代码提交

# Conflicts:
#	frontend-web/src/open-canvas/components/ai-writing/AIWritingForm.tsx

.gitignore

@@ -105,5 +105,11 @@ docs/backups
 # uv lockfile (not tracked per project preference)
 offline-backend-20260512/backend/uv.lock
 
+# Local-only scratch directory (not committed)
+0622/
+
+# Python bytecode cache
+__pycache__/
+
 # misc
 .DS_Store

AGENTS.md

@@ -0,0 +1,103 @@
+# AGENTS.md
+
+This file provides guidance to Codex (Codex.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is a customized offline deployment of **DeerFlow** — a LangGraph-based AI super agent platform. The repo contains two sub-projects:
+
+- `offline-backend-20260512/backend/` — Python backend (FastAPI Gateway + LangGraph agent runtime)
+- `frontend-web/` — Vite + React 19 frontend (TypeScript, pnpm)
+
+Managed together via shell scripts in `scripts/`.
+
+## Commands
+
+### Full Application (from repo root)
+
+```bash
+./scripts/start-all.sh    # Start backend + frontend as background daemons
+./scripts/stop-all.sh     # Stop both
+./scripts/restart-all.sh  # Restart both
+./scripts/status.sh       # Check running status
+```
+
+Logs and PID files are written to `.runtime/logs/` and `.runtime/pids/`.
+
+### Backend Only (from `offline-backend-20260512/backend/`)
+
+```bash
+make install    # Install Python dependencies (uv)
+make dev        # Run Gateway API with hot-reload on port 8001
+make gateway    # Run Gateway API without reload
+make test       # Run all tests: PYTHONPATH=. uv run pytest tests/ -v
+make lint       # Lint with ruff
+make format     # Format with ruff
+```
+
+Run a single test file:
+```bash
+PYTHONPATH=. uv run pytest tests/test_<feature>.py -v
+```
+
+### Frontend Only (from `frontend-web/`)
+
+```bash
+pnpm install    # Install dependencies
+pnpm dev        # Start Vite dev server on port 5174
+pnpm build      # Production build
+pnpm typecheck  # TypeScript type checking (tsc --noEmit)
+```
+
+## Service Ports
+
+| Service | Port | Notes |
+|---------|------|-------|
+| Backend (Gateway API) | 8001 | FastAPI + LangGraph runtime |
+| Frontend (Vite) | 5174 | React SPA |
+
+Frontend connects to backend via env vars `VITE_BACKEND_BASE_URL` and `VITE_LANGGRAPH_BASE_URL` (injected by `scripts/start-frontend.sh`).
+
+## Architecture
+
+### Backend
+
+The backend (`offline-backend-20260512/backend/`) is split into two layers:
+
+- **`packages/harness/deerflow/`** — publishable agent framework (`deerflow.*` imports): LangGraph lead agent, middleware chain, sandbox, tools, MCP, memory, models, skills. **Never imports from `app.*`.**
+- **`app/`** — application layer (`app.*` imports): FastAPI Gateway routers, IM channel integrations (Feishu, Slack, Telegram, DingTalk).
+
+The **Lead Agent** (`deerflow/agents/lead_agent/`) is the single LangGraph graph entry point. It wraps a middleware chain (~18 middlewares assembled in strict order) around LLM calls, handling: thread isolation, sandbox lifecycle, uploads, memory, plan mode, vision, subagent delegation, and loop detection.
+
+**Middleware order matters** — middlewares are appended in a fixed sequence; `ClarificationMiddleware` must always be last. See `offline-backend-20260512/backend/AGENTS.md` for the full ordered list.
+
+**Harness → App import firewall** is enforced by `tests/test_harness_boundary.py` (runs in CI).
+
+### Frontend
+
+The frontend (`frontend-web/`) is a React 19 + Vite SPA:
+
+- **Routing**: React Router v7; top-level routes in `src/pages/PageRoutes.tsx`, workspace sub-routes in `src/pages/WorkspaceRoutes.tsx`
+- **Pages**: `ChatPage` (thread chat), `AgentChatPage` (custom agent chat), `AgentsPage`/`NewAgentPage` (agent management), `ScheduledTasksPage`/`ScheduledTaskRunDetailPage` (scheduled tasks), `LightAppManagementPage`/`LightAppListPage`/`LightAppIframeView` (轻应用中心 — register/list/embed mini-apps)
+- **AI 写作·对话版（对话驱动写作台）**: a **parallel new entry** beside the classic AI-writing page (classic page/routes untouched) — route `/page/canvas/ai-writing-chat`, sidebar 「问答管理 → 课题研究(对话版)」. Page `open-canvas/pages/AIWritingChatPage.tsx` reuses the engine (`AIWritingContext` + `useStream` + `AIWritingDraftPanel`); **idle keeps the classic setup layout** (`WritingSetupChat` + collapsible form) and switches to the chat workbench once writing starts; left panel `components/ai-writing-chat/WritingChatPanel.tsx` = **unified chronological feed** (`ChatFlowTimeline.tsx`, chat bubbles anchor-interleaved into the progress timeline so triggered events render below the user's message) + button-only intervention cards (`ChatInterventionCards.tsx`, inline textareas removed) + bottom unified smart composer. Intent resolution: frontend fast path + `POST /api/ai-writing/sessions/{id}/intent` → `deerflow/agents/ai_writing/intent_router.py` (per-pause action whitelist, high-cost confidence gates, payload cleaning); supports QA bypass, clarify follow-ups, control intents, and material-stage auto re-search + pending-intent resume. Tests `tests/test_ai_writing_intent.py`; plan doc `frontend-web/docs/ai-writing-对话驱动写作台-实现方案.md`.
+- **轻应用中心 (Light App Center)**: a sibling of 任务管理 in the sidebar with two pages — 应用管理 (admin registers `window_open` or `iframe` mini-apps with a route-param builder: login params resolved from `localStorage.userInfo`, theme params literal) and 应用列表 (card grid of `window_open` apps, `window.open` launch). `iframe` apps are mounted under a chosen parent menu (XK/PG/TY/综合管理) and **dynamically injected into the sidebar** by `core/page-layout/use-sidebar-menu.ts` (`useSidebarMenuItems`), opening in the `LightAppIframeView` host. Client + React Query hooks in `strategy-components/api/light-apps.ts`; URL builder/constants in `strategy-components/lib/light-app.ts`. Backend: `/api/light-apps` (global/shared, admin-gated writes).
+- **菜单管理 (Menu Management, admin-only)**: an **overlay** over the static sidebar menu — `MenuManagementPage` (`pages/MenuManagementPage.tsx`, route `/page/strategy/admin/menu-management`, opened from the admin-only 「菜单管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`). Admins rename / 停用·启用 / reorder (↑↓ or @dnd-kit drag) / re-parent (horizontal drag **or** the edit dialog's 「移动到」parent selector) any node across 一级/二级/三级, **including injected iframe light-app nodes** (`light-app-<appId>`). The static tree (`core/page-layout/sidebar-menu.ts`) stays the source of icons/routes; only per-node deltas (`label`/`disabled`/`parentId`/`sortOrder`) persist to the backend. Merge logic in `core/page-layout/menu-overrides.ts` (`applyMenuOverrides`, applied in `use-sidebar-menu.ts` after light-app injection, before role filter; disabling a node hides its whole subtree) — strict **3-level cap** (`wouldExceedDepth`). Client `strategy-components/api/menu-overrides.ts`. Backend: `/api/menu-overrides` (global/shared; open read, admin atomic replace-all).
+- **敏感词管理 (Sensitive Word Management)**: configures the **展示层脱敏映射** (原始词 → 替换词). **Gated on the username `lqq`** (not the admin role) — `getAccountDisplayName().toLowerCase() === "lqq"` (username = email `@` prefix, else `user_id`, same as the profile page); the dropdown entry, the route guard, and the page-level guard all use this check. `src/lib/desensitize.ts` ships a frozen seed map `SEED_DESENSITIZE_MAP` (the deployment seed) plus a live mutable `DESENSITIZE_MAP` (initialized from the seed so `desensitize()` works before any fetch). `DesensitizeWordsLoader` (mounted in `App.tsx` `AppProviders`) fetches `/api/sensitive-words` on startup and, if non-empty, calls `replaceDesensitizeMap(...)` to make the backend config the source of truth (empty/failed → keep seed). Page `SensitiveWordsPage.tsx` (route `/page/strategy/admin/sensitive-words`, opened from the 「敏感词管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`, present in **both** full + collapsed sidebar modes) lists/adds/edits/启停/deletes words and saves the **whole set atomically** (replace-all); a 「导入种子词」 button merges any missing `SEED_DESENSITIZE_MAP` entries into the editor. Client + hooks in `strategy-components/api/sensitive-words.ts` (`wordsToMap` folds enabled rows into the runtime map). Backend: `/api/sensitive-words` (global/shared; open read, write allowed for admin **or** the `lqq` account), mirroring 菜单管理's store shape. **侧边栏 + 导航栏 menu labels are desensitized** at the data source: `useSidebarMenuItems`/`useActiveThirdLevel` (`core/page-layout/use-sidebar-menu.ts`) map every node's `label` through a desensitizer built **directly from the `/api/sensitive-words` query** (`makeDesensitizer(wordsToMap(words))`, falling back to the global seed `desensitize` while empty) — this sidesteps the `replaceDesensitizeMap` effect-timing race. Only `label` is rewritten; `path`/`id`/`icon` are untouched so routing/highlight are unaffected. All nav surfaces (`page-sidebar.tsx`, `page-sidebar-dark.tsx`, `page-sidebar-v1.tsx`, `strategy-components/Header.tsx`, `PageRoutes.tsx`) consume this hook and are covered; `MenuManagementPage` uses the raw tree so admins still edit real labels.
+- **技能地址管理 (Skill Address Management, admin-only)**: 扫描运行中的技能（`skills/{public,custom}` 下所有 `.md`/`.py`）里的 **http(s) URL 与 IP/IP:端口**，按唯一地址聚合全部出现位置（跨 .md/.py），支持**批量替换**（如把 UAT 地址一次性改成生产）。主体抽成可复用组件 `SkillAddressesPanel`（`pages/SkillAddressesPage.tsx` 导出，默认导出 `SkillAddressesPage` 仍保留旧路由 `/page/strategy/admin/skill-addresses` 作直链回退），**作为「技能地址管理」标签页嵌入管理员「技能管理」页 `pages/AdminSkillsPage.tsx`**（该页加 Tabs：「技能列表」+「技能地址管理」；入口在「设置和更多」下拉的「技能管理」`workspace-nav-menu.tsx` → `/page/workspace/admin/skills`，不再单列于 `components/page-sidebar.tsx` 左下角设置下拉）：打开自动扫描并带**进度条**（扫描逐技能 / 应用逐文件 X/N，应对 150+ 技能），URL/IP 类型过滤 + 搜索 + 「片段批量套用」（如所有 `uat.4.cn` → `prod.4.cn`）、每地址「替换为」输入框（可展开看 `file:line` 片段）、内联**预览**、**应用**、**多关键词检索**（空格分隔全部命中），以及**修改记录**面板——每次应用生成一条记录（显示时间/改了哪些地址 from→to/文件数/处数），可**针对单次记录回退**（二次确认）。client + NDJSON 流式解析在 `strategy-components/api/skill-addresses.ts`。后端 `/api/skill-addresses`（**仅管理员**）：所有文件 IO 走 `asyncio.to_thread` 不阻塞事件循环；`GET /scan`(+`/scan/stream`)、`POST /preview`、`POST /apply`(+`/apply/stream`)、`GET /backups`、`POST /rollback/{id}`；**子串安全替换**（基于 token span，不会误伤子串）、`expected_total` 乐观锁（409）、写前自动磁盘备份到 `{skills_root}/.address-edits/`（同时写一份 `{id}.manifest.json` 记录本次替换明细，供修改记录展示）、应用后刷新技能系统提示缓存。纯引擎 `deerflow/skills/address_scan.py`，router `app/gateway/routers/skill_addresses.py`，tests `tests/test_skill_addresses.py`。范围仅运行中技能，不动 `deploy/minimal/skills/`。
+- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三情分析, `TaskActionsPanel` keeps only the non-jump 清除记录, and `TaskPurposePanel` dropped its 3q详情 button (now configurable) **and defaults the 目的树 table to collapsed** (chevron toggle). Helpers `core/auth/task-buttons.ts` (`TaskButton`, `defaultTaskButtons`, `resolveTaskButtons`, `buttonsForBusiness`, `runTaskButton`), client+hooks `strategy-components/api/task-buttons.ts`. Backend: `/api/task-buttons` (global/shared; open read, admin replace-all), store `deerflow.persistence.task_buttons` (table `task_buttons`, auto-created by `create_all`), wired `app.state.task_button_store`. Tests: `tests/test_task_buttons.py`.
+- **State**: TanStack Query for server state, context providers (`SubtasksProvider`, `ArtifactsProvider`, `PromptInputProvider`) scoped to `WorkspaceRoutes`
+- **LLM streaming**: `@langchain/langgraph-sdk` streams messages from the backend via SSE
+- **UI**: Radix UI primitives + TailwindCSS v4 + shadcn-style components in `src/components/ui/`
+- **Shims**: `src/shims/` provides `next/link` and `next/navigation` polyfills (original code was Next.js)
+- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). **xdfx additionally partitions its chat records by 行动id (action_id), NOT by task_id**: `resolveTaskDeeplinkTarget` sets `partitionByAction:true` + keeps the raw action_id as `TaskContext.actionId`, so new threads are tagged `metadata.{taskId,actionId}` (taskId kept only to preserve the backend「任务深链对话全局共享」semantics, which keys off `metadata.taskId`) and the conversation list filters by `actionId` (+`agent_id`) — different actions of the same task get separate lists. xdfx's first-question opening text also appends `行动id（action_id）为…` (see `buildOpeningText` / `taskThreadMetadata`). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId, actionId?)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations staLine truncated
+- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+
+### Configuration
+
+Backend config lives in `offline-backend-20260512/backend/config.yaml`. Values starting with `$` resolve as environment variables (e.g., `$OPENAI_API_KEY`). MCP servers and skills are configured in `extensions_config.json` in the same directory.
+
+## Detailed Backend Reference
+
+The backend has its own comprehensive documentation at:
+- `offline-backend-20260512/backend/AGENTS.md` — architecture, middleware chain, all API routes, config schema, sandbox/memory/subagent systems
+- `offline-backend-20260512/backend/README.md` — setup guide, technology stack

CLAUDE.md

@@ -79,16 +79,23 @@ The frontend (`frontend-web/`) is a React 19 + Vite SPA:
 
 - **Routing**: React Router v7; top-level routes in `src/pages/PageRoutes.tsx`, workspace sub-routes in `src/pages/WorkspaceRoutes.tsx`
 - **Pages**: `ChatPage` (thread chat), `AgentChatPage` (custom agent chat), `AgentsPage`/`NewAgentPage` (agent management), `ScheduledTasksPage`/`ScheduledTaskRunDetailPage` (scheduled tasks), `LightAppManagementPage`/`LightAppListPage`/`LightAppIframeView` (轻应用中心 — register/list/embed mini-apps)
+- **定时任务「JSON → HTML 模板填充」(模板数据转换器)**: a third scheduled-task execution mode. In the create/edit dialog (`ScheduledTasksPage.tsx`), selecting the built-in agent **「模板数据转换器」** (`execution_agent_name === "template-json-builder"`, `TEMPLATE_BUILDER_AGENT_ID`) reveals a 「HTML模板」 select (`useHtmlTemplates` → `GET /api/scheduled-tasks/html-templates`) + a **.json 上传** button (reads the file's text into the prompt box) and **hides** the 必须生成 HTML/Markdown switches (this mode always outputs HTML). The chosen template persists as `execution_context.template_config.template_id` (`TemplateFillConfig` in `core/scheduled-tasks/types.ts`). At run time the backend converts the source JSON (the task prompt) into that template's `DATA` structure, validates (retry-on-fail), fills the template, and stores an HTML page previewable via the existing run-detail HTML preview. The source can be **pure JSON, plain text, or text-with-embedded-JSON** — the backend pre-extracts any embedded JSON and the agent's `SOUL.md` maps it (or the plain text's semantics) to the template's schema skeleton. **Chat-page debug entry (only this agent's `AgentChatPage`)**: when `agent_id === "template-json-builder"`, the chat header shows a 「页面模板」 select + a 「渲染预览」 button — after a normal Q&A run, the button takes the **latest AI reply**, POSTs it to `POST /api/scheduled-tasks/template-fill/render` (`renderTemplateFill`), and pops a dialog rendering the filled HTML in a `sandbox="allow-scripts"` iframe plus the structure-validation status/errors/gaps — for debugging the agent's conversion effect without creating a scheduled task. Gated strictly on the agent id, so other agents' chat pages are untouched. See the backend CLAUDE.md「Template-fill mode」for the engine (`deerflow/runtime/scheduler/template_fill.py`), agent seed, dispatch, and the render API.
+- **AI 写作·对话版（对话驱动写作台）**: a **parallel new entry** beside the classic AI-writing page (classic page/routes untouched) — route `/page/canvas/ai-writing-chat` (`OpenCanvasRoutes.tsx`), sidebar 「问答管理 → 课题研究(对话版)」. Page `open-canvas/pages/AIWritingChatPage.tsx` fully **reuses the engine** (`AIWritingContext` state machine + LangGraph `useStream`, `AIWritingHistoryProvider`, right-side `AIWritingDraftPanel`) but replaces the presentation: left = `components/ai-writing-chat/WritingChatPanel.tsx` (timeline + **button-only intervention cards** `ChatInterventionCards.tsx` — the five pause cards copied from `InterventionCard.tsx` with all inline textareas removed, confirm/action buttons kept — plus a bottom **unified smart composer**). Free text goes through two-level intent resolution (`open-canvas/api/ai-writing-intent.ts`): deterministic short-phrase fast path (确认/继续/重新搜索/重写大纲…; high-cost actions never fast-pathed) then `POST /api/ai-writing/sessions/{id}/intent` — the backend reads the graph checkpoint (authoritative pause point from the pending interrupt) and routes via `deerflow/agents/ai_writing/intent_router.py` (LLM + strict per-pause action whitelist aligned to the graph's real resume actions, confidence gates: finalize/force_finalize/覆盖式 re_search need ≥0.85 else clarify, payload key-whitelist cleaning). Results map to `submitIntervention`/control (暂停/继续/后台挂起)/QA bypass (`answer` rendered as a chat bubble, never touches graph state)/clarify (amber follow-up bubble with multi-turn context). **Two-state layout**: idle (未开始写作) renders the **classic setup experience unchanged** — `WritingSetupChat` + collapsible `AIWritingPanel` form under `WritingFormProvider` (same as `AIWritingPage`'s idle branch); once writing starts (or history view opens) it switches to the chat workbench. **Unified chronological feed** (`ChatFlowTimeline.tsx`): intent-layer chat bubbles are interleaved INTO the progress-event timeline by anchor (= `progressEvents.length` at message creation), so events triggered by a user message render **below** it (Google-AI-Studio-style single stream, not timeline-above/chat-below); composer-driven interventions suppress the duplicate 「我的要求」card (`suppressedRequirementIndices`). **素材不足自动续跑** only at `material_confirm` (the only pause the graph supports re-search from): needResearch caches the payload as a pending intent, submits `re_search + userQuery`, and auto-submits the pending intent when the new material-confirm pause arrives (cancellable pill). Stage chips + per-stage placeholder + 「当前交互对象」status badge. Backend tests `tests/test_ai_writing_intent.py`. Plan doc: `frontend-web/docs/ai-writing-对话驱动写作台-实现方案.md`.
 - **轻应用中心 (Light App Center)**: a sibling of 任务管理 in the sidebar with two pages — 应用管理 (admin registers `window_open` or `iframe` mini-apps with a route-param builder: login params resolved from `localStorage.userInfo`, theme params literal) and 应用列表 (card grid of `window_open` apps, `window.open` launch). `iframe` apps are mounted under a chosen parent menu (XK/PG/TY/综合管理) and **dynamically injected into the sidebar** by `core/page-layout/use-sidebar-menu.ts` (`useSidebarMenuItems`), opening in the `LightAppIframeView` host. Client + React Query hooks in `strategy-components/api/light-apps.ts`; URL builder/constants in `strategy-components/lib/light-app.ts`. Backend: `/api/light-apps` (global/shared, admin-gated writes).
 - **菜单管理 (Menu Management, admin-only)**: an **overlay** over the static sidebar menu — `MenuManagementPage` (`pages/MenuManagementPage.tsx`, route `/page/strategy/admin/menu-management`, opened from the admin-only 「菜单管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`). Admins rename / 停用·启用 / reorder (↑↓ or @dnd-kit drag) / re-parent (horizontal drag **or** the edit dialog's 「移动到」parent selector) any node across 一级/二级/三级, **including injected iframe light-app nodes** (`light-app-<appId>`). The static tree (`core/page-layout/sidebar-menu.ts`) stays the source of icons/routes; only per-node deltas (`label`/`disabled`/`parentId`/`sortOrder`) persist to the backend. Merge logic in `core/page-layout/menu-overrides.ts` (`applyMenuOverrides`, applied in `use-sidebar-menu.ts` after light-app injection, before role filter; disabling a node hides its whole subtree) — strict **3-level cap** (`wouldExceedDepth`). Client `strategy-components/api/menu-overrides.ts`. Backend: `/api/menu-overrides` (global/shared; open read, admin atomic replace-all).
+- **白名单管理 (Login Whitelist, admin-only)**: gates **who may log in**, run as a **blocklist (黑名单模式)**. Two pieces: a global master switch (`system_settings.json → login_whitelist.enabled`, surfaced by **admin-only** `GET|PUT /api/system-settings/login-whitelist`) + a per-user **放行** flag (`users.approved` column, migration `20260625_02`). Users **self-register** as usual and **every new account defaults to `approved=True`** — so a user who has never logged into this system before is allowed straight through; the switch only blocks users an admin has explicitly **取消放行** (`approved=False`). (`create_user`/`User`/`UserRow` all default `approved=True`; admins are always approved; existing rows are backfilled `True`.) Login interception is the single helper `enforce_user_approved(user)` in `app/gateway/routers/auth.py`, called in all three login endpoints (`/login/{local,username,token}`) **after** the account is resolved/created and **before** the JWT is issued: switch off → everyone passes; `system_role=="admin"` → always passes (anti-lockout); else `approved=False` (admin-revoked) → 403 `{code:"PENDING_APPROVAL"}` (the frontend's `extractErrorMessage` surfaces the message and login throws before writing any auth state, so no half-login). Admin approves on `pages/LoginWhitelistPage.tsx` (route `/page/strategy/admin/login-whitelist`, entry「白名单管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both sidebar modes): a top master-switch + a list of all registered users (`GET /api/v1/auth/users`, now carrying `approved`) with a per-row 放行 Switch (`PUT /api/v1/auth/users/{id}/approval`, admin-only; revoking only blocks the **next** login — `token_version` is left untouched, existing sessions are not force-killed). Client/hooks: switch in `strategy-components/api/login-whitelist.ts`, user list + approval in `core/auth/{api,hooks}.ts` (`useSetUserApproval`). Backend tests: `tests/test_login_approval.py`. **账号级「登录口令」(per-account password — 临时开通)**: the same page also lets an admin assign one specific account an individual **plaintext** password (`users.login_password` column, migration `20260625_04`, nullable; auto-added on startup by `_ensure_orm_columns_sync`). Once set, **that account's** username login (`POST /api/v1/auth/login/username`) **requires** `?password=` to exactly match it and that personal password **takes precedence over** the global shared-password gate (`username_login.require_password`); accounts without one keep today's shared-gate / passwordless behavior. The user then logs in via the **existing** frontend URL `#/login/<用户名>?password=xxxx` (LoginPage already forwards `?password=`; `<用户名>` = the account's email `@`-prefix). **Plaintext is intentional** — the password rides in the URL query anyway, so storing it readably lets the admin re-copy the full login link from the page; it is exposed only on the **admin-only** `GET /api/v1/auth/users` (`UserListItem.login_password`) and the new admin-only `PUT /api/v1/auth/users/{id}/login-password` (set non-empty / clear with null·empty; doesn't touch `token_version`). The whitelist page renders a per-user 「登录口令」 column with a set/修改 editor + a live 「复制登录链接」 button (`useSetUserLoginPassword` in `core/auth/hooks.ts`, `setUserLoginPassword` in `core/auth/api.ts`). Backend gate helper `_lookup_user_by_username` (lookup-only, no auto-register) in `routers/auth.py`; tests `tests/test_login_personal_password.py`.
 - **敏感词管理 (Sensitive Word Management)**: configures the **展示层脱敏映射** (原始词 → 替换词). **Gated on the username `lqq`** (not the admin role) — `getAccountDisplayName().toLowerCase() === "lqq"` (username = email `@` prefix, else `user_id`, same as the profile page); the dropdown entry, the route guard, and the page-level guard all use this check. `src/lib/desensitize.ts` ships a frozen seed map `SEED_DESENSITIZE_MAP` (the deployment seed) plus a live mutable `DESENSITIZE_MAP` (initialized from the seed so `desensitize()` works before any fetch). `DesensitizeWordsLoader` (mounted in `App.tsx` `AppProviders`) fetches `/api/sensitive-words` on startup and, if non-empty, calls `replaceDesensitizeMap(...)` to make the backend config the source of truth (empty/failed → keep seed). Page `SensitiveWordsPage.tsx` (route `/page/strategy/admin/sensitive-words`, opened from the 「敏感词管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`, present in **both** full + collapsed sidebar modes) lists/adds/edits/启停/deletes words and saves the **whole set atomically** (replace-all); a 「导入种子词」 button merges any missing `SEED_DESENSITIZE_MAP` entries into the editor. Client + hooks in `strategy-components/api/sensitive-words.ts` (`wordsToMap` folds enabled rows into the runtime map). Backend: `/api/sensitive-words` (global/shared; open read, write allowed for admin **or** the `lqq` account), mirroring 菜单管理's store shape. **侧边栏 + 导航栏 menu labels are desensitized** at the data source: `useSidebarMenuItems`/`useActiveThirdLevel` (`core/page-layout/use-sidebar-menu.ts`) map every node's `label` through a desensitizer built **directly from the `/api/sensitive-words` query** (`makeDesensitizer(wordsToMap(words))`, falling back to the global seed `desensitize` while empty) — this sidesteps the `replaceDesensitizeMap` effect-timing race. Only `label` is rewritten; `path`/`id`/`icon` are untouched so routing/highlight are unaffected. All nav surfaces (`page-sidebar.tsx`, `page-sidebar-dark.tsx`, `page-sidebar-v1.tsx`, `strategy-components/Header.tsx`, `PageRoutes.tsx`) consume this hook and are covered; `MenuManagementPage` uses the raw tree so admins still edit real labels.
-- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三情分析, `TaskActionsPanel` keeps only the non-jump 清除记录, and `TaskPurposePanel` dropped its 3q详情 button (now configurable) **and defaults the 目的树 table to collapsed** (chevron toggle). Helpers `core/auth/task-buttons.ts` (`TaskButton`, `defaultTaskButtons`, `resolveTaskButtons`, `buttonsForBusiness`, `runTaskButton`), client+hooks `strategy-components/api/task-buttons.ts`. Backend: `/api/task-buttons` (global/shared; open read, admin replace-all), store `deerflow.persistence.task_buttons` (table `task_buttons`, auto-created by `create_all`), wired `app.state.task_button_store`. Tests: `tests/test_task_buttons.py`.
+- **技能地址管理 (Skill Address Management, admin-only)**: 扫描运行中的技能（`skills/{public,custom}` 下所有 `.md`/`.py`）里的 **http(s) URL 与 IP/IP:端口**，按唯一地址聚合全部出现位置（跨 .md/.py），支持**批量替换**（如把 UAT 地址一次性改成生产）。主体抽成可复用组件 `SkillAddressesPanel`（`pages/SkillAddressesPage.tsx` 导出，默认导出 `SkillAddressesPage` 仍保留旧路由 `/page/strategy/admin/skill-addresses` 作直链回退），**作为「技能地址管理」标签页嵌入管理员「技能管理」页 `pages/AdminSkillsPage.tsx`**（该页加 Tabs：「技能列表」+「技能地址管理」；入口在「设置和更多」下拉的「技能管理」`workspace-nav-menu.tsx` → `/page/workspace/admin/skills`，不再单列于 `components/page-sidebar.tsx` 左下角设置下拉）：打开自动扫描并带**进度条**（扫描逐技能 / 应用逐文件 X/N，应对 150+ 技能），URL/IP 类型过滤 + 搜索 + 「片段批量套用」（如所有 `uat.4.cn` → `prod.4.cn`）、每地址「替换为」输入框（可展开看 `file:line` 片段）、内联**预览**、**应用**、**多关键词检索**（空格分隔全部命中），以及**修改记录**面板——每次应用生成一条记录（显示时间/改了哪些地址 from→to/文件数/处数），可**针对单次记录回退**（二次确认）。client + NDJSON 流式解析在 `strategy-components/api/skill-addresses.ts`。后端 `/api/skill-addresses`（**仅管理员**）：所有文件 IO 走 `asyncio.to_thread` 不阻塞事件循环；`GET /scan`(+`/scan/stream`)、`POST /preview`、`POST /apply`(+`/apply/stream`)、`GET /backups`、`POST /rollback/{id}`；**子串安全替换**（基于 token span，不会误伤子串）、`expected_total` 乐观锁（409）、写前自动磁盘备份到 `{skills_root}/.address-edits/`（同时写一份 `{id}.manifest.json` 记录本次替换明细，供修改记录展示）、应用后刷新技能系统提示缓存。纯引擎 `deerflow/skills/address_scan.py`，router `app/gateway/routers/skill_addresses.py`，tests `tests/test_skill_addresses.py`。范围仅运行中技能，不动 `deploy/minimal/skills/`。
+- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, openMode, loginParams, appendAuth, authTokenParam, authNameParam, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`url` buttons support two independent, coexisting login-append mechanisms**: (1) **`loginParams` (追加登录参数, like 应用管理/Light App Center)** — a list of `{key, source, customValue}` resolved at click time: `runTaskButton` reads `userInfo` (via `readUserInfo` from `strategy-components/lib/light-app`, embed-isolated through `authStorage`) and appends `?{key}={value}` for each (`source` = a userInfo field such as `accessToken`/`yUserId`, or `other` → literal `customValue`); empty list = nothing appended. Reuses `LOGIN_SOURCE_OPTIONS` from light-app; stored as JSON column `task_buttons.login_params_json` (`PortableJSON`, migration `20260625_01`). (2) **`appendAuth` (追加登录态)** — appends `?{authTokenParam}={token1}&{authNameParam}={username}` (default param names `token`/`username`) so the跳转目标外部系统 can identify the current user — e.g. `…/action/sentiment?token=<JWT>&username=lizhaoxing`. **Gated on token login**: `token1` = the `?authToken=` used by token-exchange login; `username` = the raw login name the backend resolved from `getTokenInfo`. Both are stashed at login by `persistLoginCredentials` into `login.token1`/`login.username` (`core/auth/login-credentials.ts`, scoped via [[scoped-storage]] so嵌入/独立会话隔离 + 随独立会话迁移). Only token login writes them → a non-token-login session has no `token1`, so `runTaskButton` silently skips the auth append (the jump still works, just without those two params). The frontend reads `username` straight from the new `UsernameLoginResponse.username` field (the stored email local-part is lossy — lowercased/normalized — so not used), **not** by decoding the JWT. Stored as columns `task_buttons.{append_auth, auth_token_param, auth_name_param}` (migration `20260625_02`). The admin page renders both editors for `url` buttons (loginParams 虚线框 + 追加登录态 switch). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/上一步/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. **Bottom 快捷跳转 bar groups by prev/next**: `TaskJumpBar` renders only「上一步/下一步」-type buttons in the bottom bar — a `prev` group (id 含 `prev` 或文案「上一步」, 描边次要样式 + ←图标) rendered **左侧**, then a `next` group (id 含 `next` 或文案「下一步」, 实心主色) on the **右侧** (container `justify-end`); everything else goes to the right-edge floating menu. The default 上一步 button (`rwfx-prev`, `url`, target = `DASHBOARD_AGENT_ROUTE` `/page/strategy/dashboard-agent`, `appendTaskId` + `idParam=taskId` → `?taskId=任务id`, `openMode=self`) 默认指向**应用内**「大屏绘制」页，在 **both** 单智能体 (`TaskFxWorkspace`) 与 多智能体会商 (`RoundtablePlanningPage` 深链 rwfx-A) 都显示（共用 `TaskJumpBar`）。**`runTaskButton` 的 `url` 类型支持应用内路由**：target 以单个 `/` 开头时按内部路由处理——`self` 走 react-router 同窗导航（不刷新），`blank` 拼成当前源的 hash 路由新标签打开；外链行为不变。 The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三Line truncated
+- **实时并发监控 (Concurrency / System-Pressure Monitor, admin-only)**: a live panel mounted at the **top of the admin 排行榜 page** (`components/workspace/admin/concurrency-monitor.tsx` `ConcurrencyMonitorPanel`, rendered in `pages/AdminUserLeaderboardPage.tsx`) showing **当前并发的大模型调用数 + 列表（用户/智能体/类型/已运行时长）**, each row with a 「停止」button (and a 「全部停止」) that **truly aborts** that run's in-flight model stream via `RunManager.cancel` (`POST /api/admin/active-runs/{run_id}/cancel`) — to relieve pressure when 使用人数过多. Two line charts (minute/hour toggle): **并发量折线图** (peak/avg, `GET /api/admin/active-runs/concurrency`, fed by a lightweight background sampler into `concurrency_samples`) and **大模型出字速度折线图** (tokens/sec, `GET /api/admin/active-runs/token-speed`, aggregated from `llm_call_metrics`) so a dip pinpoints where the bottleneck is. A **「后台采样」Switch** (`system_settings.json → concurrency_monitor.enabled`, **default off / opt-in**, `GET|PUT /api/admin/active-runs/settings`) turns the background sampling on/off **at runtime, no restart** (the live concurrency count + 「停止」 work even while sampling is off — only the 并发量 history chart needs it on); everything is designed to **never impact production** (one tiny INSERT/15s, retention-purged, best-effort). Client/hooks: `core/admin/active-runs.ts` + `core/admin/hooks.ts` (`useActiveRuns`/`useConcurrencySeries`/`useTokenSpeedSeries`/`useCancel*`/`useMonitorSettings`). See the backend CLAUDE.md「Admin Concurrency Monitor」.
+- **会话冲突 409 中文化**: when a user submits a new question while the previous turn is still streaming, the backend's `RunManager.create_or_reject` rejects with HTTP 409 (`services.py` now returns a **Chinese** detail「当前对话还在生成回答…」). `core/threads/hooks.ts` `onError` detects the conflict (`isActiveRunConflictError`: 409 / "already has an active run" / the Chinese text) and shows a friendly `toast.info` instead of a raw error.
 - **State**: TanStack Query for server state, context providers (`SubtasksProvider`, `ArtifactsProvider`, `PromptInputProvider`) scoped to `WorkspaceRoutes`
 - **LLM streaming**: `@langchain/langgraph-sdk` streams messages from the backend via SSE
 - **UI**: Radix UI primitives + TailwindCSS v4 + shadcn-style components in `src/components/ui/`
 - **Shims**: `src/shims/` provides `next/link` and `next/navigation` polyfills (original code was Next.js)
-- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations stay isolated even though they share one taskId) + 新建对话; the `…/chats` index (`TaskFxIndexResolver`) opens the latest task thread or 新建. The right `:thread_id` host differs by business: **rwfx** → `TaskFxChat` (`AgentChatPage taskGate`) = full workspace (non-`lite`): 目的树闸门 panel + 清除记录 (placed under 新建对话); **xdfx** → also `TaskFxChat` (same 目的树闸门 query+display, same `purpose_detail_url`) but workspace passed `lite`; **3qfx** → `TaskBindChat` (`AgentChatPage taskBind`, `lite`) = 1:N list only, no gate, and 新建对话 **auto-sends** the task opening text (`taskAutoSendText`; gate Line truncated
-- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). **xdfx additionally partitions its chat records by 行动id (action_id), NOT by task_id**: `resolveTaskDeeplinkTarget` sets `partitionByAction:true` + keeps the raw action_id as `TaskContext.actionId`, so new threads are tagged `metadata.{taskId,actionId}` (taskId kept only to preserve the backend「任务深链对话全局共享」semantics, which keys off `metadata.taskId`) and the conversation list filters by `actionId` (+`agent_id`) — different actions of the same task get separate lists. xdfx's first-question opening text also appends `行动id（action_id）为…` (see `buildOpeningText` / `taskThreadMetadata`). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId, actionId?)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations staLine truncated
+- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(2.5) **`?hideChrome=1`** — **仅**去全局 chrome（Header 导航栏 + PageSidebar 侧边栏），**不**强制主题、**不**隔离鉴权（区别于 `embed`：只想要一个干净全屏页面，如「大屏绘制」`/page/strategy/dashboard-agent?taskId=…&hideChrome=1`）。新增 `EmbedSession.hideChrome` 字段 + `readHideChromeParam()` + `isChromeHidden()`（取 `embed || hideChrome` 之并），与 `hideJump` 完全对称；`PageRoutes.tsx` 的 `PageLayout` 把 `chromeHidden`（`isChromeHidden() || readHideChromeParam(location.search)==="on"`）并入 `pageSidebarAllowed`，且其**优先级高于** dashboard-agent 路由原本的强制全局 chrome（`forceChromeForDashboardAgent`）。`hideChrome=0` 可显式关闭。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+- **操作日志（Y-Log）上报** — 用户的关键操作（登录登出/查询/查看/增删改/启停/导入导出/问答等）成功后，**前端直连**外部接口 `POST {write_url}`（默认 `https://ch1.b.uat.4.cn/api/y-log/write`）记一条审计日志。核心模块 `src/core/log/`：`y-log.ts`（`writeYLog(params)` + `OptType` 枚举 0/1/3..12；**异步即发即忘、永不 await、永不抛错、失败静默**，自动把完整 url 转相对路径去 ip/host、对象入参/返回自动 `JSON.stringify` + 50k 裁剪、`optResult` 恒 0 只报成功），`y-log-config.ts`（从公开只读 `GET /api/public/config/y-log` 拉 `{enabled, writeUrl}`，模块级缓存 + 去重 + 默认兜底；`App.tsx` `AppProviders` 启动预热 `fetchYLogConfig()`），`y-log-token.ts`（token1 = token 登录的 `?authToken=`，经 [[scoped-storage]] 的 `authStorage*` 存取，嵌入态自动隔离）。**双门控**：仅当①存在 token1（即用 token 登录，`LoginPage` 成功后 `persistYLogToken(authToken)`，登出 `account-settings-page.tsx` 先报后清 token1）且②配置 `enabled && writeUrl` 才上报；否则一律不发。`optDetail` 统一「CM助手-全量-…」（**禁内部框架名**）。埋点**广覆盖**各 API client 的成功路径——原则是「一个用户操作（查看/查询/新增/编辑/删除/启停/导入导出）= 一条日志」，每个 API client 的**单条详情 GET（查看→view 4）/ 列表查询 GET（search 3）/ 新增 POST（create 9）/ 改 PUT·PATCH（edit 5）/ 删 DELETE（delete 6）/ 启停（enabled 11 / disabled 10）/ 导入导出（import 7 / export 8）**都各落一条，仅跳过高频 typeahead/状态轮询/纯 bootstrap config 读。覆盖文件：`strategy-components/api/{sensitive-words,menu-overrides,task-buttons,skill-addresses,light-apps,business-mapping}.ts`、`roundtable-planning/api/{drafts,task-drafts,roundtable-jobs,recommend,chains,multi-agent,dashboard-sessions}.ts`、`core/{agents,scheduled-tasks,knowledge,positions,tags,studio,system-settings,memory,mcp,models,custom-prompts,user-preferences,notifications,recommended-questions,user-qa,curator,admin,thread-shares,roundtable-draft-shares,tool-metrics,llm-metrics,note,artifacts}/api.ts`、`core/api/markdown-docx-export.ts`。**问答（Q&A）改为「一次大模型调用 = 一条日志」**：在共享的 `core/threads/hooks.ts` `useThreadStream` 的 `onLangChainEvent` 里监听 `on_chat_model_end`，每次模型调用结束就上报一条（optType 12，`reqParam` 取本次 input 的最后一条 user 文本 + 模型名，`returnParam` 取本次输出文本）——一个问答轮次里 lead agent / 子代理的**每次** LLM 调用都各记一条，覆盖所有走 `useThreadStream` 的页面（`ChatPage`/`AgentChatPage`/创建智能体/iframe/会商等）；`ChatPage`/`AgentChatPage` 的 `onFinish` 仍额外保留一条轮次汇总。后端仅新增公开只读配置：`deerflow/config/y_log_config.py`（`YLogConfig{enabled,write_url}`）挂到 `AppConfig.y_log`，`app/gateway/routers/public_config.py` 加 `GET /api/public/config/y-log`，地址写在 `config.yaml` 的 `y_log` 段（mtime 热重载，前端无需重建）；**不做后端代理**。Tests：`tests/test_y_log_config.py`。
 
 ### Configuration
 

frontend-web/.env.network

@@ -14,8 +14,8 @@ VITE_MOCK_SQ_REPORT=false
 VITE_MOCK_COP_TASK_DETAIL=false
 
 # Gateway / DeerFlow API
-VITE_BACKEND_BASE_URL=http://47.88.25.99:7001
-VITE_LANGGRAPH_BASE_URL=http://47.88.25.99:7001/api
+VITE_BACKEND_BASE_URL=http://10.19.200.5:2026
+VITE_LANGGRAPH_BASE_URL=http://10.19.200.5:2026/api
 
 # 轻应用「新建笔记」系列接口
 VITE_NOTE_API_BASE_URL=http://47.88.25.99:8000
@@ -42,7 +42,7 @@ VITE_AIPI_BACKENP_URL=http://47.88.25.99:8000
 # VITE_AIPI_FRONTEND_URL=https://knowledgetoolserver.b.uat.4.cn
 VITE_NOTEBOOK_API_BASE_URL=http://47.88.25.99:8000
 VITE_AIPI_FRONTEND_URL=http://47.88.25.99:3000
-VITE_AIPI_CONSUMER_URL=https://ch1.b.uat.4.cn/consumer
+VITE_AIPI_CONSUMER_URL=http://10.19.200.5:8002/consumer
 # A 系统跳转地址（人物/组织/事件等列表项打开链接）
 VITE_AIPI_PRESENT_URL=http://present.a.uat.4.cn/present/domain
 # B 系统知识库 iframe 根地址

frontend-web/docs/ai-writing-对话驱动写作台-实现方案.md

@@ -0,0 +1,507 @@
+# AI 写作「对话驱动写作台」实现方案（可落地版）
+
+> 需求：**复制**现有 AI 写作代码，新增一个独立页面（**原页面/原路由零改动**）。在新页面里
+> **大改交互流程**——去掉「素材收集 / 大纲规划 / 作家写作 / 编辑审核」四个阶段干预卡里的**输入框**，
+> 只**保留原来的确认按钮**；在页面**底部新增一个统一的多行智能输入框**，具备**强意图理解**能力：
+> 重新搜索、新增检索词、添加检索素材、重新规划大纲、按要求改大纲、提修改意见、审核意见、
+> 素材不足继续搜集、对写作内容提问……**覆盖现有全部交互甚至更多**。
+>
+> 交互节奏不变：**一步一确认**——进行到某个专家阶段时，交互就针对该专家（阶段作用域）；
+> 用户可以**点原来的确认按钮**，也可以**在底部输入框里发「继续下一步」的意图**推进。
+> 意图**拿不准时**主动向用户**发起协助/澄清**，绝不盲目触发高代价动作（定稿 / 重搜等）。
+
+本文是**实现指引**，落地时按第 9 节路线图分阶段推进。文中所有文件路径、符号名均对齐当前代码。
+
+---
+
+## 1. 现状梳理（改造地基）
+
+现有 AI 写作是一套**独立 LangGraph 子系统**（不是 lead_agent），前后端都已成型、可复用。
+
+### 1.1 后端 `ai_writing` graph
+
+- 图工厂：`offline-backend-20260512/backend/packages/harness/deerflow/agents/ai_writing/graph.py`
+  （`make_ai_writing_graph`，registered as `assistant_id="ai_writing"`）
+- 状态：`.../ai_writing/state.py`（`AIWritingState`）
+- 四个「阶段大脑」节点：
+
+| 阶段 | 节点 | 文件 |
+|------|------|------|
+| 素材收集 | `researcher` | `nodes/researcher.py` |
+| 大纲规划 | `writer_outline` | `nodes/writer_outline.py` |
+| 作家写作 | `writer_draft` | `nodes/writer_draft.py` |
+| 编辑审核 | `editor` | `nodes/editor.py` |
+
+- **五个暂停点**（`interrupt()`，`Command(resume=payload)` 续跑）——这是对话改造的核心可复用资产：
+
+| pause_point | 语义 | 现有 action |
+|-------------|------|-------------|
+| `material_confirm` | 素材确认 | `confirm` / `re_search` / `enable_skill_search` |
+| `outline_confirm` | 大纲确认 | `confirm` / `re_outline` |
+| `draft_confirm` | 草稿确认 | `to_editor` / `finalize` / `user_revise` |
+| `review_confirm` | 编辑打回确认 | `accept_review` / `force_finalize` |
+| `section_help` | 素材不足求助 | `section_help`(+`sectionDecisions`) |
+
+- resume 载荷（`UserInterventionPayload`，`types/ai-writing.ts`）字段：`action`、`approvedMaterialIds`、
+  `userQuery`（自然语言补充检索）、`editedOutline`、`outlineFeedback`、`userRevisionNotes`、
+  `overrideVerdict`、`selectedIssueIndices`、`sectionDecisions`。
+  **协议已同时支持「自然语言 + 结构化 action」**——这是对话层能复用的关键。
+
+> 结论：**状态机 / 流式 / 暂停·续跑协议 / 持久化都可复用**，无需重写引擎。改造本质是
+> 「把分散在干预卡里的输入框，换成一个底部智能输入框 + 意图路由层」，再把意图翻译回**现有
+> `action + payload`**；仅少量新意图（对内容提问、素材不足自动回退重搜、追加审核意见）需新增能力。
+
+### 1.2 前端 `open-canvas` 子系统
+
+- 主页面：`frontend-web/src/open-canvas/pages/AIWritingPage.tsx`
+  - 路由注册：`open-canvas/routes/OpenCanvasRoutes.tsx`（`/page/canvas/ai-writing/*`）、
+    `pages/WorkspaceRoutes.tsx`（`/page/workspace/ai-writing/*`）、`pages/NotebookAIWritingPage.tsx`
+- 状态机 + 流式：`contexts/AIWritingContext.tsx`（`useReducer` + LangGraph `useStream`，`assistantId:'ai_writing'`）
+- 事件翻译 / reducer：`hooks/useAIWritingStream.ts`
+- 类型：`types/ai-writing.ts`
+- **左栏面板**：`components/ai-writing/AIWritingPanel.tsx`（时间线 + 干预卡 + 状态栏；idle 时挂启动表单）
+- **要改造的输入 UI**（本次重点）：
+  - 干预卡 `components/ai-writing/InterventionCard.tsx`：内含
+    `MaterialConfirmCard`（素材：有 `MaterialsToolbar` 输入框）、
+    `OutlineConfirmCard`（大纲：有 feedback textarea）、
+    `DraftConfirmCard`（草稿：有「修改意见」textarea）、
+    `ReviewConfirmCard`（审核：有「补充修改指令」textarea）、
+    `SectionHelpCard`（素材不足：按钮组）。
+    **每张卡里都既有输入框又有确认/动作按钮**——本次要**去掉输入框、保留按钮**。
+  - 启动表单 `components/ai-writing/AIWritingForm.tsx`（idle 阶段的配置表单）——本次由底部输入框接管启动。
+- **已存在的对话原型**（可借鉴）：`components/ai-writing/WritingSetupChat.tsx`
+  （`useThreadStream` 起 lead_agent 线程 + `setup_writing` 审批卡回填表单；仅管启动前配置，不直接复用）。
+- 底部输入框可直接复用 UI 组件：`@/components/ai-elements/prompt-input`
+  （`PromptInput` / `PromptInputTextarea` / `PromptInputSubmit` / `PromptInputFooter`，见 `WritingSetupChat`）。
+
+---
+
+## 2. 目标与范围
+
+### 2.1 必须满足
+
+1. **复制式新增**：新目录 / 新路由 / 新侧边栏入口，**旧页面、旧路由、旧组件零改动**（「初始的不用动」）。
+2. 页面**底部单一多行智能输入框**接管全流程交互；四个阶段干预卡里的**输入框全部移除**。
+3. **保留确认按钮**：每个阶段到达暂停点时，消息流里仍渲染**产物卡 + 原来的确认/动作按钮**
+   （素材「确认素材」、大纲「确认大纲」、草稿「让编辑审核 / 确认定稿」、审核「按编辑意见修改 / 强制定稿」、
+   素材不足的三选一按钮）。用户**点按钮**或**在底部输入框发自然语言意图**二选一均可推进。
+4. **强意图理解**：把用户自由文本准确路由到正确动作，**覆盖现有全部交互 + 更多**（见 3.2）。
+5. **阶段作用域**：意图解析必须知道「当前停在哪个专家阶段」，把同一句话按当前阶段翻译成对应 action。
+6. **素材不足自动回退重搜**：修改意见需要的信息现有素材没有时，先重搜补素材、补完自动继续原意图。
+7. **拿不准就协助**：低置信意图**不猜着执行**，走澄清追问（clarify）或用户协助。
+8. 保留右侧草稿实时预览（可编辑）与时间线 / 进度展示。
+
+### 2.2 明确不做（本期）
+
+- 不改旧 `AIWritingPage` 及其 `AIWritingForm` / `InterventionCard`（这两个是要在**副本**里改的）。
+- 不替换 `ai_writing` graph 四个阶段大脑逻辑，不动五个暂停点 / checkpoint / 持久化。
+- 不引新状态管理库（继续 `useReducer` + `useStream`）。
+
+### 2.3 复制策略（关键决策）
+
+「复制一份」= **复制会被大改的表现层组件**（页面 + 干预卡 + 面板），**复用不改的引擎层**：
+
+| 复制（新建副本，大改） | 复用（原样，不改；仅对 `types` 做**追加式**扩展） |
+|------------------------|--------------------------------------------------|
+| 新页面 `AIWritingChatPage.tsx` | `contexts/AIWritingContext.tsx`（状态机 + 流式） |
+| 新面板 `WritingChatPanel.tsx`（消息流 + 底部输入框） | `hooks/useAIWritingStream.ts`（事件 → state） |
+| 新消息卡 `chat-cards/*`（产物卡+确认按钮，**无输入框**） | `components/ai-writing/AIWritingDraftPanel.tsx`（右侧草稿预览） |
+| 新意图客户端 `api/ai-writing-intent.ts` | 各流式展示子组件（`MaterialsCard`/`OutlineCard`/`ReviewCard`/`SkillStepsCard`…） |
+| （可选）新 `contexts/WritingChatContext.tsx` 包一层「pending 意图 / 澄清态」 | `types/ai-writing.ts`（**只加字段不改旧字段**，保证旧页面不受影响） |
+
+> **不复用、也不改** 的三个「输入框组件」：`AIWritingForm` / `InterventionCard` / `WritingFormContext`——
+> 旧页面继续用它们，新页面完全不引用它们。这样「初始的不用动」得到硬保证。
+>
+> 为什么复用 `AIWritingContext` 而不复制它？它**不含任何输入框 UI**，只是「状态机 + 与后端 graph 的
+> 流式桥」，复用它**不会改动旧页面的任何呈现**（旧页面照常在自己的 Provider 实例里跑）。复用能显著
+> 降低维护成本、避免两套引擎漂移。若要绝对物理隔离，也可整目录复制 `AIWritingContext` +
+> `useAIWritingStream` 到新目录——**推荐先复用**，仅当后续需要给对话态加大量图内新协议时再分叉。
+
+---
+
+## 3. 核心设计
+
+### 3.1 三层结构
+
+```
+┌──────────────────────────────────────────────────────────────┐
+│  对话 UI 层（新）  WritingChatPanel                             │
+│   - 消息流：用户消息 + AI 阶段产物卡（含【保留的确认按钮】）+ 进度   │
+│   - 底部：统一多行智能输入框（唯一自由输入入口）                    │
+│   - 右侧：草稿实时预览（复用 AIWritingDraftPanel）                │
+└───────────────┬──────────────────────────────────────────────┘
+                │ 用户自然语言（+ 当前 status/pausePoint 上下文）
+                ▼
+┌──────────────────────────────────────────────────────────────┐
+│  意图解析层（新，核心）  POST /api/ai-writing/sessions/{id}/intent │
+│   输出：{ intent, pausePoint, action, payload,                  │
+│          needResearch, researchQuery, answer, confidence, clarify }│
+└───────────────┬──────────────────────────────────────────────┘
+                │ 结构化 action + payload
+                ▼
+┌──────────────────────────────────────────────────────────────┐
+│  执行层（复用现有 AIWritingContext）                             │
+│   idle → startWriting(AIWritingRequest)                         │
+│   暂停 → submitIntervention(UserInterventionPayload)            │
+│   问答 → 旁路回答（不改写作状态）                                 │
+│   素材不足 → 先重搜、缓存 pending、补完自动续跑                     │
+└──────────────────────────────────────────────────────────────┘
+```
+
+**设计原则**：意图解析层是「翻译官」——把自由文本翻译成**执行层已经懂的指令**。能复用
+`action + payload` 的绝不新造协议；确认按钮点击**直接走执行层**（不经意图层，零延迟、零误判）。
+
+### 3.2 意图分类体系（覆盖全流程 + 更多）
+
+按「意图 → 触发时机（当前 status/pausePoint）→ 映射执行」组织，即意图解析引擎的目标 schema。
+**「甚至更多」** = G（问答）、H（控制）、以及 B/C/D/E 里的「素材不足自动回退重搜」。
+
+#### A. 启动类（status = `idle`）
+| 意图 | 用户说法示例 | 映射 |
+|------|-------------|------|
+| `start_writing` | 「写一篇关于新能源出口的深度分析，2000 字」 | 解析成 `AIWritingRequest` → `startWriting()` |
+| `start_with_outline` | 「按这个大纲写：…」 | `AIWritingRequest.userOutline` |
+| `start_imitate` | 「仿照这篇样文写…」 | `writingModeType='imitate'` + `sampleText` |
+
+#### B. 素材类（pausePoint = `material_confirm`）
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `confirm_materials` | 「素材可以，继续 / 下一步」 | `{action:'confirm', approvedMaterialIds}` |
+| `research_again` | 「重新搜索素材」 | `{action:'re_search'}`（无 userQuery=覆盖式重检） |
+| `add_material`/`add_keyword` | 「再补点关于 X 的素材」「加个关键词 Y」 | `{action:'re_search', userQuery:'X/Y'}`（追加） |
+| `select_materials` | 「只用第 1、3 条」 | `{action:'confirm', approvedMaterialIds:[…]}` |
+| `drop_materials` | 「去掉第 2 条」 | 同上（反选后的子集） |
+
+#### C. 大纲类（pausePoint = `outline_confirm`）
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `confirm_outline` | 「大纲 OK，开始写」 | `{action:'confirm'}` |
+| `reoutline` | 「重写大纲」 | `{action:'re_outline'}`（feedback 可空） |
+| `revise_outline` | 「第二章拆成两节」「调整顺序」 | `{action:'re_outline', outlineFeedback:自然语言}` |
+
+#### D. 写作 / 草稿类（pausePoint = `draft_confirm`）
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `to_editor` | 「交给编辑审核」 | `{action:'to_editor'}` |
+| `finalize` | 「就这样定稿」 | `{action:'finalize'}` **（高代价：低置信必澄清）** |
+| `revise_draft` | 「第三段太啰嗦，精简」「补个 2024 案例」 | `{action:'user_revise', userRevisionNotes:意见}` |
+| `rewrite_section` | 「重写第二章」 | `user_revise` + 章节定位写进 notes |
+| `change_tone/style` | 「更口语一点 / 更正式」 | `user_revise` + notes |
+| `apply_review`（若已有审核结果） | 「按编辑意见改」「只接受第 1、2 条」 | `{action:'user_revise', selectedIssueIndices:[…]}` |
+
+#### E. 编辑审核类（pausePoint = `review_confirm`）
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `accept_review` | 「按编辑意见改」 | `{action:'accept_review', selectedIssueIndices}` |
+| `partial_accept_review` | 「只接受第 1、2 条」 | `accept_review` + `selectedIssueIndices` 子集 |
+| `add_review_opinion` | 「再补一条：核查数据准确性」 | `accept_review` + `userRevisionNotes`（并入补充指令，现协议已支持） |
+| `force_finalize` | 「不改了，强制定稿」 | `{action:'force_finalize', overrideVerdict:true}` **（高代价：必澄清）** |
+
+#### F. 素材不足求助类（pausePoint = `section_help`）
+| 意图 | 映射 |
+|------|------|
+| `section_supplement` | `{action:'section_help', sectionDecisions:[…'supplement']}` |
+| `section_loose` | `sectionDecisions:[…'loose']` |
+| `section_delete` | `sectionDecisions:[…'delete']` |
+
+#### G. 问答类（**新**；任意 status；旁路，不改写作状态）
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `ask_about_content` | 「第二章讲了啥？」「为什么用这个论点？」 | 意图节点直接带回 `answer`，对话流渲染（见 5.4） |
+| `ask_meta` | 「现在到哪步了？」「用了哪些素材？」 | 读当前 state 直接回答，不走图 |
+
+#### H. 控制类（**新 / 半新**）
+| 意图 | 映射 |
+|------|------|
+| `next_step`（通用「继续/下一步」） | 按**当前 pausePoint** 映射到该阶段的默认确认（material/outline→`confirm`，draft→`to_editor`…；等价点确认按钮） |
+| `restart_stage` | 重跑当前阶段（复用 `resumeWriting()` 空 command 续跑） |
+| `run_background` | 转后台自动跑：`suspendAIWritingToBackground()` |
+| `cancel` | `pauseWriting()`（`stream.stop()`） |
+| `unknown/clarify` | 无法判定 → 反问澄清 / 用户协助（**防误触发硬指标**） |
+
+### 3.3 「素材不足自动重搜」判定与回退（用户强调点）
+
+触发：用户在**大纲/草稿/审核**阶段提出修改意见，但意见需要的信息现有素材里没有。
+
+判定来源（组合）：
+1. **意图节点直接判**：把「素材摘要（keywords + 每条 title/source）」喂给意图 prompt，让它判断
+   「这条意见能否用现有素材满足」；不能 → `needResearch=true` + `researchQuery`。
+2. **执行阶段兜底**：`writer_draft` 严格模式已有 `blocked_sections` → `section_help` 暂停点，
+   对话层把它翻译成「素材不足，是否重搜？」的追问。
+
+回退动作（**首期纯前端实现，不动后端协议**）：`needResearch=true` 时，前端把用户的修改
+`payload` 缓存为 `pendingIntent`，先 `submitIntervention({action:'re_search', userQuery:researchQuery})`
+补素材；监听到新一轮 `material_confirm`（素材追加完成）后，**自动提交** `pendingIntent`。
+需处理「重搜期间用户又改主意」→ 允许覆盖 pending。
+
+---
+
+## 4. 意图解析引擎：方案与契约
+
+**采用方案 A：后端 LLM 意图节点（独立 REST）**，叠加高频短句**规则快路径**优化。
+
+理由：`needResearch` 判定需要**完整写作上下文**（素材/大纲/草稿），后端天然持有 checkpoint state；
+与 `setup_writing` 一脉相承，离线模型选择策略统一；输出 schema 稳定、前端只消费。
+
+### 4.1 后端入口
+
+`app/gateway/routers/ai_writing.py` 新增：
+
+```
+POST /api/ai-writing/sessions/{session_id}/intent
+Body: { text: string, status: string, pausePoint?: string }
+Resp: IntentResult（见 4.3）
+```
+
+实现：读该 session 的 checkpoint state（素材摘要 / 大纲纲要 / 草稿字数·章节 / 审核意见）→
+用 `ai_writing` 配置模型（复用 `intent_parser.py` 同套 `create_chat_model` + `parse_json` +
+模型容错 `_model_fallback`）解析 → 返回结构化契约。**不改图拓扑**。
+
+新增 prompt：`agents/ai_writing/prompts/intent_router_prompts.py`
+- 输入：用户文本、`current_status`/`pause_point`、素材摘要、大纲纲要、草稿字数+章节标题、审核意见列表。
+- 输出：严格 JSON（4.3 契约）。硬要求：**只在证据充分时给高 confidence，否则给 `clarify`**；
+  `finalize`/`force_finalize`/`re_search` 等高代价意图**必须**高置信才不澄清。
+
+### 4.2 前端快路径（先跑规则，未命中再调后端）
+
+`api/ai-writing-intent.ts` 里对**当前 pausePoint** 做少量确定性短语命中，直接产出 payload，省一次往返：
+- 「继续/下一步/确认/可以/ok/好的」→ 当前阶段默认 `confirm`（draft 阶段=`to_editor`）。
+- 「重新搜索/重搜」（material）→ `re_search`。「重写大纲」（outline）→ `re_outline`。
+- 「定稿/强制定稿」→ **不进快路径**（高代价，一律走后端 + 可能澄清）。
+- 命中即执行；未命中 → 调后端 `intent` 接口。
+
+### 4.3 意图解析输出契约
+
+```jsonc
+{
+  "intent": "revise_draft",        // 见 3.2 分类
+  "pausePoint": "draft_confirm",   // 需要 resume 时；否则 null
+  "action": "user_revise",         // 映射到现有 action
+  "payload": {                     // 直接可喂 submitIntervention 的字段（camelCase）
+    "userRevisionNotes": "第三段精简，并补一个 2024 年的案例"
+  },
+  "needResearch": true,            // 素材是否不足
+  "researchQuery": "2024 行业案例", // needResearch 时的检索意图
+  "answer": null,                  // 问答类意图的直接回答（旁路）
+  "confidence": 0.86,
+  "clarify": null                  // 低置信时的反问话术（非空则不执行、只追问）
+}
+```
+
+前端消费顺序：
+1. `answer` 非空 → 对话流渲染回答（问答旁路，不动写作状态）。
+2. `clarify` 非空 **或** `confidence < 阈值(建议 0.6)` → 渲染反问气泡，等用户澄清（**防误触发**）。
+3. `needResearch=true` → 缓存 `pendingIntent=payload`，先重搜，收到新素材后自动提交。
+4. 否则 → `idle` 走 `startWriting(...)`；暂停态走 `submitIntervention({action, ...payload})`。
+
+---
+
+## 5. 前端改造方案
+
+### 5.1 新页面与路由（复制式）
+
+- 新页面：`open-canvas/pages/AIWritingChatPage.tsx`
+  （骨架照抄 `AIWritingPage.tsx` 的 Provider 包裹与左右分栏；左栏换成 `WritingChatPanel`，右栏仍
+  `AIWritingDraftPanel`；idle 不再挂 `AIWritingForm`，改由底部输入框启动）。
+- 路由注册（**新增，不动旧行**）：
+  - `open-canvas/routes/OpenCanvasRoutes.tsx` 加 `path="ai-writing-chat/*"`。
+  - 侧边栏 `core/page-layout/sidebar-menu.ts`：在 `qa-research` 旁新增
+    `{ id:"qa-research-chat", label:"AI写作(对话版)", icon:FileText, path:"/page/canvas/ai-writing-chat" }`。
+    （或先不加、内部灰度直链验证。）
+
+### 5.2 新面板 `WritingChatPanel.tsx`（左栏主体）
+
+职责 = 消息流容器 + 底部输入框，替代 `AIWritingPanel` 里的「时间线 + InterventionCard + 状态栏」。
+复用 `useAIWriting()` 读 state / 调 `startWriting` / `submitIntervention` / `pauseWriting` /
+`suspendAIWritingToBackground`。
+
+消息流渲染（把 `ProgressEvent` / 阶段产物适配成消息卡，复用现有展示子组件）：
+- 运行中：`research_progress`/`outline_chunk`/`draft_chunk`/`review_chunk` → 进度 / 流式卡
+  （复用 `SkillStepsCard`/`OutlineStreamingView`/`DraftGeneratingView`/`ReviewStreamingView` 的展示部分）。
+- 到达暂停点：渲染 **产物卡 + 保留的确认按钮**（见 5.3），不再有输入框。
+- 用户消息、AI 澄清追问、问答回答：普通气泡。
+
+底部输入框：直接复用 `@/components/ai-elements/prompt-input`（`PromptInput`+`PromptInputTextarea`+
+`PromptInputSubmit`），Enter 发送、Shift+Enter 换行；发送时读当前 `state.status`/`currentPause?.pausePoint`
+交给意图路由（见 5.5）。运行中（非暂停点）可禁用发送或转「排队/提示当前在生成」。
+
+### 5.3 新消息卡 `chat-cards/*`（**保留按钮、去掉输入框**）
+
+把 `InterventionCard.tsx` 的五张卡各复制一份到 `open-canvas/components/ai-writing-chat/chat-cards/`，
+**删掉其中的 textarea / MaterialsToolbar 输入部分，保留产物展示 + 确认/动作按钮**：
+
+| 新卡 | 展示（复用） | 保留的按钮 | 删除的输入 |
+|------|-------------|-----------|-----------|
+| `MaterialConfirmChatCard` | `MaterialsCard`（勾选保留）+ `SkillStepsCard` | 「确认素材，规划大纲」「重新搜索」 | `MaterialsToolbar` 的 userQuery 输入框 |
+| `OutlineConfirmChatCard` | `OutlineCard`（可点标题微调保留） | 「确认大纲，开始写作」 | feedback textarea + 发送 |
+| `DraftConfirmChatCard` | `ReviewCard`（若有审核，勾选保留） | 「按编辑审核意见修改」「让编辑继续审核」「确认定稿」 | 「修改意见」textarea |
+| `ReviewConfirmChatCard` | `ReviewCard`（勾选保留） | 「按编辑意见修改」「强制定稿」 | 「补充修改指令」textarea |
+| `SectionHelpChatCard` | 章节 + 三选一按钮组 | 三选一 + 「提交并继续」 | （本就无自由输入，原样保留） |
+
+> 勾选态（素材/审核意见）**保留**——它是「点按钮」路径的一部分，不算自由输入框。用户想用自然语言
+> 「只用第 1、3 条」也能走底部输入框（意图层产出 `approvedMaterialIds`/`selectedIssueIndices`）。
+> 按钮点击 **直接调 `submitIntervention`**，与旧卡完全一致，零改动风险。
+
+### 5.4 问答旁路（新能力）
+
+「对写作内容提问」不改写作 state。首期**轻量实现**：意图节点检出 `ask_*` 时读 state 直接带回 `answer`，
+前端在消息流渲染为普通 AI 气泡即可（一次调用出答案）。完整版（后续）可另起只读 lead_agent 线程注入
+草稿/大纲作背景，类似 `WritingSetupChat` 的 `useThreadStream`。
+
+### 5.5 交互流程（对话版）串起来
+
+1. **空闲**：底部输入「写一篇关于 X 的深度分析，2000 字」→ 意图 `start_writing` → 组 `AIWritingRequest`
+   → `startWriting()`。（缺关键字段时先 `clarify` 追问字数/读者/类型。）
+2. **运行中**：进度/流式卡渲染。
+3. **到暂停点**：渲染产物卡 + 按钮 + 一句提示「你可以点上面的按钮，或直接说：确认继续 / 补充素材 / 改大纲…」。
+   - **点按钮** → 直接 `submitIntervention`（旧逻辑）。
+   - **发文字** → `resolveIntent(text, status, pausePoint)`（先快路径、后后端）→ 按 4.3 消费。
+4. **问答**：任意时刻提问 → 旁路 `answer`，不打断写作。
+5. **素材不足**：`needResearch` 或 `section_help` → 追问/执行「重搜 → 自动续跑 pending 意图」。
+6. **拿不准**：`clarify`/低置信 → 反问气泡，不执行。
+
+### 5.6 pending 意图 & 澄清态（新增本地状态）
+
+在 `WritingChatPanel`（或新 `WritingChatContext`）维护：
+- `pendingIntent: UserInterventionPayload | null` —— 素材不足重搜完成后自动提交。
+- `awaitingClarify: { originalText: string } | null` —— 澄清态，用户下一句与上一句拼接再解析。
+- pending 生命周期：设置 → 提交 `re_search` → 监听 reducer 里新一轮 `awaiting_material_confirm`
+  （`state.status` 从 `researching` 回到 `awaiting_material_confirm`）→ 自动 `submitIntervention(pending)` → 清空。
+
+---
+
+## 6. 后端改造方案
+
+### 6.1 意图解析入口（新增，唯一后端改动主体）
+
+- `app/gateway/routers/ai_writing.py`：新增 `POST /sessions/{id}/intent`（见 4.1）。
+  读 checkpoint state 用 `app.state.checkpointer` + `make_ai_writing_graph().aget_state(...)`
+  （参照 `ai_writing_job_executor.py` 的读法）取素材/大纲/草稿/审核摘要。
+- `agents/ai_writing/prompts/intent_router_prompts.py`：新增意图 prompt（见 4.1）。
+- 复用 `nodes/intent_parser.py` 的模型创建 / `parse_json` / `_model_fallback` 容错。
+
+### 6.2 不需要改的部分
+
+- 四个阶段大脑节点、五个暂停点、checkpoint、StreamBridge、持久化、sessions/transcript REST——**全不动**。
+- 「素材不足自动续跑」「问答旁路」首期都在**前端 / 意图节点**实现，**不扩 resume 协议**。
+
+### 6.3 可选增强（阶段 3，按需）
+
+- `add_review_opinion` 完整版：`review_confirm` resume 增字段 `extra_review_notes`（首期已用现有
+  `userRevisionNotes` 降级承载，够用）。
+- `resume_intent` 后端化（把「重搜完自动续跑」搬到后端，减少前端状态机复杂度）。
+- undo / 回退到上一暂停点（依赖 checkpoint 回滚）。
+
+---
+
+## 7. 数据流时序（改稿 + 素材不足自动重搜）
+
+```
+用户（draft_confirm 暂停）: "第三段补个2024年的行业案例"
+  │ 底部输入框 → resolveIntent(text, status='awaiting_draft_confirm', pausePoint='draft_confirm')
+  ▼ POST /api/ai-writing/sessions/{id}/intent { text, status, pausePoint }
+后端: 读 state(素材摘要) + LLM 解析
+  │ 返回 { intent:revise_draft, action:user_revise,
+  │        payload:{userRevisionNotes:"第三段…补2024案例"},
+  │        needResearch:true, researchQuery:"2024 行业案例", confidence:0.9 }
+  ▼
+前端: needResearch=true → pendingIntent = payload
+  │ submitIntervention({action:'re_search', userQuery:"2024 行业案例"})
+  ▼ LangGraph resume → researcher 追加素材 → status 回到 awaiting_material_confirm
+前端: 监听到新一轮素材确认 → 自动提交 pendingIntent
+  │ submitIntervention({action:'user_revise', userRevisionNotes:"第三段…补2024案例"})
+  ▼ writer_draft 用新素材改稿 → draft_chunk… → draft_ready → draft_confirm
+前端: 消息流展示新草稿卡 + "已按你的意见改写并补充了 2024 案例"
+```
+
+---
+
+## 8. 关键实现细节与坑
+
+1. **阶段作用域**：`resolveIntent` 必须带 `state.currentPause?.pausePoint` + `state.status`——
+   同一句「重新来」在 material 是重搜、在 outline 是重写大纲。`AIWritingContext` 已有这两个字段，直接读。
+2. **确认按钮零改动**：新卡的按钮 `onClick` 原样调 `submitIntervention(payload)`，与旧卡逐字一致，
+   风险最低；**只删输入框**。
+3. **防误触发**：低置信（<0.6）或 `clarify` 非空一律追问；`finalize`/`force_finalize`/`re_search`
+   即使命中也要求高置信，否则澄清。绝不盲目定稿/覆盖重搜。
+4. **pending 意图队列**：素材不足是「先插重搜、再回原意图」，用 5.6 的小状态机；重搜完成前允许覆盖 pending。
+5. **问答不污染 transcript**：问答/澄清消息在前端标记 `kind:'qa'|'clarify'`，与写作进度事件区分（
+   `AIWritingContext` 的 transcript 只存 progressEvents/completedInterventions，问答气泡是纯前端消息，
+   默认不入 transcript，避免历史回看错乱）。
+6. **流式产物→消息卡**：复用 `OutlineStreamingView`/`DraftGeneratingView`/`ReviewStreamingView`/
+   `SkillStepsCard` 的**展示部分**，套进消息容器，不重写渲染。
+7. **右侧草稿预览**：`AIWritingDraftPanel` + `DraftSync` 原样复用（`DraftSync` 依据 status/markdown
+   同步右侧画布）。
+8. **离线内网**：意图模型走 `config.yaml → ai_writing` 配置模型；检索仍走技能/内网 ES，不联网。
+9. **模型选择透传**：`submitIntervention` 的 resume 已把 `state.request?.modelName` 一并回传（见
+   `AIWritingContext`），新页面沿用即可。
+10. **旧页面隔离验证**：改完后回归旧 `/page/canvas/ai-writing` 与 `/page/workspace/ai-writing`、
+    笔记本嵌入页，确认零变化（新代码不 import 旧的 `AIWritingForm`/`InterventionCard`/`WritingFormContext`）。
+
+---
+
+## 9. 分阶段实施路线图
+
+**阶段 0 — 骨架（不含意图）**
+- 复制 `AIWritingChatPage` + 注册新路由 + 侧边栏入口；复用 `AIWritingContext`/`useStream`/`DraftPanel`。
+- 复制五张 `chat-cards`（删输入框、留按钮）；底部输入框先只做 idle 直发 `start_writing`
+  （文本原样当 `userIntent`，其余字段取默认）+ 暂停点靠按钮推进。端到端跑通。
+
+**阶段 1 — 意图解析（核心）**
+- 后端 `POST /sessions/{id}/intent` + `intent_router_prompts.py`，返回 4.3 契约。
+- 前端 `api/ai-writing-intent.ts`（快路径 + 后端）接入 `WritingChatPanel`，覆盖 A~F 类意图。
+- 低置信 `clarify` 澄清态（5.6）。
+
+**阶段 2 — 问答旁路 + 素材不足自动重搜**
+- G 类问答（意图节点直接带 `answer`）。
+- `needResearch` + pending 意图机制（前端实现重搜后自动续跑，5.6）。
+
+**阶段 3 — 增强（按需）**
+- `add_review_opinion` 扩协议、`resume_intent` 后端化、undo/回退、完整问答只读线程。
+
+**阶段 4 — 打磨**
+- 消息卡视觉、历史回看（transcript）、后台挂起入口、灰度到侧边栏。
+
+---
+
+## 10. 关键文件清单（落地对照）
+
+### 新增（前端）
+- `open-canvas/pages/AIWritingChatPage.tsx` — 新页面（复制 `AIWritingPage` 骨架改造）
+- `open-canvas/components/ai-writing-chat/WritingChatPanel.tsx` — 消息流 + 底部输入框
+- `open-canvas/components/ai-writing-chat/chat-cards/{MaterialConfirmChatCard,OutlineConfirmChatCard,DraftConfirmChatCard,ReviewConfirmChatCard,SectionHelpChatCard}.tsx` — 保留按钮、去掉输入框
+- `open-canvas/components/ai-writing-chat/progressToMessage.ts` — `ProgressEvent` → 消息卡适配
+- `open-canvas/api/ai-writing-intent.ts` — 意图解析客户端（快路径 + `POST …/intent`）
+- （可选）`open-canvas/contexts/WritingChatContext.tsx` — pending 意图 / 澄清态
+
+### 修改（前端，仅追加，不动旧逻辑）
+- `open-canvas/routes/OpenCanvasRoutes.tsx` — 加一条 `ai-writing-chat/*` 路由
+- `core/page-layout/sidebar-menu.ts` — 加一个侧边栏入口（可选）
+- `open-canvas/types/ai-writing.ts` — **仅追加** `IntentResult` 等新类型，不改旧字段
+
+### 新增（后端）
+- `app/gateway/routers/ai_writing.py` — 加 `POST /sessions/{id}/intent`
+- `agents/ai_writing/prompts/intent_router_prompts.py` — 意图 prompt
+- `tests/test_ai_writing_intent.py` — 意图接口单测（TDD 强制）
+
+### 复用（不改）
+- `open-canvas/contexts/AIWritingContext.tsx`、`hooks/useAIWritingStream.ts`
+- `open-canvas/components/ai-writing/{AIWritingDraftPanel,DraftSync,MaterialsCard,OutlineCard,ReviewCard,SkillStepsCard,OutlineStreamingView,DraftGeneratingView,ReviewStreamingView}.tsx`
+- `agents/ai_writing/graph.py`、四个阶段节点、五个暂停点、`nodes/intent_parser.py`
+
+### 绝不动（保证「初始的不用动」）
+- `open-canvas/pages/AIWritingPage.tsx` 及其引用的
+  `components/ai-writing/{AIWritingForm,InterventionCard}.tsx`、`contexts/WritingFormContext.tsx`
+- 旧路由 `/page/canvas/ai-writing`、`/page/workspace/ai-writing`、笔记本嵌入页
+
+---
+
+## 11. 待确认（默认取值已给出，可直接推进）
+
+1. 意图引擎：**后端 LLM 节点（方案 A）+ 前端短句快路径** —— 默认采用。
+2. `AIWritingContext` / `useAIWritingStream`：**复用**（不物理复制）——默认采用；需绝对隔离可改为复制。
+3. 新页面入口：**侧边栏新增「AI写作(对话版)」** —— 默认加；若要先灰度可只留直链。
+4. 「素材不足自动重搜」：**首期前端 pending 续跑**（不动后端 resume 协议）——默认采用。
+5. 问答旁路：**首期意图节点直接带 `answer`** —— 默认采用。
+
+> 以上默认按「A + 复用引擎 + 侧边栏入口 + 前端 pending + 意图节点带答案」推进，如需调整请指出。

frontend-web/docs/ai-writing-对话驱动改造方案.md

@@ -0,0 +1,454 @@
+# AI 写作「对话驱动 + 意图解析」改造方案
+
+> 目标：在**不动现有 AI 写作页面**的前提下，新建一个「对话驱动」的写作工作台。
+> 去掉素材收集 / 大纲规划 / 作家写作 / 编辑审核各阶段**分散的输入框/表单**，
+> 用**底部一个统一的智能输入框**接管全流程交互；该输入框具备**强意图解析**能力，
+> 能准确识别用户意图（重新搜索、加素材、加关键词、重写大纲、按要求改大纲、改写作、
+> 改编辑、提编辑意见、对写作内容提问……），并在**素材不足**时自动回退去重新检索素材。
+
+本文只做**方案与实现指引**，不含代码改动。落地时按第 9 节的路线图分阶段推进。
+
+---
+
+## 1. 现状梳理（改造的地基）
+
+现有 AI 写作是一套**独立的 LangGraph 子系统**（不是 lead_agent），前后端都已成型。
+
+### 1.1 后端：`ai_writing` graph
+
+- 图工厂：`offline-backend-20260512/backend/packages/harness/deerflow/agents/ai_writing/graph.py`
+- 状态：`.../agents/ai_writing/state.py`（`AIWritingState` + `UserInterventionPayload`）
+- 注册：`offline-backend-20260512/backend/langgraph.json` → `assistant_id = "ai_writing"`
+- 执行：与 lead agent **共用** RunManager + StreamBridge + checkpointer（`app/gateway/services.py` 里 `assistant_id=="ai_writing"` 分发到 `make_ai_writing_graph`）
+
+节点拓扑（实际）：
+
+```
+sample_analyzer → intent_parser → researcher
+  → [cond] pause_material | writer_draft
+  → writer_outline → pause_outline
+  → writer_draft → [cond] pause_section_help | pause_draft | END
+  → editor → [cond] pause_draft | pause_review
+  → pause_review → END | writer_draft
+```
+
+四个「阶段大脑」节点：
+
+| 阶段 | 节点 | 文件 |
+|------|------|------|
+| 素材收集 | `researcher` | `nodes/researcher.py` |
+| 大纲规划 | `writer_outline` | `nodes/writer_outline.py` |
+| 作家写作 | `writer_draft` | `nodes/writer_draft.py` |
+| 编辑审核 | `editor` | `nodes/editor.py` |
+
+五个**暂停点**（`interrupt()`，靠 `Command(resume=payload)` 续跑）：
+
+| pause_point | 语义 | 可用 action（现有） |
+|-------------|------|---------------------|
+| `material_confirm` | 素材确认 | `confirm` / `re_search` / `supplement_search` / `enable_skill_search` |
+| `outline_confirm` | 大纲确认 | `confirm` / `re_outline` |
+| `draft_confirm` | 草稿确认 | `to_editor` / `finalize` / `user_revise` / `custom_revise` |
+| `review_confirm` | 编辑打回确认 | `accept_review` / `force_finalize` |
+| `section_help` | 素材不足求助 | `supplement` / `loose` / `delete` |
+
+> resume 载荷字段（`UserInterventionPayload`）：`action`、`approved_material_ids`、
+> `extra_keywords`、`user_query`(自然语言补充检索)、`edited_outline`、`outline_feedback`、
+> `user_revision_notes`、`override_verdict`、`selected_issue_indices`、`section_decisions`。
+> **关键点**：现有协议已经支持「自然语言 + 结构化 action」，这是对话改造的核心可复用资产。
+
+REST（业务元数据，非图执行）：`app/gateway/routers/ai_writing.py`，前缀 `/api/ai-writing`
+（sessions CRUD、transcript 保存、article-types、后台挂起 `/background` + `/progress` 等）。
+
+持久化：`ai_writing_sessions` 表（`transcript` 为 `PortableLongText`）
++ `ai_writing_article_types`（`deerflow/persistence/...`）。
+
+配置：`config.yaml → ai_writing`（`keyword_model`、`rank_model`、`max_materials`、
+`use_builtin_agents.{researcher,outliner,writer,editor}` 等）。
+
+### 1.2 前端：`open-canvas` 子系统
+
+- 主页面：`frontend-web/src/open-canvas/pages/AIWritingPage.tsx`
+- 路由：`/page/canvas/ai-writing`、`/page/workspace/ai-writing`
+- 状态机：`contexts/AIWritingContext.tsx`（`useReducer` + LangGraph `useStream`）
+- 事件翻译/reducer：`hooks/useAIWritingStream.ts`
+- 类型：`types/ai-writing.ts`（`WritingStatus`、`ProgressEvent`、`UserInterventionPayload`、`AIWritingRequest`…）
+- 流式：LangGraph `useStream`，`assistantId: 'ai_writing'`，`streamMode: ['values','updates','custom','messages-tuple']`
+- **要去掉的输入 UI**（改造重点）：
+  - 启动表单 `components/ai-writing/AIWritingForm.tsx` + `WritingFormContext`
+  - 阶段暂停输入 `components/ai-writing/InterventionCard.tsx`（素材/大纲/草稿/审核四套内嵌表单）
+- **已存在的对话原型**：`components/ai-writing/WritingSetupChat.tsx`
+  （用 `useThreadStream` 起一条 lead_agent 线程 + `setup_writing` 工具审批卡回填表单）——
+  这是「对话 → 结构化配置」的现成范式，可借鉴但**不直接复用**（它只管启动前配置）。
+
+### 1.3 结论
+
+- **状态机、流式、暂停/续跑协议、持久化都可复用**，无需重写引擎。
+- 改造本质 = **把「分散表单」换成「一个对话输入框 + 意图路由层」**，
+  再把意图映射回**现有的 `action + payload`**（大部分场景），
+  少量新意图（如「对内容提问」「素材不足自动重搜」）需要**新增协议/节点**。
+
+---
+
+## 2. 目标与范围
+
+### 2.1 必须满足
+
+1. 新页面/新路由，**旧页面零改动**（用户要求「初始的不用动」）。
+2. 底部**单一对话输入框**控制所有阶段交互，移除各阶段独立输入框。
+3. **强意图解析**：准确识别用户自然语言意图并路由到正确动作，覆盖全流程 + 更多。
+4. 用户给修改意见后，**若现有素材不足以满足要求 → 自动/建议重新检索素材**再继续。
+5. 保留右侧草稿实时预览（可编辑）与时间线/进度展示。
+
+### 2.2 明确不做（本期）
+
+- 不改旧 `AIWritingPage` 及其表单/干预卡组件。
+- 不替换底层 `ai_writing` graph 的四个阶段大脑逻辑（只加意图层与少量新协议）。
+- 不引入新的状态管理库（继续 `useReducer` + `useStream`）。
+
+---
+
+## 3. 核心设计
+
+### 3.1 总体思路：三层结构
+
+```
+┌─────────────────────────────────────────────────────────┐
+│  对话 UI 层（新）                                          │
+│  - 左：消息流（用户消息 + AI 阶段产物卡片 + 进度）          │
+│  - 底：统一智能输入框（唯一交互入口）                       │
+│  - 右：草稿实时预览（复用 AIWritingDraftPanel）            │
+└───────────────┬─────────────────────────────────────────┘
+                │ 用户自然语言
+                ▼
+┌─────────────────────────────────────────────────────────┐
+│  意图解析层（新，核心）                                    │
+│  - 输入：用户文本 + 当前 WritingStatus + 上下文快照        │
+│  - 输出：{ intent, action, payload, needResearch, ... }   │
+└───────────────┬─────────────────────────────────────────┘
+                │ 结构化 action + payload
+                ▼
+┌─────────────────────────────────────────────────────────┐
+│  执行层（复用现有）                                        │
+│  - 空闲态：startWriting(AIWritingRequest)                  │
+│  - 暂停态：submitIntervention(UserInterventionPayload)     │
+│  - 运行中：stream.stop() → 续跑 / 新命令                    │
+│  - 提问态：旁路问答（不改写作状态）                        │
+└─────────────────────────────────────────────────────────┘
+```
+
+**设计原则**：意图解析层是「翻译官」——把自由文本翻译成**现有执行层已经懂的指令**。
+能复用 `action + payload` 的绝不新造协议；只有现有协议表达不了的才扩展。
+
+### 3.2 意图分类体系（覆盖用户全流程 + 更多）
+
+按「意图类别 → 触发时机（当前 status）→ 映射到的执行」组织。这是**意图解析引擎的目标 schema**。
+
+#### A. 启动类（status = idle）
+
+| 意图 | 说明 | 映射 |
+|------|------|------|
+| `start_writing` | 用户描述要写什么 | 解析成 `AIWritingRequest` → `startWriting()` |
+| `start_with_outline` | 用户自带大纲 | `AIWritingRequest.userOutline` |
+| `start_imitate` | 样文仿写 | `writingModeType=imitate` + 样文 |
+
+#### B. 素材类（status ≈ awaiting_material_confirm / 运行中）
+
+| 意图 | 用户说法示例 | 映射 |
+|------|-------------|------|
+| `confirm_materials` | 「素材可以，继续」 | `material_confirm` + `confirm`（可带勾选 ids） |
+| `research_again` | 「重新搜索素材」 | `material_confirm` + `re_search` |
+| `add_material` / `add_keyword` | 「补充关于 X 的素材」「加个关键词 Y」 | `material_confirm` + `supplement_search`，`user_query`=X/Y |
+| `use_skill_search` | 「用 XX 技能查」 | `material_confirm` + `enable_skill_search`，`user_query`=技能/来源 |
+| `select_materials` | 「只用第 1、3 条」 | `confirm` + `approved_material_ids` 子集 |
+| `drop_materials` | 「去掉第 2 条」 | 同上，反选后 `approved_material_ids` |
+
+#### C. 大纲类（status ≈ awaiting_outline_confirm）
+
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `confirm_outline` | 「大纲 OK」 | `outline_confirm` + `confirm` |
+| `reoutline` | 「重写大纲」 | `outline_confirm` + `re_outline`（`outline_feedback` 可空） |
+| `revise_outline` | 「第二章拆成两节」「调整顺序」 | `re_outline` + `outline_feedback`=自然语言 |
+| `edit_outline_manually` | 用户直接给出新大纲文本 | 解析成 `edited_outline` |
+
+#### D. 写作/草稿类（status ≈ awaiting_draft_confirm / writing_draft）
+
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `to_editor` | 「交给编辑审核」 | `draft_confirm` + `to_editor` |
+| `finalize` | 「就这样定稿」 | `draft_confirm` + `finalize` |
+| `revise_draft` | 「第三段太啰嗦，精简」「补个案例」 | `draft_confirm` + `user_revise`，`user_revision_notes`=意见 |
+| `rewrite_section` | 「重写第二章」 | `user_revise` + 定位信息（章节）写进 notes |
+| `change_tone/style` | 「更口语一点」 | `user_revise` + notes |
+
+#### E. 编辑审核类（status ≈ awaiting_review_confirm）
+
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `accept_review` | 「按编辑意见改」 | `review_confirm` + `accept_review`（可带 `selected_issue_indices`） |
+| `partial_accept_review` | 「只接受第 1、2 条意见」 | `accept_review` + `selected_issue_indices` |
+| `force_finalize` | 「不改了，强制定稿」 | `review_confirm` + `force_finalize` |
+| `add_review_opinion` | 「你再补一条：检查数据准确性」 | 追加自定义审核意见（见 5.3 扩展） |
+
+#### F. 素材不足求助类（status = awaiting_section_help）
+
+| 意图 | 映射 |
+|------|------|
+| `section_supplement` | `section_help` + `supplement`（去重搜） |
+| `section_loose` | `section_help` + `loose`（放宽续写） |
+| `section_delete` | `section_help` + `delete` |
+
+#### G. 问答类（**新**，任意 status，旁路，不改写作状态）
+
+| 意图 | 示例 | 映射 |
+|------|------|------|
+| `ask_about_content` | 「第二章讲了啥？」「为什么用这个论点？」 | 旁路问答（见 5.4） |
+| `ask_meta` | 「现在进行到哪一步？」「用了哪些素材？」 | 读当前 state 直接回答，不走图 |
+
+#### H. 控制类（**新/半新**）
+
+| 意图 | 映射 |
+|------|------|
+| `undo/back` | 回退到上一暂停点（依赖 checkpoint 回滚，见 8.4） |
+| `restart_stage` | 重跑当前阶段 |
+| `run_background` | 挂起后台自动跑 → `POST /sessions/{id}/background` |
+| `cancel` | `stream.stop()` |
+| `unknown/clarify` | 无法判定 → 反问澄清（对话追问，不误触发） |
+
+> **覆盖「甚至更多」**：G（问答）、H（控制）、以及 D/E 里「素材不足自动回退重搜」都是超出原表单能力的新增。
+
+### 3.3 「素材不足自动重搜」的判定与回退（用户强调的重点）
+
+触发场景：用户在**大纲/草稿/审核**阶段提出修改意见，但意见需要的**信息现有素材里没有**。
+
+判定放在**意图解析层**输出一个 `needResearch: boolean` + `researchQuery`，判定来源二选一（推荐组合）：
+
+1. **意图解析 LLM 直接判断**：把「当前素材摘要（keywords + 每条 title/来源）」喂给意图解析
+   prompt，让它判断「用户这条意见能否用现有素材满足」。不能 → `needResearch=true` 并给出检索词。
+2. **执行阶段兜底**：`writer_draft` 严格模式本就有 `blocked_sections` → `pause_section_help`，
+   这是**已有的**素材不足闸门；对话层把它翻译成「素材不足，是否重新检索？」的对话追问。
+
+回退动作：`needResearch=true` 时，先走 `material_confirm + supplement_search`（或新的
+「带目标的重搜」协议，见 8.3）补素材，**补完自动继续**用户原本的修改意图（需要在对话层
+记住「pending 修改意图」，重搜结束后再提交）。
+
+---
+
+## 4. 意图解析引擎：方案对比与推荐
+
+| 方案 | 做法 | 优点 | 缺点 |
+|------|------|------|------|
+| **A. 后端 LLM 意图节点**（推荐） | 新增 `/api/ai-writing/intent/parse`（或图内新节点），后端用 LLM 把 `{text, status, contextSnapshot}` → 结构化意图 JSON | 能吃到完整 state（素材/大纲/草稿）；可判 `needResearch`；prompt/模型集中可控；离线内网可用配置模型 | 多一次网络往返（可接受，交互本就等待） |
+| B. 前端调模型接口分类 | 前端直接调现有 `/api/models` 聊天做分类 | 少一层后端改动 | 前端难拿全后端 state 快照；prompt 分散；鉴权/模型选择复杂 |
+| C. 规则 + LLM 混合 | 常见短句走关键词规则快路径，兜底 LLM | 快、省 token | 规则易漏、维护成本高；中文表达多样命中率低 |
+
+**推荐 A（后端 LLM 意图节点）**，并在其上**叠加 C 的快路径**做优化（如「确认/继续/定稿」等
+高频短句先走轻量规则，未命中再调 LLM）。理由：
+
+- 意图判定需要**当前写作上下文**（尤其 `needResearch` 判定），后端天然持有 state/checkpoint。
+- 与现有「配置助手 `setup_writing`」一脉相承，模型选择/离线部署策略统一。
+- 输出 schema 稳定，前端只消费结构化结果，UI 简单。
+
+### 4.1 意图解析输出契约（建议）
+
+```jsonc
+{
+  "intent": "revise_draft",          // 见第 3.2 分类
+  "pausePoint": "draft_confirm",     // 若需 resume；否则 null
+  "action": "user_revise",           // 映射到现有 action；新意图可为新值
+  "payload": {                        // 直接可喂 submitIntervention 的字段
+    "userRevisionNotes": "第三段精简，并补一个 2024 年的案例"
+  },
+  "needResearch": true,               // 素材是否不足
+  "researchQuery": "2024 行业案例",   // needResearch 时的检索意图
+  "answer": null,                     // 问答类意图的直接回答（旁路）
+  "confidence": 0.86,
+  "clarify": null                     // 低置信时的反问话术
+}
+```
+
+前端拿到后：
+- `answer` 非空 → 直接在对话流渲染回答（问答旁路，不动写作状态）。
+- `clarify` 非空或 `confidence` 低 → 渲染反问，等用户澄清（**防误触发**）。
+- `needResearch=true` → 先重搜，缓存 `payload` 为 pending，重搜完再提交。
+- 否则 → `submitIntervention({action, ...payload})` 或 `startWriting(...)`。
+
+---
+
+## 5. 前端改造方案
+
+### 5.1 新页面与路由
+
+- 新目录：`frontend-web/src/open-canvas/pages/AIWritingChatPage.tsx`（或 `conversational/` 子目录）。
+- 新路由：`/page/canvas/ai-writing-chat`（在 `OpenCanvasRoutes.tsx` 注册；旧路由保留）。
+- 侧边栏：`sidebar-menu.ts` 加一个入口（如「AI 写作（对话版）」），或先不加、内部灰度。
+
+### 5.2 复用 vs 新建
+
+| 复用（尽量不改） | 新建 |
+|------------------|------|
+| `AIWritingContext` / `useAIWritingStream`（状态机 + 流式） | 统一对话输入框组件 `WritingChatComposer` |
+| `AIWritingDraftPanel`（右侧草稿预览） | 消息流容器 `WritingChatThread`（渲染阶段产物为消息卡片） |
+| `types/ai-writing.ts`（按需扩展） | 意图解析客户端 `api/ai-writing-intent.ts` |
+| `ProgressEvent` 事件模型 | 阶段产物 → 消息卡片的适配器 `progressToMessage.ts` |
+| 会话持久化 REST | 「pending 意图」暂存逻辑（重搜后续跑） |
+
+**不复用**：`AIWritingForm` / `WritingFormContext` / `InterventionCard`（这三个就是要去掉的表单）。
+
+### 5.3 交互流程（对话版）
+
+1. 空闲：用户在底部输入「写一篇关于 X 的深度分析，2000 字」→ 意图解析 `start_writing`
+   → 组装 `AIWritingRequest` → `startWriting()`。
+2. 运行中：`ProgressEvent`（`research_progress`/`outline_chunk`/`draft_chunk`…）
+   → 适配成消息流里的**进度卡片/流式卡片**（复用现有流式视图组件的展示部分）。
+3. 到达暂停点：不再弹 `InterventionCard`，而是在消息流里展示**阶段产物卡片**
+   （素材列表 / 大纲 / 草稿 / 审核结果）+ 一句提示「你可以说：确认继续 / 补充素材 / 改大纲…」。
+   用户下一句自然语言 → 意图解析 → `submitIntervention`。
+4. 问答：任意时刻用户提问 → 旁路回答，不打断写作状态。
+5. 素材不足：意图解析 `needResearch` 或后端 `section_help` → 对话追问「素材不足，帮你重搜？」
+   → 确认后重搜 → 自动续跑 pending 意图。
+
+### 5.4 问答旁路（新能力）
+
+「对写作内容提问」不应改写作 state。两种实现：
+
+- **轻量（推荐先做）**：意图解析节点直接带回 `answer`（后端能读 state，一次调用出答案）。
+- **完整**：新起一条**只读**问答线程（lead_agent，context 注入当前草稿/大纲作为背景），
+  类似 `WritingSetupChat` 的 `useThreadStream` 模式，但只读不回填。
+
+---
+
+## 6. 后端改造方案
+
+### 6.1 意图解析入口（二选一）
+
+- **方案 A1（推荐，独立 REST）**：`app/gateway/routers/ai_writing.py` 新增
+  `POST /api/ai-writing/sessions/{id}/intent`，入参 `{text}`，后端读该 session 的
+  checkpoint state（素材/大纲/草稿摘要）+ 用 `ai_writing` 配置模型解析，返回第 4.1 的契约。
+  - 好处：不改图拓扑；前端拿到结果后再决定调 `startWriting`/`submitIntervention`。
+- 方案 A2（图内节点）：在图里加 `conversation_router` 节点。改动大、状态耦合高，**不推荐**首期。
+
+### 6.2 意图解析 prompt
+
+新增 `agents/ai_writing/prompts/intent_router_prompts.py`（或复用/扩展 `intent_parser.py`）：
+- 输入：用户文本、`current_status`、素材摘要（keywords + 每条 title/source）、大纲纲要、
+  草稿字数/章节标题、审核意见列表。
+- 输出：严格 JSON（第 4.1 契约）。要求模型**只在证据充分时给高 confidence**，
+  否则给 `clarify`（防误触发是硬指标）。
+
+### 6.3 「带目标的重搜」协议扩展（可选增强）
+
+现有 `supplement_search` 用 `user_query` 追加检索。为支持「改稿意见 → 缺素材 → 重搜 → 自动续跑」，
+建议在 `material_confirm` 的 resume 里新增可选字段 `resume_intent`（重搜完成后要自动执行的原始意图）。
+- 前端也可**纯前端**实现（重搜完成事件回来后再自动提交缓存的 pending payload），**首期优先前端实现**，避免动后端协议。
+
+### 6.4 追加自定义审核意见（`add_review_opinion`）
+
+`editor`/`pause_review` 目前只接受「接受/强制定稿」。要支持「你再补一条审核意见」，
+需在 `review_confirm` resume 里接受 `extra_review_notes`，`editor` 或 `writer_draft`
+修订时并入。首期可先降级为 `user_revise` + notes（把用户的审核诉求当作改稿意见），
+**完整版**再扩协议。
+
+### 6.5 不需要改的部分
+
+- 四个阶段大脑节点（researcher/writer_outline/writer_draft/editor）逻辑不动。
+- 五个暂停点、checkpoint、StreamBridge、持久化不动。
+
+---
+
+## 7. 数据流时序（改稿 + 素材不足自动重搜）
+
+```
+用户: "第三段补个2024年的行业案例"
+  │
+  ▼ POST /api/ai-writing/sessions/{id}/intent  { text }
+后端: 读 state(素材摘要) + LLM 解析
+  │  返回 { intent:revise_draft, action:user_revise,
+  │         payload:{userRevisionNotes:...},
+  │         needResearch:true, researchQuery:"2024 行业案例" }
+  ▼
+前端: needResearch=true → 缓存 pending=payload
+  │  对话追问/直接执行: submitIntervention(material_confirm, supplement_search, user_query="2024 行业案例")
+  ▼ LangGraph resume → researcher 补素材 → materials_ready
+前端: 收到新素材 → 自动提交 pending
+  │  submitIntervention(draft_confirm, user_revise, userRevisionNotes=...)
+  ▼ writer_draft 用新素材改稿 → draft_chunk... → draft_ready → pause_draft
+前端: 消息流展示新草稿 + "已按你的意见改写并补充了案例"
+```
+
+---
+
+## 8. 关键实现细节与坑
+
+1. **暂停态识别**：对话层必须知道「现在停在哪个 pause_point」才能正确映射 action。
+   `AIWritingContext` 已有 `currentPause`/`status`，直接读。
+2. **防误触发**：低置信意图一律走 `clarify` 反问，绝不猜着执行（尤其 `finalize`/`re_search` 这种代价大的）。
+3. **pending 意图队列**：素材不足重搜是「先插一段、再回原意图」，需要一个小状态机记住 pending，
+   并处理「重搜后用户又改主意」的情况（重搜完成前允许覆盖 pending）。
+4. **回退/undo（H 类）**：依赖 checkpoint 回滚，`runtime/runs/worker.py` 有 `rollback` 概念，
+   首期可**不做**或只做「重跑当前阶段」。
+5. **问答旁路不污染 transcript**：问答消息可标记 `kind:'qa'`，与写作进度事件区分持久化。
+6. **流式产物→消息卡片**：复用现有 `OutlineStreamingView`/`DraftStreamingPreview` 等的**展示部分**，
+   套进消息气泡即可，不必重写渲染。
+7. **离线内网**：意图解析模型走 `config.yaml → ai_writing` 里的配置模型；检索仍走技能/内网 ES，
+   不联网（与现有并行席位「禁 web_search」的离线策略一致）。
+
+---
+
+## 9. 分阶段实施路线图
+
+**阶段 0 — 骨架（不含意图）**
+- 新路由 + 新页面 `AIWritingChatPage`，复用 `AIWritingContext`/`useStream`/`DraftPanel`。
+- 底部对话框先只做「空闲 `start_writing` + 暂停点固定按钮」跑通端到端（相当于把干预卡换成消息）。
+
+**阶段 1 — 意图解析（核心）**
+- 后端 `POST /sessions/{id}/intent` + intent prompt，返回第 4.1 契约。
+- 前端接入：自然语言 → 意图 → `startWriting`/`submitIntervention`，覆盖 A~F 类意图。
+- 加高频短句规则快路径 + 低置信 `clarify` 反问。
+
+**阶段 2 — 问答旁路 + 素材不足自动重搜**
+- G 类问答（先用 intent 节点直接带 `answer`）。
+- `needResearch` + pending 意图机制（前端实现重搜后自动续跑）。
+
+**阶段 3 — 增强协议（按需）**
+- `add_review_opinion` 扩 `review_confirm` 协议、`resume_intent` 后端化、undo/回退。
+
+**阶段 4 — 打磨**
+- 消息卡片视觉、历史回看（复用 transcript）、后台挂起入口、灰度到侧边栏。
+
+---
+
+## 10. 关键文件清单（落地时对照）
+
+### 新增（前端）
+- `open-canvas/pages/AIWritingChatPage.tsx` — 新页面
+- `open-canvas/components/ai-writing-chat/WritingChatComposer.tsx` — 统一输入框
+- `open-canvas/components/ai-writing-chat/WritingChatThread.tsx` — 消息流
+- `open-canvas/components/ai-writing-chat/progressToMessage.ts` — 事件→消息适配
+- `open-canvas/api/ai-writing-intent.ts` — 意图解析客户端
+- 路由注册：`open-canvas/OpenCanvasRoutes.tsx`（+ 可选 `sidebar-menu.ts`）
+
+### 新增（后端）
+- `app/gateway/routers/ai_writing.py` — 加 `POST /sessions/{id}/intent`
+- `agents/ai_writing/prompts/intent_router_prompts.py` — 意图 prompt
+- （阶段 3）`state.py` / `nodes/*` — 扩 `review_confirm`、`resume_intent`
+
+### 复用（尽量不改）
+- `open-canvas/contexts/AIWritingContext.tsx`、`hooks/useAIWritingStream.ts`
+- `open-canvas/components/ai-writing/AIWritingDraftPanel.tsx` 及各流式展示组件
+- `open-canvas/types/ai-writing.ts`（按需扩字段）
+- `agents/ai_writing/graph.py`、四个阶段节点、五个暂停点
+
+### 不动
+- 旧 `open-canvas/pages/AIWritingPage.tsx` 及 `AIWritingForm`/`WritingFormContext`/`InterventionCard`
+
+---
+
+## 11. 待确认
+
+1. 意图解析引擎是否采用**推荐的方案 A（后端 LLM 节点）**？
+2. 新页面是**独立入口**（侧边栏新增）还是先**内部灰度**（仅直链）？
+3. 「素材不足自动重搜」首期是否接受**前端实现 pending 续跑**（不动后端 resume 协议）？
+4. 问答旁路首期是否接受**意图节点直接带答案**（不新起只读线程）？
+
+> 以上默认按「A / 内部灰度 / 前端 pending / 意图节点带答案」推进，如需调整请指出。

frontend-web/docs/测试-chouqu.md

@@ -0,0 +1,148 @@
+# 定时任务 — 模板填充「源数据抽取」手工测试清单
+
+> 覆盖功能：定时任务「模板数据转换器」内置 agent —— 把用户传入的源数据转换成 HTML
+> 模板的 `DATA` 结构并填充生成可预览页面。**重点测「源数据抽取」**：源可能是
+> ① 纯 JSON、② 含 JSON 的文本、③ 纯文本，三种形态都要正确处理。
+>
+> 测试环境：后端 `http://localhost:8001`（`make dev`），前端 `http://localhost:5174`（`pnpm dev`）。
+> 相关代码：`deerflow/runtime/scheduler/template_fill.py`（`extract_embedded_json`）、
+> `service.py`（`_run_template_fill_attempt` / `_build_conversion_prompt`）、
+> `pages/ScheduledTasksPage.tsx`。
+
+---
+
+## 前置 — 进入表单
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 0.1 | 任务管理 → 新建定时任务 | 弹出「新建定时任务」对话框 |
+| 0.2 | 「执行智能体」下拉选择 **模板数据转换器** | 表单出现「HTML 模板」下拉；「必须生成 HTML/Markdown」两个开关隐藏 |
+| 0.3 | 「HTML 模板」下拉选择 **no.1** | 下方出现「上传 .json」按钮 + 源数据文本框；说明含「未提供源 JSON 时，将直接展示该模板的默认数据」|
+
+---
+
+## T1 — 源形态①：纯 JSON
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 1.1 | 在源数据框粘贴纯 JSON（示例见下「样例 A」） | 文本框正常接收，无报错 |
+| 1.2 | 保存任务 → 「立即执行」 | 执行记录新增一条，状态最终 succeeded |
+| 1.3 | 打开执行记录 → HTML 预览 | 渲染出 no.1 大屏，**总览指标/各列表数据来自粘贴的 JSON**（而非模板默认值）|
+| 1.4 | 执行记录正文 | 文案为「已根据源数据填充模板「no.1」生成页面」|
+
+## T2 — 源形态②：含 JSON 的文本（抽取重点）
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 2.1 | 粘贴「样例 B」（前后是中文说明，中间夹一段 JSON） | 文本框正常接收 |
+| 2.2 | 保存 → 立即执行 → 查看 HTML | 页面数据以**夹带的 JSON 为准**填充；正文里的补充说明（如「重点突出 X」）被一并参考 |
+| 2.3 | 验证抽取正确性：JSON 字符串值里含 `}`（如 `"备注": "进度 80%}尚未完成"`） | 不会被误判为 JSON 块提前结束，整段 JSON 被完整抽取 |
+
+## T3 — 源形态③：纯文本（无 JSON）
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 3.1 | 粘贴「样例 C」（一段纯中文描述，无任何 JSON） | 文本框正常接收 |
+| 3.2 | 保存 → 立即执行 → 查看 HTML | 智能体**理解文本语义**后据实填充模板，产出完整可预览页面（数据可能较稀疏但结构完整）|
+| 3.3 | 不应报「未返回 JSON」类硬失败（除非模型彻底失败重试耗尽）| 状态 succeeded |
+
+## T4 — 空源 → 模板默认数据
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 4.1 | 源数据框留空，保存 → 立即执行 | **不调用模型**，直接用 no.1 模板自带的默认数据生成 |
+| 4.2 | 执行记录正文 | 「未提供源数据，已用模板「no.1」的默认数据生成页面」|
+| 4.3 | HTML 预览 | 展示模板内置的默认大屏 |
+
+## T5 — 上传 .json 文件
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 5.1 | 点击「上传 .json 文件」，选一个合法 `.json` | 文件内容被读入源数据文本框 |
+| 5.2 | 上传一个非法 JSON 内容的文件 | toast 提示「文件不是合法 JSON，已填入文本框请检查」，内容仍填入（可手改）|
+| 5.3 | 连续上传同一个文件两次 | 第二次仍能触发读取（input 已被重置 value）|
+
+## T6 — no.2（只展示模板）
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 6.1 | 「HTML 模板」下拉选 **no.2** | **隐藏**上传按钮与源数据文本框；显示「该模板暂为直接展示已有数据，无需填写」|
+| 6.2 | 即使之前填过源数据，保存 → 立即执行 | 忽略源数据，**原样输出** no.2 现有页面 |
+| 6.3 | 执行记录正文 | 「已展示模板「no.2」的现有数据」|
+
+## T7 — 编辑回显
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 7.1 | 对已保存的模板任务点「编辑」 | 「执行智能体」「HTML 模板」「源数据」均正确回显 |
+| 7.2 | 把模板从 no.1 改成 no.2 再保存 | 切到 no.2 时源数据区即时隐藏；保存后执行走只展示分支 |
+
+---
+
+## 样例数据（可直接复制粘贴到源数据框）
+
+### 样例 A — 纯 JSON
+
+```json
+{
+  "overview": {
+    "核心指标": [
+      { "名称": "综合区域", "数值": 7, "单位": "区", "说明": "测试数据" },
+      { "名称": "组织与单位", "数值": 188, "单位": "个", "说明": "测试数据" }
+    ]
+  },
+  "regions": [
+    { "name": "测试区域甲", "scope": "本岛西岸" }
+  ],
+  "equipment": [
+    { "name_zh": "测试装备X", "category": "无人系统", "status": "列装" }
+  ]
+}
+```
+
+> 预期：总览第一项「综合区域」显示 **7**，「组织与单位」显示 **188**，区域/装备出现「测试区域甲」「测试装备X」。
+
+### 样例 B — 含 JSON 的文本
+
+```
+这是本月台海态势数据，请据此填充大屏，重点突出离岛防卫：
+
+{"overview": {"核心指标": [{"名称": "综合区域", "数值": 9, "单位": "区", "说明": "含离岛"}]}, "regions": [{"name": "离岛防区", "scope": "外岛", "备注": "进度 80%}尚未完成"}]}
+
+以上数据来自 6 月例会，务必准确，不要臆造未提供的字段。
+```
+
+> 预期：① 数据以中间 JSON 为准（综合区域=9、出现「离岛防区」）；② 字符串里的 `}`（`进度 80%}`）不破坏抽取；③ 前后的「重点突出离岛防卫」「务必准确」作为补充说明被模型参考。
+
+### 样例 C — 纯文本
+
+```
+请整理一份台湾滨海防卫概览：覆盖本岛沿岸 9 个综合区域，组织与单位约 280 个，
+装备条目近百项（含无人系统、防空、海军平台等类别），并列出若干关键节点与近期演习。
+数据以离线知识为准，没有的字段留空即可。
+```
+
+> 预期：智能体理解语义后据实填充，产出结构完整的页面（具体数值取决于模型，可较稀疏），不报硬失败。
+
+---
+
+## 后端单元测试（自动化补充）
+
+```bash
+# 在 offline-backend-20260512/backend/ 下运行
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_fill.py -v          # 引擎：抽取/校验/填充/注册表
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_fill_attempt.py -v   # 调度器执行分支：三形态/默认/只展示/重试
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_builder_seed.py -v   # 内置 agent 种子
+```
+
+抽取相关关键用例：
+- `test_extract_embedded_json_pure_object` / `_pure_array` —— 纯 JSON。
+- `test_extract_embedded_json_text_with_json` / `_fenced` —— 含 JSON 的文本 / ```json 围栏。
+- `test_extract_embedded_json_plain_text_returns_none` —— 纯文本返回 None。
+- `test_extract_embedded_json_ignores_braces_in_strings` —— 引号内 `}` 不误判。
+- `test_text_with_embedded_json_surfaced_in_prompt` —— 转换 prompt 单独标注「识别到的结构化数据」。
+- `test_plain_text_source_converts` —— 纯文本仍照常转换。
+- `test_empty_source_uses_template_default` —— 空源用模板默认数据。
+- `test_display_only_template_renders_as_is` —— no.2 原样输出。
+
+三个文件应全部通过（0 failed）。

frontend-web/index.html

@@ -16,6 +16,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <title>CM 助手</title>
+    <script src="/runtime-config.js"></script>
   </head>
   <body>
     <div id="root"></div>

frontend-web/package.json

@@ -7,9 +7,12 @@
     "dev": "vite",
     "build": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build",
     "build:sit": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode sit",
+    "build:test": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode test",
     "build:network": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode network",
     "preview": "vite preview",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "check:chrome109-css": "node scripts/check-chrome109-css.mjs",
+    "check:legacy-chrome-css": "node scripts/check-chrome109-css.mjs"
   },
   "dependencies": {
     "@codemirror/lang-css": "^6.3.1",
@@ -109,6 +112,7 @@
     "@types/react": "^19.0.0",
     "@types/react-dom": "^19.0.0",
     "@vitejs/plugin-react": "^5.0.4",
+    "lightningcss": "^1.30.2",
     "postcss": "^8.5.3",
     "tailwindcss": "^4.0.15",
     "tw-animate-css": "^1.4.0",

frontend-web/postcss.config.js

@@ -1,5 +1,11 @@
+import tailwindcss from "@tailwindcss/postcss";
+import legacyColorFallback from "./scripts/postcss-legacy-color-fallback.mjs";
+import lightningCssLegacyChrome from "./scripts/postcss-lightningcss-chrome109.mjs";
+
 export default {
-  plugins: {
-    "@tailwindcss/postcss": {},
-  },
+  plugins: [
+    tailwindcss(),
+    legacyColorFallback(),
+    lightningCssLegacyChrome(),
+  ],
 };

frontend-web/public/runtime-config.js

@@ -0,0 +1,96 @@
+// 前端运行时配置文件
+//
+// 说明：
+// 1. 本文件会在打包时原样复制到 dist/runtime-config.js。
+// 2. 应用启动时会优先读取 window.__CM_RUNTIME_CONFIG__ 里的配置。
+// 3. 部署后如果需要切换接口地址，直接修改 dist/runtime-config.js 即可，不需要重新 pnpm build。
+// 4. 这里的默认值来自 .env.network；如某个环境不用某项，可以留空字符串。
+// 5. 布尔开关也用字符串形式填写："true" / "false"。
+window.__CM_RUNTIME_CONFIG__ = {
+  // DeerFlow Gateway 地址：前端自有后端接口，例如 /api/agents、/api/auth、/api/threads 等。
+  // VITE_BACKEND_BASE_URL: "http://10.19.200.5:2026",
+
+  // LangGraph 流式对话接口地址：普通问答、智能体对话等流式能力使用。
+  // VITE_LANGGRAPH_BASE_URL: "http://10.19.200.5:2026/api",
+
+  // Canvas/AI 写作独立 LangGraph 地址：为空时前端会回退使用 VITE_LANGGRAPH_BASE_URL。
+  VITE_CANVAS_LANGGRAPH_BASE_URL: "",
+
+  // 轻应用「新建笔记」系列接口地址。
+  VITE_NOTE_API_BASE_URL: "http://47.88.25.99:8000",
+
+  // CMZS 后端接口：任务管理、任务分析、三情分析、行动分析等业务接口。
+  VITE_API_BASE_URL: "https://ch1.b.uat.4.cn/zncm",
+
+  // 佳来模型对话接口。
+  VITE_AIPI_CHAT_URL: "https://ch1.b.uat.4.cn/gpt",
+
+  // 多轮检索/生成接口。
+  VITE_AIPI_GENERATE_CHAT_URL: "https://ch1.b.uat.4.cn/jialai_b1_chat",
+
+  // 任务问答接口。
+  VITE_AIPI_TASK_CHAT_URL: "https://ch1.b.uat.4.cn/qq_b1_chat",
+
+  // B 系统知识库前端地址：用于打开知识详情、原文详情等。
+  VITE_AIPI_KNOWLEDGE_URL: "https://chlib.b.uat.4.cn/knowlibrary",
+
+  // B1 COH 系统地址。
+  VITE_AIPI_B1COH_URL: "https://ch1.b.uat.4.cn/web",
+
+  // B2 行为体/网络资源系统地址。
+  VITE_AIPI_B2ACTOR_URL: "https://ty.b.uat.4.cn",
+
+  // B2 网络 XWT iframe 路径。
+  VITE_AIPI_B2ACTOR_XWT_PATH: "/fromB/toXWT?isFrame=1",
+
+  // 知识库 iframe 地址换取接口。
+  VITE_AIPI_KNOWLEDGE_IFRAME_API_URL: "https://ch1.b.uat.4.cn/knowes/api/iframeKnowledgeUrl",
+
+  // 知识库 iframe 皮肤参数。
+  VITE_AIPI_KNOWLEDGE_IFRAME_SKIN: "red",
+
+  // MopeChat 接口地址。
+  VITE_AIPI_MOPECHAT_URL: "https://ch1.b.uat.4.cn/likun_b1_mope",
+
+  // 工作室/空间后端接口：空间列表、空间详情、素材上传等使用。
+  VITE_AIPI_BACKENP_URL: "http://47.88.25.99:8000",
+
+  // 工作室/空间后端别名：兼容旧配置命名，通常与 VITE_AIPI_BACKENP_URL 保持一致。
+  VITE_NOTEBOOK_API_BASE_URL: "http://47.88.25.99:8000",
+
+  // 工作室/空间前端地址：用于 auth/callback、新建对话等跳转。
+  VITE_AIPI_FRONTEND_URL: "http://47.88.25.99:3000",
+
+  // Consumer 接口：深链任务详情 cop-task-detail、研判情报报告 selectSqReport 等使用。
+  VITE_AIPI_CONSUMER_URL: "http://10.19.200.5:8002/consumer",
+
+  // A 系统跳转地址：人物、组织、事件等列表项打开链接使用。
+  VITE_AIPI_PRESENT_URL: "http://present.a.uat.4.cn/present/domain",
+
+  // B 系统 knowes 根地址。
+  VITE_AIPI_KNOWES_URL: "http://ch1.b.uat.4.cn/knowes",
+
+  // MaxKey 鉴权地址：onlineTicket 换 token 使用。
+  VITE_AUTH_BASE_URL: "https://auth.y.sit.4.cn",
+
+  // PG 中任务 iframe 地址。
+  VITE_AIPI_PGLINKTO_URL: "https://pg.b.uat.4.cn",
+
+  // XK 中任务 iframe 地址。
+  VITE_AIPI_XKLINKTO_URL: "https://kz.b.uat.4.cn",
+
+  // 是否使用真实任务看板数据：true=真实接口；false=本地 mock。
+  VITE_USE_REAL_DATA: "true",
+
+  // 登录深链任务详情是否使用本地 mock：false=真实接口；true=本地 mock。
+  VITE_MOCK_COP_TASK_DETAIL: "false",
+
+  // 大屏绘制 selectSqReport 是否使用本地 mock：不在运行时强制覆盖，
+  // 由各环境的 .env 文件决定（开发环境为 true，生产环境为 false）。
+
+  // 静态站点模式开关；一般部署业务系统时保持 false。
+  VITE_STATIC_WEBSITE_ONLY: "false",
+
+  // GitHub OAuth Token；不使用 GitHub 相关能力时留空。
+  VITE_GITHUB_OAUTH_TOKEN: "",
+};

frontend-web/scripts/check-chrome109-css.mjs

@@ -0,0 +1,109 @@
+import fs from "node:fs";
+import path from "node:path";
+import postcss from "postcss";
+
+const unsupportedColor = /(?:color-mix|oklch|oklab|lab|lch)\(/i;
+const assetsDir = path.resolve("dist/assets");
+
+if (!fs.existsSync(assetsDir)) {
+  throw new Error("dist/assets 不存在，请先运行 pnpm build");
+}
+
+const cssFiles = fs
+  .readdirSync(assetsDir)
+  .filter((file) => file.endsWith(".css"));
+
+if (cssFiles.length === 0) {
+  throw new Error("dist/assets 中没有 CSS 构建产物");
+}
+
+const failures = [];
+let modernDeclarations = 0;
+
+const requiredLegacyFallbacks = [
+  {
+    file: "src/components/ui/textarea.tsx",
+    pattern: /rows=\{rows\s*\?\?\s*3\}/,
+    description: "Textarea needs a native rows fallback",
+  },
+  {
+    file: "src/components/ai-elements/prompt-input.tsx",
+    pattern: /<InputGroup className="h-auto min-h-16">/,
+    description: "Prompt textarea must not rely on :has() for its parent height",
+  },
+];
+
+for (const file of cssFiles) {
+  const root = postcss.parse(
+    fs.readFileSync(path.join(assetsDir, file), "utf8"),
+    { from: file },
+  );
+
+  root.walkDecls((declaration) => {
+    if (!unsupportedColor.test(declaration.value)) return;
+    modernDeclarations += 1;
+
+    let ancestor = declaration.parent;
+    while (ancestor) {
+      if (
+        ancestor.type === "atrule" &&
+        ancestor.name === "supports" &&
+        unsupportedColor.test(ancestor.params)
+      ) {
+        return;
+      }
+      ancestor = ancestor.parent;
+    }
+
+    let previous = declaration.prev();
+    while (previous?.type === "comment") previous = previous.prev();
+    const hasSafeFallback =
+      !declaration.prop.startsWith("--") &&
+      previous?.type === "decl" &&
+      previous.prop === declaration.prop &&
+      !unsupportedColor.test(previous.value);
+
+    if (!hasSafeFallback) {
+      failures.push(
+        `${file}:${declaration.source?.start?.line ?? "?"} ${declaration.prop}: ${declaration.value}`,
+      );
+    }
+  });
+}
+
+function walk(directory) {
+  return fs.readdirSync(directory, { withFileTypes: true }).flatMap((entry) => {
+    const fullPath = path.join(directory, entry.name);
+    return entry.isDirectory() ? walk(fullPath) : [fullPath];
+  });
+}
+
+for (const file of walk(path.resolve("src"))) {
+  if (!/\.[jt]sx?$/.test(file)) continue;
+  const source = fs.readFileSync(file, "utf8");
+  if (unsupportedColor.test(source)) {
+    failures.push(
+      `${path.relative(process.cwd(), file)} contains a runtime-only modern color function`,
+    );
+  }
+}
+
+for (const fallback of requiredLegacyFallbacks) {
+  const source = fs.readFileSync(path.resolve(fallback.file), "utf8");
+  if (!fallback.pattern.test(source)) {
+    failures.push(`${fallback.file}: ${fallback.description}`);
+  }
+}
+
+if (failures.length > 0) {
+  console.error("Legacy Chrome CSS compatibility check failed:\n");
+  console.error(failures.slice(0, 50).join("\n"));
+  if (failures.length > 50) {
+    console.error(`... and ${failures.length - 50} more`);
+  }
+  process.exit(1);
+}
+
+console.log(
+  `Legacy Chrome (100+) CSS compatibility check passed (${modernDeclarations} guarded modern declarations).`,
+);

frontend-web/scripts/postcss-legacy-color-fallback.mjs

@@ -0,0 +1,70 @@
+/**
+ * Tailwind 4 gracefully falls back from color-mix() to the base semantic
+ * color, but that turns utilities such as bg-primary/5 into an opaque fill on
+ * Chrome 109. Replace that fallback with an sRGB-channel based alpha color.
+ * The modern color-mix() declaration remains in its @supports block.
+ */
+
+const LEGACY_RGB_TOKENS = new Set([
+  "accent",
+  "background",
+  "border",
+  "brand-200",
+  "card",
+  "destructive",
+  "foreground",
+  "input",
+  "muted",
+  "muted-foreground",
+  "primary",
+  "primary-foreground",
+  "ring",
+  "secondary",
+  "sidebar-accent",
+  "sidebar-border",
+  "sidebar-foreground",
+  "workspace-brand",
+]);
+
+const TRANSPARENT_MIX_RE =
+  /color-mix\(\s*in\s+[\w-]+\s*,\s*var\(--([\w-]+)\)\s+([\d.]+)%\s*,\s*transparent\s*\)/i;
+
+function legacyAlphaColor(value) {
+  const match = value.match(TRANSPARENT_MIX_RE);
+  if (!match || !LEGACY_RGB_TOKENS.has(match[1])) return null;
+
+  const [, token, percentage] = match;
+  return `rgb(var(--legacy-${token}-rgb) / ${percentage}%)`;
+}
+
+export default function legacyColorFallback() {
+  return {
+    postcssPlugin: "postcss-legacy-color-fallback",
+    OnceExit(root) {
+      root.walkAtRules("supports", (atRule) => {
+        if (!atRule.params.includes("color-mix")) return;
+
+        atRule.walkDecls((modernDeclaration) => {
+          const fallbackValue = legacyAlphaColor(modernDeclaration.value);
+          if (!fallbackValue) return;
+
+          // Tailwind emits the old-browser declaration immediately before
+          // the nested @supports block, in the same utility/variant rule.
+          let fallbackDeclaration = atRule.prev();
+          while (fallbackDeclaration?.type === "comment") {
+            fallbackDeclaration = fallbackDeclaration.prev();
+          }
+
+          if (
+            fallbackDeclaration?.type === "decl" &&
+            fallbackDeclaration.prop === modernDeclaration.prop
+          ) {
+            fallbackDeclaration.value = fallbackValue;
+          }
+        });
+      });
+    },
+  };
+}
+
+legacyColorFallback.postcss = true;

frontend-web/scripts/postcss-lightningcss-chrome109.mjs

@@ -0,0 +1,33 @@
+import postcss from "postcss";
+import { transform } from "lightningcss";
+
+const LEGACY_CHROME = 100 << 16;
+
+/**
+ * Keep Vite's PostCSS pipeline (required by Tailwind 4), then compile the
+ * resulting CSS to Chrome 100-compatible syntax for both dev and production.
+ */
+export default function lightningCssLegacyChrome() {
+  return {
+    postcssPlugin: "postcss-lightningcss-legacy-chrome",
+    OnceExit(root, { result }) {
+      const filename = root.source?.input.file ?? result.opts.from ?? "style.css";
+      const output = transform({
+        filename,
+        code: Buffer.from(root.toString()),
+        targets: { chrome: LEGACY_CHROME },
+        minify: false,
+      });
+      const compiled = postcss.parse(output.code.toString(), { from: filename });
+
+      root.removeAll();
+      root.append(compiled.nodes);
+
+      for (const warning of output.warnings) {
+        result.warn(warning.message, { plugin: "lightningcss" });
+      }
+    },
+  };
+}
+
+lightningCssLegacyChrome.postcss = true;

frontend-web/src/App.tsx

@@ -7,6 +7,7 @@ import { FontScaleApplier } from "@/components/font-scale";
 import { QueryClientProvider } from "@/components/query-client-provider";
 import { AuthSyncWatcher } from "@/core/auth/sync";
 import { I18nProvider } from "@/core/i18n/context";
+import { fetchYLogConfig } from "@/core/log/y-log-config";
 import { detectLocale } from "@/core/i18n/locale";
 import { resolveForcedThemeForPath } from "@/core/page-layout/chats-iframe-route";
 import { ChatProvider } from "@/contexts/ChatContext";
@@ -50,6 +51,11 @@ function AppProviders({ children }: { children: React.ReactNode }) {
   useEffect(() => {
     syncEmbedSessionFromSearch(location.search);
   }, [location.search]);
+  // 操作日志(Y-Log)：启动早期预热上报配置，使 writeYLog 同步读缓存即可工作
+  // （刷新后 module 缓存清空，token 登录用户也能继续上报）。失败静默。
+  useEffect(() => {
+    void fetchYLogConfig();
+  }, []);
   const forcedTheme = useMemo(() => {
     // iframe 嵌入模式（外部系统 `&embed=1`）最高优先：按本标签页的嵌入主题强制明/暗。
     // 走 next-themes forcedTheme（不写 localStorage）→ 同浏览器另开的正常系统页不受影响。

frontend-web/src/components/ai-elements/code-block.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import { Button } from "@/components/ui/button";
+import { copyTextToClipboard } from "@/core/clipboard";
 import { cn } from "@/lib/utils";
 import { CheckIcon, CopyIcon } from "lucide-react";
 import {
@@ -147,13 +148,8 @@ export const CodeBlockCopyButton = ({
   const { code } = useContext(CodeBlockContext);
 
   const copyToClipboard = async () => {
-    if (typeof window === "undefined" || !navigator?.clipboard?.writeText) {
-      onError?.(new Error("Clipboard API not available"));
-      return;
-    }
-
     try {
-      await navigator.clipboard.writeText(code);
+      await copyTextToClipboard(code);
       setIsCopied(true);
       onCopy?.();
       setTimeout(() => setIsCopied(false), timeout);

frontend-web/src/components/ai-elements/prompt-input.tsx

@@ -846,7 +846,10 @@ export const PromptInput = ({
         ref={formRef}
         {...props}
       >
-        <InputGroup>{children}</InputGroup>
+        {/* Do not rely on InputGroup's :has(textarea) selector here: Chrome
+            versions before 105 ignore :has(), retain h-9, and clip the whole
+            multi-line composer to a single row. */}
+        <InputGroup className="h-auto min-h-16">{children}</InputGroup>
       </form>
     </PromptInputValidationContext.Provider>
   );
@@ -875,6 +878,7 @@ export type PromptInputTextareaProps = ComponentProps<
 
 export const PromptInputTextarea = ({
   onChange,
+  onInput,
   className,
   placeholder = "What would you like to know?",
   ...props
@@ -883,6 +887,37 @@ export const PromptInputTextarea = ({
   const attachments = usePromptInputAttachments();
   const sanitizeIncomingFiles = usePromptInputValidation();
   const [isComposing, setIsComposing] = useState(false);
+  const textareaRef = useRef<HTMLTextAreaElement | null>(null);
+
+  const resizeForLegacyChrome = useCallback((textarea: HTMLTextAreaElement) => {
+    if (
+      typeof CSS !== "undefined" &&
+      typeof CSS.supports === "function" &&
+      CSS.supports("field-sizing", "content")
+    ) {
+      return;
+    }
+
+    // Chrome 109 ignores field-sizing: content. Preserve the same 4rem–12rem
+    // autosize range used by min-h-16/max-h-48 instead of leaving the prompt
+    // stuck at its minimum height.
+    textarea.style.height = "auto";
+    const height = Math.max(64, Math.min(textarea.scrollHeight, 192));
+    textarea.style.height = `${height}px`;
+    textarea.style.overflowY = textarea.scrollHeight > 192 ? "auto" : "hidden";
+  }, []);
+
+  // onInput does not run for a controlled value filled by a suggested question
+  // or restored draft. Resize once after every render in legacy Chrome too.
+  useEffect(() => {
+    const textarea = textareaRef.current;
+    if (!textarea) return;
+
+    const frame = window.requestAnimationFrame(() => {
+      resizeForLegacyChrome(textarea);
+    });
+    return () => window.cancelAnimationFrame(frame);
+  }, [controller?.textInput.value, resizeForLegacyChrome]);
 
   const handleKeyDown: KeyboardEventHandler<HTMLTextAreaElement> = (e) => {
     if (e.key === "Enter") {
@@ -965,9 +1000,15 @@ export const PromptInputTextarea = ({
     <InputGroupTextarea
       className={cn("field-sizing-content max-h-48 min-h-16", className)}
       name="message"
+      ref={textareaRef}
+      rows={3}
       onCompositionEnd={() => setIsComposing(false)}
       onCompositionStart={() => setIsComposing(true)}
       onKeyDown={handleKeyDown}
+      onInput={(event) => {
+        resizeForLegacyChrome(event.currentTarget);
+        onInput?.(event);
+      }}
       onPaste={handlePaste}
       placeholder={placeholder}
       {...props}

frontend-web/src/components/assistant-ui/document-upload-popup.tsx

@@ -26,6 +26,7 @@ import {
 import { Button } from "@/components/ui/button";
 import { toast } from "sonner";
 import { getStoredAuth } from "@/core/auth";
+import { readRuntimeEnv } from "@/env";
 import { queryClient } from "@/components/query-client-provider";
 import { Checkbox } from "@/components/ui/checkbox";
 import Empty from "./empty";
@@ -303,11 +304,11 @@ const DocumentUploadPopupContent: FC<{
   const searchSpaceId = String(searchSpace?.id);
 
   // 从环境变量获取配置
-  const backendUrl = import.meta.env.VITE_AIPI_BACKENP_URL || "http://localhost:8001";
-  const consumerUrl = import.meta.env.VITE_AIPI_CONSUMER_URL || "http://ch1.b.uat.4.cn/consumer";
-  const presentUrl = import.meta.env.VITE_AIPI_PRESENT_URL || "http://present.a.uat.4.cn/present/domain";
-  const knowesUrl = import.meta.env.VITE_AIPI_KNOWES_URL || "http://ch1.b.uat.4.cn/knowes";
-  const knowledgeUrl = import.meta.env.VITE_AIPI_KNOWLEDGE_URL || "http://chlib.b.uat.4.cn/knowlibrary";
+  const backendUrl = readRuntimeEnv("VITE_AIPI_BACKENP_URL") || "http://localhost:8001";
+  const consumerUrl = readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || "http://ch1.b.uat.4.cn/consumer";
+  const presentUrl = readRuntimeEnv("VITE_AIPI_PRESENT_URL") || "http://present.a.uat.4.cn/present/domain";
+  const knowesUrl = readRuntimeEnv("VITE_AIPI_KNOWES_URL") || "http://ch1.b.uat.4.cn/knowes";
+  const knowledgeUrl = readRuntimeEnv("VITE_AIPI_KNOWLEDGE_URL") || "http://chlib.b.uat.4.cn/knowlibrary";
 
   const [searchText, setSearchText] = useState("");
   const [searchValue, setSearchValue] = useState("");
@@ -405,8 +406,15 @@ const DocumentUploadPopupContent: FC<{
       if (response.ok) {
         const data = await response.json() as { imported_count?: number };
         toast.success(`成功导入 ${data.imported_count || dataList.length} 个来源`);
-        setListData([]);
-        handleBatchDelete();
+        onUploadComplete?.(
+          selectedSearchSources.map((s) => ({
+            id: undefined,
+            title: s.title,
+            task_id: undefined,
+            status: "success" as const,
+          }))
+        );
+        onOpenChange(false);
       } else {
         const errorData = await response.json() as { detail?: string };
         toast.error(errorData.detail || "导入失败，请重试");
@@ -826,7 +834,13 @@ const DocumentUploadPopupContent: FC<{
                         </Button>
                       </div>
                     )}
-                    {listData.length === 0 && <Empty />}
+                    {isSearching ? (
+                      <div className="flex items-center justify-center py-16">
+                        <Loader2 className="h-8 w-8 animate-spin text-muted-foreground" />
+                      </div>
+                    ) : (
+                      listData.length === 0 && <Empty />
+                    )}
                     {searchType === "human" && (
                       <div className="bg-white p-[10px] grid grid-cols-5 gap-[10px]">
                         {listData.map((item: listDataItem, index: number) => {

frontend-web/src/components/assistant-ui/network-actor.tsx

@@ -11,6 +11,7 @@ import { Button } from "@/components/ui/button";
 import { toast } from "sonner";
 import { getStoredAuth } from "@/core/auth";
 import { authenticatedFetch } from "@/components/assistant-ui/document-upload-popup";
+import { readRuntimeEnv } from "@/env";
 
 
 interface NetworkActorProps {
@@ -186,9 +187,9 @@ export function NetworkActor({ inputValue, searchSpaceId, onSuccess }: NetworkAc
   const [actorCount, setActorCount] = useState<number>(0);
   const [directionType, setDirectionType] = useState<string>('TW');
   const directionValue = useRef<string>('TW');
-  const consumerUrl = import.meta.env.VITE_AIPI_CONSUMER_URL || 'https://ch1.b.uat.4.cn/consumer';
+  const consumerUrl = readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || 'https://ch1.b.uat.4.cn/consumer';
   const backendUrl = typeof window !== 'undefined'
-    ? (import.meta.env.VITE_BACKEND_BASE_URL || 'http://localhost:8001')
+    ? (readRuntimeEnv("VITE_BACKEND_BASE_URL") || 'http://localhost:8001')
     : 'http://localhost:8001';
   const [selectedSearchSources, setSelectedSearchSources] = useState<UserDataItem[]>([]);
   const [isImporting, setIsImporting] = useState(false);
@@ -545,7 +546,12 @@ export function NetworkActor({ inputValue, searchSpaceId, onSuccess }: NetworkAc
           </div>
         )}
         <div className="p-[10px]">
-          <div className="grid grid-cols-4 gap-[10px] user-list">
+          {isSearching ? (
+            <div className="flex items-center justify-center py-16">
+              <Loader2 className="h-8 w-8 animate-spin text-muted-foreground" />
+            </div>
+          ) : null}
+          <div className={`grid grid-cols-4 gap-[10px] user-list${isSearching ? ' hidden' : ''}`}>
             {userList.map((item, index) => (
               <div key={index} className="user-item p-[10px] relative">
                 <div className="absolute top-[5px] right-[10px]">

frontend-web/src/components/landing/progressive-skills-animation.tsx

@@ -508,8 +508,9 @@ export default function ProgressiveSkillsAnimation() {
                     "deploying",
                     "done",
                   ].includes(phase) && (
-                    <div className="text-base text-zinc-300">
-                      <span className="text-purple-400">✨</span> Found 3 skills
+                    <div className="flex items-center gap-2 text-base text-zinc-300">
+                      <Sparkles size={16} className="text-purple-400" />
+                      <span>Found 3 skills</span>
                     </div>
                   )}
 
@@ -526,8 +527,9 @@ export default function ProgressiveSkillsAnimation() {
                   ].includes(phase) && (
                     <div className="mt-4">
                       <hr className="mb-3 border-zinc-700" />
-                      <div className="mb-3 text-zinc-300">
-                        🔬 Researching...
+                      <div className="mb-3 inline-flex items-center gap-2 text-zinc-300">
+                        <Search size={16} className="text-blue-400" />
+                        <span>Researching...</span>
                       </div>
                       <div className="mb-3 space-y-2">
                         {/* Loading SKILL.md */}
@@ -623,7 +625,10 @@ export default function ProgressiveSkillsAnimation() {
                       className="mt-4"
                     >
                       <hr className="mb-3 border-zinc-700" />
-                      <div className="mb-3 text-zinc-300">🔨 Building...</div>
+                      <div className="mb-3 inline-flex items-center gap-2 text-zinc-300">
+                        <FileText size={16} className="text-zinc-400" />
+                        <span>Building...</span>
+                      </div>
                       <div className="mb-3 flex items-center gap-2 pl-4 text-zinc-400">
                         <FileText size={16} />
                         <span>Loading frontend-design/SKILL.md...</span>
@@ -653,7 +658,10 @@ export default function ProgressiveSkillsAnimation() {
                       className="mt-4"
                     >
                       <hr className="mb-3 border-zinc-700" />
-                      <div className="mb-3 text-zinc-300">🚀 Deploying...</div>
+                      <div className="mb-3 inline-flex items-center gap-2 text-zinc-300">
+                        <Terminal size={16} className="text-zinc-400" />
+                        <span>Deploying...</span>
+                      </div>
                       <div className="mb-3 space-y-2">
                         <div className="flex items-center gap-2 pl-4 text-zinc-400">
                           <FileText size={16} />
@@ -676,8 +684,9 @@ export default function ProgressiveSkillsAnimation() {
                           animate={{ opacity: 1, scale: 1 }}
                           className="mt-4 rounded-xl border border-green-500/30 bg-green-500/10 p-4"
                         >
-                          <div className="text-lg font-medium text-green-500">
-                            ✅ Live at biotech-startup.vercel.app
+                          <div className="inline-flex items-center gap-2 text-lg font-medium text-green-500">
+                            <Check size={18} />
+                            <span>Live at biotech-startup.vercel.app</span>
                           </div>
                         </motion.div>
                       )}

frontend-web/src/components/landing/sections/sandbox-section.tsx

@@ -35,27 +35,27 @@ export function SandboxSection({ className }: { className?: string }) {
               $ pip install -r requirements.txt
             </TypingAnimation>
             <AnimatedSpan delay={2000} className="text-green-500">
-              ✔ Installed pygame
+              [ok] Installed pygame
             </AnimatedSpan>
 
             <TypingAnimation delay={2400}>
               $ write game.py --lines 156
             </TypingAnimation>
             <AnimatedSpan delay={3200} className="text-blue-500">
-              ✔ Written 156 lines
+              [ok] Written 156 lines
             </AnimatedSpan>
 
             <TypingAnimation delay={3600}>
               $ python game.py --test
             </TypingAnimation>
             <AnimatedSpan delay={4200} className="text-green-500">
-              ✔ All sprites loaded
+              [ok] All sprites loaded
             </AnimatedSpan>
             <AnimatedSpan delay={4500} className="text-green-500">
-              ✔ Physics engine OK
+              [ok] Physics engine OK
             </AnimatedSpan>
             <AnimatedSpan delay={4800} className="text-green-500">
-              ✔ 60 FPS stable
+              [ok] 60 FPS stable
             </AnimatedSpan>
 
             {/* Scene 2: Data Analysis */}

frontend-web/src/components/page-sidebar.tsx

@@ -7,10 +7,12 @@ import {
   ChevronsUpDown,
   Folder,
   FolderOpen,
+  Gauge,
   ListTree,
   MousePointerClick,
   Settings,
   ShieldAlert,
+  ShieldCheck,
   User,
   Wrench,
 } from "lucide-react";
@@ -222,6 +224,22 @@ function SecondaryNavSidebar() {
                       按钮管理
                     </DropdownMenuItem>
                   )}
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/strategy/admin/login-whitelist")}
+                    >
+                      <ShieldCheck className="size-4" />
+                      白名单管理
+                    </DropdownMenuItem>
+                  )}
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/strategy/settings/model-concurrency")}
+                    >
+                      <Gauge className="size-4" />
+                      模型并发限制
+                    </DropdownMenuItem>
+                  )}
                   {canManageSensitiveWords() && (
                     <DropdownMenuItem
                       onClick={() => navigate("/page/strategy/admin/sensitive-words")}
@@ -508,6 +526,12 @@ function LegacyAccordionSidebar({
                   按钮管理
                 </DropdownMenuItem>
               )}
+              {isAdmin && (
+                <DropdownMenuItem onClick={() => navigate("/page/strategy/admin/login-whitelist")}>
+                  <ShieldCheck className="size-4" />
+                  白名单管理
+                </DropdownMenuItem>
+              )}
               {canManageSensitiveWords() && (
                 <DropdownMenuItem onClick={() => navigate("/page/strategy/admin/sensitive-words")}>
                   <ShieldAlert className="size-4" />

frontend-web/src/components/ui/input-group.tsx

@@ -144,13 +144,14 @@ function InputGroupInput({
   );
 }
 
-function InputGroupTextarea({
-  className,
-  ...props
-}: React.ComponentProps<"textarea">) {
+const InputGroupTextarea = React.forwardRef<
+  HTMLTextAreaElement,
+  React.ComponentProps<"textarea">
+>(function InputGroupTextarea({ className, ...props }, ref) {
   return (
     <Textarea
       data-slot="input-group-control"
+      ref={ref}
       className={cn(
         "flex-1 resize-none rounded-none border-0 bg-transparent py-3 shadow-none focus-visible:ring-0 dark:bg-transparent",
         className,
@@ -158,7 +159,9 @@ function InputGroupTextarea({
       {...props}
     />
   );
-}
+});
+
+InputGroupTextarea.displayName = "InputGroupTextarea";
 
 export {
   InputGroup,

frontend-web/src/components/ui/textarea.tsx

@@ -2,12 +2,19 @@ import * as React from "react";
 
 import { cn } from "@/lib/utils";
 
-function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
+const Textarea = React.forwardRef<
+  HTMLTextAreaElement,
+  React.ComponentProps<"textarea">
+>(function Textarea({ className, rows, ...props }, ref) {
+  // `field-sizing` is not available in older Chrome. Keep a native rows
+  // fallback so a multi-line editor never collapses into a single line.
   return (
     <textarea
       data-slot="textarea"
+      ref={ref}
+      rows={rows ?? 3}
       className={cn(
-        "border-input placeholder:text-muted-foreground/60 flex field-sizing-content min-h-16 w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
+        "border-input placeholder:text-muted-foreground/60 flex min-h-16 w-full rounded-md border bg-transparent px-3 py-2 text-base shadow-xs transition-[color,box-shadow] outline-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm",
         "dark:border-[#1B477E] dark:bg-[#022248] dark:text-[#AACEFF] ",
         "focus-visible:border-ring focus-visible:ring-ring/50 focus-visible:ring-[3px] aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 aria-invalid:border-destructive",
         className,
@@ -15,6 +22,8 @@ function Textarea({ className, ...props }: React.ComponentProps<"textarea">) {
       {...props}
     />
   );
-}
+});
+
+Textarea.displayName = "Textarea";
 
 export { Textarea };

frontend-web/src/components/wiki/EmptyDocumentState.tsx

@@ -3,7 +3,7 @@ export function EmptyDocumentState() {
   return (
     <div className="flex h-full items-center justify-center bg-white px-6 text-center dark:bg-slate-900">
       <div className="rounded-2xl border border-dashed border-slate-300 bg-slate-50 px-10 py-12 sm:px-12 dark:border-slate-700 dark:bg-slate-800/50">
-        <div className="mb-4 text-[40px] leading-none">📚</div>
+        <div className="mb-4 text-[28px] font-semibold leading-none text-slate-500 dark:text-slate-300">文档</div>
         <div className="mb-2 text-lg font-bold text-slate-700 dark:text-slate-200">
           选择一篇文档开始阅读
         </div>

frontend-web/src/components/workspace/admin/concurrency-monitor.tsx

@@ -0,0 +1,556 @@
+"use client";
+
+import {
+  Activity,
+  Gauge,
+  Loader2,
+  OctagonX,
+  RefreshCw,
+  Square,
+  Zap,
+} from "lucide-react";
+import { useId, useMemo, useState } from "react";
+import { toast } from "sonner";
+
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Switch } from "@/components/ui/switch";
+import type {
+  ActiveRunItem,
+  ConcurrencyPoint,
+  Granularity,
+  TokenSpeedPoint,
+} from "@/core/admin/active-runs";
+import {
+  useActiveRuns,
+  useCancelActiveRun,
+  useCancelAllActiveRuns,
+  useConcurrencySeries,
+  useMonitorSettings,
+  useTokenSpeedSeries,
+  useUpdateMonitorSettings,
+} from "@/core/admin/hooks";
+import { cn } from "@/lib/utils";
+
+/** lookback window (hours) per granularity. */
+const LOOKBACK: Record<Granularity, number> = { minute: 3, hour: 48 };
+
+function fmtBucket(iso: string, granularity: Granularity): string {
+  const date = new Date(iso);
+  if (Number.isNaN(date.getTime())) return iso;
+  const mm = String(date.getMonth() + 1).padStart(2, "0");
+  const dd = String(date.getDate()).padStart(2, "0");
+  const hh = String(date.getHours()).padStart(2, "0");
+  const mi = String(date.getMinutes()).padStart(2, "0");
+  return granularity === "hour" ? `${mm}-${dd} ${hh}:00` : `${hh}:${mi}`;
+}
+
+function fmtElapsed(seconds: number): string {
+  if (seconds < 60) return `${seconds}s`;
+  const m = Math.floor(seconds / 60);
+  const s = seconds % 60;
+  if (m < 60) return `${m}m${s.toString().padStart(2, "0")}s`;
+  const h = Math.floor(m / 60);
+  return `${h}h${(m % 60).toString().padStart(2, "0")}m`;
+}
+
+interface LineSeries {
+  name: string;
+  color: string;
+  values: (number | null)[];
+}
+
+/** Round a value up to a "nice" axis ceiling (1 / 2 / 5 × 10ⁿ). */
+function niceCeil(v: number): number {
+  if (!Number.isFinite(v) || v <= 0) return 1;
+  const exp = Math.floor(Math.log10(v));
+  const base = 10 ** exp;
+  const f = v / base;
+  const nice = f <= 1 ? 1 : f <= 2 ? 2 : f <= 5 ? 5 : 10;
+  return nice * base;
+}
+
+/**
+ * Build distinct axis ticks from the data max. For integer series (并发量) this
+ * yields whole-number ticks with no duplicate labels (fixes the「0 0 0 1 1」
+ * axis when the max is 1); for floats it uses a nice ceiling at quarters.
+ */
+function buildTicks(dataMax: number, integer: boolean): number[] {
+  if (!Number.isFinite(dataMax) || dataMax <= 0) return [0, 1];
+  if (integer) {
+    const niceMax = Math.max(1, Math.ceil(dataMax));
+    const step = Math.max(1, Math.ceil(niceMax / 4)); // ≤5 integer ticks
+    const top = Math.ceil(niceMax / step) * step;
+    const ticks: number[] = [];
+    for (let v = 0; v <= top; v += step) ticks.push(v);
+    return ticks;
+  }
+  const niceMax = niceCeil(dataMax);
+  return [0, 0.25, 0.5, 0.75, 1].map((r) => niceMax * r);
+}
+
+function fmtAxis(v: number, integer: boolean): string {
+  if (integer) return String(Math.round(v));
+  if (v === 0) return "0";
+  return v < 10 ? v.toFixed(1) : String(Math.round(v));
+}
+
+/** Last non-null value of a series (for the legend's current reading). */
+function latestOf(values: (number | null)[]): number | null {
+  for (let i = values.length - 1; i >= 0; i -= 1) {
+    if (values[i] != null) return values[i] as number;
+  }
+  return null;
+}
+
+/** Minimal dependency-free SVG line chart: legend + 1–2 series + area + caption. */
+function LineChart({
+  labels,
+  series,
+  unit,
+  integer = false,
+  note,
+  emptyHint,
+}: {
+  labels: string[];
+  series: LineSeries[];
+  unit: string;
+  integer?: boolean;
+  note?: string;
+  emptyHint: string;
+}) {
+  const gradId = `cm-area-${useId().replace(/:/g, "")}`;
+  const width = 760;
+  const height = 220;
+  const pad = { top: 16, right: 16, bottom: 26, left: 44 };
+  const cw = width - pad.left - pad.right;
+  const ch = height - pad.top - pad.bottom;
+  const n = labels.length;
+
+  const allValues = series.flatMap((s) => s.values.filter((v): v is number => v != null));
+  const dataMax = allValues.length ? Math.max(...allValues) : 0;
+  const ticks = buildTicks(dataMax, integer);
+  const axisMax = ticks[ticks.length - 1] || 1;
+
+  // Legend always renders (even with no data) so the lines are self-explanatory.
+  const legend = (
+    <div className="mb-2 flex flex-wrap items-center gap-x-4 gap-y-1">
+      {series.map((s) => {
+        const latest = latestOf(s.values);
+        return (
+          <span key={s.name} className="flex items-center gap-1.5 text-xs text-[#5F6368] dark:text-slate-300">
+            <span className="inline-block h-[3px] w-4 rounded-full" style={{ backgroundColor: s.color }} />
+            {s.name}
+            {latest != null && (
+              <span className="font-semibold tabular-nums text-[#231815] dark:text-white">
+                {Number.isInteger(latest) ? latest : latest.toFixed(1)}
+                {unit}
+              </span>
+            )}
+          </span>
+        );
+      })}
+    </div>
+  );
+
+  const caption = note ? (
+    <p className="mt-2 text-[11px] leading-4 text-[#8B6B6B] dark:text-[#7FACF2]">{note}</p>
+  ) : null;
+
+  if (n === 0) {
+    return (
+      <div>
+        {legend}
+        <div className="flex h-[160px] items-center justify-center rounded-lg border border-dashed border-[#F1D6D6] text-sm text-[#5F6368] dark:border-[#213D5E] dark:text-slate-400">
+          {emptyHint}
+        </div>
+        {caption}
+      </div>
+    );
+  }
+
+  const xFor = (i: number) => pad.left + (n <= 1 ? cw / 2 : (i / (n - 1)) * cw);
+  const yFor = (v: number) => pad.top + ch - (v / axisMax) * ch;
+
+  const linePath = (vals: (number | null)[]) => {
+    let d = "";
+    let started = false;
+    vals.forEach((v, i) => {
+      if (v == null) {
+        started = false;
+        return;
+      }
+      d += `${started ? "L" : "M"} ${xFor(i).toFixed(1)} ${yFor(v).toFixed(1)} `;
+      started = true;
+    });
+    return d.trim();
+  };
+
+  const first = series[0];
+  const areaPath = (() => {
+    if (!first) return "";
+    const line = linePath(first.values);
+    if (!line) return "";
+    return `${line} L ${xFor(n - 1).toFixed(1)} ${(pad.top + ch).toFixed(1)} L ${xFor(0).toFixed(1)} ${(pad.top + ch).toFixed(1)} Z`;
+  })();
+
+  const labelStep = Math.max(1, Math.ceil(n / 7));
+
+  return (
+    <div>
+      {legend}
+      <svg viewBox={`0 0 ${width} ${height}`} className="w-full" role="img" aria-label="时序折线图">
+        <defs>
+          <linearGradient id={gradId} x1="0" x2="0" y1="0" y2="1">
+            <stop offset="0%" stopColor={first?.color ?? "#C1121F"} stopOpacity="0.18" />
+            <stop offset="100%" stopColor={first?.color ?? "#C1121F"} stopOpacity="0.02" />
+          </linearGradient>
+        </defs>
+        {ticks.map((t) => {
+          const y = yFor(t);
+          return (
+            <g key={t}>
+              <line
+                x1={pad.left}
+                x2={width - pad.right}
+                y1={y}
+                y2={y}
+                stroke="currentColor"
+                className="text-[#E5E7EB] dark:text-[#3F3F46]"
+                strokeWidth="1"
+              />
+              <text x={pad.left - 6} y={y + 3} textAnchor="end" className="fill-[#9CA3AF] text-[10px]">
+                {fmtAxis(t, integer)}
+              </text>
+            </g>
+          );
+        })}
+        {areaPath && <path d={areaPath} fill={`url(#${gradId})`} />}
+        {series.map((s) => (
+          <path
+            key={s.name}
+            d={linePath(s.values)}
+            fill="none"
+            stroke={s.color}
+            strokeWidth="2"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+        ))}
+        {labels.map((label, i) => {
+          if (i !== 0 && i !== n - 1 && i % labelStep !== 0) return null;
+          return (
+            <text key={`${label}-${i}`} x={xFor(i)} y={height - 8} textAnchor="middle" className="fill-[#6B7280] text-[10px]">
+              {label}
+            </text>
+          );
+        })}
+        {series.map((s) =>
+          s.values.map((v, i) =>
+            v == null ? null : (
+              <circle key={`${s.name}-${i}`} cx={xFor(i)} cy={yFor(v)} r={2.5} fill={s.color}>
+                <title>{`${labels[i]} · ${s.name}: ${v}${unit}`}</title>
+              </circle>
+            ),
+          ),
+        )}
+      </svg>
+      {caption}
+    </div>
+  );
+}
+
+function ChartCard({
+  icon: Icon,
+  title,
+  subtitle,
+  children,
+}: {
+  icon: typeof Activity;
+  title: string;
+  subtitle: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <section className="rounded-lg border border-[#F1D6D6] bg-white p-4 shadow-sm dark:border-[#213D5E] dark:bg-[#02244C]">
+      <div className="mb-3 flex items-center gap-2">
+        <Icon className="size-4 text-[#C1121F] dark:text-[#7FACF2]" />
+        <h3 className="font-semibold text-[#231815] dark:text-white">{title}</h3>
+        <span className="ml-auto text-xs text-[#8B6B6B] dark:text-[#7FACF2]">{subtitle}</span>
+      </div>
+      {children}
+    </section>
+  );
+}
+
+function ActiveRunRow({
+  run,
+  onStop,
+  stopping,
+}: {
+  run: ActiveRunItem;
+  onStop: (runId: string) => void;
+  stopping: boolean;
+}) {
+  return (
+    <div className="grid grid-cols-[minmax(0,1.4fr)_minmax(0,1.2fr)_72px_64px_64px_72px] items-center gap-3 border-b border-[#F1D6D6] px-3 py-2 text-sm last:border-b-0 dark:border-[#213D5E]">
+      <div className="min-w-0">
+        <div className="truncate font-medium text-[#202124] dark:text-white">{run.user_name || "未知用户"}</div>
+        <div className="truncate text-xs text-[#5F6368] dark:text-slate-400" title={run.thread_title}>
+          {run.thread_title || run.thread_id}
+        </div>
+      </div>
+      <div className="min-w-0 truncate text-[#202124] dark:text-slate-100">{run.agent_name}</div>
+      <Badge variant="outline" className="justify-center">
+        {run.kind}
+      </Badge>
+      <span
+        className={cn(
+          "text-center text-xs font-medium",
+          run.status === "running" ? "text-[#0F766E] dark:text-teal-300" : "text-[#B45309] dark:text-amber-300",
+        )}
+      >
+        {run.status === "running" ? "运行中" : "排队中"}
+      </span>
+      <span className="text-center text-xs tabular-nums text-[#5F6368] dark:text-slate-400">
+        {fmtElapsed(run.elapsed_seconds)}
+      </span>
+      <Button
+        size="sm"
+        variant="outline"
+        className="h-7 border-[#C1121F]/40 text-[#C1121F] hover:bg-[#FFF1F1] dark:border-rose-400/40 dark:text-rose-200"
+        disabled={stopping}
+        onClick={() => onStop(run.run_id)}
+      >
+        {stopping ? <Loader2 className="size-3.5 animate-spin" /> : <Square className="size-3.5" />}
+        停止
+      </Button>
+    </div>
+  );
+}
+
+export function ConcurrencyMonitorPanel() {
+  const [open, setOpen] = useState(true);
+  const [granularity, setGranularity] = useState<Granularity>("minute");
+
+  const { data: live, isLoading: liveLoading, refetch, isRefetching } = useActiveRuns(open);
+  const concurrency = useConcurrencySeries(granularity, LOOKBACK[granularity], open);
+  const tokenSpeed = useTokenSpeedSeries(granularity, LOOKBACK[granularity], open);
+  const { data: settings } = useMonitorSettings();
+  const updateSettings = useUpdateMonitorSettings();
+  const cancelOne = useCancelActiveRun();
+  const cancelAll = useCancelAllActiveRuns();
+
+  const [stoppingId, setStoppingId] = useState<string | null>(null);
+
+  const count = live?.count ?? 0;
+  const runs = live?.runs ?? [];
+  const samplerOn = settings?.enabled ?? false;
+
+  const concurrencyChart = useMemo(() => {
+    const points: ConcurrencyPoint[] = concurrency.data?.points ?? [];
+    return {
+      labels: points.map((p) => fmtBucket(p.bucket, granularity)),
+      series: [
+        { name: "峰值并发", color: "#C1121F", values: points.map((p) => p.peak) },
+        { name: "平均并发", color: "#F59E0B", values: points.map((p) => p.avg) },
+      ] as LineSeries[],
+    };
+  }, [concurrency.data, granularity]);
+
+  const tokenChart = useMemo(() => {
+    const points: TokenSpeedPoint[] = tokenSpeed.data?.points ?? [];
+    return {
+      labels: points.map((p) => fmtBucket(p.bucket, granularity)),
+      series: [
+        { name: "平均速度", color: "#2563EB", values: points.map((p) => p.avg_tokens_per_sec) },
+        { name: "最慢", color: "#9333EA", values: points.map((p) => p.min_tokens_per_sec) },
+      ] as LineSeries[],
+    };
+  }, [tokenSpeed.data, granularity]);
+
+  const handleStop = async (runId: string) => {
+    setStoppingId(runId);
+    try {
+      const res = await cancelOne.mutateAsync(runId);
+      toast[res.cancelled ? "success" : "info"](res.cancelled ? "已停止该对话调用" : "该调用已结束或不存在");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "停止失败");
+    } finally {
+      setStoppingId(null);
+    }
+  };
+
+  const handleStopAll = async () => {
+    if (runs.length === 0) return;
+    if (!window.confirm(`确定要停止当前全部 ${count} 个并发调用吗？这会中断这些用户正在生成的回答。`)) return;
+    try {
+      const res = await cancelAll.mutateAsync();
+      toast.success(`已停止 ${res.cancelled_count} 个调用`);
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "全部停止失败");
+    }
+  };
+
+  const handleToggleSampler = async (next: boolean) => {
+    try {
+      await updateSettings.mutateAsync(next);
+      toast.success(next ? "已开启并发采样" : "已关闭并发采样（折线图不再新增历史点）");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "切换失败");
+    }
+  };
+
+  return (
+    <section className="space-y-4 rounded-xl border border-[#F1D6D6] bg-[#FFF7F7] p-4 shadow-sm dark:border-[#213D5E] dark:bg-[#011226]">
+      {/* header */}
+      <div className="flex flex-wrap items-center gap-3">
+        <div className="flex items-center gap-2">
+          <span className="flex size-9 items-center justify-center rounded-lg bg-[#C1121F] text-white dark:bg-[#2563EB]">
+            <Activity className="size-5" />
+          </span>
+          <div>
+            <div className="font-semibold text-[#231815] dark:text-white">实时并发监控</div>
+            <div className="text-xs text-[#8B6B6B] dark:text-[#7FACF2]">
+              监控大模型并发压力，可直接停止任意对话调用
+            </div>
+          </div>
+        </div>
+
+        <div className="ml-auto flex flex-wrap items-center gap-3">
+          <div className="flex items-center gap-2 rounded-lg border border-[#F1D6D6] bg-white px-3 py-1.5 dark:border-[#213D5E] dark:bg-[#02244C]">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">当前并发</span>
+            <span
+              className={cn(
+                "text-2xl font-semibold tabular-nums",
+                count > 0 ? "text-[#C1121F] dark:text-[#7FACF2]" : "text-[#202124] dark:text-white",
+              )}
+            >
+              {count}
+            </span>
+          </div>
+          <div className="flex items-center gap-2 rounded-lg border border-[#F1D6D6] bg-white px-3 py-1.5 dark:border-[#213D5E] dark:bg-[#02244C]">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">后台采样</span>
+            <Switch checked={samplerOn} onCheckedChange={handleToggleSampler} disabled={updateSettings.isPending} />
+          </div>
+          <Button variant="outline" size="sm" onClick={() => refetch()} disabled={isRefetching}>
+            <RefreshCw className={cn("mr-1 size-4", isRefetching && "animate-spin")} />
+            刷新
+          </Button>
+          <Button
+            variant="outline"
+            size="sm"
+            className="border-[#C1121F]/50 text-[#C1121F] hover:bg-[#FFF1F1] dark:border-rose-400/40 dark:text-rose-200"
+            onClick={handleStopAll}
+            disabled={cancelAll.isPending || runs.length === 0}
+          >
+            <OctagonX className="mr-1 size-4" />
+            全部停止
+          </Button>
+          <Button variant="ghost" size="sm" onClick={() => setOpen((v) => !v)}>
+            {open ? "收起" : "展开"}
+          </Button>
+        </div>
+      </div>
+
+      {open && (
+        <>
+          {!samplerOn && (
+            <div className="rounded-lg border border-amber-300/60 bg-amber-50 px-3 py-2 text-xs text-amber-800 dark:border-amber-300/30 dark:bg-amber-300/10 dark:text-amber-100">
+              后台采样默认关闭：实时并发数与「停止」功能始终可用。需要并发量历史折线图时，打开右上角「后台采样」开关即可开始记录（对线上服务影响极小，可随时关闭）。
+            </div>
+          )}
+
+          {/* granularity toggle */}
+          <div className="flex items-center gap-2">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">统计粒度</span>
+            {(["minute", "hour"] as Granularity[]).map((g) => (
+              <Button
+                key={g}
+                size="sm"
+                variant={granularity === g ? "default" : "outline"}
+                className={cn("h-7", granularity === g && "bg-[#C1121F] hover:bg-[#A50F1A] dark:bg-[#2563EB]")}
+                onClick={() => setGranularity(g)}
+              >
+                {g === "minute" ? "按分钟" : "按小时"}
+              </Button>
+            ))}
+            <span className="text-xs text-[#8B6B6B] dark:text-[#7FACF2]">
+              {granularity === "minute" ? "近 3 小时" : "近 48 小时"}
+            </span>
+          </div>
+
+          {/* charts */}
+          <div className="grid gap-3 xl:grid-cols-2">
+            <ChartCard icon={Gauge} title="并发量（系统压力）" subtitle={`每${granularity === "hour" ? "小时" : "分钟"}一个点`}>
+              {concurrency.isLoading ? (
+                <div className="flex h-[220px] items-center justify-center text-sm text-[#5F6368] dark:text-slate-400">
+                  <Loader2 className="mr-2 size-4 animate-spin" /> 加载中
+                </div>
+              ) : (
+                <LineChart
+                  labels={concurrencyChart.labels}
+                  series={concurrencyChart.series}
+                  unit=" 个"
+                  integer
+                  note="红线=该时段同时进行的最多调用数（峰值）；橙线=该时段平均值。数值越高、越靠上，说明同时打大模型的请求越多、系统压力越大。"
+                  emptyHint="暂无并发采样数据（需打开「后台采样」开关后才开始记录）"
+                />
+              )}
+            </ChartCard>
+            <ChartCard icon={Zap} title="大模型出字速度" subtitle={`每${granularity === "hour" ? "小时" : "分钟"}一个点`}>
+              {tokenSpeed.isLoading ? (
+                <div className="flex h-[220px] items-center justify-center text-sm text-[#5F6368] dark:text-slate-400">
+                  <Loader2 className="mr-2 size-4 animate-spin" /> 加载中
+                </div>
+              ) : (
+                <LineChart
+                  labels={tokenChart.labels}
+                  series={tokenChart.series}
+                  unit=" t/s"
+                  note="蓝线=该时段所有大模型调用的平均出字速度（tokens/秒，越高越快）；紫线=该时段最慢的一次调用。某段时间线明显下凹，说明那会儿模型/供应商变慢，是压力或瓶颈所在。"
+                  emptyHint="暂无大模型调用记录"
+                />
+              )}
+            </ChartCard>
+          </div>
+
+          {/* active run list */}
+          <section className="rounded-lg border border-[#F1D6D6] bg-white dark:border-[#213D5E] dark:bg-[#02244C]">
+            <div className="flex items-center gap-2 border-b border-[#F1D6D6] px-3 py-2 dark:border-[#213D5E]">
+              <span className="font-semibold text-[#231815] dark:text-white">正在进行的调用</span>
+              <Badge variant="outline">{count}</Badge>
+              {liveLoading && <Loader2 className="size-3.5 animate-spin text-[#8B6B6B]" />}
+            </div>
+            {runs.length === 0 ? (
+              <div className="py-10 text-center text-sm text-[#5F6368] dark:text-slate-400">
+                当前没有正在进行的大模型调用
+              </div>
+            ) : (
+              <div>
+                <div className="grid grid-cols-[minmax(0,1.4fr)_minmax(0,1.2fr)_72px_64px_64px_72px] gap-3 border-b border-[#F1D6D6] px-3 py-2 text-xs text-[#8B6B6B] dark:border-[#213D5E] dark:text-[#7FACF2]">
+                  <span>用户 / 会话</span>
+                  <span>智能体</span>
+                  <span className="text-center">类型</span>
+                  <span className="text-center">状态</span>
+                  <span className="text-center">已运行</span>
+                  <span className="text-center">操作</span>
+                </div>
+                {runs.map((run) => (
+                  <ActiveRunRow
+                    key={run.run_id}
+                    run={run}
+                    onStop={handleStop}
+                    stopping={stoppingId === run.run_id}
+                  />
+                ))}
+              </div>
+            )}
+          </section>
+        </>
+      )}
+    </section>
+  );
+}
+
+export default ConcurrencyMonitorPanel;

frontend-web/src/components/workspace/admin/tool-metrics-panel.tsx

@@ -213,7 +213,7 @@ const errorToastDarkOptions = {
         </div>
         <div className="flex flex-1 flex-wrap items-center gap-1.5">
           {summary && Object.keys(summary.by_category).length === 0 && (
-            <span className="text-muted-foreground text-sm">暂无失败记录 🎉</span>
+            <span className="text-muted-foreground text-sm">暂无失败记录</span>
           )}
           {summary &&
             Object.entries(summary.by_category)

frontend-web/src/components/workspace/agent-welcome.tsx

@@ -35,7 +35,7 @@ export function AgentWelcome({
         className,
       )}
     >
-      <div className="bg-primary/10 ring-primary/15 mb-2 flex h-[72px] w-[72px] items-center justify-center rounded-3xl ring-1">
+      <div className="agent-avatar bg-primary/10 ring-primary/15 mb-2 flex h-[72px] w-[72px] items-center justify-center rounded-3xl ring-1">
         <BotIcon className="text-primary h-9 w-9" />
       </div>
       <div className="text-3xl font-bold tracking-tight">

frontend-web/src/components/workspace/agents/agent-card.tsx

@@ -77,6 +77,7 @@ import {
 import { getAgent } from "@/core/agents/api";
 import type { Agent, AgentQuestion, UpdateAgentRequest } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
 import { useI18n } from "@/core/i18n/hooks";
 import { useSkills } from "@/core/skills/hooks";
 import { formatDateTime } from "@/core/utils/datetime";
@@ -250,6 +251,8 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
 
   const storedAuth = useMemo(() => getStoredAuth(), []);
   const currentUserId = storedAuth?.user_id ?? null;
+  // 发布请求实际以「实时」token 执行 —— 用 live 账号来提示发布者并检测账号是否被切换。
+  const live = useLiveAccount();
   const isAdmin = storedAuth?.system_role === "admin";
   const isBuiltin = agent.builtin;
   const isOwned =
@@ -424,18 +427,38 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
       setPublishPickerOpen(true);
       return;
     }
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
         request: { published: !agent.published },
       });
-      toast.success(agent.published ? "已取消发布" : "已发布");
+      toast.success(
+        agent.published ? "已取消发布" : `已发布（操作账号：${live.displayName}）`,
+      );
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
     }
   }
 
+  // 发布操作以实时 token 执行。若会话中途账号被切换（常见于另一标签页登录了别的
+  // 账号），先弹一次确认 —— 避免误以本人之外的账号执行发布。返回 false = 用户取消。
+  function warnIfAccountSwitched(): boolean {
+    if (!live.switched) {
+      return true;
+    }
+    return window.confirm(
+      `当前登录账号已从「${live.mountDisplayName}」切换为「${live.displayName}」。\n` +
+        `本次发布将以「${live.displayName}」执行。如需以「${live.mountDisplayName}」操作，请取消并刷新页面。\n\n仍要继续吗？`,
+    );
+  }
+
   async function handlePublishToSquare(squareId: string) {
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
@@ -443,7 +466,7 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
       });
       const sqName =
         publishSquares?.squares.find((s) => s.id === squareId)?.name ?? "广场";
-      toast.success(`已发布到「${sqName}」`);
+      toast.success(`已发布到「${sqName}」（操作账号：${live.displayName}）`);
       setPublishPickerOpen(false);
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
@@ -816,7 +839,7 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
       <CardHeader className="min-w-0 pb-2">
         <div className="flex min-w-0 items-start justify-between gap-2">
           <div className="flex min-w-0 flex-1 items-center gap-2 overflow-hidden">
-            <div className="bg-primary/10 text-primary flex h-9 w-9 shrink-0 items-center justify-center rounded-lg">
+            <div className="agent-avatar bg-primary/10 text-primary flex h-9 w-9 shrink-0 items-center justify-center rounded-lg">
               <BotIcon className="h-5 w-5" />
             </div>
             <div className="min-w-0 flex-1 overflow-hidden">
@@ -871,7 +894,7 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
 
   const listLayout = (
     <div className="group flex min-w-0 items-center gap-3 rounded-lg border p-2.5 transition-shadow hover:shadow-sm dark:border-[#213D5E] dark:bg-[#02244C]">
-      <div className="bg-primary/10 text-primary flex h-9 w-9 shrink-0 items-center justify-center rounded-lg">
+      <div className="agent-avatar bg-primary/10 text-primary flex h-9 w-9 shrink-0 items-center justify-center rounded-lg">
         <BotIcon className="h-5 w-5" />
       </div>
       <div className="min-w-0 flex-1 overflow-hidden">
@@ -957,7 +980,7 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
                     ? "正在加载 SOUL.md..."
                     : "输入 SOUL.md 内容"
                 }
-                className="max-h-[45vh] min-h-48 resize-y font-mono text-xs"
+                className="max-h-[45vh] min-h-48 resize-y text-xs"
               />
             </div>
             <div className="space-y-2">
@@ -1117,6 +1140,23 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
         loading={updateAgent.isPending}
         onConfirm={(squareId) => void handlePublishToSquare(squareId)}
         description="请选择要把该智能体发布到哪个广场。每个智能体只能归属一个广场，不会重复出现。"
+        accountNotice={
+          <div className="text-xs">
+            <p className="text-muted-foreground">
+              发布操作账号：
+              <span className="text-foreground font-medium">
+                「{live.displayName}」
+              </span>
+            </p>
+            {live.switched && (
+              <p className="text-destructive mt-1">
+                ⚠ 当前登录账号已从「{live.mountDisplayName}」切换为「
+                {live.displayName}」。如需以「{live.mountDisplayName}
+                」操作，请刷新页面确认。
+              </p>
+            )}
+          </div>
+        }
       />
     </>
   );

frontend-web/src/components/workspace/agents/agent-chat-sidebar.tsx

@@ -70,6 +70,8 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  bootstrapResumePath,
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
   sortThreadsPinnedFirst,
@@ -258,37 +260,68 @@ export function AgentChatSidebar({ activeAgentId }: { activeAgentId?: string })
                         key={agent.id}
                         href={href}
                         className={cn(
-                          "group relative flex w-full items-start gap-2.5 rounded-xl border px-2.5 py-2 transition-colors",
+                          "group relative flex w-full items-start gap-3 rounded-xl border px-3 py-2.5 transition-all duration-150",
                           isActive
-                            ? "border-primary/40 bg-primary/5"
+                            ? isDark
+                              ? "border-[#2b8ffe] bg-[#0b4fae]/65 shadow-[0_0_0_1px_rgba(43,143,254,0.5),0_12px_28px_rgba(37,128,255,0.25)]"
+                              : "agent-sidebar-card--active border-primary/50 bg-primary/10 shadow-sm"
+                            : isDark
+                              ? "border-[#2b8ffe]/20 bg-[#042b59]/35 hover:border-[#2b8ffe]/60 hover:bg-[#063b77]/60"
                               : "border-transparent hover:border-border hover:bg-accent/50",
                         )}
                       >
                         <span
-                          className="mt-0.5 flex size-9 shrink-0 items-center justify-center rounded-lg text-white shadow-sm"
+                          className={cn(
+                            "mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-lg text-white shadow-sm",
+                            isDark &&
+                              isActive &&
+                              "ring-2 ring-[#83c1ff]/35 shadow-[0_0_18px_rgba(43,143,254,0.45)]",
+                          )}
                           style={{
                             backgroundImage: `linear-gradient(135deg, ${from}, ${to})`,
                           }}
                         >
-                          <Bot className="size-[18px]" />
+                          <Bot className="size-[19px]" />
                         </span>
                         <span className="min-w-0 flex-1">
                           <span
                             className={cn(
-                              "block truncate text-[13px] font-semibold",
-                              isActive ? "text-primary" : "text-foreground",
+                              "block truncate text-[16px] leading-5 font-bold",
+                              isActive
+                                ? isDark
+                                  ? "text-white"
+                                  : "text-primary"
+                                : isDark
+                                  ? "text-white/95"
+                                  : "text-foreground",
                             )}
                           >
                             {desensitize(agent.name)}
                           </span>
-                          <span className="mt-0.5 block truncate text-[11px] leading-snug text-muted-foreground">
+                          <span
+                            className={cn(
+                              "mt-1 block truncate text-[13px] leading-[1.35]",
+                              isDark
+                                ? isActive
+                                  ? "text-[#d6eaff]"
+                                  : "text-[#9ebfe2]"
+                                : "text-muted-foreground",
+                            )}
+                          >
                             {agent.description
                               ? desensitize(agent.description)
                               : "智能体助手"}
                           </span>
                         </span>
                         {isActive && (
-                          <span className="absolute top-1/2 right-1 h-6 w-1 -translate-y-1/2 rounded-full bg-primary" />
+                          <span
+                            className={cn(
+                              "absolute top-1/2 right-1.5 h-8 w-1.5 -translate-y-1/2 rounded-full",
+                              isDark
+                                ? "bg-[#2b8ffe] shadow-[0_0_14px_rgba(43,143,254,0.85)]"
+                                : "bg-primary",
+                            )}
+                          />
                         )}
                       </Link>
                     );
@@ -338,14 +371,14 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
   const [renameValue, setRenameValue] = useState("");
   const [shareThreadId, setShareThreadId] = useState<string | null>(null);
 
-  // 排除调度/引导/会商类会话，与首页一致；置顶优先。
+  // 排除调度/会商类系统会话，与首页一致；智能体创建（bootstrap）会话保留展示
+  // （带机器人图标、点击回创建页）；置顶优先。
   const visibleThreads = useMemo(
     () =>
       sortThreadsPinnedFirst(
         threads.filter(
           (thread) =>
             thread.metadata?.thread_type !== "scheduler" &&
-            thread.metadata?.thread_type !== "bootstrap" &&
             thread.metadata?.thread_type !== "roundtable",
         ),
       ),
@@ -450,7 +483,8 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
           </div>
         ) : (
           filteredThreads.map((thread) => {
-            const href = pathOf(thread);
+            const isBoot = isBootstrapThread(thread);
+            const href = isBoot ? bootstrapResumePath(thread.thread_id) : pathOf(thread);
             const isActive = href === pathname;
             const pinned = isThreadPinned(thread);
             const favorited = isThreadFavorite(thread);
@@ -468,12 +502,22 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
                       : "text-muted-foreground hover:bg-accent/60 hover:text-foreground",
                   )}
                 >
+                  {isBoot ? (
+                    <Bot
+                      className={cn(
+                        "size-3.5 shrink-0",
+                        isActive ? "text-primary" : "text-muted-foreground/70",
+                      )}
+                      aria-label="智能体创建会话"
+                    />
+                  ) : (
                     <MessageSquare
                       className={cn(
                         "size-3.5 shrink-0",
                         isActive ? "text-primary" : "text-muted-foreground/70",
                       )}
                     />
+                  )}
                   {pinned && (
                     <Pin className="text-muted-foreground/70 size-3 shrink-0" />
                   )}

frontend-web/src/components/workspace/agents/agent-detail-panel.tsx

@@ -43,6 +43,7 @@ import {
 import { Switch } from "@/components/ui/switch";
 import { Textarea } from "@/components/ui/textarea";
 import { AgentQuestionEditor } from "@/components/workspace/agents/agent-question-editor";
+import { AgentRecentChats } from "@/components/workspace/agents/agent-recent-chats";
 import { useArtifactsOptional } from "@/components/workspace/artifacts";
 import { EnabledSkillList } from "@/components/workspace/agents/enabled-skill-list";
 import { SkillPickerSheet } from "@/components/workspace/agents/skill-picker-sheet";
@@ -59,6 +60,7 @@ import {
   type UpdateAgentRequest,
 } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
 import { isAgentSkillCandidate } from "@/core/skills";
 import { useSkills } from "@/core/skills/hooks";
 import { usePublishSquares } from "@/core/system-settings/hooks";
@@ -135,6 +137,8 @@ export function AgentDetailPanel({
   onAskQuestion,
   disabled,
   defaultCollapsed,
+  showRecentChats,
+  compactAppearanceActions,
 }: {
   agent: Agent | null | undefined;
   agentName: string;
@@ -142,6 +146,10 @@ export function AgentDetailPanel({
   disabled?: boolean;
   /** 初始收起（任务工作区进入时默认收起智能体信息面板）。 */
   defaultCollapsed?: boolean;
+  /** 在面板底部展示「有关此智能体的最近对话」（仅智能体问答页开启，任务工作区不展示）。 */
+  showRecentChats?: boolean;
+  /** 简洁模式下挂在右上角收起/展开按钮左侧的外观控件。 */
+  compactAppearanceActions?: ReactNode;
 }) {
   const router = useRouter();
   const [collapsed, setCollapsed] = useState(defaultCollapsed ?? false);
@@ -159,6 +167,8 @@ export function AgentDetailPanel({
   const [deleteOpen, setDeleteOpen] = useState(false);
   const [publishPickerOpen, setPublishPickerOpen] = useState(false);
   const [detailSkillName, setDetailSkillName] = useState<string | null>(null);
+  // 发布以实时 token 执行 —— 用 live 账号提示发布者并检测账号是否被切换。
+  const live = useLiveAccount();
 
   const updateAgent = useUpdateAgent();
   const deleteAgent = useDeleteAgent();
@@ -343,19 +353,39 @@ export function AgentDetailPanel({
       setPublishPickerOpen(true);
       return;
     }
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
         request: { published: !agent.published },
       });
-      toast.success(agent.published ? "已下架" : "已发布");
+      toast.success(
+        agent.published ? "已下架" : `已发布（操作账号：${live.displayName}）`,
+      );
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
     }
   }
 
+  // 发布以实时 token 执行。会话中途账号被切换（常见于另一标签页登录了别的账号）时
+  // 先弹确认，避免误以本人之外的账号执行发布。返回 false = 用户取消。
+  function warnIfAccountSwitched(): boolean {
+    if (!live.switched) {
+      return true;
+    }
+    return window.confirm(
+      `当前登录账号已从「${live.mountDisplayName}」切换为「${live.displayName}」。\n` +
+        `本次发布将以「${live.displayName}」执行。如需以「${live.mountDisplayName}」操作，请取消并刷新页面。\n\n仍要继续吗？`,
+    );
+  }
+
   async function handlePublishToSquare(squareId: string) {
     if (!agent) return;
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
@@ -363,7 +393,7 @@ export function AgentDetailPanel({
       });
       const sqName =
         publishSquares?.squares.find((s) => s.id === squareId)?.name ?? "广场";
-      toast.success(`已发布到「${sqName}」`);
+      toast.success(`已发布到「${sqName}」（操作账号：${live.displayName}）`);
       setPublishPickerOpen(false);
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
@@ -490,7 +520,7 @@ export function AgentDetailPanel({
       {/* ── Identity / 基础信息 ─────────────────────────────────────────── */}
       <section className="bg-card/60 rounded-xl border p-4">
         <div className="flex items-start gap-3">
-          <div className="bg-primary/10 ring-primary/15 flex size-12 shrink-0 items-center justify-center rounded-2xl ring-1">
+          <div className="agent-avatar bg-primary/10 ring-primary/15 flex size-12 shrink-0 items-center justify-center rounded-2xl ring-1">
             <BotIcon className="text-primary size-6" />
           </div>
           <div className="min-w-0 flex-1 space-y-1.5">
@@ -791,15 +821,19 @@ export function AgentDetailPanel({
           onViewDetail={setDetailSkillName}
         />
       </Section>
+
+      {/* ── 最近对话（右下角，仅智能体问答页展示，编辑态隐藏）──────────── */}
+      {showRecentChats && !editing && <AgentRecentChats agentId={agent.id} />}
     </div>
   );
 
   const panelChrome = (collapseButton: ReactNode) => (
     <>
       <div className="flex h-12 shrink-0 items-center justify-between border-b px-4">
-        <span className="text-sm font-semibold">智能体信息</span>
-        <div className="flex items-center gap-1">
+        <span className="shrink-0 whitespace-nowrap text-sm font-semibold">智能体信息</span>
+        <div className="flex min-w-0 items-center gap-1">
           {headerActions}
+          {compactAppearanceActions}
           {collapseButton}
         </div>
       </div>
@@ -811,7 +845,9 @@ export function AgentDetailPanel({
     <>
       {/* ── Desktop (lg+): inline aside, collapsible to a rail ───────────── */}
       {collapsed ? (
-        <div className="hidden shrink-0 flex-col items-center border-l pt-3 lg:flex">
+        <div className="hidden shrink-0 items-start border-l px-2 pt-3 lg:flex">
+          <div className="flex items-center gap-1">
+            {compactAppearanceActions}
             <Tooltip content="智能体信息">
               <Button
                 variant="ghost"
@@ -823,6 +859,7 @@ export function AgentDetailPanel({
               </Button>
             </Tooltip>
           </div>
+        </div>
       ) : (
         <aside className="bg-card/40 hidden h-full w-[360px] shrink-0 flex-col border-l lg:flex">
           {panelChrome(
@@ -921,6 +958,23 @@ export function AgentDetailPanel({
         loading={updateAgent.isPending}
         onConfirm={(squareId) => void handlePublishToSquare(squareId)}
         description="请选择要把该智能体发布到哪个广场。每个智能体只能归属一个广场，不会重复出现。"
+        accountNotice={
+          <div className="text-xs">
+            <p className="text-muted-foreground">
+              发布操作账号：
+              <span className="text-foreground font-medium">
+                「{live.displayName}」
+              </span>
+            </p>
+            {live.switched && (
+              <p className="text-destructive mt-1">
+                ⚠ 当前登录账号已从「{live.mountDisplayName}」切换为「
+                {live.displayName}」。如需以「{live.mountDisplayName}
+                」操作，请刷新页面确认。
+              </p>
+            )}
+          </div>
+        }
       />
     </>
   );

frontend-web/src/components/workspace/agents/agent-module-settings-dialog.tsx

@@ -138,7 +138,7 @@ export function AgentModuleSettingsDialog({
                       key={agent.id}
                       className="flex items-start gap-3 rounded-xl border border-border/60 bg-card p-3"
                     >
-                      <div className="bg-primary/10 text-primary mt-0.5 flex size-8 shrink-0 items-center justify-center rounded-lg">
+                      <div className="agent-avatar bg-primary/10 text-primary mt-0.5 flex size-8 shrink-0 items-center justify-center rounded-lg">
                         <Bot className="size-4" />
                       </div>
                       <div className="min-w-0 flex-1">

frontend-web/src/components/workspace/agents/agent-module-sidebar.tsx

@@ -107,33 +107,11 @@ function groupAgentsByTag(agents: Agent[], allowedTagIds: string[]): AgentGroup[
   return groups;
 }
 
-/**
- * 「按类型聚合智能体 + 聊天记录」左栏（需求 0616 #3 zzJC / #4 zzXD）。
- *
- * - 上半：可见智能体按标签（类型）分组、可折叠；点击进入该智能体对话（保持当前路由
- *   命名空间，全量模式下为 /page/strategy）。
- * - 下半：聊天记录 —— 仅与本模块智能体（即左栏列出的智能体）的会话，按 metadata.agent_id 过滤。
- * - 宽度与通用问答左栏一致（``--sidebar-width``）。
- */
-export function AgentModuleSidebar({
-  moduleKey,
-  activeAgentId,
-  onOpenSettings,
-}: {
-  moduleKey: string;
-  activeAgentId?: string;
-  /** 传入则在左栏顶部显示设置齿轮（admin）。 */
-  onOpenSettings?: () => void;
-}) {
-  const routeBase = useRouteBase();
-  const pathname = usePathname();
-  // 智能体图标配色分主题：深蓝主题用规范蓝-青系，其它（浅色）保持原高彩度色，互不影响。
-  const { theme } = useTheme();
-  const isDark = theme === "dark";
-  const { agents } = useAgents();
+export function useAgentModuleSidebarData(moduleKey: string) {
+  const { agents, isLoading: agentsLoading } = useAgents();
   const { data: threads = [] } = useThreads();
-  const { data: moduleConfig } = useAgentModuleConfig(moduleKey);
-  const [collapsed, setCollapsed] = useState<Set<string>>(() => new Set());
+  const { data: moduleConfig, isLoading: configLoading } =
+    useAgentModuleConfig(moduleKey);
 
   const allowedTagIds = useMemo(
     () => moduleConfig?.tag_ids ?? [],
@@ -161,6 +139,56 @@ export function AgentModuleSidebar({
     [threads, moduleAgentIds],
   );
 
+  return {
+    groups,
+    moduleAgentIds,
+    moduleThreads,
+    allowedTagIds,
+    // admin 是否已确认该模块展示的智能体类型（配置了标签）。
+    hasConfiguredType: allowedTagIds.length > 0,
+    isLoading: agentsLoading || configLoading,
+  };
+}
+
+/**
+ * 「按类型聚合智能体 + 聊天记录」左栏（需求 0616 #3 zzJC / #4 zzXD）。
+ *
+ * - 上半：可见智能体按标签（类型）分组、可折叠；点击进入该智能体对话（保持当前路由
+ *   命名空间，全量模式下为 /page/strategy）。
+ * - 下半：聊天记录 —— 仅与本模块智能体（即左栏列出的智能体）的会话，按 metadata.agent_id 过滤。
+ * - 宽度与通用问答左栏一致（``--sidebar-width``）。
+ */
+export function AgentModuleSidebar({
+  moduleKey,
+  activeAgentId,
+  activeThreadId,
+  routeBase: routeBaseProp,
+  headerTitle = "智能体",
+  className,
+  onOpenSettings,
+}: {
+  moduleKey: string;
+  activeAgentId?: string;
+  activeThreadId?: string;
+  routeBase?: string;
+  headerTitle?: string;
+  className?: string;
+  /** 传入则在左栏顶部显示设置齿轮（admin）。 */
+  onOpenSettings?: () => void;
+}) {
+  const contextRouteBase = useRouteBase();
+  const routeBase = routeBaseProp ?? contextRouteBase;
+  const pathname = usePathname();
+  // 智能体图标配色分主题：深蓝主题用规范蓝-青系，其它（浅色）保持原高彩度色，互不影响。
+  const { theme } = useTheme();
+  const isDark = theme === "dark";
+  const [collapsed, setCollapsed] = useState<Set<string>>(() => new Set());
+  const { groups, moduleThreads, hasConfiguredType } =
+    useAgentModuleSidebarData(moduleKey);
+  // 已确认智能体类型时，允许把上半「智能体类型」整块收起，把空间让给下半聊天记录。
+  const [agentsSectionCollapsed, setAgentsSectionCollapsed] = useState(false);
+  const agentsCollapsed = hasConfiguredType && agentsSectionCollapsed;
+
   const toggleGroup = (key: string) =>
     setCollapsed((prev) => {
       const next = new Set(prev);
@@ -169,14 +197,106 @@ export function AgentModuleSidebar({
       return next;
     });
 
+  // 已确认类型时把所有分组的智能体拍平（单选类型一般只有一个分组），
+  // 标题行直接显示该类型名 + 数量，去掉额外的分组行。
+  const flatAgents = useMemo(() => groups.flatMap((g) => g.agents), [groups]);
+  const configuredTypeLabel =
+    groups.length === 1 ? (groups[0]?.label ?? "智能体类型") : "智能体类型";
+
+  const renderAgentCard = (agent: Agent, keyPrefix: string) => {
+    const href = `${routeBase}/agents/${agent.id}/chats/new`;
+    const isActive = agent.id === activeAgentId;
+    const { from, to } = agentColor(agent.id, isDark);
+    return (
+      <Link
+        key={`${keyPrefix}:${agent.id}`}
+        href={href}
+        onClick={() => {
+          try {
+            sessionStorage.setItem(`agent-module:${moduleKey}:last-agent`, agent.id);
+          } catch {
+            // Ignore storage failures; route navigation is the source of truth.
+          }
+        }}
+        className={cn(
+          "group relative flex w-full items-start gap-3 rounded-xl border px-3 py-2.5 transition-all duration-150",
+          isActive
+            ? isDark
+              ? "border-[#2b8ffe] bg-[#0b4fae]/65 shadow-[0_0_0_1px_rgba(43,143,254,0.5),0_12px_28px_rgba(37,128,255,0.25)]"
+              : "agent-sidebar-card--active border-primary/50 bg-primary/10 shadow-sm"
+            : isDark
+              ? "border-[#2b8ffe]/20 bg-[#042b59]/35 hover:border-[#2b8ffe]/60 hover:bg-[#063b77]/60"
+              : "border-transparent hover:border-border hover:bg-accent/50",
+        )}
+      >
+        <span
+          className={cn(
+            "mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-lg text-white shadow-sm",
+            isDark &&
+              isActive &&
+              "ring-2 ring-[#83c1ff]/35 shadow-[0_0_18px_rgba(43,143,254,0.45)]",
+          )}
+          style={{ backgroundImage: `linear-gradient(135deg, ${from}, ${to})` }}
+        >
+          <Bot className="size-[19px]" />
+        </span>
+        <span className="min-w-0 flex-1">
+          <span
+            className={cn(
+              "block truncate text-[16px] leading-5 font-bold",
+              isActive
+                ? isDark
+                  ? "text-white"
+                  : "text-primary"
+                : isDark
+                  ? "text-white/95"
+                  : "text-foreground",
+            )}
+          >
+            {desensitize(agent.name)}
+          </span>
+          <span
+            className={cn(
+              "mt-1 block truncate text-[13px] leading-[1.35]",
+              isDark
+                ? isActive
+                  ? "text-[#d6eaff]"
+                  : "text-[#9ebfe2]"
+                : "text-muted-foreground",
+            )}
+          >
+            {agent.description ? desensitize(agent.description) : "智能体助手"}
+          </span>
+        </span>
+        {isActive && (
+          <span
+            className={cn(
+              "absolute top-1/2 right-1.5 h-8 w-1.5 -translate-y-1/2 rounded-full",
+              isDark
+                ? "bg-[#2b8ffe] shadow-[0_0_14px_rgba(43,143,254,0.85)]"
+                : "bg-primary",
+            )}
+          />
+        )}
+      </Link>
+    );
+  };
+
   return (
     // 原有布局不变，仅做配色适配：深色下左栏改为半透明深蓝玻璃面板（对齐 .sidebar-contents：
     // bg rgba(3,38,80,.8) + 蓝色发光边框），叠 backdrop-blur 让外壳的深蓝底图朦胧透出；
     // 浅色保持白底。其余颜色已走语义 token 自适配。
-    <aside className="flex h-full w-(--sidebar-width) shrink-0 flex-col overflow-hidden border-r border-border/70 bg-white text-foreground backdrop-blur-md dark:border-[#2b8ffe]/45 dark:bg-[#032650]/80">
+    <aside
+      className={cn(
+        "flex h-full w-(--sidebar-width) shrink-0 flex-col overflow-hidden border-r border-border/70 bg-white text-foreground backdrop-blur-md dark:border-[#2b8ffe]/45 dark:bg-[#032650]/80",
+        className,
+      )}
+    >
       {onOpenSettings && (
         <div className="flex shrink-0 items-center justify-between border-b border-border/60 px-3 py-2">
-          <span className="text-xs font-semibold text-foreground/80">智能体</span>
+          <span className="text-xs font-semibold text-foreground/80">
+            {headerTitle}
+          </span>
           <button
             type="button"
             onClick={onOpenSettings}
@@ -189,13 +309,78 @@ export function AgentModuleSidebar({
         </div>
       )}
 
-      {/* 上半：按类型分组的智能体（彩色卡片，与全量版看齐） */}
-      <div className="flex min-h-0 flex-[3] flex-col overflow-y-auto px-2 py-3">
-        <h2 className="mb-1 px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 select-none">
+      {/* 上半：智能体列表。
+          - 未确认类型：按类型分组、可逐组折叠（与全量版一致）。
+          - 已确认类型：标题行直接显示该类型名 + 数量（去掉单独的分组行），
+            扁平列出该类型下的智能体，并可整块收起（grid 行高过渡动画），
+            收起后只留标题、把高度让给下半聊天记录。 */}
+      <div
+        className={cn(
+          "flex flex-col px-2 py-3",
+          agentsCollapsed ? "shrink-0" : "min-h-0 flex-[3]",
+        )}
+      >
+        {hasConfiguredType ? (
+          <>
+            <button
+              type="button"
+              onClick={() => setAgentsSectionCollapsed((prev) => !prev)}
+              title={agentsCollapsed ? "展开智能体" : "收起智能体"}
+              className="flex shrink-0 items-center justify-between px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 transition-colors hover:text-muted-foreground select-none"
+            >
+              <span className="flex items-center gap-1.5 truncate">
+                <span className="truncate">{configuredTypeLabel}</span>
+                <span className="rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-normal text-muted-foreground tabular-nums">
+                  {flatAgents.length}
+                </span>
+              </span>
+              <ChevronDown
+                className={cn(
+                  "size-3.5 shrink-0 transition-transform duration-300",
+                  agentsCollapsed && "-rotate-90",
+                )}
+              />
+            </button>
+            <div
+              className={cn(
+                "grid transition-[grid-template-rows] duration-300 ease-in-out",
+                agentsCollapsed
+                  ? "grid-rows-[0fr]"
+                  : "mt-1 min-h-0 flex-1 grid-rows-[1fr]",
+              )}
+            >
+              <div
+                className={cn(
+                  "min-h-0",
+                  agentsCollapsed
+                    ? "overflow-hidden"
+                    : "overflow-y-auto overflow-x-hidden",
+                )}
+              >
+                {flatAgents.length === 0 ? (
+                  <p className="px-3 py-1.5 text-xs text-muted-foreground/70">
+                    暂无智能体
+                  </p>
+                ) : (
+                  <div className="flex flex-col gap-1">
+                    {flatAgents.map((agent) =>
+                      renderAgentCard(agent, "configured"),
+                    )}
+                  </div>
+                )}
+              </div>
+            </div>
+          </>
+        ) : (
+          <>
+            <h2 className="mb-1 shrink-0 px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 select-none">
               智能体类型
             </h2>
+            <div className="min-h-0 flex-1 overflow-y-auto overflow-x-hidden">
               {groups.length === 0 ? (
-          <p className="px-3 py-1.5 text-xs text-muted-foreground/70">暂无智能体</p>
+                <p className="px-3 py-1.5 text-xs text-muted-foreground/70">
+                  暂无智能体
+                </p>
               ) : (
                 <div className="flex flex-col gap-1.5">
                   {groups.map((group) => {
@@ -222,50 +407,9 @@ export function AgentModuleSidebar({
                         </button>
                         {!isCollapsed && (
                           <div className="mt-1 flex flex-col gap-1">
-                      {group.agents.map((agent) => {
-                        const href = `${routeBase}/agents/${agent.id}/chats/new`;
-                        const isActive = agent.id === activeAgentId;
-                        const { from, to } = agentColor(agent.id, isDark);
-                        return (
-                          <Link
-                            key={`${group.key}:${agent.id}`}
-                            href={href}
-                            className={cn(
-                              "group relative flex w-full items-start gap-2.5 rounded-xl border px-2.5 py-2 transition-colors",
-                              isActive
-                                ? "border-primary/40 bg-primary/5"
-                                : "border-transparent hover:border-border hover:bg-accent/50",
+                            {group.agents.map((agent) =>
+                              renderAgentCard(agent, group.key),
                             )}
-                          >
-                            <span
-                              className="mt-0.5 flex size-9 shrink-0 items-center justify-center rounded-lg text-white shadow-sm"
-                              style={{
-                                backgroundImage: `linear-gradient(135deg, ${from}, ${to})`,
-                              }}
-                            >
-                              <Bot className="size-[18px]" />
-                            </span>
-                            <span className="min-w-0 flex-1">
-                              <span
-                                className={cn(
-                                  "block truncate text-[13px] font-semibold",
-                                  isActive ? "text-primary" : "text-foreground",
-                                )}
-                              >
-                                {desensitize(agent.name)}
-                              </span>
-                              <span className="mt-0.5 block truncate text-[11px] leading-snug text-muted-foreground">
-                                {agent.description
-                                  ? desensitize(agent.description)
-                                  : "智能体助手"}
-                              </span>
-                            </span>
-                            {isActive && (
-                              <span className="absolute top-1/2 right-1 h-6 w-1 -translate-y-1/2 rounded-full bg-primary" />
-                            )}
-                          </Link>
-                        );
-                      })}
                           </div>
                         )}
                       </div>
@@ -274,6 +418,9 @@ export function AgentModuleSidebar({
                 </div>
               )}
             </div>
+          </>
+        )}
+      </div>
 
       {/* 下半：聊天记录（仅本模块智能体会话），简单列表、配色与全量版统一 */}
       <div className="flex min-h-0 flex-[2] flex-col overflow-y-auto border-t border-border/60 px-2 py-3">
@@ -286,7 +433,8 @@ export function AgentModuleSidebar({
           <div className="flex flex-col gap-0.5">
             {moduleThreads.map((thread) => {
               const href = pathOfThread(thread, undefined, routeBase);
-              const isActive = href === pathname;
+              const isActive =
+                thread.thread_id === activeThreadId || href === pathname;
               return (
                 <Link
                   key={thread.thread_id}

frontend-web/src/components/workspace/agents/agent-recent-chats.tsx

@@ -0,0 +1,79 @@
+"use client";
+
+import { MessageSquareIcon } from "lucide-react";
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+import { useThreadsPage } from "@/core/threads/hooks";
+import { pathOfThread, titleOfThread } from "@/core/threads/utils";
+import { desensitize } from "@/lib/desensitize";
+import { cn } from "@/lib/utils";
+
+const RECENT_LIMIT = 8;
+
+/**
+ * 「有关此智能体的最近对话」—— 渲染在智能体详情面板底部（右下角）。
+ * 按 `metadata.agent_id` 过滤出该智能体的会话，点击直接打开对应对话。
+ */
+export function AgentRecentChats({ agentId }: { agentId: string }) {
+  const pathname = usePathname();
+  const { data } = useThreadsPage({
+    page: 1,
+    pageSize: RECENT_LIMIT,
+    metadata: { agent_id: agentId },
+  });
+  // 该智能体的会话里同样排除调度 / 引导 / 会商类系统会话。
+  const threads = (data?.threads ?? []).filter(
+    (th) =>
+      th.metadata?.thread_type !== "bootstrap" &&
+      th.metadata?.thread_type !== "scheduler" &&
+      th.metadata?.thread_type !== "roundtable",
+  );
+
+  return (
+    <section className="bg-card/60 rounded-xl border p-4">
+      <div className="mb-3 flex items-center justify-between gap-2">
+        <h4 className="text-foreground flex items-center gap-1.5 text-sm font-semibold">
+          <MessageSquareIcon className="size-3.5" />
+          最近对话
+        </h4>
+        <span className="text-muted-foreground text-xs tabular-nums">
+          {threads.length} 个
+        </span>
+      </div>
+      {threads.length === 0 ? (
+        <p className="text-muted-foreground/60 text-sm">暂无对话</p>
+      ) : (
+        <div className="flex flex-col gap-1">
+          {threads.map((thread) => {
+            const href = pathOfThread(thread);
+            const isActive = href === pathname;
+            return (
+              <Link
+                key={thread.thread_id}
+                href={href}
+                title={desensitize(titleOfThread(thread, "新对话"))}
+                className={cn(
+                  "flex min-w-0 items-center gap-2 rounded-lg px-2 py-1.5 text-sm transition-colors",
+                  isActive
+                    ? "bg-primary/5 text-primary font-medium"
+                    : "text-muted-foreground hover:bg-accent hover:text-foreground",
+                )}
+              >
+                <MessageSquareIcon
+                  className={cn(
+                    "size-3.5 shrink-0",
+                    isActive ? "text-primary" : "text-muted-foreground/70",
+                  )}
+                />
+                <span className="truncate">
+                  {desensitize(titleOfThread(thread, "新对话"))}
+                </span>
+              </Link>
+            );
+          })}
+        </div>
+      )}
+    </section>
+  );
+}

frontend-web/src/components/workspace/agents/agent-selector.tsx

@@ -20,6 +20,7 @@ import {
 } from "@/components/ui/dialog";
 import { PromptInputButton } from "@/components/ai-elements/prompt-input";
 import { AgentManageDialog } from "@/components/workspace/agents/agent-manage-dialog";
+import { Tooltip } from "@/components/workspace/tooltip";
 import { useAgentSelector, useAgentsPaginated } from "@/core/agents";
 import type { Agent } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
@@ -32,6 +33,10 @@ interface AgentSelectorProps {
   disabled?: boolean;
   /** 紧凑模式（CM 参考图）：触发器改为灰底胶囊 + 主色机器人图标。 */
   compact?: boolean;
+  /** 图标模式：用于 iframe 等底栏场景，仅显示机器人图标和可选清空按钮。 */
+  triggerVariant?: "default" | "icon";
+  iconButtonClassName?: string;
+  iconActiveClassName?: string;
 }
 
 /**
@@ -48,6 +53,9 @@ export function AgentSelector({
   onAgentChange,
   disabled,
   compact = false,
+  triggerVariant = "default",
+  iconButtonClassName,
+  iconActiveClassName,
 }: AgentSelectorProps) {
   const [open, setOpen] = useState(false);
   const [manageOpen, setManageOpen] = useState(false);
@@ -79,11 +87,49 @@ export function AgentSelector({
   };
 
   const triggerLabel = selectedAgent ? desensitize(selectedAgent.name) : "选择 Agent";
+  const iconTooltipLabel = selectedAgent ? triggerLabel : "未选择";
+  const iconMode = triggerVariant === "icon";
 
   return (
     <>
       <Dialog open={open} onOpenChange={setOpen}>
         <DialogTrigger asChild>
+          {iconMode ? (
+            <Tooltip content={iconTooltipLabel}>
+              <Button
+                type="button"
+                variant="ghost"
+                size="icon"
+                disabled={disabled}
+                aria-label={selectedAgent ? `已选择智能体：${triggerLabel}` : "选择智能体"}
+                className={cn(
+                  "relative size-9 rounded-full text-muted-foreground shadow-none hover:bg-muted/60 hover:text-foreground",
+                  selectedAgent && "text-amber-600 hover:text-amber-700",
+                  selectedAgent && iconActiveClassName,
+                  iconButtonClassName,
+                )}
+              >
+                <BotIcon className="size-4" />
+                {selectedAgent && (
+                  <span
+                    role="button"
+                    tabIndex={0}
+                    aria-label="清除已选 agent"
+                    className="absolute -right-1 -top-1 inline-flex size-4 items-center justify-center rounded-full border bg-background text-foreground shadow-sm hover:bg-muted"
+                    onClick={handleClear}
+                    onKeyDown={(e) => {
+                      if (e.key === "Enter" || e.key === " ") {
+                        e.preventDefault();
+                        onAgentChange(null);
+                      }
+                    }}
+                  >
+                    <XIcon className="size-2.5" />
+                  </span>
+                )}
+              </Button>
+            </Tooltip>
+          ) : (
             <PromptInputButton
               type="button"
               disabled={disabled}
@@ -121,6 +167,7 @@ export function AgentSelector({
                 </span>
               )}
             </PromptInputButton>
+          )}
         </DialogTrigger>
         <DialogContent className="overflow-hidden p-0 sm:max-w-md">
           <DialogTitle className="sr-only">选择 Agent</DialogTitle>

frontend-web/src/components/workspace/appearance-controls.tsx

@@ -0,0 +1,233 @@
+"use client";
+
+import { Check, ExternalLink, LayoutIcon, PanelLeftIcon, Shirt } from "lucide-react";
+import { useEffect, useRef, useState } from "react";
+import { useNavigate } from "react-router-dom";
+
+import { Button } from "@/components/ui/button";
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu";
+import { useTheme, type ThemeType } from "@/contexts/ThemeContext";
+import { useAppearanceSettings, useLayoutMode } from "@/core/system-settings/hooks";
+import { cn } from "@/lib/utils";
+import { buildLightAppUrl } from "@/strategy-components/lib/light-app";
+
+/**
+ * 换肤 / 界面模式 顶栏控件。深色顶栏（Header）与简洁模式页面级顶栏（ChatPage 等）共用，
+ * 通过 `tone` 适配不同底色：
+ *   - "banner-dark" / "banner-light"：Header 落在主题 banner 上（白字 / 浅色 hover）。
+ *   - "content"：简洁模式聊天页浅底顶栏，走 foreground / muted-foreground。
+ */
+export type AppearanceControlTone = "banner-dark" | "banner-light" | "content";
+
+// 换肤色板：红色=红白主题(light)，蓝色=浅蓝主题(lightblue)，深蓝色=深色主题(dark)
+export const THEME_SWATCHES: { id: ThemeType; label: string; color: string }[] = [
+  { id: "light", label: "红色", color: "#cf1322" },
+  { id: "lightblue", label: "蓝色", color: "#0062d9" },
+  { id: "dark", label: "深蓝色", color: "#002466" },
+];
+
+const triggerToneClass = (tone: AppearanceControlTone) =>
+  tone === "banner-dark"
+    ? "text-slate-400 hover:bg-slate-800/50 hover:text-slate-400"
+    : tone === "banner-light"
+      ? "text-white hover:bg-[var(--brand-950)] hover:text-white active:bg-[#8a0618]"
+      : "text-muted-foreground hover:bg-muted hover:text-foreground";
+
+export function CompactShortcutButtons({ tone }: { tone: AppearanceControlTone }) {
+  const { data: appearance } = useAppearanceSettings();
+  const buttons = (appearance?.compact_shortcut_buttons ?? [])
+    .filter((button) => button.enabled && button.label.trim() && button.url.trim())
+    .sort((a, b) => a.sort_order - b.sort_order);
+
+  if (buttons.length === 0) return null;
+
+  return (
+    <>
+      {buttons.map((button) => (
+        <Button
+          key={button.id}
+          type="button"
+          variant="ghost"
+          size="sm"
+          className={cn(
+            "h-8 max-w-[168px] shrink-0 gap-1.5 rounded-sm px-2 text-xs font-medium",
+            triggerToneClass(tone),
+          )}
+          title={button.label}
+          onClick={() => {
+            const url = buildLightAppUrl({
+              url: button.url,
+              routeParams: button.route_params.map((param) => ({ ...param })),
+            });
+            window.open(url, "_blank", "noopener,noreferrer");
+          }}
+        >
+          <ExternalLink className="size-4 shrink-0" />
+          <span className="truncate">{button.label}</span>
+        </Button>
+      ))}
+    </>
+  );
+}
+
+export function ThemeSwitcher({ tone }: { tone: AppearanceControlTone }) {
+  const { theme, setTheme } = useTheme();
+  const [open, setOpen] = useState(false);
+  const closeTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  const cancelClose = () => {
+    if (closeTimer.current) {
+      clearTimeout(closeTimer.current);
+      closeTimer.current = null;
+    }
+  };
+  const scheduleClose = () => {
+    cancelClose();
+    closeTimer.current = setTimeout(() => setOpen(false), 120);
+  };
+
+  useEffect(() => () => cancelClose(), []);
+
+  return (
+    <div
+      className="relative"
+      onMouseEnter={() => {
+        cancelClose();
+        setOpen(true);
+      }}
+      onMouseLeave={scheduleClose}
+    >
+      <Button
+        type="button"
+        variant="ghost"
+        size="icon-sm"
+        className={cn("size-8 shrink-0 rounded-sm", triggerToneClass(tone))}
+        title="换肤"
+        aria-haspopup="true"
+        aria-expanded={open}
+      >
+        <Shirt className="size-4" />
+      </Button>
+      {open ? (
+        <div className="absolute top-full left-1/2 z-50 -translate-x-1/2 pt-2">
+          <div className="relative flex items-center gap-2 rounded-lg border border-black/5 bg-white px-2.5 py-1.5 shadow-lg">
+            <div className="absolute -top-1 left-1/2 size-2 -translate-x-1/2 rotate-45 rounded-[1px] border-t border-l border-black/5 bg-white" />
+            {THEME_SWATCHES.map((swatch) => {
+              const active = theme === swatch.id;
+              return (
+                <button
+                  key={swatch.id}
+                  type="button"
+                  title={swatch.label}
+                  aria-label={swatch.label}
+                  aria-pressed={active}
+                  onClick={() => {
+                    setTheme(swatch.id);
+                    setOpen(false);
+                  }}
+                  className="size-5 rounded-full transition-transform hover:scale-110"
+                  style={{
+                    backgroundColor: swatch.color,
+                    boxShadow: active
+                      ? `0 0 0 1.5px #ffffff, 0 0 0 3px ${swatch.color}`
+                      : undefined,
+                  }}
+                />
+              );
+            })}
+          </div>
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+const LAYOUT_OPTIONS = [
+  {
+    id: "full" as const,
+    label: "全量模式",
+    description: "展示侧边栏与顶栏导航",
+    icon: PanelLeftIcon,
+  },
+  {
+    id: "compact" as const,
+    label: "简洁模式",
+    description: "隐藏侧边栏与顶栏，获得更大工作区",
+    icon: LayoutIcon,
+  },
+];
+
+/**
+ * 界面模式（全量 / 简洁）下拉切换。换肤旁并排，图标 + 下拉：
+ *   - 简洁模式 ChatPage 顶栏（全局顶栏被隐藏）。
+ *   - 全量模式 Header 右上角。
+ * 用户未显式设置过界面模式时（mode === undefined），当前态按调用方所在的实际界面
+ * 兜底——`fallback` 指明这一回退值（Header 传 "full"，ChatPage 传 "compact"）。
+ */
+export function LayoutModeSwitcher({
+  tone,
+  fallback = "compact",
+  navigateTo = "/page/workspace/chats/new",
+}: {
+  tone: AppearanceControlTone;
+  fallback?: "full" | "compact";
+  navigateTo?: string | null;
+}) {
+  const [mode, setLayoutMode] = useLayoutMode();
+  const navigate = useNavigate();
+  const current = mode ?? fallback;
+  const TriggerIcon = current === "full" ? PanelLeftIcon : LayoutIcon;
+
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button
+          type="button"
+          variant="ghost"
+          size="icon-sm"
+          className={cn("size-8 shrink-0 rounded-sm", triggerToneClass(tone))}
+          title="界面模式"
+          aria-label="界面模式"
+        >
+          <TriggerIcon className="size-4" />
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="end" sideOffset={8} className="min-w-56 rounded-lg">
+        <DropdownMenuLabel>界面模式</DropdownMenuLabel>
+        <DropdownMenuSeparator />
+        {LAYOUT_OPTIONS.map((option) => {
+          const Icon = option.icon;
+          const active = current === option.id;
+          return (
+            <DropdownMenuItem
+              key={option.id}
+              onClick={() => {
+                setLayoutMode(option.id);
+                if (navigateTo) {
+                  navigate(navigateTo);
+                }
+              }}
+              className="gap-2"
+            >
+              <Icon className="size-4 shrink-0" />
+              <div className="flex min-w-0 flex-col">
+                <span className="text-sm leading-tight">{option.label}</span>
+                <span className="text-muted-foreground text-xs leading-tight">
+                  {option.description}
+                </span>
+              </div>
+              {active && <Check className="ml-auto size-4 shrink-0" />}
+            </DropdownMenuItem>
+          );
+        })}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  );
+}

frontend-web/src/components/workspace/artifacts/artifact-file-detail.tsx

@@ -11,6 +11,7 @@ import {
   LoaderIcon,
   PackageIcon,
   SaveIcon,
+  SparklesIcon,
   UploadCloudIcon,
   XIcon,
 } from "lucide-react";
@@ -37,9 +38,11 @@ import {
 } from "@/components/ui/select";
 import { ToggleGroup, ToggleGroupItem } from "@/components/ui/toggle-group";
 import { CodeEditor } from "@/components/workspace/code-editor";
+import { MarkdownAiEditor } from "@/open-canvas/components/artifact/MarkdownAiEditor";
 import { publishArtifactToKnowledge } from "@/core/agents/api";
 import { useAgent } from "@/core/agents/hooks";
 import { apiFetch } from "@/core/api";
+import { copyTextToClipboard } from "@/core/clipboard";
 import {
   downloadArtifactFile,
 } from "@/core/artifacts/download";
@@ -50,7 +53,6 @@ import {
 import { resolveArtifactURL, urlOfArtifact } from "@/core/artifacts/utils";
 import { useI18n } from "@/core/i18n/hooks";
 import { downloadMarkdownAsDocx } from "@/core/scheduled-tasks/markdown-docx";
-import { installSkill } from "@/core/skills/api";
 import { streamdownPlugins } from "@/core/streamdown";
 import {
   checkCodeFile,
@@ -80,6 +82,7 @@ import { Tooltip } from "../tooltip";
 
 import { useArtifacts } from "./context";
 import { SpreadsheetPreview } from "./spreadsheet-preview";
+import { SkillInstallDialog } from "./skill-install-dialog";
 
 const SANDBOX_RESUME_EVENT = "workspace:sandbox-resume-autoscroll";
 
@@ -213,6 +216,10 @@ export function ArtifactFileDetail({
     !useWriteFileStreaming &&
     !isSkillFile &&
     !isMock;
+  // 「AI 写作」md 展示开关：只要是可编辑的 markdown 就提供「AI 写作」视图（在 源码/预览 旁多一个
+  // 切换项），用户可随时切过去体验划词「AI 改写」。默认仍是「预览」，避免编辑器在内容加载期间
+  // 挂载导致白屏 + 避免复杂 md(表格/公式/HTML)误入有损编辑。
+  const canUseAiEditor = canEditArtifact;
   const [draftContent, setDraftContent] = useState("");
   const [hasLocalEdits, setHasLocalEdits] = useState(false);
   const updateArtifact = useUpdateArtifactContent();
@@ -230,9 +237,9 @@ export function ArtifactFileDetail({
     return "FILE";
   }, [filepath, isSkillFile, isSpreadsheetFile, language]);
 
-  const [viewMode, setViewMode] = useState<"code" | "preview">("code");
+  const [viewMode, setViewMode] = useState<"code" | "preview" | "edit">("code");
   const [allowAutoViewSwitch, setAllowAutoViewSwitch] = useState(true);
-  const [isInstalling, setIsInstalling] = useState(false);
+  const [installDialogOpen, setInstallDialogOpen] = useState(false);
   const [showPreviewSwitchPulse, setShowPreviewSwitchPulse] = useState(false);
   const [autoScrollEnabled, setAutoScrollEnabled] = useState(true);
   const [showResumeAutoScroll, setShowResumeAutoScroll] = useState(false);
@@ -267,6 +274,7 @@ export function ArtifactFileDetail({
       return;
     }
 
+    // md/mermaid 默认预览（AI 写作视图作为可选切换项，由用户手动进入）。
     if (isSupportPreview) {
       setViewMode("preview");
       return;
@@ -432,28 +440,6 @@ export function ArtifactFileDetail({
     }, 1600);
   }, [scrollArtifactToBottom]);
 
-  const handleInstallSkill = useCallback(async () => {
-    if (isInstalling) return;
-
-    setIsInstalling(true);
-    try {
-      const result = await installSkill({
-        thread_id: threadId,
-        path: filepath,
-      });
-      if (result.success) {
-        toast.success(result.message);
-      } else {
-        toast.error(result.message ?? "Failed to install skill");
-      }
-    } catch (error) {
-      console.error("Failed to install skill:", error);
-      toast.error("Failed to install skill");
-    } finally {
-      setIsInstalling(false);
-    }
-  }, [threadId, filepath, isInstalling]);
-
   const handleSaveArtifact = useCallback(async () => {
     if (!canEditArtifact || updateArtifact.isPending) {
       return;
@@ -598,7 +584,9 @@ export function ArtifactFileDetail({
               {fileTypeLabel}
             </span>
             <ArtifactTitle className="min-w-0">
-              {useWriteFileStreaming ? (
+              {/* markdown：隐藏文件名（仅留 MD 徽标），把横向空间让给工具栏，避免窄面板下
+                  工具栏换行错位；多文件仍保留切换下拉（靠它切文件）。文件名仍可在下载/另存为时取到。 */}
+              {language === "markdown" && !hasMultipleArtifacts ? null : useWriteFileStreaming ? (
                 <div className="truncate px-3">{getFileName(filepath)}</div>
               ) : hasMultipleArtifacts ? (
                 <Select value={filepath} onValueChange={select}>
@@ -638,10 +626,19 @@ export function ArtifactFileDetail({
                 onValueChange={(value) => {
                   if (value) {
                     setAllowAutoViewSwitch(false);
-                    setViewMode(value as "code" | "preview");
+                    setViewMode(value as "code" | "preview" | "edit");
                   }
                 }}
               >
+                {canUseAiEditor && (
+                  <ToggleGroupItem
+                    className="text-muted-foreground h-8 min-w-10 rounded-full border-0 bg-transparent px-3 shadow-none data-[state=on]:bg-background data-[state=on]:text-foreground data-[state=on]:shadow-[0_6px_14px_-10px_rgba(15,23,42,0.35)]"
+                    value="edit"
+                    aria-label="AI 写作编辑"
+                  >
+                    <SparklesIcon />
+                  </ToggleGroupItem>
+                )}
                 <ToggleGroupItem
                   className="text-muted-foreground h-8 min-w-10 rounded-full border-0 bg-transparent px-3 shadow-none data-[state=on]:bg-background data-[state=on]:text-foreground data-[state=on]:shadow-[0_6px_14px_-10px_rgba(15,23,42,0.35)]"
                   value="code"
@@ -687,14 +684,13 @@ export function ArtifactFileDetail({
             {!useWriteFileStreaming && filepath.endsWith(".skill") && (
               <Tooltip content={t.toolCalls.skillInstallTooltip}>
                 <ArtifactAction
-                  icon={isInstalling ? LoaderIcon : PackageIcon}
+                  icon={PackageIcon}
                   label={t.common.install}
                   tooltip={t.common.install}
                   disabled={
-                    isInstalling ||
                     env.NEXT_PUBLIC_STATIC_WEBSITE_ONLY === "true"
                   }
-                  onClick={handleInstallSkill}
+                  onClick={() => setInstallDialogOpen(true)}
                 />
               </Tooltip>
             )}
@@ -705,7 +701,7 @@ export function ArtifactFileDetail({
                 disabled={!content}
                 onClick={async () => {
                   try {
-                    await navigator.clipboard.writeText(displayContent ?? "");
+                    await copyTextToClipboard(displayContent ?? "");
                     toast.success(t.clipboard.copiedToClipboard);
                   } catch (error) {
                     toast.error("Failed to copy to clipboard");
@@ -715,7 +711,7 @@ export function ArtifactFileDetail({
                 tooltip={t.clipboard.copyToClipboard}
               />
             )}
-            {!useWriteFileStreaming && language === "markdown" && (
+            {language === "markdown" && (
               <ArtifactAction
                 icon={isExportingWord ? LoaderIcon : FileType2Icon}
                 label="另存为 Word"
@@ -803,6 +799,17 @@ export function ArtifactFileDetail({
             滑动到底部并继续自动下滑
           </button>
         )}
+        {viewMode === "edit" && canUseAiEditor && (
+          <MarkdownAiEditor
+            // 编辑用原始内容（与源码模式一致，不脱敏）；保存仍走头部「保存 Markdown」按钮。
+            markdown={displayContent ?? ""}
+            onChange={(value) => {
+              setDraftContent(value);
+              setHasLocalEdits(true);
+            }}
+            threadId={threadId}
+          />
+        )}
         {isSupportPreview &&
           viewMode === "preview" &&
           (language === "markdown" ||
@@ -860,6 +867,12 @@ export function ArtifactFileDetail({
             </div>
           ))}
       </ArtifactContent>
+      <SkillInstallDialog
+        open={installDialogOpen}
+        onOpenChange={setInstallDialogOpen}
+        threadId={threadId}
+        filepath={filepath}
+      />
     </Artifact>
   );
 }

frontend-web/src/components/workspace/artifacts/artifact-file-list.tsx

@@ -12,7 +12,6 @@ import {
 } from "@/components/ui/card";
 import { downloadArtifactFile } from "@/core/artifacts/download";
 import { useI18n } from "@/core/i18n/hooks";
-import { installSkill } from "@/core/skills/api";
 import {
   getFileExtensionDisplayName,
   getFileIcon,
@@ -22,6 +21,7 @@ import { cn } from "@/lib/utils";
 
 import { useThread } from "../messages/context";
 import { useArtifacts } from "./context";
+import { SkillInstallDialog } from "./skill-install-dialog";
 
 export function ArtifactFileList({
   className,
@@ -35,7 +35,7 @@ export function ArtifactFileList({
   const { t } = useI18n();
   const { isMock, publicShareCode } = useThread();
   const { select: selectArtifact, setOpen } = useArtifacts();
-  const [installingFile, setInstallingFile] = useState<string | null>(null);
+  const [installFile, setInstallFile] = useState<string | null>(null);
   const [downloadingFile, setDownloadingFile] = useState<string | null>(null);
 
   const handleClick = useCallback(
@@ -47,31 +47,12 @@ export function ArtifactFileList({
   );
 
   const handleInstallSkill = useCallback(
-    async (e: React.MouseEvent, filepath: string) => {
+    (e: React.MouseEvent, filepath: string) => {
       e.stopPropagation();
       e.preventDefault();
-
-      if (installingFile) return;
-
-      setInstallingFile(filepath);
-      try {
-        const result = await installSkill({
-          thread_id: threadId,
-          path: filepath,
-        });
-        if (result.success) {
-          toast.success(result.message);
-        } else {
-          toast.error(result.message || "Failed to install skill");
-        }
-      } catch (error) {
-        console.error("Failed to install skill:", error);
-        toast.error("Failed to install skill");
-      } finally {
-        setInstallingFile(null);
-      }
+      setInstallFile(filepath);
     },
-    [threadId, installingFile],
+    [],
   );
 
   const handleDownload = useCallback(
@@ -116,14 +97,9 @@ export function ArtifactFileList({
               {file.endsWith(".skill") && (
                 <Button
                   variant="ghost"
-                  disabled={installingFile === file}
                   onClick={(e) => handleInstallSkill(e, file)}
                 >
-                  {installingFile === file ? (
-                    <LoaderIcon className="size-4 animate-spin" />
-                  ) : (
                   <PackageIcon className="size-4" />
-                  )}
                   {t.common.install}
                 </Button>
               )}
@@ -143,6 +119,14 @@ export function ArtifactFileList({
           </CardHeader>
         </Card>
       ))}
+      <SkillInstallDialog
+        open={!!installFile}
+        onOpenChange={(open) => {
+          if (!open) setInstallFile(null);
+        }}
+        threadId={threadId}
+        filepath={installFile}
+      />
     </ul>
   );
 }

frontend-web/src/components/workspace/artifacts/skill-install-dialog.tsx

@@ -0,0 +1,178 @@
+"use client";
+
+import { AlertCircleIcon, Loader2Icon, PackageIcon } from "lucide-react";
+import { useEffect, useMemo, useState } from "react";
+import { toast } from "sonner";
+
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import {
+  installSkill,
+  previewSkillInstall,
+  type PreviewSkillInstallResponse,
+} from "@/core/skills/api";
+
+export function SkillInstallDialog({
+  open,
+  onOpenChange,
+  threadId,
+  filepath,
+  onInstalled,
+}: {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  threadId: string;
+  filepath: string | null;
+  onInstalled?: (skillName: string) => void;
+}) {
+  const [preview, setPreview] = useState<PreviewSkillInstallResponse | null>(null);
+  const [installName, setInstallName] = useState("");
+  const [loading, setLoading] = useState(false);
+  const [installing, setInstalling] = useState(false);
+
+  useEffect(() => {
+    if (!open || !filepath) {
+      setPreview(null);
+      setInstallName("");
+      setLoading(false);
+      setInstalling(false);
+      return;
+    }
+
+    let cancelled = false;
+    setLoading(true);
+    setPreview(null);
+    setInstallName("");
+
+    void previewSkillInstall({ thread_id: threadId, path: filepath })
+      .then((result) => {
+        if (cancelled) return;
+        setPreview(result);
+        setInstallName(result.skill_name);
+      })
+      .catch((error) => {
+        if (cancelled) return;
+        toast.error(error instanceof Error ? error.message : "Failed to preview skill install");
+        onOpenChange(false);
+      })
+      .finally(() => {
+        if (!cancelled) setLoading(false);
+      });
+
+    return () => {
+      cancelled = true;
+    };
+  }, [filepath, onOpenChange, open, threadId]);
+
+  const trimmedName = installName.trim();
+  const unchangedConflict = useMemo(() => {
+    if (!preview) return false;
+    return trimmedName === preview.skill_name && !preview.can_install_as_is;
+  }, [preview, trimmedName]);
+
+  async function handleInstall() {
+    if (!filepath || !trimmedName || installing) return;
+    setInstalling(true);
+    try {
+      const result = await installSkill({
+        thread_id: threadId,
+        path: filepath,
+        skill_name: trimmedName,
+      });
+      if (!result.success) {
+        toast.error(result.message || "Failed to install skill");
+        return;
+      }
+      toast.success(result.message);
+      onInstalled?.(result.skill_name);
+      onOpenChange(false);
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to install skill");
+    } finally {
+      setInstalling(false);
+    }
+  }
+
+  const helperText = preview?.owned_by_other
+    ? `该技能名已被 ${preview.owner_username || "其他用户"} 安装。你可以换个名字继续安装。`
+    : preview?.owned_by_me
+      ? "你已经安装过这个技能了；如果想保留一份新副本，可以换个名字安装。"
+      : preview?.builtin_conflict
+        ? "这个名字已被公共技能占用，请换个名字安装。"
+        : "可以直接安装，也可以先改一个更适合自己的名字。";
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-md">
+        <DialogHeader>
+          <DialogTitle>安装技能</DialogTitle>
+          <DialogDescription>安装前会校验技能归属；如果名字已被占用，可以改名后继续安装。</DialogDescription>
+        </DialogHeader>
+
+        {loading ? (
+          <div className="text-muted-foreground flex items-center justify-center gap-2 py-8 text-sm">
+            <Loader2Icon className="size-4 animate-spin" />
+            正在检查技能安装权限…
+          </div>
+        ) : preview ? (
+          <div className="space-y-4">
+            <div className="rounded-xl border bg-muted/35 p-3 text-sm">
+              <div className="font-medium">{preview.skill_name}</div>
+              {preview.description ? (
+                <div className="text-muted-foreground mt-1 line-clamp-3">{preview.description}</div>
+              ) : null}
+            </div>
+
+            <div className="space-y-2">
+              <div className="text-sm font-medium">安装名称</div>
+              <Input
+                value={installName}
+                onChange={(e) => setInstallName(e.currentTarget.value)}
+                placeholder="请输入技能名称"
+              />
+              <div className="text-muted-foreground text-xs">{helperText}</div>
+            </div>
+
+            {!preview.can_install_as_is && (
+              <div className="flex gap-2 rounded-xl border border-amber-300/60 bg-amber-50 px-3 py-2 text-sm text-amber-900">
+                <AlertCircleIcon className="mt-0.5 size-4 shrink-0" />
+                <div>{preview.message}</div>
+              </div>
+            )}
+
+            {preview.warnings.length > 0 && (
+              <div className="text-muted-foreground rounded-xl border px-3 py-2 text-xs">
+                {preview.warnings.join(" ")}
+              </div>
+            )}
+          </div>
+        ) : null}
+
+        <DialogFooter>
+          <Button variant="outline" onClick={() => onOpenChange(false)} disabled={installing}>
+            取消
+          </Button>
+          <Button
+            onClick={() => void handleInstall()}
+            disabled={loading || installing || !trimmedName || unchangedConflict}
+          >
+            {installing ? (
+              <Loader2Icon className="size-4 animate-spin" />
+            ) : (
+              <PackageIcon className="size-4" />
+            )}
+            安装
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}

frontend-web/src/components/workspace/chats/chat-box.tsx

@@ -423,6 +423,7 @@ const ChatBox: React.FC<{
                   className="size-full"
                   filepath={selectedArtifact}
                   threadId={threadId}
+                  allowVirtualMarkdownEdit
                 />
               </TabsContent>
               <TabsContent value="references" className="min-h-0 flex-1 overflow-y-auto p-0">
@@ -437,6 +438,7 @@ const ChatBox: React.FC<{
               className="size-full"
               filepath={selectedArtifact}
               threadId={threadId}
+              allowVirtualMarkdownEdit
             />
           ) : hasCitationReferences ? (
             <div className="relative size-full overflow-hidden">

frontend-web/src/components/workspace/compact-welcome.tsx

@@ -20,16 +20,16 @@ export function CompactWelcome({ className }: { className?: string }) {
         className="mb-3.5 inline-flex items-center justify-center rounded-full p-3"
         style={{
           backgroundColor:
-            "color-mix(in srgb, var(--workspace-brand) 5%, transparent)",
+            "rgb(var(--legacy-workspace-brand-rgb) / 5%)",
           border:
-            "1px solid color-mix(in srgb, var(--workspace-brand) 12%, transparent)",
+            "1px solid rgb(var(--legacy-workspace-brand-rgb) / 12%)",
         }}
       >
         <div
           className="flex size-14 items-center justify-center rounded-2xl shadow-md"
           style={{
             backgroundImage:
-              "linear-gradient(to top right, var(--workspace-brand), color-mix(in srgb, var(--workspace-brand) 55%, white))",
+              "linear-gradient(to top right, var(--workspace-brand), var(--brand-200))",
           }}
         >
           <span className="text-2xl font-black tracking-wide text-white italic">
@@ -38,8 +38,8 @@ export function CompactWelcome({ className }: { className?: string }) {
         </div>
       </div>
 
-      <h1 className="flex items-center justify-center gap-2 text-2xl font-bold tracking-tight text-foreground/90">
-        <span className="text-2xl">👋</span> 欢迎使用CM助手
+      <h1 className="flex items-center justify-center text-2xl font-bold tracking-tight text-foreground/90">
+        欢迎使用CM助手
       </h1>
       <p className="text-muted-foreground mx-auto mt-2 max-w-sm text-xs leading-relaxed">
         基于先进深度推理模型，为您提供高效的市场分析、专业报告撰写、调研设计与协同脑暴支持。

frontend-web/src/components/workspace/copy-button.tsx

@@ -1,7 +1,9 @@
 import { CheckIcon, CopyIcon } from "lucide-react";
 import { useCallback, useState, type ComponentProps } from "react";
+import { toast } from "sonner";
 
 import { Button } from "@/components/ui/button";
+import { copyTextToClipboard } from "@/core/clipboard";
 import { useI18n } from "@/core/i18n/hooks";
 
 import { Tooltip } from "./tooltip";
@@ -14,11 +16,15 @@ export function CopyButton({
 }) {
   const { t } = useI18n();
   const [copied, setCopied] = useState(false);
-  const handleCopy = useCallback(() => {
-    void navigator.clipboard.writeText(clipboardData);
+  const handleCopy = useCallback(async () => {
+    try {
+      await copyTextToClipboard(clipboardData);
       setCopied(true);
       setTimeout(() => setCopied(false), 2000);
-  }, [clipboardData]);
+    } catch {
+      toast.error(t.clipboard.failedToCopyToClipboard);
+    }
+  }, [clipboardData, t.clipboard.failedToCopyToClipboard]);
   return (
     <Tooltip content={t.clipboard.copyToClipboard}>
       <Button

frontend-web/src/components/workspace/general-qa-sidebar.tsx

@@ -75,8 +75,10 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
+  listPathOfThread,
   pathOfThread,
   sortThreadsPinnedFirst,
   titleOfThread,
@@ -213,11 +215,12 @@ export function GeneralQaSidebar() {
 
   const visibleThreads = useMemo(
     () =>
+      // 智能体创建（bootstrap）会话也展示（带机器人图标、点击回创建页）；
+      // 仅排除调度 / 会商类系统会话。
       sortThreadsPinnedFirst(
         threads.filter(
           (thread) =>
             thread.metadata?.thread_type !== "scheduler" &&
-            thread.metadata?.thread_type !== "bootstrap" &&
             thread.metadata?.thread_type !== "roundtable",
         ),
       ),
@@ -249,9 +252,9 @@ export function GeneralQaSidebar() {
         let nextThreadPath = pathOfThread("new", { agent_id: agentIdFromPath });
         if (threadIndex > -1) {
           if (threads[threadIndex + 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex + 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex + 1]!);
           } else if (threads[threadIndex - 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex - 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex - 1]!);
           }
         }
         void router.push(nextThreadPath);
@@ -317,7 +320,7 @@ export function GeneralQaSidebar() {
           className={cn(
             "flex h-10 min-w-0 flex-1 items-center justify-center gap-1.5 rounded-[5px] text-[14px] font-semibold transition-colors",
             "border border-solid",
-            "bg-[color-mix(in_srgb,var(--primary)_14%,transparent)] hover:bg-[color-mix(in_srgb,var(--primary)_24%,transparent)]",
+            "bg-[rgb(var(--legacy-primary-rgb)/14%)] hover:bg-[rgb(var(--legacy-primary-rgb)/24%)]",
           )}
         >
           <Plus className="size-4 stroke-[2.5]" />
@@ -346,33 +349,64 @@ export function GeneralQaSidebar() {
                       type="button"
                       onClick={() => handleSelectAgent(agent.id)}
                       className={cn(
-                        "group relative flex w-full items-start gap-2.5 rounded-xl border px-2.5 py-2 text-left transition-colors",
+                        "group relative flex w-full items-start gap-3 rounded-xl border px-3 py-2.5 text-left transition-all duration-150",
                         isActive
-                          ? "border-primary/40 bg-primary/5"
+                          ? isDark
+                            ? "border-[#2b8ffe] bg-[#0b4fae]/65 shadow-[0_0_0_1px_rgba(43,143,254,0.5),0_12px_28px_rgba(37,128,255,0.25)]"
+                            : "agent-sidebar-card--active border-primary/50 bg-primary/10 shadow-sm"
+                          : isDark
+                            ? "border-[#2b8ffe]/20 bg-[#042b59]/35 hover:border-[#2b8ffe]/60 hover:bg-[#063b77]/60"
                             : "border-transparent hover:border-border hover:bg-accent/50",
                       )}
                     >
                       <span
-                        className="mt-0.5 flex size-9 shrink-0 items-center justify-center rounded-lg text-white shadow-sm"
+                        className={cn(
+                          "mt-0.5 flex size-10 shrink-0 items-center justify-center rounded-lg text-white shadow-sm",
+                          isDark &&
+                            isActive &&
+                            "ring-2 ring-[#83c1ff]/35 shadow-[0_0_18px_rgba(43,143,254,0.45)]",
+                        )}
                         style={{ backgroundImage: `linear-gradient(135deg, ${from}, ${to})` }}
                       >
-                        <Bot className="size-[18px]" />
+                        <Bot className="size-[19px]" />
                       </span>
                       <span className="min-w-0 flex-1">
                         <span
                           className={cn(
-                            "block truncate text-[13px] font-semibold",
-                            isActive ? "text-primary" : "text-foreground",
+                            "block truncate text-[16px] leading-5 font-bold",
+                            isActive
+                              ? isDark
+                                ? "text-white"
+                                : "text-primary"
+                              : isDark
+                                ? "text-white/95"
+                                : "text-foreground",
                           )}
                         >
                           {desensitize(agent.name)}
                         </span>
-                        <span className="mt-0.5 block truncate text-[11px] leading-snug text-muted-foreground">
+                        <span
+                          className={cn(
+                            "mt-1 block truncate text-[13px] leading-[1.35]",
+                            isDark
+                              ? isActive
+                                ? "text-[#d6eaff]"
+                                : "text-[#9ebfe2]"
+                              : "text-muted-foreground",
+                          )}
+                        >
                           {agent.description ? desensitize(agent.description) : "智能体助手"}
                         </span>
                       </span>
                       {isActive && (
-                        <span className="absolute top-1/2 right-1 h-6 w-1 -translate-y-1/2 rounded-full bg-primary" />
+                        <span
+                          className={cn(
+                            "absolute top-1/2 right-1.5 h-8 w-1.5 -translate-y-1/2 rounded-full",
+                            isDark
+                              ? "bg-[#2b8ffe] shadow-[0_0_14px_rgba(43,143,254,0.85)]"
+                              : "bg-primary",
+                          )}
+                        />
                       )}
                     </button>
                   );
@@ -417,7 +451,9 @@ export function GeneralQaSidebar() {
                   </div>
                 ) : (
                   filteredThreads.map((thread) => {
-                    const isActive = pathOfThread(thread) === pathname;
+                    const href = listPathOfThread(thread);
+                    const isActive = href === pathname;
+                    const isBoot = isBootstrapThread(thread);
                     const pinned = isThreadPinned(thread);
                     const favorited = isThreadFavorite(thread);
                     return (
@@ -426,7 +462,7 @@ export function GeneralQaSidebar() {
                         className="group/item relative flex items-center"
                       >
                         <Link
-                          href={pathOfThread(thread)}
+                          href={href}
                           className={cn(
                             "relative flex h-9 min-w-0 flex-1 items-center gap-2 rounded-lg px-2.5 text-[13px] transition-colors",
                             isActive
@@ -434,12 +470,22 @@ export function GeneralQaSidebar() {
                               : "text-muted-foreground hover:bg-accent/60 hover:text-foreground",
                           )}
                         >
+                          {isBoot ? (
+                            <Bot
+                              className={cn(
+                                "size-3.5 shrink-0",
+                                isActive ? "text-primary" : "text-muted-foreground/70",
+                              )}
+                              aria-label="智能体创建会话"
+                            />
+                          ) : (
                             <MessageSquare
                               className={cn(
                                 "size-3.5 shrink-0",
                                 isActive ? "text-primary" : "text-muted-foreground/70",
                               )}
                             />
+                          )}
                           {pinned && (
                             <Pin className="size-3 shrink-0 text-muted-foreground/70" />
                           )}

frontend-web/src/components/workspace/input-box.tsx

@@ -613,7 +613,7 @@ export function InputBox({
             : "*:data-[slot='input-group']:rounded-3xl",
           // 紧凑落地态（CM 参考图）：白卡 + 细边 + 轻阴影 + 主色聚焦环（无旋转彩边）
           compact && isNewThread
-            ? "rounded-2xl border border-gray-200/70 bg-white overflow-hidden shadow-[0_4.5px_22px_rgba(0,0,0,0.025)] transition-all duration-300 focus-within:border-[color-mix(in_srgb,var(--primary)_35%,transparent)] focus-within:ring-4 focus-within:ring-[color-mix(in_srgb,var(--primary)_5%,transparent)] focus-within:shadow-[0_10px_35px_color-mix(in_srgb,var(--primary)_4%,transparent)] dark:border-slate-700 dark:bg-slate-800"
+            ? "rounded-2xl border border-gray-200/70 bg-white overflow-hidden shadow-[0_4.5px_22px_rgba(0,0,0,0.025)] transition-all duration-300 focus-within:border-[rgb(var(--legacy-primary-rgb)/35%)] focus-within:ring-4 focus-within:ring-[rgb(var(--legacy-primary-rgb)/5%)] focus-within:shadow-[0_10px_35px_rgb(var(--legacy-primary-rgb)/4%)] dark:border-slate-700 dark:bg-slate-800"
             : // landing 态：透明，让外层 gemini-gradient-border 提供白卡 + 旋转描边
               // 对话态：常规白卡 + 中性边框 + 轻阴影
               isNewThread
@@ -682,13 +682,16 @@ export function InputBox({
                   "gap-1.5! rounded-full px-3! shadow-none",
                   compact && "rounded-lg px-2.5! py-1! text-[11px] font-medium",
                   context.writing_mode
-                    ? "border border-amber-300 bg-amber-50 text-amber-700 hover:bg-amber-100 dark:border-amber-700 dark:bg-amber-950/40 dark:text-amber-200"
+                    ? "border border-amber-300 bg-amber-50 text-amber-700 ring-1 ring-amber-300/35 hover:bg-amber-100 dark:border-amber-300/70 dark:bg-amber-400/20 dark:text-amber-100 dark:ring-amber-300/35 dark:shadow-[0_0_0_1px_rgba(251,191,36,0.18),0_0_18px_rgba(251,191,36,0.18)] dark:hover:bg-amber-400/25"
                     : compact
                       ? "border border-transparent bg-muted/40 text-muted-foreground hover:bg-muted hover:text-foreground"
                       : "border-0 bg-transparent text-muted-foreground hover:bg-muted/70 hover:text-foreground dark:text-slate-400 dark:hover:bg-slate-700/70 dark:hover:text-slate-100",
                 )}
                 onClick={handleWritingModeToggle}
               >
+                {context.writing_mode && (
+                  <CheckIcon className="size-3 text-amber-700 dark:text-amber-100" />
+                )}
                 <FileTextIcon className="size-3" />
                 <span className="text-xs font-normal">写作</span>
               </PromptInputButton>
@@ -705,13 +708,16 @@ export function InputBox({
                   "gap-1.5! rounded-full px-3! shadow-none",
                   compact && "rounded-lg px-2.5! py-1! text-[11px] font-medium",
                   memoryInjectionEnabled
-                    ? "border border-blue-300 bg-blue-50 text-blue-700 hover:bg-blue-100 dark:border-blue-700 dark:bg-blue-950/40 dark:text-blue-200"
+                    ? "border border-blue-300 bg-blue-50 text-blue-700 ring-1 ring-blue-300/35 hover:bg-blue-100 dark:border-cyan-300/70 dark:bg-cyan-400/20 dark:text-cyan-50 dark:ring-cyan-300/35 dark:shadow-[0_0_0_1px_rgba(34,211,238,0.18),0_0_18px_rgba(34,211,238,0.18)] dark:hover:bg-cyan-400/25"
                     : compact
                       ? "border border-transparent bg-muted/40 text-muted-foreground hover:bg-muted hover:text-foreground"
                       : "border-0 bg-transparent text-muted-foreground hover:bg-muted/70 hover:text-foreground dark:text-slate-400 dark:hover:bg-slate-700/70 dark:hover:text-slate-100",
                 )}
                 onClick={handleMemoryInjectionToggle}
               >
+                {memoryInjectionEnabled && (
+                  <CheckIcon className="size-3 text-blue-700 dark:text-cyan-50" />
+                )}
                 <BrainCircuitIcon className="size-3" />
                 <span className="text-xs font-normal">记忆</span>
               </PromptInputButton>
@@ -1166,7 +1172,7 @@ export function InputBox({
               className={cn(
                 "rounded-full border-border bg-background shadow-sm hover:bg-muted dark:bg-blue-500 dark:border-blue-500 dark:text-white dark:hover:bg-blue-400 dark:shadow-none",
                 compact &&
-                  "size-7 rounded-lg border-0 bg-[var(--primary)] text-[var(--primary-foreground)] hover:bg-[color-mix(in_srgb,var(--primary)_88%,black)] disabled:bg-muted disabled:text-muted-foreground/40 dark:bg-[var(--primary)] dark:border-0 dark:text-[var(--primary-foreground)] dark:hover:bg-[color-mix(in_srgb,var(--primary)_88%,black)] dark:disabled:bg-muted",
+                  "size-7 rounded-lg border-0 bg-[var(--primary)] text-[var(--primary-foreground)] hover:opacity-90 disabled:bg-muted disabled:text-muted-foreground/40 dark:bg-[var(--primary)] dark:border-0 dark:text-[var(--primary-foreground)] dark:hover:opacity-90 dark:disabled:bg-muted",
               )}
               disabled={disabled}
               variant="outline"

frontend-web/src/components/workspace/messages/message-list-item.tsx

@@ -138,6 +138,7 @@ export function MessageListItem({
   extraRehypePlugins,
   onEditResubmit,
   onMessageDeleted,
+  turnTime,
 }: {
   className?: string;
   fitRowToContent?: boolean;
@@ -154,6 +155,13 @@ export function MessageListItem({
   extraRehypePlugins?: ReturnType<typeof useRehypeSplitWordsIntoSpans>;
   onEditResubmit?: (text: string) => void;
   onMessageDeleted?: (deletedIds: string[]) => void;
+  /**
+   * Durable ask time of the turn this message belongs to (the preceding
+   * question's `client_ts`). Used to time-stamp the AI answer, which carries no
+   * timestamp of its own — without it the answer would fall back to the current
+   * wall clock at render time and appear to "drift" to now on every reload.
+   */
+  turnTime?: string;
 }) {
   const isHuman = message.type === 'human';
   const messageMarkdown =
@@ -182,6 +190,7 @@ export function MessageListItem({
         extraRehypePlugins={extraRehypePlugins}
         onEditResubmit={onEditResubmit}
         onMessageDeleted={onMessageDeleted}
+        turnTime={turnTime}
       />
       {/*
         Human messages carry their own inline copy/edit toolbar inside
@@ -390,6 +399,7 @@ function MessageContent_({
   extraRehypePlugins,
   onEditResubmit,
   onMessageDeleted,
+  turnTime,
 }: {
   className?: string;
   message: Message;
@@ -400,6 +410,7 @@ function MessageContent_({
   extraRehypePlugins?: ReturnType<typeof useRehypeSplitWordsIntoSpans>;
   onEditResubmit?: (text: string) => void;
   onMessageDeleted?: (deletedIds: string[]) => void;
+  turnTime?: string;
 }) {
   const baseRehypePlugins = useRehypeSplitWordsIntoSpans(isLoading);
 
@@ -456,9 +467,15 @@ function MessageContent_({
     [threadId, resolveArtifact],
   );
 
+  // Question carries its own `client_ts` (round-trips through the checkpoint).
+  // The AI answer has no timestamp of its own, so it inherits the turn's ask
+  // time (its question's `client_ts`, threaded down as `turnTime`). This is
+  // durable and turn-accurate, and — unlike the old per-id `now` fallback —
+  // never drifts to the current clock when an unfinished answer is reloaded.
+  const ownAskTime = message.id ? askTimes[message.id] : undefined;
   const messageTime = formatAskedTime(
     message.additional_kwargs?.client_ts ??
-      (message.id ? askTimes[message.id] : undefined),
+      (isHuman ? ownAskTime : (turnTime ?? ownAskTime)),
   );
 
   const rawContent = extractContentFromMessage(message);

frontend-web/src/components/workspace/messages/message-list.tsx

@@ -1,6 +1,6 @@
 import type { Message } from "@langchain/langgraph-sdk";
 import type { BaseStream } from "@langchain/langgraph-sdk/react";
-import { CheckIcon, SendIcon, XIcon } from "lucide-react";
+import { CheckIcon, PenLineIcon, SendIcon, XIcon } from "lucide-react";
 import { useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useStickToBottomContext } from "use-stick-to-bottom";
 
@@ -11,7 +11,7 @@ import {
 } from "@/components/ai-elements/conversation";
 import { Button } from "@/components/ui/button";
 import { Textarea } from "@/components/ui/textarea";
-import { rememberAskTimes } from "@/core/chat-timestamps";
+import { rememberAskTimes, useChatAskTimes } from "@/core/chat-timestamps";
 import { useI18n } from "@/core/i18n/hooks";
 import {
   extractContentFromMessage,
@@ -103,6 +103,7 @@ export function MessageList({
   onSetupAgentReject,
   onSetupWritingApprove,
   onSetupWritingReject,
+  onSetupWritingStart,
 }: {
   className?: string;
   contentClassName?: string;
@@ -120,6 +121,8 @@ export function MessageList({
   onSetupAgentReject?: (payload: SetupAgentApprovalPayload) => void | Promise<void>;
   onSetupWritingApprove?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
   onSetupWritingReject?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
+  /** 审批卡「直接开始写作」回调：应用配置（含已确认大纲）并立即启动写作流程（仅写作页提供，模板编辑等场景缺省隐藏该按钮）。 */
+  onSetupWritingStart?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
 }) {
   const baseRehypePlugins = useRehypeSplitWordsIntoSpans(thread.isLoading);
   const rehypePlugins = useMemo(
@@ -164,15 +167,24 @@ export function MessageList({
     [allMessages, hiddenMessageIds],
   );
 
-  // Stamp a wall-clock time onto every question/answer the first time it is
-  // seen, in a single batched commit. Questions sent this session already carry
-  // an accurate time (see useThreadStream); this also covers assistant answers
-  // and messages loaded from history. First-write-wins keeps the earliest time.
+  const askTimes = useChatAskTimes();
+
+  // Stamp a wall-clock time onto every *question* the first time it is seen, in
+  // a single batched commit. Questions sent this session already carry an
+  // accurate `client_ts` (see useThreadStream) and are skipped; this only backs
+  // up legacy questions loaded from history that predate `client_ts`.
+  // First-write-wins keeps the earliest time.
+  //
+  // AI answers are deliberately NOT stamped here: they carry no timestamp of
+  // their own, so a `now` stamp would be the *load* time, not the answer time —
+  // and for an unfinished/interrupted turn that re-stamps to the current clock
+  // on every reload. Instead the answer inherits its question's durable time
+  // via `turnTimes` below.
   useEffect(() => {
     const now = new Date().toISOString();
     const entries: Record<string, string> = {};
     for (const message of messages) {
-      if (message.type !== "human" && message.type !== "ai") continue;
+      if (message.type !== "human") continue;
       if (!message.id || message.id.startsWith("opt-")) continue;
       if (typeof message.additional_kwargs?.client_ts === "string") continue;
       entries[message.id] = now;
@@ -180,6 +192,24 @@ export function MessageList({
     if (Object.keys(entries).length > 0) rememberAskTimes(entries);
   }, [messages]);
 
+  // Durable ask time per message id, used to time-stamp the AI answer (which has
+  // no timestamp of its own) with the time of the question that triggered it.
+  const turnTimes = useMemo(() => {
+    const map = new Map<string, string>();
+    let lastQuestionTime: string | undefined;
+    for (const message of messages) {
+      if (message.type === "human") {
+        const ts = message.additional_kwargs?.client_ts;
+        const fromAskTimes = message.id ? askTimes[message.id] : undefined;
+        lastQuestionTime =
+          typeof ts === "string" && ts ? ts : fromAskTimes;
+      } else if (message.type === "ai" && message.id && lastQuestionTime) {
+        map.set(message.id, lastQuestionTime);
+      }
+    }
+    return map;
+  }, [messages, askTimes]);
+
   const [settings] = useLocalSettings();
   const ragModeEnabled =
     settings.display.ragModeEnabled || isThreadRagModeLocked(threadId);
@@ -355,6 +385,7 @@ export function MessageList({
                   onMessageDeleted={
                     allowDelete ? handleMessageDeleted : undefined
                   }
+                  turnTime={msg.id ? turnTimes.get(msg.id) : undefined}
                 />
               );
             });
@@ -430,6 +461,7 @@ export function MessageList({
                   message={message}
                   onApprove={onSetupWritingApprove}
                   onReject={onSetupWritingReject}
+                  onStart={onSetupWritingStart}
                 />
                 <MessageTokenUsageList
                   enabled={tokenUsageEnabled}
@@ -629,6 +661,8 @@ export type SetupAgentApprovalPayload = {
 export type SetupWritingApprovalPayload = {
   user_intent?: string;
   article_type?: string;
+  /** 当 article_type 是已有类型库里没有的新类型时，模型识别出的一句话特征说明（命中已有类型时为空）。 */
+  article_type_detail?: string;
   word_count_target?: number | null;
   target_audience?: string;
   writing_mode?: string;
@@ -820,14 +854,16 @@ function SetupWritingApprovalCard({
   message,
   onApprove,
   onReject,
+  onStart,
 }: {
   disabled: boolean;
   message: unknown;
   onApprove?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
   onReject?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
+  onStart?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
 }) {
   const payload = getSetupWritingApprovalPayload(message);
-  const [submitting, setSubmitting] = useState<"approve" | "reject" | null>(
+  const [submitting, setSubmitting] = useState<"approve" | "reject" | "start" | null>(
     null,
   );
 
@@ -838,7 +874,7 @@ function SetupWritingApprovalCard({
   const approvalPayload = payload;
   const busy = disabled || submitting !== null;
 
-  async function run(action: "approve" | "reject") {
+  async function run(action: "approve" | "reject" | "start") {
     if (busy) {
       return;
     }
@@ -846,6 +882,8 @@ function SetupWritingApprovalCard({
     try {
       if (action === "approve") {
         await onApprove?.(approvalPayload);
+      } else if (action === "start") {
+        await onStart?.(approvalPayload);
       } else {
         await onReject?.(approvalPayload);
       }
@@ -854,9 +892,14 @@ function SetupWritingApprovalCard({
     }
   }
 
+  const hasNewType = !!approvalPayload.article_type_detail?.trim();
   const rows: Array<{ label: string; value: string }> = [];
   if (approvalPayload.article_type) {
-    rows.push({ label: "文章类型", value: approvalPayload.article_type });
+    rows.push({
+      label: "文章类型",
+      // 新类型（列表外）标注「· 新」，让用户知道这是模型新识别的类型。
+      value: hasNewType ? `${approvalPayload.article_type} · 新` : approvalPayload.article_type,
+    });
   }
   if (typeof approvalPayload.word_count_target === "number") {
     rows.push({ label: "目标字数", value: `${approvalPayload.word_count_target} 字` });
@@ -903,6 +946,13 @@ function SetupWritingApprovalCard({
           </div>
         ) : null}
 
+        {hasNewType ? (
+          <div className="space-y-1">
+            <div className="text-muted-foreground text-xs">新类型说明</div>
+            <p className="text-sm leading-6">{approvalPayload.article_type_detail}</p>
+          </div>
+        ) : null}
+
         {approvalPayload.outline ? (
           <div className="space-y-1">
             <div className="text-muted-foreground text-xs">已有大纲</div>
@@ -926,6 +976,7 @@ function SetupWritingApprovalCard({
         </Button>
         <Button
           type="button"
+          variant={onStart ? "outline" : "default"}
           size="sm"
           disabled={busy || !onApprove}
           onClick={() => void run("approve")}
@@ -933,6 +984,17 @@ function SetupWritingApprovalCard({
           <CheckIcon className="h-4 w-4" />
           应用到表单
         </Button>
+        {onStart ? (
+          <Button
+            type="button"
+            size="sm"
+            disabled={busy}
+            onClick={() => void run("start")}
+          >
+            <PenLineIcon className="h-4 w-4" />
+            直接开始写作
+          </Button>
+        ) : null}
       </div>
     </div>
   );

frontend-web/src/components/workspace/messages/message-token-usage.tsx

@@ -31,6 +31,48 @@ export function formatDuration(ms: number): string {
   return `${mins}m ${secs}s`;
 }
 
+/**
+ * 速度条颜色含义图例 —— 生成结束后显示在速度条下方一行，向用户解释当前
+ * 进度条颜色代表的「模型生成延迟」状态。进度条本身仍是 5 档(极快/流畅/一般/
+ * 偏慢/缓慢)的连续配色;这里把它归并成用户视角的 3 类延迟 + 「无响应」:
+ *   绿(#16a34a，极快/流畅) → 延迟正常
+ *   黄(#eab308，一般)       → 延迟微长
+ *   红(#ef4444，偏慢/缓慢)  → 延迟长，可能失败
+ *   灰(#9ca3af)            → 无响应(无进度条/0 tok/s)，任务失败，请重试
+ * 根据本次问答的实际速度，只显示对应那一档的提示。
+ */
+function legendForSpeed(tps: number): { color: string; label: string } {
+  if (tps <= 0) return { color: "#9ca3af", label: "无响应，任务失败，请重试" };
+  if (tps >= 30) return { color: "#16a34a", label: "延迟正常" };
+  if (tps >= 15) return { color: "#eab308", label: "延迟微长" };
+  return { color: "#ef4444", label: "延迟长，可能失败" };
+}
+
+export function SpeedLegend({
+  className,
+  tokensPerSec,
+}: {
+  className?: string;
+  tokensPerSec: number;
+}) {
+  const item = legendForSpeed(tokensPerSec);
+  return (
+    <span
+      className={cn(
+        "text-muted-foreground inline-flex items-center gap-1",
+        className,
+      )}
+    >
+      <span
+        aria-hidden
+        className="inline-block size-2 shrink-0 rounded-full"
+        style={{ backgroundColor: item.color }}
+      />
+      {item.label}
+    </span>
+  );
+}
+
 export function SpeedPill({ metric }: { metric: MessageMetric }) {
   const fill = Math.max(0, Math.min(1, metric.tokensPerSec / FULL_SCALE_TOKENS_PER_SEC));
   const { color, label } = classifySpeed(metric.tokensPerSec);
@@ -132,6 +174,13 @@ export function MessageTokenUsage({
               {formatDuration(resolvedMetric.durationMs)}
             </span>
           )}
+          {/* 生成结束(非流式中)后只显示与本次速度对应那一档的颜色含义说明。 */}
+          {!resolvedMetric.isActive && (
+            <SpeedLegend
+              className="basis-full"
+              tokensPerSec={resolvedMetric.tokensPerSec}
+            />
+          )}
         </>
       ) : null}
     </div>

frontend-web/src/components/workspace/publish-square-picker-dialog.tsx

@@ -1,7 +1,7 @@
 "use client";
 
 import { CheckIcon } from "lucide-react";
-import { useEffect, useState } from "react";
+import { type ReactNode, useEffect, useState } from "react";
 
 import { Button } from "@/components/ui/button";
 import {
@@ -26,6 +26,8 @@ interface PublishSquarePickerDialogProps {
   loading?: boolean;
   title?: string;
   description?: string;
+  /** 可选提示节点，渲染在描述下方 —— 用于显示「本次发布将以哪个账号进行」及账号切换告警。 */
+  accountNotice?: ReactNode;
 }
 
 /** A "publish to which square (发布广场)?" chooser. Squares are rendered as a
@@ -39,6 +41,7 @@ export function PublishSquarePickerDialog({
   loading,
   title = "选择发布广场",
   description = "请选择要把它发布到哪个广场。每个项目只能归属一个广场，不会重复出现。",
+  accountNotice,
 }: PublishSquarePickerDialogProps) {
   const [selected, setSelected] = useState<string>(
     defaultSquareId || squares[0]?.id || "",
@@ -58,6 +61,7 @@ export function PublishSquarePickerDialog({
           <DialogTitle>{title}</DialogTitle>
           <DialogDescription>{description}</DialogDescription>
         </DialogHeader>
+        {accountNotice}
         <div className="max-h-[50vh] space-y-1.5 overflow-y-auto py-1">
           {squares.map((sq) => {
             const active = selected === sq.id;

frontend-web/src/components/workspace/recent-chat-list.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import {
+  Bot,
   ChevronDown,
   ChevronRight,
   Download,
@@ -64,8 +65,10 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
+  listPathOfThread,
   pathOfThread,
   sortThreadsPinnedFirst,
   titleOfThread,
@@ -130,9 +133,9 @@ export function RecentChatList({
         });
         if (threadIndex > -1) {
           if (threads[threadIndex + 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex + 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex + 1]!);
           } else if (threads[threadIndex - 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex - 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex - 1]!);
           }
         }
         void router.push(nextThreadPath);
@@ -189,11 +192,12 @@ export function RecentChatList({
     [t],
   );
 
+  // 智能体创建（bootstrap）会话也展示在常用对话里（带机器人图标、点击回创建页）；
+  // 仅排除调度 / 会商类系统会话。
   const visibleThreads = sortThreadsPinnedFirst(
     threads.filter(
       (thread) =>
         thread.metadata?.thread_type !== "scheduler" &&
-        thread.metadata?.thread_type !== "bootstrap" &&
         thread.metadata?.thread_type !== "roundtable",
     ),
   );
@@ -239,7 +243,9 @@ export function RecentChatList({
           <SidebarMenu>
             <div className="flex w-full flex-col gap-0.5">
               {shownThreads.map((thread) => {
-                const isActive = pathOfThread(thread) === pathname;
+                const href = listPathOfThread(thread);
+                const isActive = href === pathname;
+                const isBoot = isBootstrapThread(thread);
                 const pinned = isThreadPinned(thread);
                 const favorited = isThreadFavorite(thread);
                 return (
@@ -261,9 +267,20 @@ export function RecentChatList({
                     >
                       <Link
                         className="flex w-full items-center gap-1 whitespace-nowrap group-hover/side-menu-item:overflow-hidden"
-                        href={pathOfThread(thread)}
+                        href={href}
                       >
-                        {compact && (
+                        {isBoot ? (
+                          <Bot
+                            className={
+                              "size-3.5 shrink-0 " +
+                              (isActive
+                                ? "text-[var(--primary)]"
+                                : "text-muted-foreground/70")
+                            }
+                            aria-label="智能体创建会话"
+                          />
+                        ) : (
+                          compact && (
                             <MessageSquare
                               className={
                                 "size-3.5 shrink-0 " +
@@ -272,6 +289,7 @@ export function RecentChatList({
                                   : "text-muted-foreground/70")
                               }
                             />
+                          )
                         )}
                         {pinned && (
                           <Pin className="size-3 shrink-0 text-muted-foreground/70" />

frontend-web/src/components/workspace/recent-roundtable-list.tsx

@@ -71,9 +71,10 @@ function StatusBadge({ draft }: { draft: DraftMeta }) {
   if (draft.status === "error") {
     return <span className="text-[10px] font-medium text-rose-500">出错</span>;
   }
+  // 非进行中/待澄清/出错时，展示本次会商所用业务链（无链条 → 自由模式）。
   return (
     <span className="text-[10px] font-medium text-muted-foreground">
-      第 {draft.furthestStep} 步
+      {draft.chainTitle || "自由模式"}
     </span>
   );
 }
@@ -111,7 +112,7 @@ export function RecentRoundtableList() {
     }
     try {
       await rename(id, title);
-      toast.success("✏️ 已重命名");
+      toast.success("已重命名");
     } catch {
       toast.error("重命名失败，请重试");
     } finally {
@@ -125,7 +126,7 @@ export function RecentRoundtableList() {
       if (!window.confirm("确定删除这条会商记录吗？此操作不可恢复。")) return;
       try {
         await remove(draft.id);
-        toast.success("🗑 已删除会商记录");
+        toast.success("已删除会商记录");
       } catch {
         toast.error("删除失败，请重试");
       }

frontend-web/src/components/workspace/settings/about-content.ts

@@ -8,7 +8,7 @@ CM Assistant is an internal super-agent platform that orchestrates sub-agents, m
 
 ---
 
-## 🚀 Core Features
+## Core Features
 
 * **Skills & Tools**: With built-in and extensible skills and tools, CM Assistant can do almost anything.
 * **Sub-Agents**: Sub-Agents help the main agent to do the tasks that are too complex to be done by the main agent.

frontend-web/src/components/workspace/settings/account-settings-page.tsx

@@ -1,12 +1,14 @@
 "use client";
 
-import { useMemo } from "react";
 import { CopyIcon, LogOutIcon, UserIcon } from "lucide-react";
 import { toast } from "sonner";
 
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
 import { clearStoredAuth, getAccountDisplayName, getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
+import { OptType, writeYLog } from "@/core/log/y-log";
+import { clearYLogToken } from "@/core/log/y-log-token";
 
 import { SettingsSection } from "./settings-section";
 
@@ -25,7 +27,10 @@ function copy(text: string, hint = "已复制") {
 }
 
 export function AccountSettingsPage() {
-  const auth = useMemo(() => getStoredAuth(), []);
+  // Subscribe to same-tab and cross-tab auth changes. The dialog may stay open
+  // while the active account is switched elsewhere.
+  useLiveAccount();
+  const auth = getStoredAuth();
 
   if (!auth) {
     return (
@@ -40,7 +45,15 @@ export function AccountSettingsPage() {
   const displayName = getAccountDisplayName(auth);
 
   const handleLogout = () => {
+    // 操作日志(Y-Log)：在清除 token1 之前上报登出（此时 token1 还在），keepalive 保证发出。
+    writeYLog({
+      optType: OptType.logout,
+      optDetail: "CM助手-全量-登出",
+      url: "/api/v1/auth/logout",
+      keepalive: true,
+    });
     clearStoredAuth();
+    clearYLogToken();
     // Match the rest of the app's logout flow: blow away the cookie session
     // by hitting the gateway logout endpoint and then forcing a full reload
     // so any cached query state goes too.

frontend-web/src/components/workspace/settings/appearance-settings-page.tsx

@@ -1,7 +1,20 @@
 "use client";
 
-import { DropletIcon, LayoutGridIcon, LayoutIcon, ListIcon, MoonIcon, PanelLeftIcon, SunIcon } from "lucide-react";
-import { useMemo, useState, type ComponentType, type SVGProps } from "react";
+import {
+  ArrowDown,
+  ArrowUp,
+  DropletIcon,
+  ExternalLink,
+  LayoutGridIcon,
+  LayoutIcon,
+  ListIcon,
+  MoonIcon,
+  PanelLeftIcon,
+  Plus,
+  SunIcon,
+  Trash2,
+} from "lucide-react";
+import { useEffect, useMemo, useState, type ComponentType, type SVGProps } from "react";
 import { useNavigate } from "react-router-dom";
 import { toast } from "sonner";
 
@@ -9,6 +22,7 @@ import { useTheme } from "@/contexts/ThemeContext";
 
 import { FONT_SCALE_OPTIONS } from "@/components/font-scale";
 import { Button } from "@/components/ui/button";
+import { Input } from "@/components/ui/input";
 import {
   Select,
   SelectContent,
@@ -32,7 +46,17 @@ import {
   useUpdateAppearanceSettings,
   useUpdateCitationDisplaySettings,
 } from "@/core/system-settings/hooks";
+import type {
+  CompactShortcutButton,
+  CompactShortcutRouteParam,
+} from "@/core/system-settings/api";
 import { cn } from "@/lib/utils";
+import {
+  APP_THEME_COLORS,
+  LOGIN_SOURCE_OPTIONS,
+  parseThemeMap,
+  stringifyThemeMap,
+} from "@/strategy-components/lib/light-app";
 
 import PrivateSquareSettingsPage from "@/pages/PrivateSquareSettingsPage";
 import PublishSquaresSettingsPage from "@/pages/PublishSquaresSettingsPage";
@@ -46,6 +70,97 @@ const languageOptions: { value: Locale; label: string }[] = [
   { value: "zh-CN", label: zhCN.locale.localName },
 ];
 
+const DEFAULT_SHORTCUT_THEME_MAP = "red=red;blue=blue;dark-blue=dark-blue";
+
+function makeShortcutId() {
+  if (typeof crypto !== "undefined" && "randomUUID" in crypto) {
+    return crypto.randomUUID();
+  }
+  return `shortcut-${Date.now()}-${Math.random().toString(16).slice(2)}`;
+}
+
+function newShortcutParam(): CompactShortcutRouteParam {
+  return {
+    key: "access_token",
+    paramType: "login",
+    source: "access_token",
+    customValue: "",
+    themeValue: DEFAULT_SHORTCUT_THEME_MAP,
+  };
+}
+
+function newShortcutButton(): CompactShortcutButton {
+  return {
+    id: makeShortcutId(),
+    label: "快捷入口",
+    url: "",
+    route_params: [newShortcutParam()],
+    enabled: true,
+    sort_order: 0,
+  };
+}
+
+function normalizeShortcutDraft(
+  buttons: CompactShortcutButton[] | undefined,
+): CompactShortcutButton[] {
+  const source = buttons?.length ? buttons : [newShortcutButton()];
+  return [...source]
+    .sort((a, b) => a.sort_order - b.sort_order)
+    .map((button, index) => ({
+      ...button,
+      id: button.id || makeShortcutId(),
+      label: button.label || "快捷入口",
+      url: button.url || "",
+      route_params: (button.route_params?.length
+        ? button.route_params
+        : [newShortcutParam()]
+      ).map((param) => ({
+        key: param.key || "",
+        paramType: param.paramType || "login",
+        source: param.source || "access_token",
+        customValue: param.customValue ?? "",
+        themeValue: param.themeValue || DEFAULT_SHORTCUT_THEME_MAP,
+      })),
+      enabled: button.enabled ?? true,
+      sort_order: index,
+    }));
+}
+
+function cleanShortcutParams(
+  params: CompactShortcutRouteParam[],
+): CompactShortcutRouteParam[] {
+  return params
+    .filter((param) => param.key.trim())
+    .map((param) => {
+      const base: CompactShortcutRouteParam = {
+        key: param.key.trim(),
+        paramType: param.paramType,
+      };
+      if (param.paramType === "theme") {
+        base.themeValue = stringifyThemeMap(parseThemeMap(param.themeValue));
+        return base;
+      }
+      base.source = param.source || "access_token";
+      if (base.source === "other") {
+        base.customValue = (param.customValue ?? "").trim();
+      }
+      return base;
+    });
+}
+
+function cleanShortcutButtons(
+  buttons: CompactShortcutButton[],
+): CompactShortcutButton[] {
+  return buttons.map((button, index) => ({
+    id: button.id || makeShortcutId(),
+    label: button.label.trim() || "快捷入口",
+    url: button.url.trim(),
+    route_params: cleanShortcutParams(button.route_params),
+    enabled: button.enabled,
+    sort_order: index,
+  }));
+}
+
 export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
   const { t, locale, changeLocale } = useI18n();
   const { theme, setTheme } = useTheme();
@@ -55,6 +170,7 @@ export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
   const isAdmin = getStoredAuth()?.system_role === "admin";
   const { data: appearance } = useAppearanceSettings();
   const updateAppearance = useUpdateAppearanceSettings();
+  const [shortcutDraft, setShortcutDraft] = useState<CompactShortcutButton[]>([]);
   const { data: citationDisplay } = useCitationDisplaySettings();
   const updateCitationDisplay = useUpdateCitationDisplaySettings();
   const globalDefault = appearance?.default_theme ?? "light";
@@ -66,6 +182,12 @@ export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
   const cleanupWords =
     citationDisplay?.cleanup_words ?? settings.display.citationCleanupWords ?? [];
 
+  useEffect(() => {
+    setShortcutDraft(
+      normalizeShortcutDraft(appearance?.compact_shortcut_buttons),
+    );
+  }, [appearance?.compact_shortcut_buttons]);
+
   // 独立登录会话（本标签页）：开关切换鉴权存储 localStorage ↔ sessionStorage（见 scoped-storage）。
   const [isolatedSession, setIsolatedSessionState] = useState(() => isIsolatedSession());
   const handleToggleIsolatedSession = (checked: boolean) => {
@@ -136,6 +258,102 @@ export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
     }
   };
 
+  const patchShortcut = (
+    id: string,
+    patch: Partial<CompactShortcutButton>,
+  ) => {
+    setShortcutDraft((items) =>
+      items.map((item) => (item.id === id ? { ...item, ...patch } : item)),
+    );
+  };
+
+  const patchShortcutParam = (
+    id: string,
+    index: number,
+    patch: Partial<CompactShortcutRouteParam>,
+  ) => {
+    setShortcutDraft((items) =>
+      items.map((item) =>
+        item.id === id
+          ? {
+              ...item,
+              route_params: item.route_params.map((param, paramIndex) =>
+                paramIndex === index ? { ...param, ...patch } : param,
+              ),
+            }
+          : item,
+      ),
+    );
+  };
+
+  const moveShortcut = (id: string, direction: -1 | 1) => {
+    setShortcutDraft((items) => {
+      const index = items.findIndex((item) => item.id === id);
+      const target = index + direction;
+      if (index < 0 || target < 0 || target >= items.length) return items;
+      const next = [...items];
+      [next[index], next[target]] = [next[target]!, next[index]!];
+      return next.map((item, order) => ({ ...item, sort_order: order }));
+    });
+  };
+
+  const addShortcutParam = (id: string) => {
+    setShortcutDraft((items) =>
+      items.map((item) =>
+        item.id === id
+          ? {
+              ...item,
+              route_params: [...item.route_params, newShortcutParam()],
+            }
+          : item,
+      ),
+    );
+  };
+
+  const removeShortcutParam = (id: string, index: number) => {
+    setShortcutDraft((items) =>
+      items.map((item) =>
+        item.id === id
+          ? {
+              ...item,
+              route_params: item.route_params.filter((_, paramIndex) => paramIndex !== index),
+            }
+          : item,
+      ),
+    );
+  };
+
+  const handleSaveShortcuts = async () => {
+    for (const item of shortcutDraft) {
+      if (item.enabled && !item.url.trim()) {
+        toast.error(`请填写「${item.label.trim() || "快捷入口"}」的跳转链接，或先关闭该按钮`);
+        return;
+      }
+      for (const param of item.route_params) {
+        if (!param.key.trim()) {
+          toast.error("路由参数键名不可为空");
+          return;
+        }
+        if (
+          param.paramType === "login" &&
+          param.source === "other" &&
+          !param.customValue?.trim()
+        ) {
+          toast.error("登录参数自定义值不可为空");
+          return;
+        }
+      }
+    }
+    try {
+      await updateAppearance.mutateAsync({
+        compact_shortcut_buttons: cleanShortcutButtons(shortcutDraft),
+      });
+      toast.success("顶部快捷按钮已保存");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "保存失败");
+    }
+  };
+
   const themeOptions = useMemo(
     () => [
       {
@@ -261,6 +479,40 @@ export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
         </>
       )}
 
+      {isAdmin && (
+        <>
+          <Separator />
+          <SettingsSection
+            title="顶部快捷按钮（管理员）"
+            description="配置全量/简洁模式右上角、换肤按钮左侧显示的跳转按钮。支持多个按钮、启停和与应用管理一致的登录/主题参数。"
+          >
+            <CompactShortcutSettings
+              buttons={shortcutDraft}
+              saving={updateAppearance.isPending}
+              onAdd={() =>
+                setShortcutDraft((items) => [
+                  ...items,
+                  { ...newShortcutButton(), sort_order: items.length },
+                ])
+              }
+              onPatch={patchShortcut}
+              onMove={moveShortcut}
+              onRemove={(id) =>
+                setShortcutDraft((items) =>
+                  items
+                    .filter((item) => item.id !== id)
+                    .map((item, index) => ({ ...item, sort_order: index })),
+                )
+              }
+              onAddParam={addShortcutParam}
+              onPatchParam={patchShortcutParam}
+              onRemoveParam={removeShortcutParam}
+              onSave={handleSaveShortcuts}
+            />
+          </SettingsSection>
+        </>
+      )}
+
       {isAdmin && (
         <>
           <Separator />
@@ -518,6 +770,298 @@ export function AppearanceSettingsPage({ onClose }: { onClose?: () => void }) {
   );
 }
 
+function CompactShortcutSettings({
+  buttons,
+  saving,
+  onAdd,
+  onPatch,
+  onMove,
+  onRemove,
+  onAddParam,
+  onPatchParam,
+  onRemoveParam,
+  onSave,
+}: {
+  buttons: CompactShortcutButton[];
+  saving: boolean;
+  onAdd: () => void;
+  onPatch: (id: string, patch: Partial<CompactShortcutButton>) => void;
+  onMove: (id: string, direction: -1 | 1) => void;
+  onRemove: (id: string) => void;
+  onAddParam: (id: string) => void;
+  onPatchParam: (
+    id: string,
+    index: number,
+    patch: Partial<CompactShortcutRouteParam>,
+  ) => void;
+  onRemoveParam: (id: string, index: number) => void;
+  onSave: () => void;
+}) {
+  return (
+    <div className="space-y-3">
+      <div className="flex flex-wrap items-center justify-between gap-2">
+        <p className="text-muted-foreground text-xs">
+          已配置 {buttons.length} 个按钮；只有启用且填写了跳转链接的按钮会显示。
+        </p>
+        <div className="flex items-center gap-2">
+          <Button type="button" variant="outline" size="sm" onClick={onAdd}>
+            <Plus className="mr-1.5 size-4" />
+            添加按钮
+          </Button>
+          <Button
+            type="button"
+            size="sm"
+            onClick={onSave}
+            disabled={saving}
+          >
+            保存按钮配置
+          </Button>
+        </div>
+      </div>
+
+      {buttons.length === 0 ? (
+        <div className="text-muted-foreground rounded-lg border border-dashed p-6 text-center text-sm">
+          暂无按钮，点击“添加按钮”创建一个。
+        </div>
+      ) : (
+        <div className="space-y-3">
+          {buttons.map((button, index) => (
+            <div key={button.id} className="space-y-4 rounded-lg border p-4">
+              <div className="flex flex-col gap-3 xl:flex-row xl:items-start">
+                <div className="flex items-center gap-2 pt-6">
+                  <Switch
+                    checked={button.enabled}
+                    onCheckedChange={(checked) =>
+                      onPatch(button.id, { enabled: checked })
+                    }
+                    aria-label="启用快捷按钮"
+                  />
+                  <span className="text-muted-foreground text-xs">
+                    {button.enabled ? "启用" : "停用"}
+                  </span>
+                </div>
+                <div className="grid min-w-0 flex-1 gap-3 md:grid-cols-[220px_minmax(0,1fr)]">
+                  <div className="space-y-1.5">
+                    <div className="text-xs font-medium">按钮名称</div>
+                    <Input
+                      value={button.label}
+                      onChange={(event) =>
+                        onPatch(button.id, { label: event.target.value })
+                      }
+                      placeholder="如：业务系统"
+                    />
+                  </div>
+                  <div className="space-y-1.5">
+                    <div className="text-xs font-medium">跳转链接</div>
+                    <Input
+                      value={button.url}
+                      onChange={(event) =>
+                        onPatch(button.id, { url: event.target.value })
+                      }
+                      placeholder="https://example.com/page"
+                      className="font-mono"
+                    />
+                  </div>
+                </div>
+                <div className="flex shrink-0 items-center gap-1 pt-6">
+                  <Button
+                    type="button"
+                    variant="ghost"
+                    size="icon-sm"
+                    onClick={() => onMove(button.id, -1)}
+                    disabled={index === 0}
+                    title="上移"
+                  >
+                    <ArrowUp className="size-4" />
+                  </Button>
+                  <Button
+                    type="button"
+                    variant="ghost"
+                    size="icon-sm"
+                    onClick={() => onMove(button.id, 1)}
+                    disabled={index === buttons.length - 1}
+                    title="下移"
+                  >
+                    <ArrowDown className="size-4" />
+                  </Button>
+                  <Button
+                    type="button"
+                    variant="ghost"
+                    size="icon-sm"
+                    className="text-destructive hover:text-destructive"
+                    onClick={() => onRemove(button.id)}
+                    title="删除"
+                  >
+                    <Trash2 className="size-4" />
+                  </Button>
+                </div>
+              </div>
+
+              <div className="rounded-lg border bg-muted/20 p-3">
+                <div className="mb-2 flex items-center justify-between gap-2">
+                  <div className="flex items-center gap-1.5 text-sm font-medium">
+                    <ExternalLink className="size-4" />
+                    路由参数
+                  </div>
+                  <Button
+                    type="button"
+                    variant="outline"
+                    size="sm"
+                    onClick={() => onAddParam(button.id)}
+                  >
+                    <Plus className="mr-1.5 size-4" />
+                    添加参数
+                  </Button>
+                </div>
+
+                {button.route_params.length === 0 ? (
+                  <div className="text-muted-foreground rounded-md border border-dashed bg-background/70 p-4 text-center text-xs">
+                    不追加额外参数。
+                  </div>
+                ) : (
+                  <div className="space-y-2">
+                    {button.route_params.map((param, paramIndex) => {
+                      const themeMap =
+                        param.paramType === "theme"
+                          ? parseThemeMap(param.themeValue)
+                          : {};
+                      return (
+                        <div
+                          key={`${button.id}-${paramIndex}`}
+                          className="space-y-2 rounded-md border bg-background p-2"
+                        >
+                          <div className="grid gap-2 md:grid-cols-[minmax(120px,1fr)_130px_minmax(180px,1.4fr)_32px]">
+                            <Input
+                              value={param.key}
+                              onChange={(event) =>
+                                onPatchParam(button.id, paramIndex, {
+                                  key: event.target.value,
+                                })
+                              }
+                              placeholder="参数名 key"
+                              className="font-mono text-xs"
+                            />
+                            <Select
+                              value={param.paramType}
+                              onValueChange={(value) =>
+                                onPatchParam(button.id, paramIndex, {
+                                  paramType: value as "login" | "theme",
+                                  source:
+                                    value === "login"
+                                      ? param.source || "access_token"
+                                      : undefined,
+                                })
+                              }
+                            >
+                              <SelectTrigger>
+                                <SelectValue />
+                              </SelectTrigger>
+                              <SelectContent>
+                                <SelectItem value="login">登录参数</SelectItem>
+                                <SelectItem value="theme">主题参数</SelectItem>
+                              </SelectContent>
+                            </Select>
+                            {param.paramType === "login" ? (
+                              <div className="flex min-w-0 gap-2">
+                                <Select
+                                  value={param.source || "access_token"}
+                                  onValueChange={(value) =>
+                                    onPatchParam(button.id, paramIndex, {
+                                      source: value,
+                                    })
+                                  }
+                                >
+                                  <SelectTrigger className="min-w-0 flex-1">
+                                    <SelectValue />
+                                  </SelectTrigger>
+                                  <SelectContent>
+                                    {LOGIN_SOURCE_OPTIONS.map((option) => (
+                                      <SelectItem
+                                        key={option.value}
+                                        value={option.value}
+                                      >
+                                        {option.label}
+                                      </SelectItem>
+                                    ))}
+                                  </SelectContent>
+                                </Select>
+                                {param.source === "other" && (
+                                  <Input
+                                    value={param.customValue ?? ""}
+                                    onChange={(event) =>
+                                      onPatchParam(button.id, paramIndex, {
+                                        customValue: event.target.value,
+                                      })
+                                    }
+                                    placeholder="自定义值"
+                                    className="w-32 text-xs"
+                                  />
+                                )}
+                              </div>
+                            ) : (
+                              <div className="text-muted-foreground flex items-center text-xs">
+                                按当前主题取值
+                              </div>
+                            )}
+                            <Button
+                              type="button"
+                              variant="ghost"
+                              size="icon-sm"
+                              className="text-destructive hover:text-destructive"
+                              onClick={() =>
+                                onRemoveParam(button.id, paramIndex)
+                              }
+                              title="删除参数"
+                            >
+                              <Trash2 className="size-4" />
+                            </Button>
+                          </div>
+
+                          {param.paramType === "theme" && (
+                            <div className="grid gap-2 rounded-md bg-muted/40 p-2 md:grid-cols-3">
+                              {APP_THEME_COLORS.map((color) => (
+                                <label
+                                  key={color.key}
+                                  className="flex min-w-0 items-center gap-2"
+                                >
+                                  <span
+                                    className="size-2.5 shrink-0 rounded-full"
+                                    style={{ backgroundColor: color.dot }}
+                                  />
+                                  <span className="text-muted-foreground shrink-0 text-xs">
+                                    {color.label}
+                                  </span>
+                                  <Input
+                                    value={themeMap[color.key] ?? color.key}
+                                    onChange={(event) =>
+                                      onPatchParam(button.id, paramIndex, {
+                                        themeValue: stringifyThemeMap({
+                                          ...themeMap,
+                                          [color.key]: event.target.value,
+                                        }),
+                                      })
+                                    }
+                                    placeholder={color.key}
+                                    className="h-8 min-w-0 font-mono text-xs"
+                                  />
+                                </label>
+                              ))}
+                            </div>
+                          )}
+                        </div>
+                      );
+                    })}
+                  </div>
+                )}
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
 function ThemePreviewCard({
   icon: Icon,
   label,

frontend-web/src/components/workspace/skill-display-sources.tsx

@@ -1,4 +1,4 @@
-import { ExternalLinkIcon } from "lucide-react";
+import { ExternalLinkIcon, FileTextIcon, LoaderCircle } from "lucide-react";
 
 import { Button } from "@/components/ui/button";
 import {
@@ -9,10 +9,12 @@ import {
   DialogTitle,
 } from "@/components/ui/dialog";
 import type { RuntimeDisplaySource } from "@/core/skill-display/runtime";
+import { apiFetch } from "@/core/api/fetch-client";
+import { getBackendBaseURL } from "@/core/config";
 import { useLocalSettings } from "@/core/settings";
 import { useCitationDisplaySettings } from "@/core/system-settings/hooks";
 import { cn } from "@/lib/utils";
-import { useState } from "react";
+import { useEffect, useState } from "react";
 
 export function SkillDisplaySources({
   highlightedReferenceId,
@@ -51,6 +53,9 @@ export function SourceCard({
   referenceTarget?: boolean;
 }) {
   const [open, setOpen] = useState(false);
+  const [context, setContext] = useState<WeKnoraSourceContext | null>(null);
+  const [contextLoading, setContextLoading] = useState(false);
+  const [contextError, setContextError] = useState<string | null>(null);
   const [settings] = useLocalSettings();
   const { data: citationDisplay } = useCitationDisplaySettings();
   const cleanupWords =
@@ -73,6 +78,44 @@ export function SourceCard({
   ].filter(Boolean);
   const isCitation = source.mode === "citation";
   const showReferenceNumber = isCitation;
+  const previewTarget = parseWeKnoraPreviewUrl(source.url);
+
+  useEffect(() => {
+    if (!open || !previewTarget) {
+      return;
+    }
+    let cancelled = false;
+    setContext(null);
+    setContextError(null);
+    setContextLoading(true);
+    const params = new URLSearchParams({
+      knowledge_base_id: previewTarget.knowledgeBaseId,
+      chunk_id: previewTarget.chunkId,
+    });
+    void apiFetch(`${getBackendBaseURL()}/api/weknora/source-context?${params}`)
+      .then(async (response) => {
+        const payload = (await response.json().catch(() => null)) as unknown;
+        if (!response.ok || !isWeKnoraSourceContextResponse(payload)) {
+          throw new Error(readPreviewError(payload, response.status));
+        }
+        if (!cancelled) {
+          setContext(payload.data);
+        }
+      })
+      .catch((error: unknown) => {
+        if (!cancelled) {
+          setContextError(error instanceof Error ? error.message : "无法加载原文上下文");
+        }
+      })
+      .finally(() => {
+        if (!cancelled) {
+          setContextLoading(false);
+        }
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, [open, previewTarget?.chunkId, previewTarget?.knowledgeBaseId]);
 
   return (
     <>
@@ -114,7 +157,14 @@ export function SourceCard({
             )}
           </div>
           {source.url && (
+            previewTarget ? (
+              <span className="text-primary bg-primary/10 mt-0.5 inline-flex shrink-0 items-center gap-1 rounded-md px-1.5 py-1 text-[11px] font-medium">
+                <FileTextIcon className="size-3.5" />
+                查看原文
+              </span>
+            ) : (
               <ExternalLinkIcon className="text-muted-foreground/60 group-hover:text-primary mt-1 size-3.5 shrink-0 transition-colors" />
+            )
           )}
         </div>
       </button>
@@ -141,7 +191,7 @@ export function SourceCard({
                   </DialogDescription>
                 )}
               </div>
-              {source.url && (
+              {source.url && !previewTarget && (
                 <Button size="icon-sm" variant="outline" asChild>
                   <a
                     href={source.url}
@@ -155,7 +205,13 @@ export function SourceCard({
               )}
             </div>
           </DialogHeader>
-          {paragraphs.length > 0 && (
+          {previewTarget ? (
+            <WeKnoraSourceContextPanel
+              context={context}
+              loading={contextLoading}
+              error={contextError}
+            />
+          ) : paragraphs.length > 0 ? (
             <div className="text-foreground max-h-[55vh] space-y-3 overflow-y-auto text-sm leading-relaxed">
               {paragraphs.map((paragraph, index) => (
                 <p key={index} className="whitespace-pre-wrap">
@@ -163,8 +219,8 @@ export function SourceCard({
                 </p>
               ))}
             </div>
-          )}
-          {source.url && (
+          ) : null}
+          {source.url && !previewTarget && (
             <div className="text-muted-foreground border-t pt-3 text-xs break-all">
               {source.url}
             </div>
@@ -175,6 +231,118 @@ export function SourceCard({
   );
 }
 
+type WeKnoraPreviewTarget = {
+  knowledgeBaseId: string;
+  chunkId: string;
+};
+
+type WeKnoraSourceContext = {
+  knowledge_base_name?: string;
+  document_title?: string;
+  document_file_name?: string;
+  focus_chunk_id: string;
+  chunks: Array<{
+    id: string;
+    chunk_index?: number;
+    content: string;
+    is_focus: boolean;
+  }>;
+};
+
+function parseWeKnoraPreviewUrl(url?: string): WeKnoraPreviewTarget | null {
+  if (!url?.startsWith("/weknora-source-preview?")) {
+    return null;
+  }
+  const queryIndex = url.indexOf("?");
+  const params = new URLSearchParams(url.slice(queryIndex + 1));
+  const knowledgeBaseId = params.get("knowledge_base_id")?.trim();
+  const chunkId = params.get("chunk_id")?.trim();
+  return knowledgeBaseId && chunkId ? { knowledgeBaseId, chunkId } : null;
+}
+
+function isWeKnoraSourceContextResponse(
+  value: unknown,
+): value is { success: true; data: WeKnoraSourceContext } {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+  const data = (value as { data?: unknown }).data;
+  return (
+    (value as { success?: unknown }).success === true &&
+    !!data &&
+    typeof data === "object" &&
+    Array.isArray((data as WeKnoraSourceContext).chunks)
+  );
+}
+
+function readPreviewError(payload: unknown, status: number): string {
+  if (payload && typeof payload === "object") {
+    const detail = (payload as { detail?: unknown }).detail;
+    if (typeof detail === "string" && detail) {
+      return detail;
+    }
+  }
+  return status === 404 ? "原文已不可用" : "无法加载原文上下文";
+}
+
+function WeKnoraSourceContextPanel({
+  context,
+  loading,
+  error,
+}: {
+  context: WeKnoraSourceContext | null;
+  loading: boolean;
+  error: string | null;
+}) {
+  if (loading) {
+    return (
+      <div className="text-muted-foreground flex min-h-36 items-center justify-center gap-2 text-sm">
+        <LoaderCircle className="size-4 animate-spin" />
+        正在加载原文上下文…
+      </div>
+    );
+  }
+  if (error) {
+    return (
+      <div className="border-destructive/30 bg-destructive/5 text-destructive rounded-lg border p-3 text-sm">
+        {error}
+      </div>
+    );
+  }
+  if (!context) {
+    return null;
+  }
+  return (
+    <div className="max-h-[55vh] space-y-3 overflow-y-auto pr-1">
+      <div className="bg-muted/60 text-muted-foreground rounded-lg px-3 py-2 text-xs">
+        <span>{context.knowledge_base_name || "WeKnora 知识库"}</span>
+        {context.document_title && <span> · {context.document_title}</span>}
+      </div>
+      {context.chunks.map((chunk) => (
+        <section
+          key={chunk.id}
+          className={cn(
+            "rounded-lg border p-3 text-sm leading-relaxed",
+            chunk.is_focus
+              ? "border-primary/50 bg-primary/5 shadow-sm"
+              : "bg-muted/20",
+          )}
+        >
+          <div className="text-muted-foreground mb-2 flex items-center gap-2 text-xs">
+            <span>分段 {typeof chunk.chunk_index === "number" ? chunk.chunk_index + 1 : "-"}</span>
+            {chunk.is_focus && (
+              <span className="bg-primary text-primary-foreground rounded px-1.5 py-0.5 font-medium">
+                检索命中
+              </span>
+            )}
+          </div>
+          <p className="whitespace-pre-wrap">{chunk.content}</p>
+        </section>
+      ))}
+    </div>
+  );
+}
+
 function cleanReferenceText(
   raw: string | undefined,
   cleanupWords: string[],

frontend-web/src/components/workspace/user-identity-badge.tsx

@@ -1,35 +1,28 @@
 "use client";
 
 import { User } from "lucide-react";
-import { useMemo } from "react";
 
-import { getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
 import { useMyPosition } from "@/core/positions";
 import { cn } from "@/lib/utils";
-import { readUserInfo } from "@/strategy-components/lib/light-app";
 
 /**
  * 名称 + 岗位 用户标识。全量模式由 strategy-components/Header.tsx 顶栏右侧展示；
  * 紧凑模式（不带全局顶栏）无处承载，故抽成共享组件，复用同一套数据来源
- * （`readUserInfo().userName` 优先、回退 auth 邮箱前缀；岗位取 `useMyPosition`），
+ * （实时 auth 展示名；岗位取 `useMyPosition`），
  * 供页面级顶栏（如 ChatPage）右侧复用，保证两套布局一致。
  *
  * 配色按当前内容区前景色（foreground / muted-foreground），适配聊天页浅底顶栏，
  * 而非 Header 的白字贴 banner 方案。
  */
 export function UserIdentityBadge({ className }: { className?: string }) {
-  const auth = getStoredAuth();
+  // userInfo belongs to external-app route parameters and can legitimately
+  // outlive a login switch. The visible account name must instead match the
+  // settings page's current auth identity.
+  const liveAccount = useLiveAccount();
   const { data: myPosition } = useMyPosition();
   const positionName = myPosition?.name?.trim() || "";
-
-  // 与 Header.tsx 一致：外部登录写入的真实用户名优先，缺省回退邮箱前缀。
-  const displayName = useMemo(() => {
-    const info = readUserInfo();
-    const name = typeof info.userName === "string" ? info.userName.trim() : "";
-    if (name) return name;
-    const email = auth?.email?.trim();
-    return email ? email.split("@")[0] : "用户";
-  }, [auth?.email]);
+  const displayName = liveAccount.displayName;
 
   return (
     <div

frontend-web/src/components/workspace/welcome.tsx

@@ -1,15 +1,13 @@
 "use client";
 
 import { useSearchParams } from "next/navigation";
-import { useEffect, useMemo } from "react";
+import { useMemo } from "react";
 
 import { useI18n } from "@/core/i18n/hooks";
 import { cn } from "@/lib/utils";
 
 import { AuroraText } from "../ui/aurora-text";
 
-let waved = false;
-
 export function Welcome({
   className,
   mode,
@@ -26,9 +24,6 @@ export function Welcome({
     }
     return ["var(--color-foreground)"];
   }, [isUltra]);
-  useEffect(() => {
-    waved = true;
-  }, []);
   return (
     <div
       className={cn(
@@ -38,12 +33,9 @@ export function Welcome({
     >
       <div className="text-[26px] font-medium tracking-tight text-foreground/85">
         {searchParams.get("mode") === "skill" ? (
-          `✨ ${t.welcome.createYourOwnSkill} ✨`
+          t.welcome.createYourOwnSkill
         ) : (
-          <div className="flex items-center gap-2.5">
-            <div className={cn("inline-block text-2xl", !waved ? "animate-wave" : "")}>
-              {isUltra ? "🚀" : "👋"}
-            </div>
+          <div className="flex items-center">
             <AuroraText colors={colors}>{t.welcome.greeting}</AuroraText>
           </div>
         )}

frontend-web/src/components/workspace/workspace-container.tsx

@@ -2,7 +2,7 @@
 
 import Link from "next/link";
 import { usePathname } from "next/navigation";
-import { useMemo } from "react";
+import { type ReactNode, useMemo } from "react";
 
 import {
   Breadcrumb,
@@ -33,8 +33,11 @@ export function WorkspaceContainer({
 export function WorkspaceHeader({
   className,
   children,
+  rightActions,
   ...props
-}: React.ComponentProps<"header">) {
+}: React.ComponentProps<"header"> & {
+  rightActions?: ReactNode;
+}) {
   const { t } = useI18n();
   const pathname = usePathname();
   const segments = useMemo(() => {
@@ -90,6 +93,9 @@ export function WorkspaceHeader({
           </BreadcrumbList>
         </Breadcrumb>
       </div>
+      {rightActions ? (
+        <div className="flex items-center gap-2 px-4">{rightActions}</div>
+      ) : null}
     </header>
   );
 }

frontend-web/src/components/workspace/workspace-nav-chat-list.tsx

@@ -36,8 +36,8 @@ const NEW_CHAT_CLASS =
 // 紧凑模式（CM 参考图）：白卡描边、居中、主色 + 图标
 const NEW_CHAT_COMPACT_CLASS =
   "h-9 justify-center gap-2 rounded-xl bg-card text-[13px] font-semibold text-foreground transition-colors " +
-  "border border-[color-mix(in_srgb,var(--primary)_18%,transparent)] " +
-  "hover:bg-[color-mix(in_srgb,var(--primary)_4%,transparent)] hover:text-[var(--primary)] hover:border-[color-mix(in_srgb,var(--primary)_32%,transparent)] " +
+  "border border-[rgb(var(--legacy-primary-rgb)/18%)] " +
+  "hover:bg-[rgb(var(--legacy-primary-rgb)/4%)] hover:text-[var(--primary)] hover:border-[rgb(var(--legacy-primary-rgb)/32%)] " +
   "data-[active=true]:bg-card data-[active=true]:text-[var(--primary)] data-[active=true]:shadow-none";
 
 export function WorkspaceNavChatList({

frontend-web/src/components/workspace/workspace-nav-menu.tsx

@@ -11,6 +11,7 @@ import {
   GaugeIcon,
   HistoryIcon,
   MessageCircleQuestionIcon,
+  PlugIcon,
   ScrollTextIcon,
   Settings2Icon,
   SettingsIcon,
@@ -218,6 +219,14 @@ export function WorkspaceNavMenu() {
                     <TagsIcon />
                     {t.adminTags.title}
                   </DropdownMenuItem>
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/workspace/admin/plugins")}
+                    >
+                      <PlugIcon />
+                      插件管理
+                    </DropdownMenuItem>
+                  )}
                   {isAdmin && (
                     <DropdownMenuItem
                       onClick={() => navigate("/page/workspace/admin/positions")}

frontend-web/src/core/admin/active-runs.ts

@@ -0,0 +1,159 @@
+import { apiFetch } from "@/core/api";
+import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
+
+/** One in-flight model run as seen by the admin concurrency monitor. */
+export interface ActiveRunItem {
+  run_id: string;
+  thread_id: string;
+  status: string;
+  created_at: string;
+  elapsed_seconds: number;
+  user_id: string;
+  user_name: string;
+  agent_id: string;
+  agent_name: string;
+  thread_title: string;
+  kind: string;
+  multitask_strategy: string;
+}
+
+export interface ActiveRunsResponse {
+  count: number;
+  server_time: string;
+  runs: ActiveRunItem[];
+}
+
+export interface ConcurrencyPoint {
+  bucket: string;
+  peak: number;
+  avg: number;
+  samples: number;
+}
+
+export interface ConcurrencySeriesResponse {
+  granularity: string;
+  since: string;
+  until: string;
+  enabled: boolean;
+  points: ConcurrencyPoint[];
+}
+
+export interface TokenSpeedPoint {
+  bucket: string;
+  avg_tokens_per_sec: number;
+  min_tokens_per_sec: number;
+  max_tokens_per_sec: number;
+  samples: number;
+}
+
+export interface TokenSpeedSeriesResponse {
+  granularity: string;
+  since: string;
+  until: string;
+  points: TokenSpeedPoint[];
+}
+
+export type Granularity = "minute" | "hour";
+
+const base = () => `${getBackendBaseURL()}/api/admin/active-runs`;
+
+async function parse<T>(res: Response, what: string): Promise<T> {
+  if (!res.ok) {
+    const err = (await res.json().catch(() => ({}))) as { detail?: string };
+    throw new Error(err.detail ?? `${what} (HTTP ${res.status})`);
+  }
+  return res.json() as Promise<T>;
+}
+
+/** Live snapshot of all in-flight runs. Polled — intentionally NOT y-logged. */
+export async function loadActiveRuns(): Promise<ActiveRunsResponse> {
+  return parse<ActiveRunsResponse>(await apiFetch(base()), "Failed to load active runs");
+}
+
+/** Concurrency time-series (peak/avg per minute|hour). Polled — not y-logged. */
+export async function loadConcurrencySeries(
+  granularity: Granularity,
+  hours?: number,
+): Promise<ConcurrencySeriesResponse> {
+  const params = new URLSearchParams({ granularity });
+  if (hours) params.set("hours", String(hours));
+  return parse<ConcurrencySeriesResponse>(
+    await apiFetch(`${base()}/concurrency?${params}`),
+    "Failed to load concurrency series",
+  );
+}
+
+/** Token-speed time-series (tokens/sec per minute|hour). Polled — not y-logged. */
+export async function loadTokenSpeedSeries(
+  granularity: Granularity,
+  hours?: number,
+): Promise<TokenSpeedSeriesResponse> {
+  const params = new URLSearchParams({ granularity });
+  if (hours) params.set("hours", String(hours));
+  return parse<TokenSpeedSeriesResponse>(
+    await apiFetch(`${base()}/token-speed?${params}`),
+    "Failed to load token speed series",
+  );
+}
+
+/** Truly stop one in-flight run (cancels the live model stream). */
+export async function cancelActiveRun(runId: string): Promise<{ run_id: string; cancelled: boolean }> {
+  const url = `${base()}/${encodeURIComponent(runId)}/cancel`;
+  const result = await parse<{ run_id: string; cancelled: boolean }>(
+    await apiFetch(url, { method: "POST" }),
+    "Failed to cancel run",
+  );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-并发监控-停止对话调用",
+    url,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
+}
+
+/** Stop every in-flight run at once. */
+export async function cancelAllActiveRuns(): Promise<{ cancelled_count: number }> {
+  const url = `${base()}/cancel-all`;
+  const result = await parse<{ cancelled_count: number }>(
+    await apiFetch(url, { method: "POST" }),
+    "Failed to cancel all runs",
+  );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-并发监控-全部停止",
+    url,
+    returnParam: result,
+  });
+  return result;
+}
+
+/** Read the background-sampler on/off switch. */
+export async function getMonitorSettings(): Promise<{ enabled: boolean }> {
+  return parse<{ enabled: boolean }>(
+    await apiFetch(`${base()}/settings`),
+    "Failed to load monitor settings",
+  );
+}
+
+/** Toggle the background concurrency sampler (admin only, no restart). */
+export async function updateMonitorSettings(enabled: boolean): Promise<{ enabled: boolean }> {
+  const url = `${base()}/settings`;
+  const result = await parse<{ enabled: boolean }>(
+    await apiFetch(url, {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ enabled }),
+    }),
+    "Failed to update monitor settings",
+  );
+  writeYLog({
+    optType: enabled ? OptType.enabled : OptType.disabled,
+    optDetail: `CM助手-全量-并发监控-${enabled ? "开启" : "关闭"}采样`,
+    url,
+    reqParam: { enabled },
+  });
+  return result;
+}

frontend-web/src/core/admin/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** A conversation thread owned by some user (admin view). */
 export interface AdminThread {
@@ -172,22 +173,32 @@ async function parse<T>(res: Response, what: string): Promise<T> {
 }
 
 export async function listUserThreads(userId: string): Promise<AdminThread[]> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/threads?limit=200`),
-    "Failed to load threads",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/threads?limit=200`;
+  const result = await parse<AdminThread[]>(await apiFetch(url), "Failed to load threads");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户会话列表",
+    url,
+    reqParam: { userId },
+    returnParam: { count: result.length },
+  });
+  return result;
 }
 
 export async function listUserThreadMessages(
   userId: string,
   threadId: string,
 ): Promise<AdminMessage[]> {
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/threads/${encodeURIComponent(threadId)}/messages`,
-    ),
-    "Failed to load messages",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/threads/${encodeURIComponent(threadId)}/messages`;
+  const result = await parse<AdminMessage[]>(await apiFetch(url), "Failed to load messages");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看会话消息",
+    url,
+    reqParam: { userId, threadId },
+    returnParam: { count: result.length },
+  });
+  return result;
 }
 
 export async function listUserQa(
@@ -200,19 +211,30 @@ export async function listUserQa(
   });
   const query = (params.q ?? "").trim();
   if (query) search.set("q", query);
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/qa?${search}`),
-    "Failed to load user Q&A",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/qa?${search}`;
+  const result = await parse<AdminUserQaPageResponse>(await apiFetch(url), "Failed to load user Q&A");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户问答",
+    url,
+    reqParam: { userId, ...params },
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }
 
 export async function getUserMemory(
   userId: string,
 ): Promise<AdminMemoryResponse> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory`),
-    "Failed to load memory",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/memory`;
+  const result = await parse<AdminMemoryResponse>(await apiFetch(url), "Failed to load memory");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看用户记忆",
+    url,
+    reqParam: { userId },
+  });
+  return result;
 }
 
 export async function getUserLeaderboard(
@@ -229,10 +251,15 @@ export async function getUserLeaderboard(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/leaderboard?${params}`),
-    "Failed to load leaderboard",
-  );
+  const url = `${base()}/leaderboard?${params}`;
+  const result = await parse<AdminLeaderboardResponse>(await apiFetch(url), "Failed to load leaderboard");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户排行榜",
+    url,
+    reqParam: { ...range, limit },
+  });
+  return result;
 }
 
 /**
@@ -253,12 +280,18 @@ export async function refreshTodayLeaderboard(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/leaderboard/refresh-today?${params}`, {
-      method: "POST",
-    }),
+  const url = `${base()}/leaderboard/refresh-today?${params}`;
+  const result = await parse<AdminLeaderboardResponse>(
+    await apiFetch(url, { method: "POST" }),
     "Failed to refresh today's leaderboard",
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-刷新今日排行榜",
+    url,
+    reqParam: { ...range, limit },
+  });
+  return result;
 }
 
 export async function getUserAnalytics(
@@ -272,10 +305,15 @@ export async function getUserAnalytics(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/analytics?${params}`),
-    "Failed to load user analytics",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/analytics?${params}`;
+  const result = await parse<AdminUserAnalyticsResponse>(await apiFetch(url), "Failed to load user analytics");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看用户分析",
+    url,
+    reqParam: { userId, ...range, limit },
+  });
+  return result;
 }
 
 export async function generateUserLeaderboardReport(
@@ -290,12 +328,19 @@ export async function generateUserLeaderboardReport(
     limit: String(limit),
   });
   if (modelName) params.set("model_name", modelName);
-  return parse(
-    await apiFetch(`${base()}/leaderboard/report?${params}`, {
-      method: "POST",
-    }),
+  const url = `${base()}/leaderboard/report?${params}`;
+  const result = await parse<AdminLeaderboardReportResponse>(
+    await apiFetch(url, { method: "POST" }),
     "Failed to generate leaderboard report",
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-生成排行榜报告",
+    url,
+    reqParam: { ...range, limit, modelName },
+    returnParam: { generated_at: result.generated_at, model_name: result.model_name },
+  });
+  return result;
 }
 
 function parseSseFrame(frame: string): AdminLeaderboardReportStreamEvent | null {
@@ -335,7 +380,8 @@ export async function streamUserLeaderboardReport({
     limit: String(limit),
   });
   if (modelName) params.set("model_name", modelName);
-  const response = await apiFetch(`${base()}/leaderboard/report/stream?${params}`, {
+  const url = `${base()}/leaderboard/report/stream?${params}`;
+  const response = await apiFetch(url, {
     method: "POST",
     signal,
   });
@@ -366,6 +412,12 @@ export async function streamUserLeaderboardReport({
     const parsed = parseSseFrame(tail);
     if (parsed) onEvent(parsed);
   }
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-流式生成排行榜报告",
+    url,
+    reqParam: { ...range, limit, modelName },
+  });
 }
 
 export async function addAdminMemoryEntry(
@@ -373,14 +425,22 @@ export async function addAdminMemoryEntry(
   content: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/entries`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ content, agent }),
     }),
     "Failed to add memory entry",
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-管理后台-新增记忆条目",
+    url,
+    reqParam: { userId, content, agent },
+  });
+  return result;
 }
 
 export async function replaceAdminMemoryEntry(
@@ -389,14 +449,22 @@ export async function replaceAdminMemoryEntry(
   content: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/entries`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ old_text: oldText, content, agent }),
     }),
     "Failed to replace memory entry",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆条目",
+    url,
+    reqParam: { userId, old_text: oldText, content, agent },
+  });
+  return result;
 }
 
 export async function deleteAdminMemoryEntry(
@@ -406,13 +474,18 @@ export async function deleteAdminMemoryEntry(
 ): Promise<AdminMemoryBucket> {
   const params = new URLSearchParams({ old_text: oldText });
   if (agent) params.set("agent", agent);
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/memory/entries?${params}`,
-      { method: "DELETE" },
-    ),
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries?${params}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, { method: "DELETE" }),
     "Failed to delete memory entry",
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-管理后台-删除记忆条目",
+    url,
+    reqParam: { userId, old_text: oldText, agent },
+  });
+  return result;
 }
 
 // ── V1 Memory CRUD ──────────────────────────────────────────────────────────
@@ -424,14 +497,22 @@ export async function updateAdminV1Section(
   summary: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/sections`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/sections`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ section_type: sectionType, field, summary, agent }),
     }),
     "Failed to update V1 section",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆段落",
+    url,
+    reqParam: { userId, section_type: sectionType, field, summary, agent },
+  });
+  return result;
 }
 
 export async function addAdminV1Fact(
@@ -441,14 +522,22 @@ export async function addAdminV1Fact(
   confidence: number,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/facts`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ content, category, confidence, agent }),
     }),
     "Failed to add V1 fact",
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-管理后台-新增记忆事实",
+    url,
+    reqParam: { userId, content, category, confidence, agent },
+  });
+  return result;
 }
 
 export async function updateAdminV1Fact(
@@ -457,14 +546,22 @@ export async function updateAdminV1Fact(
   updates: { content?: string; category?: string; confidence?: number },
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ ...updates, agent }),
     }),
     "Failed to update V1 fact",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆事实",
+    url,
+    reqParam: { userId, factId, ...updates, agent },
+  });
+  return result;
 }
 
 export async function deleteAdminV1Fact(
@@ -475,11 +572,16 @@ export async function deleteAdminV1Fact(
   const params = new URLSearchParams();
   if (agent) params.set("agent", agent);
   const qs = params.toString() ? `?${params}` : "";
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}${qs}`,
-      { method: "DELETE" },
-    ),
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}${qs}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, { method: "DELETE" }),
     "Failed to delete V1 fact",
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-管理后台-删除记忆事实",
+    url,
+    reqParam: { userId, factId, agent },
+  });
+  return result;
 }

frontend-web/src/core/admin/hooks.ts

@@ -17,6 +17,96 @@ import {
   updateAdminV1Fact,
   updateAdminV1Section,
 } from "./api";
+import {
+  cancelActiveRun,
+  cancelAllActiveRuns,
+  getMonitorSettings,
+  loadActiveRuns,
+  loadConcurrencySeries,
+  loadTokenSpeedSeries,
+  updateMonitorSettings,
+  type Granularity,
+} from "./active-runs";
+
+// ── 实时并发监控 (admin) ─────────────────────────────────────────────────────
+
+/** Live snapshot of in-flight runs. Polls every `intervalMs` while `enabled`. */
+export function useActiveRuns(enabled = true, intervalMs = 4000) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "live"],
+    queryFn: loadActiveRuns,
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+/** 并发量时序 (peak/avg per minute|hour). */
+export function useConcurrencySeries(
+  granularity: Granularity,
+  hours: number | undefined,
+  enabled = true,
+  intervalMs = 15000,
+) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "concurrency", granularity, hours ?? null],
+    queryFn: () => loadConcurrencySeries(granularity, hours),
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+/** 大模型 token 出字速度时序 (tokens/sec per minute|hour). */
+export function useTokenSpeedSeries(
+  granularity: Granularity,
+  hours: number | undefined,
+  enabled = true,
+  intervalMs = 15000,
+) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "token-speed", granularity, hours ?? null],
+    queryFn: () => loadTokenSpeedSeries(granularity, hours),
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+export function useCancelActiveRun() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: (runId: string) => cancelActiveRun(runId),
+    onSuccess: () => qc.invalidateQueries({ queryKey: ["admin-active-runs", "live"] }),
+  });
+}
+
+export function useCancelAllActiveRuns() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: () => cancelAllActiveRuns(),
+    onSuccess: () => qc.invalidateQueries({ queryKey: ["admin-active-runs", "live"] }),
+  });
+}
+
+export function useMonitorSettings(enabled = true) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "settings"],
+    queryFn: getMonitorSettings,
+    enabled,
+    refetchOnWindowFocus: false,
+  });
+}
+
+export function useUpdateMonitorSettings() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: (nextEnabled: boolean) => updateMonitorSettings(nextEnabled),
+    onSuccess: (data) => {
+      qc.setQueryData(["admin-active-runs", "settings"], data);
+    },
+  });
+}
 
 export function useUserLeaderboard(
   range: {

frontend-web/src/core/agents/api.ts

@@ -1,5 +1,6 @@
 import { getBackendBaseURL } from "@/core/config";
 import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   Agent,
@@ -58,6 +59,13 @@ export async function listAgents(params: ListAgentsParams = {}): Promise<Agent[]
   );
   if (!res.ok) throw new Error(`Failed to load agents: ${res.statusText}`);
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents${query ? `?${query}` : ""}`,
+    reqParam: params,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
@@ -76,12 +84,20 @@ export async function listAgentsPaginated(
     page?: number;
     page_size?: number;
   };
-  return {
+  const result: PaginatedAgents = {
     agents: data.agents,
     total: data.total ?? data.agents.length,
     page: data.page ?? params.page ?? 1,
     pageSize: data.page_size ?? params.pageSize ?? data.agents.length,
   };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents${query ? `?${query}` : ""}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function listAllAgentsAdmin(): Promise<Agent[]> {
@@ -91,13 +107,27 @@ export async function listAllAgentsAdmin(): Promise<Agent[]> {
     throw new Error(err.detail ?? `Failed to load agents: ${res.statusText}`);
   }
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents?admin=true`,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
 export async function getAgent(id: string): Promise<Agent> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/agents/${id}`);
   if (!res.ok) throw new Error(`Agent '${id}' not found`);
-  return res.json() as Promise<Agent>;
+  const agent = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-智能体-查看",
+    url: `/api/agents/${id}`,
+    reqParam: { id },
+    returnParam: agent,
+  });
+  return agent;
 }
 
 export async function createAgent(request: CreateAgentRequest): Promise<Agent> {
@@ -110,7 +140,15 @@ export async function createAgent(request: CreateAgentRequest): Promise<Agent> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create agent: ${res.statusText}`);
   }
-  return res.json() as Promise<Agent>;
+  const created = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-智能体-新建",
+    url: `/api/agents`,
+    reqParam: request,
+    returnParam: created,
+  });
+  return created;
 }
 
 export async function updateAgent(
@@ -126,7 +164,15 @@ export async function updateAgent(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update agent: ${res.statusText}`);
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-修改",
+    url: `/api/agents/${id}`,
+    reqParam: { id, ...request },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function deleteAgent(id: string): Promise<void> {
@@ -134,12 +180,25 @@ export async function deleteAgent(id: string): Promise<void> {
     method: "DELETE",
   });
   if (!res.ok) throw new Error(`Failed to delete agent: ${res.statusText}`);
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-智能体-删除",
+    url: `/api/agents/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function getAgentSelector(): Promise<AgentSelectorResponse> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/agents/selector`);
   if (!res.ok) throw new Error(`Failed to load agent selector: ${res.statusText}`);
-  return res.json() as Promise<AgentSelectorResponse>;
+  const selector = (await res.json()) as AgentSelectorResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体-选择器",
+    url: `/api/agents/selector`,
+    returnParam: selector,
+  });
+  return selector;
 }
 
 export async function favoriteAgent(id: string): Promise<void> {
@@ -150,6 +209,12 @@ export async function favoriteAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to favorite agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-收藏",
+    url: `/api/agents/${id}/favorite`,
+    reqParam: { id },
+  });
 }
 
 export async function unfavoriteAgent(id: string): Promise<void> {
@@ -160,6 +225,12 @@ export async function unfavoriteAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to unfavorite agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-取消收藏",
+    url: `/api/agents/${id}/favorite`,
+    reqParam: { id },
+  });
 }
 
 export async function pinAgent(id: string): Promise<void> {
@@ -170,6 +241,12 @@ export async function pinAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to pin agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-置顶",
+    url: `/api/agents/${id}/pin`,
+    reqParam: { id },
+  });
 }
 
 export async function unpinAgent(id: string): Promise<void> {
@@ -180,6 +257,12 @@ export async function unpinAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to unpin agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-取消置顶",
+    url: `/api/agents/${id}/pin`,
+    reqParam: { id },
+  });
 }
 
 export async function reorderFeaturedAgents(agentIds: string[]): Promise<void> {
@@ -197,6 +280,12 @@ export async function reorderFeaturedAgents(agentIds: string[]): Promise<void> {
       err.detail ?? `Failed to reorder featured agents: ${res.statusText}`,
     );
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-精选排序",
+    url: `/api/agents/featured/order`,
+    reqParam: { agent_ids: agentIds },
+  });
 }
 
 export async function listPrivateAgents(password: string): Promise<Agent[]> {
@@ -215,6 +304,12 @@ export async function listPrivateAgents(password: string): Promise<Agent[]> {
     );
   }
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-私有广场智能体列表",
+    url: `/api/agents/private-square/list`,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
@@ -261,12 +356,20 @@ export async function listPrivateAgentsPaginated(
     page?: number;
     page_size?: number;
   };
-  return {
+  const result: PaginatedAgents = {
     agents: data.agents,
     total: data.total ?? data.agents.length,
     page: data.page ?? params.page ?? 1,
     pageSize: data.page_size ?? params.pageSize ?? data.agents.length,
   };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-私有广场智能体列表",
+    url: `/api/agents/private-square/list`,
+    reqParam: { ...params, password: undefined },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function setAgentPrivate(
@@ -287,7 +390,15 @@ export async function setAgentPrivate(
       err.detail ?? `Failed to update agent privacy: ${res.statusText}`,
     );
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-设置私有",
+    url: `/api/agents/${id}/private`,
+    reqParam: { id, is_private: isPrivate },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function setAgentFeatured(
@@ -308,7 +419,15 @@ export async function setAgentFeatured(
       err.detail ?? `Failed to set featured: ${res.statusText}`,
     );
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-设置精选",
+    url: `/api/agents/${id}/featured`,
+    reqParam: { id, order },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export interface AgentSkillsSyncRemoval {
@@ -333,7 +452,14 @@ export async function adminSyncAgentSkills(): Promise<AgentSkillsSyncResult> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to sync agent skills: ${res.statusText}`);
   }
-  return res.json() as Promise<AgentSkillsSyncResult>;
+  const result = (await res.json()) as AgentSkillsSyncResult;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-同步技能",
+    url: `/api/agents/admin/sync-skills`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface KnowledgeIngestAttempt {
@@ -371,7 +497,15 @@ export async function publishArtifactToKnowledge(request: {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `发布入库失败: ${res.statusText}`);
   }
-  return res.json() as Promise<KnowledgeIngestPublishResult>;
+  const result = (await res.json()) as KnowledgeIngestPublishResult;
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-智能体-产物发布入库",
+    url: `/api/knowledge-ingest/publish`,
+    reqParam: request,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function checkAgentName(

frontend-web/src/core/api/markdown-docx-export.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api/fetch-client";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 import { downloadMarkdownAsDocx } from "@/core/scheduled-tasks/markdown-docx";
 
 function filenameFromContentDisposition(header: string | null): string | null {
@@ -79,13 +80,31 @@ export async function downloadMarkdownDocxFromBackend(options: {
 
     if (response.status === 404) {
       await downloadMarkdownAsDocx(markdown, options.title?.trim() || "document", options.title);
+      writeYLog({
+        optType: OptType.export,
+        optDetail: "CM助手-全量-导出-Word",
+        url: `${getBackendBaseURL()}/api/writing/export/docx`,
+        reqParam: { title: options.title?.trim() || undefined },
+      });
       return;
     }
 
     await downloadBlobResponse(response, fallbackFilename);
+    writeYLog({
+      optType: OptType.export,
+      optDetail: "CM助手-全量-导出-Word",
+      url: `${getBackendBaseURL()}/api/writing/export/docx`,
+      reqParam: { title: options.title?.trim() || undefined },
+    });
   } catch (err) {
     if (err instanceof TypeError) {
       await downloadMarkdownAsDocx(markdown, options.title?.trim() || "document", options.title);
+      writeYLog({
+        optType: OptType.export,
+        optDetail: "CM助手-全量-导出-Word",
+        url: `${getBackendBaseURL()}/api/writing/export/docx`,
+        reqParam: { title: options.title?.trim() || undefined },
+      });
       return;
     }
     throw err;

frontend-web/src/core/artifacts/api.ts

@@ -1,4 +1,5 @@
 import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import { urlOfArtifact } from "./utils";
 
@@ -26,7 +27,8 @@ export async function updateArtifactContent({
   content: string;
   isMock?: boolean;
 }) {
-  const res = await apiFetch(urlOfArtifact({ filepath, threadId, isMock }), {
+  const url = urlOfArtifact({ filepath, threadId, isMock });
+  const res = await apiFetch(url, {
     method: "PATCH",
     headers: {
       "Content-Type": "application/json",
@@ -36,5 +38,11 @@ export async function updateArtifactContent({
   if (!res.ok) {
     throw new Error(await errorMessageFromResponse(res));
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-产物-编辑产物内容",
+    url,
+    reqParam: { filepath, threadId },
+  });
   return res.text();
 }

frontend-web/src/core/auth/api.ts

@@ -11,6 +11,14 @@ export interface UserListItem {
   agent_count: number;
   /** 问答次数：用户提问的次数（一次提问算一次）。 */
   qa_count: number;
+  /** 登录白名单放行标记：开关开启后仅 approved 用户（或 admin）可登录。 */
+  approved: boolean;
+  /**
+   * 账号级「登录口令」（明文，仅管理员可见）。非空 → 该账号用户名直登必须带匹配的
+   * `?password=`；为空/null → 走原有共享口令门/免口令逻辑。管理员据此拼出登录链接
+   * `…/login/<用户名>?password=xxxx` 发给用户。
+   */
+  login_password: string | null;
 }
 
 export async function listAllUsers(): Promise<UserListItem[]> {
@@ -19,6 +27,39 @@ export async function listAllUsers(): Promise<UserListItem[]> {
   return res.json() as Promise<UserListItem[]>;
 }
 
+/** 放行 / 取消放行某个注册用户（登录白名单）。Admin only。 */
+export async function setUserApproval(userId: string, approved: boolean): Promise<UserListItem> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/v1/auth/users/${encodeURIComponent(userId)}/approval`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ approved }),
+  });
+  if (!res.ok) {
+    const data = await res.json().catch(() => null);
+    throw new Error(extractErrorMessage(data, "保存失败"));
+  }
+  return res.json() as Promise<UserListItem>;
+}
+
+/**
+ * 设置 / 清除某个账号的「登录口令」（明文）。Admin only。
+ *
+ * 传非空字符串 → 设置；传 `null` 或空字符串 → 清除。设置后该账号用户名直登需带匹配的
+ * `?password=`。返回更新后的用户项（含明文 `login_password`）。
+ */
+export async function setUserLoginPassword(userId: string, password: string | null): Promise<UserListItem> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/v1/auth/users/${encodeURIComponent(userId)}/login-password`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ password }),
+  });
+  if (!res.ok) {
+    const data = await res.json().catch(() => null);
+    throw new Error(extractErrorMessage(data, "保存失败"));
+  }
+  return res.json() as Promise<UserListItem>;
+}
+
 // Normalize a FastAPI error body into a human-readable string. `detail` may be
 // a plain string, an object like AuthErrorResponse ({ code, message }), or an
 // array of validation errors — anything but a string would otherwise render as

frontend-web/src/core/auth/dashboard-input.ts

@@ -1,99 +1,19 @@
 /**
- * 大屏绘制智能体「独立页面」的**输入 JSON** 适配 seam。
+ * 大屏绘制智能体的任务输入适配层。
  *
- * 设计意图：深链 `?taskId=` 模式下，后端提供「研判情报报告」接口
- *   GET `{VITE_AIPI_CONSUMER_URL}/cop/selectSqReport?taskId=`
- * 返回该任务的多类情报内容；本页把它**提取成干净的结构化 JSON** 交给智能体分析
- * → 产出 report-json → 绘制大屏（react / html）。
- *
- * 接口返回结构：`{ state, msg, data: [{ id, taskId, ..., contentJson, categoryType }] }`，
- * 其中 `contentJson` 是**被转义的 JSON 字符串**，`categoryType` 形如「敌情关键事件 JSON」。
- * 本模块 `extractSqReport` 把每条的 `contentJson` 反序列化、按 `categoryType` 归类，
- * 拼成 `{ taskId, categories: { 敌情关键事件: [...], 决心建议: {...}, ... } }` 喂给智能体。
- *
- * ⚠️ 真实接口现在还**请求不到**：通过 `VITE_MOCK_SQ_REPORT=true`（见 `utils/request.ts`）
- * 走后端给的样例假数据（`sq-report-mock.json`），机制与 cop-task-detail 假数据一致。
- * 联调通过后把该 env 置 false 即走真实接口；接口/数据若有变只需改 `extractSqReport`。
+ * 报告详情由 Gateway 的 `/api/task-reports/by-task/{taskId}` 提供，返回格式
+ * 与原 `selectSqReport` 一致：`{state, msg, data}`。每条 `contentJson` 是
+ * JSON 字符串，本模块将其按 `categoryType` 解析为智能体和大屏页面可直接使用的
+ * 结构化输入。
  */
 
-import { requestCrudService } from "@/service/request-axios-service";
-import { readCopTaskDetail } from "@/core/auth/task-deeplink";
+import { getTaskReport } from "@/strategy-components/api/task-reports";
+import { readRuntimeFlag } from "@/env";
+import { SQ_REPORT_MOCK_RESPONSE } from "@/strategy-components/components/task-components/sq-report-mock-data";
 
-/** 本页输入 JSON 暂存的 sessionStorage key（拉取一次后复用，避免重复请求）。 */
+/** 保留给既有调用方的 sessionStorage key；报告本身不再使用 mock 缓存。 */
 export const DASHBOARD_INPUT_STORAGE_KEY = "dashboard.inputJson";
 
-/**
- * 🧪 演示用模拟业务 JSON —— JSON 接口未就绪、也没有登录任务详情时的兜底输入。
- * 让大屏页可立即跑通：智能体分析这份数据 → report-json → 渲染大屏。
- * ⚠️ 接口就绪后删除本常量及其兜底引用。
- */
-export const DEMO_DASHBOARD_INPUT = {
-  taskId: "DEMO-涉台舆情",
-  taskName: "2026 第一季度涉台舆情态势研判",
-  taskContent:
-    "汇总境内外多平台涉台舆情数据，研判热点叙事走势、关键行为体立场与传播渠道分布，识别风险并给出处置建议。",
-  overview:
-    "本季涉台舆情整体平稳但局部波动，'两岸交流''和平发展'类正向叙事占比上升，少数账号借军事议题制造紧张；境外智库与媒体联动放大特定框架。",
-  period: "2026-01-01 ~ 2026-03-31",
-  kpis: {
-    总信息量: 1284000,
-    日均增速: "12%",
-    正向占比: "58%",
-    负向占比: "19%",
-    识别风险点: 7,
-    覆盖平台: 12,
-  },
-  channels: [
-    { platform: "微博", share: 34 },
-    { platform: "境外社媒(X/FB)", share: 27 },
-    { platform: "短视频", share: 18 },
-    { platform: "新闻门户", share: 13 },
-    { platform: "论坛/贴吧", share: 8 },
-  ],
-  narratives: [
-    { theme: "两岸交流与融合发展", sentiment: "正向", volume: 42, trend: "up" },
-    { theme: "和平稳定·避战", sentiment: "正向", volume: 26, trend: "up" },
-    { theme: "军事演训与安全", sentiment: "中性偏负", volume: 21, trend: "flat" },
-    { theme: "外部势力介入", sentiment: "负向", volume: 11, trend: "down" },
-  ],
-  actors: [
-    { name: "主流官媒", stance: "正面引导", influence: 88, note: "议程设置与权威发布" },
-    { name: "岛内民间团体", stance: "中性多元", influence: 64, note: "交流合作类内容活跃" },
-    { name: "境外智库", stance: "负面框架", influence: 57, note: "联动媒体放大紧张叙事" },
-    { name: "自媒体大V", stance: "立场分化", influence: 49, note: "情绪化传播、易被借势" },
-  ],
-  risks: [
-    { label: "军事议题被恶意剪辑放大", level: "high" },
-    { label: "境外智库联动制造紧张框架", level: "high" },
-    { label: "个别大V情绪化带节奏", level: "mid" },
-    { label: "短视频谣言二次传播", level: "mid" },
-    { label: "节假日期间信息量骤增", level: "low" },
-  ],
-  timeline: [
-    { phase: "数据汇聚", desc: "12 平台多源采集与清洗去重" },
-    { phase: "叙事识别", desc: "聚类提炼核心叙事与情感倾向" },
-    { phase: "行为体画像", desc: "关键账号立场与影响力建模" },
-    { phase: "风险研判", desc: "识别高危议题与传播链路" },
-    { phase: "处置建议", desc: "分级响应与正向引导预案" },
-  ],
-  weeklyVolume: [
-    { week: "W1", value: 86 },
-    { week: "W2", value: 92 },
-    { week: "W3", value: 110 },
-    { week: "W4", value: 134 },
-    { week: "W5", value: 121 },
-    { week: "W6", value: 158 },
-  ],
-};
-
-/** 「研判情报报告」接口完整地址：`{VITE_AIPI_CONSUMER_URL}/cop/selectSqReport`。 */
-function sqReportUrl(): string {
-  const value = (import.meta.env as Record<string, unknown>).VITE_AIPI_CONSUMER_URL;
-  const base = typeof value === "string" ? value.replace(/\/+$/, "") : "";
-  return base ? `${base}/cop/selectSqReport` : "";
-}
-
-/** 把单条 `contentJson` 反序列化为对象/数组/原值（已是对象则原样返回）。 */
 function parseContentJson(raw: unknown): unknown {
   if (typeof raw !== "string") return raw ?? null;
   const text = raw.trim();
@@ -101,11 +21,11 @@ function parseContentJson(raw: unknown): unknown {
   try {
     return JSON.parse(text);
   } catch {
-    return text; // 解析失败就把原始字符串透传给智能体，让它自行理解
+    // 非 JSON 字符串仍透传给智能体，避免因单条异常让整份报告不可用。
+    return text;
   }
 }
 
-/** 去掉 categoryType 末尾的「 JSON」后缀，作为归类键（如「敌情关键事件 JSON」→「敌情关键事件」）。 */
 function categoryKey(categoryType: unknown, index: number): string {
   const raw = typeof categoryType === "string" ? categoryType.trim() : "";
   const cleaned = raw.replace(/\s*JSON\s*$/i, "").trim();
@@ -113,111 +33,76 @@ function categoryKey(categoryType: unknown, index: number): string {
 }
 
 /**
- * 把 selectSqReport 的整包响应**提取**成喂给智能体的干净结构化输入：
- *   `{ taskId, source, categories: { [类目]: 反序列化后的内容 } }`
- * 返回 null 表示无可用内容（调用方据此回退/不开跑）。
+ * 将接口 envelope 提取为 `{ taskId, source, categories }`。
+ * 返回 null 表示该任务尚未保存可用的报告内容。
  */
 export function extractSqReport(body: unknown, taskId: string): unknown | null {
   const data = (body && typeof body === "object" ? (body as { data?: unknown }).data : null) as
     | Array<Record<string, unknown>>
     | undefined;
   if (!Array.isArray(data) || data.length === 0) return null;
+
   const categories: Record<string, unknown> = {};
   data.forEach((item, index) => {
     const content = parseContentJson(item?.contentJson);
     if (content == null) return;
     let key = categoryKey(item?.categoryType, index);
-    if (key in categories) key = `${key}（${index + 1}）`; // 同名类目去重保留
+    if (key in categories) key = `${key}（${index + 1}）`;
     categories[key] = content;
   });
   if (Object.keys(categories).length === 0) return null;
-  return { taskId, source: "cop/selectSqReport", categories };
+  return { taskId, source: "api/task-reports", categories };
 }
 
-/**
- * 输入 JSON 缓存**仅供开发(mock)使用**：`VITE_MOCK_SQ_REPORT==='true'` 时才读/写缓存，
- * 避免开发反复请求样例假数据。真实接口模式（false）下不读不写缓存，**始终拉取真实数据**。
- */
-function inputCacheEnabled(): boolean {
-  return (import.meta.env as Record<string, unknown>).VITE_MOCK_SQ_REPORT === "true";
-}
-
-/** 读取暂存的输入 JSON（仅 mock 开发模式生效，真实模式恒返回 null 以强制重新拉取）。 */
+/** 兼容旧调用方：报告由接口实时读取，不再在浏览器中缓存。 */
 export function readDashboardInputJson(): unknown | null {
-  if (!inputCacheEnabled()) return null;
-  try {
-    const raw = sessionStorage.getItem(DASHBOARD_INPUT_STORAGE_KEY);
-    return raw ? JSON.parse(raw) : null;
-  } catch {
   return null;
 }
+
+/** 兼容旧调用方：报告数据只由后端接口维护。 */
+export function persistDashboardInputJson(_data: unknown): void {
+  // noop
 }
 
-/** 暂存输入 JSON（仅 mock 开发模式生效；隐私模式/quota 异常静默失败）。 */
-export function persistDashboardInputJson(data: unknown): void {
-  if (!inputCacheEnabled()) return;
-  try {
-    sessionStorage.setItem(DASHBOARD_INPUT_STORAGE_KEY, JSON.stringify(data));
-  } catch {
-    /* noop */
-  }
-}
-
-/** 用登录暂存的任务详情拼一份占位输入（接口未就绪时的回退）。 */
-function placeholderFromCopTask(taskId: string): unknown | null {
-  const detail = readCopTaskDetail();
-  if (!detail) return taskId ? { taskId } : null;
-  return {
-    taskId,
-    taskName: detail.taskName,
-    taskContent: detail.taskContent,
-    overview: detail.overview,
-    taskDirection: detail.taskDirection,
-    _note: "占位输入（真实业务 JSON 接口未就绪）",
-  };
-}
-
-/**
- * 取本页的输入 JSON：**先请求 selectSqReport，待其返回后再交给模型抽取**。
- *
- * - 真实接口模式（`VITE_MOCK_SQ_REPORT=false`）：不读缓存、不兜底假数据——
- *   **只用接口真实返回的内容**；请求失败或返回空一律返回 `null`（页面据此提示「请求失败/无数据」，
- *   绝不拿占位/演示数据去喂模型，避免「没等接口就抽取假数据」）。
- * - mock 开发模式（true）：走本地样例假数据（见 utils/request.ts）并缓存避免反复请求；
- *   仅此模式在接口不可用时回退 copTaskDetail 占位 / DEMO 演示数据，保证开发能跑通。
- */
+/** 查询并提取当前任务的报告详情；失败或空数据均返回 null。 */
 export async function fetchDashboardInputJson(
   taskId: string,
-  opts?: { forceRefresh?: boolean },
+  _opts?: { forceRefresh?: boolean },
 ): Promise<unknown | null> {
-  const mock = inputCacheEnabled(); // true=mock/开发；false=真实接口
-  // forceRefresh（重新分析/修改时）：跳过缓存，强制重新请求接口拿**最新数据**（数据可能已变化）。
-  const cached = opts?.forceRefresh ? null : readDashboardInputJson(); // 真实模式恒 null（缓存仅开发用）
-  if (cached) return cached;
+  if (!taskId) return null;
+  // 开发演示模式使用与 Gateway 接口同形的本地样例；这样不依赖报告库是否已为
+  // 当前深链 taskId 写入数据，同时真实/生产环境仍始终从 Gateway 读取。
+  if (readRuntimeFlag("VITE_MOCK_SQ_REPORT")) {
+    return extractSqReport(
+      {
+        ...SQ_REPORT_MOCK_RESPONSE,
+        data: SQ_REPORT_MOCK_RESPONSE.data.map((item) => ({ ...item, taskId })),
+      },
+      taskId,
+    );
+  }
+  const body = await getTaskReport(taskId);
+  return extractSqReport(body, taskId);
+}
 
-  const url = sqReportUrl();
-  if (url && taskId) {
+export type SqReportStatus = "complete" | "incomplete" | "unknown";
+
+export interface SqReportCheckResult {
+  status: SqReportStatus;
+  report?: unknown;
+}
+
+/** rwfx 进入前检查：任务已有可解析报告则 complete，否则 incomplete。 */
+export async function fetchSqReportCheck(taskId: string): Promise<SqReportCheckResult> {
+  if (!taskId) return { status: "unknown" };
   try {
-      // service 拦截器统一注入鉴权并返回 response.data（整包 body）。
-      // await 在此：必须**等接口返回**后才有 body 可 extract → 再由上层启动模型抽取。
-      const body = await requestCrudService.get(url, { taskId });
-      const extracted = extractSqReport(body, taskId);
-      if (extracted) {
-        persistDashboardInputJson(extracted); // 真实模式 no-op
-        return extracted;
-      }
+    const report = await fetchDashboardInputJson(taskId);
+    return report ? { status: "complete", report } : { status: "incomplete" };
   } catch {
-      /* 请求失败：真实模式返回 null（见下），mock 模式落占位/DEMO */
+    return { status: "unknown" };
   }
 }
 
-  // 真实接口模式：**不兜底假数据**。失败/空 → null，让页面提示而不是拿假数据喂模型。
-  if (!mock) return null;
-
-  // 以下兜底**仅 mock/开发模式**：copTaskDetail 占位 / DEMO 演示数据，保证开发能看效果。
-  const placeholder = placeholderFromCopTask(taskId);
-  const detail = readCopTaskDetail();
-  const resolved = detail ? placeholder : { ...DEMO_DASHBOARD_INPUT, taskId: taskId || DEMO_DASHBOARD_INPUT.taskId };
-  if (resolved) persistDashboardInputJson(resolved);
-  return resolved;
+export async function fetchSqReportStatus(taskId: string): Promise<SqReportStatus> {
+  return (await fetchSqReportCheck(taskId)).status;
 }

frontend-web/src/core/auth/external-access-token.ts

@@ -0,0 +1,61 @@
+import { authStorageGet, authStorageSet } from "@/core/auth/scoped-storage";
+
+export const EXTERNAL_ACCESS_TOKEN_STORAGE_KEY = "access_token";
+
+export function normalizeExternalAccessToken(value: unknown): string {
+  if (value == null) return "";
+  const token = String(value).trim();
+  if (!token) return "";
+  const lowered = token.toLowerCase();
+  return lowered === "null" || lowered === "undefined" ? "" : token;
+}
+
+function readTokenFromStoredValue(raw: string | null): string {
+  const token = normalizeExternalAccessToken(raw);
+  if (!token) return "";
+  if (!token.startsWith("{")) return token;
+  try {
+    const parsed = JSON.parse(token);
+    if (!parsed || typeof parsed !== "object") return token;
+    const obj = parsed as Record<string, unknown>;
+    return (
+      normalizeExternalAccessToken(obj.access_token) ||
+      normalizeExternalAccessToken(obj.accessToken) ||
+      normalizeExternalAccessToken(obj.token)
+    );
+  } catch {
+    return token;
+  }
+}
+
+export function readStoredExternalAccessTokenValue(): string {
+  return readTokenFromStoredValue(authStorageGet(EXTERNAL_ACCESS_TOKEN_STORAGE_KEY));
+}
+
+export function readExternalAccessTokenValue(userInfo: Record<string, unknown>): string {
+  return normalizeExternalAccessToken(userInfo.access_token) || normalizeExternalAccessToken(userInfo.accessToken);
+}
+
+export function readCurrentExternalAccessTokenValue(userInfo: Record<string, unknown>): string {
+  return readStoredExternalAccessTokenValue() || readExternalAccessTokenValue(userInfo);
+}
+
+export function writeExternalAccessTokenFields(
+  userInfo: Record<string, unknown>,
+  token: string,
+): void {
+  userInfo.access_token = token;
+  userInfo.accessToken = token;
+}
+
+export function writeStoredExternalAccessToken(token: string): void {
+  const normalized = normalizeExternalAccessToken(token);
+  if (normalized) {
+    authStorageSet(EXTERNAL_ACCESS_TOKEN_STORAGE_KEY, normalized);
+  }
+}
+
+export function deleteExternalAccessTokenFields(userInfo: Record<string, unknown>): void {
+  delete userInfo.access_token;
+  delete userInfo.accessToken;
+}

frontend-web/src/core/auth/hooks.ts

@@ -1,6 +1,8 @@
-import { useQuery } from "@tanstack/react-query";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
-import { listAllUsers } from "./api";
+import { OptType, writeYLog } from "@/core/log/y-log";
+
+import { listAllUsers, setUserApproval, setUserLoginPassword } from "./api";
 
 export function useAllUsers(enabled: boolean) {
   return useQuery({
@@ -9,3 +11,38 @@ export function useAllUsers(enabled: boolean) {
     enabled,
   });
 }
+
+/** 放行 / 取消放行某个用户（登录白名单），成功后刷新用户列表缓存。 */
+export function useSetUserApproval() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({ userId, approved }: { userId: string; approved: boolean }) => setUserApproval(userId, approved),
+    onSuccess: (_data, vars) => {
+      writeYLog({
+        optType: vars.approved ? OptType.enabled : OptType.disabled,
+        optDetail: `CM助手-全量-白名单管理-${vars.approved ? "放行" : "取消放行"}用户`,
+        url: `/api/v1/auth/users/${vars.userId}/approval`,
+        reqParam: vars,
+      });
+      void queryClient.invalidateQueries({ queryKey: ["admin", "users"] });
+    },
+  });
+}
+
+/** 设置 / 清除某账号的「登录口令」（明文），成功后刷新用户列表缓存。 */
+export function useSetUserLoginPassword() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({ userId, password }: { userId: string; password: string | null }) => setUserLoginPassword(userId, password),
+    onSuccess: (_data, vars) => {
+      const cleared = vars.password == null || vars.password === "";
+      writeYLog({
+        optType: cleared ? OptType.delete : OptType.edit,
+        optDetail: `CM助手-全量-白名单管理-${cleared ? "清除" : "设置"}账号登录口令`,
+        url: `/api/v1/auth/users/${vars.userId}/login-password`,
+        reqParam: { userId: vars.userId },
+      });
+      void queryClient.invalidateQueries({ queryKey: ["admin", "users"] });
+    },
+  });
+}

frontend-web/src/core/auth/index.ts

@@ -7,6 +7,12 @@ export interface LoginByUsernameResponse {
   system_role: string;
   needs_setup: boolean;
   created: boolean;
+  /**
+   * 本次登录解析出的原始登录用户名（token 登录=getTokenInfo 解析值；用户名登录=所传用户名）。
+   * 用于跳转外链时拼 ``?username=``——后端落库的邮箱前缀是归一化(小写/替换)后的，有损，故以此为准。
+   * 旧后端可能不返回。
+   */
+  username?: string;
 }
 
 import {
@@ -16,6 +22,8 @@ import {
 } from "@/core/auth/scoped-storage";
 
 const AUTH_STORAGE_KEY = "deerflow.auth";
+/** Fired in the current tab because the browser `storage` event only reaches other tabs. */
+export const AUTH_STATE_CHANGED_EVENT = "deerflow:auth-state-changed";
 
 function isBrowser(): boolean {
   return typeof window !== "undefined";
@@ -42,6 +50,7 @@ export function setStoredAuth(auth: LoginByUsernameResponse) {
     return;
   }
   authStorageSet(AUTH_STORAGE_KEY, JSON.stringify(auth));
+  window.dispatchEvent(new Event(AUTH_STATE_CHANGED_EVENT));
 }
 
 export function clearStoredAuth() {
@@ -49,6 +58,7 @@ export function clearStoredAuth() {
     return;
   }
   authStorageRemove(AUTH_STORAGE_KEY);
+  window.dispatchEvent(new Event(AUTH_STATE_CHANGED_EVENT));
 }
 
 /** 与设置 → 个人信息页「用户名」一致：邮箱 @ 前缀，否则 user_id。 */

frontend-web/src/core/auth/login-credentials.ts

@@ -0,0 +1,61 @@
+/**
+ * 任务工作区跳转外链时要拼接的「登录态凭据」：token1 + 登录用户名 的存取。
+ *
+ * - **token1** = token 登录用的上游 token（登录 URL 的 ``?authToken=``，即走
+ *   ``/api/v1/auth/login/token`` 这条 token 换登录路径用的 token）。
+ * - **username** = 后端 token 登录时用该 token 调 ``getTokenInfo`` 解析出的**登录用户名**
+ *   （见 ``auth.py`` ``/login/token`` → ``UsernameLoginResponse.username``）。**不是**邮箱
+ *   前缀、也**不是**解 JWT 得来——后端把它落库时会 ``.lower()`` + 归一化，邮箱前缀是有损的，
+ *   所以以后端回传的原始值为准。
+ *
+ * 二者均经 [[scoped-storage]] 的 ``authStorage*`` 存取（键用 ``login.`` 前缀，属其受保护
+ * 鉴权键族）：嵌入(iframe)/独立会话态自动落 sessionStorage 隔离、正常态落 localStorage，
+ * 并随「开启独立会话」一起被 ``migrateAuthToSession`` 迁移。
+ *
+ * **门控**：仅 token 登录（``authToken`` 存在）才写入。非 token 登录不写 token1 → 跳转按钮
+ * 的「追加登录态」开关此时读不到 token，自然不追加（符合「必须用 login/token 登录才能带
+ * token 跳转」）。
+ */
+
+import {
+  authStorageGet,
+  authStorageRemove,
+  authStorageSet,
+} from "@/core/auth/scoped-storage";
+import { getAccountDisplayName, type LoginByUsernameResponse } from "@/core/auth";
+
+const LOGIN_TOKEN_KEY = "login.token1";
+const LOGIN_USERNAME_KEY = "login.username";
+
+/**
+ * 持久化 token 登录的 token1 + 用户名（token 登录成功后调用）。
+ * ``authToken`` 为空则整次忽略（非 token 登录不留痕）。
+ */
+export function persistLoginCredentials(
+  authToken: string | null | undefined,
+  auth: LoginByUsernameResponse | null,
+): void {
+  const token = authToken?.trim();
+  if (!token) return;
+  authStorageSet(LOGIN_TOKEN_KEY, token);
+  // 优先用后端回传的原始登录名（getTokenInfo 解析值）；旧后端无该字段时退回账号显示名
+  // （邮箱 @ 前缀）兜底，保证总有个值可用。
+  const username = auth?.username?.trim() || getAccountDisplayName(auth);
+  if (username) authStorageSet(LOGIN_USERNAME_KEY, username);
+}
+
+/** 读 token1（无则 ``null`` → 跳转不追加登录态）。 */
+export function readLoginToken(): string | null {
+  return authStorageGet(LOGIN_TOKEN_KEY);
+}
+
+/** 读登录用户名（无则 ``null``）。 */
+export function readLoginUsername(): string | null {
+  return authStorageGet(LOGIN_USERNAME_KEY);
+}
+
+/** 清除登录态凭据（登出时调用）。 */
+export function clearLoginCredentials(): void {
+  authStorageRemove(LOGIN_TOKEN_KEY);
+  authStorageRemove(LOGIN_USERNAME_KEY);
+}

frontend-web/src/core/auth/scoped-storage.ts

@@ -62,7 +62,7 @@ export function authStorageRemove(key: string): void {
  * ticket/userId/env/maxkeyOnlineToken/userDetailToken）。用于「开启独立会话」时把当前登录态从
  * localStorage 快照搬进 sessionStorage，避免切换存储后被登出。
  */
-const PROTECTED_AUTH_EXACT_KEYS = ["deerflow.auth", "userInfo", "userId", "tools_token"];
+const PROTECTED_AUTH_EXACT_KEYS = ["deerflow.auth", "userInfo", "userId", "tools_token", "access_token"];
 const PROTECTED_AUTH_PREFIX = "login.";
 
 function isProtectedAuthKey(key: string): boolean {

frontend-web/src/core/auth/task-buttons.ts

@@ -7,7 +7,8 @@
  * 任务深链配置读出 rwfx 的 4 个历史按钮，3qfx/xdfx 为空）——这样真实跳转地址通过实时
  * config 进种子，避免写死；一旦保存过，后端即唯一数据源。
  *
- * 按钮两类（``linkType``）：``url`` 外链（``window.open``，可选追加 ``?id=任务id``）/
+ * 按钮两类（``linkType``）：``url``（外链 ``window.open``；**或应用内路由**——target 以 ``/`` 开头
+ * 时按内部路由处理：``self`` 走 react-router 同窗导航、``blank`` 拼 hash 路由新标签；可选追加 ``?{idParam}=id``）/
  * ``business`` 内部切换到另一业务（复用 [[task-deeplink]] 的 ``resolveTaskDeeplinkTarget``）。
  */
 
@@ -19,6 +20,14 @@ import {
   readCopTaskDetail,
   resolveTaskDeeplinkTarget,
 } from "@/core/auth/task-deeplink";
+import { readUserInfo, resolveRouteParamValue } from "@/strategy-components/lib/light-app";
+import {
+  readLoginToken,
+  readLoginUsername,
+} from "@/core/auth/login-credentials";
+
+/** 「大屏绘制」独立页应用内路由（深链「上一步」默认指向它，跳转追加 ?taskId=）。 */
+export const DASHBOARD_AGENT_ROUTE = "/page/strategy/dashboard-agent";
 
 /** 任务工作区业务码（与路由 taskBase 一一对应）。 */
 export type TaskBusiness = "rwfx" | "3qfx" | "xdfx";
@@ -62,6 +71,20 @@ export type TaskButtonIdKind = "task" | "action";
 /** ``url`` 外链打开方式：``blank``=新窗口（默认）/ ``self``=当前窗口（嵌入态即当前 iframe）。 */
 export type TaskButtonOpenMode = "blank" | "self";
 
+/**
+ * ``url`` 外链追加的**登录参数**（与「应用管理」一致）：在拼好的跳转地址后再依次
+ * 追加 ``?{key}={value}``，``value`` 运行时从 ``userInfo`` 按 ``source`` 解析
+ * （``other`` 时取 ``customValue`` 字面值）。复用 [[light-app-center]] 的取值来源。
+ */
+export interface TaskButtonLoginParam {
+  /** 拼到 URL 的查询参数名。 */
+  key: string;
+  /** 取值来源：``userInfo`` 字段名（如 ``accessToken`` / ``yUserId``）或 ``other``（自填）。 */
+  source: string;
+  /** ``source==="other"`` 时的自定义字面值。 */
+  customValue: string;
+}
+
 /** 一个可配置跳转按钮。 */
 export interface TaskButton {
   id: string;
@@ -81,10 +104,38 @@ export interface TaskButton {
   idKind: TaskButtonIdKind;
   /** ``url`` 外链打开方式：``blank``=新窗口（默认）/ ``self``=当前窗口。仅 ``url`` 类型有意义。 */
   openMode: TaskButtonOpenMode;
+  /** ``url`` 外链追加的登录参数列表（仅 ``url`` 类型有意义；为空则不追加，行为同旧版）。 */
+  loginParams: TaskButtonLoginParam[];
+  /**
+   * ``url`` 跳转是否追加登录态：token1（token 登录的上游 token）+ 登录用户名，供外链所在的
+   * 外部系统识别当前登录用户。**仅 token 登录**（前端存有 token1，见 [[login-credentials]]）时
+   * 实际拼上；非 token 登录读不到 token1，自动跳过（按钮照常跳，只是不带这两个参数）。
+   */
+  appendAuth: boolean;
+  /** 追加 token 的查询参数名（空则用 ``token``）。 */
+  authTokenParam: string;
+  /** 追加用户名的查询参数名（空则用 ``username``）。 */
+  authNameParam: string;
   enabled: boolean;
   sortOrder: number;
 }
 
+/**
+ * 运行时解析单个登录参数的值——**与「应用管理」完全一致**：直接复用 light-app 的
+ * ``resolveRouteParamValue``（把本按钮的登录参数适配成 ``login`` 类型的路由参数），
+ * 保证取值来源/逻辑跟轻应用一模一样（``other`` 取字面 ``customValue``，否则从
+ * ``userInfo`` 取 ``source`` 字段）。
+ */
+function resolveLoginParamValue(
+  p: TaskButtonLoginParam,
+  userInfo: Record<string, unknown>,
+): string {
+  return resolveRouteParamValue(
+    { key: p.key, paramType: "login", source: p.source, customValue: p.customValue },
+    userInfo,
+  );
+}
+
 /** 内部切换可选的目标业务（``business`` 类型按钮的下拉项）。 */
 export const TASK_BUSINESS_TARGETS: { code: TaskBusiness; label: string }[] = [
   { code: "3qfx", label: "三情分析" },
@@ -94,7 +145,8 @@ export const TASK_BUSINESS_TARGETS: { code: TaskBusiness; label: string }[] = [
 
 /**
  * 代码种子默认按钮（仅在后端整张表为空时使用）：
- *   - rwfx：历史 4 个按钮（编辑/下一步/3q详情，地址取自实时任务深链配置）+ 切换到三情/行动分析；
+ *   - rwfx：历史按钮（编辑/下一步/3q详情，地址取自实时任务深链配置）+「上一步」+ 切换到三情/行动分析；
+ *     「上一步」紧邻「下一步」左侧（底部栏 prev 组在 next 组前），默认指向应用内大屏绘制页（?taskId=任务id）；
  *   - 3qfx / xdfx：互相切换到另外两个业务。
  * 即「三个业务都带切换按钮」。已保存过则用页面「导入默认」把缺失项补进来。
  */
@@ -115,6 +167,10 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
     idParam: "id",
     idKind: "task",
     openMode: "blank",
+    loginParams: [],
+    appendAuth: false,
+    authTokenParam: "token",
+    authNameParam: "username",
     enabled: true,
     sortOrder,
   });
@@ -129,6 +185,10 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
     idParam: "id",
     idKind: "task",
     openMode: "blank",
+    loginParams: [],
+    appendAuth: false,
+    authTokenParam: "token",
+    authNameParam: "username",
     enabled: true,
     sortOrder,
   });
@@ -144,9 +204,35 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
       sortOrder: 0,
     },
+    {
+      // 上一步：放在「下一步」左边（底部快捷跳转栏，prev 组渲染在 next 组之前）。
+      // 默认指向**应用内**「大屏绘制」页 /page/strategy/dashboard-agent（内部路由，以 / 开头），
+      // 携带 ?taskId=任务id（大屏页按 taskId 取数）。openMode=self → 同窗 react-router 导航；
+      // 大屏页路由在 PageLayout 里被**强制显示全局 chrome**（见 PageRoutes 的 forceChromeForDashboardAgent），
+      // 故即便从去 chrome 的工作区进来也带回顶部导航栏 + 侧边栏（embed=1 外部嵌入态仍隐藏）。
+      id: "rwfx-prev",
+      business: "rwfx",
+      label: "上一步",
+      linkType: "url",
+      target: DASHBOARD_AGENT_ROUTE,
+      appendTaskId: true,
+      idParam: "taskId",
+      idKind: "task",
+      openMode: "self",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
+      enabled: true,
+      sortOrder: 1,
+    },
     {
       id: "rwfx-next",
       business: "rwfx",
@@ -157,8 +243,12 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
-      sortOrder: 1,
+      sortOrder: 2,
     },
     {
       id: "rwfx-detail3q",
@@ -170,12 +260,16 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
-      sortOrder: 2,
+      sortOrder: 3,
     },
-    sw("rwfx-switch3q", "rwfx", "切换到三情分析", "3qfx", 3),
-    sw("rwfx-switchxd", "rwfx", "切换到行动分析", "xdfx", 4),
-    pz("rwfx-purpose", "rwfx", 5),
+    sw("rwfx-switch3q", "rwfx", "切换到三情分析", "3qfx", 4),
+    sw("rwfx-switchxd", "rwfx", "切换到行动分析", "xdfx", 5),
+    pz("rwfx-purpose", "rwfx", 6),
     // 3qfx（三情分析）：切换到任务/行动分析
     sw("3qfx-switchrw", "3qfx", "切换到任务分析", "rwfx", 0),
     sw("3qfx-switchxd", "3qfx", "切换到行动分析", "xdfx", 1),
@@ -236,8 +330,48 @@ export async function runTaskButton(btn: TaskButton, ctx: RunTaskButtonCtx): Pro
     // 行动分析（xdfx）可选追加行动id；否则用任务id。行动id 缺失时回退任务id。
     const id = btn.idKind === "action" ? ctx.actionId || ctx.taskId : ctx.taskId;
     const param = (btn.idParam || "id").trim() || "id";
-    const url = btn.appendTaskId && id ? appendQueryParam(base, param, id) : base;
-    // 打开方式：self=当前窗口（嵌入态即当前 iframe）；否则 blank=新窗口（默认）。
+    let url = btn.appendTaskId && id ? appendQueryParam(base, param, id) : base;
+    // 追加登录参数（与应用管理一致）：运行时从 userInfo 解析每项的值后拼到地址尾部。
+    const loginParams = btn.loginParams ?? [];
+    if (loginParams.length > 0) {
+      const userInfo = readUserInfo();
+      for (const lp of loginParams) {
+        const key = (lp.key || "").trim();
+        if (!key) continue;
+        url = appendQueryParam(url, key, resolveLoginParamValue(lp, userInfo));
+      }
+    }
+    // 追加登录态：仅 token 登录（存在 token1）才拼 token + 用户名，供外链所在的外部系统识别
+    // 当前登录用户。非 token 登录读不到 token1 → 整段跳过（不影响跳转本身）。
+    if (btn.appendAuth) {
+      const token1 = readLoginToken();
+      if (token1) {
+        url = appendQueryParam(url, (btn.authTokenParam || "token").trim() || "token", token1);
+        const name = readLoginUsername();
+        if (name) {
+          url = appendQueryParam(url, (btn.authNameParam || "username").trim() || "username", name);
+        }
+      }
+    }
+    // 应用内部路由（以单个 / 开头，如「上一步」→ 大屏绘制页）：
+    //   self → 走 react-router 同窗导航（不刷新、保留 SPA）；blank → 拼成当前源的 hash 路由新标签打开。
+    if (base.startsWith("/") && !base.startsWith("//")) {
+      if (btn.openMode === "blank") {
+        const full = `${window.location.origin}${window.location.pathname}#${url}`;
+        // 打印实际打开地址，便于排查登录参数/拼接问题。
+        console.info(`[task-button] 「${btn.label}」内部路由(新标签) → ${full}`);
+        window.open(full, "_blank", "noopener,noreferrer");
+      } else {
+        console.info(`[task-button] 「${btn.label}」内部路由(同窗) → ${url}`);
+        ctx.navigate(url);
+      }
+      return;
+    }
+    // 外链：self=当前窗口（嵌入态即当前 iframe）；否则 blank=新窗口（默认）。
+    // 打印最终跳转地址（含追加的 id / 登录参数），便于排查问题。
+    console.info(
+      `[task-button] 「${btn.label}」外链(${btn.openMode === "self" ? "当前窗口" : "新窗口"}) → ${url}`,
+    );
     if (btn.openMode === "self") {
       window.location.assign(url);
     } else {

frontend-web/src/core/auth/task-deeplink-config.ts

@@ -23,8 +23,10 @@ export interface TaskDeeplinkConfig {
   actionTest: boolean;
   /** 目的树查询完整 URL（调用追加 ?taskId=）。 */
   purposeDetailUrl: string;
-  /** 删除完整 URL（调用追加 ?taskId=）。 */
+  /** 删除完整 URL（rwfx 与 xdfx 共用同一接口）：rwfx 追加 ?taskId=、xdfx 追加 ?actionId=（另一参数不传）。 */
   deleteUrl: string;
+  /** xdfx「行动历史是否存在」查询完整 URL（调用追加 ?actionId=）；留空 → 前端视作无历史、不阻断删除（地址待提供）。 */
+  actionHistoryUrl: string;
   /** B 系统树形完整编辑页 URL（跳转追加 ?id=）。 */
   treemapEditUrl: string;
   /** B 系统树形下一步页 URL（跳转追加 ?id=）。 */
@@ -34,11 +36,13 @@ export interface TaskDeeplinkConfig {
   /** 「3q详情」详情页 URL（rwfx 目的树面板链接，跳转追加 ?id= 任务id）；留空则前端提示未配置。 */
   detail3qUrl: string;
   /** 测试假数据：purposeDetail = 原始 {state,msg,data}；delete = {message,success}；
-   *  actionDetail = 原始 {state,msg,data:{taskId,...}}。 */
+   *  actionDetail = 原始 {state,msg,data:{taskId,...}}；sqReport = 原始 {state,msg,data:[...]}
+   *  （rwfx 3q 预检用，test 为真时生效）。 */
   mock: {
     purposeDetail?: unknown;
     delete?: { message?: string; success?: boolean };
     actionDetail?: unknown;
+    sqReport?: unknown;
   };
 }
 
@@ -48,10 +52,12 @@ export const DEFAULT_TASK_DEEPLINK_CONFIG: TaskDeeplinkConfig = {
   deleteTest: false,
   actionTest: false,
   purposeDetailUrl: "https://ch1.b.uat.4.cn/consumer/taskAnalyseSearch/getTaskPurposeDetail",
-  deleteUrl: "https://ch1.b.uat.4.cn/consumer/taskAnalyseSearch/delete",
+  deleteUrl: "https://ch1.b.uat.4.cn/bwjt/dropSixOrSevenData",
   treemapEditUrl: "https://ch1.b.uat.4.cn/web/#/task/item-aicoh/step-mode-treemap-full-edit",
   treemapNextUrl: "https://ch1.b.uat.4.cn/web/#/task/item-aicoh/step-mode-treemap-full-next",
   actionDetailUrl: "https://ch1.b.uat.4.cn/consumer/plan/action",
+  // 行动历史查询地址待提供：空字符串 → 前端不查询、视作无历史（不阻断删除）。
+  actionHistoryUrl: "",
   detail3qUrl: "",
   mock: {},
 };
@@ -72,6 +78,8 @@ function normalize(body: unknown): TaskDeeplinkConfig {
     treemapEditUrl: str(o.treemap_edit_url, d.treemapEditUrl),
     treemapNextUrl: str(o.treemap_next_url, d.treemapNextUrl),
     actionDetailUrl: str(o.action_detail_url, d.actionDetailUrl),
+    // action_history_url 允许为空（地址待提供）：空 → 前端不查询、视作无历史。不回退默认。
+    actionHistoryUrl: typeof o.action_history_url === "string" ? o.action_history_url : d.actionHistoryUrl,
     // detail_3q_url 允许为空（地址待定），不回退默认；只在配了非空时才生效。
     detail3qUrl: typeof o.detail_3q_url === "string" ? o.detail_3q_url : d.detail3qUrl,
     mock: {
@@ -81,6 +89,7 @@ function normalize(body: unknown): TaskDeeplinkConfig {
           ? (mock.delete as { message?: string; success?: boolean })
           : undefined,
       actionDetail: mock.action_detail,
+      sqReport: mock.sq_report,
     },
   };
 }

frontend-web/src/core/auth/task-deeplink.ts

@@ -18,6 +18,7 @@
 import { requestCrudService } from "@/service/request-axios-service";
 import { clearTaskContext, persistTaskContext } from "@/core/auth/task-purpose";
 import { fetchTaskDeeplinkConfig } from "@/core/auth/task-deeplink-config";
+import { readRuntimeEnv, readRuntimeFlag } from "@/env";
 import { listBusinessMappings } from "@/strategy-components/api/business-mapping";
 
 /** xdfx 业务码：深链传入的是「行动id」，需先调 action 接口解析出真正的「任务id」。 */
@@ -73,13 +74,13 @@ export function parseGoPath(goPath: string): ParsedGoPath | null {
 }
 
 function consumerBaseUrl(): string {
-  const value = import.meta.env.VITE_AIPI_CONSUMER_URL;
+  const value = readRuntimeEnv("VITE_AIPI_CONSUMER_URL");
   return typeof value === "string" ? value.replace(/\/+$/, "") : "";
 }
 
 /** cop-task-detail 是否走本地假数据：开关 `VITE_MOCK_COP_TASK_DETAIL=true`（真实接口未就绪时调试用）。 */
 function copTaskDetailMockEnabled(): boolean {
-  return (import.meta.env as Record<string, unknown>).VITE_MOCK_COP_TASK_DETAIL === "true";
+  return readRuntimeFlag("VITE_MOCK_COP_TASK_DETAIL");
 }
 
 /** cop-task-detail 本地假数据（与真实 data 字段同构；mock 开关开启时返回）。 */
@@ -233,17 +234,45 @@ export interface TaskDeeplinkTarget {
   state?: Record<string, unknown>;
 }
 
-/** 用 taskName / taskContent 拼出开场信息文本；末尾附上任务 id（task_id），供后端识别任务。 */
-function buildOpeningText(detail: CopTaskDetail, taskId: string): string {
+/** xdfx（行动分析）开场信息里要追加的行动信息：行动标题 + 行动内容 + 行动id。 */
+export interface ActionOpeningInfo {
+  /** 行动id（action_id）。 */
+  actionId?: string;
+  /** 行动标题（行动名称 actionName）。 */
+  actionName?: string;
+  /** 行动内容（行动叙事 narration）。 */
+  narration?: string;
+}
+
+/**
+ * 用 taskName / taskContent 拼出开场信息文本；末尾附上任务 id（task_id），供后端识别任务。
+ * xdfx（行动分析）额外附上「行动标题 / 行动内容 / 行动id（action_id）」——传入 action 时追加这几行。
+ */
+function buildOpeningText(detail: CopTaskDetail, taskId: string, action?: ActionOpeningInfo): string {
   return [
     detail.taskName ? `任务名称：${detail.taskName}` : "",
     detail.taskContent ? `任务内容：${detail.taskContent}` : "",
     taskId ? `任务id（task_id）为${taskId}` : "",
+    action?.actionName ? `行动标题：${action.actionName}` : "",
+    action?.narration ? `行动内容：${action.narration}` : "",
+    action?.actionId ? `行动id（action_id）为${action.actionId}` : "",
   ]
     .filter(Boolean)
     .join("\n");
 }
 
+/**
+ * 3qfx/rwfx 这类“按任务id 直接问答”的任务工作区，在 ``TaskContext`` 丢失但
+ * ``login.copTaskDetail`` 仍存在时，可用它重新拼出开场词做前端自恢复。
+ */
+export function buildTaskOpeningText(
+  detail: CopTaskDetail,
+  taskId: string,
+  action?: ActionOpeningInfo,
+): string {
+  return buildOpeningText(detail, taskId, action);
+}
+
 /**
  * 据 goPath + 任务详情解析跳转目标。
  *   - 多智能体会商：返回带 ``roundtablePrefill``（businessCode 让会商页自动选用配置的业务链条；
@@ -312,11 +341,21 @@ export async function resolveTaskDeeplinkTarget(
   // 暂存任务上下文（taskId + agentId + 开场信息），跳到 chats 索引，由工作区按 taskId 决定
   // 开最新历史对话 / 新建。rwfx 在工作区里额外过「目的树闸门」；3qfx/xdfx 仅 1:N 列表，
   // 新建对话直接带开场信息自动发出（见 task-purpose / AgentChatPage 的 taskGate / taskBind）。
+  // xdfx（行动分析）：聊天记录按「行动id」划分（partitionByAction），且开场信息追加
+  // 行动标题 / 行动内容 / action_id（行动详情登录解析任务id 时已缓存，优先读缓存避免重复请求）。
+  const isXdfx = parsed.businessCode === XDFX_BUSINESS_CODE;
+  const actionId = rawId || taskId;
+  let actionInfo: ActionOpeningInfo | undefined;
+  if (isXdfx) {
+    const ad = rawId ? (readActionDetail() ?? (await fetchActionDetail(rawId))) : null;
+    actionInfo = { actionId, actionName: ad?.actionName, narration: ad?.narration };
+  }
   persistTaskContext({
     taskId,
     agentId,
-    openingText: buildOpeningText(detail, taskId),
-    actionId: rawId || taskId,
+    openingText: buildOpeningText(detail, taskId, actionInfo),
+    actionId,
+    partitionByAction: isXdfx,
   });
   return { path: `${taskBase}/agent/${agentId}/chats` };
 }

frontend-web/src/core/auth/task-purpose.ts

@@ -41,6 +41,12 @@ export interface TaskContext {
   openingText: string;
   /** 深链原始 id（xdfx 为「行动id」，需追加行动id 的按钮用；其它业务等于 taskId）。 */
   actionId?: string;
+  /**
+   * xdfx（行动分析）专属：聊天记录按「行动id」(actionId) 而非「任务id」划分。
+   * 为 true 时，新建对话额外打 `metadata.actionId` 标签、对话列表按 actionId 过滤
+   * （仍保留 taskId 标签以维持任务深链对话「全局共享、不分用户」的后端语义）。
+   */
+  partitionByAction?: boolean;
 }
 
 const TASK_CONTEXT_STORAGE_KEY = "task.rwfxContext";
@@ -248,28 +254,75 @@ export interface DeleteTaskPurposeResult {
 }
 
 /**
- * 删除任务目的树（覆盖前清空 / 手动清除任务记录都走这里）。``delete_test=true`` 时
- * 用后端配置里的假数据（接口未开发完时用）；否则打真实接口。
+ * 删除记录的「按哪种 id 删」：
+ *   - ``task``（默认，rwfx）：传 ``?taskId=``，不传 actionId；
+ *   - ``action``（xdfx 行动分析）：传 ``?actionId=``，不传 taskId。
+ * rwfx 与 xdfx 共用同一个删除接口（``delete_url`` = dropSixOrSevenData）；
+ * 「不传」= 该参数**根本不出现在 URL 里**（只把要传的那个 key 放进 params，axios 自然省略另一个），
+ * 不是传空值/None。
+ */
+export type DeleteIdKind = "task" | "action";
+
+/**
+ * 删除任务/行动记录（rwfx 覆盖前清空 / 手动清除 / xdfx 清除行动记录都走这里）。
+ * ``delete_test=true`` 时用后端配置里的假数据（接口未开发完时用）；否则打真实接口
+ * （rwfx 传 ``taskId``、xdfx 传 ``actionId``，见 ``DeleteIdKind``）。
  */
 export async function deleteTaskPurpose(
-  taskId: string,
+  id: string,
+  opts?: { idKind?: DeleteIdKind },
 ): Promise<DeleteTaskPurposeResult> {
-  if (!taskId) return { message: "缺少 taskId", success: false };
+  const idKind = opts?.idKind ?? "task";
+  if (!id) return { message: idKind === "action" ? "缺少 actionId" : "缺少 taskId", success: false };
   const cfg = await fetchTaskDeeplinkConfig();
   if (cfg.deleteTest) {
     const m = cfg.mock.delete ?? {};
     return { message: typeof m.message === "string" ? m.message : "", success: m.success === true };
   }
   if (!cfg.deleteUrl) return { message: "缺少删除接口地址", success: false };
-  const body = await requestCrudService.get(cfg.deleteUrl, { taskId });
+  // 只放要传的那个 id key：另一参数直接不出现在 URL（axios 不会序列化缺省 key）。
+  const params = idKind === "action" ? { actionId: id } : { taskId: id };
+  // 该删除接口（dropSixOrSevenData）成功时**什么都不返回**（空响应体），所以只要请求没抛错
+  // （HTTP 成功）就直接判定为成功；仅当后端偶尔回了 {success:false} 这类显式失败标记才算失败。
+  const body = await requestCrudService.get(cfg.deleteUrl, params);
   const obj =
     body && typeof body === "object" ? (body as unknown as Record<string, unknown>) : {};
   return {
     message: typeof obj.message === "string" ? obj.message : "",
-    success: obj.success === true,
+    success: obj.success !== false,
   };
 }
 
+export interface ActionHistoryResult {
+  /** 是否存在可删除的「行动历史」记录。 */
+  exists: boolean;
+  /** 是否成功判定。接口未配置 / 请求失败 → false（调用方据此**不**做「无历史」拦截，仍允许删除）。 */
+  known: boolean;
+}
+
+/**
+ * 查询 xdfx「行动历史是否存在」（清除行动记录前的预检），按「行动id」调用。
+ *
+ * 查询接口（``action_history_url``）地址**目前待提供**：为空时直接返回
+ * ``{ exists: false, known: false }``——视作空白、不查询，也不阻断删除；后端配上真实地址后自动生效。
+ *
+ * ⚠️ 真实返回结构待定：拿到接口后按实际字段调整「是否存在」的判定（当前暂按 ``data`` 非空兜底）。
+ */
+export async function fetchActionHistoryExists(actionId: string): Promise<ActionHistoryResult> {
+  if (!actionId) return { exists: false, known: false };
+  const cfg = await fetchTaskDeeplinkConfig();
+  if (!cfg.actionHistoryUrl) return { exists: false, known: false };
+  try {
+    const body = await requestCrudService.get(cfg.actionHistoryUrl, { actionId });
+    // TODO(接口就绪)：按真实返回结构判定。暂按整包 body.data 非空作「存在历史」。
+    const data = body && typeof body === "object" ? (body as { data?: unknown }).data : null;
+    const exists = Array.isArray(data) ? data.length > 0 : data != null && data !== "";
+    return { exists, known: true };
+  } catch {
+    return { exists: false, known: false };
+  }
+}
+
 /* ----------------------------- 跳转地址 ----------------------------- */
 
 /** B 系统「树形完整编辑」页地址（问答后「编辑」按钮，新标签打开）。用同步缓存配置。 */
@@ -311,12 +364,29 @@ export function readTaskContext(): TaskContext | null {
       agentId: String(parsed.agentId),
       openingText: typeof parsed.openingText === "string" ? parsed.openingText : "",
       actionId: typeof parsed.actionId === "string" ? parsed.actionId : undefined,
+      partitionByAction: parsed.partitionByAction === true,
     };
   } catch {
     return null;
   }
 }
 
+/**
+ * 任务深链对话的 thread metadata 标签（既用于「新建对话」打标签，也用于对话列表过滤）。
+ *   - 普通业务（rwfx/3qfx）：`{ taskId }` —— 按任务划分（1:N）。
+ *   - xdfx（partitionByAction）：`{ taskId, actionId }` —— 额外按「行动id」划分聊天记录；
+ *     仍带 taskId 以保留后端「任务深链对话全局共享」的语义（后端据 metadata.taskId 跳过分用户过滤）。
+ * 无有效 taskId 时返回 undefined（调用方据此不打标签）。
+ */
+export function taskThreadMetadata(
+  ctx: TaskContext | null | undefined,
+): Record<string, unknown> | undefined {
+  if (!ctx?.taskId) return undefined;
+  return ctx.partitionByAction && ctx.actionId
+    ? { taskId: ctx.taskId, actionId: ctx.actionId }
+    : { taskId: ctx.taskId };
+}
+
 export function clearTaskContext(): void {
   try {
     sessionStorage.removeItem(TASK_CONTEXT_STORAGE_KEY);

frontend-web/src/core/auth/use-live-account.ts

@@ -0,0 +1,88 @@
+"use client";
+
+import { useEffect, useRef, useState } from "react";
+
+import {
+  AUTH_STATE_CHANGED_EVENT,
+  getAccountDisplayName,
+  getStoredAuth,
+} from "@/core/auth";
+import { isEmbedActive } from "@/core/embed/embed-session";
+
+const AUTH_STORAGE_KEY = "deerflow.auth";
+
+export interface LiveAccount {
+  /** 实时登录用户 id（随 storage/focus 刷新）。null = 未登录。 */
+  userId: string | null;
+  /** 实时显示名（邮箱 @ 前缀，否则 user_id）。 */
+  displayName: string;
+  /** 组件首次挂载时捕获的用户 id。 */
+  mountUserId: string | null;
+  /** 组件首次挂载时捕获的显示名。 */
+  mountDisplayName: string;
+  /**
+   * 当前登录账号与挂载时不一致 —— 即本视图加载后登录被切换过（通常是在另一个
+   * 标签页登录了别的账号）。归属/发布类操作必须据此提醒，避免误归属。
+   */
+  switched: boolean;
+}
+
+/**
+ * 跟踪「实时」登录账号，而不是挂载时缓存的值。
+ *
+ * 鉴权 token 存在 localStorage（非嵌入态下被同浏览器所有标签页共享），所以在
+ * 另一个标签页登录会**静默替换**本标签页 API 调用所用的 token。任何会决定归属的
+ * 界面（创建/发布智能体）都必须显示请求实际将以哪个账号执行，并在会话中途被切换
+ * 账号时给出提示 —— 否则会出现「用 A 账号创建却归到 B 账号名下」。
+ */
+export function useLiveAccount(): LiveAccount {
+  const mountRef = useRef<{ id: string | null; name: string } | null>(null);
+  if (mountRef.current === null) {
+    const auth = getStoredAuth();
+    mountRef.current = {
+      id: auth?.user_id ?? null,
+      name: getAccountDisplayName(auth),
+    };
+  }
+  const [live, setLive] = useState(() => mountRef.current!);
+
+  useEffect(() => {
+    function refresh() {
+      const auth = getStoredAuth();
+      const id = auth?.user_id ?? null;
+      const name = getAccountDisplayName(auth);
+      setLive((prev) =>
+        prev.id === id && prev.name === name ? prev : { id, name },
+      );
+    }
+    // 嵌入(iframe)态鉴权走按标签页的 sessionStorage、不跨标签，收不到 storage 事件
+    // —— 只挂在正常态；focus/visibilitychange 兜底刷新两种形态都有效。
+    function onStorage(e: StorageEvent) {
+      if (e.key === AUTH_STORAGE_KEY) {
+        refresh();
+      }
+    }
+    if (!isEmbedActive()) {
+      window.addEventListener("storage", onStorage);
+    }
+    window.addEventListener(AUTH_STATE_CHANGED_EVENT, refresh);
+    window.addEventListener("focus", refresh);
+    document.addEventListener("visibilitychange", refresh);
+    refresh();
+    return () => {
+      window.removeEventListener("storage", onStorage);
+      window.removeEventListener(AUTH_STATE_CHANGED_EVENT, refresh);
+      window.removeEventListener("focus", refresh);
+      document.removeEventListener("visibilitychange", refresh);
+    };
+  }, []);
+
+  const mount = mountRef.current!;
+  return {
+    userId: live.id,
+    displayName: live.name,
+    mountUserId: mount.id,
+    mountDisplayName: mount.name,
+    switched: live.id !== null && mount.id !== null && live.id !== mount.id,
+  };
+}

frontend-web/src/core/auth/wujie-ticket-login.ts

@@ -5,12 +5,13 @@ import {
   persistExternalLoginParams,
 } from "./external-login";
 import { authStorageSet } from "@/core/auth/scoped-storage";
+import { readRuntimeEnv } from "@/env";
 
-const AUTH_BASE_URL = (import.meta.env.VITE_AUTH_BASE_URL || "").replace(
+const AUTH_BASE_URL = (readRuntimeEnv("VITE_AUTH_BASE_URL") || "").replace(
   /\/$/,
   "",
 );
-const CONSUMER_URL = (import.meta.env.VITE_AIPI_CONSUMER_URL || "").replace(
+const CONSUMER_URL = (readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || "").replace(
   /\/$/,
   "",
 );

frontend-web/src/core/auth/yuser-login.ts

@@ -1,13 +1,24 @@
 import { requestCrudService } from "@/service/request-axios-service";
 import { authStorageGet, authStorageSet } from "@/core/auth/scoped-storage";
+import { readRuntimeEnv } from "@/env";
+import {
+  deleteExternalAccessTokenFields,
+  normalizeExternalAccessToken,
+  readStoredExternalAccessTokenValue,
+  readExternalAccessTokenValue,
+  writeExternalAccessTokenFields,
+  writeStoredExternalAccessToken,
+} from "@/core/auth/external-access-token";
 
-const CONSUMER_URL = import.meta.env.VITE_AIPI_CONSUMER_URL || "";
+const CONSUMER_URL = readRuntimeEnv("VITE_AIPI_CONSUMER_URL") || "";
 
 export const TOOLS_TOKEN_STORAGE_KEY = "tools_token";
 export const EXTERNAL_USER_ID_STORAGE_KEY = "userId";
 export const EXTERNAL_USER_INFO_STORAGE_KEY = "userInfo";
 export const GENERAL_QA_ROUTE = "/page/workspace/chats/new";
 
+const YUSER_INFO_CACHE_KEY = "deerflow.yuserInfoByYUserId";
+
 type UserDetailResponse = {
   data?: {
     id?: string;
@@ -15,6 +26,147 @@ type UserDetailResponse = {
   };
 };
 
+function readExternalUserInfo(): Record<string, unknown> {
+  try {
+    const raw = authStorageGet(EXTERNAL_USER_INFO_STORAGE_KEY);
+    if (!raw) return {};
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+      ? (parsed as Record<string, unknown>)
+      : {};
+  } catch {
+    return {};
+  }
+}
+
+function readStoredYUserId(info: Record<string, unknown>): string {
+  const value = info.yUserId;
+  return value == null ? "" : String(value).trim();
+}
+
+function normalizeExternalUserId(value: unknown): string {
+  if (value == null) return "";
+  const text = String(value).trim();
+  if (!text) return "";
+  const lowered = text.toLowerCase();
+  return lowered === "null" || lowered === "undefined" ? "" : text;
+}
+
+function maskToken(token: string): string {
+  if (!token) return "";
+  if (token.length <= 10) return `${token.slice(0, 2)}***(${token.length})`;
+  return `${token.slice(0, 6)}...${token.slice(-4)}(${token.length})`;
+}
+
+function summarizeUserInfo(info: Record<string, unknown>): Record<string, unknown> {
+  return {
+    keys: Object.keys(info),
+    yUserId: info.yUserId,
+    userId: info.userId,
+    userName: info.userName,
+    gateDepartName: info.gateDepartName,
+    typeName: info.typeName,
+    access_token: maskToken(normalizeExternalAccessToken(info.access_token)),
+    accessToken: maskToken(normalizeExternalAccessToken(info.accessToken)),
+  };
+}
+
+function logYUserLogin(step: string, payload: Record<string, unknown>): void {
+  if (typeof console === "undefined") return;
+  console.info(`[yUserId-login] ${step}`, payload);
+}
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+function isUsableExternalValue(value: unknown): boolean {
+  if (value == null) return false;
+  if (typeof value !== "string") return true;
+  const trimmed = value.trim();
+  if (!trimmed) return false;
+  const lowered = trimmed.toLowerCase();
+  return lowered !== "null" && lowered !== "undefined";
+}
+
+function readYUserInfoCache(): Record<string, Record<string, unknown>> {
+  if (typeof window === "undefined") return {};
+  try {
+    const raw = window.localStorage.getItem(YUSER_INFO_CACHE_KEY);
+    if (!raw) return {};
+    const parsed = JSON.parse(raw);
+    if (!isPlainObject(parsed)) return {};
+    const cache: Record<string, Record<string, unknown>> = {};
+    for (const [key, value] of Object.entries(parsed)) {
+      if (isPlainObject(value)) cache[key] = value;
+    }
+    return cache;
+  } catch {
+    return {};
+  }
+}
+
+function readCachedYUserInfo(yUserId: string): Record<string, unknown> {
+  return readYUserInfoCache()[yUserId] ?? {};
+}
+
+function writeCachedYUserInfo(yUserId: string, info: Record<string, unknown>): void {
+  if (typeof window === "undefined") return;
+  try {
+    const cache = readYUserInfoCache();
+    cache[yUserId] = info;
+    window.localStorage.setItem(YUSER_INFO_CACHE_KEY, JSON.stringify(cache));
+  } catch {
+    /* noop */
+  }
+}
+
+function buildExternalUserInfo(
+  yUserId: string,
+  result: Record<string, unknown>,
+  access_token: string | null | undefined,
+  previous: Record<string, unknown>,
+  cached: Record<string, unknown>,
+): Record<string, unknown> {
+  const next: Record<string, unknown> = { ...cached };
+  for (const [key, value] of Object.entries(result)) {
+    if (isUsableExternalValue(value)) {
+      next[key] = value;
+    }
+  }
+  next.yUserId = yUserId;
+  const externalUserId =
+    normalizeExternalUserId(result.id) ||
+    normalizeExternalUserId(result.userId) ||
+    normalizeExternalUserId(result.user_id) ||
+    yUserId;
+  next.userId = externalUserId;
+
+  const incomingAccessToken = readExternalAccessTokenValue(result);
+  if (incomingAccessToken) {
+    writeExternalAccessTokenFields(next, incomingAccessToken);
+    return next;
+  }
+
+  const queryAccessToken = normalizeExternalAccessToken(access_token);
+  if (queryAccessToken) {
+    writeExternalAccessTokenFields(next, queryAccessToken);
+    return next;
+  }
+
+  const previousYUserId = readStoredYUserId(previous);
+  const previousAccessToken =
+    previousYUserId === yUserId ? readExternalAccessTokenValue(previous) : "";
+  const cachedAccessToken = readExternalAccessTokenValue(cached);
+  const fallbackAccessToken = previousAccessToken || cachedAccessToken;
+  if (fallbackAccessToken) {
+    writeExternalAccessTokenFields(next, fallbackAccessToken);
+  } else {
+    deleteExternalAccessTokenFields(next);
+  }
+  return next;
+}
+
 /**
  * External login via yUserId + optional token (same flow as web-code Login.tsx):
  * persist tools_token, resolve user via consumer API, store userId/userInfo.
@@ -22,26 +174,61 @@ type UserDetailResponse = {
 export async function loginByYUserId(
   yUserId: string,
   token?: string | null,
+  access_token?: string | null,
 ): Promise<void> {
   if (token) {
     authStorageSet(TOOLS_TOKEN_STORAGE_KEY, token);
   }
 
+  const requestUrl = `${CONSUMER_URL}/cop/userDetailByYuserId`;
+  logYUserLogin("request", {
+    requestUrl,
+    yUserId,
+    hasToolsToken: Boolean(token),
+    queryAccessToken: maskToken(normalizeExternalAccessToken(access_token)),
+  });
+
   const res = (await requestCrudService.get(
-    `${CONSUMER_URL}/cop/userDetailByYuserId`,
+    requestUrl,
     { yuserId: yUserId },
   )) as UserDetailResponse;
 
   // consumer 返回 { accessToken, gateDepartName, typeName, userName }。
   // 一并存入路由参数 yUserId，使「应用管理」里 source=yUserId 的路由参数能取到（与
   // source=userName/gateDepartName/typeName 直接取接口值统一走 userInfo[source]）。
-  // 注意:接口也会返回 accessToken,但 XK/PG 及 source=accessToken 要用路由透传的
-  // access_token,故登录流程随后会用 persistAccessToken 覆盖 userInfo.accessToken。
+  // 注意:接口返回的 accessToken 优先；登录 URL 的 access_token 只在接口值为空时兜底。
+  // The consumer API may return accessToken. URL access_token is only used as
+  // a fallback when that API token is empty.
   const result = res.data ?? {};
-  authStorageSet(
-    EXTERNAL_USER_INFO_STORAGE_KEY,
-    JSON.stringify({ ...result, yUserId }),
-  );
+  logYUserLogin("response", {
+    keys: Object.keys(result),
+    id: result.id,
+    userId: result.userId,
+    user_id: result.user_id,
+    userName: result.userName,
+    gateDepartName: result.gateDepartName,
+    typeName: result.typeName,
+    access_token: maskToken(normalizeExternalAccessToken(result.access_token)),
+    accessToken: maskToken(normalizeExternalAccessToken(result.accessToken)),
+  });
+  const previous = readExternalUserInfo();
+  const cached = readCachedYUserInfo(yUserId);
+  const next = buildExternalUserInfo(yUserId, result, access_token, previous, cached);
+  const externalUserId = normalizeExternalUserId(next.userId);
+  if (externalUserId) {
+    authStorageSet(EXTERNAL_USER_ID_STORAGE_KEY, externalUserId);
+  }
+  const externalAccessToken = readExternalAccessTokenValue(next);
+  if (externalAccessToken) {
+    writeStoredExternalAccessToken(externalAccessToken);
+  }
+  authStorageSet(EXTERNAL_USER_INFO_STORAGE_KEY, JSON.stringify(next));
+  writeCachedYUserInfo(yUserId, next);
+  logYUserLogin("stored", {
+    userId: externalUserId,
+    topLevelAccessToken: maskToken(readStoredExternalAccessTokenValue()),
+    userInfo: summarizeUserInfo(next),
+  });
 }
 
 export function persistToolsToken(token: string): void {
@@ -49,27 +236,21 @@ export function persistToolsToken(token: string): void {
 }
 
 /**
- * 把内网登录路由参数 access_token 合并写入 userInfo.accessToken（覆盖接口返回的同名值）。
+ * 把内网登录路由参数 access_token 合并写入 userInfo.access_token / userInfo.accessToken。
  * 据此拼参的有：XK/PG 中任务 iframe（XK 用 accessToken、PG 用 access_token，二者均读
- * external-links.getAccessToken() = userInfo.accessToken）；以及「应用管理」里
- * source=accessToken 的轻应用路由参数（resolveRouteParamValue 取 userInfo.accessToken）。
+ * external-links.getAccessToken()）；以及「应用管理」里 source=access_token / accessToken
+ * 的轻应用路由参数（resolveRouteParamValue 统一读两种字段）。
  * 用合并而非覆盖整对象，避免抹掉 loginByYUserId 从 consumer 拿到的用户信息。
  */
 export function persistAccessToken(token: string): void {
-  const trimmed = token?.trim();
+  const trimmed = normalizeExternalAccessToken(token);
   if (!trimmed) return;
-  let info: Record<string, unknown> = {};
-  try {
-    const raw = authStorageGet(EXTERNAL_USER_INFO_STORAGE_KEY);
-    if (raw) {
-      const parsed = JSON.parse(raw);
-      if (parsed && typeof parsed === "object") {
-        info = parsed as Record<string, unknown>;
-      }
-    }
-  } catch {
-    info = {};
-  }
-  info.accessToken = trimmed;
+  const info = readExternalUserInfo();
+  writeExternalAccessTokenFields(info, trimmed);
+  writeStoredExternalAccessToken(trimmed);
   authStorageSet(EXTERNAL_USER_INFO_STORAGE_KEY, JSON.stringify(info));
+  const yUserId = readStoredYUserId(info);
+  if (yUserId) {
+    writeCachedYUserInfo(yUserId, info);
+  }
 }

frontend-web/src/core/clipboard.ts

@@ -0,0 +1,44 @@
+export async function copyTextToClipboard(text: string): Promise<void> {
+  let clipboardError: unknown;
+
+  if (typeof navigator !== "undefined" && navigator.clipboard?.writeText) {
+    try {
+      await navigator.clipboard.writeText(text);
+      return;
+    } catch (error) {
+      clipboardError = error;
+    }
+  }
+
+  if (typeof document === "undefined" || !document.body) {
+    throw clipboardError instanceof Error
+      ? clipboardError
+      : new Error("Clipboard is not available");
+  }
+
+  const textarea = document.createElement("textarea");
+  textarea.value = text;
+  textarea.setAttribute("readonly", "");
+  textarea.style.position = "fixed";
+  textarea.style.top = "0";
+  textarea.style.left = "0";
+  textarea.style.width = "1px";
+  textarea.style.height = "1px";
+  textarea.style.opacity = "0";
+
+  document.body.appendChild(textarea);
+  textarea.focus();
+  textarea.select();
+  textarea.setSelectionRange(0, textarea.value.length);
+
+  try {
+    const copied = document.execCommand("copy");
+    if (!copied) {
+      throw clipboardError instanceof Error
+        ? clipboardError
+        : new Error("Copy command failed");
+    }
+  } finally {
+    textarea.remove();
+  }
+}

frontend-web/src/core/curator/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   CuratorConfig,
@@ -27,12 +28,21 @@ export interface CuratorConfigUpdatePayload {
 export async function updateCuratorConfig(
   payload: CuratorConfigUpdatePayload,
 ): Promise<CuratorConfig> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/config`, {
+  const url = `${getBackendBaseURL()}/api/curator/config`;
+  const response = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(payload),
   });
-  return response.json() as Promise<CuratorConfig>;
+  const result = (await response.json()) as CuratorConfig;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-策展-更新配置",
+    url,
+    reqParam: payload,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface RunCuratorResult {
@@ -42,13 +52,26 @@ export interface RunCuratorResult {
 }
 
 export async function runCurator(): Promise<RunCuratorResult> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/run`, {
-    method: "POST",
+  const url = `${getBackendBaseURL()}/api/curator/run`;
+  const response = await apiFetch(url, { method: "POST" });
+  const result = (await response.json()) as RunCuratorResult;
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-策展-手动触发策展",
+    url,
+    returnParam: result,
   });
-  return response.json() as Promise<RunCuratorResult>;
+  return result;
 }
 
 export async function getCuratorLogs(): Promise<CuratorLogs> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/logs`);
-  return response.json() as Promise<CuratorLogs>;
+  const url = `${getBackendBaseURL()}/api/curator/logs`;
+  const response = await apiFetch(url);
+  const result = (await response.json()) as CuratorLogs;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-策展-查看运行日志",
+    url,
+  });
+  return result;
 }

frontend-web/src/core/custom-prompts/index.ts

@@ -2,6 +2,7 @@ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** A user-defined reusable prompt, bound to the account (stored server-side). */
 export interface CustomPrompt {
@@ -27,6 +28,12 @@ async function listUserPrompts(): Promise<CustomPrompt[]> {
   const res = await apiFetch(baseUrl());
   if (!res.ok) throw new Error(`Failed to load prompts: ${res.statusText}`);
   const data = (await res.json()) as { prompts: CustomPrompt[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-自定义提示词-查询",
+    url: "/api/user-prompts",
+    returnParam: data.prompts,
+  });
   return data.prompts;
 }
 
@@ -44,7 +51,15 @@ async function createUserPrompt(input: {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create prompt: ${res.statusText}`);
   }
-  return res.json() as Promise<CustomPrompt>;
+  const created = (await res.json()) as CustomPrompt;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-自定义提示词-新增",
+    url: "/api/user-prompts",
+    reqParam: input,
+    returnParam: created,
+  });
+  return created;
 }
 
 async function updateUserPrompt(
@@ -60,7 +75,15 @@ async function updateUserPrompt(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update prompt: ${res.statusText}`);
   }
-  return res.json() as Promise<CustomPrompt>;
+  const updated = (await res.json()) as CustomPrompt;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-自定义提示词-编辑",
+    url: `/api/user-prompts/${id}`,
+    reqParam: input,
+    returnParam: updated,
+  });
+  return updated;
 }
 
 async function deleteUserPrompt(id: string): Promise<void> {
@@ -71,6 +94,12 @@ async function deleteUserPrompt(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to delete prompt: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-自定义提示词-删除",
+    url: `/api/user-prompts/${id}`,
+    reqParam: { id },
+  });
 }
 
 /** Reactive list of the current user's saved prompts (server-backed). */

frontend-web/src/core/embed/embed-session.ts

@@ -39,6 +39,12 @@ export interface EmbedSession {
   theme: EmbedTheme;
   /** 隐藏深链底部「快捷跳转」栏（TaskJumpBar：底部按钮 + 右侧悬浮菜单）。 */
   hideJump: boolean;
+  /**
+   * 仅去全局 chrome（Header 导航栏 + PageSidebar 侧边栏），**不**强制主题、**不**隔离鉴权。
+   * 区别于 `embed`：嵌入态会额外强制主题 + 走 sessionStorage 隔离登录身份；`hideChrome` 只想要
+   * 一个干净的全屏页面（如「大屏绘制」`?hideChrome=1`），其余行为与正常标签页完全一致。
+   */
+  hideChrome: boolean;
   /** 独立会话：鉴权身份按本标签页隔离（走 sessionStorage），用于同浏览器登录不同账号互不覆盖。 */
   isolate: boolean;
 }
@@ -69,6 +75,11 @@ export function readHideJumpParam(search: string): FlagParam {
   return readFlagParam(search, "hideJump");
 }
 
+/** 读 URL 里的 `hideChrome` 三态（仅去全局导航栏 + 侧边栏）。 */
+export function readHideChromeParam(search: string): FlagParam {
+  return readFlagParam(search, "hideChrome");
+}
+
 /** 读 URL 里的 `isolate` 三态（独立会话登录）。 */
 export function readIsolateParam(search: string): FlagParam {
   return readFlagParam(search, "isolate");
@@ -99,6 +110,7 @@ export function readEmbedSession(): EmbedSession | null {
       embed: p.embed === true,
       theme: p.theme === "dark" ? "dark" : "light",
       hideJump: p.hideJump === true,
+      hideChrome: p.hideChrome === true,
       isolate: p.isolate === true,
     };
   } catch {
@@ -109,7 +121,7 @@ export function readEmbedSession(): EmbedSession | null {
 /** 写会话；无任何开关置位时直接清除（保持 sessionStorage 干净）。隐私模式/quota 异常静默失败。 */
 function writeEmbedSession(next: EmbedSession): void {
   try {
-    if (!next.embed && !next.hideJump && !next.isolate) {
+    if (!next.embed && !next.hideJump && !next.hideChrome && !next.isolate) {
       sessionStorage.removeItem(EMBED_SESSION_KEY);
       return;
     }
@@ -129,6 +141,16 @@ export function isJumpBarHidden(): boolean {
   return readEmbedSession()?.hideJump === true;
 }
 
+/**
+ * 本标签页是否要去全局 chrome（Header 导航栏 + PageSidebar 侧边栏）。
+ * `embed` 已隐含去 chrome，故这里取「embed || hideChrome」之并——任一置位都隐藏。
+ * 与 `isEmbedActive()` 的差别：`hideChrome` 不强制主题、不隔离鉴权，只去 chrome。
+ */
+export function isChromeHidden(): boolean {
+  const s = readEmbedSession();
+  return s?.embed === true || s?.hideChrome === true;
+}
+
 /**
  * 本标签页是否处于独立会话态：鉴权身份按标签页隔离（走 sessionStorage）。
  * `embed` 已隐含同样的隔离，故 `authStorage()` 取「embed || isolate」之并；这里只判 `isolate`，
@@ -146,7 +168,7 @@ export function isIsolatedSession(): boolean {
 export function syncEmbedSessionFromSearch(search: string): void {
   const cur =
     readEmbedSession() ??
-    { embed: false, theme: "light" as EmbedTheme, hideJump: false, isolate: false };
+    { embed: false, theme: "light" as EmbedTheme, hideJump: false, hideChrome: false, isolate: false };
   const next: EmbedSession = { ...cur };
 
   const embedParam = readEmbedParam(search);
@@ -161,6 +183,10 @@ export function syncEmbedSessionFromSearch(search: string): void {
   if (hideJumpParam === "on") next.hideJump = true;
   else if (hideJumpParam === "off") next.hideJump = false;
 
+  const hideChromeParam = readHideChromeParam(search);
+  if (hideChromeParam === "on") next.hideChrome = true;
+  else if (hideChromeParam === "off") next.hideChrome = false;
+
   const isolateParam = readIsolateParam(search);
   if (isolateParam === "on") next.isolate = true;
   else if (isolateParam === "off") next.isolate = false;
@@ -208,6 +234,6 @@ export function resolveForcedEmbedTheme(search: string): EmbedTheme | undefined
 export function setIsolatedSession(on: boolean): void {
   const cur =
     readEmbedSession() ??
-    { embed: false, theme: "light" as EmbedTheme, hideJump: false, isolate: false };
+    { embed: false, theme: "light" as EmbedTheme, hideJump: false, hideChrome: false, isolate: false };
   writeEmbedSession({ ...cur, isolate: on });
 }

frontend-web/src/core/knowledge/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   BatchIngestPayload,
@@ -41,15 +42,31 @@ export async function listKnowledgeNotes(params: KnowledgeListParams = {}) {
   if (params.folder !== undefined) qs.set("folder", params.folder);
   qs.set("limit", String(params.limit ?? 20));
   qs.set("offset", String(params.offset ?? 0));
-  return parseResponse<KnowledgeListResponse>(
+  const result = await parseResponse<KnowledgeListResponse>(
     await apiFetch(`${baseUrl()}/notes?${qs.toString()}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-检索",
+    url: `${baseUrl()}/notes?${qs.toString()}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function getKnowledgeNote(noteId: string) {
-  return parseResponse<KnowledgeNote>(
+  const result = await parseResponse<KnowledgeNote>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-知识库-查看",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}`,
+    reqParam: { noteId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function createKnowledgeNote(data: {
@@ -67,6 +84,13 @@ export async function createKnowledgeNote(data: {
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-新建",
+    url: `${baseUrl()}/notes`,
+    reqParam: data,
+    returnParam: res.note,
+  });
   return res.note;
 }
 
@@ -81,22 +105,38 @@ export async function updateKnowledgeNote(
     folder: string | null;
   }>,
 ) {
-  return parseResponse<KnowledgeNote>(
+  const result = await parseResponse<KnowledgeNote>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}`, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-修改",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}`,
+    reqParam: { noteId, data },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteKnowledgeNote(noteId: string, hard = false) {
-  return parseResponse<{ ok: boolean; note_id: string }>(
+  const result = await parseResponse<{ ok: boolean; note_id: string }>(
     await apiFetch(
       `${baseUrl()}/notes/${encodeURIComponent(noteId)}${hard ? "?hard=true" : ""}`,
       { method: "DELETE" },
     ),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-删除",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}${hard ? "?hard=true" : ""}`,
+    reqParam: { noteId, hard },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function searchKnowledge(query: string, limit = 8) {
@@ -107,11 +147,18 @@ export async function searchKnowledge(query: string, limit = 8) {
       body: JSON.stringify({ query, mode: "keyword", limit }),
     }),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-检索",
+    url: `${baseUrl()}/search`,
+    reqParam: { query, mode: "keyword", limit },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
 export async function ingestThread(threadId: string, payload: IngestThreadPayload = {}) {
-  return parseResponse<{
+  const result = await parseResponse<{
     note?: KnowledgeNote;
     created?: boolean;
     queued?: boolean;
@@ -122,16 +169,32 @@ export async function ingestThread(threadId: string, payload: IngestThreadPayloa
       body: JSON.stringify(payload),
     }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/thread/${encodeURIComponent(threadId)}`,
+    reqParam: { threadId, payload },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function ingestThreadsBatch(payload: BatchIngestPayload = {}) {
-  return parseResponse<BatchIngestResult>(
+  const result = await parseResponse<BatchIngestResult>(
     await apiFetch(`${baseUrl()}/ingest/threads/batch`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(payload),
     }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/threads/batch`,
+    reqParam: payload,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface IngestFileResult {
@@ -162,9 +225,17 @@ export async function ingestKnowledgeFile(
   if (opts.template_id) form.append("template_id", opts.template_id);
   if (opts.folder) form.append("folder", opts.folder);
   // No Content-Type header — the browser sets the multipart boundary itself.
-  return parseResponse<IngestFileResult>(
+  const result = await parseResponse<IngestFileResult>(
     await apiFetch(`${baseUrl()}/ingest/file`, { method: "POST", body: form }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/file`,
+    reqParam: { fileName: file.name, ...opts },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Resolve `[[wikilink]]` targets to note ids / vault pages. */
@@ -191,15 +262,30 @@ export async function resolveNoteWikilinks(noteId: string) {
 
 /** Fetch a raw vault meta/hub Markdown page (no DB note) by its path. */
 export async function fetchVaultPage(path: string) {
-  return parseResponse<VaultPage>(
+  const result = await parseResponse<VaultPage>(
     await apiFetch(`${baseUrl()}/vault-page?path=${encodeURIComponent(path)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-知识库-Vault页面查看",
+    url: `${baseUrl()}/vault-page?path=${encodeURIComponent(path)}`,
+    reqParam: { path },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function exportKnowledgeGraph() {
-  return parseResponse<GraphExportResult>(
+  const result = await parseResponse<GraphExportResult>(
     await apiFetch(`${baseUrl()}/export/graph`, { method: "POST" }),
   );
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-知识库-导出",
+    url: `${baseUrl()}/export/graph`,
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Absolute URL of a served wiki-export file (for iframe / download). */
@@ -225,6 +311,13 @@ export async function listNoteVersions(noteId: string) {
   const res = await parseResponse<{ items: KnowledgeVersion[] }>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}/versions`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-历史版本列表",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}/versions`,
+    reqParam: { noteId },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -237,23 +330,44 @@ export async function listDuplicates() {
   const res = await parseResponse<{ groups: DuplicateGroup[] }>(
     await apiFetch(`${baseUrl()}/duplicates`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-重复项列表",
+    url: `${baseUrl()}/duplicates`,
+    returnParam: res.groups,
+  });
   return res.groups;
 }
 
 export async function mergeKnowledgeNotes(primaryId: string, duplicateIds: string[]) {
-  return parseResponse<{ note: KnowledgeNote }>(
+  const result = await parseResponse<{ note: KnowledgeNote }>(
     await apiFetch(`${baseUrl()}/merge`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ primary_id: primaryId, duplicate_ids: duplicateIds }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-合并",
+    url: `${baseUrl()}/merge`,
+    reqParam: { primary_id: primaryId, duplicate_ids: duplicateIds },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function reindexKnowledge() {
-  return parseResponse<{ reindexed: number; embedding_enabled: number }>(
+  const result = await parseResponse<{ reindexed: number; embedding_enabled: number }>(
     await apiFetch(`${baseUrl()}/reindex`, { method: "POST" }),
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-知识库-重建索引",
+    url: `${baseUrl()}/reindex`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface KnowledgeGraph {
@@ -262,7 +376,14 @@ export interface KnowledgeGraph {
 }
 
 export async function getKnowledgeGraph() {
-  return parseResponse<KnowledgeGraph>(await apiFetch(`${baseUrl()}/graph`));
+  const result = await parseResponse<KnowledgeGraph>(await apiFetch(`${baseUrl()}/graph`));
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-图谱查看",
+    url: `${baseUrl()}/graph`,
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- graph blacklist ---
@@ -278,26 +399,48 @@ export async function getGraphBlacklist() {
   const res = await parseResponse<{ items: GraphBlacklistItem[] }>(
     await apiFetch(`${baseUrl()}/graph/blacklist`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-图谱黑名单列表",
+    url: `${baseUrl()}/graph/blacklist`,
+    returnParam: res.items,
+  });
   return res.items;
 }
 
 /** Blacklist node labels (entity names / note titles); they disappear from the graph. */
 export async function addGraphBlacklist(labels: string[]) {
-  return parseResponse<{ added: number; items: GraphBlacklistItem[] }>(
+  const result = await parseResponse<{ added: number; items: GraphBlacklistItem[] }>(
     await apiFetch(`${baseUrl()}/graph/blacklist`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ labels }),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-图谱黑名单新增",
+    url: `${baseUrl()}/graph/blacklist`,
+    reqParam: { labels },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function removeGraphBlacklist(entryId: string) {
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/graph/blacklist/${encodeURIComponent(entryId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-图谱黑名单删除",
+    url: `${baseUrl()}/graph/blacklist/${encodeURIComponent(entryId)}`,
+    reqParam: { entryId },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- folders (user-managed directories) ---
@@ -306,6 +449,12 @@ export async function listKnowledgeFolders() {
   const res = await parseResponse<{ items: KnowledgeFolder[] }>(
     await apiFetch(`${baseUrl()}/folders`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-目录列表",
+    url: `${baseUrl()}/folders`,
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -317,6 +466,13 @@ export async function createKnowledgeFolder(path: string) {
       body: JSON.stringify({ path }),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-目录新建",
+    url: `${baseUrl()}/folders`,
+    reqParam: { path },
+    returnParam: res.folder,
+  });
   return res.folder;
 }
 
@@ -328,16 +484,31 @@ export async function renameKnowledgeFolder(folderId: string, path: string) {
       body: JSON.stringify({ path }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-目录重命名",
+    url: `${baseUrl()}/folders/${encodeURIComponent(folderId)}`,
+    reqParam: { folderId, path },
+    returnParam: res.folder,
+  });
   return res.folder;
 }
 
 export async function deleteKnowledgeFolder(folderId: string, reassignTo?: string) {
   const qs = reassignTo ? `?reassign_to=${encodeURIComponent(reassignTo)}` : "";
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/folders/${encodeURIComponent(folderId)}${qs}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-目录删除",
+    url: `${baseUrl()}/folders/${encodeURIComponent(folderId)}${qs}`,
+    reqParam: { folderId, reassignTo },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- extraction prompt templates ---
@@ -350,6 +521,13 @@ export async function listExtractTemplates(scope?: ExtractTemplateScope, enabled
   const res = await parseResponse<{ items: KnowledgeExtractTemplate[] }>(
     await apiFetch(`${baseUrl()}/extract-templates${q ? `?${q}` : ""}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-抽取模板列表",
+    url: `${baseUrl()}/extract-templates${q ? `?${q}` : ""}`,
+    reqParam: { scope, enabledOnly },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -370,6 +548,13 @@ export async function createExtractTemplate(data: ExtractTemplateInput) {
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-抽取模板新建",
+    url: `${baseUrl()}/extract-templates`,
+    reqParam: data,
+    returnParam: res.template,
+  });
   return res.template;
 }
 
@@ -384,13 +569,28 @@ export async function updateExtractTemplate(
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-抽取模板修改",
+    url: `${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`,
+    reqParam: { templateId, data },
+    returnParam: res.template,
+  });
   return res.template;
 }
 
 export async function deleteExtractTemplate(templateId: string) {
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-抽取模板删除",
+    url: `${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`,
+    reqParam: { templateId },
+    returnParam: result,
+  });
+  return result;
 }

frontend-web/src/core/llm-metrics/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 export interface LlmMetric {
   id: string;
@@ -54,14 +55,21 @@ function buildQuery(filters: LlmMetricsListQuery): string {
 export async function loadLlmMetrics(
   query: LlmMetricsListQuery,
 ): Promise<LlmMetricsListResponse> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/llm-metrics${buildQuery(query)}`,
-  );
+  const url = `${getBackendBaseURL()}/api/admin/llm-metrics${buildQuery(query)}`;
+  const response = await apiFetch(url);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to load LLM metrics");
   }
-  return (await response.json()) as LlmMetricsListResponse;
+  const result = (await response.json()) as LlmMetricsListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-模型指标-查询调用列表",
+    url,
+    reqParam: query,
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }
 
 /**
@@ -71,13 +79,18 @@ export async function loadLlmMetrics(
 export async function downloadLlmMetricsExcel(
   filters: LlmMetricsFilters,
 ): Promise<void> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/llm-metrics/export${buildQuery(filters)}`,
-  );
+  const requestUrl = `${getBackendBaseURL()}/api/admin/llm-metrics/export${buildQuery(filters)}`;
+  const response = await apiFetch(requestUrl);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to export LLM metrics");
   }
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-模型指标-导出Excel",
+    url: requestUrl,
+    reqParam: filters,
+  });
   const blob = await response.blob();
   const url = URL.createObjectURL(blob);
   const filename = (() => {

frontend-web/src/core/log/y-log-config.ts

@@ -0,0 +1,68 @@
+/**
+ * 操作日志（Y-Log）上报的运行时配置：从后端公开只读接口
+ * ``GET /api/public/config/y-log`` 读取（地址 + 开关在后端 ``config.yaml`` 的
+ * ``y_log`` 段，改完即时生效，前端无需重建）。
+ *
+ * 仿 [[task-deeplink-config]]：
+ *   - ``fetchYLogConfig()`` 拉取并模块级缓存（启动早期预热一次即可）。
+ *   - ``getCachedYLogConfig()`` 同步读缓存（``writeYLog`` 即发即忘，必须同步可用）。
+ *
+ * 拉取失败 → 用内置默认值兜底（``enabled:false``，但保留默认地址），绝不抛错。
+ */
+
+import { apiFetch } from "@/core/api/fetch-client";
+import { getBackendBaseURL } from "@/core/config";
+
+export interface YLogConfig {
+  /** 是否启用上报。 */
+  enabled: boolean;
+  /** 上报外部接口完整地址（POST）。 */
+  writeUrl: string;
+}
+
+/** 内置默认地址（后端拿不到 / 未配置时的兜底地址；enabled 默认 false 不上报）。 */
+const DEFAULT_WRITE_URL = "https://ch1.b.uat.4.cn/api/y-log/write";
+
+/** 内置默认配置（拉取失败兜底；默认不上报）。 */
+export const DEFAULT_Y_LOG_CONFIG: YLogConfig = {
+  enabled: false,
+  writeUrl: DEFAULT_WRITE_URL,
+};
+
+/** 后端 snake_case 响应 → 前端 camelCase；缺字段回退默认值。 */
+function normalize(body: unknown): YLogConfig {
+  const o = body && typeof body === "object" ? (body as Record<string, unknown>) : {};
+  const writeUrl =
+    typeof o.write_url === "string" && o.write_url.trim() ? o.write_url.trim() : DEFAULT_WRITE_URL;
+  return {
+    enabled: o.enabled === true,
+    writeUrl,
+  };
+}
+
+let cached: YLogConfig | null = null;
+let inflight: Promise<YLogConfig> | null = null;
+
+/** 拉取（带模块级缓存 + 并发去重）；失败回退默认值。 */
+export async function fetchYLogConfig(): Promise<YLogConfig> {
+  if (cached) return cached;
+  if (inflight) return inflight;
+  inflight = (async () => {
+    try {
+      const res = await apiFetch(`${getBackendBaseURL()}/api/public/config/y-log`);
+      if (!res.ok) throw new Error(`y-log config ${res.status}`);
+      cached = normalize(await res.json());
+    } catch {
+      cached = { ...DEFAULT_Y_LOG_CONFIG };
+    } finally {
+      inflight = null;
+    }
+    return cached;
+  })();
+  return inflight;
+}
+
+/** 同步读缓存（未拉取过则返回默认值，默认 enabled:false 不上报）。 */
+export function getCachedYLogConfig(): YLogConfig {
+  return cached ?? DEFAULT_Y_LOG_CONFIG;
+}

frontend-web/src/core/log/y-log-token.ts

@@ -0,0 +1,34 @@
+/**
+ * token1（token 登录用的上游 token，即 URL 参数 ``?authToken=``）的存取。
+ *
+ * 复用 [[scoped-storage]] 的 ``authStorage*``：嵌入(iframe)态自动落 sessionStorage、
+ * 正常态落 localStorage，使 iframe 里登录的用户 token1 与正常标签页**完全隔离**、
+ * 互不污染（与其它鉴权键同一隔离语义）。
+ *
+ * 只有用 token 登录（存在 token1）才上报操作日志；非 token 登录不写 token1，
+ * 该会话从此不上报（见 [[y-log]]）。
+ */
+
+import {
+  authStorageGet,
+  authStorageRemove,
+  authStorageSet,
+} from "@/core/auth/scoped-storage";
+
+const Y_LOG_TOKEN_KEY = "ylog.token1";
+
+/** 持久化 token1（token 登录成功后调用；空值忽略）。 */
+export function persistYLogToken(token: string | null | undefined): void {
+  const t = token?.trim();
+  if (t) authStorageSet(Y_LOG_TOKEN_KEY, t);
+}
+
+/** 读 token1（无则返回 null → 不上报）。 */
+export function readYLogToken(): string | null {
+  return authStorageGet(Y_LOG_TOKEN_KEY);
+}
+
+/** 清除 token1（登出时调用）。 */
+export function clearYLogToken(): void {
+  authStorageRemove(Y_LOG_TOKEN_KEY);
+}

frontend-web/src/core/log/y-log.ts

@@ -0,0 +1,109 @@
+/**
+ * 操作日志（Y-Log）上报主函数。
+ *
+ * 把用户的关键操作（点击/查询/查看/增删改/启停/导入导出/登录登出/问答等）上报到
+ * 外部日志接口（见 [[y-log-config]] 的 ``writeUrl``）。**前端直连**该接口，不经后端代理。
+ *
+ * 硬性约束（务必满足）：
+ *   ① **token 门控**：无 token1（非 token 登录）→ 直接 return，不发请求。
+ *   ② **配置门控**：``enabled=false`` 或 ``writeUrl`` 为空 → 不发请求。
+ *   ③ **异步即发即忘**：``void fetch(...)`` 不被 ``await``，绝不阻塞业务/UI。
+ *   ④ **永不抛错**：整体包在 ``try/catch`` 中，任何异常（取 token/读配置/序列化/网络）静默吞掉。
+ *   ⑤ **只报成功**：埋点只放在操作成功路径，``optResult`` 恒为 ``0``。
+ *   ⑥ **失败静默**：``fetch`` 的 ``.catch`` 吞掉网络/跨域失败。
+ */
+
+import { getCachedYLogConfig } from "@/core/log/y-log-config";
+import { readYLogToken } from "@/core/log/y-log-token";
+
+/** 操作类型，数值与外部系统约定一致，不可改。 */
+export enum OptType {
+  login = 0,
+  logout = 1,
+  search = 3,
+  view = 4,
+  edit = 5,
+  delete = 6,
+  import = 7,
+  export = 8,
+  create = 9,
+  disabled = 10,
+  enabled = 11,
+  other = 12,
+}
+
+export interface WriteYLogParams {
+  /** 操作类型枚举。 */
+  optType: OptType;
+  /** 操作详情（简短描述），统一「CM助手-全量-xxx」。 */
+  optDetail: string;
+  /** 操作命中的接口地址（完整或相对，内部自动转相对，去 ip/host）。 */
+  url: string;
+  /** 入参（对象自动 JSON 序列化）。 */
+  reqParam?: unknown;
+  /** 返回参数（对象自动 JSON 序列化）。 */
+  returnParam?: unknown;
+  /** 登出 / 页面卸载等场景置 true，保证请求在卸载时仍能发出。 */
+  keepalive?: boolean;
+}
+
+/** 入参/返回体积上限，超出裁剪。 */
+const MAX_PARAM_LEN = 50_000;
+
+/** 上报一条操作日志（异步即发即忘，永不抛错）。 */
+export function writeYLog(params: WriteYLogParams): void {
+  try {
+    const token = readYLogToken();
+    if (!token) return; // ① 无 token1 不上报
+    const { enabled, writeUrl } = getCachedYLogConfig();
+    if (!enabled || !writeUrl) return; // ② 配置门控
+    if (typeof fetch === "undefined") return;
+
+    const body = {
+      optType: params.optType,
+      optDetail: params.optDetail ?? "",
+      url: toRelativeUrl(params.url ?? ""), // ③ 去 ip/host
+      reqParam: toParamString(params.reqParam), // ④ 对象→字符串+裁剪
+      returnParam: toParamString(params.returnParam),
+      optResult: 0, // ⑤ 恒为 0（只报成功）
+    };
+
+    void fetch(writeUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`,
+      },
+      body: JSON.stringify(body),
+      keepalive: params.keepalive ?? false,
+    }).catch(() => undefined); // ⑥ 失败静默
+  } catch {
+    /* 绝不影响业务 */
+  }
+}
+
+function toParamString(v: unknown): string {
+  if (v == null) return "";
+  const s = typeof v === "string" ? v : safeStringify(v);
+  return s.length > MAX_PARAM_LEN ? `${s.slice(0, MAX_PARAM_LEN)}…[truncated]` : s;
+}
+
+function safeStringify(v: unknown): string {
+  try {
+    return JSON.stringify(v) ?? "";
+  } catch {
+    return String(v);
+  }
+}
+
+/** 去掉 ip/host，只留 path + query。 */
+function toRelativeUrl(url: string): string {
+  if (!url) return "";
+  try {
+    const base = typeof window !== "undefined" ? window.location.origin : "http://localhost";
+    const u = new URL(url, base);
+    return `${u.pathname}${u.search}`;
+  } catch {
+    return url;
+  }
+}

frontend-web/src/core/mcp/api.ts

@@ -1,11 +1,19 @@
 import { getBackendBaseURL } from "@/core/config";
 import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type { MCPConfig } from "./types";
 
 export async function loadMCPConfig() {
   const response = await apiFetch(`${getBackendBaseURL()}/api/mcp/config`);
-  return response.json() as Promise<MCPConfig>;
+  const data = (await response.json()) as MCPConfig;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-MCP服务-配置查看",
+    url: "/api/mcp/config",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateMCPConfig(config: MCPConfig) {
@@ -16,5 +24,13 @@ export async function updateMCPConfig(config: MCPConfig) {
     },
     body: JSON.stringify(config),
   });
-  return response.json();
+  const data = await response.json();
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-MCP服务-配置编辑",
+    url: "/api/mcp/config",
+    reqParam: config,
+    returnParam: data,
+  });
+  return data;
 }

frontend-web/src/core/memory/api.ts

@@ -2,6 +2,7 @@
 
 import { apiFetch } from "../api";
 import { getBackendBaseURL } from "../config";
+import { OptType, writeYLog } from "../log/y-log";
 
 import type {
   MemorySearchMode,
@@ -54,7 +55,15 @@ export async function loadMemoryV2(agent?: string): Promise<MemoryV2Data> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/memory/v2${agentQuery(agent)}`,
   );
-  return readJson<MemoryV2Data>(response, "Failed to fetch memory");
+  const data = await readJson<MemoryV2Data>(response, "Failed to fetch memory");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-记忆-查看",
+    url: `/api/memory/v2${agentQuery(agent)}`,
+    reqParam: { agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function addMemoryEntry(
@@ -70,7 +79,15 @@ export async function addMemoryEntry(
       body: JSON.stringify({ target, content }),
     },
   );
-  return readJson<MemoryV2Data>(response, "Failed to add memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to add memory entry");
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-记忆-新增",
+    url: `/api/memory/v2/entries${agentQuery(agent)}`,
+    reqParam: { target, content, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function replaceMemoryEntry(
@@ -87,7 +104,15 @@ export async function replaceMemoryEntry(
       body: JSON.stringify({ target, old_text: oldText, content }),
     },
   );
-  return readJson<MemoryV2Data>(response, "Failed to replace memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to replace memory entry");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-记忆-编辑",
+    url: `/api/memory/v2/entries${agentQuery(agent)}`,
+    reqParam: { target, old_text: oldText, content, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function deleteMemoryEntry(
@@ -103,14 +128,29 @@ export async function deleteMemoryEntry(
     `${getBackendBaseURL()}/api/memory/v2/entries?${params.toString()}`,
     { method: "DELETE" },
   );
-  return readJson<MemoryV2Data>(response, "Failed to delete memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to delete memory entry");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-记忆-删除",
+    url: `/api/memory/v2/entries?${params.toString()}`,
+    reqParam: { target, old_text: oldText, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 // --- 配置 ---
 
 export async function loadMemoryConfig(): Promise<MemoryV2ConfigResponse> {
   const response = await apiFetch(`${getBackendBaseURL()}/api/memory/v2/config`);
-  return readJson<MemoryV2ConfigResponse>(response, "Failed to fetch memory config");
+  const data = await readJson<MemoryV2ConfigResponse>(response, "Failed to fetch memory config");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-记忆-配置查看",
+    url: "/api/memory/v2/config",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function patchMemoryConfig(
@@ -121,7 +161,15 @@ export async function patchMemoryConfig(
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ overrides }),
   });
-  return readJson<MemoryV2ConfigResponse>(response, "Failed to update memory config");
+  const data = await readJson<MemoryV2ConfigResponse>(response, "Failed to update memory config");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-记忆-配置编辑",
+    url: "/api/memory/v2/config",
+    reqParam: { overrides },
+    returnParam: data,
+  });
+  return data;
 }
 
 // --- Hindsight 检索 ---
@@ -139,5 +187,13 @@ export async function searchMemory(
       body: JSON.stringify({ query, mode }),
     },
   );
-  return readJson<MemorySearchResult>(response, "Failed to search memory");
+  const data = await readJson<MemorySearchResult>(response, "Failed to search memory");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-记忆-检索",
+    url: `/api/memory/v2/search${agentQuery(agent)}`,
+    reqParam: { query, mode, agent },
+    returnParam: data,
+  });
+  return data;
 }

frontend-web/src/core/messages/utils.ts

@@ -212,21 +212,33 @@ export function extractToolResultPayload(
 }
 
 const THINK_TAG_RE = /<think>\s*([\s\S]*?)\s*<\/think>/g;
+const THINK_OPEN = "<think>";
 
 function splitInlineReasoning(content: string) {
   const reasoningParts: string[] = [];
-  const cleaned = content
-    .replace(THINK_TAG_RE, (_, reasoning: string) => {
+  // 1) 先抽出所有**已闭合**的 <think>...</think>。
+  let working = content.replace(THINK_TAG_RE, (_, reasoning: string) => {
     const normalized = reasoning.trim();
     if (normalized) {
       reasoningParts.push(normalized);
     }
     return "";
-    })
-    .trim();
+  });
+
+  // 2) 流式中常见**未闭合**的 <think>（还没等到 </think> 就先到达）：把开标签之后的内容
+  //    当作「实时思考」抽到 reasoning、从答案正文里移除。否则模型慢/先思考时，用户既会看到
+  //    字面 "<think>"，又会因答案区长时间空白而以为卡死。这样思考内容会实时流进思考区。
+  const openIdx = working.indexOf(THINK_OPEN);
+  if (openIdx !== -1 && !working.slice(openIdx).includes("</think>")) {
+    const partial = working.slice(openIdx + THINK_OPEN.length).trim();
+    if (partial) {
+      reasoningParts.push(partial);
+    }
+    working = working.slice(0, openIdx);
+  }
 
   return {
-    content: cleaned,
+    content: working.trim(),
     reasoning: reasoningParts.length > 0 ? reasoningParts.join("\n\n") : null,
   };
 }

frontend-web/src/core/models/api.ts

@@ -1,13 +1,21 @@
 import { getBackendBaseURL } from "../config";
 import { apiFetch } from "../api";
+import { OptType, writeYLog } from "../log/y-log";
 
 import type { ModelsResponse } from "./types";
 
 export async function loadModels(): Promise<ModelsResponse> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/models`);
   const data = (await res.json()) as Partial<ModelsResponse>;
-  return {
+  const result: ModelsResponse = {
     models: data.models ?? [],
     token_usage: data.token_usage ?? { enabled: false },
   };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-模型-查询",
+    url: "/api/models",
+    returnParam: result,
+  });
+  return result;
 }

frontend-web/src/core/note/api.ts

@@ -1,4 +1,5 @@
 import { getNoteApiBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import {
   ensureNoteAuth,
@@ -76,7 +77,15 @@ export async function createSearchSpace(
     throw new Error(`创建笔记失败: ${response.status} ${response.statusText}`);
   }
 
-  return (await response.json()) as SearchSpace;
+  const result = (await response.json()) as SearchSpace;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-笔记-新建笔记空间",
+    url: "/api/v1/searchspaces",
+    reqParam: { name: input.name, description: input.description ?? "" },
+    returnParam: { id: result.id, name: result.name },
+  });
+  return result;
 }
 
 export async function listSearchSpaces(
@@ -90,14 +99,21 @@ export async function listSearchSpaces(
     order_by: query.order_by ?? "created_at",
   });
 
-  const response = await noteApiFetch(`/api/v1/searchspaces?${params.toString()}`, {
-    method: "GET",
-  });
+  const path = `/api/v1/searchspaces?${params.toString()}`;
+  const response = await noteApiFetch(path, { method: "GET" });
 
   if (!response.ok) {
     throw new Error(`获取笔记列表失败: ${response.status} ${response.statusText}`);
   }
 
   const data: unknown = await response.json();
-  return Array.isArray(data) ? (data as SearchSpace[]) : [];
+  const list = Array.isArray(data) ? (data as SearchSpace[]) : [];
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-笔记-查询笔记空间列表",
+    url: path,
+    reqParam: query,
+    returnParam: { count: list.length },
+  });
+  return list;
 }

frontend-web/src/core/notifications/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   NotificationItem,
@@ -24,6 +25,13 @@ export async function listNotifications(
   const res = await apiFetch(url);
   if (!res.ok) throw await parseDetail(res, "Failed to list notifications");
   const data = (await res.json()) as NotificationListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-通知-查询通知列表",
+    url,
+    reqParam: options,
+    returnParam: { count: data.items.length },
+  });
   return data.items;
 }
 
@@ -35,26 +43,39 @@ export async function getUnreadCount(): Promise<number> {
 }
 
 export async function markNotificationRead(id: string): Promise<void> {
-  const res = await apiFetch(
-    `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}/read`,
-    { method: "POST" },
-  );
+  const url = `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}/read`;
+  const res = await apiFetch(url, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to mark notification read");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-通知-标记已读",
+    url,
+    reqParam: { id },
+  });
 }
 
 export async function markAllNotificationsRead(): Promise<number> {
-  const res = await apiFetch(`${getBackendBaseURL()}/api/notifications/read_all`, {
-    method: "POST",
-  });
+  const url = `${getBackendBaseURL()}/api/notifications/read_all`;
+  const res = await apiFetch(url, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to mark all read");
   const data = (await res.json()) as { updated: number };
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-通知-全部标记已读",
+    url,
+    returnParam: data,
+  });
   return data.updated;
 }
 
 export async function deleteNotification(id: string): Promise<void> {
-  const res = await apiFetch(
-    `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}`,
-    { method: "DELETE" },
-  );
+  const url = `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}`;
+  const res = await apiFetch(url, { method: "DELETE" });
   if (!res.ok) throw await parseDetail(res, "Failed to delete notification");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-通知-删除通知",
+    url,
+    reqParam: { id },
+  });
 }

frontend-web/src/core/page-layout/sidebar-menu.ts

@@ -80,6 +80,12 @@ export const sidebarMenuItems: MenuItem[] = [
       },
       { id: "qa-zzxd", label: "XD应用", icon: Layout, path: "/page/strategy/qa/zzxd" },
       { id: "qa-research", label: "课题研究", icon: FileText, path: "/page/canvas/ai-writing" },
+      {
+        id: "qa-research-chat",
+        label: "课题研究(对话版)",
+        icon: FileText,
+        path: "/page/canvas/ai-writing-chat",
+      },
     ],
   },
   {

frontend-web/src/core/plugin-management/domain-agent.test.mjs

@@ -0,0 +1,190 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  normalizeDomainInput,
+  resolveIncomingIframeSelection,
+  resolveConfiguredIframeAgentId,
+  resolveDomainMappedAgentId,
+} from "./domain-agent.ts";
+
+test("normalizes full urls and bare hosts to comparable domains", () => {
+  assert.equal(
+    normalizeDomainInput(" https://Foo.Example.com/path?q=1 "),
+    "foo.example.com",
+  );
+  assert.equal(
+    normalizeDomainInput("foo.example.com:8080/landing"),
+    "foo.example.com:8080",
+  );
+});
+
+test("resolves the configured agent for a matching pageContext url", () => {
+  assert.equal(
+    resolveDomainMappedAgentId({
+      pageUrl: "https://foo.example.com/article/123",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+    }),
+    "agent-1",
+  );
+});
+
+test("ignores disabled mappings and unavailable agents", () => {
+  assert.equal(
+    resolveDomainMappedAgentId({
+      pageUrl: "https://foo.example.com/article/123",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: false,
+        },
+        {
+          id: "m2",
+          domain: "bar.example.com",
+          agentId: "agent-2",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-3"],
+    }),
+    undefined,
+  );
+});
+
+test("does not auto-select after manual selection or once a conversation has started", () => {
+  assert.equal(
+    resolveConfiguredIframeAgentId({
+      pageUrl: "https://foo.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1"],
+      isNewThread: true,
+      hasStartedConversation: false,
+      manualSelectionLocked: true,
+    }),
+    undefined,
+  );
+
+  assert.equal(
+    resolveConfiguredIframeAgentId({
+      pageUrl: "https://foo.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1"],
+      isNewThread: true,
+      hasStartedConversation: true,
+      manualSelectionLocked: false,
+    }),
+    undefined,
+  );
+});
+
+test("falls back to default assistant when url is unmapped and user has not manually selected an agent", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://unknown.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: null,
+    }),
+    {
+      selectedAgentId: null,
+      forceDefaultAssistant: true,
+    },
+  );
+});
+
+test("falls back to the user's manual selection when url is unmapped", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://unknown.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: "agent-2",
+    }),
+    {
+      selectedAgentId: "agent-2",
+      forceDefaultAssistant: false,
+    },
+  );
+});
+
+test("mapped domain overrides the user's manual selection for that incoming message", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://foo.example.com/article",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: "agent-2",
+    }),
+    {
+      selectedAgentId: "agent-1",
+      forceDefaultAssistant: false,
+    },
+  );
+});
+
+test("unmapped incoming url resets auto-selected agent back to default when there is no manual selection", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://another-unknown.example.com/article",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: null,
+    }),
+    {
+      selectedAgentId: null,
+      forceDefaultAssistant: true,
+    },
+  );
+});

frontend-web/src/core/plugin-management/domain-agent.ts

@@ -0,0 +1,135 @@
+export type DomainAgentMapping = {
+  id: string;
+  domain: string;
+  agentId: string;
+  enabled: boolean;
+};
+
+function trimToUndefined(value: string | null | undefined): string | undefined {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : undefined;
+}
+
+function normalizeAgentId(agentId: string | null | undefined): string | undefined {
+  const trimmed = agentId?.trim();
+  return trimmed ? trimmed : undefined;
+}
+
+export function normalizeDomainInput(
+  value: string | null | undefined,
+): string | undefined {
+  const trimmed = trimToUndefined(value);
+  if (!trimmed) return undefined;
+
+  const candidate = /^[a-zA-Z][a-zA-Z\d+\-.]*:\/\//.test(trimmed)
+    ? trimmed
+    : `https://${trimmed}`;
+
+  try {
+    const parsed = new URL(candidate);
+    const host = parsed.host.trim().toLowerCase();
+    return host || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+export function resolveDomainMappedAgentId({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+}): string | undefined {
+  const host = normalizeDomainInput(pageUrl);
+  if (!host) return undefined;
+
+  const allowedAgents =
+    availableAgentIds && availableAgentIds.length > 0
+      ? new Set(availableAgentIds)
+      : null;
+
+  for (const mapping of mappings) {
+    if (!mapping.enabled) continue;
+    if (normalizeDomainInput(mapping.domain) !== host) continue;
+    if (allowedAgents && !allowedAgents.has(mapping.agentId)) continue;
+    return mapping.agentId;
+  }
+
+  return undefined;
+}
+
+export function resolveConfiguredIframeAgentId({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+  isNewThread,
+  hasStartedConversation,
+  manualSelectionLocked,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+  isNewThread: boolean;
+  hasStartedConversation: boolean;
+  manualSelectionLocked: boolean;
+}): string | undefined {
+  if (!isNewThread || hasStartedConversation || manualSelectionLocked) {
+    return undefined;
+  }
+
+  return resolveDomainMappedAgentId({
+    pageUrl,
+    mappings,
+    availableAgentIds,
+  });
+}
+
+export function resolveIncomingIframeSelection({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+  manualSelectedAgentId,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+  manualSelectedAgentId: string | null;
+}): {
+  selectedAgentId: string | null;
+  forceDefaultAssistant: boolean;
+} {
+  const mappedAgentId = resolveDomainMappedAgentId({
+    pageUrl,
+    mappings,
+    availableAgentIds,
+  });
+  if (mappedAgentId) {
+    return {
+      selectedAgentId: mappedAgentId,
+      forceDefaultAssistant: false,
+    };
+  }
+
+  const allowedAgents =
+    availableAgentIds && availableAgentIds.length > 0
+      ? new Set(availableAgentIds)
+      : null;
+  const normalizedManualAgentId = normalizeAgentId(manualSelectedAgentId);
+  if (
+    normalizedManualAgentId &&
+    (!allowedAgents || allowedAgents.has(normalizedManualAgentId))
+  ) {
+    return {
+      selectedAgentId: normalizedManualAgentId,
+      forceDefaultAssistant: false,
+    };
+  }
+
+  return {
+    selectedAgentId: null,
+    forceDefaultAssistant: true,
+  };
+}

frontend-web/src/core/positions/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   Position,
@@ -24,6 +25,12 @@ export async function listPositions(): Promise<Position[]> {
   const res = await apiFetch(base());
   if (!res.ok) throw await parseDetail(res, "Failed to list positions");
   const data = (await res.json()) as PositionListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-查询",
+    url: "/api/positions",
+    returnParam: data.positions,
+  });
   return data.positions;
 }
 
@@ -34,7 +41,15 @@ export async function createPosition(input: PositionCreateInput): Promise<Positi
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to create position");
-  return (await res.json()) as Position;
+  const created = (await res.json()) as Position;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-岗位-新增",
+    url: "/api/positions",
+    reqParam: input,
+    returnParam: created,
+  });
+  return created;
 }
 
 export async function updatePosition(id: string, input: PositionUpdateInput): Promise<Position> {
@@ -44,18 +59,39 @@ export async function updatePosition(id: string, input: PositionUpdateInput): Pr
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to update position");
-  return (await res.json()) as Position;
+  const updated = (await res.json()) as Position;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-编辑",
+    url: `/api/positions/${id}`,
+    reqParam: input,
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function deletePosition(id: string): Promise<void> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(id)}`, { method: "DELETE" });
   if (!res.ok) throw await parseDetail(res, "Failed to delete position");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-岗位-删除",
+    url: `/api/positions/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function getTagBindings(positionId: string): Promise<TagBindings> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/tag-bindings`);
   if (!res.ok) throw await parseDetail(res, "Failed to load tag bindings");
   const data = (await res.json()) as TagBindingsResponse;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-岗位-标签绑定查看",
+    url: `/api/positions/${positionId}/tag-bindings`,
+    reqParam: { positionId },
+    returnParam: data.bindings,
+  });
   return data.bindings;
 }
 
@@ -67,6 +103,13 @@ export async function setTagBindings(positionId: string, bindings: TagBindings):
   });
   if (!res.ok) throw await parseDetail(res, "Failed to save tag bindings");
   const data = (await res.json()) as TagBindingsResponse;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-标签绑定保存",
+    url: `/api/positions/${positionId}/tag-bindings`,
+    reqParam: { positionId, bindings },
+    returnParam: data.bindings,
+  });
   return data.bindings;
 }
 
@@ -74,6 +117,13 @@ export async function listMembers(positionId: string): Promise<PositionMember[]>
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/members`);
   if (!res.ok) throw await parseDetail(res, "Failed to list members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-成员查询",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -85,6 +135,13 @@ export async function addMembers(positionId: string, userIds: string[]): Promise
   });
   if (!res.ok) throw await parseDetail(res, "Failed to add members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-岗位-添加成员",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId, userIds },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -96,6 +153,13 @@ export async function removeMembers(positionId: string, userIds: string[]): Prom
   });
   if (!res.ok) throw await parseDetail(res, "Failed to remove members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-岗位-移除成员",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId, userIds },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -103,6 +167,13 @@ export async function resyncPosition(positionId: string): Promise<number> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/resync`, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to resync position");
   const data = (await res.json()) as { synced: number };
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-岗位-同步",
+    url: `/api/positions/${positionId}/resync`,
+    reqParam: { positionId },
+    returnParam: data,
+  });
   return data.synced;
 }
 
@@ -117,6 +188,12 @@ export async function listPositionUsers(): Promise<PositionUser[]> {
   const res = await apiFetch(`${base()}/users`);
   if (!res.ok) throw await parseDetail(res, "Failed to list users");
   const data = (await res.json()) as { users: PositionUser[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-用户查询",
+    url: "/api/positions/users",
+    returnParam: data.users,
+  });
   return data.users;
 }
 
@@ -127,4 +204,10 @@ export async function setUserPosition(userId: string, positionId: string | null)
     body: JSON.stringify({ position_id: positionId }),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to set user position");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-设置用户岗位",
+    url: `/api/positions/users/${userId}`,
+    reqParam: { userId, positionId },
+  });
 }

frontend-web/src/core/recommended-questions/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   CreateQuestionRequest,
@@ -12,16 +13,25 @@ const BASE = () => `${getBackendBaseURL()}/api/recommended-questions`;
 export async function listRecommendedQuestions(all = false): Promise<RecommendedQuestion[]> {
   // ``all=true`` is the admin management view: every question, unfiltered by the
   // caller's 岗位 (position). The chat input uses the default (filtered) view.
-  const res = await apiFetch(`${BASE()}${all ? "?all=1" : ""}`);
+  const url = `${BASE()}${all ? "?all=1" : ""}`;
+  const res = await apiFetch(url);
   if (!res.ok) throw new Error(`Failed to load questions: ${res.statusText}`);
   const data = (await res.json()) as { questions: RecommendedQuestion[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-推荐问题-查询列表",
+    url,
+    reqParam: { all },
+    returnParam: { count: data.questions.length },
+  });
   return data.questions;
 }
 
 export async function createRecommendedQuestion(
   body: CreateQuestionRequest,
 ): Promise<RecommendedQuestion> {
-  const res = await apiFetch(BASE(), {
+  const url = BASE();
+  const res = await apiFetch(url, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body),
@@ -30,14 +40,23 @@ export async function createRecommendedQuestion(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create question: ${res.statusText}`);
   }
-  return res.json() as Promise<RecommendedQuestion>;
+  const result = (await res.json()) as RecommendedQuestion;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-推荐问题-新增问题",
+    url,
+    reqParam: body,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateRecommendedQuestion(
   id: string,
   body: UpdateQuestionRequest,
 ): Promise<RecommendedQuestion> {
-  const res = await apiFetch(`${BASE()}/${id}`, {
+  const url = `${BASE()}/${id}`;
+  const res = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body),
@@ -46,23 +65,45 @@ export async function updateRecommendedQuestion(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update question: ${res.statusText}`);
   }
-  return res.json() as Promise<RecommendedQuestion>;
+  const result = (await res.json()) as RecommendedQuestion;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-推荐问题-编辑问题",
+    url,
+    reqParam: { id, ...body },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteRecommendedQuestion(id: string): Promise<void> {
-  const res = await apiFetch(`${BASE()}/${id}`, { method: "DELETE" });
+  const url = `${BASE()}/${id}`;
+  const res = await apiFetch(url, { method: "DELETE" });
   if (!res.ok) throw new Error(`Failed to delete question: ${res.statusText}`);
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-推荐问题-删除问题",
+    url,
+    reqParam: { id },
+  });
 }
 
 export async function reorderRecommendedQuestions(
   ids: string[],
 ): Promise<RecommendedQuestion[]> {
-  const res = await apiFetch(`${getBackendBaseURL()}/api/recommended-questions-reorder`, {
+  const url = `${getBackendBaseURL()}/api/recommended-questions-reorder`;
+  const res = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ ids }),
   });
   if (!res.ok) throw new Error(`Failed to reorder questions: ${res.statusText}`);
   const data = (await res.json()) as { questions: RecommendedQuestion[] };
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-推荐问题-调整排序",
+    url,
+    reqParam: { ids },
+  });
   return data.questions;
 }