "/c/Program Files (x86)/Windows Kits/10/Redist/"*/ucrt/DLLs/x64 2>/dev/null | sort -V | tail -1)"
-          [[ -n "$UCRT_SRC" ]] || { echo "Windows SDK UCRT redist dir not found on runner" >&2; exit 1; }
-          echo "UCRT source: $UCRT_SRC"
-          cp "$UCRT_SRC"/api-ms-win-crt-*.dll "$RUNTIME/python/"
-          cp "$UCRT_SRC"/ucrtbase.dll "$RUNTIME/python/"
-          test -f "$RUNTIME/python/api-ms-win-crt-runtime-l1-1-0.dll" \
-            || { echo "UCRT DLLs missing after copy" >&2; exit 1; }
-
-          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
-          mkdir -p "$RUNTIME/wheels"
-          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME/wheels/requirements.txt"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME/wheels" \
-            --requirement "$RUNTIME/wheels/requirements.txt"
-
-          # Runtime source (project root minus heavy/dev/build dirs)
-          mkdir -p "$RUNTIME/app"
-          tar \
-            --exclude='./.git' --exclude='./.github' \
-            --exclude='./frontends/tests' \
-            --exclude='./frontends/desktop/src-tauri' \
-            --exclude='./frontends/desktop/src' \
-            --exclude='./frontends/desktop/public' \
-            --exclude='./frontends/desktop/scripts' \
-            --exclude='./frontends/desktop/release_qualification' \
-            --exclude='./frontends/desktop/tests' \
-            --exclude='./frontends/desktop/testing' \
-            --exclude='./frontends/desktop/spec' \
-            --exclude='./frontends/desktop/node_modules' \
-            --exclude='./frontends/desktop/dist' \
-            --exclude='./frontends/desktop/DESIGN.md' \
-            --exclude='./frontends/desktop/package.json' \
-            --exclude='./frontends/desktop/package-lock.json' \
-            --exclude='./frontends/desktop/.npmrc' \
-            --exclude='./frontends/desktop/index.html' \
-            --exclude='./frontends/desktop/loading.html' \
-            --exclude='./frontends/desktop/setup.html' \
-            --exclude='./frontends/desktop/tsconfig*.json' \
-            --exclude='./frontends/desktop/vite.config.ts' \
-            --exclude='./frontends/desktop/packaging' --exclude='./docs' \
-            --exclude='./assets/demo' --exclude='./assets/images' \
-            --exclude='./assets/GenericAgent_Technical_Report.pdf' \
-            --exclude='./artifacts' \
-            --exclude='*/node_modules' --exclude='*/target' \
-            --exclude='*/.venv' --exclude='./.venv' \
-            --exclude='*/__pycache__' --exclude='*.pyc' \
-            -cf - . | tar -xf - -C "$RUNTIME/app"
-          test -f "$RUNTIME/app/agentmain.py"
-          test -f "$RUNTIME/app/frontends/desktop_bridge.py"
-          test -f "$RUNTIME/app/frontends/desktop/static/index.html"
-          test ! -e "$RUNTIME/app/frontends/desktop/dist"
-          test ! -e "$RUNTIME/app/frontends/desktop/src"
-          test ! -e "$RUNTIME/app/frontends/desktop/public"
-          test ! -e "$RUNTIME/app/frontends/desktop/package-lock.json"
-          test ! -e "$RUNTIME/app/frontends/desktop/node_modules"
-
-          # Drop python debug symbols (.pdb) to slim the package (~80MB)
-          find "$RUNTIME/python" -name '*.pdb' -delete 2>/dev/null || true
-          purge_runtime_bytecode "$RUNTIME"
-
-          cat > "$PKG/readme.txt" <<'EOF'
-          ================ 中文 ================
-          GenericAgent Desktop — Windows 便携版（自包含）
-
-          无需安装 Python、无需联网装依赖、无需源码仓库——全部已内置。
-
-          前置条件
-          - Windows 10/11 x64
-          - Microsoft Edge WebView2 运行时（Win11 一般自带；缺失时首次运行会提示安装）
-
-          使用
-          1. 解压到任意目录（路径建议不含特殊字符）。
-          2. 双击 GenericAgent.exe。
-          3. 首次启动会离线校验并补齐随包 Python 运行时依赖，界面显示进度，完成后进入主界面。
-          4. 之后启动直接秒进。
-
-          说明
-          - 想真正对话，仍需在程序里配置模型 / API Key。
-          - 如果 Windows Defender 防火墙拦截 `127.0.0.1` / `localhost` 回环连接，程序可能无法启动或连接本机服务。请允许 `GenericAgent.exe` 和 `runtime\python\python.exe` 通过防火墙，然后重启桌面端。
-          - 本便携版尚未使用 Windows 代码签名证书；SmartScreen 可能显示警告。运行前请用随包发布的 SHA256SUMS-windows.txt 核对 ZIP。
-          - 可整体移动本文件夹；重启后会自动刷新路径。若需强制重新准备，请删除 runtime\.prepared 后重启。
-          - runtime\ 是内置运行环境与源码，正常使用无需改动。
-
-          ================ English ================
-          GenericAgent Desktop — Windows Portable (self-contained)
-
-          No Python install, no internet for dependencies, no source checkout — everything is bundled.
-
-          Requirements
-          - Windows 10/11 x64
-          - Microsoft Edge WebView2 runtime (usually preinstalled on Win11; you are prompted if missing)
-
-          Usage
-          1. Extract anywhere (a path without special characters is recommended).
-          2. Double-click GenericAgent.exe.
-          3. The first launch verifies and completes the bundled Python runtime offline with a
-             progress UI, then opens the main window.
-          4. Subsequent launches start instantly.
-
-          Notes
-          - To actually chat, configure a model / API key inside the app.
-          - If Windows Defender Firewall blocks the `127.0.0.1` / `localhost` loopback connection, the app may fail to start or reach its local service. Allow `GenericAgent.exe` and `runtime\python\python.exe` through the firewall, then restart the desktop app.
-          - This portable build is not Windows code-signed, so SmartScreen may warn. Verify the ZIP against the published SHA256SUMS-windows.txt before running it.
-          - You may move the whole folder; relaunching refreshes its saved paths. To force a new
-            preparation pass, delete runtime\.prepared and relaunch.
-          - runtime\ holds the bundled runtime and source; no need to touch it.
-          EOF
-          sed -i 's/^          //' "$PKG/readme.txt"
-
-          echo "Package tree (top levels):"
-          find "$PKG" -maxdepth 2 -printf '%y %p\n' | sort | head -40
-
-      - name: Zip portable package
-        shell: pwsh
-        run: |
-          New-Item -ItemType Directory -Force -Path artifacts/windows/out | Out-Null
-          Compress-Archive -Path artifacts/windows/GenericAgent-Desktop-Windows-Portable `
-            -DestinationPath artifacts/windows/out/GenericAgent-Desktop-Windows-Portable.zip -Force
-          $h = Get-FileHash artifacts/windows/out/GenericAgent-Desktop-Windows-Portable.zip -Algorithm SHA256
-          "{0}  GenericAgent-Desktop-Windows-Portable.zip" -f $h.Hash.ToLowerInvariant() |
-            Set-Content -Encoding ASCII artifacts/windows/out/SHA256SUMS-windows.txt
-          Get-ChildItem artifacts/windows/out | Format-Table Name, Length
-
-      - name: Upload workflow artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: GenericAgent-Desktop-Windows-Portable-${{ github.run_number }}
-          path: |
-            artifacts/windows/out/GenericAgent-Desktop-Windows-Portable.zip
-            artifacts/windows/out/SHA256SUMS-windows.txt
-          if-no-files-found: error
-
-  # ----------------------------------------------------------------------------
-  build-linux:
-    name: Linux portable
-    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'linux')) }}
-    runs-on: ubuntu-22.04
-    permissions:
-      contents: read
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-
-      - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-
-      - name: Set up Rust
-        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
-        with:
-          toolchain: ${{ env.RUST_TOOLCHAIN }}
-
-      - name: Cache Rust build
-        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
-        with:
-          # Keep registry/git downloads, but never restore binaries built on a newer glibc image.
-          prefix-key: "v1-rust-release-ubuntu-22.04-glibc-2.35"
-          workspaces: frontends/desktop/src-tauri -> target
-          cache-targets: "false"
-          cache-bin: "false"
-
-      - name: Install Tauri Linux dependencies
-        run: |
-          sudo apt-get update
-          sudo apt-get install -y \
-            libwebkit2gtk-4.1-dev \
-            libgtk-3-dev \
-            libayatana-appindicator3-dev \
-            librsvg2-dev \
-            patchelf \
-            binutils \
-            file \
-            xvfb
-
-      - name: Install desktop dependencies
-        working-directory: frontends/desktop
-        run: |
-          npm install --package-lock=false
-          node -e "const v=require('./node_modules/@tauri-apps/cli/package.json').version; if(v!=='2.11.4') throw new Error('unexpected Tauri CLI '+v)"
-          test ! -e package-lock.json
-
-      - name: Verify tracked compiled renderer bytes
-        working-directory: frontends/desktop
-        run: npm run test:dist
-
-      - name: Build Linux AppImage
-        working-directory: frontends/desktop
-        run: npm run tauri build -- --bundles appimage
-
-      - name: Assemble self-contained portable bundle
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          purge_runtime_bytecode() {
-            local runtime_root="$1"
-            find "$runtime_root" -type d -name '__pycache__' -prune -exec rm -rf {} +
-            find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -delete
-            if find "$runtime_root" -type d -name '__pycache__' -print -quit | grep -q .; then
-              echo "Python bytecode cache directory remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-            if find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -print -quit | grep -q .; then
-              echo "Python bytecode remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-          }
-
-          APPIMAGE_SRC="$(find frontends/desktop/src-tauri/target/release/bundle/appimage -maxdepth 1 -type f -name '*.AppImage' | head -n 1)"
-          [[ -n "$APPIMAGE_SRC" ]] || { echo "No AppImage found" >&2; exit 1; }
-
-          PKG="artifacts/linux/GenericAgent-Desktop-Linux-Portable"
-          RUNTIME="$PKG/runtime"
-          mkdir -p "$RUNTIME"
-
-          # Stable internal name so the generated .desktop Exec= never changes on upgrades.
-          cp "$APPIMAGE_SRC" "$PKG/GenericAgent.AppImage"
-          chmod +x "$PKG/GenericAgent.AppImage"
-          # Icon for the generated .desktop launcher (Icon= needs a real image file on Linux).
-          cp frontends/desktop/src-tauri/icons/icon.png "$PKG/GenericAgent.png"
-          cp frontends/desktop/packaging/scripts/linux/install_linux.sh "$RUNTIME/install_linux.sh"
-          cp frontends/desktop/packaging/scripts/merge_desktop_settings.py "$RUNTIME/merge_desktop_settings.py"
-          chmod +x "$RUNTIME/install_linux.sh"
-          # Uninstaller: top-level entry next to the AppImage.
-          cp frontends/desktop/packaging/scripts/linux/uninstall.sh "$PKG/uninstall.sh"
-          chmod +x "$PKG/uninstall.sh"
-
-          # Fixed python-build-standalone Linux x86_64 archive.
-          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-x86_64-unknown-linux-gnu-install_only.tar.gz"
-          PBS_SHA256="3297691ae34f75fed81ac424e040145fccb0bafe8e581cd5cadbddfa1c0766c0"
-          PBS_ARCHIVE="${RUNNER_TEMP}/pbs-linux-x86_64.tar.gz"
-          echo "Python build-standalone: $PBS_URL"
-          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
-          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | sha256sum --check --strict -
-          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME"   # extracts a 'python/' dir
-          PY="$RUNTIME/python/bin/python3"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine() == "x86_64"; print(sys.version)'
-
-          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
-          mkdir -p "$RUNTIME/wheels"
-          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME/wheels/requirements.txt"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME/wheels" \
-            --requirement "$RUNTIME/wheels/requirements.txt"
-
-          # Runtime source (project root minus heavy/dev/build dirs)
-          mkdir -p "$RUNTIME/app"
-          tar \
-            --exclude='./.git' --exclude='./.github' \
-            --exclude='./frontends/tests' \
-            --exclude='./frontends/desktop/src-tauri' \
-            --exclude='./frontends/desktop/src' \
-            --exclude='./frontends/desktop/public' \
-            --exclude='./frontends/desktop/scripts' \
-            --exclude='./frontends/desktop/release_qualification' \
-            --exclude='./frontends/desktop/tests' \
-            --exclude='./frontends/desktop/testing' \
-            --exclude='./frontends/desktop/spec' \
-            --exclude='./frontends/desktop/node_modules' \
-            --exclude='./frontends/desktop/dist' \
-            --exclude='./frontends/desktop/DESIGN.md' \
-            --exclude='./frontends/desktop/package.json' \
-            --exclude='./frontends/desktop/package-lock.json' \
-            --exclude='./frontends/desktop/.npmrc' \
-            --exclude='./frontends/desktop/index.html' \
-            --exclude='./frontends/desktop/loading.html' \
-            --exclude='./frontends/desktop/setup.html' \
-            --exclude='./frontends/desktop/tsconfig*.json' \
-            --exclude='./frontends/desktop/vite.config.ts' \
-            --exclude='./frontends/desktop/packaging' --exclude='./docs' \
-            --exclude='./assets/demo' --exclude='./assets/images' \
-            --exclude='./assets/GenericAgent_Technical_Report.pdf' \
-            --exclude='./artifacts' \
-            --exclude='*/node_modules' --exclude='*/target' \
-            --exclude='*/.venv' --exclude='./.venv' \
-            --exclude='*/__pycache__' --exclude='*.pyc' \
-            -cf - . | tar -xf - -C "$RUNTIME/app"
-          test -f "$RUNTIME/app/agentmain.py"
-          test -f "$RUNTIME/app/frontends/desktop_bridge.py"
-          test -f "$RUNTIME/app/frontends/desktop/static/index.html"
-          test ! -e "$RUNTIME/app/frontends/desktop/dist"
-          test ! -e "$RUNTIME/app/frontends/desktop/src"
-          test ! -e "$RUNTIME/app/frontends/desktop/public"
-          test ! -e "$RUNTIME/app/frontends/desktop/package-lock.json"
-          test ! -e "$RUNTIME/app/frontends/desktop/node_modules"
-
-          purge_runtime_bytecode "$RUNTIME"
-
-          cat > "$PKG/readme.txt" <<'EOF'
-          ================ 中文 ================
-          GenericAgent Desktop — Linux 便携版（自包含）
-
-          无需安装 Python、无需联网装依赖、无需源码仓库——全部已内置。
-
-          前置条件
-          - Linux x86_64，glibc 2.35 或更高版本（如 Ubuntu 22.04、Debian 12）
-          - 桌面环境 + FUSE（运行 AppImage 所需；多数发行版自带）
-
-          使用
-          1. 解压到任意目录（路径建议不含特殊字符）。
-          2. 给 AppImage 执行权限并运行：
-                 chmod +x GenericAgent.AppImage
-                 ./GenericAgent.AppImage
-          3. 首次启动会离线校验并补齐随包 Python 运行时依赖，界面显示进度，完成后进入主界面。
-          4. 之后启动直接秒进。
-
-          说明
-          - 想真正对话，仍需在程序里配置模型 / API Key。
-          - 可整体移动本文件夹；重启后会自动刷新路径。若需强制重新准备，请删除 runtime/.prepared 后重启。
-          - runtime/ 是内置运行环境与源码，正常使用无需改动。
-
-          ================ English ================
-          GenericAgent Desktop — Linux Portable (self-contained)
-
-          No Python install, no internet for dependencies, no source checkout — everything is bundled.
-
-          Requirements
-          - Linux x86_64 with glibc 2.35 or newer (for example Ubuntu 22.04 or Debian 12)
-          - A desktop environment + FUSE (required to run the AppImage; preinstalled on most distros)
-
-          Usage
-          1. Extract anywhere (a path without special characters is recommended).
-          2. Make the AppImage executable and run it:
-                 chmod +x GenericAgent.AppImage
-                 ./GenericAgent.AppImage
-          3. The first launch verifies and completes the bundled Python runtime offline with a
-             progress UI, then opens the main window.
-          4. Subsequent launches start instantly.
-
-          Notes
-          - To actually chat, configure a model / API key inside the app.
-          - You may move the whole folder; relaunching refreshes its saved paths. To force a new
-            preparation pass, delete runtime/.prepared and relaunch.
-          - runtime/ holds the bundled runtime and source; no need to touch it.
-          EOF
-          sed -i 's/^          //' "$PKG/readme.txt"
-
-          mkdir -p artifacts/linux/out
-          tar -C artifacts/linux -czf artifacts/linux/out/GenericAgent-Desktop-Linux-Portable.tar.gz GenericAgent-Desktop-Linux-Portable
-          ( cd artifacts/linux/out && sha256sum GenericAgent-Desktop-Linux-Portable.tar.gz > SHA256SUMS-linux.txt )
-
-          tar -tzf artifacts/linux/out/GenericAgent-Desktop-Linux-Portable.tar.gz > /tmp/pkglist.txt
-          echo "Package contents (first 40 of $(wc -l < /tmp/pkglist.txt) entries):"
-          head -40 /tmp/pkglist.txt
-          ls -lh artifacts/linux/out
-
-          # Exercise the exact archived candidate on the oldest supported builder.
-          SMOKE_ROOT="${RUNNER_TEMP}/ga-linux-package-smoke"
-          mkdir -p "$SMOKE_ROOT"
-          tar -xzf artifacts/linux/out/GenericAgent-Desktop-Linux-Portable.tar.gz -C "$SMOKE_ROOT"
-          SMOKE_PACKAGE="$SMOKE_ROOT/GenericAgent-Desktop-Linux-Portable"
-          APPIMAGE_ABS="$(realpath "$SMOKE_PACKAGE/GenericAgent.AppImage")"
-          APPIMAGE_SCAN="$SMOKE_ROOT/appimage-scan"
-          mkdir -p "$APPIMAGE_SCAN"
-          (cd "$APPIMAGE_SCAN" && "$APPIMAGE_ABS" --appimage-extract >/dev/null)
-          MAX_GLIBC=""
-          ELF_COUNT=0
-          while IFS= read -r -d '' candidate; do
-            file -b "$candidate" | grep -q '^ELF' || continue
-            ELF_COUNT=$((ELF_COUNT + 1))
-            candidate_max="$(readelf --version-info "$candidate" 2>/dev/null \
-              | sed -n 's/.*Name: GLIBC_\([0-9][0-9.]*\).*/\1/p' \
-              | sort -V | tail -n 1)"
-            [[ -n "$candidate_max" ]] || continue
-            if [[ -z "$MAX_GLIBC" \
-                  || "$(printf '%s\n%s\n' "$MAX_GLIBC" "$candidate_max" | sort -V | tail -n 1)" == "$candidate_max" ]]; then
-              MAX_GLIBC="$candidate_max"
-            fi
-          done < <(find "$SMOKE_PACKAGE" "$APPIMAGE_SCAN/squashfs-root" -type f -print0)
-          [[ "$ELF_COUNT" -gt 0 && -n "$MAX_GLIBC" ]] \
-            || { echo "No GLIBC symbol versions found in final Linux package ELFs" >&2; exit 1; }
-          [[ "$(printf '%s\n%s\n' "$MAX_GLIBC" '2.35' | sort -V | tail -n 1)" == "2.35" ]] \
-            || { echo "Final package requires GLIBC_$MAX_GLIBC; maximum allowed is GLIBC_2.35" >&2; exit 1; }
-          echo "Scanned $ELF_COUNT final package ELFs; maximum symbol is GLIBC_$MAX_GLIBC"
-          APPIMAGE_EXTRACT_AND_RUN=1 WEBKIT_DISABLE_COMPOSITING_MODE=1 \
-            xvfb-run -a "$SMOKE_PACKAGE/GenericAgent.AppImage" >"$SMOKE_ROOT/app.log" 2>&1 &
-          SMOKE_PID=$!
-          cleanup_smoke() {
-            kill "$SMOKE_PID" 2>/dev/null || true
-            wait "$SMOKE_PID" 2>/dev/null || true
-          }
-          trap cleanup_smoke EXIT
-          IDENTITY=""
-          for _ in $(seq 1 120); do
-            IDENTITY="$(curl --fail --silent --max-time 1 http://127.0.0.1:14168/services/identity || true)"
-            [[ -n "$IDENTITY" ]] && break
-            sleep 1
-          done
-          [[ -n "$IDENTITY" ]] || { cat "$SMOKE_ROOT/app.log" >&2; exit 1; }
-          EXPECTED_APP_DIR="$SMOKE_PACKAGE/runtime/app/frontends" \
-            IDENTITY="$IDENTITY" python3 - <<'PY'
-          import json, os, pathlib
-          identity = json.loads(os.environ["IDENTITY"])
-          actual = pathlib.Path(identity["app_dir"]).resolve()
-          expected = pathlib.Path(os.environ["EXPECTED_APP_DIR"]).resolve()
-          assert actual == expected, (actual, expected)
-          PY
-          curl --fail --silent --max-time 3 -X POST http://127.0.0.1:14168/services/bridge/exit >/dev/null
-          cleanup_smoke
-          trap - EXIT
-
-      - name: Upload workflow artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: GenericAgent-Desktop-Linux-Portable-${{ github.run_number }}
-          path: |
-            artifacts/linux/out/GenericAgent-Desktop-Linux-Portable.tar.gz
-            artifacts/linux/out/SHA256SUMS-linux.txt
-          if-no-files-found: error
-
-  # ----------------------------------------------------------------------------
-  build-macos:
-    name: macOS arm64 DMG
-    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'macos')) }}
-    runs-on: macos-26
-    permissions:
-      contents: read
-    env:
-      DEVELOPER_DIR: /Applications/Xcode_26.5.app/Contents/Developer
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
-        with:
-          persist-credentials: false
-
-      - name: Verify pinned macOS build environment
-        run: |
-          test "$(uname -m)" = arm64
-          test "$(xcodebuild -version | sed -n '1p')" = "Xcode 26.5"
-          test "$(xcodebuild -version | sed -n '2p')" = "Build version 17F42"
-          test "$(xcrun --sdk macosx --show-sdk-version)" = "26.5"
-
-      - name: Set up Node.js
-        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
-        with:
-          node-version: ${{ env.NODE_VERSION }}
-
-      - name: Set up Rust
-        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
-        with:
-          toolchain: ${{ env.RUST_TOOLCHAIN }}
-
-      - name: Cache Rust build
-        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
-        with:
-          workspaces: frontends/desktop/src-tauri -> target
-
-      - name: Install desktop dependencies
-        working-directory: frontends/desktop
-        run: |
-          npm install --package-lock=false
-          node -e "const v=require('./node_modules/@tauri-apps/cli/package.json').version; if(v!=='2.11.4') throw new Error('unexpected Tauri CLI '+v)"
-          test ! -e package-lock.json
-
-      - name: Set up Python DMG tooling runtime
-        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
-        with:
-          python-version: ${{ env.MACOS_PACKAGING_PYTHON_VERSION }}
-
-      - name: Install Python packaging tools
-        run: >-
-          python3 -m pip install --require-hashes --only-binary=:all:
-          --requirement frontends/desktop/packaging/dmg-build-requirements.txt
-
-      - name: Verify tracked compiled renderer bytes
-        working-directory: frontends/desktop
-        run: npm run test:dist
-
-      - name: Build macOS .app
-        working-directory: frontends/desktop
-        run: npm run tauri build -- --bundles app
-
-      - name: Assemble self-contained DMG app
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          purge_runtime_bytecode() {
-            local runtime_root="$1"
-            find "$runtime_root" -type d -name '__pycache__' -prune -exec rm -rf {} +
-            find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -delete
-            if find "$runtime_root" -type d -name '__pycache__' -print -quit | grep -q .; then
-              echo "Python bytecode cache directory remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-            if find "$runtime_root" -type f \( -name '*.pyc' -o -name '*.pyo' \) -print -quit | grep -q .; then
-              echo "Python bytecode remains in packaged runtime: $runtime_root" >&2
-              return 1
-            fi
-          }
-
-          APP_SRC="$(find frontends/desktop/src-tauri/target/release/bundle/macos -maxdepth 1 -name '*.app' -type d | head -n 1)"
-          [[ -n "$APP_SRC" ]] || { echo "No .app found" >&2; exit 1; }
-
-          # Build one runtime tree and embed it only in the final DMG application.
-          RUNTIME_SRC="artifacts/macos/runtime-src"
-          mkdir -p "$RUNTIME_SRC"
-          cp frontends/desktop/packaging/scripts/macos/install_macos.sh "$RUNTIME_SRC/install_macos.sh"
-          cp frontends/desktop/packaging/scripts/merge_desktop_settings.py "$RUNTIME_SRC/merge_desktop_settings.py"
-          chmod +x "$RUNTIME_SRC/install_macos.sh"
-
-          # Fixed python-build-standalone macOS arm64 archive.
-          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-aarch64-apple-darwin-install_only.tar.gz"
-          PBS_SHA256="4572133a5542f306b9bdb155da5800f9e38950cd0a98d469b832ce256fe299ea"
-          PBS_ARCHIVE="${RUNNER_TEMP}/pbs-macos-aarch64.tar.gz"
-          echo "Python build-standalone: $PBS_URL"
-          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
-          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | shasum -a 256 --check -
-          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME_SRC"   # extracts a 'python/' dir
-          PY="$RUNTIME_SRC/python/bin/python3"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine() == "arm64"; print(sys.version)'
-
-          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
-          mkdir -p "$RUNTIME_SRC/wheels"
-          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME_SRC/wheels/requirements.txt"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME_SRC/wheels" \
-            --requirement "$RUNTIME_SRC/wheels/requirements.txt"
-
-          # macOS applications must be immutable at first launch. Install from the downloaded
-          # wheelhouse before the runtime enters the signed .app, then carry a durable marker.
-          # The binary-only offline repair path needs neither setuptools nor wheel. Remove any
-          # copies shipped in the base interpreter; bytecode writes are disabled at runtime too.
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip install --no-compile --no-index --find-links "$RUNTIME_SRC/wheels" \
-            --requirement "$RUNTIME_SRC/wheels/requirements.txt"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip uninstall --yes setuptools wheel
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip check
-
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -c 'import aiohttp, fastapi, importlib.util, pydantic, uvicorn, websockets; assert all(importlib.util.find_spec(name) is None for name in ("setuptools", "wheel", "pkg_resources"))'
-          purge_runtime_bytecode "$RUNTIME_SRC"
-          printf 'ok\n' > "$RUNTIME_SRC/.prepared"
-          test -s "$RUNTIME_SRC/.prepared"
-
-          # Runtime source (project root minus heavy/dev/build dirs) — bsdtar exclude syntax.
-          mkdir -p "$RUNTIME_SRC/app"
-          tar \
-            --exclude='.git' --exclude='.github' \
-            --exclude='frontends/tests' \
-            --exclude='frontends/desktop/src-tauri' \
-            --exclude='frontends/desktop/src' \
-            --exclude='frontends/desktop/public' \
-            --exclude='frontends/desktop/scripts' \
-            --exclude='frontends/desktop/release_qualification' \
-            --exclude='frontends/desktop/tests' \
-            --exclude='frontends/desktop/testing' \
-            --exclude='frontends/desktop/spec' \
-            --exclude='frontends/desktop/node_modules' \
-            --exclude='frontends/desktop/dist' \
-            --exclude='frontends/desktop/DESIGN.md' \
-            --exclude='frontends/desktop/package.json' \
-            --exclude='frontends/desktop/package-lock.json' \
-            --exclude='frontends/desktop/.npmrc' \
-            --exclude='frontends/desktop/index.html' \
-            --exclude='frontends/desktop/loading.html' \
-            --exclude='frontends/desktop/setup.html' \
-            --exclude='frontends/desktop/tsconfig*.json' \
-            --exclude='frontends/desktop/vite.config.ts' \
-            --exclude='frontends/desktop/packaging' --exclude='docs' \
-            --exclude='assets/demo' --exclude='assets/images' \
-            --exclude='assets/GenericAgent_Technical_Report.pdf' \
-            --exclude='artifacts' \
-            --exclude='*/node_modules' --exclude='*/target' \
-            --exclude='*/.venv' --exclude='.venv' \
-            --exclude='*/__pycache__' --exclude='*.pyc' \
-            -cf - . | tar -xf - -C "$RUNTIME_SRC/app"
-          test -f "$RUNTIME_SRC/app/agentmain.py"
-          test -f "$RUNTIME_SRC/app/frontends/desktop_bridge.py"
-          test -f "$RUNTIME_SRC/app/frontends/desktop/static/index.html"
-          test ! -e "$RUNTIME_SRC/app/frontends/desktop/dist"
-          test ! -e "$RUNTIME_SRC/app/frontends/desktop/src"
-          test ! -e "$RUNTIME_SRC/app/frontends/desktop/public"
-          test ! -e "$RUNTIME_SRC/app/frontends/desktop/package-lock.json"
-          test ! -e "$RUNTIME_SRC/app/frontends/desktop/node_modules"
-
-          DMG_STAGE="artifacts/macos/dmg-stage"
-          DMG_APP="$DMG_STAGE/GenericAgent.app"
-          mkdir -p "$DMG_STAGE"
-
-          # Standard DMG: GenericAgent.app + Applications alias. The post-build
-          # repackager below writes the curated two-icon Finder layout.
-          ditto "$APP_SRC" "$DMG_APP"
-          mkdir -p "$DMG_APP/Contents/Resources"
-          ditto "$RUNTIME_SRC" "$DMG_APP/Contents/Resources/runtime"
-          test -s "$DMG_APP/Contents/Resources/runtime/.prepared"
-          DMG_RUNTIME="$DMG_APP/Contents/Resources/runtime"
-          PYTHONDONTWRITEBYTECODE=1 "$DMG_RUNTIME/python/bin/python3" \
-            -c 'import aiohttp, fastapi, pydantic, uvicorn, websockets'
-          purge_runtime_bytecode "$DMG_RUNTIME"
-          # Ad-hoc signing only: this is not Developer ID signing or notarization.
-          codesign --force --deep --sign - "$DMG_APP"
-          codesign --verify --deep --strict "$DMG_APP"
-          ln -s /Applications "$DMG_STAGE/Applications"
-
-          mkdir -p artifacts/macos/out
-          hdiutil create \
-            -volname "GenericAgent Desktop" \
-            -srcfolder "$DMG_STAGE" \
-            -ov \
-            -format UDZO \
-            "artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg"
-
-          # Restore the intentionally minimal Finder presentation: only the app
-          # and Applications shortcut, with the established window/icon layout.
-          bash frontends/desktop/scripts/post-dmg.sh "artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg"
-
-          (
-            cd artifacts/macos/out
-            shasum -a 256 "GenericAgent-Desktop-macOS-aarch64.dmg" \
-              > "GenericAgent-Desktop-macOS-aarch64.dmg.sha256"
-          )
-
-          echo "DMG stage tree:"
-          find "$DMG_STAGE" -maxdepth 2 -print | sort
-
-      - name: Upload workflow artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
-        with:
-          name: GenericAgent-Desktop-macOS-aarch64-DMG-${{ github.run_number }}
-          path: |
-            artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg
-            artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg.sha256
-          if-no-files-found: error
-
-  # ----------------------------------------------------------------------------
-  publish-release:
-    name: Publish one atomic prerelease
-    needs: [build-windows, build-linux, build-macos]
-    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-') && needs.build-windows.result == 'success' && needs.build-linux.result == 'success' && needs.build-macos.result == 'success' }}
-    runs-on: ubuntu-24.04
-    permissions:
-      contents: write
-    steps:
-      - name: Download Windows candidate
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: GenericAgent-Desktop-Windows-Portable-${{ github.run_number }}
-          path: ${{ runner.temp }}/release-assets
-
-      - name: Download Linux candidate
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: GenericAgent-Desktop-Linux-Portable-${{ github.run_number }}
-          path: ${{ runner.temp }}/release-assets
-
-      - name: Download macOS arm64 candidate
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
-        with:
-          name: GenericAgent-Desktop-macOS-aarch64-DMG-${{ github.run_number }}
-          path: ${{ runner.temp }}/release-assets
-
-      - name: Validate six assets and publish prerelease
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GH_REPO: ${{ github.repository }}
-          TAG_NAME: ${{ github.ref_name }}
-          TARGET_SHA: ${{ github.sha }}
-        shell: bash
-        run: |
-          set -euo pipefail
-
-          ASSET_DIR="${RUNNER_TEMP}/release-assets"
-          EXPECTED=(
-            GenericAgent-Desktop-Linux-Portable.tar.gz
-            GenericAgent-Desktop-Windows-Portable.zip
-            GenericAgent-Desktop-macOS-aarch64.dmg
-            GenericAgent-Desktop-macOS-aarch64.dmg.sha256
-            SHA256SUMS-linux.txt
-            SHA256SUMS-windows.txt
-          )
-
-          if find "$ASSET_DIR" -mindepth 1 -maxdepth 1 ! -type f -print -quit | grep -q .; then
-            echo "Release staging contains a non-regular entry" >&2
-            find "$ASSET_DIR" -mindepth 1 -maxdepth 1 -print >&2
-            exit 1
-          fi
-          mapfile -t ACTUAL < <(find "$ASSET_DIR" -mindepth 1 -maxdepth 1 -type f -printf '%f\n' | LC_ALL=C sort)
-          if ! diff -u <(printf '%s\n' "${EXPECTED[@]}") <(printf '%s\n' "${ACTUAL[@]}"); then
-            echo "Release staging must contain exactly the six expected files" >&2
-            exit 1
-          fi
-          for filename in "${EXPECTED[@]}"; do
-            test -s "$ASSET_DIR/$filename" || { echo "Missing or empty release asset: $filename" >&2; exit 1; }
-          done
-
-          verify_checksum_manifest() {
-            local manifest="$1"
-            local payload="$2"
-            local normalized="${RUNNER_TEMP}/${manifest}.normalized"
-            tr -d '\r' < "$ASSET_DIR/$manifest" > "$normalized"
-            awk -v expected="$payload" '
-              NF == 2 && $1 ~ /^[0-9a-fA-F]{64}$/ && $2 == expected { valid += 1 }
-              END { exit !(NR == 1 && valid == 1) }
-            ' "$normalized"
-            (cd "$ASSET_DIR" && sha256sum --check --strict "$normalized")
-          }
-          verify_checksum_manifest SHA256SUMS-windows.txt GenericAgent-Desktop-Windows-Portable.zip
-          verify_checksum_manifest SHA256SUMS-linux.txt GenericAgent-Desktop-Linux-Portable.tar.gz
-          verify_checksum_manifest GenericAgent-Desktop-macOS-aarch64.dmg.sha256 GenericAgent-Desktop-macOS-aarch64.dmg
-
-          [[ "$TAG_NAME" =~ ^desktop-portable-[A-Za-z0-9._-]+$ ]] \
-            || { echo "Invalid release tag: $TAG_NAME" >&2; exit 1; }
-          [[ "$TARGET_SHA" =~ ^[0-9a-f]{40}$ ]] \
-            || { echo "Invalid release target SHA" >&2; exit 1; }
-          TITLE="GenericAgent Desktop ${TAG_NAME}"
-          NOTES_FILE="${RUNNER_TEMP}/ga-release-notes.md"
-          cat > "$NOTES_FILE" <<'EOF'
-          GenericAgent Desktop 桌面版 / Desktop
-
-          三个平台产物来自同一提交，并在公开发布前统一验证。All three platform artifacts come from one commit and are validated before publication.
-
-          ## 安装方法 / Installation
-          - Windows x64：下载 `GenericAgent-Desktop-Windows-Portable.zip`，解压后双击 `GenericAgent.exe`。卸载时运行 `uninstall.bat`，再删除解压目录。
-            Windows x64: extract `GenericAgent-Desktop-Windows-Portable.zip`, then launch `GenericAgent.exe`. Run `uninstall.bat` before deleting the extracted directory.
-          - Linux x86_64：下载并解压 `GenericAgent-Desktop-Linux-Portable.tar.gz`，执行 `chmod +x GenericAgent.AppImage` 后运行它。卸载时运行 `uninstall.sh`，再删除解压目录。
-            Linux x86_64: extract `GenericAgent-Desktop-Linux-Portable.tar.gz`, run `chmod +x GenericAgent.AppImage`, then launch it. Run `uninstall.sh` before deleting the extracted directory.
-          - macOS Apple silicon (arm64)：打开 `GenericAgent-Desktop-macOS-aarch64.dmg`，把 `GenericAgent.app` 拖入 Applications。
-            macOS Apple silicon (arm64): open `GenericAgent-Desktop-macOS-aarch64.dmg` and drag `GenericAgent.app` to Applications.
-
-          ## 签名状态 / Signing status
-          Windows 便携版尚未使用代码签名证书，SmartScreen 可能显示警告；运行前请核对 `SHA256SUMS-windows.txt`。
-          The Windows portable build is not code-signed, so SmartScreen may warn; verify `SHA256SUMS-windows.txt` before running it.
-
-          macOS 应用仅使用 ad-hoc 签名，未使用 Apple Developer ID，也未 notarize。首次打开可能需要右键选择“打开”或在“隐私与安全性”中允许。
-          The macOS app is ad-hoc signed only. It is neither Developer ID signed nor notarized; first launch may require Open from the context menu or approval in Privacy & Security.
-
-          SHA-256 清单与各产物一同发布。SHA-256 manifests are included with the artifacts.
-          EOF
-          sed -i 's/^          //' "$NOTES_FILE"
-
-          if gh release view "$TAG_NAME" >/dev/null 2>&1; then
-            echo "A release already exists for $TAG_NAME; refusing to overwrite it" >&2
-            exit 1
-          fi
-
-          ASSETS=()
-          for filename in "${EXPECTED[@]}"; do
-            ASSETS+=("$ASSET_DIR/$filename")
-          done
-          # Keep the release invisible while all assets upload; only the final edit publishes it.
-          gh release create "$TAG_NAME" "${ASSETS[@]}" \
-            --target "$TARGET_SHA" \
-            --title "$TITLE" \
-            --notes-file "$NOTES_FILE" \
-            --draft \
-            --prerelease
-
-          mapfile -t REMOTE_ASSETS < <(gh release view "$TAG_NAME" --json assets --jq '.assets[].name' | LC_ALL=C sort)
-          diff -u <(printf '%s\n' "${EXPECTED[@]}") <(printf '%s\n' "${REMOTE_ASSETS[@]}")
-          test "$(gh release view "$TAG_NAME" --json isDraft --jq '.isDraft')" = true
-          test "$(gh release view "$TAG_NAME" --json isPrerelease --jq '.isPrerelease')" = true
-
-          gh release edit "$TAG_NAME" --draft=false --prerelease
-          test "$(gh release view "$TAG_NAME" --json isDraft --jq '.isDraft')" = false
-          test "$(gh release view "$TAG_NAME" --json isPrerelease --jq '.isPrerelease')" = true

.gitignore

@@ -9,8 +9,6 @@ venv/
 env/
 build/
 dist/
-!frontends/desktop/dist/
-!frontends/desktop/dist/**
 *.egg-info/
 
 .streamlit/
@@ -57,7 +55,6 @@ memory/L4_raw_sessions/*
 !memory/ljqCtrl_sop.md
 !memory/macljqCtrl.py
 !memory/computer_use.md
-!memory/ljqCtrlBg.py
 
 # procmem_scanner related tools
 !memory/procmem_scanner.py
@@ -81,9 +78,6 @@ memory/L4_raw_sessions/*
 # Plan SOP
 !memory/plan_sop.md
 
-# UltraPlan SOP
-!memory/ultraplan_sop.md
-
 # Goal Mode SOP
 !memory/goal_mode_sop.md
 
@@ -125,10 +119,9 @@ memory/L4_raw_sessions/*
 restore_commit.txt
 
 sche_tasks/
+# CDP Bridge 密钥配置（首次运行自动生成）
+assets/tmwd_cdp_bridge/config.js
 assets/copilot_proxy.pyw
-# 模型 instruction（本地定制，不入库）
-assets/glm52_instruction.txt
-assets/gpt55_instruction.txt
 **log.*
 
 # Reflect (ignore new files, whitelist existing)
@@ -141,18 +134,15 @@ reflect/*
 
 # Conductor IM plugins: 私有插件/配置不入库。示例为 _email_example.py / _lark_example.py
 # （以 _ 开头不会被加载器自动轮询）。去掉下划线/示例后缀复制为 email.py / lark.py 即启用。
-frontends/conductor_im_plugins/*
+frontends/conductor_im_plugins/wechat.py
+frontends/conductor_im_plugins/email.py
+frontends/conductor_im_plugins/lark.py
+frontends/conductor_im_plugins/config.local.json
 
 # Universal: never track __pycache__ anywhere
 **/__pycache__/
 
 .claude/
-
 # Project Mode SOP
 !memory/project_mode_sop.md
 
-# 本地 bug / 局限报告草稿（交给维护者参考，不进仓库）
-/BUG_*.md
-
-# Beta 渠道：订阅门户插件（仅 beta 分发携带，不入库）
-plugins/subscription_portal.py

README.md

@@ -774,7 +774,7 @@ GA Web 工具运行在**真实、持久化的 Chrome/Chromium 会话**中，而
 <div align="center">
   <table>
     <tr>
-      <td align="center"><strong>微信群 23</strong><br/><img src="assets/images/wechat_group22.jpg" alt="微信群 23 二维码" width="240"/></td>
+      <td align="center"><strong>微信群 21</strong><br/><img src="assets/images/wechat_group21.jpg" alt="微信群 21 二维码" width="240"/></td>
     </tr>
   </table>
 </div>
@@ -798,6 +798,21 @@ GA Web 工具运行在**真实、持久化的 Chrome/Chromium 会话**中，而
 
 基于 **MIT License** 发布，详见 [`LICENSE`](LICENSE)。
 
-> *声明：GenericAgent 官方渠道为本 GitHub 仓库和 [https://gaagent.ai](https://gaagent.ai)。DintalClaw 是目前唯一官方授权的商业合作方；除非在此处明确列出，其他使用 GenericAgent 名义的第三方网站、机构、组织或个人均非官方。*
+> *声明：GenericAgent 官方渠道为本 GitHub 仓库和 https://gaagent.ai。DintalClaw 是目前唯一官方授权的商业合作方；除非在此处明确列出，其他使用 GenericAgent 名义的第三方网站、机构、组织或个人均非官方。*
 
+---
 
+## 📈 Star History
+
+<div align="center">
+
+<a href="https://star-history.com/#lsdefine/GenericAgent&Date">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=lsdefine/GenericAgent&type=Date&theme=dark" />
+    <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=lsdefine/GenericAgent&type=Date" />
+    <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=lsdefine/GenericAgent&type=Date" />
+  </picture>
+</a>
+
+<br/><br/>
+</div>

TMWebDriver.py

@@ -4,10 +4,6 @@ from simple_websocket_server import WebSocketServer, WebSocket
 import bottle
 from bottle import request
 
-def safe_print(*a, **k):
-    try: print(*a, **k)
-    except: pass
-
 class Session:
     def __init__(self, session_id, info, client=None):
         self.id = session_id
@@ -33,7 +29,7 @@ class Session:
         self.connect_at = time.time()
         self.disconnect_at = None
     def mark_disconnected(self):
-        if self.disconnect_at is None: safe_print(f"Tab disconnected: {self.url} (Session: {self.id})")
+        if self.disconnect_at is None: print(f"Tab disconnected: {self.url} (Session: {self.id})")
         self.disconnect_at = time.time()
 
 
@@ -52,8 +48,6 @@ class TMWebDriver:
 
     def start_http_server(self):
         self.app = app = bottle.Bottle()
-        @app.hook('before_request')
-        def reject_web_origin(): request.headers.get('Origin') is not None and bottle.abort(403)
 
         @app.route('/api/longpoll', method=['GET', 'POST'])
         def long_poll():
@@ -62,7 +56,7 @@ class TMWebDriver:
             session_info = {'url': data.get('url'), 'title': data.get('title', ''), 'type': 'http'}  
             if session_id not in self.sessions: 
                 session = Session(session_id, session_info, queue.Queue())
-                safe_print(f"Browser http connected: {session.url} (Session: {session_id})")  
+                print(f"Browser http connected: {session.url} (Session: {session_id})")  
                 self.sessions[session_id] = session
             session = self.sessions[session_id]
             if session.disconnect_at is not None and session.type != 'http': session.reconnect(queue.Queue(), session_info)
@@ -101,7 +95,7 @@ class TMWebDriver:
                 timeout = float(data.get('timeout', 10.0))
                 try: result = self.execute_js(code, timeout=timeout, session_id=session_id)
                 except Exception as e: return json.dumps({'r': {'error': str(e)}}, ensure_ascii=False)
-                try: safe_print('[remote result]', (str(code)[:50] + ' RESULT:' +str(result)[:50]).replace('\n', ' '))
+                try: print('[remote result]', (str(code)[:50] + ' RESULT:' +str(result)[:50]).replace('\n', ' '))
                 except Exception: pass
                 return json.dumps({'r': result}, ensure_ascii=False)
             return 'ok'
@@ -136,7 +130,7 @@ class TMWebDriver:
                     elif data.get('type') in ['ext_ready', 'tabs_update']:
                         tabs = data.get('tabs', [])
                         current_tab_ids = {str(tab['id']) for tab in tabs}
-                        safe_print(f"Received tabs update: {current_tab_ids}")
+                        print(f"Received tabs update: {current_tab_ids}")
                         for sid in list(driver.sessions.keys()):
                             sess = driver.sessions[sid]
                             if sess.type == 'ext_ws' and sid not in current_tab_ids:
@@ -153,18 +147,18 @@ class TMWebDriver:
                     elif data.get('type') == 'error':  
                         driver.results[data.get('id')] = {'success': False, 'data': data.get('error'), 'newTabs': data.get('newTabs', [])}  
                 except Exception as e:  
-                    safe_print(f"Error handling message: {e}")  
-                    if hasattr(self, 'data'): safe_print(self.data)  
+                    print(f"Error handling message: {e}")  
+                    if hasattr(self, 'data'): print(self.data)  
             def connected(self): (f"New connection from {self.address}")  
             def handle_close(self): 
-                safe_print(f"WS Connection closed: {self.address}")
+                print(f"WS Connection closed: {self.address}")
                 driver._unregister_client(self)  
         
         self.server = WebSocketServer(self.host, self.port, JSExecutor)  
         server_thread = threading.Thread(target=self.server.serve_forever)  
         server_thread.daemon = True  
         server_thread.start()  
-        safe_print(f"WebSocket server running on ws://{self.host}:{self.port}")  
+        print(f"WebSocket server running on ws://{self.host}:{self.port}")  
     
     def _register_client(self, session_id: str, client: WebSocket, session_info) -> None:  
         is_new_session = session_id not in self.sessions
@@ -172,11 +166,11 @@ class TMWebDriver:
         if is_new_session:
             session = Session(session_id, session_info, client)
             self.sessions[session_id] = session            
-            safe_print(f"New tab connected: {session.url} (Session: {session_id})")  
+            print(f"New tab connected: {session.url} (Session: {session_id})")  
         else:
             session = self.sessions[session_id]
             session.reconnect(client, session_info)
-            safe_print(f"Tab reconnected: {session.url} (Session: {session_id})")  
+            print(f"Tab reconnected: {session.url} (Session: {session_id})")  
 
         self.latest_session_id = session_id
         if self.default_session_id is None: self.default_session_id = session_id 
@@ -186,9 +180,9 @@ class TMWebDriver:
             if session.ws_client == client: session.mark_disconnected()
     
     def execute_js(self, code, timeout=15, session_id=None) -> Any:  
-        if session_id is None: session_id = str(self.default_session_id)
+        if session_id is None: session_id = self.default_session_id  
         if self.is_remote:
-            safe_print('remote_execute_js')
+            print('remote_execute_js')
             response = self._remote_cmd({"cmd": "execute_js", "sessionId": session_id, 
                                          "code": code, "timeout": str(timeout)}).get('r', {})
             if response.get('error'): raise Exception(response['error'])
@@ -202,7 +196,7 @@ class TMWebDriver:
                 alive_sessions = [s for s in self.sessions.values() if s.is_active()]
                 if alive_sessions:
                     session = alive_sessions[0]  
-                    safe_print(f"会话 {session_id} 未连接，自动切换到最新活动会话: {session.id}")
+                    print(f"会话 {session_id} 未连接，自动切换到最新活动会话: {session.id}")
                     session_id = self.default_session_id = session.id
                 if not session or not session.is_active(): 
                     raise ValueError(f"会话ID {session_id} 未连接")  
@@ -277,10 +271,10 @@ class TMWebDriver:
             matched = self._remote_cmd({"cmd": "find_session", "url_pattern": url_pattern}).get('r', [])
         else:
             matched = self.find_session(url_pattern)
-        if not matched: return safe_print(f"警告: 未找到URL包含 '{url_pattern}' 的会话")  
-        if len(matched) > 1: safe_print(f"警告: 找到多个URL包含 '{url_pattern}' 的会话，选择第一个")  
+        if not matched: return print(f"警告: 未找到URL包含 '{url_pattern}' 的会话")  
+        if len(matched) > 1: print(f"警告: 找到多个URL包含 '{url_pattern}' 的会话，选择第一个")  
         self.default_session_id, info = matched[0]
-        safe_print(f"成功设置默认会话: {self.default_session_id}: {info['url']}")  
+        print(f"成功设置默认会话: {self.default_session_id}: {info['url']}")  
         return self.default_session_id  
     
     def jump(self, url, timeout=10): self.execute_js(f"window.location.href='{url}'", timeout=timeout)

agent_loop.py

@@ -52,7 +52,7 @@ def agent_runner_loop(client, system_prompt, user_input, handler, tools_schema,
         if handler.parent.task_dir: turnstr = f'Turn {turn} ...'
         if verbose: turnstr = f'**{turnstr}**'
         if yield_info: yield {'turn': turn}
-        yield f"\n{turnstr}\n\n"
+        yield f"\n\n{turnstr}\n\n"
         if turn%10 == 0: client.last_tools = ''  # 每10轮重置一次工具描述
         _hook('turn_before', locals())
         _hook('llm_before', locals())
@@ -76,13 +76,14 @@ def agent_runner_loop(client, system_prompt, user_input, handler, tools_schema,
             if tool_name == 'no_tool': pass
             else: 
                 if verbose: yield f"🛠️ Tool: `{tool_name}`  📥 args:\n````text\n{get_pretty_json(args)}\n````\n"
-                else: yield f"🛠️ {tool_name}({_compact_tool_args(tool_name, args)})\n"
+                else: yield f"🛠️ {tool_name}({_compact_tool_args(tool_name, args)})\n\n\n"
             handler.current_turn = turn
             gen = handler.dispatch(tool_name, args, response, index=ii, tool_num=len(tool_calls))
             try:
                 v = next(gen)
-                if verbose: yield '`````\n' + v
-                outcome = (yield from gen) if verbose else exhaust(gen)
+                def proxy(): yield v; return (yield from gen)
+                if verbose: yield '`````\n'
+                outcome = (yield from proxy()) if verbose else exhaust(proxy())
                 if verbose: yield '`````\n'
             except StopIteration as e: outcome = e.value
             

agentmain.py

@@ -1,4 +1,4 @@
-import os, sys, threading, queue, time, json, re, random, locale, glob
+import os, sys, threading, queue, time, json, re, random, locale
 os.environ.setdefault('GA_LANG', 'zh' if any(k in (locale.getlocale()[0] or '').lower() for k in ('zh', 'chinese')) else 'en')
 if sys.stdout is None: sys.stdout = open(os.devnull, "w")
 elif hasattr(sys.stdout, 'reconfigure'): sys.stdout.reconfigure(errors='replace')
@@ -14,12 +14,10 @@ except Exception: pass
 from ga import GenericAgentHandler, smart_format, get_global_memory, format_error, consume_file
 
 script_dir = os.path.dirname(os.path.abspath(__file__))
-BANNED_TOOLS = (['ask_user', 'start_long_term_update'] if '--no-user-tools' in sys.argv else [])
 def load_tool_schema(suffix=''):
     global TOOLS_SCHEMA
     TS = open(os.path.join(script_dir, f'assets/tools_schema{suffix}.json'), 'r', encoding='utf-8').read()
     TOOLS_SCHEMA = json.loads(TS if os.name == 'nt' else TS.replace('powershell', 'bash'))
-    TOOLS_SCHEMA = [t for t in TOOLS_SCHEMA if t.get('function', {}).get('name') not in BANNED_TOOLS]
 load_tool_schema()
 
 lang_suffix = '_en' if os.environ.get('GA_LANG', '') == 'en' else ''
@@ -31,6 +29,12 @@ mem_insight = os.path.join(mem_dir, 'global_mem_insight.txt')
 if not os.path.exists(mem_insight):
     t = os.path.join(script_dir, f'assets/global_mem_insight_template{lang_suffix}.txt')
     open(mem_insight, 'w', encoding='utf-8').write(open(t, encoding='utf-8').read() if os.path.exists(t) else '')
+cdp_cfg = os.path.join(script_dir, 'assets/tmwd_cdp_bridge/config.js')
+if not os.path.exists(cdp_cfg):
+    try:
+        os.makedirs(os.path.dirname(cdp_cfg), exist_ok=True)
+        open(cdp_cfg, 'w', encoding='utf-8').write(f"const TID = '__ljq_{hex(random.randint(0, 99999999))[2:8]}';")
+    except Exception as e: print(f'[WARN] CDP config init failed: {e} — advanced web features (tmwebdriver) will be unavailable.')
 
 def get_system_prompt():
     with open(os.path.join(script_dir, f'assets/sys_prompt{lang_suffix}.txt'), 'r', encoding='utf-8') as f: prompt = f.read()
@@ -47,27 +51,22 @@ class GenericAgent:
         os.makedirs(os.path.join(script_dir, 'temp'), exist_ok=True)
         self.lock = threading.Lock()
         self.task_dir = None
-        self.history = []; self.handler = None; self.all_outputs = []
+        self.history = []; self.handler = None; 
         self.task_queue = queue.Queue() 
-        self.is_running = False; self.stop_sig = False; self.llm_no = 0;
-        # Output queue of the task currently executing (None when idle). Lets a UI that
-        # lost its own handle (page refresh, second client) re-attach to the live task.
-        self._current_queue = None  
+        self.is_running = False; self.stop_sig = False; self.llm_no = 0;  
         self.inc_out = False; self.verbose = True
         self.peer_hint = True
         self.force_non_stream = False
         logid = f'{(time.time_ns() + random.randrange(1_000_000)) % 1_000_000:06d}'
         self.log_path = os.path.join(script_dir, f'temp/model_responses/model_responses_{logid}.txt')
-        self.llmclient = None
         self.load_llm_sessions()
         self.extra_sys_prompts = []
-        self.intervene = self.extrakeyinfo = None
 
     def load_llm_sessions(self):
         mykeys, changed = reload_mykeys()
         if not changed and hasattr(self, 'llmclients'): return
-        try: oldhistory, oldname = self.llmclient.backend.history, self.llmclient.backend.name
-        except: oldhistory = oldname = None
+        try: oldhistory = self.llmclient.backend.history
+        except: oldhistory = None
         llm_sessions = []
         for k, cfg in mykeys.items():
             if not any(x in k for x in ['api', 'config', 'cookie']): continue
@@ -83,22 +82,20 @@ class GenericAgent:
                     else: llm_sessions[i] = ToolClient(mixin)
                 except Exception as e: print(f'\n\n\n[ERROR] Failed to init MixinSession with cfg {s["mixin_cfg"]}: {e}!!!\n\n')
         self.llmclients = llm_sessions
-        if not self.llmclients: return
-        names = [c.backend.name if not isinstance(c, dict) else f'BADMIXIN_{i}' for i, c in enumerate(self.llmclients)]
-        if oldname in names: self.llm_no = names.index(oldname)
         self.llmclient = self.llmclients[self.llm_no%len(self.llmclients)]
         if oldhistory: self.llmclient.backend.history = oldhistory
     
     def next_llm(self, n=-1):
         self.load_llm_sessions()
-        if not self.llmclients: return
         self.llm_no = ((self.llm_no + 1) if n < 0 else n) % len(self.llmclients)
         lastc = self.llmclient
         self.llmclient = self.llmclients[self.llm_no]
         try: self.llmclient.backend.history = lastc.backend.history
         except: raise Exception('[ERROR] BAD Mixin config: Check your mykey.py')
         self.llmclient.last_tools = ''
-        load_tool_schema()
+        name = self.get_llm_name(model=True)
+        if 'glm' in name or 'minimax' in name or 'kimi' in name: load_tool_schema('_cn')
+        else: load_tool_schema()
     def list_llms(self): 
         self.load_llm_sessions()
         return [(i, self.get_llm_name(b), i == self.llm_no) for i, b in enumerate(self.llmclients)]
@@ -106,27 +103,13 @@ class GenericAgent:
         b = self.llmclient if b is None else b
         if isinstance(b, dict): return 'BADCONFIG_MIXIN'
         if model: return b.backend.model.lower()
-        return f"{type(b.backend).__name__.replace('Session', '')}/{b.backend.name}"
-    def get_ctx_multiplier(self): return getattr(self.llmclient.backend, 'maxlen_multiplier', 1.0)
+        return f"{type(b.backend).__name__}/{b.backend.name}"
 
     def abort(self):
         if not self.is_running: return
         print('Abort current task...')
         self.stop_sig = True
         if self.handler is not None: self.handler.code_stop_signal.append(1)
-        for sess in getattr(self.llmclient.backend, '_sessions', [self.llmclient.backend]):
-            sess.should_stop = lambda: self.stop_sig  # live read; cleared by run()'s finally
-            try:  # wake a recv() blocked in another thread (waiting headers OR reading stream). Verified on Windows:
-                  # shutdown()/close() do NOT wake it (makefile refcount defers closesocket); _real_close() does
-                import socket as _socket
-                sock = sys.modules['llmcore']._INFLIGHT[sess._tid]  # socket registered at urllib3 request() time, before headers
-                try: sock.shutdown(_socket.SHUT_RDWR)  # for non-Windows semantics
-                except OSError: pass
-                try: sock._real_close()  # CPython internal; bypasses refcount -> actual closesocket
-                except AttributeError: sock.close()
-            except Exception: pass
-            try: sess.active_response.close()
-            except Exception: pass
             
     def put_task(self, query, source="user", images=None):
         display_queue = queue.Queue()
@@ -157,13 +140,11 @@ class GenericAgent:
             raw_query = self._handle_slash_cmd(raw_query, display_queue)
             if raw_query is None:
                 self.task_queue.task_done(); continue
-            self.is_running = True; self._current_queue = display_queue
+            self.is_running = True
             if len(raw_query) > 2000:
-                task_file = os.path.join(script_dir, 'temp', f'user_prompt_{os.getpid()}_{time.time_ns()}.md')
+                task_file = os.path.join(script_dir, 'temp', f'user_prompt_{int(time.time())}.md')
                 with open(task_file, 'w', encoding='utf-8') as f: f.write(raw_query)
                 raw_query = f'Long user prompt saved to {task_file}. Read and execute.'
-            self.all_outputs.append({"input": raw_query, "outputs": []})
-            if len(self.all_outputs) > 10000: self.all_outputs = self.all_outputs[-5000:]
             rquery = smart_format(raw_query.replace('\n', ' '), max_str_len=200)
             self.history.append(f"[USER]: {rquery}")
             sys_prompt = get_system_prompt() + '\n'.join(self.extra_sys_prompts) + getattr(self.llmclient.backend, 'extra_sys_prompt', '')
@@ -183,7 +164,7 @@ class GenericAgent:
             gen = agent_runner_loop(self.llmclient, sys_prompt, raw_query, handler, TOOLS_SCHEMA, 
                                     max_turns=180, verbose=self.verbose, yield_info=True)
             try:
-                full_resp = ""; last_pos = 0; curr_turn = 0; turn_resps = self.all_outputs[-1]["outputs"]
+                full_resp = ""; last_pos = 0; curr_turn = 0; turn_resps = []
                 for chunk in gen:
                     if consume_file(self.task_dir, '_stop'): self.abort() 
                     if self.stop_sig: break
@@ -197,6 +178,8 @@ class GenericAgent:
                 if self.inc_out and last_pos < len(full_resp):
                     display_queue.put({'next': full_resp[last_pos:], 'source': source,
                                     'turn': curr_turn, 'outputs': turn_resps[-2:]})
+                #if '</summary>' in full_resp: full_resp = full_resp.replace('</summary>', '</summary>\n\n')
+                #if '</file_content>' in full_resp: full_resp = re.sub(r'<file_content>\s*(.*?)\s*</file_content>', r'\n````\n<file_content>\n\1\n</file_content>\n````', full_resp, flags=re.DOTALL)                
                 display_queue.put({'done': full_resp, 'source': source, 'turn': curr_turn, 'outputs': turn_resps.copy()})
                 self.history = handler.history_info
             except Exception as e:
@@ -204,7 +187,7 @@ class GenericAgent:
                 display_queue.put({'done': full_resp + f'\n```\n{format_error(e)}\n```', 'source': source, 'turn': curr_turn, 'outputs': turn_resps.copy()})
             finally:
                 if self.stop_sig: print('User aborted the task.')
-                self.is_running = self.stop_sig = False  # keep _current_queue: its final 'done' may still be unclaimed (refreshed UI salvages it); next task overwrites it
+                self.is_running = self.stop_sig = False
                 self.task_queue.task_done()
                 if self.handler is not None: self.handler.code_stop_signal.append(1)
 
@@ -215,88 +198,66 @@ if __name__ == '__main__':
     from datetime import datetime
     parser = argparse.ArgumentParser()
     parser.add_argument('--task', metavar='IODIR', help='一次性任务模式，先看subagent.md')
-    parser.add_argument('--func', metavar='PROMPT_FILE', help='纯函数模式：读prompt文件→结果写prompt.out.txt→退出')
     parser.add_argument('--reflect', metavar='SCRIPT', help='反射模式：加载监控脚本，check()触发时发任务')
     parser.add_argument('--input', help='prompt')
-    parser.add_argument('--history', help='history json file')
     parser.add_argument('--llm_no', type=int, default=0)
     parser.add_argument('--verbose', action='store_true')
     parser.add_argument('--nobg', action='store_true')
-    parser.add_argument('--nolog', action='store_true')
-    parser.add_argument('--no-user-tools', action='store_true')
     args, _unknown = parser.parse_known_args()
-    _extra_args = dict(zip([k.lstrip('-') for k in _unknown[::2]], _unknown[1::2])) if _unknown else {}
+    _reflect_args = dict(zip([k.lstrip('-') for k in _unknown[::2]], _unknown[1::2])) if _unknown else {}
 
-    if (args.func or args.task) and not args.nobg:
+    if args.task and not args.nobg:
         import subprocess, platform
         cmd = [sys.executable, os.path.abspath(__file__)] + [a for a in sys.argv[1:]] + ['--nobg']
-        if args.task:
-            d = os.path.join(script_dir, f'temp/{args.task}'); os.makedirs(d, exist_ok=True)
-            out = open(os.path.join(d, 'stdout.log'), 'w', encoding='utf-8')
-            err = open(os.path.join(d, 'stderr.log'), 'w', encoding='utf-8')
-        else: out, err = subprocess.DEVNULL, subprocess.DEVNULL
+        d = os.path.join(script_dir, f'temp/{args.task}'); os.makedirs(d, exist_ok=True)
         p = subprocess.Popen(cmd, cwd=script_dir,
             creationflags=0x08000000 if platform.system() == 'Windows' else 0,
-            stdout=out, stderr=err)
+            stdout=open(os.path.join(d, 'stdout.log'), 'w', encoding='utf-8'),
+            stderr=open(os.path.join(d, 'stderr.log'), 'w', encoding='utf-8'))
         print('PID:', p.pid); sys.exit(0)
 
-    agent = GenericAgent()
-    if args.nolog: agent.log_path = False
+    agent = GeneraticAgent()
     agent.next_llm(args.llm_no)
     agent.verbose = args.verbose
     threading.Thread(target=agent.run, daemon=True).start()
 
-    histfile = args.history
     if args.task:
+        agent.peer_hint = False
+        agent.force_non_stream = True
         agent.task_dir = d = os.path.join(script_dir, f'temp/{args.task}'); nround = ''
-        infile = os.path.join(d, 'input.txt'); outfile = f'{d}/output{nround}.txt'
+        infile = os.path.join(d, 'input.txt')
         if args.input:
             os.makedirs(d, exist_ok=True)
-            [os.remove(f) for f in glob.glob(os.path.join(d, 'output*.txt'))]
+            import glob; [os.remove(f) for f in glob.glob(os.path.join(d, 'output*.txt'))]
             with open(infile, 'w', encoding='utf-8') as f: f.write(args.input)
-        histfile = histfile or os.path.join(d, '_history.json')
-    elif args.func:
-        infile = args.func; outfile = os.path.splitext(args.func)[0] + '.out.txt'
-
-    if histfile and os.path.isfile(histfile): agent.llmclient.backend.history = json.loads(open(histfile, encoding='utf-8').read())
-
-    if args.func or args.task:
-        agent.peer_hint = False
+        if (fh := consume_file(d, '_history.json')): agent.llmclient.backend.history = json.loads(fh)
         with open(infile, encoding='utf-8') as f: raw = f.read()
         while True:
-            dq = agent.put_task(raw, source='func' if args.func else 'task')
-            while 'done' not in (item := dq.get(timeout=2200)):
-                if 'next' in item:
-                    with open(outfile, 'w', encoding='utf-8') as f: f.write(item.get('next', ''))
-            with open(outfile, 'w', encoding='utf-8') as f: f.write(item['done'] + '\n\n[ROUND END]\n')
-            if not args.task: break
+            dq = agent.put_task(raw, source='task')
+            while 'done' not in (item := dq.get(timeout=1200)): 
+                if 'next' in item and random.random() < 0.95:  # 概率写一次中间结果
+                    with open(f'{d}/output{nround}.txt', 'w', encoding='utf-8') as f: f.write(item.get('next', ''))
+            with open(f'{d}/output{nround}.txt', 'w', encoding='utf-8') as f: f.write(item['done'] + '\n\n[ROUND END]\n')
             consume_file(d, '_stop')  # 已经成功停下来了，避免打断下次reply
             for _ in range(300):  # 等reply.txt，10分钟超时
                 time.sleep(2)
                 if (raw := consume_file(d, 'reply.txt')): break
             else: break
             nround = nround + 1 if isinstance(nround, int) else 1
-            outfile = f'{d}/output{nround}.txt'
     elif args.reflect:
         agent.peer_hint = False
+        agent.force_non_stream = True
         import importlib.util
         spec = importlib.util.spec_from_file_location('reflect_script', args.reflect)
         mod = importlib.util.module_from_spec(spec); spec.loader.exec_module(mod)
-        if hasattr(mod, 'init'): mod.init(_extra_args)
+        if hasattr(mod, 'init'): mod.init(_reflect_args)
         _mt = os.path.getmtime(args.reflect)
-        print(f'[Reflect] loaded {args.reflect}' + (f' args={_extra_args}' if _extra_args else ''))
-        try:
-            import frontends.hub as hub
-            def _hub_put(t):
-                if agent.is_running: return {'error': 'busy', 'code': 'busy'}
-                agent.put_task(t, source='hub')
-            hub.connect(agent, f'reflect/{os.path.splitext(os.path.basename(args.reflect))[0]}', put_task=_hub_put)
-        except Exception: pass
+        print(f'[Reflect] loaded {args.reflect}' + (f' args={_reflect_args}' if _reflect_args else ''))
         while True:
             if os.path.getmtime(args.reflect) != _mt:
                 try:
                     spec.loader.exec_module(mod); _mt = os.path.getmtime(args.reflect)
-                    if hasattr(mod, 'init'): mod.init(_extra_args)
+                    if hasattr(mod, 'init'): mod.init(_reflect_args)
                     print('[Reflect] reloaded')
                 except Exception as e: print(f'[Reflect] reload error: {e}')
             try: task = mod.check()
@@ -305,10 +266,9 @@ if __name__ == '__main__':
             if task and task == '/exit': break
             if task:
                 print(f'[Reflect] triggered: {task[:80]}')
-                if (_ln := getattr(mod, 'LLM', None)): agent.next_llm(next((i for i, b in enumerate(agent.llmclients) if not isinstance(b, dict) and b.backend.name == _ln), agent.llm_no))
                 dq = agent.put_task(task, source='reflect')
                 try:
-                    while 'done' not in (item := dq.get(timeout=2200)): pass
+                    while 'done' not in (item := dq.get(timeout=1200)): pass
                     result = item['done']
                     print(result)
                 except Exception as e:
@@ -344,4 +304,5 @@ if __name__ == '__main__':
                     if 'next' in item: print(item['next'], end='', flush=True)
                     if 'done' in item: print(); break
             except KeyboardInterrupt:
-                agent.abort(); print('\n[Interrupted]')
+                agent.abort()
+                print('\n[Interrupted]')

assets/configure_mykey.py

@@ -88,7 +88,7 @@ LLM_PROVIDERS = [
         'type': 'native_oai',
         'template': {
             'name': 'deepseek', 'apikey': 'sk-<your-deepseek-key>',
-            'apibase': 'https://api.deepseek.com', 'model': 'deepseek-v4-pro',
+            'apibase': 'https://api.deepseek.com', 'model': 'deepseek-v4-flash',
             'api_mode': 'chat_completions', 'reasoning_effort': 'high',
         },
         'key_hint': '在 https://platform.deepseek.com/api_keys 获取',
@@ -126,11 +126,11 @@ LLM_PROVIDERS = [
         'template': {
             'name': 'qwen', 'apikey': 'sk-<your-dashscope-key>',
             'apibase': 'https://dashscope.aliyuncs.com/compatible-mode/v1',
-            'model': 'qwen3.6-max-preview',
+            'model': 'qwen3.5-plus',
             'api_mode': 'chat_completions',
         },
         'key_hint': '在 https://bailian.console.aliyun.com/ 获取 API Key',
-        'model_choices': ['qwen3.6-max-preview', 'qwen3.5-plus', 'qwen3-coder-plus'],
+        'model_choices': ['qwen3.5-plus', 'qwen3-coder-plus'],
         'extra_fields': [
             {
                 'key': '_endpoint', 'label': '选择端点',
@@ -732,7 +732,7 @@ def _configure_advanced(provider, cfg):
     proxy = ask_input("HTTP 代理地址 (proxy)", default='', hint='如 http://127.0.0.1:2082，留空跳过')
     if proxy:
         cfg['proxy'] = proxy
-    cw = ask_input("上下文窗口阈值 (context_win)", default='', hint='默认 30000，DeepSeek 默认 70000；联动压缩与工具上限')
+    cw = ask_input("上下文窗口阈值 (context_win)", default='', hint='NativeClaude 默认 28000，其他默认 24000')
     if cw:
         cfg['context_win'] = int(cw)
     if cfg.get('thinking_type') == 'enabled':

assets/ga_httpapp.py

@@ -1,125 +0,0 @@
-import threading, sys, os
-sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
-from fastapi import FastAPI, Header, HTTPException, Query, Depends; from fastapi.responses import HTMLResponse
-from pydantic import BaseModel
-from agentmain import GenericAgent as GA
-
-PORT, API_KEY = int(sys.argv[1]), sys.argv[2]
-app, agent, lock = FastAPI(), GA(), threading.Lock()
-outputs, stopped = [], True
-threading.Thread(target=agent.run, daemon=True).start()
-class Req(BaseModel): prompt: str = ""
-agent.verbose = False
-
-def require_key(key: str = Query(None), x_api_key: str = Header(None, alias="X-API-Key")):
-    if API_KEY not in (key, x_api_key): raise HTTPException(404)
-
-def run_task(prompt):
-    global stopped
-    segs = []  # 本任务按 turn 索引的分段输出
-    with lock: task_start = len(outputs)
-    def flush():
-        with lock: outputs[task_start:] = segs
-    try:
-        dq = agent.put_task(prompt, source="http")
-        while "done" not in (item := dq.get(timeout=2200)):
-            outs = item.get("outputs")
-            if not outs: continue
-            idx = max(0, int(item.get("turn", 0) or 0) - 1)  # turn 1-based → 槽位 0-based
-            while len(segs) <= idx: segs.append("")
-            segs[idx] = str(outs[-1])                         # 当前 turn
-            if len(outs) >= 2 and idx >= 1: segs[idx - 1] = str(outs[-2])  # 前一 turn 落定值
-            flush()
-        segs = [str(s) for s in item.get("outputs", [])]      # done 时全量替换
-        flush()
-    finally: stopped = True
-
-@app.post("/put_task")
-def put_task(req: Req, _=Depends(require_key)):
-    global stopped
-    with lock:
-        if not stopped: return {"ok": False, "error": "should abort first"}
-        stopped = False
-    threading.Thread(target=run_task, args=(req.prompt,), daemon=True).start()
-    return {"ok": True}
-
-@app.post("/abort")
-def abort(_=Depends(require_key)): agent.abort(); return {"ok": True}
-
-@app.post("/input")
-def input_task(req: Req, _=Depends(require_key)):
-    global stopped
-    if not stopped: agent.intervene = req.prompt; return {"ok": True, "mode": "intervene"}
-    with lock:
-        if not stopped: agent.intervene = req.prompt; return {"ok": True, "mode": "intervene"}
-        stopped = False
-    threading.Thread(target=run_task, args=(req.prompt,), daemon=True).start()
-    return {"ok": True, "mode": "task"}
-
-@app.get("/output")
-def get_output(k: int = Query(5), _=Depends(require_key)):
-    with lock: r = outputs[-k:]
-    return {"stopped": stopped, "output": "\n".join(r),
-            "history": "\n".join(str(h) for h in agent.history)}
-
-@app.get("/llm")
-def llm_ep(llm_no: int = Query(None), _=Depends(require_key)):
-    if llm_no is not None:
-        agent.next_llm(llm_no)
-    return {"llm_no": agent.llm_no, "name": agent.get_llm_name(),
-            "llms": [{"no": i, "name": n, "current": a} for i, n, a in agent.list_llms()]}
-
-@app.get("/sysprompt")
-def sysprompt_ep(text: str = Query(None), _=Depends(require_key)):
-    if text is not None:
-        agent.extra_sys_prompts = [text] if text else []
-    return {"extra_sys_prompts": agent.extra_sys_prompts}
-
-HELP = """GA HTTP 操作协议（所有请求带 ?key=API_KEY，或 Header X-API-Key）
-GET  /output?k=N      查看状态：{stopped, output(末N条), history}。stopped=true 表示空闲
-POST /input  {prompt} 下发指令：空闲时作为新任务，忙时作为中途干预(intervene)
-POST /abort           中止当前任务
-GET  /llm[?llm_no=N]  查/切模型：返回 {llm_no,name,llms:[{no,name,current}]}
-GET  /sysprompt[?text]查/设附加系统提示(extra_sys_prompts)，text 为空则清空
-纠偏流程：先 GET /output 读 history 判断状态→需要时 POST /input 注入纠偏指令"""
-
-@app.get("/help")
-def help_ep(_=Depends(require_key)): return {"help": HELP}
-
-@app.get("/")
-def ui():
-    return HTMLResponse(f"""<!DOCTYPE html>
-<html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1">
-<title>GA Monitor</title>
-<script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
-<style>
-*{{margin:0;padding:0;box-sizing:border-box}}
-body{{font:14px/1.6 system-ui,sans-serif;background:#f8f9fa;color:#212529;padding:24px;max-width:900px;margin:0 auto}}
-#status{{font-size:18px;padding:8px 16px;border-radius:8px;margin-bottom:16px;display:inline-block;font-weight:600}}
-.stopped{{background:#d4edda;color:#155724}}.running{{background:#fff3cd;color:#856404}}
-.section{{background:#fff;border-radius:10px;padding:18px;margin-bottom:14px;box-shadow:0 1px 4px rgba(0,0,0,.06)}}
-.section h3{{color:#533483;margin-bottom:8px;font-size:15px}}
-textarea{{width:100%;height:80px;background:#fff;color:#212529;border:1px solid #ced4da;border-radius:6px;padding:10px;font:inherit;resize:vertical}}
-button{{padding:10px 24px;background:#533483;color:#fff;border:none;border-radius:6px;font:inherit;cursor:pointer;font-weight:500}}
-button:hover{{background:#7c3aed}}
-pre{{background:#f1f3f5;padding:12px;border-radius:6px;overflow-x:auto;font:13px monospace;max-height:400px;overflow-y:auto}}
-</style></head><body>
-<div id="status" class="stopped">● Loading...</div>
-<div class="section"><h3>Output</h3><div id="output"></div></div>
-<div class="section"><h3>History</h3><div id="history"></div></div>
-<textarea id="prompt" placeholder="Enter instruction..."></textarea>
-<button onclick="send()">Send</button>
-<script>
-const K=new URLSearchParams(location.search).get('key')||'';
-async function poll(){{let r=await fetch('/output',{{headers:{{'X-API-Key':K}}}});let d=await r.json();
-let s=document.getElementById('status');s.textContent=(d.stopped?'● Stopped':'● Running');s.className=d.stopped?'stopped':'running';
-document.getElementById('output').innerHTML=marked.parse(d.output||'_empty_');
-document.getElementById('history').innerHTML=marked.parse(d.history||'_empty_');}}
-async function send(){{let p=document.getElementById('prompt').value;if(!p)return;
-await fetch('/input',{{method:'POST',headers:{{'X-API-Key':K,'Content-Type':'application/json'}},body:JSON.stringify({{prompt:p}})}});
-document.getElementById('prompt').value='';poll();}}
-poll();setInterval(poll,3000);
-</script></body></html>""")
-
-if __name__ == "__main__":
-    import uvicorn; uvicorn.run(app, host="0.0.0.0", port=PORT)

assets/ga_install.ps1

@@ -8,7 +8,7 @@ GenericAgent one-click portable deployer for Windows.
 
 Modes:
 
-  Default/Mainland: download GenericAgent.zip + uv from user's VPS, set China PyPI mirror; no Git download.
+  Default/Mainland: download GenericAgent.zip + uv + PortableGit from user's VPS, set China PyPI mirror.
 
   GLOBAL=1: clone GenericAgent from GitHub; uv and PortableGit also come from GitHub releases; no PyPI mirror.
 
@@ -16,7 +16,7 @@ Modes:
 
 Portable components are installed under <InstallDir>\.portable:
 
-  uv and Python installed by uv; GLOBAL=1 also installs PortableGit.
+  uv, Python installed by uv, PortableGit.
 
 #>
 
@@ -64,8 +64,6 @@ $Deps = @("requests>=2.28", "beautifulsoup4>=4.12", "bottle>=0.12", "simple-webs
 
 $MainlandIndex = "https://pypi.tuna.tsinghua.edu.cn/simple"
 
-$MainlandPythonMirror = "https://mirror.nju.edu.cn/github-release/astral-sh/python-build-standalone"
-
 $GlobalMode = ($env:GLOBAL -eq "1")
 
 if ($GlobalMode) {
@@ -245,11 +243,7 @@ if (Test-Path $uvPyDir) {
 
 Say "Installing Python $PythonVersion via uv"
 
-$pythonInstallArgs = @("python", "install", $PythonVersion, "--no-bin")
-
-if (!$GlobalMode) { $pythonInstallArgs += @("--mirror", $MainlandPythonMirror) }
-
-$ec = Invoke-Native { & $UvExe @pythonInstallArgs }
+$ec = Invoke-Native { & $UvExe python install $PythonVersion }
 
 if ($ec -ne 0) { Die "uv python install failed" }
 
@@ -261,44 +255,38 @@ Ok "Python: $(& $PythonExe --version)"
 
 
 
-$PythonDir = Split-Path $PythonExe -Parent
+# PortableGit (GitHub release in GLOBAL mode, user's VPS otherwise). Needed for GLOBAL=1 and useful for user shell.
 
-if ($GlobalMode) {
+if (!(Test-Path $GitExe) -or $Force) {
 
-    # GLOBAL=1 needs PortableGit to clone GenericAgent from GitHub.
+    Download-File $GitUrl $GitExeArchive
 
-    if (!(Test-Path $GitExe) -or $Force) {
+    if (Test-Path $GitDir) { Remove-Item -Recurse -Force $GitDir }
 
-        Download-File $GitUrl $GitExeArchive
+    New-Item -ItemType Directory -Force -Path $GitDir | Out-Null
 
-        if (Test-Path $GitDir) { Remove-Item -Recurse -Force $GitDir }
+    Say "Extracting PortableGit"
 
-        New-Item -ItemType Directory -Force -Path $GitDir | Out-Null
+    $ec = Invoke-Native { & $GitExeArchive -y -o"$GitDir" | Out-Null }
 
-        Say "Extracting PortableGit"
-
-        $ec = Invoke-Native { & $GitExeArchive -y -o"$GitDir" | Out-Null }
-
-        if ($ec -ne 0) { Die "PortableGit extraction failed" }
-
-    }
-
-    if (!(Test-Path $GitExe)) { Die "git.exe missing: $GitExe" }
-
-    Ok "Git: $(& $GitExe --version)"
-
-    $GitBin = Split-Path $GitExe -Parent
-
-    $GitUsrBin = Join-Path $GitDir "usr\bin"
-
-    $env:PATH = "$Bin;$PythonDir;$PythonDir\Scripts;$GitBin;$GitUsrBin;$env:PATH"
-
-} else {
-
-    $env:PATH = "$Bin;$PythonDir;$PythonDir\Scripts;$env:PATH"
+    if ($ec -ne 0) { Die "PortableGit extraction failed" }
 
 }
 
+if (!(Test-Path $GitExe)) { Die "git.exe missing: $GitExe" }
+
+Ok "Git: $(& $GitExe --version)"
+
+
+
+$PythonDir = Split-Path $PythonExe -Parent
+
+$GitBin = Split-Path $GitExe -Parent
+
+$GitUsrBin = Join-Path $GitDir "usr\bin"
+
+$env:PATH = "$Bin;$PythonDir;$PythonDir\Scripts;$GitBin;$GitUsrBin;$env:PATH"
+
 
 
 # Fetch/update GenericAgent source.
@@ -471,7 +459,7 @@ set "UV_DEFAULT_INDEX=$MainlandIndex"
 
 set "PIP_INDEX_URL=$MainlandIndex"
 
-set "PATH=$Bin;$PythonDir;$PythonDir\Scripts;%PATH%"
+set "PATH=$Bin;$PythonDir;$PythonDir\Scripts;$GitBin;$GitUsrBin;%PATH%"
 
 echo Activated GenericAgent portable env: %GENERICAGENT_HOME%
 
@@ -493,7 +481,7 @@ echo Activated GenericAgent portable env: %GENERICAGENT_HOME%
 
 `$env:PIP_INDEX_URL = "$MainlandIndex"
 
-`$env:PATH = "$Bin;$PythonDir;$PythonDir\Scripts;`$env:PATH"
+`$env:PATH = "$Bin;$PythonDir;$PythonDir\Scripts;$GitBin;$GitUsrBin;`$env:PATH"
 
 Write-Host "Activated GenericAgent portable env: `$env:GENERICAGENT_HOME" -ForegroundColor Green
 
@@ -509,7 +497,7 @@ Ok "Verification:"
 
 & $PythonExe --version
 
-if ($GlobalMode) { & $GitExe --version }
+& $GitExe --version
 
 & $PythonExe -c "import requests, bs4, bottle; print('deps ok')"
 

assets/ga_ultraplan.py

@@ -1,215 +0,0 @@
-from contextlib import contextmanager, redirect_stdout, redirect_stderr
-from concurrent.futures import ThreadPoolExecutor
-from time import time, sleep
-import html, io, json, os, re, subprocess, sys, tempfile, threading, traceback, urllib.request, webbrowser
-from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
-
-__all__ = ["plan", "phase", "parallel", "mapchain"]
-
-_ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-_PORT = int(os.environ.get("GA_ULTRAPLAN_PORT", "47831"))
-_T0 = time(); _phases = []; _phase_stack = []; _tasks = []; _current = "idle"; _events = []; _srv = None; _last = time(); _lock = threading.Lock(); _exec_lock = threading.Lock()
-_TASK_SLUG = "task"; _FUNC_SEQ = 0; _PLANNED = False; _SESSION = None; _sessions = {}
-_RUN_DIR = os.path.abspath(os.environ.get("GA_ULTRAPLAN_RUNDIR", os.path.join(_ROOT, "temp", "ultraplan_default")))
-os.makedirs(_RUN_DIR, exist_ok=True)
-
-def _bind(rundir):
-    global _SESSION, _RUN_DIR, _phases, _phase_stack, _tasks, _current, _events, _FUNC_SEQ, _TASK_SLUG
-    key = os.path.abspath(rundir); os.makedirs(key, exist_ok=True)
-    s = _sessions.setdefault(key, {"rundir": key, "phases": [], "phase_stack": [], "tasks": [], "current": "idle", "events": [], "func_seq": 0, "task_slug": "task"})
-    _SESSION = key; _RUN_DIR = key; _phases = s["phases"]; _phase_stack = s["phase_stack"]; _tasks = s["tasks"]; _current = s["current"]; _events = s["events"]; _FUNC_SEQ = s["func_seq"]; _TASK_SLUG = s["task_slug"]
-    return s
-
-def _save_session():
-    if _SESSION in _sessions:
-        _sessions[_SESSION].update(current=_current, func_seq=_FUNC_SEQ, task_slug=_TASK_SLUG)
-
-def _need_plan():
-    if not _PLANNED: raise RuntimeError("call plan(rundir) as the first UltraPlan statement")
-
-def _slug(s):
-    s = re.sub(r"[^a-zA-Z0-9]+", "_", str(s)).strip("_").lower()
-    return s[:80] or "task"
-
-def _task_slug(path):
-    stem = os.path.splitext(os.path.basename(path or "task"))[0]
-    parts = [_slug(x) for x in re.split(r"[_\-]+", stem)]
-    stop = {"ultra", "ultraplan", "script", "boot", "build", "test", "debug", "verify", "explore", "reduce", "phase"}
-    parts = [p for p in parts if p and not p.isdigit() and p not in stop]
-    return "_".join(parts) or _slug(stem)
-
-def _note(s):
-    global _last
-    with _lock:
-        _last = time(); _events.append(f"{_last-_T0:7.1f}s  {s}"); del _events[:-60]
-
-def _phase_lines(nodes, depth=0):
-    out = []
-    for p in nodes:
-        pre = "  " * depth; mark = ">>" if p["on"] else "  "
-        out.append(f"{pre}{mark} {p['status']:<7} {p['name']}" + (f" - {p['desc']}" if p['desc'] else ""))
-        out += [f"{pre}   | {op}" for op in p.get("ops", [])[-8:]]
-        out += [f"{pre}   - {t['status']:<5} {t['desc']}" for t in p.get("tasks", [])[-20:]]
-        out += _phase_lines(p.get("children", []), depth + 1)
-    return out
-
-def _page():
-    with _lock:
-        lines = ["GA UltraPlan"]
-        for key, s in _sessions.items():
-            lines += ["", f"== {os.path.basename(key) or key} ==", f"rundir: {key}", f"current: {s['current']}", "", "phases:"]
-            lines += _phase_lines(s["phases"]) or ["(none)"]
-            lines += ["", "recent tasks:"]
-            lines += [f"{t['status']:<7} {t['desc']}" for t in s["tasks"][-12:]] or ["(none)"]
-            lines += ["", "events:", *s["events"][-30:]]
-        if not _sessions: lines += ["", "(no sessions)"]
-    return "<meta http-equiv=refresh content=1><pre>" + html.escape("\n".join(lines)) + "</pre>"
-
-class _H(BaseHTTPRequestHandler):
-    def do_GET(self):
-        b = _page().encode("utf-8"); self.send_response(200); self.send_header("Content-Type", "text/html; charset=utf-8"); self.end_headers(); self.wfile.write(b)
-    def do_POST(self):
-        global _TASK_SLUG, _PLANNED
-        if self.path != "/exec": self.send_response(404); self.end_headers(); return
-        n = int(self.headers.get("Content-Length", "0")); req = json.loads(self.rfile.read(n).decode("utf-8"))
-        out = io.StringIO(); err = io.StringIO(); rc = 0
-        with _exec_lock, redirect_stdout(out), redirect_stderr(err):
-            _bind(req["rundir"]); _note("exec: " + req.get("path", "<script>"))
-            cwd = os.getcwd(); old_env = os.environ.copy(); os.environ["GA_ULTRAPLAN_DAEMON"] = "1"; _PLANNED = False; _TASK_SLUG = req.get("task") or _task_slug(req.get("path")); _save_session()
-            try:
-                if req.get("cwd"): os.chdir(req["cwd"])
-                g = {"__name__": "__main__", "__file__": req.get("path", "<ultraplan>")}
-                exec(compile(req.get("code", ""), g["__file__"], "exec"), g, g)
-            except SystemExit as e:
-                rc = int(e.code or 0) if isinstance(e.code, int) else 1
-            except Exception:
-                rc = 1; traceback.print_exc()
-            finally:
-                _save_session(); os.chdir(cwd); os.environ.clear(); os.environ.update(old_env)
-        body = json.dumps({"returncode": rc, "stdout": out.getvalue(), "stderr": err.getvalue()}).encode("utf-8")
-        self.send_response(200); self.send_header("Content-Type", "application/json"); self.end_headers(); self.wfile.write(body)
-    def log_message(self, *a): pass
-
-def _serve_daemon():
-    global _srv
-    sys.modules.setdefault("assets.ga_ultraplan", sys.modules[__name__])
-    _srv = ThreadingHTTPServer(("127.0.0.1", _PORT), _H); _srv.timeout = 60; url = f"http://127.0.0.1:{_PORT}/"
-    print(f"[ultraplan] {url}", flush=True)
-    if os.environ.get("GA_ULTRAPLAN_BROWSER") != "0": webbrowser.open(url)
-    while time() - _last < 3600: _srv.handle_request()
-
-def _ping():
-    try: urllib.request.urlopen(f"http://127.0.0.1:{_PORT}/", timeout=0.5).read(1); return True
-    except Exception: return False
-
-def _show():
-    if os.environ.get("GA_ULTRAPLAN_DAEMON") == "1" or os.environ.get("GA_ULTRAPLAN_HTML") == "0": return
-    if not _ping():
-        subprocess.Popen([sys.executable, __file__, "--daemon"], cwd=_ROOT, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, env={**os.environ, "GA_ULTRAPLAN_DAEMON":"1"})
-        for _ in range(20):
-            if _ping(): break
-            sleep(0.25)
-
-def plan(rundir):
-    global _PLANNED
-    if _PLANNED: return
-    _PLANNED = True; _bind(rundir); _save_session()
-    if os.environ.get("GA_ULTRAPLAN_DAEMON") == "1": return
-    _show(); path = os.path.abspath(sys.argv[0]); code = open(path, encoding="utf-8").read()
-    data = json.dumps({"path": path, "cwd": os.getcwd(), "rundir": _RUN_DIR, "task": _task_slug(path), "code": code}).encode("utf-8")
-    r = urllib.request.urlopen(urllib.request.Request(f"http://127.0.0.1:{_PORT}/exec", data=data, headers={"Content-Type":"application/json"}), timeout=None)
-    resp = json.loads(r.read().decode("utf-8")); sys.stdout.write(resp.get("stdout", "")); sys.stderr.write(resp.get("stderr", "")); sys.exit(resp.get("returncode", 1))
-
-@contextmanager
-def phase(name, desc=""):
-    global _current
-    _need_plan(); t = time(); p = {"name": name, "desc": desc, "status": "run", "on": True, "children": [], "tasks": [], "ops": []}
-    with _lock:
-        (_phase_stack[-1]["children"] if _phase_stack else _phases).append(p)
-        _phase_stack.append(p); _current = f"phase: {name}"; _save_session()
-    print(f"[phase] {name}" + (f" - {desc}" if desc else ""), flush=True); _note(f"phase start: {name}")
-    failed = False
-    try:
-        yield
-    except Exception:
-        failed = True; raise
-    finally:
-        dt = time() - t; status = "fail" if failed else "done"
-        with _lock:
-            p["status"] = status; p["on"] = False
-            if _phase_stack and _phase_stack[-1] is p: _phase_stack.pop()
-            elif p in _phase_stack: _phase_stack.remove(p)
-            if _phase_stack: _current = f"phase: {_phase_stack[-1]['name']}"
-            else: _current = ("failed" if failed else "all phases done") + f"; last: {name} ({dt:.1f}s)"
-            _save_session()
-        print(f"[{status}] {name} ({dt:.1f}s)", flush=True)
-        print("[next] Main agent must continue orchestration or stop; do not take over task work.", flush=True)
-        _note(f"phase {status}:  {name} ({dt:.1f}s)")
-
-def _task(desc, status="run"):
-    with _lock:
-        t = {"desc": str(desc), "status": status}; _tasks.append(t); del _tasks[:-80]
-        if _phase_stack: _phase_stack[-1]["tasks"].append(t)
-    return t
-
-def _task_done(t, status="done"):
-    with _lock: t["status"] = status
-
-def _op(s):
-    with _lock:
-        if _phase_stack: _phase_stack[-1]["ops"].append(s)
-
-def _fmt(x, data):
-    return x.format(**data) if isinstance(x, str) else x
-
-def _subagent(desc, prompt=None, *, llm_no=0, timeout=3600):
-    global _FUNC_SEQ
-    root = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-    _FUNC_SEQ += 1; path = os.path.join(_RUN_DIR, f"{_FUNC_SEQ:03d}_{_TASK_SLUG}_{_slug(desc)}.txt")
-    with open(path, "w", encoding="utf-8") as f:
-        f.write(desc if prompt is None else prompt)
-    print(f"[subagent] {desc} -> {path}", flush=True); _note(f"agent: {desc}")
-    cmd = [
-        sys.executable, os.path.join(root, "agentmain.py"), "--func", path,
-        "--llm_no", str(llm_no), "--nobg", "--nolog", "--no-user-tools",
-    ]
-    r = subprocess.run(cmd, cwd=root, text=True, capture_output=True, timeout=timeout)
-    if r.returncode: raise RuntimeError(f"subagent failed: {desc}\n{r.stdout}\n{r.stderr}")
-    return os.path.splitext(path)[0] + ".out.txt"
-
-def _run(task, data):
-    task = task() if callable(task) else task
-    if isinstance(task, (tuple, list)):
-        desc = _fmt(task[0], data); t = _task(desc)
-        try: return _subagent(desc, _fmt(task[1] if len(task) > 1 else task[0], data), llm_no=data.get("llm_no", 0), timeout=data.get("timeout", 3600))
-        except Exception: _task_done(t, "fail"); raise
-        finally:
-            if t["status"] == "run": _task_done(t)
-    if isinstance(task, dict):
-        d = {**data, **task.get("data", {})}; desc = _fmt(task.get("desc", "task"), d); t = _task(desc)
-        try: return _subagent(desc, _fmt(task.get("prompt", task.get("desc", "task")), d), llm_no=task.get("llm_no", d.get("llm_no", 0)), timeout=task.get("timeout", d.get("timeout", 3600)))
-        except Exception: _task_done(t, "fail"); raise
-        finally:
-            if t["status"] == "run": _task_done(t)
-    return task
-
-def parallel(tasks, max_workers=None, _label=None, **data):
-    global _current
-    _need_plan(); tasks = list(tasks); label = _label or f"parallel: {len(tasks)} tasks"
-    with _lock: _current = label; _save_session()
-    _op(label); _note(label)
-    with ThreadPoolExecutor(max_workers=max_workers or min(3, len(tasks) or 1)) as ex:
-        return list(ex.map(lambda t: _run(t, data), tasks))
-
-def mapchain(items, *steps, max_workers=None, **data):
-    global _current
-    _need_plan(); items = list(items); label = f"mapchain: {len(items)} items x {len(steps)} steps"
-    with _lock: _current = label; _save_session()
-    def run(x):
-        for step in steps:
-            d = {**data, "item": x, "previous": x}; x = _run(step(x) if callable(step) else step, d)
-        return x
-    return parallel([lambda x=x: run(x) for x in items], max_workers=max_workers, _label=label)
-
-if __name__ == "__main__" and "--daemon" in sys.argv:
-    _serve_daemon()

assets/global_mem_insight_template.txt

@@ -2,8 +2,8 @@
 需要时read L2 或 ls ../memory/ 查L3
 L0(META-SOP): memory_management_sop
 L2: 现空
-L3: memory_cleanup_sop(记忆整理) | ui_detect.py | ocr_utils.py | subagent | web_setup_sop
-| procmem_scanner | keychain | ljqCtrl_sop+.py | tmwebdriver_sop | autonomous_operation_sop | scheduled_task_sop | vision_sop | adb_ui.py | project_mode_sop
+L3: memory_cleanup_sop(记忆整理) | ui_detect.py | ocr_utils.py | subagent | web_setup_sop | plan_sop 
+| procmem_scanner | keychain | ljqCtrl_sop+.py | tmwebdriver_sop | autonomous_operation_sop | scheduled_task_sop | vision_sop | adb_ui.py
 L4: L4_raw_sessions/ 历史会话
 
 浏览器特殊操作: tmwebdriver_sop(文件上传/图搜/PDF blob/物理坐标/HttpOnly Cookie/autofill突破/跨域iframe/CDP/跨tab)
@@ -13,11 +13,11 @@ UI操作/截图/视觉: computer_use.md | vision_sop | 窗口截图必用ljqCtrl
 手机:adb_ui.py
 
 [RULES]
-1. 搜索先行: 搜文件名禁长时间递归, 网络搜索一定优先使用web工具的google, 优先看cwd，禁猜路径
+1. 搜索先行: 搜文件名严禁不用es(禁PS递归/禁dir遍历), 搜索一定优先使用web工具的google(严禁duckduckgo等), 优先看cwd，禁猜路径
 2. 交叉验证: 禁信摘要, 数值进详情页核实
 3. 编码安全: 禁PS cat/type用file_read; 改前必读; memory模块直接import(已在PATH,禁加虚假前缀)
-4. 闭环: 物理模拟后确认; 3次失败请求干预
+4. 闭环: 物理模拟后确认; 3次失败请求干预; Git完整闭环
 5. 进程: 禁无条件杀python(杀自己), 精确PID, 禁os.kill判活
-6. 窗口: GUI状态优先枚举标题
+6. 窗口: GUI状态优先win32gui枚举标题
 7. web JS: 输入用原生setter+事件链, 点击前检disabled, 注意引号转义; scan空/不全先稍等再scan, 禁首扫定论
-8. SOP: 读SOP禁凭印象,有utils必用
+8. SOP: 读SOP禁凭印象,有utils必用 | 复杂超长程任务/用户明确提及规划模式→读plan_sop

assets/global_mem_insight_template_en.txt

@@ -2,8 +2,8 @@
 Read L2 or ls ../memory/ for L3 when needed
 L0(META-SOP): memory_management_sop
 L2: currently empty
-L3: memory_cleanup_sop(memory cleanup) | ui_detect.py | ocr_utils.py | subagent | web_setup_sop
-| procmem_scanner | keychain | ljqCtrl_sop+.py | tmwebdriver_sop | autonomous_operation_sop | scheduled_task_sop | vision_sop | adb_ui.py | project_mode_sop
+L3: memory_cleanup_sop(memory cleanup) | ui_detect.py | ocr_utils.py | subagent | web_setup_sop | plan_sop 
+| procmem_scanner | keychain | ljqCtrl_sop+.py | tmwebdriver_sop | autonomous_operation_sop | scheduled_task_sop | vision_sop | adb_ui.py
 L4: L4_raw_sessions/ historical sessions
 
 Browser special ops: tmwebdriver_sop(file upload/image search/PDF blob/physical coords/HttpOnly Cookie/autofill bypass/cross-origin iframe/CDP/cross-tab)
@@ -13,11 +13,11 @@ Scheduling: scheduled_task_sop | Autonomous: autonomous_operation_sop | watchdog
 Mobile: adb_ui.py
 
 [RULES]
-1. Search first: no huge PS recursion/no dir traversal for file search, prefer Google for web search, check cwd first, no guessing paths
+1. Search first: must use es for filename search (no PS recursion/no dir traversal), always prefer Google for web search (no duckduckgo etc), check cwd first, no guessing paths
 2. Cross-verify: never trust summaries, verify numbers on detail pages
 3. Encoding safety: use file_read not PS cat/type; read before modify; import memory modules directly (already in PATH, no fake prefixes)
-4. Close the loop: confirm after physical simulation; request intervention after 3 failures
+4. Close the loop: confirm after physical simulation; request intervention after 3 failures; complete Git workflow
 5. Processes: never kill python unconditionally (kills self), use exact PID, no os.kill for liveness check
 6. Windows: prefer win32gui title enumeration for GUI state
 7. Web JS: use native setter + event chain for input, check disabled before click, mind quote escaping; if scan empty/incomplete wait then rescan, no conclusions from first scan
-8. SOP: read SOPs not from memory, must use utils if available
+8. SOP: read SOPs not from memory, must use utils if available | complex long-running/user mentions planning -> read plan_sop

assets/insight_fixed_structure.txt

@@ -4,6 +4,6 @@ L1 Insight是极简索引，L2/L3变更时同步L1，索引必须极简。写记
 [CONSTITUTION]
 1. 改自身源码先请示；./内可自主实验，允许装包和portable工具
 2. 决策前查记忆，有SOP/utils必用；多次失败回看SOP；未查证不断言
-3. 分步执行，控制粒度，限制失败半径
+3. 分步执行，控制粒度，限制失败半径；3次失败请求干预
 4. 密钥文件仅引用，不读取/移动
 5. 写任何记忆前读META-SOP核验，memory下文件只能patch修改（除非新建）

assets/insight_fixed_structure_en.txt

@@ -4,6 +4,6 @@ L1 Insight is a minimal index; sync L1 when L2/L3 changes; keep index minimal. R
 [CONSTITUTION]
 1. Ask before modifying own source code; free to experiment within ./; installing packages and portable tools allowed
 2. Check memory before decisions; always use existing SOPs/utils; revisit SOPs on repeated failures; never assert without evidence
-3. Execute step by step, control granularity, limit blast radius
+3. Execute step by step, control granularity, limit blast radius; request intervention after 3 failures
 4. Key/secret files: reference only, never read or move
 5. Read META-SOP to verify before writing any memory; files under memory/ must be patched only (unless creating new)

assets/supergrok_proxy.py

@@ -6,7 +6,7 @@ SuperGrok Local Proxy - CLI
   python assets/supergrok_proxy.py login
   python assets/supergrok_proxy.py serve --port 15433
   python assets/supergrok_proxy.py models
-  python assets/supergrok_proxy.py test --model grok-4.5
+  python assets/supergrok_proxy.py test --model grok-4.3
 
 GenericAgent/mykey 配置示例：
   native_oai_config_supergrok_proxy = {

assets/sys_prompt.txt

@@ -1,10 +1,6 @@
 # Role: 物理级全能执行者
 你拥有文件读写、脚本执行、用户浏览器JS注入、系统级干预的物理操作权限。禁止推诿"无法操作"——不空想，用工具探测。
 ## 行动原则
-调用工具前先推演：当前阶段、上步结果是否符合预期、下步策略，必须在回复文本头部用小于30词<summary>输出极简总结。
+调用工具前先推演：当前阶段、上步结果是否符合预期、下步策略，必须在回复文本中用<summary>输出极简总结。
 - 探测优先：失败时先充分获取信息（日志/状态/上下文），关键信息存入工作记忆，再决定重试或换方案。不可逆操作先询问用户。
 - 失败升级：1次→读错误理解原因，2次→探测环境状态，3次→深度分析后换方案或问用户。禁止无新信息的重复操作。
-- 行动也是认识：边推进边用现实反馈校正方向，内部解释与计划只作暂时假说。根据任务选择高级sop调用
-- 自主闭环：能查明、试明或安全推断的不要问；仅为用户独有事实、价值取舍、必要授权或不可兼容的高影响分歧请求最小信息
-- 完成发生在现实中：必须产出实际结果并按错误代价验证；计划、问题、调研、工具成功、承诺或未完成分析不能冒充交付。结束前检查重大残差，有则继续，无则停止，既不过早收工也不无限研究
-- 受阻或预算耗尽时交付已验证的最大可用结果，区分已完成、未完成、未经验证与残余风险；最终消息自包含地重述关键结果、依据和边界

assets/sys_prompt_en.txt

@@ -2,7 +2,6 @@
 You have full physical access: file I/O, script execution, browser JS injection, and system-level intervention. Never deflect with "can't do it" — don't speculate, use tools to probe.
 Summarize and reply in user's language or follow user's prompt.
 ## Action Principles
-Before each tool call, reason: current phase, whether the last result met expectations, and next strategy in reply text of each turn.
-<summary> (<30 tokens) before reply text.
+Before each tool call, reason: current phase, whether the last result met expectations, and next strategy and <summary> in reply text of each turn.
 - Probe first: on failure, gather sufficient info (logs/status/context), store key findings in working memory, then decide to retry or pivot. Ask the user before irreversible operations.
 - Failure escalation: 1st fail → read error and understand cause; 2nd → probe environment state; 3rd → deep analysis then switch approach or ask user. Never repeat an action without new information.

assets/tmwd_cdp_bridge/background.js

@@ -16,7 +16,6 @@ chrome.runtime.onInstalled.addListener(() => {
 });
 
 async function handleExtMessage(msg, sender) {
-  if (msg.cmd === 'status') return { ok: true, data: status };
   if (msg.cmd === 'cookies') return await handleCookies(msg, sender);
   if (msg.cmd === 'cdp') return await handleCDP(msg, sender);
   if (msg.cmd === 'batch') return await handleBatch(msg, sender);
@@ -212,9 +211,7 @@ function buildCdpScript(code) {
 
 // --- WebSocket Client for TMWebDriver ---
 let ws = null;
-let status = 'connected';
 const WS_URL = 'ws://127.0.0.1:18765';
-function setStatus(s){if(s===status)return;status=s;chrome.tabs.query({}).then(T=>T.forEach(t=>chrome.tabs.sendMessage(t.id,{type:'tmwd_status',data:s}).catch(()=>{})));}
 
 function scheduleProbe() {
   // Use chrome.alarms to survive MV3 service worker suspension
@@ -259,7 +256,6 @@ chrome.alarms.onAlarm.addListener(async (alarm) => {
       console.log('[TMWD-WS] Server detected, connecting...');
       connectWS();
     } else {
-      setStatus('disconnected');
       scheduleProbe(); // Server not up, keep probing
     }
   }
@@ -343,7 +339,6 @@ function connectWS() {
   console.log('[TMWD-WS] Connecting to', WS_URL);
   try {
     ws = new WebSocket(WS_URL);
-    setStatus('connecting');
   } catch (e) {
     console.error('[TMWD-WS] Constructor error:', e);
     ws = null;
@@ -352,7 +347,6 @@ function connectWS() {
   }
   ws.onopen = async () => {
     console.log('[TMWD-WS] Connected!');
-    setStatus('connected');
     scheduleKeepalive(); // Keep SW alive while connected
     const tabs = (await chrome.tabs.query({})).filter(t => isScriptable(t.url));
     ws.send(JSON.stringify({
@@ -391,7 +385,6 @@ function connectWS() {
   };
   ws.onclose = () => {
     console.log('[TMWD-WS] Disconnected');
-    setStatus('connecting');
     ws = null;
     scheduleProbe();
   };

assets/tmwd_cdp_bridge/content.js

@@ -7,13 +7,41 @@ document.querySelectorAll('meta[http-equiv="Content-Security-Policy"]').forEach(
 (function(){
   if(window.self!==window.top)return;
   const d=document.createElement('div');
-  d.textContent='ljq_driver: 已连接';
-  d.style.cssText='position:fixed;bottom:8px;right:8px;background:#4CAF50;color:white;padding:4px 7px;border-radius:4px;font-size:11px;font-weight:bold;z-index:99999;box-shadow:0 2px 4px rgba(0,0,0,0.2);opacity:0.2;pointer-events:none;';
-  const S={connected:['已连接','#4CAF50'],connecting:['重连中','#FF9800'],disconnected:['断开','#F44336']};
-  const R=s=>{const[t,c]=S[s]||S.disconnected;d.textContent='ljq_driver: '+t;d.style.background=c};
-  chrome.runtime.onMessage.addListener(m=>{if(m?.type==='tmwd_status')R(m.data)});
-  chrome.runtime.sendMessage({cmd:'status'},r=>R(r?.ok?r.data:'connected'));
+  d.id='ljq-ind';
+  d.innerText='ljq_driver: 已连接';
+  d.style.cssText='position:fixed;bottom:8px;right:8px;background:#4CAF50;color:white;padding:4px 7px;border-radius:4px;font-size:11px;font-weight:bold;z-index:99999;cursor:pointer;box-shadow:0 2px 4px rgba(0,0,0,0.2);opacity:0.5;';
+  d.addEventListener('click',()=>alert('会话活跃\nURL: '+location.href));
   (document.body||document.documentElement).appendChild(d);
 })();
 
+new MutationObserver(muts => {
+  for (const m of muts) for (const n of m.addedNodes) {
+    if (n.id === TID || (n.querySelector && n.querySelector('#' + TID))) {
+      const el = n.id === TID ? n : n.querySelector('#' + TID);
+      handle(el);
+    }
+  }
+}).observe(document.documentElement, { childList: true, subtree: true });
+
+async function handle(el) {
+  try {
+    const req = el.textContent.trim() ? JSON.parse(el.textContent) : { cmd: 'cookies' };
+    const cmd = req.cmd || 'cookies';
+    let resp;
+    if (cmd === 'cookies') {
+      resp = await chrome.runtime.sendMessage({ cmd: 'cookies', url: req.url || location.href });
+    } else if (cmd === 'cdp') {
+      resp = await chrome.runtime.sendMessage({ cmd: 'cdp', method: req.method, params: req.params || {}, tabId: req.tabId });
+    } else if (cmd === 'batch') {
+      resp = await chrome.runtime.sendMessage({ cmd: 'batch', commands: req.commands, tabId: req.tabId });
+    } else if (cmd === 'tabs') {
+      resp = await chrome.runtime.sendMessage({ cmd: 'tabs', method: req.method, tabId: req.tabId, url: req.url, active: req.active, index: req.index, windowId: req.windowId, openerTabId: req.openerTabId });
+    } else {
+      resp = { ok: false, error: 'unknown cmd: ' + cmd };
+    }
+    el.textContent = JSON.stringify(resp);
+  } catch (e) {
+    el.textContent = JSON.stringify({ ok: false, error: e.message });
+  }
+}
 })();

assets/tmwd_cdp_bridge/manifest.json

@@ -28,7 +28,7 @@
     },
     {
       "matches": ["<all_urls>"],
-      "js": ["content.js"],
+      "js": ["config.js", "content.js"],
       "run_at": "document_idle",
       "all_frames": true
     }

assets/tools_schema.json

@@ -3,7 +3,7 @@
     "name": "code_run",
     "description": "Code executor. Prefer python. Multi-call OK, use script param. Reply code block is executed if no script arg; prefer for single call to avoid escaping. No hardcoding bulk data",
     "parameters": {"type": "object", "properties": {
-      "script": {"type": "string", "description": "script"},
+      "script": {"type": "string", "description": "[Mutually exclusive] NEVER use this param when use reply code block."},
       "type": {"type": "string", "enum": ["python", "powershell"], "description": "Code type", "default": "python"},
       "timeout": {"type": "integer", "description": "in seconds", "default": 60},
       "cwd": {"type": "string", "description": "Working directory, defaults to cwd"},
@@ -53,20 +53,21 @@
   }},
   {"type": "function", "function": {
     "name": "update_working_checkpoint",
-    "description": "Short-term working notepad (auto-injected each turn). Call early/mid task only when there is non-obvious state worth keeping. When: (1) after reading SOP — store needs & constraints (skip tasks <5 steps); (2) before subtask switch / context flush; (3) after repeated failures — re-read SOP and store new findings; (4) on new task — replace notepad, drop old progress, keep still-valid constraints.\n\nDon't call: tasks <5 steps, greetings, or when the task is done (use start_long_term_update instead).",
+    "description": "Short-term working notepad, auto-injected each turn to prevent info loss in long tasks. Call during early/mid stages, not at end. When: (1) after reading SOP, store user needs & key constraints (skip for simple 1-2 step tasks); (2) before subtask switch or context flush; (3) after repeated failures, re-read SOP and must store new findings; (4) on new task, update content, clear old progress but keep valid constraints.\n\nDon't call: simple tasks (1-2 steps), task completed (use long-term memory tool)",
     "parameters": {"type": "object", "properties": {
-      "key_info": {"type": "string", "description": "Replaces current notepad (<200 tokens). Incremental update: review existing, keep valid, add/remove/modify. Store: pitfalls, user requirements, key params/findings, file paths, progress, next steps. Don't store: ephemeral info, obvious context, old task info when user switched tasks. Prefer over-updating over losing key info"}}}
+      "key_info": {"type": "string", "description": "Replaces current notepad (<200 tokens). Incremental update: review existing, keep valid, add/remove/modify. Store: pitfalls, user requirements, key params/findings, file paths, progress, next steps. Don't store: ephemeral info, obvious context, old task info when user switched tasks. Prefer over-updating over losing key info"},
+      "related_sop": {"type": "string", "description": "Related SOP names, tips for further re-read"}}}
   }},
   {"type": "function", "function": {
     "name": "ask_user",
-    "description": "Interrupt task to ask user when needing decisions, extra info, or facing unresolvable blockers. Multiple questions should in one call",
+    "description": "Interrupt task to ask user when needing decisions, extra info, or facing unresolvable blockers",
     "parameters": {"type": "object", "properties": {
-      "question": {"type": "string", "description": "For multiple questions, one per line (contain candidates)"},
-      "candidates": {"type": "array", "items": {"type": "string"}, "description": "Optional quick-select choices for a single question only. Leave empty for multi-questions"}}}
+      "question": {"type": "string", "description": "Question for the user"},
+      "candidates": {"type": "array", "items": {"type": "string"}, "description": "Optional quick-select choices for the user"}}}
   }},
   {"type": "function", "function": {
     "name": "start_long_term_update",
-    "description": "After a long task completes, distill long-term memory. Call when discovering info worth remembering (env facts/user prefs/lessons learned). Skip if memory already updated or in autonomous flow. Must call when a task that took 15+ turns is completed.",
+    "description": "Start distilling long-term memory. Call when discovering info worth remembering (env facts/user prefs/lessons learned). Skip if memory already updated or in autonomous flow. Must call when a task that took 15+ turns is completed",
     "parameters": {"type": "object", "properties": {}}}
   }
-]
+]

assets/tools_schema_cn.json

@@ -60,10 +60,10 @@
   }},
   {"type": "function", "function": {
     "name": "ask_user",
-    "description": "当需要用户决策、提供额外信息或遇到无法自动解决的阻碍时，调用此工具中断任务并提问。多题时应一次调用",
+    "description": "当需要用户决策、提供额外信息或遇到无法自动解决的阻碍时，调用此工具中断任务并提问",
     "parameters": {"type": "object", "properties": {
-      "question": {"type": "string", "description": "多题时每题*独占*一行（带选项）"},
-      "candidates": {"type": "array", "items": {"type": "string"}, "description": "仅单题时可用。多题时留空"}}}
+      "question": {"type": "string", "description": "向用户提出的明确问题"},
+      "candidates": {"type": "array", "items": {"type": "string"}, "description": "提供给用户的可选快捷选项列表"}}}
   }},
   {"type": "function", "function": {
     "name": "start_long_term_update",

docs/installation.md

@@ -160,12 +160,6 @@ type ga
 
 If it resolves to something unexpected, do not rely on the shortcut. Run GA from the install directory with `python launch.pyw` or `python frontends/tuiapp_v2.py`.
 
-#### Windows Defender blocks local loopback
-
-The desktop app talks to its local bridge over `127.0.0.1` / `localhost`. On some Windows machines, Windows Defender Firewall may block this loopback connection, making the desktop app look like it cannot start or cannot connect to the service.
-
-If this happens, allow `GenericAgent.exe` and the bundled `python.exe` through Windows Defender Firewall, then restart the desktop app.
-
 #### Windows TUI rendering issues
 
 TUI rendering on Windows depends on terminal, font, and `textual` version.

docs/installation_zh.md

@@ -160,12 +160,6 @@ type ga
 
 如果解析到意料之外的位置，就不要依赖这个快捷命令。请进入安装目录运行 `python launch.pyw` 或 `python frontends/tuiapp_v2.py`。
 
-#### Windows Defender 拦截本机回环网络
-
-桌面端会通过 `127.0.0.1` / `localhost` 连接本机 bridge 服务。部分 Windows 机器上，Windows Defender 防火墙可能会拦截这个本机回环连接，导致桌面端看起来无法启动，或一直连不上服务。
-
-如果遇到这种情况，请在 Windows Defender 防火墙中允许 `GenericAgent.exe` 和随包的 `python.exe` 通过，然后重启桌面端。
-
 #### Windows 上 TUI 显示异常
 
 TUI 在 Windows 上依赖终端、字体和 `textual` 版本。

frontends/conductor.html

@@ -61,9 +61,9 @@
       overflow: hidden;
     }
 
-    .left-col { min-height: 0; min-width: 0; display: flex; flex-direction: column; gap: 18px; }
+    .left-col { min-height: 0; display: flex; flex-direction: column; gap: 18px; }
     .left-col > .pane.left { flex: 1; min-height: 0; }
-    .left, .right { display: flex; flex-direction: column; min-height: 0; min-width: 0; }
+    .left, .right { display: flex; flex-direction: column; min-height: 0; }
     .right { background: transparent; border: 0; box-shadow: none; backdrop-filter: none; gap: 18px; }
 
     .head {
@@ -76,7 +76,6 @@
     }
     .title { font-size: 17px; letter-spacing: .2px; font-weight: 700; }
     .hint { color: var(--muted); font-size: 12px; }
-    #llm { max-width: 42vw; margin-left: 10px; padding: 4px 6px; border: 1px solid #dfe5ee; border-radius: 6px; background: #fff; font: 600 12px inherit; }
 
     .cards {
       flex: 1;
@@ -200,15 +199,10 @@
     .btn-no { background: linear-gradient(135deg, #f87171, #ef4444); box-shadow: 0 8px 20px rgba(239,68,68,.22); }
 
     /* ---------- 聊天框 ---------- */
-    .chat { flex: 1; min-height: 0; min-width: 0; display: flex; flex-direction: column; }
-    .messages { flex: 1; min-width: 0; overflow: auto; padding: 20px; display: flex; flex-direction: column; gap: 13px; }
+    .chat { flex: 1; min-height: 0; display: flex; flex-direction: column; }
+    .messages { flex: 1; overflow: auto; padding: 20px; display: flex; flex-direction: column; gap: 13px; }
     .msg { max-width: 80%; padding: 13px 15px; border-radius: 18px; line-height: 1.45; font-size: 14px;
-           overflow-wrap: anywhere; box-shadow: 0 8px 22px rgba(30,45,80,.055); }
-    .msg :is(p, ul, ol, pre, table, img) { max-width: 100%; }
-    .msg pre { white-space: pre-wrap; overflow-wrap: anywhere; }
-    .msg code { overflow-wrap: anywhere; }
-    .msg table { display: block; overflow-x: auto; }
-    .msg img { height: auto; }
+           word-wrap: break-word; box-shadow: 0 8px 22px rgba(30,45,80,.055); }
     .msg p { margin: 0 0 .3em 0; } .msg p:last-child { margin-bottom: 0; }
     .msg.me { align-self: flex-end; color: white;
               background: linear-gradient(135deg, #3b82f6, #7c3aed); border: 1px solid rgba(59,130,246,.20);
@@ -223,7 +217,6 @@
 
     .composer { padding: 14px; border-top: 1px solid rgba(31,42,68,.075); display: flex; gap: 12px;
                 align-items: end; background: rgba(255,255,255,.40); }
-    .composer.dragging { background: rgba(59,130,246,.13); outline: 2px dashed #3b82f6; outline-offset: -6px; }
     textarea#input { flex: 1; height: 52px; max-height: 140px; resize: none; outline: none; color: var(--text);
                background: rgba(255,255,255,.92); border: 1px solid rgba(31,42,68,.12); border-radius: 18px;
                padding: 14px 15px; font: inherit; line-height: 1.35; }
@@ -231,19 +224,6 @@
     button { height: 52px; min-width: 92px; border: 0; border-radius: 18px; color: white; font-weight: 750;
              cursor: pointer; background: linear-gradient(135deg, #3b82f6, #10b981);
              box-shadow: 0 10px 26px rgba(59,130,246,.22); }
-    .file-open, .attach { min-width: 0; padding: 0 10px; box-shadow: none; }
-    .file-open { height: 28px; border-radius: 9px; }
-    .attach { width: 44px; height: 52px; font-size: 18px; border-radius: 18px; }
-    .file-link { color: inherit; text-decoration: underline; cursor: pointer; }
-    #fileDialog { width: min(1100px, 96vw); height: min(800px, 92vh); padding: 0; border: 0; border-radius: 18px; box-shadow: 0 24px 80px #0004; }
-    #fileDialog::backdrop { background: #0f172a66; backdrop-filter: blur(3px); }
-    .file-bar { display: flex; align-items: center; gap: 8px; padding: 12px; border-bottom: 1px solid var(--border); }
-    .file-bar code { flex: 1; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-    .file-bar button { min-width: 0; height: 34px; padding: 0 12px; border-radius: 10px; box-shadow: none; }
-    #fileBody { height: calc(100% - 59px); overflow: auto; padding: 12px; }
-    .file-row { display: flex; gap: 10px; padding: 9px 11px; border-radius: 9px; cursor: pointer; }
-    .file-row:hover { background: #eef2ff; } .file-row span:first-child { flex: 1; } .file-size { color: var(--muted); }
-    .file-preview { line-height: 1.55; } .file-preview pre { white-space: pre-wrap; overflow-wrap: anywhere; }
 
     /* ---------- conductor 输出(横跨底部的独立卡片,默认收起) ---------- */
     .console {
@@ -332,37 +312,25 @@
       <!-- 聊天 -->
       <section class="pane chat">
         <div class="head">
-          <div class="title">Conversation <select id="llm" aria-label="Conductor model" disabled></select></div>
-          <div class="hint"><button class="file-open" id="fileOpen">📁 文件</button> · <span id="wsStatus">connecting...</span></div>
+          <div class="title">Conversation</div>
+          <div class="hint" id="wsStatus">connecting...</div>
         </div>
         <div class="messages" id="messages"></div>
-        <div class="composer" id="composer">
-          <textarea id="input" placeholder="告诉 Conductor 你想做什么……（可拖入文件）"></textarea>
-          <button class="attach" id="fileUpload" title="上传文件">📎</button>
-          <button id="send">发送</button><input id="fileInput" type="file" multiple hidden>
+        <div class="composer">
+          <textarea id="input" placeholder="告诉 Conductor 你想做什么……"></textarea>
+          <button id="send">发送</button>
         </div>
       </section>
     </section>
     </div><!-- /app-grid -->
   </main>
 
-  <dialog id="fileDialog">
-    <div class="file-bar"><button id="fileBack">↑</button><code id="filePath"></code><button id="fileClose">关闭</button></div>
-    <div id="fileBody"></div>
-  </dialog>
-  <dialog id="downloadDialog" style="width:min(520px,90vw);border:0;border-radius:16px;padding:22px;box-shadow:0 24px 80px #0004">
-    <strong>下载文件</strong>
-    <code id="downloadPath" style="display:block;margin:16px 0;overflow-wrap:anywhere;color:var(--muted)"></code>
-    <div style="display:flex;justify-content:flex-end;gap:10px"><button id="downloadCancel">取消</button><button id="downloadConfirm">下载</button></div>
-  </dialog>
-
   <script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
   <script>
     const cardsEl    = document.getElementById('cards');
     const messagesEl = document.getElementById('messages');
     const inputEl    = document.getElementById('input');
     const sendBtn    = document.getElementById('send');
-    const llmEl      = document.getElementById('llm');
     const wsStatus   = document.getElementById('wsStatus');
     const apprEl     = document.getElementById('approvals');
     const apprBody   = document.getElementById('approvalsBody');
@@ -371,48 +339,10 @@
     const consoleBar = document.getElementById('consoleBar');
     const consoleBody= document.getElementById('consoleBody');
     const logCount   = document.getElementById('logCount');
-    const fileDialog = document.getElementById('fileDialog');
-    const fileBody   = document.getElementById('fileBody');
-    const filePathEl = document.getElementById('filePath');
-    const fileInput  = document.getElementById('fileInput');
-    const composer   = document.getElementById('composer');
-    const downloadDialog = document.getElementById('downloadDialog');
-    const downloadPath = document.getElementById('downloadPath');
-    let ws, fileDir='', fileParent='';
+    let ws;
 
     function esc(s){ return String(s||'').replace(/[&<>"]/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c])); }
-    function renderMd(s){ try { return marked.parse(String(s||'').replace(/</g,'&lt;'), { breaks: true, gfm: true }); } catch(e){ return esc(s); } }
-    function fileUrl(path){ return '/file?path='+encodeURIComponent(path); }
-    function humanSize(n){ return n==null?'':n<1024?n+' B':n<1048576?(n/1024).toFixed(1)+' KB':(n/1048576).toFixed(1)+' MB'; }
-    async function browseFiles(path=''){
-      const data=await fetch(path?'/files?path='+encodeURIComponent(path):'/files').then(r=>{if(!r.ok) throw Error(r.statusText); return r.json()});
-      fileDir=data.path; fileParent=data.parent; filePathEl.textContent=fileDir;
-      fileBody.innerHTML=data.items.map(x=>`<div class="file-row" data-path="${esc(x.path)}" data-dir="${x.dir?'1':''}"><span>${x.dir?'📁':'📄'} ${esc(x.name)}</span><span class="file-size">${humanSize(x.size)}</span></div>`).join('')||'<div class="empty">空目录</div>';
-    }
-    async function openFile(path){
-      if(!/\.(md|markdown|txt|py|js|ts|json|ya?ml|css|html?|xml|csv|log|ini|cfg|sh|ps1|bat|c|cc|cpp|h|hpp|java|go|rs|sql)$/i.test(path)){
-        downloadPath.textContent=path; downloadDialog.showModal();
-        return;
-      }
-      const text=await fetch(fileUrl(path)).then(r=>{if(!r.ok) throw Error(r.statusText); return r.text()});
-      filePathEl.textContent=path;
-      fileBody.innerHTML=/\.(md|markdown)$/i.test(path)?`<div class="file-preview">${renderMd(text)}</div>`:'';
-      if(!/\.(md|markdown)$/i.test(path)){ const pre=document.createElement('pre'); pre.textContent=text; fileBody.replaceChildren(pre); }
-    }
-    document.getElementById('downloadCancel').onclick=()=>downloadDialog.close();
-    document.getElementById('downloadConfirm').onclick=()=>{
-      const a=document.createElement('a'); a.href=fileUrl(downloadPath.textContent); a.download=downloadPath.textContent.split(/[\\/]/).pop();
-      document.body.appendChild(a); a.click(); a.remove(); downloadDialog.close();
-    };
-    async function uploadFiles(files){
-      const paths=[];
-      for(const file of files){
-        const r=await fetch('/file?name='+encodeURIComponent(file.name),{method:'POST',body:file});
-        if(!r.ok) throw Error(await r.text());
-        paths.push('`'+(await r.json()).path+'`');
-      }
-      inputEl.value+=(inputEl.value?'\n':'')+paths.join('\n'); checkLimit(); inputEl.focus();
-    }
+    function renderMd(s){ try { return marked.parse(s||'', { breaks: true, gfm: true }); } catch(e){ return esc(s); } }
 
     /* ---------- subagent 卡片 ---------- */
     function renderCards(items){
@@ -482,28 +412,11 @@
       div.className = `msg ${cls}` + (role==='user' && !item.read ? ' unread' : '');
       if(item.id) div.dataset.id = item.id;
       div.innerHTML = renderMd(item.msg || '');
-      (item.files||[]).forEach(f=>{ const code=[...div.querySelectorAll('code')].find(x=>x.textContent===(f.ref||f.path)); if(code){ const a=document.createElement('a'); a.className='file-link'; a.href=fileUrl(f.path); a.dataset.path=f.path; code.replaceWith(a); a.append(code); } });
       messagesEl.appendChild(div);
       messagesEl.scrollTop = messagesEl.scrollHeight;
     }
     function markAllRead(){ messagesEl.querySelectorAll('.msg.me.unread').forEach(el=>el.classList.remove('unread')); }
 
-    document.getElementById('fileOpen').onclick=()=>{ fileDialog.showModal(); browseFiles().catch(e=>fileBody.textContent=e); };
-    document.getElementById('fileClose').onclick=()=>fileDialog.close();
-    document.getElementById('fileBack').onclick=()=>browseFiles(filePathEl.textContent===fileDir?fileParent:fileDir);
-    document.getElementById('fileUpload').onclick=()=>fileInput.click();
-    fileBody.addEventListener('click', e=>{ const row=e.target.closest('.file-row'); if(row) (row.dataset.dir?browseFiles:openFile)(row.dataset.path); });
-    messagesEl.addEventListener('click', async e=>{
-      const a=e.target.closest('.file-link'); if(!a) return;
-      e.preventDefault(); fileDialog.showModal();
-      const path=a.dataset.path, parent=path.replace(/[\\\/][^\\\/]*$/, '');
-      try { await browseFiles(parent); await openFile(path); } catch(err) { fileBody.textContent=err; }
-    });
-    fileInput.onchange=async()=>{ try { await uploadFiles(fileInput.files); } catch(e) { alert('上传失败：'+e); } fileInput.value=''; };
-    ['dragenter','dragover'].forEach(type=>composer.addEventListener(type,e=>{ e.preventDefault(); composer.classList.add('dragging'); }));
-    ['dragleave','drop'].forEach(type=>composer.addEventListener(type,e=>{ e.preventDefault(); composer.classList.remove('dragging'); }));
-    composer.addEventListener('drop',e=>{ if(e.dataTransfer.files.length) uploadFiles(e.dataTransfer.files).catch(err=>alert('上传失败：'+err)); });
-
     /* ---------- conductor 输出 ---------- */
     function fmtTs(ms){ try{ return new Date(ms).toLocaleTimeString('zh-CN',{hour12:false}); }catch(e){ return ''; } }
     function logItemHtml(r){
@@ -539,13 +452,7 @@
           renderCards(data.subagents||[]);
           messagesEl.innerHTML=''; (data.chat||[]).forEach(addMsg);
           renderLog(data.log||[]);
-          llmEl.innerHTML=(data.llms||[]).map(x=>`<option value="${x[0]}">${esc(x[1])}</option>`).join(''); llmEl.value=data.llm; llmEl.disabled=!llmEl.options.length;
-        } else if(data.type==='model_selected'){ llmEl.value=String(data.llm); }
-        else if(data.type==='model_error'){
-          if(data.llm!==undefined) llmEl.value=String(data.llm);
-          showLimitToast(data.error||'Failed to select model');
-        }
-        else if(data.type==='subagents'){ renderCards(data.items||[]); }
+        } else if(data.type==='subagents'){ renderCards(data.items||[]); }
         else if(data.type==='chat'){ addMsg(data.item); }
         else if(data.type==='chat_read'){ markAllRead(); }
         else if(data.type==='log'){ appendLog(data.item); }
@@ -558,48 +465,8 @@
       ws.send(JSON.stringify({msg})); inputEl.value=''; inputEl.focus();
     }
     sendBtn.addEventListener('click', send);
-    llmEl.addEventListener('change', ()=>{ if(ws?.readyState===1) ws.send(JSON.stringify({llm:+llmEl.value})); });
     inputEl.addEventListener('keydown', e=>{ if(e.key==='Enter' && !e.shiftKey && !e.isComposing && e.keyCode!==229){ e.preventDefault(); send(); } });
 
-    // Input length limit (10000 chars)
-    const MAX_LEN = 10000;
-    let limitToast = null;
-
-    function showLimitToast(msg) {
-      if (limitToast) return; // already showing, don't spam
-      limitToast = document.createElement('div');
-      limitToast.textContent = msg;
-      limitToast.style.cssText = 'position:fixed;top:24px;left:50%;transform:translateX(-50%);background:#dc2626;color:#fff;padding:10px 24px;border-radius:8px;font-size:14px;z-index:9999;box-shadow:0 4px 12px rgba(0,0,0,.15);transition:opacity .3s';
-      document.body.appendChild(limitToast);
-      setTimeout(() => {
-        if (limitToast) { limitToast.style.opacity = '0'; }
-        setTimeout(() => { if (limitToast) { limitToast.remove(); limitToast = null; } }, 300);
-      }, 3000);
-    }
-
-    function checkLimit() {
-      if (inputEl.value.length > MAX_LEN) {
-        inputEl.value = inputEl.value.slice(0, MAX_LEN);
-        showLimitToast('已达字数上限（' + MAX_LEN + '）');
-      }
-    }
-
-    inputEl.addEventListener('paste', e => {
-      e.preventDefault();
-      const text = (e.clipboardData || window.clipboardData).getData('text') || '';
-      const remaining = MAX_LEN - inputEl.value.length + (inputEl.selectionEnd - inputEl.selectionStart);
-      const insert = text.slice(0, Math.max(0, remaining));
-      const start = inputEl.selectionStart;
-      const end = inputEl.selectionEnd;
-      inputEl.value = inputEl.value.slice(0, start) + insert + inputEl.value.slice(end);
-      inputEl.setSelectionRange(start + insert.length, start + insert.length);
-      if (text.length > remaining) {
-        showLimitToast('已达字数上限（' + MAX_LEN + '）');
-      }
-    });
-
-    inputEl.addEventListener('input', checkLimit);
-
     /* 接通后端: hello 推送 cards/chat/log 快照, approval 由 /approval 推送 */
     connect();
   </script>

frontends/conductor.py

@@ -1,266 +1,33 @@
-import os, sys, re, time, json, uuid, queue, asyncio, threading, argparse, base64, secrets
+import os, sys, re, time, json, uuid, queue, asyncio, threading
 from dataclasses import dataclass, field
-from pathlib import Path
 from typing import Dict, Any, Optional, List
-from contextlib import asynccontextmanager, suppress
+from contextlib import asynccontextmanager
 
-from fastapi import FastAPI, WebSocket, WebSocketDisconnect, Request, HTTPException
+from fastapi import FastAPI, WebSocket, WebSocketDisconnect
 from fastapi.responses import FileResponse, PlainTextResponse, JSONResponse
-from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 
-FRONTENDS_DIR = os.path.dirname(os.path.abspath(__file__))
-if FRONTENDS_DIR not in sys.path: sys.path.insert(0, FRONTENDS_DIR)
-from desktop_settings import DesktopSettingsError, update_settings
-
-def _resolve_ga_root() -> str:
-    """Use the external core selected by the package-owned desktop bridge when valid."""
-    value = (os.environ.get("GA_ROOT", "") or "").strip()
-    if value:
-        root = os.path.abspath(os.path.expanduser(value))
-        if os.path.exists(os.path.join(root, "agentmain.py")):
-            return root
-    return os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-
-
-ROOT = _resolve_ga_root()
+ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 if ROOT not in sys.path: sys.path.insert(0, ROOT)
 
 from agentmain import GenericAgent
 
 HOST = "127.0.0.1"
-DEFAULT_PORT = 8900
-E2E_CONDUCTOR_PORT_ENV = "GA_DESKTOP_E2E_CONDUCTOR_PORT"
-E2E_REPORT_DIR_ENV = "GA_DESKTOP_E2E_REPORT_DIR"
-
-
-def _parse_conductor_port(value: Any) -> int:
-    raw = str(value).strip()
-    if not raw.isascii() or not raw.isdigit():
-        raise argparse.ArgumentTypeError("conductor port must be an integer between 1 and 65535")
-    port = int(raw)
-    if not 1 <= port <= 65535:
-        raise argparse.ArgumentTypeError("conductor port must be an integer between 1 and 65535")
-    return port
-
-
-def _default_conductor_port() -> int:
-    """Keep production on :8900; only the isolated package journey may override it.
-
-    The renderer and production CSP intentionally target :8900.  Treating this as a
-    general runtime setting would make the backend claim configurability the renderer
-    cannot honor, so the override is gated by the existing package-evidence marker.
-    """
-    if not os.environ.get(E2E_REPORT_DIR_ENV):
-        return DEFAULT_PORT
-    raw = os.environ.get(E2E_CONDUCTOR_PORT_ENV)
-    return DEFAULT_PORT if raw is None else _parse_conductor_port(raw)
-
-
-PORT = _default_conductor_port()
+PORT = 8900
 HTML_PATH = os.path.join(os.path.dirname(os.path.abspath(__file__)), "conductor.html")
 
-parser = argparse.ArgumentParser()
-parser.add_argument("--host", default=HOST)
-parser.add_argument("--port", type=_parse_conductor_port, default=PORT)
-parser.add_argument("--key")
-parser.add_argument("--no-browser", action="store_true")
-args = parser.parse_args()
-if args.host not in ("127.0.0.1", "localhost", "::1") and not args.key:
-    parser.error("--key is required for non-loopback listening")
-HOST = args.host
-PORT = args.port
-
-
-SETTINGS_PATH = Path.home() / ".ga_desktop_settings.json"
-
-
-def _settings_doc() -> dict:
-    try:
-        doc = json.loads(SETTINGS_PATH.read_text(encoding="utf-8"))
-        return doc if isinstance(doc, dict) else {}
-    except Exception:
-        return {}
-
-
-def _persist_conductor_llm_no(llm_no: int) -> None:
-    def mutate(document: dict) -> None:
-        section = document.get("conductor")
-        if not isinstance(section, dict):
-            section = {}
-            document["conductor"] = section
-        section["llmNo"] = llm_no
-
-    update_settings(SETTINGS_PATH, mutate)
-
-
-def _conductor_llm_no() -> Optional[int]:
-    """Read the model index bound to the conductor session.
-    Falls back to the legacy desktop default ui.llmNo for existing installs."""
-    doc = _settings_doc()
-    for section in (doc.get("conductor"), doc.get("ui")):
-        if isinstance(section, dict) and section.get("llmNo") is not None:
-            try:
-                return int(section.get("llmNo"))
-            except (TypeError, ValueError):
-                pass
-    return None
-
-
-def _client_usable(agent: "GenericAgent") -> bool:
-    return hasattr(getattr(agent, "llmclient", None), "backend")
-
-
-def _parse_model_no(value: Any) -> Optional[int]:
-    if value is None or isinstance(value, bool):
-        return None
-    try:
-        return int(value)
-    except (TypeError, ValueError):
-        return None
-
-
-def _usable_model(agent: "GenericAgent", no: Optional[int]) -> bool:
-    clients = getattr(agent, "llmclients", []) or []
-    return no is not None and 0 <= no < len(clients) and hasattr(clients[no], "backend")
-
-
-def _activate_model(agent: "GenericAgent", no: int) -> None:
-    if not _usable_model(agent, no):
-        raise ValueError(f"llm index out of range or unavailable: {no}")
-    agent.next_llm(no)
-
-
-def _runtime_model_state(agent: "GenericAgent", configured: Optional[int], reason: Optional[str]) -> dict:
-    effective = getattr(agent, "llm_no", None) if _client_usable(agent) else None
-    current = None
-    if _client_usable(agent):
-        with suppress(Exception):
-            current = str(agent.llmclient.backend.name)
-    return {"configured": configured, "effective": effective,
-            "fallbackReason": reason, "current": current}
-
-
-def _apply_desktop_model(agent: "GenericAgent") -> dict:
-    """Make the conductor's session reflect the current desktop config before a task:
-    switch to its bound model if one is set, otherwise still refresh sessions from
-    mykey so live key/model edits (e.g. importing keys) take effect without a restart.
-    next_llm() already reloads internally; the no-bound-model branch must reload too,
-    or a conductor started on an empty/stale mykey would never pick up imported keys."""
-    doc = _settings_doc()
-    conductor_cfg = doc.get("conductor") if isinstance(doc.get("conductor"), dict) else {}
-    ui_cfg = doc.get("ui") if isinstance(doc.get("ui"), dict) else {}
-    raw_configured = conductor_cfg.get("llmNo")
-    configured = _parse_model_no(raw_configured)
-    ui_default = _parse_model_no(ui_cfg.get("llmNo"))
-
-    try:
-        agent.load_llm_sessions()  # mtime-guarded; rebuilds only when mykey changed
-    except Exception as e:
-        print(f"[conductor] failed to refresh model sessions: {e}", file=sys.stderr)
-
-    clients = getattr(agent, "llmclients", []) or []
-
-    configured_failed = False
-    if _usable_model(agent, configured):
-        try:
-            _activate_model(agent, configured)
-            return _runtime_model_state(agent, configured, None)
-        except Exception as e:
-            configured_failed = True
-            print(f"[conductor] configured model #{configured} is unavailable: {e}", file=sys.stderr)
-
-    if _usable_model(agent, ui_default):
-        if raw_configured is None:
-            reason = "ui_default"
-        elif configured_failed:
-            reason = "configured_unavailable"
-        elif configured is not None:
-            reason = "configured_unavailable" if 0 <= configured < len(clients) else "invalid_configured"
-        else:
-            reason = "invalid_configured"
-        try:
-            _activate_model(agent, ui_default)
-            return _runtime_model_state(agent, configured, reason)
-        except Exception as e:
-            print(f"[conductor] UI default model #{ui_default} is unavailable: {e}", file=sys.stderr)
-
-    for i, client in enumerate(clients):
-        if hasattr(client, "backend"):
-            try:
-                _activate_model(agent, i)
-                return _runtime_model_state(agent, configured, "first_available")
-            except Exception:
-                continue
-
-    print("[conductor] no usable model is available", file=sys.stderr)
-    return {"configured": configured, "effective": None,
-            "fallbackReason": "no_models", "current": None}
-
-
-def _selected_conductor_llm_no(agent: "GenericAgent") -> int:
-    configured = _conductor_llm_no()
-    return configured if _usable_model(agent, configured) else agent.llm_no
-
-
-def _set_conductor_llm_no(agent: "GenericAgent", value: Any) -> int:
-    """Persist the standalone UI binding without mutating an in-flight client.
-
-    The Conductor loop applies this binding at its existing idle task boundary, so
-    a selection made immediately before sending a message controls that next turn.
-    """
-    no = _parse_model_no(value)
-    if no is None or not _usable_model(agent, no):
-        raise ValueError(f"llm index out of range or unavailable: {value}")
-    _persist_conductor_llm_no(no)
-    return no
-
-
-def _select_llm(agent: "GenericAgent", llm: Any) -> bool:
-    if llm is None or str(llm).strip() == "": return False
-    q = str(llm).strip()
-    if isinstance(llm, int) or q.isdigit():
-        agent.load_llm_sessions()
-        _activate_model(agent, int(q))
-        return True
-    q = q.lower(); agent.load_llm_sessions()
-    for i, c in enumerate(agent.llmclients):
-        if not hasattr(c, "backend"):
-            continue
-        vals = []
-        for fn in (lambda: agent.get_llm_name(c), lambda: agent.get_llm_name(c, model=True), lambda: c.backend.name, lambda: c.backend.model):
-            try: vals.append(str(fn()).lower())
-            except Exception: pass
-        if any(q in v for v in vals): _activate_model(agent, i); return True
-    raise ValueError(f"llm not found: {llm}")
-
 
 @asynccontextmanager
 async def lifespan(app: FastAPI):
     # 服务启动（事件循环已就绪）：捕获 loop 供工作线程跨线程推 WS 广播，并起主agent
     global main_loop
     main_loop = asyncio.get_running_loop()
-    import cost_tracker; cost_tracker.install()
     conductor.start()
     threading.Thread(target=im_poll_loop, name="im-poller", daemon=True).start()
     yield
 
 
 app = FastAPI(title="Conductor", lifespan=lifespan)
-app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
-
-class RemoteAuth:
-    def __init__(self, app): self.app = app
-    async def __call__(self, scope, receive, send):
-        remote = (scope.get("client") or ("",))[0]
-        got = dict(scope.get("headers", [])).get(b"authorization", b"")
-        want = b"Basic " + base64.b64encode(f"conductor:{args.key}".encode())
-        if args.key and remote not in ("127.0.0.1", "::1") and not secrets.compare_digest(got, want):
-            if scope["type"] == "websocket": return await send({"type": "websocket.close", "code": 1008})
-            return await PlainTextResponse("Unauthorized", 401, {"WWW-Authenticate": 'Basic realm="Conductor"'})(scope, receive, send)
-        await self.app(scope, receive, send)
-
-app.add_middleware(RemoteAuth)
 
 class ChatIn(BaseModel):
     msg: str
@@ -268,7 +35,6 @@ class ChatIn(BaseModel):
 
 class StartSubagentIn(BaseModel):
     prompt: str
-    llm: Any = None
 
 class ApprovalIn(BaseModel):
     prompt: str
@@ -277,7 +43,6 @@ class ApprovalIn(BaseModel):
 class SubagentActionIn(BaseModel):
     action: str = "intervene"  # intervene | abort | kill
     msg: str = ""
-    llm: Any = None
 
 @dataclass
 class SubAgentState:
@@ -349,26 +114,8 @@ async def broadcast(payload: dict):
 
 def push_cards(): schedule_broadcast({"type": "subagents", "items": pool.snapshot()})
 
-FILE_ROOT = os.path.dirname(ROOT)
-FILE_HOME = os.path.join(ROOT, "temp")
-UPLOAD_DIR = os.path.join(FILE_HOME, "uploads")
-
-def file_path(path: str):
-    path = os.path.abspath(os.path.expanduser(path))
-    if os.path.commonpath((FILE_ROOT, path)) != FILE_ROOT: raise ValueError("path is above file browser root")
-    return path
-
-def add_chat(msg: str, role: str = "conductor", files: list = None, images: list = None):
-    files = list(files or [])
-    known = {x.get("path") for x in files}
-    for ref in re.findall(r"`([^`\n]+)`", msg):
-        for candidate in ([ref] if os.path.isabs(ref) else [os.path.join(FILE_HOME, ref), ref]):
-            try: path = file_path(candidate)
-            except ValueError: continue
-            if os.path.isfile(path):
-                if path not in known: files.append({"ref": ref, "path": path, "name": os.path.basename(path)})
-                break
-    item = {"id": short_id(), "role": role, "msg": msg, "ts": now_ms(), "read": role != "user", "files": files, "images": images or []}
+def add_chat(msg: str, role: str = "conductor"):
+    item = {"id": short_id(), "role": role, "msg": msg, "ts": now_ms(), "read": role != "user"}
     chat_messages.append(item)
     if len(chat_messages) > 200: del chat_messages[:-200]
     schedule_broadcast({"type": "chat", "item": item})
@@ -441,13 +188,12 @@ class SubagentPool:
                 s.agent.task_queue.put("EXIT")  
                 with self.lock: self.subagents.pop(sid, None)  
             if to_abort: push_cards()
-    def start_subagent(self, prompt: str, llm: Any = None) -> dict:
+    def start_subagent(self, prompt: str) -> dict:
         sid = short_id()
         agent = GenericAgent()
         agent.inc_out = True
         agent.verbose = False
         agent.no_print = True
-        if not _select_llm(agent, llm): _apply_desktop_model(agent)
         th = start_agent_runner(agent, f"subagent-{sid}")
         state = SubAgentState(id=sid, agent=agent, prompt=prompt, status="running", thread=th)
         with self.lock: self.subagents[sid] = state
@@ -459,11 +205,10 @@ class SubagentPool:
         threading.Thread(target=monitor_display_queue, args=(sid, dq, True), name=f"monitor-{sid}", daemon=True).start()
         push_cards()
         return {"id": sid, "status": "running"}
-    def input_subagent(self, sid: str, msg: str, llm: Any = None) -> dict:
+    def input_subagent(self, sid: str, msg: str) -> dict:
         with self.lock: s = self.subagents.get(sid)
         if not s: return {"error": "subagent not found", "id": sid}
         if s.status == "running": return {"error": "subagent is still running, cannot input/reply. Start a new subagent instead.", "id": sid}
-        _select_llm(s.agent, llm)
         s.prompt = msg
         s.reply = ""
         s.status = "running"
@@ -484,13 +229,10 @@ READMES = {
 Conductor API\tBase: http://{HOST}:{PORT}
 
 POST /chat\tbody: {{"msg": "..."}}\t给用户发消息
-POST /subagent\tbody: {{"prompt": "..."}}\t启动新subagent，返回 {{"id": "xxx"}}；指定模型加参数llm(数字/名称)
+POST /subagent\tbody: {{"prompt": "..."}}\t启动新subagent，返回 {{"id": "xxx"}}
 POST /approval\tbody: {{"prompt": "...", "source": "..."}}\t推一条待批任务到前端(后端不存)，用户同意则直接派发为subagent
-GET /files?path=...\t列举目录（默认temp，最高到GA上一级）
-GET /file?path=...\t下载文件
-POST /file?name=...\t上传到temp/uploads
 POST /subagent/{{id}}\tbody: {{"action": "keyinfo", "msg": "..."}}\t注入key_info（agent下轮可见）
-POST /subagent/{{id}}\tbody: {{"action": "input", "msg": "..."}}\t开新一轮任务；指定模型加参数llm(数字/名称)
+POST /subagent/{{id}}\tbody: {{"action": "input", "msg": "..."}}\t开新一轮任务（agent停下后追加）
 POST /subagent/{{id}}\tbody: {{"action": "stop"}}\t中断执行但保留（可继续input/reply）
 GET /chat?last=N\t返回最近N条对话（默认20）
 GET /subagent\t返回 {{"items": [...]}}\t查看所有subagent状态
@@ -501,8 +243,7 @@ GET /subagent/{{id}}?max_len=N\t返回单个subagent详情，reply经清洗后
 1. 结合记忆、上下文和用户偏好判断真实需求；不清楚/不能代劳时，用精简checklist一次性问用户。
 2. 判断是新任务还是延续现有任务；优先复用已有stopped subagent（用input追加），只有确实无关的新任务才新建。
 3. 分派前必须POST /chat告知用户：改写后的prompt + 分派方案（新建/复用哪个subagent）。
-4. 执行分派，完成即停。危险操作（改源码/删数据/安全敏感）必须改成先让subagent出方案；你验收后POST /chat请用户确认，确认后才继续执行。
-5. 建议按照任务建立cwd下子目录并在prompt中要求subagent将文件输出到子目录""",
+4. 执行分派，完成即停。危险操作（改源码/删数据/安全敏感）必须改成先让subagent出方案；你验收后POST /chat请用户确认，确认后才继续执行。""",
 "subagent": """\
 subagent完成流程：
 1. 如果是IM采集subagent，按GET /readme/im进行而非本流程
@@ -529,56 +270,10 @@ class Conductor:
         self.inbox: "queue.Queue[dict]" = queue.Queue()   # 收件箱：唯一对外接口
         self.agent: Optional[GenericAgent] = None
         self.started = False
-        self._runner_thread: Optional[threading.Thread] = None
         self.log: list = []   
-        self._model_lock = threading.RLock()
-        self._model_state = {
-            "configured": None,
-            "effective": None,
-            "fallbackReason": "no_models",
-            "current": None,
-            "running": False,
-        }
-
-    def model_snapshot(self) -> dict:
-        with self._model_lock:
-            return dict(self._model_state)
-
-    def _publish_model_state(self, state: dict, running: bool) -> None:
-        snapshot = {**state, "running": bool(running)}
-        with self._model_lock:
-            self._model_state = snapshot
-        schedule_broadcast({"type": "model", "model": snapshot})
 
     def notify(self, event: dict): self.inbox.put(event)
 
-    def _wait_for_agent_idle(self, timeout: float = 10.0) -> None:
-        """Queue.join semantics with a bounded runner-health escape hatch."""
-        tasks = self.agent.task_queue
-        deadline = time.monotonic() + timeout
-        with tasks.all_tasks_done:
-            while tasks.unfinished_tasks:
-                if self._runner_thread is not None and not self._runner_thread.is_alive():
-                    raise RuntimeError("conductor agent runner stopped before task cleanup")
-                remaining = deadline - time.monotonic()
-                if remaining <= 0:
-                    raise TimeoutError("conductor agent task cleanup timed out")
-                tasks.all_tasks_done.wait(min(0.25, remaining))
-
-    def _record_unavailable_model(self, events: list) -> None:
-        event_label = ",".join(event.get("type", "") for event in events) or "wake"
-        item = {
-            "id": short_id(),
-            "ts": now_ms(),
-            "event": event_label,
-            "turn": None,
-            "text": "Conductor paused: no usable model profiles are configured; events are deferred.",
-        }
-        self.log.append(item)
-        if len(self.log) > self.LOG_MAX:
-            self.log.pop(0)
-        schedule_broadcast({"type": "log", "item": item})
-
     def _build_prompt(self, events: list) -> str:
         running, stopped = pool.counts()
         unread = sum(1 for m in chat_messages if m.get("role") == "user" and not m.get("read"))
@@ -598,8 +293,7 @@ API: {base}；requests，GET /readme查用法，GET /chat读未读对话，GET /
 - 改写prompt时严禁添加用户未提及的假设、工具、前提条件。只能精炼/结构化用户原意，不能脑补，只能做很小的改写
 
 原则：
-- 信任subagent足够聪明，不要写具体步骤和容易探测的信息；能自己判断的自己判断，只在真正需要用户决策时打扰。
-- 向用户交付文件时，路径用反引号包裹。\n
+- 信任subagent足够聪明，不要写具体步骤和容易探测的信息；能自己判断的自己判断，只在真正需要用户决策时打扰。\n
 需要处理：
 {summary}"""
 
@@ -633,18 +327,17 @@ API: {base}；requests，GET /readme查用法，GET /chat读未读对话，GET /
                 return
 
     def _run(self):
+        self.agent = GenericAgent()
         self.agent.inc_out = True
-        self._runner_thread = start_agent_runner(self.agent, "conductor-agent")
+        start_agent_runner(self.agent, "conductor-agent")
         self.started = True
-        deferred_events: list = []
         while True:
             # Block until first event arrives
             first = self.inbox.get()
             self.inbox.task_done()
             # Short debounce: collect any additional events that arrived meanwhile
             time.sleep(0.3)
-            events = [*deferred_events, first]
-            deferred_events = []
+            events = [first]
             while not self.inbox.empty():
                 try:
                     events.append(self.inbox.get_nowait())
@@ -652,51 +345,18 @@ API: {base}；requests，GET /readme查用法，GET /chat读未读对话，GET /
                 except Exception:
                     break
             try:
-                # GenericAgent publishes the display ``done`` item before its
-                # runner finishes history persistence and task cleanup.  Do not
-                # mutate the live client until that previous task has reached
-                # ``task_done``; the queue join is the authoritative idle barrier.
-                self._wait_for_agent_idle()
-                # Settings can change while this long-lived process remains healthy.
-                # Refresh only at the task boundary so an in-flight task keeps its
-                # client, while the next task observes the newly persisted binding.
-                model_state = _apply_desktop_model(self.agent)
-                if model_state.get("effective") is None:
-                    self._publish_model_state(model_state, running=False)
-                    self._record_unavailable_model(events)
-                    deferred_events = events
-                    continue
-                kind = events[0].get("type")
-                other_events = [event for event in events if event.get("type") != kind]
-                events = [event for event in events if event.get("type") == kind]
-                for event in other_events:
-                    self.inbox.put(event)
                 prompt = self._build_prompt(events)
-                self._publish_model_state(model_state, running=True)
-                try:
-                    dq = self.agent.put_task(prompt, source="conductor")
-                    self._drain(dq, events)
-                finally:
-                    self._publish_model_state(model_state, running=False)
+                dq = self.agent.put_task(prompt, source="conductor")
+                self._drain(dq, events)
             except Exception as e: print(f"Conductor error: {e}")
 
-    def start(self):
-        self.agent = GenericAgent()
-        self._publish_model_state(_apply_desktop_model(self.agent), running=False)
-        threading.Thread(target=self._run, name="conductor-loop", daemon=True).start()
+    def start(self): threading.Thread(target=self._run, name="conductor-loop", daemon=True).start()
 
 
 conductor = Conductor()
 
 # ---- IM poller: 探测conductor_im_plugins/下各插件,信号变化→唤醒总管 ----
-def _resolve_im_dir() -> str:
-    external = os.path.join(ROOT, "frontends", "conductor_im_plugins")
-    if os.path.isdir(external):
-        return external
-    return os.path.join(os.path.dirname(os.path.abspath(__file__)), "conductor_im_plugins")
-
-
-IM_DIR, IM_COOLDOWN = _resolve_im_dir(), 300
+IM_DIR, IM_COOLDOWN = os.path.join(os.path.dirname(__file__), "conductor_im_plugins"), 300
 IM_PROMPTS: Dict[str, str] = {}   # source -> 采集prompt（派采集subagent时按需取）
 
 def im_poll_loop():
@@ -721,36 +381,9 @@ def im_poll_loop():
             last_fire[name] = now
             conductor.notify({"type": "im_signal", "source": name})
 
-@app.get("/token-stats")
-def conductor_token_stats():
-    import cost_tracker
-    return {"records": [{"thread": k, "input": v.input, "output": v.output, "cacheCreate": v.cache_create, "cacheRead": v.cache_read} for k, v in cost_tracker.all_trackers().items()]}
-
 @app.get("/")
 def index(): return FileResponse(HTML_PATH)
 
-@app.get("/files")
-def files(path: str = FILE_HOME):
-    try: path = file_path(path)
-    except ValueError as e: raise HTTPException(403, str(e))
-    if not os.path.isdir(path): raise HTTPException(404, "directory not found")
-    items = [{"name": x.name, "path": x.path, "dir": x.is_dir(), "size": x.stat().st_size if x.is_file() else None}
-             for x in sorted(os.scandir(path), key=lambda x: (not x.is_dir(), x.name.lower()))]
-    return {"path": path, "parent": path if path == FILE_ROOT else os.path.dirname(path), "items": items}
-
-@app.get("/file")
-def get_file(path: str):
-    try: path = file_path(path)
-    except ValueError as e: raise HTTPException(403, str(e))
-    return FileResponse(path, filename=os.path.basename(path))
-
-@app.post("/file")
-async def put_file(name: str, request: Request):
-    os.makedirs(UPLOAD_DIR, exist_ok=True)
-    path = os.path.join(UPLOAD_DIR, os.path.basename(name))
-    with open(path, "wb") as f: f.write(await request.body())
-    return {"name": os.path.basename(path), "path": path}
-
 @app.get("/readme")
 def readme(): return PlainTextResponse(READMES["api"])
 
@@ -783,7 +416,7 @@ INSTR_DISPATCHED = "Task received. I'll handle THIS TASK from here. You MUST to
 
 @app.post("/subagent")
 def api_start_subagent(body: StartSubagentIn):
-    result = pool.start_subagent(body.prompt, body.llm)
+    result = pool.start_subagent(body.prompt)
     result["instruction"] = INSTR_DISPATCHED
     return result
 
@@ -797,7 +430,7 @@ def api_subagent_action(sid: str, body: SubagentActionIn):
         result["instruction"] = "Received. I'll incorporate this. You MUST to do other task or end your reply."
         return result
     if action in ("input", "reply", "append", "message", "msg"):
-        result = pool.input_subagent(sid, body.msg, body.llm)
+        result = pool.input_subagent(sid, body.msg)
         result["instruction"] = INSTR_DISPATCHED
         return result
     if action in ("abort", "stop"):
@@ -809,19 +442,15 @@ def api_subagent_action(sid: str, body: SubagentActionIn):
     return JSONResponse({"error": f"unknown action: {body.action}"}, status_code=400)
 
 @app.get("/chat")
-def api_get_chat(last: int = 20, mark_read: bool = True):
-    items = [m.copy() for m in chat_messages[-last:]]
-    if mark_read:
-        for m in chat_messages:
-            if m.get("role") == "user" and not m.get("read"): m["read"] = True
-        schedule_broadcast({"type": "chat_read"})
-    return {"items": items}
+def api_get_chat(last: int = 20):
+    for m in chat_messages:
+        if m.get("role") == "user" and not m.get("read"): m["read"] = True
+    schedule_broadcast({"type": "chat_read"})
+    return {"items": chat_messages[-last:]}
 
 @app.post("/chat")
 def api_chat(body: ChatIn):
-    item = add_chat(body.msg, role=body.role)
-    if body.role == "user": conductor.notify({"type": "user_message", "msg": body.msg})
-    return item
+    return add_chat(body.msg, role=body.role)
 
 @app.post("/approval")
 def api_approval(body: ApprovalIn):
@@ -833,38 +462,17 @@ async def websocket(ws: WebSocket):
     await ws.accept()
     ws_clients.add(ws)
     try:
-        running = any(s.status == "running" for s in pool.subagents.values())
-        await ws.send_json({"type": "hello", "subagents": pool.snapshot(), "chat": chat_messages,
-                            "log": conductor.log, "running": running,
-                            "model": conductor.model_snapshot(),
-                            "llms": conductor.agent.list_llms(),
-                            "llm": _selected_conductor_llm_no(conductor.agent)})
+        await ws.send_json({"type": "hello", "subagents": pool.snapshot(), "chat": chat_messages, "log": conductor.log})
         while True:
             data = await ws.receive_json()
-            if "llm" in data:
-                try:
-                    llm_no = _set_conductor_llm_no(conductor.agent, data["llm"])
-                except (TypeError, ValueError, OSError, DesktopSettingsError) as error:
-                    await ws.send_json({
-                        "type": "model_error",
-                        "error": str(error),
-                        "llm": _selected_conductor_llm_no(conductor.agent),
-                    })
-                else:
-                    await broadcast({"type": "model_selected", "llm": llm_no})
-                continue
             msg = (data.get("msg") or "").strip()
             if not msg: continue
-            add_chat(msg, role="user", files=data.get("files") or [], images=data.get("images") or [])
+            add_chat(msg, role="user")
             conductor.notify({"type": "user_message", "msg": msg})
     except WebSocketDisconnect: pass
     finally: ws_clients.discard(ws)
 
 if __name__ == "__main__":
-    import uvicorn
-    # bridge 自启 conductor 时传 --no-browser:不在用户浏览器里弹一个独立 conductor UI,
-    # 用户从桌面版「指挥家」页直接连过来即可。手动跑 conductor.py(没带 flag)保持原行为。
-    if not args.no_browser:
-        import webbrowser, threading
-        threading.Timer(1.0, lambda: webbrowser.open(f"http://127.0.0.1:{args.port}")).start()
-    uvicorn.run(app, host=args.host, port=args.port)
+    import uvicorn, webbrowser, threading
+    threading.Timer(1.0, lambda: webbrowser.open(f"http://{HOST}:{PORT}")).start()
+    uvicorn.run("conductor:app", host=HOST, port=PORT, reload=False)

frontends/continue_cmd.py

@@ -113,70 +113,11 @@ def _parse_native_history(pairs):
         except Exception: return None
         if not (isinstance(user_msg, dict) and user_msg.get('role') == 'user'): return None
         if not isinstance(blocks, list): return None
-        history.append(user_msg)  # runtime history 尊重日志真实 prompt(含 project-mode 当轮注入)
+        history.append(user_msg)
         history.append({'role': 'assistant', 'content': blocks})
     return history
 
 
-def parse_native_log(path, allow_empty=False):
-    """Parse a native `model_responses_*.txt` log into backend.history.
-
-    Public wrapper around the mature `/continue` parser. It intentionally only
-    restores complete Prompt→Response pairs; dangling Prompt / partial turns keep
-    the current continue semantics and are ignored. Returns:
-    - list (possibly [] when allow_empty=True) on native success;
-    - None when the file is unreadable / non-native / empty without allow_empty.
-    """
-    try:
-        with open(path, encoding='utf-8', errors='replace') as fh:
-            content = fh.read()
-    except Exception:
-        return [] if allow_empty else None
-    pairs = _pairs(content)
-    if not pairs:
-        # Native-looking but incomplete logs (e.g. dangling Prompt without Response)
-        # have block headers but no complete pairs. For worldline's allow_empty mode
-        # this means "0 completed rounds", not "parse failed → trust live history".
-        if allow_empty and (_is_empty_log(path) or _BLOCK_RE.findall(content or '')):
-            return []
-        return None
-    return _parse_native_history(pairs)
-
-
-def _derive_hist_info(history):
-    """从 native history 重建 history_info(轮级纪要):真实用户提问 → `[USER]: …`;每条
-    assistant(=一轮) → 有字才写 `[Agent] …`(`<summary>` 优先,否则全文;无字跳过)。
-    与 ga.turn_end_callback / worldline 同口径;截断延用 [:80]。纯函数、不依赖 worldline,
-    供续接 opt-in 恢复工作记忆(见 restore_wm)。"""
-    def _all_text(m):
-        c = m.get('content') if isinstance(m, dict) else None
-        if isinstance(c, str): return c
-        if isinstance(c, list):
-            return '\n'.join(b.get('text', '') for b in c
-                             if isinstance(b, dict) and b.get('type') == 'text')
-        return ''
-    def _is_tool_result(m):
-        c = m.get('content') if isinstance(m, dict) else None
-        return isinstance(c, list) and any(
-            isinstance(b, dict) and b.get('type') == 'tool_result' for b in c)
-    out = []
-    for m in history or []:
-        if not isinstance(m, dict): continue
-        role = m.get('role')
-        if role == 'user':
-            if _is_tool_result(m): continue            # tool_result 轮不是提问
-            t = strip_project_mode(_all_text(m)).strip()
-            if t and not t.startswith(_INJECT_MARKERS):
-                out.append(f'[USER]: {t}')
-        elif role == 'assistant':
-            txt = re.sub(r'```.*?```|<thinking>.*?</thinking>', '', _all_text(m), flags=re.DOTALL)
-            mt = re.search(r'<summary>(.*?)</summary>', txt, re.DOTALL)
-            raw = (mt.group(1) if mt else txt).strip()
-            if raw:
-                out.append('[Agent] ' + raw.replace('\n', '')[:80])
-    return out
-
-
 _PREVIEW_WIN = 32 * 1024
 
 # Content-grep budget for `/continue` search box: read at most this many bytes
@@ -383,7 +324,7 @@ def list_sessions(exclude_pid=None, exclude_log=None, rewind_root=None):
         valid_keys.append(key)
         out.append((f, mtime, preview, rounds))
     _save_rounds_cache(valid_keys)
-    # 【门控·worldline】树感知发现:日志存在但为空且有非空世界线树的会话(回退到起点后日志被
+    # 【门控·worldline】树感知发现:日志空/缺失但有非空世界线树的会话(回退到起点后日志被
     # 清空 → 上面 sz<32 跳过了)。仅当调用方显式传 rewind_root 时启用 → 其他 UI 不传,
     # 行为逐字节不变。只读 tree.json 的 nodes/head(不依赖 worldline 模块)。
     if rewind_root and os.path.isdir(rewind_root):
@@ -399,11 +340,11 @@ def list_sessions(exclude_pid=None, exclude_log=None, rewind_root=None):
             if log_name in have or log_name == exclude_log:
                 continue
             log_path = os.path.join(_LOG_DIR, log_name)
-            try:                                    # 仅收"日志确实为空"的(非空日志已被主循环收录)
+            try:                                    # 仅收"日志确实空/缺失"的(非空日志已被主循环收录)
                 if os.path.getsize(log_path) >= 32:
                     continue
             except OSError:
-                continue                            # 日志缺失(如已归档)不作为可续会话展示
+                pass                                # 缺失也算
             try:
                 with open(os.path.join(rewind_root, key, 'tree.json'), encoding='utf-8') as fh:
                     d = json.load(fh)
@@ -541,19 +482,17 @@ def handle(agent, query, display_queue):
 
 
 _INJECT_MARKERS = ('### [WORKING MEMORY]', '[SYSTEM TIPS]', '[SYSTEM]', '[System]',
-                   '[DANGER]', '### [总结提炼经验]',
-                   'Continue from where you left off')
+                   '[DANGER]', '### [总结提炼经验]')
 
-# project_mode 插件把 `\n\n---\n[PROJECT MODE: <name>]\n…\n---` 追加到当轮 user
-# message(见 plugins/project_mode._build_injection)。runtime history 尊重日志真实 prompt,
-# 但 UI 预览/显示与派生 history_info 需要只取用户原话。老日志的 WORKING MEMORY 里还
-# 可能嵌着已污染的 `[USER]: ... [PROJECT MODE] ... [Agent] ...`,所以剥离支持 text
-# 内任意位置与被截断的单行 title 形态。不能加进 _INJECT_MARKERS——那会把整条用户原话一起丢弃。
-_PM_BLOCK_RE = re.compile(r"\s*-{3,}\s*\[PROJECT MODE:.*?(?:\n-{3,}\s*|$)", re.DOTALL)
+# project_mode 插件把 `\n\n---\n[PROJECT MODE: <name>]\n…\n---` 追加在用户消息末尾
+# (见 plugins/project_mode._build_injection)。它会进日志,所以 /continue 重建 UI 时
+# 必须从显示文本里剔除,只留用户原话。不能加进 _INJECT_MARKERS——那会把整块(连用户
+# 原话)一起丢弃;这里只剜掉注入这一段后缀。
+_PM_BLOCK_RE = re.compile(r"\n*-{3,}\n\[PROJECT MODE:.*?\n-{3,}\s*$", re.DOTALL)
 
 
 def strip_project_mode(text: str) -> str:
-    """剔除文本中由 project_mode 插件追加的 L1 注入块。"""
+    """剔除用户文本尾部的 project-mode 注入块。"""
     return _PM_BLOCK_RE.sub("", text or "")
 
 
@@ -1086,13 +1025,9 @@ def begin_fresh_session(agent, agent_id=None):
     _clear_conversation_state(agent)
 
 
-def _load_history_into(agent, path, restore_wm=False):
+def _load_history_into(agent, path):
     """把 `path` 解析进 backend.history(native;否则降级摘要)。镜像 restore() 的解析,
-    但不 abort/不快照(日志重指由调用方先做好)。返回 (msg, is_full)。
-
-    `restore_wm`(默认 False,仅显式传入的调用方启用,如 worldline TUI):从同一份日志
-    派生 history_info 写回 `agent.history`,使续接后工作记忆不丢。默认关闭 → 其它前端
-    行为完全不变。"""
+    但不 abort/不快照(日志重指由调用方先做好)。返回 (msg, is_full)。"""
     try:
         with open(path, encoding='utf-8', errors='replace') as fh:
             content = fh.read()
@@ -1105,8 +1040,6 @@ def _load_history_into(agent, path, restore_wm=False):
     name = os.path.basename(path)
     if history is not None:
         _replace_backend_history(agent, history)
-        if restore_wm and hasattr(agent, 'history'):
-            agent.history = _derive_hist_info(history)   # 续接恢复工作记忆(opt-in)
         return f'✅ 已恢复 {len(pairs)} 轮完整对话（{name}）', True
     from chatapp_common import _restore_native_history, _restore_text_pairs
     summary = _restore_text_pairs(content) or _restore_native_history(content)
@@ -1126,12 +1059,11 @@ def _is_empty_log(path):
         return True
 
 
-def continue_inplace(agent, path, agent_id=None, allow_empty=False, restore_wm=False):
+def continue_inplace(agent, path, agent_id=None, allow_empty=False):
     """原地续:把 agent 的日志指回 `path` 本身,之后轮次追加到 X,延续同一会话。
     调用方应已确认空闲(session_occupant 为 None);抢锁失败(被占)返回错误。
     `allow_empty`(仅 worldline UI 传):日志为空时不报错,按【空会话】恢复(清空对话,
-    由调用方按 `.ga_rewind` 树重连),用于"回退至会话起点"的会话。
-    `restore_wm`(opt-in):续接后从日志派生 history_info 恢复工作记忆。返回 (msg, ok)。"""
+    由调用方按 `.ga_rewind` 树重连),用于"回退至会话起点"的会话。返回 (msg, ok)。"""
     try: agent.abort()
     except Exception: pass
     if not acquire_lock(path, agent_id):       # 先抢到目标锁;失败则保持现状,不丢自己的锁
@@ -1140,17 +1072,16 @@ def continue_inplace(agent, path, agent_id=None, allow_empty=False, restore_wm=F
     if cur and os.path.basename(cur) != os.path.basename(path):
         release_lock(cur)                       # 目标到手,旧会话释放为空闲(同一文件则不放)
     _retarget_log(agent, path)
-    msg, ok = _load_history_into(agent, path, restore_wm=restore_wm)
+    msg, ok = _load_history_into(agent, path)
     if not ok and allow_empty and _is_empty_log(path):
         _replace_backend_history(agent, [])     # 空会话:清空对话(载入失败时它没被清)
         return '✅ 已恢复空会话（回退至会话起点；世界线树已重连）', True
     return msg, ok
 
 
-def continue_copy(agent, path, agent_id=None, allow_empty=False, restore_wm=False):
+def continue_copy(agent, path, agent_id=None, allow_empty=False):
     """拷贝续:铸新 logid、把 `path` 内容拷进去,在副本上续;`path` 原件不动。
-    用于"被占用→用户选拷贝"以及快照源。`restore_wm`(opt-in)同 continue_inplace。
-    返回 (msg, ok)。"""
+    用于"被占用→用户选拷贝"以及快照源。返回 (msg, ok)。"""
     try: agent.abort()
     except Exception: pass
     release_current(agent)
@@ -1161,7 +1092,7 @@ def continue_copy(agent, path, agent_id=None, allow_empty=False, restore_wm=Fals
         pass
     acquire_lock(newp, agent_id)
     _retarget_log(agent, newp)
-    msg, ok = _load_history_into(agent, newp, restore_wm=restore_wm)
+    msg, ok = _load_history_into(agent, newp)
     if not ok and allow_empty and _is_empty_log(newp):
         _replace_backend_history(agent, [])
         return '✅ 已恢复空会话（回退至会话起点；世界线树已重连）', True

frontends/cost_tracker.py

@@ -9,9 +9,8 @@ Subagent processes are out-of-process, so `scan_subagent_logs` parses the
 same `[Cache]` / `[Output]` print lines from `temp/*/stdout.log`.
 """
 from __future__ import annotations
-import glob, json, os, re, threading, time
+import glob, os, re, threading, time
 from dataclasses import dataclass, field
-from pathlib import Path
 
 
 @dataclass
@@ -71,247 +70,6 @@ _CACHE_RE_OLD = re.compile(r'\[Cache\]\s+input=(\d+)\s+cached=(\d+)')
 _INSTALLED = False
 _SUBAGENT_GLOB = os.path.join("temp", "*", "stdout.log")
 
-# ── Per-call ledger ──────────────────────────────────────────────────────────
-
-_ledger_path: Path | None = None
-_ledger_fd = None
-_ledger_lock = threading.RLock()
-_ledger_uncompacted_bytes = 0
-_LEDGER_FILENAME = "token_ledger.jsonl"
-_LEGACY_HISTORY_FILENAME = "desktop_token_history.json"
-_COMPACT_THRESHOLD = 10 * 1024 * 1024  # 10MB
-
-
-def _migrate_legacy_history_unlocked() -> None:
-    """Seed an empty ledger from the previous aggregate JSON format once."""
-    global _ledger_uncompacted_bytes
-    if _ledger_path is None or _ledger_fd is None:
-        return
-    legacy_path = _ledger_path.with_name(_LEGACY_HISTORY_FILENAME)
-    try:
-        if _ledger_path.stat().st_size or not legacy_path.is_file():
-            return
-        doc = json.loads(legacy_path.read_text(encoding="utf-8"))
-        if not isinstance(doc, dict) or not isinstance(doc.get("snap"), dict):
-            return
-        metadata: dict[str, dict] = {}
-        for entry in doc.get("history", []):
-            if not isinstance(entry, dict):
-                continue
-            sid = entry.get("sessionId") or entry.get("id")
-            if not isinstance(sid, str) or not sid:
-                continue
-            key = sid if sid.startswith("GA-") else f"GA-{sid}"
-            try:
-                ts = float(entry.get("ts", 0) or 0)
-            except (TypeError, ValueError):
-                ts = 0
-            if key not in metadata or ts >= metadata[key]["ts"]:
-                metadata[key] = {
-                    "ts": ts,
-                    "model": entry.get("model") if isinstance(entry.get("model"), str) else "",
-                    "title": entry.get("title") if isinstance(entry.get("title"), str) else "",
-                }
-        fallback_ts = legacy_path.stat().st_mtime
-        for key, totals in doc["snap"].items():
-            if not isinstance(key, str) or not key or not isinstance(totals, dict):
-                continue
-            try:
-                values = {
-                    "i": int(totals.get("input", 0) or 0),
-                    "o": int(totals.get("output", 0) or 0),
-                    "cc": int(totals.get("cacheCreate", totals.get("cacheWrite", 0)) or 0),
-                    "cr": int(totals.get("cacheRead", 0) or 0),
-                }
-            except (TypeError, ValueError):
-                continue
-            meta = metadata.get(key, {})
-            line = json.dumps(
-                {"t": meta.get("ts") or fallback_ts, "k": key, **values,
-                 "m": meta.get("model", ""), "n": meta.get("title", ""), "_migrated": True},
-                separators=(",", ":"),
-            ) + "\n"
-            _ledger_fd.write(line)
-            _ledger_uncompacted_bytes += len(line.encode("utf-8"))
-        _ledger_fd.flush()
-    except Exception:
-        return
-
-
-def init_ledger(root: str) -> None:
-    """Call once at bridge startup to set the ledger file path."""
-    global _ledger_path, _ledger_fd, _ledger_uncompacted_bytes
-    with _ledger_lock:
-        if _ledger_fd is not None:
-            try:
-                _ledger_fd.close()
-            except Exception:
-                pass
-        _ledger_path = Path(root) / "temp" / _LEDGER_FILENAME
-        _ledger_path.parent.mkdir(parents=True, exist_ok=True)
-        _ledger_fd = open(_ledger_path, "a", encoding="utf-8")
-        try:
-            _ledger_uncompacted_bytes = _ledger_path.stat().st_size
-            if _ledger_uncompacted_bytes == 0:
-                _migrate_legacy_history_unlocked()
-            if _ledger_uncompacted_bytes >= _COMPACT_THRESHOLD:
-                _compact_ledger()
-        except OSError:
-            _ledger_uncompacted_bytes = 0
-
-
-def _append_ledger(thread_key: str, inp: int, out: int, cc: int, cr: int) -> None:
-    global _ledger_uncompacted_bytes
-    # TUI and conductor processes install the in-memory tracker but never call
-    # init_ledger(). Keep their historical hot path to one lock-free branch:
-    # no clock lookup, JSON encoding, byte counting, or ledger lock acquisition.
-    if _ledger_fd is None:
-        return
-    line = json.dumps(
-        {"t": time.time(), "k": thread_key, "i": inp, "o": out, "cc": cc, "cr": cr},
-        separators=(",", ":"),
-    ) + "\n"
-    with _ledger_lock:
-        if _ledger_fd is None:
-            return
-        try:
-            _ledger_fd.write(line)
-            _ledger_fd.flush()
-            _ledger_uncompacted_bytes += len(line.encode("utf-8"))
-            if _ledger_uncompacted_bytes >= _COMPACT_THRESHOLD:
-                _compact_ledger()
-        except Exception:
-            pass
-
-
-def _iter_ledger_unlocked():
-    if _ledger_path is None or not _ledger_path.is_file():
-        return
-    try:
-        with open(_ledger_path, "r", encoding="utf-8") as f:
-            for line in f:
-                line = line.strip()
-                if not line:
-                    continue
-                try:
-                    entry = json.loads(line)
-                    if isinstance(entry, dict):
-                        yield entry
-                except (json.JSONDecodeError, ValueError):
-                    continue
-    except OSError:
-        return
-
-
-def read_ledger() -> list[dict]:
-    """Read all valid lines from the ledger. Skips corrupted lines."""
-    with _ledger_lock:
-        return list(_iter_ledger_unlocked())
-
-
-def _aggregate_sessions(entries) -> dict[str, dict]:
-    sessions: dict[str, dict] = {}
-    for e in entries:
-        k = e.get("k", "")
-        if not isinstance(k, str) or not k:
-            continue
-        try:
-            ts = float(e.get("t", 0) or 0)
-            inp = int(e.get("i", 0) or 0)
-            out = int(e.get("o", 0) or 0)
-            cc = int(e.get("cc", 0) or 0)
-            cr = int(e.get("cr", 0) or 0)
-        except (TypeError, ValueError):
-            continue
-        if k not in sessions:
-            sessions[k] = {"input": 0, "output": 0, "cacheCreate": 0, "cacheRead": 0,
-                           "model": "", "title": "", "first_ts": ts, "last_ts": ts}
-        s = sessions[k]
-        s["input"] += inp
-        s["output"] += out
-        s["cacheCreate"] += cc
-        s["cacheRead"] += cr
-        s["first_ts"] = min(s["first_ts"], ts)
-        s["last_ts"] = max(s["last_ts"], ts)
-        if isinstance(e.get("m"), str) and e["m"]:
-            s["model"] = e["m"]
-        if isinstance(e.get("n"), str) and e["n"]:
-            s["title"] = e["n"]
-    return sessions
-
-
-def _format_aggregate(sessions: dict[str, dict]) -> dict:
-    history = []
-    snap = {}
-    for k, s in sessions.items():
-        sid = k.removeprefix("GA-")
-        history.append({
-            "sessionId": sid,
-            "title": s["title"] or sid,
-            "input": s["input"],
-            "output": s["output"],
-            "cacheCreate": s["cacheCreate"],
-            "cacheRead": s["cacheRead"],
-            "model": s["model"],
-            "ts": s["last_ts"],
-        })
-        snap[k] = {
-            "input": s["input"],
-            "output": s["output"],
-            "cacheCreate": s["cacheCreate"],
-            "cacheRead": s["cacheRead"],
-        }
-    return {"history": history, "snap": snap}
-
-
-def aggregate_ledger() -> dict:
-    """Aggregate ledger into {history: [...], snap: {...}} for /token-history."""
-    with _ledger_lock:
-        return _format_aggregate(_aggregate_sessions(_iter_ledger_unlocked()))
-
-
-def _compact_ledger() -> None:
-    """Compact ledger by aggregating into per-session totals and rewriting."""
-    if _ledger_path is None:
-        return
-    global _ledger_fd, _ledger_uncompacted_bytes
-    with _ledger_lock:
-        temp_path = _ledger_path.with_suffix(".jsonl.tmp")
-        try:
-            if _ledger_fd is not None:
-                _ledger_fd.flush()
-            sessions = _aggregate_sessions(_iter_ledger_unlocked())
-            with open(temp_path, "w", encoding="utf-8") as f:
-                for k, s in sessions.items():
-                    line = json.dumps(
-                        {"t": s["last_ts"], "k": k, "i": s["input"], "o": s["output"],
-                         "cc": s["cacheCreate"], "cr": s["cacheRead"], "m": s["model"],
-                         "n": s["title"],
-                         "_compacted": True},
-                        separators=(",", ":"),
-                    )
-                    f.write(line + "\n")
-                f.flush()
-                os.fsync(f.fileno())
-            if _ledger_fd is not None:
-                _ledger_fd.close()
-                _ledger_fd = None
-            os.replace(temp_path, _ledger_path)
-            _ledger_fd = open(_ledger_path, "a", encoding="utf-8")
-            _ledger_uncompacted_bytes = 0
-        except Exception:
-            try:
-                temp_path.unlink(missing_ok=True)
-            except Exception:
-                pass
-            if _ledger_fd is None:
-                try:
-                    _ledger_fd = open(_ledger_path, "a", encoding="utf-8")
-                except Exception:
-                    pass
-
-
-# ── Core API ─────────────────────────────────────────────────────────────────
 
 def scan_subagent_logs(since: float = 0.0, root: str | None = None) -> TokenStats:
     """Aggregate subagent tokens from `temp/<task>/stdout.log` files; pass
@@ -377,7 +135,6 @@ def install() -> None:
             if usage:
                 t = get(threading.current_thread().name)
                 t.requests += 1
-                inp = cc = cr = 0
                 if api_mode == 'messages':
                     inp = int(usage.get('input_tokens', 0) or 0)
                     cc = int(usage.get('cache_creation_input_tokens', 0) or 0)
@@ -387,24 +144,18 @@ def install() -> None:
                     # output_tokens here; SSE message_start carries a 1-token
                     # placeholder to skip.
                     out = int(usage.get('output_tokens', 0) or 0)
-                    if out > 1:
-                        t.output += out; t.last_output = out
-                        _append_ledger(threading.current_thread().name, inp, out, cc, cr)
-                    else:
-                        _append_ledger(threading.current_thread().name, inp, 0, cc, cr)
+                    if out > 1: t.output += out; t.last_output = out
                     t.last_input = inp + cc + cr
                 elif api_mode == 'chat_completions':
                     cached = int((usage.get('prompt_tokens_details') or {}).get('cached_tokens', 0) or 0)
                     inp = int(usage.get('prompt_tokens', 0) or 0) - cached
                     t.input += inp; t.cache_read += cached
                     t.last_input = inp + cached
-                    _append_ledger(threading.current_thread().name, inp, 0, 0, cached)
                 elif api_mode == 'responses':
                     cached = int((usage.get('input_tokens_details') or {}).get('cached_tokens', 0) or 0)
                     inp = int(usage.get('input_tokens', 0) or 0) - cached
                     t.input += inp; t.cache_read += cached
                     t.last_input = inp + cached
-                    _append_ledger(threading.current_thread().name, inp, 0, 0, cached)
         except Exception: pass
         return orig_record(usage, api_mode)
     llmcore._record_usage = record_patched
@@ -417,7 +168,6 @@ def install() -> None:
                     t = get(threading.current_thread().name)
                     n = int(m.group(1))
                     t.output += n; t.last_output = n
-                    _append_ledger(threading.current_thread().name, 0, n, 0, 0)
         except Exception: pass
         return orig_print(*args, **kwargs)
     llmcore.print = print_patched

frontends/data_backup.py

@@ -1,857 +0,0 @@
-"""Safe, dependency-free import/export helpers for desktop data snapshots."""
-from __future__ import annotations
-
-import contextlib
-import datetime as dt
-import errno
-import json
-import math
-import os
-import re
-import shutil
-import stat
-import tempfile
-import uuid
-import zipfile
-from pathlib import Path, PurePosixPath
-from typing import Any, Callable, Iterable, Iterator
-
-
-BACKUP_SCHEMA = "genericagent.data-backup"
-BACKUP_FORMAT_VERSION = 1
-MAX_ARCHIVE_ENTRIES = 100_000
-MAX_ARCHIVE_UNCOMPRESSED_BYTES = 2 * 1024 * 1024 * 1024
-
-_DATA_PREFIXES = (
-    PurePosixPath("memory"),
-    PurePosixPath("temp/model_responses"),
-    PurePosixPath("temp/desktop_sessions"),
-)
-
-_DESKTOP_SESSION_ID_RE = re.compile(r"[A-Za-z0-9][A-Za-z0-9_-]{0,127}")
-
-
-class BackupFormatError(ValueError):
-    """Raised when a backup cannot be trusted or is not compatible."""
-
-
-def _is_relative_to(path: PurePosixPath, parent: PurePosixPath) -> bool:
-    return path == parent or parent in path.parents
-
-
-def _is_native_relative_to(path: Path, parent: Path) -> bool:
-    try:
-        path.relative_to(parent)
-        return True
-    except ValueError:
-        return False
-
-
-def _is_link_or_reparse(path: Path) -> bool:
-    """Recognise POSIX links plus Windows junction/reparse-point indirection."""
-    try:
-        if path.is_symlink():
-            return True
-        is_junction = getattr(path, "is_junction", None)
-        if callable(is_junction) and is_junction():
-            return True
-        attributes = int(getattr(os.lstat(path), "st_file_attributes", 0) or 0)
-        reparse_flag = int(getattr(stat, "FILE_ATTRIBUTE_REPARSE_POINT", 0x400))
-        return bool(attributes & reparse_flag)
-    except OSError:
-        return False
-
-
-def _resolved_directory(value: str | Path, label: str) -> Path:
-    raw = Path(value).expanduser()
-    if _is_link_or_reparse(raw):
-        raise ValueError(f"{label} cannot be a link or reparse point")
-    try:
-        resolved = raw.resolve(strict=True)
-    except OSError as error:
-        raise ValueError(f"{label} is unavailable") from error
-    if not resolved.is_dir() or _is_link_or_reparse(resolved):
-        raise ValueError(f"{label} is unavailable")
-    return resolved
-
-
-def _assert_contained(path: Path, root: Path, label: str) -> Path:
-    try:
-        resolved = path.resolve(strict=True)
-    except OSError as error:
-        raise ValueError(f"{label} is unavailable") from error
-    if not _is_native_relative_to(resolved, root):
-        raise ValueError(f"{label} escapes its data root")
-    return resolved
-
-
-def _archive_path(name: str) -> PurePosixPath:
-    if not name or "\\" in name:
-        raise BackupFormatError("invalid backup entry path")
-    if any(part in ("", ".", "..") for part in name.split("/")):
-        raise BackupFormatError("invalid backup entry path")
-    path = PurePosixPath(name)
-    if path.is_absolute() or any(part in ("", ".", "..") for part in path.parts):
-        raise BackupFormatError("invalid backup entry path")
-    return path
-
-
-def _is_allowed_data_path(path: PurePosixPath) -> bool:
-    return any(_is_relative_to(path, prefix) for prefix in _DATA_PREFIXES)
-
-
-def _iter_regular_files(root: Path) -> Iterator[tuple[Path, PurePosixPath]]:
-    root = root.resolve()
-    for folder, dirs, files in os.walk(root, followlinks=False):
-        folder_path = Path(folder)
-        if _is_link_or_reparse(folder_path):
-            raise ValueError(f"data folder contains a link or reparse point: {folder_path}")
-        safe_dirs: list[str] = []
-        for name in sorted(dirs):
-            candidate = folder_path / name
-            if _is_link_or_reparse(candidate):
-                raise ValueError(f"data folder contains a link or reparse point: {candidate}")
-            _assert_contained(candidate, root, "data folder")
-            safe_dirs.append(name)
-        dirs[:] = safe_dirs
-        for name in sorted(files):
-            source = folder_path / name
-            if _is_link_or_reparse(source):
-                raise ValueError(f"data folder contains a link or reparse point: {source}")
-            if not source.is_file():
-                raise ValueError(f"data folder contains an unsupported file: {source}")
-            _assert_contained(source, root, "data file")
-            relative = PurePosixPath(source.relative_to(root).as_posix())
-            yield source, relative
-
-
-def _source_files(root: Path) -> list[tuple[Path, PurePosixPath]]:
-    files: list[tuple[Path, PurePosixPath]] = []
-    for prefix in _DATA_PREFIXES:
-        source_root = root.joinpath(*prefix.parts)
-        if not source_root.exists():
-            continue
-        if _is_link_or_reparse(source_root) or not source_root.is_dir():
-            raise ValueError(f"data folder is not a safe directory: {source_root}")
-        for source, relative in _iter_regular_files(source_root):
-            files.append((source, prefix / relative))
-    return files
-
-
-def _content_counts(paths: list[PurePosixPath]) -> dict[str, int]:
-    return {
-        "memory": sum(_is_relative_to(path, _DATA_PREFIXES[0]) for path in paths),
-        "responses": sum(_is_relative_to(path, _DATA_PREFIXES[1]) for path in paths),
-        "sessions": sum(_is_relative_to(path, _DATA_PREFIXES[2]) for path in paths),
-    }
-
-
-def _normalise_source_mode(value: str) -> str:
-    if value not in ("included", "localRepository"):
-        raise BackupFormatError("invalid backup source mode")
-    return value
-
-
-def _manifest(source_mode: str, paths: list[PurePosixPath]) -> dict:
-    exported_at = dt.datetime.now(dt.timezone.utc).replace(microsecond=0)
-    return {
-        "schema": BACKUP_SCHEMA,
-        "formatVersion": BACKUP_FORMAT_VERSION,
-        "exportedAt": exported_at.isoformat().replace("+00:00", "Z"),
-        "sourceMode": _normalise_source_mode(source_mode),
-        "content": _content_counts(paths),
-    }
-
-
-def export_data_backup(
-    ga_root: str,
-    destination_path: str,
-    source_mode: str,
-    *,
-    forbidden_roots: Iterable[str | Path] = (),
-) -> dict:
-    root = _resolved_directory(ga_root, "current data source")
-    raw_destination = Path(destination_path).expanduser()
-    if _is_link_or_reparse(raw_destination):
-        raise ValueError("backup destination cannot be a link or reparse point")
-    destination = raw_destination.resolve()
-    if destination.suffix.lower() != ".zip":
-        raise ValueError("backup destination must be a zip file")
-    if not destination.parent.is_dir() or _is_link_or_reparse(destination.parent):
-        raise ValueError("backup destination folder does not exist")
-    protected_roots = [root.joinpath(*prefix.parts).resolve() for prefix in _DATA_PREFIXES]
-    protected_roots.extend(Path(value).expanduser().resolve() for value in forbidden_roots)
-    if any(_is_native_relative_to(destination, protected) for protected in protected_roots):
-        raise ValueError("backup destination is inside protected application data")
-
-    files = _source_files(root)
-    paths = [relative for _, relative in files]
-    if not paths:
-        raise BackupFormatError("backup contains no importable data")
-    manifest = _manifest(source_mode, paths)
-    manifest_bytes = (
-        json.dumps(manifest, ensure_ascii=False, indent=2) + "\n"
-    ).encode("utf-8")
-    if len(files) + 1 > MAX_ARCHIVE_ENTRIES:
-        raise BackupFormatError("backup contains too many files")
-    total_bytes = len(manifest_bytes)
-    for source, _relative in files:
-        _assert_contained(source, root, "data file")
-        total_bytes += source.stat().st_size
-        if total_bytes > MAX_ARCHIVE_UNCOMPRESSED_BYTES:
-            raise BackupFormatError("backup is too large")
-
-    temp_handle = tempfile.NamedTemporaryFile(
-        prefix=f".{destination.stem}.",
-        suffix=".tmp",
-        dir=destination.parent,
-        delete=False,
-    )
-    temp_path = Path(temp_handle.name)
-    temp_handle.close()
-    try:
-        with zipfile.ZipFile(
-            temp_path,
-            "w",
-            compression=zipfile.ZIP_DEFLATED,
-            compresslevel=6,
-        ) as archive:
-            archive.writestr("manifest.json", manifest_bytes)
-            for source, relative in files:
-                if _is_link_or_reparse(source):
-                    raise ValueError(f"data file became a link or reparse point: {source}")
-                _assert_contained(source, root, "data file")
-                archive.write(source, relative.as_posix())
-        # Validate the bytes that will actually replace the destination.  A source
-        # can change after the preflight stat, and ZipFile only finalises CRCs and
-        # the central directory when it closes.
-        with zipfile.ZipFile(temp_path, "r") as archive:
-            _validated_zip(archive)
-        os.replace(temp_path, destination)
-    except Exception:
-        with contextlib.suppress(OSError):
-            temp_path.unlink()
-        raise
-
-    return {
-        "ok": True,
-        "path": str(destination),
-        "formatVersion": BACKUP_FORMAT_VERSION,
-        "exportedAt": manifest["exportedAt"],
-        "sourceMode": manifest["sourceMode"],
-        "content": manifest["content"],
-    }
-
-
-def _validated_zip(archive: zipfile.ZipFile) -> tuple[dict, list[zipfile.ZipInfo]]:
-    infos = archive.infolist()
-    if len(infos) > MAX_ARCHIVE_ENTRIES:
-        raise BackupFormatError("backup contains too many files")
-    total_bytes = sum(info.file_size for info in infos)
-    if total_bytes > MAX_ARCHIVE_UNCOMPRESSED_BYTES:
-        raise BackupFormatError("backup is too large")
-    if archive.testzip() is not None:
-        raise BackupFormatError("backup is corrupt")
-
-    manifest_info: zipfile.ZipInfo | None = None
-    data_infos: list[zipfile.ZipInfo] = []
-    seen_paths: set[str] = set()
-    for info in infos:
-        path = _archive_path(info.filename.rstrip("/"))
-        folded_path = path.as_posix().casefold()
-        if folded_path in seen_paths:
-            raise BackupFormatError("backup contains duplicate file paths")
-        seen_paths.add(folded_path)
-        unix_mode = (info.external_attr >> 16) & 0o170000
-        if unix_mode == stat.S_IFLNK:
-            raise BackupFormatError("backup contains links")
-        if path == PurePosixPath("manifest.json"):
-            if info.is_dir() or manifest_info is not None:
-                raise BackupFormatError("backup manifest is invalid")
-            manifest_info = info
-            continue
-        if not _is_allowed_data_path(path):
-            raise BackupFormatError("backup contains unsupported files")
-        if not info.is_dir():
-            data_infos.append(info)
-
-    if manifest_info is None:
-        raise BackupFormatError("backup manifest is missing")
-    try:
-        manifest = json.loads(archive.read(manifest_info).decode("utf-8"))
-    except Exception as error:
-        raise BackupFormatError("backup manifest is invalid") from error
-    if not isinstance(manifest, dict):
-        raise BackupFormatError("backup manifest is invalid")
-    if manifest.get("schema") != BACKUP_SCHEMA:
-        raise BackupFormatError("backup format is not supported")
-    if manifest.get("formatVersion") != BACKUP_FORMAT_VERSION:
-        raise BackupFormatError("backup version is not supported")
-    _normalise_source_mode(str(manifest.get("sourceMode") or ""))
-    if not isinstance(manifest.get("exportedAt"), str) or not manifest["exportedAt"]:
-        raise BackupFormatError("backup export time is missing")
-
-    actual_counts = _content_counts([
-        _archive_path(info.filename) for info in data_infos
-    ])
-    if not data_infos:
-        raise BackupFormatError("backup contains no importable data")
-    if manifest.get("content") != actual_counts:
-        raise BackupFormatError("backup content summary does not match its files")
-    return manifest, data_infos
-
-
-def _legacy_inspection(root: Path) -> dict:
-    files = _source_files(root)
-    paths = [relative for _, relative in files]
-    session_items, _sessions_found, _sessions_skipped = _read_source_sessions(root)
-    counts = _content_counts(paths)
-    counts["sessions"] = len(session_items)
-    if not any(counts.values()):
-        raise BackupFormatError("not a GA data source (no importable data)")
-    return {
-        "ok": True,
-        "sourceType": "legacyFolder",
-        "formatVersion": None,
-        "exportedAt": None,
-        "sourceMode": None,
-        "content": counts,
-    }
-
-
-def inspect_import_source(source_path: str) -> dict:
-    raw_source = Path(source_path).expanduser()
-    if _is_link_or_reparse(raw_source):
-        raise BackupFormatError("import source cannot be a link or reparse point")
-    source = raw_source.resolve()
-    if source.is_dir() and not _is_link_or_reparse(source):
-        return _legacy_inspection(source)
-    if not source.is_file() or source.suffix.lower() != ".zip":
-        raise BackupFormatError("select a compatible backup or data folder")
-    try:
-        with zipfile.ZipFile(source, "r") as archive:
-            manifest, _ = _validated_zip(archive)
-    except zipfile.BadZipFile as error:
-        raise BackupFormatError("backup is corrupt") from error
-    return {
-        "ok": True,
-        "sourceType": "backupZip",
-        "formatVersion": manifest["formatVersion"],
-        "exportedAt": manifest["exportedAt"],
-        "sourceMode": manifest["sourceMode"],
-        "content": manifest["content"],
-    }
-
-
-@contextlib.contextmanager
-def materialize_import_source(source_path: str) -> Iterator[Path]:
-    raw_source = Path(source_path).expanduser()
-    if _is_link_or_reparse(raw_source):
-        raise BackupFormatError("import source cannot be a link or reparse point")
-    source = raw_source.resolve()
-    inspection = inspect_import_source(str(source))
-    if inspection["sourceType"] == "legacyFolder":
-        yield source
-        return
-
-    with tempfile.TemporaryDirectory(prefix="genericagent-data-import-") as temp_dir:
-        target_root = _resolved_directory(temp_dir, "import staging")
-        try:
-            with zipfile.ZipFile(source, "r") as archive:
-                _, data_infos = _validated_zip(archive)
-                for info in data_infos:
-                    relative = _archive_path(info.filename)
-                    target = target_root.joinpath(*relative.parts)
-                    _assert_safe_new_target(target_root, target)
-                    target.parent.mkdir(parents=True, exist_ok=True)
-                    _assert_contained(target.parent, target_root, "import destination")
-                    if target.exists() or _is_link_or_reparse(target):
-                        raise BackupFormatError("backup contains duplicate or unsafe paths")
-                    with archive.open(info, "r") as reader, target.open("wb") as writer:
-                        shutil.copyfileobj(reader, writer)
-                    _assert_contained(target, target_root, "import destination")
-        except zipfile.BadZipFile as error:
-            raise BackupFormatError("backup is corrupt") from error
-        yield target_root
-
-
-def _is_desktop_session_id(value: object) -> bool:
-    if not isinstance(value, str):
-        return False
-    session_id = value
-    return (
-        not session_id.startswith("tui_")
-        and _DESKTOP_SESSION_ID_RE.fullmatch(session_id) is not None
-    )
-
-
-def _finite_timestamp(value: object, default: float) -> float:
-    if value is None:
-        return default
-    if isinstance(value, bool) or not isinstance(value, (int, float)):
-        raise BackupFormatError("session timestamp is invalid")
-    timestamp = float(value)
-    if not math.isfinite(timestamp):
-        raise BackupFormatError("session timestamp is invalid")
-    return timestamp
-
-
-def _non_negative_integer(value: object, default: int, label: str) -> int:
-    if value is None:
-        return default
-    if isinstance(value, bool) or not isinstance(value, int) or value < 0:
-        raise BackupFormatError(f"session {label} is invalid")
-    return value
-
-
-def _record_list(value: object, default: list[dict], label: str) -> list[dict]:
-    if value is None:
-        return list(default)
-    if not isinstance(value, list) or not all(isinstance(item, dict) for item in value):
-        raise BackupFormatError(f"session {label} is invalid")
-    return value
-
-
-def canonical_session_record(
-    item: object,
-    *,
-    default_cwd: str = "",
-    now: float | None = None,
-) -> dict[str, Any]:
-    """Validate and reduce an imported/persisted Desktop session to its schema."""
-    if not isinstance(item, dict):
-        raise BackupFormatError("session record is invalid")
-    session_id = item.get("id")
-    if not _is_desktop_session_id(session_id):
-        raise BackupFormatError("session id is invalid")
-    current_time = float(now if now is not None else dt.datetime.now().timestamp())
-    title = item.get("title", "New chat")
-    cwd = item.get("cwd", default_cwd)
-    plan_path = item.get("plan_path", "")
-    if not isinstance(title, str) or not isinstance(cwd, str) or not isinstance(plan_path, str):
-        raise BackupFormatError("session text field is invalid")
-    messages = _record_list(item.get("messages"), [], "messages")
-    llm_history_value = item.get("llm_history")
-    llm_history = None if llm_history_value is None else _record_list(
-        llm_history_value, [], "llm history"
-    )
-    llm_no_value = item.get("llm_no")
-    llm_no = None if llm_no_value is None else _non_negative_integer(
-        llm_no_value, 0, "model index"
-    )
-    pinned = item.get("pinned", False)
-    untitled = item.get("untitled", True)
-    if not isinstance(pinned, bool) or not isinstance(untitled, bool):
-        raise BackupFormatError("session boolean field is invalid")
-    return {
-        "id": session_id,
-        "title": title,
-        "cwd": cwd,
-        "created_at": _finite_timestamp(item.get("created_at"), current_time),
-        "updated_at": _finite_timestamp(item.get("updated_at"), current_time),
-        "messages": messages,
-        "msg_seq": _non_negative_integer(item.get("msg_seq"), 0, "message sequence"),
-        "pinned": pinned,
-        "untitled": untitled,
-        "plan_scan_baseline": _non_negative_integer(
-            item.get("plan_scan_baseline"), 0, "plan baseline"
-        ),
-        "plan_path": plan_path,
-        "llm_no": llm_no,
-        "llm_history": llm_history,
-    }
-
-
-def _read_source_sessions(source: Path) -> tuple[list[dict], bool, int]:
-    """Read supported Desktop session stores without trusting filenames.
-
-    Corrupt/non-Desktop records are skipped. The skipped count is intentionally
-    record-oriented; an unreadable file counts as one skipped source record.
-    """
-    items: list[dict] = []
-    found = False
-    skipped = 0
-    sessions_dir = source / "temp" / "desktop_sessions"
-    if sessions_dir.exists() and _is_link_or_reparse(sessions_dir):
-        raise ValueError(f"session source contains a link or reparse point: {sessions_dir}")
-    if sessions_dir.is_dir():
-        for session_file in sorted(sessions_dir.glob("*.json")):
-            if _is_link_or_reparse(session_file):
-                raise ValueError(
-                    f"session source contains a link or reparse point: {session_file}"
-                )
-            if not session_file.is_file():
-                raise ValueError(f"session source contains an unsupported file: {session_file}")
-            found = True
-            try:
-                raw_item = json.loads(session_file.read_text(encoding="utf-8"))
-                item = canonical_session_record(raw_item)
-            except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
-                skipped += 1
-                continue
-            items.append(item)
-
-    for legacy in (
-        source / "temp" / "desktop_sessions.json",
-        source / "temp" / "desktop_sessions.json.migrated",
-    ):
-        if _is_link_or_reparse(legacy):
-            raise ValueError(f"session source contains a link or reparse point: {legacy}")
-        if not legacy.is_file():
-            continue
-        found = True
-        try:
-            document = json.loads(legacy.read_text(encoding="utf-8"))
-        except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
-            skipped += 1
-            continue
-        if not isinstance(document, list):
-            skipped += 1
-            continue
-        for item in document:
-            try:
-                items.append(canonical_session_record(item))
-            except ValueError:
-                skipped += 1
-    return items, found, skipped
-
-
-def _existing_session_ids(destination_root: Path) -> set[str]:
-    ids: set[str] = set()
-    sessions_dir = destination_root / "temp" / "desktop_sessions"
-    if _is_link_or_reparse(sessions_dir):
-        raise ValueError(f"session destination contains a link or reparse point: {sessions_dir}")
-    if not sessions_dir.is_dir():
-        return ids
-    for session_file in sorted(sessions_dir.glob("*.json")):
-        if _is_link_or_reparse(session_file):
-            raise ValueError(
-                f"session destination contains a link or reparse point: {session_file}"
-            )
-        if not session_file.is_file():
-            raise ValueError(f"session destination contains an unsupported file: {session_file}")
-        if _is_desktop_session_id(session_file.stem):
-            ids.add(session_file.stem)
-        try:
-            item = canonical_session_record(
-                json.loads(session_file.read_text(encoding="utf-8"))
-            )
-        except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
-            continue
-        ids.add(item["id"])
-    return ids
-
-
-def _remove_path(path: Path) -> None:
-    if _is_link_or_reparse(path) or path.is_file():
-        path.unlink()
-    elif path.is_dir():
-        shutil.rmtree(path)
-
-
-def _copy_tree_strict(source: Path, destination: Path) -> None:
-    """Copy a complete tree while refusing links and special files."""
-    if _is_link_or_reparse(source) or not source.is_dir():
-        raise ValueError(f"cannot safely copy data folder: {source}")
-    destination.mkdir(parents=True, exist_ok=False)
-    for item in sorted(source.iterdir(), key=lambda path: path.name):
-        if _is_link_or_reparse(item):
-            raise ValueError(f"data folder contains a link or reparse point: {item}")
-        _assert_contained(item, source, "data item")
-        target = destination / item.name
-        if item.is_dir():
-            _copy_tree_strict(item, target)
-        elif item.is_file():
-            shutil.copy2(item, target)
-        else:
-            raise ValueError(f"data folder contains an unsupported file: {item}")
-
-
-def _prepare_overlay_target(root: Path, relative: PurePosixPath) -> Path:
-    current = root
-    for part in relative.parts[:-1]:
-        current = current / part
-        if _is_link_or_reparse(current):
-            raise ValueError(f"memory destination contains a link or reparse point: {current}")
-        if current.exists() and not current.is_dir():
-            _remove_path(current)
-        current.mkdir(exist_ok=True)
-        _assert_contained(current, root, "memory destination")
-    target = root.joinpath(*relative.parts)
-    if _is_link_or_reparse(target):
-        raise ValueError(f"memory destination contains a link or reparse point: {target}")
-    if target.is_dir():
-        _remove_path(target)
-    return target
-
-
-def _assert_safe_new_target(root: Path, target: Path) -> None:
-    relative = target.relative_to(root)
-    current = root
-    for part in relative.parts[:-1]:
-        current = current / part
-        if _is_link_or_reparse(current):
-            raise ValueError(f"data destination contains a link or reparse point: {current}")
-        if current.exists() and not current.is_dir():
-            raise ValueError(f"data destination parent is not a directory: {current}")
-        if current.exists():
-            _assert_contained(current, root, "data destination")
-    if _is_link_or_reparse(target):
-        raise ValueError(f"data destination contains a link or reparse point: {target}")
-
-
-def _new_backup_path(destination_root: Path) -> Path:
-    timestamp = dt.datetime.now().strftime("%Y%m%d_%H%M%S_%f")
-    backup_parent = destination_root / "temp"
-    for suffix in range(1000):
-        tail = "" if suffix == 0 else f"_{suffix}"
-        candidate = backup_parent / f"memory_import_backup_{timestamp}{tail}"
-        if not candidate.exists() and not _is_link_or_reparse(candidate):
-            return candidate
-    raise OSError("cannot allocate a unique memory backup directory")
-
-
-def _create_memory_backup(destination_root: Path, memory_root: Path) -> Path:
-    backup_dir = _new_backup_path(destination_root)
-    backup_parent = backup_dir.parent
-    if _is_link_or_reparse(backup_parent) or (
-        backup_parent.exists() and not backup_parent.is_dir()
-    ):
-        raise ValueError("current backup destination is not a safe directory")
-    backup_parent.mkdir(parents=True, exist_ok=True)
-    _assert_contained(backup_parent, destination_root, "backup destination")
-    staging = backup_parent / f".{backup_dir.name}.staging-{uuid.uuid4().hex}"
-    try:
-        staging.mkdir()
-        _copy_tree_strict(memory_root, staging / "memory")
-        os.replace(staging, backup_dir)
-    except Exception:
-        with contextlib.suppress(OSError):
-            _remove_path(staging)
-        raise
-    return backup_dir
-
-
-def _install_file_add_only(staged: Path, target: Path) -> None:
-    """Install one staged file without ever replacing an existing path."""
-    try:
-        os.link(staged, target, follow_symlinks=False)
-    except OSError as error:
-        unsupported_link_errors = {
-            errno.EINVAL,
-            errno.EPERM,
-            errno.EXDEV,
-            getattr(errno, "ENOTSUP", errno.EINVAL),
-            getattr(errno, "EOPNOTSUPP", errno.EINVAL),
-        }
-        if error.errno not in unsupported_link_errors:
-            raise
-
-        # Some removable/network filesystems do not implement hard links.
-        # O_EXCL retains the add-only contract there; a failed copy removes
-        # only the path this call successfully created.
-        flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL
-        flags |= getattr(os, "O_BINARY", 0)
-        descriptor: int | None = None
-        created = False
-        try:
-            descriptor = os.open(target, flags, stat.S_IMODE(staged.stat().st_mode))
-            created = True
-            with staged.open("rb") as reader, os.fdopen(descriptor, "wb") as writer:
-                descriptor = None
-                shutil.copyfileobj(reader, writer)
-                writer.flush()
-                os.fsync(writer.fileno())
-        except Exception:
-            if descriptor is not None:
-                with contextlib.suppress(OSError):
-                    os.close(descriptor)
-            if created:
-                with contextlib.suppress(OSError):
-                    target.unlink()
-            raise
-    with contextlib.suppress(OSError):
-        staged.unlink()
-
-
-def merge_data_files(
-    source_dir: str,
-    ga_root: str,
-    *,
-    existing_session_ids: Iterable[str] | None = None,
-    session_preparer: Callable[[dict], object] | None = None,
-) -> dict[str, Any]:
-    """Transactionally merge a validated data tree into ``ga_root``.
-
-    ``memory`` is source-wins after a durable full backup, responses and
-    Desktop sessions are add-only, and any activation error rolls back files
-    installed by this call. ``session_preparer`` lets the bridge validate and
-    construct its in-memory Session objects before any destination is changed.
-    """
-    source = _resolved_directory(source_dir, "source data folder")
-    destination_root = _resolved_directory(ga_root, "current data destination")
-    if source == destination_root:
-        raise ValueError("source is the same as current data")
-
-    inspection = _legacy_inspection(source)
-    source_memory = source.joinpath(*_DATA_PREFIXES[0].parts)
-    source_responses = source.joinpath(*_DATA_PREFIXES[1].parts)
-    destination_memory = destination_root.joinpath(*_DATA_PREFIXES[0].parts)
-    destination_responses = destination_root.joinpath(*_DATA_PREFIXES[1].parts)
-    has_source_memory = source_memory.is_dir() and not _is_link_or_reparse(source_memory)
-
-    memory_files = list(_iter_regular_files(source_memory)) if has_source_memory else []
-    response_files: list[tuple[Path, PurePosixPath, Path]] = []
-    responses_skipped = 0
-    if source_responses.exists() and _is_link_or_reparse(source_responses):
-        raise ValueError(f"response source contains a link or reparse point: {source_responses}")
-    if source_responses.is_dir():
-        for item, relative in _iter_regular_files(source_responses):
-            target = destination_responses.joinpath(*relative.parts)
-            if target.exists() or _is_link_or_reparse(target):
-                responses_skipped += 1
-                continue
-            _assert_safe_new_target(destination_root, target)
-            response_files.append((item, relative, target))
-
-    source_session_items, sessions_found, sessions_skipped = _read_source_sessions(source)
-    known_session_ids = _existing_session_ids(destination_root)
-    if existing_session_ids is not None:
-        known_session_ids.update(
-            str(value) for value in existing_session_ids if _is_desktop_session_id(value)
-        )
-    planned_session_ids: set[str] = set()
-    session_files: list[tuple[str, dict, Path, object]] = []
-    for item in source_session_items:
-        session_id = item.get("id")
-        if not _is_desktop_session_id(session_id):
-            sessions_skipped += 1
-            continue
-        session_id = str(session_id)
-        target = destination_root / "temp" / "desktop_sessions" / f"{session_id}.json"
-        if (
-            session_id in known_session_ids
-            or session_id in planned_session_ids
-            or target.exists()
-            or _is_link_or_reparse(target)
-        ):
-            sessions_skipped += 1
-            continue
-        _assert_safe_new_target(destination_root, target)
-        try:
-            prepared = session_preparer(item) if session_preparer is not None else item
-        except Exception:
-            sessions_skipped += 1
-            continue
-        planned_session_ids.add(session_id)
-        session_files.append((session_id, item, target, prepared))
-
-    backup_dir = ""
-    prepared_sessions = [entry[3] for entry in session_files]
-    with tempfile.TemporaryDirectory(
-        prefix=".genericagent-memory-import-",
-        dir=destination_root,
-    ) as temp_dir:
-        staging_root = Path(temp_dir)
-        if _is_link_or_reparse(staging_root):
-            raise ValueError("import staging cannot be a link or reparse point")
-        _assert_contained(staging_root, destination_root, "import staging")
-        staged_memory = staging_root / "memory"
-        if has_source_memory:
-            if _is_link_or_reparse(destination_memory) or (
-                destination_memory.exists() and not destination_memory.is_dir()
-            ):
-                raise ValueError("current memory destination is not a safe directory")
-            if destination_memory.is_dir():
-                _copy_tree_strict(destination_memory, staged_memory)
-            else:
-                staged_memory.mkdir()
-            for item, relative in memory_files:
-                target = _prepare_overlay_target(staged_memory, relative)
-                target.parent.mkdir(parents=True, exist_ok=True)
-                shutil.copy2(item, target)
-
-        staged_responses: list[tuple[Path, Path]] = []
-        for item, relative, target in response_files:
-            staged = staging_root / "responses" / Path(*relative.parts)
-            staged.parent.mkdir(parents=True, exist_ok=True)
-            shutil.copy2(item, staged)
-            staged_responses.append((staged, target))
-
-        staged_sessions: list[tuple[Path, Path]] = []
-        for session_id, item, target, _prepared in session_files:
-            staged = staging_root / "sessions" / f"{session_id}.json"
-            staged.parent.mkdir(parents=True, exist_ok=True)
-            staged.write_text(
-                json.dumps(item, ensure_ascii=False, default=str),
-                encoding="utf-8",
-            )
-            staged_sessions.append((staged, target))
-
-        memory_nonempty = (
-            destination_memory.is_dir()
-            and next(destination_memory.iterdir(), None) is not None
-        )
-        if has_source_memory and memory_nonempty:
-            backup_dir = str(_create_memory_backup(destination_root, destination_memory))
-
-        installed_files: list[Path] = []
-        previous_memory = staging_root / "previous-memory"
-        memory_original_moved = False
-        memory_activated = False
-        memory_existed = destination_memory.is_dir()
-        try:
-            if has_source_memory:
-                if memory_existed:
-                    os.replace(destination_memory, previous_memory)
-                    memory_original_moved = True
-                os.replace(staged_memory, destination_memory)
-                memory_activated = True
-
-            for staged, target in (*staged_responses, *staged_sessions):
-                if target.exists() or _is_link_or_reparse(target):
-                    raise OSError(f"data destination changed during import: {target}")
-                _assert_safe_new_target(destination_root, target)
-                target.parent.mkdir(parents=True, exist_ok=True)
-                # Staging shares the destination filesystem. A hard link gives
-                # POSIX/Windows create-if-absent semantics: unlike replace(), it
-                # cannot overwrite a response/session created concurrently.
-                _install_file_add_only(staged, target)
-                installed_files.append(target)
-        except Exception as error:
-            rollback_errors: list[str] = []
-            for target in reversed(installed_files):
-                try:
-                    target.unlink()
-                except OSError as rollback_error:
-                    rollback_errors.append(str(rollback_error))
-            if memory_activated or memory_original_moved:
-                try:
-                    if destination_memory.exists() or _is_link_or_reparse(destination_memory):
-                        _remove_path(destination_memory)
-                    if memory_original_moved:
-                        os.replace(previous_memory, destination_memory)
-                except OSError as rollback_error:
-                    rollback_errors.append(str(rollback_error))
-            if rollback_errors:
-                raise OSError(
-                    f"data import failed: {error}; rollback failed: "
-                    + "; ".join(rollback_errors)
-                ) from error
-            raise
-
-    result: dict[str, Any] = {
-        "ok": True,
-        "memoryCopied": len(memory_files),
-        "memorySkipped": 0,
-        "responsesCopied": len(response_files),
-        "responsesSkipped": responses_skipped,
-        "sessionsAdded": len(session_files),
-        "sessionsSkipped": sessions_skipped,
-        "sessionsFileFound": sessions_found,
-        "backupDir": backup_dir,
-        "sourceType": inspection["sourceType"],
-    }
-    if session_preparer is not None:
-        result["_preparedSessions"] = prepared_sessions
-    return result

frontends/desktop/DESIGN.md

@@ -1,100 +0,0 @@
-# GenericAgent Desktop 2.0 integration boundary
-
-GenericAgent Desktop 2.0 is a packaged Tauri desktop application with a generated React renderer and
-Desktop-specific Python services. The React source is intentionally developed outside this upstream tree;
-the generated distribution and all runtime interfaces required to execute it are tracked here.
-
-## Renderer ownership
-
-- `frontends/desktop/dist/**` contains the generated Desktop 2.0 HTML, JavaScript, CSS, fonts, and images.
-- `frontends/desktop/static/**` is the independent Desktop v1 implementation and remains available unchanged.
-- Tauri packages `dist/**`; it does not compile React during an upstream build.
-- The public React source, issue tracker, and contribution home is
-  <https://github.com/abraxas914/GenericAgent>.
-- The exact fork commit and generated-file content manifest are recorded in
-  `dist/build-provenance.json`.
-
-Generated files must not be edited by hand. Renderer changes are made and tested in the fork, rebuilt from an
-accepted fork `main` commit, and submitted upstream as a refreshed `dist/**` tree with matching provenance.
-The manifest identifies the submitted bytes; it is not a claim that later builds are bit-for-bit reproducible.
-
-The production Tauri configuration loads only the tracked asset origin and applies an explicit Content Security
-Policy. React source tooling is absent from the upstream package path, while WebDriver permission remains isolated
-to `tauri.e2e.conf.json` and is not granted by the production configuration.
-
-## Desktop runtime ownership
-
-Desktop 2.0 uses these repository-owned integration layers:
-
-- `frontends/desktop_bridge.py`: local HTTP/WebSocket API, model/session/upload/data routes, service control,
-  identity, and Desktop diagnostics.
-- `frontends/conductor.py`: Desktop collaboration and model-routing integration.
-- `frontends/cost_tracker.py`: Desktop usage and cost ledger.
-- `frontends/data_backup.py`: validated Desktop data export, inspection, and import/merge behavior.
-- `frontends/desktop_settings.py`: locked, atomic read/modify/write updates for shared Desktop preferences.
-- `frontends/desktop/src-tauri/**`: native bootstrap, permissions, file pickers, runtime/source switching,
-  process/port recovery, window behavior, and package resource resolution.
-
-The package-owned bridge remains the executable service boundary. `GA_ROOT` can point it at a compatible
-external GenericAgent repository, but does not replace the package-owned bridge or Tauri shell.
-
-Desktop data import first backs up the complete destination `memory/**` tree, then applies source-wins memory
-files. Model responses remain add-only, and Desktop sessions are de-duplicated by session ID. Activation is staged
-and rolled back on failure. Import is rejected while a managed session or Desktop extra has unfinished work; users
-must also stop any independent TUI, CLI, or automation process before importing because those external processes
-are outside the bridge's maintenance gate. The persistent cost ledger is initialized by the Desktop bridge only;
-existing TUI and conductor processes retain their previous in-memory accounting hot path.
-
-Browser-origin requests are accepted only from the production Tauri origins, the fixed development origin, the
-explicit E2E origin, or the bridge's own same origin. Native clients without an Origin remain supported, while
-cross-site, null, lookalike, wrong-port, preflight, and WebSocket requests are rejected before route handling.
-Backup exports cannot be written into any managed data or HTTP-readable directory.
-
-Managed-service state is based on the bridge-owned live child process, not merely a listener on the configured
-port. A foreign conductor on production port `8900` is reported as an external port conflict and is never stopped
-or counted as an owned running extra. The alternate conductor port is available only to the isolated package E2E
-journey; production renderer and CSP contracts remain fixed to `8900`.
-
-On macOS, the package runtime uses a stable writable root and is refreshed through a package/build/source marker
-with staged atomic activation. A previously shipped versioned runtime is migrated into that stable root. User
-configuration, memory, responses, sessions, and token ledger data are preserved; a failed migration or activation
-restores the previous runtime and marker. Matching markers keep the hot-start copy untouched.
-
-## Core runtime boundary
-
-Desktop 2.0 does not own or modify GenericAgent's Agent/LLM/Harness business runtime. In particular, the
-integration does not change `agentmain.py`, LLM execution, Harness/Agent execution, inference, tool-calling,
-or memory-scheduling semantics. Desktop bridge and conductor changes translate Desktop requests onto those
-existing core contracts.
-
-## Version and release contract
-
-Desktop package metadata is `0.2.1` across npm, Cargo, Tauri, and generated provenance. Upstream packages consume
-the tracked `dist/**` tree, so an upstream maintainer can build official Windows, Linux, and macOS artifacts
-without the React source. A `desktop-portable-*` tag starts three read-only platform builders. One separate
-publisher receives write permission only after all three succeed, validates the six expected files and checksums,
-creates an invisible draft with all assets, and then exposes that single entry as a prerelease. Manual
-`workflow_dispatch` runs produce candidate artifacts only and skip the publisher.
-
-The Linux builder runs on Ubuntu 22.04, isolates Rust target/bin caches from newer runner ABIs, and rejects any
-ELF requiring a GLIBC version newer than 2.35. Windows remains unsigned and documents SmartScreen plus checksum
-verification; macOS remains ad-hoc signed and unnotarized.
-
-The renderer still uses the existing local loopback bridge contract. This integration neither treats that inherited
-platform requirement as a new release blocker nor claims to have changed operating-system loopback policy.
-
-## Validation layers
-
-- Compiled distribution contract: required entries, asset references, source-map/source leakage, E2E markers,
-  version consistency, exact provenance manifest, and the `dist` package entry.
-- Python contracts: bridge, conductor, model routing, sessions, uploads, cost ledger, `GA_ROOT`, and data backup.
-- Rust contracts: formatting, clippy, production and E2E feature tests, and
-  path/identity/port/diagnostic/bootstrap behavior.
-- Native package contract: Linux Tauri build smoke plus the platform release workflow.
-
-Optional platform release qualification lives under `frontends/desktop/release_qualification/**`.
-Its automated evidence gate validates package behavior and cleanup; screenshots and manual visual checklists
-remain separate release-owner review material rather than CI pass/fail inputs.
-
-The richer React unit/browser/native E2E suites remain in the fork and run before its accepted `main` SHA is
-used to refresh the generated upstream distribution.

frontends/desktop/dist/README.md

@@ -1,66 +0,0 @@
-# GenericAgent React Desktop 2.0 — compiled distribution
-
-This directory contains the v0.2.1 generated HTML, JavaScript, CSS, fonts, images, and license notices for the
-GenericAgent React Desktop 2.0 renderer. It is build output, not the React development tree.
-
-## Source and contributions
-
-The public React source of truth and the place for renderer issues, pull requests, and design feedback is:
-
-- <https://github.com/abraxas914/GenericAgent>
-- Exact source used for this distribution:
-  [`4a67226e18cb003db1210357ea4a283774773acc`](https://github.com/abraxas914/GenericAgent/commit/4a67226e18cb003db1210357ea4a283774773acc)
-
-Over the two-month React Desktop 2.0 development cycle, [abraxas914](https://github.com/abraxas914) led the new
-renderer architecture and UI, Desktop bridge and Tauri integration, startup and recovery surfaces, package
-validation, browser/native end-to-end coverage, renderer security hardening, and bundle optimization. Please
-open an Issue or pull request in the fork above when proposing React renderer changes so source and generated
-output stay synchronized.
-
-[yiqi-017](https://github.com/yiqi-017) contributed user-facing help and feedback contacts that remain in the
-compiled renderer, including the
-[`help and feedback` settings work](https://github.com/abraxas914/GenericAgent/commit/5ddf03bb152666637bdfcfa44f1fac3cff5a66b6)
-and [`startup recovery` support contacts](https://github.com/abraxas914/GenericAgent/commit/2fb55d944e4444b08cb9ad76c13aef7a5788186b).
-He also produced an earlier
-[`compiled-only delivery` prototype](https://github.com/abraxas914/GenericAgent/commit/3e7ca6a2b20eefdb3ee335dc0d520c3b6d9d57f8)
-that helped establish this upstream packaging boundary. The current generated tree was rebuilt by abraxas914
-from the exact merged source commit recorded above.
-
-## Third-party software: Semi Design
-
-This distribution contains code from these nine Semi Design packages, all resolved at version `2.101.0`:
-
-- `@douyinfe/semi-animation`
-- `@douyinfe/semi-animation-react`
-- `@douyinfe/semi-animation-styled`
-- `@douyinfe/semi-foundation`
-- `@douyinfe/semi-icons`
-- `@douyinfe/semi-illustrations`
-- `@douyinfe/semi-json-viewer-core`
-- `@douyinfe/semi-theme-default`
-- `@douyinfe/semi-ui`
-
-- Project: <https://github.com/DouyinFE/semi-design>
-- Website: <https://semi.design>
-- Copyright (c) 2021 DouyinFE
-- License: MIT
-
-The complete license text and bundled third-party notices are in
-[`THIRD_PARTY_NOTICES.txt`](./THIRD_PARTY_NOTICES.txt) in this directory.
-
-## Repository boundary
-
-- `frontends/desktop/dist/**` is the generated React Desktop 2.0 renderer used by the packaged Tauri app.
-- `frontends/desktop/static/**` remains the independent legacy Desktop v1 implementation; this distribution
-  neither replaces nor modifies its source files.
-- The complete Desktop 2.0 integration also uses the repository's Desktop-specific bridge, conductor, cost
-  tracking, data-backup, bootstrap, permissions, and Tauri shell code.
-- The integration does **not** modify GenericAgent's Agent, LLM, Harness, inference, tool-calling, or memory
-  scheduling core runtime.
-- `build-provenance.json` records the source repository, exact source commit, generated file count, and a
-  content-manifest SHA-256. This README and the provenance file are excluded from that manifest. The manifest
-  identifies this exact generated tree; it is not a claim that later builds are bit-for-bit reproducible.
-
-Upstream maintainers can package the tracked distribution directly without the React source. React changes
-should be built and validated in the fork, then submitted here as a refreshed generated tree with updated
-provenance and matching Desktop integration contracts.

frontends/desktop/dist/THIRD_PARTY_NOTICES.txt

@@ -1,83 +0,0 @@
-MIT License
-
-Copyright (c) 2021 DouyinFE
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-The code implementation of the external library is referenced by DouyinFe are:
-
-- animate.css
-
-    The MIT License (MIT)
-
-    Copyright (c) 2020 Daniel Eden
-
-    Permission is hereby granted, free of charge, to any person obtaining a copy
-    of this software and associated documentation files (the "Software"), to deal
-    in the Software without restriction, including without limitation the rights
-    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-    copies of the Software, and to permit persons to whom the Software is
-    furnished to do so, subject to the following conditions:
-
-    The above copyright notice and this permission notice shall be included in all
-    copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-    SOFTWARE.
-
-- Ant Design
-    MIT LICENSE
-
-    Copyright (c) 2015-present Ant UED, https://xtech.antfin.com/
-
-    Permission is hereby granted, free of charge, to any person obtaining
-    a copy of this software and associated documentation files (the
-    "Software"), to deal in the Software without restriction, including
-    without limitation the rights to use, copy, modify, merge, publish,
-    distribute, sublicense, and/or sell copies of the Software, and to
-    permit persons to whom the Software is furnished to do so, subject to
-    the following conditions:
-
-    The above copyright notice and this permission notice shall be
-    included in all copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-    EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-    MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-    NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-    LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-    OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-    WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-- rc-tree
-
-    MIT LICENSE
-
-    Copyright (c) 2015-present Alipay.com, https://www.alipay.com/
-
-    Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
-
-    The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

frontends/desktop/dist/assets/Animation-DbFrgT1j.js

@@ -1 +0,0 @@
-import{g as q}from"./tauri-compat-D_GD_wMe.js";var x,P;function Q(){if(P)return x;P=1;var i=4,t=.001,e=1e-7,s=10,n=11,a=1/(n-1),c=typeof Float32Array=="function";function l(u,o){return 1-3*o+3*u}function g(u,o){return 3*o-6*u}function T(u){return 3*u}function r(u,o,f){return((l(o,f)*u+g(o,f))*u+T(o))*u}function h(u,o,f){return 3*l(o,f)*u*u+2*g(o,f)*u+T(o)}function C(u,o,f,p,y){var m,_,F=0;do _=o+(f-o)/2,m=r(_,p,y)-u,m>0?f=_:o=_;while(Math.abs(m)>e&&++F<s);return _}function b(u,o,f,p){for(var y=0;y<i;++y){var m=h(o,f,p);if(m===0)return o;var _=r(o,f,p)-u;o-=_/m}return o}function d(u){return u}return x=function(o,f,p,y){if(!(0<=o&&o<=1&&0<=p&&p<=1))throw new Error("bezier x values must be in [0, 1] range");if(o===f&&p===y)return d;for(var m=c?new Float32Array(n):new Array(n),_=0;_<n;++_)m[_]=r(_*a,o,p);function F(v){for(var S=0,j=1,R=n-1;j!==R&&m[j]<=v;++j)S+=a;--j;var U=(v-m[j])/(m[j+1]-m[j]),A=S+U*a,k=h(A,o,p);return k>=t?b(v,A,o,p):k===0?A:C(v,S,S+a,o,p)}return function(S){return S===0?0:S===1?1:r(F(S),f,y)}},x}var K=Q();const z=q(K);function B(i,t,e){return Math.min(Math.max(i,t),e)}function W(i){const t=/\(([^)]+)\)/.exec(i);return t?t[1].split(",").map(e=>parseFloat(e)):[]}function V(){let i=arguments.length>0&&arguments[0]!==void 0?arguments[0]:1,t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:.5;const e=B(i,1,10),s=B(t,.1,2);return n=>n===0||n===1?n:-e*Math.pow(2,10*(n-1))*Math.sin((n-1-s/(Math.PI*2)*Math.asin(1/e))*(Math.PI*2)/s)}const N=(()=>{const i=["Quad","Cubic","Quart","Quint","Sine","Expo","Circ","Back","Elastic"],t={In:[[.55,.085,.68,.53],[.55,.055,.675,.19],[.895,.03,.685,.22],[.755,.05,.855,.06],[.47,0,.745,.715],[.95,.05,.795,.035],[.6,.04,.98,.335],[.6,-.28,.735,.045],V],Out:[[.25,.46,.45,.94],[.215,.61,.355,1],[.165,.84,.44,1],[.23,1,.32,1],[.39,.575,.565,1],[.19,1,.22,1],[.075,.82,.165,1],[.175,.885,.32,1.275],(s,n)=>a=>1-V(s,n)(1-a)],InOut:[[.455,.03,.515,.955],[.645,.045,.355,1],[.77,0,.175,1],[.86,0,.07,1],[.445,.05,.55,.95],[1,0,0,1],[.785,.135,.15,.86],[.68,-.55,.265,1.55],(s,n)=>a=>a<.5?V(s,n)(a*2)/2:1-V(s,n)(a*-2+2)/2]},e={linear:[.25,.25,.75,.75]};for(const s of Object.keys(t))t[s].forEach((n,a)=>{e["ease"+s+i[a]]=n});return e})();function D(i){if(typeof i=="function")return i;!i||typeof i!="string"?i="linear":i=i.trim();let t=i.split("(")[0];const e=W(i);let s;return t==="cubic-bezier"||t==="cubicBezier"?z(...e.length?e:N.linear):((!t||typeof t!="string"||typeof t=="string"&&N[t]==null)&&(t="linear"),s=N[t],typeof s=="function"?s(...e):e.length?z(...e):z(...s))}class Z{constructor(){this._eventMap=new Map}on(t,e){return t&&typeof e=="function"&&(this._eventMap.has(t)||this._eventMap.set(t,[]),this._eventMap.get(t).push(e)),this}once(t,e){var s=this;if(t&&typeof e=="function"){const n=function(){e(...arguments),s.off(t,n)};this.on(t,n)}}off(t,e){if(t)if(typeof e=="function"){const s=this._eventMap.get(t);if(Array.isArray(s)&&s.length){let n=-1;for(;(n=s.findIndex(a=>a===e))>-1;)s.splice(n,1)}}else e==null&&this._eventMap.delete(t);return this}emit(t){for(var e=arguments.length,s=new Array(e>1?e-1:0),n=1;n<e;n++)s[n-1]=arguments[n];return this._eventMap.has(t)?(this._eventMap.get(t).forEach(a=>a(...s)),!0):!1}}function M(i){return!!(i&&typeof i=="object"&&(i.duration>0||typeof i.easing=="string"||typeof i.easing=="function"))}function H(i,t,e,s,n){for(const a of Object.keys(t)){const c=t[a],l=typeof c=="number"?c:c.val;if(!(typeof c=="object"&&c.done)){if(M(c)&&s&&n&&c.duration){if(c.duration+s<=n||l!==i[a])return!1}else if(typeof e[a]=="number"&&e[a]!==0)return!1;if(i[a]!==l)return!1}}return!0}function E(i){const t={};for(const e in i)Object.prototype.hasOwnProperty.call(i,e)&&(t[e]=typeof i[e]=="number"?i[e]:i[e].val);return t}const I=[0,0];function L(i,t,e,s,n,a,c){const l=-n*(t-s),g=-a*e,T=l+g,r=e+T*i,h=t+r*i;return Math.abs(r)<c&&Math.abs(h-s)<c?(I[0]=s,I[1]=0,I):(I[0]=h,I[1]=r,I)}function J(i){const t={},e=i&&Object.keys(i)||[];for(const s of e)t[s]=0;return t}const $={default:{tension:170,friction:26}},Y=Object.assign(Object.assign({},$.default),{precision:.01});function G(i){let t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};if(M(t)){const s=D(t.easing),n=typeof t.duration=="number"&&t.duration>0?t.duration:1e3;t=Object.assign(Object.assign({},t),{easing:s,duration:n})}let e=Object.assign(Object.assign(Object.assign({},Y),t),{done:!1});if(i&&typeof i=="object"&&"val"in i){if(M(i)){const s=D(i.easing),n=typeof i.duration=="number"&&i.duration>0?i.duration:parseInt(t.duration)||1e3;i=Object.assign(Object.assign({},i),{easing:s,duration:n})}e=Object.assign(Object.assign({},e),i)}else e=Object.assign(Object.assign({},e),{val:i});return e}const w=()=>Date.now(),O=1e3/60;class tt extends Z{constructor(){let t=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{},e=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};super(),this._props=Object.assign({},t),this._config=Object.assign({},e),this.initStates()}_wrapConfig(t,e){e=e&&typeof e=="object"?Line truncated

frontends/desktop/dist/assets/CollabPage-CG38jm3S.css

@@ -1 +0,0 @@
-.collab-page{display:flex;width:100%;height:100%;overflow:hidden}.collab-main{flex:1;display:flex;flex-direction:column;min-width:0;position:relative}.collab-chat-area{flex:1;position:relative;min-height:0;overflow:hidden}.collab-offline{display:flex;flex-direction:column;align-items:center;justify-content:center;width:100%;height:100%;gap:.5rem;color:var(--semi-color-text-2, #4e5969)}.collab-offline-icon{font-size:2rem;opacity:.5}.collab-offline h3{margin:0;font-size:1rem;font-weight:600;color:var(--semi-color-text-0, #1c1f23)}.collab-offline p{margin:0;font-size:.8125rem}.collab-retry-btn{margin-top:.75rem;padding:.375rem 1rem;border:1px solid var(--semi-color-border, #e0e0e0);border-radius:.375rem;background:var(--semi-color-bg-0, #fff);color:var(--semi-color-text-0, #1c1f23);font-size:.8125rem;cursor:pointer;transition:background .12s}.collab-retry-btn:hover{background:var(--semi-color-fill-0, #f5f5f5)}.collab-connecting{display:flex;align-items:center;justify-content:center;height:100%;gap:.5rem;font-size:.8125rem;color:var(--semi-color-text-2, #4e5969);position:absolute;top:0;right:0;bottom:0;left:0}.collab-connecting-dot{width:8px;height:8px;border-radius:50%;background:var(--semi-color-primary, #3370ff);animation:statusPulse 1.2s ease-in-out infinite}.collab-empty{display:flex;align-items:center;justify-content:center;height:100%;color:var(--semi-color-text-3, #8f959e);font-size:.8125rem;position:absolute;top:0;right:0;bottom:0;left:0}.collab-welcome{position:absolute;top:0;right:0;bottom:0;left:0;display:flex;flex-direction:column;align-items:flex-start;justify-content:center;padding:2rem 0;gap:1rem}.collab-welcome-title{font-size:1.125rem;font-weight:600;color:var(--semi-color-text-0, #1c1f23);margin:0}.collab-welcome-sub{font-size:.8125rem;color:var(--semi-color-text-2, #4e5969);line-height:1.5;margin:0}.collab-welcome-steps{display:flex;flex-direction:column;gap:.75rem;width:100%;margin-top:.5rem}.collab-welcome-step{display:flex;align-items:flex-start;gap:.625rem}.collab-welcome-step-icon{display:flex;align-items:center;justify-content:center;width:1.75rem;height:1.75rem;border-radius:.375rem;background:var(--semi-color-fill-0, #f5f5f5);color:var(--semi-color-text-1, #1c1f23);flex-shrink:0}.collab-welcome-step-text{display:flex;flex-direction:column;gap:.125rem;padding-top:.1875rem}.collab-welcome-step-label{font-size:.8125rem;font-weight:600;color:var(--semi-color-text-0, #1c1f23)}.collab-welcome-step-desc{font-size:.75rem;color:var(--semi-color-text-2, #4e5969);line-height:1.4}.collab-welcome-chips{display:flex;flex-wrap:wrap;gap:.5rem;margin-top:.5rem}.collab-welcome-chip{display:inline-flex;align-items:center;padding:.375rem .625rem;border:1px solid var(--semi-color-border, #e0e0e0);border-radius:6px;background:none;color:var(--ui-text-secondary, #4e5969);font-size:.8125rem;font-weight:500;line-height:1;cursor:pointer;-webkit-user-select:none;user-select:none;transition:background .15s,box-shadow .15s}.collab-welcome-chip:hover{background:color-mix(in srgb,var(--semi-color-primary, #3370ff) 4%,transparent);box-shadow:0 1px 4px color-mix(in srgb,var(--semi-color-primary, #3370ff) 12%,transparent)}.collab-welcome-chip:active{background:color-mix(in srgb,var(--semi-color-primary, #3370ff) 8%,transparent)}[data-slot=collab-page][data-empty] .collab-chat-area{display:flex;flex-direction:column;align-items:center;justify-content:center;overflow:visible}[data-slot=collab-page][data-empty] .collab-welcome{position:relative;inset:unset;width:min(var(--composer-width, 48.75rem),calc(100% - 2rem))}[data-slot=collab-page][data-empty] .collab-composer-wrap{position:relative;width:min(var(--composer-width, 48.75rem),calc(100% - 2rem))}[data-slot=collab-page][data-empty] [data-slot=composer-root]{position:relative;bottom:auto;left:auto;transform:none;width:100%}[data-slot=collab-page][data-empty] [data-slot=composer-root]:before{display:none}[data-slot=collab-page][data-empty] [data-slot=composer-surface]{border-color:var(--semi-color-primary)!important;box-shadow:0 0 20px color-mix(in srgb,var(--semi-color-primary) 12%,transparent),0 0 50px -4px color-mix(in srgb,var(--semi-color-primary) 8%,transparent)!important}[data-slot=collab-messages]{position:absolute;top:0;right:0;bottom:0;left:0;overflow-y:auto;padding:1rem;padding-bottom:calc(var(--composer-measured-height, 62px) + 1rem)}.collab-messages-scroll{display:flex;flex-direction:column;gap:.75rem;max-width:48rem;margin:0 auto}.collab-msg{display:flex}.collab-msg--user{justify-content:flex-end}.collab-msg--conductor,.collab-msg--system{justify-content:flex-start}.collab-bubble{max-width:80%;min-width:min(24rem,100%);padding:.5rem .75rem;border-radius:.75rem;font-size:.8125rem;line-height:1.5}.collab-bubble--user{background:#d3e0fd;color:#000;border-bottom-right-radius:.25rem;min-width:unset;word-break:break-word;white-space:pre-wrap}.collab-bubble--conductor{background:var(--semi-color-fill-0, #f5f5f5);color:var(--semi-color-text-0, #1c1f23);border-bLine truncated

frontends/desktop/dist/assets/CollabPage-DD4zkzQv.js

@@ -1 +0,0 @@
-import{b as r,aj as l}from"./tauri-compat-D_GD_wMe.js";import{H as i,b as N,J as C,L as S,K as M,N as T,O as W,P as v,M as R,Q as E}from"./main-j7e_THPB.js";import{MarkdownPart as w}from"./MarkdownPart-ZJKeOipX.js";import"./index-9FI8Jlf5.js";import"./WindowsTitlebar-Byi-SYR_.js";import"./markdown-preprocess-Cc2i34eF.js";const $=200;function D({message:a}){const n=a.role==="user",e=a.role==="conductor";return l.jsx("div",{className:`collab-msg collab-msg--${a.role}`,"data-slot":"collab-msg",children:l.jsxs("div",{className:`collab-bubble ${n?"collab-bubble--user":e?"collab-bubble--conductor":"collab-bubble--system"}`,children:[a.images&&a.images.length>0&&l.jsx("div",{className:"collab-msg-images",children:a.images.map((c,s)=>l.jsx("img",{src:c.base64||c.path,alt:c.name,className:"collab-msg-img"},s))}),a.files&&a.files.length>0&&l.jsx("div",{className:"collab-msg-files",children:a.files.map((c,s)=>l.jsx("span",{className:"collab-msg-file-chip",children:c.name},s))}),e||a.role==="system"?l.jsx(w,{content:a.msg}):l.jsx("span",{className:"collab-msg-text",children:a.msg})]})})}function P({since:a}){const{t:n}=N();return l.jsx("div",{className:"collab-msg collab-msg--conductor","data-slot":"collab-typing",children:l.jsxs("div",{className:"collab-thinking-bar",children:[l.jsx("span",{className:"collab-thinking-dot"}),l.jsx("span",{className:"collab-thinking-label",children:n("collab.typing")}),l.jsx("span",{className:"collab-thinking-time",children:l.jsx(S,{since:a})})]})})}function B(){const a=i(o=>o.messages),n=i(o=>o.conductorTyping),e=i(o=>o.connectionStatus),{t:c}=N(),{scrollRef:s}=C(),[m,x]=r.useState(1),d=r.useRef(null),p=r.useRef(0);r.useEffect(()=>{(e==="connecting"||a.length===0)&&x(1)},[e,a.length]);const b=$*m,u=Math.max(0,a.length-b),k=a.slice(u),t=u,g=r.useCallback(()=>{const o=s.current;o&&(d.current=o.scrollHeight-o.scrollTop),x(h=>h+1)},[s]);r.useLayoutEffect(()=>{if(d.current==null)return;if(u>=p.current){d.current=null,p.current=u;return}const o=s.current;o&&(o.scrollTop=o.scrollHeight-d.current),d.current=null,p.current=u},[u,s]),r.useEffect(()=>{p.current=u},[u]);const j=[...a].reverse().find(o=>o.role==="user"),y=o=>o>1e12?o:o*1e3,f=r.useRef(Date.now());return j!=null&&j.ts&&(f.current=y(j.ts)),e==="connecting"?l.jsx("div",{className:"collab-messages-area","data-slot":"collab-messages",children:l.jsxs("div",{className:"collab-connecting",children:[l.jsx("span",{className:"collab-connecting-dot"}),l.jsx("span",{children:c("status.connecting")})]})}):a.length===0?l.jsx("div",{className:"collab-messages-area","data-slot":"collab-messages",children:l.jsx("div",{className:"collab-empty",children:l.jsx("p",{children:c("collab.placeholder")})})}):l.jsx("div",{className:"collab-messages-area","data-slot":"collab-messages",ref:s,children:l.jsxs("div",{className:"collab-messages-scroll",children:[t>0&&l.jsxs("button",{type:"button","data-slot":"show-earlier-btn",onClick:g,children:["Show ",t," earlier"]}),k.map((o,h)=>l.jsx(D,{message:o},o.id||u+h)),n&&l.jsx(P,{since:f.current})]})})}function H(){const a=i(t=>t.sendMessage),n=i(t=>t.conductorTyping),e=i(t=>t.connectionStatus),c=i(t=>t.modelConfig),s=i(t=>t.runtimeModel),m=i(t=>t.loadModel),x=i(t=>t.selectModel),d=M(t=>t.defaultModelNo);r.useEffect(()=>{m()},[m]);const p=r.useCallback((t,g)=>{var f,o;const j=(f=g==null?void 0:g.files)==null?void 0:f.map(h=>({name:h.name,path:h.path})),y=(o=g==null?void 0:g.images)==null?void 0:o.map(h=>({name:h.name,path:h.path,base64:h.base64}));a(t,j,y)},[a]),b=r.useCallback(()=>{},[]),u=e!=="ready",k=(c==null?void 0:c.effective)??(c==null?void 0:c.configured)??d;return l.jsx("div",{className:"collab-composer-wrap","data-slot":"collab-composer","data-disabled":u||void 0,children:l.jsx(T,{onSend:p,onStop:b,isGenerating:n,hideStatusStack:!0,modelControl:l.jsx(W,{selectedNo:k,runningNo:s!=null&&s.running?s.effective:null,isRunning:!!(s!=null&&s.running),onSelect:x})})})}const L=[{key:"1",icon:"comment"},{key:"2",icon:"symbol-misc"},{key:"3",icon:"graph"},{key:"4",icon:"edit"}],F=["collab.chipProgress","collab.chipPause","collab.chipSummary"];function I({onChipClick:a}){const{t:n}=N();return l.jsxs("div",{className:"collab-welcome","data-slot":"collab-welcome",children:[l.jsx("h2",{className:"collab-welcome-title",children:n("collab.guideTitle")}),l.jsx("p",{className:"collab-welcome-sub",children:n("collab.guideWhen")}),l.jsx("div",{className:"collab-welcome-steps",children:L.map(e=>l.jsxs("div",{className:"collab-welcome-step",children:[l.jsx("span",{className:"collab-welcome-step-icon",children:l.jsx(v,{name:e.icon,size:"1rem"})}),l.jsxs("span",{className:"collab-welcome-step-text",children:[l.jsx("span",{className:"collab-welcome-step-label",children:n(`collab.guideStep${e.key}t`)}),l.jsx("span",{className:"collab-welcome-step-desc",children:n(`collab.guideStep${e.key}d`)})]})]},e.key))}),l.jsx("div",{className:"collab-welcome-chips",children:F.map(e=>l.jsx("button",{type:"button",className:"collab-welcome-chip",oLine truncated

frontends/desktop/dist/assets/IconFile-C8B3WX2U.js

@@ -1 +0,0 @@
-import{c as t,b as e}from"./tauri-compat-D_GD_wMe.js";function n(a){return e.createElement("svg",Object.assign({viewBox:"0 0 24 24",fill:"none",xmlns:"http://www.w3.org/2000/svg",width:"1em",height:"1em",focusable:!1,"aria-hidden":!0},a),e.createElement("path",{fillRule:"evenodd",clipRule:"evenodd",d:"M12 2a1 1 0 0 0-1-1H6a2 2 0 0 0-2 2v18c0 1.1.9 2 2 2h12a2 2 0 0 0 2-2V10a1 1 0 0 0-1-1h-5a2 2 0 0 1-2-2V2ZM7 8a1 1 0 0 1 1-1h1a1 1 0 0 1 0 2H8a1 1 0 0 1-1-1Zm0 5a1 1 0 0 1 1-1h8a1 1 0 1 1 0 2H8a1 1 0 0 1-1-1Zm1 4a1 1 0 1 0 0 2h8a1 1 0 1 0 0-2H8Zm11.07-9.5H14.5a1 1 0 0 1-1-1V1.93a.8.8 0 0 1 1.37-.56l4.76 4.76a.8.8 0 0 1-.56 1.37Z",fill:"currentColor"}))}const l=t(n,"file");export{l as I};