@geminilight/mindos 0.6.34 → 0.6.36

package/_standalone/components/SyncStatusBar.tsx

@@ -183,7 +183,7 @@ export default function SyncStatusBar({ collapsed, onOpenSyncSettings }: SyncSta
     const currentLevel = getStatusLevel(status, false);
     const prev = prevLevelRef.current;
     if (prev !== currentLevel) {
-      const syncT = (t as any).sidebar?.sync;
+      const syncT = t.sidebar?.sync;
       // Recovery: was error/conflicts, now synced
       if ((prev === 'error' || prev === 'conflicts') && currentLevel === 'synced') {
         setToast(syncT?.syncRestored ?? 'Sync restored');

package/_standalone/components/TableOfContents.tsx

@@ -14,7 +14,14 @@ function parseHeadings(content: string): Heading[] {
   const slugger = new GithubSlugger();
   const lines = content.split('\n');
   const headings: Heading[] = [];
+  let inCodeBlock = false;
   for (const line of lines) {
+    // Toggle code fence state (``` or ~~~, with optional language tag)
+    if (/^(`{3,}|~{3,})/.test(line)) {
+      inCodeBlock = !inCodeBlock;
+      continue;
+    }
+    if (inCodeBlock) continue;
     const match = line.match(/^(#{1,4})\s+(.+)/);
     if (match) {
       const level = match[1].length;

package/_standalone/components/setup/StepAI.tsx

@@ -1,16 +1,35 @@
 'use client';
 
-import { Brain, Zap, SkipForward, CheckCircle2 } from 'lucide-react';
+import { useState, useEffect } from 'react';
+import { Brain, Zap, SkipForward, CheckCircle2, ChevronDown, ChevronRight, Copy } from 'lucide-react';
 import { Field, Input, ApiKeyInput } from '@/components/settings/Primitives';
-import type { SetupState, SetupMessages } from './types';
+import type { SetupState, SetupMessages, PortStatus } from './types';
+import StepPorts from './StepPorts';
 
 export interface StepAIProps {
   state: SetupState;
   update: <K extends keyof SetupState>(key: K, val: SetupState[K]) => void;
   s: SetupMessages;
+  onCopyToken: () => void;
+  // Port props (embedded in Advanced section)
+  webPortStatus: PortStatus;
+  mcpPortStatus: PortStatus;
+  setWebPortStatus: (s: PortStatus) => void;
+  setMcpPortStatus: (s: PortStatus) => void;
+  checkPort: (port: number, which: 'web' | 'mcp') => void;
+  portConflict: boolean;
 }
 
-export default function StepAI({ state, update, s }: StepAIProps) {
+export default function StepAI({ state, update, s, onCopyToken, webPortStatus, mcpPortStatus, setWebPortStatus, setMcpPortStatus, checkPort, portConflict }: StepAIProps) {
+  const [portsOpen, setPortsOpen] = useState(false);
+
+  // Auto-expand Advanced section if port check finds a problem
+  useEffect(() => {
+    if (!portsOpen && (webPortStatus.available === false || mcpPortStatus.available === false || portConflict)) {
+      setPortsOpen(true);
+    }
+  }, [webPortStatus.available, mcpPortStatus.available, portConflict, portsOpen]);
+
   const providers = [
     { id: 'anthropic' as const, icon: <Brain size={18} />, label: 'Anthropic', desc: 'Claude — claude-sonnet-4-6' },
     { id: 'openai' as const, icon: <Zap size={18} />, label: 'OpenAI', desc: 'GPT or any OpenAI-compatible API' },
@@ -70,6 +89,50 @@ export default function StepAI({ state, update, s }: StepAIProps) {
           )}
         </div>
       )}
+
+      {/* Advanced: Port Settings (collapsed) */}
+      <div className="pt-3 mt-1" style={{ borderTop: '1px solid var(--border)' }}>
+        <button
+          type="button"
+          onClick={() => setPortsOpen(!portsOpen)}
+          className="flex items-center gap-1.5 text-xs font-medium"
+          style={{ color: 'var(--muted-foreground)' }}>
+          {portsOpen ? <ChevronDown size={12} /> : <ChevronRight size={12} />}
+          {s.advancedPorts}
+        </button>
+        {portsOpen && (
+          <div className="mt-3 space-y-5">
+            {/* MCP Auth Token (read-only) */}
+            <div className="space-y-1.5">
+              <p className="text-xs font-medium" style={{ color: 'var(--foreground)' }}>
+                🔑 {s.tokenSectionTitle}
+              </p>
+              <div className="flex items-center gap-2">
+                <code className="flex-1 truncate text-xs font-mono px-3 py-2 rounded-lg"
+                  style={{ background: 'var(--muted)', color: 'var(--foreground)' }}>
+                  {state.authToken}
+                </code>
+                <button type="button" onClick={onCopyToken}
+                  className="flex items-center gap-1 px-2.5 py-2 text-xs rounded-lg border transition-colors hover:bg-muted shrink-0"
+                  style={{ borderColor: 'var(--border)', color: 'var(--foreground)' }}>
+                  <Copy size={12} /> {s.copyToken}
+                </button>
+              </div>
+              <p className="text-xs" style={{ color: 'var(--muted-foreground)' }}>
+                {s.tokenSectionHint}
+              </p>
+            </div>
+
+            {/* Port Settings */}
+            <StepPorts
+              state={state} update={update}
+              webPortStatus={webPortStatus} mcpPortStatus={mcpPortStatus}
+              setWebPortStatus={setWebPortStatus} setMcpPortStatus={setMcpPortStatus}
+              checkPort={checkPort} portConflict={portConflict} s={s}
+            />
+          </div>
+        )}
+      </div>
     </div>
   );
 }

package/_standalone/components/setup/StepDots.tsx

@@ -1,5 +1,6 @@
 'use client';
 
+import { CheckCircle2 } from 'lucide-react';
 import { useLocale } from '@/lib/LocaleContext';
 
 export interface StepDotsProps {
@@ -7,32 +8,39 @@ export interface StepDotsProps {
   setStep: (s: number) => void;
   stepTitles: readonly string[];
   disabled?: boolean;
+  /** Number of "numbered" steps to show (Confirm step is not numbered) */
+  numberedSteps?: number;
 }
 
-export default function StepDots({ step, setStep, stepTitles, disabled }: StepDotsProps) {
+export default function StepDots({ step, setStep, stepTitles, disabled, numberedSteps }: StepDotsProps) {
   const { t } = useLocale();
+  const count = numberedSteps ?? stepTitles.length;
+  // Only render dots for numbered steps (exclude Confirm)
+  const dotsToShow = stepTitles.slice(0, count);
+  const isConfirmStep = step >= count;
+
   return (
     <div className="flex items-center gap-2 mb-8" role="navigation" aria-label="Setup steps">
-      {stepTitles.map((title: string, i: number) => (
+      {dotsToShow.map((title: string, i: number) => (
         <div key={i} className="flex items-center gap-2">
-          {i > 0 && <div className="w-8 h-px" style={{ background: i <= step ? 'var(--amber)' : 'var(--border)' }} />}
+          {i > 0 && <div className="w-8 h-px" style={{ background: i <= step || isConfirmStep ? 'var(--amber)' : 'var(--border)' }} />}
           <button onClick={() => setStep(i)}
             aria-current={i === step ? 'step' : undefined}
             aria-label={title}
             className="flex flex-col items-center gap-1 p-1 -m-1 disabled:cursor-not-allowed disabled:opacity-60"
-            disabled={disabled || i >= step}
-            title={(disabled || i >= step) ? t.hints.cannotJumpForward : undefined}>
+            disabled={disabled || i > step}
+            title={(disabled || i > step) ? t.hints.cannotJumpForward : undefined}>
             <div
               className="w-6 h-6 rounded-full text-xs font-medium flex items-center justify-center transition-colors"
               style={{
-                background: i <= step ? 'var(--amber)' : 'var(--muted)',
-                color: i <= step ? 'var(--amber-foreground)' : 'var(--muted-foreground)',
-                opacity: i <= step ? 1 : 0.5,
+                background: (i < step || isConfirmStep) ? 'var(--amber)' : i === step ? 'var(--amber)' : 'var(--muted)',
+                color: (i <= step || isConfirmStep) ? 'var(--amber-foreground)' : 'var(--muted-foreground)',
+                opacity: (i <= step || isConfirmStep) ? 1 : 0.5,
               }}>
-              {i + 1}
+              {(i < step || isConfirmStep) ? <CheckCircle2 size={14} /> : i + 1}
             </div>
             <span className="text-[10px] leading-tight hidden sm:inline max-w-[4rem] text-center truncate"
-              style={{ color: i === step ? 'var(--foreground)' : 'var(--muted-foreground)', opacity: i <= step ? 1 : 0.5 }}>
+              style={{ color: (i === step && !isConfirmStep) ? 'var(--foreground)' : 'var(--muted-foreground)', opacity: (i <= step || isConfirmStep) ? 1 : 0.5 }}>
               {title}
             </span>
           </button>

package/_standalone/components/setup/StepKB.tsx

@@ -1,6 +1,7 @@
 'use client';
 
 import { useState, useEffect, useRef } from 'react';
+import { AlertCircle } from 'lucide-react';
 import { Field } from '@/components/settings/Primitives';
 import type { Messages } from '@/lib/i18n';
 import type { SetupState } from './types';
@@ -26,6 +27,7 @@ export interface StepKBProps {
 
 export default function StepKB({ state, update, t, homeDir }: StepKBProps) {
   const s = t.setup;
+  const [passwordTouched, setPasswordTouched] = useState(false);
   // Build platform-aware placeholder, e.g. /Users/alice/MindOS/mind or C:\Users\alice\MindOS\mind
   // Windows homedir always contains \, e.g. C:\Users\Alice — safe to detect by separator
   const sep = homeDir.includes('\\') ? '\\' : '/';
@@ -232,6 +234,30 @@ export default function StepKB({ state, update, t, homeDir }: StepKBProps) {
         </div>
       </div>
       )}
+
+      {/* ── Security ── */}
+      <div className="pt-2 mt-2" style={{ borderTop: '1px solid var(--border)' }}>
+        <Field label={<>{s.webPassword} <span style={{ color: 'var(--error)' }}>*</span></>} hint={s.webPasswordHint}>
+          <input
+            type="password"
+            value={state.webPassword}
+            onChange={e => { update('webPassword', e.target.value); setPasswordTouched(true); }}
+            onBlur={() => setPasswordTouched(true)}
+            placeholder="••••••••"
+            className="w-full px-3 py-2 text-sm rounded-lg border outline-none transition-colors focus-visible:ring-1 focus-visible:ring-ring"
+            style={{
+              background: 'var(--input, var(--card))',
+              borderColor: passwordTouched && !state.webPassword.trim() ? 'var(--error)' : 'var(--border)',
+              color: 'var(--foreground)',
+            }}
+          />
+          {passwordTouched && !state.webPassword.trim() && (
+            <p className="text-xs flex items-center gap-1 mt-1" style={{ color: 'var(--error)' }}>
+              <AlertCircle size={11} /> {s.webPasswordRequired}
+            </p>
+          )}
+        </Field>
+      </div>
     </div>
   );
 }

package/_standalone/components/setup/constants.tsx

@@ -7,7 +7,8 @@ export const TEMPLATES: Array<{ id: Template; icon: React.ReactNode; dirs: strin
   { id: 'empty', icon: <FileText size={18} />, dirs: ['README.md', 'CONFIG.json', 'INSTRUCTION.md'] },
 ];
 
-export const TOTAL_STEPS = 6;
+export const TOTAL_STEPS = 4;
 export const STEP_KB = 0;
-export const STEP_PORTS = 2;
-export const STEP_AGENTS = 4;
+export const STEP_AI = 1;
+export const STEP_AGENTS = 2;
+export const STEP_REVIEW = 3;

package/_standalone/data/skills/mindos/SKILL.md

@@ -96,21 +96,12 @@ It covers: startup protocol, write tool selection, and step-by-step execution de
 | List top-level Mind Spaces | `mindos_list_spaces` | Full `mindos_list_files` when you only need zone names and README blurbs |
 | Find files | `mindos_search_notes` (2-4 parallel keyword variants) | Single-keyword search |
 | Read content | `mindos_read_file` or `mindos_read_lines` (for large files) | Reading entire large file when you need 10 lines |
-| Small text edit | `mindos_update_section` / `mindos_update_lines` / `mindos_insert_after_heading` | `mindos_write_file` for small changes |
-| Append to end | `mindos_append_to_file` | Rewriting entire file to add a line |
-| Full file replacement | `mindos_write_file` | Using this when a section edit suffices |
-| New file | `mindos_create_file` | Creates parent dirs but does NOT scaffold Space files |
-| New Mind Space (zone + README + INSTRUCTION) | `mindos_create_space` | The only way to create a Space. `create_file` creates plain folders |
-| Rename a Space directory | `mindos_rename_space` | `rename_file` (files only; does not rename folders) |
-| Add CSV row | `mindos_append_csv` (validates header) | Manual string append without header check |
-| Check impact before rename | `mindos_get_backlinks` | Renaming without checking references |
-| Inspect recent changes | `mindos_get_recent` | Guessing what changed recently |
-| Recover old version | `mindos_get_file_at_version` | Asking user to recall what was there |
+
+Write, structural, and history tools → [references/write-supplement.md](./references/write-supplement.md).
 
 ### Fallbacks
 
 - `mindos_bootstrap` unavailable → manual reads of root `INSTRUCTION.md` + `README.md`.
-- Line/section tools unavailable → read + constrained `mindos_write_file` (simulate minimal edit).
 - Search returns empty → don't give up: (1) scan tree in context, (2) read candidate files directly, (3) `mindos_list_files` on specific subdirectories, (4) try synonym/alternate-language keywords.
 
 ---
@@ -120,17 +111,8 @@ It covers: startup protocol, write tool selection, and step-by-step execution de
 | Pattern | When | Key steps |
 |---------|------|-----------|
 | **Read-only Q&A** | Lookup / summarize / quote | Tree reasoning → search → read → answer with citations → state gaps |
-| **Single-file edit** | One clear target file | Startup → read target + local conventions → minimal edit → verify → summarize |
-| **Multi-file routing** | Unstructured input, multiple destinations | Parse into semantic units → routing table → confirm → edit → summarize |
-| **Conversation retrospective** | Distill / capture session | Confirm scope → extract decisions/pitfalls/actions → route → trace changes |
-| **SOP execution** | Repeatable procedure | Read SOP fully → execute stepwise → update stale sections → propose SOP update if diverged |
-| **Structural change** | Rename / move / delete | `get_backlinks` → impact report → confirm → execute → update refs → sync READMEs |
-| **CSV append** | Add row to a table | Read header → validate fields → `mindos_append_csv` |
-| **Cross-agent handoff** | Continue another agent's work | Read task state + decisions → continue without re-discovery → write back progress |
-| **Periodic review** | Summarize recent changes | `get_recent`/`get_history` → read changed files → structured summary |
-| **Handoff doc** | Create a briefing | Read sources → synthesize (background, decisions, status, open items) → place in project dir |
-
-For detailed execution steps on write patterns → [references/write-supplement.md](./references/write-supplement.md).
+
+For write, SOP, structural, and handoff patterns → [references/write-supplement.md](./references/write-supplement.md).
 
 ---
 

package/_standalone/data/skills/mindos-zh/SKILL.md

@@ -95,21 +95,12 @@ description: >
 | 列出顶层心智空间 | `mindos_list_spaces` | 只需分区概览却拉整棵 `list_files` |
 | 找文件 | `mindos_search_notes`（2-4 条并行关键词变体）| 单关键词搜索 |
 | 读内容 | `mindos_read_file` 或 `mindos_read_lines`（大文件） | 只需 10 行却读整文件 |
-| 小范围文字修改 | `mindos_update_section` / `update_lines` / `insert_after_heading` | 小修改用 `write_file` |
-| 追加到末尾 | `mindos_append_to_file` | 为了加一行重写整文件 |
-| 整文件替换 | `mindos_write_file` | 用它做章节级编辑 |
-| 新建文件 | `mindos_create_file` | 自动创建父目录，但不会生成空间脚手架文件 |
-| 新建心智空间（目录 + README + INSTRUCTION）| `mindos_create_space` | 创建空间的唯一方式。`create_file` 只创建普通目录 |
-| 重命名空间目录 | `mindos_rename_space` | `rename_file`（仅文件，不能重命名文件夹）|
-| 追加 CSV | `mindos_append_csv`（校验表头）| 手动拼字符串不校验 |
-| 重命名前查影响 | `mindos_get_backlinks` | 不查引用就重命名 |
-| 查看近期变动 | `mindos_get_recent` | 猜最近改了什么 |
-| 恢复历史版本 | `mindos_get_file_at_version` | 让用户回忆之前内容 |
+
+写入、结构变更、历史工具 → [references/write-supplement.md](./references/write-supplement.md)。
 
 ### 回退
 
 - `mindos_bootstrap` 不可用 → 手动读根 `INSTRUCTION.md` + `README.md`。
-- 行级/章节级工具不可用 → 读 + 受限 `mindos_write_file`（模拟最小修改）。
 - 搜索无结果 → 不放弃：(1) 扫上下文中的树；(2) 直接读候选文件；(3) `mindos_list_files` 细化子目录；(4) 用同义词/中英文变体重试。
 
 ---
@@ -119,15 +110,6 @@ description: >
 | 模式 | 适用场景 | 关键步骤 |
 |------|----------|----------|
 | **只读问答** | 查找 / 总结 / 引用 | 目录树推断 → 搜索 → 读取 → 标注来源 → 明确说信息缺口 |
-| **单文件编辑** | 目标文件明确 | 启动协议 → 读目标 + 局部约定 → 最小修改 → 验证 → 总结 |
-| **多文件路由** | 非结构化输入，多个目的地 | 解析为语义单元 → 路由表 → 确认 → 编辑 → 汇总 |
-| **对话复盘** | 提炼 / 沉淀会话 | 确认范围 → 抽取决策/踩坑/下一步 → 路由 → 记录变更 |
-| **SOP 执行** | 可重复流程 | 完整读 SOP → 分步执行 → 更新过时段落 → 偏差则提议更新 |
-| **结构变更** | 重命名 / 移动 / 删除 | `get_backlinks` → 影响报告 → 确认 → 执行 → 更新引用 → 同步 README |
-| **CSV 追加** | 追加表格行 | 读表头 → 校验字段 → `mindos_append_csv` |
-| **跨 Agent 接力** | 继续其他 Agent 的工作 | 读任务状态+决策 → 无需重新探索直接接续 → 回写进度 |
-| **周期性回顾** | 汇总近期变动 | `get_recent`/`get_history` → 读变动文件 → 结构化总结 |
-| **交接文档** | 创建简报 | 读来源 → 合成（背景、决策、状态、待办）→ 放项目目录 |
 
 写入模式详细执行步骤 → [references/write-supplement.md](./references/write-supplement.md)。
 

package/_standalone/lib/agent/context.ts

@@ -9,6 +9,15 @@ import type { AgentMessage } from '@mariozechner/pi-agent-core';
 import type { ToolResultMessage, AssistantMessage, UserMessage } from '@mariozechner/pi-ai';
 import { countCjkChars } from '@/lib/core/cjk';
 
+const DEV = process.env.NODE_ENV === 'development';
+
+// AgentMessage is opaque; cast to access role/content at runtime.
+interface AgentMessageFields {
+  role: string;
+  content: string | Array<{ type: string; text?: string }>;
+}
+function asMsg(m: AgentMessage): AgentMessageFields { return m as unknown as AgentMessageFields; }
+
 // ---------------------------------------------------------------------------
 // Token estimation — CJK-aware (CJK ~1.5 tokens/char, ASCII ~0.25 tokens/char)
 // ---------------------------------------------------------------------------
@@ -28,7 +37,7 @@ export function estimateStringTokens(text: string): number {
 /** Rough token count for a single AgentMessage */
 function messageTokens(msg: AgentMessage): number {
   if ('content' in msg) {
-    const content = (msg as any).content;
+    const content = asMsg(msg).content;
     if (typeof content === 'string') return estimateStringTokens(content);
     if (Array.isArray(content)) {
       let tokens = 0;
@@ -121,11 +130,11 @@ export function truncateToolOutputs(messages: AgentMessage[]): AgentMessage[] {
   // Find the index of the last 'toolResult' role message
   let lastToolIdx = -1;
   for (let i = messages.length - 1; i >= 0; i--) {
-    if ((messages[i] as any).role === 'toolResult') { lastToolIdx = i; break; }
+    if (asMsg(messages[i]).role === 'toolResult') { lastToolIdx = i; break; }
   }
 
   return messages.map((msg, idx) => {
-    const m = msg as any;
+    const m = asMsg(msg);
     if (m.role !== 'toolResult' || idx === lastToolIdx) return msg;
 
     const toolMsg = m as ToolResultMessage;
@@ -160,7 +169,7 @@ Be concise and factual. Output only the summary, no preamble.`;
 
 /** Extract a short text representation from an AgentMessage for summarization */
 function messageToText(m: AgentMessage): string {
-  const msg = m as any;
+  const msg = asMsg(m);
   const role = msg.role;
   let content = '';
 
@@ -202,7 +211,7 @@ export async function compactMessages(
   // Adjust split point to avoid cutting between an assistant (with tool calls)
   // and its tool result.
   let splitIdx = messages.length - 6;
-  while (splitIdx > 0 && (messages[splitIdx] as any).role === 'toolResult') {
+  while (splitIdx > 0 && asMsg(messages[splitIdx]).role === 'toolResult') {
     splitIdx--;
   }
   if (splitIdx < 2) {
@@ -230,17 +239,17 @@ export async function compactMessages(
 
     const summaryText = summaryMessage.content
       .filter(p => p.type === 'text')
-      .map(p => (p as any).text)
+      .map(p => (p as { text?: string }).text)
       .join('');
 
-    console.log(`[ask] Compacted ${earlyMessages.length} early messages into summary (${summaryText.length} chars)`);
+    if (DEV) console.log(`[ask] Compacted ${earlyMessages.length} early messages into summary (${summaryText.length} chars)`);
 
     const summaryContent = `[System Note: Older conversation history has been truncated due to context length limits, but here is an AI-generated summary of what was discussed so far.]\n\n${summaryText}`;
 
     // If first recent message is also 'user', merge summary into it to avoid
     // consecutive user messages (Anthropic rejects user→user sequences).
-    if ((recentMessages[0] as any)?.role === 'user') {
-      const merged = { ...(recentMessages[0] as any) };
+    if (asMsg(recentMessages[0])?.role === 'user') {
+      const merged = { ...asMsg(recentMessages[0]) } as AgentMessageFields;
       if (typeof merged.content === 'string') {
         merged.content = `${summaryContent}\n\n---\n\n${merged.content}`;
       } else if (Array.isArray(merged.content)) {
@@ -270,7 +279,7 @@ export async function compactMessages(
     console.warn('[ask] Compact failed, applying hard prune as fallback:', err);
     const pruned = hardPrune(messages, systemPrompt, modelName);
     if (pruned.length < messages.length) {
-      console.log(`[ask] Hard prune fallback succeeded (${messages.length} → ${pruned.length} messages)`);
+      if (DEV) console.log(`[ask] Hard prune fallback succeeded (${messages.length} → ${pruned.length} messages)`);
       return { messages: pruned, compacted: false };
     }
     // If pruning also can't help, let it bubble up so request fails safely
@@ -307,28 +316,28 @@ export function hardPrune(
   }
 
   // Ensure we don't cut between an assistant (with tool calls) and its tool result.
-  while (cutIdx < messages.length - 1 && (messages[cutIdx] as any).role === 'toolResult') {
+  while (cutIdx < messages.length - 1 && asMsg(messages[cutIdx]).role === 'toolResult') {
     total -= messageTokens(messages[cutIdx]);
     cutIdx++;
   }
 
   // Ensure first message is 'user' (Anthropic requirement)
-  while (cutIdx < messages.length - 1 && (messages[cutIdx] as any).role !== 'user') {
+  while (cutIdx < messages.length - 1 && asMsg(messages[cutIdx]).role !== 'user') {
     total -= messageTokens(messages[cutIdx]);
     cutIdx++;
   }
 
   // Fallback: if no user message found in remaining messages, inject a synthetic one
   const pruned = cutIdx > 0 ? messages.slice(cutIdx) : messages;
-  if (pruned.length > 0 && (pruned[0] as any).role !== 'user') {
-    console.log(`[ask] Hard pruned ${cutIdx} messages, injecting synthetic user message (${messages.length} → ${pruned.length + 1})`);
+  if (pruned.length > 0 && asMsg(pruned[0]).role !== 'user') {
+    if (DEV) console.log(`[ask] Hard pruned ${cutIdx} messages, injecting synthetic user message (${messages.length} → ${pruned.length + 1})`);
     const syntheticUser: UserMessage = {
       role: 'user',
       content: '[System Note: Older conversation history has been truncated due to context length limits. The user may refer to things you can no longer see. If so, kindly ask them to repeat the context.]',
       timestamp: Date.now(),
     };
     return [syntheticUser as AgentMessage, ...pruned];
-  } else if (cutIdx > 0 && pruned.length > 0 && (pruned[0] as any).role === 'user') {
+  } else if (cutIdx > 0 && pruned.length > 0 && asMsg(pruned[0]).role === 'user') {
     // If we pruned and the first message IS a user message, prepend the warning to it
     const firstMsg = { ...pruned[0] } as UserMessage;
     firstMsg.content = `[System Note: Older conversation history has been truncated due to context length limits. The user may refer to things you can no longer see. If so, kindly ask them to repeat the context.]\n\n` + firstMsg.content;
@@ -336,7 +345,7 @@ export function hardPrune(
   }
 
   if (cutIdx > 0) {
-    console.log(`[ask] Hard pruned ${cutIdx} messages (${messages.length} → ${messages.length - cutIdx})`);
+    if (DEV) console.log(`[ask] Hard pruned ${cutIdx} messages (${messages.length} → ${messages.length - cutIdx})`);
     return pruned;
   }
 
@@ -365,11 +374,11 @@ export function createTransformContext(
     const preTokens = estimateTokens(result);
     const sysTokens = estimateStringTokens(systemPrompt);
     const ctxLimit = getContextLimit(modelName);
-    console.log(`[ask] Context: ~${preTokens + sysTokens} tokens (messages=${preTokens}, system=${sysTokens}), limit=${ctxLimit}`);
+    if (DEV) console.log(`[ask] Context: ~${preTokens + sysTokens} tokens (messages=${preTokens}, system=${sysTokens}), limit=${ctxLimit}`);
 
     // 2. Compact if >70% context limit (skip if user disabled)
     if (contextStrategy === 'auto' && needsCompact(result, systemPrompt, modelName)) {
-      console.log('[ask] Context >70% limit, compacting...');
+      if (DEV) console.log('[ask] Context >70% limit, compacting...');
       const compactResult = await compactMessages(
         result,
         getCompactModel(),
@@ -380,9 +389,9 @@ export function createTransformContext(
       result = compactResult.messages;
       if (compactResult.compacted) {
         const postTokens = estimateTokens(result);
-        console.log(`[ask] After compact: ~${postTokens + sysTokens} tokens`);
+        if (DEV) console.log(`[ask] After compact: ~${postTokens + sysTokens} tokens`);
       } else {
-        console.log('[ask] Compact skipped (too few messages or fallback used), hard prune will handle overflow if needed');
+        if (DEV) console.log('[ask] Compact skipped (too few messages or fallback used), hard prune will handle overflow if needed');
       }
     }
 

package/_standalone/lib/i18n/modules/onboarding.ts

@@ -15,7 +15,7 @@ export const onboardingEn = {
     dismiss: 'Dismiss',
   },
   setup: {
-    stepTitles: ['Knowledge Base', 'AI Provider', 'Ports', 'Security', 'Agent Tools', 'Review'],
+    stepTitles: ['Knowledge Base', 'AI Configuration', 'Agent Tools', 'Confirm'],
     // Step 1
     kbPath: 'Knowledge base path',
     kbPathHint: 'Absolute path to your notes directory.',
@@ -56,8 +56,12 @@ export const onboardingEn = {
     generateToken: 'Generate',
     copyToken: 'Copy',
     copiedToken: 'Copied!',
-    webPassword: 'Web UI Password',
-    webPasswordHint: 'Optional. Protect browser access with a password.',
+    webPassword: 'Web Password',
+    webPasswordHint: 'Protect your knowledge base from unauthorized browser access.',
+    webPasswordRequired: 'Password is required to protect your data.',
+    advancedPorts: 'Advanced Settings',
+    tokenSectionTitle: 'MCP Auth Token (auto-generated)',
+    tokenSectionHint: 'Used by AI agents to connect to your MindOS server.',
     // Step 5 — Agent Tools
     agentToolsTitle: 'Agent Tools',
     agentToolsHint: 'Select AI agents to configure with MindOS MCP. Agents marked "not installed" can be configured now — they will work once you install the app.',
@@ -210,7 +214,7 @@ export const onboardingZh = {
     dismiss: '关闭',
   },
   setup: {
-    stepTitles: ['知识库', 'AI 服务商', '端口', '安全', 'Agent 工具', '确认'],
+    stepTitles: ['知识库', 'AI 配置', 'Agent 工具', '确认'],
     // Step 1
     kbPath: '知识库路径',
     kbPathHint: '笔记目录的绝对路径。',
@@ -251,8 +255,12 @@ export const onboardingZh = {
     generateToken: '生成',
     copyToken: '复制',
     copiedToken: '已复制！',
-    webPassword: '网页访问密码',
-    webPasswordHint: '可选。设置后浏览器访问需要登录。',
+    webPassword: '访问密码',
+    webPasswordHint: '保护你的知识库，防止未授权的浏览器访问。',
+    webPasswordRequired: '密码是必填项，用于保护你的数据。',
+    advancedPorts: '高级设置',
+    tokenSectionTitle: 'MCP 认证令牌（已自动生成）',
+    tokenSectionHint: 'AI Agent 连接你的 MindOS 服务器时使用。',
     // Step 5 — Agent Tools
     agentToolsTitle: 'Agent 工具',
     agentToolsHint: '选择要与 MindOS MCP 配置的 AI Agent。标注「未安装」的 agent 可以先行配置，安装应用后即可生效。',