cicy-desktop 1.0.9 → 2.1.31

package/.cicy-code-ref

@@ -0,0 +1 @@
+v2.1.9

package/.env.dev

@@ -0,0 +1,7 @@
+# Dev mode overrides — loaded by cicy-dektop.command if this file exists.
+# Delete or rename this file to revert to production homepage URL behavior.
+
+# Load the homepage from the workers/render vite dev server (HMR enabled).
+# Requires `cd workers/render && npm run dev` to be running, and—if Mac is
+# remote—ssh -R 8173:127.0.0.1:8173 mac forwarding from the build host.
+CICY_HOMEPAGE_URL=http://localhost:8173

package/.github/workflows/linux-app-release.yml

@@ -0,0 +1,78 @@
+name: Build Linux App Release
+
+on:
+  push:
+    tags:
+      - "v[0-9]+.[0-9]+.[0-9]+"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build-linux-app:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Setup Go (for cicy-code sidecar build)
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
+
+      - name: Read cicy-code ref pin
+        id: cicy_code_ref
+        shell: bash
+        run: |
+          ref="$(cat .cicy-code-ref | tr -d '[:space:]')"
+          echo "ref=${ref}" >> "$GITHUB_OUTPUT"
+          if ! [[ "$ref" =~ ^v[0-9]+\.[0-9]+\.[0-9]+ ]]; then
+            echo "::error::.cicy-code-ref must be a release tag (vX.Y.Z), got: $ref"
+            exit 1
+          fi
+
+      - name: Checkout cicy-code as sibling
+        uses: actions/checkout@v4
+        with:
+          repository: cicy-ai/cicy-code
+          ref: ${{ steps.cicy_code_ref.outputs.ref }}
+          path: cicy-code
+
+      - name: Build cicy-code sidecar binaries (linux amd64 + arm64)
+        shell: bash
+        working-directory: cicy-code
+        run: |
+          SKIP_TTYD_ASSET=1 SKIP_SKILLS_EMBED=1 bash build.sh all
+          ls -lh dist/
+
+      - name: Install project dependencies
+        run: npm install --no-audit
+
+      - name: Install Electron build dependencies
+        run: npm install --save-dev --no-audit electron@41.0.2 electron-builder@26.7.0
+
+      - name: Build Linux app (deb + AppImage)
+        shell: bash
+        env:
+          CICY_CODE_DIST_DIR: ${{ github.workspace }}/cicy-code/dist
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          npm run build:linux -- --publish always
+
+      - name: Upload Linux artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: cicy-desktop-linux
+          path: |
+            dist/*.deb
+            dist/*.AppImage
+            dist/latest-linux.yml

package/.github/workflows/mac-app-release.yml

@@ -0,0 +1,161 @@
+name: Build macOS App Release
+
+on:
+  push:
+    tags:
+      - "v[0-9]+.[0-9]+.[0-9]+"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build-mac-app:
+    runs-on: macos-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Setup Go (for cicy-code sidecar build)
+        uses: actions/setup-go@v5
+        with:
+          go-version: '1.25'
+
+      - name: Read cicy-code ref pin
+        id: cicy_code_ref
+        shell: bash
+        run: |
+          ref="$(cat .cicy-code-ref | tr -d '[:space:]')"
+          echo "ref=${ref}" >> "$GITHUB_OUTPUT"
+          # Enforce: ref must be a tagged release (vX.Y.Z), not a branch.
+          # This guarantees a deterministic build and lets the homepage
+          # display the same version it shipped with.
+          if ! [[ "$ref" =~ ^v[0-9]+\.[0-9]+\.[0-9]+ ]]; then
+            echo "::error::.cicy-code-ref must be a release tag (vX.Y.Z), got: $ref"
+            exit 1
+          fi
+
+      - name: Checkout cicy-code as sibling
+        uses: actions/checkout@v4
+        with:
+          repository: cicy-ai/cicy-code
+          ref: ${{ steps.cicy_code_ref.outputs.ref }}
+          path: cicy-code
+
+      - name: Build cicy-code sidecar binaries (darwin amd64 + arm64)
+        # `bash build.sh all` runs prepare_embed (cicy-skills tarball, frontend,
+        # ttyd assets) and cross-compiles all four darwin/linux targets.
+        # We only need the two darwin slots for the Mac .app, but building
+        # the linux ones here is cheap (~20s) and keeps the prepare:sidecar
+        # script's "all targets at once" mode happy.
+        shell: bash
+        working-directory: cicy-code
+        run: |
+          bash build.sh all
+          ls -lh dist/
+
+      - name: Install project dependencies
+        run: npm install --no-audit
+
+      - name: Install Electron build dependencies in project directory
+        run: npm install --save-dev --no-audit electron@41.0.2 electron-builder@26.7.0
+
+      - name: Prepare macOS icon
+        shell: bash
+        # cicy-ai.com sometimes returns 522 (origin unreachable). Don't let an
+        # icon-asset hiccup kill the whole release — we fall back to the
+        # default Electron icon if the fetch + convert chain fails. Build
+        # step downstream checks `build/logo.icns` and conditionally passes
+        # --config.mac.icon.
+        continue-on-error: true
+        run: |
+          set +e
+          mkdir -p build/icon.iconset
+          if ! curl -fsSL --max-time 12 "https://cicy-ai.com/logo.svg" -o build/logo.svg; then
+            echo "::warning::logo.svg fetch failed (cicy-ai.com unreachable); building with default Electron icon"
+            exit 0
+          fi
+          magick -background none -density 1024 build/logo.svg \
+            -alpha on -resize 1024x1024 PNG32:build/logo-1024.png || { echo "::warning::magick failed"; exit 0; }
+          for size in 16 32 128 256 512; do
+            sips -z $size $size build/logo-1024.png \
+              --out "build/icon.iconset/icon_${size}x${size}.png" >/dev/null
+            sips -z $((size*2)) $((size*2)) build/logo-1024.png \
+              --out "build/icon.iconset/icon_${size}x${size}@2x.png" >/dev/null
+          done
+          iconutil -c icns build/icon.iconset -o build/logo.icns || { echo "::warning::iconutil failed"; exit 0; }
+
+      - name: Build macOS app (dmg + zip, unsigned)
+        # prebuild:mac (declared in package.json) chains npm run prepare:sidecar
+        # which reads CICY_CODE_DIST_DIR and populates vendor/cicy-code/.
+        # CSC_IDENTITY_AUTO_DISCOVERY=false stops electron-builder from probing
+        # the runner keychain for a cert it does not have; combined with
+        # build.mac.identity=null in package.json this produces a clean
+        # unsigned build (with the cicy-code sidecar ad-hoc signed by
+        # prepare-cicy-code-sidecar.js so Apple Silicon will exec it).
+        shell: bash
+        env:
+          CICY_CODE_DIST_DIR: ${{ github.workspace }}/cicy-code/dist
+          CSC_IDENTITY_AUTO_DISCOVERY: "false"
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          set -euo pipefail
+          rm -rf dist
+          if [ -f build/logo.icns ]; then
+            npm run build:mac -- --config.mac.icon=build/logo.icns --publish always
+          else
+            echo "::warning::build/logo.icns missing — using default Electron icon"
+            npm run build:mac -- --publish always
+          fi
+
+      - name: Upload macOS artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: cicy-desktop-mac
+          path: |
+            dist/*.dmg
+            dist/*.zip
+          if-no-files-found: error
+
+      - name: Resolve release version
+        id: meta
+        shell: bash
+        run: |
+          version="$(node -p "require('./package.json').version")"
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+          echo "tag=v${version}" >> "$GITHUB_OUTPUT"
+
+      - name: Create GitHub release (idempotent)
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "${{ steps.meta.outputs.tag }}" \
+            --repo "$GITHUB_REPOSITORY" \
+            --title "CiCy Desktop v${{ steps.meta.outputs.version }}" \
+            --target "$GITHUB_SHA" \
+            --generate-notes \
+            --latest \
+            2>/dev/null || echo "release already exists, continuing"
+
+      - name: Publish macOS assets (dmg + zip + latest-mac.yml)
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          CICY_CODE_DIST_DIR: ${{ github.workspace }}/cicy-code/dist
+          CSC_IDENTITY_AUTO_DISCOVERY: "false"
+        run: |
+          gh release upload "${{ steps.meta.outputs.tag }}" dist/*.dmg dist/*.zip \
+            --repo "$GITHUB_REPOSITORY" --clobber
+          # Also upload latest-mac.yml generated by --publish always into dist/
+          if ls dist/latest-mac.yml 2>/dev/null; then
+            gh release upload "${{ steps.meta.outputs.tag }}" dist/latest-mac.yml \
+              --repo "$GITHUB_REPOSITORY" --clobber
+          fi

package/.github/workflows/windows-exe-release.yml

@@ -0,0 +1,105 @@
+name: Build Windows EXE Release
+
+on:
+  push:
+    tags:
+      - "v[0-9]+.[0-9]+.[0-9]+"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  build-windows-exe:
+    runs-on: windows-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: "npm"
+
+      - name: Install project dependencies
+        run: npm install --no-audit
+
+      - name: Install Electron build dependencies in project directory
+        run: npm install --save-dev --no-audit electron@41.0.2 electron-builder@26.7.0
+
+      - name: Prepare Windows icon
+        shell: powershell
+        continue-on-error: true
+        run: |
+          New-Item -ItemType Directory -Force -Path build | Out-Null
+          try {
+            Invoke-WebRequest -Uri "https://cicy-ai.com/logo.svg" -OutFile "build\logo.svg" -TimeoutSec 12
+          } catch {
+            Write-Host "::warning::logo.svg fetch failed ($_); building with default Electron icon"
+            exit 0
+          }
+          try {
+            magick -background none -density 768 "build\logo.svg" -alpha on -resize 256x256 PNG32:"build\logo-256.png"
+            magick "build\logo-256.png" -define icon:auto-resize=256,128,64,48,32,16 "build\logo.ico"
+          } catch {
+            Write-Host "::warning::magick convert failed ($_); skipping icon"
+            exit 0
+          }
+
+      - name: Resolve release version
+        id: meta
+        shell: bash
+        run: |
+          version="$(node -p "require('./package.json').version")"
+          echo "version=${version}" >> "$GITHUB_OUTPUT"
+          echo "tag=v${version}" >> "$GITHUB_OUTPUT"
+
+      - name: Create GitHub release as draft (idempotent)
+        # Draft so autoUpdater doesn't pick it up before .exe + latest.yml are
+        # uploaded. Promoted to non-draft + latest in the final step.
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "${{ steps.meta.outputs.tag }}" \
+            --repo "$GITHUB_REPOSITORY" \
+            --title "CiCy Desktop v${{ steps.meta.outputs.version }}" \
+            --target "$GITHUB_SHA" \
+            --generate-notes \
+            --draft \
+            2>/dev/null || echo "release already exists, continuing"
+
+      - name: Build Windows EXE and publish assets
+        # --publish always uploads .exe + latest.yml to the release created above.
+        shell: powershell
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          if (Test-Path dist) { Remove-Item -Recurse -Force dist }
+          if (Test-Path "build\logo.ico") {
+            npm run build:win -- --config.win.icon=build/logo.ico --publish always
+          } else {
+            Write-Host "::warning::no icon, using default"
+            npm run build:win -- --publish always
+          }
+
+      - name: Upload EXE artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: cicy-desktop-windows-exe
+          path: dist/*.exe
+          if-no-files-found: error
+
+      - name: Publish release (drop draft, mark latest)
+        # Only promote AFTER all assets uploaded successfully. autoUpdater on
+        # existing clients will pick up the new version on its next poll.
+        shell: bash
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release edit "${{ steps.meta.outputs.tag }}" \
+            --repo "$GITHUB_REPOSITORY" \
+            --draft=false \
+            --latest

package/.kiro/steering/dev-workflow.md

@@ -41,9 +41,9 @@ inclusion: always
 # - Bug修复：fix-MMDD-问题简述
 
 # 1. 直接在工作目录克隆并创建分支
-mkdir -p ~/projects/electron-mcp/branches/
-git clone -b origin/main git@github.com:cicy-dev/electron-mcp.git ~/projects/electron-mcp/branches/<branch-name>
-sudo ln -s /<branch-name> ~/projects/electron-mcp/branches/<branch-name>
+mkdir -p ~/projects/cicy-desktop/branches/
+git clone -b origin/main git@github.com:cicy-ai/cicy-desktop.git ~/projects/cicy-desktop/branches/<branch-name>
+sudo ln -s /<branch-name> ~/projects/cicy-desktop/branches/<branch-name>
 cd /<branch-name>
 git fetch origin
 git checkout -b <branch-name> origin/main
@@ -144,8 +144,8 @@ gh pr create --base main --head <branch-name> --title "标题" --body "详细描
 ```
 ~/
 ├── projects/
-│   └── electron-mcp/main             # 主仓库
-└── projects/electron-mcp/branches/
+│   └── cicy-desktop/main             # 主仓库
+└── projects/cicy-desktop/branches/
     ├── feat-0206-feature1/
     ├── fix-0206-bug1/
     └── feat-0206-feature2/
@@ -163,4 +163,4 @@ gh pr create --base main --head <branch-name> --title "标题" --body "详细描
 
 ---
 **制定时间：2026-02-06**
-**适用项目：electron-mcp**
+**适用项目：cicy-desktop**

package/AGENTS.md

@@ -41,7 +41,7 @@ npm run build
 - Jest runs with `--runInBand` (serial execution) due to Electron's single-process nature
 - Tests use supertest for HTTP API testing
 - Tests spawn actual Electron processes on dynamic ports
-- Auth token loaded from `~/data/electron/token.txt`
+- Auth token loaded from `~/global.json`
 - Test utilities in `tests/test-utils.js`
 
 ## Code Style Guidelines
@@ -236,7 +236,7 @@ log.error("[MCP] Error:", error);
 - Never log secrets or API keys
 - Validate all inputs with Zod schemas
 - Return structured errors without internal details
-- Auth token loaded from `~/data/electron/token.txt`
+- Auth token loaded from `~/global.json`
 
 ### Electron Best Practices
 
@@ -245,3 +245,31 @@ log.error("[MCP] Error:", error);
 - Enable remote debugging with `--remote-debugging-port`
 - Use `nodeIntegration: false` and `contextIsolation: true`
 - Multi-account support via `partition: persist:sandbox-{accountIdx}`
+
+## Master/Worker Cluster Commands
+
+```bash
+# Start Master server (port 8100)
+npm run start:master
+
+# Start Worker registered to Master
+MASTER_TOKEN=$(jq -r '.api_token' ~/global.json)
+PORT=8101 CICY_MASTER_URL="http://127.0.0.1:8100" CICY_MASTER_TOKEN="$MASTER_TOKEN" npm start
+
+# Master API endpoints
+curl http://127.0.0.1:8100/api/ping
+curl http://127.0.0.1:8100/api/workers
+curl http://127.0.0.1:8100/api/agents
+
+# Worker direct API (requires auth token from ~/global.json)
+curl -H "Authorization: Bearer $TOKEN" http://127.0.0.1:8101/rpc/tools
+curl -H "Authorization: Bearer $TOKEN" -X POST http://127.0.0.1:8101/rpc/tools/call \
+  -H "Content-Type: application/json" \
+  -d '{"name":"ping","arguments":{}}'
+```
+
+### Master Token
+
+- Token stored in `~/global.json` as `api_token`
+- Token file created automatically on first startup if missing
+- Token passed to workers via `CICY_MASTER_TOKEN` env var