管理员智能体/技能管理 + 跨标签登录同步 + 上游响应异常重试

- 「设置和更多」新增「智能体管理」「技能管理」入口，与定时任务管理同级；
  独立的 AdminAgentsPage/AdminSkillsPage 复用 AgentCard/SkillRow，
  管理员可查看并编辑/删除所有用户的智能体与技能。
- 后端 /api/agents、/api/skills 增加 ?admin=true 越权列表；agents 端
  放宽 _get_editable_or_raise 让管理员可编辑/删除任意智能体；新增
  list_all/update_any/delete_any（agents）与 list_all（skills）。
- 新增 AuthSyncWatcher：监听 localStorage["deerflow.auth"] 的 storage
  事件，user_id 变化时自动 reload，修复多标签切换登录后老页面点击
  「新对话」偶发 404 的问题。
- LLMErrorHandlingMiddleware 将 bad_response_status_code / JSON
  decode 等上游网关乱码识别为可重试的 upstream 类故障。
- 侧边栏「任务管理」改名为「定时任务」。

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

frontend-web/src/core/agents/api.ts

@@ -38,6 +38,16 @@ export async function listAgents(params: ListAgentsParams = {}): Promise<Agent[]
   return data.agents;
 }
 
+export async function listAllAgentsAdmin(): Promise<Agent[]> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/agents?admin=true`);
+  if (!res.ok) {
+    const err = (await res.json().catch(() => ({}))) as { detail?: string };
+    throw new Error(err.detail ?? `Failed to load agents: ${res.statusText}`);
+  }
+  const data = (await res.json()) as { agents: Agent[] };
+  return data.agents;
+}
+
 export async function getAgent(id: string): Promise<Agent> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/agents/${id}`);
   if (!res.ok) throw new Error(`Agent '${id}' not found`);

frontend-web/src/core/agents/hooks.ts

@@ -11,6 +11,7 @@ import {
   getAgent,
   getAgentSelector,
   listAgents,
+  listAllAgentsAdmin,
   listPrivateAgents,
   reorderFeaturedAgents,
   setAgentFeatured,
@@ -48,6 +49,21 @@ export function useAgents(params: { search?: string; tagIds?: string[] } = {}) {
   return { agents: data ?? [], isLoading, error };
 }
 
+/**
+ * Admin-only listing — returns every agent including unpublished agents owned
+ * by other users and private-square entries. Caller must be ``system_role
+ * === "admin"`` or the backend will 403.
+ */
+export function useAllAgentsAdmin(enabled: boolean) {
+  const { data, isLoading, error } = useQuery({
+    queryKey: ["agents", "admin", "all"],
+    queryFn: () => listAllAgentsAdmin(),
+    enabled,
+    staleTime: 30_000,
+  });
+  return { agents: data ?? [], isLoading, error };
+}
+
 export function useAgent(id: string | null | undefined) {
   const { data, isLoading, error } = useQuery({
     queryKey: ["agents", id],

frontend-web/src/core/auth/sync.tsx

@@ -0,0 +1,47 @@
+"use client";
+
+import { useEffect, useRef } from "react";
+
+import { getStoredAuth } from "@/core/auth";
+
+const AUTH_STORAGE_KEY = "deerflow.auth";
+
+function readUserId(): string | null {
+  return getStoredAuth()?.user_id ?? null;
+}
+
+/**
+ * Mount once at the app root. Watches `localStorage["deerflow.auth"]` for
+ * cross-tab changes — when another tab logs in as a different user, this tab
+ * still holds the previous user's cached state (chat list, thread ids, etc.)
+ * which then collides with the new token and surfaces as a 404 on "新对话".
+ * Reloading the tab is the simplest way to resync React state with the new
+ * identity.
+ */
+export function AuthSyncWatcher() {
+  const lastUserIdRef = useRef<string | null>(readUserId());
+
+  useEffect(() => {
+    function handleStorage(event: StorageEvent) {
+      if (event.key !== null && event.key !== AUTH_STORAGE_KEY) {
+        return;
+      }
+      const nextUserId = readUserId();
+      if (nextUserId === lastUserIdRef.current) {
+        return;
+      }
+      lastUserIdRef.current = nextUserId;
+      if (nextUserId === null) {
+        window.location.replace("#/login");
+        window.location.reload();
+        return;
+      }
+      window.location.reload();
+    }
+
+    window.addEventListener("storage", handleStorage);
+    return () => window.removeEventListener("storage", handleStorage);
+  }, []);
+
+  return null;
+}

frontend-web/src/core/skills/api.ts

@@ -1,7 +1,7 @@
 import { getBackendBaseURL } from "@/core/config";
 import { apiFetch } from "@/core/api";
 
-import type { Skill, SkillDisplayConfig, SkillState } from "./type";
+import type { Skill, SkillDisplayConfig, SkillState } from "./type";
 
 export interface ListSkillsParams {
   search?: string;
@@ -20,6 +20,17 @@ export async function loadSkills(params: ListSkillsParams = {}) {
   return json.skills as Skill[];
 }
 
+export async function loadAllSkillsAdmin() {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/skills?admin=true`,
+  );
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to load skills");
+  }
+  const json = await response.json();
+  return json.skills as Skill[];
+}
+
 export async function getSkill(skillName: string): Promise<Skill> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}`,
@@ -30,7 +41,7 @@ export async function getSkill(skillName: string): Promise<Skill> {
   return response.json() as Promise<Skill>;
 }
 
-export async function enableSkill(skillName: string, enabled: boolean) {
+export async function enableSkill(skillName: string, enabled: boolean) {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/skills/${skillName}`,
     {
@@ -44,63 +55,63 @@ export async function enableSkill(skillName: string, enabled: boolean) {
     },
   );
   return response.json();
-}
-
-export async function setSkillDisplay(
-  skillName: string,
-  display: SkillDisplayConfig | null,
-  sample?: Record<string, unknown> | null,
-): Promise<Skill> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display`,
-    {
-      method: "PUT",
-      headers: {
-        "Content-Type": "application/json",
-      },
-      body: JSON.stringify({ display, sample }),
-    },
-  );
-  if (!response.ok) {
-    throw await parseDetailedError(response, "Failed to update skill display adapter");
-  }
-  return response.json() as Promise<Skill>;
-}
-
-export interface SkillDisplaySampleResponse {
-  skill_name: string;
-  sample: Record<string, unknown>;
-}
-
-export interface PersistedSkillDisplaySampleResponse {
-  skill_name: string;
-  sample: Record<string, unknown> | null;
-}
-
-export async function getPersistedSkillDisplaySample(
-  skillName: string,
-): Promise<PersistedSkillDisplaySampleResponse> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display-sample`,
-  );
-  if (!response.ok) {
-    throw await parseDetailedError(response, "Failed to get persisted skill display sample");
-  }
-  return response.json() as Promise<PersistedSkillDisplaySampleResponse>;
-}
-
-export async function getSkillDisplaySample(
-  skillName: string,
-): Promise<SkillDisplaySampleResponse> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display-sample`,
-    { method: "POST" },
-  );
-  if (!response.ok) {
-    throw await parseDetailedError(response, "Failed to get skill display sample");
-  }
-  return response.json() as Promise<SkillDisplaySampleResponse>;
-}
+}
+
+export async function setSkillDisplay(
+  skillName: string,
+  display: SkillDisplayConfig | null,
+  sample?: Record<string, unknown> | null,
+): Promise<Skill> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display`,
+    {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json",
+      },
+      body: JSON.stringify({ display, sample }),
+    },
+  );
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to update skill display adapter");
+  }
+  return response.json() as Promise<Skill>;
+}
+
+export interface SkillDisplaySampleResponse {
+  skill_name: string;
+  sample: Record<string, unknown>;
+}
+
+export interface PersistedSkillDisplaySampleResponse {
+  skill_name: string;
+  sample: Record<string, unknown> | null;
+}
+
+export async function getPersistedSkillDisplaySample(
+  skillName: string,
+): Promise<PersistedSkillDisplaySampleResponse> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display-sample`,
+  );
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to get persisted skill display sample");
+  }
+  return response.json() as Promise<PersistedSkillDisplaySampleResponse>;
+}
+
+export async function getSkillDisplaySample(
+  skillName: string,
+): Promise<SkillDisplaySampleResponse> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/skills/${encodeURIComponent(skillName)}/display-sample`,
+    { method: "POST" },
+  );
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to get skill display sample");
+  }
+  return response.json() as Promise<SkillDisplaySampleResponse>;
+}
 
 export interface InstallSkillRequest {
   thread_id: string;

frontend-web/src/core/skills/hooks.ts

@@ -14,17 +14,17 @@ import {
   getSkillFiles,
   installSkillUpload,
   reconcileCustomSkills,
-  saveSkillFile,
-  setSkillDetail,
-  setSkillDisplay,
-  setSkillPinned,
+  saveSkillFile,
+  setSkillDetail,
+  setSkillDisplay,
+  setSkillPinned,
   setSkillPublished,
   setSkillState,
   validateSkillUpload,
 } from "./api";
-import type { Skill, SkillState } from "./type";
+import type { Skill, SkillState } from "./type";
 
-import { loadSkills } from ".";
+import { loadAllSkillsAdmin, loadSkills } from ".";
 
 export function useSkills(params: { search?: string; tagIds?: string[] } = {}) {
   const search = params.search ?? "";
@@ -37,6 +37,21 @@ export function useSkills(params: { search?: string; tagIds?: string[] } = {}) {
   return { skills: data ?? [], isLoading, error };
 }
 
+/**
+ * Admin-only listing — every skill in the system (built-in + every user's
+ * custom skills, including unpublished ones owned by other users). Backend
+ * 403s if the caller is not ``system_role === "admin"``.
+ */
+export function useAllSkillsAdmin(enabled: boolean) {
+  const { data, isLoading, error } = useQuery({
+    queryKey: ["skills", "admin", "all"],
+    queryFn: () => loadAllSkillsAdmin(),
+    enabled,
+    staleTime: 30_000,
+  });
+  return { skills: data ?? [], isLoading, error };
+}
+
 export function useSkillContent(skillName: string | null) {
   return useQuery({
     queryKey: ["skill-content", skillName],
@@ -53,7 +68,7 @@ export function useSkill(skillName: string | null) {
   });
 }
 
-export function useSetSkillDetail() {
+export function useSetSkillDetail() {
   const queryClient = useQueryClient();
   return useMutation({
     mutationFn: ({ skillName, detail }: { skillName: string; detail: string }) =>
@@ -63,32 +78,32 @@ export function useSetSkillDetail() {
       void queryClient.invalidateQueries({ queryKey: ["skill", skillName] });
     },
   });
-}
-
-export function useSetSkillDisplay() {
-  const queryClient = useQueryClient();
-  return useMutation({
-    mutationFn: ({
-      skillName,
-      display,
-      sample,
-    }: {
-      skillName: string;
-      display: Parameters<typeof setSkillDisplay>[1];
-      sample?: Parameters<typeof setSkillDisplay>[2];
-    }) => setSkillDisplay(skillName, display, sample),
-    onSuccess: (data, { skillName }) => {
-      queryClient.setQueryData(["skill", skillName], data);
-      queryClient.setQueriesData<Skill[]>({ queryKey: ["skills"] }, (current) =>
-        Array.isArray(current)
-          ? current.map((item) => (item.name === skillName ? { ...item, ...data } : item))
-          : current,
-      );
-      void queryClient.invalidateQueries({ queryKey: ["skills"] });
-      void queryClient.invalidateQueries({ queryKey: ["skill", skillName] });
-    },
-  });
-}
+}
+
+export function useSetSkillDisplay() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({
+      skillName,
+      display,
+      sample,
+    }: {
+      skillName: string;
+      display: Parameters<typeof setSkillDisplay>[1];
+      sample?: Parameters<typeof setSkillDisplay>[2];
+    }) => setSkillDisplay(skillName, display, sample),
+    onSuccess: (data, { skillName }) => {
+      queryClient.setQueryData(["skill", skillName], data);
+      queryClient.setQueriesData<Skill[]>({ queryKey: ["skills"] }, (current) =>
+        Array.isArray(current)
+          ? current.map((item) => (item.name === skillName ? { ...item, ...data } : item))
+          : current,
+      );
+      void queryClient.invalidateQueries({ queryKey: ["skills"] });
+      void queryClient.invalidateQueries({ queryKey: ["skill", skillName] });
+    },
+  });
+}
 
 export function useEnableSkill() {
   const queryClient = useQueryClient();