agent-Specialization/.playwright-mcp/page-2026-04-27T10-09-33-096Z.yml
JOJO e2bbd767f7 feat(host-security+ui): unify host execution/approval behavior, runtime notices, and approval overlay UX
This commit consolidates a large set of host-mode security and UX fixes across backend and frontend.

Security / execution model:
- Make permission/execution mode switches apply immediately (no deferred pending-only behavior).
- Keep runtime mode change notices durable and visible via user-message guidance path.
- Add explicit runtime message source taxonomy support and persistence:
  user / presend / guidance / notify / sub_agent / background_command.
- Ensure guidance/notify insertion is batched per tool-cycle so mid-run inserts are committed together.
- Separate notify from guidance semantics for mode-change notices.
- Add direct-mode auto-fallback handling visibility on frontend.

Approval and command gating:
- Align run_command approval pre-check logic with docker behavior for approval/auto_approval modes in host execution paths.
- Keep approval retry flow and final-result semantics intact when permission errors trigger approval.
- Externalize forbidden command keyword list into JSON config:
  config/forbidden_commands.json.
- Update forbidden command rejection message to user-facing wording:
  用户不允许执行包含“... ”的指令.

Prompt/runtime guidance:
- Refine execution-mode runtime rule text to avoid endless workaround loops:
  one safe alternative first, then request switching to direct mode when truly required.

Chat rendering / message UX:
- Prevent injected guidance/notify user-messages from incorrectly triggering assistant work header/timer chain.
- Restore correct visibility after history reload while preserving runtime-source behavior.
- Update user-header icon/label rendering by message source:
  - guidance -> 引导 + navigation icon
  - notify/sub_agent/background_command -> 通知 + bell icon
  - user/presend -> keep normal user header.
- Add new icons: static/icons/navigation.svg, static/icons/bell.svg.

Approval panel UX:
- Convert desktop approval panel from layout-compress sidebar to overlay + blur sheet.
- Fix panel transition behavior (remove unintended vertical motion; use dedicated desktop overlay transition).
- Improve approval result display:
  - decision and reason split lines,
  - green/red status styling,
  - multiline reason rendering,
  - auto-collapse delay adjusted to 3s.

Execution mode TTL feedback:
- When direct mode auto-expires to sandbox, frontend menu state is updated from status snapshot.
- Show non-auto-dismiss warning toast to explicitly notify auto-fallback.

Misc consistency updates:
- Execution mode label text cleanup in composer.
- Runtime notice wording normalization (权限模式修改为..., 执行环境修改为...).

Build/test notes:
- Frontend rebuilt after UI changes.
- Smoke tests passed for server refactor path.
2026-05-12 19:16:38 +08:00

33 lines
1.2 KiB
YAML

- generic [ref=e5]:
- banner [ref=e6]:
- heading "Vue Dynamic Dashboard" [level=1] [ref=e7]
- paragraph [ref=e8]: "Last updated: 2026/4/27 18:09:30"
- generic [ref=e9]:
- button "Refresh Data" [ref=e10] [cursor=pointer]
- button "Pause Real-time" [ref=e11] [cursor=pointer]
- button "Add Item" [ref=e12] [cursor=pointer]
- generic [ref=e13]:
- button "Dashboard" [ref=e14] [cursor=pointer]
- button "Items" [ref=e15] [cursor=pointer]
- button "Settings" [ref=e16] [cursor=pointer]
- generic [ref=e17]:
- generic [ref=e18]:
- generic [ref=e19]:
- generic [ref=e20]: "6774"
- generic [ref=e21]: Total Users
- generic [ref=e22]:
- generic [ref=e23]: "3523"
- generic [ref=e24]: Active Sessions
- generic [ref=e25]:
- generic [ref=e26]: "8038"
- generic [ref=e27]: CPU Usage
- generic [ref=e28]:
- generic [ref=e29]: "9528"
- generic [ref=e30]: Memory
- generic [ref=e31]:
- generic [ref=e32]: "8199"
- generic [ref=e33]: Network
- generic [ref=e34]:
- generic [ref=e35]: "4695"
- generic [ref=e36]: Storage
- heading "Live Activity" [level=3] [ref=e38]