agent-Specialization/.playwright-mcp/page-2026-04-27T08-24-18-790Z.yml
JOJO e2bbd767f7 feat(host-security+ui): unify host execution/approval behavior, runtime notices, and approval overlay UX
This commit consolidates a large set of host-mode security and UX fixes across backend and frontend.

Security / execution model:
- Make permission/execution mode switches apply immediately (no deferred pending-only behavior).
- Keep runtime mode change notices durable and visible via user-message guidance path.
- Add explicit runtime message source taxonomy support and persistence:
  user / presend / guidance / notify / sub_agent / background_command.
- Ensure guidance/notify insertion is batched per tool-cycle so mid-run inserts are committed together.
- Separate notify from guidance semantics for mode-change notices.
- Add direct-mode auto-fallback handling visibility on frontend.

Approval and command gating:
- Align run_command approval pre-check logic with docker behavior for approval/auto_approval modes in host execution paths.
- Keep approval retry flow and final-result semantics intact when permission errors trigger approval.
- Externalize forbidden command keyword list into JSON config:
  config/forbidden_commands.json.
- Update forbidden command rejection message to user-facing wording:
  用户不允许执行包含“... ”的指令.

Prompt/runtime guidance:
- Refine execution-mode runtime rule text to avoid endless workaround loops:
  one safe alternative first, then request switching to direct mode when truly required.

Chat rendering / message UX:
- Prevent injected guidance/notify user-messages from incorrectly triggering assistant work header/timer chain.
- Restore correct visibility after history reload while preserving runtime-source behavior.
- Update user-header icon/label rendering by message source:
  - guidance -> 引导 + navigation icon
  - notify/sub_agent/background_command -> 通知 + bell icon
  - user/presend -> keep normal user header.
- Add new icons: static/icons/navigation.svg, static/icons/bell.svg.

Approval panel UX:
- Convert desktop approval panel from layout-compress sidebar to overlay + blur sheet.
- Fix panel transition behavior (remove unintended vertical motion; use dedicated desktop overlay transition).
- Improve approval result display:
  - decision and reason split lines,
  - green/red status styling,
  - multiline reason rendering,
  - auto-collapse delay adjusted to 3s.

Execution mode TTL feedback:
- When direct mode auto-expires to sandbox, frontend menu state is updated from status snapshot.
- Show non-auto-dismiss warning toast to explicitly notify auto-fallback.

Misc consistency updates:
- Execution mode label text cleanup in composer.
- Runtime notice wording normalization (权限模式修改为..., 执行环境修改为...).

Build/test notes:
- Frontend rebuilt after UI changes.
- Smoke tests passed for server refactor path.
2026-05-12 19:16:38 +08:00

69 lines
2.6 KiB
YAML

- generic [active] [ref=e1]:
- generic [ref=e3]:
- generic [ref=e4]:
- generic [ref=e5]:
- img "logo" [ref=e6]
- generic [ref=e7]: 站点名称
- generic [ref=e8]:
- generic [ref=e10] [cursor=pointer]:
- img [ref=e11]
- generic [ref=e13]: ChatGPT
- generic [ref=e15] [cursor=pointer]:
- img [ref=e16]
- generic [ref=e18]: Gemini车队
- generic [ref=e20] [cursor=pointer]:
- img [ref=e21]
- generic [ref=e23]: Claude
- generic [ref=e25] [cursor=pointer]:
- img [ref=e26]
- generic [ref=e28]: Grok
- generic [ref=e30] [cursor=pointer]:
- img [ref=e31]
- generic [ref=e33]: Sora车队
- generic [ref=e35] [cursor=pointer]:
- img [ref=e36]
- generic [ref=e38]: Claude code/Codex
- generic [ref=e40] [cursor=pointer]:
- img [ref=e41]
- generic [ref=e43]: 用户中心
- generic [ref=e44]:
- button "立即购买" [ref=e45] [cursor=pointer]
- generic [ref=e46] [cursor=pointer]:
- img [ref=e47]
- generic [ref=e49]: English
- generic [ref=e51]:
- generic [ref=e52]:
- generic [ref=e53]:
- generic [ref=e54] [cursor=pointer]: 站内购买
- generic [ref=e55] [cursor=pointer]: 兑换码兑换
- generic [ref=e57] [cursor=pointer]: 系统公告
- generic [ref=e58]:
- paragraph [ref=e60]:
- generic [ref=e61]: 使用量 暂未订阅
- button "立即登录" [ref=e63] [cursor=pointer]
- generic [ref=e66]:
- generic [ref=e67]:
- generic [ref=e68]:
- generic [ref=e69]:
- img [ref=e71] [cursor=pointer]
- textbox "搜索车队" [ref=e73]
- button [ref=e74] [cursor=pointer]:
- img [ref=e76]
- generic [ref=e78]:
- generic [ref=e79] [cursor=pointer]: ChatGPT
- generic [ref=e80] [cursor=pointer]: Claude
- generic [ref=e81] [cursor=pointer]: Grok
- generic [ref=e82] [cursor=pointer]: Sora
- generic [ref=e83] [cursor=pointer]: Gemini
- img [ref=e84] [cursor=pointer]
- img [ref=e87] [cursor=pointer]
- generic [ref=e94]: 正在加载车队...
- generic [ref=e95]:
- img [ref=e96]
- generic [ref=e98]: 暂无车队
- img:
- generic:
- generic: ChatGPT
- generic [ref=e100]:
- img [ref=e101]
- paragraph [ref=e103]: 页面加载中...