@lsamien/yaovi 0.1.0 → 0.1.2

package/dist-server/server/workspaceRuntime.js

@@ -59,7 +59,7 @@ import { createWorkspaceToolLease } from './workspaceToolLease.js';
 import { WorkspaceTaskCoordinator } from './taskCoordinator.js';
 import { isDiscussion, discussionRounds } from './workspaceDiscussion.js';
 import { WorkspaceKnowledge } from './workspaceKnowledge.js';
-import { emptyMemoryContext, memoryResetReason, memoryDelta, acknowledgeMemory } from './workspaceMemoryContext.js';
+import { emptyMemoryContext, memoryResetReason, advanceMemory, renderMemoryCorrections } from './workspaceMemoryContext.js';
 import { WorkspaceCollaboration } from './workspaceCollaboration.js';
 import { WorkspaceKnowledgeTools, BOT_KNOWLEDGE_RULES } from './workspaceKnowledgeTools.js';
 export { mentionedAgents } from './workspaceMentions.js';
@@ -406,7 +406,8 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
     }
     async deliverForegroundInsertion(owner, conversation, agent, body, targetRunId) {
         const text = body.content.trim();
-        if (!text || body.fileIds.length || body.deviceHost || body.mentionIds.length)
+        // Insertion only corrects the running task; the message keeps its own source and the run keeps its snapshot.
+        if (!text || body.fileIds.length || body.mentionIds.length)
             return undefined;
         const foreground = targetRunId ? [this.store.require(owner, 'run', targetRunId)] : this.foregroundMainRuns(owner, conversation.id).filter(run => run.conversationTaskId === body.taskId);
         const candidates = foreground.filter(run => !run.stopRequested && ['queued', 'running', 'waiting'].includes(run.status))
@@ -467,11 +468,13 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
             const message = {
                 id: messageId, clientRequestId: body.requestId, conversationId: conversation.id, conversationTaskId: root.conversationTaskId, seq: 0, role: 'user',
                 content: text, reasoning: '', runId, status: 'complete', attachments: [], tools: [], createdAt: now, steered: true, steeredInto: root.id,
+                ...(body.deviceHost ? { deviceHost: body.deviceHost } : {}),
             };
             this.store.saveMessage(owner, message);
             const run = {
                 id: runId, conversationId: conversation.id, conversationTaskId: root.conversationTaskId, messageId,
                 mentionIds: [], activeAgentId: agent.id, status: 'complete', round: 0, steeredInto: root.id,
+                ...(body.deviceHost ? { deviceHost: body.deviceHost } : {}),
                 createdAt: now, updatedAt: now, authorizationVersion: this.authorizationVersion(owner),
             };
             this.store.saveRun(owner, run);
@@ -517,6 +520,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
             mentionIds: [], activeAgentId: conversation.administratorId, status: 'queued', round: 0,
             createdAt: now, updatedAt: now, authorizationVersion: this.authorizationVersion(owner),
             routeIntent: 'main_only', steerText: text.trim(),
+            ...(trigger.deviceHost ? { deviceHost: trigger.deviceHost } : {}),
         };
         this.store.atomic(() => {
             this.admit(owner, run, conversation, trigger);
@@ -918,10 +922,12 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
         }
         const memorySettings = new AgentRuntimeConfiguration(this.store).resolve(owner, agent.id).memory;
         const memoryEnabled = memorySettings.enabled;
-        // Legacy context/recall combines self, shared and project memories. Managed
-        // permissions require explicit scoped tools; native self recall is enforced
-        // independently by the Harness and remains available there.
-        const memory = botCapabilities.memory && memoryEnabled && !recovering && !temporaryBackground && !this.botControl.state(owner).enabled ? await this.knowledge.context(owner, agent.id, root.projectId) : emptyMemoryContext('unsupported');
+        // Unmanaged context/recall combines self, shared and project memories. Managed
+        // Bots receive only scopes their rules explicitly allow (specs/021); tools keep
+        // their own review flow, and native self recall stays with the Harness.
+        const memoryAllowance = this.botControl.state(owner).enabled ? this.botControl.memoryReadScopes(owner, agent.id, { groupId: this.botControl.permissions.group(owner, run.id), projectId: root.projectId }) : undefined;
+        const memorySkip = !botCapabilities.memory ? 'unsupported' : !memoryEnabled ? 'disabled' : recovering ? 'recovering' : temporaryBackground ? 'temporary' : undefined;
+        const memory = !memorySkip ? await this.knowledge.context(owner, agent.id, root.projectId, memoryAllowance && { self: memoryAllowance.self.allowed, shared: memoryAllowance.shared.allowed, project: memoryAllowance.project.allowed }) : emptyMemoryContext('unsupported');
         const memoryStatus = botCapabilities.memory ? 'ready' : 'upgrade_required';
         if (agent.memoryStatus !== memoryStatus) {
             agent = { ...agent, memoryStatus };
@@ -929,20 +935,28 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
             this.store.event(owner, 'agent.changed', this.store.agentSummary(agent));
         }
         let binding = this.store.get(owner, 'binding', key);
-        const memoryReset = !recovering && binding
-            ? binding.memoryPending ? 'memory_admission_uncertain' : memoryResetReason(memory, binding.memoryState, binding.memoryVersion)
-            : undefined;
+        // Memory content changes are delivered as corrections (user decision 2026-10-22);
+        // only a different authorized scope rebuilds the session. An uncertain admission
+        // recomputes from the last admitted state, whose ledger is cumulative.
+        const memoryReset = !recovering && binding ? memoryResetReason(memory, binding.memoryState) : undefined;
         const rebuild = this.store.get(owner, 'binding-reset', key);
         const sourceReset = !!rebuild;
         const movedRunner = !!rebuild && rebuild.reason !== 'configuration_changed' || !!binding && (binding.deviceHost !== root.deviceHost || binding.computerEnvironmentId !== agent.computerEnvironmentId || binding.runnerId !== target.runner?.id || (binding.execution ?? 'profile') !== chatExecution || !!binding.nativeComputer !== !!target.runner?.nativeComputer);
         // Rebuild old exclusive-environment sessions once: their 模型执行器 Agent may
         // still retain restricted native context even after a new tool binding.
+        // A rebuilt session still replays recaps of older messages; keep the
+        // correction ledger (a different scope starts a fresh one in advanceMemory).
+        let carriedMemory;
         const resetReason = (execution && (binding?.executionRevision !== execution.revision || binding?.executionPolicyVersion !== 2) ? 'execution_environment_changed' : undefined) ?? memoryReset ?? (sourceReset ? rebuild?.reason ?? 'source_changed' : movedRunner ? 'runner_changed' : undefined);
         if (resetReason) {
             if (recovering)
                 throw new HttpError(409, '执行节点已变化，不能在另一节点重放原执行', 'runner_target_changed');
             this.inspector?.record(owner, c.id, { method: 'bot.session-reset', direction: 'event', agentId: agent.id, runId: run.runId, taskId: run.conversationTaskId,
                 data: { reason: resetReason } });
+            // Count only sessions actually discarded; a first turn has nothing to reset.
+            if (binding)
+                this.store.event(owner, 'runtime.event', { botId: agent.id, runId: run.runId, workId: run.id, name: 'session.reset', value: { reason: resetReason } }, c.id);
+            carriedMemory = binding?.memoryState;
             binding = undefined;
         }
         let message = run.currentMessageId
@@ -1527,6 +1541,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                     const message = error instanceof Error ? error.message : '';
                     if (recovering || (!['computer_session_mode_changed', 'model_session_reset_required'].includes(code) && !message.includes('执行方式已改变')))
                         throw error;
+                    carriedMemory ??= binding?.memoryState;
                     binding = undefined;
                     opened = await createSession();
                 }
@@ -1542,7 +1557,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
             binding = {
                 toolsBound: recovering ? binding?.toolsBound : undefined,
                 memoryVersion: binding?.memoryVersion,
-                memoryState: binding?.memoryState,
+                memoryState: binding?.memoryState ?? carriedMemory,
                 memoryPending: binding?.memoryPending,
                 deviceHost: root.deviceHost,
                 runnerId: target.runner?.id,
@@ -1841,7 +1856,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                         }
                         catch { /* keep original query */ }
                     }
-                    const recalled = this.knowledge.nativePeerMode || ['unsupported', 'temporary'].includes(memory.version) || !memorySettings.recall ? '' : await this.knowledge.recall(owner, agent.id, root.projectId, recallText, memory).catch(error => { this.store.event(owner, 'memory.recall.failed', { agentId: agent.id, runId: root.id, code: error instanceof HttpError ? error.code : 'memory_recall_failed', at: Date.now() }); return '记忆召回暂时失败；不能据此判断没有历史事实，可重试记忆工具。'; });
+                    const recalled = this.knowledge.nativePeerMode || ['unsupported', 'temporary'].includes(memory.version) || !memorySettings.recall ? '' : await this.knowledge.recall(owner, agent.id, root.projectId, recallText, memory, memoryAllowance && { self: memoryAllowance.self.allowed, shared: memoryAllowance.shared.allowed, project: memoryAllowance.project.allowed }).catch(error => { this.store.event(owner, 'memory.recall.failed', { agentId: agent.id, runId: root.id, code: error instanceof HttpError ? error.code : 'memory_recall_failed', at: Date.now() }); return '记忆召回暂时失败；不能据此判断没有历史事实，可重试记忆工具。'; });
                     if (environment.tools.plugins && this.mcpPrepare) {
                         const skipped = await this.mcpPrepare(owner, agent).catch(() => [{ service: 'MCP 服务', code: 'mcp_unavailable', message: 'MCP 配置读取失败，本轮未连接' }]);
                         if (skipped.length) {
@@ -1863,6 +1878,8 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                         .filter(message => message.role === 'user' && message.conversationId === c.id && message.conversationTaskId === run.conversationTaskId && message.steeredInto === run.runId)
                         .sort((a, b) => a.seq - b.seq);
                     const currentText = insertions.length ? `${text}\n\n[以下是用户在本轮准备期间按发送顺序追加的消息，请一并处理；有更正时以后面的要求为准]\n${insertions.map(message => message.content).join('\n\n')}` : text;
+                    // Persisted only after the prompt is admitted, like the previous baseline.
+                    const nextMemory = advanceMemory(memory, binding.memoryState);
                     const promptInput = {
                         style: dialogue.style,
                         permissionMode: dialogue.style || dialogue.context ? (this.botControl.permissions.enabled ? (this.botControl.permissions.settings(owner).fullAccess ? 'allow' : 'ask') : agent.approvalPolicy ?? 'ask') : undefined,
@@ -1874,7 +1891,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                         teamRules: team ? TEAM_TOOL_RULES : undefined,
                         routineRules: routines ? ROUTINE_TOOL_RULES : undefined,
                         knowledgeRules: knowledge ? BOT_KNOWLEDGE_RULES : undefined,
-                        memory: [memory.text, recalled].filter(Boolean).join('\n\n'), noReply: NO_REPLY,
+                        memory: [memory.text, renderMemoryCorrections(memory, nextMemory), recalled].filter(Boolean).join('\n\n'), noReply: NO_REPLY,
                         marker: `[yaovi-run:${run.runId}:${resultMessage.id}]`,
                         content: currentText + (systemTurn?.description.length ? '\n[本轮系统服务目录，仅含元数据]\n' + JSON.stringify(systemTurn.description) : ''), contentKind: c.kind === 'group' || !!resetReason || !!run.sessionScopeId || externalReplies ? 'history' : 'user', attachmentRefs,
                     };
@@ -1885,6 +1902,11 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                     }) : undefined;
                     if (dialogue.context && target.model && !workspacePrompt)
                         this.store.event(owner, 'dialogue.context.fallback', { runId: root.id, reason: 'context_budget_fallback' }, c.id);
+                    // Character counts of what this turn sends; provider usage is reported separately.
+                    // Audit what memory rode along: scopes, record IDs and counts, never content.
+                    const memoryScopes = Object.fromEntries(['self', 'shared', 'project'].map(name => [name, memory.scopes?.includes({ self: 'agent', shared: 'user', project: 'project' }[name]) ? 'injected' : `skipped:${memorySkip ?? (memory.version === 'temporary' ? 'temporary' : name === 'project' && !root.projectId ? 'no_project' : name === 'self' && this.knowledge.nativePeerMode ? 'native_peer' : memoryAllowance?.[name].reason ?? 'not_allowed')}`]));
+                    this.inspector?.record(owner, c.id, { method: 'bot.memory', direction: 'request', agentId: agent.id, runId: run.runId, taskId: run.conversationTaskId, data: { scopes: memoryScopes, factIds: memory.facts.map(fact => fact.id), recalledIds: [...recalled.matchAll(/; id:([^\]\s]+)\]/g)].map(match => match[1]), corrections: nextMemory.corrections?.length ?? 0 } });
+                    this.store.event(owner, 'runtime.event', { botId: agent.id, runId: run.runId, workId: run.id, name: 'context.turn', value: { layered: !!workspacePrompt, contentChars: currentText.length, turnContextChars: workspacePrompt ? workspacePrompt.turnContext.length : submittedText.length, memoryChars: promptInput.memory.length, memoryScopes, correctionCount: nextMemory.corrections?.length ?? 0, estimate: true } }, c.id);
                     this.inspector?.record(owner, c.id, { method: 'bot.environment', direction: 'request', agentId: agent.id, runId: run.runId, taskId: run.conversationTaskId,
                         data: { snapshot: environment, computerToolIds: environmentCatalog.map(tool => tool.id), pluginWarnings: resultMessage.serviceWarnings } });
                     binding.memoryPending = true;
@@ -1915,7 +1937,7 @@ export class WorkspaceRuntime extends WorkspaceScheduler {
                     // Only an admitted prompt may advance the durable injection baseline.
                     // A rejected/lost receipt must not make the next turn omit new facts.
                     binding.memoryVersion = memory.version;
-                    binding.memoryState = acknowledgeMemory(memory, binding.memoryState);
+                    binding.memoryState = nextMemory;
                     binding.memoryPending = undefined;
                     binding.contextSeq = Math.max(binding.contextSeq ?? 0, dispatch.contextThroughSeq);
                     this.store.put(owner, 'binding', key, binding);

package/dist-server/shared/botEnvironment.js

@@ -2,14 +2,19 @@ export const deviceCapabilityLabels = {
     ready: '就绪', offline: '离线', disabled: '未开放', unsupported: '不支持', not_authorized: '未授权',
     system_permission_required: '系统权限未就绪', human_control: '等待人工交还', paused: '接管中断，需重新接管并交还', agent_unavailable: '当前 Bot 不可用',
 };
+export const CURRENT_DEVICE_ALIASES = ['本机', '这台设备', '这台电脑'];
+export function isCurrentDeviceAlias(value) {
+    return CURRENT_DEVICE_ALIASES.some(alias => alias === value.trim());
+}
 export function deviceSourceText(snapshot) {
     if (!snapshot.sourceHost)
-        return '本轮消息来自未绑定控制主机的客户端；「本机」无法确定，必须指定目标电脑。历史消息的设备来源不适用于本轮。';
+        return '本轮未收到客户端设备身份，「本机」无法确定；「这台设备」「这台电脑」同样无法识别。请明确说明来源身份缺失，提示在当前电脑的桌面客户端检查服务器连接、重新登录或更新客户端后重试；不要列出其他电脑让用户反复选择。历史消息的设备来源不适用于本轮。';
     const host = snapshot.hosts.find(host => host.id === snapshot.sourceHost);
     const name = host?.name || snapshot.sourceHost;
+    const aliases = '「这台设备」「这台电脑」与「本机」同义，均指本轮消息来源电脑；身份已确定时不要再次要求用户选择设备。';
     if (!host?.online || !host.open)
-        return `本轮用户消息来源设备：${JSON.stringify(name)}（${!host?.online ? '当前离线或未连接' : '全局未开放'}）。「本机」仍指这台电脑，不能回退到服务器或其他电脑。`;
-    return `本轮用户消息来自${host.kind === 'server' ? '服务器' : '电脑'}「${name}」。对本轮而言，「本机」指这台电脑（host=${JSON.stringify(host.target)}）。`;
+        return `本轮用户消息来源设备：${JSON.stringify(name)}（${!host?.online ? '当前离线或未连接' : '全局未开放'}）。「本机」仍指这台电脑，不能回退到服务器或其他电脑。${aliases}直接说明当前不可用的原因。`;
+    return `本轮用户消息来自${host.kind === 'server' ? '服务器' : '电脑'}「${name}」。对本轮而言，「本机」指这台电脑（host=${JSON.stringify(host.target)}）。${aliases}`;
 }
 export function deviceInventoryText(snapshot) {
     if (!snapshot.hosts.length)
@@ -19,7 +24,8 @@ export function deviceInventoryText(snapshot) {
         const details = m ? [
             m.osRelease && `系统版本=${JSON.stringify(m.osRelease)}`, m.arch && `架构=${JSON.stringify(m.arch)}`,
             m.shell && `Shell=${JSON.stringify(m.shell)}`, m.homeDirectory && `主目录=${JSON.stringify(m.homeDirectory)}`,
-            m.defaultCwd ? `默认工作目录=${JSON.stringify(m.defaultCwd)}` : '运行路径未上报或无文件与命令授权', m.fileRoots && `文件工具允许根目录=${JSON.stringify(m.fileRoots)}`,
+            m.defaultCwd ? `默认工作目录=${JSON.stringify(m.defaultCwd)}` : '运行路径未上报或无文件与命令授权',
+            m.fileScope === 'all' ? '文件工具范围=当前系统用户可访问的所有目录（包括其他磁盘和已连接的共享目录，受系统权限限制）' : m.fileRoots && `文件工具允许根目录=${JSON.stringify(m.fileRoots)}`,
             m.shellScope && 'Shell范围=桌面用户的系统权限（不受文件工具根目录约束）', m.timezone && `时区=${JSON.stringify(m.timezone)}`,
         ].filter(Boolean).join('；') : '运行路径未上报或无文件与命令授权';
         const state = !host.online ? '离线' : !host.open ? '未开放' : '在线';

package/dist-server/shared/fileTransferEndpoint.mjs

@@ -1,7 +1,7 @@
 import { open, realpath, mkdir, mkdtemp, unlink, rename, link, rm } from 'node:fs/promises'
 import { constants } from 'node:fs'
 import { resolve, dirname, join } from 'node:path'
-import { hostPathInput, pathInside } from './hostPaths.mjs'
+import { hostPathInput, pathInside, hostFileError } from './hostPaths.mjs'
 import { tmpdir } from 'node:os'
 import { createHash } from 'node:crypto'
 
@@ -11,13 +11,13 @@ const require = (value, message) => { if (!value) throw new Error(message) }
 
 /** Bounded, replay-safe file operations shared by native desktops and runner hosts. */
 export class FileTransferFiles {
-  constructor(root, { confined = true } = {}) {
-    this.root = root; this.confined = confined; this.transfers = new Map(); this.lanes = new Map(); this.closed = false
+  constructor(root, { confined = true, allowUNC = false } = {}) {
+    this.root = root; this.confined = confined; this.allowUNC = allowUNC; this.transfers = new Map(); this.lanes = new Map(); this.closed = false
     this.timer = setInterval(() => { void this.expire() }, 60000); this.timer.unref()
   }
   async path(input, writing = false) {
     require(typeof input === 'string' && input.length > 0 && input.length <= 4096 && !input.includes('\0'), '文件路径无效')
-    const root = await realpath(this.root), raw = resolve(root, hostPathInput(input))
+    const root = await realpath(this.root), raw = resolve(root, hostPathInput(input, process.platform, { allowUNC: this.allowUNC }))
     const inside = value => !this.confined || pathInside(root, value)
     require(inside(raw), '路径超出允许范围')
     if (!writing) { const file = await realpath(raw); require(inside(file), '路径超出允许范围'); return file }
@@ -36,7 +36,7 @@ export class FileTransferFiles {
     const id = action.transferId, previous = this.lanes.get(id) ?? Promise.resolve()
     const next = previous.catch(() => {}).then(() => this.perform(action, authorize))
     this.lanes.set(id, next)
-    try { return await next } finally { if (this.lanes.get(id) === next) this.lanes.delete(id) }
+    try { return await next } catch (error) { throw hostFileError(error) } finally { if (this.lanes.get(id) === next) this.lanes.delete(id) }
   }
   async perform(action, authorize) {
     authorize(); require(!this.closed, '传输通道已关闭')

package/dist-server/shared/hostPaths.mjs

@@ -1,12 +1,16 @@
 import path from 'node:path'
 
-export function hostPathInput(input, platform = process.platform) {
+export function hostPathInput(input, platform = process.platform, { allowUNC = false } = {}) {
   const value = String(input ?? '')
   if (value.includes('\0')) throw new Error('路径无效')
   if (platform === 'win32') {
-    // File tools never accept device namespaces, UNC shares, drive-relative
-    // paths, alternate data streams, or Win32 names with ambiguous semantics.
-    if (/^[\\/]{2}|^[A-Za-z]:(?![\\/])/.test(value)) throw new Error('路径无效')
+    // Only explicitly authorized desktop calls accept ordinary UNC shares.
+    // Device namespaces, drive-relative paths and alternate streams stay invalid.
+    if (/^[\\/]{2}/.test(value)) {
+      const [server, share] = value.slice(2).split(/[\\/]/)
+      if (!allowUNC || !server || !share || [server, share].some(part => ['.', '..', '?'].includes(part))) throw new Error('路径无效')
+    }
+    if (/^[A-Za-z]:(?![\\/])/.test(value) || /[<>"|?*]/.test(value)) throw new Error('路径无效')
     const rest = value.replace(/^[A-Za-z]:/, '')
     if (rest.includes(':') || rest.split(/[\\/]/).some(part =>
       (part !== '.' && part !== '..' && /[ .]$/.test(part)) || /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(part))) throw new Error('路径无效')
@@ -15,6 +19,12 @@ export function hostPathInput(input, platform = process.platform) {
   return value.replace(/^~\//, '').replace(/^~$/, '')
 }
 
+/** Keep OS failures distinct from application path confinement. */
+export function hostFileError(error) {
+  const label = { EACCES: '系统权限拒绝访问', EPERM: '系统权限拒绝访问', EROFS: '文件系统只读', ENOENT: '文件或目录不存在', ENOTDIR: '路径不是目录' }[error?.code]
+  return label ? Object.assign(new Error(`${label}（${error.code}）`, { cause: error }), { code: error.code }) : error
+}
+
 export function pathInside(root, target, platform = process.platform) {
   const api = platform === 'win32' ? path.win32 : path.posix
   const relative = api.relative(root, target)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lsamien/yaovi",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "license": "Apache-2.0",
   "description": "Yaovi：单用户、多 Bot、多设备服务器",
   "type": "module",
@@ -43,9 +43,10 @@
     "desktop:pack:win": "npm run desktop:build:win && node scripts/windows-desktop-release.mjs",
     "desktop:test:win": "node scripts/test-windows-desktop.mjs",
     "agent:setup": "node scripts/agent-setup.mjs",
-    "agent:test": ".venv/bin/python tests/runtime/test_kernel.py && .venv/bin/python tests/runtime/test_compression.py && .venv/bin/python tests/runtime/test_backup.py && .venv/bin/python tests/runtime/test_hermes_web.py && .venv/bin/python tests/runtime/test_native_openviking.py && .venv/bin/python tests/runtime/test_native_openviking_config.py && .venv/bin/python tests/runtime/test_vault_env.py && vitest run tests/server/embeddedAgent.test.ts tests/server/singleUserDevices.test.ts tests/server/harnessWeb.test.ts",
+    "agent:test": ".venv/bin/python tests/runtime/test_kernel.py && .venv/bin/python tests/runtime/test_compression.py && (cd tests/runtime && ../../.venv/bin/python test_turn_context.py) && .venv/bin/python tests/runtime/test_backup.py && .venv/bin/python tests/runtime/test_hermes_web.py && .venv/bin/python tests/runtime/test_native_openviking.py && .venv/bin/python tests/runtime/test_native_openviking_config.py && .venv/bin/python tests/runtime/test_vault_env.py && vitest run tests/server/embeddedAgent.test.ts tests/server/singleUserDevices.test.ts tests/server/harnessWeb.test.ts",
     "agent:pack": "npm run build && node scripts/build-agent-host.mjs",
-    "postinstall": "node scripts/agent-setup.mjs --postinstall"
+    "postinstall": "node scripts/agent-setup.mjs --postinstall",
+    "desktop:release:client": "npm run desktop:build:client && node scripts/client-release.mjs"
   },
   "dependencies": {
     "@koa/bodyparser": "^5.0.0",

package/release.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.1.0",
-  "webVersion": "0.1.0",
-  "gitTag": "v0.1.0"
+  "releaseVersion": "0.1.2",
+  "webVersion": "0.1.2",
+  "gitTag": "v0.1.2"
 }

package/runtime/hermes/hermes_state_messages.py

@@ -1125,6 +1125,23 @@ class SessionMessagesMixin:
             "AND role = 'user' AND active = 1 AND content IS ?",
             (_scrub_surrogates(api_content), row_id, session_id, self._encode_content(content)))
 
+    def clear_user_api_content_with_prefix(self, session_id: str, prefix: str) -> int:
+        """Drop user-row ``api_content`` sidecars that begin with ``prefix`` across the resume lineage.
+
+        Yaovi sends its per-turn application state only with the live request; later turns must
+        replay the clean ``content`` rather than that state. Sidecars without the prefix
+        (cache-fidelity stamps, sanitize divergences) and rows written before the prefix existed
+        are left untouched.
+        """
+        ids = [sid for sid in dict.fromkeys(self._resume_lineage_ids(session_id)) if sid]
+        if not ids or not prefix:
+            return 0
+        marks = ",".join("?" * len(ids))
+        return self._write_rowcount(
+            f"UPDATE messages SET api_content = NULL WHERE session_id IN ({marks}) AND role = 'user' "
+            "AND api_content IS NOT NULL AND substr(api_content, 1, ?) = ?",
+            (*ids, len(prefix), prefix))
+
     def set_user_message_content(self, session_id: str, row_id: int, content: Any) -> int:
         """Rewrite the content of ONE known active user row. Used when a user turn was written at submit
         time (before the agent ran) and the turn prologue then rewrote the prompt it persists (@-file

package/runtime/worker.py

@@ -22,6 +22,8 @@ steer_lock = threading.Lock()
 turn_closed = False
 steer_ready = False
 startup_steers = []
+# Prefix of the per-turn application state Yaovi renders (src/server/workspacePrompt.ts).
+TURN_CONTEXT_SENTINEL = "[[YAOVI_TURN_CONTEXT_V1]]"
 
 
 def emit(kind, **payload):
@@ -106,6 +108,26 @@ def read_replies():
     interrupt()
 
 
+def strip_turn_context_sidecars(history):
+    """Earlier turns replay their user content only, never the per-turn state sent with them."""
+    for message in history:
+        sidecar = message.get("api_content")
+        if message.get("role") == "user" and isinstance(sidecar, str) and sidecar.startswith(TURN_CONTEXT_SENTINEL):
+            message.pop("api_content", None)
+    return history
+
+
+def compose_turn(text, turn_context):
+    """``(model-facing message, persisted message)``; state reaches this turn's calls only."""
+    if not turn_context:
+        return text, None
+    if not str(turn_context).startswith(TURN_CONTEXT_SENTINEL):
+        raise ValueError("Turn context is missing its sentinel")
+    if isinstance(text, list):
+        return [{"type": "text", "text": turn_context}, *text], text
+    return turn_context + "\n\n" + str(text), text
+
+
 def clarify(questions):
     answers = {}
     for question in questions:
@@ -224,6 +246,10 @@ def main():
             pending_calls -= {m.get("tool_call_id") for m in history if m.get("role") == "tool"}
             for call in pending_calls:
                 history.append({"role":"tool", "tool_call_id":call, "content":json.dumps({"error":"Interrupted before the result was confirmed. Inspect effects before retrying.","outcomeUnknown":True})})
+    # A turn that crashed before its cleanup must not leak its state into this one,
+    # including rows reloaded from the store after in-turn compaction.
+    db.clear_user_api_content_with_prefix(session, TURN_CONTEXT_SENTINEL)
+    strip_turn_context_sidecars(history)
     # Existing sessions retain their admitted tools and context. Only the known
     # application identity prefix changes, at a turn boundary before model use.
     row = db.get_session(session)
@@ -287,7 +313,14 @@ def main():
         if not result:
             raise RuntimeError("Native skill review did not finish")
     else:
-        result = agent.run_conversation(request["text"], conversation_history=history)
+        message, persisted = compose_turn(request["text"], request.get("turnContext"))
+        try:
+            result = agent.run_conversation(message, conversation_history=history,
+                                            **({"persist_user_message": persisted} if persisted is not None else {}))
+        finally:
+            if persisted is not None:
+                for lineage in dict.fromkeys((session, agent.session_id)):
+                    db.clear_user_api_content_with_prefix(lineage, TURN_CONTEXT_SENTINEL)
     with steer_lock:
         turn_closed = True
         with agent._pending_redirect_lock:

package/dist/assets/AboutDialog-BW25cB-W.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AboutDialog-BW25cB-W.js","names":[],"sources":["../../package.json","../../src/client/components/app/AboutDialog.vue","../../src/client/components/app/AboutDialog.vue"],"sourcesContent":["{\n  \"name\": \"@lsamien/yaovi\",\n  \"version\": \"0.1.0\",\n  \"license\": \"Apache-2.0\",\n  \"description\": \"Yaovi：单用户、多 Bot、多设备服务器\",\n  \"type\": \"module\",\n  \"main\": \"desktop/main.mjs\",\n  \"engines\": {\n    \"node\": \">=24.0.0\"\n  },\n  \"bin\": {\n    \"yaovi\": \"bin/yaovi-agent.mjs\",\n    \"yaovi-agent\": \"bin/yaovi-agent.mjs\"\n  },\n  \"scripts\": {\n    \"dev\": \"cross-env NODE_ENV=development tsx watch src/server/index.ts\",\n    \"build\": \"npm run brand:verify && npm run release:verify && vue-tsc -b tsconfig.client.build.json && vite build && node scripts/clean-server.mjs && tsc -p tsconfig.server.json && node scripts/copy-worker.mjs && node scripts/write-build-info.mjs\",\n    \"start\": \"node bin/yaovi-agent.mjs start\",\n    \"typecheck\": \"vue-tsc -b && tsc --noEmit -p tsconfig.server.json\",\n    \"test\": \"vitest run\",\n    \"prepack\": \"npm run build\",\n    \"test:watch\": \"vitest\",\n    \"test:e2e\": \"npm run build && playwright test\",\n    \"test:live\": \"cross-env YAOVI_LIVE_TEST=1 vitest run tests/live\",\n    \"brand:verify\": \"node scripts/verify-brand.mjs\",\n    \"release:verify\": \"node scripts/verify-release.mjs\",\n    \"verify:lifecycle\": \"node scripts/verify-lifecycle.mjs\",\n    \"test:e2e:workspace\": \"npm run build && playwright test -c playwright.workspace.config.ts\",\n    \"test:e2e:desktop-hosts\": \"npm run build && playwright test -c playwright.desktop-hosts.config.ts\",\n    \"test:e2e:team-tools\": \"npm run build && playwright test -c playwright.team-tools.config.ts\",\n    \"desktop:build\": \"npm run build && node scripts/build-desktop.mjs\",\n    \"desktop:build:client\": \"node scripts/write-build-info.mjs && node scripts/build-desktop-client.mjs\",\n    \"desktop:dev:client\": \"npm run desktop:build:client && cross-env YAOVI_DESKTOP_CLIENT_ONLY=1 electron .\",\n    \"desktop:pack:client\": \"npm run desktop:build:client && electron-builder --config electron-builder.client.yml --mac --arm64 --publish never\",\n    \"desktop:dev\": \"npm run desktop:build && cross-env YAOVI_DESKTOP_CLIENT_ONLY=0 electron .\",\n    \"desktop:pack\": \"npm run desktop:build && electron-builder --mac --arm64 --publish never\",\n    \"desktop:release\": \"npm run desktop:build && node scripts/desktop-release.mjs\",\n    \"desktop:test\": \"cross-env YAOVI_DESKTOP_CLIENT_ONLY=0 node --test desktop/*.test.mjs\",\n    \"runner\": \"node dist-server/runner/index.js\",\n    \"runner:dev\": \"tsx src/runner/index.ts\",\n    \"runner:build\": \"node scripts/build-runner.mjs\",\n    \"desktop:build:win\": \"npm run build && node scripts/build-windows-desktop.mjs\",\n    \"desktop:pack:win\": \"npm run desktop:build:win && node scripts/windows-desktop-release.mjs\",\n    \"desktop:test:win\": \"node scripts/test-windows-desktop.mjs\",\n    \"agent:setup\": \"node scripts/agent-setup.mjs\",\n    \"agent:test\": \".venv/bin/python tests/runtime/test_kernel.py && .venv/bin/python tests/runtime/test_compression.py && .venv/bin/python tests/runtime/test_backup.py && .venv/bin/python tests/runtime/test_hermes_web.py && .venv/bin/python tests/runtime/test_native_openviking.py && .venv/bin/python tests/runtime/test_native_openviking_config.py && .venv/bin/python tests/runtime/test_vault_env.py && vitest run tests/server/embeddedAgent.test.ts tests/server/singleUserDevices.test.ts tests/server/harnessWeb.test.ts\",\n    \"agent:pack\": \"npm run build && node scripts/build-agent-host.mjs\",\n    \"postinstall\": \"node scripts/agent-setup.mjs --postinstall\"\n  },\n  \"dependencies\": {\n    \"@koa/bodyparser\": \"^5.0.0\",\n    \"@koa/router\": \"^15.4.0\",\n    \"@openviking/sdk\": \"0.1.0\",\n    \"@trycua/cua-driver\": \"0.28.2\",\n    \"@types/busboy\": \"^1.5.4\",\n    \"@types/koa\": \"^2.15.0\",\n    \"@types/koa-send\": \"^4.1.6\",\n    \"@types/koa-static\": \"^4.0.4\",\n    \"@types/markdown-it\": \"^14.1.2\",\n    \"@types/mime-types\": \"^2.1.4\",\n    \"@types/node\": \"^24.10.0\",\n    \"@types/qrcode\": \"^1.5.6\",\n    \"@types/ws\": \"^8.18.1\",\n    \"@vicons/ionicons5\": \"^0.13.0\",\n    \"@vicons/tabler\": \"^0.13.0\",\n    \"@vitejs/plugin-vue\": \"^6.0.5\",\n    \"@vue/tsconfig\": \"^0.9.1\",\n    \"busboy\": \"^1.6.0\",\n    \"cookie\": \"^1.0.2\",\n    \"docx-preview\": \"^0.3.7\",\n    \"dompurify\": \"^3.2.6\",\n    \"highlight.js\": \"^11.11.1\",\n    \"koa\": \"^2.15.3\",\n    \"koa-send\": \"^5.0.1\",\n    \"koa-static\": \"^5.0.0\",\n    \"libsodium-wrappers-sumo\": \"0.8.4\",\n    \"markdown-it\": \"^14.1.0\",\n    \"mime-types\": \"^3.0.1\",\n    \"naive-ui\": \"^2.44.1\",\n    \"pdfjs-dist\": \"6.2.108\",\n    \"pinia\": \"^3.0.4\",\n    \"pinyin-pro\": \"3.29.5\",\n    \"playwright\": \"1.62.1\",\n    \"qrcode\": \"^1.5.4\",\n    \"read-excel-file\": \"^7.0.3\",\n    \"sass\": \"^1.99.0\",\n    \"ssh2\": \"1.17.0\",\n    \"typescript\": \"~6.0.2\",\n    \"undici\": \"7.29.1\",\n    \"vite\": \"^8.0.4\",\n    \"vue\": \"^3.5.32\",\n    \"vue-router\": \"^4.6.4\",\n    \"vue-tsc\": \"^3.2.8\",\n    \"ws\": \"^8.20.0\",\n    \"zod\": \"^4.1.12\"\n  },\n  \"devDependencies\": {\n    \"@playwright/test\": \"^1.60.0\",\n    \"@types/jsdom\": \"^21.1.7\",\n    \"@types/ssh2\": \"1.15.5\",\n    \"@types/supertest\": \"^6.0.3\",\n    \"@vitest/coverage-v8\": \"^3.2.4\",\n    \"@vue/test-utils\": \"^2.4.6\",\n    \"cross-env\": \"^10.1.0\",\n    \"electron\": \"43.4.0\",\n    \"electron-builder\": \"26.15.3\",\n    \"electron-updater\": \"6.8.9\",\n    \"esbuild\": \"0.28.2\",\n    \"js-yaml\": \"4.3.2\",\n    \"jsdom\": \"^27.0.1\",\n    \"supertest\": \"^7.1.4\",\n    \"tsx\": \"^4.21.0\",\n    \"vitest\": \"^3.2.4\"\n  },\n  \"files\": [\n    \"bin\",\n    \"dist\",\n    \"dist-server\",\n    \"licenses\",\n    \"LICENSE\",\n    \"NOTICE\",\n    \"THIRD_PARTY_NOTICES.md\",\n    \"release.json\",\n    \"build-info.json\",\n    \"runtime\",\n    \"scripts/agent-backup.py\",\n    \"scripts/agent-setup.mjs\",\n    \"!runtime/**/__pycache__/**\",\n    \"!runtime/**/*.pyc\",\n    \"!runtime/**/*.pyo\",\n    \"!runtime/**/.env\",\n    \"!runtime/**/auth.json\"\n  ],\n  \"publishConfig\": {\n    \"access\": \"public\"\n  }\n}\n","<script setup lang=\"ts\">\nimport { version } from '../../../../package.json'\nimport BrandMark from '@/components/common/BrandMark.vue'\nimport StandaloneDialog from '@/components/common/StandaloneDialog.vue'\nconst emit = defineEmits<{ close: [] }>()\n</script>\n<template>\n  <StandaloneDialog title=\"关于Yaovi\" compact @close=\"emit('close')\"><section class=\"about-content\">\n    <BrandMark :size=\"56\" :label=\"false\" compact bare /><h3>Yaovi</h3><p class=\"about-version\">版本 {{ version }}</p>\n    <p>通过 OpenAI 模型与 Bot 对话、协作完成任务。<br />基于 Apache-2.0 许可证开放源代码。</p>\n\n  </section></StandaloneDialog>\n</template>\n<style scoped>\n.about-content{display:grid;justify-items:center;gap:12px;text-align:center}.about-content h3{font-size:21px;margin:0}.about-content p{margin:0;color:var(--text-secondary);font-size:13px;line-height:1.8}.about-content .about-version{font-size:12px}.about-content nav{display:flex;flex-wrap:wrap;justify-content:center;gap:8px;margin-top:8px}.about-content a{padding:10px 8px;color:var(--accent);font-size:13px;text-decoration:none}.about-content a:hover{text-decoration:underline}.about-content a:focus-visible{outline:2px solid var(--accent);outline-offset:2px}\n</style>\n","<script setup lang=\"ts\">\nimport { version } from '../../../../package.json'\nimport BrandMark from '@/components/common/BrandMark.vue'\nimport StandaloneDialog from '@/components/common/StandaloneDialog.vue'\nconst emit = defineEmits<{ close: [] }>()\n</script>\n<template>\n  <StandaloneDialog title=\"关于Yaovi\" compact @close=\"emit('close')\"><section class=\"about-content\">\n    <BrandMark :size=\"56\" :label=\"false\" compact bare /><h3>Yaovi</h3><p class=\"about-version\">版本 {{ version }}</p>\n    <p>通过 OpenAI 模型与 Bot 对话、协作完成任务。<br />基于 Apache-2.0 许可证开放源代码。</p>\n\n  </section></StandaloneDialog>\n</template>\n<style scoped>\n.about-content{display:grid;justify-items:center;gap:12px;text-align:center}.about-content h3{font-size:21px;margin:0}.about-content p{margin:0;color:var(--text-secondary);font-size:13px;line-height:1.8}.about-content .about-version{font-size:12px}.about-content nav{display:flex;flex-wrap:wrap;justify-content:center;gap:8px;margin-top:8px}.about-content a{padding:10px 8px;color:var(--accent);font-size:13px;text-decoration:none}.about-content a:hover{text-decoration:underline}.about-content a:focus-visible{outline:2px solid var(--accent);outline-offset:2px}\n</style>\n"],"mappings":"wVCIA,IAAM,EAAO,gBAGX,EAAA,EAAA,EAI6B,EAAA,CAJX,MAAM,UAAU,QAAA,GAAS,QAAK,AAAA,EAAA,KAAA,GAAE,EAAI,OAAA,IAAW,QAAA,MAIvD,CAJuD,EAIvD,UAJuD,EAIvD,CAHR,EAAoD,EAAA,CAAxC,KAAM,GAAK,MAAO,GAAO,QAAA,GAAQ,KAAA,KAAO,AAAA,EAAA,KAAA,EAAc,KAAA,KAAV,QAAK,EAAA,EAAK,EAA6C,IAA7C,EAAyB,MAAG,EAAG,EAAA,CAAA,CAAO,EAAA,CAAA,EACxG,AAAA,EAAA,KAAA,EAAgE,IAAA,KAAA,CAA7D,EAAA,8BAA4B,EAAA,EAAM,IAAA,EAAA,EAAA,yBAAuB"}