noteconnection 1.6.0 → 1.6.2

package/README.md

@@ -1,4 +1,4 @@
-# 2026-03-04 v1.5.13
+# 2026-03-24 v1.6.0
 
 # NoteConnection Knowledge Graph
 
@@ -279,9 +279,26 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 Managing your knowledge base source is now easier than ever.
 
 - **First Run Setup**: On first launch, you will be prompted to select your `Knowledge_Base` folder.
-- **Persistent Config**: Your selection is saved in `kb_config.json` and remembered across restarts.
+- **Persistent Config (`app_config.toml`)**: Your KB path, language, and multi-window preferences are saved in `%LOCALAPPDATA%/NoteConnection/app_config.toml` (Windows default) and remembered across restarts.
+- **Legacy Auto-Migration**: If a legacy `kb_config.json` exists in the same config directory, NoteConnection automatically migrates it to `app_config.toml`.
 - **Change Anytime**: Use the **File > Change Knowledge Base...** menu option to switch folders instantly.
 - **Reset**: Use **File > Reset to Default** to return to the bundled demo notes.
+- **Config Path Overrides**: Set `NOTE_CONNECTION_CONFIG_PATH` (full file path) or `NOTE_CONNECTION_CONFIG_DIR` (directory) to customize where `app_config.toml` is stored.
+- **Window Behavior Tuning**: Edit `[multi_window]` in `app_config.toml` (`single_window_mode`, `hide_tauri_when_pathmode_opens`, `restore_tauri_when_pathmode_exits`, `confirm_before_full_shutdown_from_godot`, `sync_language`).
+- **Detailed Config Guide**: See [`docs/en/app_config.toml_guide.md`](docs/en/app_config.toml_guide.md) and template [`docs/examples/app_config.template.toml`](docs/examples/app_config.template.toml).
+
+```toml
+# Minimal recommended app_config.toml
+knowledge_base_path = "E:/Knowledge_project/NoteConnection_app/Knowledge_Base"
+user_language = "en"
+
+[multi_window]
+single_window_mode = true
+hide_tauri_when_pathmode_opens = true
+restore_tauri_when_pathmode_exits = true
+confirm_before_full_shutdown_from_godot = true
+sync_language = true
+```
 
 ## 🏗️ Build & Deployment
 
@@ -294,6 +311,16 @@ For developers building from source, NoteConnection offers two build modes:
 - **GPU Dev Start (`npm run tauri:dev:mini:gpu`)**: Recommended GPU-enabled Tauri development command.
 - **Do not use** `npm run tauri:dev:mini --gpu` because npm treats `--gpu` as config and prints warnings.
 
+## 📚 Documentation Architecture (Diataxis + MkDocs)
+
+- Canonical long-form docs remain under `docs/en/*` and `docs/zh/*`.
+- Diataxis navigation pages are maintained under `docs/diataxis/<lang>/*`.
+- Mapping governance is versioned in `docs/diataxis-map.json`.
+- Run mapping validation: `npm run docs:diataxis:check`.
+- Run local docs site preview: `npm run docs:site:serve`.
+- Build static docs site: `npm run docs:site:build`.
+- CI policy gate for docs mapping and site build: `.github/workflows/docs-diataxis-site.yml`.
+
 ## 🛠️ Hardware & Driver Requirements (AMDGPU)
 
 For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA cards (like RX 7900XT):
@@ -309,6 +336,11 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 
 ### v1.6.0 - Unified Runtime, NoteMD Integration & Release Hardening (2026-03-23)
 
+- **Tag Compare Snapshot (`v1.3.0..v1.6.0`)**:
+  - `107` commits, `301` files changed, `+125,957 / -10,083` churn.
+  - File-level status: `241` added, `56` modified, `3` deleted, `1` renamed.
+  - Largest engineering footprint: `src/`, `docs/`, `scripts/`, `path_mode/`, `src-tauri/`.
+
 - **Single-Window Runtime Orchestration**:
   - Implemented Tauri <-> Godot visibility handoff so only one primary window is shown at a time.
   - Added Godot close-confirm flow ("Return to main interface" vs "Close all windows") to prevent accidental full shutdown.
@@ -323,6 +355,7 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 - **Reliability & Security Gates**:
   - Expanded CI/workflow coverage for FixRisk operational readiness, mobile e2e contracts, wasm parity, SBOM, attestation, and signature/privacy checks.
   - Added broad contract-level regression coverage across mobile/runtime/pathbridge/storage layers.
+  - Included pre-release CI compatibility fixes for runtime bridge invoke-contract assertions and unsigned SBOM transparency policy handling.
 - **Build Performance & Developer Experience**:
   - Added low-memory Tauri build wrappers and release-profile safeguards for constrained environments.
   - Added sidecar readiness preflight to skip redundant rebuilds during dev startup, reducing warm `tauri:dev:mini:gpu` startup latency.
@@ -854,7 +887,7 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 ## 中文文档
 
 
-# 2026-03-04 v1.5.13
+# 2026-03-24 v1.6.0
 # NoteConnection: 层级知识图谱可视化系统
 
 <img width="606" height="309" alt="banner" src="https://github.com/user-attachments/assets/92e90de5-2b1a-4398-8e8b-6e142c92b6a2" />
@@ -1120,9 +1153,26 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 管理知识库源现在变得更加简单。
 
 - **首次运行设置**: 首次启动时，系统会提示您选择 `Knowledge_Base` 文件夹。
-- **持久化配置**: 您的选择保存在 `kb_config.json` 中，并在重启后自动加载。
+- **持久化配置 (`app_config.toml`)**: KB 路径、语言及多窗口偏好默认保存到 `%LOCALAPPDATA%/NoteConnection/app_config.toml`（Windows），重启后自动恢复。
+- **旧配置自动迁移**: 若同目录存在旧版 `kb_config.json`，启动时会自动迁移到 `app_config.toml`。
 - **随时更改**: 使用 **文件 > 更改知识库...** 菜单选项即时切换文件夹。
 - **重置**: 使用 **文件 > 重置为默认** 返回由捆绑的演示笔记。
+- **配置路径覆盖**: 可通过 `NOTE_CONNECTION_CONFIG_PATH`（完整文件路径）或 `NOTE_CONNECTION_CONFIG_DIR`（目录）自定义 `app_config.toml` 位置。
+- **窗口行为可调**: 在 `app_config.toml` 的 `[multi_window]` 段调整 `single_window_mode`、`hide_tauri_when_pathmode_opens`、`restore_tauri_when_pathmode_exits`、`confirm_before_full_shutdown_from_godot`、`sync_language`。
+- **详细配置说明**: 参见 [`docs/zh/app_config.toml_guide.md`](docs/zh/app_config.toml_guide.md) 与模板 [`docs/examples/app_config.template.toml`](docs/examples/app_config.template.toml)。
+
+```toml
+# 推荐最小 app_config.toml
+knowledge_base_path = "E:/Knowledge_project/NoteConnection_app/Knowledge_Base"
+user_language = "en"
+
+[multi_window]
+single_window_mode = true
+hide_tauri_when_pathmode_opens = true
+restore_tauri_when_pathmode_exits = true
+confirm_before_full_shutdown_from_godot = true
+sync_language = true
+```
 
 ## 🏗️ 构建与部署 (Build & Deployment)
 
@@ -1135,6 +1185,16 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 - **GPU 开发启动（推荐）** (`npm run tauri:dev:mini:gpu`)。
 - **不要使用** `npm run tauri:dev:mini --gpu`，该写法会被 npm 当作配置参数并触发告警。
 
+## 📚 文档架构（Diataxis + MkDocs）
+
+- 权威长文档仍保持在 `docs/en/*` 与 `docs/zh/*`。
+- Diataxis 导航页维护在 `docs/diataxis/<lang>/*`。
+- 映射治理文件为 `docs/diataxis-map.json`。
+- 映射一致性校验：`npm run docs:diataxis:check`。
+- 本地预览文档站点：`npm run docs:site:serve`。
+- 构建静态文档站点：`npm run docs:site:build`。
+- CI 文档治理工作流：`.github/workflows/docs-diataxis-site.yml`。
+
 ---
 
 <a id="changelog-zh"></a>
@@ -1143,6 +1203,11 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 
 ### v1.6.0 - 单窗口运行时、NoteMD 集成与发布加固 (2026-03-23)
 
+- **Tag 对比快照（`v1.3.0..v1.6.0`）**:
+  - `107` 个提交、`301` 个变更文件、`+125,957 / -10,083` 代码/文档变更量。
+  - 文件状态分布：新增 `241`、修改 `56`、删除 `3`、重命名 `1`。
+  - 主要工程变更面集中在：`src/`、`docs/`、`scripts/`、`path_mode/`、`src-tauri/`。
+
 - **单窗口运行时编排**:
   - 实现 Tauri <-> Godot 的可见性切换，同一时刻仅显示一个主窗口。
   - 增加 Godot 关闭确认流程（“返回主界面” / “关闭全部窗口”），避免误操作导致全局退出。
@@ -1157,6 +1222,7 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 - **可靠性与安全门禁**:
   - 扩展 CI/工作流：FixRisk 运维就绪、移动端 e2e 合约、wasm parity、SBOM、attestation、签名与隐私清单校验。
   - 新增多层合约回归覆盖（mobile/runtime/pathbridge/storage）。
+  - 纳入发布前 CI 兼容修复：runtime bridge invoke 契约断言兼容与无签名 SBOM transparency 条件化策略。
 - **构建性能与开发体验**:
   - 增加低内存 Tauri 构建包装器与 release 配置保护，提升受限内存环境可构建性。
   - 增加 sidecar 预检，避免开发期重复重建，缩短 `tauri:dev:mini:gpu` 热启动耗时。

package/dist/src/core/PathBridge.js

@@ -180,6 +180,7 @@ const ALLOWED_CONFIG_STRATEGY_VALUES = new Set(['foundational', 'core']);
 const ALLOWED_CONFIG_LAYOUT_VALUES = new Set(['vertical', 'horizontal', 'radial', 'orbital']);
 const ALLOWED_READING_MODE_VALUES = new Set(['window', 'fullscreen']);
 const ALLOWED_READER_RENDER_MODE_VALUES = new Set(['render', 'source']);
+const ALLOWED_CONFIG_LANGUAGE_VALUES = new Set(['en', 'zh']);
 const ALLOWED_BACKGROUND_FILE_EXTENSIONS = ['.exr', '.hdr'];
 const CONFIG_TARGET_ID_MAX_LENGTH = 512;
 const CONFIG_SHORTCUT_MAX_LENGTH = 64;
@@ -195,6 +196,7 @@ const ALLOWED_CONFIG_KEYS = new Set([
     'mode',
     'strategy',
     'layout',
+    'language',
     'targetId',
     'target_id',
     'targetIds',
@@ -345,6 +347,15 @@ function validateConfigurePayload(payload, policy) {
             return `configure payload.layout must be one of: ${Array.from(ALLOWED_CONFIG_LAYOUT_VALUES).join(', ')}.`;
         }
     }
+    if (payload.language !== undefined) {
+        if (!isNonEmptyString(payload.language)) {
+            return 'configure payload.language must be a non-empty string when provided.';
+        }
+        const normalizedLanguage = payload.language.trim().toLowerCase();
+        if (!ALLOWED_CONFIG_LANGUAGE_VALUES.has(normalizedLanguage)) {
+            return `configure payload.language must be one of: ${Array.from(ALLOWED_CONFIG_LANGUAGE_VALUES).join(', ')}.`;
+        }
+    }
     if (payload.targetId !== undefined && typeof payload.targetId !== 'string') {
         return 'configure payload.targetId must be a string when provided.';
     }

package/dist/src/frontend/README.md

@@ -1,4 +1,4 @@
-# 2026-03-04 v1.5.13
+# 2026-03-24 v1.6.0
 
 # NoteConnection Knowledge Graph
 
@@ -279,9 +279,26 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 Managing your knowledge base source is now easier than ever.
 
 - **First Run Setup**: On first launch, you will be prompted to select your `Knowledge_Base` folder.
-- **Persistent Config**: Your selection is saved in `kb_config.json` and remembered across restarts.
+- **Persistent Config (`app_config.toml`)**: Your KB path, language, and multi-window preferences are saved in `%LOCALAPPDATA%/NoteConnection/app_config.toml` (Windows default) and remembered across restarts.
+- **Legacy Auto-Migration**: If a legacy `kb_config.json` exists in the same config directory, NoteConnection automatically migrates it to `app_config.toml`.
 - **Change Anytime**: Use the **File > Change Knowledge Base...** menu option to switch folders instantly.
 - **Reset**: Use **File > Reset to Default** to return to the bundled demo notes.
+- **Config Path Overrides**: Set `NOTE_CONNECTION_CONFIG_PATH` (full file path) or `NOTE_CONNECTION_CONFIG_DIR` (directory) to customize where `app_config.toml` is stored.
+- **Window Behavior Tuning**: Edit `[multi_window]` in `app_config.toml` (`single_window_mode`, `hide_tauri_when_pathmode_opens`, `restore_tauri_when_pathmode_exits`, `confirm_before_full_shutdown_from_godot`, `sync_language`).
+- **Detailed Config Guide**: See [`docs/en/app_config.toml_guide.md`](docs/en/app_config.toml_guide.md) and template [`docs/examples/app_config.template.toml`](docs/examples/app_config.template.toml).
+
+```toml
+# Minimal recommended app_config.toml
+knowledge_base_path = "E:/Knowledge_project/NoteConnection_app/Knowledge_Base"
+user_language = "en"
+
+[multi_window]
+single_window_mode = true
+hide_tauri_when_pathmode_opens = true
+restore_tauri_when_pathmode_exits = true
+confirm_before_full_shutdown_from_godot = true
+sync_language = true
+```
 
 ## 🏗️ Build & Deployment
 
@@ -294,6 +311,16 @@ For developers building from source, NoteConnection offers two build modes:
 - **GPU Dev Start (`npm run tauri:dev:mini:gpu`)**: Recommended GPU-enabled Tauri development command.
 - **Do not use** `npm run tauri:dev:mini --gpu` because npm treats `--gpu` as config and prints warnings.
 
+## 📚 Documentation Architecture (Diataxis + MkDocs)
+
+- Canonical long-form docs remain under `docs/en/*` and `docs/zh/*`.
+- Diataxis navigation pages are maintained under `docs/diataxis/<lang>/*`.
+- Mapping governance is versioned in `docs/diataxis-map.json`.
+- Run mapping validation: `npm run docs:diataxis:check`.
+- Run local docs site preview: `npm run docs:site:serve`.
+- Build static docs site: `npm run docs:site:build`.
+- CI policy gate for docs mapping and site build: `.github/workflows/docs-diataxis-site.yml`.
+
 ## 🛠️ Hardware & Driver Requirements (AMDGPU)
 
 For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA cards (like RX 7900XT):
@@ -309,6 +336,11 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 
 ### v1.6.0 - Unified Runtime, NoteMD Integration & Release Hardening (2026-03-23)
 
+- **Tag Compare Snapshot (`v1.3.0..v1.6.0`)**:
+  - `107` commits, `301` files changed, `+125,957 / -10,083` churn.
+  - File-level status: `241` added, `56` modified, `3` deleted, `1` renamed.
+  - Largest engineering footprint: `src/`, `docs/`, `scripts/`, `path_mode/`, `src-tauri/`.
+
 - **Single-Window Runtime Orchestration**:
   - Implemented Tauri <-> Godot visibility handoff so only one primary window is shown at a time.
   - Added Godot close-confirm flow ("Return to main interface" vs "Close all windows") to prevent accidental full shutdown.
@@ -323,6 +355,7 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 - **Reliability & Security Gates**:
   - Expanded CI/workflow coverage for FixRisk operational readiness, mobile e2e contracts, wasm parity, SBOM, attestation, and signature/privacy checks.
   - Added broad contract-level regression coverage across mobile/runtime/pathbridge/storage layers.
+  - Included pre-release CI compatibility fixes for runtime bridge invoke-contract assertions and unsigned SBOM transparency policy handling.
 - **Build Performance & Developer Experience**:
   - Added low-memory Tauri build wrappers and release-profile safeguards for constrained environments.
   - Added sidecar readiness preflight to skip redundant rebuilds during dev startup, reducing warm `tauri:dev:mini:gpu` startup latency.
@@ -854,7 +887,7 @@ For optimal performance with "GPU Optimised Rendering", especially on AMD RDNA c
 ## 中文文档
 
 
-# 2026-03-04 v1.5.13
+# 2026-03-24 v1.6.0
 # NoteConnection: 层级知识图谱可视化系统
 
 <img width="606" height="309" alt="banner" src="https://github.com/user-attachments/assets/92e90de5-2b1a-4398-8e8b-6e142c92b6a2" />
@@ -1120,9 +1153,26 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 管理知识库源现在变得更加简单。
 
 - **首次运行设置**: 首次启动时，系统会提示您选择 `Knowledge_Base` 文件夹。
-- **持久化配置**: 您的选择保存在 `kb_config.json` 中，并在重启后自动加载。
+- **持久化配置 (`app_config.toml`)**: KB 路径、语言及多窗口偏好默认保存到 `%LOCALAPPDATA%/NoteConnection/app_config.toml`（Windows），重启后自动恢复。
+- **旧配置自动迁移**: 若同目录存在旧版 `kb_config.json`，启动时会自动迁移到 `app_config.toml`。
 - **随时更改**: 使用 **文件 > 更改知识库...** 菜单选项即时切换文件夹。
 - **重置**: 使用 **文件 > 重置为默认** 返回由捆绑的演示笔记。
+- **配置路径覆盖**: 可通过 `NOTE_CONNECTION_CONFIG_PATH`（完整文件路径）或 `NOTE_CONNECTION_CONFIG_DIR`（目录）自定义 `app_config.toml` 位置。
+- **窗口行为可调**: 在 `app_config.toml` 的 `[multi_window]` 段调整 `single_window_mode`、`hide_tauri_when_pathmode_opens`、`restore_tauri_when_pathmode_exits`、`confirm_before_full_shutdown_from_godot`、`sync_language`。
+- **详细配置说明**: 参见 [`docs/zh/app_config.toml_guide.md`](docs/zh/app_config.toml_guide.md) 与模板 [`docs/examples/app_config.template.toml`](docs/examples/app_config.template.toml)。
+
+```toml
+# 推荐最小 app_config.toml
+knowledge_base_path = "E:/Knowledge_project/NoteConnection_app/Knowledge_Base"
+user_language = "en"
+
+[multi_window]
+single_window_mode = true
+hide_tauri_when_pathmode_opens = true
+restore_tauri_when_pathmode_exits = true
+confirm_before_full_shutdown_from_godot = true
+sync_language = true
+```
 
 ## 🏗️ 构建与部署 (Build & Deployment)
 
@@ -1135,6 +1185,16 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 - **GPU 开发启动（推荐）** (`npm run tauri:dev:mini:gpu`)。
 - **不要使用** `npm run tauri:dev:mini --gpu`，该写法会被 npm 当作配置参数并触发告警。
 
+## 📚 文档架构（Diataxis + MkDocs）
+
+- 权威长文档仍保持在 `docs/en/*` 与 `docs/zh/*`。
+- Diataxis 导航页维护在 `docs/diataxis/<lang>/*`。
+- 映射治理文件为 `docs/diataxis-map.json`。
+- 映射一致性校验：`npm run docs:diataxis:check`。
+- 本地预览文档站点：`npm run docs:site:serve`。
+- 构建静态文档站点：`npm run docs:site:build`。
+- CI 文档治理工作流：`.github/workflows/docs-diataxis-site.yml`。
+
 ---
 
 <a id="changelog-zh"></a>
@@ -1143,6 +1203,11 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 
 ### v1.6.0 - 单窗口运行时、NoteMD 集成与发布加固 (2026-03-23)
 
+- **Tag 对比快照（`v1.3.0..v1.6.0`）**:
+  - `107` 个提交、`301` 个变更文件、`+125,957 / -10,083` 代码/文档变更量。
+  - 文件状态分布：新增 `241`、修改 `56`、删除 `3`、重命名 `1`。
+  - 主要工程变更面集中在：`src/`、`docs/`、`scripts/`、`path_mode/`、`src-tauri/`。
+
 - **单窗口运行时编排**:
   - 实现 Tauri <-> Godot 的可见性切换，同一时刻仅显示一个主窗口。
   - 增加 Godot 关闭确认流程（“返回主界面” / “关闭全部窗口”），避免误操作导致全局退出。
@@ -1157,6 +1222,7 @@ npm start -- --path "E:/Knowledge/ObsidianVault" --no-gpu
 - **可靠性与安全门禁**:
   - 扩展 CI/工作流：FixRisk 运维就绪、移动端 e2e 合约、wasm parity、SBOM、attestation、签名与隐私清单校验。
   - 新增多层合约回归覆盖（mobile/runtime/pathbridge/storage）。
+  - 纳入发布前 CI 兼容修复：runtime bridge invoke 契约断言兼容与无签名 SBOM transparency 条件化策略。
 - **构建性能与开发体验**:
   - 增加低内存 Tauri 构建包装器与 release 配置保护，提升受限内存环境可构建性。
   - 增加 sidecar 预检，避免开发期重复重建，缩短 `tauri:dev:mini:gpu` 热启动耗时。

package/dist/src/frontend/app.js

@@ -458,6 +458,40 @@ function isGraphA11yZhMode() {
     return String(window.i18n.currentLanguage).toLowerCase().startsWith('zh');
 }
 
+function getRuntimeAppConfig() {
+    if (
+        window.NoteConnectionRuntime &&
+        typeof window.NoteConnectionRuntime.getAppRuntimeConfig === 'function'
+    ) {
+        return window.NoteConnectionRuntime.getAppRuntimeConfig();
+    }
+    if (window.__NC_APP_CONFIG && typeof window.__NC_APP_CONFIG === 'object') {
+        return window.__NC_APP_CONFIG;
+    }
+    return null;
+}
+
+function resolveRuntimeMultiWindowOptions() {
+    const defaults = {
+        singleWindowMode: true,
+        hideTauriWhenPathmodeOpens: true,
+        restoreTauriWhenPathmodeExits: true,
+        confirmBeforeFullShutdownFromGodot: true,
+        syncLanguage: true
+    };
+    const config = getRuntimeAppConfig();
+    if (!config || typeof config !== 'object' || !config.multiWindow || typeof config.multiWindow !== 'object') {
+        return defaults;
+    }
+    const next = { ...defaults };
+    Object.keys(defaults).forEach((key) => {
+        if (typeof config.multiWindow[key] === 'boolean') {
+            next[key] = config.multiWindow[key];
+        }
+    });
+    return next;
+}
+
 function getGraphRendererMode() {
     const checked = document.querySelector('input[name="rendererMode"]:checked');
     if (!checked || (checked.value !== 'svg' && checked.value !== 'canvas')) {
@@ -967,10 +1001,13 @@ document.querySelectorAll('input[name="degreeMode"]').forEach(radio => {
 // Localization is now handled by i18n.js
 // We just need to listen for changes to update dynamic UI components like Analysis Panel
 if (window.i18n) {
-    window.i18n.onLanguageChange(() => {
+    window.i18n.onLanguageChange((newLang) => {
         if (typeof window.updateAnalysisUI === 'function') {
             window.updateAnalysisUI();
         }
+        if (window.pathApp && typeof window.pathApp.syncLanguageWithBridge === 'function') {
+            window.pathApp.syncLanguageWithBridge(newLang);
+        }
         scheduleGraphSemanticA11yRefresh('Language changed');
     });
 }
@@ -3525,6 +3562,22 @@ if (
     window.__TAURI__.event.listen('notemd-open-request', () => {
         showEmbeddedNoteMD({ source: 'tauri-event' });
     });
+    window.__TAURI__.event.listen('app-language-updated', async (event) => {
+        const language = event && event.payload && typeof event.payload.language === 'string'
+            ? event.payload.language
+            : '';
+        if (!language || !window.i18n || typeof window.i18n.setLanguage !== 'function') {
+            return;
+        }
+        if (window.i18n.currentLanguage === language) {
+            return;
+        }
+        try {
+            await window.i18n.setLanguage(language);
+        } catch (error) {
+            console.warn('[i18n] Failed to apply app-language-updated event payload:', error);
+        }
+    });
 }
 
 if (btnNotemd) {
@@ -3571,8 +3624,10 @@ if (btnPathMode) {
         // We check `nodes` length directly because it is the effective runtime source here.
         const hasData = (typeof nodes !== 'undefined' && nodes.length > 0);
         
-        if (!hasData) {
-            const msg = (window.i18n && window.i18n.currentLanguage === 'zh') ? "请先加载知识库。" : "Please load a Knowledge Base first.";
+        if (!hasData) {
+            const msg = (window.i18n && typeof window.i18n.t === 'function')
+                ? window.i18n.t('pathMode.loadKbFirst')
+                : 'Please load a Knowledge Base first.';
             
             // Inline Feedback
             let feedbackEl = document.getElementById('path-mode-feedback');
@@ -3600,6 +3655,7 @@ if (btnPathMode) {
         // Check for active selection for Diffusion Learning
         const highlightState = window.highlightManager ? window.highlightManager.getState() : null;
         const selectedNode = (highlightState && highlightState.currentNode) ? highlightState.currentNode : null;
+        const multiWindowOptions = resolveRuntimeMultiWindowOptions();
         
         console.log('[Path Mode] Entering...', selectedNode ? `Target: ${selectedNode.id}` : 'Domain Mode');
 
@@ -3634,14 +3690,19 @@ if (btnPathMode) {
             if (window.__TAURI__ && window.__TAURI__.core && typeof window.__TAURI__.core.invoke === 'function') {
                 try {
                     // 1. Hide the Tauri window via Rust IPC.
-                    await window.__TAURI__.core.invoke('toggle_pathmode_window', { showGodot: true });
-                    // 2. Send setWindowVisible to Godot via PathBridge WebSocket.
-                    if (window.pathApp && window.pathApp.ws && window.pathApp.ws.readyState === WebSocket.OPEN) {
-                        window.pathApp.ws.send(JSON.stringify({
-                            type: 'setWindowVisible',
-                            payload: { visible: true }
-                        }));
-                    }
+                    await window.__TAURI__.core.invoke('toggle_pathmode_window', { showGodot: true });
+                    // 2. Send setWindowVisible to Godot via PathBridge WebSocket.
+                    if (
+                        multiWindowOptions.singleWindowMode &&
+                        window.pathApp &&
+                        window.pathApp.ws &&
+                        window.pathApp.ws.readyState === WebSocket.OPEN
+                    ) {
+                        window.pathApp.ws.send(JSON.stringify({
+                            type: 'setWindowVisible',
+                            payload: { visible: true }
+                        }));
+                    }
                     console.log('[Path Mode] Single-window toggle: Tauri hidden, Godot shown.');
                 } catch (err) {
                     console.warn('[Path Mode] toggle_pathmode_window failed:', err);

package/dist/src/frontend/locales/en.json

@@ -211,12 +211,15 @@
       "controls": "Controls"
     }
   },
-  "notifications": {
-    "buildSuccess": "Build Success! Reloading interface...",
-    "buildFailed": "Build failed. Please check your knowledge base path.",
-    "noData": "No data available. Please load a knowledge base first."
-  },
-  "manual": {
+  "notifications": {
+    "buildSuccess": "Build Success! Reloading interface...",
+    "buildFailed": "Build failed. Please check your knowledge base path.",
+    "noData": "No data available. Please load a knowledge base first."
+  },
+  "pathMode": {
+    "loadKbFirst": "Please load a Knowledge Base first."
+  },
+  "manual": {
     "loading": "Loading documentation...",
     "error": "Error Loading Documentation",
     "errorDetail": "Could not load User_Manual.md or README.md.",

package/dist/src/frontend/locales/zh.json

@@ -211,12 +211,15 @@
       "controls": "控制"
     }
   },
-  "notifications": {
-    "buildSuccess": "构建成功！重新加载界面...",
-    "buildFailed": "构建失败。请检查您的知识库路径。",
-    "noData": "无可用数据。请先加载知识库。"
-  },
-  "nodes": "节点",
+  "notifications": {
+    "buildSuccess": "构建成功！重新加载界面...",
+    "buildFailed": "构建失败。请检查您的知识库路径。",
+    "noData": "无可用数据。请先加载知识库。"
+  },
+  "pathMode": {
+    "loadKbFirst": "请先加载知识库。"
+  },
+  "nodes": "节点",
   "edges": "边",
   "show_all": "显示全部",
   "show_in": "仅入度",

package/dist/src/frontend/path_app.js

@@ -34,7 +34,8 @@ window.pathApp = {
         autoReconstruct: true,
         retainHistory: true
     },
-    bridgeMermaidRenderQueue: Promise.resolve(),
+    bridgeLanguageListenerRegistered: false,
+    bridgeMermaidRenderQueue: Promise.resolve(),
     semanticA11yLastSummaryKey: '',
     semanticA11yLastAnnouncementAt: 0,
     
@@ -95,10 +96,12 @@ window.pathApp = {
             this.ws = socket;
         }
 
-        this.ws.onopen = () => {
-            console.log('[PathApp] Connected to Bridge');
-            this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend'));
-        };
+        this.ws.onopen = () => {
+            console.log('[PathApp] Connected to Bridge');
+            this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend'));
+            this._ensureLanguageSyncListener();
+            this.syncLanguageWithBridge();
+        };
         this.ws.onmessage = (e) => {
             try {
                 const msg = this._parseBridgeIncomingMessage(e.data);
@@ -246,20 +249,24 @@ window.pathApp = {
             console.warn('[PathApp] Bridge socket error:', err);
         };
 
-        if (hasActiveSocket && this.ws.readyState === WebSocket.OPEN) {
-            console.log('[PathApp] Reusing existing Bridge socket');
-            this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend'));
-        }
-    },
-
-    setupWebSocket: function() {
-        if (!this._supportsSidecarBridge()) {
-            console.log('[PathApp] Sidecar bridge is disabled for this runtime; skipping setupWebSocket.');
-            return;
-        }
+        if (hasActiveSocket && this.ws.readyState === WebSocket.OPEN) {
+            console.log('[PathApp] Reusing existing Bridge socket');
+            this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend'));
+            this._ensureLanguageSyncListener();
+            this.syncLanguageWithBridge();
+        }
+    },
 
-        const bridge = (typeof window !== 'undefined') ? window.NoteConnectionRuntime : null;
-        const waitForRuntime = this._isTauriMode() && bridge && typeof bridge.whenReady === 'function';
+    setupWebSocket: function() {
+        if (!this._supportsSidecarBridge()) {
+            console.log('[PathApp] Sidecar bridge is disabled for this runtime; skipping setupWebSocket.');
+            return;
+        }
+
+        this._ensureLanguageSyncListener();
+
+        const bridge = (typeof window !== 'undefined') ? window.NoteConnectionRuntime : null;
+        const waitForRuntime = this._isTauriMode() && bridge && typeof bridge.whenReady === 'function';
 
         if (!waitForRuntime) {
             this._connectBridgeSocket();
@@ -344,14 +351,110 @@ window.pathApp = {
         return '';
     },
 
-    _getBridgeIdentifyPayload: function(clientTag) {
-        const payload = { client: clientTag };
-        const authToken = this._getBridgeAuthToken();
-        if (authToken) {
-            payload.token = authToken;
-        }
-        return payload;
-    },
+    _getBridgeIdentifyPayload: function(clientTag) {
+        const payload = { client: clientTag };
+        const authToken = this._getBridgeAuthToken();
+        if (authToken) {
+            payload.token = authToken;
+        }
+        return payload;
+    },
+
+    _normalizeLanguageCode: function(rawLanguage) {
+        const value = String(rawLanguage || '').trim().toLowerCase();
+        return value.startsWith('zh') ? 'zh' : 'en';
+    },
+
+    _getActiveLanguage: function() {
+        if (window.i18n && typeof window.i18n.currentLanguage === 'string') {
+            return this._normalizeLanguageCode(window.i18n.currentLanguage);
+        }
+        const languageSelect = document.getElementById('set-language');
+        if (languageSelect && typeof languageSelect.value === 'string') {
+            return this._normalizeLanguageCode(languageSelect.value);
+        }
+        const appConfig = this._getAppRuntimeConfig();
+        if (appConfig && typeof appConfig.language === 'string') {
+            return this._normalizeLanguageCode(appConfig.language);
+        }
+        return 'en';
+    },
+
+    _getAppRuntimeConfig: function() {
+        if (
+            typeof window !== 'undefined' &&
+            window.NoteConnectionRuntime &&
+            typeof window.NoteConnectionRuntime.getAppRuntimeConfig === 'function'
+        ) {
+            return window.NoteConnectionRuntime.getAppRuntimeConfig();
+        }
+        if (typeof window !== 'undefined' && window.__NC_APP_CONFIG && typeof window.__NC_APP_CONFIG === 'object') {
+            return window.__NC_APP_CONFIG;
+        }
+        return null;
+    },
+
+    _resolveMultiWindowOptions: function() {
+        const defaults = {
+            singleWindowMode: true,
+            hideTauriWhenPathmodeOpens: true,
+            restoreTauriWhenPathmodeExits: true,
+            confirmBeforeFullShutdownFromGodot: true,
+            syncLanguage: true
+        };
+        const appConfig = this._getAppRuntimeConfig();
+        if (!appConfig || !appConfig.multiWindow || typeof appConfig.multiWindow !== 'object') {
+            return defaults;
+        }
+        return {
+            singleWindowMode: typeof appConfig.multiWindow.singleWindowMode === 'boolean'
+                ? appConfig.multiWindow.singleWindowMode
+                : defaults.singleWindowMode,
+            hideTauriWhenPathmodeOpens: typeof appConfig.multiWindow.hideTauriWhenPathmodeOpens === 'boolean'
+                ? appConfig.multiWindow.hideTauriWhenPathmodeOpens
+                : defaults.hideTauriWhenPathmodeOpens,
+            restoreTauriWhenPathmodeExits: typeof appConfig.multiWindow.restoreTauriWhenPathmodeExits === 'boolean'
+                ? appConfig.multiWindow.restoreTauriWhenPathmodeExits
+                : defaults.restoreTauriWhenPathmodeExits,
+            confirmBeforeFullShutdownFromGodot: typeof appConfig.multiWindow.confirmBeforeFullShutdownFromGodot === 'boolean'
+                ? appConfig.multiWindow.confirmBeforeFullShutdownFromGodot
+                : defaults.confirmBeforeFullShutdownFromGodot,
+            syncLanguage: typeof appConfig.multiWindow.syncLanguage === 'boolean'
+                ? appConfig.multiWindow.syncLanguage
+                : defaults.syncLanguage
+        };
+    },
+
+    _buildLanguageConfigurePayload: function(rawLanguage) {
+        return {
+            language: this._normalizeLanguageCode(rawLanguage || this._getActiveLanguage())
+        };
+    },
+
+    syncLanguageWithBridge: function(rawLanguage) {
+        const options = this._resolveMultiWindowOptions();
+        if (!options.syncLanguage) {
+            return false;
+        }
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            return false;
+        }
+        const payload = this._buildLanguageConfigurePayload(rawLanguage);
+        return this._sendBridgeMessage('configure', payload);
+    },
+
+    _ensureLanguageSyncListener: function() {
+        if (this.bridgeLanguageListenerRegistered) {
+            return;
+        }
+        if (!window.i18n || typeof window.i18n.onLanguageChange !== 'function') {
+            return;
+        }
+        this.bridgeLanguageListenerRegistered = true;
+        window.i18n.onLanguageChange((lang) => {
+            this.syncLanguageWithBridge(lang);
+        });
+    },
 
     _getRuntimeBridgeAdapter: function() {
         if (
@@ -1543,40 +1646,60 @@ window.pathApp = {
 
         if (pathContainer) pathContainer.style.display = 'none';
         if (graphWrapper) graphWrapper.style.display = 'block';
-        if (sidebar) {
-            sidebar.style.transform = 'translateX(100%)';
-            sidebar.style.display = 'none';
-        }
+        if (sidebar) {
+            sidebar.style.transform = 'translateX(100%)';
+            sidebar.style.display = 'none';
+        }
+        const multiWindowOptions = this._resolveMultiWindowOptions();
         
         // Single-window toggle: hide Godot, show Tauri.
         // 单窗口切换：隐藏 Godot，显示 Tauri。
         if (window.__TAURI__ && window.__TAURI__.core && typeof window.__TAURI__.core.invoke === 'function') {
             // 1. Hide Godot window via PathBridge WebSocket.
-            if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+            if (
+                multiWindowOptions.singleWindowMode &&
+                this.ws &&
+                this.ws.readyState === WebSocket.OPEN
+            ) {
                 this.ws.send(JSON.stringify({
                     type: 'setWindowVisible',
                     payload: { visible: false }
                 }));
             }
             // 2. Restore Tauri window via Rust IPC.
-            window.__TAURI__.core.invoke('toggle_pathmode_window', { showGodot: false })
-                .then(() => console.log('[PathApp] Single-window toggle: Godot hidden, Tauri restored.'))
-                .catch((err) => console.warn('[PathApp] toggle_pathmode_window restore failed:', err));
+            if (multiWindowOptions.restoreTauriWhenPathmodeExits) {
+                window.__TAURI__.core.invoke('toggle_pathmode_window', { showGodot: false })
+                    .then(() => console.log('[PathApp] Single-window toggle: Godot hidden, Tauri restored.'))
+                    .catch((err) => console.warn('[PathApp] toggle_pathmode_window restore failed:', err));
+            }
         }
 
-        window.dispatchEvent(new Event('resize'));
-    },
+        window.dispatchEvent(new Event('resize'));
+    },
 
     applyRemoteConfigure: function(config) {
         if (!config || typeof config !== 'object') return;
 
-        const incomingTargetId = typeof config.targetId === 'string'
-            ? config.targetId
-            : (typeof config.target_id === 'string' ? config.target_id : null);
-
-        if (typeof config.mode === 'string') {
-            this.runtimeConfig.mode = config.mode === 'diffusion' ? 'diffusion' : 'domain';
-        }
+        const incomingTargetId = typeof config.targetId === 'string'
+            ? config.targetId
+            : (typeof config.target_id === 'string' ? config.target_id : null);
+
+        if (typeof config.language === 'string') {
+            const normalizedLanguage = this._normalizeLanguageCode(config.language);
+            if (
+                window.i18n &&
+                typeof window.i18n.setLanguage === 'function' &&
+                window.i18n.currentLanguage !== normalizedLanguage
+            ) {
+                void window.i18n.setLanguage(normalizedLanguage).catch((error) => {
+                    console.warn('[PathApp] Failed to apply language from remote configure payload:', error);
+                });
+            }
+        }
+
+        if (typeof config.mode === 'string') {
+            this.runtimeConfig.mode = config.mode === 'diffusion' ? 'diffusion' : 'domain';
+        }
         if (typeof config.strategy === 'string') {
             this.runtimeConfig.strategy = config.strategy === 'core' ? 'core' : 'foundational';
         }
@@ -3056,11 +3179,13 @@ window.pathApp = {
                 return;
             }
 
-            this.ws.onopen = () => {
-                console.log('[PathApp] Early WS Connected to Bridge');
-                this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend-early'));
-
-                const initialCentralId = this._getPreferredStandaloneCentralId(preferredCentralId);
+            this.ws.onopen = () => {
+                console.log('[PathApp] Early WS Connected to Bridge');
+                this._sendBridgeMessage('identify', this._getBridgeIdentifyPayload('frontend-early'));
+                this._ensureLanguageSyncListener();
+                this.syncLanguageWithBridge();
+
+                const initialCentralId = this._getPreferredStandaloneCentralId(preferredCentralId);
                 if (initialCentralId) {
                     this.centralNodeId = initialCentralId;
                     this.sendPathToBridgeStandalone(initialCentralId);

package/dist/src/frontend/runtime_bridge.js

@@ -98,6 +98,31 @@
         return value.replace(/\/+$/, '');
     }
 
+    function normalizeLanguageCode(rawValue) {
+        const value = String(rawValue || '').trim().toLowerCase();
+        return value.startsWith('zh') ? 'zh' : 'en';
+    }
+
+    function normalizeBoolean(value, fallback) {
+        if (typeof value === 'boolean') {
+            return value;
+        }
+        return fallback;
+    }
+
+    function getDefaultAppRuntimeConfig() {
+        return {
+            language: 'en',
+            multiWindow: {
+                singleWindowMode: true,
+                hideTauriWhenPathmodeOpens: true,
+                restoreTauriWhenPathmodeExits: true,
+                confirmBeforeFullShutdownFromGodot: true,
+                syncLanguage: true
+            }
+        };
+    }
+
     const state = {
         baseUrl: normalizeBaseUrl(window.__NC_SIDECAR_RUNTIME && window.__NC_SIDECAR_RUNTIME.baseUrl),
         bridgeWsUrl: normalizeBridgeWsUrl(window.__NC_SIDECAR_RUNTIME && window.__NC_SIDECAR_RUNTIME.bridgeWsUrl),
@@ -106,6 +131,34 @@
         port: Number((window.__NC_SIDECAR_RUNTIME && window.__NC_SIDECAR_RUNTIME.port) || 3000),
         bridgePort: Number((window.__NC_SIDECAR_RUNTIME && window.__NC_SIDECAR_RUNTIME.bridgePort) || 9876)
     };
+    const appState = getDefaultAppRuntimeConfig();
+    if (window.__NC_APP_CONFIG && typeof window.__NC_APP_CONFIG === 'object') {
+        const bootAppConfig = window.__NC_APP_CONFIG;
+        appState.language = normalizeLanguageCode(bootAppConfig.language || appState.language);
+        if (bootAppConfig.multiWindow && typeof bootAppConfig.multiWindow === 'object') {
+            const bootMultiWindow = bootAppConfig.multiWindow;
+            appState.multiWindow.singleWindowMode = normalizeBoolean(
+                bootMultiWindow.singleWindowMode,
+                appState.multiWindow.singleWindowMode
+            );
+            appState.multiWindow.hideTauriWhenPathmodeOpens = normalizeBoolean(
+                bootMultiWindow.hideTauriWhenPathmodeOpens,
+                appState.multiWindow.hideTauriWhenPathmodeOpens
+            );
+            appState.multiWindow.restoreTauriWhenPathmodeExits = normalizeBoolean(
+                bootMultiWindow.restoreTauriWhenPathmodeExits,
+                appState.multiWindow.restoreTauriWhenPathmodeExits
+            );
+            appState.multiWindow.confirmBeforeFullShutdownFromGodot = normalizeBoolean(
+                bootMultiWindow.confirmBeforeFullShutdownFromGodot,
+                appState.multiWindow.confirmBeforeFullShutdownFromGodot
+            );
+            appState.multiWindow.syncLanguage = normalizeBoolean(
+                bootMultiWindow.syncLanguage,
+                appState.multiWindow.syncLanguage
+            );
+        }
+    }
 
     let runtimeReadyResolved = false;
     let runtimeHydrationPromise = null;
@@ -126,6 +179,20 @@
         return window.__NC_SIDECAR_RUNTIME;
     }
 
+    function syncGlobalAppState() {
+        window.__NC_APP_CONFIG = {
+            language: appState.language,
+            multiWindow: {
+                singleWindowMode: appState.multiWindow.singleWindowMode,
+                hideTauriWhenPathmodeOpens: appState.multiWindow.hideTauriWhenPathmodeOpens,
+                restoreTauriWhenPathmodeExits: appState.multiWindow.restoreTauriWhenPathmodeExits,
+                confirmBeforeFullShutdownFromGodot: appState.multiWindow.confirmBeforeFullShutdownFromGodot,
+                syncLanguage: appState.multiWindow.syncLanguage
+            }
+        };
+        return window.__NC_APP_CONFIG;
+    }
+
     function finalizeRuntimeReady() {
         if (runtimeReadyResolved) {
             return runtimeReadyPromise;
@@ -170,6 +237,44 @@
         return syncGlobalState();
     }
 
+    function setAppRuntimeConfig(nextConfig) {
+        const merged = getDefaultAppRuntimeConfig();
+        if (nextConfig && typeof nextConfig === 'object') {
+            merged.language = normalizeLanguageCode(nextConfig.language || merged.language);
+            const nextMultiWindow = nextConfig.multiWindow && typeof nextConfig.multiWindow === 'object'
+                ? nextConfig.multiWindow
+                : {};
+            merged.multiWindow.singleWindowMode = normalizeBoolean(
+                nextMultiWindow.singleWindowMode,
+                merged.multiWindow.singleWindowMode
+            );
+            merged.multiWindow.hideTauriWhenPathmodeOpens = normalizeBoolean(
+                nextMultiWindow.hideTauriWhenPathmodeOpens,
+                merged.multiWindow.hideTauriWhenPathmodeOpens
+            );
+            merged.multiWindow.restoreTauriWhenPathmodeExits = normalizeBoolean(
+                nextMultiWindow.restoreTauriWhenPathmodeExits,
+                merged.multiWindow.restoreTauriWhenPathmodeExits
+            );
+            merged.multiWindow.confirmBeforeFullShutdownFromGodot = normalizeBoolean(
+                nextMultiWindow.confirmBeforeFullShutdownFromGodot,
+                merged.multiWindow.confirmBeforeFullShutdownFromGodot
+            );
+            merged.multiWindow.syncLanguage = normalizeBoolean(
+                nextMultiWindow.syncLanguage,
+                merged.multiWindow.syncLanguage
+            );
+        }
+
+        appState.language = merged.language;
+        appState.multiWindow = merged.multiWindow;
+        return syncGlobalAppState();
+    }
+
+    function getAppRuntimeConfig() {
+        return syncGlobalAppState();
+    }
+
     function buildUrl(resourcePath, query) {
         const normalizedPath = String(resourcePath || '').replace(/^\/+/, '');
         const url = new URL(normalizedPath, `${state.baseUrl}/`);
@@ -292,6 +397,11 @@
                     };
                 }
 
+            } catch (error) {
+                console.warn('[RuntimeBridge] Failed to hydrate runtime capabilities from Tauri. Using runtime bridge defaults.', error);
+            }
+
+            try {
                 const runtimeCaps = window.__NC_RUNTIME_CAPS || {};
                 if (runtimeCaps.supports_sidecar) {
                     const runtimeConfig = await invokeTauriWithTimeout(
@@ -305,11 +415,23 @@
                 console.warn('[RuntimeBridge] Failed to hydrate sidecar runtime config from Tauri. Using runtime bridge defaults.', error);
             }
 
+            try {
+                const appConfig = await invokeTauriWithTimeout(
+                    () => invoke('get_app_runtime_config'),
+                    'get_app_runtime_config',
+                    TAURI_RUNTIME_HYDRATE_TIMEOUT_MS
+                );
+                setAppRuntimeConfig(appConfig);
+            } catch (error) {
+                console.warn('[RuntimeBridge] Failed to hydrate app runtime config from Tauri. Using runtime defaults.', error);
+            }
+
             if (typeof window.dispatchEvent === 'function' && typeof window.CustomEvent === 'function') {
                 window.dispatchEvent(new CustomEvent('noteconnection:runtime-ready', {
                     detail: {
                         runtime: syncGlobalState(),
-                        caps: window.__NC_RUNTIME_CAPS || null
+                        caps: window.__NC_RUNTIME_CAPS || null,
+                        appConfig: syncGlobalAppState()
                     }
                 }));
             }
@@ -330,6 +452,8 @@
     window.NoteConnectionRuntime = {
         setRuntimeConfig,
         getRuntimeConfig,
+        setAppRuntimeConfig,
+        getAppRuntimeConfig,
         buildUrl,
         buildFetchOptions,
         createAuthHeaders,
@@ -349,6 +473,7 @@
     };
 
     syncGlobalState();
+    syncGlobalAppState();
 
     if (document.readyState === 'loading') {
         document.addEventListener('DOMContentLoaded', () => {

package/dist/src/sbom.attestation.policy.contract.test.js

@@ -41,6 +41,15 @@ const child_process_1 = require("child_process");
 function readJson(filePath) {
     return JSON.parse(fs.readFileSync(filePath, 'utf8'));
 }
+function buildUnsignedGeneratorEnv() {
+    return {
+        ...process.env,
+        NOTE_CONNECTION_SBOM_SIGNING_PRIVATE_KEY_PEM: '',
+        NOTE_CONNECTION_SBOM_SIGNING_PRIVATE_KEY_FILE: '',
+        NOTE_CONNECTION_SBOM_ATTESTATION_ENABLE_TRANSPARENCY_LOG: '0',
+        NOTE_CONNECTION_SBOM_ATTESTATION_TRANSPARENCY_LOG_PATH: '',
+    };
+}
 describe('sbom attestation policy contract', () => {
     const repoRoot = path.resolve(__dirname, '..');
     const packageJsonPath = path.join(repoRoot, 'package.json');
@@ -48,6 +57,33 @@ describe('sbom attestation policy contract', () => {
     const verifierPath = path.join(repoRoot, 'scripts', 'verify-sbom-attestation.js');
     const migrationWorkflowPath = path.join(repoRoot, '.github', 'workflows', 'migration-gates.yml');
     const npmPublishWorkflowPath = path.join(repoRoot, '.github', 'workflows', 'npm-publish.yml');
+    let noteConnectionEnvSnapshot;
+    beforeEach(() => {
+        // Keep contract tests hermetic even when CI injects NOTE_CONNECTION_* policy env vars.
+        noteConnectionEnvSnapshot = {};
+        for (const key of Object.keys(process.env)) {
+            if (!key.startsWith('NOTE_CONNECTION_')) {
+                continue;
+            }
+            noteConnectionEnvSnapshot[key] = process.env[key];
+            delete process.env[key];
+        }
+    });
+    afterEach(() => {
+        for (const key of Object.keys(process.env)) {
+            if (key.startsWith('NOTE_CONNECTION_')) {
+                delete process.env[key];
+            }
+        }
+        for (const [key, value] of Object.entries(noteConnectionEnvSnapshot || {})) {
+            if (typeof value === 'undefined') {
+                delete process.env[key];
+            }
+            else {
+                process.env[key] = value;
+            }
+        }
+    });
     test('exports attestation generation/verification scripts and gate wiring', () => {
         const packageJson = readJson(packageJsonPath);
         const scripts = packageJson.scripts || {};
@@ -124,6 +160,7 @@ describe('sbom attestation policy contract', () => {
         expect(npmPublishWorkflow).toContain('NOTE_CONNECTION_SBOM_ATTESTATION_VERIFY_TRANSPARENCY_LOG_INCLUSION');
         expect(npmPublishWorkflow).toContain('NOTE_CONNECTION_SBOM_ATTESTATION_TRANSPARENCY_EXPECT_SCHEMA');
         expect(npmPublishWorkflow).toContain('NOTE_CONNECTION_SBOM_ATTESTATION_TRANSPARENCY_EXPECT_VERSION');
+        expect(npmPublishWorkflow).toContain('npx jest --runInBand');
     });
     test('attestation generator and verifier work in unsigned strict policy mode', () => {
         const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'noteconnection-sbom-attestation-'));
@@ -142,6 +179,7 @@ describe('sbom attestation policy contract', () => {
             cwd: repoRoot,
             encoding: 'utf8',
             stdio: 'pipe',
+            env: buildUnsignedGeneratorEnv(),
         });
         expect(generateResult.status).toBe(0);
         const verifyResult = (0, child_process_1.spawnSync)(process.execPath, [
@@ -183,6 +221,7 @@ describe('sbom attestation policy contract', () => {
             cwd: repoRoot,
             encoding: 'utf8',
             stdio: 'pipe',
+            env: buildUnsignedGeneratorEnv(),
         });
         expect(generateResult.status).toBe(0);
         const verifyResult = (0, child_process_1.spawnSync)(process.execPath, [
@@ -232,6 +271,7 @@ describe('sbom attestation policy contract', () => {
             cwd: repoRoot,
             encoding: 'utf8',
             stdio: 'pipe',
+            env: buildUnsignedGeneratorEnv(),
         });
         expect(generateResult.status).toBe(0);
         const verifyResult = (0, child_process_1.spawnSync)(process.execPath, [
@@ -275,6 +315,7 @@ describe('sbom attestation policy contract', () => {
             cwd: repoRoot,
             encoding: 'utf8',
             stdio: 'pipe',
+            env: buildUnsignedGeneratorEnv(),
         });
         expect(generateResult.status).toBe(0);
         const verifyResult = (0, child_process_1.spawnSync)(process.execPath, [

package/dist/src/server.migration.test.js

@@ -243,6 +243,7 @@ describe('server migration settings routes', () => {
     let buildGraphMock;
     let renderMathPngMock;
     let renderMermaidPngMock;
+    let copyPngToClipboardMock;
     let originalArgv;
     beforeAll(async () => {
         temp = new TempDir('noteconnection-server');
@@ -283,6 +284,7 @@ describe('server migration settings routes', () => {
             width: 640,
             height: 360
         });
+        copyPngToClipboardMock = jest.fn().mockResolvedValue(undefined);
         jest.resetModules();
         originalArgv = [...process.argv];
         process.argv = process.argv.slice(0, 2);
@@ -296,6 +298,9 @@ describe('server migration settings routes', () => {
             renderMathPng: renderMathPngMock,
             renderMermaidPng: renderMermaidPngMock
         }));
+        jest.doMock('./native_clipboard', () => ({
+            copyPngToClipboard: copyPngToClipboardMock
+        }));
         const serverModule = require('./server');
         server = await serverModule.startServer({ port });
         buildGraphMock.mockClear();
@@ -319,6 +324,7 @@ describe('server migration settings routes', () => {
         jest.dontMock('./index');
         jest.dontMock('./core/PathBridge');
         jest.dontMock('./reader_renderer');
+        jest.dontMock('./native_clipboard');
         process.argv = originalArgv;
         temp.cleanup();
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noteconnection",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "Hierarchical Knowledge Graph Visualization System",
   "main": "dist/src/server.js",
   "bin": {
@@ -10,12 +10,12 @@
     "start": "node scripts/start-server.js",
     "start:prod": "node dist/src/server.js",
     "tauri": "tauri",
-    "tauri:dev": "npm run build && npm run ensure:sidecar:dev && npm run cleanup:tauri:sidecars && npx kill-port 3000 && npx tauri dev",
-    "tauri:dev:mini": "npm run build:mini && npm run ensure:sidecar:dev && npm run cleanup:tauri:sidecars && npx kill-port 3000 && npx tauri dev",
+    "tauri:dev": "npm run build && npm run ensure:sidecar:dev && npm run cleanup:tauri:sidecars && npx kill-port 3000 && npx tauri dev",
+    "tauri:dev:mini": "npm run build:mini && npm run ensure:sidecar:dev && npm run cleanup:tauri:sidecars && npx kill-port 3000 && npx tauri dev",
     "tauri:dev:gpu": "set NOTE_CONNECTION_GPU=1&& npm run tauri:dev",
     "tauri:dev:mini:gpu": "set NOTE_CONNECTION_GPU=1&& npm run tauri:dev:mini",
-    "tauri:build": "npm run build && npm run build:sidecar && npm run cleanup:tauri:sidecars && node scripts/run-tauri-build.js",
-    "tauri:build:mini": "npm run build:mini && npm run build:sidecar && npm run cleanup:tauri:sidecars && node scripts/run-tauri-build.js",
+    "tauri:build": "npm run build && npm run build:sidecar && npm run cleanup:tauri:sidecars && node scripts/run-tauri-build.js",
+    "tauri:build:mini": "npm run build:mini && npm run build:sidecar && npm run cleanup:tauri:sidecars && node scripts/run-tauri-build.js",
     "verify:android:env": "node scripts/verify-tauri-android-prereqs.js",
     "verify:capacitor:device": "node scripts/verify-capacitor-device-acceptance.js",
     "capture:capacitor:evidence": "node scripts/capture-capacitor-device-evidence.js",
@@ -33,9 +33,9 @@
     "build:mini": "node scripts/copy-reader-runtime-assets.js && tsc && node scripts/bundle_path_core.js && node scripts/copy-assets.js --mini && node scripts/sync-wasm-parity-artifact.js",
     "prepare:godot:bin": "node scripts/ensure-godot-sidecar.js",
     "verify:tauri:bin": "node scripts/validate-tauri-sidecars.js",
-    "build:sidecar": "node scripts/copy-reader-runtime-assets.js && tsc && node scripts/build-sidecar.js && npm run prepare:godot:bin && npm run verify:tauri:bin",
-    "build:sidecar:all": "node scripts/copy-reader-runtime-assets.js && tsc && node scripts/build-sidecar.js --all && npm run prepare:godot:bin && node scripts/validate-tauri-sidecars.js --all",
-    "ensure:sidecar:dev": "node scripts/ensure-sidecar-ready.js",
+    "build:sidecar": "node scripts/copy-reader-runtime-assets.js && tsc && node scripts/build-sidecar.js && npm run prepare:godot:bin && npm run verify:tauri:bin",
+    "build:sidecar:all": "node scripts/copy-reader-runtime-assets.js && tsc && node scripts/build-sidecar.js --all && npm run prepare:godot:bin && node scripts/validate-tauri-sidecars.js --all",
+    "ensure:sidecar:dev": "node scripts/ensure-sidecar-ready.js",
     "pathmode:dev": "node -r ts-node/register src/server.ts --pathmode",
     "pathmode:test": "jest --testPathPatterns=Path",
     "smoke:sidecar:relaunch": "node scripts/smoke-sidecar-relaunch.js",
@@ -51,28 +51,31 @@
     "benchmark:wasm:parity:history:release": "node scripts/benchmark-wasm-parity.js --require-wasm-adapter 1 --history-window 90 --minimum-history-samples 5 --history-strict-samples 15 --history-maturity-fail-tier enforced --history-performance-fail-mode always --history-max-records 3000 --history-max-age-days 180 --max-candidate-to-history-graph-p95-ratio 1.25 --max-candidate-to-history-layout-p95-ratio 1.25 --max-candidate-to-history-graph-p99-ratio 1.25 --max-candidate-to-history-layout-p99-ratio 1.25",
     "calibrate:graphmetrics:tiering": "node scripts/calibrate-graphmetrics-tiering.js",
     "test:wasm:parity:gates": "npm run verify:wasm:parity:strict && npm run benchmark:wasm:parity:strict:perf",
-    "verify:detox:pipeline": "node scripts/verify-detox-pipeline.js",
-    "verify:fixrisk:issues": "node scripts/verify-fixrisk-issues.js",
-    "verify:fixrisk:issues:strict": "node scripts/verify-fixrisk-issues.js --strict-pending",
-    "verify:fixrisk:issues:strict:evidence": "node scripts/verify-fixrisk-issues.js --strict-pending --require-evidence-root",
-    "verify:pathbridge:strict": "node scripts/verify-pathbridge-strict-schema.js",
-    "generate:sbom": "node scripts/generate-sbom.js",
-    "generate:sbom:attestation": "node scripts/generate-sbom-attestation.js",
-    "verify:sbom": "node scripts/verify-sbom-policy.js",
-    "verify:sbom:attestation": "node scripts/verify-sbom-attestation.js",
-    "test:e2e:detox": "node scripts/run-detox-e2e.js",
-    "test:e2e:detox:run": "node scripts/run-detox-e2e.js --run",
-    "verify:privacy:manifest": "node scripts/verify-privacy-manifest.js",
-    "verify:sidecar:signatures": "node scripts/verify-sidecar-signatures.js",
-    "ops:fixrisk:close": "node scripts/run-fixrisk-ops-closure.js",
-    "ops:fixrisk:close:dry": "node scripts/run-fixrisk-ops-closure.js --dry-run",
-    "test:mobile:contracts": "jest src/mobile.pipeline.test.ts src/runtime.capabilities.test.ts src/source_manager.loadflow.test.ts src/capacitor.runtime.contract.test.ts src/android.pathmode.contract.test.ts src/android.pathmode.smoke.contract.test.ts src/graph.accessibility.contract.test.ts src/detox.pipeline.contract.test.ts src/privacy.manifest.contract.test.ts --runInBand && npm run verify:detox:pipeline && npm run verify:privacy:manifest",
-    "test:migration": "jest src/core/Graph.test.ts src/core/PathEngine.test.ts src/core/TreeLayout.test.ts src/backend/algorithms/CycleDetection.test.ts src/backend/algorithms/TopologicalSort.test.ts src/backend/algorithms/WasmParityHistory.test.ts src/utils/RuntimePaths.test.ts src/server.migration.test.ts src/pkg.sidecar.contract.test.ts src/pkg.snapshot.safety.contract.test.ts src/mobile.pipeline.test.ts src/capacitor.device.utils.contract.test.ts src/capacitor.evidence.contract.test.ts src/runtime.capabilities.test.ts src/runtime.heap.policy.contract.test.ts src/runtime.spool.policy.contract.test.ts src/runtime.transport.adapter.contract.test.ts src/storage.provider.contract.test.ts src/storage.provider.capacitor.content.contract.test.ts src/storage.provider.capacitor.worker.contract.test.ts src/wasm.parity.runtime.contract.test.ts src/wasm.parity.runtime.functional.test.ts src/wasm.parity.output.equivalence.contract.test.ts src/wasm.parity.benchmark.contract.test.ts src/wasm.parity.benchmark.guards.contract.test.ts src/wasm.parity.history.gate.contract.test.ts src/wasm.parity.artifact.probe.contract.test.ts src/wasm.parity.artifact.provisioning.contract.test.ts src/source_manager.loadflow.test.ts src/capacitor.runtime.contract.test.ts src/welcome.loadflow.test.ts src/pathmode.history.contract.test.ts src/android.pathmode.contract.test.ts src/android.pathmode.smoke.contract.test.ts src/pathbridge.handshake.contract.test.ts src/pathbridge.strict.policy.contract.test.ts src/graph.accessibility.contract.test.ts src/detox.pipeline.contract.test.ts src/privacy.manifest.contract.test.ts src/server.port.fallback.contract.test.ts src/sidecar.signature.contract.test.ts src/sbom.policy.contract.test.ts src/sbom.attestation.policy.contract.test.ts src/sidecar.relaunch.contract.test.ts src/tauri.test.runner.contract.test.ts --runInBand",
-    "test:tauri": "node scripts/run-tauri-tests.js",
-    "test:gates": "npm run test:migration && npm run test:wasm:parity:gates && npm run test:tauri && npm run verify:android:env && npm run verify:detox:pipeline && npm run verify:privacy:manifest && npm run verify:pathbridge:strict && npm run verify:sbom -- --contract-only && npm run verify:sbom:attestation -- --contract-only && npm run verify:sidecar:signatures -- --contract-only",
-    "prepublishOnly": "npm run build:mini",
+    "verify:detox:pipeline": "node scripts/verify-detox-pipeline.js",
+    "verify:fixrisk:issues": "node scripts/verify-fixrisk-issues.js",
+    "verify:fixrisk:issues:strict": "node scripts/verify-fixrisk-issues.js --strict-pending",
+    "verify:fixrisk:issues:strict:evidence": "node scripts/verify-fixrisk-issues.js --strict-pending --require-evidence-root",
+    "verify:pathbridge:strict": "node scripts/verify-pathbridge-strict-schema.js",
+    "generate:sbom": "node scripts/generate-sbom.js",
+    "generate:sbom:attestation": "node scripts/generate-sbom-attestation.js",
+    "verify:sbom": "node scripts/verify-sbom-policy.js",
+    "verify:sbom:attestation": "node scripts/verify-sbom-attestation.js",
+    "test:e2e:detox": "node scripts/run-detox-e2e.js",
+    "test:e2e:detox:run": "node scripts/run-detox-e2e.js --run",
+    "verify:privacy:manifest": "node scripts/verify-privacy-manifest.js",
+    "verify:sidecar:signatures": "node scripts/verify-sidecar-signatures.js",
+    "ops:fixrisk:close": "node scripts/run-fixrisk-ops-closure.js",
+    "ops:fixrisk:close:dry": "node scripts/run-fixrisk-ops-closure.js --dry-run",
+    "test:mobile:contracts": "jest src/mobile.pipeline.test.ts src/runtime.capabilities.test.ts src/source_manager.loadflow.test.ts src/capacitor.runtime.contract.test.ts src/android.pathmode.contract.test.ts src/android.pathmode.smoke.contract.test.ts src/graph.accessibility.contract.test.ts src/detox.pipeline.contract.test.ts src/privacy.manifest.contract.test.ts --runInBand && npm run verify:detox:pipeline && npm run verify:privacy:manifest",
+    "test:migration": "jest src/core/Graph.test.ts src/core/PathEngine.test.ts src/core/TreeLayout.test.ts src/backend/algorithms/CycleDetection.test.ts src/backend/algorithms/TopologicalSort.test.ts src/backend/algorithms/WasmParityHistory.test.ts src/utils/RuntimePaths.test.ts src/server.migration.test.ts src/pkg.sidecar.contract.test.ts src/pkg.snapshot.safety.contract.test.ts src/mobile.pipeline.test.ts src/capacitor.device.utils.contract.test.ts src/capacitor.evidence.contract.test.ts src/runtime.capabilities.test.ts src/runtime.heap.policy.contract.test.ts src/runtime.spool.policy.contract.test.ts src/runtime.transport.adapter.contract.test.ts src/storage.provider.contract.test.ts src/storage.provider.capacitor.content.contract.test.ts src/storage.provider.capacitor.worker.contract.test.ts src/wasm.parity.runtime.contract.test.ts src/wasm.parity.runtime.functional.test.ts src/wasm.parity.output.equivalence.contract.test.ts src/wasm.parity.benchmark.contract.test.ts src/wasm.parity.benchmark.guards.contract.test.ts src/wasm.parity.history.gate.contract.test.ts src/wasm.parity.artifact.probe.contract.test.ts src/wasm.parity.artifact.provisioning.contract.test.ts src/source_manager.loadflow.test.ts src/capacitor.runtime.contract.test.ts src/welcome.loadflow.test.ts src/pathmode.history.contract.test.ts src/android.pathmode.contract.test.ts src/android.pathmode.smoke.contract.test.ts src/pathbridge.handshake.contract.test.ts src/pathbridge.strict.policy.contract.test.ts src/graph.accessibility.contract.test.ts src/detox.pipeline.contract.test.ts src/privacy.manifest.contract.test.ts src/server.port.fallback.contract.test.ts src/sidecar.signature.contract.test.ts src/sbom.policy.contract.test.ts src/sbom.attestation.policy.contract.test.ts src/sidecar.relaunch.contract.test.ts src/tauri.test.runner.contract.test.ts --runInBand",
+    "test:tauri": "node scripts/run-tauri-tests.js",
+    "test:gates": "npm run test:migration && npm run test:wasm:parity:gates && npm run test:tauri && npm run verify:android:env && npm run verify:detox:pipeline && npm run verify:privacy:manifest && npm run verify:pathbridge:strict && npm run verify:sbom -- --contract-only && npm run verify:sbom:attestation -- --contract-only && npm run verify:sidecar:signatures -- --contract-only",
+    "prepublishOnly": "npm run build:mini",
     "test": "jest",
-    "cleanup:tauri:sidecars": "node scripts/cleanup-tauri-sidecars.js"
+    "cleanup:tauri:sidecars": "node scripts/cleanup-tauri-sidecars.js",
+    "docs:diataxis:check": "node scripts/verify-diataxis-map.js",
+    "docs:site:build": "node scripts/run-mkdocs.js build --config-file mkdocs.yml",
+    "docs:site:serve": "node scripts/run-mkdocs.js serve --config-file mkdocs.yml"
   },
   "pkg": {
     "scripts": [
@@ -84,12 +87,12 @@
       "graph_data.json"
     ]
   },
-  "files": [
-    "dist/src",
-    "dist/amdgpu",
-    "LICENSE",
-    "README.md"
-  ],
+  "files": [
+    "dist/src",
+    "dist/amdgpu",
+    "LICENSE",
+    "README.md"
+  ],
   "keywords": [
     "knowledge-graph",
     "visualization",