@chanlerdev/scorel 0.0.2 → 0.0.4

package/docs/CHANGELOG.md

@@ -2,6 +2,112 @@
 
 ## Unreleased
 
+## 0.0.4 - 2026-06-14
+
+### Highlights
+
+- Config is now device-scoped only; project-level config is no longer read or written.
+- GUI settings are device-scoped with relay device rename and project scope selector.
+- Local daemon is a singleton background process with idle shutdown and shared state root.
+- RTK token saving settings available in GUI for Bash execution.
+
+### Changes
+
+- GUI connection settings default to official Relay URL; editing requires explicit click.
+- Pairing button label changed to 'Get Pair Code'.
+- Paired Relay devices can be renamed locally; name persists across refresh.
+- Provider delete button moved to a danger zone at bottom of settings panel.
+- Token-saving statistics labels changed to Chinese (Bash 输出 Token / 已节省 Token).
+- RTK token saving can be enabled/disabled in GUI settings, persisted in project config.
+- Cumulative RTK savings stats are maintained across sessions and projects.
+- RTK is detected from default shell; can be installed via Homebrew if missing.
+
+### Fixes
+
+- Glob results are now sorted by workspace-relative path for deterministic ordering across platforms.
+
+### Breaking Changes
+
+- Runtime no longer reads project `.scorel/config.toml`; existing project configs are ignored.
+- GUI local projects and sessions are now stored under `~/.scorel/` instead of `~/.scorel/gui/`; old state is not migrated automatically.
+
+### Verification
+
+- Core config tests prove project config is ignored and device config is used.
+- Daemon embedded tests prove settings writes with projectId write device config only.
+- GUI rendering tests confirm device-scoped selector, provider delete placement, and Chinese token labels.
+- New local-host test verifies device config writes to ~/.scorel/config.toml.
+- E2E CDP script validates shared state paths and daemon lifecycle.
+- Unit tests cover RTK detection, Bash execution with RTK, and runtime stats recording.
+
+### Internal
+
+- `scorel host start` launches a singleton background daemon; `scorel host serve` gains `--idle-timeout-ms` flag.
+- `scorel up` ensures daemon is running but no longer owns its lifecycle.
+- GUI attaches to singleton daemon instead of running embedded Host.
+- gui-store.json lives at `~/.scorel/gui-store.json`.
+
+- Add `scorel host start` for background singleton Host startup; `scorel up` now leaves the singleton Host running when WebUI exits.
+- GUI local Host state now uses the shared `~/.scorel` root for Projects and Sessions, with `gui-store.json` stored at `~/.scorel/gui-store.json`.
+- GUI starts and attaches to the singleton local daemon instead of starting a second local Host writer.
+- Local daemon now idle-shuts down when there are no clients, no active work, and no active IM extensions; active IM keeps it alive until explicit stop.
+- GUI connection settings now default to the official Relay, hide Relay URL editing behind an edit action, show `Get Pair Code`, support paired-device rename/details, and use a device-scoped settings selector.
+- GUI Provider settings now place `删除提供商` in the Provider configuration block, token-saving stats use clear Chinese labels, and Relay device rows expose expand/edit affordances.
+- Config loading now uses the device config only; Project `.scorel/config.toml` is no longer a runtime or Settings config source.
+
+## 0.0.3 - 2026-06-12
+
+### Highlights
+
+- QQ Bot and WeChat inbound support: receive and route messages via official WebSocket or HTTP callback
+- GUI now auto-refreshes session lists when IM sessions are created in the background
+- Streaming thinking delta events in GUI for real-time thought display
+- Memory status display and reliability improvements (dream trigger, duplicate detection)
+
+### Changes
+
+- GUI automatically refreshes session lists when IM sessions are created in the background
+- Implement IM inbound runtime for QQ and WeChat (WebSocket gateway, HTTP callback server)
+- Compact IM settings layout with collapsible rows for Telegram, QQ, and WeChat
+- SendChannelMessage now supports optional attachments (image/file) with metadata
+- Human-cadence guidance injected into IM replies (acknowledgement, progress updates)
+- Add built-in QQ Bot and WeChat IM extension support (sending and receiving)
+- Add thinking_delta event for streaming real-time thought content in GUI
+- Add memory status query and GUI display for memory status
+- Improve daily append quality with validation for low-signal summaries and duplicate detection
+- Persist memory dream state (dirty/running/scheduled/failure) with restart recovery
+- Refine GUI visual style: Codex-inspired polish for sidebar, empty workspace, composer, code blocks, and tool execution traces
+- Add 'delete provider' button in GUI Settings with full deletion chain
+- Fix IME composition handling in composer (Enter does not submit during IME input)
+- Fix Shiki code block theme from dark to light to match GUI surface
+
+### Fixes
+
+- GUI provider deletion now removes provider, models, and dependent role assignments
+- Dark code block theme fixed to light mode for better readability in dark GUI
+- IME composition handling in composer fixed (Enter does not submit during IME input)
+
+### Breaking Changes
+
+- QQ and WeChat config keys changed: old `tokenEnv`, `token`, `webhookKeyEnv`, etc. are no longer supported; users must re-enter App ID/App Secret or Webhook URL.
+
+### Verification
+
+- Unit and integration tests for QQ gateway identify/heartbeat/dispatch/stop
+- Unit and integration tests for WeChat callback verification and text message routing
+- Tests for session change notification and renderer refresh behavior
+- Tests for attachment validation and human-cadence guidance in channel harness
+- Tests for QQ/WeChat adapter normalization and secret redaction
+- Tests for streaming thinking deltas and final message reconciliation
+- Tests for low-signal daily summary rejection and duplicate entry skipping
+- Tests for memory dream state persistence and status retrieval
+- GUI tests for IM settings layout, provider deletion, code block theme, and memory status display
+
+### Internal
+
+- Update README to clarify IM behavior details for QQ Bot and WeChat integrations
+- Add planned spec S0089 for memory reliability and dream trigger improvements
+
 ## 0.0.2 - 2026-06-11
 
 ### Highlights

package/docs/ROADMAP.md

@@ -303,7 +303,7 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 - `scorel daemon serve` 全部 flag 有合理默认;token 在 `~/.scorel/daemon.json` 持久化,跨重启复用。
 - `~/.scorel/daemon.json` 不再每次启动删除;通过 pid liveness + `stoppedAt` 判存活。
 - WebUI Settings 页面通过 `/api/local-daemon` server route 自动发现本地 daemon,一键添加 device。
-- `scorel up` 同时拉起 daemon serve + webui,Ctrl+C 一并退出。
+- `scorel up` 确保 singleton daemon 可用并启动 WebUI；退出 `scorel up` 不关闭后台 daemon；无 client/无 active work/无 active IM 后 idle 自动退出。
 - 全部改动通过自动测试,真实 LLM 手工烟雾通过。
 
 **Steps**:
@@ -315,7 +315,7 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 **Not in M5.6**:
 
 - WebUI 多 daemon 切换 UI;每用户单 daemon 假设。
-- 自动 supervisor / restart;仍需手工 `scorel daemon stop && serve`。
+- restart-on-crash supervisor;仍需手工 `scorel host stop && start`。
 - Windows 专属 PID 语义。
 - TLS / OAuth / 公网隧道。
 
@@ -589,6 +589,15 @@ M5 WebUI 的正式产品方向记录在 [`S0030`](spec/ship/S0030-webui-product-
 | M9.F1.13 | [`S0081`](spec/ship/S0081-automatic-memory.md) | 自动 memory context、daily、dream consolidation、GUI Settings 与 Command+, 设置入口 | Done |
 | M9.F1.14 | [`S0082`](spec/ship/S0082-memory-journal-tool-and-idle-dream.md) | Daily 改为 agent 主循环 AppendDaily 工具，dream 改为项目 idle 后延迟整合 project/root memory | Done |
 | M9.F1.15 | [`S0086`](spec/ship/S0086-auto-compact-and-session-memory.md) | 80% auto compact、compact replay barrier 和每轮 session memory 维护 | Done |
+| M9.F1.16 | [`S0087`](spec/ship/S0087-gui-ui-polish-sweep.md) | Codex-inspired GUI visual pass：学习 Codex 的比例、层级和克制风格，并把 GUI tool blocks 收敛为低噪声执行证据流 | Done |
+| M9.F1.17 | [`S0088`](spec/ship/S0088-gui-streaming-thinking-contract.md) | Streaming thinking contract：补 thinking/content delta，使 thinking 在 turn 运行中按序显示，而不是最终 assistant_message 后才插入 | Done |
+| M9.F1.18 | [`S0089`](spec/ship/S0089-memory-reliability-and-dream-trigger.md) | Memory reliability：修复 AppendDaily 调用质量、dreaming 触发与可观测性，让 M9 后半段聚焦真实使用中的质量优化 | Done |
+| M9.F1.19 | [`S0097`](spec/ship/S0097-rtk-token-saving-settings.md) | GUI Token 节省设置 + RTK Bash output proxy + runtime config | Done |
+| M9.F1.20 | [`S0098`](spec/ship/S0098-local-daemon-singleton-unified-state.md) | 统一本机 Host state root、后台 singleton start、GUI/CLI auto-start + attach、idle shutdown、active IM 保活 | Done |
+| M9.F1.21 | [`S0099`](spec/ship/S0099-gui-connection-device-settings.md) | GUI 连接设置默认官方 Relay、配对设备命名/详情、Settings scope 初版 | Done |
+| M9.F1.22 | [`S0100`](spec/ship/S0100-gui-provider-danger-zone.md) | GUI Provider 删除按钮位置初版 | Done |
+| M9.F1.23 | [`S0101`](spec/ship/S0101-gui-device-settings-polish.md) | GUI Settings 改为设备级配置，修正 Provider 删除位置、Token 文案、设备展开/重命名交互 | Done |
+| M9.F1.24 | [`S0102`](spec/ship/S0102-device-only-config.md) | Config 彻底收敛为设备级唯一配置，移除 Project config 运行时语义 | Done |
 
 **Not in M9 Follow-up**:
 
@@ -654,6 +663,12 @@ HTTP adapter 必须映射已有 Host use cases，不复制领域逻辑。
 | M12.1 | [`S0083`](spec/ship/S0083-extension-manifest-and-im-channel-runtime.md) | Extension manifest、IM channel bridge、fixed session、default workspace、source reminder、SendChannelMessage、loopback IM | Done |
 | M12.2 | [`S0084`](spec/ship/S0084-built-in-telegram-im-extension.md) | Built-in Telegram IM extension、Bot API long polling、DM/group mention、local HTTP stub coverage | Done |
 | M12.3 | [`S0085`](spec/ship/S0085-gui-im-extension-settings.md) | GUI IM settings、Telegram toggle、extension config IPC、built-in package discovery | Done |
+| M12.4 | [`S0090`](spec/ship/S0090-gui-provider-delete-and-dark-code-theme.md) | 修复 GUI Provider 删除能力和 dark code block Shiki theme 漂移 | Done |
+| M12.5 | [`S0091`](spec/ship/S0091-built-in-qq-and-wechat-im-extensions.md) | Built-in QQ Bot / WeChat IM extensions and shared adapter boundary | Done |
+| M12.6 | [`S0092`](spec/ship/S0092-im-message-media-and-human-cadence.md) | SendChannelMessage media payload and IM human-cadence guidance | Done |
+| M12.7 | [`S0093`](spec/ship/S0093-gui-im-settings-platform-layout.md) | GUI IM Settings compact platform rows and expandable details | Done |
+| M12.8 | [`S0094`](spec/ship/S0094-im-inbound-runtime.md) | QQ and WeChat built-in IM inbound runtime receive paths | Done |
+| M12.9 | [`S0095`](spec/ship/S0095-gui-im-session-list-refresh.md) | Refresh GUI session lists for background IM-created sessions | Done |
 
 ---
 
@@ -742,6 +757,23 @@ HTTP adapter 必须映射已有 Host use cases，不复制领域逻辑。
 | [`S0083`](spec/ship/S0083-extension-manifest-and-im-channel-runtime.md) | Extension manifest、IM channel bridge、fixed session、source reminder 与 SendChannelMessage | Done |
 | [`S0084`](spec/ship/S0084-built-in-telegram-im-extension.md) | Built-in Telegram IM extension with Bot API long polling | Done |
 | [`S0085`](spec/ship/S0085-gui-im-extension-settings.md) | GUI IM extension settings and Telegram toggle | Done |
+| [`S0086`](spec/ship/S0086-auto-compact-and-session-memory.md) | Auto compact and session memory | Done |
+| [`S0087`](spec/ship/S0087-gui-ui-polish-sweep.md) | Codex-inspired GUI visual pass and GUI tool trace polish | Done |
+| [`S0088`](spec/ship/S0088-gui-streaming-thinking-contract.md) | GUI streaming thinking contract | Done |
+| [`S0089`](spec/ship/S0089-memory-reliability-and-dream-trigger.md) | Memory reliability and dream trigger fix | Done |
+| [`S0090`](spec/ship/S0090-gui-provider-delete-and-dark-code-theme.md) | GUI Provider delete and dark code theme fixes | Done |
+| [`S0091`](spec/ship/S0091-built-in-qq-and-wechat-im-extensions.md) | Built-in QQ Bot and WeChat IM extensions | Done |
+| [`S0092`](spec/ship/S0092-im-message-media-and-human-cadence.md) | IM media message payload and human response cadence | Done |
+| [`S0093`](spec/ship/S0093-gui-im-settings-platform-layout.md) | GUI IM Settings platform layout | Done |
+| [`S0094`](spec/ship/S0094-im-inbound-runtime.md) | IM inbound runtime receive paths | Done |
+| [`S0095`](spec/ship/S0095-gui-im-session-list-refresh.md) | GUI IM session list refresh | Done |
+| [`S0096`](spec/ship/S0096-glob-stable-order.md) | Glob stable cross-platform ordering | Done |
+| [`S0097`](spec/ship/S0097-rtk-token-saving-settings.md) | RTK token saving settings and Bash output proxy | Done |
+| [`S0098`](spec/ship/S0098-local-daemon-singleton-unified-state.md) | Local daemon singleton and unified state | Done |
+| [`S0099`](spec/ship/S0099-gui-connection-device-settings.md) | GUI connection device settings | Done |
+| [`S0100`](spec/ship/S0100-gui-provider-danger-zone.md) | GUI Provider danger-zone placement | Done |
+| [`S0101`](spec/ship/S0101-gui-device-settings-polish.md) | GUI device-scoped Settings polish | Done |
+| [`S0102`](spec/ship/S0102-device-only-config.md) | Device-only config | Done |
 
 ---
 

package/docs/SHIP.md

@@ -35,7 +35,7 @@ open https://scorel.chanler.dev
 pnpm scorel pair <pair-code>
 ```
 
-`scorel host serve` 会启动本机 Host、注册当前目录为初始 Project，并默认连接官方 Relay。`scorel up` / `pnpm dev` 只作为本地开发便利入口：本地 Host + 本地 WebUI。
+`scorel host serve` 会以前台调试模式启动本机 Host、注册当前目录为初始 Project，并默认连接官方 Relay。`scorel host start` 会启动或复用后台 singleton Host，并返回到 shell；`scorel host stop` 显式关闭它。`scorel up` / `pnpm dev` 只作为本地开发便利入口：确保后台 Host 可用，然后启动本地 WebUI，但不拥有 Host 生命周期。后台 Host 无 client、无 active work、无 active IM 时会按 idle timeout 自动退出；active IM 会保持 Host 存活。
 
 ---
 

package/docs/spec/channels.md

@@ -13,7 +13,7 @@ Channel 是外部消息入口。S0083 后，IM Channel 通过 Extension manifest
 IM Adapter -> Channel Bridge -> ScorelHost -> ScorelRuntime -> SendChannelMessage -> IM Adapter
 ```
 
-Channel 不拥有 Runtime、Session、queue、memory 或 replay。它只把外部 IM 消息转成现有 Host turn，并把模型通过 `SendChannelMessage` 发出的文本送回当前 IM 会话。
+Channel 不拥有 Runtime、Session、queue、memory 或 replay。它只把外部 IM 消息转成现有 Host turn，并把模型通过 `SendChannelMessage` 发出的文本或附件元数据送回当前 IM 会话。
 
 CLI / GUI / WebUI 仍然直接通过 DaemonClient / Host application service 操作 Host，不经过 Channel。
 
@@ -118,12 +118,23 @@ Use SendChannelMessage to reply to the current conversation when needed.
 当前已落地的回复工具：
 
 ```typescript
-SendChannelMessage({ text: string })
+SendChannelMessage({
+  text?: string,
+  attachments?: Array<{
+    type: "image" | "file",
+    path?: string,
+    url?: string,
+    mimeType?: string,
+    caption?: string
+  }>
+})
 ```
 
 规则：
 
 - 默认目标是当前 IM conversation；
+- `text` 和 `attachments` 至少提供一个；
+- adapter 可以对暂不支持的附件返回明确 tool error，不能静默忽略；
 - 模型不填写 Telegram chat id、飞书 open id、Slack channel id 等 raw id；
 - 无 channel context 时返回 `no_channel_context`；
 - adapter send 失败时返回 tool error 并写 diagnostics。
@@ -137,9 +148,8 @@ SendChannelMessage({ text: string })
 后续真实 provider：
 
 - S0084: Telegram Bot API long polling；
-- Feishu；
-- Slack 或 Discord；
-- WeCom，而不是微信个人号优先。
+- S0091: QQ Bot / WeChat official bot-style adapter；
+- S0092: structured `SendChannelMessage` payload and IM response cadence。
 
 ---
 

package/docs/spec/extensions.md

@@ -152,11 +152,12 @@ class PromptBuilder {
 
 **格式**：TOML
 
-**读取顺序**（高 → 低）：
-1. `.scorel/config.toml`（项目级）
-2. `~/.scorel/config.toml`（用户级）
+**读取路径**：
+1. `~/.scorel/config.toml`（用户级 / 设备级唯一 config）
 
-`~/.scorel` 是固定用户级根目录；`~/.scorel/config.toml` 是固定用户级配置文件；JSONL session 默认固定写入 `~/.scorel/sessions`。这些路径是产品约定，不作为可配置字段暴露。测试和内部嵌入场景可以通过代码注入临时 session 目录，但这不是用户配置面。
+一个设备只有一份 config。Project 是 workspace/session 对象，不拥有 Provider、Model、Memory、Runtime 或 Extension 配置；运行时不会读取项目目录下的 `.scorel/config.toml`。
+
+`~/.scorel` 是固定用户级根目录；`~/.scorel/config.toml` 是固定用户级配置文件；JSONL session 默认固定写入 `~/.scorel/sessions`。这些路径是产品约定，不作为可配置字段暴露。测试和内部嵌入场景可以通过代码注入临时 `scorelHomeDir` / session 目录，但这不是用户配置面。
 
 环境变量不参与通用配置覆盖，只通过 `apiKeyEnv` 指向具体密钥。CLI 参数也不复制完整 config schema；只有明确属于交互控制的参数才进入 CLI。
 
@@ -244,7 +245,7 @@ auxiliary = "aux"
 
 `available_models.*` 是 Scorel 的 available model / use pool。它们从 `provider_models.*` 里引用少量真正允许 Scorel 使用的模型；Runtime、GUI composer 和未来 subagent selection 只能选择 pool 内模型，不能直接选择 provider catalog 或 provider model 里的任意条目。
 
-GUI 的 provider/model 写入必须 merge 到现有 `.scorel/config.toml`：同一 provider 下追加第二个 provider model，或把 provider model 加入 available models 时，不能删除已存在 provider、provider model、available model 或 role assignment，除非用户明确覆盖对应字段。
+GUI 的 provider/model 写入必须 merge 到现有设备级 `config.toml`：同一 provider 下追加第二个 provider model，或把 provider model 加入 available models 时，不能删除已存在 provider、provider model、available model 或 role assignment，除非用户明确覆盖对应字段。
 
 Scorel 仍处在开发阶段，没有存量配置兼容要求。旧 `[models.*]` section 不再支持；遇到旧 section 必须按未知 section 报错。
 

package/docs/spec/ship/S0060-relay-hosted-webui-e2e-validation.verification.md

@@ -38,7 +38,7 @@ The verifier starts:
 - a real local Relay process with durable file store
 - a real local Host daemon process connected outbound to Relay
 - a real WebUI Next dev server
-- a temporary real Project with project-level `.scorel/config.toml`
+- a temporary real Project using the device-level `~/.scorel/config.toml`
 - a Relay Entry using `RelayTransport` and `DaemonClient`
 
 The verifier then:

package/docs/spec/ship/S0073-provider-model-profile-contract.md

@@ -103,12 +103,12 @@ The response must be display-safe:
 - if the target Project has no model profile config yet, `list_models` returns an empty
   model list instead of surfacing config-not-found as a user-facing error.
 
-Expose a Host API for adding/updating a Project's provider/model profile. GUI must use
-this Host-owned path for both local and Relay Projects; renderer code must not write
-`.scorel/config.toml` directly.
+Expose a Host API for adding/updating the device provider/model profile. GUI must use
+this Host-owned path for both local and Relay devices; renderer code must not write
+`~/.scorel/config.toml` directly.
 
 Saving a provider/model profile is a config edit, not a provider call. It must validate
-shape and merge into the existing Project config, but it must not require the target
+shape and merge into the existing device config, but it must not require the target
 Host process to already have the provider API key env var set. Missing credentials
 should block runtime use, not saving.
 
@@ -186,8 +186,8 @@ This spec does not implement a new subagent execution engine.
   - using the selected model's context window.
 - Daemon/client tests cover:
   - model profile summary is exposed without API keys;
-  - a Project with no model config returns an empty model profile summary;
-  - adding/updating a provider/model profile writes a valid `.scorel/config.toml`
+  - a device with no model config returns an empty model profile summary;
+  - adding/updating a provider/model profile writes a valid `~/.scorel/config.toml`
     without requiring API key env vars;
   - adding a second model under the same provider preserves the existing provider and
     model entries;

package/docs/spec/ship/S0074-gui-model-provider-settings-split.md

@@ -56,7 +56,7 @@ page hierarchy.
 ### 4. Existing Host contract
 
 Continue using the Host-owned `list_models` and `upsert_model_profile` path. Renderer
-code must not write `.scorel/config.toml` directly.
+code must not write `~/.scorel/config.toml` directly.
 
 This spec can reuse the S0073 data model and does not need a new protocol message unless
 the UI needs one for clean implementation.

package/docs/spec/ship/S0076-provider-modal-search-and-direct-key.md

@@ -37,7 +37,7 @@ selecting a draft provider.
 Provider config supports either:
 
 - `apiKeyEnv`, resolved from environment variables; or
-- `apiKey`, stored directly in `.scorel/config.toml`.
+- `apiKey`, stored directly in the device `~/.scorel/config.toml`.
 
 GUI never receives direct API key values when listing providers. Editing an existing
 direct-key provider shows only that a direct key is configured. Saving a provider with

package/docs/spec/ship/S0086-auto-compact-and-session-memory.md

@@ -69,7 +69,7 @@ GUI Settings Memory section exposes:
 - session memory toggle;
 - auto compact threshold select.
 
-These controls use the existing project-scoped memory config path.
+These controls use the device-scoped memory config path; memory status and persisted memory artifacts remain project-aware activity data.
 
 ## Not In Scope
 

package/docs/spec/ship/S0087-gui-ui-polish-sweep.md

@@ -0,0 +1,153 @@
+# S0087: Codex-Inspired GUI Visual Pass
+
+## Goal
+
+Move the Scorel desktop GUI closer to a mature Codex-style workbench without copying Codex screen-for-screen.
+
+The business value is product trust. Scorel should stop feeling like an engineering demo and start feeling like a quiet, high-density desktop tool for project-scoped agent work.
+
+This spec is a visual-system pass over existing GUI surfaces. It does not introduce new product capabilities.
+
+## Design Direction
+
+Learn from Codex at the level of visual principles:
+
+- restrained source-list sidebar;
+- white main workspace with low visual noise;
+- natural heading text instead of badge-heavy emphasis;
+- composer as a command surface with a clear input/control row;
+- metadata controls visually attached to the composer;
+- quiet active states, subtle borders, and shallow elevation;
+- compact but readable typography.
+
+Do not copy Codex literally. Scorel remains Project-first and should only show real controls backed by existing product paths.
+
+## Scope
+
+### Visual Pass Targets
+
+- Sidebar source list:
+  - reduce heavy active row treatment;
+  - tighten project/session row rhythm;
+  - make empty session rows quieter;
+  - load session lists for the selected Project and expanded Projects so startup stays responsive without stale empty states;
+  - keep Add Project as the real project-management entry.
+
+- Empty workspace:
+  - hide the empty topbar when it has no useful content;
+  - render the project name as natural heading text, not a large grey badge;
+  - keep the hero centered but calmer and less heavy.
+
+- Composer:
+  - reduce shadow and heavy pill feel;
+  - add whole-surface focus feedback;
+  - make model selection and send action read as a compact control row;
+  - keep fake controls such as attachment, voice, and permission mode hidden.
+
+- Project metadata:
+  - keep project picker as a real control;
+  - visually attach the project picker to the composer area;
+  - keep the popover anchored and searchable.
+
+- Active session:
+  - keep a stable topbar title fallback (`未命名对话`) until auxiliary title generation updates it.
+  - keep expanded thinking content within the message column, with long prose wrapping and code blocks scrolling internally.
+  - render code-block language and copy controls inside the code-block header.
+  - keep markdown code blocks aligned with the GUI light surface and token system; do not use a fixed dark code-block theme in the light workspace.
+  - render tool calls as compact execution evidence rows: clear tool name, target object, status, counters, and expandable details.
+  - keep successful tool output collapsed by default, while making errors, diffs, and pending/running state visible.
+
+### Tool Display Contract
+
+- `Read`: collapsed header shows file basename and line range; expanded details show the returned read text and full path/range evidence.
+- `Glob` / `Grep`: collapsed header shows pattern/result count; expanded details show the returned file or match list plus pagination/mode metadata when present.
+- `Bash`: collapsed header shows command and exit status when known; expanded details show stdout/stderr/cwd evidence returned by the tool.
+- `Edit` / `Write`: collapsed header shows operation, file basename, and `+/-` counters; diff details are visible by default and remain collapsible.
+- `TodoWrite`: collapsed header shows active progress; expanded details show the current todo list and item states.
+- Fallback tools: collapsed header shows tool name; expanded details show args/result JSON.
+
+## Not In Scope
+
+- New GUI product capability such as SSH remote device, HTTP API, account/auth, review banner, or changed-files diff surface.
+- Runtime, provider/model, memory, channel, extension, or daemon contract changes.
+- Reintroducing disabled placeholder commands.
+- Empty-state plugin recommendation cards.
+- Global conversation history grouping.
+- Voice, attachment, permission-mode, or null-project mode.
+- WebUI component reuse or shared UI package extraction.
+- Streaming thinking/runtime protocol changes. Thinking currently arrives with final persistent assistant messages; streaming thinking requires a follow-up protocol/runtime spec.
+
+## Acceptance Criteria
+
+- Empty workspace has no blank topbar.
+- Empty heading uses natural text, with no badge-like project-name background.
+- Composer has low-shadow elevation, stable focus feedback, and no unimplemented controls.
+- Project picker remains visible and attached to the composer cluster.
+- Sidebar active and empty states are quiet and source-list-like.
+- Startup loads session summaries for the selected Project and expanded Projects, not every Project.
+- Expanded thinking content cannot horizontally stretch the workspace.
+- Long prose wraps inside thinking/markdown content, while code blocks keep formatting and scroll internally.
+- Code blocks show the fenced language as non-interactive metadata on the top-left and a copy control on the top-right.
+- Code block theme and chrome match the GUI light mode instead of rendering as a visually detached dark block.
+- GUI tool blocks read as a low-noise execution trace, not generic JSON dumps.
+- Bash, Read, Glob/Grep, Edit/Write, TodoWrite, and fallback JSON tools share consistent header/body/error/pending styling.
+- File edits surface filename and diff counters in the header; expanded details keep diff/output internally scrollable.
+- Clicking a tool header reveals the right evidence for that tool type, not just raw arguments.
+- Active sessions show `未命名对话` when no generated title exists.
+- Existing GUI behavior remains Project-first.
+- Text remains readable and non-overlapping across narrow and normal desktop widths.
+- Sidebar collapse/resize behavior still works.
+- GUI shell render tests cover the changed contracts.
+- Full `pnpm typecheck && pnpm test` passes.
+
+## Testing Requirements
+
+- Focused GUI tests:
+
+```bash
+pnpm --filter @scorel/app-gui test
+```
+
+- GUI build:
+
+```bash
+pnpm --filter @scorel/app-gui build
+```
+
+- Full check:
+
+```bash
+pnpm typecheck && pnpm test
+```
+
+- Whitespace check:
+
+```bash
+git diff --check
+```
+
+- Run Electron GUI and visually inspect the empty workspace.
+
+## Impacted Files
+
+- `apps/gui/src/renderer/workspace/Workspace.tsx`
+- `apps/gui/src/renderer/App.tsx`
+- `apps/gui/src/renderer/shell/Sidebar.tsx`
+- `apps/gui/src/renderer/shell/ProjectTree.tsx`
+- `apps/gui/src/renderer/workspace/EmptyState.tsx`
+- `apps/gui/src/renderer/composer/Composer.tsx`
+- `apps/gui/src/renderer/chatbox/ShikiCodeBlock.tsx`
+- `apps/gui/src/renderer/chatbox/ShikiCodeBlock.test.tsx`
+- `apps/gui/src/renderer/chatbox/tool-blocks/*`
+- `apps/gui/src/renderer/styles.css`
+- `apps/gui/src/renderer/gui-shell.test.tsx`
+- `apps/gui/src/renderer/app-session-preload.test.tsx`
+- `apps/gui/src/sidebar-layout.test.ts`
+- `docs/ROADMAP.md`
+- `docs/spec/ship/S0087-gui-ui-polish-sweep.md`
+
+## Risks And Boundaries
+
+- Visual polish can sprawl. Keep this pass focused on existing workbench surfaces.
+- A better-looking fake feature is still bad product design. Hide unimplemented controls instead of styling them.
+- Render tests prove structure but not taste. Use manual GUI inspection before handoff.

package/docs/spec/ship/S0088-gui-streaming-thinking-contract.md

@@ -0,0 +1,35 @@
+# S0088: GUI Streaming Thinking Contract
+
+## Goal
+
+Make thinking visible while a turn is running instead of inserting the thinking block only after the final persistent `assistant_message` arrives.
+
+The business value is process trust. Users should see the agent's work unfold in order, not as a post-hoc replay after the visible answer has already completed.
+
+## Context
+
+Today Scorel streams only `text_delta`. Thinking content exists in the final persistent assistant message, so GUI can only render it after the turn is finalized. A GUI-only placeholder would be misleading because it would imply thinking is streaming when the runtime has not emitted it.
+
+## Scope
+
+- Add a protocol/runtime event for streaming thinking, likely `thinking_delta` or a more general ordered `content_delta`.
+- Preserve ordered assistant content blocks so thinking, text, and tool calls reconcile cleanly with the final persistent assistant message.
+- Update GUI projector to create and update thinking parts incrementally.
+- Keep final `assistant_message` as authoritative reconciliation, not a second visual insertion.
+
+## Not In Scope
+
+- Tool block visual polish; covered by `S0087`.
+- Fake GUI placeholders for thinking content.
+- Changing provider reasoning semantics beyond the event stream needed to display already-produced thinking.
+
+## Acceptance Criteria
+
+- Thinking appears during the active turn when the provider/runtime emits thinking content.
+- Final assistant reconciliation does not duplicate or reorder thinking/text/tool parts.
+- Existing text streaming remains smooth.
+- Protocol, daemon/client, GUI projector, and tests all agree on the new event contract.
+
+## Status
+
+Done.

package/docs/spec/ship/S0089-memory-reliability-and-dream-trigger.md

@@ -0,0 +1,84 @@
+# S0089: Memory Reliability And Dream Trigger
+
+## Goal
+
+Make Scorel memory actually useful in normal GUI/agent use by tightening the `AppendDaily -> idle dream -> memory injection` loop.
+
+The business value is continuity. If users finish meaningful work and later return to the project, Scorel should remember durable progress, decisions, and follow-ups without relying on fragile manual reminders.
+
+## Context
+
+S0081/S0082 established the memory architecture:
+
+- daily evidence is written through the agent-owned `AppendDaily` tool;
+- successful append marks the project dirty;
+- daemon schedules dreaming after project idle time;
+- memory content re-enters future turns through the hidden memory harness.
+
+In practice this is not reliable enough yet:
+
+- `AppendDaily` depends too much on the model remembering a prompt instruction near the end of work;
+- daily entries can be low quality when the model records vague summaries instead of durable evidence;
+- dream triggering is hard to observe and easy to miss;
+- idle-only scheduling means memory may not update before the app/host exits;
+- GUI has no clear signal that daily/dream/memory actually happened.
+
+## Scope
+
+### AppendDaily Quality
+
+- Make the tool contract harder to ignore in completed meaningful turns.
+- Improve the journal schema/prompt so entries prefer concrete completed work, decisions, evidence paths, and follow-ups over generic summaries.
+- Add validation or lightweight scoring for empty, duplicate, or low-signal entries.
+- Keep `AppendDaily` project-scoped and append-only.
+
+### Dream Trigger Reliability
+
+- Audit the current daemon dirty-project and idle-timer path.
+- Ensure a successful `AppendDaily` reliably schedules a dream attempt.
+- Add a recovery path for pending daily evidence when the process restarts before idle dream fires.
+- Consider a manual or debug trigger if it materially improves verification and support.
+
+### Observability
+
+- Expose enough local state to answer:
+  - when was the last daily append;
+  - whether the project is dirty;
+  - whether dream is scheduled/running/failed;
+  - when project memory was last updated.
+- Surface this in GUI Settings or a compact project memory status area.
+- Keep failures non-blocking for chat turns, but visible enough to debug.
+
+### Injection Verification
+
+- Verify that updated project memory is actually injected into subsequent model context.
+- Add tests or a local verification path proving `AppendDaily` evidence can become project memory and then influence a later turn.
+
+## Not In Scope
+
+- Full activity recorder.
+- Vector search or semantic memory.
+- Topic memory file fan-out.
+- Root/global memory promotion beyond the existing guarded behavior.
+- Replacing the memory harness with provider system prompt content.
+
+## Acceptance Criteria
+
+- Meaningful completed work has a reliable path to daily evidence without depending only on user reminders.
+- Successful `AppendDaily` schedules or queues dream work even across host restarts.
+- Dream status is inspectable from local state and surfaced in GUI.
+- Low-quality or duplicate daily entries are reduced by contract, validation, or tests.
+- A verified path proves daily evidence can update project memory and be injected into a later turn.
+- Existing memory settings remain backward compatible.
+
+## Testing Requirements
+
+- Core tests for `AppendDaily` schema/quality validation.
+- Daemon tests for dirty-project scheduling, idle dream, restart recovery, and failure visibility.
+- GUI tests for memory status rendering if a GUI surface is added.
+- Integration-style test or scripted verification for `AppendDaily -> dream -> memory injection`.
+- Full `pnpm typecheck && pnpm test`.
+
+## Status
+
+Done.