@chanlerdev/scorel 0.0.1 → 0.0.3

package/docs/CHANGELOG.md

@@ -2,6 +2,121 @@
 
 ## Unreleased
 
+## 0.0.3 - 2026-06-12
+
+### Highlights
+
+- QQ Bot and WeChat inbound support: receive and route messages via official WebSocket or HTTP callback
+- GUI now auto-refreshes session lists when IM sessions are created in the background
+- Streaming thinking delta events in GUI for real-time thought display
+- Memory status display and reliability improvements (dream trigger, duplicate detection)
+
+### Changes
+
+- GUI automatically refreshes session lists when IM sessions are created in the background
+- Implement IM inbound runtime for QQ and WeChat (WebSocket gateway, HTTP callback server)
+- Compact IM settings layout with collapsible rows for Telegram, QQ, and WeChat
+- SendChannelMessage now supports optional attachments (image/file) with metadata
+- Human-cadence guidance injected into IM replies (acknowledgement, progress updates)
+- Add built-in QQ Bot and WeChat IM extension support (sending and receiving)
+- Add thinking_delta event for streaming real-time thought content in GUI
+- Add memory status query and GUI display for memory status
+- Improve daily append quality with validation for low-signal summaries and duplicate detection
+- Persist memory dream state (dirty/running/scheduled/failure) with restart recovery
+- Refine GUI visual style: Codex-inspired polish for sidebar, empty workspace, composer, code blocks, and tool execution traces
+- Add 'delete provider' button in GUI Settings with full deletion chain
+- Fix IME composition handling in composer (Enter does not submit during IME input)
+- Fix Shiki code block theme from dark to light to match GUI surface
+
+### Fixes
+
+- GUI provider deletion now removes provider, models, and dependent role assignments
+- Dark code block theme fixed to light mode for better readability in dark GUI
+- IME composition handling in composer fixed (Enter does not submit during IME input)
+
+### Breaking Changes
+
+- QQ and WeChat config keys changed: old `tokenEnv`, `token`, `webhookKeyEnv`, etc. are no longer supported; users must re-enter App ID/App Secret or Webhook URL.
+
+### Verification
+
+- Unit and integration tests for QQ gateway identify/heartbeat/dispatch/stop
+- Unit and integration tests for WeChat callback verification and text message routing
+- Tests for session change notification and renderer refresh behavior
+- Tests for attachment validation and human-cadence guidance in channel harness
+- Tests for QQ/WeChat adapter normalization and secret redaction
+- Tests for streaming thinking deltas and final message reconciliation
+- Tests for low-signal daily summary rejection and duplicate entry skipping
+- Tests for memory dream state persistence and status retrieval
+- GUI tests for IM settings layout, provider deletion, code block theme, and memory status display
+
+### Internal
+
+- Update README to clarify IM behavior details for QQ Bot and WeChat integrations
+- Add planned spec S0089 for memory reliability and dream trigger improvements
+
+## 0.0.2 - 2026-06-11
+
+### Highlights
+
+- Auto context compaction and session memory maintenance now keep sessions within model context limits.
+- New GUI Electron shell with embedded local Host enables project management and chat locally.
+- GUI now supports Relay device pairing, remote directory browsing, and explicit remote project selection.
+- Streaming cursor, RAF-based event batching, and seven specialized tool blocks deliver a smoother, more informative chat experience.
+- AI-powered release notes generation with DeepSeek now runs by default during releases.
+
+### Changes
+
+- Added auto context compaction and session memory maintenance (configurable threshold and async per-session memory files).
+- Added built-in Telegram IM extension with long polling, Bot API integration, and GUI settings.
+- Added extension manifest and IM channel runtime (loopback extension validates end-to-end flow).
+- Added AppendDaily tool for agent-owned journal entries with delayed idle dream consolidation (configurable dreamIdleMinutes).
+- Implemented automatic memory system with context injection, daily notes, dream consolidation, and GUI settings.
+- Introduced provider-model profile contract: multi-layered config with primary/standard/auxiliary roles, GUI model picker, and auxiliary session title generation.
+- GUI now has a three-pane layout (project list, session list, chat workspace) with local project registration.
+- GUI settings now include Session Memory toggle and Auto Compact threshold selector.
+- GUI sidebar uses macOS vibrancy glass effect, project picker anchored to trigger, and removed unimplemented placeholders.
+- Redesigned settings page with macOS-style navigation sidebar, cards, toggles, selects, and link controls.
+- Add streaming cursor, RAF-based event batching, and seven specialized tool blocks (Read, Glob, Grep, Edit, Write, Bash, TodoWrite) with unified diff viewer.
+- Release workflow now creates GitHub Release and uploads npm tarball as asset (--no-github-release flag to skip).
+- AI release notes generation runs by default during release (DeepSeek V4 Flash, fallback to minimal changelog with --no-generate-notes).
+- Simplified GUI Provider and Model settings to user-facing fields with auto-save, model test button, and model config modal.
+- Release workflow now removes generated diffs (e.g. dist, source maps) from AI changelog context.
+
+### Fixes
+
+- Install ripgrep in release action to fix Glob/Grep tests before publish.
+- AI changelog collection now skips generated diffs before reading patches.
+- Move session title generation to post-user-message hook and fix GUI dark code theme (now uses github-dark-default).
+- Improve GUI sidebar layout with title truncation, resizing, and collapse/expand controls.
+
+### Breaking Changes
+
+- Old single [model] config section is replaced; existing .scorel/config.toml files with [model] must be migrated to new provider-model profile structure.
+- Old [model] and [models.*] configurations are no longer compatible and will produce schema errors.
+
+### Verification
+
+- Core session tests verify compact parsing and barrier context behavior.
+- Config tests validate new schema, reject legacy sections, preserve direct API keys on merge, and redact secrets.
+- Daemon tests prove auto compact appends compact event and session memory maintained asynchronously.
+- GUI rendering tests confirm new settings controls, sidebar behavior, and tool block rendering.
+- Integration tests cover loopback IM extension, Relay device pairing, and remote project management.
+- Release workflow tests cover AI note generation, GitHub Release creation, and asset upload.
+- Full pnpm typecheck && pnpm test passes across all packages.
+
+### Internal
+
+- Add specification for GUI visual fidelity and settings macOS shell (S0071).
+- The commit only adds documentation files; no code changes are included.
+- Specify GUI streaming UX and specialized tool blocks (S0070 spec and roadmap update).
+- Add spec for GUI Codex App UI refactor (S0069) and roadmap entry.
+- Define GUI product boundary and Milestone 9 roadmap with SHIP specs.
+
+- **release**: Generate changelog notes by default from commit summaries using DeepSeek V4 Flash, with a local preview command and an explicit `--no-generate-notes` escape hatch.
+- **release**: Make AI changelog collection skip generated diffs before reading patches, preventing release Actions from failing on bundled `dist` or source-map changes.
+- **release**: Install `ripgrep` in the manual release Action so the repo-level Glob/Grep tests run in CI before publishing.
+
 ## 0.0.1 - 2026-06-06
 
 - **release**: Add public `scorel` package build, npm pack smoke, local release command, and manual GitHub Actions release workflow.

package/docs/ROADMAP.md

@@ -514,9 +514,9 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 
 ---
 
-## M8 Follow-up: Hosted Defaults And CLI Command Surface
+## M8 Follow-up: Hosted Defaults, CLI Command Surface, And Release Transparency
 
-**Goal**: 把已经部署的 hosted WebUI / Relay 路径变成默认用户路径，并把 CLI 命令从实现名词收敛到产品名词：`scorel` 是正常项目交互入口，`scorel host serve` 启动并注册本机 Host，`scorel pair <code>` 默认走官方 Relay。
+**Goal**: 把已经部署的 hosted WebUI / Relay 路径变成默认用户路径，并把 CLI 命令从实现名词收敛到产品名词：`scorel` 是正常项目交互入口，`scorel host serve` 启动并注册本机 Host，`scorel pair <code>` 默认走官方 Relay。同时让 release changelog 从 commits 自动生成透明、用户可读的更新说明。
 
 **Steps**:
 
@@ -524,6 +524,7 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 |---|---|---|---|
 | M8.F1 | [`S0061`](spec/ship/S0061-hosted-defaults-and-cli-command-surface.md) | hosted defaults、`host serve`、默认 `pair`、`scorel` 交互入口和 Relay operator 命令收口 | Done |
 | M8.F2 | [`S0062`](spec/ship/S0062-npm-package-and-release-workflow.md) | 单 public `scorel` npm 包、本地 release 命令和手动 GitHub Actions 发布入口 | Done |
+| M8.F3 | [`S0063`](spec/ship/S0063-ai-release-notes.md) | release 默认使用 DeepSeek 从 commits 生成结构化 changelog notes，本地和 GitHub Actions 共用同一路径 | Done |
 
 **Status**: Done
 
@@ -531,15 +532,76 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 
 ## M9: GUI
 
-**Goal**: 提供 Project-first desktop GUI，统一管理本地、Relay 和远程 Device 上的 Project。
+**Goal**: 提供 Project-first desktop GUI。GUI 是独立桌面 app，不是 hosted WebUI wrapper：本地通过 embedded Host 管理全部本机 Project，远程首版只通过 Relay 添加 Device，并且只有用户在 GUI 中显式选择过的远程 Project 才进入主 Project list。
 
-**Candidate scope**:
+**Done when**:
+
+- `apps/gui` 成为独立 Electron workspace app；GUI 不进入 public `@chanlerdev/scorel` npm CLI 包。
+- GUI main process 通过 embedded Host 管理本机 Project / Session；renderer 不直接持有 Runtime 或写 JSONL。
+- 本地 Host Registry 中的全部 Project 自动显示在 GUI Project list。
+- Settings 可以通过 Relay 添加 Device；首版不做 SSH 或 direct WS + token。
+- Add Project 可以选择 local 或 Relay Device，并通过目标 Host 的目录浏览注册 Project。
+- 远程 Project 只有被 GUI 显式选择后才显示；GUI 不像 WebUI 一样展示远程 Host Registry 全集。
+- 主界面采用 Codex App 风格的 Project-first 工作台：Project list、Session/chat surface、Settings/Device management。
+- 本地 Project 和 Relay Project 都通过真实 Host、真实 Relay transport、真实 JSONL session 和真实 provider 完成端到端验证。
+
+**Steps**:
+
+| Step | Spec | Goal | Status |
+|---|---|---|---|
+| M9.1 | [`S0064`](spec/ship/S0064-gui-product-intent-and-boundary.md) | 锁定 GUI 产品模型、Electron 分发边界、Project-first 信息架构和 Relay-only remote scope | Done |
+| M9.2 | [`S0065`](spec/ship/S0065-gui-electron-shell-and-embedded-host.md) | 建立 `apps/gui` Electron shell、main/renderer 边界和 embedded local Host 连接 | Done |
+| M9.3 | [`S0066`](spec/ship/S0066-gui-local-project-workspace.md) | 实现本地 Project-first workspace：本地 Project 全量展示、Session 列表、新建会话和 chat surface | Done |
+| M9.4 | [`S0067`](spec/ship/S0067-gui-relay-device-and-remote-project-selection.md) | Settings 添加 Relay Device，并让 Add Project 显式选择远程 Project 后加入 GUI Project list | Done |
+| M9.5 | [`S0068`](spec/ship/S0068-gui-codex-app-polish-and-e2e.md) | 对齐 Codex App 风格与交互质量，并完成 local + Relay 真实端到端验证 | Done |
+
+**Not in M9**:
+
+- SSH Remote Device、SSH stdio proxy、远端安装或启动 Scorel Host。
+- Direct WS + token 作为 GUI 首版用户路径。
+- 账号系统、OAuth、细粒度 ACL。
+- 把 GUI 打进 `@chanlerdev/scorel` npm CLI 包或让 `pnpm scorel` 启动 GUI。
+
+**Status**: Done
+
+---
 
-- 本地 Project 添加和 Session 管理。
-- Relay Device 添加。
-- 远程 Device 添加。
-- Project-first sidebar。
-- desktop main 管理本地 Host 和远程连接。
+## M9 Follow-up: GUI Codex App UI Refactor
+
+**Goal**: 把 M9 跑通的 GUI 升级到 Codex App 视觉与交互质量。一刀重构 `apps/gui/src/renderer.tsx`,改为模块化 renderer 树:三段式 sidebar(project 内联展开 sessions)、composer pill + project picker pill 弹层、独立 Add Remote Project modal、独立 Settings view。建立完整 Markdown / streaming / 工具块渲染基础;工具块走 `@scorel/protocol` event-driven 注册表,新工具登记不动主路径。GUI 独立完整实现,后续可考虑 webui 反向复用 GUI 组件(本阶段不动 webui)。
+
+**Steps**:
+
+| Step | Spec | Goal | Status |
+|---|---|---|---|
+| M9.F1.1 | [`S0069`](spec/ship/S0069-gui-codex-ui-refactor.md) | renderer 骨架 + tokens + lucide icon + 三段式 sidebar + composer pill + project picker + Add Remote Project modal + 独立 Settings view + 基础 markdown(react-markdown + GFM + sanitize + shiki)+ 工具块注册表 + 流式 IPC channel | Done |
+| M9.F1.2 | [`S0070`](spec/ship/S0070-gui-streaming-and-tool-blocks.md) | streaming 光标 + RAF batcher + IntersectionObserver autoscroll + jump-to-bottom + 7 个特化工具块(Read/Glob/Grep/Edit/Write/Bash/TodoWrite)+ unified diff viewer + 真实 provider local + Relay e2e | Done |
+| M9.F1.3 | [`S0071`](spec/ship/S0071-gui-visual-fidelity-and-settings-shell.md) | 视觉打底:tokens 重置 + sidebar/composer/empty/picker/modal/transcript/工具块 chip 化 + Settings macOS 风重构(nav 三段分组 + header + card row + Toggle/Select/LinkAccent + 9 section 含 Config / General 真实) | Done |
+| M9.F1.4 | [`S0072`](spec/ship/S0072-gui-glass-sidebar-and-picker-anchoring.md) | GUI glass sidebar + 删除未实现入口 + 空态文案修正 + project picker 跟随触发 pill | Done |
+| M9.F1.5 | [`S0073`](spec/ship/S0073-provider-model-profile-contract.md) | Provider/model profile 合同:pi-ai provider config、available models、primary/standard/auxiliary 三角色与 GUI model picker | Done |
+| M9.F1.6 | [`S0074`](spec/ship/S0074-gui-model-provider-settings-split.md) | GUI Settings 拆分模型页和 Provider 页，让三工作模型、available models、provider source 管理分层清楚 | Done |
+| M9.F1.7 | [`S0075`](spec/ship/S0075-provider-catalog-model-cards.md) | Provider 页支持 /models 获取、折叠模型卡片和选用状态 | Done |
+| M9.F1.8 | [`S0076`](spec/ship/S0076-provider-modal-search-and-direct-key.md) | Provider 新建 modal、catalog 搜索、provider 名称归一和直接 API key | Done |
+| M9.F1.9 | [`S0077`](spec/ship/S0077-auxiliary-session-title-generation.md) | 第一条 chat 后用 auxiliary model 生成持久 session title | Done |
+| M9.F1.10 | [`S0078`](spec/ship/S0078-gui-provider-settings-forward-config-and-simplification.md) | GUI Settings 使用前向 provider/model profile，并简化 Provider/Model 表单为用户可理解字段 | Done |
+| M9.F1.11 | [`S0079`](spec/ship/S0079-gui-sidebar-layout-controls.md) | GUI sidebar 标题截断、宽度拖拽和收起/展开控制 | Done |
+| M9.F1.12 | [`S0080`](spec/ship/S0080-session-title-hook-and-gui-markdown-dark-code.md) | Session title 生成改为 after-user-message hook，并修复 GUI Markdown 深色代码块 | Done |
+| M9.F1.13 | [`S0081`](spec/ship/S0081-automatic-memory.md) | 自动 memory context、daily、dream consolidation、GUI Settings 与 Command+, 设置入口 | Done |
+| M9.F1.14 | [`S0082`](spec/ship/S0082-memory-journal-tool-and-idle-dream.md) | Daily 改为 agent 主循环 AppendDaily 工具，dream 改为项目 idle 后延迟整合 project/root memory | Done |
+| M9.F1.15 | [`S0086`](spec/ship/S0086-auto-compact-and-session-memory.md) | 80% auto compact、compact replay barrier 和每轮 session memory 维护 | Done |
+| M9.F1.16 | [`S0087`](spec/ship/S0087-gui-ui-polish-sweep.md) | Codex-inspired GUI visual pass：学习 Codex 的比例、层级和克制风格，并把 GUI tool blocks 收敛为低噪声执行证据流 | Done |
+| M9.F1.17 | [`S0088`](spec/ship/S0088-gui-streaming-thinking-contract.md) | Streaming thinking contract：补 thinking/content delta，使 thinking 在 turn 运行中按序显示，而不是最终 assistant_message 后才插入 | Done |
+| M9.F1.18 | [`S0089`](spec/ship/S0089-memory-reliability-and-dream-trigger.md) | Memory reliability：修复 AppendDaily 调用质量、dreaming 触发与可观测性，让 M9 后半段聚焦真实使用中的质量优化 | Done |
+
+**Not in M9 Follow-up**:
+
+- empty-state plugin recommendation cards(用户明确不做)。
+- 全局 `对话` 历史分组。
+- composer review banner(变更审查 UI)。
+- "不使用项目" picker 选项(GUI 是 Project-first,与 S0064 冲突)。
+- 语音/`完全访问`真实切换(灰按钮占位)。
+- WebUI 反向复用 GUI 组件(产品方向,本阶段不做)。
+- SSH / direct WS + token / HTTP API。
 
 **Status**: Planned
 
@@ -590,6 +652,18 @@ HTTP adapter 必须映射已有 Host use cases，不复制领域逻辑。
 
 **Status**: Planned
 
+| Item | Spec | Scope | Status |
+|---|---|---|---|
+| M12.1 | [`S0083`](spec/ship/S0083-extension-manifest-and-im-channel-runtime.md) | Extension manifest、IM channel bridge、fixed session、default workspace、source reminder、SendChannelMessage、loopback IM | Done |
+| M12.2 | [`S0084`](spec/ship/S0084-built-in-telegram-im-extension.md) | Built-in Telegram IM extension、Bot API long polling、DM/group mention、local HTTP stub coverage | Done |
+| M12.3 | [`S0085`](spec/ship/S0085-gui-im-extension-settings.md) | GUI IM settings、Telegram toggle、extension config IPC、built-in package discovery | Done |
+| M12.4 | [`S0090`](spec/ship/S0090-gui-provider-delete-and-dark-code-theme.md) | 修复 GUI Provider 删除能力和 dark code block Shiki theme 漂移 | Done |
+| M12.5 | [`S0091`](spec/ship/S0091-built-in-qq-and-wechat-im-extensions.md) | Built-in QQ Bot / WeChat IM extensions and shared adapter boundary | Done |
+| M12.6 | [`S0092`](spec/ship/S0092-im-message-media-and-human-cadence.md) | SendChannelMessage media payload and IM human-cadence guidance | Done |
+| M12.7 | [`S0093`](spec/ship/S0093-gui-im-settings-platform-layout.md) | GUI IM Settings compact platform rows and expandable details | Done |
+| M12.8 | [`S0094`](spec/ship/S0094-im-inbound-runtime.md) | QQ and WeChat built-in IM inbound runtime receive paths | Done |
+| M12.9 | [`S0095`](spec/ship/S0095-gui-im-session-list-refresh.md) | Refresh GUI session lists for background IM-created sessions | Done |
+
 ---
 
 ## Active Specs
@@ -658,6 +732,35 @@ HTTP adapter 必须映射已有 Host use cases，不复制领域逻辑。
 | [`S0060`](spec/ship/S0060-relay-hosted-webui-e2e-validation.md) | Relay hosted WebUI real e2e validation | Done |
 | [`S0061`](spec/ship/S0061-hosted-defaults-and-cli-command-surface.md) | Hosted defaults and CLI command surface | Done |
 | [`S0062`](spec/ship/S0062-npm-package-and-release-workflow.md) | Npm package and release workflow | Done |
+| [`S0063`](spec/ship/S0063-ai-release-notes.md) | AI release notes from commit summaries | Done |
+| [`S0064`](spec/ship/S0064-gui-product-intent-and-boundary.md) | GUI product intent and Electron boundary | Done |
+| [`S0065`](spec/ship/S0065-gui-electron-shell-and-embedded-host.md) | GUI Electron shell and embedded local Host | Done |
+| [`S0066`](spec/ship/S0066-gui-local-project-workspace.md) | GUI local Project-first workspace | Done |
+| [`S0067`](spec/ship/S0067-gui-relay-device-and-remote-project-selection.md) | GUI Relay Device and explicit remote Project selection | Done |
+| [`S0068`](spec/ship/S0068-gui-codex-app-polish-and-e2e.md) | GUI Codex App polish and local + Relay e2e | Done |
+| [`S0069`](spec/ship/S0069-gui-codex-ui-refactor.md) | GUI Codex 风一刀重构:模块化 renderer + sidebar inline sessions + project picker + Add Remote modal + Settings view + markdown + 工具块注册表 + 流式 IPC channel | Done |
+| [`S0070`](spec/ship/S0070-gui-streaming-and-tool-blocks.md) | GUI streaming UX + 7 个特化工具块 + unified diff + 真实 provider local + Relay e2e | Done |
+| [`S0071`](spec/ship/S0071-gui-visual-fidelity-and-settings-shell.md) | GUI 视觉打底 + Settings macOS 风重构 | Done |
+| [`S0072`](spec/ship/S0072-gui-glass-sidebar-and-picker-anchoring.md) | GUI glass sidebar + 删除未实现入口 + 空态文案修正 + project picker 跟随触发 pill | Done |
+| [`S0073`](spec/ship/S0073-provider-model-profile-contract.md) | Provider/model profile、available models、三角色模型选择与 GUI model picker | Done |
+| [`S0074`](spec/ship/S0074-gui-model-provider-settings-split.md) | GUI Settings 模型页和 Provider 页拆分 | Done |
+| [`S0075`](spec/ship/S0075-provider-catalog-model-cards.md) | Provider 页 /models catalog 获取和模型卡片选择 | Done |
+| [`S0076`](spec/ship/S0076-provider-modal-search-and-direct-key.md) | Provider 新建 modal、catalog 搜索、provider 名称归一和直接 API key | Done |
+| [`S0077`](spec/ship/S0077-auxiliary-session-title-generation.md) | 第一条 chat 后用 auxiliary model 生成持久 session title | Done |
+| [`S0078`](spec/ship/S0078-gui-provider-settings-forward-config-and-simplification.md) | GUI Settings 前向 provider/model profile 和 Provider/Model 表单简化 | Done |
+| [`S0083`](spec/ship/S0083-extension-manifest-and-im-channel-runtime.md) | Extension manifest、IM channel bridge、fixed session、source reminder 与 SendChannelMessage | Done |
+| [`S0084`](spec/ship/S0084-built-in-telegram-im-extension.md) | Built-in Telegram IM extension with Bot API long polling | Done |
+| [`S0085`](spec/ship/S0085-gui-im-extension-settings.md) | GUI IM extension settings and Telegram toggle | Done |
+| [`S0086`](spec/ship/S0086-auto-compact-and-session-memory.md) | Auto compact and session memory | Done |
+| [`S0087`](spec/ship/S0087-gui-ui-polish-sweep.md) | Codex-inspired GUI visual pass and GUI tool trace polish | Done |
+| [`S0088`](spec/ship/S0088-gui-streaming-thinking-contract.md) | GUI streaming thinking contract | Done |
+| [`S0089`](spec/ship/S0089-memory-reliability-and-dream-trigger.md) | Memory reliability and dream trigger fix | Done |
+| [`S0090`](spec/ship/S0090-gui-provider-delete-and-dark-code-theme.md) | GUI Provider delete and dark code theme fixes | Done |
+| [`S0091`](spec/ship/S0091-built-in-qq-and-wechat-im-extensions.md) | Built-in QQ Bot and WeChat IM extensions | Done |
+| [`S0092`](spec/ship/S0092-im-message-media-and-human-cadence.md) | IM media message payload and human response cadence | Done |
+| [`S0093`](spec/ship/S0093-gui-im-settings-platform-layout.md) | GUI IM Settings platform layout | Done |
+| [`S0094`](spec/ship/S0094-im-inbound-runtime.md) | IM inbound runtime receive paths | Done |
+| [`S0095`](spec/ship/S0095-gui-im-session-list-refresh.md) | GUI IM session list refresh | Done |
 
 ---
 

package/docs/SHIP.md

@@ -197,6 +197,7 @@ pnpm release patch --dry-run
 pnpm release patch
 pnpm release minor
 pnpm release major
+pnpm release patch --no-generate-notes
 ```
 
 正式 release 脚本职责包括：
@@ -207,13 +208,18 @@ pnpm release major
 - 构建 public `scorel` npm package
 - 执行 `npm pack` 安装烟雾测试
 - bump 所有 package version
-- 更新 changelog
+- 默认用 DeepSeek V4 Flash 从上一个 `v*` tag 之后的 commits 生成 changelog notes
+- 更新 changelog；只有显式 `--no-generate-notes` 时才写入最小版本标题
 - commit `release: vX.Y.Z`
 - tag `vX.Y.Z`
-- push branch + tag
 - publish root `scorel` package to npm
+- push branch + tag
+- create GitHub Release from the same generated changelog notes
+- upload the same-version `npm pack` tarball as the only GitHub Release asset
+
+Release notes 使用 `DEEPSEEK_API_KEY` 调用 DeepSeek 官方 API，默认 endpoint 为 `https://api.deepseek.com/v1`，默认模型为 `deepseek-v4-flash`。Dry-run 在缺少 key 或 API 失败时可打印 deterministic fallback preview；正式 release 默认要求 AI notes 成功，除非显式传入 `--no-generate-notes`。
 
-GitHub Actions 提供手动触发入口，默认执行 `patch` dry-run。正式 publish 需要仓库 secret `NPM_TOKEN`，对应 npm 账号当前为 `chanlerdev`。
+GitHub Actions 提供手动触发入口，默认执行 `patch` dry-run。正式 release 使用 `GITHUB_TOKEN` 创建 GitHub Release；正式 publish 需要仓库 secret `NPM_TOKEN`，对应 npm 账号当前为 `chanlerdev`。AI release notes 需要仓库 secret `DEEPSEEK_API_KEY`。
 
 ---
 

package/docs/spec/channels.md

@@ -1,156 +1,163 @@
-# Channel — Daemon 内部的消息注入适配器
+# Channel — Extension-Backed IM Bridge
 
-> 上游：`architecture.md`、`spec/daemon.md`
-> 主题：把 IM 消息、cron 触发等外部输入归一为 Daemon 内部的 `AgentMessage` 注入。
+> 上游：`architecture.md`、`spec/daemon.md`、`spec/extensions.md`
+> 当前落地：S0083 Extension Manifest And IM Channel Runtime
 
 ---
 
-## 1. 设计目标
+## 1. 定位
 
-Channel 是 **Daemon 内部的子模块**，负责将非交互式的外部输入（IM、cron、webhook）转化为标准的 `AgentMessage` 注入 Runtime。
+Channel 是外部消息入口。S0083 后，IM Channel 通过 Extension manifest 接入 Host：
 
-**不再是**：Entry 的统一入口（Entry 通过 DaemonClient 协议直连 Daemon）。
+```text
+IM Adapter -> Channel Bridge -> ScorelHost -> ScorelRuntime -> SendChannelMessage -> IM Adapter
+```
+
+Channel 不拥有 Runtime、Session、queue、memory 或 replay。它只把外部 IM 消息转成现有 Host turn，并把模型通过 `SendChannelMessage` 发出的文本或附件元数据送回当前 IM 会话。
 
-Channel 只处理那些"不是人坐在终端前打字"的输入源。CLI / GUI / WebUI 这些交互式 Entry 直接通过 DaemonClient 协议发送指令，不经过 Channel。
+CLI / GUI / WebUI 仍然直接通过 DaemonClient / Host application service 操作 Host，不经过 Channel。
 
 ---
 
-## 2. Channel 与 Entry 的区别
+## 2. Extension Manifest
+
+IM channel 由 extension 提供：
+
+```json
+{
+  "id": "telegram",
+  "kind": "im",
+  "displayName": "Telegram",
+  "adapter": "./adapter.js",
+  "skills": ["./skills"]
+}
+```
 
-| | Entry（交互式） | Channel（非交互式） |
-|---|---|---|
-| 例子 | CLI / GUI / WebUI | Telegram Bot / cron / webhook |
-| 连接方式 | DaemonClient 协议 | Daemon 内部模块 |
-| 生命周期 | 用户主动连接/断开 | Daemon 启动时加载，持续运行 |
-| 双向通信 | ✅ 收发 event | ❌ 只注入消息，不接收实时事件流 |
-| 输出回传 | DaemonClient event stream | Channel 自行轮询或 hook 回调 |
+`id` 同时是 extension id 和 channel id。启用 extension 后，其 `skills` 目录进入现有 Skill index。
 
 ---
 
-## 3. ChannelAdapter 接口
+## 3. Adapter Contract
+
+Adapter 只处理平台 IO：
 
 ```typescript
-interface ChannelAdapter {
-  readonly id: string;                       // 'telegram' | 'wechat' | 'cron' | 'webhook'
-  start(ctx: ChannelContext): Promise<void>;
+interface ImAdapter {
+  start(ctx: ImAdapterContext): Promise<void>;
   stop(): Promise<void>;
+  sendMessage(target: ImTarget, message: ImOutgoingMessage): Promise<void>;
+  setTyping?(target: ImTarget, typing: boolean): Promise<void>;
 }
 
-interface ChannelContext {
-  inject: MessageInjector;
-  subscribe: (cb: (event: ScorelEvent) => void) => () => void;
-  config: ChannelConfig;
+interface ImAdapterContext {
+  onMessage(message: ImIncomingMessage): Promise<void>;
+  logger: Logger;
 }
-
-type MessageInjector = (msg: AgentMessage) => Promise<void>;
 ```
 
-Channel 职责：
-1. 从外部源接收消息
-2. 调 `inject(msg)` 注入 Daemon
-3. 可选：订阅 event 流用于回传结果（如 Telegram bot 需要把 assistant 回复发回群里）
+Adapter 不创建 session，不写 JSONL，不实现 follow-up / steer，不读写 memory。
 
 ---
 
-## 4. Injector：Daemon 内部路由
+## 4. Channel Bridge
 
-```typescript
-// Daemon 内部实现
-function createInjector(daemon: Daemon): MessageInjector {
-  return async (msg) => {
-    // 走 session lane 串行化，与 DaemonClient.prompt() 同等待遇
-    await daemon.enqueue({ method: "prompt", params: { text: msg } });
-  };
-}
-```
+Host 内部 bridge 负责：
+
+- `(extensionId, externalConversationId) -> sessionId` 固定绑定；
+- 创建 / 注册默认 workspace：`~/.scorel/workspace`；
+- 通过现有 `send_message` 路径提交用户消息；
+- 注入 channel source `harness_item kind="channel_context"`；
+- 为当前 channel turn 暴露 `SendChannelMessage` tool。
 
-Channel 注入的消息和 DaemonClient 发来的 prompt **走同一条路径**，享受同样的并发控制和事件广播。
+Binding 持久化在：
+
+```text
+~/.scorel/channels/im-bindings.json
+```
 
 ---
 
-## 5. 消息载体：`<system_reminder>` 包裹
+## 5. Runtime Semantics
 
-非交互式 Channel 注入时，用 `<system_reminder>` XML 包裹，让 LLM 区分来源：
+IM 消息复用现有 runtime 行为：
 
-```typescript
-await inject({
-  role: 'user',
-  content: `<system_reminder source="telegram" from="${msg.from}">
-${msg.content}
-</system_reminder>`,
-  timestamp: Date.now(),
-});
+```text
+idle session     -> ordinary user_message
+running default  -> follow_up queue
+/steer message   -> steer queue
+/interrupt msg   -> steer queue
 ```
 
+不新增 IM runtime，不新增 IM queue。
+
 ---
 
-## 6. 初期落地的 Channel
+## 6. Source Reminder
 
-| Channel | 形态 | 阶段 |
-|---------|------|------|
-| `telegram` | Bot API，收到 mention/DM 时注入 | 后期 |
-| `wechat` | WeCom / 非官方桥 | 后期 |
-| `cron` | 定时任务触发（`node-cron`） | 后期 |
-| `webhook` | HTTP POST 触发注入 | 后期 |
+每个 IM turn 会在用户消息前注入 hidden channel reminder：
 
-**初期不需要任何 Channel**。CLI/GUI 通过 DaemonClient 直连 Daemon，Channel 是 IM/自动化场景的补充。
+```xml
+<system-reminder>
+This message came from an IM channel.
+
+channel: telegram
+conversation_type: group
+sender_display_name: Chanler
+mentioned_bot: true
+
+Use SendChannelMessage to reply to the current conversation when needed.
+</system-reminder>
+```
+
+模型可见的是来源语义，不是 raw platform id。raw chat id / open id 只作为 routing data 保存在 bridge/adapter context。
 
 ---
 
-## 7. Channel 输出回传
+## 7. Reply Tool
 
-IM Bot 需要把 agent 回复发回对话。两种方式：
+当前已落地的回复工具：
 
-**方式 A：subscribe event stream（推荐）**
 ```typescript
-class TelegramChannel implements ChannelAdapter {
-  async start(ctx: ChannelContext) {
-    // 订阅 assistant 消息，发回 Telegram
-    ctx.subscribe((event) => {
-      if (event.type === "message_end" && event.message.role === "assistant") {
-        this.sendToTelegram(event.message);
-      }
-    });
-    // 监听 Telegram 消息，注入 Daemon
-    this.bot.on("message", (msg) => ctx.inject(wrapMessage(msg)));
-  }
-}
+SendChannelMessage({
+  text?: string,
+  attachments?: Array<{
+    type: "image" | "file",
+    path?: string,
+    url?: string,
+    mimeType?: string,
+    caption?: string
+  }>
+})
 ```
 
-**方式 B：afterTurn hook（简单场景）**
-```typescript
-// 作为 Extension 实现，在每轮结束后回传
-onEvent: async (event) => {
-  if (event.type === "turn_end") { ... }
-}
-```
+规则：
+
+- 默认目标是当前 IM conversation；
+- `text` 和 `attachments` 至少提供一个；
+- adapter 可以对暂不支持的附件返回明确 tool error，不能静默忽略；
+- 模型不填写 Telegram chat id、飞书 open id、Slack channel id 等 raw id；
+- 无 channel context 时返回 `no_channel_context`；
+- adapter send 失败时返回 tool error 并写 diagnostics。
 
 ---
 
-## 8. 与 Daemon 的关系
+## 8. Built-In Channels
 
-```
-Daemon
-  ├── DaemonServer（处理 client 连接：CLI/GUI/WebUI）
-  ├── ChannelManager（管理非交互式输入源）
-  │     ├── TelegramChannel
-  │     ├── CronChannel
-  │     └── WebhookChannel
-  ├── SessionManager
-  └── ScorelRuntime
-```
+当前 foundation 提供 built-in `loopback` IM extension，用于真实 Host/JSONL/tool 链路验证。
+
+后续真实 provider：
 
-Channel 是 Daemon 的可选模块。纯本地 embedded 模式下不加载任何 Channel。
+- S0084: Telegram Bot API long polling；
+- S0091: QQ Bot / WeChat official bot-style adapter；
+- S0092: structured `SendChannelMessage` payload and IM response cadence。
 
 ---
 
 ## 9. 延后项
 
-- IM Channel 具体实现（Telegram、企业微信、Slack）
-- cron Channel 调度模型
-- Channel 级别的消息去重/防抖（IM 群消息风暴）
-- Channel 权限（哪些群/用户能触发 agent）
-
----
-
-*Channel 从"所有输入的统一入口"收窄为"Daemon 内部的非交互式消息源适配器"。交互式 Entry 通过 DaemonClient 协议直连，不经过 Channel。*
+- Telegram webhook mode；
+- GUI extension management；
+- extension marketplace / signing / sandbox；
+- extension MCP server startup；
+- proactive cross-conversation send；
+- cron / webhook channel。

package/docs/spec/client.md

@@ -137,7 +137,7 @@ GUI 和 WebUI 的添加流程统一为：
 4. 调用 `registerProject(workDir)`。
 5. Host canonicalize 路径并返回 Project。
 
-本地和远程使用同一套协议。远程 GUI 通过 SSH proxy 接入时，目录浏览仍由远端 Host 完成。
+本地和远程使用同一套 Host API。M9 GUI 远程路径只使用 Relay；M10 SSH proxy 接入时，目录浏览仍由远端 Host 完成。
 
 ### 2.3 Trusted Full Access
 
@@ -231,7 +231,7 @@ const transport = new WsTransport({ url, token });
 // Hosted WebUI / Relay device routing
 const transport = new RelayTransport({ relayUrl, deviceId, clientId });
 
-// GUI-managed remote device
+// M10 GUI-managed SSH remote device
 const transport = await createSshProxyTransport(sshConfig);
 
 // Pure HTTP integration
@@ -241,8 +241,8 @@ const client = new HttpScorelClient({ baseUrl, token });
 规则：
 
 - Embedded 和 WebSocket 是当前已实现 transport。
-- RelayTransport 是后续 hosted WebUI / generic WebUI 的默认远程路径：Entry 和 Host 都连接 Relay，Relay 根据 `deviceId -> clientId` 授权关系转发现有 daemon wire payload。
-- GUI 默认通过 SSH 启动或连接远端 Scorel，再使用 stdio proxy 转发协议。
+- RelayTransport 是 hosted WebUI 和 M9 GUI 的默认远程路径：Entry 和 Host 都连接 Relay，Relay 根据 `deviceId -> clientId` 授权关系转发现有 daemon wire payload。
+- SSH 启动或连接远端 Scorel 属于 M10，通过 stdio proxy 转发协议。
 - 已经部署好的 Host 可作为高级入口直接使用 WS URL + token。
 - HTTP API 是独立 adapter：命令走 HTTP request，事件走 SSE。它映射同一 Host use cases，不复制业务逻辑。
 - 不恢复 Unix socket transport；S0043 已删除该产品路径。
@@ -303,11 +303,17 @@ GUI 同时管理本地和远程环境，采用 Project-first：
 ```text
 Project
   ├── Local Device
-  └── Remote Device
+  └── Relay Device
 ```
 
 两种视图都只使用同一组 Host API。区别只是入口和信息架构，不是后端模型分叉。
 
+GUI 的远程 Project 可见性不同于 WebUI：
+
+- Local Projects：展示 local Host Registry 全集。
+- Relay Projects：只展示用户在 GUI 中显式选择过的 `deviceId + projectId`。
+- GUI 不把远程 Host Registry 全集自动映射成主 Project list。
+
 ---
 
 ## 7. Pre-1.0 切换规则