@sanqianx/project-knowledge 4.6.1

package/CHANGELOG.md

@@ -0,0 +1,780 @@
+# Changelog
+
+## [4.6.0] - 2026-09-21
+
+- The three embedded module runtimes now ship as real npm dependencies instead
+  of the `_modules/` committed snapshot: `claude-ai-workbench@0.4.1`,
+  `@sanqianx/vector-hub@1.0.1` and
+  `@sanqianx/ai-coding-event-bridge-console@0.4.0` (bringing
+  `@sanqianx/ai-coding-event-bridge@0.4.0` transitively). The `_modules/`
+  directory, its vendor script and the tarball entry are removed.
+- Why it matters: the snapshot lagged the source repo — npm consumers missed
+  the codex resident-bridge Windows fix (per-turn process respawns made every
+  turn 5-20s), claude failure-reason surfacing, `/system/doctor` diagnostics
+  and the folder-picker foreground/centering fixes. Module upgrades are now a
+  one-line version bump verified by `npm ci`, with no manual snapshot step.
+- `module-bridge` resolves each runtime entry through `require.resolve` from
+  the installed packages (same supervised spawn, reuse and env-override
+  contract as before); the `NODE_PATH` stitching is gone. `release:verify` no
+  longer gates on the vendored snapshot.
+
+## [4.5.0] - 2026-09-21
+
+- The embedded Agent Terminal's settings view gains a 会话捕获 (capture) tab.
+  Terminal conversations remain exempt from Development Conversation capture by
+  default — the terminal is internal AI runtime, not the developer's CLI
+  record. Flipping the toggle persists the scope, applies it to the runner
+  immediately, and marks only NEW terminal sessions with
+  `AI_CODING_EVENT_BRIDGE_CAPTURE=1`, so they reach the Bridge journal and the
+  会话浏览 explorer like any CLI tool conversation. Existing sessions are
+  unaffected, and nothing changes for standalone terminals that never touch
+  the toggle. Ships the updated vendored Agent Terminal runtime.
+
+## [4.4.0] - 2026-09-21
+
+- The ai-coding-event-bridge conversation console joins the Agent Terminal and
+  vector-hub as the third embedded Control Center module. The vendored runtime
+  (console 0.4.0 + its core) ships inside the npm package and starts with the
+  shell on 127.0.0.1:8790; the console's dependency on
+  `@sanqianx/ai-coding-event-bridge` resolves from a node_modules directory
+  vendored inside the console package, so the host package's own older npm
+  dependency can never shadow it. The global `node_modules/` gitignore rule
+  carries a negation for that directory, and `vendor:modules --check` now
+  verifies the runtime is present and git-tracked — the 4.3.0 "runtime missing
+  from the tarball" incident class cannot recur for this module either.
+- Module integration follows the established contract: same-origin reverse
+  proxy under `/api/eventbridge/`, supervised spawn with reuse of an already
+  listening standalone console (`KB_EVENTBRIDGE_COMMAND` override,
+  `AI_CODING_EVENT_BRIDGE_HOME` passthrough so the explorer shows the same
+  journal the in-process BridgeAdapter writes), idempotent import-time
+  registration keyed by Git work tree path using the recommended
+  `<knowledge>/dev-conversations` store, removal that keeps journals and sealed
+  commit documents, aggregated sidebar projection and module health.
+- The shell UI gains the 会话浏览 view (connect probe, 独立打开 link, per-project
+  桥 badge, import/remove copy) — and the conversation explorer itself learned
+  the `kb:sidebar` embed protocol (`?embed=1`, `kb:ready` announcement,
+  loopback-only origins), so its project sidebar folds via the ▤ control exactly
+  like the terminal and vector-hub embeds. Standalone console opens are
+  unaffected.
+
+## [4.3.1] - 2026-09-20
+
+- The 4.3.0 npm package could never start the vector-hub module: the global
+  `dist/` gitignore rule kept the vendored runtime
+  (`_modules/vectorhub/dist/`, 25 files) out of git, so the CI-packed tarball
+  shipped without `bin.js` and every fresh install logged "Vendored vector-hub
+  runtime not present". The runtime is committed now, and `release:verify`
+  gained a vendored-modules gate that fails when a required runtime file is
+  missing from disk or not tracked by git — the check that was previously
+  wired into nothing.
+- The Control Center's embedded Agent Terminal linked to no project on first
+  load. The shell sends `kb:select-project` 150ms after `kb:ready`, but the
+  terminal loads its project list only after health + agent discovery, so the
+  one-shot selection landed on an empty list: the linkage chip stuck on
+  "未登记" and the embed had no project selected, making it impossible to open
+  a terminal from the shell. The terminal now re-announces `kb:ready` once its
+  projects are loaded, and the shell retries a failed linkage with backoff.
+- Module status probing no longer reports a false "未检测到 … 界面将显示为
+  空白" forever: cold-starting module services are re-probed with backoff
+  (up to 10 attempts) before the status is marked down, and the top bar
+  终端/检索 indicator updates when a late probe succeeds.
+
+## [4.3.0] - 2026-09-20
+
+- The Agent Terminal and vector-hub module services now ship inside the npm
+  package and start with the shell. `npm install -g project-knowledge` is
+  self-contained: the Control Center, the embedded terminal (:5760) and the
+  vector-hub console (:8787) all come up together on a fresh machine — no
+  sibling checkouts required. KB_MODULES_AUTOSTART=0 disables spawning;
+  a service already listening on its URL is never double-spawned, so dev
+  machines running standalone module instances are unaffected. vector-hub
+  needs Node >= 22 — on older runtimes the shell skips spawning it and logs
+  a warning. Also fixed a latent spawn bug: quoted paths in module commands
+  reached node with the quotes embedded, which crash-looped the (previously
+  default-off) autostart path.
+
+## [4.2.20] - 2026-09-20
+
+- Startup no longer relocates legacy v4.1.x package-root runtime data. This is
+  a fresh knowledge-base system by decision: old data under the npm package
+  dir is ignored, not migrated. Previously a conflict between stale
+  package-root files and the user data dir aborted startup with "Legacy
+  runtime relocation failed", bricking machines whose install carried
+  v4.1.x-era files.
+
+## [4.2.19] - 2026-09-20
+
+- Background launch is diagnosable and no longer lies about the URL. The
+  detached child's stdout/stderr now append to `<data-dir>/launcher.log`, so
+  port fallbacks ("Port 5757 was busy, using 5758 instead") and startup
+  failures are visible after the fact instead of being silently discarded
+  (`stdio: 'ignore'`). The parent no longer prints a guessed URL or races a
+  browser open 1.2s after spawn — the child opens the browser itself once it
+  is actually listening, with the real port. The free-port probe timeout went
+  1s → 3s to survive slow listen() under antivirus/cold-cache load (a false
+  "busy" previously cascaded into "No free port found").
+
+## [4.2.18] - 2026-09-20
+
+- Module-embed shell (T0-T4 of docs/ui-integration-repair-plan.md): the Control
+  Center UI now embeds the Agent Terminal (:5760) and vector-hub console
+  (:8787) as original UIs behind a same-origin proxy (`/api/terminal/*`,
+  `/api/vectorhub/*`). Project import registers both modules (wiring table in
+  project state); the sidebar aggregates module registrations with per-project
+  session history (kb:list-sessions / kb:open-session) — session lifecycle
+  (archive/restore) belongs to the terminal module only, the shell keeps a
+  read-only projection; per-module sidebar fold toggles on the nav buttons
+  (kb:sidebar); project selection drives both modules (kb:select-project)
+  with live linkage chips.
+  Settings drawer is now 开发对话/日志 only (model settings live in the
+  terminal UI). Module removal keeps local knowledge and terminal session
+  records (upstream `removeProject?keepSessions=1`). Optional module service
+  supervision behind `KB_MODULES_AUTOSTART=1`. Old workbench chat panel and
+  its UI tests retired; full suite 115/115 green.
+
+## [4.2.17] - 2026-08-25
+
+- Recognized a healthy Project Knowledge fan-out nested inside Codex Desktop's
+  computer-use `--previous-notify` wrapper. Integration status and one-click
+  repair no longer report a false third-party conflict or attempt to wrap the
+  notifier again.
+
+## [4.2.16] - 2026-08-25
+
+- Upgraded AI Coding Event Bridge to 0.1.2 so one Codex task can be captured
+  across every continuation rollout. Existing single-file cursors migrate in
+  place without replaying consumed history, and real nested turn identities
+  keep commentary and final responses attached to the correct user prompt.
+- Added a joint Codex / Claude Code / OpenCode restart-and-recovery gate that
+  verifies durable capture, control-message exclusion, exact workspace
+  attribution, turn grouping, and duplicate-notification idempotency.
+- Kept Windows CDP failure tests fast and reliable by restricting detached
+  profile cleanup to actual Chrome/Edge launchers.
+
+## [4.2.15] - 2026-08-25
+
+- Repaired Codex Development Conversation turns without rewriting durable
+  history: generated control/context records are excluded, orphan assistant
+  responses are projected onto the correct user turn within the same session,
+  and stale open-turn facts no longer duplicate commit associations.
+- Removed synthetic empty-user and pending-assistant UI messages, with focused
+  projection, binding, API, and real-history regression coverage.
+
+## [4.2.14] - 2026-08-25
+
+- Recovered commit analysis safely after a server restart by making leftover
+  claims terminal without running startup analysis or replaying historical or
+  offline commits; the next explicit Git Hook event processes only its own SHA.
+- Restored v4.1.21 Claude Workbench history through the migrated project's
+  legacy slug while preserving the original session files and preferring the
+  canonical runtime record on duplicate session IDs.
+- Restored historical session selection and live Commit automation visibility
+  in the Claude Code UI, including prompts, thinking, tools, permissions,
+  retries, results, stop controls, and real browser regression coverage.
+
+## [4.2.13] - 2026-08-25
+
+- Restored the globally installed web UI by including `ui/i18n.js` in the
+  npm package; a missing or incomplete localization runtime can no longer
+  abort project, AI profile, Knowledge Root, and conversation loading.
+- Added package-asset closure validation plus a real
+  `npm pack -> npm install -> server -> Chrome` release smoke test, so CI
+  rejects tarballs whose UI differs from the tested source tree.
+
+## [4.2.9] - 2026-08-24
+
+- Made persisted UI-language selection fully reliable across page reloads and
+  slower browser runners: translated labels now re-render, and the document
+  language is initialized from the saved preference.
+
+## [4.2.8] - 2026-08-24
+
+- Fixed release metadata drift by deriving plugin manifests, marketplace
+  metadata, MCP package pins, and both lockfiles from the root package
+  version during the standard npm version lifecycle.
+- Added release and tag-version guards to CI and the npm publishing workflow,
+  so a mismatched release is rejected before packaging or publishing.
+- Stabilized Windows browser E2E tests by handling Chrome launcher detachment
+  and cleaning every test-specific Chrome process by its isolated profile.
+
+## [4.2.7] - 2026-08-24
+
+- Made runtime data migration fail closed: existing legacy data is now
+  discovered and relocated safely, migration failures prevent startup,
+  and settings-only legacy data is preserved instead of being treated as
+  a fresh install.
+- Restricted Knowledge Analysis to explicit post-commit hook events.
+  Startup, bridge synchronization, historical catch-up, and offline
+  commits no longer trigger implicit analysis.
+- Preserved conversation and commit-boundary facts across offline periods
+  without allowing those facts to contaminate a later online commit.
+
+## [4.2.6] - 2026-08-20
+
+- Hotfix for the v4.2.5 commit-reconciler regression: the post-batch
+  re-scan was unconditionally writing `analysis.status='idle'` even
+  after a successful batch of commits, clobbering the
+  `'state.advanced'` value that `advanceState()` had just set. The CI
+  suite surfaced this on a fast runner where the test's state read
+  raced ahead of the trailing re-scan; on slower machines the bug
+  passed silently. runSweep() now only marks `'idle'` when this call
+  never processed any commits, leaving a freshly-promoted batch's
+  `state.advanced` visible to the UI.
+- Bumped `plugins/project-knowledge/.mcp.json` from
+  `project-knowledge@4.2.4` to `project-knowledge@4.2.6` so the
+  integration-adapters MCP-pin assertion matches the package version.
+  (The v4.2.5 release had bumped everything except this MCP pin.)
+
+105 root + 2 desktop tests pass.
+
+## [4.2.5] - 2026-08-20
+
+- Restored the v4.1.22 → v4.2.x product contract that the recent
+  refactor had broken. The shared ` `resolveEffectiveAiProfile` resolver
+  is the single source of truth for "which AI profile does this project
+  use right now" (project → default → first-usable → AI_PROFILE_REQUIRED),
+  and the Workbench / analyzer / CommitReconciler paths no longer
+  carry their own drift-prone fallback logic.
+- Hook runtime: post-commit hooks now prefix `ELECTRON_RUN_AS_NODE=1`
+  in the shell body so a packaged Desktop install no longer tries to
+  launch the Electron GUI from a Git hook invocation. Node ignores the
+  env var so CLI installs are unaffected.
+- Hook migration state machine: a missing legacy hook is no longer
+  silently marked migrationVersion=2. The new state machine only
+  advances migrationVersion when install + readback verify succeed,
+  persists third-party conflicts in state.hook.lastConflict for UI
+  consumption, and reports status=verified|conflict|pending|failed per
+  project.
+- Hook health API: GET /api/projects/:id/hook-status and POST
+  /api/projects/:id/hook-repair expose every required field
+  (installed / managed / managedVersion / runtimeTarget / lastVerifiedAt
+  / conflict / reason / repairAvailable) and refuse to overwrite
+  third-party hooks.
+- Import UX: a new preflight endpoint and UI flow (Desktop folder
+  picker, knowledge language selector, AI profile selector, optional
+  Team Knowledge binding, per-problem action hints, auto preflight on
+  every input change, Import button stays disabled until ready=true)
+  replace the path-only dialog.
+- Knowledge language control: import + per-project PATCH both accept
+  knowledgeLanguage; changing it affects only future generated
+  knowledge, never historical files.
+- Project Goal editor: GET/PUT /api/projects/:id/goal atomically reads
+  and writes the project's GOAL.md, scoped to its own knowledgePath.
+- UI language toggle (zh-CN / en-US) persists in localStorage and
+  re-renders the most-visible labels without a reload.
+- P0 E2E gate proves the four primary contract scenarios (fresh /
+  legacy / offline / no-conversation) against the live server.
+  105 root + 2 desktop tests pass; the G00–G08 acceptance gates are
+  green.
+
+## [4.2.4] - 2026-08-20
+
+- Fixed the Bridge consumer never receiving connector wake-ups on a fresh
+  install: `BridgeConsumerService.start(notifyUrl)` ignored its argument, so
+  the `project-knowledge` consumer registered with empty metadata. Captured
+  conversations piled up in the journal until the next server restart instead
+  of appearing in Development Conversation immediately. The wake-up URL now
+  lands in the consumer registration and drains fire per event.
+- Projects imported before v4.2.3 (no canonical `repo-identity/v1`) are
+  upgraded automatically: on the first consumer drain after updating, each
+  legacy project with an existing repository path gets its workspace identity
+  resolved and persisted, its conversation baseline established, and its
+  external conversations start projecting — no manual migration step. A
+  workspace already claimed by another project is never written twice.
+- The Bridge dependency now resolves to `@sanqianx/ai-coding-event-bridge`
+  0.1.1, which accepts Claude Code's real `hook_event_name` payload field
+  (previously such payloads were misrouted to the Codex connector and lost as
+  capture gaps).
+
+## [4.2.3] - 2026-08-20
+
+- Development Conversation now captures real external Claude Code / Codex /
+  OpenCode sessions through `ai-coding-event-bridge` (repo-identity/v1 with
+  workspaceId as the primary key, durable Bridge-owned turn identity, and
+  exact-workspace project matching — unimported workspaces are skipped and
+  ACKed, never written into another project).
+- The internal Workbench capture path was removed: sending a Workbench chat
+  message no longer records requirements or conversation events (explicit
+  `record_requirement` still works), every internal SDK session runs with
+  `AI_CODING_EVENT_BRIDGE_CAPTURE=0`, and legacy embedded Workbench pairs are
+  excluded from presentation and new commit binding via
+  `conversation-exclusions/v1` without rewriting history.
+- Commit conversation snapshots are frozen strictly after
+  append-boundary -> drainThrough: no event beyond `boundaryEndCursor`
+  (assistant replies included) can enter a snapshot, and imports establish a
+  conversation baseline so pre-import history is never backfilled.
+- One Integration Setup action installs Knowledge Integration and Development
+  Capture for Claude Code / Codex / OpenCode with separate status reporting,
+  third-party config preservation, Codex notify conflict detection, and a
+  host-level Bridge consumer that survives per-connector uninstalls; new
+  `/api/bridge/*` and `/api/integrations/*` endpoints expose capture health.
+- Windows CI browser tests now fail fast: CDP launch failures clean up the
+  spawned browser tree and profile directory, report exit/stderr diagnostics,
+  use a dynamically discovered DevTools port with per-request timeouts, and
+  the test runner reports `TIMEOUT` explicitly under a configurable budget
+  (`PK_TEST_TIMEOUT_MS`, default 90s) instead of hanging for 300 seconds.
+
+## [4.2.2] - 2026-08-19
+
+- Rebuilt the web Control Center visual layer to faithfully match the v13
+  reference design (`project-knowledge-base-faithful-repair-ui-v10.html`):
+  sidebar brand block with the knowledge root path, multi-line project cards
+  (name, id, repository path, status dot) with right-click removal, the
+  in-main-area header, full-height Workbench panel with chat bubbles, tool
+  cards, circular send button and composer toolbar, the reference design
+  tokens including the complete dark theme, and responsive breakpoints.
+- Restored the reference Settings drawer structure with separate AI model
+  editing (add/save profiles via the API), project model assignment,
+  knowledge relations, mature development-conversation turn cards with
+  commit labels, and the V7 run-records list geometry.
+- Import view now shows the reference split layout with a post-import
+  placement preview; UI contract tests were updated to the reference DOM.
+
+## [4.2.1] - 2026-08-19
+
+- Fixed the legacy layout migration failing with `Legacy migration source
+  JSON is corrupt` (and the server refusing to start) when any legacy source
+  file carries a UTF-8 BOM, which PowerShell and several editors commonly
+  write. BOM-prefixed sources are now parsed normally.
+
+## [4.2.0] - 2026-08-19
+
+- Completed the v13 refactor: conversation capture contracts, atomic Bridge
+  commit boundaries with capture-gap persistence, and frozen
+  `CommitConversationSnapshot` binding so post-commit prompts never bind to
+  old commits and claims freeze their analyzer evidence.
+- Replaced `patch:null` handling for large diffs with an exact, hash-verified
+  patch chunk evidence bundle; commit analysis now carries frozen evidence,
+  retrieval, and conversation manifests end to end.
+- Unified user search and commit context selection into one
+  `KnowledgeRetrievalService` (hybrid recall, deterministic rerank, chunk
+  budgets) with an index source manifest and a Markdown delta overlay so
+  fresh knowledge is visible while the derived index is dirty.
+- Logging is now permanent per-day JSONL under `logs/system` and
+  `logs/projects/<id>` with reverse-chunk cursors, SSE streaming without
+  gaps, and immutable capture policy (no retention/capacity settings).
+- Background work registers per operation with one root `operationId`
+  propagated across HTTP, Hook, startup, and reconciler logs, and shutdown
+  drains every registered task.
+- Project delete is transactional with a journal, tombstone, and per-stage
+  recovery; migration no longer converts legacy logging knobs into settings.
+- Restored the full Control Center web shell (Workbench, Import, Settings)
+  with a mature run-records log view and a read-only development-conversation
+  page driven by frozen commit snapshots; logs left the standalone console.
+- Added non-release CI (Linux Node 18/24, Windows Node 24) for every push;
+  desktop packaging validation is paused for this web-only cycle.
+
+## [4.1.23] - 2026-08-17
+
+- Replaced legacy whole-registry project state with schema-v2 settings, a
+  minimal project registry, stable per-project config/state, and locked
+  requirement JSONL records under one canonical `StorageLayout`.
+- Reduced knowledge analysis to the managed post-commit Hook and startup
+  recovery, both routed through one per-project reconciler and one Commit
+  prompt. Import now establishes a baseline without AI or placeholder files.
+- Added manifest-validated AI staging, journaled Markdown promotion, crash
+  recovery, dirty-index semantics, and a single serialized `IndexService` for
+  incremental writes and atomic full rebuilds.
+- Rebuilt logging around six-level `log/v2` JSONL records, recursive secret
+  redaction, daily/size rotation, retention/capacity cleanup, cursor queries,
+  exports, health state, and orphaned-operation detection.
+- Replaced the duplicate dashboard implementations with one responsive
+  light/dark logging console, including operation flows, structured error
+  details, pause/refresh, filtering, cursor pagination, and export.
+- Unified server, CLI, MCP, Hook, index, and project path resolution. Read-only
+  knowledge search falls back to scoped Markdown when the derived index is
+  dirty or unavailable.
+- Added staged `layout-v2` migration with centralized recovery backups,
+  source/hash validation, last-step completion, fault recovery, and preservation
+  of legacy paths, secrets, Commit pointers, indexes, and logs.
+- Hardened the API by removing wildcard CORS, raw-file access, generic project
+  replacement, manual Hook/analysis routes, and stack responses; non-loopback
+  binding now requires authentication and Origin validation.
+- Removed CLAUDE.md management, the second automation queue, configurable log
+  and index locations, legacy direct database writers, and unused Vue/Tailwind
+  browser runtimes.
+- Added Windows end-to-end coverage for online Hook processing, offline Commit
+  catch-up, requirement binding, promotion/index completion, structured log
+  chains, paths with spaces/non-ASCII text, and immediate recovery of locks
+  owned by a crashed process.
+- Hardened release packaging by explicitly mirroring core runtime dependencies
+  into the Electron app and allowlisting shipped documentation, preventing
+  local review artifacts from leaking into npm or desktop packages.
+
+## [4.1.22] - 2026-07-27
+
+- Added a read-only `project-knowledge-mcp` server for OpenCode, Codex, and
+  other MCP-compatible coding agents. It resolves the current Git project,
+  exposes scoped search/ask/get/history tools, and includes the search-first
+  workflow without depending on `CLAUDE.md`.
+- Added a safe keyword-search fallback for legacy Markdown knowledge bases and
+  kept routine knowledge writes exclusively in post-commit automation.
+- Added a shared Claude Code/Codex plugin with MCP configuration and a
+  search-first `project-knowledge` Skill, plus a native Claude marketplace and
+  Codex marketplace manifest.
+- Added an OpenCode adapter and a universal, idempotent integration manager for
+  installation, updates, removal, dry-runs, and status checks across Claude
+  Code, OpenCode, and Codex.
+
+## [4.1.21] - 2026-07-27
+
+- Fixed Windows desktop Claude sessions failing with “executable exists but
+  failed to launch” when a global Claude Code installation exposes `cli.js`
+  but `node` is unavailable in the desktop process PATH. JavaScript Claude
+  entry points now use the application's own Node/Electron runtime.
+- Added slow-backend and packaged-client regressions covering desktop startup
+  readiness and Claude script launch through the installed Windows executable.
+
+## [4.1.20] - 2026-07-27
+
+- Rebuilt the daily workspace around Claude Code while keeping GitHub/Gitea
+  sign-in, project import, AI setup, project knowledge relations, knowledge
+  storage, embedding model setup, logs, and desktop updates available from one
+  settings drawer.
+- Moved project removal to a right-click project-list action with confirmation.
+  Projects with a running Claude session or queued automation task now cannot
+  be removed.
+
+## [4.1.19] - 2026-07-24
+
+- Stabilized release tests: expected EventSource cancellation during a page
+  reload is no longer treated as a failed request, and the Windows CLAUDE.md
+  refresh test no longer removes a just-used temporary server directory.
+
+## [4.1.18] - 2026-07-23
+
+- Simplified the daily workspace into a full-width Claude Code interface.
+- Removed the project-supervision summary, pending-commit and issue panels,
+  dashboard status/goal cards, and manual automation preview/simulation UI.
+
+## [4.1.17] - 2026-07-23
+
+- Rebuilt commit-triggered knowledge automation around persistent per-commit
+  state, ordered recovery, and exactly one AI task per Git commit.
+- Removed manual draft review, auto-apply controls, and scheduled-task paths;
+  generated knowledge is now written directly through the automated pipeline.
+
+## [4.1.16] - 2026-07-22
+
+- Fixed the desktop client timing out / hanging on the loading screen for large
+  knowledge bases (many projects, multi-GB DB) while the web dashboard opened
+  fine. Root cause was several compounding issues:
+  - Desktop startup probe was too impatient: raised the per-request `/api/state`
+    timeout (1.5 s → 30 s) and the overall backend-ready budgets (owned backend
+    45 s → 180 s, existing backend 20 s → 60 s) so it waits like a browser does.
+  - Server startup no longer blocks the event loop: the CLAUDE.md audit and
+    orphaned-run cleanup now run in `setImmediate`, so `/api/state` can answer
+    immediately after `listen()`.
+  - `getScheduleInfo()` (which spawns `schtasks`) is now cached for 5 s so
+    repeated `/api/state` hits don't each pay process-spawn latency.
+  - `isProcessAlive` now treats `EPERM` as alive, so a running backend's
+    runtime-endpoint file is no longer deleted (and a duplicate cold-started)
+    when the desktop and CLI run at different privilege levels on Windows.
+  - The dashboard now retries the initial connection every 3 s until it first
+    succeeds, instead of waiting up to 60 s, so a slow-starting backend no
+    longer leaves the page spinning.
+- Stopped the knowledge-storage relocation from logging
+  `target ... is not empty` on every startup: relocation is now skipped (with a
+  single warning) when the configured storage directory already holds unrelated
+  content, and the existing storage location keeps being used.
+
+## [4.1.15] - 2026-07-21
+
+- Replaced the dashboard's fixed-interval polling with a server-sent-events
+  (SSE) push model. The backend now emits a `state/changed` event over a new
+  `/api/state-stream` channel whenever project state is written or a job
+  starts/finishes, and the frontend refreshes only in response (300 ms
+  debounced). A slow 60 s poll remains as a fallback. Result: changes such as
+  the sidebar pending count and summary cards update within ~1-2 s of the
+  per-commit analysis cycle, while an idle dashboard makes almost no requests
+  instead of hitting the server every 5 s.
+
+## [4.1.14] - 2026-07-21
+
+- Fixed `runCommitAnalysis` to mutate the projects map entry directly
+  (`projects[slug].lastAnalyzedCommit`) instead of a copy. The v4.1.11
+  one-by-one refactor accepted `project = { slug, ...projects[slug],
+  kbPath }`, so `project.lastAnalyzedCommit = ...` mutated a throwaway
+  copy and the `writeProjects` callback persisted the unchanged value.
+  Symptom: the "待分析" count never decreases after analysis; the
+  pending count appears stuck or oscillates between runs because the
+  scan counter and the manual analysis counter diverge.
+
+## [4.1.13] - 2026-07-21
+
+- Bumped the GitHub OAuth HTTP timeout from 20s to 30s in
+  `requestJson` and `requestFormJson` (github-team-store.js) and made
+  the timeout error message actionable: it now names the host that
+  failed and suggests using a Personal Access Token as a workaround
+  when GitHub is unreachable from the host network.
+
+## [4.1.12] - 2026-07-21
+
+- Hid the "Runs / Drafts" sidebar nav entry. All registered projects
+  use `knowledgeMode: autoApply` so manual review is not part of the
+  workflow; the runs view itself is preserved for programmatic access
+  (uncomment the one line in `navItems` to restore the button).
+
+## [4.1.11] - 2026-07-21
+
+- Refactored `runCommitAnalysis` from batch to one-by-one: each pending
+  commit now gets its own run record and its own draft, analyzed in
+  chronological order (FIFO). After every successful single-commit
+  run, `project.lastAnalyzedCommit` advances to that commit's hash so
+  the "待分析" count drops by one per analysis, matching the UI label.
+  Previously a 10-commit batch produced 1 run + 10 drafts and the
+  pending count did not decrease until the user clicked Apply (which
+  could also advance the checkpoint past commits the user had not
+  actually applied drafts for).
+
+## [4.1.10] - 2026-07-21
+
+- Made startup-recovery's staging copy (`prepareKnowledgeWorkspace`) and
+  Claude-executable lookup (`findClaudeExecutableForSdk`) asynchronous
+  so the server's HTTP handlers (notably `/api/state`) stay responsive
+  while pending-commit workers are being dispatched. Previously the
+  desktop client would time out with `backend request timed out` when
+  several projects had pending commits on startup, because the sync
+  `fs.cpSync` and `spawnSync` calls were freezing the event loop for
+  several seconds during `/api/state` polling.
+
+## [4.1.9] - 2026-07-21
+
+- Refused to import or upsert a project whose `kbPath` resolves to the
+  same directory as `gitPath` / `localPath`. Writing the knowledge base
+  inside the source tree pollutes the repo (and trips Windows symlink
+  errors in the staging workspace), so both entry points now return 400.
+
+## [4.1.8] - 2026-07-21
+
+- Stopped the post-commit automation worker from being auto-paused when a
+  user aborts the Claude session in the terminal. Pending commits queued
+  before the abort are now picked up again on the next desktop launch.
+
+## [4.1.7] - 2026-07-19
+
+- Restored GitHub and Gitea login in the Windows desktop client through an
+  acknowledged Electron bridge that opens OAuth pages in the system browser.
+  Browser launch failures are now reported immediately instead of appearing
+  later as an authorization timeout.
+- Added support for HTTP authorization URLs used by private, intranet Gitea
+  installations while continuing to reject local-file and script URLs at the
+  desktop security boundary.
+- Forwarded Electron's Windows system-proxy resolution to the backend and made
+  GitHub OAuth plus remote repository discovery proxy-aware, while preserving
+  loopback and `NO_PROXY` bypasses for private Gitea installations.
+- Verified the full team-knowledge path after desktop migration: GitHub device
+  authorization, Gitea callback/token persistence, remote repository scanning,
+  manifest discovery, cached store loading, and team knowledge-base binding.
+- Added desktop bridge/security regressions and an end-to-end Gitea OAuth plus
+  remote team-store discovery test.
+
+## [4.1.6] - 2026-07-19
+
+- Replaced overlapping post-commit batches with a single per-project worker
+  that treats Git history as the durable queue. Live hooks and desktop startup
+  recovery now use the same path and process exactly one commit at a time,
+  strictly from oldest to newest.
+- Preserved the original knowledge contract: every analyzed commit must create
+  an independent `changes/` Markdown record containing its full hash, including
+  test-only, documentation, and infrastructure commits.
+- Added transactional knowledge workspaces. Claude edits a temporary KB copy;
+  validated Markdown is applied to the live KB only after the session succeeds,
+  and LanceDB must finish before `lastAnalyzedCommit` advances.
+- Added resumable vector finalization and automatic startup recovery. Index
+  failures retry without rerunning Claude or duplicating Markdown, while an
+  interrupted desktop session resumes from the oldest unfinished commit.
+- Made Stop pause the project's automatic commit worker, discard uncommitted
+  staged knowledge, and prevent queued work from immediately restarting. The
+  Claude Code UI now provides a dedicated Resume automatic analysis action.
+- Added end-to-end regressions for duplicate Hook delivery, strict commit order,
+  per-commit changes records, staged Markdown, abort behavior, and vector-index
+  recovery. The complete core suite now contains 53 passing test files.
+
+## [4.1.5] - 2026-07-19
+
+- Added a desktop-client card in Settings that always shows the installed
+  application version and provides Check for updates / Restart and install
+  actions without opening a browser.
+- Integrated Electron's Squirrel updater with a stable GitHub Latest Release
+  feed. Release automation now uploads `RELEASES` and the full `.nupkg` beside
+  the installer so future desktop versions download and install in-app.
+- Hardened the PowerShell folder-picker fallback: scripts are unpacked from the
+  desktop ASAR, stdout uses UTF-8, and only an existing absolute directory can
+  be returned. PowerShell banners and error text can never populate a path
+  field.
+- Added updater lifecycle and folder-output regressions, bringing the complete
+  core suite to 52 passing test files while retaining the native Electron
+  folder dialog introduced in 4.1.4.
+
+## [4.1.4] - 2026-07-19
+
+- Fixed Windows Claude Code discovery so extensionless npm shell shims and
+  command wrappers are never passed to the Agent SDK. The resolver now prefers
+  the installed package's native `bin/claude.exe` and retains `cli.js` only as
+  a legacy fallback.
+- Changed the post-commit Hook endpoint to acknowledge valid events with HTTP
+  202 before commit inspection and Claude startup. Dispatch continues in the
+  background, while the Hook accepts every successful 2xx response instead of
+  recording a false timeout/error after a run was already created.
+- Restored both desktop directory-selection flows with a narrow Electron IPC
+  bridge and native directory dialog. Project import and Team Knowledge folder
+  selection no longer execute a PowerShell script from inside the packaged
+  ASAR or mistake PowerShell banner text for a selected path.
+
+## [4.1.3] - 2026-07-19
+
+- Removed the bundled 218 MiB Claude Code executable from the Windows desktop
+  application. The small Agent SDK control layer now discovers the user's
+  installed Claude Code through `CLAUDE_CODE_EXECPATH`, `PATH`, or the npm
+  global installation and reports a clear error without disabling knowledge
+  management when Claude Code is unavailable.
+- Removed LanceDB's unused optional embedding-provider stack and its duplicate
+  Transformers.js 3.0.2 / ONNX Runtime 1.19.2 dependency tree while retaining
+  the application's supported Transformers.js 3.8.1 embedding service.
+- Pruned non-Windows and non-x64 ONNX binaries, browser-only ONNX Web runtimes,
+  Transformers browser builds, source maps, and unused platform packages from
+  the Windows x64 bundle.
+- Added packaged runtime probes for LanceDB, Transformers.js, ONNX Runtime, and
+  the real 512-dimensional `bge-small-zh-v1.5` embedding model, plus release
+  size auditing that rejects bundled Claude binaries, duplicate runtimes, and
+  oversized artifacts.
+- Reduced the measured Windows installer from 476.0 MiB to 221.1 MiB and the
+  installed application bundle from 1,491.1 MiB to 617.5 MiB without changing
+  existing model caches, Markdown sources, LanceDB data, or storage paths.
+
+## [4.1.2] - 2026-07-16
+
+- Made the desktop dependency lock reproducible under the newer npm version on
+  GitHub's Windows runner by explicitly locking the encoding compatibility
+  dependency used by the packaging tree.
+- Made the desktop release workflow fail immediately when a native npm command
+  fails instead of allowing PowerShell to continue into a misleading later
+  step.
+
+## [4.1.1] - 2026-07-16
+
+- Fixed Windows GitHub Actions browser discovery for the `windows-2025`
+  runner by detecting system-level Chrome and Microsoft Edge installations.
+- Restored the release gate for all three real-browser UI suites so the
+  Windows desktop installer can be built, smoke-tested, and uploaded only
+  after the complete 50-file core regression suite passes.
+
+## [4.1.0] - 2026-07-16
+
+- Added a Windows x64 Electron desktop application and Squirrel installer that
+  reuse the existing configuration, configured knowledge root, model cache,
+  Markdown sources, Team Knowledge Mode, and LanceDB without copying or
+  re-vectorizing user data.
+- Added single-instance and system-tray lifecycle behavior: closing the window
+  keeps Git hooks available, while an explicit tray Quit stops only a backend
+  owned by the desktop application.
+- Added an atomic, local-only runtime endpoint record so CLI, desktop, and
+  existing Git hooks discover the active fallback port dynamically and never
+  open competing LanceDB writers.
+- Made the desktop application safely attach to an already-running npm CLI and
+  leave that external backend alive when the desktop window exits.
+- Added hardened Electron navigation, context isolation, sandboxing, denied
+  permission requests, bounded desktop backend logs, Squirrel lifecycle event
+  handling, and explicit native-module ASAR unpacking.
+- Added Windows release automation that runs all 50 core regression files,
+  desktop unit tests, a packaged EXE/API smoke test, and packaged LanceDB native
+  read/write tests before uploading the installer and SHA-256 to GitHub
+  Releases. The existing npm provenance publish workflow remains unchanged.
+
+## [4.0.4] - 2026-07-16
+
+- Added a Settings-based Markdown knowledge health audit for every registered
+  personal and team knowledge base, with per-project file size, deterministic
+  fixes, structural errors, and semantic-review findings.
+- Added safe batch or per-project optimization with retained backups under the
+  configured knowledge root, atomic writes, formatting repair, compact index
+  regeneration, and automatic LanceDB refresh for migrated projects.
+- Reduced generated change indexes to the latest 40 entries with bounded cells
+  and generated-file markers; a real 125 KiB legacy index now rebuilds to about
+  9 KiB without deleting its source change documents.
+- Prevented background AI automation from writing `00-index.md`, injected
+  mandatory in-place-update hygiene rules even for custom prompts, and rebuilt
+  compatibility indexes after every successful automatic update.
+- Preserved Team Knowledge Mode by de-duplicating shared physical KB paths
+  during maintenance while refreshing every aliased vector space.
+- Expanded the complete regression suite to 48 passing test files.
+
+## [4.0.3] - 2026-07-15
+
+- Added an embedding-model setup panel with one-click download and real
+  inference verification, configurable Hugging Face endpoint/mirror, local
+  model directory, offline mode, and copyable PowerShell environment-variable
+  examples.
+- Stop a migration batch before changing any project when the shared embedding
+  model cannot load, instead of reporting the same model failure once for every
+  project.
+- Surface migration failures through a prominent settings panel, a one-time
+  browser alert, detailed per-project errors, and direct retry actions.
+- Persist model settings and verified download state while rejecting partial
+  cache files or verification results from a different model configuration.
+- Expanded the complete regression suite to 46 passing test files.
+
+## [4.0.2] - 2026-07-15
+
+- Store LanceDB, its maintenance metadata, and retained database backups under
+  `<configured knowledge root>/.project-knowledge/` instead of a fixed app-data
+  location.
+- Automatically relocate v4.0.0/v4.0.1 databases on startup to the knowledge
+  root already selected in Settings.
+- Safely relocate and verify the database before saving a changed knowledge
+  root, including cross-volume copies, target-conflict protection, and retained
+  backup path rebasing.
+- Display the effective vector database path directly below the Knowledge Store
+  root setting.
+- Expanded the complete regression suite to 45 passing test files, including
+  real LanceDB startup and live root-change relocation tests.
+
+## [4.0.1] - 2026-07-15
+
+- Excluded generated `00-index.md` files from embedding and removed stale
+  derived-index rows while retaining the Markdown files for legacy and Team
+  Knowledge Mode compatibility.
+- Replaced unbounded Tags and change lists in generated Markdown indexes with
+  compact, capped navigation metadata; all module links remain available.
+- Stopped running LanceDB compaction after every commit. Maintenance now runs
+  only after bounded mutation thresholds and never rewrites the oversized
+  v4.0.0 full-text index in place.
+- Added a compact full-text schema that indexes `chunk_text` once with Chinese
+  bigrams instead of storing and indexing a second full document copy.
+- Added one-click, atomic database rebuilding with disk statistics, vector and
+  keyword verification, optional retained backup, and manual rollback.
+- Added upgrade and regression coverage for old v4.0.0 databases; the complete
+  suite now contains 43 passing test files.
+
+## [4.0.0] - 2026-07-15
+
+- Added a local LanceDB knowledge store containing original text, metadata,
+  and 512-dimensional `Xenova/bge-small-zh-v1.5` embeddings.
+- Added incremental Markdown indexing with heading-aware chunks, content-hash
+  skips, stale-chunk deletion, Chinese n-gram/BM25 search, and hybrid RRF.
+- Added scoped `search`, `get`, `ask`, and `history` HTTP/CLI tools that return
+  readable source text without exposing raw vectors.
+- Added explicit, bidirectional, non-transitive related-project search scopes;
+  writes remain restricted to each project's primary space.
+- Preserved Team Knowledge Mode: Git remains the portable Markdown transport,
+  stable team `kbId` values map to local spaces, and vectors stay local.
+- Added resumable one-click migration for all legacy KBs with backups,
+  verification probes, per-project atomic cutover, retry, and rollback.
+- Centralized Claude Code instructions in one user-relative file and added a
+  safe bulk refresh for all managed `CLAUDE.md` blocks independent of Hooks.
+- Enforced development-time read-only KB access; post-commit automation owns
+  routine updates and re-indexes migrated projects after successful runs.
+- Added configurable mirrored/offline embedding model locations through
+  `KB_EMBEDDING_REMOTE_HOST` and `KB_EMBEDDING_LOCAL_PATH`.
+- Expanded the regression suite to 41 test files.
+
+## [2.4.7] - 2026-07-01
+
+- Initial public Apache-2.0 release of the local-first `project-knowledge`
+  core.
+- Includes the CLI, local dashboard, Git scanner, project registry,
+  knowledge-base workflow, AI profile support, prompt registry, templates,
+  and regression tests.
+- Keeps runtime data, local project knowledge bases, API keys, generated AI
+  drafts, logs, and local maintenance notes outside the public repository.