ltcai 4.7.0 → 4.7.2

package/latticeai/api/admin.py

@@ -2,9 +2,10 @@
 
 import logging
 from collections import defaultdict
+from datetime import datetime, timedelta
 from typing import Callable, Dict, List, Optional
 
-from fastapi import APIRouter, HTTPException, Request
+from fastapi import APIRouter, HTTPException, Query, Request
 from pydantic import BaseModel
 
 from latticeai.core.workspace_os import DEFAULT_WORKSPACE_ID
@@ -86,6 +87,62 @@ def create_admin_router(
         scope = _workspace_scope(request)
         return [item for item in get_audit_log() if _matches_scope(item, scope)]
 
+    def _filter_audit_log(
+        events: List[Dict],
+        *,
+        q: Optional[str] = None,
+        actor: Optional[str] = None,
+        action: Optional[str] = None,
+        severity: Optional[str] = None,
+        limit: int = 50,
+    ) -> List[Dict]:
+        needle = (q or "").strip().lower()
+        actor_filter = (actor or "").strip().lower()
+        action_filter = (action or "").strip().lower()
+        severity_filter = (severity or "").strip().lower()
+
+        def matches(event: Dict) -> bool:
+            public = _event_public_text(event)
+            if needle and needle not in public:
+                return False
+            if actor_filter and actor_filter not in str(event.get("user_email") or event.get("actor") or "").lower():
+                return False
+            event_action = str(event.get("event_type") or event.get("action") or "").lower()
+            if action_filter and action_filter not in event_action:
+                return False
+            event_severity = str(event.get("severity") or event.get("sev") or "").lower()
+            if severity_filter and event_severity != severity_filter:
+                return False
+            return True
+
+        capped_limit = max(1, min(int(limit or 50), 250))
+        return [event for event in events if matches(event)][-capped_limit:]
+
+    def _event_public_text(event: Dict) -> str:
+        parts = [
+            event.get("event_type"),
+            event.get("action"),
+            event.get("user_email"),
+            event.get("actor"),
+            event.get("target"),
+            event.get("target_email"),
+            event.get("workspace_id"),
+            event.get("severity"),
+            event.get("sev"),
+        ]
+        return " ".join(str(part).lower() for part in parts if part is not None)
+
+    def _parse_timestamp(value: object) -> Optional[datetime]:
+        if not value:
+            return None
+        try:
+            parsed = datetime.fromisoformat(str(value).replace("Z", "+00:00"))
+            if parsed.tzinfo is not None:
+                return parsed.astimezone().replace(tzinfo=None)
+            return parsed
+        except ValueError:
+            return None
+
     @router.get("/admin/summary")
     async def admin_summary(request: Request):
         _, users = require_admin(request)
@@ -127,9 +184,34 @@ def create_admin_router(
         return build_sensitivity_report(_scoped_history(request))
 
     @router.get("/admin/audit")
-    async def admin_audit(request: Request):
+    async def admin_audit(
+        request: Request,
+        q: Optional[str] = Query(None),
+        actor: Optional[str] = Query(None),
+        action: Optional[str] = Query(None),
+        severity: Optional[str] = Query(None),
+        limit: int = Query(50, ge=1, le=250),
+    ):
         _, users = require_admin(request)
-        report = build_admin_audit_report(users, _scoped_audit_log(request))
+        scoped_events = _scoped_audit_log(request)
+        filtered_events = _filter_audit_log(
+            scoped_events,
+            q=q,
+            actor=actor,
+            action=action,
+            severity=severity,
+            limit=limit,
+        )
+        report = build_admin_audit_report(users, filtered_events)
+        report["filters"] = {
+            "q": q or "",
+            "actor": actor or "",
+            "action": action or "",
+            "severity": severity or "",
+            "limit": limit,
+            "matched_events": len(filtered_events),
+            "scoped_events": len(scoped_events),
+        }
         try:
             report["graph"] = get_graph_stats() if enable_graph else {"disabled": True}
         except Exception as e:
@@ -179,9 +261,36 @@ def create_admin_router(
                 {"id": "invite_gate", "label": "Invite gate",
                  "value": "Required for new accounts" if invite_gate_enabled else "Open registration",
                  "enforced": bool(invite_gate_enabled)},
+                {"id": "log_retention", "label": "Log retention",
+                 "value": "90 day local audit window with manual export before pruning", "enforced": True},
             ]
         }
 
+    @router.get("/admin/log-retention")
+    async def admin_log_retention(request: Request):
+        require_admin(request)
+        events = _scoped_audit_log(request)
+        retention_days = 90
+        cutoff = datetime.now() - timedelta(days=retention_days)
+        retained = 0
+        prune_candidates = 0
+        for event in events:
+            ts = _parse_timestamp(event.get("timestamp") or event.get("ts"))
+            if ts and ts < cutoff:
+                prune_candidates += 1
+            else:
+                retained += 1
+        return {
+            "mode": "local-first",
+            "retention_days": retention_days,
+            "total_events": len(events),
+            "retained_events": retained,
+            "prune_candidates": prune_candidates,
+            "export_before_prune": True,
+            "editable": False,
+            "reason": "Retention is reported in Community mode; destructive pruning requires an explicit export workflow.",
+        }
+
     @router.get("/admin/product-hardening")
     async def admin_product_hardening(request: Request):
         require_admin(request)

package/latticeai/api/chat.py

@@ -543,7 +543,14 @@ def create_chat_router(context: AppContext) -> APIRouter:
             if recent_context:
                 stream_context = f"[RECENT CONVERSATION]\n{recent_context}\n\n{context}".strip()
             return StreamingResponse(
-                _stream_chat(req, stream_context, req.image_data, trace_seed=trace_seed, effective_email=effective_email),
+                _stream_chat(
+                    req,
+                    stream_context,
+                    req.image_data,
+                    trace_seed=trace_seed,
+                    effective_email=effective_email,
+                    history_meta=history_meta,
+                ),
                 media_type="text/event-stream",
                 headers={"X-Model": router.current_model_id},
             )
@@ -650,6 +657,7 @@ def create_chat_router(context: AppContext) -> APIRouter:
         *,
         trace_seed: Optional[Dict] = None,
         effective_email: Optional[str] = None,
+        history_meta: Optional[Dict] = None,
     ) -> AsyncIterator[str]:
         full_response = ""
         async for chunk in router.stream_generate(req.message, context, req.max_tokens, req.temperature, image_data):
@@ -664,8 +672,8 @@ def create_chat_router(context: AppContext) -> APIRouter:
     
             full_response += str(clean_chunk)
             yield f"data: {json.dumps({'chunk': clean_chunk, 'model': router.current_model_id}, ensure_ascii=False)}\n\n"
-        history_user = get_history_user(req.user_email, req.user_nickname)
-        save_to_history("assistant", full_response, **history_meta, **history_user)
+        history_user = get_history_user(effective_email or req.user_email, req.user_nickname)
+        save_to_history("assistant", full_response, **(history_meta or {}), **history_user)
         trace_record = CHAT_SERVICE.record_trace(
             question=req.message,
             response=full_response,

package/latticeai/app_factory.py

@@ -51,8 +51,6 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
     except Exception as e:
         print(f"⚠️ MLX Metal context unavailable: {e}")
         mx = None
-    from typing import List
-
     import uvicorn
     from fastapi import FastAPI, HTTPException, Request
     from fastapi.middleware.cors import CORSMiddleware

package/latticeai/core/marketplace.py

@@ -11,7 +11,7 @@ from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
 
-MARKETPLACE_VERSION = "4.7.0"
+MARKETPLACE_VERSION = "4.7.2"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent")
 
 

package/latticeai/core/workspace_os.py

@@ -19,7 +19,7 @@ from pathlib import Path
 from typing import Any, Callable, Dict, Iterable, List, Optional
 
 
-WORKSPACE_OS_VERSION = "4.7.0"
+WORKSPACE_OS_VERSION = "4.7.2"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ltcai",
-  "version": "4.7.0",
+  "version": "4.7.2",
   "description": "Lattice AI — local-first Living Brain workspace (conversation, durable memory, hybrid search, agents, advanced graph exploration, portable encrypted brain archives)",
   "homepage": "https://github.com/TaeSooPark-PTS/LatticeAI#readme",
   "repository": {
@@ -89,6 +89,7 @@
     "static/icons/",
     "plugins/",
     "scripts/",
+    "!scripts/launch-pts-grok.sh",
     "!docs/images/tmp_frames/",
     "!**/__pycache__/",
     "!**/*.pyc",

package/src-tauri/Cargo.lock

@@ -1654,7 +1654,7 @@ dependencies = [
 
 [[package]]
 name = "lattice-ai-desktop"
-version = "4.7.0"
+version = "4.7.2"
 dependencies = [
  "plist",
  "serde",

package/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "lattice-ai-desktop"
-version = "4.7.0"
+version = "4.7.2"
 description = "Lattice AI Digital Brain desktop shell"
 authors = ["TaeSoo Park"]
 edition = "2021"

package/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Lattice AI",
-  "version": "4.7.0",
+  "version": "4.7.2",
   "identifier": "ai.lattice.desktop",
   "build": {
     "beforeDevCommand": "npm run frontend:dev",

package/static/app/asset-manifest.json

@@ -1,13 +1,13 @@
 {
-  "version": "4.7.0",
+  "version": "4.7.2",
   "generated_at": "vite",
   "entrypoints": {
     "app": "/static/app/index.html"
   },
   "assets": {
     "../node_modules/@tauri-apps/api/core.js": "/static/app/assets/core-CwxXejkd.js",
-    "index.html": "/static/app/assets/index-DwX3rNfA.js",
-    "assets/index-DFmuiJ6t.css": "/static/app/assets/index-DFmuiJ6t.css"
+    "index.html": "/static/app/assets/index-DdAB4yfa.js",
+    "assets/index-KlQ04wVv.css": "/static/app/assets/index-KlQ04wVv.css"
   },
   "vite": {
     "../node_modules/@tauri-apps/api/core.js": {
@@ -17,7 +17,7 @@
       "isDynamicEntry": true
     },
     "index.html": {
-      "file": "assets/index-DwX3rNfA.js",
+      "file": "assets/index-DdAB4yfa.js",
       "name": "index",
       "src": "index.html",
       "isEntry": true,
@@ -25,7 +25,7 @@
         "../node_modules/@tauri-apps/api/core.js"
       ],
       "css": [
-        "assets/index-DFmuiJ6t.css"
+        "assets/index-KlQ04wVv.css"
       ]
     }
   }