fix: isolate user concurrency from internal agent runs

fix: iframe底部选择智能体

See merge request knowledge-base-bj/deerflow-server!164

.gitignore

@@ -105,5 +105,11 @@ docs/backups
 # uv lockfile (not tracked per project preference)
 offline-backend-20260512/backend/uv.lock
 
+# Local-only scratch directory (not committed)
+0622/
+
+# Python bytecode cache
+__pycache__/
+
 # misc
 .DS_Store

AGENTS.md

@@ -0,0 +1,102 @@
+# AGENTS.md
+
+This file provides guidance to Codex (Codex.ai/code) when working with code in this repository.
+
+## Project Overview
+
+This is a customized offline deployment of **DeerFlow** — a LangGraph-based AI super agent platform. The repo contains two sub-projects:
+
+- `offline-backend-20260512/backend/` — Python backend (FastAPI Gateway + LangGraph agent runtime)
+- `frontend-web/` — Vite + React 19 frontend (TypeScript, pnpm)
+
+Managed together via shell scripts in `scripts/`.
+
+## Commands
+
+### Full Application (from repo root)
+
+```bash
+./scripts/start-all.sh    # Start backend + frontend as background daemons
+./scripts/stop-all.sh     # Stop both
+./scripts/restart-all.sh  # Restart both
+./scripts/status.sh       # Check running status
+```
+
+Logs and PID files are written to `.runtime/logs/` and `.runtime/pids/`.
+
+### Backend Only (from `offline-backend-20260512/backend/`)
+
+```bash
+make install    # Install Python dependencies (uv)
+make dev        # Run Gateway API with hot-reload on port 8001
+make gateway    # Run Gateway API without reload
+make test       # Run all tests: PYTHONPATH=. uv run pytest tests/ -v
+make lint       # Lint with ruff
+make format     # Format with ruff
+```
+
+Run a single test file:
+```bash
+PYTHONPATH=. uv run pytest tests/test_<feature>.py -v
+```
+
+### Frontend Only (from `frontend-web/`)
+
+```bash
+pnpm install    # Install dependencies
+pnpm dev        # Start Vite dev server on port 5174
+pnpm build      # Production build
+pnpm typecheck  # TypeScript type checking (tsc --noEmit)
+```
+
+## Service Ports
+
+| Service | Port | Notes |
+|---------|------|-------|
+| Backend (Gateway API) | 8001 | FastAPI + LangGraph runtime |
+| Frontend (Vite) | 5174 | React SPA |
+
+Frontend connects to backend via env vars `VITE_BACKEND_BASE_URL` and `VITE_LANGGRAPH_BASE_URL` (injected by `scripts/start-frontend.sh`).
+
+## Architecture
+
+### Backend
+
+The backend (`offline-backend-20260512/backend/`) is split into two layers:
+
+- **`packages/harness/deerflow/`** — publishable agent framework (`deerflow.*` imports): LangGraph lead agent, middleware chain, sandbox, tools, MCP, memory, models, skills. **Never imports from `app.*`.**
+- **`app/`** — application layer (`app.*` imports): FastAPI Gateway routers, IM channel integrations (Feishu, Slack, Telegram, DingTalk).
+
+The **Lead Agent** (`deerflow/agents/lead_agent/`) is the single LangGraph graph entry point. It wraps a middleware chain (~18 middlewares assembled in strict order) around LLM calls, handling: thread isolation, sandbox lifecycle, uploads, memory, plan mode, vision, subagent delegation, and loop detection.
+
+**Middleware order matters** — middlewares are appended in a fixed sequence; `ClarificationMiddleware` must always be last. See `offline-backend-20260512/backend/AGENTS.md` for the full ordered list.
+
+**Harness → App import firewall** is enforced by `tests/test_harness_boundary.py` (runs in CI).
+
+### Frontend
+
+The frontend (`frontend-web/`) is a React 19 + Vite SPA:
+
+- **Routing**: React Router v7; top-level routes in `src/pages/PageRoutes.tsx`, workspace sub-routes in `src/pages/WorkspaceRoutes.tsx`
+- **Pages**: `ChatPage` (thread chat), `AgentChatPage` (custom agent chat), `AgentsPage`/`NewAgentPage` (agent management), `ScheduledTasksPage`/`ScheduledTaskRunDetailPage` (scheduled tasks), `LightAppManagementPage`/`LightAppListPage`/`LightAppIframeView` (轻应用中心 — register/list/embed mini-apps)
+- **轻应用中心 (Light App Center)**: a sibling of 任务管理 in the sidebar with two pages — 应用管理 (admin registers `window_open` or `iframe` mini-apps with a route-param builder: login params resolved from `localStorage.userInfo`, theme params literal) and 应用列表 (card grid of `window_open` apps, `window.open` launch). `iframe` apps are mounted under a chosen parent menu (XK/PG/TY/综合管理) and **dynamically injected into the sidebar** by `core/page-layout/use-sidebar-menu.ts` (`useSidebarMenuItems`), opening in the `LightAppIframeView` host. Client + React Query hooks in `strategy-components/api/light-apps.ts`; URL builder/constants in `strategy-components/lib/light-app.ts`. Backend: `/api/light-apps` (global/shared, admin-gated writes).
+- **菜单管理 (Menu Management, admin-only)**: an **overlay** over the static sidebar menu — `MenuManagementPage` (`pages/MenuManagementPage.tsx`, route `/page/strategy/admin/menu-management`, opened from the admin-only 「菜单管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`). Admins rename / 停用·启用 / reorder (↑↓ or @dnd-kit drag) / re-parent (horizontal drag **or** the edit dialog's 「移动到」parent selector) any node across 一级/二级/三级, **including injected iframe light-app nodes** (`light-app-<appId>`). The static tree (`core/page-layout/sidebar-menu.ts`) stays the source of icons/routes; only per-node deltas (`label`/`disabled`/`parentId`/`sortOrder`) persist to the backend. Merge logic in `core/page-layout/menu-overrides.ts` (`applyMenuOverrides`, applied in `use-sidebar-menu.ts` after light-app injection, before role filter; disabling a node hides its whole subtree) — strict **3-level cap** (`wouldExceedDepth`). Client `strategy-components/api/menu-overrides.ts`. Backend: `/api/menu-overrides` (global/shared; open read, admin atomic replace-all).
+- **敏感词管理 (Sensitive Word Management)**: configures the **展示层脱敏映射** (原始词 → 替换词). **Gated on the username `lqq`** (not the admin role) — `getAccountDisplayName().toLowerCase() === "lqq"` (username = email `@` prefix, else `user_id`, same as the profile page); the dropdown entry, the route guard, and the page-level guard all use this check. `src/lib/desensitize.ts` ships a frozen seed map `SEED_DESENSITIZE_MAP` (the deployment seed) plus a live mutable `DESENSITIZE_MAP` (initialized from the seed so `desensitize()` works before any fetch). `DesensitizeWordsLoader` (mounted in `App.tsx` `AppProviders`) fetches `/api/sensitive-words` on startup and, if non-empty, calls `replaceDesensitizeMap(...)` to make the backend config the source of truth (empty/failed → keep seed). Page `SensitiveWordsPage.tsx` (route `/page/strategy/admin/sensitive-words`, opened from the 「敏感词管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`, present in **both** full + collapsed sidebar modes) lists/adds/edits/启停/deletes words and saves the **whole set atomically** (replace-all); a 「导入种子词」 button merges any missing `SEED_DESENSITIZE_MAP` entries into the editor. Client + hooks in `strategy-components/api/sensitive-words.ts` (`wordsToMap` folds enabled rows into the runtime map). Backend: `/api/sensitive-words` (global/shared; open read, write allowed for admin **or** the `lqq` account), mirroring 菜单管理's store shape. **侧边栏 + 导航栏 menu labels are desensitized** at the data source: `useSidebarMenuItems`/`useActiveThirdLevel` (`core/page-layout/use-sidebar-menu.ts`) map every node's `label` through a desensitizer built **directly from the `/api/sensitive-words` query** (`makeDesensitizer(wordsToMap(words))`, falling back to the global seed `desensitize` while empty) — this sidesteps the `replaceDesensitizeMap` effect-timing race. Only `label` is rewritten; `path`/`id`/`icon` are untouched so routing/highlight are unaffected. All nav surfaces (`page-sidebar.tsx`, `page-sidebar-dark.tsx`, `page-sidebar-v1.tsx`, `strategy-components/Header.tsx`, `PageRoutes.tsx`) consume this hook and are covered; `MenuManagementPage` uses the raw tree so admins still edit real labels.
+- **技能地址管理 (Skill Address Management, admin-only)**: 扫描运行中的技能（`skills/{public,custom}` 下所有 `.md`/`.py`）里的 **http(s) URL 与 IP/IP:端口**，按唯一地址聚合全部出现位置（跨 .md/.py），支持**批量替换**（如把 UAT 地址一次性改成生产）。主体抽成可复用组件 `SkillAddressesPanel`（`pages/SkillAddressesPage.tsx` 导出，默认导出 `SkillAddressesPage` 仍保留旧路由 `/page/strategy/admin/skill-addresses` 作直链回退），**作为「技能地址管理」标签页嵌入管理员「技能管理」页 `pages/AdminSkillsPage.tsx`**（该页加 Tabs：「技能列表」+「技能地址管理」；入口在「设置和更多」下拉的「技能管理」`workspace-nav-menu.tsx` → `/page/workspace/admin/skills`，不再单列于 `components/page-sidebar.tsx` 左下角设置下拉）：打开自动扫描并带**进度条**（扫描逐技能 / 应用逐文件 X/N，应对 150+ 技能），URL/IP 类型过滤 + 搜索 + 「片段批量套用」（如所有 `uat.4.cn` → `prod.4.cn`）、每地址「替换为」输入框（可展开看 `file:line` 片段）、内联**预览**、**应用**、**多关键词检索**（空格分隔全部命中），以及**修改记录**面板——每次应用生成一条记录（显示时间/改了哪些地址 from→to/文件数/处数），可**针对单次记录回退**（二次确认）。client + NDJSON 流式解析在 `strategy-components/api/skill-addresses.ts`。后端 `/api/skill-addresses`（**仅管理员**）：所有文件 IO 走 `asyncio.to_thread` 不阻塞事件循环；`GET /scan`(+`/scan/stream`)、`POST /preview`、`POST /apply`(+`/apply/stream`)、`GET /backups`、`POST /rollback/{id}`；**子串安全替换**（基于 token span，不会误伤子串）、`expected_total` 乐观锁（409）、写前自动磁盘备份到 `{skills_root}/.address-edits/`（同时写一份 `{id}.manifest.json` 记录本次替换明细，供修改记录展示）、应用后刷新技能系统提示缓存。纯引擎 `deerflow/skills/address_scan.py`，router `app/gateway/routers/skill_addresses.py`，tests `tests/test_skill_addresses.py`。范围仅运行中技能，不动 `deploy/minimal/skills/`。
+- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三情分析, `TaskActionsPanel` keeps only the non-jump 清除记录, and `TaskPurposePanel` dropped its 3q详情 button (now configurable) **and defaults the 目的树 table to collapsed** (chevron toggle). Helpers `core/auth/task-buttons.ts` (`TaskButton`, `defaultTaskButtons`, `resolveTaskButtons`, `buttonsForBusiness`, `runTaskButton`), client+hooks `strategy-components/api/task-buttons.ts`. Backend: `/api/task-buttons` (global/shared; open read, admin replace-all), store `deerflow.persistence.task_buttons` (table `task_buttons`, auto-created by `create_all`), wired `app.state.task_button_store`. Tests: `tests/test_task_buttons.py`.
+- **State**: TanStack Query for server state, context providers (`SubtasksProvider`, `ArtifactsProvider`, `PromptInputProvider`) scoped to `WorkspaceRoutes`
+- **LLM streaming**: `@langchain/langgraph-sdk` streams messages from the backend via SSE
+- **UI**: Radix UI primitives + TailwindCSS v4 + shadcn-style components in `src/components/ui/`
+- **Shims**: `src/shims/` provides `next/link` and `next/navigation` polyfills (original code was Next.js)
+- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). **xdfx additionally partitions its chat records by 行动id (action_id), NOT by task_id**: `resolveTaskDeeplinkTarget` sets `partitionByAction:true` + keeps the raw action_id as `TaskContext.actionId`, so new threads are tagged `metadata.{taskId,actionId}` (taskId kept only to preserve the backend「任务深链对话全局共享」semantics, which keys off `metadata.taskId`) and the conversation list filters by `actionId` (+`agent_id`) — different actions of the same task get separate lists. xdfx's first-question opening text also appends `行动id（action_id）为…` (see `buildOpeningText` / `taskThreadMetadata`). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId, actionId?)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations staLine truncated
+- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+
+### Configuration
+
+Backend config lives in `offline-backend-20260512/backend/config.yaml`. Values starting with `$` resolve as environment variables (e.g., `$OPENAI_API_KEY`). MCP servers and skills are configured in `extensions_config.json` in the same directory.
+
+## Detailed Backend Reference
+
+The backend has its own comprehensive documentation at:
+- `offline-backend-20260512/backend/AGENTS.md` — architecture, middleware chain, all API routes, config schema, sandbox/memory/subagent systems
+- `offline-backend-20260512/backend/README.md` — setup guide, technology stack

CLAUDE.md

@@ -79,16 +79,22 @@ The frontend (`frontend-web/`) is a React 19 + Vite SPA:
 
 - **Routing**: React Router v7; top-level routes in `src/pages/PageRoutes.tsx`, workspace sub-routes in `src/pages/WorkspaceRoutes.tsx`
 - **Pages**: `ChatPage` (thread chat), `AgentChatPage` (custom agent chat), `AgentsPage`/`NewAgentPage` (agent management), `ScheduledTasksPage`/`ScheduledTaskRunDetailPage` (scheduled tasks), `LightAppManagementPage`/`LightAppListPage`/`LightAppIframeView` (轻应用中心 — register/list/embed mini-apps)
+- **定时任务「JSON → HTML 模板填充」(模板数据转换器)**: a third scheduled-task execution mode. In the create/edit dialog (`ScheduledTasksPage.tsx`), selecting the built-in agent **「模板数据转换器」** (`execution_agent_name === "template-json-builder"`, `TEMPLATE_BUILDER_AGENT_ID`) reveals a 「HTML模板」 select (`useHtmlTemplates` → `GET /api/scheduled-tasks/html-templates`) + a **.json 上传** button (reads the file's text into the prompt box) and **hides** the 必须生成 HTML/Markdown switches (this mode always outputs HTML). The chosen template persists as `execution_context.template_config.template_id` (`TemplateFillConfig` in `core/scheduled-tasks/types.ts`). At run time the backend converts the source JSON (the task prompt) into that template's `DATA` structure, validates (retry-on-fail), fills the template, and stores an HTML page previewable via the existing run-detail HTML preview. The source can be **pure JSON, plain text, or text-with-embedded-JSON** — the backend pre-extracts any embedded JSON and the agent's `SOUL.md` maps it (or the plain text's semantics) to the template's schema skeleton. **Chat-page debug entry (only this agent's `AgentChatPage`)**: when `agent_id === "template-json-builder"`, the chat header shows a 「页面模板」 select + a 「渲染预览」 button — after a normal Q&A run, the button takes the **latest AI reply**, POSTs it to `POST /api/scheduled-tasks/template-fill/render` (`renderTemplateFill`), and pops a dialog rendering the filled HTML in a `sandbox="allow-scripts"` iframe plus the structure-validation status/errors/gaps — for debugging the agent's conversion effect without creating a scheduled task. Gated strictly on the agent id, so other agents' chat pages are untouched. See the backend CLAUDE.md「Template-fill mode」for the engine (`deerflow/runtime/scheduler/template_fill.py`), agent seed, dispatch, and the render API.
 - **轻应用中心 (Light App Center)**: a sibling of 任务管理 in the sidebar with two pages — 应用管理 (admin registers `window_open` or `iframe` mini-apps with a route-param builder: login params resolved from `localStorage.userInfo`, theme params literal) and 应用列表 (card grid of `window_open` apps, `window.open` launch). `iframe` apps are mounted under a chosen parent menu (XK/PG/TY/综合管理) and **dynamically injected into the sidebar** by `core/page-layout/use-sidebar-menu.ts` (`useSidebarMenuItems`), opening in the `LightAppIframeView` host. Client + React Query hooks in `strategy-components/api/light-apps.ts`; URL builder/constants in `strategy-components/lib/light-app.ts`. Backend: `/api/light-apps` (global/shared, admin-gated writes).
 - **菜单管理 (Menu Management, admin-only)**: an **overlay** over the static sidebar menu — `MenuManagementPage` (`pages/MenuManagementPage.tsx`, route `/page/strategy/admin/menu-management`, opened from the admin-only 「菜单管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`). Admins rename / 停用·启用 / reorder (↑↓ or @dnd-kit drag) / re-parent (horizontal drag **or** the edit dialog's 「移动到」parent selector) any node across 一级/二级/三级, **including injected iframe light-app nodes** (`light-app-<appId>`). The static tree (`core/page-layout/sidebar-menu.ts`) stays the source of icons/routes; only per-node deltas (`label`/`disabled`/`parentId`/`sortOrder`) persist to the backend. Merge logic in `core/page-layout/menu-overrides.ts` (`applyMenuOverrides`, applied in `use-sidebar-menu.ts` after light-app injection, before role filter; disabling a node hides its whole subtree) — strict **3-level cap** (`wouldExceedDepth`). Client `strategy-components/api/menu-overrides.ts`. Backend: `/api/menu-overrides` (global/shared; open read, admin atomic replace-all).
+- **白名单管理 (Login Whitelist, admin-only)**: gates **who may log in**, run as a **blocklist (黑名单模式)**. Two pieces: a global master switch (`system_settings.json → login_whitelist.enabled`, surfaced by **admin-only** `GET|PUT /api/system-settings/login-whitelist`) + a per-user **放行** flag (`users.approved` column, migration `20260625_02`). Users **self-register** as usual and **every new account defaults to `approved=True`** — so a user who has never logged into this system before is allowed straight through; the switch only blocks users an admin has explicitly **取消放行** (`approved=False`). (`create_user`/`User`/`UserRow` all default `approved=True`; admins are always approved; existing rows are backfilled `True`.) Login interception is the single helper `enforce_user_approved(user)` in `app/gateway/routers/auth.py`, called in all three login endpoints (`/login/{local,username,token}`) **after** the account is resolved/created and **before** the JWT is issued: switch off → everyone passes; `system_role=="admin"` → always passes (anti-lockout); else `approved=False` (admin-revoked) → 403 `{code:"PENDING_APPROVAL"}` (the frontend's `extractErrorMessage` surfaces the message and login throws before writing any auth state, so no half-login). Admin approves on `pages/LoginWhitelistPage.tsx` (route `/page/strategy/admin/login-whitelist`, entry「白名单管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both sidebar modes): a top master-switch + a list of all registered users (`GET /api/v1/auth/users`, now carrying `approved`) with a per-row 放行 Switch (`PUT /api/v1/auth/users/{id}/approval`, admin-only; revoking only blocks the **next** login — `token_version` is left untouched, existing sessions are not force-killed). Client/hooks: switch in `strategy-components/api/login-whitelist.ts`, user list + approval in `core/auth/{api,hooks}.ts` (`useSetUserApproval`). Backend tests: `tests/test_login_approval.py`. **账号级「登录口令」(per-account password — 临时开通)**: the same page also lets an admin assign one specific account an individual **plaintext** password (`users.login_password` column, migration `20260625_04`, nullable; auto-added on startup by `_ensure_orm_columns_sync`). Once set, **that account's** username login (`POST /api/v1/auth/login/username`) **requires** `?password=` to exactly match it and that personal password **takes precedence over** the global shared-password gate (`username_login.require_password`); accounts without one keep today's shared-gate / passwordless behavior. The user then logs in via the **existing** frontend URL `#/login/<用户名>?password=xxxx` (LoginPage already forwards `?password=`; `<用户名>` = the account's email `@`-prefix). **Plaintext is intentional** — the password rides in the URL query anyway, so storing it readably lets the admin re-copy the full login link from the page; it is exposed only on the **admin-only** `GET /api/v1/auth/users` (`UserListItem.login_password`) and the new admin-only `PUT /api/v1/auth/users/{id}/login-password` (set non-empty / clear with null·empty; doesn't touch `token_version`). The whitelist page renders a per-user 「登录口令」 column with a set/修改 editor + a live 「复制登录链接」 button (`useSetUserLoginPassword` in `core/auth/hooks.ts`, `setUserLoginPassword` in `core/auth/api.ts`). Backend gate helper `_lookup_user_by_username` (lookup-only, no auto-register) in `routers/auth.py`; tests `tests/test_login_personal_password.py`.
 - **敏感词管理 (Sensitive Word Management)**: configures the **展示层脱敏映射** (原始词 → 替换词). **Gated on the username `lqq`** (not the admin role) — `getAccountDisplayName().toLowerCase() === "lqq"` (username = email `@` prefix, else `user_id`, same as the profile page); the dropdown entry, the route guard, and the page-level guard all use this check. `src/lib/desensitize.ts` ships a frozen seed map `SEED_DESENSITIZE_MAP` (the deployment seed) plus a live mutable `DESENSITIZE_MAP` (initialized from the seed so `desensitize()` works before any fetch). `DesensitizeWordsLoader` (mounted in `App.tsx` `AppProviders`) fetches `/api/sensitive-words` on startup and, if non-empty, calls `replaceDesensitizeMap(...)` to make the backend config the source of truth (empty/failed → keep seed). Page `SensitiveWordsPage.tsx` (route `/page/strategy/admin/sensitive-words`, opened from the 「敏感词管理」 item in the **bottom-left settings dropdown** of `components/page-sidebar.tsx`, present in **both** full + collapsed sidebar modes) lists/adds/edits/启停/deletes words and saves the **whole set atomically** (replace-all); a 「导入种子词」 button merges any missing `SEED_DESENSITIZE_MAP` entries into the editor. Client + hooks in `strategy-components/api/sensitive-words.ts` (`wordsToMap` folds enabled rows into the runtime map). Backend: `/api/sensitive-words` (global/shared; open read, write allowed for admin **or** the `lqq` account), mirroring 菜单管理's store shape. **侧边栏 + 导航栏 menu labels are desensitized** at the data source: `useSidebarMenuItems`/`useActiveThirdLevel` (`core/page-layout/use-sidebar-menu.ts`) map every node's `label` through a desensitizer built **directly from the `/api/sensitive-words` query** (`makeDesensitizer(wordsToMap(words))`, falling back to the global seed `desensitize` while empty) — this sidesteps the `replaceDesensitizeMap` effect-timing race. Only `label` is rewritten; `path`/`id`/`icon` are untouched so routing/highlight are unaffected. All nav surfaces (`page-sidebar.tsx`, `page-sidebar-dark.tsx`, `page-sidebar-v1.tsx`, `strategy-components/Header.tsx`, `PageRoutes.tsx`) consume this hook and are covered; `MenuManagementPage` uses the raw tree so admins still edit real labels.
-- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三情分析, `TaskActionsPanel` keeps only the non-jump 清除记录, and `TaskPurposePanel` dropped its 3q详情 button (now configurable) **and defaults the 目的树 table to collapsed** (chevron toggle). Helpers `core/auth/task-buttons.ts` (`TaskButton`, `defaultTaskButtons`, `resolveTaskButtons`, `buttonsForBusiness`, `runTaskButton`), client+hooks `strategy-components/api/task-buttons.ts`. Backend: `/api/task-buttons` (global/shared; open read, admin replace-all), store `deerflow.persistence.task_buttons` (table `task_buttons`, auto-created by `create_all`), wired `app.state.task_button_store`. Tests: `tests/test_task_buttons.py`.
+- **技能地址管理 (Skill Address Management, admin-only)**: 扫描运行中的技能（`skills/{public,custom}` 下所有 `.md`/`.py`）里的 **http(s) URL 与 IP/IP:端口**，按唯一地址聚合全部出现位置（跨 .md/.py），支持**批量替换**（如把 UAT 地址一次性改成生产）。主体抽成可复用组件 `SkillAddressesPanel`（`pages/SkillAddressesPage.tsx` 导出，默认导出 `SkillAddressesPage` 仍保留旧路由 `/page/strategy/admin/skill-addresses` 作直链回退），**作为「技能地址管理」标签页嵌入管理员「技能管理」页 `pages/AdminSkillsPage.tsx`**（该页加 Tabs：「技能列表」+「技能地址管理」；入口在「设置和更多」下拉的「技能管理」`workspace-nav-menu.tsx` → `/page/workspace/admin/skills`，不再单列于 `components/page-sidebar.tsx` 左下角设置下拉）：打开自动扫描并带**进度条**（扫描逐技能 / 应用逐文件 X/N，应对 150+ 技能），URL/IP 类型过滤 + 搜索 + 「片段批量套用」（如所有 `uat.4.cn` → `prod.4.cn`）、每地址「替换为」输入框（可展开看 `file:line` 片段）、内联**预览**、**应用**、**多关键词检索**（空格分隔全部命中），以及**修改记录**面板——每次应用生成一条记录（显示时间/改了哪些地址 from→to/文件数/处数），可**针对单次记录回退**（二次确认）。client + NDJSON 流式解析在 `strategy-components/api/skill-addresses.ts`。后端 `/api/skill-addresses`（**仅管理员**）：所有文件 IO 走 `asyncio.to_thread` 不阻塞事件循环；`GET /scan`(+`/scan/stream`)、`POST /preview`、`POST /apply`(+`/apply/stream`)、`GET /backups`、`POST /rollback/{id}`；**子串安全替换**（基于 token span，不会误伤子串）、`expected_total` 乐观锁（409）、写前自动磁盘备份到 `{skills_root}/.address-edits/`（同时写一份 `{id}.manifest.json` 记录本次替换明细，供修改记录展示）、应用后刷新技能系统提示缓存。纯引擎 `deerflow/skills/address_scan.py`，router `app/gateway/routers/skill_addresses.py`，tests `tests/test_skill_addresses.py`。范围仅运行中技能，不动 `deploy/minimal/skills/`。
+- **按钮管理 (Task Button Management, admin-only)**: configures the **可配置跳转按钮** rendered in the left task panel of the task deep-link workspaces (rwfx / 3qfx / xdfx, see `TaskFxWorkspace`). Each button = `{business, label, linkType, target, appendTaskId, idParam, idKind, openMode, loginParams, appendAuth, authTokenParam, authNameParam, enabled, sortOrder}`; `linkType` is `url` (外链 `window.open`, optional append of `?{idParam}={id}` — **`idParam` is the editable query-param name**, e.g. `id`/`task_id`), `business` (内部切换到另一业务, reuses `resolveTaskDeeplinkTarget`, always task id), or `purpose` (弹出当前任务的「任务目的」表格 via the shared `TaskPurposeDialog`, no target — configurable for any page incl. xdfx). **`url` buttons support two independent, coexisting login-append mechanisms**: (1) **`loginParams` (追加登录参数, like 应用管理/Light App Center)** — a list of `{key, source, customValue}` resolved at click time: `runTaskButton` reads `userInfo` (via `readUserInfo` from `strategy-components/lib/light-app`, embed-isolated through `authStorage`) and appends `?{key}={value}` for each (`source` = a userInfo field such as `accessToken`/`yUserId`, or `other` → literal `customValue`); empty list = nothing appended. Reuses `LOGIN_SOURCE_OPTIONS` from light-app; stored as JSON column `task_buttons.login_params_json` (`PortableJSON`, migration `20260625_01`). (2) **`appendAuth` (追加登录态)** — appends `?{authTokenParam}={token1}&{authNameParam}={username}` (default param names `token`/`username`) so the跳转目标外部系统 can identify the current user — e.g. `…/action/sentiment?token=<JWT>&username=lizhaoxing`. **Gated on token login**: `token1` = the `?authToken=` used by token-exchange login; `username` = the raw login name the backend resolved from `getTokenInfo`. Both are stashed at login by `persistLoginCredentials` into `login.token1`/`login.username` (`core/auth/login-credentials.ts`, scoped via [[scoped-storage]] so嵌入/独立会话隔离 + 随独立会话迁移). Only token login writes them → a non-token-login session has no `token1`, so `runTaskButton` silently skips the auth append (the jump still works, just without those two params). The frontend reads `username` straight from the new `UsernameLoginResponse.username` field (the stored email local-part is lossy — lowercased/normalized — so not used), **not** by decoding the JWT. Stored as columns `task_buttons.{append_auth, auth_token_param, auth_name_param}` (migration `20260625_02`). The admin page renders both editors for `url` buttons (loginParams 虚线框 + 追加登录态 switch). **`idKind` (`task`/`action`) only matters for xdfx**: its deep-link `?taskId=` is an 行动id and the 任务id is resolved at login (`fetchTaskIdFromAction`) — `TaskContext` now also stashes the raw `actionId`, so a url button can append either (default `task`). Page `TaskButtonsPage.tsx` (route `/page/strategy/admin/task-buttons`, **admin-gated**, entry「按钮管理」in the bottom-left settings dropdown of `components/page-sidebar.tsx`, both full + collapsed modes) has per-business tabs, edits name/type/target/启停/排序/增删, saves the **whole set atomically** (replace-all), plus 「导入默认」 to merge code-seed defaults. **Seed/fallback** (like 敏感词管理): only when the whole table is empty (fresh deploy, never saved) do the workspace + page fall back to `defaultTaskButtons(cfg)` — rwfx's url buttons (编辑/上一步/下一步/3q详情) built from the **live** `/api/public/config/task-deeplink` plus cross-business switch buttons for **all three** businesses (each switches to the other two — rwfx→三情/行动, 3qfx→任务/行动, xdfx→任务/三情). Once saved, the store is the sole source of truth. **Bottom 快捷跳转 bar groups by prev/next**: `TaskJumpBar` renders only「上一步/下一步」-type buttons in the bottom bar — a `prev` group (id 含 `prev` 或文案「上一步」, 描边次要样式 + ←图标) rendered **左侧**, then a `next` group (id 含 `next` 或文案「下一步」, 实心主色) on the **右侧** (container `justify-end`); everything else goes to the right-edge floating menu. The default 上一步 button (`rwfx-prev`, `url`, target = `DASHBOARD_AGENT_ROUTE` `/page/strategy/dashboard-agent`, `appendTaskId` + `idParam=taskId` → `?taskId=任务id`, `openMode=self`) 默认指向**应用内**「大屏绘制」页，在 **both** 单智能体 (`TaskFxWorkspace`) 与 多智能体会商 (`RoundtablePlanningPage` 深链 rwfx-A) 都显示（共用 `TaskJumpBar`）。**`runTaskButton` 的 `url` 类型支持应用内路由**：target 以单个 `/` 开头时按内部路由处理——`self` 走 react-router 同窗导航（不刷新），`blank` 拼成当前源的 hash 路由新标签打开；外链行为不变。 The old hardcoded jump buttons were migrated out: `TaskFxWorkspace` no longer hardcodes 切换到三Line truncated
+- **实时并发监控 (Concurrency / System-Pressure Monitor, admin-only)**: a live panel mounted at the **top of the admin 排行榜 page** (`components/workspace/admin/concurrency-monitor.tsx` `ConcurrencyMonitorPanel`, rendered in `pages/AdminUserLeaderboardPage.tsx`) showing **当前并发的大模型调用数 + 列表（用户/智能体/类型/已运行时长）**, each row with a 「停止」button (and a 「全部停止」) that **truly aborts** that run's in-flight model stream via `RunManager.cancel` (`POST /api/admin/active-runs/{run_id}/cancel`) — to relieve pressure when 使用人数过多. Two line charts (minute/hour toggle): **并发量折线图** (peak/avg, `GET /api/admin/active-runs/concurrency`, fed by a lightweight background sampler into `concurrency_samples`) and **大模型出字速度折线图** (tokens/sec, `GET /api/admin/active-runs/token-speed`, aggregated from `llm_call_metrics`) so a dip pinpoints where the bottleneck is. A **「后台采样」Switch** (`system_settings.json → concurrency_monitor.enabled`, **default off / opt-in**, `GET|PUT /api/admin/active-runs/settings`) turns the background sampling on/off **at runtime, no restart** (the live concurrency count + 「停止」 work even while sampling is off — only the 并发量 history chart needs it on); everything is designed to **never impact production** (one tiny INSERT/15s, retention-purged, best-effort). Client/hooks: `core/admin/active-runs.ts` + `core/admin/hooks.ts` (`useActiveRuns`/`useConcurrencySeries`/`useTokenSpeedSeries`/`useCancel*`/`useMonitorSettings`). See the backend CLAUDE.md「Admin Concurrency Monitor」.
+- **会话冲突 409 中文化**: when a user submits a new question while the previous turn is still streaming, the backend's `RunManager.create_or_reject` rejects with HTTP 409 (`services.py` now returns a **Chinese** detail「当前对话还在生成回答…」). `core/threads/hooks.ts` `onError` detects the conflict (`isActiveRunConflictError`: 409 / "already has an active run" / the Chinese text) and shows a friendly `toast.info` instead of a raw error.
 - **State**: TanStack Query for server state, context providers (`SubtasksProvider`, `ArtifactsProvider`, `PromptInputProvider`) scoped to `WorkspaceRoutes`
 - **LLM streaming**: `@langchain/langgraph-sdk` streams messages from the backend via SSE
 - **UI**: Radix UI primitives + TailwindCSS v4 + shadcn-style components in `src/components/ui/`
 - **Shims**: `src/shims/` provides `next/link` and `next/navigation` polyfills (original code was Next.js)
-- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations stay isolated even though they share one taskId) + 新建对话; the `…/chats` index (`TaskFxIndexResolver`) opens the latest task thread or 新建. The right `:thread_id` host differs by business: **rwfx** → `TaskFxChat` (`AgentChatPage taskGate`) = full workspace (non-`lite`): 目的树闸门 panel + 清除记录 (placed under 新建对话); **xdfx** → also `TaskFxChat` (same 目的树闸门 query+display, same `purpose_detail_url`) but workspace passed `lite`; **3qfx** → `TaskBindChat` (`AgentChatPage taskBind`, `lite`) = 1:N list only, no gate, and 新建对话 **auto-sends** the task opening text (`taskAutoSendText`; gate Line truncated
-- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+- **Login URL params** (`LoginPage.tsx`, frontend-only — the backend never sees these): besides the auth params (`ticket`/`userId`/`env`/`theme`/`yUserId`/`token`/`access_token`/`authToken`/`password`), the page supports a **task deep-link** via `?taskId=&goPath=`. After login it calls the consumer API `GET {VITE_AIPI_CONSUMER_URL}/taskAnalyseSearch/cop-task-detail?taskId=` (header `Authorization: Bearer admin`, auto-injected by `utils/request.ts`), stashes the full `data` (`id/overview/taskDirection/taskName/taskContent`) into `sessionStorage["login.copTaskDetail"]`, then routes by `goPath`: base codes `3qfx`/`rwfx`/`xdfx` → that business's configured **single agent** Q&A inside a **任务工作区** (resolved via `/api/business-mapping`; `resolveTaskDeeplinkTarget` calls `persistTaskContext({taskId, agentId, openingText})` and navigates to the `…/chats` **index**, which opens the latest task conversation or 新建 — a 1:N task↔对话 workspace, NOT `pendingAgentMessage`); the `-A` suffix (`3qfx-A`/…) → **multi-agent roundtable** with `roundtablePrefill.businessCode` so the page auto-selects the configured 业务链条. **xdfx's deep-link `?taskId=` is actually an 行动id, not a 任务id** — `resolveDeeplinkTaskId(goPath, rawId)` (called in `LoginPage` before everything) detects `xdfx`/`xdfx-A` and resolves it via `GET {action_detail_url}/{actionId}` → `data.taskId` (`fetchTaskIdFromAction`; `action_test`+`mock.action_detail` for offline testing); the resolved 任务id then drives `cop-task-detail`, the purpose tree, and the 1:N binding (other businesses pass the id through unchanged). **xdfx additionally partitions its chat records by 行动id (action_id), NOT by task_id**: `resolveTaskDeeplinkTarget` sets `partitionByAction:true` + keeps the raw action_id as `TaskContext.actionId`, so new threads are tagged `metadata.{taskId,actionId}` (taskId kept only to preserve the backend「任务深链对话全局共享」semantics, which keys off `metadata.taskId`) and the conversation list filters by `actionId` (+`agent_id`) — different actions of the same task get separate lists. xdfx's first-question opening text also appends `行动id（action_id）为…` (see `buildOpeningText` / `taskThreadMetadata`). goPath→businessCode: `3qfx`→`3Q`, `rwfx`→`6BF`, `xdfx`→`7BF`. The roundtable target also threads the URL `taskId` into `roundtablePrefill.taskId` (`resolveTaskDeeplinkTarget(goPath, detail, taskId)`), which turns on two taskId-scoped behaviors: (1) **separate, unpartitioned per-task storage** — taskId 会商聊天记录 live in their **own** store/table (`roundtable_task_drafts`), keyed **only by `task_id`** (one taskId = many records, shared across users, **no user 分权** at all; `created_by` is audit-only), kept entirely out of the per-user personal store (`roundtable_drafts`, now strictly per-user) so the two never mix. Backend router `/api/roundtable-task-drafts` (`GET /by-task/{id}` + `/by-task/{id}/latest`, `POST`, `GET/PUT/DELETE /{id}` — all user-agnostic); frontend client `roundtable-planning/api/task-drafts.ts`, and `useDraftPersistence`/`useRoundtableDrafts` route **all** CRUD to it when a `taskId` is present (else the personal `drafts.ts`). The matching **background jobs** are shared by task too: `roundtable_jobs.task_id` marks a task job; reads/dedup/stream/resume/cancel pass `?task_id=` so any user opening the task sees the same running 研讨 (progress/flowchart), and the executor writes the final report back to the task-draft store. Existing rows are moved over by `scripts/migrate_roundtable_task_drafts.py` (migration `20260618_01`). The history dropdown filters to the task and 新建 keeps the binding; (2) **Step-3 auto structured output** — after the `roundtable-summary` agent writes the Markdown report it automatically runs a second round emitting a `flow-json` flowchart (`useStep3Summary` `autoFlow`+`chainLevels`), whose hierarchy follows the business chain's stage goals (任务 → 目的 → 行为体 → …; coordinatorPrompt-specified hierarchy wins) and whose nodes never carry 阶段编号/阶段名 (the prior bug). **Both targets render embedded under the 任务管理 layout** — nested routes under `task-management/<business-path>/{roundtable,agent/:agent_id/chats}` in `StrategyRoutes.tsx` (`<business-path>` = `plan-task-sentiment` / `plan-task/plan-task-fx` / `plan-task/plan-task-action`, matching the COH中任务 menu paths in `sidebar-menu.ts`) so the global sidebar keeps 任务管理 → COH中任务 → the matching business highlighted. **All three single-agent businesses share `TaskFxWorkspace`** (`task-components/TaskFxWorkspace.tsx`): left = a「当前任务」card (`readCopTaskDetail()` 任务名称 + 简介, desensitized, 留存 above 新建对话) + per-task 1:N conversation list (`useTaskThreads(taskId, agentId, actionId?)` — filtered by **both** `metadata.taskId` AND `metadata.agent_id` so the three businesses' conversations staLine truncated
+- **iframe 嵌入模式 (外部系统用 iframe 套用深链问答/会商)** — 三个**按标签页**开关，全部由深链 URL 参数开启、存进同一份 `sessionStorage` 会话（`embed.session`，键名常量在 `core/embed/embed-session.ts`），跨登录跳转/刷新/页内导航存活，**绝不跨标签污染**同浏览器另开的正常系统页。核心隔离手法：用 `sessionStorage`（按标签页/浏览上下文隔离，iframe 即便同源也有独立一份）而非 `localStorage`（跨标签共享）。开关：(1) **`?embed=1`（可带 `&theme=`）** — 去全局 chrome（`PageLayout` 的 `pageSidebarAllowed && !isEmbedActive()` → 隐藏 Header + PageSidebar）+ 按外部主题色**强制**明/暗：走 next-themes 的 `forcedTheme`（`App.tsx` `AppProviders` 调 `resolveForcedEmbedTheme`，**不写** localStorage `strategy-theme`），离散映射 `dark-blue`/`dark`→深、其余→浅；嵌入侧**绝不**调 `setTheme`/`persistSidebarEnabled`（那俩落 localStorage 跨标签污染，`LoginPage` 据 `readEmbedParam` 跳过）。(2) **`?hideJump=1`** — 隐藏深链底部「快捷跳转」栏 `TaskJumpBar` 的两部分（底部「下一步」等按钮 + 右侧垂直居中悬浮菜单），单智能体问答 + 会商共用该栏，`isJumpBarHidden()` 为真时整条 `return null`。(2.5) **`?hideChrome=1`** — **仅**去全局 chrome（Header 导航栏 + PageSidebar 侧边栏），**不**强制主题、**不**隔离鉴权（区别于 `embed`：只想要一个干净全屏页面，如「大屏绘制」`/page/strategy/dashboard-agent?taskId=…&hideChrome=1`）。新增 `EmbedSession.hideChrome` 字段 + `readHideChromeParam()` + `isChromeHidden()`（取 `embed || hideChrome` 之并），与 `hideJump` 完全对称；`PageRoutes.tsx` 的 `PageLayout` 把 `chromeHidden`（`isChromeHidden() || readHideChromeParam(location.search)==="on"`）并入 `pageSidebarAllowed`，且其**优先级高于** dashboard-agent 路由原本的强制全局 chrome（`forceChromeForDashboardAgent`）。`hideChrome=0` 可显式关闭。(3) **登录用户隔离** — 嵌入态下鉴权/身份键（`deerflow.auth` token、`userInfo`、`login.*`、`tools_token`、maxkey/userDetail token）全部经 `core/auth/scoped-storage.ts` 的 `authStorage()`（嵌入→sessionStorage / 正常→localStorage）读写，使 iframe 里登录的用户与正常登录用户**完全隔离**、互不覆盖；所有 token 读取都过 `getStoredAuth()`/`getAuthorizationHeaderValue()`（API 客户端 `core/api/*` 全走这俩），改中心函数即让全体调用方自动隔离；跨标签账号变更监听 `AuthSyncWatcher`（`core/auth/sync.tsx`）在嵌入态禁用。嵌入会话在 `main.tsx` 渲染前 `syncEmbedSessionFromCurrentUrl()` 同步启用（早于任何鉴权写入，避免首帧 effect 顺序漏写 localStorage）；`AppProviders` 的 effect 再按 SPA 导航同步。`embed=0`/`hideJump=0` 可显式关闭。正常（非嵌入）标签页所有 `isXxx()` 恒 false，行为**零变化**。第三个开关 `?isolate=1`（**独立登录会话**）把同一套**登录用户隔离**单独提供给**普通（带 chrome）标签页**——只切换鉴权存储、不去 chrome / 不强制主题 / 不动跳转栏：`authStorage()` 的条件从「仅嵌入」放宽为 `isEmbedActive() || isIsolatedSession()`，`AuthSyncWatcher` 的跨标签监听对嵌入态**或**独立态都即时忽略（handler 内实时判，运行时开关也即刻生效）。除 URL 参数外，**设置 → 外观 →「登录会话」** 有一个 Switch「独立登录会话（本标签页）」运行时切换（`setIsolatedSession`，`appearance-settings-page.tsx`）：**开启时先 `migrateAuthToSession()`**（`scoped-storage.ts`，把 localStorage 的受保护键 `deerflow.auth`/`userInfo`/`userId`/`tools_token` + `login.*` 前缀快照搬进 sessionStorage）再翻标志，故无感不登出；此后本标签页登录态独立——别处登录/换号影响不到它，它换号也影响不到别人，但关掉该标签即结束（需重登）。开启给 toast 提示。
+- **操作日志（Y-Log）上报** — 用户的关键操作（登录登出/查询/查看/增删改/启停/导入导出/问答等）成功后，**前端直连**外部接口 `POST {write_url}`（默认 `https://ch1.b.uat.4.cn/api/y-log/write`）记一条审计日志。核心模块 `src/core/log/`：`y-log.ts`（`writeYLog(params)` + `OptType` 枚举 0/1/3..12；**异步即发即忘、永不 await、永不抛错、失败静默**，自动把完整 url 转相对路径去 ip/host、对象入参/返回自动 `JSON.stringify` + 50k 裁剪、`optResult` 恒 0 只报成功），`y-log-config.ts`（从公开只读 `GET /api/public/config/y-log` 拉 `{enabled, writeUrl}`，模块级缓存 + 去重 + 默认兜底；`App.tsx` `AppProviders` 启动预热 `fetchYLogConfig()`），`y-log-token.ts`（token1 = token 登录的 `?authToken=`，经 [[scoped-storage]] 的 `authStorage*` 存取，嵌入态自动隔离）。**双门控**：仅当①存在 token1（即用 token 登录，`LoginPage` 成功后 `persistYLogToken(authToken)`，登出 `account-settings-page.tsx` 先报后清 token1）且②配置 `enabled && writeUrl` 才上报；否则一律不发。`optDetail` 统一「CM助手-全量-…」（**禁内部框架名**）。埋点**广覆盖**各 API client 的成功路径——原则是「一个用户操作（查看/查询/新增/编辑/删除/启停/导入导出）= 一条日志」，每个 API client 的**单条详情 GET（查看→view 4）/ 列表查询 GET（search 3）/ 新增 POST（create 9）/ 改 PUT·PATCH（edit 5）/ 删 DELETE（delete 6）/ 启停（enabled 11 / disabled 10）/ 导入导出（import 7 / export 8）**都各落一条，仅跳过高频 typeahead/状态轮询/纯 bootstrap config 读。覆盖文件：`strategy-components/api/{sensitive-words,menu-overrides,task-buttons,skill-addresses,light-apps,business-mapping}.ts`、`roundtable-planning/api/{drafts,task-drafts,roundtable-jobs,recommend,chains,multi-agent,dashboard-sessions}.ts`、`core/{agents,scheduled-tasks,knowledge,positions,tags,studio,system-settings,memory,mcp,models,custom-prompts,user-preferences,notifications,recommended-questions,user-qa,curator,admin,thread-shares,roundtable-draft-shares,tool-metrics,llm-metrics,note,artifacts}/api.ts`、`core/api/markdown-docx-export.ts`。**问答（Q&A）改为「一次大模型调用 = 一条日志」**：在共享的 `core/threads/hooks.ts` `useThreadStream` 的 `onLangChainEvent` 里监听 `on_chat_model_end`，每次模型调用结束就上报一条（optType 12，`reqParam` 取本次 input 的最后一条 user 文本 + 模型名，`returnParam` 取本次输出文本）——一个问答轮次里 lead agent / 子代理的**每次** LLM 调用都各记一条，覆盖所有走 `useThreadStream` 的页面（`ChatPage`/`AgentChatPage`/创建智能体/iframe/会商等）；`ChatPage`/`AgentChatPage` 的 `onFinish` 仍额外保留一条轮次汇总。后端仅新增公开只读配置：`deerflow/config/y_log_config.py`（`YLogConfig{enabled,write_url}`）挂到 `AppConfig.y_log`，`app/gateway/routers/public_config.py` 加 `GET /api/public/config/y-log`，地址写在 `config.yaml` 的 `y_log` 段（mtime 热重载，前端无需重建）；**不做后端代理**。Tests：`tests/test_y_log_config.py`。
 
 ### Configuration
 

frontend-web/.env.development

@@ -5,7 +5,7 @@
 VITE_USE_REAL_DATA=true
 
 # 任务详情（登录深链 cop-task-detail）数据源：默认真实接口；改成 true 走本地假数据（consumer 外网不可达时调试用）。
-VITE_MOCK_COP_TASK_DETAIL=true
+VITE_MOCK_COP_TASK_DETAIL=flase
 
 # 研判情报报告（大屏绘制智能体深链 selectSqReport）数据源：true 走本地样例假数据（真实接口未就绪时调试用）；联调通过后置 false。
 VITE_MOCK_SQ_REPORT=true

frontend-web/docs/测试-chouqu.md

@@ -0,0 +1,148 @@
+# 定时任务 — 模板填充「源数据抽取」手工测试清单
+
+> 覆盖功能：定时任务「模板数据转换器」内置 agent —— 把用户传入的源数据转换成 HTML
+> 模板的 `DATA` 结构并填充生成可预览页面。**重点测「源数据抽取」**：源可能是
+> ① 纯 JSON、② 含 JSON 的文本、③ 纯文本，三种形态都要正确处理。
+>
+> 测试环境：后端 `http://localhost:8001`（`make dev`），前端 `http://localhost:5174`（`pnpm dev`）。
+> 相关代码：`deerflow/runtime/scheduler/template_fill.py`（`extract_embedded_json`）、
+> `service.py`（`_run_template_fill_attempt` / `_build_conversion_prompt`）、
+> `pages/ScheduledTasksPage.tsx`。
+
+---
+
+## 前置 — 进入表单
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 0.1 | 任务管理 → 新建定时任务 | 弹出「新建定时任务」对话框 |
+| 0.2 | 「执行智能体」下拉选择 **模板数据转换器** | 表单出现「HTML 模板」下拉；「必须生成 HTML/Markdown」两个开关隐藏 |
+| 0.3 | 「HTML 模板」下拉选择 **no.1** | 下方出现「上传 .json」按钮 + 源数据文本框；说明含「未提供源 JSON 时，将直接展示该模板的默认数据」|
+
+---
+
+## T1 — 源形态①：纯 JSON
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 1.1 | 在源数据框粘贴纯 JSON（示例见下「样例 A」） | 文本框正常接收，无报错 |
+| 1.2 | 保存任务 → 「立即执行」 | 执行记录新增一条，状态最终 succeeded |
+| 1.3 | 打开执行记录 → HTML 预览 | 渲染出 no.1 大屏，**总览指标/各列表数据来自粘贴的 JSON**（而非模板默认值）|
+| 1.4 | 执行记录正文 | 文案为「已根据源数据填充模板「no.1」生成页面」|
+
+## T2 — 源形态②：含 JSON 的文本（抽取重点）
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 2.1 | 粘贴「样例 B」（前后是中文说明，中间夹一段 JSON） | 文本框正常接收 |
+| 2.2 | 保存 → 立即执行 → 查看 HTML | 页面数据以**夹带的 JSON 为准**填充；正文里的补充说明（如「重点突出 X」）被一并参考 |
+| 2.3 | 验证抽取正确性：JSON 字符串值里含 `}`（如 `"备注": "进度 80%}尚未完成"`） | 不会被误判为 JSON 块提前结束，整段 JSON 被完整抽取 |
+
+## T3 — 源形态③：纯文本（无 JSON）
+
+| # | 步骤 / 输入 | 预期结果 |
+|---|------|----------|
+| 3.1 | 粘贴「样例 C」（一段纯中文描述，无任何 JSON） | 文本框正常接收 |
+| 3.2 | 保存 → 立即执行 → 查看 HTML | 智能体**理解文本语义**后据实填充模板，产出完整可预览页面（数据可能较稀疏但结构完整）|
+| 3.3 | 不应报「未返回 JSON」类硬失败（除非模型彻底失败重试耗尽）| 状态 succeeded |
+
+## T4 — 空源 → 模板默认数据
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 4.1 | 源数据框留空，保存 → 立即执行 | **不调用模型**，直接用 no.1 模板自带的默认数据生成 |
+| 4.2 | 执行记录正文 | 「未提供源数据，已用模板「no.1」的默认数据生成页面」|
+| 4.3 | HTML 预览 | 展示模板内置的默认大屏 |
+
+## T5 — 上传 .json 文件
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 5.1 | 点击「上传 .json 文件」，选一个合法 `.json` | 文件内容被读入源数据文本框 |
+| 5.2 | 上传一个非法 JSON 内容的文件 | toast 提示「文件不是合法 JSON，已填入文本框请检查」，内容仍填入（可手改）|
+| 5.3 | 连续上传同一个文件两次 | 第二次仍能触发读取（input 已被重置 value）|
+
+## T6 — no.2（只展示模板）
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 6.1 | 「HTML 模板」下拉选 **no.2** | **隐藏**上传按钮与源数据文本框；显示「该模板暂为直接展示已有数据，无需填写」|
+| 6.2 | 即使之前填过源数据，保存 → 立即执行 | 忽略源数据，**原样输出** no.2 现有页面 |
+| 6.3 | 执行记录正文 | 「已展示模板「no.2」的现有数据」|
+
+## T7 — 编辑回显
+
+| # | 步骤 | 预期结果 |
+|---|------|----------|
+| 7.1 | 对已保存的模板任务点「编辑」 | 「执行智能体」「HTML 模板」「源数据」均正确回显 |
+| 7.2 | 把模板从 no.1 改成 no.2 再保存 | 切到 no.2 时源数据区即时隐藏；保存后执行走只展示分支 |
+
+---
+
+## 样例数据（可直接复制粘贴到源数据框）
+
+### 样例 A — 纯 JSON
+
+```json
+{
+  "overview": {
+    "核心指标": [
+      { "名称": "综合区域", "数值": 7, "单位": "区", "说明": "测试数据" },
+      { "名称": "组织与单位", "数值": 188, "单位": "个", "说明": "测试数据" }
+    ]
+  },
+  "regions": [
+    { "name": "测试区域甲", "scope": "本岛西岸" }
+  ],
+  "equipment": [
+    { "name_zh": "测试装备X", "category": "无人系统", "status": "列装" }
+  ]
+}
+```
+
+> 预期：总览第一项「综合区域」显示 **7**，「组织与单位」显示 **188**，区域/装备出现「测试区域甲」「测试装备X」。
+
+### 样例 B — 含 JSON 的文本
+
+```
+这是本月台海态势数据，请据此填充大屏，重点突出离岛防卫：
+
+{"overview": {"核心指标": [{"名称": "综合区域", "数值": 9, "单位": "区", "说明": "含离岛"}]}, "regions": [{"name": "离岛防区", "scope": "外岛", "备注": "进度 80%}尚未完成"}]}
+
+以上数据来自 6 月例会，务必准确，不要臆造未提供的字段。
+```
+
+> 预期：① 数据以中间 JSON 为准（综合区域=9、出现「离岛防区」）；② 字符串里的 `}`（`进度 80%}`）不破坏抽取；③ 前后的「重点突出离岛防卫」「务必准确」作为补充说明被模型参考。
+
+### 样例 C — 纯文本
+
+```
+请整理一份台湾滨海防卫概览：覆盖本岛沿岸 9 个综合区域，组织与单位约 280 个，
+装备条目近百项（含无人系统、防空、海军平台等类别），并列出若干关键节点与近期演习。
+数据以离线知识为准，没有的字段留空即可。
+```
+
+> 预期：智能体理解语义后据实填充，产出结构完整的页面（具体数值取决于模型，可较稀疏），不报硬失败。
+
+---
+
+## 后端单元测试（自动化补充）
+
+```bash
+# 在 offline-backend-20260512/backend/ 下运行
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_fill.py -v          # 引擎：抽取/校验/填充/注册表
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_fill_attempt.py -v   # 调度器执行分支：三形态/默认/只展示/重试
+PYTHONPATH=. uv run --no-sync pytest tests/test_template_builder_seed.py -v   # 内置 agent 种子
+```
+
+抽取相关关键用例：
+- `test_extract_embedded_json_pure_object` / `_pure_array` —— 纯 JSON。
+- `test_extract_embedded_json_text_with_json` / `_fenced` —— 含 JSON 的文本 / ```json 围栏。
+- `test_extract_embedded_json_plain_text_returns_none` —— 纯文本返回 None。
+- `test_extract_embedded_json_ignores_braces_in_strings` —— 引号内 `}` 不误判。
+- `test_text_with_embedded_json_surfaced_in_prompt` —— 转换 prompt 单独标注「识别到的结构化数据」。
+- `test_plain_text_source_converts` —— 纯文本仍照常转换。
+- `test_empty_source_uses_template_default` —— 空源用模板默认数据。
+- `test_display_only_template_renders_as_is` —— no.2 原样输出。
+
+三个文件应全部通过（0 failed）。

frontend-web/package.json

@@ -7,6 +7,7 @@
     "dev": "vite",
     "build": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build",
     "build:sit": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode sit",
+    "build:test": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode test",
     "build:network": "node --max-old-space-size=8192 ./node_modules/vite/bin/vite.js build --mode network",
     "preview": "vite preview",
     "typecheck": "tsc --noEmit"

frontend-web/src/App.tsx

@@ -7,6 +7,7 @@ import { FontScaleApplier } from "@/components/font-scale";
 import { QueryClientProvider } from "@/components/query-client-provider";
 import { AuthSyncWatcher } from "@/core/auth/sync";
 import { I18nProvider } from "@/core/i18n/context";
+import { fetchYLogConfig } from "@/core/log/y-log-config";
 import { detectLocale } from "@/core/i18n/locale";
 import { resolveForcedThemeForPath } from "@/core/page-layout/chats-iframe-route";
 import { ChatProvider } from "@/contexts/ChatContext";
@@ -50,6 +51,11 @@ function AppProviders({ children }: { children: React.ReactNode }) {
   useEffect(() => {
     syncEmbedSessionFromSearch(location.search);
   }, [location.search]);
+  // 操作日志(Y-Log)：启动早期预热上报配置，使 writeYLog 同步读缓存即可工作
+  // （刷新后 module 缓存清空，token 登录用户也能继续上报）。失败静默。
+  useEffect(() => {
+    void fetchYLogConfig();
+  }, []);
   const forcedTheme = useMemo(() => {
     // iframe 嵌入模式（外部系统 `&embed=1`）最高优先：按本标签页的嵌入主题强制明/暗。
     // 走 next-themes forcedTheme（不写 localStorage）→ 同浏览器另开的正常系统页不受影响。

frontend-web/src/components/assistant-ui/document-upload-popup.tsx

@@ -405,8 +405,15 @@ const DocumentUploadPopupContent: FC<{
       if (response.ok) {
         const data = await response.json() as { imported_count?: number };
         toast.success(`成功导入 ${data.imported_count || dataList.length} 个来源`);
-        setListData([]);
-        handleBatchDelete();
+        onUploadComplete?.(
+          selectedSearchSources.map((s) => ({
+            id: undefined,
+            title: s.title,
+            task_id: undefined,
+            status: "success" as const,
+          }))
+        );
+        onOpenChange(false);
       } else {
         const errorData = await response.json() as { detail?: string };
         toast.error(errorData.detail || "导入失败，请重试");
@@ -826,7 +833,13 @@ const DocumentUploadPopupContent: FC<{
                         </Button>
                       </div>
                     )}
-                    {listData.length === 0 && <Empty />}
+                    {isSearching ? (
+                      <div className="flex items-center justify-center py-16">
+                        <Loader2 className="h-8 w-8 animate-spin text-muted-foreground" />
+                      </div>
+                    ) : (
+                      listData.length === 0 && <Empty />
+                    )}
                     {searchType === "human" && (
                       <div className="bg-white p-[10px] grid grid-cols-5 gap-[10px]">
                         {listData.map((item: listDataItem, index: number) => {

frontend-web/src/components/assistant-ui/network-actor.tsx

@@ -545,7 +545,12 @@ export function NetworkActor({ inputValue, searchSpaceId, onSuccess }: NetworkAc
           </div>
         )}
         <div className="p-[10px]">
-          <div className="grid grid-cols-4 gap-[10px] user-list">
+          {isSearching ? (
+            <div className="flex items-center justify-center py-16">
+              <Loader2 className="h-8 w-8 animate-spin text-muted-foreground" />
+            </div>
+          ) : null}
+          <div className={`grid grid-cols-4 gap-[10px] user-list${isSearching ? ' hidden' : ''}`}>
             {userList.map((item, index) => (
               <div key={index} className="user-item p-[10px] relative">
                 <div className="absolute top-[5px] right-[10px]">

frontend-web/src/components/page-sidebar.tsx

@@ -7,10 +7,12 @@ import {
   ChevronsUpDown,
   Folder,
   FolderOpen,
+  Gauge,
   ListTree,
   MousePointerClick,
   Settings,
   ShieldAlert,
+  ShieldCheck,
   User,
   Wrench,
 } from "lucide-react";
@@ -222,6 +224,22 @@ function SecondaryNavSidebar() {
                       按钮管理
                     </DropdownMenuItem>
                   )}
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/strategy/admin/login-whitelist")}
+                    >
+                      <ShieldCheck className="size-4" />
+                      白名单管理
+                    </DropdownMenuItem>
+                  )}
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/strategy/settings/model-concurrency")}
+                    >
+                      <Gauge className="size-4" />
+                      模型并发限制
+                    </DropdownMenuItem>
+                  )}
                   {canManageSensitiveWords() && (
                     <DropdownMenuItem
                       onClick={() => navigate("/page/strategy/admin/sensitive-words")}
@@ -508,6 +526,12 @@ function LegacyAccordionSidebar({
                   按钮管理
                 </DropdownMenuItem>
               )}
+              {isAdmin && (
+                <DropdownMenuItem onClick={() => navigate("/page/strategy/admin/login-whitelist")}>
+                  <ShieldCheck className="size-4" />
+                  白名单管理
+                </DropdownMenuItem>
+              )}
               {canManageSensitiveWords() && (
                 <DropdownMenuItem onClick={() => navigate("/page/strategy/admin/sensitive-words")}>
                   <ShieldAlert className="size-4" />

frontend-web/src/components/wiki/ReportMarkdownView.tsx

@@ -0,0 +1,189 @@
+"use client";
+
+import { BookOpen, ListTree } from "lucide-react";
+import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+
+import { MarkdownContent } from "@/components/workspace/messages/markdown-content";
+import { Badge } from "@/components/ui/badge";
+import { reasoningPlugins } from "@/core/streamdown";
+import { createMarkdownAnchorResolver } from "@/core/utils/markdown";
+import { cn } from "@/lib/utils";
+
+import "./wiki.css";
+
+function stripMarkdownToText(markdown: string): string {
+  return markdown
+    .replace(/```[\s\S]*?```/g, " ")
+    .replace(/~~~[\s\S]*?~~~/g, " ")
+    .replace(/!\[[^\]]*\]\([^)]+\)/g, " ")
+    .replace(/\[([^\]]+)\]\([^)]+\)/g, "$1")
+    .replace(/^#{1,6}\s+/gm, "")
+    .replace(/^[>\-*+\d.)\s]+/gm, "")
+    .replace(/[`*_~|]/g, "")
+    .replace(/<[^>]+>/g, " ")
+    .replace(/\s+/g, " ")
+    .trim();
+}
+
+function getMarkdownExcerpt(markdown: string): string {
+  const text = stripMarkdownToText(markdown);
+  if (!text) return "";
+  return text.length > 150 ? `${text.slice(0, 150)}...` : text;
+}
+
+function countReadableWords(markdown: string): number {
+  const text = stripMarkdownToText(markdown);
+  if (!text) return 0;
+  const cjk = text.match(/[\u4e00-\u9fff]/g)?.length ?? 0;
+  const words = text.replace(/[\u4e00-\u9fff]/g, " ").match(/[A-Za-z0-9]+/g)?.length ?? 0;
+  return cjk + words;
+}
+
+function selectorForId(id: string): string {
+  const css = window.CSS;
+  if (css?.escape) return `#${css.escape(id)}`;
+  return `[id="${id.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"]`;
+}
+
+export function ReportMarkdownView({
+  content,
+  title,
+  subtitle,
+  badgeLabel = "报告阅读",
+  className,
+  compactHeader = false,
+}: {
+  content: string;
+  title?: string;
+  subtitle?: string;
+  badgeLabel?: string;
+  className?: string;
+  compactHeader?: boolean;
+}) {
+  const rootRef = useRef<HTMLDivElement>(null);
+  const anchorResolver = useMemo(() => createMarkdownAnchorResolver(content), [content]);
+  const headings = useMemo(
+    () => anchorResolver.headings.filter((item) => item.level >= 1 && item.level <= 3),
+    [anchorResolver],
+  );
+  const [activeHeadingId, setActiveHeadingId] = useState<string | null>(null);
+  const excerpt = useMemo(() => getMarkdownExcerpt(content), [content]);
+  const sectionCount = headings.length;
+  const wordCount = useMemo(() => countReadableWords(content), [content]);
+
+  useEffect(() => {
+    setActiveHeadingId(headings[0]?.id ?? null);
+  }, [headings]);
+
+  useEffect(() => {
+    const root = rootRef.current;
+    if (!root || headings.length === 0) return;
+
+    const targets = headings
+      .map((item) => root.querySelector<HTMLElement>(selectorForId(item.id)))
+      .filter((item): item is HTMLElement => !!item);
+    if (targets.length === 0) return;
+
+    const observer = new IntersectionObserver(
+      (entries) => {
+        const visible = entries
+          .filter((entry) => entry.isIntersecting)
+          .sort((a, b) => a.boundingClientRect.top - b.boundingClientRect.top)[0];
+        if (visible?.target.id) setActiveHeadingId(visible.target.id);
+      },
+      {
+        root: root.closest("[data-radix-scroll-area-viewport]") ?? null,
+        rootMargin: "-96px 0px -65% 0px",
+        threshold: [0, 1],
+      },
+    );
+
+    targets.forEach((target) => observer.observe(target));
+    return () => observer.disconnect();
+  }, [headings, content]);
+
+  const scrollToHeading = useCallback((id: string) => {
+    const root = rootRef.current;
+    const target =
+      root?.querySelector<HTMLElement>(selectorForId(id)) ?? document.getElementById(id);
+    setActiveHeadingId(id);
+    target?.scrollIntoView({ behavior: "smooth", block: "start" });
+  }, []);
+
+  return (
+    <div
+      ref={rootRef}
+      className={cn("report-markdown-shell grid min-h-0 gap-5 lg:grid-cols-[minmax(0,1fr)_300px]", className)}
+    >
+      <article className="report-markdown-paper min-w-0 overflow-hidden">
+        <header className={cn("report-markdown-header", compactHeader && "report-markdown-header-compact")}>
+          <div className="flex flex-wrap items-center gap-2">
+            <Badge variant="secondary" className="report-markdown-badge">
+              <BookOpen className="size-3.5" />
+              {badgeLabel}
+            </Badge>
+            {subtitle && (
+              <span className="max-w-full truncate text-xs text-slate-500 dark:text-slate-400">
+                {subtitle}
+              </span>
+            )}
+          </div>
+          {title && <h1 className="report-markdown-title">{title}</h1>}
+          {!compactHeader && excerpt && <p className="report-markdown-excerpt">{excerpt}</p>}
+          <div className="report-markdown-metrics">
+            <span>{sectionCount || 1} 个章节</span>
+            <span>约 {wordCount} 字</span>
+          </div>
+        </header>
+
+        <div className="wiki-markdown report-markdown-body">
+          <MarkdownContent
+            className="max-w-none"
+            content={content}
+            isLoading={false}
+            remarkPlugins={reasoningPlugins.remarkPlugins}
+            rehypePlugins={reasoningPlugins.rehypePlugins}
+          />
+        </div>
+      </article>
+
+      <aside className="hidden min-w-0 lg:block">
+        <div className="report-markdown-toc">
+          <div className="mb-3 flex items-center justify-between gap-2">
+            <div className="flex items-center gap-2 text-sm font-semibold text-slate-900 dark:text-slate-100">
+              <ListTree className="size-4" />
+              内容目录
+            </div>
+            <span className="rounded-md bg-slate-100 px-1.5 py-0.5 text-xs text-slate-500 dark:bg-slate-800 dark:text-slate-400">
+              {sectionCount || 0}
+            </span>
+          </div>
+          {headings.length > 0 ? (
+            <nav className="report-markdown-toc-list">
+              {headings.map((item) => (
+                <button
+                  key={item.id}
+                  type="button"
+                  className={cn(
+                    "report-markdown-toc-item",
+                    activeHeadingId === item.id && "report-markdown-toc-item-active",
+                    item.level === 2 && "report-markdown-toc-level-2",
+                    item.level === 3 && "report-markdown-toc-level-3",
+                  )}
+                  title={item.text}
+                  onClick={() => scrollToHeading(item.id)}
+                >
+                  {item.text}
+                </button>
+              ))}
+            </nav>
+          ) : (
+            <div className="rounded-md border border-dashed p-3 text-xs text-slate-500 dark:border-slate-800 dark:text-slate-400">
+              暂无标题目录
+            </div>
+          )}
+        </div>
+      </aside>
+    </div>
+  );
+}

frontend-web/src/components/wiki/wiki.css

@@ -111,6 +111,340 @@
   border-color: #eef1f5;
 }
 
+.public-report-markdown {
+  color: #334155;
+  font-feature-settings: "kern";
+  text-rendering: optimizeLegibility;
+}
+
+.public-report-markdown h1 {
+  font-size: 30px;
+  letter-spacing: 0;
+  margin-bottom: 24px;
+}
+
+.public-report-markdown h2 {
+  font-size: 22px;
+  margin-top: 42px;
+  margin-bottom: 16px;
+  padding-bottom: 10px;
+}
+
+.public-report-markdown h3 {
+  font-size: 18px;
+  margin-top: 30px;
+  margin-bottom: 12px;
+}
+
+.public-report-markdown p,
+.public-report-markdown li {
+  font-size: 16px;
+  line-height: 1.9;
+}
+
+.public-report-markdown p {
+  margin-bottom: 16px;
+}
+
+.public-report-markdown ul,
+.public-report-markdown ol {
+  margin: 14px 0 18px;
+  padding-left: 26px;
+}
+
+.public-report-markdown ul {
+  list-style-type: disc;
+}
+
+.public-report-markdown ol {
+  list-style-type: decimal;
+}
+
+.public-report-markdown li {
+  padding-left: 2px;
+}
+
+.public-report-markdown code {
+  border-radius: 6px;
+  background: #f1f5f9;
+  padding: 2px 6px;
+  color: #be123c;
+  font-size: 0.92em;
+}
+
+.public-report-markdown pre {
+  margin: 20px 0;
+  border-radius: 8px;
+  background: #0f172a;
+  padding: 16px;
+  overflow-x: auto;
+}
+
+.public-report-markdown pre code {
+  background: transparent;
+  padding: 0;
+  color: inherit;
+}
+
+.public-report-markdown table {
+  display: block;
+  overflow-x: auto;
+  border-radius: 8px;
+  border: 1px solid #e8ecf1;
+}
+
+.public-report-markdown th,
+.public-report-markdown td {
+  min-width: 120px;
+  vertical-align: top;
+}
+
+.public-report-markdown blockquote {
+  margin: 20px 0;
+}
+
+.dark .public-report-markdown {
+  color: #cbd5e1;
+}
+
+.dark .public-report-markdown code {
+  background: #1e293b;
+  color: #f9a8d4;
+}
+
+.dark .public-report-markdown pre {
+  background: #020617;
+}
+
+.dark .public-report-markdown table {
+  border-color: #334155;
+}
+
+.report-markdown-shell {
+  align-items: start;
+  padding: 2px;
+}
+
+.report-markdown-paper {
+  border: 1px solid rgba(203, 213, 225, 0.85);
+  border-radius: 8px;
+  background:
+    linear-gradient(180deg, rgba(248, 250, 252, 0.92), rgba(255, 255, 255, 0) 220px),
+    #ffffff;
+  box-shadow:
+    0 1px 2px rgba(15, 23, 42, 0.04),
+    0 18px 44px rgba(15, 23, 42, 0.07);
+}
+
+.report-markdown-header {
+  border-bottom: 1px solid #e8edf4;
+  padding: 26px 34px 22px;
+}
+
+.report-markdown-header-compact {
+  padding-bottom: 18px;
+}
+
+.report-markdown-badge {
+  gap: 6px;
+  border: 1px solid #dbe3ef;
+  background: #ffffff;
+  color: #475569;
+}
+
+.report-markdown-title {
+  margin: 14px 0 0;
+  color: #0f172a;
+  font-size: 26px;
+  font-weight: 700;
+  line-height: 1.35;
+  letter-spacing: 0;
+}
+
+.report-markdown-excerpt {
+  margin: 14px 0 0;
+  max-width: 840px;
+  color: #64748b;
+  font-size: 14px;
+  line-height: 1.8;
+}
+
+.report-markdown-metrics {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  margin-top: 16px;
+  color: #64748b;
+  font-size: 12px;
+}
+
+.report-markdown-metrics span {
+  border: 1px solid #e2e8f0;
+  border-radius: 6px;
+  background: rgba(255, 255, 255, 0.78);
+  padding: 4px 8px;
+}
+
+.report-markdown-body {
+  max-width: 920px;
+  margin: 0 auto;
+  padding: 32px 42px 44px;
+}
+
+.report-markdown-body h1 {
+  font-size: 28px;
+}
+
+.report-markdown-body h2 {
+  position: relative;
+  margin-top: 44px;
+  border-bottom-color: #e5edf7;
+  font-size: 22px;
+}
+
+.report-markdown-body h2::before {
+  content: "";
+  position: absolute;
+  left: -16px;
+  top: 0.34em;
+  width: 4px;
+  height: 1.05em;
+  border-radius: 999px;
+  background: #2563eb;
+}
+
+.report-markdown-body h3 {
+  color: #1e293b;
+  font-size: 18px;
+}
+
+.report-markdown-body p,
+.report-markdown-body li {
+  font-size: 16px;
+  line-height: 1.92;
+}
+
+.report-markdown-body blockquote {
+  border-left-color: #2563eb;
+  background: #f8fbff;
+}
+
+.report-markdown-body table {
+  box-shadow: 0 1px 0 rgba(15, 23, 42, 0.04);
+}
+
+.report-markdown-toc {
+  position: sticky;
+  top: 16px;
+  max-height: calc(100vh - 32px);
+  overflow: hidden;
+  border: 1px solid rgba(203, 213, 225, 0.82);
+  border-radius: 8px;
+  background: rgba(255, 255, 255, 0.92);
+  padding: 14px;
+  box-shadow: 0 12px 34px rgba(15, 23, 42, 0.06);
+  backdrop-filter: blur(10px);
+}
+
+.report-markdown-toc-list {
+  max-height: calc(100vh - 128px);
+  overflow: auto;
+  padding-right: 4px;
+}
+
+.report-markdown-toc-item {
+  display: block;
+  width: 100%;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  border-left: 2px solid transparent;
+  border-radius: 6px;
+  padding: 7px 8px;
+  color: #64748b;
+  font-size: 12px;
+  line-height: 1.4;
+  text-align: left;
+  transition: background 160ms ease, border-color 160ms ease, color 160ms ease;
+}
+
+.report-markdown-toc-item:hover {
+  background: #f1f5f9;
+  color: #0f172a;
+}
+
+.report-markdown-toc-item-active {
+  border-left-color: #2563eb;
+  background: #eff6ff;
+  color: #1d4ed8;
+  font-weight: 600;
+}
+
+.report-markdown-toc-level-2 {
+  padding-left: 18px;
+}
+
+.report-markdown-toc-level-3 {
+  padding-left: 30px;
+  color: #94a3b8;
+}
+
+.dark .report-markdown-paper {
+  border-color: #1f2937;
+  background:
+    linear-gradient(180deg, rgba(15, 23, 42, 0.9), rgba(2, 6, 23, 0) 220px),
+    #020617;
+  box-shadow: 0 18px 44px rgba(0, 0, 0, 0.24);
+}
+
+.dark .report-markdown-header {
+  border-bottom-color: #1e293b;
+}
+
+.dark .report-markdown-badge,
+.dark .report-markdown-metrics span {
+  border-color: #334155;
+  background: #0f172a;
+  color: #cbd5e1;
+}
+
+.dark .report-markdown-title {
+  color: #f8fafc;
+}
+
+.dark .report-markdown-excerpt,
+.dark .report-markdown-metrics {
+  color: #94a3b8;
+}
+
+.dark .report-markdown-body h3 {
+  color: #e2e8f0;
+}
+
+.dark .report-markdown-body h2::before {
+  background: #60a5fa;
+}
+
+.dark .report-markdown-body blockquote {
+  background: #0f172a;
+  border-left-color: #60a5fa;
+}
+
+.dark .report-markdown-toc {
+  border-color: #1f2937;
+  background: rgba(2, 6, 23, 0.88);
+}
+
+.dark .report-markdown-toc-item:hover {
+  background: #0f172a;
+  color: #f8fafc;
+}
+
+.dark .report-markdown-toc-item-active {
+  background: rgba(37, 99, 235, 0.16);
+  color: #93c5fd;
+}
+
 /* Anchor target offset so headings clear the floating "目录" pill. */
 .wiki-markdown h1,
 .wiki-markdown h2,

frontend-web/src/components/workspace/admin/concurrency-monitor.tsx

@@ -0,0 +1,556 @@
+"use client";
+
+import {
+  Activity,
+  Gauge,
+  Loader2,
+  OctagonX,
+  RefreshCw,
+  Square,
+  Zap,
+} from "lucide-react";
+import { useId, useMemo, useState } from "react";
+import { toast } from "sonner";
+
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Switch } from "@/components/ui/switch";
+import type {
+  ActiveRunItem,
+  ConcurrencyPoint,
+  Granularity,
+  TokenSpeedPoint,
+} from "@/core/admin/active-runs";
+import {
+  useActiveRuns,
+  useCancelActiveRun,
+  useCancelAllActiveRuns,
+  useConcurrencySeries,
+  useMonitorSettings,
+  useTokenSpeedSeries,
+  useUpdateMonitorSettings,
+} from "@/core/admin/hooks";
+import { cn } from "@/lib/utils";
+
+/** lookback window (hours) per granularity. */
+const LOOKBACK: Record<Granularity, number> = { minute: 3, hour: 48 };
+
+function fmtBucket(iso: string, granularity: Granularity): string {
+  const date = new Date(iso);
+  if (Number.isNaN(date.getTime())) return iso;
+  const mm = String(date.getMonth() + 1).padStart(2, "0");
+  const dd = String(date.getDate()).padStart(2, "0");
+  const hh = String(date.getHours()).padStart(2, "0");
+  const mi = String(date.getMinutes()).padStart(2, "0");
+  return granularity === "hour" ? `${mm}-${dd} ${hh}:00` : `${hh}:${mi}`;
+}
+
+function fmtElapsed(seconds: number): string {
+  if (seconds < 60) return `${seconds}s`;
+  const m = Math.floor(seconds / 60);
+  const s = seconds % 60;
+  if (m < 60) return `${m}m${s.toString().padStart(2, "0")}s`;
+  const h = Math.floor(m / 60);
+  return `${h}h${(m % 60).toString().padStart(2, "0")}m`;
+}
+
+interface LineSeries {
+  name: string;
+  color: string;
+  values: (number | null)[];
+}
+
+/** Round a value up to a "nice" axis ceiling (1 / 2 / 5 × 10ⁿ). */
+function niceCeil(v: number): number {
+  if (!Number.isFinite(v) || v <= 0) return 1;
+  const exp = Math.floor(Math.log10(v));
+  const base = 10 ** exp;
+  const f = v / base;
+  const nice = f <= 1 ? 1 : f <= 2 ? 2 : f <= 5 ? 5 : 10;
+  return nice * base;
+}
+
+/**
+ * Build distinct axis ticks from the data max. For integer series (并发量) this
+ * yields whole-number ticks with no duplicate labels (fixes the「0 0 0 1 1」
+ * axis when the max is 1); for floats it uses a nice ceiling at quarters.
+ */
+function buildTicks(dataMax: number, integer: boolean): number[] {
+  if (!Number.isFinite(dataMax) || dataMax <= 0) return [0, 1];
+  if (integer) {
+    const niceMax = Math.max(1, Math.ceil(dataMax));
+    const step = Math.max(1, Math.ceil(niceMax / 4)); // ≤5 integer ticks
+    const top = Math.ceil(niceMax / step) * step;
+    const ticks: number[] = [];
+    for (let v = 0; v <= top; v += step) ticks.push(v);
+    return ticks;
+  }
+  const niceMax = niceCeil(dataMax);
+  return [0, 0.25, 0.5, 0.75, 1].map((r) => niceMax * r);
+}
+
+function fmtAxis(v: number, integer: boolean): string {
+  if (integer) return String(Math.round(v));
+  if (v === 0) return "0";
+  return v < 10 ? v.toFixed(1) : String(Math.round(v));
+}
+
+/** Last non-null value of a series (for the legend's current reading). */
+function latestOf(values: (number | null)[]): number | null {
+  for (let i = values.length - 1; i >= 0; i -= 1) {
+    if (values[i] != null) return values[i] as number;
+  }
+  return null;
+}
+
+/** Minimal dependency-free SVG line chart: legend + 1–2 series + area + caption. */
+function LineChart({
+  labels,
+  series,
+  unit,
+  integer = false,
+  note,
+  emptyHint,
+}: {
+  labels: string[];
+  series: LineSeries[];
+  unit: string;
+  integer?: boolean;
+  note?: string;
+  emptyHint: string;
+}) {
+  const gradId = `cm-area-${useId().replace(/:/g, "")}`;
+  const width = 760;
+  const height = 220;
+  const pad = { top: 16, right: 16, bottom: 26, left: 44 };
+  const cw = width - pad.left - pad.right;
+  const ch = height - pad.top - pad.bottom;
+  const n = labels.length;
+
+  const allValues = series.flatMap((s) => s.values.filter((v): v is number => v != null));
+  const dataMax = allValues.length ? Math.max(...allValues) : 0;
+  const ticks = buildTicks(dataMax, integer);
+  const axisMax = ticks[ticks.length - 1] || 1;
+
+  // Legend always renders (even with no data) so the lines are self-explanatory.
+  const legend = (
+    <div className="mb-2 flex flex-wrap items-center gap-x-4 gap-y-1">
+      {series.map((s) => {
+        const latest = latestOf(s.values);
+        return (
+          <span key={s.name} className="flex items-center gap-1.5 text-xs text-[#5F6368] dark:text-slate-300">
+            <span className="inline-block h-[3px] w-4 rounded-full" style={{ backgroundColor: s.color }} />
+            {s.name}
+            {latest != null && (
+              <span className="font-semibold tabular-nums text-[#231815] dark:text-white">
+                {Number.isInteger(latest) ? latest : latest.toFixed(1)}
+                {unit}
+              </span>
+            )}
+          </span>
+        );
+      })}
+    </div>
+  );
+
+  const caption = note ? (
+    <p className="mt-2 text-[11px] leading-4 text-[#8B6B6B] dark:text-[#7FACF2]">{note}</p>
+  ) : null;
+
+  if (n === 0) {
+    return (
+      <div>
+        {legend}
+        <div className="flex h-[160px] items-center justify-center rounded-lg border border-dashed border-[#F1D6D6] text-sm text-[#5F6368] dark:border-[#213D5E] dark:text-slate-400">
+          {emptyHint}
+        </div>
+        {caption}
+      </div>
+    );
+  }
+
+  const xFor = (i: number) => pad.left + (n <= 1 ? cw / 2 : (i / (n - 1)) * cw);
+  const yFor = (v: number) => pad.top + ch - (v / axisMax) * ch;
+
+  const linePath = (vals: (number | null)[]) => {
+    let d = "";
+    let started = false;
+    vals.forEach((v, i) => {
+      if (v == null) {
+        started = false;
+        return;
+      }
+      d += `${started ? "L" : "M"} ${xFor(i).toFixed(1)} ${yFor(v).toFixed(1)} `;
+      started = true;
+    });
+    return d.trim();
+  };
+
+  const first = series[0];
+  const areaPath = (() => {
+    if (!first) return "";
+    const line = linePath(first.values);
+    if (!line) return "";
+    return `${line} L ${xFor(n - 1).toFixed(1)} ${(pad.top + ch).toFixed(1)} L ${xFor(0).toFixed(1)} ${(pad.top + ch).toFixed(1)} Z`;
+  })();
+
+  const labelStep = Math.max(1, Math.ceil(n / 7));
+
+  return (
+    <div>
+      {legend}
+      <svg viewBox={`0 0 ${width} ${height}`} className="w-full" role="img" aria-label="时序折线图">
+        <defs>
+          <linearGradient id={gradId} x1="0" x2="0" y1="0" y2="1">
+            <stop offset="0%" stopColor={first?.color ?? "#C1121F"} stopOpacity="0.18" />
+            <stop offset="100%" stopColor={first?.color ?? "#C1121F"} stopOpacity="0.02" />
+          </linearGradient>
+        </defs>
+        {ticks.map((t) => {
+          const y = yFor(t);
+          return (
+            <g key={t}>
+              <line
+                x1={pad.left}
+                x2={width - pad.right}
+                y1={y}
+                y2={y}
+                stroke="currentColor"
+                className="text-[#E5E7EB] dark:text-[#3F3F46]"
+                strokeWidth="1"
+              />
+              <text x={pad.left - 6} y={y + 3} textAnchor="end" className="fill-[#9CA3AF] text-[10px]">
+                {fmtAxis(t, integer)}
+              </text>
+            </g>
+          );
+        })}
+        {areaPath && <path d={areaPath} fill={`url(#${gradId})`} />}
+        {series.map((s) => (
+          <path
+            key={s.name}
+            d={linePath(s.values)}
+            fill="none"
+            stroke={s.color}
+            strokeWidth="2"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+        ))}
+        {labels.map((label, i) => {
+          if (i !== 0 && i !== n - 1 && i % labelStep !== 0) return null;
+          return (
+            <text key={`${label}-${i}`} x={xFor(i)} y={height - 8} textAnchor="middle" className="fill-[#6B7280] text-[10px]">
+              {label}
+            </text>
+          );
+        })}
+        {series.map((s) =>
+          s.values.map((v, i) =>
+            v == null ? null : (
+              <circle key={`${s.name}-${i}`} cx={xFor(i)} cy={yFor(v)} r={2.5} fill={s.color}>
+                <title>{`${labels[i]} · ${s.name}: ${v}${unit}`}</title>
+              </circle>
+            ),
+          ),
+        )}
+      </svg>
+      {caption}
+    </div>
+  );
+}
+
+function ChartCard({
+  icon: Icon,
+  title,
+  subtitle,
+  children,
+}: {
+  icon: typeof Activity;
+  title: string;
+  subtitle: string;
+  children: React.ReactNode;
+}) {
+  return (
+    <section className="rounded-lg border border-[#F1D6D6] bg-white p-4 shadow-sm dark:border-[#213D5E] dark:bg-[#02244C]">
+      <div className="mb-3 flex items-center gap-2">
+        <Icon className="size-4 text-[#C1121F] dark:text-[#7FACF2]" />
+        <h3 className="font-semibold text-[#231815] dark:text-white">{title}</h3>
+        <span className="ml-auto text-xs text-[#8B6B6B] dark:text-[#7FACF2]">{subtitle}</span>
+      </div>
+      {children}
+    </section>
+  );
+}
+
+function ActiveRunRow({
+  run,
+  onStop,
+  stopping,
+}: {
+  run: ActiveRunItem;
+  onStop: (runId: string) => void;
+  stopping: boolean;
+}) {
+  return (
+    <div className="grid grid-cols-[minmax(0,1.4fr)_minmax(0,1.2fr)_72px_64px_64px_72px] items-center gap-3 border-b border-[#F1D6D6] px-3 py-2 text-sm last:border-b-0 dark:border-[#213D5E]">
+      <div className="min-w-0">
+        <div className="truncate font-medium text-[#202124] dark:text-white">{run.user_name || "未知用户"}</div>
+        <div className="truncate text-xs text-[#5F6368] dark:text-slate-400" title={run.thread_title}>
+          {run.thread_title || run.thread_id}
+        </div>
+      </div>
+      <div className="min-w-0 truncate text-[#202124] dark:text-slate-100">{run.agent_name}</div>
+      <Badge variant="outline" className="justify-center">
+        {run.kind}
+      </Badge>
+      <span
+        className={cn(
+          "text-center text-xs font-medium",
+          run.status === "running" ? "text-[#0F766E] dark:text-teal-300" : "text-[#B45309] dark:text-amber-300",
+        )}
+      >
+        {run.status === "running" ? "运行中" : "排队中"}
+      </span>
+      <span className="text-center text-xs tabular-nums text-[#5F6368] dark:text-slate-400">
+        {fmtElapsed(run.elapsed_seconds)}
+      </span>
+      <Button
+        size="sm"
+        variant="outline"
+        className="h-7 border-[#C1121F]/40 text-[#C1121F] hover:bg-[#FFF1F1] dark:border-rose-400/40 dark:text-rose-200"
+        disabled={stopping}
+        onClick={() => onStop(run.run_id)}
+      >
+        {stopping ? <Loader2 className="size-3.5 animate-spin" /> : <Square className="size-3.5" />}
+        停止
+      </Button>
+    </div>
+  );
+}
+
+export function ConcurrencyMonitorPanel() {
+  const [open, setOpen] = useState(true);
+  const [granularity, setGranularity] = useState<Granularity>("minute");
+
+  const { data: live, isLoading: liveLoading, refetch, isRefetching } = useActiveRuns(open);
+  const concurrency = useConcurrencySeries(granularity, LOOKBACK[granularity], open);
+  const tokenSpeed = useTokenSpeedSeries(granularity, LOOKBACK[granularity], open);
+  const { data: settings } = useMonitorSettings();
+  const updateSettings = useUpdateMonitorSettings();
+  const cancelOne = useCancelActiveRun();
+  const cancelAll = useCancelAllActiveRuns();
+
+  const [stoppingId, setStoppingId] = useState<string | null>(null);
+
+  const count = live?.count ?? 0;
+  const runs = live?.runs ?? [];
+  const samplerOn = settings?.enabled ?? false;
+
+  const concurrencyChart = useMemo(() => {
+    const points: ConcurrencyPoint[] = concurrency.data?.points ?? [];
+    return {
+      labels: points.map((p) => fmtBucket(p.bucket, granularity)),
+      series: [
+        { name: "峰值并发", color: "#C1121F", values: points.map((p) => p.peak) },
+        { name: "平均并发", color: "#F59E0B", values: points.map((p) => p.avg) },
+      ] as LineSeries[],
+    };
+  }, [concurrency.data, granularity]);
+
+  const tokenChart = useMemo(() => {
+    const points: TokenSpeedPoint[] = tokenSpeed.data?.points ?? [];
+    return {
+      labels: points.map((p) => fmtBucket(p.bucket, granularity)),
+      series: [
+        { name: "平均速度", color: "#2563EB", values: points.map((p) => p.avg_tokens_per_sec) },
+        { name: "最慢", color: "#9333EA", values: points.map((p) => p.min_tokens_per_sec) },
+      ] as LineSeries[],
+    };
+  }, [tokenSpeed.data, granularity]);
+
+  const handleStop = async (runId: string) => {
+    setStoppingId(runId);
+    try {
+      const res = await cancelOne.mutateAsync(runId);
+      toast[res.cancelled ? "success" : "info"](res.cancelled ? "已停止该对话调用" : "该调用已结束或不存在");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "停止失败");
+    } finally {
+      setStoppingId(null);
+    }
+  };
+
+  const handleStopAll = async () => {
+    if (runs.length === 0) return;
+    if (!window.confirm(`确定要停止当前全部 ${count} 个并发调用吗？这会中断这些用户正在生成的回答。`)) return;
+    try {
+      const res = await cancelAll.mutateAsync();
+      toast.success(`已停止 ${res.cancelled_count} 个调用`);
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "全部停止失败");
+    }
+  };
+
+  const handleToggleSampler = async (next: boolean) => {
+    try {
+      await updateSettings.mutateAsync(next);
+      toast.success(next ? "已开启并发采样" : "已关闭并发采样（折线图不再新增历史点）");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "切换失败");
+    }
+  };
+
+  return (
+    <section className="space-y-4 rounded-xl border border-[#F1D6D6] bg-[#FFF7F7] p-4 shadow-sm dark:border-[#213D5E] dark:bg-[#011226]">
+      {/* header */}
+      <div className="flex flex-wrap items-center gap-3">
+        <div className="flex items-center gap-2">
+          <span className="flex size-9 items-center justify-center rounded-lg bg-[#C1121F] text-white dark:bg-[#2563EB]">
+            <Activity className="size-5" />
+          </span>
+          <div>
+            <div className="font-semibold text-[#231815] dark:text-white">实时并发监控</div>
+            <div className="text-xs text-[#8B6B6B] dark:text-[#7FACF2]">
+              监控大模型并发压力，可直接停止任意对话调用
+            </div>
+          </div>
+        </div>
+
+        <div className="ml-auto flex flex-wrap items-center gap-3">
+          <div className="flex items-center gap-2 rounded-lg border border-[#F1D6D6] bg-white px-3 py-1.5 dark:border-[#213D5E] dark:bg-[#02244C]">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">当前并发</span>
+            <span
+              className={cn(
+                "text-2xl font-semibold tabular-nums",
+                count > 0 ? "text-[#C1121F] dark:text-[#7FACF2]" : "text-[#202124] dark:text-white",
+              )}
+            >
+              {count}
+            </span>
+          </div>
+          <div className="flex items-center gap-2 rounded-lg border border-[#F1D6D6] bg-white px-3 py-1.5 dark:border-[#213D5E] dark:bg-[#02244C]">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">后台采样</span>
+            <Switch checked={samplerOn} onCheckedChange={handleToggleSampler} disabled={updateSettings.isPending} />
+          </div>
+          <Button variant="outline" size="sm" onClick={() => refetch()} disabled={isRefetching}>
+            <RefreshCw className={cn("mr-1 size-4", isRefetching && "animate-spin")} />
+            刷新
+          </Button>
+          <Button
+            variant="outline"
+            size="sm"
+            className="border-[#C1121F]/50 text-[#C1121F] hover:bg-[#FFF1F1] dark:border-rose-400/40 dark:text-rose-200"
+            onClick={handleStopAll}
+            disabled={cancelAll.isPending || runs.length === 0}
+          >
+            <OctagonX className="mr-1 size-4" />
+            全部停止
+          </Button>
+          <Button variant="ghost" size="sm" onClick={() => setOpen((v) => !v)}>
+            {open ? "收起" : "展开"}
+          </Button>
+        </div>
+      </div>
+
+      {open && (
+        <>
+          {!samplerOn && (
+            <div className="rounded-lg border border-amber-300/60 bg-amber-50 px-3 py-2 text-xs text-amber-800 dark:border-amber-300/30 dark:bg-amber-300/10 dark:text-amber-100">
+              后台采样默认关闭：实时并发数与「停止」功能始终可用。需要并发量历史折线图时，打开右上角「后台采样」开关即可开始记录（对线上服务影响极小，可随时关闭）。
+            </div>
+          )}
+
+          {/* granularity toggle */}
+          <div className="flex items-center gap-2">
+            <span className="text-xs text-[#5F6368] dark:text-slate-300">统计粒度</span>
+            {(["minute", "hour"] as Granularity[]).map((g) => (
+              <Button
+                key={g}
+                size="sm"
+                variant={granularity === g ? "default" : "outline"}
+                className={cn("h-7", granularity === g && "bg-[#C1121F] hover:bg-[#A50F1A] dark:bg-[#2563EB]")}
+                onClick={() => setGranularity(g)}
+              >
+                {g === "minute" ? "按分钟" : "按小时"}
+              </Button>
+            ))}
+            <span className="text-xs text-[#8B6B6B] dark:text-[#7FACF2]">
+              {granularity === "minute" ? "近 3 小时" : "近 48 小时"}
+            </span>
+          </div>
+
+          {/* charts */}
+          <div className="grid gap-3 xl:grid-cols-2">
+            <ChartCard icon={Gauge} title="并发量（系统压力）" subtitle={`每${granularity === "hour" ? "小时" : "分钟"}一个点`}>
+              {concurrency.isLoading ? (
+                <div className="flex h-[220px] items-center justify-center text-sm text-[#5F6368] dark:text-slate-400">
+                  <Loader2 className="mr-2 size-4 animate-spin" /> 加载中
+                </div>
+              ) : (
+                <LineChart
+                  labels={concurrencyChart.labels}
+                  series={concurrencyChart.series}
+                  unit=" 个"
+                  integer
+                  note="红线=该时段同时进行的最多调用数（峰值）；橙线=该时段平均值。数值越高、越靠上，说明同时打大模型的请求越多、系统压力越大。"
+                  emptyHint="暂无并发采样数据（需打开「后台采样」开关后才开始记录）"
+                />
+              )}
+            </ChartCard>
+            <ChartCard icon={Zap} title="大模型出字速度" subtitle={`每${granularity === "hour" ? "小时" : "分钟"}一个点`}>
+              {tokenSpeed.isLoading ? (
+                <div className="flex h-[220px] items-center justify-center text-sm text-[#5F6368] dark:text-slate-400">
+                  <Loader2 className="mr-2 size-4 animate-spin" /> 加载中
+                </div>
+              ) : (
+                <LineChart
+                  labels={tokenChart.labels}
+                  series={tokenChart.series}
+                  unit=" t/s"
+                  note="蓝线=该时段所有大模型调用的平均出字速度（tokens/秒，越高越快）；紫线=该时段最慢的一次调用。某段时间线明显下凹，说明那会儿模型/供应商变慢，是压力或瓶颈所在。"
+                  emptyHint="暂无大模型调用记录"
+                />
+              )}
+            </ChartCard>
+          </div>
+
+          {/* active run list */}
+          <section className="rounded-lg border border-[#F1D6D6] bg-white dark:border-[#213D5E] dark:bg-[#02244C]">
+            <div className="flex items-center gap-2 border-b border-[#F1D6D6] px-3 py-2 dark:border-[#213D5E]">
+              <span className="font-semibold text-[#231815] dark:text-white">正在进行的调用</span>
+              <Badge variant="outline">{count}</Badge>
+              {liveLoading && <Loader2 className="size-3.5 animate-spin text-[#8B6B6B]" />}
+            </div>
+            {runs.length === 0 ? (
+              <div className="py-10 text-center text-sm text-[#5F6368] dark:text-slate-400">
+                当前没有正在进行的大模型调用
+              </div>
+            ) : (
+              <div>
+                <div className="grid grid-cols-[minmax(0,1.4fr)_minmax(0,1.2fr)_72px_64px_64px_72px] gap-3 border-b border-[#F1D6D6] px-3 py-2 text-xs text-[#8B6B6B] dark:border-[#213D5E] dark:text-[#7FACF2]">
+                  <span>用户 / 会话</span>
+                  <span>智能体</span>
+                  <span className="text-center">类型</span>
+                  <span className="text-center">状态</span>
+                  <span className="text-center">已运行</span>
+                  <span className="text-center">操作</span>
+                </div>
+                {runs.map((run) => (
+                  <ActiveRunRow
+                    key={run.run_id}
+                    run={run}
+                    onStop={handleStop}
+                    stopping={stoppingId === run.run_id}
+                  />
+                ))}
+              </div>
+            )}
+          </section>
+        </>
+      )}
+    </section>
+  );
+}
+
+export default ConcurrencyMonitorPanel;

frontend-web/src/components/workspace/agents/agent-card.tsx

@@ -77,6 +77,7 @@ import {
 import { getAgent } from "@/core/agents/api";
 import type { Agent, AgentQuestion, UpdateAgentRequest } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
 import { useI18n } from "@/core/i18n/hooks";
 import { useSkills } from "@/core/skills/hooks";
 import { formatDateTime } from "@/core/utils/datetime";
@@ -250,6 +251,8 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
 
   const storedAuth = useMemo(() => getStoredAuth(), []);
   const currentUserId = storedAuth?.user_id ?? null;
+  // 发布请求实际以「实时」token 执行 —— 用 live 账号来提示发布者并检测账号是否被切换。
+  const live = useLiveAccount();
   const isAdmin = storedAuth?.system_role === "admin";
   const isBuiltin = agent.builtin;
   const isOwned =
@@ -424,18 +427,38 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
       setPublishPickerOpen(true);
       return;
     }
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
         request: { published: !agent.published },
       });
-      toast.success(agent.published ? "已取消发布" : "已发布");
+      toast.success(
+        agent.published ? "已取消发布" : `已发布（操作账号：${live.displayName}）`,
+      );
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
     }
   }
 
+  // 发布操作以实时 token 执行。若会话中途账号被切换（常见于另一标签页登录了别的
+  // 账号），先弹一次确认 —— 避免误以本人之外的账号执行发布。返回 false = 用户取消。
+  function warnIfAccountSwitched(): boolean {
+    if (!live.switched) {
+      return true;
+    }
+    return window.confirm(
+      `当前登录账号已从「${live.mountDisplayName}」切换为「${live.displayName}」。\n` +
+        `本次发布将以「${live.displayName}」执行。如需以「${live.mountDisplayName}」操作，请取消并刷新页面。\n\n仍要继续吗？`,
+    );
+  }
+
   async function handlePublishToSquare(squareId: string) {
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
@@ -443,7 +466,7 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
       });
       const sqName =
         publishSquares?.squares.find((s) => s.id === squareId)?.name ?? "广场";
-      toast.success(`已发布到「${sqName}」`);
+      toast.success(`已发布到「${sqName}」（操作账号：${live.displayName}）`);
       setPublishPickerOpen(false);
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
@@ -1117,6 +1140,23 @@ export function AgentCard({ agent, layout = "card", onPublisherClick }: AgentCar
         loading={updateAgent.isPending}
         onConfirm={(squareId) => void handlePublishToSquare(squareId)}
         description="请选择要把该智能体发布到哪个广场。每个智能体只能归属一个广场，不会重复出现。"
+        accountNotice={
+          <div className="text-xs">
+            <p className="text-muted-foreground">
+              发布操作账号：
+              <span className="text-foreground font-medium">
+                「{live.displayName}」
+              </span>
+            </p>
+            {live.switched && (
+              <p className="text-destructive mt-1">
+                ⚠ 当前登录账号已从「{live.mountDisplayName}」切换为「
+                {live.displayName}」。如需以「{live.mountDisplayName}
+                」操作，请刷新页面确认。
+              </p>
+            )}
+          </div>
+        }
       />
     </>
   );

frontend-web/src/components/workspace/agents/agent-chat-sidebar.tsx

@@ -70,6 +70,8 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  bootstrapResumePath,
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
   sortThreadsPinnedFirst,
@@ -338,14 +340,14 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
   const [renameValue, setRenameValue] = useState("");
   const [shareThreadId, setShareThreadId] = useState<string | null>(null);
 
-  // 排除调度/引导/会商类会话，与首页一致；置顶优先。
+  // 排除调度/会商类系统会话，与首页一致；智能体创建（bootstrap）会话保留展示
+  // （带机器人图标、点击回创建页）；置顶优先。
   const visibleThreads = useMemo(
     () =>
       sortThreadsPinnedFirst(
         threads.filter(
           (thread) =>
             thread.metadata?.thread_type !== "scheduler" &&
-            thread.metadata?.thread_type !== "bootstrap" &&
             thread.metadata?.thread_type !== "roundtable",
         ),
       ),
@@ -450,7 +452,8 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
           </div>
         ) : (
           filteredThreads.map((thread) => {
-            const href = pathOf(thread);
+            const isBoot = isBootstrapThread(thread);
+            const href = isBoot ? bootstrapResumePath(thread.thread_id) : pathOf(thread);
             const isActive = href === pathname;
             const pinned = isThreadPinned(thread);
             const favorited = isThreadFavorite(thread);
@@ -468,12 +471,22 @@ function RecentChatsPane({ activeAgentId }: { activeAgentId?: string }) {
                       : "text-muted-foreground hover:bg-accent/60 hover:text-foreground",
                   )}
                 >
-                  <MessageSquare
-                    className={cn(
-                      "size-3.5 shrink-0",
-                      isActive ? "text-primary" : "text-muted-foreground/70",
-                    )}
-                  />
+                  {isBoot ? (
+                    <Bot
+                      className={cn(
+                        "size-3.5 shrink-0",
+                        isActive ? "text-primary" : "text-muted-foreground/70",
+                      )}
+                      aria-label="智能体创建会话"
+                    />
+                  ) : (
+                    <MessageSquare
+                      className={cn(
+                        "size-3.5 shrink-0",
+                        isActive ? "text-primary" : "text-muted-foreground/70",
+                      )}
+                    />
+                  )}
                   {pinned && (
                     <Pin className="text-muted-foreground/70 size-3 shrink-0" />
                   )}

frontend-web/src/components/workspace/agents/agent-detail-panel.tsx

@@ -43,6 +43,7 @@ import {
 import { Switch } from "@/components/ui/switch";
 import { Textarea } from "@/components/ui/textarea";
 import { AgentQuestionEditor } from "@/components/workspace/agents/agent-question-editor";
+import { AgentRecentChats } from "@/components/workspace/agents/agent-recent-chats";
 import { useArtifactsOptional } from "@/components/workspace/artifacts";
 import { EnabledSkillList } from "@/components/workspace/agents/enabled-skill-list";
 import { SkillPickerSheet } from "@/components/workspace/agents/skill-picker-sheet";
@@ -59,6 +60,7 @@ import {
   type UpdateAgentRequest,
 } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
+import { useLiveAccount } from "@/core/auth/use-live-account";
 import { isAgentSkillCandidate } from "@/core/skills";
 import { useSkills } from "@/core/skills/hooks";
 import { usePublishSquares } from "@/core/system-settings/hooks";
@@ -135,6 +137,7 @@ export function AgentDetailPanel({
   onAskQuestion,
   disabled,
   defaultCollapsed,
+  showRecentChats,
 }: {
   agent: Agent | null | undefined;
   agentName: string;
@@ -142,6 +145,8 @@ export function AgentDetailPanel({
   disabled?: boolean;
   /** 初始收起（任务工作区进入时默认收起智能体信息面板）。 */
   defaultCollapsed?: boolean;
+  /** 在面板底部展示「有关此智能体的最近对话」（仅智能体问答页开启，任务工作区不展示）。 */
+  showRecentChats?: boolean;
 }) {
   const router = useRouter();
   const [collapsed, setCollapsed] = useState(defaultCollapsed ?? false);
@@ -159,6 +164,8 @@ export function AgentDetailPanel({
   const [deleteOpen, setDeleteOpen] = useState(false);
   const [publishPickerOpen, setPublishPickerOpen] = useState(false);
   const [detailSkillName, setDetailSkillName] = useState<string | null>(null);
+  // 发布以实时 token 执行 —— 用 live 账号提示发布者并检测账号是否被切换。
+  const live = useLiveAccount();
 
   const updateAgent = useUpdateAgent();
   const deleteAgent = useDeleteAgent();
@@ -343,19 +350,39 @@ export function AgentDetailPanel({
       setPublishPickerOpen(true);
       return;
     }
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
         request: { published: !agent.published },
       });
-      toast.success(agent.published ? "已下架" : "已发布");
+      toast.success(
+        agent.published ? "已下架" : `已发布（操作账号：${live.displayName}）`,
+      );
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
     }
   }
 
+  // 发布以实时 token 执行。会话中途账号被切换（常见于另一标签页登录了别的账号）时
+  // 先弹确认，避免误以本人之外的账号执行发布。返回 false = 用户取消。
+  function warnIfAccountSwitched(): boolean {
+    if (!live.switched) {
+      return true;
+    }
+    return window.confirm(
+      `当前登录账号已从「${live.mountDisplayName}」切换为「${live.displayName}」。\n` +
+        `本次发布将以「${live.displayName}」执行。如需以「${live.mountDisplayName}」操作，请取消并刷新页面。\n\n仍要继续吗？`,
+    );
+  }
+
   async function handlePublishToSquare(squareId: string) {
     if (!agent) return;
+    if (!warnIfAccountSwitched()) {
+      return;
+    }
     try {
       await updateAgent.mutateAsync({
         id: agent.id,
@@ -363,7 +390,7 @@ export function AgentDetailPanel({
       });
       const sqName =
         publishSquares?.squares.find((s) => s.id === squareId)?.name ?? "广场";
-      toast.success(`已发布到「${sqName}」`);
+      toast.success(`已发布到「${sqName}」（操作账号：${live.displayName}）`);
       setPublishPickerOpen(false);
     } catch (err) {
       toast.error(err instanceof Error ? err.message : String(err));
@@ -791,6 +818,9 @@ export function AgentDetailPanel({
           onViewDetail={setDetailSkillName}
         />
       </Section>
+
+      {/* ── 最近对话（右下角，仅智能体问答页展示，编辑态隐藏）──────────── */}
+      {showRecentChats && !editing && <AgentRecentChats agentId={agent.id} />}
     </div>
   );
 
@@ -921,6 +951,23 @@ export function AgentDetailPanel({
         loading={updateAgent.isPending}
         onConfirm={(squareId) => void handlePublishToSquare(squareId)}
         description="请选择要把该智能体发布到哪个广场。每个智能体只能归属一个广场，不会重复出现。"
+        accountNotice={
+          <div className="text-xs">
+            <p className="text-muted-foreground">
+              发布操作账号：
+              <span className="text-foreground font-medium">
+                「{live.displayName}」
+              </span>
+            </p>
+            {live.switched && (
+              <p className="text-destructive mt-1">
+                ⚠ 当前登录账号已从「{live.mountDisplayName}」切换为「
+                {live.displayName}」。如需以「{live.mountDisplayName}
+                」操作，请刷新页面确认。
+              </p>
+            )}
+          </div>
+        }
       />
     </>
   );

frontend-web/src/components/workspace/agents/agent-module-sidebar.tsx

@@ -107,33 +107,11 @@ function groupAgentsByTag(agents: Agent[], allowedTagIds: string[]): AgentGroup[
   return groups;
 }
 
-/**
- * 「按类型聚合智能体 + 聊天记录」左栏（需求 0616 #3 zzJC / #4 zzXD）。
- *
- * - 上半：可见智能体按标签（类型）分组、可折叠；点击进入该智能体对话（保持当前路由
- *   命名空间，全量模式下为 /page/strategy）。
- * - 下半：聊天记录 —— 仅与本模块智能体（即左栏列出的智能体）的会话，按 metadata.agent_id 过滤。
- * - 宽度与通用问答左栏一致（``--sidebar-width``）。
- */
-export function AgentModuleSidebar({
-  moduleKey,
-  activeAgentId,
-  onOpenSettings,
-}: {
-  moduleKey: string;
-  activeAgentId?: string;
-  /** 传入则在左栏顶部显示设置齿轮（admin）。 */
-  onOpenSettings?: () => void;
-}) {
-  const routeBase = useRouteBase();
-  const pathname = usePathname();
-  // 智能体图标配色分主题：深蓝主题用规范蓝-青系，其它（浅色）保持原高彩度色，互不影响。
-  const { theme } = useTheme();
-  const isDark = theme === "dark";
-  const { agents } = useAgents();
+export function useAgentModuleSidebarData(moduleKey: string) {
+  const { agents, isLoading: agentsLoading } = useAgents();
   const { data: threads = [] } = useThreads();
-  const { data: moduleConfig } = useAgentModuleConfig(moduleKey);
-  const [collapsed, setCollapsed] = useState<Set<string>>(() => new Set());
+  const { data: moduleConfig, isLoading: configLoading } =
+    useAgentModuleConfig(moduleKey);
 
   const allowedTagIds = useMemo(
     () => moduleConfig?.tag_ids ?? [],
@@ -161,6 +139,56 @@ export function AgentModuleSidebar({
     [threads, moduleAgentIds],
   );
 
+  return {
+    groups,
+    moduleAgentIds,
+    moduleThreads,
+    allowedTagIds,
+    // admin 是否已确认该模块展示的智能体类型（配置了标签）。
+    hasConfiguredType: allowedTagIds.length > 0,
+    isLoading: agentsLoading || configLoading,
+  };
+}
+
+/**
+ * 「按类型聚合智能体 + 聊天记录」左栏（需求 0616 #3 zzJC / #4 zzXD）。
+ *
+ * - 上半：可见智能体按标签（类型）分组、可折叠；点击进入该智能体对话（保持当前路由
+ *   命名空间，全量模式下为 /page/strategy）。
+ * - 下半：聊天记录 —— 仅与本模块智能体（即左栏列出的智能体）的会话，按 metadata.agent_id 过滤。
+ * - 宽度与通用问答左栏一致（``--sidebar-width``）。
+ */
+export function AgentModuleSidebar({
+  moduleKey,
+  activeAgentId,
+  activeThreadId,
+  routeBase: routeBaseProp,
+  headerTitle = "智能体",
+  className,
+  onOpenSettings,
+}: {
+  moduleKey: string;
+  activeAgentId?: string;
+  activeThreadId?: string;
+  routeBase?: string;
+  headerTitle?: string;
+  className?: string;
+  /** 传入则在左栏顶部显示设置齿轮（admin）。 */
+  onOpenSettings?: () => void;
+}) {
+  const contextRouteBase = useRouteBase();
+  const routeBase = routeBaseProp ?? contextRouteBase;
+  const pathname = usePathname();
+  // 智能体图标配色分主题：深蓝主题用规范蓝-青系，其它（浅色）保持原高彩度色，互不影响。
+  const { theme } = useTheme();
+  const isDark = theme === "dark";
+  const [collapsed, setCollapsed] = useState<Set<string>>(() => new Set());
+  const { groups, moduleThreads, hasConfiguredType } =
+    useAgentModuleSidebarData(moduleKey);
+  // 已确认智能体类型时，允许把上半「智能体类型」整块收起，把空间让给下半聊天记录。
+  const [agentsSectionCollapsed, setAgentsSectionCollapsed] = useState(false);
+  const agentsCollapsed = hasConfiguredType && agentsSectionCollapsed;
+
   const toggleGroup = (key: string) =>
     setCollapsed((prev) => {
       const next = new Set(prev);
@@ -169,14 +197,68 @@ export function AgentModuleSidebar({
       return next;
     });
 
+  // 已确认类型时把所有分组的智能体拍平（单选类型一般只有一个分组），
+  // 标题行直接显示该类型名 + 数量，去掉额外的分组行。
+  const flatAgents = useMemo(() => groups.flatMap((g) => g.agents), [groups]);
+  const configuredTypeLabel =
+    groups.length === 1 ? (groups[0]?.label ?? "智能体类型") : "智能体类型";
+
+  const renderAgentCard = (agent: Agent, keyPrefix: string) => {
+    const href = `${routeBase}/agents/${agent.id}/chats/new`;
+    const isActive = agent.id === activeAgentId;
+    const { from, to } = agentColor(agent.id, isDark);
+    return (
+      <Link
+        key={`${keyPrefix}:${agent.id}`}
+        href={href}
+        className={cn(
+          "group relative flex w-full items-start gap-2.5 rounded-xl border px-2.5 py-2 transition-colors",
+          isActive
+            ? "border-primary/40 bg-primary/5"
+            : "border-transparent hover:border-border hover:bg-accent/50",
+        )}
+      >
+        <span
+          className="mt-0.5 flex size-9 shrink-0 items-center justify-center rounded-lg text-white shadow-sm"
+          style={{ backgroundImage: `linear-gradient(135deg, ${from}, ${to})` }}
+        >
+          <Bot className="size-[18px]" />
+        </span>
+        <span className="min-w-0 flex-1">
+          <span
+            className={cn(
+              "block truncate text-[13px] font-semibold",
+              isActive ? "text-primary" : "text-foreground",
+            )}
+          >
+            {desensitize(agent.name)}
+          </span>
+          <span className="mt-0.5 block truncate text-[11px] leading-snug text-muted-foreground">
+            {agent.description ? desensitize(agent.description) : "智能体助手"}
+          </span>
+        </span>
+        {isActive && (
+          <span className="absolute top-1/2 right-1 h-6 w-1 -translate-y-1/2 rounded-full bg-primary" />
+        )}
+      </Link>
+    );
+  };
+
   return (
     // 原有布局不变，仅做配色适配：深色下左栏改为半透明深蓝玻璃面板（对齐 .sidebar-contents：
     // bg rgba(3,38,80,.8) + 蓝色发光边框），叠 backdrop-blur 让外壳的深蓝底图朦胧透出；
     // 浅色保持白底。其余颜色已走语义 token 自适配。
-    <aside className="flex h-full w-(--sidebar-width) shrink-0 flex-col overflow-hidden border-r border-border/70 bg-white text-foreground backdrop-blur-md dark:border-[#2b8ffe]/45 dark:bg-[#032650]/80">
+    <aside
+      className={cn(
+        "flex h-full w-(--sidebar-width) shrink-0 flex-col overflow-hidden border-r border-border/70 bg-white text-foreground backdrop-blur-md dark:border-[#2b8ffe]/45 dark:bg-[#032650]/80",
+        className,
+      )}
+    >
       {onOpenSettings && (
         <div className="flex shrink-0 items-center justify-between border-b border-border/60 px-3 py-2">
-          <span className="text-xs font-semibold text-foreground/80">智能体</span>
+          <span className="text-xs font-semibold text-foreground/80">
+            {headerTitle}
+          </span>
           <button
             type="button"
             onClick={onOpenSettings}
@@ -189,89 +271,116 @@ export function AgentModuleSidebar({
         </div>
       )}
 
-      {/* 上半：按类型分组的智能体（彩色卡片，与全量版看齐） */}
-      <div className="flex min-h-0 flex-[3] flex-col overflow-y-auto px-2 py-3">
-        <h2 className="mb-1 px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 select-none">
-          智能体类型
-        </h2>
-        {groups.length === 0 ? (
-          <p className="px-3 py-1.5 text-xs text-muted-foreground/70">暂无智能体</p>
+      {/* 上半：智能体列表。
+          - 未确认类型：按类型分组、可逐组折叠（与全量版一致）。
+          - 已确认类型：标题行直接显示该类型名 + 数量（去掉单独的分组行），
+            扁平列出该类型下的智能体，并可整块收起（grid 行高过渡动画），
+            收起后只留标题、把高度让给下半聊天记录。 */}
+      <div
+        className={cn(
+          "flex flex-col px-2 py-3",
+          agentsCollapsed ? "shrink-0" : "min-h-0 flex-[3]",
+        )}
+      >
+        {hasConfiguredType ? (
+          <>
+            <button
+              type="button"
+              onClick={() => setAgentsSectionCollapsed((prev) => !prev)}
+              title={agentsCollapsed ? "展开智能体" : "收起智能体"}
+              className="flex shrink-0 items-center justify-between px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 transition-colors hover:text-muted-foreground select-none"
+            >
+              <span className="flex items-center gap-1.5 truncate">
+                <span className="truncate">{configuredTypeLabel}</span>
+                <span className="rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-normal text-muted-foreground tabular-nums">
+                  {flatAgents.length}
+                </span>
+              </span>
+              <ChevronDown
+                className={cn(
+                  "size-3.5 shrink-0 transition-transform duration-300",
+                  agentsCollapsed && "-rotate-90",
+                )}
+              />
+            </button>
+            <div
+              className={cn(
+                "grid transition-[grid-template-rows] duration-300 ease-in-out",
+                agentsCollapsed
+                  ? "grid-rows-[0fr]"
+                  : "mt-1 min-h-0 flex-1 grid-rows-[1fr]",
+              )}
+            >
+              <div
+                className={cn(
+                  "min-h-0",
+                  agentsCollapsed
+                    ? "overflow-hidden"
+                    : "overflow-y-auto overflow-x-hidden",
+                )}
+              >
+                {flatAgents.length === 0 ? (
+                  <p className="px-3 py-1.5 text-xs text-muted-foreground/70">
+                    暂无智能体
+                  </p>
+                ) : (
+                  <div className="flex flex-col gap-1">
+                    {flatAgents.map((agent) =>
+                      renderAgentCard(agent, "configured"),
+                    )}
+                  </div>
+                )}
+              </div>
+            </div>
+          </>
         ) : (
-          <div className="flex flex-col gap-1.5">
-            {groups.map((group) => {
-              const isCollapsed = collapsed.has(group.key);
-              return (
-                <div key={group.key}>
-                  <button
-                    type="button"
-                    onClick={() => toggleGroup(group.key)}
-                    className="flex w-full items-center justify-between px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 transition-colors hover:text-muted-foreground select-none"
-                  >
-                    <span className="flex items-center gap-1.5 truncate">
-                      <span className="truncate">{group.label}</span>
-                      <span className="rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-normal text-muted-foreground tabular-nums">
-                        {group.agents.length}
-                      </span>
-                    </span>
-                    <ChevronDown
-                      className={cn(
-                        "size-3.5 shrink-0 transition-transform duration-200",
-                        isCollapsed && "-rotate-90",
-                      )}
-                    />
-                  </button>
-                  {!isCollapsed && (
-                    <div className="mt-1 flex flex-col gap-1">
-                      {group.agents.map((agent) => {
-                        const href = `${routeBase}/agents/${agent.id}/chats/new`;
-                        const isActive = agent.id === activeAgentId;
-                        const { from, to } = agentColor(agent.id, isDark);
-                        return (
-                          <Link
-                            key={`${group.key}:${agent.id}`}
-                            href={href}
+          <>
+            <h2 className="mb-1 shrink-0 px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 select-none">
+              智能体类型
+            </h2>
+            <div className="min-h-0 flex-1 overflow-y-auto overflow-x-hidden">
+              {groups.length === 0 ? (
+                <p className="px-3 py-1.5 text-xs text-muted-foreground/70">
+                  暂无智能体
+                </p>
+              ) : (
+                <div className="flex flex-col gap-1.5">
+                  {groups.map((group) => {
+                    const isCollapsed = collapsed.has(group.key);
+                    return (
+                      <div key={group.key}>
+                        <button
+                          type="button"
+                          onClick={() => toggleGroup(group.key)}
+                          className="flex w-full items-center justify-between px-3 py-1 text-[11px] font-semibold tracking-[0.04em] text-muted-foreground/80 transition-colors hover:text-muted-foreground select-none"
+                        >
+                          <span className="flex items-center gap-1.5 truncate">
+                            <span className="truncate">{group.label}</span>
+                            <span className="rounded-full bg-muted px-1.5 py-0.5 text-[10px] font-normal text-muted-foreground tabular-nums">
+                              {group.agents.length}
+                            </span>
+                          </span>
+                          <ChevronDown
                             className={cn(
-                              "group relative flex w-full items-start gap-2.5 rounded-xl border px-2.5 py-2 transition-colors",
-                              isActive
-                                ? "border-primary/40 bg-primary/5"
-                                : "border-transparent hover:border-border hover:bg-accent/50",
+                              "size-3.5 shrink-0 transition-transform duration-200",
+                              isCollapsed && "-rotate-90",
                             )}
-                          >
-                            <span
-                              className="mt-0.5 flex size-9 shrink-0 items-center justify-center rounded-lg text-white shadow-sm"
-                              style={{
-                                backgroundImage: `linear-gradient(135deg, ${from}, ${to})`,
-                              }}
-                            >
-                              <Bot className="size-[18px]" />
-                            </span>
-                            <span className="min-w-0 flex-1">
-                              <span
-                                className={cn(
-                                  "block truncate text-[13px] font-semibold",
-                                  isActive ? "text-primary" : "text-foreground",
-                                )}
-                              >
-                                {desensitize(agent.name)}
-                              </span>
-                              <span className="mt-0.5 block truncate text-[11px] leading-snug text-muted-foreground">
-                                {agent.description
-                                  ? desensitize(agent.description)
-                                  : "智能体助手"}
-                              </span>
-                            </span>
-                            {isActive && (
-                              <span className="absolute top-1/2 right-1 h-6 w-1 -translate-y-1/2 rounded-full bg-primary" />
+                          />
+                        </button>
+                        {!isCollapsed && (
+                          <div className="mt-1 flex flex-col gap-1">
+                            {group.agents.map((agent) =>
+                              renderAgentCard(agent, group.key),
                             )}
-                          </Link>
-                        );
-                      })}
-                    </div>
-                  )}
+                          </div>
+                        )}
+                      </div>
+                    );
+                  })}
                 </div>
-              );
-            })}
-          </div>
+              )}
+            </div>
+          </>
         )}
       </div>
 
@@ -286,7 +395,8 @@ export function AgentModuleSidebar({
           <div className="flex flex-col gap-0.5">
             {moduleThreads.map((thread) => {
               const href = pathOfThread(thread, undefined, routeBase);
-              const isActive = href === pathname;
+              const isActive =
+                thread.thread_id === activeThreadId || href === pathname;
               return (
                 <Link
                   key={thread.thread_id}

frontend-web/src/components/workspace/agents/agent-recent-chats.tsx

@@ -0,0 +1,79 @@
+"use client";
+
+import { MessageSquareIcon } from "lucide-react";
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+
+import { useThreadsPage } from "@/core/threads/hooks";
+import { pathOfThread, titleOfThread } from "@/core/threads/utils";
+import { desensitize } from "@/lib/desensitize";
+import { cn } from "@/lib/utils";
+
+const RECENT_LIMIT = 8;
+
+/**
+ * 「有关此智能体的最近对话」—— 渲染在智能体详情面板底部（右下角）。
+ * 按 `metadata.agent_id` 过滤出该智能体的会话，点击直接打开对应对话。
+ */
+export function AgentRecentChats({ agentId }: { agentId: string }) {
+  const pathname = usePathname();
+  const { data } = useThreadsPage({
+    page: 1,
+    pageSize: RECENT_LIMIT,
+    metadata: { agent_id: agentId },
+  });
+  // 该智能体的会话里同样排除调度 / 引导 / 会商类系统会话。
+  const threads = (data?.threads ?? []).filter(
+    (th) =>
+      th.metadata?.thread_type !== "bootstrap" &&
+      th.metadata?.thread_type !== "scheduler" &&
+      th.metadata?.thread_type !== "roundtable",
+  );
+
+  return (
+    <section className="bg-card/60 rounded-xl border p-4">
+      <div className="mb-3 flex items-center justify-between gap-2">
+        <h4 className="text-foreground flex items-center gap-1.5 text-sm font-semibold">
+          <MessageSquareIcon className="size-3.5" />
+          最近对话
+        </h4>
+        <span className="text-muted-foreground text-xs tabular-nums">
+          {threads.length} 个
+        </span>
+      </div>
+      {threads.length === 0 ? (
+        <p className="text-muted-foreground/60 text-sm">暂无对话</p>
+      ) : (
+        <div className="flex flex-col gap-1">
+          {threads.map((thread) => {
+            const href = pathOfThread(thread);
+            const isActive = href === pathname;
+            return (
+              <Link
+                key={thread.thread_id}
+                href={href}
+                title={desensitize(titleOfThread(thread, "新对话"))}
+                className={cn(
+                  "flex min-w-0 items-center gap-2 rounded-lg px-2 py-1.5 text-sm transition-colors",
+                  isActive
+                    ? "bg-primary/5 text-primary font-medium"
+                    : "text-muted-foreground hover:bg-accent hover:text-foreground",
+                )}
+              >
+                <MessageSquareIcon
+                  className={cn(
+                    "size-3.5 shrink-0",
+                    isActive ? "text-primary" : "text-muted-foreground/70",
+                  )}
+                />
+                <span className="truncate">
+                  {desensitize(titleOfThread(thread, "新对话"))}
+                </span>
+              </Link>
+            );
+          })}
+        </div>
+      )}
+    </section>
+  );
+}

frontend-web/src/components/workspace/agents/agent-selector.tsx

@@ -20,6 +20,7 @@ import {
 } from "@/components/ui/dialog";
 import { PromptInputButton } from "@/components/ai-elements/prompt-input";
 import { AgentManageDialog } from "@/components/workspace/agents/agent-manage-dialog";
+import { Tooltip } from "@/components/workspace/tooltip";
 import { useAgentSelector, useAgentsPaginated } from "@/core/agents";
 import type { Agent } from "@/core/agents";
 import { getStoredAuth } from "@/core/auth";
@@ -32,6 +33,10 @@ interface AgentSelectorProps {
   disabled?: boolean;
   /** 紧凑模式（CM 参考图）：触发器改为灰底胶囊 + 主色机器人图标。 */
   compact?: boolean;
+  /** 图标模式：用于 iframe 等底栏场景，仅显示机器人图标和可选清空按钮。 */
+  triggerVariant?: "default" | "icon";
+  iconButtonClassName?: string;
+  iconActiveClassName?: string;
 }
 
 /**
@@ -48,6 +53,9 @@ export function AgentSelector({
   onAgentChange,
   disabled,
   compact = false,
+  triggerVariant = "default",
+  iconButtonClassName,
+  iconActiveClassName,
 }: AgentSelectorProps) {
   const [open, setOpen] = useState(false);
   const [manageOpen, setManageOpen] = useState(false);
@@ -79,49 +87,92 @@ export function AgentSelector({
   };
 
   const triggerLabel = selectedAgent ? desensitize(selectedAgent.name) : "选择 Agent";
+  const iconTooltipLabel = selectedAgent ? triggerLabel : "未选择";
+  const iconMode = triggerVariant === "icon";
 
   return (
     <>
       <Dialog open={open} onOpenChange={setOpen}>
-        <DialogTrigger asChild>
-          <PromptInputButton
-            type="button"
-            disabled={disabled}
-            className={cn(
-              "gap-1.5! rounded-full border px-3! shadow-none transition-colors",
-              compact && "rounded-lg px-2.5! py-1! text-[11px] font-medium",
-              compact
-                ? "border-transparent bg-gray-50/60 text-gray-600 hover:bg-gray-100/80 hover:text-gray-800 dark:bg-slate-700/50 dark:text-slate-300 dark:hover:bg-slate-700"
-                : selectedAgent
-                  ? "border-[#d6a868] bg-[#fff3df] text-[#7a5417] hover:bg-[#ffe8c4]"
-                  : "border-[#eee3d5] bg-[#fffaf5] text-[#7e6a57] hover:bg-white dark:border-slate-600 dark:bg-slate-700/50 dark:text-slate-300 dark:hover:bg-slate-700",
-            )}
-          >
-            <BotIcon
-              className={cn("size-3", compact && "text-[var(--primary)]")}
-            />
-            <span className="max-w-[140px] truncate text-xs font-normal">
-              {triggerLabel}
-            </span>
-            {selectedAgent && (
-              <span
-                role="button"
-                tabIndex={0}
-                aria-label="清除已选 agent"
-                className="ml-0.5 inline-flex items-center justify-center rounded-full p-0.5 hover:bg-[#ffd9a7]"
-                onClick={handleClear}
-                onKeyDown={(e) => {
-                  if (e.key === "Enter" || e.key === " ") {
-                    e.preventDefault();
-                    onAgentChange(null);
-                  }
-                }}
-              >
-                <XIcon className="size-3" />
+        {iconMode ? (
+          <Tooltip content={iconTooltipLabel}>
+            <div>
+              <DialogTrigger asChild>
+                <Button
+                  type="button"
+                  variant="ghost"
+                  size="icon"
+                  disabled={disabled}
+                  aria-label={selectedAgent ? `已选择智能体：${triggerLabel}` : "选择智能体"}
+                  className={cn(
+                    "relative size-9 rounded-full text-muted-foreground shadow-none hover:bg-muted/60 hover:text-foreground",
+                    selectedAgent && "text-amber-600 hover:text-amber-700",
+                    selectedAgent && iconActiveClassName,
+                    iconButtonClassName,
+                  )}
+                >
+                  <BotIcon className="size-4" />
+                  {selectedAgent && (
+                    <span
+                      role="button"
+                      tabIndex={0}
+                      aria-label="清除已选 agent"
+                      className="absolute -right-1 -top-1 inline-flex size-4 items-center justify-center rounded-full border bg-background text-foreground shadow-sm hover:bg-muted"
+                      onClick={handleClear}
+                      onKeyDown={(e) => {
+                        if (e.key === "Enter" || e.key === " ") {
+                          e.preventDefault();
+                          onAgentChange(null);
+                        }
+                      }}
+                    >
+                      <XIcon className="size-2.5" />
+                    </span>
+                  )}
+                </Button>
+              </DialogTrigger>
+            </div>
+          </Tooltip>
+        ) : (
+          <DialogTrigger asChild>
+            <PromptInputButton
+              type="button"
+              disabled={disabled}
+              className={cn(
+                "gap-1.5! rounded-full border px-3! shadow-none transition-colors",
+                compact && "rounded-lg px-2.5! py-1! text-[11px] font-medium",
+                compact
+                  ? "border-transparent bg-gray-50/60 text-gray-600 hover:bg-gray-100/80 hover:text-gray-800 dark:bg-slate-700/50 dark:text-slate-300 dark:hover:bg-slate-700"
+                  : selectedAgent
+                    ? "border-[#d6a868] bg-[#fff3df] text-[#7a5417] hover:bg-[#ffe8c4]"
+                    : "border-[#eee3d5] bg-[#fffaf5] text-[#7e6a57] hover:bg-white dark:border-slate-600 dark:bg-slate-700/50 dark:text-slate-300 dark:hover:bg-slate-700",
+              )}
+            >
+              <BotIcon
+                className={cn("size-3", compact && "text-[var(--primary)]")}
+              />
+              <span className="max-w-[140px] truncate text-xs font-normal">
+                {triggerLabel}
               </span>
-            )}
-          </PromptInputButton>
-        </DialogTrigger>
+              {selectedAgent && (
+                <span
+                  role="button"
+                  tabIndex={0}
+                  aria-label="清除已选 agent"
+                  className="ml-0.5 inline-flex items-center justify-center rounded-full p-0.5 hover:bg-[#ffd9a7]"
+                  onClick={handleClear}
+                  onKeyDown={(e) => {
+                    if (e.key === "Enter" || e.key === " ") {
+                      e.preventDefault();
+                      onAgentChange(null);
+                    }
+                  }}
+                >
+                  <XIcon className="size-3" />
+                </span>
+              )}
+            </PromptInputButton>
+          </DialogTrigger>
+        )}
         <DialogContent className="overflow-hidden p-0 sm:max-w-md">
           <DialogTitle className="sr-only">选择 Agent</DialogTitle>
           <Command className="**:data-[slot=command-input-wrapper]:h-auto">

frontend-web/src/components/workspace/agents/skill-transfer-selector.tsx

@@ -45,11 +45,32 @@ function skillLabel(skill: Skill) {
 
 function matchesQuery(skill: Skill, q: string) {
   if (!q) return true;
-  return (
-    skill.name.toLowerCase().includes(q) ||
-    (skill.name_zh ?? "").toLowerCase().includes(q) ||
-    (skill.description ?? "").toLowerCase().includes(q)
-  );
+  const haystack = [
+    skill.name,
+    skill.name_zh,
+    skill.description,
+    skill.detail,
+    skill.category,
+    skill.license,
+    skill.source,
+    skill.state,
+    skill.owner_username,
+    skill.created_at,
+    skill.last_activity_at,
+    skill.use_count != null ? `使用 ${skill.use_count}` : null,
+    skill.view_count != null ? `查看 ${skill.view_count}` : null,
+    skill.patch_count != null ? `变迁 ${skill.patch_count}` : null,
+    ...(skill.tags ?? []).flatMap((tag) => [
+      tag.name,
+      tag.description,
+      tag.color,
+      tag.usage_count != null ? `标签使用 ${tag.usage_count}` : null,
+    ]),
+  ]
+    .filter((value): value is string => typeof value === "string" && value.length > 0)
+    .join(" ")
+    .toLowerCase();
+  return haystack.includes(q);
 }
 
 export function SkillTransferSelector({
@@ -159,7 +180,7 @@ export function SkillTransferSelector({
         <div className="relative flex-1">
           <SearchIcon className="text-muted-foreground absolute left-2 top-1/2 size-3.5 -translate-y-1/2" />
           <Input
-            placeholder="搜索全部技能(中英文名称、描述)…"
+            placeholder="搜索技能名称、描述、分类、标签、变迁..."
             value={search}
             onChange={(e) => {
               setSearch(e.currentTarget.value);
@@ -239,7 +260,7 @@ export function SkillTransferSelector({
       {/* Two-column transfer panes */}
       <div className="grid grid-cols-2 gap-3">
         <SkillPane
-          title="可用技能"
+          title="未勾选技能"
           count={availableSkills.length}
           items={availableView}
           variant="available"
@@ -248,10 +269,10 @@ export function SkillTransferSelector({
           onPageChange={setAvailablePage}
           onPick={add}
           onViewDetail={onViewDetail}
-          emptyHint={query || category !== ALL_CATEGORIES ? "没有匹配的技能" : "已全部启用"}
+          emptyHint={query || category !== ALL_CATEGORIES ? "没有匹配的技能" : "已全部勾选"}
         />
         <SkillPane
-          title="已启用技能"
+          title="已勾选技能"
           count={selectedSkills.length}
           items={selectedView}
           variant="selected"
@@ -260,7 +281,7 @@ export function SkillTransferSelector({
           onPageChange={setSelectedPage}
           onPick={remove}
           onViewDetail={onViewDetail}
-          emptyHint={query ? "没有匹配的已选技能" : "尚未启用任何技能"}
+          emptyHint={query ? "没有匹配的已选技能" : "尚未勾选任何技能"}
         />
       </div>
     </div>

frontend-web/src/components/workspace/appearance-controls.tsx

@@ -0,0 +1,191 @@
+"use client";
+
+import { Check, LayoutIcon, PanelLeftIcon, Shirt } from "lucide-react";
+import { useEffect, useRef, useState } from "react";
+import { useNavigate } from "react-router-dom";
+
+import { Button } from "@/components/ui/button";
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuLabel,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from "@/components/ui/dropdown-menu";
+import { useTheme, type ThemeType } from "@/contexts/ThemeContext";
+import { useLayoutMode } from "@/core/system-settings/hooks";
+import { cn } from "@/lib/utils";
+
+/**
+ * 换肤 / 界面模式 顶栏控件。深色顶栏（Header）与简洁模式页面级顶栏（ChatPage 等）共用，
+ * 通过 `tone` 适配不同底色：
+ *   - "banner-dark" / "banner-light"：Header 落在主题 banner 上（白字 / 浅色 hover）。
+ *   - "content"：简洁模式聊天页浅底顶栏，走 foreground / muted-foreground。
+ */
+export type AppearanceControlTone = "banner-dark" | "banner-light" | "content";
+
+// 换肤色板：红色=红白主题(light)，蓝色=浅蓝主题(lightblue)，深蓝色=深色主题(dark)
+export const THEME_SWATCHES: { id: ThemeType; label: string; color: string }[] = [
+  { id: "light", label: "红色", color: "#cf1322" },
+  { id: "lightblue", label: "蓝色", color: "#0062d9" },
+  { id: "dark", label: "深蓝色", color: "#002466" },
+];
+
+const triggerToneClass = (tone: AppearanceControlTone) =>
+  tone === "banner-dark"
+    ? "text-slate-400 hover:bg-slate-800/50 hover:text-slate-400"
+    : tone === "banner-light"
+      ? "text-white hover:bg-[var(--brand-950)] hover:text-white active:bg-[#8a0618]"
+      : "text-muted-foreground hover:bg-muted hover:text-foreground";
+
+export function ThemeSwitcher({ tone }: { tone: AppearanceControlTone }) {
+  const { theme, setTheme } = useTheme();
+  const [open, setOpen] = useState(false);
+  const closeTimer = useRef<ReturnType<typeof setTimeout> | null>(null);
+
+  const cancelClose = () => {
+    if (closeTimer.current) {
+      clearTimeout(closeTimer.current);
+      closeTimer.current = null;
+    }
+  };
+  const scheduleClose = () => {
+    cancelClose();
+    closeTimer.current = setTimeout(() => setOpen(false), 120);
+  };
+
+  useEffect(() => () => cancelClose(), []);
+
+  return (
+    <div
+      className="relative"
+      onMouseEnter={() => {
+        cancelClose();
+        setOpen(true);
+      }}
+      onMouseLeave={scheduleClose}
+    >
+      <Button
+        type="button"
+        variant="ghost"
+        size="icon-sm"
+        className={cn("size-8 shrink-0 rounded-sm", triggerToneClass(tone))}
+        title="换肤"
+        aria-haspopup="true"
+        aria-expanded={open}
+      >
+        <Shirt className="size-4" />
+      </Button>
+      {open ? (
+        <div className="absolute top-full left-1/2 z-50 -translate-x-1/2 pt-2">
+          <div className="relative flex items-center gap-2 rounded-lg border border-black/5 bg-white px-2.5 py-1.5 shadow-lg">
+            <div className="absolute -top-1 left-1/2 size-2 -translate-x-1/2 rotate-45 rounded-[1px] border-t border-l border-black/5 bg-white" />
+            {THEME_SWATCHES.map((swatch) => {
+              const active = theme === swatch.id;
+              return (
+                <button
+                  key={swatch.id}
+                  type="button"
+                  title={swatch.label}
+                  aria-label={swatch.label}
+                  aria-pressed={active}
+                  onClick={() => {
+                    setTheme(swatch.id);
+                    setOpen(false);
+                  }}
+                  className="size-5 rounded-full transition-transform hover:scale-110"
+                  style={{
+                    backgroundColor: swatch.color,
+                    boxShadow: active
+                      ? `0 0 0 1.5px #ffffff, 0 0 0 3px ${swatch.color}`
+                      : undefined,
+                  }}
+                />
+              );
+            })}
+          </div>
+        </div>
+      ) : null}
+    </div>
+  );
+}
+
+const LAYOUT_OPTIONS = [
+  {
+    id: "full" as const,
+    label: "全量模式",
+    description: "展示侧边栏与顶栏导航",
+    icon: PanelLeftIcon,
+  },
+  {
+    id: "compact" as const,
+    label: "简洁模式",
+    description: "隐藏侧边栏与顶栏，获得更大工作区",
+    icon: LayoutIcon,
+  },
+];
+
+/**
+ * 界面模式（全量 / 简洁）下拉切换。换肤旁并排，图标 + 下拉：
+ *   - 简洁模式 ChatPage 顶栏（全局顶栏被隐藏）。
+ *   - 全量模式 Header 右上角。
+ * 用户未显式设置过界面模式时（mode === undefined），当前态按调用方所在的实际界面
+ * 兜底——`fallback` 指明这一回退值（Header 传 "full"，ChatPage 传 "compact"）。
+ */
+export function LayoutModeSwitcher({
+  tone,
+  fallback = "compact",
+}: {
+  tone: AppearanceControlTone;
+  fallback?: "full" | "compact";
+}) {
+  const [mode, setLayoutMode] = useLayoutMode();
+  const navigate = useNavigate();
+  const current = mode ?? fallback;
+  const TriggerIcon = current === "full" ? PanelLeftIcon : LayoutIcon;
+
+  return (
+    <DropdownMenu>
+      <DropdownMenuTrigger asChild>
+        <Button
+          type="button"
+          variant="ghost"
+          size="icon-sm"
+          className={cn("size-8 shrink-0 rounded-sm", triggerToneClass(tone))}
+          title="界面模式"
+          aria-label="界面模式"
+        >
+          <TriggerIcon className="size-4" />
+        </Button>
+      </DropdownMenuTrigger>
+      <DropdownMenuContent align="end" sideOffset={8} className="min-w-56 rounded-lg">
+        <DropdownMenuLabel>界面模式</DropdownMenuLabel>
+        <DropdownMenuSeparator />
+        {LAYOUT_OPTIONS.map((option) => {
+          const Icon = option.icon;
+          const active = current === option.id;
+          return (
+            <DropdownMenuItem
+              key={option.id}
+              onClick={() => {
+                setLayoutMode(option.id);
+                navigate("/page/workspace/chats/new");
+              }}
+              className="gap-2"
+            >
+              <Icon className="size-4 shrink-0" />
+              <div className="flex min-w-0 flex-col">
+                <span className="text-sm leading-tight">{option.label}</span>
+                <span className="text-muted-foreground text-xs leading-tight">
+                  {option.description}
+                </span>
+              </div>
+              {active && <Check className="ml-auto size-4 shrink-0" />}
+            </DropdownMenuItem>
+          );
+        })}
+      </DropdownMenuContent>
+    </DropdownMenu>
+  );
+}

frontend-web/src/components/workspace/artifacts/artifact-file-detail.tsx

@@ -49,9 +49,8 @@ import {
 } from "@/core/artifacts/hooks";
 import { resolveArtifactURL, urlOfArtifact } from "@/core/artifacts/utils";
 import { useI18n } from "@/core/i18n/hooks";
-import { downloadMarkdownAsDocx } from "@/core/scheduled-tasks/markdown-docx";
-import { installSkill } from "@/core/skills/api";
-import { streamdownPlugins } from "@/core/streamdown";
+import { downloadMarkdownAsDocx } from "@/core/scheduled-tasks/markdown-docx";
+import { streamdownPlugins } from "@/core/streamdown";
 import {
   checkCodeFile,
   getFileName,
@@ -79,7 +78,8 @@ import { useThread } from "../messages/context";
 import { Tooltip } from "../tooltip";
 
 import { useArtifacts } from "./context";
-import { SpreadsheetPreview } from "./spreadsheet-preview";
+import { SpreadsheetPreview } from "./spreadsheet-preview";
+import { SkillInstallDialog } from "./skill-install-dialog";
 
 const SANDBOX_RESUME_EVENT = "workspace:sandbox-resume-autoscroll";
 
@@ -232,7 +232,7 @@ export function ArtifactFileDetail({
 
   const [viewMode, setViewMode] = useState<"code" | "preview">("code");
   const [allowAutoViewSwitch, setAllowAutoViewSwitch] = useState(true);
-  const [isInstalling, setIsInstalling] = useState(false);
+  const [installDialogOpen, setInstallDialogOpen] = useState(false);
   const [showPreviewSwitchPulse, setShowPreviewSwitchPulse] = useState(false);
   const [autoScrollEnabled, setAutoScrollEnabled] = useState(true);
   const [showResumeAutoScroll, setShowResumeAutoScroll] = useState(false);
@@ -432,29 +432,7 @@ export function ArtifactFileDetail({
     }, 1600);
   }, [scrollArtifactToBottom]);
 
-  const handleInstallSkill = useCallback(async () => {
-    if (isInstalling) return;
-
-    setIsInstalling(true);
-    try {
-      const result = await installSkill({
-        thread_id: threadId,
-        path: filepath,
-      });
-      if (result.success) {
-        toast.success(result.message);
-      } else {
-        toast.error(result.message ?? "Failed to install skill");
-      }
-    } catch (error) {
-      console.error("Failed to install skill:", error);
-      toast.error("Failed to install skill");
-    } finally {
-      setIsInstalling(false);
-    }
-  }, [threadId, filepath, isInstalling]);
-
-  const handleSaveArtifact = useCallback(async () => {
+  const handleSaveArtifact = useCallback(async () => {
     if (!canEditArtifact || updateArtifact.isPending) {
       return;
     }
@@ -686,18 +664,17 @@ export function ArtifactFileDetail({
             )}
             {!useWriteFileStreaming && filepath.endsWith(".skill") && (
               <Tooltip content={t.toolCalls.skillInstallTooltip}>
-                <ArtifactAction
-                  icon={isInstalling ? LoaderIcon : PackageIcon}
-                  label={t.common.install}
-                  tooltip={t.common.install}
-                  disabled={
-                    isInstalling ||
-                    env.NEXT_PUBLIC_STATIC_WEBSITE_ONLY === "true"
-                  }
-                  onClick={handleInstallSkill}
-                />
-              </Tooltip>
-            )}
+                <ArtifactAction
+                  icon={PackageIcon}
+                  label={t.common.install}
+                  tooltip={t.common.install}
+                  disabled={
+                    env.NEXT_PUBLIC_STATIC_WEBSITE_ONLY === "true"
+                  }
+                  onClick={() => setInstallDialogOpen(true)}
+                />
+              </Tooltip>
+            )}
             {isCodeFile && (
               <ArtifactAction
                 icon={CopyIcon}
@@ -782,7 +759,7 @@ export function ArtifactFileDetail({
           </ArtifactActions>
         </div>
       </ArtifactHeader>
-      <ArtifactContent
+      <ArtifactContent
         ref={artifactContentRef}
         className="relative p-0"
         onWheelCapture={handlePauseAutoScroll}
@@ -859,10 +836,16 @@ export function ArtifactFileDetail({
               {t.common.loading}
             </div>
           ))}
-      </ArtifactContent>
-    </Artifact>
-  );
-}
+      </ArtifactContent>
+      <SkillInstallDialog
+        open={installDialogOpen}
+        onOpenChange={setInstallDialogOpen}
+        threadId={threadId}
+        filepath={filepath}
+      />
+    </Artifact>
+  );
+}
 
 function SandboxPreviewImage({
   src,

frontend-web/src/components/workspace/artifacts/artifact-file-list.tsx

@@ -1,6 +1,6 @@
-import { DownloadIcon, LoaderIcon, PackageIcon } from "lucide-react";
-import { useCallback, useState } from "react";
-import { toast } from "sonner";
+import { DownloadIcon, LoaderIcon, PackageIcon } from "lucide-react";
+import { useCallback, useState } from "react";
+import { toast } from "sonner";
 
 import { Button } from "@/components/ui/button";
 import {
@@ -10,18 +10,18 @@ import {
   CardHeader,
   CardTitle,
 } from "@/components/ui/card";
-import { downloadArtifactFile } from "@/core/artifacts/download";
-import { useI18n } from "@/core/i18n/hooks";
-import { installSkill } from "@/core/skills/api";
-import {
-  getFileExtensionDisplayName,
-  getFileIcon,
-  getFileName,
-} from "@/core/utils/files";
+import { downloadArtifactFile } from "@/core/artifacts/download";
+import { useI18n } from "@/core/i18n/hooks";
+import {
+  getFileExtensionDisplayName,
+  getFileIcon,
+  getFileName,
+} from "@/core/utils/files";
 import { cn } from "@/lib/utils";
 
-import { useThread } from "../messages/context";
-import { useArtifacts } from "./context";
+import { useThread } from "../messages/context";
+import { useArtifacts } from "./context";
+import { SkillInstallDialog } from "./skill-install-dialog";
 
 export function ArtifactFileList({
   className,
@@ -32,11 +32,11 @@ export function ArtifactFileList({
   files: string[];
   threadId: string;
 }) {
-  const { t } = useI18n();
-  const { isMock, publicShareCode } = useThread();
-  const { select: selectArtifact, setOpen } = useArtifacts();
-  const [installingFile, setInstallingFile] = useState<string | null>(null);
-  const [downloadingFile, setDownloadingFile] = useState<string | null>(null);
+  const { t } = useI18n();
+  const { isMock, publicShareCode } = useThread();
+  const { select: selectArtifact, setOpen } = useArtifacts();
+  const [installFile, setInstallFile] = useState<string | null>(null);
+  const [downloadingFile, setDownloadingFile] = useState<string | null>(null);
 
   const handleClick = useCallback(
     (filepath: string) => {
@@ -46,33 +46,14 @@ export function ArtifactFileList({
     [selectArtifact, setOpen],
   );
 
-  const handleInstallSkill = useCallback(
-    async (e: React.MouseEvent, filepath: string) => {
-      e.stopPropagation();
-      e.preventDefault();
-
-      if (installingFile) return;
-
-      setInstallingFile(filepath);
-      try {
-        const result = await installSkill({
-          thread_id: threadId,
-          path: filepath,
-        });
-        if (result.success) {
-          toast.success(result.message);
-        } else {
-          toast.error(result.message || "Failed to install skill");
-        }
-      } catch (error) {
-        console.error("Failed to install skill:", error);
-        toast.error("Failed to install skill");
-      } finally {
-        setInstallingFile(null);
-      }
-    },
-    [threadId, installingFile],
-  );
+  const handleInstallSkill = useCallback(
+    (e: React.MouseEvent, filepath: string) => {
+      e.stopPropagation();
+      e.preventDefault();
+      setInstallFile(filepath);
+    },
+    [],
+  );
 
   const handleDownload = useCallback(
     async (e: React.MouseEvent, filepath: string) => {
@@ -113,20 +94,15 @@ export function ArtifactFileList({
               {getFileExtensionDisplayName(file)} file
             </CardDescription>
             <CardAction className="row-span-1 self-center">
-              {file.endsWith(".skill") && (
-                <Button
-                  variant="ghost"
-                  disabled={installingFile === file}
-                  onClick={(e) => handleInstallSkill(e, file)}
-                >
-                  {installingFile === file ? (
-                    <LoaderIcon className="size-4 animate-spin" />
-                  ) : (
-                    <PackageIcon className="size-4" />
-                  )}
-                  {t.common.install}
-                </Button>
-              )}
+              {file.endsWith(".skill") && (
+                <Button
+                  variant="ghost"
+                  onClick={(e) => handleInstallSkill(e, file)}
+                >
+                  <PackageIcon className="size-4" />
+                  {t.common.install}
+                </Button>
+              )}
               <Button
                 variant="ghost"
                 disabled={downloadingFile === file}
@@ -142,7 +118,15 @@ export function ArtifactFileList({
             </CardAction>
           </CardHeader>
         </Card>
-      ))}
-    </ul>
-  );
-}
+      ))}
+      <SkillInstallDialog
+        open={!!installFile}
+        onOpenChange={(open) => {
+          if (!open) setInstallFile(null);
+        }}
+        threadId={threadId}
+        filepath={installFile}
+      />
+    </ul>
+  );
+}

frontend-web/src/components/workspace/artifacts/skill-install-dialog.tsx

@@ -0,0 +1,178 @@
+"use client";
+
+import { AlertCircleIcon, Loader2Icon, PackageIcon } from "lucide-react";
+import { useEffect, useMemo, useState } from "react";
+import { toast } from "sonner";
+
+import { Button } from "@/components/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/components/ui/dialog";
+import { Input } from "@/components/ui/input";
+import {
+  installSkill,
+  previewSkillInstall,
+  type PreviewSkillInstallResponse,
+} from "@/core/skills/api";
+
+export function SkillInstallDialog({
+  open,
+  onOpenChange,
+  threadId,
+  filepath,
+  onInstalled,
+}: {
+  open: boolean;
+  onOpenChange: (open: boolean) => void;
+  threadId: string;
+  filepath: string | null;
+  onInstalled?: (skillName: string) => void;
+}) {
+  const [preview, setPreview] = useState<PreviewSkillInstallResponse | null>(null);
+  const [installName, setInstallName] = useState("");
+  const [loading, setLoading] = useState(false);
+  const [installing, setInstalling] = useState(false);
+
+  useEffect(() => {
+    if (!open || !filepath) {
+      setPreview(null);
+      setInstallName("");
+      setLoading(false);
+      setInstalling(false);
+      return;
+    }
+
+    let cancelled = false;
+    setLoading(true);
+    setPreview(null);
+    setInstallName("");
+
+    void previewSkillInstall({ thread_id: threadId, path: filepath })
+      .then((result) => {
+        if (cancelled) return;
+        setPreview(result);
+        setInstallName(result.skill_name);
+      })
+      .catch((error) => {
+        if (cancelled) return;
+        toast.error(error instanceof Error ? error.message : "Failed to preview skill install");
+        onOpenChange(false);
+      })
+      .finally(() => {
+        if (!cancelled) setLoading(false);
+      });
+
+    return () => {
+      cancelled = true;
+    };
+  }, [filepath, onOpenChange, open, threadId]);
+
+  const trimmedName = installName.trim();
+  const unchangedConflict = useMemo(() => {
+    if (!preview) return false;
+    return trimmedName === preview.skill_name && !preview.can_install_as_is;
+  }, [preview, trimmedName]);
+
+  async function handleInstall() {
+    if (!filepath || !trimmedName || installing) return;
+    setInstalling(true);
+    try {
+      const result = await installSkill({
+        thread_id: threadId,
+        path: filepath,
+        skill_name: trimmedName,
+      });
+      if (!result.success) {
+        toast.error(result.message || "Failed to install skill");
+        return;
+      }
+      toast.success(result.message);
+      onInstalled?.(result.skill_name);
+      onOpenChange(false);
+    } catch (error) {
+      toast.error(error instanceof Error ? error.message : "Failed to install skill");
+    } finally {
+      setInstalling(false);
+    }
+  }
+
+  const helperText = preview?.owned_by_other
+    ? `该技能名已被 ${preview.owner_username || "其他用户"} 安装。你可以换个名字继续安装。`
+    : preview?.owned_by_me
+      ? "你已经安装过这个技能了；如果想保留一份新副本，可以换个名字安装。"
+      : preview?.builtin_conflict
+        ? "这个名字已被公共技能占用，请换个名字安装。"
+        : "可以直接安装，也可以先改一个更适合自己的名字。";
+
+  return (
+    <Dialog open={open} onOpenChange={onOpenChange}>
+      <DialogContent className="sm:max-w-md">
+        <DialogHeader>
+          <DialogTitle>安装技能</DialogTitle>
+          <DialogDescription>安装前会校验技能归属；如果名字已被占用，可以改名后继续安装。</DialogDescription>
+        </DialogHeader>
+
+        {loading ? (
+          <div className="text-muted-foreground flex items-center justify-center gap-2 py-8 text-sm">
+            <Loader2Icon className="size-4 animate-spin" />
+            正在检查技能安装权限…
+          </div>
+        ) : preview ? (
+          <div className="space-y-4">
+            <div className="rounded-xl border bg-muted/35 p-3 text-sm">
+              <div className="font-medium">{preview.skill_name}</div>
+              {preview.description ? (
+                <div className="text-muted-foreground mt-1 line-clamp-3">{preview.description}</div>
+              ) : null}
+            </div>
+
+            <div className="space-y-2">
+              <div className="text-sm font-medium">安装名称</div>
+              <Input
+                value={installName}
+                onChange={(e) => setInstallName(e.currentTarget.value)}
+                placeholder="请输入技能名称"
+              />
+              <div className="text-muted-foreground text-xs">{helperText}</div>
+            </div>
+
+            {!preview.can_install_as_is && (
+              <div className="flex gap-2 rounded-xl border border-amber-300/60 bg-amber-50 px-3 py-2 text-sm text-amber-900">
+                <AlertCircleIcon className="mt-0.5 size-4 shrink-0" />
+                <div>{preview.message}</div>
+              </div>
+            )}
+
+            {preview.warnings.length > 0 && (
+              <div className="text-muted-foreground rounded-xl border px-3 py-2 text-xs">
+                {preview.warnings.join(" ")}
+              </div>
+            )}
+          </div>
+        ) : null}
+
+        <DialogFooter>
+          <Button variant="outline" onClick={() => onOpenChange(false)} disabled={installing}>
+            取消
+          </Button>
+          <Button
+            onClick={() => void handleInstall()}
+            disabled={loading || installing || !trimmedName || unchangedConflict}
+          >
+            {installing ? (
+              <Loader2Icon className="size-4 animate-spin" />
+            ) : (
+              <PackageIcon className="size-4" />
+            )}
+            安装
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}

frontend-web/src/components/workspace/general-qa-sidebar.tsx

@@ -75,8 +75,10 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
+  listPathOfThread,
   pathOfThread,
   sortThreadsPinnedFirst,
   titleOfThread,
@@ -213,11 +215,12 @@ export function GeneralQaSidebar() {
 
   const visibleThreads = useMemo(
     () =>
+      // 智能体创建（bootstrap）会话也展示（带机器人图标、点击回创建页）；
+      // 仅排除调度 / 会商类系统会话。
       sortThreadsPinnedFirst(
         threads.filter(
           (thread) =>
             thread.metadata?.thread_type !== "scheduler" &&
-            thread.metadata?.thread_type !== "bootstrap" &&
             thread.metadata?.thread_type !== "roundtable",
         ),
       ),
@@ -249,9 +252,9 @@ export function GeneralQaSidebar() {
         let nextThreadPath = pathOfThread("new", { agent_id: agentIdFromPath });
         if (threadIndex > -1) {
           if (threads[threadIndex + 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex + 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex + 1]!);
           } else if (threads[threadIndex - 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex - 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex - 1]!);
           }
         }
         void router.push(nextThreadPath);
@@ -417,7 +420,9 @@ export function GeneralQaSidebar() {
                   </div>
                 ) : (
                   filteredThreads.map((thread) => {
-                    const isActive = pathOfThread(thread) === pathname;
+                    const href = listPathOfThread(thread);
+                    const isActive = href === pathname;
+                    const isBoot = isBootstrapThread(thread);
                     const pinned = isThreadPinned(thread);
                     const favorited = isThreadFavorite(thread);
                     return (
@@ -426,7 +431,7 @@ export function GeneralQaSidebar() {
                         className="group/item relative flex items-center"
                       >
                         <Link
-                          href={pathOfThread(thread)}
+                          href={href}
                           className={cn(
                             "relative flex h-9 min-w-0 flex-1 items-center gap-2 rounded-lg px-2.5 text-[13px] transition-colors",
                             isActive
@@ -434,12 +439,22 @@ export function GeneralQaSidebar() {
                               : "text-muted-foreground hover:bg-accent/60 hover:text-foreground",
                           )}
                         >
-                          <MessageSquare
-                            className={cn(
-                              "size-3.5 shrink-0",
-                              isActive ? "text-primary" : "text-muted-foreground/70",
-                            )}
-                          />
+                          {isBoot ? (
+                            <Bot
+                              className={cn(
+                                "size-3.5 shrink-0",
+                                isActive ? "text-primary" : "text-muted-foreground/70",
+                              )}
+                              aria-label="智能体创建会话"
+                            />
+                          ) : (
+                            <MessageSquare
+                              className={cn(
+                                "size-3.5 shrink-0",
+                                isActive ? "text-primary" : "text-muted-foreground/70",
+                              )}
+                            />
+                          )}
                           {pinned && (
                             <Pin className="size-3 shrink-0 text-muted-foreground/70" />
                           )}

frontend-web/src/components/workspace/messages/message-list-item.tsx

@@ -138,6 +138,7 @@ export function MessageListItem({
   extraRehypePlugins,
   onEditResubmit,
   onMessageDeleted,
+  turnTime,
 }: {
   className?: string;
   fitRowToContent?: boolean;
@@ -154,6 +155,13 @@ export function MessageListItem({
   extraRehypePlugins?: ReturnType<typeof useRehypeSplitWordsIntoSpans>;
   onEditResubmit?: (text: string) => void;
   onMessageDeleted?: (deletedIds: string[]) => void;
+  /**
+   * Durable ask time of the turn this message belongs to (the preceding
+   * question's `client_ts`). Used to time-stamp the AI answer, which carries no
+   * timestamp of its own — without it the answer would fall back to the current
+   * wall clock at render time and appear to "drift" to now on every reload.
+   */
+  turnTime?: string;
 }) {
   const isHuman = message.type === 'human';
   const messageMarkdown =
@@ -182,6 +190,7 @@ export function MessageListItem({
         extraRehypePlugins={extraRehypePlugins}
         onEditResubmit={onEditResubmit}
         onMessageDeleted={onMessageDeleted}
+        turnTime={turnTime}
       />
       {/*
         Human messages carry their own inline copy/edit toolbar inside
@@ -390,6 +399,7 @@ function MessageContent_({
   extraRehypePlugins,
   onEditResubmit,
   onMessageDeleted,
+  turnTime,
 }: {
   className?: string;
   message: Message;
@@ -400,6 +410,7 @@ function MessageContent_({
   extraRehypePlugins?: ReturnType<typeof useRehypeSplitWordsIntoSpans>;
   onEditResubmit?: (text: string) => void;
   onMessageDeleted?: (deletedIds: string[]) => void;
+  turnTime?: string;
 }) {
   const baseRehypePlugins = useRehypeSplitWordsIntoSpans(isLoading);
 
@@ -456,9 +467,15 @@ function MessageContent_({
     [threadId, resolveArtifact],
   );
 
+  // Question carries its own `client_ts` (round-trips through the checkpoint).
+  // The AI answer has no timestamp of its own, so it inherits the turn's ask
+  // time (its question's `client_ts`, threaded down as `turnTime`). This is
+  // durable and turn-accurate, and — unlike the old per-id `now` fallback —
+  // never drifts to the current clock when an unfinished answer is reloaded.
+  const ownAskTime = message.id ? askTimes[message.id] : undefined;
   const messageTime = formatAskedTime(
     message.additional_kwargs?.client_ts ??
-      (message.id ? askTimes[message.id] : undefined),
+      (isHuman ? ownAskTime : (turnTime ?? ownAskTime)),
   );
 
   const rawContent = extractContentFromMessage(message);

frontend-web/src/components/workspace/messages/message-list.tsx

@@ -1,6 +1,6 @@
 import type { Message } from "@langchain/langgraph-sdk";
 import type { BaseStream } from "@langchain/langgraph-sdk/react";
-import { CheckIcon, SendIcon, XIcon } from "lucide-react";
+import { CheckIcon, PenLineIcon, SendIcon, XIcon } from "lucide-react";
 import { useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { useStickToBottomContext } from "use-stick-to-bottom";
 
@@ -11,7 +11,7 @@ import {
 } from "@/components/ai-elements/conversation";
 import { Button } from "@/components/ui/button";
 import { Textarea } from "@/components/ui/textarea";
-import { rememberAskTimes } from "@/core/chat-timestamps";
+import { rememberAskTimes, useChatAskTimes } from "@/core/chat-timestamps";
 import { useI18n } from "@/core/i18n/hooks";
 import {
   extractContentFromMessage,
@@ -20,10 +20,10 @@ import {
   groupMessages,
   hasContent,
   hasPresentFiles,
-  hasReasoning,
-  hasToolCalls,
-  isHiddenFromUIMessage,
-} from "@/core/messages/utils";
+  hasReasoning,
+  hasToolCalls,
+  isHiddenFromUIMessage,
+} from "@/core/messages/utils";
 import { useRehypeSplitWordsIntoSpans } from "@/core/rehype";
 import { isThreadRagModeLocked, useLocalSettings } from "@/core/settings";
 import { useSkills } from "@/core/skills/hooks";
@@ -103,6 +103,7 @@ export function MessageList({
   onSetupAgentReject,
   onSetupWritingApprove,
   onSetupWritingReject,
+  onSetupWritingStart,
 }: {
   className?: string;
   contentClassName?: string;
@@ -120,6 +121,8 @@ export function MessageList({
   onSetupAgentReject?: (payload: SetupAgentApprovalPayload) => void | Promise<void>;
   onSetupWritingApprove?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
   onSetupWritingReject?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
+  /** 审批卡「直接开始写作」回调：应用配置（含已确认大纲）并立即启动写作流程（仅写作页提供，模板编辑等场景缺省隐藏该按钮）。 */
+  onSetupWritingStart?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
 }) {
   const baseRehypePlugins = useRehypeSplitWordsIntoSpans(thread.isLoading);
   const rehypePlugins = useMemo(
@@ -152,10 +155,10 @@ export function MessageList({
     });
   }, []);
 
-  const allMessages = useMemo(
-    () => thread.messages.filter((m) => !isHiddenFromUIMessage(m)),
-    [thread.messages],
-  );
+  const allMessages = useMemo(
+    () => thread.messages.filter((m) => !isHiddenFromUIMessage(m)),
+    [thread.messages],
+  );
   const messages = useMemo(
     () =>
       hiddenMessageIds.size === 0
@@ -164,15 +167,24 @@ export function MessageList({
     [allMessages, hiddenMessageIds],
   );
 
-  // Stamp a wall-clock time onto every question/answer the first time it is
-  // seen, in a single batched commit. Questions sent this session already carry
-  // an accurate time (see useThreadStream); this also covers assistant answers
-  // and messages loaded from history. First-write-wins keeps the earliest time.
+  const askTimes = useChatAskTimes();
+
+  // Stamp a wall-clock time onto every *question* the first time it is seen, in
+  // a single batched commit. Questions sent this session already carry an
+  // accurate `client_ts` (see useThreadStream) and are skipped; this only backs
+  // up legacy questions loaded from history that predate `client_ts`.
+  // First-write-wins keeps the earliest time.
+  //
+  // AI answers are deliberately NOT stamped here: they carry no timestamp of
+  // their own, so a `now` stamp would be the *load* time, not the answer time —
+  // and for an unfinished/interrupted turn that re-stamps to the current clock
+  // on every reload. Instead the answer inherits its question's durable time
+  // via `turnTimes` below.
   useEffect(() => {
     const now = new Date().toISOString();
     const entries: Record<string, string> = {};
     for (const message of messages) {
-      if (message.type !== "human" && message.type !== "ai") continue;
+      if (message.type !== "human") continue;
       if (!message.id || message.id.startsWith("opt-")) continue;
       if (typeof message.additional_kwargs?.client_ts === "string") continue;
       entries[message.id] = now;
@@ -180,6 +192,24 @@ export function MessageList({
     if (Object.keys(entries).length > 0) rememberAskTimes(entries);
   }, [messages]);
 
+  // Durable ask time per message id, used to time-stamp the AI answer (which has
+  // no timestamp of its own) with the time of the question that triggered it.
+  const turnTimes = useMemo(() => {
+    const map = new Map<string, string>();
+    let lastQuestionTime: string | undefined;
+    for (const message of messages) {
+      if (message.type === "human") {
+        const ts = message.additional_kwargs?.client_ts;
+        const fromAskTimes = message.id ? askTimes[message.id] : undefined;
+        lastQuestionTime =
+          typeof ts === "string" && ts ? ts : fromAskTimes;
+      } else if (message.type === "ai" && message.id && lastQuestionTime) {
+        map.set(message.id, lastQuestionTime);
+      }
+    }
+    return map;
+  }, [messages, askTimes]);
+
   const [settings] = useLocalSettings();
   const ragModeEnabled =
     settings.display.ragModeEnabled || isThreadRagModeLocked(threadId);
@@ -355,6 +385,7 @@ export function MessageList({
                   onMessageDeleted={
                     allowDelete ? handleMessageDeleted : undefined
                   }
+                  turnTime={msg.id ? turnTimes.get(msg.id) : undefined}
                 />
               );
             });
@@ -430,6 +461,7 @@ export function MessageList({
                   message={message}
                   onApprove={onSetupWritingApprove}
                   onReject={onSetupWritingReject}
+                  onStart={onSetupWritingStart}
                 />
                 <MessageTokenUsageList
                   enabled={tokenUsageEnabled}
@@ -629,6 +661,8 @@ export type SetupAgentApprovalPayload = {
 export type SetupWritingApprovalPayload = {
   user_intent?: string;
   article_type?: string;
+  /** 当 article_type 是已有类型库里没有的新类型时，模型识别出的一句话特征说明（命中已有类型时为空）。 */
+  article_type_detail?: string;
   word_count_target?: number | null;
   target_audience?: string;
   writing_mode?: string;
@@ -820,14 +854,16 @@ function SetupWritingApprovalCard({
   message,
   onApprove,
   onReject,
+  onStart,
 }: {
   disabled: boolean;
   message: unknown;
   onApprove?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
   onReject?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
+  onStart?: (payload: SetupWritingApprovalPayload) => void | Promise<void>;
 }) {
   const payload = getSetupWritingApprovalPayload(message);
-  const [submitting, setSubmitting] = useState<"approve" | "reject" | null>(
+  const [submitting, setSubmitting] = useState<"approve" | "reject" | "start" | null>(
     null,
   );
 
@@ -838,7 +874,7 @@ function SetupWritingApprovalCard({
   const approvalPayload = payload;
   const busy = disabled || submitting !== null;
 
-  async function run(action: "approve" | "reject") {
+  async function run(action: "approve" | "reject" | "start") {
     if (busy) {
       return;
     }
@@ -846,6 +882,8 @@ function SetupWritingApprovalCard({
     try {
       if (action === "approve") {
         await onApprove?.(approvalPayload);
+      } else if (action === "start") {
+        await onStart?.(approvalPayload);
       } else {
         await onReject?.(approvalPayload);
       }
@@ -854,9 +892,14 @@ function SetupWritingApprovalCard({
     }
   }
 
+  const hasNewType = !!approvalPayload.article_type_detail?.trim();
   const rows: Array<{ label: string; value: string }> = [];
   if (approvalPayload.article_type) {
-    rows.push({ label: "文章类型", value: approvalPayload.article_type });
+    rows.push({
+      label: "文章类型",
+      // 新类型（列表外）标注「· 新」，让用户知道这是模型新识别的类型。
+      value: hasNewType ? `${approvalPayload.article_type} · 新` : approvalPayload.article_type,
+    });
   }
   if (typeof approvalPayload.word_count_target === "number") {
     rows.push({ label: "目标字数", value: `${approvalPayload.word_count_target} 字` });
@@ -903,6 +946,13 @@ function SetupWritingApprovalCard({
           </div>
         ) : null}
 
+        {hasNewType ? (
+          <div className="space-y-1">
+            <div className="text-muted-foreground text-xs">新类型说明</div>
+            <p className="text-sm leading-6">{approvalPayload.article_type_detail}</p>
+          </div>
+        ) : null}
+
         {approvalPayload.outline ? (
           <div className="space-y-1">
             <div className="text-muted-foreground text-xs">已有大纲</div>
@@ -926,6 +976,7 @@ function SetupWritingApprovalCard({
         </Button>
         <Button
           type="button"
+          variant={onStart ? "outline" : "default"}
           size="sm"
           disabled={busy || !onApprove}
           onClick={() => void run("approve")}
@@ -933,6 +984,17 @@ function SetupWritingApprovalCard({
           <CheckIcon className="h-4 w-4" />
           应用到表单
         </Button>
+        {onStart ? (
+          <Button
+            type="button"
+            size="sm"
+            disabled={busy}
+            onClick={() => void run("start")}
+          >
+            <PenLineIcon className="h-4 w-4" />
+            直接开始写作
+          </Button>
+        ) : null}
       </div>
     </div>
   );

frontend-web/src/components/workspace/messages/message-token-usage.tsx

@@ -31,6 +31,48 @@ export function formatDuration(ms: number): string {
   return `${mins}m ${secs}s`;
 }
 
+/**
+ * 速度条颜色含义图例 —— 生成结束后显示在速度条下方一行，向用户解释当前
+ * 进度条颜色代表的「模型生成延迟」状态。进度条本身仍是 5 档(极快/流畅/一般/
+ * 偏慢/缓慢)的连续配色;这里把它归并成用户视角的 3 类延迟 + 「无响应」:
+ *   绿(#16a34a，极快/流畅) → 延迟正常
+ *   黄(#eab308，一般)       → 延迟微长
+ *   红(#ef4444，偏慢/缓慢)  → 延迟长，可能失败
+ *   灰(#9ca3af)            → 无响应(无进度条/0 tok/s)，任务失败，请重试
+ * 根据本次问答的实际速度，只显示对应那一档的提示。
+ */
+function legendForSpeed(tps: number): { color: string; label: string } {
+  if (tps <= 0) return { color: "#9ca3af", label: "无响应，任务失败，请重试" };
+  if (tps >= 30) return { color: "#16a34a", label: "延迟正常" };
+  if (tps >= 15) return { color: "#eab308", label: "延迟微长" };
+  return { color: "#ef4444", label: "延迟长，可能失败" };
+}
+
+export function SpeedLegend({
+  className,
+  tokensPerSec,
+}: {
+  className?: string;
+  tokensPerSec: number;
+}) {
+  const item = legendForSpeed(tokensPerSec);
+  return (
+    <span
+      className={cn(
+        "text-muted-foreground inline-flex items-center gap-1",
+        className,
+      )}
+    >
+      <span
+        aria-hidden
+        className="inline-block size-2 shrink-0 rounded-full"
+        style={{ backgroundColor: item.color }}
+      />
+      {item.label}
+    </span>
+  );
+}
+
 export function SpeedPill({ metric }: { metric: MessageMetric }) {
   const fill = Math.max(0, Math.min(1, metric.tokensPerSec / FULL_SCALE_TOKENS_PER_SEC));
   const { color, label } = classifySpeed(metric.tokensPerSec);
@@ -132,6 +174,13 @@ export function MessageTokenUsage({
               {formatDuration(resolvedMetric.durationMs)}
             </span>
           )}
+          {/* 生成结束(非流式中)后只显示与本次速度对应那一档的颜色含义说明。 */}
+          {!resolvedMetric.isActive && (
+            <SpeedLegend
+              className="basis-full"
+              tokensPerSec={resolvedMetric.tokensPerSec}
+            />
+          )}
         </>
       ) : null}
     </div>

frontend-web/src/components/workspace/publish-square-picker-dialog.tsx

@@ -1,7 +1,7 @@
 "use client";
 
 import { CheckIcon } from "lucide-react";
-import { useEffect, useState } from "react";
+import { type ReactNode, useEffect, useState } from "react";
 
 import { Button } from "@/components/ui/button";
 import {
@@ -26,6 +26,8 @@ interface PublishSquarePickerDialogProps {
   loading?: boolean;
   title?: string;
   description?: string;
+  /** 可选提示节点，渲染在描述下方 —— 用于显示「本次发布将以哪个账号进行」及账号切换告警。 */
+  accountNotice?: ReactNode;
 }
 
 /** A "publish to which square (发布广场)?" chooser. Squares are rendered as a
@@ -39,6 +41,7 @@ export function PublishSquarePickerDialog({
   loading,
   title = "选择发布广场",
   description = "请选择要把它发布到哪个广场。每个项目只能归属一个广场，不会重复出现。",
+  accountNotice,
 }: PublishSquarePickerDialogProps) {
   const [selected, setSelected] = useState<string>(
     defaultSquareId || squares[0]?.id || "",
@@ -58,6 +61,7 @@ export function PublishSquarePickerDialog({
           <DialogTitle>{title}</DialogTitle>
           <DialogDescription>{description}</DialogDescription>
         </DialogHeader>
+        {accountNotice}
         <div className="max-h-[50vh] space-y-1.5 overflow-y-auto py-1">
           {squares.map((sq) => {
             const active = selected === sq.id;

frontend-web/src/components/workspace/recent-chat-list.tsx

@@ -1,6 +1,7 @@
 "use client";
 
 import {
+  Bot,
   ChevronDown,
   ChevronRight,
   Download,
@@ -64,8 +65,10 @@ import {
 } from "@/core/threads/hooks";
 import type { AgentThread, AgentThreadState } from "@/core/threads/types";
 import {
+  isBootstrapThread,
   isThreadFavorite,
   isThreadPinned,
+  listPathOfThread,
   pathOfThread,
   sortThreadsPinnedFirst,
   titleOfThread,
@@ -130,9 +133,9 @@ export function RecentChatList({
         });
         if (threadIndex > -1) {
           if (threads[threadIndex + 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex + 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex + 1]!);
           } else if (threads[threadIndex - 1]) {
-            nextThreadPath = pathOfThread(threads[threadIndex - 1]!);
+            nextThreadPath = listPathOfThread(threads[threadIndex - 1]!);
           }
         }
         void router.push(nextThreadPath);
@@ -189,11 +192,12 @@ export function RecentChatList({
     [t],
   );
 
+  // 智能体创建（bootstrap）会话也展示在常用对话里（带机器人图标、点击回创建页）；
+  // 仅排除调度 / 会商类系统会话。
   const visibleThreads = sortThreadsPinnedFirst(
     threads.filter(
       (thread) =>
         thread.metadata?.thread_type !== "scheduler" &&
-        thread.metadata?.thread_type !== "bootstrap" &&
         thread.metadata?.thread_type !== "roundtable",
     ),
   );
@@ -239,7 +243,9 @@ export function RecentChatList({
           <SidebarMenu>
             <div className="flex w-full flex-col gap-0.5">
               {shownThreads.map((thread) => {
-                const isActive = pathOfThread(thread) === pathname;
+                const href = listPathOfThread(thread);
+                const isActive = href === pathname;
+                const isBoot = isBootstrapThread(thread);
                 const pinned = isThreadPinned(thread);
                 const favorited = isThreadFavorite(thread);
                 return (
@@ -261,17 +267,29 @@ export function RecentChatList({
                     >
                       <Link
                         className="flex w-full items-center gap-1 whitespace-nowrap group-hover/side-menu-item:overflow-hidden"
-                        href={pathOfThread(thread)}
+                        href={href}
                       >
-                        {compact && (
-                          <MessageSquare
+                        {isBoot ? (
+                          <Bot
                             className={
                               "size-3.5 shrink-0 " +
                               (isActive
                                 ? "text-[var(--primary)]"
                                 : "text-muted-foreground/70")
                             }
+                            aria-label="智能体创建会话"
                           />
+                        ) : (
+                          compact && (
+                            <MessageSquare
+                              className={
+                                "size-3.5 shrink-0 " +
+                                (isActive
+                                  ? "text-[var(--primary)]"
+                                  : "text-muted-foreground/70")
+                              }
+                            />
+                          )
                         )}
                         {pinned && (
                           <Pin className="size-3 shrink-0 text-muted-foreground/70" />

frontend-web/src/components/workspace/recent-roundtable-list.tsx

@@ -71,9 +71,10 @@ function StatusBadge({ draft }: { draft: DraftMeta }) {
   if (draft.status === "error") {
     return <span className="text-[10px] font-medium text-rose-500">出错</span>;
   }
+  // 非进行中/待澄清/出错时，展示本次会商所用业务链（无链条 → 自由模式）。
   return (
     <span className="text-[10px] font-medium text-muted-foreground">
-      第 {draft.furthestStep} 步
+      {draft.chainTitle || "自由模式"}
     </span>
   );
 }

frontend-web/src/components/workspace/settings/account-settings-page.tsx

@@ -7,6 +7,8 @@ import { toast } from "sonner";
 import { Badge } from "@/components/ui/badge";
 import { Button } from "@/components/ui/button";
 import { clearStoredAuth, getAccountDisplayName, getStoredAuth } from "@/core/auth";
+import { OptType, writeYLog } from "@/core/log/y-log";
+import { clearYLogToken } from "@/core/log/y-log-token";
 
 import { SettingsSection } from "./settings-section";
 
@@ -40,7 +42,15 @@ export function AccountSettingsPage() {
   const displayName = getAccountDisplayName(auth);
 
   const handleLogout = () => {
+    // 操作日志(Y-Log)：在清除 token1 之前上报登出（此时 token1 还在），keepalive 保证发出。
+    writeYLog({
+      optType: OptType.logout,
+      optDetail: "CM助手-全量-登出",
+      url: "/api/v1/auth/logout",
+      keepalive: true,
+    });
     clearStoredAuth();
+    clearYLogToken();
     // Match the rest of the app's logout flow: blow away the cookie session
     // by hitting the gateway logout endpoint and then forcing a full reload
     // so any cached query state goes too.

frontend-web/src/components/workspace/settings/skill-settings-page.tsx

@@ -470,11 +470,11 @@ function SkillSettingsList({ onClose }: { onClose?: () => void }) {
           </Button>
         </div>
       </header>
-      <TagSearchBar
-        targetType="skill"
-        onSearchChange={setSearch}
-        tagIds={tagIds}
-        onTagIdsChange={setTagIds}
+      <TagSearchBar
+        targetType="skill"
+        onSearchChange={setSearch}
+        tagIds={tagIds}
+        onTagIdsChange={setTagIds}
         actions={
           <div className="flex items-center gap-2">
             <ViewModeToggle value={viewMode} onChange={setViewMode} />
@@ -497,11 +497,16 @@ function SkillSettingsList({ onClose }: { onClose?: () => void }) {
                 <SelectItem value="name_desc">名称 Z-A</SelectItem>
               </SelectContent>
             </Select>
-          </div>
-        }
-      />
-      {publisher && (
-        <div className="flex items-center gap-2">
+          </div>
+        }
+      />
+      {!isLoading && !error && (
+        <div className="text-muted-foreground flex justify-end text-sm tabular-nums">
+          共 {orderedSkills.length} 个技能
+        </div>
+      )}
+      {publisher && (
+        <div className="flex items-center gap-2">
           <span className="text-muted-foreground text-xs">筛选发布者：</span>
           <button
             type="button"

frontend-web/src/components/workspace/workspace-nav-menu.tsx

@@ -11,6 +11,7 @@ import {
   GaugeIcon,
   HistoryIcon,
   MessageCircleQuestionIcon,
+  PlugIcon,
   ScrollTextIcon,
   Settings2Icon,
   SettingsIcon,
@@ -218,6 +219,14 @@ export function WorkspaceNavMenu() {
                     <TagsIcon />
                     {t.adminTags.title}
                   </DropdownMenuItem>
+                  {isAdmin && (
+                    <DropdownMenuItem
+                      onClick={() => navigate("/page/workspace/admin/plugins")}
+                    >
+                      <PlugIcon />
+                      插件管理
+                    </DropdownMenuItem>
+                  )}
                   {isAdmin && (
                     <DropdownMenuItem
                       onClick={() => navigate("/page/workspace/admin/positions")}

frontend-web/src/core/admin/active-runs.ts

@@ -0,0 +1,159 @@
+import { apiFetch } from "@/core/api";
+import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
+
+/** One in-flight model run as seen by the admin concurrency monitor. */
+export interface ActiveRunItem {
+  run_id: string;
+  thread_id: string;
+  status: string;
+  created_at: string;
+  elapsed_seconds: number;
+  user_id: string;
+  user_name: string;
+  agent_id: string;
+  agent_name: string;
+  thread_title: string;
+  kind: string;
+  multitask_strategy: string;
+}
+
+export interface ActiveRunsResponse {
+  count: number;
+  server_time: string;
+  runs: ActiveRunItem[];
+}
+
+export interface ConcurrencyPoint {
+  bucket: string;
+  peak: number;
+  avg: number;
+  samples: number;
+}
+
+export interface ConcurrencySeriesResponse {
+  granularity: string;
+  since: string;
+  until: string;
+  enabled: boolean;
+  points: ConcurrencyPoint[];
+}
+
+export interface TokenSpeedPoint {
+  bucket: string;
+  avg_tokens_per_sec: number;
+  min_tokens_per_sec: number;
+  max_tokens_per_sec: number;
+  samples: number;
+}
+
+export interface TokenSpeedSeriesResponse {
+  granularity: string;
+  since: string;
+  until: string;
+  points: TokenSpeedPoint[];
+}
+
+export type Granularity = "minute" | "hour";
+
+const base = () => `${getBackendBaseURL()}/api/admin/active-runs`;
+
+async function parse<T>(res: Response, what: string): Promise<T> {
+  if (!res.ok) {
+    const err = (await res.json().catch(() => ({}))) as { detail?: string };
+    throw new Error(err.detail ?? `${what} (HTTP ${res.status})`);
+  }
+  return res.json() as Promise<T>;
+}
+
+/** Live snapshot of all in-flight runs. Polled — intentionally NOT y-logged. */
+export async function loadActiveRuns(): Promise<ActiveRunsResponse> {
+  return parse<ActiveRunsResponse>(await apiFetch(base()), "Failed to load active runs");
+}
+
+/** Concurrency time-series (peak/avg per minute|hour). Polled — not y-logged. */
+export async function loadConcurrencySeries(
+  granularity: Granularity,
+  hours?: number,
+): Promise<ConcurrencySeriesResponse> {
+  const params = new URLSearchParams({ granularity });
+  if (hours) params.set("hours", String(hours));
+  return parse<ConcurrencySeriesResponse>(
+    await apiFetch(`${base()}/concurrency?${params}`),
+    "Failed to load concurrency series",
+  );
+}
+
+/** Token-speed time-series (tokens/sec per minute|hour). Polled — not y-logged. */
+export async function loadTokenSpeedSeries(
+  granularity: Granularity,
+  hours?: number,
+): Promise<TokenSpeedSeriesResponse> {
+  const params = new URLSearchParams({ granularity });
+  if (hours) params.set("hours", String(hours));
+  return parse<TokenSpeedSeriesResponse>(
+    await apiFetch(`${base()}/token-speed?${params}`),
+    "Failed to load token speed series",
+  );
+}
+
+/** Truly stop one in-flight run (cancels the live model stream). */
+export async function cancelActiveRun(runId: string): Promise<{ run_id: string; cancelled: boolean }> {
+  const url = `${base()}/${encodeURIComponent(runId)}/cancel`;
+  const result = await parse<{ run_id: string; cancelled: boolean }>(
+    await apiFetch(url, { method: "POST" }),
+    "Failed to cancel run",
+  );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-并发监控-停止对话调用",
+    url,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
+}
+
+/** Stop every in-flight run at once. */
+export async function cancelAllActiveRuns(): Promise<{ cancelled_count: number }> {
+  const url = `${base()}/cancel-all`;
+  const result = await parse<{ cancelled_count: number }>(
+    await apiFetch(url, { method: "POST" }),
+    "Failed to cancel all runs",
+  );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-并发监控-全部停止",
+    url,
+    returnParam: result,
+  });
+  return result;
+}
+
+/** Read the background-sampler on/off switch. */
+export async function getMonitorSettings(): Promise<{ enabled: boolean }> {
+  return parse<{ enabled: boolean }>(
+    await apiFetch(`${base()}/settings`),
+    "Failed to load monitor settings",
+  );
+}
+
+/** Toggle the background concurrency sampler (admin only, no restart). */
+export async function updateMonitorSettings(enabled: boolean): Promise<{ enabled: boolean }> {
+  const url = `${base()}/settings`;
+  const result = await parse<{ enabled: boolean }>(
+    await apiFetch(url, {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ enabled }),
+    }),
+    "Failed to update monitor settings",
+  );
+  writeYLog({
+    optType: enabled ? OptType.enabled : OptType.disabled,
+    optDetail: `CM助手-全量-并发监控-${enabled ? "开启" : "关闭"}采样`,
+    url,
+    reqParam: { enabled },
+  });
+  return result;
+}

frontend-web/src/core/admin/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** A conversation thread owned by some user (admin view). */
 export interface AdminThread {
@@ -172,22 +173,32 @@ async function parse<T>(res: Response, what: string): Promise<T> {
 }
 
 export async function listUserThreads(userId: string): Promise<AdminThread[]> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/threads?limit=200`),
-    "Failed to load threads",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/threads?limit=200`;
+  const result = await parse<AdminThread[]>(await apiFetch(url), "Failed to load threads");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户会话列表",
+    url,
+    reqParam: { userId },
+    returnParam: { count: result.length },
+  });
+  return result;
 }
 
 export async function listUserThreadMessages(
   userId: string,
   threadId: string,
 ): Promise<AdminMessage[]> {
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/threads/${encodeURIComponent(threadId)}/messages`,
-    ),
-    "Failed to load messages",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/threads/${encodeURIComponent(threadId)}/messages`;
+  const result = await parse<AdminMessage[]>(await apiFetch(url), "Failed to load messages");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看会话消息",
+    url,
+    reqParam: { userId, threadId },
+    returnParam: { count: result.length },
+  });
+  return result;
 }
 
 export async function listUserQa(
@@ -200,19 +211,30 @@ export async function listUserQa(
   });
   const query = (params.q ?? "").trim();
   if (query) search.set("q", query);
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/qa?${search}`),
-    "Failed to load user Q&A",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/qa?${search}`;
+  const result = await parse<AdminUserQaPageResponse>(await apiFetch(url), "Failed to load user Q&A");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户问答",
+    url,
+    reqParam: { userId, ...params },
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }
 
 export async function getUserMemory(
   userId: string,
 ): Promise<AdminMemoryResponse> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory`),
-    "Failed to load memory",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/memory`;
+  const result = await parse<AdminMemoryResponse>(await apiFetch(url), "Failed to load memory");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看用户记忆",
+    url,
+    reqParam: { userId },
+  });
+  return result;
 }
 
 export async function getUserLeaderboard(
@@ -229,10 +251,15 @@ export async function getUserLeaderboard(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/leaderboard?${params}`),
-    "Failed to load leaderboard",
-  );
+  const url = `${base()}/leaderboard?${params}`;
+  const result = await parse<AdminLeaderboardResponse>(await apiFetch(url), "Failed to load leaderboard");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-管理后台-查询用户排行榜",
+    url,
+    reqParam: { ...range, limit },
+  });
+  return result;
 }
 
 /**
@@ -253,12 +280,18 @@ export async function refreshTodayLeaderboard(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/leaderboard/refresh-today?${params}`, {
-      method: "POST",
-    }),
+  const url = `${base()}/leaderboard/refresh-today?${params}`;
+  const result = await parse<AdminLeaderboardResponse>(
+    await apiFetch(url, { method: "POST" }),
     "Failed to refresh today's leaderboard",
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-刷新今日排行榜",
+    url,
+    reqParam: { ...range, limit },
+  });
+  return result;
 }
 
 export async function getUserAnalytics(
@@ -272,10 +305,15 @@ export async function getUserAnalytics(
     until: range.until,
     limit: String(limit),
   });
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/analytics?${params}`),
-    "Failed to load user analytics",
-  );
+  const url = `${base()}/${encodeURIComponent(userId)}/analytics?${params}`;
+  const result = await parse<AdminUserAnalyticsResponse>(await apiFetch(url), "Failed to load user analytics");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-管理后台-查看用户分析",
+    url,
+    reqParam: { userId, ...range, limit },
+  });
+  return result;
 }
 
 export async function generateUserLeaderboardReport(
@@ -290,12 +328,19 @@ export async function generateUserLeaderboardReport(
     limit: String(limit),
   });
   if (modelName) params.set("model_name", modelName);
-  return parse(
-    await apiFetch(`${base()}/leaderboard/report?${params}`, {
-      method: "POST",
-    }),
+  const url = `${base()}/leaderboard/report?${params}`;
+  const result = await parse<AdminLeaderboardReportResponse>(
+    await apiFetch(url, { method: "POST" }),
     "Failed to generate leaderboard report",
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-生成排行榜报告",
+    url,
+    reqParam: { ...range, limit, modelName },
+    returnParam: { generated_at: result.generated_at, model_name: result.model_name },
+  });
+  return result;
 }
 
 function parseSseFrame(frame: string): AdminLeaderboardReportStreamEvent | null {
@@ -335,7 +380,8 @@ export async function streamUserLeaderboardReport({
     limit: String(limit),
   });
   if (modelName) params.set("model_name", modelName);
-  const response = await apiFetch(`${base()}/leaderboard/report/stream?${params}`, {
+  const url = `${base()}/leaderboard/report/stream?${params}`;
+  const response = await apiFetch(url, {
     method: "POST",
     signal,
   });
@@ -366,6 +412,12 @@ export async function streamUserLeaderboardReport({
     const parsed = parseSseFrame(tail);
     if (parsed) onEvent(parsed);
   }
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-管理后台-流式生成排行榜报告",
+    url,
+    reqParam: { ...range, limit, modelName },
+  });
 }
 
 export async function addAdminMemoryEntry(
@@ -373,14 +425,22 @@ export async function addAdminMemoryEntry(
   content: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/entries`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ content, agent }),
     }),
     "Failed to add memory entry",
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-管理后台-新增记忆条目",
+    url,
+    reqParam: { userId, content, agent },
+  });
+  return result;
 }
 
 export async function replaceAdminMemoryEntry(
@@ -389,14 +449,22 @@ export async function replaceAdminMemoryEntry(
   content: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/entries`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ old_text: oldText, content, agent }),
     }),
     "Failed to replace memory entry",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆条目",
+    url,
+    reqParam: { userId, old_text: oldText, content, agent },
+  });
+  return result;
 }
 
 export async function deleteAdminMemoryEntry(
@@ -406,13 +474,18 @@ export async function deleteAdminMemoryEntry(
 ): Promise<AdminMemoryBucket> {
   const params = new URLSearchParams({ old_text: oldText });
   if (agent) params.set("agent", agent);
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/memory/entries?${params}`,
-      { method: "DELETE" },
-    ),
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/entries?${params}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, { method: "DELETE" }),
     "Failed to delete memory entry",
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-管理后台-删除记忆条目",
+    url,
+    reqParam: { userId, old_text: oldText, agent },
+  });
+  return result;
 }
 
 // ── V1 Memory CRUD ──────────────────────────────────────────────────────────
@@ -424,14 +497,22 @@ export async function updateAdminV1Section(
   summary: string,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/sections`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/sections`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ section_type: sectionType, field, summary, agent }),
     }),
     "Failed to update V1 section",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆段落",
+    url,
+    reqParam: { userId, section_type: sectionType, field, summary, agent },
+  });
+  return result;
 }
 
 export async function addAdminV1Fact(
@@ -441,14 +522,22 @@ export async function addAdminV1Fact(
   confidence: number,
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/facts`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ content, category, confidence, agent }),
     }),
     "Failed to add V1 fact",
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-管理后台-新增记忆事实",
+    url,
+    reqParam: { userId, content, category, confidence, agent },
+  });
+  return result;
 }
 
 export async function updateAdminV1Fact(
@@ -457,14 +546,22 @@ export async function updateAdminV1Fact(
   updates: { content?: string; category?: string; confidence?: number },
   agent: string | null,
 ): Promise<AdminMemoryBucket> {
-  return parse(
-    await apiFetch(`${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}`, {
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ ...updates, agent }),
     }),
     "Failed to update V1 fact",
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-管理后台-编辑记忆事实",
+    url,
+    reqParam: { userId, factId, ...updates, agent },
+  });
+  return result;
 }
 
 export async function deleteAdminV1Fact(
@@ -475,11 +572,16 @@ export async function deleteAdminV1Fact(
   const params = new URLSearchParams();
   if (agent) params.set("agent", agent);
   const qs = params.toString() ? `?${params}` : "";
-  return parse(
-    await apiFetch(
-      `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}${qs}`,
-      { method: "DELETE" },
-    ),
+  const url = `${base()}/${encodeURIComponent(userId)}/memory/v1/facts/${encodeURIComponent(factId)}${qs}`;
+  const result = await parse<AdminMemoryBucket>(
+    await apiFetch(url, { method: "DELETE" }),
     "Failed to delete V1 fact",
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-管理后台-删除记忆事实",
+    url,
+    reqParam: { userId, factId, agent },
+  });
+  return result;
 }

frontend-web/src/core/admin/hooks.ts

@@ -17,6 +17,96 @@ import {
   updateAdminV1Fact,
   updateAdminV1Section,
 } from "./api";
+import {
+  cancelActiveRun,
+  cancelAllActiveRuns,
+  getMonitorSettings,
+  loadActiveRuns,
+  loadConcurrencySeries,
+  loadTokenSpeedSeries,
+  updateMonitorSettings,
+  type Granularity,
+} from "./active-runs";
+
+// ── 实时并发监控 (admin) ─────────────────────────────────────────────────────
+
+/** Live snapshot of in-flight runs. Polls every `intervalMs` while `enabled`. */
+export function useActiveRuns(enabled = true, intervalMs = 4000) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "live"],
+    queryFn: loadActiveRuns,
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+/** 并发量时序 (peak/avg per minute|hour). */
+export function useConcurrencySeries(
+  granularity: Granularity,
+  hours: number | undefined,
+  enabled = true,
+  intervalMs = 15000,
+) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "concurrency", granularity, hours ?? null],
+    queryFn: () => loadConcurrencySeries(granularity, hours),
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+/** 大模型 token 出字速度时序 (tokens/sec per minute|hour). */
+export function useTokenSpeedSeries(
+  granularity: Granularity,
+  hours: number | undefined,
+  enabled = true,
+  intervalMs = 15000,
+) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "token-speed", granularity, hours ?? null],
+    queryFn: () => loadTokenSpeedSeries(granularity, hours),
+    enabled,
+    refetchInterval: enabled ? intervalMs : false,
+    refetchOnWindowFocus: false,
+  });
+}
+
+export function useCancelActiveRun() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: (runId: string) => cancelActiveRun(runId),
+    onSuccess: () => qc.invalidateQueries({ queryKey: ["admin-active-runs", "live"] }),
+  });
+}
+
+export function useCancelAllActiveRuns() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: () => cancelAllActiveRuns(),
+    onSuccess: () => qc.invalidateQueries({ queryKey: ["admin-active-runs", "live"] }),
+  });
+}
+
+export function useMonitorSettings(enabled = true) {
+  return useQuery({
+    queryKey: ["admin-active-runs", "settings"],
+    queryFn: getMonitorSettings,
+    enabled,
+    refetchOnWindowFocus: false,
+  });
+}
+
+export function useUpdateMonitorSettings() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: (nextEnabled: boolean) => updateMonitorSettings(nextEnabled),
+    onSuccess: (data) => {
+      qc.setQueryData(["admin-active-runs", "settings"], data);
+    },
+  });
+}
 
 export function useUserLeaderboard(
   range: {

frontend-web/src/core/agents/api.ts

@@ -1,5 +1,6 @@
 import { getBackendBaseURL } from "@/core/config";
 import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   Agent,
@@ -58,6 +59,13 @@ export async function listAgents(params: ListAgentsParams = {}): Promise<Agent[]
   );
   if (!res.ok) throw new Error(`Failed to load agents: ${res.statusText}`);
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents${query ? `?${query}` : ""}`,
+    reqParam: params,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
@@ -76,12 +84,20 @@ export async function listAgentsPaginated(
     page?: number;
     page_size?: number;
   };
-  return {
+  const result: PaginatedAgents = {
     agents: data.agents,
     total: data.total ?? data.agents.length,
     page: data.page ?? params.page ?? 1,
     pageSize: data.page_size ?? params.pageSize ?? data.agents.length,
   };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents${query ? `?${query}` : ""}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function listAllAgentsAdmin(): Promise<Agent[]> {
@@ -91,13 +107,27 @@ export async function listAllAgentsAdmin(): Promise<Agent[]> {
     throw new Error(err.detail ?? `Failed to load agents: ${res.statusText}`);
   }
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体列表",
+    url: `/api/agents?admin=true`,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
 export async function getAgent(id: string): Promise<Agent> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/agents/${id}`);
   if (!res.ok) throw new Error(`Agent '${id}' not found`);
-  return res.json() as Promise<Agent>;
+  const agent = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-智能体-查看",
+    url: `/api/agents/${id}`,
+    reqParam: { id },
+    returnParam: agent,
+  });
+  return agent;
 }
 
 export async function createAgent(request: CreateAgentRequest): Promise<Agent> {
@@ -110,7 +140,15 @@ export async function createAgent(request: CreateAgentRequest): Promise<Agent> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create agent: ${res.statusText}`);
   }
-  return res.json() as Promise<Agent>;
+  const created = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-智能体-新建",
+    url: `/api/agents`,
+    reqParam: request,
+    returnParam: created,
+  });
+  return created;
 }
 
 export async function updateAgent(
@@ -126,7 +164,15 @@ export async function updateAgent(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update agent: ${res.statusText}`);
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-修改",
+    url: `/api/agents/${id}`,
+    reqParam: { id, ...request },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function deleteAgent(id: string): Promise<void> {
@@ -134,12 +180,25 @@ export async function deleteAgent(id: string): Promise<void> {
     method: "DELETE",
   });
   if (!res.ok) throw new Error(`Failed to delete agent: ${res.statusText}`);
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-智能体-删除",
+    url: `/api/agents/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function getAgentSelector(): Promise<AgentSelectorResponse> {
   const res = await apiFetch(`${getBackendBaseURL()}/api/agents/selector`);
   if (!res.ok) throw new Error(`Failed to load agent selector: ${res.statusText}`);
-  return res.json() as Promise<AgentSelectorResponse>;
+  const selector = (await res.json()) as AgentSelectorResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-智能体-选择器",
+    url: `/api/agents/selector`,
+    returnParam: selector,
+  });
+  return selector;
 }
 
 export async function favoriteAgent(id: string): Promise<void> {
@@ -150,6 +209,12 @@ export async function favoriteAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to favorite agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-收藏",
+    url: `/api/agents/${id}/favorite`,
+    reqParam: { id },
+  });
 }
 
 export async function unfavoriteAgent(id: string): Promise<void> {
@@ -160,6 +225,12 @@ export async function unfavoriteAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to unfavorite agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-取消收藏",
+    url: `/api/agents/${id}/favorite`,
+    reqParam: { id },
+  });
 }
 
 export async function pinAgent(id: string): Promise<void> {
@@ -170,6 +241,12 @@ export async function pinAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to pin agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-置顶",
+    url: `/api/agents/${id}/pin`,
+    reqParam: { id },
+  });
 }
 
 export async function unpinAgent(id: string): Promise<void> {
@@ -180,6 +257,12 @@ export async function unpinAgent(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to unpin agent: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-取消置顶",
+    url: `/api/agents/${id}/pin`,
+    reqParam: { id },
+  });
 }
 
 export async function reorderFeaturedAgents(agentIds: string[]): Promise<void> {
@@ -197,6 +280,12 @@ export async function reorderFeaturedAgents(agentIds: string[]): Promise<void> {
       err.detail ?? `Failed to reorder featured agents: ${res.statusText}`,
     );
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-精选排序",
+    url: `/api/agents/featured/order`,
+    reqParam: { agent_ids: agentIds },
+  });
 }
 
 export async function listPrivateAgents(password: string): Promise<Agent[]> {
@@ -215,6 +304,12 @@ export async function listPrivateAgents(password: string): Promise<Agent[]> {
     );
   }
   const data = (await res.json()) as { agents: Agent[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-私有广场智能体列表",
+    url: `/api/agents/private-square/list`,
+    returnParam: data.agents,
+  });
   return data.agents;
 }
 
@@ -261,12 +356,20 @@ export async function listPrivateAgentsPaginated(
     page?: number;
     page_size?: number;
   };
-  return {
+  const result: PaginatedAgents = {
     agents: data.agents,
     total: data.total ?? data.agents.length,
     page: data.page ?? params.page ?? 1,
     pageSize: data.page_size ?? params.pageSize ?? data.agents.length,
   };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-私有广场智能体列表",
+    url: `/api/agents/private-square/list`,
+    reqParam: { ...params, password: undefined },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function setAgentPrivate(
@@ -287,7 +390,15 @@ export async function setAgentPrivate(
       err.detail ?? `Failed to update agent privacy: ${res.statusText}`,
     );
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-设置私有",
+    url: `/api/agents/${id}/private`,
+    reqParam: { id, is_private: isPrivate },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function setAgentFeatured(
@@ -308,7 +419,15 @@ export async function setAgentFeatured(
       err.detail ?? `Failed to set featured: ${res.statusText}`,
     );
   }
-  return res.json() as Promise<Agent>;
+  const updated = (await res.json()) as Agent;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-设置精选",
+    url: `/api/agents/${id}/featured`,
+    reqParam: { id, order },
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export interface AgentSkillsSyncRemoval {
@@ -333,7 +452,14 @@ export async function adminSyncAgentSkills(): Promise<AgentSkillsSyncResult> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to sync agent skills: ${res.statusText}`);
   }
-  return res.json() as Promise<AgentSkillsSyncResult>;
+  const result = (await res.json()) as AgentSkillsSyncResult;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-智能体-同步技能",
+    url: `/api/agents/admin/sync-skills`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface KnowledgeIngestAttempt {
@@ -371,7 +497,15 @@ export async function publishArtifactToKnowledge(request: {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `发布入库失败: ${res.statusText}`);
   }
-  return res.json() as Promise<KnowledgeIngestPublishResult>;
+  const result = (await res.json()) as KnowledgeIngestPublishResult;
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-智能体-产物发布入库",
+    url: `/api/knowledge-ingest/publish`,
+    reqParam: request,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function checkAgentName(

frontend-web/src/core/api/markdown-docx-export.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api/fetch-client";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 import { downloadMarkdownAsDocx } from "@/core/scheduled-tasks/markdown-docx";
 
 function filenameFromContentDisposition(header: string | null): string | null {
@@ -79,13 +80,31 @@ export async function downloadMarkdownDocxFromBackend(options: {
 
     if (response.status === 404) {
       await downloadMarkdownAsDocx(markdown, options.title?.trim() || "document", options.title);
+      writeYLog({
+        optType: OptType.export,
+        optDetail: "CM助手-全量-导出-Word",
+        url: `${getBackendBaseURL()}/api/writing/export/docx`,
+        reqParam: { title: options.title?.trim() || undefined },
+      });
       return;
     }
 
     await downloadBlobResponse(response, fallbackFilename);
+    writeYLog({
+      optType: OptType.export,
+      optDetail: "CM助手-全量-导出-Word",
+      url: `${getBackendBaseURL()}/api/writing/export/docx`,
+      reqParam: { title: options.title?.trim() || undefined },
+    });
   } catch (err) {
     if (err instanceof TypeError) {
       await downloadMarkdownAsDocx(markdown, options.title?.trim() || "document", options.title);
+      writeYLog({
+        optType: OptType.export,
+        optDetail: "CM助手-全量-导出-Word",
+        url: `${getBackendBaseURL()}/api/writing/export/docx`,
+        reqParam: { title: options.title?.trim() || undefined },
+      });
       return;
     }
     throw err;

frontend-web/src/core/artifacts/api.ts

@@ -1,4 +1,5 @@
 import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import { urlOfArtifact } from "./utils";
 
@@ -26,7 +27,8 @@ export async function updateArtifactContent({
   content: string;
   isMock?: boolean;
 }) {
-  const res = await apiFetch(urlOfArtifact({ filepath, threadId, isMock }), {
+  const url = urlOfArtifact({ filepath, threadId, isMock });
+  const res = await apiFetch(url, {
     method: "PATCH",
     headers: {
       "Content-Type": "application/json",
@@ -36,5 +38,11 @@ export async function updateArtifactContent({
   if (!res.ok) {
     throw new Error(await errorMessageFromResponse(res));
   }
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-产物-编辑产物内容",
+    url,
+    reqParam: { filepath, threadId },
+  });
   return res.text();
 }

frontend-web/src/core/auth/api.ts

@@ -11,6 +11,14 @@ export interface UserListItem {
   agent_count: number;
   /** 问答次数：用户提问的次数（一次提问算一次）。 */
   qa_count: number;
+  /** 登录白名单放行标记：开关开启后仅 approved 用户（或 admin）可登录。 */
+  approved: boolean;
+  /**
+   * 账号级「登录口令」（明文，仅管理员可见）。非空 → 该账号用户名直登必须带匹配的
+   * `?password=`；为空/null → 走原有共享口令门/免口令逻辑。管理员据此拼出登录链接
+   * `…/login/<用户名>?password=xxxx` 发给用户。
+   */
+  login_password: string | null;
 }
 
 export async function listAllUsers(): Promise<UserListItem[]> {
@@ -19,6 +27,39 @@ export async function listAllUsers(): Promise<UserListItem[]> {
   return res.json() as Promise<UserListItem[]>;
 }
 
+/** 放行 / 取消放行某个注册用户（登录白名单）。Admin only。 */
+export async function setUserApproval(userId: string, approved: boolean): Promise<UserListItem> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/v1/auth/users/${encodeURIComponent(userId)}/approval`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ approved }),
+  });
+  if (!res.ok) {
+    const data = await res.json().catch(() => null);
+    throw new Error(extractErrorMessage(data, "保存失败"));
+  }
+  return res.json() as Promise<UserListItem>;
+}
+
+/**
+ * 设置 / 清除某个账号的「登录口令」（明文）。Admin only。
+ *
+ * 传非空字符串 → 设置；传 `null` 或空字符串 → 清除。设置后该账号用户名直登需带匹配的
+ * `?password=`。返回更新后的用户项（含明文 `login_password`）。
+ */
+export async function setUserLoginPassword(userId: string, password: string | null): Promise<UserListItem> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/v1/auth/users/${encodeURIComponent(userId)}/login-password`, {
+    method: "PUT",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ password }),
+  });
+  if (!res.ok) {
+    const data = await res.json().catch(() => null);
+    throw new Error(extractErrorMessage(data, "保存失败"));
+  }
+  return res.json() as Promise<UserListItem>;
+}
+
 // Normalize a FastAPI error body into a human-readable string. `detail` may be
 // a plain string, an object like AuthErrorResponse ({ code, message }), or an
 // array of validation errors — anything but a string would otherwise render as

frontend-web/src/core/auth/dashboard-input.ts

@@ -18,6 +18,7 @@
 
 import { requestCrudService } from "@/service/request-axios-service";
 import { readCopTaskDetail } from "@/core/auth/task-deeplink";
+import { fetchTaskDeeplinkConfig } from "@/core/auth/task-deeplink-config";
 
 /** 本页输入 JSON 暂存的 sessionStorage key（拉取一次后复用，避免重复请求）。 */
 export const DASHBOARD_INPUT_STORAGE_KEY = "dashboard.inputJson";
@@ -221,3 +222,43 @@ export async function fetchDashboardInputJson(
   if (resolved) persistDashboardInputJson(resolved);
   return resolved;
 }
+
+/* ---------------------- rwfx 进入预检：3q 是否完成 ---------------------- */
+
+/**
+ * 「3q（研判情报报告）是否完成」状态：
+ *   - ``complete``   = selectSqReport 数组里有有效内容；
+ *   - ``incomplete`` = 数组为空 / 每条 contentJson 都是 null/空（3q 未完成）；
+ *   - ``unknown``    = 缺 consumer 地址 / 请求异常（无法判定，调用方应静默放行）。
+ */
+export type SqReportStatus = "complete" | "incomplete" | "unknown";
+
+/**
+ * rwfx（任务分析）进入时的「3q 是否完成」预检：调 selectSqReport，复用 ``extractSqReport``
+ * 判定该任务是否已有有效研判情报。判定口径与大屏绘制取数完全一致（空/全 null → 无内容）。
+ *   - 有可用内容 → ``complete``（正常）；
+ *   - 空 / 全 null → ``incomplete``（rwfx 据此弹框引导去 3qfx）；
+ *   - 缺地址 / 请求失败 → ``unknown``（不打扰用户）。
+ *
+ * **数据源由后端配置 ``task_deeplink.test`` 决定**（线上 selectSqReport 外部不可用时）：
+ *   - ``test=true``  → 直接用 ``config.yaml`` 的 ``mock.sq_report`` 假数据判定，**不发请求**
+ *     （与目的树查询/行动解析的 mock 同一套机制，见 [[task-deeplink-config]]）；
+ *   - ``test=false`` → 调真实接口 ``GET {VITE_AIPI_CONSUMER_URL}/cop/selectSqReport?taskId=``。
+ */
+export async function fetchSqReportStatus(taskId: string): Promise<SqReportStatus> {
+  if (!taskId) return "unknown";
+  const cfg = await fetchTaskDeeplinkConfig();
+  // test=true：外部接口不可用，直接用后端 config 的假数据判定（不打真实接口）。
+  if (cfg.test) {
+    return extractSqReport(cfg.mock.sqReport, taskId) ? "complete" : "incomplete";
+  }
+  // 真实模式：打真实接口。service 拦截器统一注入鉴权并返回整包 body；空/全 null → null。
+  const url = sqReportUrl();
+  if (!url) return "unknown";
+  try {
+    const body = await requestCrudService.get(url, { taskId });
+    return extractSqReport(body, taskId) ? "complete" : "incomplete";
+  } catch {
+    return "unknown";
+  }
+}

frontend-web/src/core/auth/external-access-token.ts

@@ -0,0 +1,7 @@
+export function normalizeExternalAccessToken(value: unknown): string {
+  if (value == null) return "";
+  const token = String(value).trim();
+  if (!token) return "";
+  const lowered = token.toLowerCase();
+  return lowered === "null" || lowered === "undefined" ? "" : token;
+}

frontend-web/src/core/auth/hooks.ts

@@ -1,6 +1,8 @@
-import { useQuery } from "@tanstack/react-query";
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
-import { listAllUsers } from "./api";
+import { OptType, writeYLog } from "@/core/log/y-log";
+
+import { listAllUsers, setUserApproval, setUserLoginPassword } from "./api";
 
 export function useAllUsers(enabled: boolean) {
   return useQuery({
@@ -9,3 +11,38 @@ export function useAllUsers(enabled: boolean) {
     enabled,
   });
 }
+
+/** 放行 / 取消放行某个用户（登录白名单），成功后刷新用户列表缓存。 */
+export function useSetUserApproval() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({ userId, approved }: { userId: string; approved: boolean }) => setUserApproval(userId, approved),
+    onSuccess: (_data, vars) => {
+      writeYLog({
+        optType: vars.approved ? OptType.enabled : OptType.disabled,
+        optDetail: `CM助手-全量-白名单管理-${vars.approved ? "放行" : "取消放行"}用户`,
+        url: `/api/v1/auth/users/${vars.userId}/approval`,
+        reqParam: vars,
+      });
+      void queryClient.invalidateQueries({ queryKey: ["admin", "users"] });
+    },
+  });
+}
+
+/** 设置 / 清除某账号的「登录口令」（明文），成功后刷新用户列表缓存。 */
+export function useSetUserLoginPassword() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: ({ userId, password }: { userId: string; password: string | null }) => setUserLoginPassword(userId, password),
+    onSuccess: (_data, vars) => {
+      const cleared = vars.password == null || vars.password === "";
+      writeYLog({
+        optType: cleared ? OptType.delete : OptType.edit,
+        optDetail: `CM助手-全量-白名单管理-${cleared ? "清除" : "设置"}账号登录口令`,
+        url: `/api/v1/auth/users/${vars.userId}/login-password`,
+        reqParam: { userId: vars.userId },
+      });
+      void queryClient.invalidateQueries({ queryKey: ["admin", "users"] });
+    },
+  });
+}

frontend-web/src/core/auth/index.ts

@@ -7,6 +7,12 @@ export interface LoginByUsernameResponse {
   system_role: string;
   needs_setup: boolean;
   created: boolean;
+  /**
+   * 本次登录解析出的原始登录用户名（token 登录=getTokenInfo 解析值；用户名登录=所传用户名）。
+   * 用于跳转外链时拼 ``?username=``——后端落库的邮箱前缀是归一化(小写/替换)后的，有损，故以此为准。
+   * 旧后端可能不返回。
+   */
+  username?: string;
 }
 
 import {

frontend-web/src/core/auth/login-credentials.ts

@@ -0,0 +1,61 @@
+/**
+ * 任务工作区跳转外链时要拼接的「登录态凭据」：token1 + 登录用户名 的存取。
+ *
+ * - **token1** = token 登录用的上游 token（登录 URL 的 ``?authToken=``，即走
+ *   ``/api/v1/auth/login/token`` 这条 token 换登录路径用的 token）。
+ * - **username** = 后端 token 登录时用该 token 调 ``getTokenInfo`` 解析出的**登录用户名**
+ *   （见 ``auth.py`` ``/login/token`` → ``UsernameLoginResponse.username``）。**不是**邮箱
+ *   前缀、也**不是**解 JWT 得来——后端把它落库时会 ``.lower()`` + 归一化，邮箱前缀是有损的，
+ *   所以以后端回传的原始值为准。
+ *
+ * 二者均经 [[scoped-storage]] 的 ``authStorage*`` 存取（键用 ``login.`` 前缀，属其受保护
+ * 鉴权键族）：嵌入(iframe)/独立会话态自动落 sessionStorage 隔离、正常态落 localStorage，
+ * 并随「开启独立会话」一起被 ``migrateAuthToSession`` 迁移。
+ *
+ * **门控**：仅 token 登录（``authToken`` 存在）才写入。非 token 登录不写 token1 → 跳转按钮
+ * 的「追加登录态」开关此时读不到 token，自然不追加（符合「必须用 login/token 登录才能带
+ * token 跳转」）。
+ */
+
+import {
+  authStorageGet,
+  authStorageRemove,
+  authStorageSet,
+} from "@/core/auth/scoped-storage";
+import { getAccountDisplayName, type LoginByUsernameResponse } from "@/core/auth";
+
+const LOGIN_TOKEN_KEY = "login.token1";
+const LOGIN_USERNAME_KEY = "login.username";
+
+/**
+ * 持久化 token 登录的 token1 + 用户名（token 登录成功后调用）。
+ * ``authToken`` 为空则整次忽略（非 token 登录不留痕）。
+ */
+export function persistLoginCredentials(
+  authToken: string | null | undefined,
+  auth: LoginByUsernameResponse | null,
+): void {
+  const token = authToken?.trim();
+  if (!token) return;
+  authStorageSet(LOGIN_TOKEN_KEY, token);
+  // 优先用后端回传的原始登录名（getTokenInfo 解析值）；旧后端无该字段时退回账号显示名
+  // （邮箱 @ 前缀）兜底，保证总有个值可用。
+  const username = auth?.username?.trim() || getAccountDisplayName(auth);
+  if (username) authStorageSet(LOGIN_USERNAME_KEY, username);
+}
+
+/** 读 token1（无则 ``null`` → 跳转不追加登录态）。 */
+export function readLoginToken(): string | null {
+  return authStorageGet(LOGIN_TOKEN_KEY);
+}
+
+/** 读登录用户名（无则 ``null``）。 */
+export function readLoginUsername(): string | null {
+  return authStorageGet(LOGIN_USERNAME_KEY);
+}
+
+/** 清除登录态凭据（登出时调用）。 */
+export function clearLoginCredentials(): void {
+  authStorageRemove(LOGIN_TOKEN_KEY);
+  authStorageRemove(LOGIN_USERNAME_KEY);
+}

frontend-web/src/core/auth/task-buttons.ts

@@ -7,7 +7,8 @@
  * 任务深链配置读出 rwfx 的 4 个历史按钮，3qfx/xdfx 为空）——这样真实跳转地址通过实时
  * config 进种子，避免写死；一旦保存过，后端即唯一数据源。
  *
- * 按钮两类（``linkType``）：``url`` 外链（``window.open``，可选追加 ``?id=任务id``）/
+ * 按钮两类（``linkType``）：``url``（外链 ``window.open``；**或应用内路由**——target 以 ``/`` 开头
+ * 时按内部路由处理：``self`` 走 react-router 同窗导航、``blank`` 拼 hash 路由新标签；可选追加 ``?{idParam}=id``）/
  * ``business`` 内部切换到另一业务（复用 [[task-deeplink]] 的 ``resolveTaskDeeplinkTarget``）。
  */
 
@@ -19,6 +20,14 @@ import {
   readCopTaskDetail,
   resolveTaskDeeplinkTarget,
 } from "@/core/auth/task-deeplink";
+import { readUserInfo, resolveRouteParamValue } from "@/strategy-components/lib/light-app";
+import {
+  readLoginToken,
+  readLoginUsername,
+} from "@/core/auth/login-credentials";
+
+/** 「大屏绘制」独立页应用内路由（深链「上一步」默认指向它，跳转追加 ?taskId=）。 */
+export const DASHBOARD_AGENT_ROUTE = "/page/strategy/dashboard-agent";
 
 /** 任务工作区业务码（与路由 taskBase 一一对应）。 */
 export type TaskBusiness = "rwfx" | "3qfx" | "xdfx";
@@ -62,6 +71,20 @@ export type TaskButtonIdKind = "task" | "action";
 /** ``url`` 外链打开方式：``blank``=新窗口（默认）/ ``self``=当前窗口（嵌入态即当前 iframe）。 */
 export type TaskButtonOpenMode = "blank" | "self";
 
+/**
+ * ``url`` 外链追加的**登录参数**（与「应用管理」一致）：在拼好的跳转地址后再依次
+ * 追加 ``?{key}={value}``，``value`` 运行时从 ``userInfo`` 按 ``source`` 解析
+ * （``other`` 时取 ``customValue`` 字面值）。复用 [[light-app-center]] 的取值来源。
+ */
+export interface TaskButtonLoginParam {
+  /** 拼到 URL 的查询参数名。 */
+  key: string;
+  /** 取值来源：``userInfo`` 字段名（如 ``accessToken`` / ``yUserId``）或 ``other``（自填）。 */
+  source: string;
+  /** ``source==="other"`` 时的自定义字面值。 */
+  customValue: string;
+}
+
 /** 一个可配置跳转按钮。 */
 export interface TaskButton {
   id: string;
@@ -81,10 +104,38 @@ export interface TaskButton {
   idKind: TaskButtonIdKind;
   /** ``url`` 外链打开方式：``blank``=新窗口（默认）/ ``self``=当前窗口。仅 ``url`` 类型有意义。 */
   openMode: TaskButtonOpenMode;
+  /** ``url`` 外链追加的登录参数列表（仅 ``url`` 类型有意义；为空则不追加，行为同旧版）。 */
+  loginParams: TaskButtonLoginParam[];
+  /**
+   * ``url`` 跳转是否追加登录态：token1（token 登录的上游 token）+ 登录用户名，供外链所在的
+   * 外部系统识别当前登录用户。**仅 token 登录**（前端存有 token1，见 [[login-credentials]]）时
+   * 实际拼上；非 token 登录读不到 token1，自动跳过（按钮照常跳，只是不带这两个参数）。
+   */
+  appendAuth: boolean;
+  /** 追加 token 的查询参数名（空则用 ``token``）。 */
+  authTokenParam: string;
+  /** 追加用户名的查询参数名（空则用 ``username``）。 */
+  authNameParam: string;
   enabled: boolean;
   sortOrder: number;
 }
 
+/**
+ * 运行时解析单个登录参数的值——**与「应用管理」完全一致**：直接复用 light-app 的
+ * ``resolveRouteParamValue``（把本按钮的登录参数适配成 ``login`` 类型的路由参数），
+ * 保证取值来源/逻辑跟轻应用一模一样（``other`` 取字面 ``customValue``，否则从
+ * ``userInfo`` 取 ``source`` 字段）。
+ */
+function resolveLoginParamValue(
+  p: TaskButtonLoginParam,
+  userInfo: Record<string, unknown>,
+): string {
+  return resolveRouteParamValue(
+    { key: p.key, paramType: "login", source: p.source, customValue: p.customValue },
+    userInfo,
+  );
+}
+
 /** 内部切换可选的目标业务（``business`` 类型按钮的下拉项）。 */
 export const TASK_BUSINESS_TARGETS: { code: TaskBusiness; label: string }[] = [
   { code: "3qfx", label: "三情分析" },
@@ -94,7 +145,8 @@ export const TASK_BUSINESS_TARGETS: { code: TaskBusiness; label: string }[] = [
 
 /**
  * 代码种子默认按钮（仅在后端整张表为空时使用）：
- *   - rwfx：历史 4 个按钮（编辑/下一步/3q详情，地址取自实时任务深链配置）+ 切换到三情/行动分析；
+ *   - rwfx：历史按钮（编辑/下一步/3q详情，地址取自实时任务深链配置）+「上一步」+ 切换到三情/行动分析；
+ *     「上一步」紧邻「下一步」左侧（底部栏 prev 组在 next 组前），默认指向应用内大屏绘制页（?taskId=任务id）；
  *   - 3qfx / xdfx：互相切换到另外两个业务。
  * 即「三个业务都带切换按钮」。已保存过则用页面「导入默认」把缺失项补进来。
  */
@@ -115,6 +167,10 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
     idParam: "id",
     idKind: "task",
     openMode: "blank",
+    loginParams: [],
+    appendAuth: false,
+    authTokenParam: "token",
+    authNameParam: "username",
     enabled: true,
     sortOrder,
   });
@@ -129,6 +185,10 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
     idParam: "id",
     idKind: "task",
     openMode: "blank",
+    loginParams: [],
+    appendAuth: false,
+    authTokenParam: "token",
+    authNameParam: "username",
     enabled: true,
     sortOrder,
   });
@@ -144,9 +204,35 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
       sortOrder: 0,
     },
+    {
+      // 上一步：放在「下一步」左边（底部快捷跳转栏，prev 组渲染在 next 组之前）。
+      // 默认指向**应用内**「大屏绘制」页 /page/strategy/dashboard-agent（内部路由，以 / 开头），
+      // 携带 ?taskId=任务id（大屏页按 taskId 取数）。openMode=self → 同窗 react-router 导航；
+      // 大屏页路由在 PageLayout 里被**强制显示全局 chrome**（见 PageRoutes 的 forceChromeForDashboardAgent），
+      // 故即便从去 chrome 的工作区进来也带回顶部导航栏 + 侧边栏（embed=1 外部嵌入态仍隐藏）。
+      id: "rwfx-prev",
+      business: "rwfx",
+      label: "上一步",
+      linkType: "url",
+      target: DASHBOARD_AGENT_ROUTE,
+      appendTaskId: true,
+      idParam: "taskId",
+      idKind: "task",
+      openMode: "self",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
+      enabled: true,
+      sortOrder: 1,
+    },
     {
       id: "rwfx-next",
       business: "rwfx",
@@ -157,8 +243,12 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
-      sortOrder: 1,
+      sortOrder: 2,
     },
     {
       id: "rwfx-detail3q",
@@ -170,12 +260,16 @@ export function defaultTaskButtons(cfg: TaskDeeplinkConfig): TaskButton[] {
       idParam: "id",
       idKind: "task",
       openMode: "blank",
+      loginParams: [],
+      appendAuth: false,
+      authTokenParam: "token",
+      authNameParam: "username",
       enabled: true,
-      sortOrder: 2,
+      sortOrder: 3,
     },
-    sw("rwfx-switch3q", "rwfx", "切换到三情分析", "3qfx", 3),
-    sw("rwfx-switchxd", "rwfx", "切换到行动分析", "xdfx", 4),
-    pz("rwfx-purpose", "rwfx", 5),
+    sw("rwfx-switch3q", "rwfx", "切换到三情分析", "3qfx", 4),
+    sw("rwfx-switchxd", "rwfx", "切换到行动分析", "xdfx", 5),
+    pz("rwfx-purpose", "rwfx", 6),
     // 3qfx（三情分析）：切换到任务/行动分析
     sw("3qfx-switchrw", "3qfx", "切换到任务分析", "rwfx", 0),
     sw("3qfx-switchxd", "3qfx", "切换到行动分析", "xdfx", 1),
@@ -236,8 +330,48 @@ export async function runTaskButton(btn: TaskButton, ctx: RunTaskButtonCtx): Pro
     // 行动分析（xdfx）可选追加行动id；否则用任务id。行动id 缺失时回退任务id。
     const id = btn.idKind === "action" ? ctx.actionId || ctx.taskId : ctx.taskId;
     const param = (btn.idParam || "id").trim() || "id";
-    const url = btn.appendTaskId && id ? appendQueryParam(base, param, id) : base;
-    // 打开方式：self=当前窗口（嵌入态即当前 iframe）；否则 blank=新窗口（默认）。
+    let url = btn.appendTaskId && id ? appendQueryParam(base, param, id) : base;
+    // 追加登录参数（与应用管理一致）：运行时从 userInfo 解析每项的值后拼到地址尾部。
+    const loginParams = btn.loginParams ?? [];
+    if (loginParams.length > 0) {
+      const userInfo = readUserInfo();
+      for (const lp of loginParams) {
+        const key = (lp.key || "").trim();
+        if (!key) continue;
+        url = appendQueryParam(url, key, resolveLoginParamValue(lp, userInfo));
+      }
+    }
+    // 追加登录态：仅 token 登录（存在 token1）才拼 token + 用户名，供外链所在的外部系统识别
+    // 当前登录用户。非 token 登录读不到 token1 → 整段跳过（不影响跳转本身）。
+    if (btn.appendAuth) {
+      const token1 = readLoginToken();
+      if (token1) {
+        url = appendQueryParam(url, (btn.authTokenParam || "token").trim() || "token", token1);
+        const name = readLoginUsername();
+        if (name) {
+          url = appendQueryParam(url, (btn.authNameParam || "username").trim() || "username", name);
+        }
+      }
+    }
+    // 应用内部路由（以单个 / 开头，如「上一步」→ 大屏绘制页）：
+    //   self → 走 react-router 同窗导航（不刷新、保留 SPA）；blank → 拼成当前源的 hash 路由新标签打开。
+    if (base.startsWith("/") && !base.startsWith("//")) {
+      if (btn.openMode === "blank") {
+        const full = `${window.location.origin}${window.location.pathname}#${url}`;
+        // 打印实际打开地址，便于排查登录参数/拼接问题。
+        console.info(`[task-button] 「${btn.label}」内部路由(新标签) → ${full}`);
+        window.open(full, "_blank", "noopener,noreferrer");
+      } else {
+        console.info(`[task-button] 「${btn.label}」内部路由(同窗) → ${url}`);
+        ctx.navigate(url);
+      }
+      return;
+    }
+    // 外链：self=当前窗口（嵌入态即当前 iframe）；否则 blank=新窗口（默认）。
+    // 打印最终跳转地址（含追加的 id / 登录参数），便于排查问题。
+    console.info(
+      `[task-button] 「${btn.label}」外链(${btn.openMode === "self" ? "当前窗口" : "新窗口"}) → ${url}`,
+    );
     if (btn.openMode === "self") {
       window.location.assign(url);
     } else {

frontend-web/src/core/auth/task-deeplink-config.ts

@@ -23,8 +23,10 @@ export interface TaskDeeplinkConfig {
   actionTest: boolean;
   /** 目的树查询完整 URL（调用追加 ?taskId=）。 */
   purposeDetailUrl: string;
-  /** 删除完整 URL（调用追加 ?taskId=）。 */
+  /** 删除完整 URL（rwfx 与 xdfx 共用同一接口）：rwfx 追加 ?taskId=、xdfx 追加 ?actionId=（另一参数不传）。 */
   deleteUrl: string;
+  /** xdfx「行动历史是否存在」查询完整 URL（调用追加 ?actionId=）；留空 → 前端视作无历史、不阻断删除（地址待提供）。 */
+  actionHistoryUrl: string;
   /** B 系统树形完整编辑页 URL（跳转追加 ?id=）。 */
   treemapEditUrl: string;
   /** B 系统树形下一步页 URL（跳转追加 ?id=）。 */
@@ -34,11 +36,13 @@ export interface TaskDeeplinkConfig {
   /** 「3q详情」详情页 URL（rwfx 目的树面板链接，跳转追加 ?id= 任务id）；留空则前端提示未配置。 */
   detail3qUrl: string;
   /** 测试假数据：purposeDetail = 原始 {state,msg,data}；delete = {message,success}；
-   *  actionDetail = 原始 {state,msg,data:{taskId,...}}。 */
+   *  actionDetail = 原始 {state,msg,data:{taskId,...}}；sqReport = 原始 {state,msg,data:[...]}
+   *  （rwfx 3q 预检用，test 为真时生效）。 */
   mock: {
     purposeDetail?: unknown;
     delete?: { message?: string; success?: boolean };
     actionDetail?: unknown;
+    sqReport?: unknown;
   };
 }
 
@@ -48,10 +52,12 @@ export const DEFAULT_TASK_DEEPLINK_CONFIG: TaskDeeplinkConfig = {
   deleteTest: false,
   actionTest: false,
   purposeDetailUrl: "https://ch1.b.uat.4.cn/consumer/taskAnalyseSearch/getTaskPurposeDetail",
-  deleteUrl: "https://ch1.b.uat.4.cn/consumer/taskAnalyseSearch/delete",
+  deleteUrl: "https://ch1.b.uat.4.cn/bwjt/dropSixOrSevenData",
   treemapEditUrl: "https://ch1.b.uat.4.cn/web/#/task/item-aicoh/step-mode-treemap-full-edit",
   treemapNextUrl: "https://ch1.b.uat.4.cn/web/#/task/item-aicoh/step-mode-treemap-full-next",
   actionDetailUrl: "https://ch1.b.uat.4.cn/consumer/plan/action",
+  // 行动历史查询地址待提供：空字符串 → 前端不查询、视作无历史（不阻断删除）。
+  actionHistoryUrl: "",
   detail3qUrl: "",
   mock: {},
 };
@@ -72,6 +78,8 @@ function normalize(body: unknown): TaskDeeplinkConfig {
     treemapEditUrl: str(o.treemap_edit_url, d.treemapEditUrl),
     treemapNextUrl: str(o.treemap_next_url, d.treemapNextUrl),
     actionDetailUrl: str(o.action_detail_url, d.actionDetailUrl),
+    // action_history_url 允许为空（地址待提供）：空 → 前端不查询、视作无历史。不回退默认。
+    actionHistoryUrl: typeof o.action_history_url === "string" ? o.action_history_url : d.actionHistoryUrl,
     // detail_3q_url 允许为空（地址待定），不回退默认；只在配了非空时才生效。
     detail3qUrl: typeof o.detail_3q_url === "string" ? o.detail_3q_url : d.detail3qUrl,
     mock: {
@@ -81,6 +89,7 @@ function normalize(body: unknown): TaskDeeplinkConfig {
           ? (mock.delete as { message?: string; success?: boolean })
           : undefined,
       actionDetail: mock.action_detail,
+      sqReport: mock.sq_report,
     },
   };
 }

frontend-web/src/core/auth/task-deeplink.ts

@@ -233,17 +233,41 @@ export interface TaskDeeplinkTarget {
   state?: Record<string, unknown>;
 }
 
-/** 用 taskName / taskContent 拼出开场信息文本；末尾附上任务 id（task_id），供后端识别任务。 */
-function buildOpeningText(detail: CopTaskDetail, taskId: string): string {
+/** xdfx（行动分析）开场信息里要追加的行动信息：行动标题 + 行动内容 + 行动id。 */
+interface ActionOpeningInfo {
+  /** 行动id（action_id）。 */
+  actionId?: string;
+  /** 行动标题（行动名称 actionName）。 */
+  actionName?: string;
+  /** 行动内容（行动叙事 narration）。 */
+  narration?: string;
+}
+
+/**
+ * 用 taskName / taskContent 拼出开场信息文本；末尾附上任务 id（task_id），供后端识别任务。
+ * xdfx（行动分析）额外附上「行动标题 / 行动内容 / 行动id（action_id）」——传入 action 时追加这几行。
+ */
+function buildOpeningText(detail: CopTaskDetail, taskId: string, action?: ActionOpeningInfo): string {
   return [
     detail.taskName ? `任务名称：${detail.taskName}` : "",
     detail.taskContent ? `任务内容：${detail.taskContent}` : "",
     taskId ? `任务id（task_id）为${taskId}` : "",
+    action?.actionName ? `行动标题：${action.actionName}` : "",
+    action?.narration ? `行动内容：${action.narration}` : "",
+    action?.actionId ? `行动id（action_id）为${action.actionId}` : "",
   ]
     .filter(Boolean)
     .join("\n");
 }
 
+/**
+ * 3qfx/rwfx 这类“按任务id 直接问答”的任务工作区，在 ``TaskContext`` 丢失但
+ * ``login.copTaskDetail`` 仍存在时，可用它重新拼出开场词做前端自恢复。
+ */
+export function buildTaskOpeningText(detail: CopTaskDetail, taskId: string): string {
+  return buildOpeningText(detail, taskId);
+}
+
 /**
  * 据 goPath + 任务详情解析跳转目标。
  *   - 多智能体会商：返回带 ``roundtablePrefill``（businessCode 让会商页自动选用配置的业务链条；
@@ -312,11 +336,21 @@ export async function resolveTaskDeeplinkTarget(
   // 暂存任务上下文（taskId + agentId + 开场信息），跳到 chats 索引，由工作区按 taskId 决定
   // 开最新历史对话 / 新建。rwfx 在工作区里额外过「目的树闸门」；3qfx/xdfx 仅 1:N 列表，
   // 新建对话直接带开场信息自动发出（见 task-purpose / AgentChatPage 的 taskGate / taskBind）。
+  // xdfx（行动分析）：聊天记录按「行动id」划分（partitionByAction），且开场信息追加
+  // 行动标题 / 行动内容 / action_id（行动详情登录解析任务id 时已缓存，优先读缓存避免重复请求）。
+  const isXdfx = parsed.businessCode === XDFX_BUSINESS_CODE;
+  const actionId = rawId || taskId;
+  let actionInfo: ActionOpeningInfo | undefined;
+  if (isXdfx) {
+    const ad = rawId ? (readActionDetail() ?? (await fetchActionDetail(rawId))) : null;
+    actionInfo = { actionId, actionName: ad?.actionName, narration: ad?.narration };
+  }
   persistTaskContext({
     taskId,
     agentId,
-    openingText: buildOpeningText(detail, taskId),
-    actionId: rawId || taskId,
+    openingText: buildOpeningText(detail, taskId, actionInfo),
+    actionId,
+    partitionByAction: isXdfx,
   });
   return { path: `${taskBase}/agent/${agentId}/chats` };
 }

frontend-web/src/core/auth/task-purpose.ts

@@ -41,6 +41,12 @@ export interface TaskContext {
   openingText: string;
   /** 深链原始 id（xdfx 为「行动id」，需追加行动id 的按钮用；其它业务等于 taskId）。 */
   actionId?: string;
+  /**
+   * xdfx（行动分析）专属：聊天记录按「行动id」(actionId) 而非「任务id」划分。
+   * 为 true 时，新建对话额外打 `metadata.actionId` 标签、对话列表按 actionId 过滤
+   * （仍保留 taskId 标签以维持任务深链对话「全局共享、不分用户」的后端语义）。
+   */
+  partitionByAction?: boolean;
 }
 
 const TASK_CONTEXT_STORAGE_KEY = "task.rwfxContext";
@@ -248,28 +254,75 @@ export interface DeleteTaskPurposeResult {
 }
 
 /**
- * 删除任务目的树（覆盖前清空 / 手动清除任务记录都走这里）。``delete_test=true`` 时
- * 用后端配置里的假数据（接口未开发完时用）；否则打真实接口。
+ * 删除记录的「按哪种 id 删」：
+ *   - ``task``（默认，rwfx）：传 ``?taskId=``，不传 actionId；
+ *   - ``action``（xdfx 行动分析）：传 ``?actionId=``，不传 taskId。
+ * rwfx 与 xdfx 共用同一个删除接口（``delete_url`` = dropSixOrSevenData）；
+ * 「不传」= 该参数**根本不出现在 URL 里**（只把要传的那个 key 放进 params，axios 自然省略另一个），
+ * 不是传空值/None。
+ */
+export type DeleteIdKind = "task" | "action";
+
+/**
+ * 删除任务/行动记录（rwfx 覆盖前清空 / 手动清除 / xdfx 清除行动记录都走这里）。
+ * ``delete_test=true`` 时用后端配置里的假数据（接口未开发完时用）；否则打真实接口
+ * （rwfx 传 ``taskId``、xdfx 传 ``actionId``，见 ``DeleteIdKind``）。
  */
 export async function deleteTaskPurpose(
-  taskId: string,
+  id: string,
+  opts?: { idKind?: DeleteIdKind },
 ): Promise<DeleteTaskPurposeResult> {
-  if (!taskId) return { message: "缺少 taskId", success: false };
+  const idKind = opts?.idKind ?? "task";
+  if (!id) return { message: idKind === "action" ? "缺少 actionId" : "缺少 taskId", success: false };
   const cfg = await fetchTaskDeeplinkConfig();
   if (cfg.deleteTest) {
     const m = cfg.mock.delete ?? {};
     return { message: typeof m.message === "string" ? m.message : "", success: m.success === true };
   }
   if (!cfg.deleteUrl) return { message: "缺少删除接口地址", success: false };
-  const body = await requestCrudService.get(cfg.deleteUrl, { taskId });
+  // 只放要传的那个 id key：另一参数直接不出现在 URL（axios 不会序列化缺省 key）。
+  const params = idKind === "action" ? { actionId: id } : { taskId: id };
+  // 该删除接口（dropSixOrSevenData）成功时**什么都不返回**（空响应体），所以只要请求没抛错
+  // （HTTP 成功）就直接判定为成功；仅当后端偶尔回了 {success:false} 这类显式失败标记才算失败。
+  const body = await requestCrudService.get(cfg.deleteUrl, params);
   const obj =
     body && typeof body === "object" ? (body as unknown as Record<string, unknown>) : {};
   return {
     message: typeof obj.message === "string" ? obj.message : "",
-    success: obj.success === true,
+    success: obj.success !== false,
   };
 }
 
+export interface ActionHistoryResult {
+  /** 是否存在可删除的「行动历史」记录。 */
+  exists: boolean;
+  /** 是否成功判定。接口未配置 / 请求失败 → false（调用方据此**不**做「无历史」拦截，仍允许删除）。 */
+  known: boolean;
+}
+
+/**
+ * 查询 xdfx「行动历史是否存在」（清除行动记录前的预检），按「行动id」调用。
+ *
+ * 查询接口（``action_history_url``）地址**目前待提供**：为空时直接返回
+ * ``{ exists: false, known: false }``——视作空白、不查询，也不阻断删除；后端配上真实地址后自动生效。
+ *
+ * ⚠️ 真实返回结构待定：拿到接口后按实际字段调整「是否存在」的判定（当前暂按 ``data`` 非空兜底）。
+ */
+export async function fetchActionHistoryExists(actionId: string): Promise<ActionHistoryResult> {
+  if (!actionId) return { exists: false, known: false };
+  const cfg = await fetchTaskDeeplinkConfig();
+  if (!cfg.actionHistoryUrl) return { exists: false, known: false };
+  try {
+    const body = await requestCrudService.get(cfg.actionHistoryUrl, { actionId });
+    // TODO(接口就绪)：按真实返回结构判定。暂按整包 body.data 非空作「存在历史」。
+    const data = body && typeof body === "object" ? (body as { data?: unknown }).data : null;
+    const exists = Array.isArray(data) ? data.length > 0 : data != null && data !== "";
+    return { exists, known: true };
+  } catch {
+    return { exists: false, known: false };
+  }
+}
+
 /* ----------------------------- 跳转地址 ----------------------------- */
 
 /** B 系统「树形完整编辑」页地址（问答后「编辑」按钮，新标签打开）。用同步缓存配置。 */
@@ -311,12 +364,29 @@ export function readTaskContext(): TaskContext | null {
       agentId: String(parsed.agentId),
       openingText: typeof parsed.openingText === "string" ? parsed.openingText : "",
       actionId: typeof parsed.actionId === "string" ? parsed.actionId : undefined,
+      partitionByAction: parsed.partitionByAction === true,
     };
   } catch {
     return null;
   }
 }
 
+/**
+ * 任务深链对话的 thread metadata 标签（既用于「新建对话」打标签，也用于对话列表过滤）。
+ *   - 普通业务（rwfx/3qfx）：`{ taskId }` —— 按任务划分（1:N）。
+ *   - xdfx（partitionByAction）：`{ taskId, actionId }` —— 额外按「行动id」划分聊天记录；
+ *     仍带 taskId 以保留后端「任务深链对话全局共享」的语义（后端据 metadata.taskId 跳过分用户过滤）。
+ * 无有效 taskId 时返回 undefined（调用方据此不打标签）。
+ */
+export function taskThreadMetadata(
+  ctx: TaskContext | null | undefined,
+): Record<string, unknown> | undefined {
+  if (!ctx?.taskId) return undefined;
+  return ctx.partitionByAction && ctx.actionId
+    ? { taskId: ctx.taskId, actionId: ctx.actionId }
+    : { taskId: ctx.taskId };
+}
+
 export function clearTaskContext(): void {
   try {
     sessionStorage.removeItem(TASK_CONTEXT_STORAGE_KEY);

frontend-web/src/core/auth/use-live-account.ts

@@ -0,0 +1,82 @@
+"use client";
+
+import { useEffect, useRef, useState } from "react";
+
+import { getAccountDisplayName, getStoredAuth } from "@/core/auth";
+import { isEmbedActive } from "@/core/embed/embed-session";
+
+const AUTH_STORAGE_KEY = "deerflow.auth";
+
+export interface LiveAccount {
+  /** 实时登录用户 id（随 storage/focus 刷新）。null = 未登录。 */
+  userId: string | null;
+  /** 实时显示名（邮箱 @ 前缀，否则 user_id）。 */
+  displayName: string;
+  /** 组件首次挂载时捕获的用户 id。 */
+  mountUserId: string | null;
+  /** 组件首次挂载时捕获的显示名。 */
+  mountDisplayName: string;
+  /**
+   * 当前登录账号与挂载时不一致 —— 即本视图加载后登录被切换过（通常是在另一个
+   * 标签页登录了别的账号）。归属/发布类操作必须据此提醒，避免误归属。
+   */
+  switched: boolean;
+}
+
+/**
+ * 跟踪「实时」登录账号，而不是挂载时缓存的值。
+ *
+ * 鉴权 token 存在 localStorage（非嵌入态下被同浏览器所有标签页共享），所以在
+ * 另一个标签页登录会**静默替换**本标签页 API 调用所用的 token。任何会决定归属的
+ * 界面（创建/发布智能体）都必须显示请求实际将以哪个账号执行，并在会话中途被切换
+ * 账号时给出提示 —— 否则会出现「用 A 账号创建却归到 B 账号名下」。
+ */
+export function useLiveAccount(): LiveAccount {
+  const mountRef = useRef<{ id: string | null; name: string } | null>(null);
+  if (mountRef.current === null) {
+    const auth = getStoredAuth();
+    mountRef.current = {
+      id: auth?.user_id ?? null,
+      name: getAccountDisplayName(auth),
+    };
+  }
+  const [live, setLive] = useState(() => mountRef.current!);
+
+  useEffect(() => {
+    function refresh() {
+      const auth = getStoredAuth();
+      const id = auth?.user_id ?? null;
+      const name = getAccountDisplayName(auth);
+      setLive((prev) =>
+        prev.id === id && prev.name === name ? prev : { id, name },
+      );
+    }
+    // 嵌入(iframe)态鉴权走按标签页的 sessionStorage、不跨标签，收不到 storage 事件
+    // —— 只挂在正常态；focus/visibilitychange 兜底刷新两种形态都有效。
+    function onStorage(e: StorageEvent) {
+      if (e.key === AUTH_STORAGE_KEY) {
+        refresh();
+      }
+    }
+    if (!isEmbedActive()) {
+      window.addEventListener("storage", onStorage);
+    }
+    window.addEventListener("focus", refresh);
+    document.addEventListener("visibilitychange", refresh);
+    refresh();
+    return () => {
+      window.removeEventListener("storage", onStorage);
+      window.removeEventListener("focus", refresh);
+      document.removeEventListener("visibilitychange", refresh);
+    };
+  }, []);
+
+  const mount = mountRef.current!;
+  return {
+    userId: live.id,
+    displayName: live.name,
+    mountUserId: mount.id,
+    mountDisplayName: mount.name,
+    switched: live.id !== null && mount.id !== null && live.id !== mount.id,
+  };
+}

frontend-web/src/core/auth/yuser-login.ts

@@ -1,5 +1,6 @@
 import { requestCrudService } from "@/service/request-axios-service";
 import { authStorageGet, authStorageSet } from "@/core/auth/scoped-storage";
+import { normalizeExternalAccessToken } from "@/core/auth/external-access-token";
 
 const CONSUMER_URL = import.meta.env.VITE_AIPI_CONSUMER_URL || "";
 
@@ -8,6 +9,8 @@ export const EXTERNAL_USER_ID_STORAGE_KEY = "userId";
 export const EXTERNAL_USER_INFO_STORAGE_KEY = "userInfo";
 export const GENERAL_QA_ROUTE = "/page/workspace/chats/new";
 
+const YUSER_INFO_CACHE_KEY = "deerflow.yuserInfoByYUserId";
+
 type UserDetailResponse = {
   data?: {
     id?: string;
@@ -15,6 +18,102 @@ type UserDetailResponse = {
   };
 };
 
+function readExternalUserInfo(): Record<string, unknown> {
+  try {
+    const raw = authStorageGet(EXTERNAL_USER_INFO_STORAGE_KEY);
+    if (!raw) return {};
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+      ? (parsed as Record<string, unknown>)
+      : {};
+  } catch {
+    return {};
+  }
+}
+
+function readStoredYUserId(info: Record<string, unknown>): string {
+  const value = info.yUserId;
+  return value == null ? "" : String(value).trim();
+}
+
+function isPlainObject(value: unknown): value is Record<string, unknown> {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+function isUsableExternalValue(value: unknown): boolean {
+  if (value == null) return false;
+  if (typeof value !== "string") return true;
+  const trimmed = value.trim();
+  if (!trimmed) return false;
+  const lowered = trimmed.toLowerCase();
+  return lowered !== "null" && lowered !== "undefined";
+}
+
+function readYUserInfoCache(): Record<string, Record<string, unknown>> {
+  if (typeof window === "undefined") return {};
+  try {
+    const raw = window.localStorage.getItem(YUSER_INFO_CACHE_KEY);
+    if (!raw) return {};
+    const parsed = JSON.parse(raw);
+    if (!isPlainObject(parsed)) return {};
+    const cache: Record<string, Record<string, unknown>> = {};
+    for (const [key, value] of Object.entries(parsed)) {
+      if (isPlainObject(value)) cache[key] = value;
+    }
+    return cache;
+  } catch {
+    return {};
+  }
+}
+
+function readCachedYUserInfo(yUserId: string): Record<string, unknown> {
+  return readYUserInfoCache()[yUserId] ?? {};
+}
+
+function writeCachedYUserInfo(yUserId: string, info: Record<string, unknown>): void {
+  if (typeof window === "undefined") return;
+  try {
+    const cache = readYUserInfoCache();
+    cache[yUserId] = info;
+    window.localStorage.setItem(YUSER_INFO_CACHE_KEY, JSON.stringify(cache));
+  } catch {
+    /* noop */
+  }
+}
+
+function buildExternalUserInfo(
+  yUserId: string,
+  result: Record<string, unknown>,
+  previous: Record<string, unknown>,
+  cached: Record<string, unknown>,
+): Record<string, unknown> {
+  const next: Record<string, unknown> = { ...cached };
+  for (const [key, value] of Object.entries(result)) {
+    if (isUsableExternalValue(value)) {
+      next[key] = value;
+    }
+  }
+  next.yUserId = yUserId;
+
+  const incomingAccessToken = normalizeExternalAccessToken(result.accessToken);
+  if (incomingAccessToken) {
+    next.accessToken = incomingAccessToken;
+    return next;
+  }
+
+  const previousYUserId = readStoredYUserId(previous);
+  const previousAccessToken =
+    previousYUserId === yUserId ? normalizeExternalAccessToken(previous.accessToken) : "";
+  const cachedAccessToken = normalizeExternalAccessToken(cached.accessToken);
+  const fallbackAccessToken = previousAccessToken || cachedAccessToken;
+  if (fallbackAccessToken) {
+    next.accessToken = fallbackAccessToken;
+  } else {
+    delete next.accessToken;
+  }
+  return next;
+}
+
 /**
  * External login via yUserId + optional token (same flow as web-code Login.tsx):
  * persist tools_token, resolve user via consumer API, store userId/userInfo.
@@ -38,10 +137,11 @@ export async function loginByYUserId(
   // 注意:接口也会返回 accessToken,但 XK/PG 及 source=accessToken 要用路由透传的
   // access_token,故登录流程随后会用 persistAccessToken 覆盖 userInfo.accessToken。
   const result = res.data ?? {};
-  authStorageSet(
-    EXTERNAL_USER_INFO_STORAGE_KEY,
-    JSON.stringify({ ...result, yUserId }),
-  );
+  const previous = readExternalUserInfo();
+  const cached = readCachedYUserInfo(yUserId);
+  const next = buildExternalUserInfo(yUserId, result, previous, cached);
+  authStorageSet(EXTERNAL_USER_INFO_STORAGE_KEY, JSON.stringify(next));
+  writeCachedYUserInfo(yUserId, next);
 }
 
 export function persistToolsToken(token: string): void {
@@ -56,20 +156,13 @@ export function persistToolsToken(token: string): void {
  * 用合并而非覆盖整对象，避免抹掉 loginByYUserId 从 consumer 拿到的用户信息。
  */
 export function persistAccessToken(token: string): void {
-  const trimmed = token?.trim();
+  const trimmed = normalizeExternalAccessToken(token);
   if (!trimmed) return;
-  let info: Record<string, unknown> = {};
-  try {
-    const raw = authStorageGet(EXTERNAL_USER_INFO_STORAGE_KEY);
-    if (raw) {
-      const parsed = JSON.parse(raw);
-      if (parsed && typeof parsed === "object") {
-        info = parsed as Record<string, unknown>;
-      }
-    }
-  } catch {
-    info = {};
-  }
+  const info = readExternalUserInfo();
   info.accessToken = trimmed;
   authStorageSet(EXTERNAL_USER_INFO_STORAGE_KEY, JSON.stringify(info));
+  const yUserId = readStoredYUserId(info);
+  if (yUserId) {
+    writeCachedYUserInfo(yUserId, info);
+  }
 }

frontend-web/src/core/curator/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   CuratorConfig,
@@ -27,12 +28,21 @@ export interface CuratorConfigUpdatePayload {
 export async function updateCuratorConfig(
   payload: CuratorConfigUpdatePayload,
 ): Promise<CuratorConfig> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/config`, {
+  const url = `${getBackendBaseURL()}/api/curator/config`;
+  const response = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(payload),
   });
-  return response.json() as Promise<CuratorConfig>;
+  const result = (await response.json()) as CuratorConfig;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-策展-更新配置",
+    url,
+    reqParam: payload,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface RunCuratorResult {
@@ -42,13 +52,26 @@ export interface RunCuratorResult {
 }
 
 export async function runCurator(): Promise<RunCuratorResult> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/run`, {
-    method: "POST",
+  const url = `${getBackendBaseURL()}/api/curator/run`;
+  const response = await apiFetch(url, { method: "POST" });
+  const result = (await response.json()) as RunCuratorResult;
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-策展-手动触发策展",
+    url,
+    returnParam: result,
   });
-  return response.json() as Promise<RunCuratorResult>;
+  return result;
 }
 
 export async function getCuratorLogs(): Promise<CuratorLogs> {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/curator/logs`);
-  return response.json() as Promise<CuratorLogs>;
+  const url = `${getBackendBaseURL()}/api/curator/logs`;
+  const response = await apiFetch(url);
+  const result = (await response.json()) as CuratorLogs;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-策展-查看运行日志",
+    url,
+  });
+  return result;
 }

frontend-web/src/core/custom-prompts/index.ts

@@ -2,6 +2,7 @@ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** A user-defined reusable prompt, bound to the account (stored server-side). */
 export interface CustomPrompt {
@@ -27,6 +28,12 @@ async function listUserPrompts(): Promise<CustomPrompt[]> {
   const res = await apiFetch(baseUrl());
   if (!res.ok) throw new Error(`Failed to load prompts: ${res.statusText}`);
   const data = (await res.json()) as { prompts: CustomPrompt[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-自定义提示词-查询",
+    url: "/api/user-prompts",
+    returnParam: data.prompts,
+  });
   return data.prompts;
 }
 
@@ -44,7 +51,15 @@ async function createUserPrompt(input: {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create prompt: ${res.statusText}`);
   }
-  return res.json() as Promise<CustomPrompt>;
+  const created = (await res.json()) as CustomPrompt;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-自定义提示词-新增",
+    url: "/api/user-prompts",
+    reqParam: input,
+    returnParam: created,
+  });
+  return created;
 }
 
 async function updateUserPrompt(
@@ -60,7 +75,15 @@ async function updateUserPrompt(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update prompt: ${res.statusText}`);
   }
-  return res.json() as Promise<CustomPrompt>;
+  const updated = (await res.json()) as CustomPrompt;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-自定义提示词-编辑",
+    url: `/api/user-prompts/${id}`,
+    reqParam: input,
+    returnParam: updated,
+  });
+  return updated;
 }
 
 async function deleteUserPrompt(id: string): Promise<void> {
@@ -71,6 +94,12 @@ async function deleteUserPrompt(id: string): Promise<void> {
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to delete prompt: ${res.statusText}`);
   }
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-自定义提示词-删除",
+    url: `/api/user-prompts/${id}`,
+    reqParam: { id },
+  });
 }
 
 /** Reactive list of the current user's saved prompts (server-backed). */

frontend-web/src/core/embed/embed-session.ts

@@ -39,6 +39,12 @@ export interface EmbedSession {
   theme: EmbedTheme;
   /** 隐藏深链底部「快捷跳转」栏（TaskJumpBar：底部按钮 + 右侧悬浮菜单）。 */
   hideJump: boolean;
+  /**
+   * 仅去全局 chrome（Header 导航栏 + PageSidebar 侧边栏），**不**强制主题、**不**隔离鉴权。
+   * 区别于 `embed`：嵌入态会额外强制主题 + 走 sessionStorage 隔离登录身份；`hideChrome` 只想要
+   * 一个干净的全屏页面（如「大屏绘制」`?hideChrome=1`），其余行为与正常标签页完全一致。
+   */
+  hideChrome: boolean;
   /** 独立会话：鉴权身份按本标签页隔离（走 sessionStorage），用于同浏览器登录不同账号互不覆盖。 */
   isolate: boolean;
 }
@@ -69,6 +75,11 @@ export function readHideJumpParam(search: string): FlagParam {
   return readFlagParam(search, "hideJump");
 }
 
+/** 读 URL 里的 `hideChrome` 三态（仅去全局导航栏 + 侧边栏）。 */
+export function readHideChromeParam(search: string): FlagParam {
+  return readFlagParam(search, "hideChrome");
+}
+
 /** 读 URL 里的 `isolate` 三态（独立会话登录）。 */
 export function readIsolateParam(search: string): FlagParam {
   return readFlagParam(search, "isolate");
@@ -99,6 +110,7 @@ export function readEmbedSession(): EmbedSession | null {
       embed: p.embed === true,
       theme: p.theme === "dark" ? "dark" : "light",
       hideJump: p.hideJump === true,
+      hideChrome: p.hideChrome === true,
       isolate: p.isolate === true,
     };
   } catch {
@@ -109,7 +121,7 @@ export function readEmbedSession(): EmbedSession | null {
 /** 写会话；无任何开关置位时直接清除（保持 sessionStorage 干净）。隐私模式/quota 异常静默失败。 */
 function writeEmbedSession(next: EmbedSession): void {
   try {
-    if (!next.embed && !next.hideJump && !next.isolate) {
+    if (!next.embed && !next.hideJump && !next.hideChrome && !next.isolate) {
       sessionStorage.removeItem(EMBED_SESSION_KEY);
       return;
     }
@@ -129,6 +141,16 @@ export function isJumpBarHidden(): boolean {
   return readEmbedSession()?.hideJump === true;
 }
 
+/**
+ * 本标签页是否要去全局 chrome（Header 导航栏 + PageSidebar 侧边栏）。
+ * `embed` 已隐含去 chrome，故这里取「embed || hideChrome」之并——任一置位都隐藏。
+ * 与 `isEmbedActive()` 的差别：`hideChrome` 不强制主题、不隔离鉴权，只去 chrome。
+ */
+export function isChromeHidden(): boolean {
+  const s = readEmbedSession();
+  return s?.embed === true || s?.hideChrome === true;
+}
+
 /**
  * 本标签页是否处于独立会话态：鉴权身份按标签页隔离（走 sessionStorage）。
  * `embed` 已隐含同样的隔离，故 `authStorage()` 取「embed || isolate」之并；这里只判 `isolate`，
@@ -146,7 +168,7 @@ export function isIsolatedSession(): boolean {
 export function syncEmbedSessionFromSearch(search: string): void {
   const cur =
     readEmbedSession() ??
-    { embed: false, theme: "light" as EmbedTheme, hideJump: false, isolate: false };
+    { embed: false, theme: "light" as EmbedTheme, hideJump: false, hideChrome: false, isolate: false };
   const next: EmbedSession = { ...cur };
 
   const embedParam = readEmbedParam(search);
@@ -161,6 +183,10 @@ export function syncEmbedSessionFromSearch(search: string): void {
   if (hideJumpParam === "on") next.hideJump = true;
   else if (hideJumpParam === "off") next.hideJump = false;
 
+  const hideChromeParam = readHideChromeParam(search);
+  if (hideChromeParam === "on") next.hideChrome = true;
+  else if (hideChromeParam === "off") next.hideChrome = false;
+
   const isolateParam = readIsolateParam(search);
   if (isolateParam === "on") next.isolate = true;
   else if (isolateParam === "off") next.isolate = false;
@@ -208,6 +234,6 @@ export function resolveForcedEmbedTheme(search: string): EmbedTheme | undefined
 export function setIsolatedSession(on: boolean): void {
   const cur =
     readEmbedSession() ??
-    { embed: false, theme: "light" as EmbedTheme, hideJump: false, isolate: false };
+    { embed: false, theme: "light" as EmbedTheme, hideJump: false, hideChrome: false, isolate: false };
   writeEmbedSession({ ...cur, isolate: on });
 }

frontend-web/src/core/knowledge/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   BatchIngestPayload,
@@ -41,15 +42,31 @@ export async function listKnowledgeNotes(params: KnowledgeListParams = {}) {
   if (params.folder !== undefined) qs.set("folder", params.folder);
   qs.set("limit", String(params.limit ?? 20));
   qs.set("offset", String(params.offset ?? 0));
-  return parseResponse<KnowledgeListResponse>(
+  const result = await parseResponse<KnowledgeListResponse>(
     await apiFetch(`${baseUrl()}/notes?${qs.toString()}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-检索",
+    url: `${baseUrl()}/notes?${qs.toString()}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function getKnowledgeNote(noteId: string) {
-  return parseResponse<KnowledgeNote>(
+  const result = await parseResponse<KnowledgeNote>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-知识库-查看",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}`,
+    reqParam: { noteId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function createKnowledgeNote(data: {
@@ -67,6 +84,13 @@ export async function createKnowledgeNote(data: {
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-新建",
+    url: `${baseUrl()}/notes`,
+    reqParam: data,
+    returnParam: res.note,
+  });
   return res.note;
 }
 
@@ -81,22 +105,38 @@ export async function updateKnowledgeNote(
     folder: string | null;
   }>,
 ) {
-  return parseResponse<KnowledgeNote>(
+  const result = await parseResponse<KnowledgeNote>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}`, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-修改",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}`,
+    reqParam: { noteId, data },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteKnowledgeNote(noteId: string, hard = false) {
-  return parseResponse<{ ok: boolean; note_id: string }>(
+  const result = await parseResponse<{ ok: boolean; note_id: string }>(
     await apiFetch(
       `${baseUrl()}/notes/${encodeURIComponent(noteId)}${hard ? "?hard=true" : ""}`,
       { method: "DELETE" },
     ),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-删除",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}${hard ? "?hard=true" : ""}`,
+    reqParam: { noteId, hard },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function searchKnowledge(query: string, limit = 8) {
@@ -107,11 +147,18 @@ export async function searchKnowledge(query: string, limit = 8) {
       body: JSON.stringify({ query, mode: "keyword", limit }),
     }),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-检索",
+    url: `${baseUrl()}/search`,
+    reqParam: { query, mode: "keyword", limit },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
 export async function ingestThread(threadId: string, payload: IngestThreadPayload = {}) {
-  return parseResponse<{
+  const result = await parseResponse<{
     note?: KnowledgeNote;
     created?: boolean;
     queued?: boolean;
@@ -122,16 +169,32 @@ export async function ingestThread(threadId: string, payload: IngestThreadPayloa
       body: JSON.stringify(payload),
     }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/thread/${encodeURIComponent(threadId)}`,
+    reqParam: { threadId, payload },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function ingestThreadsBatch(payload: BatchIngestPayload = {}) {
-  return parseResponse<BatchIngestResult>(
+  const result = await parseResponse<BatchIngestResult>(
     await apiFetch(`${baseUrl()}/ingest/threads/batch`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(payload),
     }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/threads/batch`,
+    reqParam: payload,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface IngestFileResult {
@@ -162,9 +225,17 @@ export async function ingestKnowledgeFile(
   if (opts.template_id) form.append("template_id", opts.template_id);
   if (opts.folder) form.append("folder", opts.folder);
   // No Content-Type header — the browser sets the multipart boundary itself.
-  return parseResponse<IngestFileResult>(
+  const result = await parseResponse<IngestFileResult>(
     await apiFetch(`${baseUrl()}/ingest/file`, { method: "POST", body: form }),
   );
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-知识库-导入",
+    url: `${baseUrl()}/ingest/file`,
+    reqParam: { fileName: file.name, ...opts },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Resolve `[[wikilink]]` targets to note ids / vault pages. */
@@ -191,15 +262,30 @@ export async function resolveNoteWikilinks(noteId: string) {
 
 /** Fetch a raw vault meta/hub Markdown page (no DB note) by its path. */
 export async function fetchVaultPage(path: string) {
-  return parseResponse<VaultPage>(
+  const result = await parseResponse<VaultPage>(
     await apiFetch(`${baseUrl()}/vault-page?path=${encodeURIComponent(path)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-知识库-Vault页面查看",
+    url: `${baseUrl()}/vault-page?path=${encodeURIComponent(path)}`,
+    reqParam: { path },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function exportKnowledgeGraph() {
-  return parseResponse<GraphExportResult>(
+  const result = await parseResponse<GraphExportResult>(
     await apiFetch(`${baseUrl()}/export/graph`, { method: "POST" }),
   );
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-知识库-导出",
+    url: `${baseUrl()}/export/graph`,
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Absolute URL of a served wiki-export file (for iframe / download). */
@@ -225,6 +311,13 @@ export async function listNoteVersions(noteId: string) {
   const res = await parseResponse<{ items: KnowledgeVersion[] }>(
     await apiFetch(`${baseUrl()}/notes/${encodeURIComponent(noteId)}/versions`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-历史版本列表",
+    url: `${baseUrl()}/notes/${encodeURIComponent(noteId)}/versions`,
+    reqParam: { noteId },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -237,23 +330,44 @@ export async function listDuplicates() {
   const res = await parseResponse<{ groups: DuplicateGroup[] }>(
     await apiFetch(`${baseUrl()}/duplicates`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-重复项列表",
+    url: `${baseUrl()}/duplicates`,
+    returnParam: res.groups,
+  });
   return res.groups;
 }
 
 export async function mergeKnowledgeNotes(primaryId: string, duplicateIds: string[]) {
-  return parseResponse<{ note: KnowledgeNote }>(
+  const result = await parseResponse<{ note: KnowledgeNote }>(
     await apiFetch(`${baseUrl()}/merge`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ primary_id: primaryId, duplicate_ids: duplicateIds }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-合并",
+    url: `${baseUrl()}/merge`,
+    reqParam: { primary_id: primaryId, duplicate_ids: duplicateIds },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function reindexKnowledge() {
-  return parseResponse<{ reindexed: number; embedding_enabled: number }>(
+  const result = await parseResponse<{ reindexed: number; embedding_enabled: number }>(
     await apiFetch(`${baseUrl()}/reindex`, { method: "POST" }),
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-知识库-重建索引",
+    url: `${baseUrl()}/reindex`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export interface KnowledgeGraph {
@@ -262,7 +376,14 @@ export interface KnowledgeGraph {
 }
 
 export async function getKnowledgeGraph() {
-  return parseResponse<KnowledgeGraph>(await apiFetch(`${baseUrl()}/graph`));
+  const result = await parseResponse<KnowledgeGraph>(await apiFetch(`${baseUrl()}/graph`));
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-图谱查看",
+    url: `${baseUrl()}/graph`,
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- graph blacklist ---
@@ -278,26 +399,48 @@ export async function getGraphBlacklist() {
   const res = await parseResponse<{ items: GraphBlacklistItem[] }>(
     await apiFetch(`${baseUrl()}/graph/blacklist`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-图谱黑名单列表",
+    url: `${baseUrl()}/graph/blacklist`,
+    returnParam: res.items,
+  });
   return res.items;
 }
 
 /** Blacklist node labels (entity names / note titles); they disappear from the graph. */
 export async function addGraphBlacklist(labels: string[]) {
-  return parseResponse<{ added: number; items: GraphBlacklistItem[] }>(
+  const result = await parseResponse<{ added: number; items: GraphBlacklistItem[] }>(
     await apiFetch(`${baseUrl()}/graph/blacklist`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ labels }),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-图谱黑名单新增",
+    url: `${baseUrl()}/graph/blacklist`,
+    reqParam: { labels },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function removeGraphBlacklist(entryId: string) {
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/graph/blacklist/${encodeURIComponent(entryId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-图谱黑名单删除",
+    url: `${baseUrl()}/graph/blacklist/${encodeURIComponent(entryId)}`,
+    reqParam: { entryId },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- folders (user-managed directories) ---
@@ -306,6 +449,12 @@ export async function listKnowledgeFolders() {
   const res = await parseResponse<{ items: KnowledgeFolder[] }>(
     await apiFetch(`${baseUrl()}/folders`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-目录列表",
+    url: `${baseUrl()}/folders`,
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -317,6 +466,13 @@ export async function createKnowledgeFolder(path: string) {
       body: JSON.stringify({ path }),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-目录新建",
+    url: `${baseUrl()}/folders`,
+    reqParam: { path },
+    returnParam: res.folder,
+  });
   return res.folder;
 }
 
@@ -328,16 +484,31 @@ export async function renameKnowledgeFolder(folderId: string, path: string) {
       body: JSON.stringify({ path }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-目录重命名",
+    url: `${baseUrl()}/folders/${encodeURIComponent(folderId)}`,
+    reqParam: { folderId, path },
+    returnParam: res.folder,
+  });
   return res.folder;
 }
 
 export async function deleteKnowledgeFolder(folderId: string, reassignTo?: string) {
   const qs = reassignTo ? `?reassign_to=${encodeURIComponent(reassignTo)}` : "";
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/folders/${encodeURIComponent(folderId)}${qs}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-目录删除",
+    url: `${baseUrl()}/folders/${encodeURIComponent(folderId)}${qs}`,
+    reqParam: { folderId, reassignTo },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- extraction prompt templates ---
@@ -350,6 +521,13 @@ export async function listExtractTemplates(scope?: ExtractTemplateScope, enabled
   const res = await parseResponse<{ items: KnowledgeExtractTemplate[] }>(
     await apiFetch(`${baseUrl()}/extract-templates${q ? `?${q}` : ""}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-知识库-抽取模板列表",
+    url: `${baseUrl()}/extract-templates${q ? `?${q}` : ""}`,
+    reqParam: { scope, enabledOnly },
+    returnParam: res.items,
+  });
   return res.items;
 }
 
@@ -370,6 +548,13 @@ export async function createExtractTemplate(data: ExtractTemplateInput) {
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-知识库-抽取模板新建",
+    url: `${baseUrl()}/extract-templates`,
+    reqParam: data,
+    returnParam: res.template,
+  });
   return res.template;
 }
 
@@ -384,13 +569,28 @@ export async function updateExtractTemplate(
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-知识库-抽取模板修改",
+    url: `${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`,
+    reqParam: { templateId, data },
+    returnParam: res.template,
+  });
   return res.template;
 }
 
 export async function deleteExtractTemplate(templateId: string) {
-  return parseResponse<{ ok: boolean }>(
+  const result = await parseResponse<{ ok: boolean }>(
     await apiFetch(`${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-知识库-抽取模板删除",
+    url: `${baseUrl()}/extract-templates/${encodeURIComponent(templateId)}`,
+    reqParam: { templateId },
+    returnParam: result,
+  });
+  return result;
 }

frontend-web/src/core/llm-metrics/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 export interface LlmMetric {
   id: string;
@@ -54,14 +55,21 @@ function buildQuery(filters: LlmMetricsListQuery): string {
 export async function loadLlmMetrics(
   query: LlmMetricsListQuery,
 ): Promise<LlmMetricsListResponse> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/llm-metrics${buildQuery(query)}`,
-  );
+  const url = `${getBackendBaseURL()}/api/admin/llm-metrics${buildQuery(query)}`;
+  const response = await apiFetch(url);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to load LLM metrics");
   }
-  return (await response.json()) as LlmMetricsListResponse;
+  const result = (await response.json()) as LlmMetricsListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-模型指标-查询调用列表",
+    url,
+    reqParam: query,
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }
 
 /**
@@ -71,13 +79,18 @@ export async function loadLlmMetrics(
 export async function downloadLlmMetricsExcel(
   filters: LlmMetricsFilters,
 ): Promise<void> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/llm-metrics/export${buildQuery(filters)}`,
-  );
+  const requestUrl = `${getBackendBaseURL()}/api/admin/llm-metrics/export${buildQuery(filters)}`;
+  const response = await apiFetch(requestUrl);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to export LLM metrics");
   }
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-模型指标-导出Excel",
+    url: requestUrl,
+    reqParam: filters,
+  });
   const blob = await response.blob();
   const url = URL.createObjectURL(blob);
   const filename = (() => {

frontend-web/src/core/log/y-log-config.ts

@@ -0,0 +1,68 @@
+/**
+ * 操作日志（Y-Log）上报的运行时配置：从后端公开只读接口
+ * ``GET /api/public/config/y-log`` 读取（地址 + 开关在后端 ``config.yaml`` 的
+ * ``y_log`` 段，改完即时生效，前端无需重建）。
+ *
+ * 仿 [[task-deeplink-config]]：
+ *   - ``fetchYLogConfig()`` 拉取并模块级缓存（启动早期预热一次即可）。
+ *   - ``getCachedYLogConfig()`` 同步读缓存（``writeYLog`` 即发即忘，必须同步可用）。
+ *
+ * 拉取失败 → 用内置默认值兜底（``enabled:false``，但保留默认地址），绝不抛错。
+ */
+
+import { apiFetch } from "@/core/api/fetch-client";
+import { getBackendBaseURL } from "@/core/config";
+
+export interface YLogConfig {
+  /** 是否启用上报。 */
+  enabled: boolean;
+  /** 上报外部接口完整地址（POST）。 */
+  writeUrl: string;
+}
+
+/** 内置默认地址（后端拿不到 / 未配置时的兜底地址；enabled 默认 false 不上报）。 */
+const DEFAULT_WRITE_URL = "https://ch1.b.uat.4.cn/api/y-log/write";
+
+/** 内置默认配置（拉取失败兜底；默认不上报）。 */
+export const DEFAULT_Y_LOG_CONFIG: YLogConfig = {
+  enabled: false,
+  writeUrl: DEFAULT_WRITE_URL,
+};
+
+/** 后端 snake_case 响应 → 前端 camelCase；缺字段回退默认值。 */
+function normalize(body: unknown): YLogConfig {
+  const o = body && typeof body === "object" ? (body as Record<string, unknown>) : {};
+  const writeUrl =
+    typeof o.write_url === "string" && o.write_url.trim() ? o.write_url.trim() : DEFAULT_WRITE_URL;
+  return {
+    enabled: o.enabled === true,
+    writeUrl,
+  };
+}
+
+let cached: YLogConfig | null = null;
+let inflight: Promise<YLogConfig> | null = null;
+
+/** 拉取（带模块级缓存 + 并发去重）；失败回退默认值。 */
+export async function fetchYLogConfig(): Promise<YLogConfig> {
+  if (cached) return cached;
+  if (inflight) return inflight;
+  inflight = (async () => {
+    try {
+      const res = await apiFetch(`${getBackendBaseURL()}/api/public/config/y-log`);
+      if (!res.ok) throw new Error(`y-log config ${res.status}`);
+      cached = normalize(await res.json());
+    } catch {
+      cached = { ...DEFAULT_Y_LOG_CONFIG };
+    } finally {
+      inflight = null;
+    }
+    return cached;
+  })();
+  return inflight;
+}
+
+/** 同步读缓存（未拉取过则返回默认值，默认 enabled:false 不上报）。 */
+export function getCachedYLogConfig(): YLogConfig {
+  return cached ?? DEFAULT_Y_LOG_CONFIG;
+}

frontend-web/src/core/log/y-log-token.ts

@@ -0,0 +1,34 @@
+/**
+ * token1（token 登录用的上游 token，即 URL 参数 ``?authToken=``）的存取。
+ *
+ * 复用 [[scoped-storage]] 的 ``authStorage*``：嵌入(iframe)态自动落 sessionStorage、
+ * 正常态落 localStorage，使 iframe 里登录的用户 token1 与正常标签页**完全隔离**、
+ * 互不污染（与其它鉴权键同一隔离语义）。
+ *
+ * 只有用 token 登录（存在 token1）才上报操作日志；非 token 登录不写 token1，
+ * 该会话从此不上报（见 [[y-log]]）。
+ */
+
+import {
+  authStorageGet,
+  authStorageRemove,
+  authStorageSet,
+} from "@/core/auth/scoped-storage";
+
+const Y_LOG_TOKEN_KEY = "ylog.token1";
+
+/** 持久化 token1（token 登录成功后调用；空值忽略）。 */
+export function persistYLogToken(token: string | null | undefined): void {
+  const t = token?.trim();
+  if (t) authStorageSet(Y_LOG_TOKEN_KEY, t);
+}
+
+/** 读 token1（无则返回 null → 不上报）。 */
+export function readYLogToken(): string | null {
+  return authStorageGet(Y_LOG_TOKEN_KEY);
+}
+
+/** 清除 token1（登出时调用）。 */
+export function clearYLogToken(): void {
+  authStorageRemove(Y_LOG_TOKEN_KEY);
+}

frontend-web/src/core/log/y-log.ts

@@ -0,0 +1,109 @@
+/**
+ * 操作日志（Y-Log）上报主函数。
+ *
+ * 把用户的关键操作（点击/查询/查看/增删改/启停/导入导出/登录登出/问答等）上报到
+ * 外部日志接口（见 [[y-log-config]] 的 ``writeUrl``）。**前端直连**该接口，不经后端代理。
+ *
+ * 硬性约束（务必满足）：
+ *   ① **token 门控**：无 token1（非 token 登录）→ 直接 return，不发请求。
+ *   ② **配置门控**：``enabled=false`` 或 ``writeUrl`` 为空 → 不发请求。
+ *   ③ **异步即发即忘**：``void fetch(...)`` 不被 ``await``，绝不阻塞业务/UI。
+ *   ④ **永不抛错**：整体包在 ``try/catch`` 中，任何异常（取 token/读配置/序列化/网络）静默吞掉。
+ *   ⑤ **只报成功**：埋点只放在操作成功路径，``optResult`` 恒为 ``0``。
+ *   ⑥ **失败静默**：``fetch`` 的 ``.catch`` 吞掉网络/跨域失败。
+ */
+
+import { getCachedYLogConfig } from "@/core/log/y-log-config";
+import { readYLogToken } from "@/core/log/y-log-token";
+
+/** 操作类型，数值与外部系统约定一致，不可改。 */
+export enum OptType {
+  login = 0,
+  logout = 1,
+  search = 3,
+  view = 4,
+  edit = 5,
+  delete = 6,
+  import = 7,
+  export = 8,
+  create = 9,
+  disabled = 10,
+  enabled = 11,
+  other = 12,
+}
+
+export interface WriteYLogParams {
+  /** 操作类型枚举。 */
+  optType: OptType;
+  /** 操作详情（简短描述），统一「CM助手-全量-xxx」。 */
+  optDetail: string;
+  /** 操作命中的接口地址（完整或相对，内部自动转相对，去 ip/host）。 */
+  url: string;
+  /** 入参（对象自动 JSON 序列化）。 */
+  reqParam?: unknown;
+  /** 返回参数（对象自动 JSON 序列化）。 */
+  returnParam?: unknown;
+  /** 登出 / 页面卸载等场景置 true，保证请求在卸载时仍能发出。 */
+  keepalive?: boolean;
+}
+
+/** 入参/返回体积上限，超出裁剪。 */
+const MAX_PARAM_LEN = 50_000;
+
+/** 上报一条操作日志（异步即发即忘，永不抛错）。 */
+export function writeYLog(params: WriteYLogParams): void {
+  try {
+    const token = readYLogToken();
+    if (!token) return; // ① 无 token1 不上报
+    const { enabled, writeUrl } = getCachedYLogConfig();
+    if (!enabled || !writeUrl) return; // ② 配置门控
+    if (typeof fetch === "undefined") return;
+
+    const body = {
+      optType: params.optType,
+      optDetail: params.optDetail ?? "",
+      url: toRelativeUrl(params.url ?? ""), // ③ 去 ip/host
+      reqParam: toParamString(params.reqParam), // ④ 对象→字符串+裁剪
+      returnParam: toParamString(params.returnParam),
+      optResult: 0, // ⑤ 恒为 0（只报成功）
+    };
+
+    void fetch(writeUrl, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${token}`,
+      },
+      body: JSON.stringify(body),
+      keepalive: params.keepalive ?? false,
+    }).catch(() => undefined); // ⑥ 失败静默
+  } catch {
+    /* 绝不影响业务 */
+  }
+}
+
+function toParamString(v: unknown): string {
+  if (v == null) return "";
+  const s = typeof v === "string" ? v : safeStringify(v);
+  return s.length > MAX_PARAM_LEN ? `${s.slice(0, MAX_PARAM_LEN)}…[truncated]` : s;
+}
+
+function safeStringify(v: unknown): string {
+  try {
+    return JSON.stringify(v) ?? "";
+  } catch {
+    return String(v);
+  }
+}
+
+/** 去掉 ip/host，只留 path + query。 */
+function toRelativeUrl(url: string): string {
+  if (!url) return "";
+  try {
+    const base = typeof window !== "undefined" ? window.location.origin : "http://localhost";
+    const u = new URL(url, base);
+    return `${u.pathname}${u.search}`;
+  } catch {
+    return url;
+  }
+}

frontend-web/src/core/mcp/api.ts

@@ -1,20 +1,36 @@
-import { getBackendBaseURL } from "@/core/config";
-import { apiFetch } from "@/core/api";
-
-import type { MCPConfig } from "./types";
-
-export async function loadMCPConfig() {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/mcp/config`);
-  return response.json() as Promise<MCPConfig>;
-}
-
-export async function updateMCPConfig(config: MCPConfig) {
-  const response = await apiFetch(`${getBackendBaseURL()}/api/mcp/config`, {
-    method: "PUT",
-    headers: {
-      "Content-Type": "application/json",
-    },
-    body: JSON.stringify(config),
-  });
-  return response.json();
-}
+import { getBackendBaseURL } from "@/core/config";
+import { apiFetch } from "@/core/api";
+import { OptType, writeYLog } from "@/core/log/y-log";
+
+import type { MCPConfig } from "./types";
+
+export async function loadMCPConfig() {
+  const response = await apiFetch(`${getBackendBaseURL()}/api/mcp/config`);
+  const data = (await response.json()) as MCPConfig;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-MCP服务-配置查看",
+    url: "/api/mcp/config",
+    returnParam: data,
+  });
+  return data;
+}
+
+export async function updateMCPConfig(config: MCPConfig) {
+  const response = await apiFetch(`${getBackendBaseURL()}/api/mcp/config`, {
+    method: "PUT",
+    headers: {
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify(config),
+  });
+  const data = await response.json();
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-MCP服务-配置编辑",
+    url: "/api/mcp/config",
+    reqParam: config,
+    returnParam: data,
+  });
+  return data;
+}

frontend-web/src/core/memory/api.ts

@@ -2,6 +2,7 @@
 
 import { apiFetch } from "../api";
 import { getBackendBaseURL } from "../config";
+import { OptType, writeYLog } from "../log/y-log";
 
 import type {
   MemorySearchMode,
@@ -54,7 +55,15 @@ export async function loadMemoryV2(agent?: string): Promise<MemoryV2Data> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/memory/v2${agentQuery(agent)}`,
   );
-  return readJson<MemoryV2Data>(response, "Failed to fetch memory");
+  const data = await readJson<MemoryV2Data>(response, "Failed to fetch memory");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-记忆-查看",
+    url: `/api/memory/v2${agentQuery(agent)}`,
+    reqParam: { agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function addMemoryEntry(
@@ -70,7 +79,15 @@ export async function addMemoryEntry(
       body: JSON.stringify({ target, content }),
     },
   );
-  return readJson<MemoryV2Data>(response, "Failed to add memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to add memory entry");
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-记忆-新增",
+    url: `/api/memory/v2/entries${agentQuery(agent)}`,
+    reqParam: { target, content, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function replaceMemoryEntry(
@@ -87,7 +104,15 @@ export async function replaceMemoryEntry(
       body: JSON.stringify({ target, old_text: oldText, content }),
     },
   );
-  return readJson<MemoryV2Data>(response, "Failed to replace memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to replace memory entry");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-记忆-编辑",
+    url: `/api/memory/v2/entries${agentQuery(agent)}`,
+    reqParam: { target, old_text: oldText, content, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function deleteMemoryEntry(
@@ -103,14 +128,29 @@ export async function deleteMemoryEntry(
     `${getBackendBaseURL()}/api/memory/v2/entries?${params.toString()}`,
     { method: "DELETE" },
   );
-  return readJson<MemoryV2Data>(response, "Failed to delete memory entry");
+  const data = await readJson<MemoryV2Data>(response, "Failed to delete memory entry");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-记忆-删除",
+    url: `/api/memory/v2/entries?${params.toString()}`,
+    reqParam: { target, old_text: oldText, agent },
+    returnParam: data,
+  });
+  return data;
 }
 
 // --- 配置 ---
 
 export async function loadMemoryConfig(): Promise<MemoryV2ConfigResponse> {
   const response = await apiFetch(`${getBackendBaseURL()}/api/memory/v2/config`);
-  return readJson<MemoryV2ConfigResponse>(response, "Failed to fetch memory config");
+  const data = await readJson<MemoryV2ConfigResponse>(response, "Failed to fetch memory config");
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-记忆-配置查看",
+    url: "/api/memory/v2/config",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function patchMemoryConfig(
@@ -121,7 +161,15 @@ export async function patchMemoryConfig(
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ overrides }),
   });
-  return readJson<MemoryV2ConfigResponse>(response, "Failed to update memory config");
+  const data = await readJson<MemoryV2ConfigResponse>(response, "Failed to update memory config");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-记忆-配置编辑",
+    url: "/api/memory/v2/config",
+    reqParam: { overrides },
+    returnParam: data,
+  });
+  return data;
 }
 
 // --- Hindsight 检索 ---
@@ -139,5 +187,13 @@ export async function searchMemory(
       body: JSON.stringify({ query, mode }),
     },
   );
-  return readJson<MemorySearchResult>(response, "Failed to search memory");
+  const data = await readJson<MemorySearchResult>(response, "Failed to search memory");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-记忆-检索",
+    url: `/api/memory/v2/search${agentQuery(agent)}`,
+    reqParam: { query, mode, agent },
+    returnParam: data,
+  });
+  return data;
 }

frontend-web/src/core/messages/utils.ts

@@ -212,21 +212,33 @@ export function extractToolResultPayload(
 }
 
 const THINK_TAG_RE = /<think>\s*([\s\S]*?)\s*<\/think>/g;
+const THINK_OPEN = "<think>";
 
 function splitInlineReasoning(content: string) {
   const reasoningParts: string[] = [];
-  const cleaned = content
-    .replace(THINK_TAG_RE, (_, reasoning: string) => {
-      const normalized = reasoning.trim();
-      if (normalized) {
-        reasoningParts.push(normalized);
-      }
-      return "";
-    })
-    .trim();
+  // 1) 先抽出所有**已闭合**的 <think>...</think>。
+  let working = content.replace(THINK_TAG_RE, (_, reasoning: string) => {
+    const normalized = reasoning.trim();
+    if (normalized) {
+      reasoningParts.push(normalized);
+    }
+    return "";
+  });
+
+  // 2) 流式中常见**未闭合**的 <think>（还没等到 </think> 就先到达）：把开标签之后的内容
+  //    当作「实时思考」抽到 reasoning、从答案正文里移除。否则模型慢/先思考时，用户既会看到
+  //    字面 "<think>"，又会因答案区长时间空白而以为卡死。这样思考内容会实时流进思考区。
+  const openIdx = working.indexOf(THINK_OPEN);
+  if (openIdx !== -1 && !working.slice(openIdx).includes("</think>")) {
+    const partial = working.slice(openIdx + THINK_OPEN.length).trim();
+    if (partial) {
+      reasoningParts.push(partial);
+    }
+    working = working.slice(0, openIdx);
+  }
 
   return {
-    content: cleaned,
+    content: working.trim(),
     reasoning: reasoningParts.length > 0 ? reasoningParts.join("\n\n") : null,
   };
 }

frontend-web/src/core/models/api.ts

@@ -1,13 +1,21 @@
-import { getBackendBaseURL } from "../config";
-import { apiFetch } from "../api";
-
-import type { ModelsResponse } from "./types";
-
-export async function loadModels(): Promise<ModelsResponse> {
-  const res = await apiFetch(`${getBackendBaseURL()}/api/models`);
-  const data = (await res.json()) as Partial<ModelsResponse>;
-  return {
-    models: data.models ?? [],
-    token_usage: data.token_usage ?? { enabled: false },
-  };
-}
+import { getBackendBaseURL } from "../config";
+import { apiFetch } from "../api";
+import { OptType, writeYLog } from "../log/y-log";
+
+import type { ModelsResponse } from "./types";
+
+export async function loadModels(): Promise<ModelsResponse> {
+  const res = await apiFetch(`${getBackendBaseURL()}/api/models`);
+  const data = (await res.json()) as Partial<ModelsResponse>;
+  const result: ModelsResponse = {
+    models: data.models ?? [],
+    token_usage: data.token_usage ?? { enabled: false },
+  };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-模型-查询",
+    url: "/api/models",
+    returnParam: result,
+  });
+  return result;
+}

frontend-web/src/core/note/api.ts

@@ -1,4 +1,5 @@
 import { getNoteApiBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import {
   ensureNoteAuth,
@@ -76,7 +77,15 @@ export async function createSearchSpace(
     throw new Error(`创建笔记失败: ${response.status} ${response.statusText}`);
   }
 
-  return (await response.json()) as SearchSpace;
+  const result = (await response.json()) as SearchSpace;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-笔记-新建笔记空间",
+    url: "/api/v1/searchspaces",
+    reqParam: { name: input.name, description: input.description ?? "" },
+    returnParam: { id: result.id, name: result.name },
+  });
+  return result;
 }
 
 export async function listSearchSpaces(
@@ -90,14 +99,21 @@ export async function listSearchSpaces(
     order_by: query.order_by ?? "created_at",
   });
 
-  const response = await noteApiFetch(`/api/v1/searchspaces?${params.toString()}`, {
-    method: "GET",
-  });
+  const path = `/api/v1/searchspaces?${params.toString()}`;
+  const response = await noteApiFetch(path, { method: "GET" });
 
   if (!response.ok) {
     throw new Error(`获取笔记列表失败: ${response.status} ${response.statusText}`);
   }
 
   const data: unknown = await response.json();
-  return Array.isArray(data) ? (data as SearchSpace[]) : [];
+  const list = Array.isArray(data) ? (data as SearchSpace[]) : [];
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-笔记-查询笔记空间列表",
+    url: path,
+    reqParam: query,
+    returnParam: { count: list.length },
+  });
+  return list;
 }

frontend-web/src/core/notifications/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   NotificationItem,
@@ -24,6 +25,13 @@ export async function listNotifications(
   const res = await apiFetch(url);
   if (!res.ok) throw await parseDetail(res, "Failed to list notifications");
   const data = (await res.json()) as NotificationListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-通知-查询通知列表",
+    url,
+    reqParam: options,
+    returnParam: { count: data.items.length },
+  });
   return data.items;
 }
 
@@ -35,26 +43,39 @@ export async function getUnreadCount(): Promise<number> {
 }
 
 export async function markNotificationRead(id: string): Promise<void> {
-  const res = await apiFetch(
-    `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}/read`,
-    { method: "POST" },
-  );
+  const url = `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}/read`;
+  const res = await apiFetch(url, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to mark notification read");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-通知-标记已读",
+    url,
+    reqParam: { id },
+  });
 }
 
 export async function markAllNotificationsRead(): Promise<number> {
-  const res = await apiFetch(`${getBackendBaseURL()}/api/notifications/read_all`, {
-    method: "POST",
-  });
+  const url = `${getBackendBaseURL()}/api/notifications/read_all`;
+  const res = await apiFetch(url, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to mark all read");
   const data = (await res.json()) as { updated: number };
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-通知-全部标记已读",
+    url,
+    returnParam: data,
+  });
   return data.updated;
 }
 
 export async function deleteNotification(id: string): Promise<void> {
-  const res = await apiFetch(
-    `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}`,
-    { method: "DELETE" },
-  );
+  const url = `${getBackendBaseURL()}/api/notifications/${encodeURIComponent(id)}`;
+  const res = await apiFetch(url, { method: "DELETE" });
   if (!res.ok) throw await parseDetail(res, "Failed to delete notification");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-通知-删除通知",
+    url,
+    reqParam: { id },
+  });
 }

frontend-web/src/core/plugin-management/domain-agent.test.mjs

@@ -0,0 +1,190 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import {
+  normalizeDomainInput,
+  resolveIncomingIframeSelection,
+  resolveConfiguredIframeAgentId,
+  resolveDomainMappedAgentId,
+} from "./domain-agent.ts";
+
+test("normalizes full urls and bare hosts to comparable domains", () => {
+  assert.equal(
+    normalizeDomainInput(" https://Foo.Example.com/path?q=1 "),
+    "foo.example.com",
+  );
+  assert.equal(
+    normalizeDomainInput("foo.example.com:8080/landing"),
+    "foo.example.com:8080",
+  );
+});
+
+test("resolves the configured agent for a matching pageContext url", () => {
+  assert.equal(
+    resolveDomainMappedAgentId({
+      pageUrl: "https://foo.example.com/article/123",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+    }),
+    "agent-1",
+  );
+});
+
+test("ignores disabled mappings and unavailable agents", () => {
+  assert.equal(
+    resolveDomainMappedAgentId({
+      pageUrl: "https://foo.example.com/article/123",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: false,
+        },
+        {
+          id: "m2",
+          domain: "bar.example.com",
+          agentId: "agent-2",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-3"],
+    }),
+    undefined,
+  );
+});
+
+test("does not auto-select after manual selection or once a conversation has started", () => {
+  assert.equal(
+    resolveConfiguredIframeAgentId({
+      pageUrl: "https://foo.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1"],
+      isNewThread: true,
+      hasStartedConversation: false,
+      manualSelectionLocked: true,
+    }),
+    undefined,
+  );
+
+  assert.equal(
+    resolveConfiguredIframeAgentId({
+      pageUrl: "https://foo.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1"],
+      isNewThread: true,
+      hasStartedConversation: true,
+      manualSelectionLocked: false,
+    }),
+    undefined,
+  );
+});
+
+test("falls back to default assistant when url is unmapped and user has not manually selected an agent", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://unknown.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: null,
+    }),
+    {
+      selectedAgentId: null,
+      forceDefaultAssistant: true,
+    },
+  );
+});
+
+test("falls back to the user's manual selection when url is unmapped", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://unknown.example.com",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: "agent-2",
+    }),
+    {
+      selectedAgentId: "agent-2",
+      forceDefaultAssistant: false,
+    },
+  );
+});
+
+test("mapped domain overrides the user's manual selection for that incoming message", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://foo.example.com/article",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: "agent-2",
+    }),
+    {
+      selectedAgentId: "agent-1",
+      forceDefaultAssistant: false,
+    },
+  );
+});
+
+test("unmapped incoming url resets auto-selected agent back to default when there is no manual selection", () => {
+  assert.deepEqual(
+    resolveIncomingIframeSelection({
+      pageUrl: "https://another-unknown.example.com/article",
+      mappings: [
+        {
+          id: "m1",
+          domain: "foo.example.com",
+          agentId: "agent-1",
+          enabled: true,
+        },
+      ],
+      availableAgentIds: ["agent-1", "agent-2"],
+      manualSelectedAgentId: null,
+    }),
+    {
+      selectedAgentId: null,
+      forceDefaultAssistant: true,
+    },
+  );
+});

frontend-web/src/core/plugin-management/domain-agent.ts

@@ -0,0 +1,135 @@
+export type DomainAgentMapping = {
+  id: string;
+  domain: string;
+  agentId: string;
+  enabled: boolean;
+};
+
+function trimToUndefined(value: string | null | undefined): string | undefined {
+  const trimmed = value?.trim();
+  return trimmed ? trimmed : undefined;
+}
+
+function normalizeAgentId(agentId: string | null | undefined): string | undefined {
+  const trimmed = agentId?.trim();
+  return trimmed ? trimmed : undefined;
+}
+
+export function normalizeDomainInput(
+  value: string | null | undefined,
+): string | undefined {
+  const trimmed = trimToUndefined(value);
+  if (!trimmed) return undefined;
+
+  const candidate = /^[a-zA-Z][a-zA-Z\d+\-.]*:\/\//.test(trimmed)
+    ? trimmed
+    : `https://${trimmed}`;
+
+  try {
+    const parsed = new URL(candidate);
+    const host = parsed.host.trim().toLowerCase();
+    return host || undefined;
+  } catch {
+    return undefined;
+  }
+}
+
+export function resolveDomainMappedAgentId({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+}): string | undefined {
+  const host = normalizeDomainInput(pageUrl);
+  if (!host) return undefined;
+
+  const allowedAgents =
+    availableAgentIds && availableAgentIds.length > 0
+      ? new Set(availableAgentIds)
+      : null;
+
+  for (const mapping of mappings) {
+    if (!mapping.enabled) continue;
+    if (normalizeDomainInput(mapping.domain) !== host) continue;
+    if (allowedAgents && !allowedAgents.has(mapping.agentId)) continue;
+    return mapping.agentId;
+  }
+
+  return undefined;
+}
+
+export function resolveConfiguredIframeAgentId({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+  isNewThread,
+  hasStartedConversation,
+  manualSelectionLocked,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+  isNewThread: boolean;
+  hasStartedConversation: boolean;
+  manualSelectionLocked: boolean;
+}): string | undefined {
+  if (!isNewThread || hasStartedConversation || manualSelectionLocked) {
+    return undefined;
+  }
+
+  return resolveDomainMappedAgentId({
+    pageUrl,
+    mappings,
+    availableAgentIds,
+  });
+}
+
+export function resolveIncomingIframeSelection({
+  pageUrl,
+  mappings,
+  availableAgentIds,
+  manualSelectedAgentId,
+}: {
+  pageUrl: string | null | undefined;
+  mappings: DomainAgentMapping[];
+  availableAgentIds?: readonly string[] | null;
+  manualSelectedAgentId: string | null;
+}): {
+  selectedAgentId: string | null;
+  forceDefaultAssistant: boolean;
+} {
+  const mappedAgentId = resolveDomainMappedAgentId({
+    pageUrl,
+    mappings,
+    availableAgentIds,
+  });
+  if (mappedAgentId) {
+    return {
+      selectedAgentId: mappedAgentId,
+      forceDefaultAssistant: false,
+    };
+  }
+
+  const allowedAgents =
+    availableAgentIds && availableAgentIds.length > 0
+      ? new Set(availableAgentIds)
+      : null;
+  const normalizedManualAgentId = normalizeAgentId(manualSelectedAgentId);
+  if (
+    normalizedManualAgentId &&
+    (!allowedAgents || allowedAgents.has(normalizedManualAgentId))
+  ) {
+    return {
+      selectedAgentId: normalizedManualAgentId,
+      forceDefaultAssistant: false,
+    };
+  }
+
+  return {
+    selectedAgentId: null,
+    forceDefaultAssistant: true,
+  };
+}

frontend-web/src/core/positions/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   Position,
@@ -24,6 +25,12 @@ export async function listPositions(): Promise<Position[]> {
   const res = await apiFetch(base());
   if (!res.ok) throw await parseDetail(res, "Failed to list positions");
   const data = (await res.json()) as PositionListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-查询",
+    url: "/api/positions",
+    returnParam: data.positions,
+  });
   return data.positions;
 }
 
@@ -34,7 +41,15 @@ export async function createPosition(input: PositionCreateInput): Promise<Positi
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to create position");
-  return (await res.json()) as Position;
+  const created = (await res.json()) as Position;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-岗位-新增",
+    url: "/api/positions",
+    reqParam: input,
+    returnParam: created,
+  });
+  return created;
 }
 
 export async function updatePosition(id: string, input: PositionUpdateInput): Promise<Position> {
@@ -44,18 +59,39 @@ export async function updatePosition(id: string, input: PositionUpdateInput): Pr
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to update position");
-  return (await res.json()) as Position;
+  const updated = (await res.json()) as Position;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-编辑",
+    url: `/api/positions/${id}`,
+    reqParam: input,
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function deletePosition(id: string): Promise<void> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(id)}`, { method: "DELETE" });
   if (!res.ok) throw await parseDetail(res, "Failed to delete position");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-岗位-删除",
+    url: `/api/positions/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function getTagBindings(positionId: string): Promise<TagBindings> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/tag-bindings`);
   if (!res.ok) throw await parseDetail(res, "Failed to load tag bindings");
   const data = (await res.json()) as TagBindingsResponse;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-岗位-标签绑定查看",
+    url: `/api/positions/${positionId}/tag-bindings`,
+    reqParam: { positionId },
+    returnParam: data.bindings,
+  });
   return data.bindings;
 }
 
@@ -67,6 +103,13 @@ export async function setTagBindings(positionId: string, bindings: TagBindings):
   });
   if (!res.ok) throw await parseDetail(res, "Failed to save tag bindings");
   const data = (await res.json()) as TagBindingsResponse;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-标签绑定保存",
+    url: `/api/positions/${positionId}/tag-bindings`,
+    reqParam: { positionId, bindings },
+    returnParam: data.bindings,
+  });
   return data.bindings;
 }
 
@@ -74,6 +117,13 @@ export async function listMembers(positionId: string): Promise<PositionMember[]>
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/members`);
   if (!res.ok) throw await parseDetail(res, "Failed to list members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-成员查询",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -85,6 +135,13 @@ export async function addMembers(positionId: string, userIds: string[]): Promise
   });
   if (!res.ok) throw await parseDetail(res, "Failed to add members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-岗位-添加成员",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId, userIds },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -96,6 +153,13 @@ export async function removeMembers(positionId: string, userIds: string[]): Prom
   });
   if (!res.ok) throw await parseDetail(res, "Failed to remove members");
   const data = (await res.json()) as { members: PositionMember[] };
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-岗位-移除成员",
+    url: `/api/positions/${positionId}/members`,
+    reqParam: { positionId, userIds },
+    returnParam: data.members,
+  });
   return data.members;
 }
 
@@ -103,6 +167,13 @@ export async function resyncPosition(positionId: string): Promise<number> {
   const res = await apiFetch(`${base()}/${encodeURIComponent(positionId)}/resync`, { method: "POST" });
   if (!res.ok) throw await parseDetail(res, "Failed to resync position");
   const data = (await res.json()) as { synced: number };
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-岗位-同步",
+    url: `/api/positions/${positionId}/resync`,
+    reqParam: { positionId },
+    returnParam: data,
+  });
   return data.synced;
 }
 
@@ -117,6 +188,12 @@ export async function listPositionUsers(): Promise<PositionUser[]> {
   const res = await apiFetch(`${base()}/users`);
   if (!res.ok) throw await parseDetail(res, "Failed to list users");
   const data = (await res.json()) as { users: PositionUser[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-岗位-用户查询",
+    url: "/api/positions/users",
+    returnParam: data.users,
+  });
   return data.users;
 }
 
@@ -127,4 +204,10 @@ export async function setUserPosition(userId: string, positionId: string | null)
     body: JSON.stringify({ position_id: positionId }),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to set user position");
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-岗位-设置用户岗位",
+    url: `/api/positions/users/${userId}`,
+    reqParam: { userId, positionId },
+  });
 }

frontend-web/src/core/recommended-questions/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   CreateQuestionRequest,
@@ -12,16 +13,25 @@ const BASE = () => `${getBackendBaseURL()}/api/recommended-questions`;
 export async function listRecommendedQuestions(all = false): Promise<RecommendedQuestion[]> {
   // ``all=true`` is the admin management view: every question, unfiltered by the
   // caller's 岗位 (position). The chat input uses the default (filtered) view.
-  const res = await apiFetch(`${BASE()}${all ? "?all=1" : ""}`);
+  const url = `${BASE()}${all ? "?all=1" : ""}`;
+  const res = await apiFetch(url);
   if (!res.ok) throw new Error(`Failed to load questions: ${res.statusText}`);
   const data = (await res.json()) as { questions: RecommendedQuestion[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-推荐问题-查询列表",
+    url,
+    reqParam: { all },
+    returnParam: { count: data.questions.length },
+  });
   return data.questions;
 }
 
 export async function createRecommendedQuestion(
   body: CreateQuestionRequest,
 ): Promise<RecommendedQuestion> {
-  const res = await apiFetch(BASE(), {
+  const url = BASE();
+  const res = await apiFetch(url, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body),
@@ -30,14 +40,23 @@ export async function createRecommendedQuestion(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to create question: ${res.statusText}`);
   }
-  return res.json() as Promise<RecommendedQuestion>;
+  const result = (await res.json()) as RecommendedQuestion;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-推荐问题-新增问题",
+    url,
+    reqParam: body,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateRecommendedQuestion(
   id: string,
   body: UpdateQuestionRequest,
 ): Promise<RecommendedQuestion> {
-  const res = await apiFetch(`${BASE()}/${id}`, {
+  const url = `${BASE()}/${id}`;
+  const res = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify(body),
@@ -46,23 +65,45 @@ export async function updateRecommendedQuestion(
     const err = (await res.json().catch(() => ({}))) as { detail?: string };
     throw new Error(err.detail ?? `Failed to update question: ${res.statusText}`);
   }
-  return res.json() as Promise<RecommendedQuestion>;
+  const result = (await res.json()) as RecommendedQuestion;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-推荐问题-编辑问题",
+    url,
+    reqParam: { id, ...body },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteRecommendedQuestion(id: string): Promise<void> {
-  const res = await apiFetch(`${BASE()}/${id}`, { method: "DELETE" });
+  const url = `${BASE()}/${id}`;
+  const res = await apiFetch(url, { method: "DELETE" });
   if (!res.ok) throw new Error(`Failed to delete question: ${res.statusText}`);
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-推荐问题-删除问题",
+    url,
+    reqParam: { id },
+  });
 }
 
 export async function reorderRecommendedQuestions(
   ids: string[],
 ): Promise<RecommendedQuestion[]> {
-  const res = await apiFetch(`${getBackendBaseURL()}/api/recommended-questions-reorder`, {
+  const url = `${getBackendBaseURL()}/api/recommended-questions-reorder`;
+  const res = await apiFetch(url, {
     method: "PUT",
     headers: { "Content-Type": "application/json" },
     body: JSON.stringify({ ids }),
   });
   if (!res.ok) throw new Error(`Failed to reorder questions: ${res.statusText}`);
   const data = (await res.json()) as { questions: RecommendedQuestion[] };
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-推荐问题-调整排序",
+    url,
+    reqParam: { ids },
+  });
   return data.questions;
 }

frontend-web/src/core/roundtable-draft-shares/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 // Share codes share the same alphabet/shape as conversation shares, so reuse the
 // extractor instead of duplicating the regex.
 export { extractShareCode } from "@/core/thread-shares/api";
@@ -86,7 +87,15 @@ export async function createDraftShare(
     body: JSON.stringify({ draft_id: draftId, mode }),
   });
   if (!response.ok) throw await parseError(response, "创建分享失败");
-  return response.json() as Promise<DraftShare>;
+  const result = (await response.json()) as DraftShare;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-会商草稿分享-创建分享",
+    url: baseUrl(),
+    reqParam: { draft_id: draftId, mode },
+    returnParam: { share_code: result.share_code, mode: result.mode },
+  });
+  return result;
 }
 
 /** List the current user's own roundtable-draft share links. */
@@ -94,34 +103,57 @@ export async function listDraftShares(): Promise<DraftShare[]> {
   const response = await apiFetch(baseUrl());
   if (!response.ok) throw await parseError(response, "加载分享列表失败");
   const json = (await response.json()) as { shares: DraftShare[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-会商草稿分享-查询分享列表",
+    url: baseUrl(),
+    returnParam: { count: json.shares.length },
+  });
   return json.shares;
 }
 
 /** Revoke a share link so it can no longer be previewed, imported, or viewed. */
 export async function revokeDraftShare(shareCode: string): Promise<void> {
-  const response = await apiFetch(`${baseUrl()}/${encodeURIComponent(shareCode)}`, {
-    method: "DELETE",
-  });
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}`;
+  const response = await apiFetch(url, { method: "DELETE" });
   if (!response.ok) throw await parseError(response, "撤销分享失败");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-会商草稿分享-撤销分享",
+    url,
+    reqParam: { shareCode },
+  });
 }
 
 /** Preview a share link before importing it. */
 export async function previewDraftShare(shareCode: string): Promise<DraftSharePreview> {
-  const response = await apiFetch(
-    `${baseUrl()}/${encodeURIComponent(shareCode)}/preview`,
-  );
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}/preview`;
+  const response = await apiFetch(url);
   if (!response.ok) throw await parseError(response, "无法读取该分享");
-  return response.json() as Promise<DraftSharePreview>;
+  const result = (await response.json()) as DraftSharePreview;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-会商草稿分享-预览分享",
+    url,
+    reqParam: { shareCode },
+  });
+  return result;
 }
 
 /** Import the roundtable draft behind a share link into the current account. */
 export async function importDraftShare(shareCode: string): Promise<DraftImportResult> {
-  const response = await apiFetch(
-    `${baseUrl()}/${encodeURIComponent(shareCode)}/import`,
-    { method: "POST" },
-  );
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}/import`;
+  const response = await apiFetch(url, { method: "POST" });
   if (!response.ok) throw await parseError(response, "导入失败");
-  return response.json() as Promise<DraftImportResult>;
+  const result = (await response.json()) as DraftImportResult;
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-会商草稿分享-导入分享",
+    url,
+    reqParam: { shareCode },
+    returnParam: result,
+  });
+  return result;
 }
 
 /**

frontend-web/src/core/scheduled-tasks/api.ts

@@ -1,8 +1,10 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   HtmlPageFavorite,
+  HtmlTemplateOption,
   PublishedScheduledTask,
   ScheduledTask,
   ScheduledTaskDeliveryProfile,
@@ -32,6 +34,34 @@ export async function getSchedulerThread() {
   return parseResponse<SchedulerThread>(await apiFetch(`${baseUrl()}/thread`));
 }
 
+/** 可选的 HTML 模板清单(模板数据转换器填充用)。 */
+export async function listHtmlTemplates() {
+  const data = await parseResponse<{ templates: HtmlTemplateOption[] }>(
+    await apiFetch(`${baseUrl()}/html-templates`),
+  );
+  return data.templates ?? [];
+}
+
+/** 「模板数据转换器」对话页「渲染预览」结果。 */
+export type TemplateRenderResult = {
+  ok: boolean;
+  display_only?: boolean;
+  errors: string[];
+  gaps: string[];
+  html: string | null;
+};
+
+/** 调试用:把一段(智能体回复的)文本里的 JSON 填进所选 HTML 模板,返回完整 HTML 与校验信息。 */
+export async function renderTemplateFill(templateId: string, text: string) {
+  return parseResponse<TemplateRenderResult>(
+    await apiFetch(`${baseUrl()}/template-fill/render`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ template_id: templateId, text }),
+    }),
+  );
+}
+
 export interface ListScheduledTasksParams {
   search?: string;
   tagIds?: string[];
@@ -42,9 +72,17 @@ export async function listScheduledTasks(params: ListScheduledTasksParams = {})
   if (params.search) qs.set("search", params.search);
   for (const id of params.tagIds ?? []) qs.append("tag_ids", id);
   const query = qs.toString();
-  return parseResponse<ScheduledTask[]>(
+  const result = await parseResponse<ScheduledTask[]>(
     await apiFetch(`${baseUrl()}${query ? `?${query}` : ""}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-定时任务-列表",
+    url: `${baseUrl()}${query ? `?${query}` : ""}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function createScheduledTask(data: {
@@ -57,40 +95,80 @@ export async function createScheduledTask(data: {
   require_markdown?: boolean;
   execution_context?: ScheduledTaskExecutionContext | null;
 }) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(baseUrl(), {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-定时任务-新建",
+    url: baseUrl(),
+    reqParam: data,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function listScheduledTaskRuns(taskId: string) {
-  return parseResponse<ScheduledTaskRun[]>(
+  const result = await parseResponse<ScheduledTaskRun[]>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/runs`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-定时任务-运行记录列表",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/runs`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function getScheduledTaskRun(runId: string) {
-  return parseResponse<ScheduledTaskRun>(
+  const result = await parseResponse<ScheduledTaskRun>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-定时任务-运行详情",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}`,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteScheduledTaskRun(runId: string) {
-  return parseResponse<{ success: boolean }>(
+  const result = await parseResponse<{ success: boolean }>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-定时任务-删除运行记录",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}`,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Agent messages for a run's underlying agent run — used to inspect a stuck/running run. */
 export async function getScheduledTaskRunMessages(runId: string) {
-  return parseResponse<ScheduledTaskRunMessagesResponse>(
+  const result = await parseResponse<ScheduledTaskRunMessagesResponse>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}/messages`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-定时任务-运行消息",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}/messages`,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export function scheduledTaskRunDownloadUrl(runId: string) {
@@ -102,9 +180,17 @@ export function scheduledTaskRunFileDownloadUrl(runId: string, fileIndex: number
 }
 
 export async function getScheduledTaskRunFileContent(runId: string, fileIndex: number) {
-  return parseResponse<ScheduledTaskResultFileContent>(
+  const result = await parseResponse<ScheduledTaskResultFileContent>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}/files/${fileIndex}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-定时任务-运行文件查看",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}/files/${fileIndex}`,
+    reqParam: { runId, fileIndex },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateScheduledTaskRunFile(
@@ -112,13 +198,21 @@ export async function updateScheduledTaskRunFile(
   fileIndex: number,
   content: string,
 ) {
-  return parseResponse<ScheduledTaskRunFileUpdateResponse>(
+  const result = await parseResponse<ScheduledTaskRunFileUpdateResponse>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}/files/${fileIndex}`, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ content }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-定时任务-运行文件编辑",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}/files/${fileIndex}`,
+    reqParam: { runId, fileIndex },
+    returnParam: result,
+  });
+  return result;
 }
 
 function filenameFromContentDisposition(header: string | null): string | null {
@@ -178,6 +272,12 @@ export async function downloadScheduledTaskRun(runId: string) {
     await apiFetch(scheduledTaskRunDownloadUrl(runId)),
     "scheduled-task-result.zip",
   );
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-定时任务-下载运行结果",
+    url: scheduledTaskRunDownloadUrl(runId),
+    reqParam: { runId },
+  });
 }
 
 export async function downloadScheduledTaskRunFile(runId: string, fileIndex: number) {
@@ -185,24 +285,45 @@ export async function downloadScheduledTaskRunFile(runId: string, fileIndex: num
     await apiFetch(scheduledTaskRunFileDownloadUrl(runId, fileIndex)),
     "scheduled-task-file",
   );
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-定时任务-下载运行文件",
+    url: scheduledTaskRunFileDownloadUrl(runId, fileIndex),
+    reqParam: { runId, fileIndex },
+  });
 }
 
 export async function getScheduledTaskDeliveryProfile() {
-  return parseResponse<ScheduledTaskDeliveryProfile>(
+  const result = await parseResponse<ScheduledTaskDeliveryProfile>(
     await apiFetch(`${baseUrl()}/delivery-profile`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-定时任务-投递配置查看",
+    url: `${baseUrl()}/delivery-profile`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateScheduledTaskDeliveryProfile(data: {
   element_user_id?: string | null;
 }) {
-  return parseResponse<ScheduledTaskDeliveryProfile>(
+  const result = await parseResponse<ScheduledTaskDeliveryProfile>(
     await apiFetch(`${baseUrl()}/delivery-profile`, {
       method: "PUT",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-定时任务-投递配置修改",
+    url: `${baseUrl()}/delivery-profile`,
+    reqParam: data,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateScheduledTask(
@@ -219,45 +340,85 @@ export async function updateScheduledTask(
     execution_context: ScheduledTaskExecutionContext | null;
   }>,
 ) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}`, {
       method: "PATCH",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-定时任务-修改",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}`,
+    reqParam: { taskId, data },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteScheduledTask(taskId: string) {
-  return parseResponse<{ success: boolean }>(
+  const result = await parseResponse<{ success: boolean }>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-定时任务-删除",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function pauseScheduledTask(taskId: string) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/pause`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.disabled,
+    optDetail: "CM助手-全量-定时任务-暂停",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/pause`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function resumeScheduledTask(taskId: string) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/resume`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.enabled,
+    optDetail: "CM助手-全量-定时任务-恢复",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/resume`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function triggerScheduledTask(taskId: string) {
-  return parseResponse<{ success: boolean; task: ScheduledTask }>(
+  const result = await parseResponse<{ success: boolean; task: ScheduledTask }>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/trigger`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-定时任务-手动运行",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/trigger`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function listPublishedScheduledTasks(params: { limit?: number; offset?: number } = {}) {
@@ -265,53 +426,101 @@ export async function listPublishedScheduledTasks(params: { limit?: number; offs
   if (params.limit != null) query.set("limit", String(params.limit));
   if (params.offset != null) query.set("offset", String(params.offset));
   const suffix = query.toString();
-  return parseResponse<PublishedScheduledTask[]>(
+  const result = await parseResponse<PublishedScheduledTask[]>(
     await apiFetch(`${baseUrl()}/published${suffix ? `?${suffix}` : ""}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-定时任务-已发布列表",
+    url: `${baseUrl()}/published${suffix ? `?${suffix}` : ""}`,
+    reqParam: params,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function publishScheduledTask(taskId: string) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/publish`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-定时任务-发布",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/publish`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function unpublishScheduledTask(taskId: string) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/unpublish`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-定时任务-取消发布",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/unpublish`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function subscribeScheduledTask(taskId: string, notifyElement: boolean) {
-  return parseResponse<ScheduledTaskSubscription>(
+  const result = await parseResponse<ScheduledTaskSubscription>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ notify_element: notifyElement }),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-定时任务-订阅",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`,
+    reqParam: { taskId, notify_element: notifyElement },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function updateScheduledTaskSubscription(taskId: string, notifyElement: boolean) {
-  return parseResponse<ScheduledTaskSubscription>(
+  const result = await parseResponse<ScheduledTaskSubscription>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`, {
       method: "PATCH",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ notify_element: notifyElement }),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-定时任务-订阅修改",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`,
+    reqParam: { taskId, notify_element: notifyElement },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function unsubscribeScheduledTask(taskId: string) {
-  return parseResponse<{ success: boolean }>(
+  const result = await parseResponse<{ success: boolean }>(
     await apiFetch(`${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-定时任务-取消订阅",
+    url: `${baseUrl()}/${encodeURIComponent(taskId)}/subscribe`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- Admin (cross-user management) ---
@@ -321,16 +530,32 @@ export async function listAllScheduledTasks(search?: string) {
   const qs = new URLSearchParams();
   if (search) qs.set("search", search);
   const query = qs.toString();
-  return parseResponse<ScheduledTask[]>(
+  const result = await parseResponse<ScheduledTask[]>(
     await apiFetch(`${baseUrl()}/admin/all${query ? `?${query}` : ""}`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-定时任务-全部任务列表",
+    url: `${baseUrl()}/admin/all${query ? `?${query}` : ""}`,
+    reqParam: { search },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** List runs for any task regardless of owner. Admin-only endpoint. */
 export async function adminListScheduledTaskRuns(taskId: string) {
-  return parseResponse<ScheduledTaskRun[]>(
+  const result = await parseResponse<ScheduledTaskRun[]>(
     await apiFetch(`${baseUrl()}/admin/${encodeURIComponent(taskId)}/runs`),
   );
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-定时任务-运行记录列表",
+    url: `${baseUrl()}/admin/${encodeURIComponent(taskId)}/runs`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Update any task regardless of owner. Admin-only endpoint. */
@@ -347,52 +572,99 @@ export async function adminUpdateScheduledTask(
     require_markdown: boolean;
   }>,
 ) {
-  return parseResponse<ScheduledTask>(
+  const result = await parseResponse<ScheduledTask>(
     await apiFetch(`${baseUrl()}/admin/${encodeURIComponent(taskId)}`, {
       method: "PATCH",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-定时任务-修改",
+    url: `${baseUrl()}/admin/${encodeURIComponent(taskId)}`,
+    reqParam: { taskId, data },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Delete any task regardless of owner. Admin-only endpoint. */
 export async function adminDeleteScheduledTask(taskId: string) {
-  return parseResponse<{ success: boolean }>(
+  const result = await parseResponse<{ success: boolean }>(
     await apiFetch(`${baseUrl()}/admin/${encodeURIComponent(taskId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-定时任务-删除",
+    url: `${baseUrl()}/admin/${encodeURIComponent(taskId)}`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Trigger an immediate run of any task regardless of owner. Admin-only. */
 export async function adminTriggerScheduledTask(taskId: string) {
-  return parseResponse<{ success: boolean; task: ScheduledTask }>(
+  const result = await parseResponse<{ success: boolean; task: ScheduledTask }>(
     await apiFetch(`${baseUrl()}/admin/${encodeURIComponent(taskId)}/trigger`, {
       method: "POST",
     }),
   );
+  writeYLog({
+    optType: OptType.other,
+    optDetail: "CM助手-全量-定时任务-手动运行",
+    url: `${baseUrl()}/admin/${encodeURIComponent(taskId)}/trigger`,
+    reqParam: { taskId },
+    returnParam: result,
+  });
+  return result;
 }
 
 // --- HTML page tasks ---
 
 /** Fetch the generated HTML document for an ``html_page`` run. */
 export async function getScheduledTaskRunHtml(runId: string) {
-  return parseResponse<ScheduledTaskRunHtml>(
+  const result = await parseResponse<ScheduledTaskRunHtml>(
     await apiFetch(`${baseUrl()}/runs/${encodeURIComponent(runId)}/html`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-定时任务-运行HTML查看",
+    url: `${baseUrl()}/runs/${encodeURIComponent(runId)}/html`,
+    reqParam: { runId },
+    returnParam: result,
+  });
+  return result;
 }
 
 const favoritesUrl = () => `${getBackendBaseURL()}/api/html-page-favorites`;
 
 export async function listHtmlPageFavorites() {
-  return parseResponse<HtmlPageFavorite[]>(await apiFetch(favoritesUrl()));
+  const result = await parseResponse<HtmlPageFavorite[]>(await apiFetch(favoritesUrl()));
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-HTML收藏-列表",
+    url: `/api/html-page-favorites`,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function getHtmlPageFavorite(favoriteId: string) {
-  return parseResponse<HtmlPageFavorite>(
+  const result = await parseResponse<HtmlPageFavorite>(
     await apiFetch(`${favoritesUrl()}/${encodeURIComponent(favoriteId)}`),
   );
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-HTML收藏-查看",
+    url: `/api/html-page-favorites/${encodeURIComponent(favoriteId)}`,
+    reqParam: { favoriteId },
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function createHtmlPageFavorite(data: {
@@ -401,19 +673,35 @@ export async function createHtmlPageFavorite(data: {
   description?: string | null;
   tags?: string[];
 }) {
-  return parseResponse<HtmlPageFavorite>(
+  const result = await parseResponse<HtmlPageFavorite>(
     await apiFetch(favoritesUrl(), {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(data),
     }),
   );
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-HTML收藏-新建",
+    url: `/api/html-page-favorites`,
+    reqParam: data,
+    returnParam: result,
+  });
+  return result;
 }
 
 export async function deleteHtmlPageFavorite(favoriteId: string) {
-  return parseResponse<{ success: boolean }>(
+  const result = await parseResponse<{ success: boolean }>(
     await apiFetch(`${favoritesUrl()}/${encodeURIComponent(favoriteId)}`, {
       method: "DELETE",
     }),
   );
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-HTML收藏-删除",
+    url: `/api/html-page-favorites/${encodeURIComponent(favoriteId)}`,
+    reqParam: { favoriteId },
+    returnParam: result,
+  });
+  return result;
 }

frontend-web/src/core/scheduled-tasks/hooks.ts

@@ -16,6 +16,7 @@ import {
   deleteScheduledTask,
   deleteScheduledTaskRun,
   getSchedulerThread,
+  listHtmlTemplates,
   getScheduledTaskDeliveryProfile,
   getScheduledTaskRun,
   getScheduledTaskRunHtml,
@@ -45,6 +46,17 @@ export function useSchedulerThread() {
   });
 }
 
+/** 可选的 HTML 模板清单(模板数据转换器填充用)。模板是后端静态注册,长缓存即可。 */
+export function useHtmlTemplates(enabled = true) {
+  return useQuery({
+    queryKey: ["scheduled-tasks", "html-templates"],
+    queryFn: listHtmlTemplates,
+    enabled,
+    staleTime: 5 * 60_000,
+    refetchOnWindowFocus: false,
+  });
+}
+
 /** A task is currently executing — used to drive live polling of the task list. */
 function taskIsLive(status?: string | null): boolean {
   return status === "running" || status === "pending";

frontend-web/src/core/scheduled-tasks/markdown-docx.ts

@@ -42,6 +42,8 @@ import {
   type IRunOptions,
 } from "docx";
 
+import { OptType, writeYLog } from "@/core/log/y-log";
+
 const BLACK = "000000";
 const BODY_FONT = { ascii: "Calibri", eastAsia: "Microsoft YaHei" };
 const MONO_FONT = { ascii: "Consolas", eastAsia: "Microsoft YaHei" };
@@ -484,6 +486,12 @@ export async function downloadMarkdownAsDocx(
   title?: string,
 ): Promise<void> {
   const blob = await markdownToDocxBlob(markdown, title);
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-定时任务-导出",
+    url: "/scheduled-tasks/export/docx",
+    reqParam: { fileName, title },
+  });
   const safeName = fileName.replace(/\.(md|markdown)$/i, "") || "document";
   const url = URL.createObjectURL(blob);
   const anchor = document.createElement("a");

frontend-web/src/core/scheduled-tasks/types.ts

@@ -22,10 +22,31 @@ export type HtmlPageConfig = {
   negative_prompt?: string | null;
   reference_favorite_id?: string | null;
   model_name?: string | null;
+  /** 仅当参考选了内置模板(tpl:<id>)时生效:关闭则直接用模板默认数据,开启才检索抽取。 */
+  template_extract?: boolean;
+};
+
+/** 选中内置「模板数据转换器」agent 后,要把源 JSON 填充进的 HTML 模板。
+ * 持久化在 ``execution_context.template_config`` 里(无独立列)。 */
+export type TemplateFillConfig = {
+  template_id?: string | null;
+  /** 可选:覆盖转换所用模型(留空走 agent.model / 系统默认)。 */
+  model_name?: string | null;
+};
+
+/** ``GET /api/scheduled-tasks/html-templates`` 返回的一条模板选项。 */
+export type HtmlTemplateOption = {
+  id: string;
+  name: string;
+  description?: string | null;
+  /** false = 暂只「直接展示已有数据」,不需要也不会用源 JSON 转换填充。 */
+  convertible?: boolean;
 };
 
 export type ScheduledTaskExecutionContext = {
   require_markdown?: boolean;
+  /** 模板填充模式:选中「模板数据转换器」+ 选模板后填充进固定 HTML 模板。 */
+  template_config?: TemplateFillConfig;
   /**
    * The unified "必须生成 HTML" switch. The task form no longer splits "普通任务 /
    * HTML 页面" into separate kinds — instead ``require_html`` and

frontend-web/src/core/skill-display/inline-citations.test.ts

@@ -0,0 +1,78 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { applyInlineCitations, type RuntimeDisplaySource } from "./runtime";
+
+function makeSources(count: number): RuntimeDisplaySource[] {
+  return Array.from({ length: count }, (_unused, position) => ({
+    index: position + 1,
+    skillName: "knowledge-base-search",
+    mode: "citation",
+    title: `Reference ${position + 1}`,
+    type: "result",
+    snippet: "",
+    raw: {},
+  }));
+}
+
+function citation(index: number): string {
+  return `[citation:${index}](#reference-${index})`;
+}
+
+test("converts full-width numbered references", () => {
+  const out = applyInlineCitations("结论见【1】【2】。", makeSources(2));
+  assert.equal(out.includes(citation(1)), true);
+  assert.equal(out.includes(citation(2)), true);
+  assert.equal(out.includes("【1】"), false);
+  assert.equal(out.includes("【2】"), false);
+});
+
+test("converts full-width digits", () => {
+  const out = applyInlineCitations("参考【１】和【２】。", makeSources(2));
+  assert.equal(out.includes(citation(1)), true);
+  assert.equal(out.includes(citation(2)), true);
+});
+
+test("splits merged reference markers", () => {
+  for (const marker of ["【1,2】", "【1、2】", "【1，2】"]) {
+    const out = applyInlineCitations(`见${marker}。`, makeSources(2));
+    assert.equal(out.includes(citation(1)), true, marker);
+    assert.equal(out.includes(citation(2)), true, marker);
+  }
+});
+
+test("expands reference ranges", () => {
+  const dash = applyInlineCitations("见【1-3】。", makeSources(3));
+  assert.equal(dash.includes(citation(1)), true);
+  assert.equal(dash.includes(citation(2)), true);
+  assert.equal(dash.includes(citation(3)), true);
+
+  const tilde = applyInlineCitations("见【2~4】。", makeSources(4));
+  assert.equal(tilde.includes(citation(2)), true);
+  assert.equal(tilde.includes(citation(3)), true);
+  assert.equal(tilde.includes(citation(4)), true);
+});
+
+test("does not rewrite out-of-range references", () => {
+  const out = applyInlineCitations("正文【3】不是引用。", makeSources(1));
+  assert.equal(out.includes("【3】"), true);
+  assert.equal(out.includes("#reference-3"), false);
+});
+
+test("does not rewrite non-numeric bracket text", () => {
+  const out = applyInlineCitations("见【附录】小节。", makeSources(2));
+  assert.equal(out.includes("【附录】"), true);
+});
+
+test("keeps half-width syntax working", () => {
+  const out = applyInlineCitations("见[1][2]和[1,3]。", makeSources(3));
+  assert.equal(out.includes(citation(1)), true);
+  assert.equal(out.includes(citation(2)), true);
+  assert.equal(out.includes(citation(3)), true);
+});
+
+test("accepts spaced and full-width square brackets", () => {
+  const out = applyInlineCitations("参考[ 1 ]和［2］。", makeSources(2));
+  assert.equal(out.includes(citation(1)), true);
+  assert.equal(out.includes(citation(2)), true);
+});

frontend-web/src/core/skill-display/runtime-parsing.test.ts

@@ -0,0 +1,100 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import type { Message } from "@langchain/langgraph-sdk";
+
+import type { Skill } from "@/core/skills/type";
+
+import { buildSkillDisplayMap, collectRuntimeDisplaySources } from "./runtime";
+
+function makeSkill(): Skill {
+  return {
+    name: "custom-search",
+    description: "test",
+    category: "test",
+    license: "internal",
+    enabled: true,
+    display: {
+      enabled: true,
+      mode: "citation",
+      resultPath: "docs",
+      titleField: "title",
+      summaryField: "summary",
+      contentField: "content",
+      sourceField: "source",
+      authorField: null,
+      typeField: null,
+      timeField: null,
+      scoreField: null,
+      urlField: "url",
+      idField: "id",
+      linkStrategy: "auto",
+      linkTemplate: null,
+      citationToken: "doubleBracket",
+      maxItems: 20,
+      customInstruction: "",
+      tableColumns: [],
+      resultSets: [],
+    },
+  };
+}
+
+function makeMessages(toolContent: Message["content"]): Message[] {
+  return [
+    {
+      id: "ai-1",
+      type: "ai",
+      content: "",
+      tool_calls: [{ id: "call-1", name: "custom-search", args: {} }],
+    } as unknown as Message,
+    {
+      id: "tool-1",
+      type: "tool",
+      name: "custom-search",
+      tool_call_id: "call-1",
+      content: toolContent,
+    } as unknown as Message,
+  ];
+}
+
+test("collects citations from fenced nested json", () => {
+  const messages = makeMessages(
+    "```json\n{\"payload\":{\"docs\":[{\"id\":\"doc-1\",\"title\":\"Alpha\",\"summary\":\"Brief\",\"content\":\"Body\",\"source\":\"KB\",\"url\":\"https://example.com/a\"}]}}\n```",
+  );
+  const sources = collectRuntimeDisplaySources(
+    messages,
+    buildSkillDisplayMap([makeSkill()]),
+  );
+  assert.equal(sources.length, 1);
+  assert.equal(sources[0]?.title, "Alpha");
+  assert.equal(sources[0]?.url, "https://example.com/a");
+});
+
+test("collects citations from structured tool payload arrays", () => {
+  const messages = makeMessages([
+    {
+      type: "json",
+      json: {
+        wrapper: {
+          docs: [
+            {
+              id: "doc-2",
+              title: "Beta",
+              summary: "Second",
+              content: "Payload",
+              source: "Skill",
+              url: "https://example.com/b",
+            },
+          ],
+        },
+      },
+    },
+  ] as unknown as Message["content"]);
+  const sources = collectRuntimeDisplaySources(
+    messages,
+    buildSkillDisplayMap([makeSkill()]),
+  );
+  assert.equal(sources.length, 1);
+  assert.equal(sources[0]?.title, "Beta");
+  assert.equal(sources[0]?.source, "Skill");
+});

frontend-web/src/core/skill-display/runtime.ts

@@ -588,7 +588,7 @@ function replaceBracketCitationTokens(
   byIndex: Map<number, RuntimeDisplaySource>,
   orderedSources: RuntimeDisplaySource[],
 ): string {
-  const tokenPattern = /\\?\[(\d{1,3})\\?\](?!\()/g;
+  const tokenPattern = /\\?\[\s*([0-9\uFF10-\uFF19]{1,3})\s*\\?\](?!\()/g;
   let cursor = 0;
   let next = "";
   for (const match of content.matchAll(tokenPattern)) {
@@ -598,13 +598,24 @@ function replaceBracketCitationTokens(
       continue;
     }
     next += content.slice(cursor, start);
-    next += citationMarkdown(match[0], Number(match[1]), byIndex, orderedSources);
+    next += citationMarkdown(
+      match[0],
+      Number(normalizeAsciiDigits(match[1] ?? "")),
+      byIndex,
+      orderedSources,
+    );
     cursor = start + match[0].length;
   }
   next += content.slice(cursor);
   return next;
 }
 
+function normalizeAsciiDigits(value: string): string {
+  return value.replace(/[\uFF10-\uFF19]/g, (digit) =>
+    String.fromCharCode(digit.charCodeAt(0) - 0xfee0),
+  );
+}
+
 function normalizeLooseCitationTokens(
   content: string,
   byIndex: Map<number, RuntimeDisplaySource>,
@@ -623,9 +634,66 @@ function normalizeLooseCitationTokens(
     return indexes.map((index) => `[${index}]`).join("");
   };
 
-  // 全角括号写法:【1】→ [1]
-  let next = content.replace(/【\s*(\d{1,3})\s*】/g, (match, rawIndex: string) =>
-    isValidIndex(Number(rawIndex)) ? `[${rawIndex}]` : match,
+  // 全角数字转半角:１２３ → 123(仅用于括号内的编号识别)
+  const toAsciiDigits = (value: string) =>
+    value.replace(/[０-９]/g, (digit) =>
+      String.fromCharCode(digit.charCodeAt(0) - 0xfee0),
+    );
+
+  // 全角括号写法(含全角数字):
+  //   【1】/【１】              → [1]
+  //   【1,2】/【1，2】/【1、2】 → [1][2]
+  //   【1-3】/【2~5】           → [1][2][3]
+  // 三种形态互斥(单编号内不含分隔符),且都要求编号能对应到参考来源,
+  // 避免把正文里的【…】误判成引用。转成半角后交给下面的半角逻辑统一处理。
+
+  // 全角单编号:【1】/【１】
+  let next = content
+    .replace(/［/g, "[")
+    .replace(/］/g, "]")
+    .replace(/[，、]/g, ",")
+    .replace(
+    /【\s*([0-9０-９]{1,3})\s*】/g,
+    (match, rawIndex: string) => {
+      const index = Number(normalizeAsciiDigits(rawIndex));
+      return isValidIndex(index) ? `[${index}]` : match;
+    },
+    );
+
+  // 全角合并编号:【1,2】/【1，2】/【1、2】
+  next = next.replace(
+    /【\s*([0-9０-９]{1,3}(?:\s*[,，、]\s*[0-9０-９]{1,3})+)\s*】/g,
+    (match, rawList: string) => {
+      const indexes = rawList
+        .split(/[,，、]/)
+        .map((part) => Number(normalizeAsciiDigits(part.trim())));
+      if (indexes.some((index) => !isValidIndex(index))) {
+        return match;
+      }
+      return indexes.map((index) => `[${index}]`).join("");
+    },
+  );
+
+  // 全角区间编号:【1-3】/【2~5】
+  next = next.replace(
+    /【\s*([0-9０-９]{1,3})\s*[-–~～]\s*([0-9０-９]{1,3})\s*】/g,
+    (match, rawStart: string, rawEnd: string) => {
+      const start = Number(normalizeAsciiDigits(rawStart));
+      const end = Number(normalizeAsciiDigits(rawEnd));
+      if (
+        end <= start ||
+        end - start > 20 ||
+        !isValidIndex(start) ||
+        !isValidIndex(end)
+      ) {
+        return match;
+      }
+      const tokens: string[] = [];
+      for (let index = start; index <= end; index++) {
+        tokens.push(`[${index}]`);
+      }
+      return tokens.join("");
+    },
   );
 
   // 合并写法:[1,2,3] / [1，2] / [1、2] → [1][2][3]
@@ -925,20 +993,23 @@ function extractStructuredToolPayload(content: unknown): unknown {
 }
 
 function unwrapToolPayloadObject(value: Record<string, unknown>): unknown {
-  if (
-    Array.isArray(value.results) ||
-    Array.isArray(value.data) ||
-    Array.isArray(value.items)
-  ) {
-    return value;
+  const directCandidate = findDisplayPayloadCandidate(value, 0);
+  if (directCandidate !== undefined) {
+    return directCandidate;
   }
-  for (const key of ["result", "output", "stdout", "stderr", "content", "text"]) {
-    const nested = value[key];
+  for (const nested of Object.values(value)) {
     if (typeof nested === "string") {
       const parsed = parseJSONLikeText(nested);
       if (parsed !== undefined) {
+        if (isRecord(parsed)) {
+          const structured = findDisplayPayloadCandidate(parsed, 0);
+          if (structured !== undefined) {
+            return structured;
+          }
+        }
         return parsed;
       }
+      continue;
     }
     if (isRecord(nested)) {
       const unwrapped = unwrapToolPayloadObject(nested);
@@ -955,6 +1026,14 @@ function parseJSONLikeText(text: string): unknown {
   if (!trimmed) {
     return undefined;
   }
+  const fenced = extractFencedJSON(trimmed);
+  if (fenced) {
+    try {
+      return JSON.parse(fenced) as unknown;
+    } catch {
+      // Fall through to best-effort parsing.
+    }
+  }
   try {
     return JSON.parse(trimmed) as unknown;
   } catch {
@@ -963,17 +1042,9 @@ function parseJSONLikeText(text: string): unknown {
 }
 
 function extractJSONFromText(text: string): unknown {
-  const candidates: Array<[number, number]> = [];
-  const firstObj = text.indexOf("{");
-  if (firstObj !== -1) candidates.push([firstObj, text.lastIndexOf("}")]);
-  const firstArr = text.indexOf("[");
-  if (firstArr !== -1) candidates.push([firstArr, text.lastIndexOf("]")]);
-  candidates.sort(([a], [b]) => a - b);
-  for (const [start, end] of candidates) {
-    if (start < 0 || end <= start) continue;
-    const slice = text.slice(start, end + 1);
+  for (const candidate of iterateBalancedJsonCandidates(text)) {
     try {
-      return JSON.parse(slice);
+      return JSON.parse(candidate);
     } catch {
       // try the next candidate
     }
@@ -981,6 +1052,108 @@ function extractJSONFromText(text: string): unknown {
   return undefined;
 }
 
+function *iterateBalancedJsonCandidates(text: string): Generator<string> {
+  for (let index = 0; index < text.length; index++) {
+    const char = text[index];
+    if (char !== "{" && char !== "[") {
+      continue;
+    }
+    const candidate = extractBalancedJson(text, index);
+    if (candidate) {
+      yield candidate;
+    }
+  }
+}
+
+function extractBalancedJson(text: string, start: number): string | null {
+  const opening = text[start];
+  if (opening !== "{" && opening !== "[") {
+    return null;
+  }
+  const closing = opening === "{" ? "}" : "]";
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (let index = start; index < text.length; index++) {
+    const char = text[index];
+    if (inString) {
+      if (escaped) {
+        escaped = false;
+      } else if (char === "\\") {
+        escaped = true;
+      } else if (char === "\"") {
+        inString = false;
+      }
+      continue;
+    }
+    if (char === "\"") {
+      inString = true;
+      continue;
+    }
+    if (char === opening) {
+      depth += 1;
+      continue;
+    }
+    if (char === closing) {
+      depth -= 1;
+      if (depth === 0) {
+        return text.slice(start, index + 1);
+      }
+    }
+  }
+  return null;
+}
+
+function extractFencedJSON(text: string): string | null {
+  const match = /```(?:json)?\s*([\s\S]*?)```/i.exec(text);
+  return match?.[1]?.trim() ?? null;
+}
+
+function findDisplayPayloadCandidate(value: unknown, depth: number): unknown {
+  if (depth > 8) {
+    return undefined;
+  }
+  if (Array.isArray(value)) {
+    const objectItems = value.filter(
+      (item): item is Record<string, unknown> =>
+        isRecord(item),
+    );
+    if (value.length === 0 || objectItems.length === value.length) {
+      return { results: objectItems };
+    }
+    for (const item of value) {
+      const nested = findDisplayPayloadCandidate(item, depth + 1);
+      if (nested !== undefined) {
+        return nested;
+      }
+    }
+    return undefined;
+  }
+  if (!isRecord(value)) {
+    return undefined;
+  }
+  for (const key of ["results", "data", "items", "docs", "records", "rows", "list", "hits", "sources"]) {
+    const nested = value[key];
+    if (!Array.isArray(nested)) {
+      continue;
+    }
+    const objectItems = nested.filter(
+      (item): item is Record<string, unknown> =>
+        isRecord(item),
+    );
+    if (nested.length === 0 || objectItems.length === nested.length) {
+      return { ...value, [key]: objectItems };
+    }
+  }
+  for (const nested of Object.values(value)) {
+    const candidate = findDisplayPayloadCandidate(nested, depth + 1);
+    if (candidate !== undefined) {
+      return candidate;
+    }
+  }
+  return undefined;
+}
+
 function extractSearchPayloadFromText(text: string): unknown {
   if (!text.includes('"results"') || !text.includes('"recUuid"')) {
     return undefined;

frontend-web/src/core/skills/api.ts

@@ -141,17 +141,39 @@ export async function getSkillDisplaySample(
   return response.json() as Promise<SkillDisplaySampleResponse>;
 }
 
-export interface InstallSkillRequest {
-  thread_id: string;
-  path: string;
-}
-
-export interface InstallSkillResponse {
-  success: boolean;
-  skill_name: string;
-  message: string;
-  overwritten?: boolean;
-}
+export interface InstallSkillRequest {
+  thread_id: string;
+  path: string;
+  skill_name?: string;
+}
+
+export interface InstallSkillResponse {
+  success: boolean;
+  skill_name: string;
+  message: string;
+  overwritten?: boolean;
+}
+
+export interface PreviewSkillInstallRequest {
+  thread_id: string;
+  path: string;
+}
+
+export interface PreviewSkillInstallResponse {
+  ok: boolean;
+  skill_name: string;
+  description: string;
+  license: string | null;
+  allowed_tools: string[];
+  can_install_as_is: boolean;
+  owned_by_me: boolean;
+  owned_by_other: boolean;
+  builtin_conflict: boolean;
+  owner_username?: string | null;
+  owner_user_id?: string | null;
+  message: string;
+  warnings: string[];
+}
 
 export interface ValidateSkillUploadResponse {
   ok: boolean;
@@ -164,9 +186,9 @@ export interface ValidateSkillUploadResponse {
   warnings: string[];
 }
 
-export async function installSkill(
-  request: InstallSkillRequest,
-): Promise<InstallSkillResponse> {
+export async function installSkill(
+  request: InstallSkillRequest,
+): Promise<InstallSkillResponse> {
   const response = await apiFetch(`${getBackendBaseURL()}/api/skills/install`, {
     method: "POST",
     headers: {
@@ -187,8 +209,24 @@ export async function installSkill(
     };
   }
 
-  return response.json();
-}
+  return response.json();
+}
+
+export async function previewSkillInstall(
+  request: PreviewSkillInstallRequest,
+): Promise<PreviewSkillInstallResponse> {
+  const response = await apiFetch(`${getBackendBaseURL()}/api/skills/install-preview`, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+    },
+    body: JSON.stringify(request),
+  });
+  if (!response.ok) {
+    throw await parseDetailedError(response, "Failed to preview skill install");
+  }
+  return response.json() as Promise<PreviewSkillInstallResponse>;
+}
 
 async function parseDetailedError(response: Response, fallback: string): Promise<Error> {
   const data = await response.json().catch(() => ({}));

frontend-web/src/core/strategy/external-links.ts

@@ -1,6 +1,7 @@
 /** Strategy 模块外部 iframe / 嵌入页链接（来自 Vite 环境变量） */
 
 import { authStorageGet } from "@/core/auth/scoped-storage";
+import { normalizeExternalAccessToken } from "@/core/auth/external-access-token";
 
 function trimTrailingSlash(url: string): string {
   return url.replace(/\/+$/, "");
@@ -43,8 +44,7 @@ function readUserInfo(): Record<string, unknown> {
 
 /** 当前登录态 accessToken（无则空串）。 */
 export function getAccessToken(): string {
-  const value = readUserInfo().accessToken;
-  return value == null ? "" : String(value);
+  return normalizeExternalAccessToken(readUserInfo().accessToken);
 }
 
 /**

frontend-web/src/core/studio/api.ts

@@ -1,4 +1,5 @@
 import { getNotebookApiBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 import type { SourceItem, StudioNotebook } from "./types";
 
 function base(): string {
@@ -30,7 +31,14 @@ export async function fetchStudioNotebooks(
     headers: { Authorization: `Bearer ${token}` },
   });
   if (!res.ok) throw new Error(`获取空间列表失败：${res.status}`);
-  return res.json() as Promise<StudioNotebook[]>;
+  const notebooks = (await res.json()) as StudioNotebook[];
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-工作室-空间查询",
+    url: "/api/v1/searchspaces",
+    returnParam: notebooks,
+  });
+  return notebooks;
 }
 
 export async function createSearchSpace(
@@ -52,6 +60,12 @@ export async function createSearchSpace(
     const body = await res.json().catch(() => null);
     throw new Error(body?.detail || `创建失败：${res.status}`);
   }
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-工作室-新建空间",
+    url: "/api/v1/searchspaces",
+    reqParam: { name },
+  });
 }
 
 export async function uploadSourceText(
@@ -75,6 +89,12 @@ export async function uploadSourceText(
     }),
   });
   if (!res.ok) throw new Error(`上传失败：${res.status}`);
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-工作室-上传文字来源",
+    url: "/api/v1/documents/textupload",
+    reqParam: { search_space_id: notebookId, title: title || "粘贴的文字" },
+  });
 }
 
 export async function deleteSearchSpace(
@@ -88,6 +108,12 @@ export async function deleteSearchSpace(
     headers: { Authorization: `Bearer ${token}` },
   });
   if (!res.ok) throw new Error(`删除失败：${res.status}`);
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-工作室-删除空间",
+    url: `/api/v1/searchspaces/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function renameSearchSpace(
@@ -106,6 +132,12 @@ export async function renameSearchSpace(
     body: JSON.stringify({ name }),
   });
   if (!res.ok) throw new Error(`重命名失败：${res.status}`);
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-工作室-重命名空间",
+    url: `/api/v1/searchspaces/${id}`,
+    reqParam: { id, name },
+  });
 }
 
 export interface ChunkRead {
@@ -134,7 +166,15 @@ export async function fetchDocumentByChunk(
     headers: { Authorization: `Bearer ${token}` },
   });
   if (!res.ok) throw new Error(`获取文档失败：${res.status}`);
-  return res.json() as Promise<DocumentWithChunks>;
+  const doc = (await res.json()) as DocumentWithChunks;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-工作室-查看文档",
+    url: `/api/v1/documents/by-chunk/${chunkId}`,
+    reqParam: { chunkId },
+    returnParam: { id: doc.id, title: doc.title, file_type: doc.file_type },
+  });
+  return doc;
 }
 
 export async function uploadSourceFiles(
@@ -157,6 +197,15 @@ export async function uploadSourceFiles(
     body: formData,
   });
   if (!res.ok) throw new Error(`上传失败：${res.status}`);
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-工作室-上传文件来源",
+    url: "/api/v1/documents/fileupload",
+    reqParam: {
+      search_space_id: notebookId,
+      files: files.map((f) => f.name),
+    },
+  });
 }
 
 export async function fetchNotebookSources(
@@ -171,5 +220,13 @@ export async function fetchNotebookSources(
     { headers: { Authorization: `Bearer ${token}` } },
   );
   if (!res.ok) throw new Error(`获取来源失败：${res.status}`);
-  return res.json() as Promise<SourceItem[]>;
+  const sources = (await res.json()) as SourceItem[];
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-工作室-来源查询",
+    url: `/api/v1/source/search-space/${notebookId}?limit=100`,
+    reqParam: { notebookId },
+    returnParam: sources,
+  });
+  return sources;
 }

frontend-web/src/core/system-settings/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 export interface PromptPrefixSettings {
   enabled: boolean;
@@ -7,12 +8,115 @@ export interface PromptPrefixSettings {
   prompt_prefix: string;
 }
 
+export interface PluginDomainAgentMappingDto {
+  id: string;
+  domain: string;
+  agent_id: string;
+  enabled: boolean;
+}
+
+export interface PluginManagementSettings {
+  domainAgentMappings: Array<{
+    id: string;
+    domain: string;
+    agentId: string;
+    enabled: boolean;
+  }>;
+}
+
+export interface PluginManagementUpdate {
+  domainAgentMappings?: Array<{
+    id: string;
+    domain: string;
+    agentId: string;
+    enabled: boolean;
+  }>;
+}
+
 export interface PromptPrefixUpdate {
   enabled?: boolean;
   switch_label?: string;
   prompt_prefix?: string;
 }
 
+function fromPluginManagementDto(data: {
+  domain_agent_mappings: PluginDomainAgentMappingDto[];
+}): PluginManagementSettings {
+  return {
+    domainAgentMappings: (data.domain_agent_mappings ?? []).map((item) => ({
+      id: item.id,
+      domain: item.domain,
+      agentId: item.agent_id,
+      enabled: item.enabled,
+    })),
+  };
+}
+
+function toPluginManagementDto(body: PluginManagementUpdate) {
+  return {
+    domain_agent_mappings: (body.domainAgentMappings ?? []).map((item) => ({
+      id: item.id,
+      domain: item.domain,
+      agent_id: item.agentId,
+      enabled: item.enabled,
+    })),
+  };
+}
+
+export async function loadPluginManagementSettings(): Promise<PluginManagementSettings> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/system-settings/plugin-management`,
+  );
+  if (!response.ok) {
+    throw new Error(
+      `Failed to load plugin management settings: ${response.status}`,
+    );
+  }
+  const data = (await response.json()) as {
+    domain_agent_mappings: PluginDomainAgentMappingDto[];
+  };
+  const mapped = fromPluginManagementDto(data);
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-插件管理查看",
+    url: "/api/system-settings/plugin-management",
+    returnParam: mapped,
+  });
+  return mapped;
+}
+
+export async function updatePluginManagementSettings(
+  body: PluginManagementUpdate,
+): Promise<PluginManagementSettings> {
+  const payload = toPluginManagementDto(body);
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/system-settings/plugin-management`,
+    {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(payload),
+    },
+  );
+  if (!response.ok) {
+    const detail = await response
+      .json()
+      .catch(() => ({ detail: "Failed to update plugin management settings" }));
+    throw new Error(detail.detail ?? "Failed to update plugin management settings");
+  }
+  const data = (await response.json()) as {
+    domain_agent_mappings: PluginDomainAgentMappingDto[];
+  };
+  const mapped = fromPluginManagementDto(data);
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-插件管理编辑",
+    url: "/api/system-settings/plugin-management",
+    reqParam: payload,
+    returnParam: mapped,
+  });
+  return mapped;
+}
+
 export async function loadPromptPrefixSettings(): Promise<PromptPrefixSettings> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/system-settings/prompt-prefix`,
@@ -20,7 +124,14 @@ export async function loadPromptPrefixSettings(): Promise<PromptPrefixSettings>
   if (!response.ok) {
     throw new Error(`Failed to load prompt prefix settings: ${response.status}`);
   }
-  return (await response.json()) as PromptPrefixSettings;
+  const data = (await response.json()) as PromptPrefixSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-提示词前缀查看",
+    url: "/api/system-settings/prompt-prefix",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updatePromptPrefixSettings(
@@ -40,7 +151,15 @@ export async function updatePromptPrefixSettings(
       .catch(() => ({ detail: "Failed to update prompt prefix" }));
     throw new Error(detail.detail ?? "Failed to update prompt prefix");
   }
-  return (await response.json()) as PromptPrefixSettings;
+  const data = (await response.json()) as PromptPrefixSettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-提示词前缀编辑",
+    url: "/api/system-settings/prompt-prefix",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export interface PrivateSquareStatus {
@@ -86,7 +205,14 @@ export async function loadPrivateSquareStatus(): Promise<PrivateSquareStatus> {
       `Failed to load private square settings: ${response.status}`,
     );
   }
-  return (await response.json()) as PrivateSquareStatus;
+  const data = (await response.json()) as PrivateSquareStatus;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-私密广场查看",
+    url: "/api/system-settings/private-square",
+    returnParam: data,
+  });
+  return data;
 }
 
 export interface PublishSquare {
@@ -112,7 +238,14 @@ export async function loadPublishSquares(): Promise<PublishSquaresSettings> {
   if (!response.ok) {
     throw new Error(`Failed to load publish squares: ${response.status}`);
   }
-  return (await response.json()) as PublishSquaresSettings;
+  const data = (await response.json()) as PublishSquaresSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-发布广场查看",
+    url: "/api/system-settings/publish-squares",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updatePublishSquares(
@@ -132,7 +265,15 @@ export async function updatePublishSquares(
       .catch(() => ({ detail: "Failed to update publish squares" }));
     throw new Error(detail.detail ?? "Failed to update publish squares");
   }
-  return (await response.json()) as PublishSquaresSettings;
+  const data = (await response.json()) as PublishSquaresSettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-发布广场编辑",
+    url: "/api/system-settings/publish-squares",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export type ThemeMode = "light" | "dark" | "lightblue";
@@ -162,7 +303,14 @@ export async function loadAppearanceSettings(): Promise<AppearanceSettings> {
       `Failed to load appearance settings: ${response.status}`,
     );
   }
-  return (await response.json()) as AppearanceSettings;
+  const data = (await response.json()) as AppearanceSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-外观查看",
+    url: "/api/system-settings/appearance",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateAppearanceSettings(
@@ -182,7 +330,15 @@ export async function updateAppearanceSettings(
       .catch(() => ({ detail: "Failed to update appearance" }));
     throw new Error(detail.detail ?? "Failed to update appearance");
   }
-  return (await response.json()) as AppearanceSettings;
+  const data = (await response.json()) as AppearanceSettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-外观编辑",
+    url: "/api/system-settings/appearance",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function loadCitationDisplaySettings(): Promise<CitationDisplaySettings> {
@@ -194,7 +350,14 @@ export async function loadCitationDisplaySettings(): Promise<CitationDisplaySett
       `Failed to load citation display settings: ${response.status}`,
     );
   }
-  return (await response.json()) as CitationDisplaySettings;
+  const data = (await response.json()) as CitationDisplaySettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-引用展示查看",
+    url: "/api/system-settings/citation-display",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function loadLeaderboardSettings(): Promise<LeaderboardSettings> {
@@ -204,7 +367,14 @@ export async function loadLeaderboardSettings(): Promise<LeaderboardSettings> {
   if (!response.ok) {
     throw new Error(`Failed to load leaderboard settings: ${response.status}`);
   }
-  return (await response.json()) as LeaderboardSettings;
+  const data = (await response.json()) as LeaderboardSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-排行榜查看",
+    url: "/api/system-settings/leaderboard",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateLeaderboardSettings(
@@ -224,7 +394,15 @@ export async function updateLeaderboardSettings(
       .catch(() => ({ detail: "Failed to update leaderboard settings" }));
     throw new Error(detail.detail ?? "Failed to update leaderboard settings");
   }
-  return (await response.json()) as LeaderboardSettings;
+  const data = (await response.json()) as LeaderboardSettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-排行榜编辑",
+    url: "/api/system-settings/leaderboard",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateCitationDisplaySettings(
@@ -244,7 +422,15 @@ export async function updateCitationDisplaySettings(
       .catch(() => ({ detail: "Failed to update citation display" }));
     throw new Error(detail.detail ?? "Failed to update citation display");
   }
-  return (await response.json()) as CitationDisplaySettings;
+  const data = (await response.json()) as CitationDisplaySettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-引用展示编辑",
+    url: "/api/system-settings/citation-display",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export interface SkillCompressionSettings {
@@ -259,6 +445,22 @@ export interface SkillCompressionUpdate {
   keep_index_in_prompt?: boolean;
 }
 
+export interface ModelConcurrencySettings {
+  enabled: boolean;
+  default_limit: number;
+  model_limits: Record<string, number>;
+  user_default_limit: number;
+  user_model_limits: Record<string, number>;
+}
+
+export interface ModelConcurrencyUpdate {
+  enabled?: boolean;
+  default_limit?: number;
+  model_limits?: Record<string, number>;
+  user_default_limit?: number;
+  user_model_limits?: Record<string, number>;
+}
+
 export async function loadSkillCompressionSettings(): Promise<SkillCompressionSettings> {
   const response = await apiFetch(
     `${getBackendBaseURL()}/api/system-settings/skill-compression`,
@@ -268,7 +470,61 @@ export async function loadSkillCompressionSettings(): Promise<SkillCompressionSe
       `Failed to load skill compression settings: ${response.status}`,
     );
   }
-  return (await response.json()) as SkillCompressionSettings;
+  const data = (await response.json()) as SkillCompressionSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-技能压缩查看",
+    url: "/api/system-settings/skill-compression",
+    returnParam: data,
+  });
+  return data;
+}
+
+export async function loadModelConcurrencySettings(): Promise<ModelConcurrencySettings> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/system-settings/model-concurrency`,
+  );
+  if (!response.ok) {
+    throw new Error(
+      `Failed to load model concurrency settings: ${response.status}`,
+    );
+  }
+  const data = (await response.json()) as ModelConcurrencySettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-模型并发限制查看",
+    url: "/api/system-settings/model-concurrency",
+    returnParam: data,
+  });
+  return data;
+}
+
+export async function updateModelConcurrencySettings(
+  body: ModelConcurrencyUpdate,
+): Promise<ModelConcurrencySettings> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/system-settings/model-concurrency`,
+    {
+      method: "PUT",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+    },
+  );
+  if (!response.ok) {
+    const detail = await response
+      .json()
+      .catch(() => ({ detail: "Failed to update model concurrency settings" }));
+    throw new Error(detail.detail ?? "Failed to update model concurrency settings");
+  }
+  const data = (await response.json()) as ModelConcurrencySettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-模型并发限制编辑",
+    url: "/api/system-settings/model-concurrency",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateSkillCompressionSettings(
@@ -288,7 +544,15 @@ export async function updateSkillCompressionSettings(
       .catch(() => ({ detail: "Failed to update skill compression" }));
     throw new Error(detail.detail ?? "Failed to update skill compression");
   }
-  return (await response.json()) as SkillCompressionSettings;
+  const data = (await response.json()) as SkillCompressionSettings;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-技能压缩编辑",
+    url: "/api/system-settings/skill-compression",
+    reqParam: body,
+    returnParam: data,
+  });
+  return data;
 }
 
 /** 「按类型聚合」模块（zzJC / zzXD）选中的智能体标签配置（需求 0616 #3/#4）。 */
@@ -306,7 +570,15 @@ export async function loadAgentModuleConfig(
   if (!response.ok) {
     throw new Error(`Failed to load agent module config: ${response.status}`);
   }
-  return (await response.json()) as AgentModuleConfig;
+  const data = (await response.json()) as AgentModuleConfig;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-智能体模块查看",
+    url: `/api/system-settings/agent-modules/${key}`,
+    reqParam: { key },
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updateAgentModuleConfig(
@@ -327,7 +599,15 @@ export async function updateAgentModuleConfig(
       .catch(() => ({ detail: "Failed to update agent module config" }));
     throw new Error(detail.detail ?? "Failed to update agent module config");
   }
-  return (await response.json()) as AgentModuleConfig;
+  const data = (await response.json()) as AgentModuleConfig;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-智能体模块编辑",
+    url: `/api/system-settings/agent-modules/${key}`,
+    reqParam: { key, tag_ids: tagIds },
+    returnParam: data,
+  });
+  return data;
 }
 
 export interface LogSystemSettings {
@@ -343,7 +623,14 @@ export async function loadLogSystemSettings(): Promise<LogSystemSettings> {
   if (!response.ok) {
     throw new Error(`Failed to load log system settings: ${response.status}`);
   }
-  return (await response.json()) as LogSystemSettings;
+  const data = (await response.json()) as LogSystemSettings;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-系统设置-日志系统查看",
+    url: "/api/system-settings/log-system",
+    returnParam: data,
+  });
+  return data;
 }
 
 export async function updatePrivateSquareSettings(
@@ -363,5 +650,14 @@ export async function updatePrivateSquareSettings(
       .catch(() => ({ detail: "Failed to update private square" }));
     throw new Error(detail.detail ?? "Failed to update private square");
   }
-  return (await response.json()) as PrivateSquareStatus;
+  const data = (await response.json()) as PrivateSquareStatus;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-系统设置-私密广场编辑",
+    url: "/api/system-settings/private-square",
+    // omit `password` (secret) from the logged request params
+    reqParam: { enabled: body.enabled, password_set: body.password != null },
+    returnParam: data,
+  });
+  return data;
 }

frontend-web/src/core/system-settings/hooks.ts

@@ -7,6 +7,8 @@ import {
   loadAppearanceSettings,
   loadCitationDisplaySettings,
   loadLeaderboardSettings,
+  loadModelConcurrencySettings,
+  loadPluginManagementSettings,
   loadPrivateSquareStatus,
   loadPromptPrefixSettings,
   loadPublishSquares,
@@ -15,6 +17,8 @@ import {
   updateAppearanceSettings,
   updateCitationDisplaySettings,
   updateLeaderboardSettings,
+  updateModelConcurrencySettings,
+  updatePluginManagementSettings,
   updatePrivateSquareSettings,
   updatePromptPrefixSettings,
   updatePublishSquares,
@@ -22,6 +26,8 @@ import {
   type AppearanceUpdate,
   type CitationDisplayUpdate,
   type LeaderboardSettingsUpdate,
+  type ModelConcurrencyUpdate,
+  type PluginManagementUpdate,
   type PrivateSquareUpdate,
   type PromptPrefixUpdate,
   type PublishSquaresUpdate,
@@ -37,6 +43,8 @@ const APPEARANCE_KEY = ["systemSettings", "appearance"] as const;
 const CITATION_DISPLAY_KEY = ["systemSettings", "citationDisplay"] as const;
 const LEADERBOARD_KEY = ["systemSettings", "leaderboard"] as const;
 const SKILL_COMPRESSION_KEY = ["systemSettings", "skillCompression"] as const;
+const MODEL_CONCURRENCY_KEY = ["systemSettings", "modelConcurrency"] as const;
+const PLUGIN_MANAGEMENT_KEY = ["systemSettings", "pluginManagement"] as const;
 
 export function usePromptPrefixSettings() {
   return useQuery({
@@ -238,6 +246,48 @@ export function useUpdateSkillCompressionSettings() {
   });
 }
 
+export function useModelConcurrencySettings() {
+  return useQuery({
+    queryKey: MODEL_CONCURRENCY_KEY,
+    queryFn: () => loadModelConcurrencySettings(),
+    staleTime: 60_000,
+    refetchOnWindowFocus: false,
+    retry: false,
+  });
+}
+
+export function useUpdateModelConcurrencySettings() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: (body: ModelConcurrencyUpdate) =>
+      updateModelConcurrencySettings(body),
+    onSuccess: (data) => {
+      queryClient.setQueryData(MODEL_CONCURRENCY_KEY, data);
+    },
+  });
+}
+
+export function usePluginManagementSettings() {
+  return useQuery({
+    queryKey: PLUGIN_MANAGEMENT_KEY,
+    queryFn: () => loadPluginManagementSettings(),
+    staleTime: 60_000,
+    refetchOnWindowFocus: false,
+    retry: false,
+  });
+}
+
+export function useUpdatePluginManagementSettings() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: (body: PluginManagementUpdate) =>
+      updatePluginManagementSettings(body),
+    onSuccess: (data) => {
+      queryClient.setQueryData(PLUGIN_MANAGEMENT_KEY, data);
+    },
+  });
+}
+
 export function useLeaderboardSettings() {
   return useQuery({
     queryKey: LEADERBOARD_KEY,

frontend-web/src/core/tags/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 import type {
   Tag,
@@ -22,6 +23,13 @@ export async function listTags(tagType?: TagType): Promise<Tag[]> {
   const res = await apiFetch(`${base()}${query}`);
   if (!res.ok) throw await parseDetail(res, "Failed to list tags");
   const data = (await res.json()) as TagListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-标签-查询",
+    url: `/api/tags${query}`,
+    reqParam: { tagType },
+    returnParam: data.tags,
+  });
   return data.tags;
 }
 
@@ -32,7 +40,15 @@ export async function createTag(input: TagCreateInput): Promise<Tag> {
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to create tag");
-  return (await res.json()) as Tag;
+  const created = (await res.json()) as Tag;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-标签-新增",
+    url: "/api/tags",
+    reqParam: input,
+    returnParam: created,
+  });
+  return created;
 }
 
 export async function updateTag(id: string, input: TagUpdateInput): Promise<Tag> {
@@ -42,7 +58,15 @@ export async function updateTag(id: string, input: TagUpdateInput): Promise<Tag>
     body: JSON.stringify(input),
   });
   if (!res.ok) throw await parseDetail(res, "Failed to update tag");
-  return (await res.json()) as Tag;
+  const updated = (await res.json()) as Tag;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-标签-编辑",
+    url: `/api/tags/${id}`,
+    reqParam: input,
+    returnParam: updated,
+  });
+  return updated;
 }
 
 export async function deleteTag(id: string): Promise<void> {
@@ -50,6 +74,12 @@ export async function deleteTag(id: string): Promise<void> {
     method: "DELETE",
   });
   if (!res.ok) throw await parseDetail(res, "Failed to delete tag");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-标签-删除",
+    url: `/api/tags/${id}`,
+    reqParam: { id },
+  });
 }
 
 export async function getResourceTags(
@@ -61,6 +91,13 @@ export async function getResourceTags(
   );
   if (!res.ok) throw await parseDetail(res, "Failed to load resource tags");
   const data = (await res.json()) as TagListResponse;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-标签-资源标签查看",
+    url: `/api/tags/assignments/${targetType}/${targetId}`,
+    reqParam: { targetType, targetId },
+    returnParam: data.tags,
+  });
   return data.tags;
 }
 
@@ -79,5 +116,12 @@ export async function setResourceTags(
   );
   if (!res.ok) throw await parseDetail(res, "Failed to update resource tags");
   const data = (await res.json()) as TagListResponse;
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-标签-资源标签设置",
+    url: `/api/tags/assignments/${targetType}/${targetId}`,
+    reqParam: { targetType, targetId, tagIds },
+    returnParam: data.tags,
+  });
   return data.tags;
 }

frontend-web/src/core/thread-shares/api.ts

@@ -2,6 +2,7 @@ import type { Message } from "@langchain/langgraph-sdk";
 
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /**
  * Share modes:
@@ -65,7 +66,15 @@ export async function createShare(
     body: JSON.stringify({ thread_id: threadId, mode }),
   });
   if (!response.ok) throw await parseError(response, "创建分享失败");
-  return response.json() as Promise<ThreadShare>;
+  const result = (await response.json()) as ThreadShare;
+  writeYLog({
+    optType: OptType.create,
+    optDetail: "CM助手-全量-会话分享-创建分享",
+    url: baseUrl(),
+    reqParam: { thread_id: threadId, mode },
+    returnParam: { share_code: result.share_code, mode: result.mode },
+  });
+  return result;
 }
 
 /** List the current user's own share links. */
@@ -73,34 +82,57 @@ export async function listShares(): Promise<ThreadShare[]> {
   const response = await apiFetch(baseUrl());
   if (!response.ok) throw await parseError(response, "加载分享列表失败");
   const json = (await response.json()) as { shares: ThreadShare[] };
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-会话分享-查询分享列表",
+    url: baseUrl(),
+    returnParam: { count: json.shares.length },
+  });
   return json.shares;
 }
 
 /** Revoke a share link so it can no longer be previewed or imported. */
 export async function revokeShare(shareCode: string): Promise<void> {
-  const response = await apiFetch(`${baseUrl()}/${encodeURIComponent(shareCode)}`, {
-    method: "DELETE",
-  });
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}`;
+  const response = await apiFetch(url, { method: "DELETE" });
   if (!response.ok) throw await parseError(response, "撤销分享失败");
+  writeYLog({
+    optType: OptType.delete,
+    optDetail: "CM助手-全量-会话分享-撤销分享",
+    url,
+    reqParam: { shareCode },
+  });
 }
 
 /** Preview a share link before importing it. */
 export async function previewShare(shareCode: string): Promise<SharePreview> {
-  const response = await apiFetch(
-    `${baseUrl()}/${encodeURIComponent(shareCode)}/preview`,
-  );
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}/preview`;
+  const response = await apiFetch(url);
   if (!response.ok) throw await parseError(response, "无法读取该分享");
-  return response.json() as Promise<SharePreview>;
+  const result = (await response.json()) as SharePreview;
+  writeYLog({
+    optType: OptType.view,
+    optDetail: "CM助手-全量-会话分享-预览分享",
+    url,
+    reqParam: { shareCode },
+  });
+  return result;
 }
 
 /** Import every conversation behind a share link into the current account. */
 export async function importShare(shareCode: string): Promise<ImportResult> {
-  const response = await apiFetch(
-    `${baseUrl()}/${encodeURIComponent(shareCode)}/import`,
-    { method: "POST" },
-  );
+  const url = `${baseUrl()}/${encodeURIComponent(shareCode)}/import`;
+  const response = await apiFetch(url, { method: "POST" });
   if (!response.ok) throw await parseError(response, "导入失败");
-  return response.json() as Promise<ImportResult>;
+  const result = (await response.json()) as ImportResult;
+  writeYLog({
+    optType: OptType.import,
+    optDetail: "CM助手-全量-会话分享-导入分享",
+    url,
+    reqParam: { shareCode },
+    returnParam: result,
+  });
+  return result;
 }
 
 /**

frontend-web/src/core/threads/hooks.ts

@@ -15,6 +15,7 @@ import { getStoredAuth } from "../auth";
 import { rememberAskTime } from "../chat-timestamps";
 import { getBackendBaseURL, getLangGraphBaseURL } from "../config";
 import { useI18n } from "../i18n/hooks";
+import { OptType, writeYLog } from "../log/y-log";
 import type { FileInMessage } from "../messages/utils";
 import type { LocalSettings } from "../settings";
 import { isThreadRagModeLocked, lockThreadRagMode, useLocalSettings } from "../settings";
@@ -42,9 +43,13 @@ export type ThreadStreamOptions = {
   onToolEnd?: (event: ToolEndEvent) => void;
 };
 
-type SendMessageOptions = {
-  additionalKwargs?: Record<string, unknown>;
-};
+type SendMessageOptions = {
+  additionalKwargs?: Record<string, unknown>;
+};
+
+type ThreadTitleRefreshState = Pick<AgentThreadState, "title"> & {
+  title_provisional?: boolean;
+};
 
 function normalizeStoredRunId(runId: string | null): string | null {
   if (!runId) {
@@ -154,7 +159,7 @@ export async function stopThreadRun(
   }
 }
 
-function getStreamErrorMessage(error: unknown): string {
+function getStreamErrorMessage(error: unknown): string {
   if (typeof error === "string" && error.trim()) {
     return error;
   }
@@ -174,8 +179,31 @@ function getStreamErrorMessage(error: unknown): string {
       return nestedError;
     }
   }
-  return "Request failed.";
-}
+  return "Request failed.";
+}
+
+async function fetchThreadTitleRefreshState(
+  threadId: string,
+  signal?: AbortSignal,
+): Promise<ThreadTitleRefreshState | null> {
+  const response = await apiFetch(
+    `${getBackendBaseURL()}/api/threads/${encodeURIComponent(threadId)}/state`,
+    { signal },
+  );
+  if (!response.ok) {
+    return null;
+  }
+  const json = (await response.json()) as {
+    values?: { title?: string; title_provisional?: boolean };
+  };
+  if (!json.values) {
+    return null;
+  }
+  return {
+    title: json.values.title ?? "",
+    title_provisional: json.values.title_provisional,
+  };
+}
 
 /**
  * Detect "thread not found" / forbidden errors from the LangGraph SDK.
@@ -218,7 +246,42 @@ function isRunNotFoundError(message: string): boolean {
   return /run\s+[\w-]{8,}\s+not\s+found/i.test(message);
 }
 
-function buildCurrentUserLabel(): string {
+/**
+ * 同一会话上一轮还没生成完，又提交了新问题 → 后端返回 409
+ * 「already has an active run」。匹配 HTTP 409、英文兜底文案，或后端已中文化
+ * 的提示，统一映射成一句友好的中文。
+ */
+function isActiveRunConflictError(message: string): boolean {
+  return (
+    /\b409\b/.test(message) ||
+    /already has an active run/i.test(message) ||
+    /还在生成回答/.test(message)
+  );
+}
+
+function isModelConcurrencyLimitError(message: string): boolean {
+  return (
+    /\b429\b/.test(message) ||
+    /并发已达到上限/.test(message) ||
+    /并发调用已达到上限/.test(message) ||
+    /使用人数较多/.test(message) ||
+    /too many requests/i.test(message)
+  );
+}
+
+function friendlySendLimitMessage(message: string): string | null {
+  if (isActiveRunConflictError(message)) {
+    return "当前对话还在生成回答，请等待本轮回复结束，或先点“停止”再发送新的问题。";
+  }
+  if (isModelConcurrencyLimitError(message)) {
+    return /当前账号对该模型/.test(message)
+      ? "当前账号对该模型的并发调用已达到上限，请等待已有回答结束后再试。"
+      : "当前使用人数较多，请稍等一下再试。";
+  }
+  return null;
+}
+
+function buildCurrentUserLabel(): string {
   const auth = getStoredAuth();
   if (!auth) {
     return "未登录";
@@ -231,6 +294,84 @@ function buildCurrentUserLabel(): string {
   return userId ? userId : "未知用户";
 }
 
+/**
+ * 从 `on_chat_model_end` 事件的 output 里尽力取出模型输出文本。
+ *
+ * output 形态可能是 AIMessage（`{ content: string | parts[] }`），也可能是
+ * LangChain 的 `{ generations: [[{ text, message }]] }`。全部容错，取不到返回空串。
+ */
+function textFromChatModelOutput(output: unknown): string {
+  if (output == null) return "";
+  if (typeof output === "string") return output;
+  if (typeof output !== "object") return String(output);
+  const o = output as Record<string, unknown>;
+  if ("content" in o) {
+    const c = o.content;
+    if (typeof c === "string") return c;
+    if (Array.isArray(c)) {
+      const parts = c
+        .map((p) =>
+          p && typeof p === "object" && "text" in p
+            ? String((p as { text?: unknown }).text ?? "")
+            : "",
+        )
+        .filter(Boolean);
+      if (parts.length) return parts.join("");
+    }
+  }
+  if (Array.isArray(o.generations)) {
+    const texts: string[] = [];
+    const collect = (gen: unknown) => {
+      if (Array.isArray(gen)) {
+        gen.forEach(collect);
+        return;
+      }
+      if (gen && typeof gen === "object") {
+        const gg = gen as Record<string, unknown>;
+        if (typeof gg.text === "string" && gg.text) texts.push(gg.text);
+        else if (gg.message) {
+          const t = textFromChatModelOutput(gg.message);
+          if (t) texts.push(t);
+        }
+      }
+    };
+    collect(o.generations);
+    if (texts.length) return texts.join("");
+  }
+  return "";
+}
+
+/**
+ * 从 `on_chat_model_*` 事件的 input 里尽力取出最后一条 user/human 文本，
+ * 作为本次大模型调用的「问题」。input 可能是 `{ messages: BaseMessage[] | BaseMessage[][] }`。
+ */
+function lastHumanFromChatModelInput(input: unknown): string {
+  try {
+    const raw =
+      input && typeof input === "object" && "messages" in input
+        ? (input as { messages?: unknown }).messages
+        : input;
+    const flat: unknown[] = [];
+    const push = (m: unknown) => {
+      if (Array.isArray(m)) m.forEach(push);
+      else if (m != null) flat.push(m);
+    };
+    push(raw);
+    for (let i = flat.length - 1; i >= 0; i--) {
+      const m = flat[i];
+      if (!m || typeof m !== "object") continue;
+      const type = (m as Record<string, unknown>).type ?? (m as Record<string, unknown>).role;
+      if (type === "human" || type === "user") {
+        const text = textFromChatModelOutput(m);
+        if (text) return text;
+      }
+    }
+  } catch {
+    /* 取不到忽略 */
+  }
+  return "";
+}
+
 export function useThreadStream({
   threadId,
   context,
@@ -333,6 +474,28 @@ export function useThreadStream({
           data: event.data,
         });
       }
+      // 操作日志(Y-Log)：每一次大模型调用结束都各上报一条（一次 LLM 调用 = 一条），
+      // 让问答日志尽量「多、全」——一个问答轮次里 lead agent / 子代理的每次模型调用
+      // 都会落一条。门控与失败静默都在 writeYLog 内部处理，绝不影响问答。
+      if (event.event === "on_chat_model_end") {
+        try {
+          const data = (event.data ?? {}) as {
+            input?: unknown;
+            output?: unknown;
+          };
+          const answer = textFromChatModelOutput(data.output);
+          const question = lastHumanFromChatModelInput(data.input);
+          writeYLog({
+            optType: OptType.other,
+            optDetail: "CM助手-全量-智能问答",
+            url: `/api/threads/${threadIdRef.current ?? ""}/runs/stream`,
+            reqParam: { model: event.name ?? "", question },
+            returnParam: { data: answer },
+          });
+        } catch {
+          /* 上报绝不影响问答 */
+        }
+      }
     },
     onUpdateEvent(data) {
       const updates: Array<Partial<AgentThreadState> | null> = Object.values(
@@ -454,8 +617,15 @@ export function useThreadStream({
         }
         return;
       }
-      toast.error(message);
-    },
+      // 上一轮还没结束又发了新问题（409）或并发达到上限（429）：
+      // 给一句明确的中文提示，而不是把原始 HTTP 错误抛给用户。
+      const friendly = friendlySendLimitMessage(message);
+      if (friendly) {
+        toast.info(friendly);
+        return;
+      }
+      toast.error(message);
+    },
     onFinish(state) {
       listeners.current.onFinish?.(state.values);
       void queryClient.invalidateQueries({ queryKey: ["threads", "search"] });
@@ -463,9 +633,12 @@ export function useThreadStream({
   });
 
   // Optimistic messages shown before the server stream responds
-  const [optimisticMessages, setOptimisticMessages] = useState<Message[]>([]);
-  const [isUploading, setIsUploading] = useState(false);
-  const sendInFlightRef = useRef(false);
+  const [optimisticMessages, setOptimisticMessages] = useState<Message[]>([]);
+  const [isUploading, setIsUploading] = useState(false);
+  const [threadValueOverrides, setThreadValueOverrides] = useState<
+    Partial<ThreadTitleRefreshState>
+  >({});
+  const sendInFlightRef = useRef(false);
   // Carries the ask time of an in-flight send until the server-assigned human
   // message id shows up, so we can bind the timestamp to the real id (see the
   // reconciliation effect below). ``known`` is the set of human ids that
@@ -493,12 +666,13 @@ export function useThreadStream({
   // clearing optimistic messages in that case is exactly what made submitted
   // questions visually disappear — the live run that just started would be
   // aborted by the very effect intended to reset stale state.
-  useEffect(() => {
-    if (threadId != null) {
-      // Forward direction: starting or continuing with a real thread.
-      // No reset needed; the upstream useStream will load history for this id.
-      return;
-    }
+  useEffect(() => {
+    if (threadId != null) {
+      // Forward direction: starting or continuing with a real thread.
+      // No reset needed; the upstream useStream will load history for this id.
+      setThreadValueOverrides({});
+      return;
+    }
     const prevThread = threadStreamRef.current;
     if (prevThread?.isLoading) {
       try {
@@ -510,9 +684,88 @@ export function useThreadStream({
     startedRef.current = false;
     sendInFlightRef.current = false;
     prevMsgCountRef.current = 0;
-    setOptimisticMessages([]);
-    setIsUploading(false);
-  }, [threadId]);
+    setOptimisticMessages([]);
+    setIsUploading(false);
+    setThreadValueOverrides({});
+  }, [threadId]);
+
+  useEffect(() => {
+    const activeThreadId = threadIdRef.current ?? onStreamThreadId ?? null;
+    const effectiveTitleProvisional =
+      (threadValueOverrides.title_provisional ??
+        thread.values?.title_provisional) === true;
+
+    if (!activeThreadId || thread.isLoading || !effectiveTitleProvisional) {
+      return;
+    }
+
+    let cancelled = false;
+    let timeoutId: ReturnType<typeof setTimeout> | null = null;
+    const controller = new AbortController();
+
+    const poll = async () => {
+      while (!cancelled) {
+        try {
+          const nextState = await fetchThreadTitleRefreshState(
+            activeThreadId,
+            controller.signal,
+          );
+          if (cancelled || !nextState) {
+            return;
+          }
+
+          setThreadValueOverrides({
+            title: nextState.title,
+            title_provisional: nextState.title_provisional,
+          });
+
+          if (nextState.title) {
+            updateCachedThreadLists(queryClient, (threads) =>
+              threads.map((t) =>
+                t.thread_id === activeThreadId
+                  ? {
+                      ...t,
+                      values: {
+                        ...t.values,
+                        title: nextState.title,
+                        title_provisional: nextState.title_provisional,
+                      },
+                    }
+                  : t,
+              ),
+            );
+          }
+
+          if (nextState.title_provisional !== true) {
+            void queryClient.invalidateQueries({ queryKey: ["threads", "search"] });
+            return;
+          }
+        } catch {
+          return;
+        }
+
+        await new Promise<void>((resolve) => {
+          timeoutId = setTimeout(resolve, 2000);
+        });
+      }
+    };
+
+    void poll();
+
+    return () => {
+      cancelled = true;
+      controller.abort();
+      if (timeoutId) {
+        clearTimeout(timeoutId);
+      }
+    };
+  }, [
+    onStreamThreadId,
+    queryClient,
+    thread.isLoading,
+    thread.values?.title_provisional,
+    threadValueOverrides.title_provisional,
+  ]);
 
   // Clear optimistic when server messages arrive (count increases)
   useEffect(() => {
@@ -765,11 +1018,31 @@ export function useThreadStream({
           },
         );
         void queryClient.invalidateQueries({ queryKey: ["threads", "search"] });
-      } catch (error) {
-        setOptimisticMessages([]);
-        setIsUploading(false);
-        throw error;
-      } finally {
+      } catch (error) {
+        const message =
+          error instanceof Error ? error.message : String(error);
+        const friendly = friendlySendLimitMessage(message);
+        if (friendly) {
+          setOptimisticMessages((messages) => {
+            const human = messages.find((item) => item.type === "human");
+            const kept = human ? [human] : [];
+            return [
+              ...kept,
+              {
+                type: "ai",
+                id: `opt-ai-limit-${Date.now()}`,
+                content: friendly,
+                additional_kwargs: { element: "task" },
+              } as Message,
+            ];
+          });
+          setIsUploading(false);
+          return;
+        }
+        setOptimisticMessages([]);
+        setIsUploading(false);
+        throw error;
+      } finally {
         sendInFlightRef.current = false;
       }
     },
@@ -777,13 +1050,22 @@ export function useThreadStream({
   );
 
   // Merge thread with optimistic messages for display
-  const mergedThread =
-    optimisticMessages.length > 0
-      ? ({
-          ...thread,
-          messages: [...thread.messages, ...optimisticMessages],
-        } as typeof thread)
-      : thread;
+  const mergedValues =
+    Object.keys(threadValueOverrides).length > 0
+      ? {
+          ...thread.values,
+          ...threadValueOverrides,
+        }
+      : thread.values;
+
+  const mergedThread =
+    optimisticMessages.length > 0 || mergedValues !== thread.values
+      ? ({
+          ...thread,
+          values: mergedValues,
+          messages: [...thread.messages, ...optimisticMessages],
+        } as typeof thread)
+      : thread;
 
   // 第 4 个返回值 `onStreamThreadId` = 底层 useStream 当前实际绑定的线程 id（新建/未保存时为 null）。
   // 调用方据此判断「流是否已切到全新线程」，避免在切换会话的那一帧把消息发进上一个会话
@@ -1151,28 +1433,29 @@ export function useRenameThread() {
     mutationFn: async ({
       threadId,
       title,
-    }: {
-      threadId: string;
-      title: string;
-    }) => {
-      await apiClient.threads.updateState(threadId, {
-        values: { title },
-      });
-    },
-    onSuccess(_, { threadId, title }) {
-      updateCachedThreadLists(queryClient, (threads) =>
-        threads.map((t) =>
+    }: {
+      threadId: string;
+      title: string;
+    }) => {
+      await apiClient.threads.updateState(threadId, {
+        values: { title, title_provisional: false },
+      });
+    },
+    onSuccess(_, { threadId, title }) {
+      updateCachedThreadLists(queryClient, (threads) =>
+        threads.map((t) =>
           t.thread_id === threadId
             ? {
                 ...t,
-                values: {
-                  ...t.values,
-                  title,
-                },
-              }
-            : t,
-        ),
-      );
+                values: {
+                  ...t.values,
+                  title,
+                  title_provisional: false,
+                },
+              }
+            : t,
+        ),
+      );
     },
   });
 }

frontend-web/src/core/threads/types.ts

@@ -2,12 +2,13 @@ import type { Message, Thread } from "@langchain/langgraph-sdk";
 
 import type { Todo } from "../todos";
 
-export interface AgentThreadState extends Record<string, unknown> {
-  title: string;
-  messages: Message[];
-  artifacts: string[];
-  todos?: Todo[];
-}
+export interface AgentThreadState extends Record<string, unknown> {
+  title: string;
+  title_provisional?: boolean;
+  messages: Message[];
+  artifacts: string[];
+  todos?: Todo[];
+}
 
 export interface AgentThreadContext extends Record<string, unknown> {
   thread_id: string;

frontend-web/src/core/threads/use-task-threads.ts

@@ -8,6 +8,10 @@
  * 同一个 taskId 可能挂在多条业务链上（rwfx / 3qfx / xdfx 共用任务 id），每条业务用各自的
  * 智能体。传入 ``agentId`` 时额外按 ``metadata.agent_id`` 过滤（后端 metadata 过滤是 AND/子集
  * 匹配），把不同业务的对话列表隔离开——否则三种业务的对话会混在一起。
+ *
+ * xdfx（行动分析）：聊天记录按「行动id」划分——传入 ``actionId`` 时额外按 ``metadata.actionId``
+ * 过滤（同一任务下的不同行动各自一份对话列表）；仍保留 taskId 过滤以命中后端「任务深链对话
+ * 全局共享」的判定（后端据 metadata.taskId 跳过分用户过滤）。
  */
 
 import { useThreadsPage } from "@/core/threads/hooks";
@@ -16,13 +20,16 @@ import type { AgentThread } from "@/core/threads/types";
 export function useTaskThreads(
   taskId: string | null | undefined,
   agentId?: string | null | undefined,
+  actionId?: string | null | undefined,
 ) {
   const enabled = !!taskId;
   // 任务工作区只在有 taskId 时渲染；无 taskId 时传一个不可能命中的过滤，返回空列表。
   const metadata = enabled
-    ? agentId
-      ? { taskId, agent_id: agentId }
-      : { taskId }
+    ? {
+        taskId,
+        ...(actionId ? { actionId } : {}),
+        ...(agentId ? { agent_id: agentId } : {}),
+      }
     : { taskId: "__none__" };
   const query = useThreadsPage({ page: 1, pageSize: 100, metadata });
   const threads: AgentThread[] = enabled ? (query.data?.threads ?? []) : [];

frontend-web/src/core/threads/utils.ts

@@ -81,6 +81,32 @@ export function titleOfThread(thread: AgentThread, fallback = "Untitled") {
   return fallback;
 }
 
+/**
+ * 智能体创建过程产生的「引导会话」(bootstrap)。这类会话用 metadata.thread_type
+ * === "bootstrap" 标记，点击后应回到「创建智能体」页继续，而不是普通问答页。
+ */
+export function isBootstrapThread(thread: {
+  metadata?: Record<string, unknown> | null;
+}): boolean {
+  return thread.metadata?.thread_type === "bootstrap";
+}
+
+/**
+ * bootstrap 会话点击后回到「创建智能体」页并恢复该会话。该页只挂在
+ * /page/workspace 下（见 WorkspaceRoutes 的 agents/new/:thread_id），故路径固定，
+ * 不随当前 route base 变化。
+ */
+export function bootstrapResumePath(threadId: string): string {
+  return `/page/workspace/agents/new/${threadId}`;
+}
+
+/** 列表项点击目标：bootstrap 会话回创建页恢复，其余走普通问答路由。 */
+export function listPathOfThread(thread: AgentThread): string {
+  return isBootstrapThread(thread)
+    ? bootstrapResumePath(thread.thread_id)
+    : pathOfThread(thread);
+}
+
 export function isThreadPinned(thread: AgentThread): boolean {
   return (thread.metadata as Record<string, unknown> | null)?.is_pinned === true;
 }

frontend-web/src/core/tool-metrics/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** Coarse failure buckets, mirrored from the backend classifier. */
 export const TOOL_ERROR_CATEGORIES = [
@@ -98,39 +99,58 @@ function buildQuery(filters: ToolMetricsListQuery): string {
 export async function loadToolMetrics(
   query: ToolMetricsListQuery,
 ): Promise<ToolMetricsListResponse> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/tool-metrics${buildQuery(query)}`,
-  );
+  const url = `${getBackendBaseURL()}/api/admin/tool-metrics${buildQuery(query)}`;
+  const response = await apiFetch(url);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to load tool metrics");
   }
-  return (await response.json()) as ToolMetricsListResponse;
+  const result = (await response.json()) as ToolMetricsListResponse;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-工具指标-查询调用列表",
+    url,
+    reqParam: query,
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }
 
 export async function loadToolMetricsSummary(
   filters: ToolMetricsFilters,
 ): Promise<ToolMetricsSummary> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/tool-metrics/summary${buildQuery(filters)}`,
-  );
+  const url = `${getBackendBaseURL()}/api/admin/tool-metrics/summary${buildQuery(filters)}`;
+  const response = await apiFetch(url);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to load tool metrics summary");
   }
-  return (await response.json()) as ToolMetricsSummary;
+  const result = (await response.json()) as ToolMetricsSummary;
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-工具指标-查询汇总统计",
+    url,
+    reqParam: filters,
+    returnParam: { total: result.total, error_total: result.error_total },
+  });
+  return result;
 }
 
 export async function downloadToolMetricsExcel(
   filters: ToolMetricsFilters,
 ): Promise<void> {
-  const response = await apiFetch(
-    `${getBackendBaseURL()}/api/admin/tool-metrics/export${buildQuery(filters)}`,
-  );
+  const requestUrl = `${getBackendBaseURL()}/api/admin/tool-metrics/export${buildQuery(filters)}`;
+  const response = await apiFetch(requestUrl);
   if (!response.ok) {
     const detail = await response.json().catch(() => ({ detail: response.statusText }));
     throw new Error(detail.detail ?? "Failed to export tool metrics");
   }
+  writeYLog({
+    optType: OptType.export,
+    optDetail: "CM助手-全量-工具指标-导出Excel",
+    url: requestUrl,
+    reqParam: filters,
+  });
   const blob = await response.blob();
   const url = URL.createObjectURL(blob);
   const filename = (() => {

frontend-web/src/core/user-preferences/index.ts

@@ -2,6 +2,7 @@ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 /** Per-user UI preferences, bound to the account (stored server-side). */
 export interface UserPreferences {
@@ -36,7 +37,15 @@ async function updateUserPreferences(
     throw new Error(err.detail ?? `Failed to update preferences: ${res.statusText}`);
   }
   const data = (await res.json()) as Partial<UserPreferences>;
-  return { hide_admin_prompt_prefix: !!data.hide_admin_prompt_prefix };
+  const result = { hide_admin_prompt_prefix: !!data.hide_admin_prompt_prefix };
+  writeYLog({
+    optType: OptType.edit,
+    optDetail: "CM助手-全量-用户偏好-编辑",
+    url: "/api/user-preferences",
+    reqParam: input,
+    returnParam: result,
+  });
+  return result;
 }
 
 /** Reactive current-user preferences (server-backed, follows the account). */

frontend-web/src/core/user-qa/api.ts

@@ -1,5 +1,6 @@
 import { apiFetch } from "@/core/api";
 import { getBackendBaseURL } from "@/core/config";
+import { OptType, writeYLog } from "@/core/log/y-log";
 
 export interface UserQaItem {
   run_id: string;
@@ -40,8 +41,14 @@ export async function listMyQa(
   });
   const query = (params.q ?? "").trim();
   if (query) search.set("q", query);
-  return parse(
-    await apiFetch(`${getBackendBaseURL()}/api/users/me/qa?${search}`),
-    "Failed to load my Q&A",
-  );
+  const url = `${getBackendBaseURL()}/api/users/me/qa?${search}`;
+  const result = await parse<UserQaPageResponse>(await apiFetch(url), "Failed to load my Q&A");
+  writeYLog({
+    optType: OptType.search,
+    optDetail: "CM助手-全量-用户问答-查询我的问答",
+    url,
+    reqParam: params,
+    returnParam: { total: result.total, count: result.items.length },
+  });
+  return result;
 }

frontend-web/src/open-canvas/api/ai-writing-sessions.ts

@@ -82,6 +82,27 @@ export async function renameAIWritingSession(id: string, title: string): Promise
   return resp.json();
 }
 
+/**
+ * 更新历史会话的成稿正文（历史回看时用户在右侧编辑器里直接修改并保存）。
+ * draftTitle 省略时后端不动原标题。
+ */
+export async function updateAIWritingDraft(
+  id: string,
+  draftMarkdown: string,
+  draftTitle?: string,
+): Promise<AIWritingSessionSummary> {
+  const resp = await apiFetch(`${BASE()}/${id}/draft`, {
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      draft_markdown: draftMarkdown,
+      ...(draftTitle === undefined ? {} : { draft_title: draftTitle }),
+    }),
+  });
+  if (!resp.ok) throw new Error(`保存修改失败: ${resp.status}`);
+  return resp.json();
+}
+
 export async function deleteAIWritingSession(id: string): Promise<void> {
   const resp = await apiFetch(`${BASE()}/${id}`, { method: 'DELETE' });
   if (!resp.ok) throw new Error(`删除失败: ${resp.status}`);

frontend-web/src/open-canvas/api/rewrite.ts

@@ -1,7 +1,7 @@
 import { apiFetch } from "@/core/api/fetch-client";
 import { getBackendBaseURL } from "@/core/config";
 
-export type RewriteAction = "polish" | "expand" | "shorten" | "tone";
+export type RewriteAction = "polish" | "expand" | "shorten" | "tone" | "imitate";
 export type RewriteTone =
   | "professional"
   | "casual"
@@ -17,6 +17,8 @@ export interface RewriteRequest {
   modelName?: string;
   surroundingContext?: { before?: string; after?: string };
   customInstruction?: string;
+  /** 仿写参考范文（action="imitate" 时使用）：AI 模仿其文风/句式/语气改写所选文字。 */
+  referenceText?: string;
   followUpInstruction?: string;
   previousResult?: string;
 }

frontend-web/src/open-canvas/components/ai-writing/AIWritingDraftPanel.tsx

@@ -41,10 +41,23 @@ export function AIWritingDraftPanel() {
   const showCompletedDraftView = isDraftEditable || isHistoryMode;
 
   const writingStatus = writing?.state.status;
+  const streamingSectionCount = writing?.state.streamingDraftSections.length ?? 0;
+
+  // 按用户意见修改中、且重写流还没开始（无任何流式章节）：右侧先恢复初始空占位，
+  // 把旧稿清掉；一旦重写流式 chunk 到达（streamingDraftSections 非空）就走下面的
+  // 流式预览，实时展示重写过程；draft_ready 后 isRevising 置回 false 显示新成稿。
+  if (writing?.state.isRevising && streamingSectionCount === 0) {
+    return (
+      <div className="h-full bg-muted/10 border-l">
+        <DraftWaitingPlaceholder />
+      </div>
+    );
+  }
+
   // 仅当章节仍在累积时走流式 Markdown；draft_ready 清空 sections 后即使 status 尚未切走也进画布
   const isActivelyStreamingDraft =
     (writingStatus === 'writing_draft' || writingStatus === 'revising') &&
-    (writing?.state.streamingDraftSections.length ?? 0) > 0;
+    streamingSectionCount > 0;
 
   const streamingMarkdown = isActivelyStreamingDraft && writing
     ? assembleStreamingDraftMarkdown(
@@ -102,7 +115,8 @@ export function AIWritingDraftPanel() {
           <TextArtifactRenderer
             content={textContent}
             isStreaming={!showCompletedDraftView}
-            readOnly={isHistoryMode}
+            readOnly={false}
+            onSaveDraft={isHistoryMode ? history?.saveHistoryDraft : undefined}
           />
         </div>
       </div>

frontend-web/src/open-canvas/components/ai-writing/AIWritingForm.tsx

@@ -3,6 +3,7 @@ import { PenLine, SlidersHorizontal } from 'lucide-react';
 
 import { Button } from '@/components/ui/button';
 import { Textarea } from '@/components/ui/textarea';
+import { cn } from '@/lib/utils';
 import {
   Select,
   SelectContent,
@@ -39,11 +40,12 @@ const INPUT_CLASS =
 
 const DEFAULT_KEYWORD_COUNT = 1;
 const DEFAULT_AUDIENCE = '普通读者';
-type MaterialSource = 'general' | 'notebook';
+type MaterialSource = 'general' | 'knowledge_base' | 'notebook';
 const MAX_INTENT_LENGTH = 500;
 
 const MATERIAL_SOURCE_OPTIONS: Array<{ value: MaterialSource; label: string; desc: string }> = [
   { value: 'general', label: '通用检索', desc: '用素材收集专家配置的技能检索（默认：知识库检索）' },
+  { value: 'knowledge_base', label: '知识库检索', desc: '直连内网知识库检索接口，不走技能编排' },
   { value: 'notebook', label: '我的空间', desc: '从空间中检索素材' },
 ];
 
@@ -65,7 +67,9 @@ export function AIWritingForm({
     audience, setAudience,
     wordCountInput, setWordCountInput,
     strictMode, setStrictMode,
+    addReferences, setAddReferences,
     materialSource, setMaterialSource,
+    skipResearch, setSkipResearch,
     // 笔记来源（search_space_id + document_id 列表）已上提到 WritingFormContext，
     // 以便左栏「笔记本」点击可直接设为素材来源（需求 0616 #5）。
     selectedNotebookId, setSelectedNotebookId,
@@ -163,12 +167,16 @@ export function AIWritingForm({
         : audience.trim() || DEFAULT_AUDIENCE,
       wordCountTarget: wordCount,
       keywordCount: DEFAULT_KEYWORD_COUNT,
-      writingMode: hideAdvancedFields ? 'loose' : strictMode ? 'strict' : 'loose',
-      materialSource: materialSource,
+      // 跳过素材收集时强制 loose（无素材可严格依据，后端也会强制）
+      writingMode: skipResearch ? 'loose' : hideAdvancedFields ? 'loose' : strictMode ? 'strict' : 'loose',
+      addReferences,
+      skipResearch,
+      // 跳过素材收集时检索类型无意义，归一为 general
+      materialSource: skipResearch ? 'general' : materialSource,
       modelName: selectedModel?.name || modelName || undefined,
-      // 只有选了"我的空间"才传笔记参数
-      noteSearchSpaceId: materialSource === 'notebook' ? (selectedNotebookId ?? undefined) : undefined,
-      noteSourceIds: materialSource === 'notebook' && selectedNotebookId != null ? selectedDocumentIds : undefined,
+      // 只有选了"我的空间"且未跳过素材收集才传笔记参数
+      noteSearchSpaceId: !skipResearch && materialSource === 'notebook' ? (selectedNotebookId ?? undefined) : undefined,
+      noteSourceIds: !skipResearch && materialSource === 'notebook' && selectedNotebookId != null ? selectedDocumentIds : undefined,
     });
   }
 
@@ -192,7 +200,7 @@ export function AIWritingForm({
             </span>
           </div>
           <Textarea
-            placeholder="描述你想写的文章，例如：写一篇分析今年 AI 大模型发展趋势的文章，重点关注国内企业的布局..."
+            placeholder="描述你想写的文章"
             value={intent}
             onChange={(e) => setIntent(e.target.value)}
             disabled={disabled}
@@ -276,6 +284,25 @@ export function AIWritingForm({
           </div>
         </div>
 
+        {/* 不收集素材，直接用通用知识写作 */}
+        <div className="mt-4 flex items-start gap-2 rounded-xl border border-[#e8dedd] bg-[#f9f5f5] px-3 py-3 dark:border-[#1B477E] dark:bg-[#022248]/40">
+          <input
+            type="checkbox"
+            id="skip-research"
+            checked={skipResearch}
+            onChange={(e) => setSkipResearch(e.target.checked)}
+            disabled={disabled}
+            className="mt-0.5 size-3.5 shrink-0 cursor-pointer accent-primary"
+          />
+          <label htmlFor="skip-research" className="cursor-pointer select-none">
+            <span className="text-sm font-medium text-foreground/90">不收集素材，直接用通用知识写作</span>
+            <p className="mt-0.5 text-xs leading-relaxed text-muted-foreground/80">
+              勾选后跳过素材检索阶段（不弹素材确认），AI 直接用通用知识规划大纲并写作；检索类型与「严格依据素材」将被忽略。
+            </p>
+          </label>
+        </div>
+
+        {!skipResearch && (
         <div className="mt-4 space-y-2">
           <label className={FIELD_LABEL_CLASS}>检索类型</label>
           <Select
@@ -352,6 +379,7 @@ export function AIWritingForm({
             </div>
           )}
         </div>
+        )}
 
         <div className="mt-4 space-y-2">
           <label className={FIELD_LABEL_CLASS}>写作模型</label>
@@ -381,6 +409,23 @@ export function AIWritingForm({
           </Select>
         </div>
 
+        <div className="mt-4 flex items-start gap-2 rounded-xl border border-[#e8dedd] bg-[#f9f5f5] px-3 py-3 dark:border-[#1B477E] dark:bg-[#022248]/40">
+          <input
+            type="checkbox"
+            id="add-references"
+            checked={addReferences}
+            onChange={(e) => setAddReferences(e.target.checked)}
+            disabled={disabled}
+            className="mt-0.5 size-3.5 shrink-0 cursor-pointer accent-primary"
+          />
+          <label htmlFor="add-references" className="cursor-pointer select-none">
+            <span className="text-sm font-medium text-foreground/90">添加参考文献</span>
+            <p className="mt-0.5 text-xs leading-relaxed text-muted-foreground/80">
+              开启后，正文引用素材处自动加角标 [n]，文末按出现顺序生成「参考文献」列表（像论文一样）。
+            </p>
+          </label>
+        </div>
+
         <Button
           type="submit"
           disabled={disabled || !intent.trim()}
@@ -397,15 +442,17 @@ export function AIWritingForm({
             <input
               type="checkbox"
               id="strict-mode"
-              checked={strictMode}
+              checked={strictMode && !skipResearch}
               onChange={(e) => setStrictMode(e.target.checked)}
-              disabled={disabled}
-              className="mt-0.5 size-3.5 shrink-0 cursor-pointer accent-primary"
+              disabled={disabled || skipResearch}
+              className="mt-0.5 size-3.5 shrink-0 cursor-pointer accent-primary disabled:cursor-not-allowed"
             />
-            <label htmlFor="strict-mode" className="cursor-pointer select-none">
+            <label htmlFor="strict-mode" className={cn('select-none', skipResearch ? 'cursor-not-allowed opacity-50' : 'cursor-pointer')}>
               <span className="text-sm font-medium text-foreground/90">严格依据素材写作</span>
               <p className="mt-0.5 text-xs leading-relaxed text-muted-foreground/80">
-                勾选后作家只依据检索素材写作，素材不足以支撑某章节时会暂停询问你；不勾选则可结合通用知识补充论述。
+                {skipResearch
+                  ? '已选「不收集素材」，本项不适用：将直接用通用知识写作。'
+                  : '勾选后作家只依据检索素材写作，素材不足以支撑某章节时会暂停询问你；不勾选则可结合通用知识补充论述。'}
               </p>
             </label>
           </div>

frontend-web/src/open-canvas/components/ai-writing/AIWritingHistoryDropdown.tsx

@@ -6,7 +6,8 @@ import { cn } from '@/lib/utils';
 import type { AIWritingSessionSummary } from '../../api/ai-writing-sessions';
 
 export const STATUS_LABELS: Record<string, { label: string; color: string }> = {
-  in_progress: { label: '进行中', color: 'text-blue-500' },
+  // 刷新=重置后 in_progress 会话已无活进程，显示中性「未完成」而非「进行中」，避免歧义。
+  in_progress: { label: '未完成', color: 'text-slate-400' },
   // 后台挂起中：后端正自动驱动到定稿（离页/刷新/切号不打断）。
   background:   { label: '挂起中', color: 'text-sky-500' },
   draft_ready:  { label: '草稿', color: 'text-amber-500' },

frontend-web/src/open-canvas/components/ai-writing/AIWritingHistoryView.tsx

@@ -1,87 +1,370 @@
 import { useMemo } from 'react';
-import { CheckCircle2, ChevronRight, FileText, Search, PenLine, ClipboardEdit, Star } from 'lucide-react';
 
-import type { AIWritingSessionSummary, CompletedInterventionRecord } from '../../api/ai-writing-sessions';
+import type { AIWritingSessionSummary } from '../../api/ai-writing-sessions';
 import {
   normalizeProgressDict,
   normalizeMaterial,
   normalizeOutline,
   normalizeReviewResult,
 } from '../../hooks/useAIWritingStream';
-import type { CompletedIntervention } from '../../types/ai-writing';
+import type { CompletedIntervention, ProgressEvent, ReviewResult } from '../../types/ai-writing';
+import { countArticleWords } from '../../utils/wordCount';
 import { AIWritingTimeline } from './AIWritingTimeline';
 
-/**
- * 归一化一条 completedIntervention（后台挂起重建的干预记录里素材/大纲/审核数据是
- * snake_case，前端干预卡期望 camelCase）。对前端实时存的 camelCase 记录幂等。
- */
-function normalizeCompletedIntervention(rec: Record<string, unknown>): CompletedIntervention {
-  const out: Record<string, unknown> = { ...rec };
-  out.pausePoint = rec.pausePoint ?? rec.pause_point;
+const PAUSE_POINTS = new Set<CompletedIntervention['pausePoint']>([
+  'material_confirm',
+  'outline_confirm',
+  'draft_confirm',
+  'review_confirm',
+  'section_help',
+]);
+
+const PAUSE_MESSAGES: Record<CompletedIntervention['pausePoint'], string> = {
+  material_confirm: '素材收集专家已完成素材搜集，请确认素材后继续。',
+  outline_confirm: '作家已完成大纲规划，请确认或编辑大纲后继续。',
+  draft_confirm: '草稿已完成，请确认或给出修改意见。',
+  review_confirm: '编辑认为文章需要修改，请决定下一步操作。',
+  section_help: '部分章节缺少足够素材支撑写作，请决定如何处理。',
+};
+
+interface TimelineSnapshot {
+  materials?: CompletedIntervention['materials'];
+  outline?: CompletedIntervention['outline'];
+  draftTitle?: string;
+  draftWordCount?: number;
+  reviewResult?: ReviewResult | null;
+}
+
+function asPausePoint(value: unknown): CompletedIntervention['pausePoint'] | null {
+  const pausePoint = String(value ?? '');
+  return PAUSE_POINTS.has(pausePoint as CompletedIntervention['pausePoint'])
+    ? (pausePoint as CompletedIntervention['pausePoint'])
+    : null;
+}
+
+function normalizeCompletedIntervention(rec: Record<string, unknown>): CompletedIntervention | null {
+  const pausePoint = asPausePoint(rec.pausePoint ?? rec.pause_point);
+  if (!pausePoint) return null;
+
+  const out: CompletedIntervention = {
+    pausePoint,
+    action: String(rec.action ?? defaultActionForPause(pausePoint)),
+  };
+
   if (Array.isArray(rec.materials)) {
     out.materials = (rec.materials as Record<string, unknown>[]).map(normalizeMaterial);
   }
-  if (rec.outline) out.outline = normalizeOutline(rec.outline);
-  const rr = rec.reviewResult ?? rec.review_result;
-  if (rr) out.reviewResult = normalizeReviewResult(rr);
-  if (out.draftTitle == null && rec.draft_title != null) out.draftTitle = rec.draft_title;
-  if (out.draftWordCount == null && rec.draft_word_count != null) out.draftWordCount = rec.draft_word_count;
-  return out as unknown as CompletedIntervention;
+
+  const outline = normalizeOutline(rec.outline);
+  if (outline) out.outline = outline;
+
+  const reviewResult = normalizeReviewResult(rec.reviewResult ?? rec.review_result);
+  if (reviewResult) out.reviewResult = reviewResult;
+
+  const draftTitle = rec.draftTitle ?? rec.draft_title;
+  if (typeof draftTitle === 'string' && draftTitle.trim()) out.draftTitle = draftTitle;
+
+  const draftWordCount = Number(rec.draftWordCount ?? rec.draft_word_count);
+  if (Number.isFinite(draftWordCount) && draftWordCount > 0) {
+    out.draftWordCount = draftWordCount;
+  }
+
+  const userInput =
+    rec.userInput ??
+    rec.user_input ??
+    rec.userQuery ??
+    rec.user_query ??
+    rec.outlineFeedback ??
+    rec.outline_feedback ??
+    rec.userRevisionNotes ??
+    rec.user_revision_notes;
+  if (typeof userInput === 'string' && userInput.trim()) out.userInput = userInput;
+
+  return out;
 }
 
-const PAUSE_LABELS: Record<string, string> = {
-  material_confirm: '素材确认',
-  outline_confirm:  '大纲确认',
-  draft_confirm:    '草稿确认',
-  review_confirm:   '编辑意见处理',
-};
+function normalizeInterventionList(records: unknown): CompletedIntervention[] {
+  if (!Array.isArray(records)) return [];
+  return records
+    .map((rec) => (
+      rec && typeof rec === 'object'
+        ? normalizeCompletedIntervention(rec as Record<string, unknown>)
+        : null
+    ))
+    .filter((rec): rec is CompletedIntervention => rec != null);
+}
 
-const ACTION_LABELS: Record<string, string> = {
-  approve:        '已批准',
-  re_search:      '重新搜索',
-  re_outline:     '重新规划',
-  finalize:       '直接定稿',
-  to_editor:      '提交审核',
-  user_revise:    '手动修改',
-  accept_review:  '接受意见',
-  force_finalize: '强制定稿',
-};
+function defaultActionForPause(pausePoint: CompletedIntervention['pausePoint']): string {
+  switch (pausePoint) {
+    case 'draft_confirm':
+      return 'to_editor';
+    case 'review_confirm':
+      return 'accept_review';
+    case 'section_help':
+      return 'section_help';
+    default:
+      return 'confirm';
+  }
+}
 
-const PAUSE_ICONS: Record<string, React.ElementType> = {
-  material_confirm: Search,
-  outline_confirm:  PenLine,
-  draft_confirm:    FileText,
-  review_confirm:   ClipboardEdit,
-};
+function classifyResumeEvent(message: string): Pick<CompletedIntervention, 'pausePoint' | 'action'> | null {
+  const m = message || '';
+  if (m.includes('确认素材')) return { pausePoint: 'material_confirm', action: 'confirm' };
+  if (m.includes('匹配技能检索') || m.includes('重新检索') || m.includes('重新搜索')) {
+    return { pausePoint: 'material_confirm', action: 're_search' };
+  }
+  if (m.includes('确认大纲')) return { pausePoint: 'outline_confirm', action: 'confirm' };
+  if (m.includes('重新规划大纲')) return { pausePoint: 'outline_confirm', action: 're_outline' };
+  if (m.includes('提交编辑审核')) return { pausePoint: 'draft_confirm', action: 'to_editor' };
+  if (m.includes('强制定稿')) return { pausePoint: 'review_confirm', action: 'force_finalize' };
+  if (m.includes('确认定稿')) return { pausePoint: 'draft_confirm', action: 'finalize' };
+  if (m.includes('按用户意见重写')) return { pausePoint: 'draft_confirm', action: 'user_revise' };
+  if (m.includes('按编辑意见重写')) return { pausePoint: 'review_confirm', action: 'accept_review' };
+  if (m.includes('补充检索素材')) return { pausePoint: 'section_help', action: 'supplement' };
+  if (m.includes('继续写作')) return { pausePoint: 'section_help', action: 'loose' };
+  return null;
+}
 
-function InterventionTimelineItem({ record, isLast }: { record: CompletedInterventionRecord; isLast: boolean }) {
-  const Icon = PAUSE_ICONS[record.pausePoint] ?? CheckCircle2;
-  const ts = record.timestamp
-    ? new Date(record.timestamp).toLocaleString('zh-CN', { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' })
-    : '';
+function actionFromNextResume(
+  pausePoint: CompletedIntervention['pausePoint'],
+  events: ProgressEvent[],
+  startIndex: number,
+): string {
+  for (let i = startIndex; i < events.length; i += 1) {
+    const event = events[i];
+    if (event.type === 'await_user') break;
+    if (event.type !== 'resumed') continue;
+    const classified = classifyResumeEvent(event.message);
+    if (classified?.pausePoint === pausePoint) return classified.action;
+    break;
+  }
+  return defaultActionForPause(pausePoint);
+}
 
-  return (
-    <div className="flex gap-3">
-      <div className="flex flex-col items-center">
-        <div className="w-6 h-6 rounded-full bg-primary/10 flex items-center justify-center shrink-0">
-          <Icon className="w-3 h-3 text-primary" />
-        </div>
-        {!isLast && <div className="w-px flex-1 bg-border/60 mt-1" />}
-      </div>
-      <div className="pb-4 min-w-0 flex-1">
-        <div className="flex items-center gap-2">
-          <span className="text-xs font-medium">
-            {PAUSE_LABELS[record.pausePoint] ?? record.pausePoint}
-          </span>
-          <ChevronRight className="w-3 h-3 text-muted-foreground" />
-          <span className="text-xs text-primary font-medium">
-            {ACTION_LABELS[record.action] ?? record.action}
-          </span>
-        </div>
-        {ts && <p className="text-[10px] text-muted-foreground mt-0.5">{ts}</p>}
-      </div>
-    </div>
-  );
+function materialsFromEvent(event: ProgressEvent | undefined): CompletedIntervention['materials'] | undefined {
+  if (!event) return undefined;
+  if (event.materials?.length) return event.materials;
+  const raw = event.pauseContext?.materials;
+  return Array.isArray(raw)
+    ? raw.map((item) => normalizeMaterial(item as Record<string, unknown>))
+    : undefined;
+}
+
+function outlineFromEvent(event: ProgressEvent | undefined): CompletedIntervention['outline'] | undefined {
+  if (!event) return undefined;
+  if (event.outline) return event.outline;
+  const outline = normalizeOutline(event.pauseContext?.outline);
+  return outline ?? undefined;
+}
+
+function reviewFromEvent(event: ProgressEvent | undefined): ReviewResult | null | undefined {
+  if (!event) return undefined;
+  if (event.reviewResult) return event.reviewResult;
+  return normalizeReviewResult(event.pauseContext?.reviewResult ?? event.pauseContext?.review_result) ?? undefined;
+}
+
+function updateSnapshot(snapshot: TimelineSnapshot, event: ProgressEvent): void {
+  if (event.type === 'materials_ready' && event.materials) {
+    snapshot.materials = event.materials;
+  }
+  if (event.type === 'outline_ready' && event.outline) {
+    snapshot.outline = event.outline;
+  }
+  if (event.type === 'draft_ready') {
+    if (event.draftTitle) snapshot.draftTitle = event.draftTitle;
+    if (event.draftMarkdown) snapshot.draftWordCount = countArticleWords(event.draftMarkdown);
+  }
+  if (event.type === 'review_ready' && event.reviewResult) {
+    snapshot.reviewResult = event.reviewResult;
+  }
+}
+
+function enrichIntervention(
+  record: CompletedIntervention,
+  sourceEvent: ProgressEvent | undefined,
+  snapshot: TimelineSnapshot,
+  sessionDraftTitle: string | null,
+  sessionDraftMarkdown: string | null,
+  sessionReviewResult: ReviewResult | null,
+): CompletedIntervention {
+  const enriched: CompletedIntervention = { ...record };
+
+  if (record.pausePoint === 'material_confirm') {
+    enriched.materials = record.materials?.length
+      ? record.materials
+      : (materialsFromEvent(sourceEvent) ?? snapshot.materials ?? []);
+  }
+
+  if (record.pausePoint === 'outline_confirm') {
+    enriched.outline = record.outline ?? outlineFromEvent(sourceEvent) ?? snapshot.outline;
+  }
+
+  if (record.pausePoint === 'draft_confirm') {
+    enriched.draftTitle =
+      record.draftTitle ??
+      sourceEvent?.draftTitle ??
+      snapshot.draftTitle ??
+      sessionDraftTitle ??
+      undefined;
+    enriched.draftWordCount =
+      record.draftWordCount ??
+      snapshot.draftWordCount ??
+      (sessionDraftMarkdown ? countArticleWords(sessionDraftMarkdown) : undefined);
+    enriched.reviewResult =
+      record.reviewResult ??
+      reviewFromEvent(sourceEvent) ??
+      snapshot.reviewResult ??
+      sessionReviewResult ??
+      undefined;
+  }
+
+  if (record.pausePoint === 'review_confirm') {
+    enriched.reviewResult =
+      record.reviewResult ??
+      reviewFromEvent(sourceEvent) ??
+      snapshot.reviewResult ??
+      sessionReviewResult ??
+      undefined;
+  }
+
+  return enriched;
+}
+
+function synthesizeInterventions(
+  events: ProgressEvent[],
+  sessionDraftTitle: string | null,
+  sessionDraftMarkdown: string | null,
+  sessionReviewResult: ReviewResult | null,
+): CompletedIntervention[] {
+  const records: CompletedIntervention[] = [];
+  const snapshot: TimelineSnapshot = {
+    draftTitle: sessionDraftTitle ?? undefined,
+    draftWordCount: sessionDraftMarkdown ? countArticleWords(sessionDraftMarkdown) : undefined,
+    reviewResult: sessionReviewResult,
+  };
+  const hasAwaitUser = events.some((event) => event.type === 'await_user');
+
+  for (let i = 0; i < events.length; i += 1) {
+    const event = events[i];
+
+    if (event.type === 'await_user') {
+      const pausePoint = asPausePoint(event.pausePoint);
+      if (pausePoint) {
+        const record: CompletedIntervention = {
+          pausePoint,
+          action: actionFromNextResume(pausePoint, events, i + 1),
+        };
+        records.push(
+          enrichIntervention(
+            record,
+            event,
+            snapshot,
+            sessionDraftTitle,
+            sessionDraftMarkdown,
+            sessionReviewResult,
+          ),
+        );
+      }
+    } else if (!hasAwaitUser && event.type === 'resumed') {
+      const classified = classifyResumeEvent(event.message);
+      if (classified) {
+        records.push(
+          enrichIntervention(
+            classified,
+            event,
+            snapshot,
+            sessionDraftTitle,
+            sessionDraftMarkdown,
+            sessionReviewResult,
+          ),
+        );
+      }
+    }
+
+    updateSnapshot(snapshot, event);
+  }
+
+  return records;
+}
+
+function mergeIntervention(primary: CompletedIntervention, fallback: CompletedIntervention): CompletedIntervention {
+  const defaultAction = defaultActionForPause(primary.pausePoint);
+  const action = primary.action === defaultAction && fallback.action
+    ? fallback.action
+    : (primary.action || fallback.action);
+
+  return {
+    pausePoint: primary.pausePoint,
+    action,
+    userInput: primary.userInput ?? fallback.userInput,
+    materials: primary.materials?.length ? primary.materials : fallback.materials,
+    outline: primary.outline ?? fallback.outline,
+    draftTitle: primary.draftTitle ?? fallback.draftTitle,
+    draftWordCount: primary.draftWordCount ?? fallback.draftWordCount,
+    reviewResult: primary.reviewResult ?? fallback.reviewResult,
+  };
+}
+
+function mergeInterventionLists(
+  synthesized: CompletedIntervention[],
+  transcriptRecords: CompletedIntervention[],
+  sessionRecords: CompletedIntervention[],
+): CompletedIntervention[] {
+  const max = Math.max(synthesized.length, transcriptRecords.length, sessionRecords.length);
+  const merged: CompletedIntervention[] = [];
+
+  for (let i = 0; i < max; i += 1) {
+    const anchor = synthesized[i] ?? transcriptRecords[i] ?? sessionRecords[i];
+    if (!anchor) continue;
+
+    let record = anchor;
+    const candidates = [transcriptRecords[i], sessionRecords[i]];
+    for (const candidate of candidates) {
+      if (!candidate || candidate.pausePoint !== record.pausePoint) continue;
+      record = mergeIntervention(record, candidate);
+    }
+    merged.push(record);
+  }
+
+  return merged;
+}
+
+function eventFromIntervention(record: CompletedIntervention, sessionId: string): ProgressEvent {
+  return {
+    type: 'await_user',
+    sessionId,
+    message: PAUSE_MESSAGES[record.pausePoint],
+    pausePoint: record.pausePoint,
+    materials: record.materials,
+    outline: record.outline,
+    reviewResult: record.reviewResult,
+    draftTitle: record.draftTitle,
+  };
+}
+
+function ensureInterventionAnchors(
+  events: ProgressEvent[],
+  records: CompletedIntervention[],
+  sessionId: string,
+): ProgressEvent[] {
+  if (events.some((event) => event.type === 'await_user')) return events;
+  if (records.length === 0) return events;
+  if (events.length === 0) return records.map((record) => eventFromIntervention(record, sessionId));
+
+  const nextEvents: ProgressEvent[] = [];
+  let recordIndex = 0;
+  for (const event of events) {
+    if (event.type === 'resumed' && recordIndex < records.length) {
+      nextEvents.push(eventFromIntervention(records[recordIndex], sessionId));
+      recordIndex += 1;
+    }
+    nextEvents.push(event);
+  }
+  while (recordIndex < records.length) {
+    nextEvents.push(eventFromIntervention(records[recordIndex], sessionId));
+    recordIndex += 1;
+  }
+  return nextEvents;
 }
 
 interface AIWritingHistoryViewProps {
@@ -89,26 +372,42 @@ interface AIWritingHistoryViewProps {
 }
 
 export function AIWritingHistoryView({ session }: AIWritingHistoryViewProps) {
-  const interventions = session.completed_interventions ?? [];
   const transcript = session.transcript;
-  // 有完整时间线快照时，复用实时对话的 AIWritingTimeline 渲染，保证回显与实时一致
-  const hasTranscript = !!transcript && (transcript.progressEvents?.length ?? 0) > 0;
-  // 归一化 transcript 事件：后台挂起跑出的事件是 raw（snake_case），前端实时存的是
-  // camelCase——统一过一遍 normalizeProgressDict（幂等），两种来源回显都正确一致。
+  const sessionReviewResult = useMemo(
+    () => normalizeReviewResult(session.review_result),
+    [session.review_result],
+  );
   const normalizedEvents = useMemo(
     () => (transcript?.progressEvents ?? []).map(
-      (e) => normalizeProgressDict(e as unknown as Record<string, unknown>, session.id),
+      (event) => normalizeProgressDict(event as unknown as Record<string, unknown>, session.id),
     ),
     [transcript, session.id],
   );
-  // 干预记录同样归一化（后台重建的素材/大纲/审核数据为 snake_case；前端实时记录已是
-  // camelCase，归一化幂等），保证素材列表/大纲/编辑审核卡片正确渲染。
-  const normalizedInterventions = useMemo(
-    () => (transcript?.completedInterventions ?? []).map(
-      (rec) => normalizeCompletedIntervention(rec as unknown as Record<string, unknown>),
-    ),
+  const transcriptInterventions = useMemo(
+    () => normalizeInterventionList(transcript?.completedInterventions),
     [transcript],
   );
+  const sessionInterventions = useMemo(
+    () => normalizeInterventionList(session.completed_interventions),
+    [session.completed_interventions],
+  );
+  const synthesizedInterventions = useMemo(
+    () => synthesizeInterventions(
+      normalizedEvents,
+      session.draft_title,
+      session.draft_markdown,
+      sessionReviewResult,
+    ),
+    [normalizedEvents, session.draft_title, session.draft_markdown, sessionReviewResult],
+  );
+  const completedInterventions = useMemo(
+    () => mergeInterventionLists(synthesizedInterventions, transcriptInterventions, sessionInterventions),
+    [synthesizedInterventions, transcriptInterventions, sessionInterventions],
+  );
+  const timelineEvents = useMemo(
+    () => ensureInterventionAnchors(normalizedEvents, completedInterventions, session.id),
+    [normalizedEvents, completedInterventions, session.id],
+  );
   const createdAt = session.created_at
     ? new Date(session.created_at).toLocaleString('zh-CN', {
         year: 'numeric', month: 'short', day: 'numeric',
@@ -118,7 +417,6 @@ export function AIWritingHistoryView({ session }: AIWritingHistoryViewProps) {
 
   return (
     <div className="flex-1 overflow-y-auto">
-      {/* 元信息 */}
       <div className="px-4 pt-3">
         <div className="rounded-lg border bg-muted/30 px-3 py-2.5 space-y-1">
           <p className="text-xs font-semibold truncate">{session.draft_title ?? session.title}</p>
@@ -133,39 +431,15 @@ export function AIWritingHistoryView({ session }: AIWritingHistoryViewProps) {
         </div>
       </div>
 
-      {hasTranscript ? (
-        /* 完整对话时间线回显 */
+      {timelineEvents.length > 0 ? (
         <AIWritingTimeline
-          events={normalizedEvents}
-          completedInterventions={normalizedInterventions}
+          events={timelineEvents}
+          completedInterventions={completedInterventions}
           currentPause={null}
         />
       ) : (
-        /* 旧会话无时间线快照时，回退到精简阶段列表 */
-        <div className="px-4 py-3 space-y-4">
-          {interventions.length > 0 ? (
-            <div>
-              <p className="text-[11px] font-medium text-muted-foreground mb-2">写作阶段</p>
-              <div>
-                {interventions.map((rec, i) => (
-                  <InterventionTimelineItem
-                    key={i}
-                    record={rec}
-                    isLast={i === interventions.length - 1}
-                  />
-                ))}
-              </div>
-            </div>
-          ) : (
-            <div className="text-center py-4 text-xs text-muted-foreground">无阶段记录</div>
-          )}
-
-          {session.status === 'done' && (
-            <div className="flex items-center gap-2 text-xs text-green-600 dark:text-green-400">
-              <Star className="w-3.5 h-3.5" />
-              <span>写作完成</span>
-            </div>
-          )}
+        <div className="px-4 py-6 text-center text-xs text-muted-foreground">
+          暂无阶段记录
         </div>
       )}
     </div>

frontend-web/src/open-canvas/components/ai-writing/AIWritingPanel.tsx

@@ -1,6 +1,6 @@
 import { useCallback, useEffect, useRef, useState } from 'react';
 import { useNavigate, useSearchParams } from 'react-router-dom';
-import { ChevronsDown, CloudUpload, PanelRightClose, Play, Plus, RotateCcw, Settings2, Square, Trash2 } from 'lucide-react';
+import { ChevronsDown, CloudUpload, PanelRightClose, Pause, Play, Plus, RotateCcw, Settings2, Trash2 } from 'lucide-react';
 import { toast } from 'sonner';
 
 import { Button } from '@/components/ui/button';
@@ -21,26 +21,19 @@ import {
   adminCleanupAIWritingSessions,
   getAIWritingSession,
   suspendAIWritingToBackground,
-  suspendAIWritingToBackgroundKeepalive,
 } from '../../api/ai-writing-sessions';
 
 /**
- * 暂停 / 继续功能开关（默认 false = 关）。
+ * 暂停 / 继续功能开关（现已开启）。
  *
- * 历史背景：legacy 路径下，为了让用户点"停止"后还能"继续"，引入了 per-worker
- * 内存 dict（``_event_queues`` / ``_session_pending_pause``）。多 worker 部署下
- * 这些 dict 互相看不见 → SSE 重连失败 / "会话丢失" → 触发了整个 ai-writing-优化.md
- * 的迁移计划。
- *
- * 当前 LangGraph Server 路径下架构已无 per-worker 状态，但 ``stream.stop()`` 仅
- * 取消客户端 SSE 订阅，**不会真正暂停后端 run**（LLM 继续烧 token）；``resume``
- * 也无法重新订阅同一个 run。这是个产品语义没想清楚的功能，先关掉。
- *
- * 后期想清楚怎么做"真·暂停"（``client.runs.cancel(run_id, action='interrupt')``
- * 保留 checkpoint）+ "真·继续"（``client.runs.joinStream`` 续上原 run）时，
- * 把这个 flag 翻成 true 即可，UI / hook 全套代码都已就位。
+ * 真·暂停：``pauseWriting`` → ``stream.stop()`` 取消当前 run（LangGraph 已完成的阶段
+ * 已落 checkpoint，不丢）。真·继续：``resumeWriting`` → 带空 ``command:{}`` 重新 submit，
+ * 后端 worker 据此让 Pregel 从最近 checkpoint 续跑挂起的当前阶段节点（重跑当前未完成阶段，
+ * 已完成阶段不重来；见 runtime/runs/worker.py）。刷新页面 = 重置（不自动重连）。
  */
-const ENABLE_PAUSE_RESUME_UI = false;
+const ENABLE_PAUSE_RESUME_UI = true;
+const RESUMABLE_HISTORY_STATUSES = new Set(['in_progress', 'draft_ready', 'review_ready']);
+import { countArticleWords } from '../../utils/wordCount';
 import { AIWritingForm } from './AIWritingForm';
 import { AIWritingTimeline } from './AIWritingTimeline';
 import { InterventionCard } from './InterventionCard';
@@ -88,10 +81,10 @@ export function AIWritingPanel({
 } = {}) {
   const navigate = useNavigate();
   const [searchParams, setSearchParams] = useSearchParams();
-  const { state, startWriting, submitIntervention, pauseWriting, resumeWriting, reset } = useAIWriting();
+  const { state, startWriting, submitIntervention, pauseWriting, resumeWriting, continueWriting, reset } = useAIWriting();
   const { historySession, isHistoryMode, openHistory, closeHistory } = useAIWritingHistory();
   const writingForm = useWritingFormOptional();
-  const { sessions, loading: sessionsLoading, refresh, rename, remove } = useAIWritingSessions();
+  const { sessions, loading: sessionsLoading, refresh, rename, remove, markBackground, clearBackground } = useAIWritingSessions();
   const { articleTypes, refresh: refreshArticleTypes } = useArticleTypes();
 
   useEffect(() => { refreshArticleTypes(); }, [refreshArticleTypes]);
@@ -206,46 +199,46 @@ export function AIWritingPanel({
     reset();
   }, [closeHistory, reset]);
 
+  const canRestoreHistory =
+    isHistoryMode && !!historySession && RESUMABLE_HISTORY_STATUSES.has(historySession.status);
+
+  const handleRestoreHistory = useCallback(() => {
+    if (!historySession || !RESUMABLE_HISTORY_STATUSES.has(historySession.status)) return;
+    closeHistory();
+    continueWriting(historySession.id);
+  }, [historySession, closeHistory, continueWriting]);
+
   // ── 后台挂起：把当前写作转后台，后端自动驱动到定稿（离页/刷新/切号不打断） ──
-  const handleBackgroundSuspend = useCallback(async () => {
+  // 与「多智能体会商」一致：点击后**立刻**回到初始页面，挂起请求 fire-and-forget；
+  // 历史下拉靠乐观标记马上显示「挂起中」，不等后端确认。
+  const handleBackgroundSuspend = useCallback(() => {
     const sid = state.sessionId;
     if (!sid) {
       toast.error('当前没有可挂起的写作会话');
       return;
     }
-    try {
-      await suspendAIWritingToBackground(sid);
-    } catch (e) {
-      toast.error(e instanceof Error ? e.message : '后台挂起失败');
-      return;
-    }
-    toast.success('已转入后台自动完成，稍后可在「历史记录」查看进度与结果');
-    // reset() 会 stop 客户端 SSE 订阅并回到 idle —— 后端驱动器接管续跑，不冲突。
+    // 1) 立刻：乐观标记 + 重置 UI 回到 idle（reset() 会 stop 客户端 SSE 订阅，
+    //    后端驱动器接管续跑，不冲突）。
+    markBackground(sid);
     reset();
-    // 刷新历史列表，让「挂起中」徽标立刻出现。
-    refresh();
-  }, [state.sessionId, reset, refresh]);
+    toast.success('已转入后台自动完成，稍后可在「历史记录」查看进度与结果');
+    // 2) 后台：fire-and-forget 通知后端拉起驱动；完成后刷新真实状态并清除乐观标记。
+    void (async () => {
+      try {
+        await suspendAIWritingToBackground(sid);
+      } catch (e) {
+        toast.error(e instanceof Error ? e.message : '后台挂起失败');
+      } finally {
+        await refresh();
+        clearBackground(sid);
+      }
+    })();
+  }, [state.sessionId, reset, refresh, markBackground, clearBackground]);
 
-  // 离页 / 刷新 / 关标签页时，若写作仍在进行中则自动转后台（与圆桌「自动挂起」一致）。
-  // 用 ref 持有最新的「是否在跑 + 会话 id」，让卸载/卸载前回调读到即时值。
-  const suspendRef = useRef<{ running: boolean; sid: string | null }>({ running: false, sid: null });
-  useEffect(() => {
-    suspendRef.current = { running: isRunning, sid: state.sessionId ?? null };
-  }, [isRunning, state.sessionId]);
-
-  useEffect(() => {
-    const onBeforeUnload = () => {
-      const { running, sid } = suspendRef.current;
-      if (running && sid) suspendAIWritingToBackgroundKeepalive(sid);
-    };
-    window.addEventListener('beforeunload', onBeforeUnload);
-    return () => {
-      window.removeEventListener('beforeunload', onBeforeUnload);
-      // 组件卸载（路由离开本页 / 切换工作区标签）：写作未完成则自动转后台。
-      const { running, sid } = suspendRef.current;
-      if (running && sid) suspendAIWritingToBackgroundKeepalive(sid);
-    };
-  }, []);
+  // 离页 / 刷新 = 重置（不自动重连、不自动转后台）：刷新会断开 SSE，后端默认
+  // on_disconnect=cancel 取消该 run，页面重新挂载回到 idle。需要"后台自动跑完"
+  // （自动确认素材/大纲/审核到定稿、离页不中断）可手动点「后台挂起」。
+  // 页内的「暂停/继续」从 checkpoint 续跑当前阶段，不受刷新重置影响（刷新即新开）。
 
   // ── 侧边栏"最近写作"通信：两种路径 ────────────────────────────────────────
   // 用 ref 包住 handler，保证事件监听器始终能拿到最新版本
@@ -276,6 +269,16 @@ export function AIWritingPanel({
     return () => window.removeEventListener('ai-writing:open-session', onOpenSession);
   }, []);
 
+  // 路径4：左侧研究栏「历史记录」点「挂起中」记录 → 打开进度流程图弹窗（与下拉历史一致）。
+  useEffect(() => {
+    function onShowProgress(e: Event) {
+      const session = (e as CustomEvent<AIWritingSessionSummary>).detail;
+      if (session) setProgressSession(session);
+    }
+    window.addEventListener('ai-writing:show-progress', onShowProgress);
+    return () => window.removeEventListener('ai-writing:show-progress', onShowProgress);
+  }, []);
+
   // 路径3：URL ?session=xxx 直接定位到指定会话
   useEffect(() => {
     const sessionId = searchParams.get('session');
@@ -314,19 +317,33 @@ export function AIWritingPanel({
       )}
       {/* 头部 */}
       <div className="flex items-center justify-between px-4 py-2.5 border-b shrink-0">
-        <span
-          className={cn(
-            'text-sm font-semibold shrink-0 min-w-0 truncate',
-            isHistoryMode && 'flex-1 mr-2',
-            !isIdle && !isHistoryMode && 'cursor-pointer hover:text-primary transition-colors',
+        <div className="flex min-w-0 flex-1 items-center gap-2">
+          {canRestoreHistory && (
+            <Button
+              variant="ghost"
+              size="sm"
+              className="h-7 px-2 text-xs gap-1 text-emerald-600 hover:text-emerald-700 hover:bg-emerald-50 dark:hover:bg-emerald-950/30"
+              onClick={handleRestoreHistory}
+              title="恢复写作：跳过已完成阶段，从未完成阶段重新开始"
+            >
+              <Play className="size-3 fill-current" />
+              恢复
+            </Button>
           )}
-          onClick={() => { if (!isIdle && !isHistoryMode && state.request) setReqDialogOpen(true); }}
-          title={isHistoryMode ? (historySession?.draft_title ?? historySession?.title) : undefined}
-        >
-          {isHistoryMode
-            ? (historySession?.draft_title ?? historySession?.title ?? '写作历史')
-            : 'AI 智能写作'}
-        </span>
+          <span
+            className={cn(
+              'text-sm font-semibold shrink-0 min-w-0 truncate',
+              isHistoryMode && 'flex-1 mr-2',
+              !isIdle && !isHistoryMode && 'cursor-pointer hover:text-primary transition-colors',
+            )}
+            onClick={() => { if (!isIdle && !isHistoryMode && state.request) setReqDialogOpen(true); }}
+            title={isHistoryMode ? (historySession?.draft_title ?? historySession?.title) : undefined}
+          >
+            {isHistoryMode
+              ? (historySession?.draft_title ?? historySession?.title ?? '写作历史')
+              : 'AI 智能写作'}
+          </span>
+        </div>
         <div className="flex items-center gap-1.5">
           {/* ⚠️ 临时调试：admin 一键清理 —— 阶段 7 删冗余时移除 */}
           <Button
@@ -366,8 +383,8 @@ export function AIWritingPanel({
               后台挂起
             </Button>
           )}
-          {/* ⏸️/▶️ "停止 / 继续" 由 ENABLE_PAUSE_RESUME_UI 控制（默认 false 隐藏）。
-              后期把 flag 翻成 true 即可恢复，UI / hook 全套代码都已就位。 */}
+          {/* ⏸️/▶️ "暂停 / 继续"：暂停=stream.stop() 取消当前 run（已完成阶段已落 checkpoint）；
+              继续=从 checkpoint 重新驱动 graph 续跑（重跑当前阶段，已完成阶段不丢）。 */}
           {ENABLE_PAUSE_RESUME_UI && isRunning && !state.isPaused && (
             <Button
               variant="ghost"
@@ -375,8 +392,8 @@ export function AIWritingPanel({
               className="h-7 px-2 text-xs gap-1 animate-breathe-stop text-red-400 hover:text-red-500 hover:bg-red-50 dark:hover:bg-red-950/30"
               onClick={pauseWriting}
             >
-              <Square className="size-3 fill-current" />
-              停止
+              <Pause className="size-3 fill-current" />
+              暂停
             </Button>
           )}
           {ENABLE_PAUSE_RESUME_UI && state.isPaused && (
@@ -475,6 +492,8 @@ export function AIWritingPanel({
                   outline={state.outline}
                   reviewResult={state.reviewResult}
                   draftTitle={state.currentDraftTitle}
+                  draftWordCount={countArticleWords(state.currentDraftMarkdown)}
+                  wordCountTarget={state.request?.wordCountTarget}
                   revisionCount={state.revisionCount}
                   skillSearchSteps={state.skillSearchSteps}
                   skillSearchInProgress={state.status === 'researching' && state.skillSearchSteps.length > 0}
@@ -486,9 +505,13 @@ export function AIWritingPanel({
           />
         )}
 
-        {/* 大纲流式思考框 */}
+        {/* 大纲流式思考框（用户自带大纲时文案显示「整理」） */}
         {state.status === 'writing_outline' && (state.outlineStreamingText || state.outlineThinkingText) && (
-          <OutlineStreamingView text={state.outlineStreamingText} thinkingText={state.outlineThinkingText} />
+          <OutlineStreamingView
+            text={state.outlineStreamingText}
+            thinkingText={state.outlineThinkingText}
+            organizing={!!state.request?.userOutline}
+          />
         )}
 
         {/* 编辑审核流式结果 */}
@@ -550,7 +573,11 @@ export function AIWritingPanel({
          /* 意图解析流式过程中（LLM 还在吐 JSON）不要显示 skeleton */
          !state.intentStreamingText && !state.intentThinkingText && (
           <div className="px-4 pb-4">
-            <WritingSkeletonCard status={state.status} researchProgress={state.researchProgress} />
+            <WritingSkeletonCard
+              status={state.status}
+              researchProgress={state.researchProgress}
+              organizing={!!state.request?.userOutline}
+            />
           </div>
         )}
 
@@ -595,7 +622,9 @@ export function AIWritingPanel({
               )}
               {state.status === 'researching' && state.researchProgress
                 ? state.researchProgress
-                : STATUS_LABEL[state.status] ?? state.status}
+                : state.status === 'writing_outline' && state.request?.userOutline
+                  ? '作家整理你的大纲中…'
+                  : STATUS_LABEL[state.status] ?? state.status}
             </>
           )}
         </div>

frontend-web/src/open-canvas/components/ai-writing/AIWritingTimeline.tsx

@@ -1,6 +1,7 @@
 import type { CompletedIntervention, ProgressEvent } from '../../types/ai-writing';
 import { TimelineStep } from './TimelineStep';
 import { CompletedInterventionCard } from './CompletedInterventionCard';
+import { UserRequirementCard } from './UserRequirementCard';
 
 interface AIWritingTimelineProps {
   events: ProgressEvent[];
@@ -19,6 +20,7 @@ const DISPLAYED_TYPES = new Set([
   'await_user',
   'resumed',
   'notice',
+  'model_switch',
   'done',
   'error',
 ]);
@@ -47,8 +49,13 @@ export function AIWritingTimeline({
           awaitUserIdx += 1;
 
           if (completedRecord) {
-            // 已完成的干预点 → 渲染折叠历史卡
-            slot = <CompletedInterventionCard record={completedRecord} />;
+            // 已完成的干预点 → 先以独立样式回显用户的输入要求，再渲染折叠历史卡
+            slot = (
+              <div className="space-y-2">
+                <UserRequirementCard record={completedRecord} />
+                <CompletedInterventionCard record={completedRecord} />
+              </div>
+            );
           } else if (currentPause && isLast) {
             // 当前活跃干预点 → 渲染操作卡
             slot = currentInterventionSlot;