fix: adapt frontend for legacy Chrome and runtime config

frontend-web/src/core/auth/dashboard-input.ts

@@ -18,6 +18,7 @@
 
 import { requestCrudService } from "@/service/request-axios-service";
 import { readCopTaskDetail } from "@/core/auth/task-deeplink";
+import { readRuntimeEnv, readRuntimeFlag } from "@/env";
 import { fetchTaskDeeplinkConfig } from "@/core/auth/task-deeplink-config";
 
 /** 本页输入 JSON 暂存的 sessionStorage key（拉取一次后复用，避免重复请求）。 */
@@ -89,7 +90,7 @@ export const DEMO_DASHBOARD_INPUT = {
 
 /** 「研判情报报告」接口完整地址：`{VITE_AIPI_CONSUMER_URL}/cop/selectSqReport`。 */
 function sqReportUrl(): string {
-  const value = (import.meta.env as Record<string, unknown>).VITE_AIPI_CONSUMER_URL;
+  const value = readRuntimeEnv("VITE_AIPI_CONSUMER_URL");
   const base = typeof value === "string" ? value.replace(/\/+$/, "") : "";
   return base ? `${base}/cop/selectSqReport` : "";
 }
@@ -140,7 +141,7 @@ export function extractSqReport(body: unknown, taskId: string): unknown | null {
  * 避免开发反复请求样例假数据。真实接口模式（false）下不读不写缓存，**始终拉取真实数据**。
  */
 function inputCacheEnabled(): boolean {
-  return (import.meta.env as Record<string, unknown>).VITE_MOCK_SQ_REPORT === "true";
+  return readRuntimeFlag("VITE_MOCK_SQ_REPORT");
 }
 
 /** 读取暂存的输入 JSON（仅 mock 开发模式生效，真实模式恒返回 null 以强制重新拉取）。 */

frontend-web/src/core/auth/index.ts

@@ -22,6 +22,8 @@ import {
 } from "@/core/auth/scoped-storage";
 
 const AUTH_STORAGE_KEY = "deerflow.auth";
+/** Fired in the current tab because the browser `storage` event only reaches other tabs. */
+export const AUTH_STATE_CHANGED_EVENT = "deerflow:auth-state-changed";
 
 function isBrowser(): boolean {
   return typeof window !== "undefined";
@@ -48,6 +50,7 @@ export function setStoredAuth(auth: LoginByUsernameResponse) {
     return;
   }
   authStorageSet(AUTH_STORAGE_KEY, JSON.stringify(auth));
+  window.dispatchEvent(new Event(AUTH_STATE_CHANGED_EVENT));
 }
 
 export function clearStoredAuth() {
@@ -55,6 +58,7 @@ export function clearStoredAuth() {
     return;
   }
   authStorageRemove(AUTH_STORAGE_KEY);
+  window.dispatchEvent(new Event(AUTH_STATE_CHANGED_EVENT));
 }
 
 /** 与设置 → 个人信息页「用户名」一致：邮箱 @ 前缀，否则 user_id。 */

frontend-web/src/core/auth/task-deeplink.ts

@@ -18,6 +18,7 @@
 import { requestCrudService } from "@/service/request-axios-service";
 import { clearTaskContext, persistTaskContext } from "@/core/auth/task-purpose";
 import { fetchTaskDeeplinkConfig } from "@/core/auth/task-deeplink-config";
+import { readRuntimeEnv, readRuntimeFlag } from "@/env";
 import { listBusinessMappings } from "@/strategy-components/api/business-mapping";
 
 /** xdfx 业务码：深链传入的是「行动id」，需先调 action 接口解析出真正的「任务id」。 */
@@ -73,13 +74,13 @@ export function parseGoPath(goPath: string): ParsedGoPath | null {
 }
 
 function consumerBaseUrl(): string {
-  const value = import.meta.env.VITE_AIPI_CONSUMER_URL;
+  const value = readRuntimeEnv("VITE_AIPI_CONSUMER_URL");
   return typeof value === "string" ? value.replace(/\/+$/, "") : "";
 }
 
 /** cop-task-detail 是否走本地假数据：开关 `VITE_MOCK_COP_TASK_DETAIL=true`（真实接口未就绪时调试用）。 */
 function copTaskDetailMockEnabled(): boolean {
-  return (import.meta.env as Record<string, unknown>).VITE_MOCK_COP_TASK_DETAIL === "true";
+  return readRuntimeFlag("VITE_MOCK_COP_TASK_DETAIL");
 }
 
 /** cop-task-detail 本地假数据（与真实 data 字段同构；mock 开关开启时返回）。 */

frontend-web/src/core/auth/use-live-account.ts

@@ -2,7 +2,11 @@
 
 import { useEffect, useRef, useState } from "react";
 
-import { getAccountDisplayName, getStoredAuth } from "@/core/auth";
+import {
+  AUTH_STATE_CHANGED_EVENT,
+  getAccountDisplayName,
+  getStoredAuth,
+} from "@/core/auth";
 import { isEmbedActive } from "@/core/embed/embed-session";
 
 const AUTH_STORAGE_KEY = "deerflow.auth";
@@ -61,11 +65,13 @@ export function useLiveAccount(): LiveAccount {
     if (!isEmbedActive()) {
       window.addEventListener("storage", onStorage);
     }
+    window.addEventListener(AUTH_STATE_CHANGED_EVENT, refresh);
     window.addEventListener("focus", refresh);
     document.addEventListener("visibilitychange", refresh);
     refresh();
     return () => {
       window.removeEventListener("storage", onStorage);
+      window.removeEventListener(AUTH_STATE_CHANGED_EVENT, refresh);
       window.removeEventListener("focus", refresh);
       document.removeEventListener("visibilitychange", refresh);
     };

frontend-web/src/core/auth/wujie-ticket-login.ts

@@ -5,12 +5,13 @@ import {
   persistExternalLoginParams,
 } from "./external-login";
 import { authStorageSet } from "@/core/auth/scoped-storage";
+import { readRuntimeEnv } from "@/env";
 
-const AUTH_BASE_URL = (import.meta.env.VITE_AUTH_BASE_URL || "").replace(
+const AUTH_BASE_URL = (readRuntimeEnv("VITE_AUTH_BASE_URL") || "").replace(
   /\/$/,
   "",
 );
-const CONSUMER_URL = (import.meta.env.VITE_AIPI_CONSUMER_URL || "").replace(
+const CONSUMER_URL = (readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || "").replace(
   /\/$/,
   "",
 );

frontend-web/src/core/auth/yuser-login.ts

@@ -1,5 +1,6 @@
 import { requestCrudService } from "@/service/request-axios-service";
 import { authStorageGet, authStorageSet } from "@/core/auth/scoped-storage";
+import { readRuntimeEnv } from "@/env";
 import {
   deleteExternalAccessTokenFields,
   normalizeExternalAccessToken,
@@ -9,7 +10,7 @@ import {
   writeStoredExternalAccessToken,
 } from "@/core/auth/external-access-token";
 
-const CONSUMER_URL = import.meta.env.VITE_AIPI_CONSUMER_URL || "";
+const CONSUMER_URL = readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || "";
 
 export const TOOLS_TOKEN_STORAGE_KEY = "tools_token";
 export const EXTERNAL_USER_ID_STORAGE_KEY = "userId";