ltcai 2.2.2 → 2.2.7

package/README.md

@@ -15,7 +15,7 @@
 [![npm version](https://img.shields.io/npm/v/ltcai?label=npm)](https://www.npmjs.com/package/ltcai)
 [![VS Code Marketplace](https://vsmarketplacebadges.dev/version-short/parktaesoo.ltcai.svg)](https://marketplace.visualstudio.com/items?itemName=parktaesoo.ltcai)
 [![Open VSX](https://img.shields.io/open-vsx/v/parktaesoo/ltcai?label=Open%20VSX)](https://open-vsx.org/extension/parktaesoo/ltcai)
-[![GitHub release](https://img.shields.io/github/v/release/TaeSooPark-PTS/LatticeAI?label=GitHub%20release)](https://github.com/TaeSooPark-PTS/LatticeAI/releases/tag/v2.2.2)
+[![GitHub release](https://img.shields.io/github/v/release/TaeSooPark-PTS/LatticeAI?label=GitHub%20release)](https://github.com/TaeSooPark-PTS/LatticeAI/releases/tag/v2.2.7)
 [![License: MIT](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue)](https://www.python.org/)
 [![VS Code extension](https://img.shields.io/badge/VS%20Code-extension-blue?logo=visualstudiocode)](https://marketplace.visualstudio.com/items?itemName=parktaesoo.ltcai)
@@ -48,7 +48,7 @@ Install the coding extension:
 
 - [VS Code Marketplace: parktaesoo.ltcai](https://marketplace.visualstudio.com/items?itemName=parktaesoo.ltcai)
 - [Open VSX: parktaesoo.ltcai](https://open-vsx.org/extension/parktaesoo/ltcai)
-- [GitHub Release v2.2.2](https://github.com/TaeSooPark-PTS/LatticeAI/releases/tag/v2.2.2)
+- [GitHub Release v2.2.7](https://github.com/TaeSooPark-PTS/LatticeAI/releases/tag/v2.2.7)
 
 ## Quick Start
 
@@ -114,22 +114,25 @@ and disconnected automations. Lattice AI keeps those parts together:
 - multi-agent workflows leave behind replayable plans, reviews, retries, and
   outcomes.
 
-## v2.2.2 QA & Stability Highlights
-
-A no-features stabilization release that hardens the v2.2.x UI. Every fix keeps
-the existing design-token structure and adds no `!important`.
-
-- Mobile hamburger navigation on the Knowledge Graph and Admin pages is
-  reachable again (a CSS source-order bug had kept the toggles hidden).
-- Admin top-bar actions (Refresh, Logout) are clickable again — a graph-only
-  toolbar rule that floated over the header was scoped back off the graph page.
-- Removed latent horizontal overflow on the Workspace page.
-- Verified across the full viewport matrix (375px phone → 3440px ultrawide):
-  light/dark theme parity, button hit-testing, no horizontal scroll, mobile
-  drawer open/close, and Escape-to-close — all covered by an expanded
-  Playwright suite.
-
-Carried forward from v2.2.1: mobile-first responsive layout, design-token
+## v2.2.7 Visual Stabilization Highlights
+
+Lattice AI v2.2.7 is a visual stabilization release driven by rendered browser
+screens, not stylesheet cleanup alone. It keeps the existing design-token
+structure while making the app feel like one cohesive product.
+
+- The dark chat composer is now an intentional dark surface with a crisp outer
+  focus state, no white haze, and no legacy inner textarea box.
+- Knowledge Graph canvas and Workspace OS panels no longer fall back to
+  washed-out light surfaces in dark mode.
+- Workspace select, onboarding, recommendation, auto setup, mode select,
+  pipeline, My Computer, profile, settings, VPC, and model-state surfaces use a
+  shared modal/panel language.
+- Static frontend asset cache-busting is normalized to `?v=2.2.7`, including
+  `/static/scripts/chat.js?v=2.2.7`.
+- Playwright visual coverage now locks the v2.2.7 composer, graph canvas,
+  Workspace OS dark inputs/cards, and mobile composer behavior.
+
+Carried forward from v2.2.x: mobile-first responsive layout, design-token
 light/dark themes, keyboard-safe chat composer, Knowledge Graph responsive UX,
 Admin mobile card layout, drag-and-drop file attachment, and model-card source
 disclosure.
@@ -227,7 +230,12 @@ Core areas:
 
 | Version | Theme |
 | --- | --- |
-| **2.2.2** | Frontend QA stabilization — mobile nav, admin actions, overflow fixes, and expanded visual tests |
+| **2.2.7** | Visual system stabilization — cohesive dark/light screens, crisp chat composer, dark graph canvas, Workspace OS polish |
+| 2.2.6 | Token-native CSS foundation |
+| 2.2.5 | Release hygiene hotfix — dark overlays, modal stack, cache-busting, favicon, and Telegram log masking |
+| 2.2.4 | Chat dark-mode completion |
+| 2.2.3 | Frontend stability and UX fixes |
+| 2.2.2 | Frontend QA stabilization — mobile nav, admin actions, overflow fixes, and expanded visual tests |
 | 2.2.1 | Frontend and UX overhaul for responsive workspace, themes, graph UX, admin reflow, and file attachment |
 | 2.2.0 | Multimodal-first Knowledge Graph and local model source disclosure |
 | 2.1.0 | Multi-agent workflow maturity |

package/codex_telegram_bot.py

@@ -7,6 +7,10 @@ from pathlib import Path
 import httpx
 from openai import AsyncOpenAI
 
+from latticeai.core.logging_safety import install_sensitive_log_filter, safe_log_text
+
+install_sensitive_log_filter()
+
 
 def load_env_file(path=".env"):
     env_path = Path(path)
@@ -72,7 +76,7 @@ async def get_updates(client, offset=None):
         res = await client.get(f"{TELEGRAM_API_URL}/getUpdates", params=params, timeout=35)
         return res.json()
     except Exception as exc:
-        logger.error("Telegram update failed: %s", exc)
+        logger.error("Telegram update failed: %s", safe_log_text(exc))
         return None
 
 
@@ -161,7 +165,7 @@ async def handle_message(client, chat_id, text):
         answer = await ask_codex(chat_id, text)
     except Exception as exc:
         logger.exception("OpenAI request failed")
-        answer = f"OpenAI 요청 실패: {exc}"
+        answer = f"OpenAI 요청 실패: {safe_log_text(exc)}"
     await send_message(client, chat_id, answer)
 
 

package/docs/CHANGELOG.md

@@ -1,5 +1,77 @@
 # Changelog
 
+## [2.2.7] - 2026-06-05
+
+> Visual Stabilization Release — browser-rendered screens were reviewed and
+> polished until Chat, onboarding, graph, Workspace OS, and operational panels
+> felt like one product.
+
+### Fixed
+
+- **Chat composer haze** — removed the dark-mode white/milky bottom composer
+  effect and the legacy inner textarea border; the shell now owns the focus
+  state and the attachment/send controls stay readable.
+- **Knowledge Graph canvas** — replaced the washed-out light graph work surface
+  with an intentional dark canvas treatment.
+- **Workspace OS dark surfaces** — relationship/list cards, inputs, tags,
+  health cards, and capability cards no longer fall back to hardcoded white.
+- **Onboarding/modals** — workspace select, PC environment analysis,
+  recommendation result, auto setup, mode select, pipeline, My Computer,
+  profile, settings, Private VPC, and model-state panels now share the same
+  dark panel language.
+- **Account dark contrast** — account/register logo text, inputs, and window
+  controls remain readable in dark mode.
+
+### Changed
+
+- **Cache-busting** — all versioned frontend assets now use `?v=2.2.7`,
+  including `/static/scripts/chat.js?v=2.2.7`.
+- **Version sync** — Python package, npm package, VS Code extension, Workspace
+  OS, lockfiles, and runtime metadata aligned at `2.2.7`.
+
+### Validation
+
+- Release target includes Python compile/pytest, npm lint/typecheck/test/build,
+  Python build + twine check, npm pack, VSIX package, and Playwright visual QA.
+- Package-store publishing remains manual; release artifacts are version-scoped
+  and must use exact `2.2.7` filenames.
+
+## [2.2.5] - 2026-06-04
+
+> Release Hygiene Hotfix — dark-mode overlay clarity, modal state protection,
+> static asset version alignment, favicon routing, and Telegram log redaction.
+
+### Added
+
+- **Modal manager** — Chat overlays now share one blocking-modal controller with
+  Escape close, backdrop close, pagehide/navigation cleanup, and body scroll-lock
+  restoration.
+- **Favicon asset** — `static/favicon.ico` is packaged and served by
+  `/favicon.ico`.
+- **Sensitive-log helper** — Telegram bot tokens are normalized to
+  `bot123:REDACTED` before HTTP, exception, or response text reaches logs.
+- **Validation coverage** — unit tests for token masking and static release
+  hygiene, plus Playwright checks for modal stack behavior and favicon response.
+
+### Changed
+
+- **Overlay theme tokens** — full-screen overlays use `--overlay-scrim` and no
+  blur-heavy backdrop, preventing washed-out dark-mode UI.
+- **Surface token coverage** — modal, drawer, file manager, My Computer,
+  onboarding, model switcher, pipeline, and admin surfaces are remapped to
+  semantic tokens (`--modal`, `--surface`, `--surface-elevated`, `--input`).
+- **Cache-busting** — all versioned frontend assets now use `?v=2.2.5`, including
+  `/static/scripts/chat.js?v=2.2.5`.
+- **Version sync** — Python package, npm package, VS Code extension, Workspace
+  OS, lockfiles, and runtime metadata aligned at `2.2.5`.
+
+### Validation
+
+- Release target includes Python compile/pytest, npm lint/typecheck/test/build,
+  Python build + twine check, npm pack, VSIX package, and Playwright visual QA.
+- Package-store publishing remains manual; release artifacts are version-scoped
+  and must use exact `2.2.5` filenames.
+
 ## [2.2.1] - 2026-06-04
 
 > Frontend / UX Overhaul Release — Lattice AI keeps feature behavior stable

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "2.2.2"
+__version__ = "2.2.7"

package/latticeai/api/static_routes.py

@@ -82,6 +82,16 @@ def create_static_routes_router(
         if not p.exists():
             raise HTTPException(status_code=404)
         return FileResponse(str(p), media_type="application/manifest+json")
+
+    @api_router.api_route("/favicon.ico", methods=["GET", "HEAD"])
+    async def favicon():
+        ico = STATIC_DIR / "favicon.ico"
+        png = STATIC_DIR / "icons" / "favicon-32.png"
+        if ico.exists():
+            return FileResponse(str(ico), media_type="image/x-icon")
+        if png.exists():
+            return FileResponse(str(png), media_type="image/png")
+        raise HTTPException(status_code=404)
     
     
     @api_router.get("/sw.js")

package/latticeai/core/logging_safety.py

@@ -0,0 +1,62 @@
+"""Helpers for keeping sensitive values out of logs."""
+
+from __future__ import annotations
+
+import logging
+import re
+from typing import Any
+
+_TELEGRAM_BOT_TOKEN_RE = re.compile(r"\bbot(\d{5,20}):([A-Za-z0-9_-]{8,})")
+_TELEGRAM_BARE_TOKEN_RE = re.compile(
+    r"(?<![A-Za-z0-9_:-])(\d{5,20}):([A-Za-z0-9_-]{8,})(?![A-Za-z0-9_-])"
+)
+_LOG_FILTER_INSTALLED = False
+
+
+def mask_telegram_bot_token(value: Any) -> str:
+    """Return ``value`` as text with Telegram bot token secrets redacted."""
+
+    text = str(value)
+    text = _TELEGRAM_BOT_TOKEN_RE.sub(r"bot\1:REDACTED", text)
+    return _TELEGRAM_BARE_TOKEN_RE.sub(r"bot\1:REDACTED", text)
+
+
+def safe_log_text(value: Any) -> str:
+    """Sanitize text before it is sent to application logs."""
+
+    return mask_telegram_bot_token(value)
+
+
+def _safe_log_arg(value: Any) -> Any:
+    if isinstance(value, str):
+        return mask_telegram_bot_token(value)
+    if isinstance(value, tuple):
+        return tuple(_safe_log_arg(item) for item in value)
+    if isinstance(value, list):
+        return [_safe_log_arg(item) for item in value]
+    if isinstance(value, dict):
+        return {_safe_log_arg(key): _safe_log_arg(item) for key, item in value.items()}
+
+    text = str(value)
+    masked = mask_telegram_bot_token(text)
+    return masked if masked != text else value
+
+
+def install_sensitive_log_filter() -> None:
+    """Install a process-wide log-record sanitizer for known secret shapes."""
+
+    global _LOG_FILTER_INSTALLED
+    if _LOG_FILTER_INSTALLED:
+        return
+
+    original_factory = logging.getLogRecordFactory()
+
+    def factory(*args: Any, **kwargs: Any) -> logging.LogRecord:
+        record = original_factory(*args, **kwargs)
+        record.msg = _safe_log_arg(record.msg)
+        if record.args:
+            record.args = _safe_log_arg(record.args)
+        return record
+
+    logging.setLogRecordFactory(factory)
+    _LOG_FILTER_INSTALLED = True

package/latticeai/core/workspace_os.py

@@ -18,7 +18,7 @@ from pathlib import Path
 from typing import Any, Callable, Dict, Iterable, List, Optional
 
 
-WORKSPACE_OS_VERSION = "2.2.2"
+WORKSPACE_OS_VERSION = "2.2.7"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ltcai",
-  "version": "2.2.2",
+  "version": "2.2.7",
   "description": "Local-first AI workspace for knowledge graphs, AI pipelines, and multi-agent coding workflows.",
   "homepage": "https://github.com/TaeSooPark-PTS/LatticeAI#readme",
   "repository": {
@@ -20,6 +20,8 @@
     "build": "npm run build:python",
     "build:python": "python3 -m build",
     "check:python": "python3 -m py_compile ltcai_cli.py server.py latticeai/server_app.py latticeai/api/chat.py latticeai/api/computer_use.py latticeai/api/deps.py latticeai/api/garden.py latticeai/api/local_files.py latticeai/api/permissions.py latticeai/api/setup.py latticeai/api/static_routes.py latticeai/api/tools.py latticeai/api/plugins.py latticeai/api/workflow_designer.py latticeai/api/agents.py latticeai/api/realtime.py latticeai/api/marketplace.py latticeai/services/app_context.py latticeai/services/model_runtime.py latticeai/services/model_catalog.py latticeai/services/model_recommendation.py latticeai/services/tool_dispatch.py latticeai/services/upload_service.py latticeai/core/tool_registry.py latticeai/core/enterprise.py latticeai/core/enterprise_admin.py latticeai/core/agent_prompts.py latticeai/core/workspace_os.py latticeai/core/plugins.py latticeai/core/marketplace.py latticeai/core/workflow_engine.py latticeai/core/multi_agent.py latticeai/core/realtime.py knowledge_graph.py knowledge_graph_api.py local_knowledge_api.py llm_router.py p_reinforce.py telegram_bot.py tools.py codex_telegram_bot.py",
+    "lint": "node --check static/scripts/account.js && node --check static/scripts/admin.js && node --check static/scripts/chat.js && node --check static/scripts/graph.js && node --check static/scripts/platform.js && node --check static/scripts/ux.js && node --check static/scripts/workspace.js && node --check tests/visual/mock_server.cjs",
+    "typecheck": "cd vscode-extension && npm run build",
     "test": "python3 -m pytest tests/ -v",
     "test:unit": "python3 -m pytest tests/unit/ -v",
     "test:integration": "python3 -m pytest tests/integration/ -v",
@@ -80,9 +82,9 @@
     "static/workflows.html",
     "static/agents.html",
     "static/activity.html",
+    "static/favicon.ico",
     "static/manifest.json",
     "static/sw.js",
-    "static/lattice-reference.css",
     "static/workspace.css",
     "static/platform.css",
     "static/scripts/",

package/static/account.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content">
     <title>Lattice AI</title>
-    <script src="/static/scripts/ux.js?v=2.2.2"></script>
+    <script src="/static/scripts/ux.js?v=2.2.7"></script>
     <link rel="manifest" href="/manifest.json">
     <meta name="theme-color" content="#f3ecff">
     <meta name="apple-mobile-web-app-capable" content="yes">
@@ -14,8 +14,13 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&display=swap">
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tabler/icons-webfont@latest/tabler-icons.min.css">
-    <link rel="stylesheet" href="/static/lattice-reference.css?v=0.3.3">
-    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.2">
+    <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/base.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/account.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/admin.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/graph.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/chat.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.7">
 </head>
 <body class="lattice-ref-auth">
     <div class="orb orb-1"></div>
@@ -105,6 +110,6 @@
         <a href="#" onclick="return false;" id="privacy-link">개인정보 처리방침</a>
     </footer>
 
-    <script src="/static/scripts/account.js?v=0.3.3"></script>
+    <script src="/static/scripts/account.js?v=2.2.7"></script>
 </body>
 </html>

package/static/activity.html

@@ -4,10 +4,10 @@
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content" />
   <title>Realtime Activity — Lattice AI</title>
-  <script src="/static/scripts/ux.js?v=2.2.2"></script>
-  <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.2" />
-  <link rel="stylesheet" href="/static/platform.css?v=2.2.2" />
-  <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.2" />
+  <script src="/static/scripts/ux.js?v=2.2.7"></script>
+  <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.7" />
+  <link rel="stylesheet" href="/static/platform.css?v=2.2.7" />
+  <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.7" />
 </head>
 <body>
   <main>

package/static/admin.html

@@ -5,7 +5,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content">
     <title>Lattice AI Admin</title>
-    <script src="/static/scripts/ux.js?v=2.2.2"></script>
+    <script src="/static/scripts/ux.js?v=2.2.7"></script>
     <link rel="manifest" href="/manifest.json">
     <meta name="theme-color" content="#f3ecff">
     <meta name="apple-mobile-web-app-capable" content="yes">
@@ -15,8 +15,13 @@
     <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
     <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700;800&display=swap">
     <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@tabler/icons-webfont@latest/tabler-icons.min.css">
-    <link rel="stylesheet" href="/static/lattice-reference.css?v=0.3.3">
-    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.2">
+    <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/base.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/account.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/admin.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/graph.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/chat.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.7">
     <script src="https://cdn.jsdelivr.net/npm/chart.js@4.4.0/dist/chart.umd.min.js"></script>
 </head>
 

package/static/agents.html

@@ -4,10 +4,10 @@
   <meta charset="UTF-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content" />
   <title>Multi-Agent Runtime — Lattice AI</title>
-  <script src="/static/scripts/ux.js?v=2.2.2"></script>
-  <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.2" />
-  <link rel="stylesheet" href="/static/platform.css?v=2.2.2" />
-  <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.2" />
+  <script src="/static/scripts/ux.js?v=2.2.7"></script>
+  <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.7" />
+  <link rel="stylesheet" href="/static/platform.css?v=2.2.7" />
+  <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.7" />
 </head>
 <body>
   <main>

package/static/chat.html

@@ -5,7 +5,7 @@
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover, interactive-widget=resizes-content">
     <title>Lattice AI — All-in-One Multimodal Workspace</title>
-    <script src="/static/scripts/ux.js?v=2.2.2"></script>
+    <script src="/static/scripts/ux.js?v=2.2.7"></script>
 
     <!-- PWA -->
     <link rel="manifest" href="/manifest.json">
@@ -24,8 +24,13 @@
     <script src="https://cdn.jsdelivr.net/npm/marked/marked.min.js"></script>
 
     <!-- ── Setup Wizard Styles ──────────────────────────────────────────── -->
-    <link rel="stylesheet" href="/static/lattice-reference.css?v=0.3.3">
-    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.2">
+    <link rel="stylesheet" href="/static/css/tokens.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/base.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/account.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/admin.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/graph.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/reference/chat.css?v=2.2.7">
+    <link rel="stylesheet" href="/static/css/responsive.css?v=2.2.7">
 </head>
 
 <body class="lattice-ref-chat">
@@ -414,7 +419,7 @@
                 <!-- Planning -->
                 <div class="pipeline-phase-row">
                     <div class="pipeline-phase-label">
-                        <span class="pipeline-phase-badge" style="background:rgba(99,102,241,0.15);color:#818cf8">📋 Planning</span>
+                        <span class="pipeline-phase-badge" style="background:rgba(99,102,241,0.15);color:var(--accent)">📋 Planning</span>
                         <span style="color:var(--muted);font-size:11px">계획 수립 · 유저와 함께 검토</span>
                     </div>
                     <select id="pipeline-planning-select" class="pipeline-select">
@@ -425,7 +430,7 @@
                 <!-- Executing -->
                 <div class="pipeline-phase-row">
                     <div class="pipeline-phase-label">
-                        <span class="pipeline-phase-badge" style="background:rgba(34,197,94,0.12);color:#4ade80">⚙️ Executing</span>
+                        <span class="pipeline-phase-badge" style="background:rgba(34,197,94,0.12);color:var(--success)">⚙️ Executing</span>
                         <span style="color:var(--muted);font-size:11px">코드 작성 · 파일 생성 · 툴 호출</span>
                     </div>
                     <select id="pipeline-executing-select" class="pipeline-select">
@@ -436,7 +441,7 @@
                 <!-- Reviewing -->
                 <div class="pipeline-phase-row">
                     <div class="pipeline-phase-label">
-                        <span class="pipeline-phase-badge" style="background:rgba(251,146,60,0.12);color:#fb923c">🔍 Reviewing</span>
+                        <span class="pipeline-phase-badge" style="background:rgba(251,146,60,0.12);color:var(--warning)">🔍 Reviewing</span>
                         <span style="color:var(--muted);font-size:11px">결과 검증 · 최종 답변 생성</span>
                     </div>
                     <select id="pipeline-reviewing-select" class="pipeline-select">
@@ -501,7 +506,7 @@
                     <button class="admin-action" onclick="sendFileToChat()" style="flex:1;background:rgba(111,66,232,0.12);border-color:rgba(111,66,232,0.28)">
                         <i class="ti ti-send"></i> AI에게 보내기
                     </button>
-                    <button class="status-btn" onclick="closeFileEditor();document.getElementById('local-browser-overlay').style.display='flex'" style="flex:1">
+                    <button class="status-btn" onclick="closeFileEditor();showModalLayer('local-browser-overlay')" style="flex:1">
                         <i class="ti ti-arrow-left"></i> 탐색기로
                     </button>
                 </div>
@@ -736,7 +741,7 @@
                         <div id="cu-screenshot-meta" style="font-size:11px;color:var(--faint);text-align:center"></div>
                     </div>
                     <!-- Controls panel -->
-                    <div style="width:280px;padding:14px;display:flex;flex-direction:column;gap:12px;overflow-y:auto">
+                    <div class="cu-controls-panel" style="padding:14px;display:flex;flex-direction:column;gap:12px;overflow-y:auto">
                         <!-- Agent task input -->
                         <div>
                             <div style="font-size:11px;font-weight:600;color:var(--muted);text-transform:uppercase;letter-spacing:.06em;margin-bottom:8px">AI 자동 작업</div>
@@ -774,7 +779,7 @@
                             <div id="cu-log" style="flex:1;background:var(--surface-3);border:1px solid var(--border);border-radius:8px;padding:8px;font-size:11px;font-family:monospace;color:var(--muted);overflow-y:auto;max-height:200px;min-height:80px"></div>
                         </div>
                         <!-- Permission note -->
-                        <div style="background:rgba(240,168,50,.07);border:1px solid rgba(240,168,50,.2);border-radius:8px;padding:9px 11px;font-size:11px;color:rgba(240,168,50,.85)">
+                        <div style="background:rgba(240,168,50,.07);border:1px solid rgba(240,168,50,.2);border-radius:8px;padding:9px 11px;font-size:11px;color:var(--warning)">
                             <i class="ti ti-alert-triangle"></i> macOS 손쉬운 사용 권한 필요<br>
                             <span style="opacity:.7">시스템 설정 → 개인 정보 보호 → 손쉬운 사용</span>
                         </div>
@@ -833,7 +838,7 @@
     </div>
 
 
-    <script src="/static/scripts/chat.js?v=0.3.4"></script>
+    <script src="/static/scripts/chat.js?v=2.2.7"></script>
 </body>
 
 </html>