更新日志Release notes

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 密码登录支持双因素认证 — 密码登录可要求输入认证器应用生成的动态口令。管理员可选择策略：禁用、可选或强制；强制策略下，用户将在下一次密码登录时被提示完成绑定，不设宽限期。用户可在「设置 → 个人资料与账号 → 安全」中管理自己的认证器，替换或停用需要同时提供密码与当前口令。连续 10 次输错将锁定账号 15 分钟，且同一口令不可重放。管理员可在用户列表中重置遗失的认证器，该操作会留有审计记录，并在配置 SMTP 时邮件通知用户（#1202）。Two-factor authentication for password sign-in — Password login can require a code from an authenticator app. Administrators choose the policy — disabled, optional, or required — and under the required policy users are prompted to enroll at their next password sign-in, with no grace period. Users manage their own authenticator under Settings → Profile & Account → Security; replacing or disabling one requires both the password and a current code. Failed codes lock the account after 10 consecutive attempts for 15 minutes, and a code cannot be replayed. Administrators can reset a lost authenticator from the Users screen, which is audited and emailed to the user when SMTP is configured (#1202).
• 管理员可自主控制启用的登录方式 — 密码、邮件验证码、飞书与 LDAP 登录现可在新的「认证配置」中逐项开关，取代此前「通用设置」与「单点登录设置」的分离方式。系统拒绝停用最后一个可用登录方式，避免实例把自己锁在登录页之外。Admin control over which sign-in methods are available — Password, email-code, Feishu, and LDAP sign-in are now individually switchable from a new Authentication section in admin configuration. The system refuses to disable the last usable sign-in method, so an instance cannot lock itself out of its own login page.
• IT 资产支持加密 SSH 凭据 — 每个资产可保存多个具名 SSH 账号，按工作区、资产与登录名分别加密存储。账号支持密码认证与私钥认证（含带口令的私钥），并可选配一跳跳板机。新增命令：mopheus asset credential add|update|list|import|inventory 与 mopheus ssh credential get <asset-id> --user <username>。查询类命令仅返回元数据，不会回显密码或私钥（#1215）。Encrypted SSH credentials for IT assets — Each asset can hold one or more named SSH accounts, each stored encrypted and scoped to your workspace, the asset, and the login name. Accounts support password authentication and private-key authentication including passphrase-protected keys, plus an optional one-hop jump host for bastions. New commands: mopheus asset credential add|update|list|import|inventory and mopheus ssh credential get <asset-id> --user <username>. Listing and status commands return metadata only — passwords and private keys are never echoed (#1215).
• 交互式组件支持补充文字说明 — 单选、多选与确认三类决策组件均内置自由文本说明框，用户既能选择选项，也能补充说明诉求，说明内容与选择一并记入决策回执（#1204）。Interactive widgets now capture free-text instruction — Every decision widget — single-select, multi-select, and confirm-action — offers a built-in free-text instruction field, so a user can pick an option and say what they want changed instead of only choosing from a fixed list. The reply is recorded alongside the selection in the decision receipt (#1204).
• 独立的管理员命令行工具 — mopheus-admin 是独立二进制，覆盖用户、许可证、工作区、功能开关、统计与模板管理，拒绝非管理员登录，并可通过 mopheus-admin upgrade 自更新（#1189）。A standalone admin CLI puts platform control on the command line — mopheus-admin is a separate binary covering users, licenses, workspaces, feature flags, statistics, and templates. It refuses non-admin logins and can update itself with mopheus-admin upgrade (#1189).
• 工单记忆蒸馏具备完整生命周期 — 蒸馏由一次性动作改为绑定工单的「认领 → 执行 → 发布」流程。工单可见蒸馏状态（排队中 / 执行中 / 已蒸馏 / 失败），执行中断时认领会自动回收，工作区仍受许可的记忆配额约束。Ticket-scoped memory distillation now has a managed lifecycle — Distillation moved from a fire-and-forget operation to an explicit claim → run → publish lifecycle tied to a ticket. Distillation status (queued / running / distilled / failed) is visible in the ticket, claims are reconciled automatically if a run dies, and each workspace remains bounded by its licensed memory quota.

新增Copy Anchor LinkAddedCopy Anchor Link

• 双因素认证：用户自行绑定认证器、连续失败锁定、管理员重置并留有审计记录，命令行可交互式完成挑战应答（#1202）。Two-factor authentication with per-user authenticator enrollment, account lockout after repeated failures, administrator reset with an audit trail, and interactive CLI handling of the challenge (#1202).
• 密码、邮件验证码与飞书登录可分别启用或停用，并阻止停用最后一个可用登录方式。Individual sign-in method switches for password, email-code, and Feishu sign-in, with a guard against disabling the last usable method.
• 加密的资产 SSH 凭据：支持密码与私钥认证、可选跳板机、数据库分页的主机清单，以及 mopheus asset credential / mopheus ssh credential 命令族（#1215）。Encrypted SSH asset credentials with password and private-key authentication, optional jump-asset support, database-paginated host inventory, and a mopheus asset credential / mopheus ssh credential command family (#1215).
• 独立的管理员命令行工具，覆盖用户、许可证、工作区、功能开关、统计与模板，以单独发布包分发（#1189）。A standalone platform admin CLI for users, licenses, workspaces, feature flags, statistics, and templates, distributed as its own release archive (#1189).
• 技能模板申请流程：成员提交技能申请提升为模板，管理员审批或附注驳回，成员可在技能行查看申请状态与审批意见（#1189）。A skill template request workflow: members submit a skill for promotion, administrators approve or reject it with a note, and members see the request status and review note on the skill row (#1189).
• 决策组件内置补充说明输入，提交前必须填写说明内容（#1204）。Built-in custom instruction feedback on decision widgets, with feedback text required before submission (#1204).
• 新增 assets:write 与 assets:delete 权限范围，可按角色独立授予；只读访问行为不变（#1205）。Separate assets:write and assets:delete permission scopes that administrators can grant independently per role; read access is unchanged (#1205).
• 智能体详情页暴露角色管理权限，拥有该范围的成员可在「访问」页签为智能体授予工作区角色。Role assignment surfaced on the agent page, so members with the role-management scope get an Access tab for granting workspace roles.
• 创建作业对话框新增「事件」触发页签，提供以智能体为主的引导说明与可复制的命令示例（#1220）。An Event trigger tab in the Create Job dialog with an Agent-first onboarding guide and copyable CLI reference (#1220).
• 技能列表支持按名称、更新时间或近期使用量排序，排序状态保留在 URL 中（#1223）。Sortable skill lists by name, last updated, or recent usage, with the selection preserved in the URL (#1223).
• 记忆树按支柱独立分页，资产选择改为可搜索的浮动选择器（#1184）。Per-pillar memory tree pagination and a searchable floating asset picker (#1184).
• 新用户可批量选择并接受多个工作区邀请。Batch acceptance of multiple workspace invitations for new users.
• 管理端用户列表以表格呈现，并显示每个用户已加入的工作区（#1187）。Joined workspaces listed for each user in the admin users table (#1187).
• 智能体页面提供「创建 Pangu」操作，按内置模板预填创建表单。A "Create Pangu" action on the Agents page that pre-fills the agent creation form from the built-in template.
• 私聊回复触发浏览器通知，通知偏好下新增「私聊回复」开关。Browser notifications for private chat replies, with a Private chat reply toggle under notification preferences.

变更Copy Anchor LinkChangedCopy Anchor Link

• 工单列表合并，原独立「我的工单」页面移除。「我的工单」改为工单视图工具栏中的切换开关，开启后以个人范围页签替代工作区范围页签；表头与行的列保持一致：优先级、ID、标题、标签、受理人、开始、截止、更新时间（#1213）。One ticket list instead of a separate "My Tickets" page. My Tickets is now a toggle in the Tickets view toolbar, personal scope tabs replace workspace scope tabs when it is on, and the ticket list columns are aligned across header and rows: Priority, ID, Title, Labels, Assignee, Start, Due, Updated (#1213).
• 工作区侧边栏按工作事项、构建资源、管理三个分组重组，管理分组停靠底部，在展开、紧凑与移动端布局下均保持一致（#1211）。The workspace sidebar is reorganized into work items, build resources, and administration sections, with administration docked to the bottom, holding across expanded, compact, and mobile layouts (#1211).
• 记忆 Markdown 文件改用顶层前置元数据字段，不再嵌套 context_tags 对象；记忆详情页由原始 JSON 编辑器改为结构化表单，支持描述、标签、自定义属性与资产绑定（#1195）。Memory markdown files now carry top-level frontmatter fields instead of a nested context_tags object, and the memory detail screen replaces a raw JSON editor with structured fields for description, labels, custom attributes, and asset binding (#1195).
• 智能体运行时提示词明确禁止绕过权限、安全管控或环境限制，被拒绝的操作须作为限制如实上报。The agent runtime prompt now forbids working around permission, security-control, or environment restrictions, and requires a blocked operation to be reported as a limitation.
• mopheus ssh list 改为数据库分页查询，支持 --page / --per-page，并新增 AUTH 列标明主机凭据为已配置、旧式或未配置。mopheus ssh list is served from the database with pagination, accepts --page / --per-page, and gains an AUTH column reporting whether a host is configured, legacy, or not configured.
• HTTP 处理器返回 500 时记录失败操作及工作区、智能体任务、智能体与用户上下文。HTTP handlers log the failing operation together with workspace, agent task, agent, and user context on a 500 response.
• 守护进程清理除工单外，也覆盖聊天、作业运行与快速创建任务的临时目录，遵循产物保留策略。Daemon cleanup applies the artifact retention TTL to chat, job-run, and quick-create task directories in addition to tickets.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 私聊与智能体任务数据按会话范围隔离：任务详情、对话记录、用量与交互队列在返回前均要求会话访问权限。Private chat and agent-task data are session-scoped: task details, transcripts, usage, and interaction queues require chat session access before being returned.
• SSH 凭据按工作区、资产与登录名分别加密存储，查询命令不会返回凭据，仅在授权 SSH 执行时解密。SSH credentials are stored encrypted per workspace, asset, and username, are never returned by list or status commands, and are only decrypted for an authorized SSH execution.
• 命令行认证令牌独立存放于 auth.json（权限 0600），不再置于 config.json，磁盘上的令牌格式也压缩为加密信封。CLI auth tokens now live in a dedicated auth.json file with 0600 permissions rather than inside config.json, and the on-disk token format was compacted to an encrypted envelope.
• 动态口令不可重放，连续 10 次失败将锁定账号 15 分钟。TOTP codes are rejected on replay, and a run of 10 consecutive failures locks the account for 15 minutes.
• HTTP 处理器异常在服务端记录日志，不再被静默吞没。HTTP handler failures are logged server-side instead of being silently swallowed.
• 智能体提示词明确禁止提权、伪造挂载、修改宿主状态及以可写路径绕过已拒绝的操作。Agent prompts explicitly forbid privilege escalation, forged mounts, host-state changes, and writable-path workarounds around a denied operation.

修复Copy Anchor LinkFixedCopy Anchor Link

• 回复智能体评论时，在产生原评论的团队内继续执行，而非按工单当前受理人所属团队路由。Replying to an agent comment now resumes that agent inside the team that produced the original comment, rather than routing under the ticket's current assignee's team.
• 已关闭工单与成员间回复不再自动唤醒智能体；显式 @ 仍可触发，触发预览会说明被抑制或被阻断的原因，不再静默无响应。Closed tickets and member replies no longer wake agents. Explicit @ mentions still work, and the trigger preview explains why a trigger was suppressed or blocked instead of doing nothing silently.
• 离线升级先加载随包容器镜像，再替换文件与更新配置；镜像包缺失时立即中止，不再以旧镜像继续升级。Offline upgrades load the bundled container images before replacing any files or updating configuration, and abort if an image archive is missing.
• 离线镜像包按目标架构正确导出：使用识别平台的 docker save，并在发布前校验归档的标签与 CPU 架构（#1178）。Offline image bundles are built for the right architecture: image export uses platform-aware docker save and verifies the archive's tag and CPU architecture before publishing (#1178).
• 智能体任务不再因磁盘缓存被判定为内存超限，cgroup v2 内存守护已扣除可回收的页缓存与 slab（#1182）。Agent tasks are no longer killed for using disk cache, because the cgroup v2 memory guard discounts reclaimable page cache and slab (#1182).
• 飞书安装的机器人凭据被拒后不再无限退避重连，渠道置为阻断状态，凭据修正后自动恢复。WeCom installations with rejected bot credentials no longer reconnect on an endless backoff loop; the channel is parked as blocked and resumes once the configuration is corrected.
• 评论缩略图不再额外产生一条滚动条，悬停预览显示位置计数（#1206）。The comment minimap no longer adds a second scrollbar, and the hover preview shows a position badge (#1206).
• 折叠的聊天面板已从无障碍树与键盘导航中移除，不再成为隐形可聚焦目标（#1199）。The collapsed chat panel is removed from the accessibility tree and from keyboard navigation instead of remaining an invisible, focusable target (#1199).
• 保存技能后显示正确的「已保存」提示，不再重复按钮文案（#1200）。Saving a skill shows a proper "saved" confirmation rather than repeating the button label (#1200).
• 工单列表不再隐式隐藏 30 天前的未结工单，筛选按钮不再误报激活状态，「智能体处理中」指示器现可真正筛选列表与看板视图，页头计数与当前范围页签保持一致（#1213）。The ticket list no longer hides open tickets older than 30 days unless a date filter is chosen, the filter button no longer shows a false active-filter indicator, the "agent working" indicator now filters both list and board views, and the header count matches the active scope tab (#1213).
• Webhook 触发类型的作业在作业列表中显示触发方式（#1220）。Jobs with a Webhook trigger display their trigger label in the Jobs list (#1220).
• 紧凑侧边栏中的置顶工单徽标不再被裁切（#1214）。Pinned-ticket badges in the collapsed sidebar are no longer clipped (#1214).
• 聊天话题可直接在列表中归档、恢复、删除、重命名与退出。Chat topics can once again be archived, restored, deleted, renamed, and left directly from the topic list.
• 紧凑侧边栏中「创建工作区」可正常打开，选择工作区后下拉菜单正确收起（#1186）。"Create Workspace" opens correctly from the collapsed sidebar, and the workspace dropdown closes after a workspace is picked (#1186).
• 移动端登录页的标题与说明调整到表单上方。The login page shows its title and description above the form on small screens.

破坏性变更Copy Anchor LinkBreaking ChangesCopy Anchor Link

• mopheus asset apply 拒绝包含 ssh:// credential_ref 属性的资产清单。请先将 SSH 账号迁移到顶层 credentials 列表或单独的 --credentials-file 再重新应用；已存量的旧式 credential_ref 资产仍可连接，且不会自动迁移。Asset manifests containing ssh:// credential_ref attributes are rejected by mopheus asset apply. Move SSH accounts into the top-level credentials list, or a separate --credentials-file, before re-applying manifests. Assets already stored with a legacy credential_ref keep working and are not migrated automatically.
• /[workspace]/my-tickets 路由已移除且不再重定向。请改用 /[workspace]/tickets 与其中的「我的工单」开关，旧书签不再解析。The /[workspace]/my-tickets route was removed and is no longer redirected. Use /[workspace]/tickets and the My Tickets toggle; existing bookmarks to the old list or detail URLs no longer resolve.
• mopheus ticket mark-distilled 已移除，改为 mopheus memory mark-distilled；调用旧命令的脚本与技能需相应更新。mopheus ticket mark-distilled was removed and replaced by mopheus memory mark-distilled. Custom scripts and skills invoking the old command must be updated.
• mopheus ticket distill --force 不再预先删除既有记忆，改为仅在发布成功且确实产出新记忆后，替换该工单自身的旧记忆来源。mopheus ticket distill --force no longer deletes existing memories up front. It replaces the ticket's own old memory sources only after a successful publication, and only when new memories were actually produced.
• mopheus ssh list 的输出与分页方式变更：新增 AUTH 列，新增 --page / --per-page（默认每页 100 条），并纳入尚未配置凭据的主机。mopheus ssh list output and pagination changed: an AUTH column was added, --page / --per-page were introduced with a default of 100 rows per page, and unconfigured hosts are now included.
• 蒸馏相关 REST 契约变更：POST /tickets/:id/mark-distilled 现要求智能体任务令牌；GET /memories/distill/status/:ticketId 返回 status 字段并移除 memoryCount；触发预览响应新增 suppressedByStatus，blocked[].id 由 UUID 改为字符串。The REST contract for distillation changed. POST /tickets/:id/mark-distilled now requires an agent-task token; GET /memories/distill/status/:ticketId returns a status field and drops memoryCount; the trigger-preview response adds suppressedByStatus and changes blocked[].id from a UUID to a string.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 数据库迁移 150–157 在升级时自动执行：蒸馏生命周期与状态字段、技能模板申请、动态口令绑定与账号锁定、资产凭据表以及新的资产权限范围。Database migrations 150–157 apply automatically during the upgrade: distillation lifecycle and status columns, skill template requests, TOTP authenticator bindings and account lockout, the asset credential table, and the new asset permission scopes.
• 凭据文件权限须为 0600。凭据清单以及任何包含 credentials 段的 mopheus asset apply 文件，若对同组或其他用户可读则被拒绝。Credential files must be mode 0600. Both the credential manifest and any mopheus asset apply file containing a credentials section are rejected if they are readable by group or others.
• 凭据操作要求 HTTPS。除主机名为 localhost 或回环地址外，mopheus asset credential 与 mopheus ssh credential 拒绝连接明文 HTTP 的接口，请先将 API 置于 HTTPS 之后。HTTPS is required for credential operations. mopheus asset credential and mopheus ssh credential refuse to run against a plain-HTTP API endpoint unless the host is localhost or a loopback address.
• 若当前使用 credential_ref，先运行 mopheus asset credential inventory 盘点仍带旧式 SSH URI 元数据的资产（报告不含 URI 口令与原始引用），再用 mopheus asset credential add 或 import 重建账号。If you use credential_ref today, run mopheus asset credential inventory to review which assets still carry legacy SSH URI metadata, then re-create those accounts with mopheus asset credential add or import.
• 跳板机资产与跳板用户名须成对设置且指向不同资产，跳板凭据本身不能再指向另一台跳板机。A jump asset and jump username must be set together and must reference a different asset; a jump credential cannot itself point at another jump asset.
• mopheus-admin 作为独立发布包与 mopheus 包并行分发，请下载后放入 PATH，或使用 mopheus-admin upgrade 保持最新。mopheus-admin is published as its own archive alongside the mopheus archive. Download it and put it on PATH, or use mopheus-admin upgrade to keep it current.
• 命令行凭据迁移至 ~/.mopheus/auth.json（或 ~/.mopheus/profiles/<name>/auth.json），不再存放于 config.json。迁移自动完成，但读取 config.json 中令牌的备份与配置同步脚本需相应调整。CLI credentials moved to ~/.mopheus/auth.json (or ~/.mopheus/profiles/<name>/auth.json) instead of config.json. Migration is automatic, but backup scripts and config sync that read the token from config.json must be updated.
• 记忆 Markdown 改用展开的顶层前置元数据。导入仍兼容旧格式，导出的 MEMORY.md 索引表新增「描述」与「标签」列，解析固定列数的脚本需调整。Memory markdown files now use expanded top-level frontmatter. Import still reads the old format, and the exported MEMORY.md index table has new Description and Labels columns, so scripts parsing a fixed column count need adjustment.
• 离线升级包必须包含镜像归档与 env.example。镜像归档缺失时会在改动任何文件与配置之前中止。离线升级加载的镜像集合取自发布版本的 env.example，而非实例自身的 .env，使用 nginx 或 new-api 附加组件的站点请确认离线包中包含预期的镜像集合。Offline upgrade packages must contain the image archives and an env.example. A missing archive now aborts the upgrade before any files or configuration are changed. The set of images loaded during an offline upgrade is derived from the release's env.example rather than the installed instance's .env, so sites running the nginx or new-api add-ons should confirm the expected image set is included in their bundle.
• 新增配置键的默认值保持现有行为：totp_policy（disabled）、password_login_enabled（true）、email_code_login_enabled（true）、lark_oauth_enabled（true）。New configuration keys default to current behavior: totp_policy (disabled), password_login_enabled (true), email_code_login_enabled (true), and lark_oauth_enabled (true).
• 蒸馏去重阈值现按记忆类型区分：偏好 0.25、成功剧本 0.28、其余 0.30。The distillation deduplication thresholds are now per memory type: preference 0.25, success playbook 0.28, others 0.30.
• 安装环境示例中的 MOPHEUS_IMAGE_TAG 现指向 v2.2.12。MOPHEUS_IMAGE_TAG in the install environment example now points at v2.2.12.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• LDAP / Active Directory 登录 — 在管理控制台配置目录地址、TLS 模式、证书校验、Base DN、搜索过滤器、登录属性、可选的只读绑定账号、超时以及姓名/邮箱属性映射，并可直接测试连接。仅在启用目录登录时，登录页才展示 LDAP / AD 入口；目录用户在首次成功登录时自动开通，并按映射邮箱匹配已有账号（#1168）。LDAP / Active Directory sign-in — Configure a directory URL, TLS mode, certificate verification, Base DN, search filter, login attribute, an optional read-only bind account, timeout, and name/email mappings in the admin console, then test the connection in place. The LDAP / AD entry appears on the login page only while directory sign-in is enabled, and directory users are provisioned automatically on first successful login (#1168).
• 工作区配置备份与恢复 — 工作区所有者可将智能体、技能、渠道、作业、团队、工单与设置导出为 ZIP 备份包，并在导入前预览将创建、更新或跳过的内容。网页流程与 mop workspace export / mop workspace import 共用同一套序列化格式。Workspace configuration backup and restore — Workspace owners can export a ZIP backup of agents, skills, channels, jobs, teams, tickets, and settings, then import it with a preview of what will be created, updated, or skipped before anything is written. The web flow and mop workspace export / mop workspace import share one serialization format.
• 自定义应用 HTTP 流式桥接 — 新增渠道类型，外部运行器可通过 HTTP 将平台消息投递给 Mopheus 智能体，并通过持续 NDJSON 流接收出站投递。每个安装实例拥有独立凭据，支持轮换与吊销，创建流程中可直接下载 Python、Go 与 Node.js 示例运行器（#1161）。Custom application HTTP stream bridge — A new channel type lets an external runner deliver platform messages to a Mopheus agent over HTTP and receive outbound deliveries on a continuous NDJSON stream. Installations get their own credentials with rotation and revocation, and Python, Go, and Node.js example runners are downloadable from the setup flow (#1161).
• 确定性的记忆来源追溯 — 每条记忆以来源记录形式保存其出处，覆盖工单、作业、聊天会话、手动录入与智能体任务，来源取自经服务端校验的认证上下文而非自由标签，跨工单知识可端到端追溯（#1173）。Deterministic memory provenance — Every memory records its origin as a ticket, job, chat session, manual entry, or agent task, resolved from verified authentication context rather than free-form tags, so cross-ticket knowledge is traceable end to end (#1173).
• 可读的决策回执 — 交互式组件回执改为「问题 / 选择」两列表格展示，多选答案以分隔符合并展示，确认型组件的补充意见内联显示。Human-readable decision receipts — Interactive widget receipts render as a Question / Choice table instead of machine-oriented fields, with multi-select answers joined readably and confirm-action feedback shown inline.

新增Copy Anchor LinkAddedCopy Anchor Link

• LDAP / Active Directory 认证，含控制台内连接测试、按映射邮箱自动开通用户，以及管理员为其设置本地密码的兜底能力（#1168）。LDAP / Active Directory authentication with an in-console connection test, automatic user provisioning matched by mapped email, and administrator-set local password fallback (#1168).
• 仅所有者可用的工作区配置导出与带预览的导入。Owner-only workspace configuration export and preview-driven import in workspace settings.
• 自定义应用渠道桥接：凭据轮换与吊销、入站媒体处理、流式租约、出站投递结果与重试（#1161）。Custom application channel bridge with credential rotation and revocation, inbound media handling, stream leases, outbound delivery results, and retry handling (#1161).
• 多态记忆来源，支持历史数据回填与来源任务追踪（#1173）。Polymorphic memory provenance with historical backfill and source-task tracking (#1173).
• 评论触发的按接收方启动策略，可选择加入已在运行中的智能体执行。Per-recipient comment trigger start strategies, including joining an agent run that is already pending.
• 渠道集成上下文写入工单引用与智能体任务，并在活动记录中展示渠道类型。Channel integration context on ticket references and agent tasks, with the channel type shown in activity rows.
• 二进制被替换后守护进程自动重启：按小时轮询检测，默认启用，可通过 MOPHEUS_DAEMON_AUTO_RESTART 关闭（#1157）。Daemon self-restart after binary replacement, on by default and controlled by MOPHEUS_DAEMON_AUTO_RESTART (#1157).
• 连接已授权资产时应用本地 OpenSSH 配置；资产凭据仍具有最高优先级。Local OpenSSH configuration applied when connecting to authorized assets; asset credentials stay authoritative.
• 数据库资产统一 SwissQL credential_ref URI 规范，并提供确定性的端点解析流程。Standardized SwissQL credential_ref URI scheme for database assets with a deterministic endpoint resolution procedure.
• 文档站点采用 Maple Mono NF CN 代码字体，新增 2:1 字符网格 ASCII 图校验（make check-ascii-diagrams），并精简侧边栏导航（#1137）。Documentation site: Maple Mono NF CN code font, a 2:1 character-grid linter for ASCII diagrams, and compact sidebar navigation (#1137).
• 重写跨工单记忆文档（英文、简体中文、日文）（#1132），并强化记忆类型语义与蒸馏分类边界约束（#1131）。Overhauled cross-ticket memory documentation in English, Simplified Chinese, and Japanese (#1132), plus stricter memory type semantics and distillation classification guards (#1131).

变更Copy Anchor LinkChangedCopy Anchor Link

• 工单元数据键权限与工单实体权限拆分，仅持有 tickets:write 的智能体可维护元数据而不会获得工单删除权限（#1148）。Ticket metadata key permissions are split from ticket entity permissions, so metadata maintenance no longer implies ticket deletion rights (#1148).
• 记忆视图统一分页，分组视图与列表视图具备一致的分页与状态控件，「全部」筛选包含已停用记忆。Memory views are paginated with consistent paging and status controls, and the "all" filter includes disabled memories.
• 「Grill」操作统一改为菜单形式，提供已配置的追问智能体或当前受理智能体（#1150）。The "Grill" action always opens a menu offering configured griller agents or the assigned agent (#1150).
• 作业运行历史按时间顺序编号执行尝试，多尝试运行的耗时从当前活动尝试开始计算（#1152）。Job run history numbers attempts chronologically and measures multi-attempt runs from the active attempt (#1152).
• 渠道生命周期通知中的附件链接统一规范化，短链接自动展开。Channel lifecycle notifications normalize attachment links and expand short-form URLs.
• 每日构建时间调整为 02:30 CST，并为守护进程重启步骤增加保护。The nightly build schedule moves to 02:30 CST, with a guarded daemon restart step.

安全Copy Anchor LinkSecurityCopy Anchor Link

• LDAP 认证对过滤器输入做转义、所有查询均有超时限制，认证失败返回统一错误且不泄露目录细节；目录密码与绑定密码不会被日志记录或由 API 返回，目录用户无法自行重置密码。LDAP authentication escapes filter input, bounds lookups with a timeout, and returns a uniform error that does not leak directory details; directory passwords are never logged or returned by the API, and directory users cannot reset their own password.
• 工单元数据写入与删除权限独立于工单实体权限（#1148）。Ticket metadata write and delete scopes are independent of ticket entity scopes (#1148).
• HTTP 处理器失败在服务端记录日志，不再被静默吞掉。HTTP handler failures are logged server-side instead of being silently swallowed.

修复Copy Anchor LinkFixedCopy Anchor Link

• Claude 上下文耗尽被正确识别并按失败上报，不再被误判为成功回合。Claude context exhaustion is detected and reported as a failure instead of a successful turn.
• 待定附件上传完成对账，编辑器中丢弃的图片不再以重复附件形式绑定到评论；超过两天的陈旧待定上传由每日作业回收。Pending attachment uploads are reconciled, so images discarded in the editor no longer attach to comments as duplicates, and stale uploads are reaped after two days.
• 仓库缓存条目在复用前校验 worktree 指针，并可重建损坏的检出。Repository cache entries validate worktree pointers before reuse and can recreate broken checkouts.
• 工作区邀请无法被重复接受。Workspace invitations cannot be accepted twice.
• 工单字段在 CLI 局部更新时保留，ticket update 不再清空未提供的字段。Ticket fields survive partial CLI updates; ticket update no longer clears fields that were not supplied.
• 安装过程检查 Docker 与 Compose，依赖失败时立即停止并保护生成的凭据。The installer checks Docker and Compose during setup and stops on dependency failures, protecting generated credentials.
• 安装与离线更新保留宿主机工具的文件属主，仓库创建错误在界面中可见。Installation and offline updates preserve ownership of host tools, and repository creation errors now surface in the UI.
• 许可证状态恢复等待所需迁移，已绑定的旧许可证可重新导入。License state recovery waits for the required migration, and a bound legacy license can be reimported.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 目录登录为可选功能，需在管理配置中启用后登录页才会出现 LDAP / AD 入口；本地账号、验证码与飞书登录行为不变。Directory sign-in is opt-in and must be enabled in admin configuration before the LDAP / AD login entry appears. Existing local, verification-code, and Lark login are unchanged.
• 升级后数据库迁移会自动补充工单 context_refs 列与记忆来源结构，建议升级完成后重新导出一份配置备份。Existing deployments gain a ticket context_refs column and the memory provenance schema automatically on migration; export a fresh configuration backup after upgrading.
• 如需守护进程在二进制被替换后不自动重启，请在升级前设置 MOPHEUS_DAEMON_AUTO_RESTART=false。Set MOPHEUS_DAEMON_AUTO_RESTART=false before upgrading to keep the daemon from re-execing itself after a binary replacement.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 记忆系统重建为 Open Knowledge Format 拓扑与原生 BM25 检索 — 向量嵌入与知识图谱已下线。记忆改为四支柱目录结构（runbooks/、facts/、conventions/、docs/），检索由 PostgreSQL BM25 全文检索承载，内置英文、中文与 IT 领域词典；智能体任务会获得动态合成的 MEMORY.md 导航索引，并可在沙箱内直接读取记忆文件。记忆召回不再依赖外部嵌入服务（#1123）。Memory rebuilt on the Open Knowledge Format topology and native BM25 search — Vector embeddings and the knowledge graph are gone. Memories now live in a four-pillar directory layout (runbooks/, facts/, conventions/, docs/), retrieval runs on PostgreSQL BM25 full-text search with English, Chinese, and IT-domain dictionaries, and agent tasks receive a synthesized MEMORY.md navigation index plus direct read access to their memory files. Recall no longer depends on an external embedding provider (#1123).
• 记忆召回在真实查询下可用 — 严格 AND 检索在任一词项缺失时回退到带相似度下限的排序 OR；无上下文标签的任务不再注入为空，而是获得工作区基线记忆；资产级与用户级记忆不再泄漏到全局查询；参考文档默认进入可检索范围（#1128）。Memory recall works for real queries — Retrieval falls back from strict AND to ranked OR when a term is missing, tasks with no context tags receive workspace baseline memories instead of nothing, asset-bound and user-bound records stay out of global queries, and reference documents are searchable by default (#1128).
• 集群级系统定时任务可观测性 — 管理控制台新增系统定时任务页面，展示每个 API 实例的调度列表、下次运行、运行状态、最近结果、失败摘要、按分钟历史与跳过次数，并可在当前进程手动触发（#1089）。Cluster-wide system cron visibility — Administrators get a console page showing every API instance's system schedules, next run, run state, last result, failure summary, minute-level history, and skip counts, with manual trigger on the current process (#1089).
• 作业运行执行尝试可追溯 — 每次作业运行动态解析其执行尝试，通过专用 API 与「执行尝试」历史卡片（含日志、多尝试徽章与重放来源）对外暴露（#1108）。Job run execution attempts are inspectable — Each job run resolves its attempts dynamically and exposes them through a dedicated API and an Execution Attempts history card with logs, multi-attempt badges, and replay provenance (#1108).
• 智能体供应商失败分类 — 配额、限流、传输、认证与令牌失败在对话与界面中呈现为稳定原因码，同时保留原始错误以便排查（#1109）。Agent provider failures are classified — Quota, rate-limit, transport, authentication, and token failures surface as stable reasons in chat and the UI while the raw error is preserved (#1109).

新增Copy Anchor LinkAddedCopy Anchor Link

• Open Knowledge Format 记忆目录结构，向智能体任务注入动态合成的 MEMORY.md 索引，并在沙箱中提供只读记忆挂载（#1123）。Open Knowledge Format memory layout with a synthesized MEMORY.md index injected into agent tasks, plus read-only memory mounts in the sandbox (#1123).
• 参考文档摄取：支持直接上传 Markdown 与纯文本文档（#1123）。Reference-document ingestion for Markdown and plain text (#1123).
• 记忆清单接口，支持 ETag 协商与 304 缓存（#1123）。Memory manifest endpoint with ETag negotiation and 304 caching (#1123).
• 记忆 CLI 命令：mop memory export、import、retrieve（别名 search）、get --save、validate（#1123）。Memory CLI commands: mop memory export, import, retrieve (alias search), get --save, and validate (#1123).
• 仅管理员可见的系统定时任务页面，含各实例运行健康度与手动触发（#1089）。Admin-only system cron page with per-instance runtime health and manual trigger (#1089).
• 作业运行任务接口，以及作业运行详情中的「执行尝试」历史卡片（#1108）。Job run tasks endpoint and Execution Attempts history card in the job run detail view (#1108).
• 触发器编辑弹窗支持标签编辑，并对标准 cron 与 Quartz 两种方言提供本地化说明（#1102）。Job trigger label editing with localized cron explanation for standard and Quartz dialects (#1102).
• 记忆蒸馏技能新增取代规则、四层对账矩阵、认知升级规则与完成前质量门禁（#1125）。Memory distillation skills gain supersession, a reconciliation matrix, cognitive promotion rules, and a pre-completion quality check (#1125).
• 补充自托管场景下 Nginx WebSocket 反向代理配置文档。Nginx WebSocket proxy configuration documented for self-hosted deployments.
• 离线安装包在指定显式版本时自动刷新内置工具清单。Offline installer packaging refreshes the bundled tool manifest automatically for an explicit version.

变更Copy Anchor LinkChangedCopy Anchor Link

• 记忆检索改由原生 PostgreSQL BM25 承载，并编译 IT 领域与中文词典；移除嵌入生成与图遍历（#1123）。Memory search is served by native PostgreSQL BM25 with compiled IT-domain and Chinese dictionaries; embedding generation and graph traversal are removed (#1123).
• 智能体失败在保留原始错误的同时附带分类原因（#1109）。Agent failures carry classified reasons alongside the preserved raw error (#1109).
• 作业运行尝试改为查询时动态解析，不再依赖存储的任务指针（#1108）。Job run attempts are resolved at query time instead of through a stored task pointer (#1108).
• 记忆导航默认使用树视图；参考文档上传弹窗限制在视口内并支持内容滚动。Memory navigation defaults to the tree view; the reference-document upload dialog is bounded to the viewport.
• 应用字体改为自托管；工作区与管理端页面外壳、滚动、移动端头部与标签控件统一。Application fonts are self-hosted; workspace and admin page shells, scrolling, mobile headers, and tab controls are unified.
• 工单范围筛选在列表与看板查询中保持一致。Ticket scope filters now apply consistently to list and board queries.
• 前端移除硬编码文案兜底，统一走多语言查表（#1111）。Front-end hardcoded translation fallbacks are removed in favour of locale-consistent lookups (#1111).
• 发布工作流发布后不再触发产物同步 webhook，仅在失败时通知企业微信。The release workflow no longer fires the artifact-sync webhook after publishing and notifies WeCom only on failure.

安全Copy Anchor LinkSecurityCopy Anchor Link

• Linux 沙箱遮蔽当前工作区目录，同工作区的其他任务目录不再在任务沙箱内可见。The Linux sandbox masks the current workspace directory, so sibling task directories are no longer visible from inside a task sandbox.
• 智能体任务消息在持久化前剥离 NUL 字节，避免异常输入导致数据库写入失败。Agent task message content is sanitized of NUL bytes before persistence, preventing database write failures from malformed input.

修复Copy Anchor LinkFixedCopy Anchor Link

• 记忆检索在词项缺失时回退到排序 OR 而非返回空结果（#1128）。Memory retrieval falls back to ranked OR when a query term is absent (#1128).
• 上下文标签为空的 Chat 与 Job 任务获得工作区基线记忆与发起人偏好（#1128）。Chat and Job tasks with empty context tags receive baseline workspace and initiator memories (#1128).
• 全局记忆查询不再返回资产级或用户级私有记忆（#1128）。Global memory queries no longer return asset-bound or user-bound private records (#1128).
• mop memory retrieve 改用标准单数 --type/-t；mop memory list 支持 --types 并透传查询参数；CLI 表格不再截断正分数值（#1128）。mop memory retrieve uses the standard singular --type/-t flag; mop memory list accepts --types and forwards query parameters; CLI table output no longer truncates positive scores (#1128).
• 预创建的记忆目录与规范化 OKF 拓扑一致（#1126）。Pre-created memory directories match the canonical OKF topology (#1126).
• 任务恢复不再拖死运行时：重放异步执行，连续三次失败的上报被隔离而非阻塞后续任务领取。Task recovery no longer deadlocks a runtime: replay runs asynchronously and a report failing three times is quarantined instead of blocking claims.
• Antigravity 任务重试不再让历史会话错误覆盖成功的执行结果。Antigravity task retries no longer let historical session errors override a successful turn.
• 仓库缓存拒绝歧义的 HEAD 分支引用。The repository cache rejects ambiguous HEAD branch references.
• 评论草稿附件不再泄漏到工单描述，评论增删改会失效附件缓存（#1114）。Comment draft attachments no longer leak into the ticket description, and attachment caches invalidate on comment changes (#1114).
• 评论提交增加防重入保护。Comment submit re-entry is guarded against duplicate posts.
• 全屏源码预览滚动修正，行号对齐；Perl 附件支持语法高亮预览（#1120）。The fullscreen source preview scrolls correctly with aligned line numbers; Perl attachments are previewed with syntax highlighting (#1120).
• 不支持的文档语言、sitemap 与 robots 路由返回 404。Unsupported documentation locales, sitemap, and robots routes return 404.
• 修复英文、中文、日文文档内容中的失效链接。Broken documentation links across English, Chinese, and Japanese content are repaired.
• 删除配置文件时先确认，且仅删除所选文件。Deleting a configuration file confirms first and removes only the selected file.
• 修正工作区间距、工单详情重挂载与路由切换、收件箱错误边界、环境变量保存状态。Workspace page spacing, ticket detail remounting and route transitions, inbox error boundaries, and environment-variable save state are corrected.

破坏性变更Copy Anchor LinkBreaking ChangesCopy Anchor Link

• 记忆知识图谱已移除：图谱 API、模型、端点与前端图谱页面下线，导航改为目录与检索。迁移 144 删除 vector、age、pg_rrf、pg_tokenizer 扩展与嵌入列。The memory knowledge graph is removed: graph APIs, endpoints, and the web graph page are gone, and navigation is directory- and search-based. Migration 144 drops the vector, age, pg_rrf, and pg_tokenizer extensions and the embedding column.
• 记忆蒸馏管理迁移至工单：使用 mop ticket list --undistilled 与 mop ticket mark-distilled；mop memory list 默认过滤被取代的记录（#1123）。Memory distillation management moved to tickets: use mop ticket list --undistilled and mop ticket mark-distilled. mop memory list filters superseded records by default (#1123).
• mop memory retrieve --types 改为标准单数 --type / -t（#1128）。mop memory retrieve --types is replaced by the standard singular --type / -t (#1128).
• 迁移 143 删除作业运行表中的任务指针列，请通过作业运行任务接口或「执行尝试」卡片查看执行尝试（#1108）。Migration 143 drops the stored job run task pointer; use the job run tasks endpoint or the Execution Attempts card to inspect attempts (#1108).

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 升级过程中自动执行迁移 142、143、144。Migrations 142, 143, and 144 run automatically during upgrade.
• 自定义 PostgreSQL 镜像必须重建：内置数据库镜像仅预加载 pg_bigm,vchord_bm25 并挂载编译后的 IT 领域词典。自建部署需同步调整 shared_preload_libraries、删除已移除扩展并按更新后的镜像定义重建，否则记忆全文检索将失败。Custom PostgreSQL images must be rebuilt: the bundled database image preloads only pg_bigm,vchord_bm25 and mounts the compiled IT dictionary. Self-hosted deployments must update shared_preload_libraries, drop the removed extensions, and rebuild against the updated image definition, or memory full-text search will fail.
• 迁移 144 会重新启用 2026-10-09 之前被取代的环境事实与偏好，此前被隐藏的记录会重新出现在记忆列表中。Migration 144 re-enables superseded environment facts and preferences last updated before 2026-10-09, so previously hidden records reappear in memory listings.
• 原有记忆嵌入数据将被丢弃，召回效果依赖迁移重建的 BM25 索引。Existing memory embeddings are discarded; recall quality depends on the BM25 indexes built by the migration.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 资产定义修订历史的权限收紧与敏感字段遮蔽 — 修订历史现在强制资源权限校验并在定义修订中遮蔽 envVars，避免敏感配置通过审计视图泄漏（#1085）。Secure definition revision history with permission gating and secret masking — Revision history now enforces resource permissions and masks envVars in definition revisions so sensitive configuration never leaks through audit views (#1085).
• 提示词安全边界的目录与文件系统约束 — 提示词安全现在在工作目录和文件系统两个维度上对提示词执行做出约束，堵住提示词越界访问运行时沙箱的已知路径（#1049、#1047）。Workdir and filesystem containment in prompt security boundaries — Prompt security now enforces the working directory and filesystem boundaries around prompt execution, closing a known way for prompts to traverse outside the intended runtime sandbox (#1049, #1047).
• 智能体运行历史与富预览 — 智能体界面新增应用内运行历史与富预览、运行时间线导航，并刷新了附件预览序列，运维无需离开当前界面即可调查失败原因（#1052）。Agent run history and rich previews — The agent surface gains an in-app run history with rich previews, run-timeline navigation, and a refreshed attachment preview sequence so operators can investigate failures without leaving the surface (#1052).
• 统一的 Chat 会话与工作区/账号设置 — Chat 会话收敛为单一模型，并强制成员会话访问校验；工作区与账号设置共享统一的 RESTful 路由面，提供一致的导航体验（#1059、#1052）。Unified chat sessions and restful workspace/account settings — Chat sessions converge into a single model with member-session access enforcement, and workspace and account settings share a unified restful route surface for consistent navigation (#1059, #1052).
• MCP transcript 徽章与事件颜色矩阵标准化 — MCP transcript 行现在携带一致的徽章与事件颜色矩阵，多协议会话更易于扫读（#1052）。Standardized MCP transcript badges and event color matrix — MCP transcript rows now carry a consistent badge and event color matrix so multi-protocol conversations are easier to scan (#1052).
• 自建 WeCom 应用回调 — 自托管 WeCom 应用的运维可配置原生应用回调，让智能体回复无需再走公共连接器（c7eff5c9）。Self-built WeCom app callbacks — Operators running a self-hosted WeCom app can configure native app callbacks for agent-driven replies without routing through public connectors (c7eff5c9).
• 管理控制台新增 SMTP 快速设置预设 — 管理控制台提供覆盖主流事务型邮件服务商的快速设置预设，运维几次点击即可完成接入（493bb81d）。SMTP quick-setup presets in the admin console — The admin console surfaces SMTP quick-setup presets matching the most common transactional providers so operators can finish onboarding in a few clicks (493bb81d).
• Qwen ACP 用量支持与 ACP 事件节流 — 智能体现在可上报 Qwen ACP 用量，ACP 事件管线也通过节流降低开销，在保留 transcript 完整性的同时降低成本（72c555dd、a0093416）。Qwen ACP usage support and ACP event throttling — Agents now report Qwen ACP usage and the ACP event pipeline throttles inserts, lowering cost and overhead while preserving transcript fidelity (72c555dd, a0093416).
• 安装包内置 Pi 与 opencode CLI — 安装包现预置 Pi 独立发行版与 opencode CLI，工作区开箱即拥有自包含的默认智能体运行时面（9511bb7e、37d75ddc）。Bundled Pi and opencode CLIs in the installer — The installer now bundles the Pi standalone release and the opencode CLI so workspaces ship with a self-contained default agent-runtime surface (9511bb7e, 37d75ddc).
• 降级自主子工单创建 — 运行时提示词与内置技能不再鼓励自主创建子工单，团队需要显式启用，以保留人工审核环节（#1047）。De-escalated autonomous sub-ticket creation — The runtime prompt and builtin skills no longer encourage autonomous sub-ticket creation; teams opt in explicitly to keep human review in the loop (#1047).
• Token 用量恢复与待上报用量 — 智能体任务在异常终止时从会话产物中恢复 token 用量、报告待上报的 Pi 用量，并使用三语 i18n 标准化取消/重试错误码（#1071）。Token-usage recovery and pending usage reporting — Agent tasks recover token usage from session artifacts on abnormal termination, report pending Pi usage, and standardize cancel/retry error codes with trilingual i18n (#1071).
• 前端在存储、语言区域与 transcript 上的韧性 — 前端存储隔离持续加固、浏览器语言区域回退接受更多候选，长会话下智能体 transcript 分栏布局依旧可用（#1053）。Front-end resilience for storage, locales, and transcripts — Front-end storage isolation continues to harden, browser-locale fallback accepts more candidates, and the agent transcript split layout stays usable on long sessions (#1053).
• CLI 持久标志查找与隔离 — CLI 通过统一查找解析持久标志，并隔离测试环境，修正脚本化场景下的标志解析边界问题（#1044）。CLI persistent flag lookup and isolation — The CLI resolves persistent flags through a unified lookup and isolates the test environment, fixing flag-resolution edge cases in scripted flows (#1044).
• 仅 GitHub 的 Nightly 工作流与发布同步 Webhook — Nightly 构建改为仅 GitHub 的工作流，发布到 GHCR 后触发到华为云的发布同步 Webhook，并裁剪了冗余的二进制别名（04c3fab4、92910ad0）。Nightly GitHub-only workflow with release-sync webhook — Nightly builds now ship via a GitHub-only workflow that publishes to GHCR and triggers the release-sync webhook to Huawei Cloud, with redundant binary aliases pruned (04c3fab4, 92910ad0).

新增Copy Anchor LinkAddedCopy Anchor Link

• 带资源权限与 envVars 遮蔽的资产定义修订历史（#1085）。Definition revision history with resource permissions and envVars masking (#1085).
• 带富预览与运行时间线导航的智能体运行历史（#1052）。Agent run history with rich previews and run-timeline navigation (#1052).
• 全工作区统一的 Chat 会话（#1059）。Unified chat sessions across the workspace (#1059).
• 标准化的 MCP transcript 徽章与事件颜色矩阵（#1052）。Standardized MCP transcript badge and event color matrix (#1052).
• 智能体运行时的 Qwen ACP 用量支持（72c555dd）。Qwen ACP usage support for the agent runtime (72c555dd).
• 自建 WeCom 应用回调（c7eff5c9）。Self-built WeCom app callbacks for agent-driven replies (c7eff5c9).
• 管理控制台的 SMTP 快速设置预设（493bb81d）。SMTP quick-setup presets in the admin console (493bb81d).
• 安装包内置的 Pi 独立发行版与 opencode CLI（9511bb7e、37d75ddc）。Bundled Pi standalone release and opencode CLI in the installer (9511bb7e, 37d75ddc).
• 待上报 Pi 用量与异常终止时的 token 用量恢复（#1071）。Pending Pi usage reporting and token-usage recovery on abnormal termination (#1071).
• 三语 i18n 化的取消/重试错误码（#1071）。Standardized cancel/retry error codes with trilingual i18n (#1071).
• 智能体 transcript 对话框中针对失败与取消任务的重试按钮（#1065）。Retry button in the agent transcript dialog for failed and cancelled tasks (#1065).
• Antigravity transcript 富化与沙箱思考流解析（#1045）。Antigravity transcript display enrichment with sandbox thinking stream resolution (#1045).
• 仅 GitHub 的 Nightly 工作流与发布同步 Webhook（04c3fab4、92910ad0）。Nightly GitHub-only workflow with GHCR publishing and release-sync webhook (04c3fab4, 92910ad0).
• 与最新 CLI 对齐的 mop 技能快照。mop skill snapshot aligned to the latest CLI surface.

变更Copy Anchor LinkChangedCopy Anchor Link

• Chat 会话在工作区范围内统一，并强制成员会话访问校验（#1059）。Chat sessions unify across the workspace with member-session access enforcement (#1059).
• 节流 ACP 事件插入以降低开销（a0093416）。ACP event inserts are throttled to reduce overhead (a0093416).
• 提示词安全边界对工作目录与文件系统强制约束（#1049）。Prompt security boundaries enforce the working directory and filesystem containment around prompt execution (#1049).
• 前端 i18n 插值使用双花括号，并区分智能体环境保存流程（#1077）。Front-end i18n interpolation uses double curly braces and disambiguates the agent environment save flow (#1077).
• 工作区与账号设置共享统一的 RESTful 路由面（#1059）。Workspace and account settings share a unified restful route surface (#1059).
• 任务回滚时恢复触发器事件过滤器与启用状态。Trigger event filters and enabled state are restored during job rollback.
• 服务端保留通道清理与 cron 日志。Channel cleanup and cron logs are retained on the server side.
• 移除遗留的 v1 提示词与黄金测试套件；运行时提示词统一走 slim v2 路径（#1049）。Legacy v1 prompt and golden test harness removed; the runtime prompt uses the slim v2 path exclusively (#1049).
• Nightly 工作流发布到 GHCR 后触发到华为云的发布同步 Webhook，并裁剪冗余二进制别名（04c3fab4、92910ad0）。Nightly workflow publishes to GHCR and triggers the release-sync webhook to Huawei Cloud, with redundant binary aliases pruned (04c3fab4, 92910ad0).

修复Copy Anchor LinkFixedCopy Anchor Link

• 资产定义修订历史强制资源权限并遮蔽 envVars（#1085）。Definition revision history enforces resource permissions and masks envVars (#1085).
• 仅当存在活跃任务时智能体任务徽章才显示。Agent task badge only renders when active tasks exist.
• 隔离子工单查询缓存，避免持续加载转圈（#1053）。Sub-ticket query cache is isolated to prevent continuous loading spin (#1053).
• 浏览器语言区域回退接受更多候选并尊重只读候选。Browser locale fallback accepts more candidates and respects readonly locales.
• 前端对配置文件路径与名称做行内校验，避免 toast 阻塞。Front-end inline validation prevents toast blocking on config file path and name.
• 任务运行表使用定宽网格列保持布局稳定。Job run table uses fixed-width grid columns for consistent layout.
• 回放任务执行前校验任务归属。Replay job ownership is validated before execution.
• 任务结束时冻结已完成的任务时长。Completed task duration is frozen when the task ends.
• 完成后报告待上报的 Pi 用量（5bb3cfd4）。Pending Pi usage is reported on completion (5bb3cfd4).
• 异常终止的智能体任务从会话产物中恢复 token 用量（b9ff8bed）。Agent tasks recover token usage from session artifacts on abnormal termination (b9ff8bed).
• 在恢复的 Claude Code 会话中，RecoverSessionUsage 不再重复计算历史 token。Historical tokens are not double-counted in RecoverSessionUsage on resumed Claude Code sessions.
• 终止前等待 stderr 诊断输出，协议未完整时保留 stderr。Stderr diagnostics are awaited before termination and stderr is retained on incomplete protocol.
• 长会话下启用智能体 transcript 分栏布局。Agent transcript split layout is enabled for long sessions.
• 重试对话框的取消操作不再关闭智能体 transcript 对话框。Retry dialog cancellation no longer dismisses the agent transcript dialog.
• 恢复服务端 cron 与通道日志保留。Cron and channel log retention is restored server-side.
• 更新时刷新附件预览序列。Attachment preview sequence is refreshed on update.
• 工单标题下方渲染任务结果摘要。Task result summaries render in the ticket header.
• 内联配置文件告警定位限定在行内错误信息上。Inline config-file alert locator is scoped to the inline error message.
• 使用沙箱前探测 bwrap 能力。Sandbox bwrap capabilities are probed before use.
• 跨智能体交接时保留人工任务来源。Human task provenance is preserved across agent handoffs.
• 保留集成返回导航状态。Integration back navigation state is preserved.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 资产定义修订历史强制资源权限并遮蔽 envVars，避免敏感配置通过审计视图泄漏（#1085）。Definition revision history enforces resource permissions and masks envVars in audit views (#1085).
• 提示词安全边界对工作目录与文件系统强制约束，堵住提示词越界访问运行时沙箱的已知路径（#1049、#1047）。Prompt security boundaries now enforce workdir and filesystem containment around prompt execution, closing a known way for prompts to traverse outside the intended runtime sandbox (#1049, #1047).
• 不再盲目等待 provider stderr，避免智能体运行时在异常提供方流上阻塞。Provider stderr is no longer awaited blindly, preventing the agent runtime from blocking on misbehaving provider streams.

升级提示Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 资产定义修订历史现在强制资源权限并遮蔽审计视图中的 envVars。此前依赖修订中原始 envVars 的运维请复核定义审计策略并同步更新读取修订负载的工具（#1085）。Definition revision history now enforces resource permissions and masks envVars in audit views. Operators that previously relied on raw envVars capture in revisions must review their definition audit policy and update tooling that reads revision payloads (#1085).
• 提示词安全对工作目录与文件系统边界强制约束。此前依赖跨工作区边界访问文件系统的自定义提示词与技能将在运行时被拒绝；请审阅提示词与技能定义中需要收紧的路径访问（#1049、#1047）。Prompt security now enforces workdir and filesystem boundaries around prompt execution. Custom prompts and skills that previously relied on filesystem traversal outside the workspace boundary will be refused at runtime; review prompt and skill definitions for any path access that should be tightened (#1049, #1047).
• Nightly 构建改为仅 GitHub 的工作流，发布到 GHCR 后触发到华为云的发布同步 Webhook，并裁剪了制品矩阵中的冗余二进制别名。此前从其他镜像拉取 Nightly 制品的运维请将拉取源切换到新的 GHCR 路径（04c3fab4、92910ad0）。Nightly builds now ship via a GitHub-only workflow that publishes to GHCR and triggers the release-sync webhook to Huawei Cloud, with redundant binary aliases pruned from the artifact matrix. Operators that previously pulled nightly artifacts from a different registry should update pull sources to the new GHCR path (04c3fab4, 92910ad0).

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 资产拓扑可视化与原生 Archify 集成 — 引入交互式拓扑浏览器、图投影器以及原生 Archify 编写流程。运维可以直接以图形式浏览资产关系、推导服务到基础设施的依赖路径，并通过 Archify 双向同步拓扑清单（#986）。Asset topology visualization and native Archify integration — Interactive topology explorer with graph projector and native Archify authoring flows. Operators can navigate the asset graph visually, derive service-to-infrastructure paths, and round-trip topology manifests through Archify (#986).
• 资产定义版本历史与回滚 — 每个资产定义在工作区范围内都拥有完整的审计历史、版本差异比对、按精确版本号查询以及一键回滚能力，规避误编辑风险并支持跨环境的安全晋升（#1022、#1035、#1036）。Asset definition revision history and rollback — Workspace-scoped audit history for every asset definition with a comparison view, exact-version query filter, and one-click rollback to a selected revision. Closes the loop on accidental manual edits and supports safe promotion across environments (#1022, #1035, #1036).
• 基于 cgroup v2 的资源守护熔断器 — 主动 CPU 跑飞、磁盘 I/O 与 PSI 熔断器配合任务级 cgroup 隔离，在不具备 systemd 的环境回退到 procfs，并在 systemd 单元模板中自动写入 Delegate=yes。失控任务自此具备明确的爆炸半径上限（#1032、提交 032db8/33401a/f5e93f）。Resource guard circuit breakers via cgroup v2 — Active CPU runaway, disk I/O, and PSI circuit breakers plus per-task cgroup containment, procfs fallback for hosts without systemd, and Delegate=yes in unit templates. Daemons now have an enforced blast-radius ceiling for runaway tasks (#1032, commits 032db8/33401a/f5e93f).
• 原生资产 SSH 凭据解析 — mop ssh 直接从工作区资产本体解析授权资产、账号与凭据，并接入资产驱动以提供统一的 SSH 调度（#995）。Native asset SSH credential resolution — mop ssh resolves authorized assets, accounts, and credentials natively from the workspace asset ontology and integrates with the asset driver for unified SSH dispatch (#995).
• mop ssh 本机短路 — 通过 machine_id 自动识别本机目标，跳过网络往返直接执行，免去配置自连接的开销（#1000）。Local machine short-circuit for mop ssh — Commands targeting the local machine are detected through machine_id and executed directly without round-tripping the network stack, eliminating the need for users to set up self-loops (#1000).
• 资产界面优化 — 拓扑图支持滚轮缩放、节点详情列式弹窗、跨会话广播更新、非逻辑资产的引导式空状态以及聚合未分配视图（#1042、#1020、#1025、提交 8878261、#1001）。Asset UI refinements — Topology graph gains wheel zoom, column-based popup docking for node details, broadcast updates across sessions, a guidance empty state for non-logical assets, and an aggregated unassigned-asset view (#1042, #1020, #1025, commits 8878261, #1001).
• 智能体任务原地检索与 transcript 查看 — 支持按 ID 检索智能体任务，可点击会话中的来源标签直接进入 transcript 查看，无需再离开工作区界面（#1033、#1030）。In-place agent task search and transcript viewer — Search agent tasks by ID, click through to the source chip in conversations, and inspect the full transcript inline without leaving the workspace surface (#1033, #1030).
• 三明治式提示词安全边界与反探测防护 — 新的提示词结构以显式作用域分隔不可信内容，并可识别常见提示词探测模式，阻止凭据或指令被窃取（#1014）。Sandwich prompt security boundaries and anti-probing defense — New prompt schema isolates untrusted content with explicit scope markers and detects common prompt-probing patterns to keep agent runtimes from leaking credentials or instructions (#1014).
• 作业调度触发器界面重构 — 文案改用自然语句、原生时间选择器、缩写的星期标签胶囊，并明确 Quartz 星期语义，让排程编辑的体验贴近口语表达（#991）。Overhauled Job Schedule trigger UI — Sentence-style trigger copy, native time pickers, abbreviated weekday pills, and clarified Quartz weekday semantics. The editing flow now mirrors how operators describe schedules out loud (#991).
• 特性开关动态加载 — 特性开关在工作区设置页面运行时解析，废弃的 effective 端点被移除，省去一次往返并为按用户粒度的覆盖奠定基础（#977）。Dynamic feature-flag loading — Feature flags resolve at runtime from the workspace settings page instead of going through the deprecated effective endpoint, removing a redundant round-trip and paving the way for per-user overrides (#977).
• 审计覆盖矩阵脚本 — 自动维护子系统到测试用例的机器可读覆盖矩阵，主动暴露功能、路由与端到端覆盖盲区（#980）。Audit-coverage-matrix script — Maintains a machine-readable coverage matrix that maps subsystems to the tests touching them, surfacing blind spots in feature, router, and E2E suites automatically (#980).
• 遥测流式持久化 — In-flight 阶段的 token 采样实时回流守护进程，并在任务终止时持久化，使早期终止的运行也能得到准确的用量统计（#1037）。Telemetry streaming persistence — In-flight token sampling streams to the daemon and persists telemetry on task termination so cost and usage analytics are accurate even for early-terminated runs (#1037).
• CLI 分页元数据 — 所有分页 CLI 命令开始报告总数、页大小与上下页游标，便于脚本化处理大规模结果集（提交 2b7cd7）。CLI pagination metadata — Every paginated CLI command now reports total count, page size, and next/prev cursors, enabling scripted workflows to walk large result sets reliably (commit 2b7cd7).

新增Copy Anchor LinkAddedCopy Anchor Link

• 资产拓扑可视化、图投影器与原生 Archify 集成（#986）。Asset topology visualization, graph projector, and native Archify integration (#986).
• 资产定义审计历史、差异视图、按精确版本号查询以及一键回滚（#1022、#1035、#1036）。Asset definition revision audit history, comparison view, exact-version query, and one-click rollback (#1022, #1035, #1036).
• 基于 cgroup v2 的资源守护 CPU 跑飞、磁盘 I/O、PSI 熔断器（提交 f5e93f）。Resource guard CPU runaway, disk I/O, and PSI circuit breakers via cgroup v2 (commit f5e93f).
• 原生资产 SSH 凭据解析与 mop ssh 驱动集成（#995）。Native asset SSH credential resolution and mop ssh driver integration (#995).
• mop ssh 本机短路与 machine_id 校验（#1000）。Local-machine short-circuit and machine_id validation for mop ssh (#1000).
• 资产拓扑图的滚轮缩放、节点详情列式弹窗、广播更新、引导式空状态与未分配聚合视图（#1042、#1020、#1025、#1001）。Topological wheel zoom, column-based popup docking, broadcast updates, guidance empty state, and aggregated unassigned view for assets (#1042, #1020, #1025, #1001).
• 按 ID 检索智能体任务并原地查看 transcript（#1033、#1030）。In-place agent task search by ID and transcript viewer (#1033, #1030).
• 三明治式提示词安全边界与反探测防护（#1014）。Sandwich prompt security boundaries and anti-probing defense (#1014).
• 作业调度触发器界面重构：自然语句、原生时间选择器、星期标签胶囊（#991）。Job Schedule trigger UI redesign with sentence-style copy, native time picker, and weekday pills (#991).
• 特性开关动态加载并移除已废弃的 effective 端点（#977）。Dynamic feature-flag loading and removal of the deprecated effective endpoint (#977).
• 自动端到端覆盖盲区发现的审计覆盖矩阵脚本（#980）。Audit-coverage-matrix script for automated end-to-end gap discovery (#980).
• 工单通知直开按钮及作业通知中链接工单的高亮显示（#1017、#987）。Direct open-ticket button on ticket notifications plus linked-ticket chip on job notifications (#1017, #987).
• 失败任务的重试动作以及对外暴露的任务动作能力。Failed-task retry action and exposed task action capabilities.
• CLI 全量分页元数据（提交 2b7cd7）。CLI pagination metadata across paginated commands (commit 2b7cd7).
• 基于 cgroup v2 的原生 I/O 遥测，含 procfs 回退与 Delegate=yes 单元模板（#1032、提交 032db8/33401a）。Native cgroup v2 I/O telemetry with procfs fallback and Delegate=yes unit templates (#1032, commits 032db8/33401a).
• Database 概念 Schema 与 SwissQL profile 文档（#1008）。Database concept schema with SwissQL profile documentation (#1008).
• 技能文件保存保留支撑文件与配置（#1021）。Skill file save preserving supporting files and config on update (#1021).
• 根 meta.json 中的工具注册及自动导航校验（#1011）。Tool registration in meta.json with automated navigation check (#1011).
• 针对资产子系统、智能体任务路径、SSH / 守护进程 / 升级 CLI、资源守护配置分支以及破坏性工单分支的行为驱动 Go 测试（#985-#1023）。Behavior-focused Go tests for asset subsystems, agent task paths, SSH/daemon/upgrade CLIs, runtime-guard config branches, and destructive ticket branches (#985-#1023).
• asset、shortcuts、widget 三个特性开关的端到端旅程（#988、#989、#990）。End-to-end journeys for the asset, shortcuts, and widget feature flags (#988, #989, #990).
• 三层 IT 资产本体文档、SSH 资产联动指南以及与 CLI v2.2.8 对齐的 mop 技能快照。Three-tier asset ontology docs, ssh-asset linkage guide, and refreshed mop skill snapshot aligned to CLI v2.2.8.

变更Copy Anchor LinkChangedCopy Anchor Link

• 作业调度界面采用自然语句文案、原生时间选择器与星期标签胶囊（#991）。Job Schedule UI uses sentence-style trigger copy, native time pickers, and weekday pills (#991).
• 特性开关在工作区设置中动态加载；废弃的 effective 端点已移除（#977）。Feature flags load dynamically from workspace settings; the deprecated effective endpoint was removed (#977).
• 智能体任务历史支持按 ID 检索并原地查看 transcript（#1033、#1030）。Agent task history supports search by ID with in-place transcript view (#1033, #1030).
• 技能文件需要显式保存，且更新时保留支撑文件与配置（#1021）。Skill editing requires explicit save and preserves supporting files plus config (#1021).
• Archify 引导式流程在多语言中统一采用 "流程" 这一措辞。Archify guided flow uses the term "flow" consistently across locales.
• CI 工作流加入上传超时、重试与 WeCom 失败告警（#998）。CI workflows gained upload timeouts, retries, and WeCom failure alerts (#998).
• 工单面包屑规范化为标准入口，标题栏使用分页总数（#1040）。Ticket breadcrumbs normalize to the canonical entry; the header uses the pagination total (#1040).
• apps/web 升级到当前 Next 与 Fumadocs 基线。apps/web is upgraded to a current Next and Fumadocs baseline.
• 资产拓扑展示新增滚轮缩放与节点列式弹窗对接（#1001）。Asset topology presentation gains wheel zoom and column-based node popup docking (#1001).
• IT 资产本体按三层结构（概念、谓词、工具）记录，新增工具套件文档。IT asset ontology is documented as a three-tier hierarchy (concepts, predicates, tools) with a new tools suite.
• 通道集成统一遵循启用标志并合并出站代理处理。Channel integration honors enablement flags consistently and unifies outbound proxy handling.

修复Copy Anchor LinkFixedCopy Anchor Link

• 当资产集包含非逻辑资产时，拓扑展示引导式空状态（#1042）。Topology shows a guidance empty state when the asset set contains non-logical assets (#1042).
• 智能体任务遥测按 in-flight 持续流出并在终止时落库，包括提前终止的场景（#1037）。Telemetry for agent tasks streams in-flight and persists on termination, including early terminations (#1037).
• 未分配作用域递归排除下游基础设施，只显示真正未分配的资产（#1025）。Unassigned scope excludes downstream infrastructure recursively so only true unassigned assets appear (#1025).
• 资产空状态卡片在无数据时不再展示占位应用，未分配资产被聚合展示（#1020）。Asset empty-state card no longer shows the placeholder app when there are none, and unassigned assets are aggregated (#1020).
• 通道代理处理、出站持久化与启用一致性得到统一。Channel proxy handling, outbound persistence, and enablement are honored across integrations.
• 修订审计钩子覆盖缺失定义场景，列表接口支持按精确版本号过滤（#1035、#1036）。Revision audit hooks catch missing definitions and the listing accepts an exact-version filter (#1035, #1036).
• systemd 管理的部署上守护进程单元携带 Delegate=yes，确保 cgroup v2 委托生效（#1032、提交 032db8）。Daemon unit templates carry Delegate=yes so cgroup v2 delegation works on systemd-managed deployments (#1032, commit 032db8).
• 智能体任务运行在专用 cgroup 中，单元测试中 cgroup 启动器的 FD 关闭得到确定性保护（#1010、提交 33401a）。Agent tasks run inside dedicated cgroups and the cgroup launcher closes its FDs deterministically in tests (#1010, commit 33401a).
• 上报的工具名称上限收紧，防止异常工具淹没守护进程日志（提交 ed977e7）。Reported tool names are capped so a runaway tool cannot overwhelm daemon logs (commit ed977e7).
• 作业调度星期标签胶囊采用缩写、预览文案更直观（提交 0eb53aa/c94344）。Job Schedule weekday pills are abbreviated and the preview wording is clarified (commits 0eb53aa/c94344).
• 文档工具注册到根 meta.json 并在 CI 中校验导航（#1011）。Documented tools are registered in the root meta.json and the navigation is verified in CI (#1011).
• 工作区 FAB 子项在所有视图中保持稳定标识。Workspace FAB children identify consistently across views.
• 守护进程 license 处理器复用挂起请求 ID 而非每次新建。Daemon license handler reuses the pending request id rather than minting a new one.
• 通道直发消息持久化，通道启用优先于存根。Channel direct sends are persisted; channel enablement takes precedence over stubs.
• 安全页统一列出系统级保留面包屑。The security page lists reserved system breadcrumbs uniformly.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 三明治式提示词强制作用域限制并识别常见探测模式，阻断凭据或指令泄露（#1014）。Sandwich prompt enforces content scoping and detects common probing patterns to prevent credential or instruction leakage (#1014).
• 来自 v2.2.7 的前端存储隔离加固持续生效。Frontend storage isolation improvements (carry-over hardening from v2.2.7) remain in effect.

升级提示Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 仍依赖已废弃的 /effective 特性开关端点的用户必须迁移至直接读取工作区设置页面；该端点已在 v2.2.8 移除。Operators who rely on the deprecated /effective feature-flag endpoint must migrate to reading the workspace settings page directly; the endpoint is removed in v2.2.8.
• 资产定义现已具备可视化审计历史，审核人员可对比并回滚至任意先前版本。Asset definitions now have an audit history visible in the workspace UI; reviewers can compare and roll back to any prior version.
• 资源守护改用 cgroup v2 并在 systemd 单元中自动注入 Delegate=yes。使用 systemd < v244 的自托管部署请升级 systemd 或以用户态模式运行资源守护。Resource guard is now backed by cgroup v2 with Delegate=yes injected into systemd unit templates. Self-hosted deployments on systemd older than v244 should upgrade systemd or run the resource guard in user-only mode.
• runtime_guard 与 asset 特性开关改为动态加载，请在生产环境依赖守护报警或资产拓扑前，先确认其出现在工作区设置中。The runtime_guard and asset feature flags are loaded dynamically; verify they appear in workspace settings before relying on guard breaches or asset topology in production.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• IT 资产本体与拓扑图 — 内置 17 个权威概念与 7 个规范谓词，配合严格的 JSONSchema 属性校验、基于权重的 Dijkstra / BFS 最短路径求解器、多跳邻域遍历以及 mop asset apply/inspect/resolve/topology/path/concept list|get CLI 命令面；同步提供 mopheus-assets 内置技能以及三语文档（#515）。IT asset ontology and topology graph — 17 authoritative concepts and 7 canonical predicates with strict JSONSchema attribute validation, weighted Dijkstra and BFS shortest-path solver, multi-hop neighborhood traversal, and a CLI surface (mop asset apply/inspect/resolve/topology/path/concept list|get). Ships with the mopheus-assets builtin skill and trilingual documentation (#515).
• JumpServer SSH 提供商 — 首个 SSH 提供商，覆盖 mop ssh list|exec|upload。连接前会解析授权资产与账号，支持连接用户、脚本、环境变量、密钥与 Connection Token 鉴权，JumpServer 节点树缓存以及 KoKo SFTP 上传（#964）。JumpServer SSH provider — First SSH provider with mop ssh list|exec|upload. Resolves authorized assets and accounts before connecting, supports connection users, scripts, environment variables, private-key and Connection Token authentication, JumpServer node-tree caching, and SFTP upload via KoKo (#964).
• 运行时配置模板分组 — 运行时配置文件被建模为由 CLI 组拥有多个文件的结构。mes-cli 组同时暴露 ~/.mes/config.yaml 与敏感文件 ~/.mes/token.env 并加密存储。新增 mop user config-file render|get|delete 命令以及 Web UI 分组渲染（#950）。Grouped runtime configuration templates — Runtime config files are modelled as CLI groups owning one or more files. The mes-cli group now exposes both ~/.mes/config.yaml and the sensitive ~/.mes/token.env with encrypted storage. Adds mop user config-file render|get|delete and grouped Web UI rendering (#950).
• 通道安装消息与技能 — 新增 mop channel 安装、绑定、聊天与发送 CLI 流程，安装感知的智能体授权、发送持久化、mopheus-channel-messaging 内置技能以及 E2E 覆盖。Channel installation messaging and skill — New mop channel install, bind, chat, and send flows with installation-aware agent authorization, outbound persistence, the mopheus-channel-messaging builtin skill, and E2E coverage.
• 通道留存清理 — 新增由 channel_retention Cron 驱动的清理端点，配合仓储与服务层管道以清除过期发送记录与孤儿安装状态（#934 衍生）。Channel retention cleanup — New channel_retention cron-driven cleanup endpoint plus repository and service plumbing to purge stale outbound records and orphaned installation state (#934-adjacent).
• 守护进程跨会话断点续传 — 新增 original_agent_task_id 血统追踪、一级孤立尝试续传、二级多跳祖先会话继承、Antigravity 会话持久化到工作区提供商状态以及结构化重试提示词（#936）。Daemon session-inherited breakpoint resumption — Adds original_agent_task_id lineage, Tier 1 orphan attempt resumption, Tier 2 multi-hop ancestor session inheritance, Antigravity conversation persistence into workspace provider-state, and structured retry prompt guidance (#936).
• Swagger API 文档 — 补齐 HTTP 端点文档并生成 Swagger 资源，可选 Swagger UI、Bearer 鉴权元数据以及跨运行时配置的集中环境解析。Swagger API documentation — Documented HTTP endpoints with generated Swagger assets, optional Swagger UI, Bearer auth metadata, and centralized environment parsing across runtime configuration.
• 工作区设置中的资产与运行时守护特性开关 — 补齐 asset（IT 资产本体）和 runtime_guard（运行时任务守护）特性开关，将 widget 改名 "Ticket Widgets"，并按字典序排列以与 Admin Site 对齐（#970）。Asset and runtime-guard feature flags in workspace settings — Adds the missing asset (IT Asset Ontology) and runtime_guard (Runtime Task Guard) flags to workspace features, renames widget to "Ticket Widgets", and orders features alphabetically to match the Admin Site (#970).
• 前端存储加固 — 在 localStorage / sessionStorage 被拒绝、只读或耗尽的浏览器与嵌入式场景中稳定运行（#961）。Hardened frontend storage — Survives browsers and embedding contexts where localStorage or sessionStorage are denied, read-only, or exhausted (#961).
• WeCom 发布通知 — 发布工作流在配置了 WeCom webhook 密钥时，会在成功后发送通知消息。WeCom release notifications — The release workflow now posts a success message to WeCom when the configured webhook secret is set.
• 资产拓扑探查智能体技能 — mopheus-assets 让智能体在故障排查与爆炸半径分析中查询、解析与遍历企业资产拓扑。Asset topology explorer agent skill — mopheus-assets lets agents query, resolve, and navigate enterprise asset topologies for incident response and blast-radius analysis.

新增Copy Anchor LinkAddedCopy Anchor Link

• IT 资产本体、拓扑图与概念校验（#515）。IT asset ontology, topology graph, and concept validation (#515).
• mop asset 命令族：apply、inspect、resolve、topology、path 与 concept list|get。mop asset command suite: apply, inspect, resolve, topology, path, and concept list|get.
• IT 资产三语（英/简中/日）文档与 Excel 资产台账模板。IT asset documentation in English, Simplified Chinese, and Japanese with an Excel asset ledger template.
• JumpServer SSH 提供商及 mop ssh list|exec|upload 与工程文档（#964）。JumpServer SSH provider with mop ssh list|exec|upload and engineering documentation (#964).
• 运行时配置模板分组，含嵌套 Files 与 mes-cli/token.env 敏感模板（#950）。Grouped runtime configuration templates with nested Files entries and the mes-cli/token.env sensitive template (#950).
• 通道安装消息、绑定 CLI 流程、发送持久化与 mopheus-channel-messaging 内置技能。Channel installation messaging, binding CLI flows, outbound persistence, and the mopheus-channel-messaging builtin skill.
• 通道留存清理 Cron、仓储支持以及工作区分域留存配置。Channel retention cleanup cron job, repository support, and workspace-scoped retention configuration.
• 守护进程跨会话断点续传，含重试血统与 Antigravity 会话持久化（#936）。Daemon session-inherited breakpoint resumption with retry lineage and Antigravity conversation persistence (#936).
• Swagger 文档与环境配置，可选 Swagger UI 集成。Swagger docs and env config with optional Swagger UI integration.
• 工作区设置中的 asset 与 runtime_guard 特性开关以及 useFeatureFlags Hook（#970）。asset and runtime_guard feature flags in workspace settings and the useFeatureFlags hook (#970).
• 与 widget、memory 并列的 runtimeGuard 与 asset 特性开关。runtimeGuard and asset flags alongside the existing widget and memory flags.
• 钉钉集成截图与全新搭建指南。DingTalk integration screenshots and refreshed setup guide.
• 兼容 BSD sed 的在线 CLI 安装脚本。BSD-sed-compatible online CLI install scripts.
• 飞书音频消息下载修复，钉钉与企业微信媒体下载生命周期日志。Lark audio-message download fix and media download lifecycle logging for DingTalk and WeCom.
• Admin Site 与工作区设置按规范顺序展示特性开关。Workspace feature-flag ordering in Admin Site and Workspace Settings to match the canonical list.
• Web UI 配置子菜单与 SkillFileTree 目录节点文件创建控件。Config-file submenus and SkillFileTree directory-node file creation controls in the Web UI.

改进Copy Anchor LinkChangedCopy Anchor Link

• 通道发送加固：跨集成的重试语义、键/原因注册表与作用域执行（#911 续作）。Outbound channel delivery hardened with retry semantics, key/reason registries, and scope enforcement across all integrations (#911 follow-ups).
• 通道安装存储在绑定令牌轮换与重绑期间保留用户配置快照。Channel installation store retains user-profile snapshots across binding-token rotations and rebinds.
• mop profile 与配置文件按"全局基线 + 工作区覆盖"解析，模板改为服务端管理。mop profile and config files are resolved from a global baseline plus per-workspace overrides; templates are now server-owned.
• mop channel CLI 新增 install、bind、chat、send 子命令，支持安装感知的智能体任务授权。mop channel CLI gains install, bind, chat, and send subcommands with installation-aware agent-task authorization.
• 在 localStorage / sessionStorage 不可用、只读或耗尽时回退至内存态（#961）。Frontend storage falls back to in-memory state when localStorage or sessionStorage are unavailable, read-only, or exhausted (#961).
• 运行时下拉隐藏已禁用或不可用运行时（#926）。Runtime picker dropdown hides disabled and unusable runtimes (#926).
• Web 管理设置与工作区设置按 asset、git、memory、runtime_guard、shortcuts、widget 规范顺序展示特性。Web admin settings and workspace settings now show asset, git, memory, runtime_guard, shortcuts, and widget features in a canonical order.
• 技能搜索采用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局。Skill search uses a CJK-friendly multi-keyword builder; ticket list context menu and detail actions use a slimmer layout.
• 提供商会话来源与任务历史元数据通过规范会话记录传播，并改进助手消息去重。Provider session sources and task-history metadata propagate via the canonical session record and dedupe assistant messages.

修复Copy Anchor LinkFixedCopy Anchor Link

• secretredact 屏蔽 Bearer、Basic 与 Token 凭据，同时保留鉴权方案前缀。secretredact masks Bearer, Basic, and Token values in sensitive assignments while preserving the authentication scheme.
• 通道安装重绑期间保留用户配置（fix(integrations) 系列）。Channel install rebinds preserve user profiles across binding-token rotations (fix(integrations) series).
• 通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域。Channel media gates no longer block retryable delivery and respect agent execution scope.
• 前端存储在隐私模式或沙箱嵌入场景下不再崩溃（#961）。Front-end storage no longer crashes in private browsing or sandboxed embedding contexts (#961).
• Tiptap 在嵌套列表项内保留围栏代码块（#941）。Tiptap preserves fenced code blocks inside nested list items (#941).
• 当无智能体触发且无具名阻塞目标时，工单评论触发器预览静默；智能体芯片展示来源、点击跳过/恢复提示（#934）。Comment trigger preview is silent when no agent is triggered and no named blocked targets exist; agent chips render with source attribution and click-to-skip/click-to-restore hints (#934).
• 仅当受让人为团队时才发出"团队负责人不可用"原因。Comment team-leader unavailable reason only emits when the assignee is a team.
• 守护进程任务令牌检查不再在 E2E 主机环境下反转（#928）。Daemon task-token check no longer inverts on E2E host environments (#928).
• 守护进程沙箱凭据、profile 恢复记录与 Antigravity 运行时沙箱边界处理保持一致。Daemon sandbox creds, profile-recovery records, and Antigravity runtime sandbox isolation now share consistent boundary handling.
• 删除父工单时在删除事务内将子工单的 parent_ticket_id 置空（#942）。Ticketing: child tickets are unlinked (parent_ticket_id = NULL) on parent ticket deletion within the deletion transaction (#942).
• 智能体任务重试保留触发评论字段与血统。Agent task retry preserves trigger-comment fields and lineage.
• 删除工作区时级联清理 RBAC 数据以及 user_role / team_member 记录。Workspace deletion cascades RBAC data and cleans user_role / team_member rows.
• Cron 调度关闭硬化，避免重复 close；私有绑定与调度循环统一。Cron scheduler shutdown is hardened against double close; private binds are unified with the scheduling loop.
• 配置文件保存失败时前端展示本地化降级提示。Config-file save failures surface localized fallback messages in the frontend.
• mopheus channel CLI 安装消息与 Web UI 安装向导对齐。mopheus channel CLI install messages align with the Web UI installation wizard.
• Antigravity 流式文本差分在步骤边界聚合以降低开销（#896 续作）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896 follow-up).
• mop user config-file templates 正确展示分组模板与单个文件路径。mop user config-file templates correctly displays grouped templates and individual file paths.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 环境变量风格赋值中的 Bearer、Basic、Token 凭据在保留鉴权方案的同时被屏蔽。Bearer, Basic, and Token credentials in env-var-style assignments are masked while keeping the authentication scheme visible.
• 集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• Google Antigravity CLI 提供商 — 原生支持 agy CLI 运行时，自动探测并启用 stream-json 流水线、实时转录流式传输、通过 --conversation <id> 恢复会话以及下一轮引导能力，配合流式边界聚合与运行时沙箱隔离加固（#874、#894、#896）。Google Antigravity CLI provider — Native runtime support for the agy CLI with auto-detection, stream-json pipeline, live transcript streaming, conversation resumption via --conversation <id>, and next-turn steering, hardened by runtime sandbox isolation and step-boundary streaming aggregation (#874, #894, #896).
• 工单交互式决策小组件 — 工单评论与时间线中支持 single-select、multi-select 与 confirm-action 组件，配备乐观并发锁、审计日志、工作区级特性开关、mopheus-ticket-widgets 内置技能以及精简提示词微规范（#860、#907）。Interactive decision widgets for tickets — Single-select, multi-select, and confirm-action widgets in ticket comments and timelines with optimistic concurrency locks, audit log, workspace feature flag, the mopheus-ticket-widgets builtin skill, and a slim-prompt micro-spec (#860, #907).
• 工作区分域用户配置文件 — 环境变量与配置文件按工作区隔离存储，加密保存，提供服务端模板、二进制预览以及 mopheus user env / mopheus user config-file CLI 命令（#901、#885）。Workspace-scoped user profiles — Environment variables and configuration files are isolated per workspace with encrypted values, server-owned templates, binary previews, and the mopheus user env / mopheus user config-file CLI surface (#901, #885).
• 守护进程默认启用文件系统沙箱 — 守护进程默认激活文件系统沙箱，需通过 MOPHEUS_DAEMON_SANDBOX=false|0|off 显式关闭，新策略在重启与回归测试中得到保留（#906、#843）。Filesystem sandbox enabled by default — The daemon now activates the filesystem sandbox unless explicitly opted out via MOPHEUS_DAEMON_SANDBOX=false|0|off; the new policy survives restarts and is covered by regression tests (#906, #843).
• 作业 Quartz 计划触发器 — 新增 cron_dialect=quartz 触发器，支持 ? 月份/星期语义、可选 startAt/expiresAt 边界、可视化计划编辑器与未来运行预览，并补齐方言感知的 CLI 帮助（#884）。Quartz schedule triggers for jobs — Add cron_dialect=quartz triggers with ? day-of-month/day-of-week semantics, optional startAt/expiresAt boundaries, an interactive schedule editor with future-run previews, and dialect-aware CLI help (#884).
• 凭据与认证信息脱敏 — 智能体输出会脱敏内嵌凭据，认证环境变量在写入日志前被屏蔽，集成审计表不再泄露敏感标签（系列安全加固）。Credential and auth redaction — Agent output redacts embedded credentials, auth environment values are masked before logging, and the integration audit table no longer leaks sensitive labels (security hardening series).
• 通道异步外发与作用域执行 — 通道通过统一生命周期流异步发送消息，移除不可重试的媒体门禁，并强制执行智能体作用域（#911 及通道重构）。Channel async outbound delivery and scope enforcement — Channels ship messages asynchronously through a centralized lifecycle flow, drop non-retryable media gates, and enforce agent execution scope (#911, channel refactors).
• Worktree 注册中心 — mopheus repo worktree list|prune 协调 bare-repo sidecar 元数据，支持按工作区与工单选择子集，并对脏/未推送 worktree 安全复用或驱逐（#905）。Retained worktree registry — mopheus repo worktree list|prune reconciles bare-repo sidecar metadata, supports per-workspace and per-ticket selectors, and safely reuses or evicts worktrees with dirty/unpushed detection (#905).
• 评论触发器预览与标签化体验 — 工单展示实时评论触发器预览，在标题下方渲染创建者与创建时间，并以共享规范常量统一 "我的工单" 筛选（#909、#923、#921）。Comment trigger previews and label-driven UX — Tickets expose live comment trigger previews, render the ticket creator and creation timestamp below the title, and standardize the My Tickets filter on a shared canonical constant set (#909, #923, #921).
• 自动化任务的结构化收件箱卡片 — 自动化作业运行与智能体任务失败通知升级为结构化卡片，附带快捷操作与转录直链（#868、#840）。Structured inbox cards for automated runs — Automated job-run and agent-task failure notifications now ship structured cards with quick actions and a direct transcript link (#868, #840).

新增Copy Anchor LinkAddedCopy Anchor Link

• Antigravity CLI 提供商，含 stream-json 流水线、转录流、会话恢复，以及提供商选择页的 agy 品牌图标（#874）。Antigravity CLI provider with stream-json pipeline, transcript streaming, conversation resumption, and agy brand logo in the provider picker (#874).
• 交互式决策小组件，含乐观状态、审计日志、React 组件、多语言本地化以及 mopheus-ticket-widgets 内置技能（#860）。Interactive decision widgets with optimistic state, audit log, React components, multilingual localization, and a mopheus-ticket-widgets builtin skill (#860).
• 工作区分域用户环境变量与配置文件，加密存储、服务端模板、二进制只读预览（#901）。Workspace-scoped user environment variables and configuration files with encrypted storage, server-owned templates, and binary read-only previews (#901).
• Quartz 计划触发器、可视化计划编辑器、未来运行预览 API、本地化人类可读计划文案（#884）。Quartz schedule triggers, multi-select schedule editor, future-run preview API, and locale-aware humanized schedule text (#884).
• Worktree 注册中心 CLI 与本地守护 list/prune 端点，按工作区隔离（#905）。Retained worktree registry CLI plus local daemon list/prune endpoints with workspace scope (#905).
• 通道异步外发，统一生命周期 outbound 流。Async outbound channel delivery with a centralized lifecycle outbound flow.
• 工单评论触发器预览（#909）。Comment trigger previews in ticket timelines (#909).
• mop ticket create 与 mop ticket update 新增 --label / --labels 选项（#918）。--label and --labels flags on mop ticket create and mop ticket update (#918).
• mop chat channel list 用于检查通道绑定与提供商作用域。mop chat channel list to inspect channel bindings and provider scoping.
• mop feature list / mop feature check 命令以及只读 mop profile 子命令族（list、show）（#858 及后续）。mop feature list and mop feature check commands plus a read-only mop profile family (list, show) (#858 and follow-up).
• mop 守护升级流程，支持清单驱动的原子化重装。mop daemon upgrade flow with manifest-driven atomic reinstall.
• 工作区分域邮件配置与派发委托，工作区设置中显示附件大小限制。Workspace-scoped email configuration and dispatch delegation plus an attachment-limit summary in workspace settings.
• 作业运行通知卡片，含结构化详情与直链入口（#868）。Job run notification cards with structured details and a direct link to the originating run (#868).
• 智能体任务失败通知，含"查看转录"快捷入口并在收件箱列出失败运行（#840）。Agent task failure notifications with a "view transcript" action and listing of failed runs in the inbox (#840).
• 工单创建者显示名与创建时间渲染在标题下方（#923）。Ticket creator display name and creation timestamp rendered below the title (#923).
• 智能体头像显示在 Web 智能体列表中。Agent avatars in the web agent list.
• 聊天主题支持会话 ID 一键复制。Topic session-id copy button in chat.
• CLI 支持长聊天消息输入；聊天支持智能体会话路由与提供商感知的选择。Long chat message input on the CLI; agent chat routing for sessions with provider-aware selection.
• 决策小组件微规范内联至精简提示词，并随附 mopheus-ticket-widgets 技能参考（#907）。Decision widget micro-spec inlined in the slim prompt and the mopheus-ticket-widgets skill reference (#907).
• 沙箱挂载计划修复与守护进程显式沙箱退出值（#843、#906）。Sandbox mount plan fix and explicit daemon sandbox opt-out values (#843, #906).
• 沙箱凭据隔离、profile 恢复记录隔离、Antigravity 运行时沙箱隔离（#894）。Sandbox credential isolation, profile recovery isolation, and Antigravity runtime sandbox isolation (#894).
• 提供商会话 ID 的订阅级传播及跨重启持久化（#885）。Subscription propagation for provider session IDs and persistence across restarts (#885).
• "我的工单" 默认切换至全工作区作用域与规范筛选常量（#921）。My Tickets default-to-all-scope toggle and canonical filter constants (#921).
• 分域用户快捷命令、Pi 提供商 RPC 迁移以及 Antigravity 品牌图标。Scoped user shortcut commands, Pi provider RPC migration, and the Antigravity brand logo.
• CLI job create --cron-dialect quartz 支持 start-at 与 expires-at 边界。CLI job create --cron-dialect quartz with start-at and expires-at boundaries.
• 新增 Mopheus Chat 与 Event Jobs 中文 ChatOps 集成博客指南。Chinese ChatOps integration blog guide for Mopheus Chat and Event Jobs.
• 提供商集成指南与 Antigravity 提供商文档，覆盖 EN/ZH/JA。Provider integration guide and Antigravity provider documentation in EN/ZH/JA.
• 项目文档新增安全边界指南。Security boundaries guide in the project documentation.

改进Copy Anchor LinkChangedCopy Anchor Link

• 守护进程默认启用文件系统沙箱，仅可通过显式环境变量关闭（#906）。Daemon defaults the filesystem sandbox to enabled; only an explicit environment opt-out disables it (#906).
• 收件箱通知以正交工具栏重新设计，新增取消归档与分域批量操作；自动化作业与智能体失败通知升级为带快捷入口的结构化卡片（#868、#840）。Inbox notifications rearchitected around an orthogonal toolbar with unarchive and scoped batch actions; automated job-run and agent-task failures now ship structured cards with quick actions (#868, #840).
• 通道外发改用异步执行并集中键/原因注册；强制执行智能体作用域，移除不可重试的媒体门禁（#911）。Channel outbound delivery is asynchronous with centralized key/reason registries; agent execution scope is enforced and non-retryable media gates are dropped (#911).
• mop profile 与配置文件按全局基线 + 工作区覆盖解析；模板由服务端下发，移除客户端硬编码（#901）。mop profiles and config files resolve a global baseline plus workspace overrides by path; templates come from the server instead of client-side hard-coding (#901).
• 守护工作任务的跨重启状态持久化、Claude 缓存延迟清理、沙箱凭据与 profile 恢复记录按工作区隔离。Daemon worker tasks persist their state across restarts, defer Claude cache cleanup, and isolate sandbox credentials and profile recovery records.
• 技能搜索使用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局（#900）。Skill search uses a CJK-friendly multi-term builder; ticket list context menu and detail actions use a streamlined layout (#900).
• 智能体创建向导支持对话式创建流程与内置提示模板；工作区引导保留 7 步流程，迁移可幂等重跑。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates; workspace onboarding remains a 7-step flow with idempotent re-runs.
• 提供商会话来源与任务历史元数据贯穿规范会话记录，辅助助手消息去重。Provider session source and task history metadata now flow through the canonical session record for assistant-message dedup.
• 工作区文件中心的 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
• 提供商工作区状态按智能体隔离，MCP 用量按租户统计。Provider workspace state is isolated per agent so MCP usage tracking stays per-tenant.
• Antigravity 流式文本增量在步骤边界聚合以减少开销（#896）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896).
• Antigravity 运行时在沙箱内保留原生 HOME，并在流中断时恢复新会话。Antigravity runtime preserves the native HOME under sandbox and recovers fresh sessions on stream interrupt.

修复Copy Anchor LinkFixedCopy Anchor Link

• 智能体输出脱敏内嵌凭据；认证环境变量写入日志前被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked before logging (fix(security) series).
• 集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.
• 通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域（#911）。Channel media gates no longer block retryable deliveries and respect agent execution scope (#911).
• 通道会话来源元数据在规范会话记录中保持一致。Channel session source metadata is consistently recorded across the canonical session record.
• 工单讨论时间线支持引用回复与统一活动历史。Ticket discussion timeline supports quote replies and a unified activity history.
• 移动端作业弹窗在 Mopheus 壳内可正常滚动。Mobile job dialog scrolls correctly inside the Mopheus shell.
• 作业受让人按工作区隔离，跨工作区触发不会误触发。Job assignees are isolated by workspace so cross-workspace triggers cannot fire.
• 作业 cron 表达式空字段改用 Quartz 兼容通配符，避免计划停摆。Job cron expressions with empty cron fields now use Quartz-compatible wildcards so schedules never stall.
• 评论 ID 在组件选择中正确往返，浮动提交栏保留用户状态。Comment IDs round-trip through widget choices so the floating submission bar preserves user state.
• 失败的智能体任务运行在收件箱中展示，并提供转录入口（#840）。Failed agent task runs surface in the inbox with a transcript action instead of being hidden (#840).
• 工单执行运行行恢复"快速停止"按钮。Quick stop button is restored on the ticket execution run row.
• 工作区引导跳过时不再导致页面 pointer-events 卡死（#846）。Onboarding wizard no longer leaves the body with stuck pointer-events after skipping (#846).
• Antigravity 流式中断后保留已完成回合，并使用新会话恢复。Antigravity streaming interruptions preserve completed turns and recover with a fresh session.
• Pi 提供商经由 RPC 恢复会话并进行能力校验（#887）。Pi provider resumes sessions via RPC with capability checks (#887).
• Antigravity 运行时捕获提前退出，并在沙箱内保留原生 HOME。Antigravity runtime captures premature exits and preserves the native HOME under sandbox.
• 工作区销毁时同步清理 worktree sidecar 与 CodeGraph 快照。Workspace teardown cleanly removes worktree sidecars and CodeGraph snapshots.
• 工作区沙箱设置在守护重启与显式退出值下保持有效（#906）。Workspace sandbox settings survive background daemon restarts and explicit opt-out values (#906).
• 沙箱凭据与宿主机隔离；profile 恢复记录按工作区隔离。Sandbox credentials are isolated from the host; profile recovery records are isolated per workspace.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 守护进程默认启用文件系统沙箱（#906）。Filesystem sandbox enabled by default for the daemon (#906).
• 智能体输出脱敏内嵌凭据；认证环境变量在日志与审计表中被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked in logs and audit tables (fix(security) series).
• 沙箱凭据、profile 恢复记录与 Antigravity 运行时状态与宿主机隔离。Sandbox credentials, profile recovery records, and Antigravity runtime state are isolated from the host.
• 提供商工作区状态按智能体分区，避免跨工作区数据通过提供商缓存泄露。Provider workspace state is partitioned per agent so cross-workspace data does not leak through provider caches.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 守护进程默认启用文件系统沙箱。如过去通过环境变量关闭，请显式设置 MOPHEUS_DAEMON_SANDBOX=false（或 0/off，不区分大小写）；否则将保持新默认。The daemon now enables the filesystem sandbox by default. Operators that previously disabled it via environment must explicitly set MOPHEUS_DAEMON_SANDBOX=false (or 0/off, case-insensitive) on the daemon process; otherwise sandboxing stays on and matches the new default.
• 工作区分域用户环境变量与配置文件需要本次新增的 schema 迁移。已有全局配置保持为基线，工作区覆盖在迁移完成后生效。Workspace-scoped user environment variables and configuration files require the schema bump introduced in this release. Pre-existing global profiles remain the baseline; new workspace overrides take effect after migration.
• Quartz 计划触发器按触发器粒度选择开启；既有 Standard 五字段触发器保持原行为，存在 Quartz 行时回滚迁移会被拒绝，以保证持久化表达式可读。Quartz schedule triggers are opt-in per trigger. Existing Standard five-field triggers continue to use the legacy grammar; reverting a migration is refused while Quartz rows exist to keep persisted expressions readable.
• 交互式决策小组件依赖工作区 widget 特性开关；关闭或未配置时评论降级为标准语法高亮代码块。Interactive decision widgets require the widget workspace feature flag; comments degrade to standard syntax-highlighted code blocks when the flag is disabled or unset.
• 使用 Antigravity 提供商需在环境中有可调用的 agy（或通过 MOPHEUS_ANTIGRAVITY_PATH 指定），且 CLI 支持 --input-format stream-json --output-format stream-json --dangerously-skip-permissions。Antigravity CLI is required at agy (or MOPHEUS_ANTIGRAVITY_PATH) to use the new provider; the CLI must be invokable with --input-format stream-json --output-format stream-json --dangerously-skip-permissions.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 事件驱动作业与因果循环防护 — 作业可订阅内部事件（如 comment.created、ticket.created）并配置结构化过滤条件；因果祖先图阻断递归触发循环，事件负载新增自描述枚举名、工单上下文与 ticketPriority，便于精准路由（#795、#805、#806、#811、#813、#814、#817、#808、#809）。Event-driven jobs with causal loop containment — Jobs subscribe to internal events (comment.created, ticket.created, …) with structured filters. A causal ancestor graph prevents recursive trigger loops, and event payloads now expose self-describing enum names, ticket context, and ticketPriority for accurate routing (#795, #805, #806, #811, #813, #814, #817, #808, #809).
• 子智能体谱系与生命周期追踪 — 子智能体运行持久化父级谱系，Claude 子智能体跟踪生命周期，调度器协调子智能体的最终结果。提供商工作区状态按智能体隔离，Codex MCP 调用与 Claude 用量一并记录（#767、#803、#828、#830）。Subagent lineage and lifecycle tracking — Subagent runs persist parent lineage, Claude subagents track lifecycle transitions, and the scheduler coordinates subagent final results. Provider workspace state is isolated per agent, and Codex MCP calls are recorded alongside Claude usage (#767, #803, #828, #830).
• mop CLI 技能与发布同步工作流 — 新增 mop CLI 技能与发布同步工作流，智能体无需自定义脚本即可搭建 PR、同步发布产物、检索模型枚举；using-codegraph 现要求 worktree 前置并提供 MCP 兼容指南（#616/#820、#746）。mop CLI skill and release sync workflow — A new mop CLI skill ships with the release sync workflow so agents scaffold PRs, sync release artifacts, and discover model enums without bespoke scripts; using-codegraph now mandates a worktree prerequisite and ships MCP-compatible guides (#616/#820, #746).
• 附件访问控制与隔离 — 附件在查询与存储路径上统一执行工作区级 CanView/CanEdit/CanDelete 能力检查，来源标签附带父工单标识与短 ID（#730/#734、#731/#733）。File attachment access control and isolation — Attachments enforce workspace-scoped CanView/CanEdit/CanDelete capabilities in queries and storage paths, with origin labels that include the parent ticket identifier and short ID (#730/#734, #731/#733).
• 工单短标识 — 工单在 UUID 之外暴露稳定短 ID，并贯穿 CLI、Web 与 mop 输出（#818）。Short ticket identifiers — Tickets expose a stable short ID alongside the UUID, mirrored across CLI, web, and mop outputs (#818).
• 主题生命周期管理 — 一级主题生命周期 API 让工作区可审计地归档、恢复与清理主题（#824）。Topic lifecycle management — A first-class topic lifecycle API lets workspaces archive, restore, and clean up topics with audit-friendly state transitions (#824).
• 用户 SSH 配置管理 — 用户可在设置中注册 SSH 配置文件，通过运行时配置管线投递到沙箱任务，并按原生 OpenSSH 组合（#740）。User SSH config management — Members register SSH config files delivered into sandbox tasks via the runtime config file pipeline, with native OpenSSH composition (#740).
• 技能调用与合成 — 每次技能调用都被记录用于审计，蒸馏记忆可合成为可复用技能，每日用量汇总驱动工作区分析（#737、#754、#822）。Skill invocations and synthesis — Every skill invocation is recorded for auditability, distilled memories can be synthesized into reusable skills, and a daily-usage rollup powers workspace analytics (#737, #754, #822).
• 守护遥测、快照与工作区恢复过滤 — 守护进程采集每任务资源遥测、发出持久化工作完成快照，并在恢复时按工作区过滤，避免重启时拉起外部运行时（#766、#776、#786）。Daemon telemetry, snapshots, and worker recovery — Daemons collect per-task resource telemetry, emit durable worker completion snapshots, and filter recovery by workspace so a restart never picks up a foreign runtime (#766, #776, #786).
• 发布产物迁移至华为云 OBS — 发布镜像与许可证声明改发至华为云 OBS，加速中国大陆区域安装。Release artifacts on Huawei OBS — Release images and license notices publish to Huawei OBS, accelerating installs in mainland China regions.
• 工作区 UI 标准化 — 工作区列表、头部、集成设置、品牌图标与确认弹窗统一为卡片容器布局，含内联页头、批量操作、平台分组的集成页以及带后果提示的删除/归档确认弹窗（#741、#758、#761、#791）。Standardized workspace UI — Workspace list, header, integrations settings, brand icons, and confirmation dialogs follow a unified card container layout with inline page headers, batch actions, platform-sectioned integrations, and delete/archive dialogs with explicit consequence warnings (#741, #758, #761, #791).

新增Copy Anchor LinkAddedCopy Anchor Link

• 内部事件触发器与因果循环防护；运行时附加因果祖先上下文并下发事件广播（#795、#814）。Internal event triggers with causal loop containment; runtime attaches causal ancestor context and grants event broadcasts (#795, #814).
• 事件负载新增 ticketId、shortId、workspaceSlug、ticketPriority 及自描述枚举 *Name 字段（#805、#806、#817）。Event payloads enriched with ticketId, shortId, workspaceSlug, ticketPriority, and self-describing enum *Name companions (#805, #806, #817).
• 作业触发器页可视化事件过滤规则，事件作业禁用手动触发（#808、#809）。Job triggers tab visualizes event filter rules; manual trigger disabled for event jobs (#808, #809).
• 子智能体谱系表、Claude 子智能体生命周期、子智能体回合协同、提供商工作区状态隔离与 Codex MCP 调用记录（#767、#803、#828、#830）。Subagent lineage table, Claude subagent lifecycle tracking, subagent turn coordination, provider workspace state isolation, and Codex MCP call recording (#767, #803, #828, #830).
• 智能体即时交互转向（#788）。Immediate agent interaction steering (#788).
• 工单短标识列、API、CLI 与 mop 集成（#818）。Short ticket identifier column, API, CLI, and mop integration (#818).
• 主题生命周期端点与审计钩子（#824）。Topic lifecycle management endpoints and audit hooks (#824).
• 附件访问控制与可见性隔离；附件来源显示附带工单 ID 与短 ID（#730/#734、#731/#733）。Attachment access control + visibility isolation; attachment origin display carries ticket ID and short ID (#730/#734, #731/#733).
• 技能调用记录表、每日技能用量分析与记忆合成技能（#737、#754、#822）。Skill invocation tracking table, daily skill usage analytics, and memory-to-skill synthesis (#737, #754, #822).
• mop CLI 技能、mop_ticket 帮助脚本、模型枚举参考与发布同步工作流（#616/#820）。mop CLI skill, mop_ticket helper scripts, model enum references, and release-sync workflow (#616/#820).
• using-codegraph 技能 worktree 前置与 MCP 兼容（#746）。using-codegraph skill worktree prerequisite and MCP compatibility (#746).
• 用户 SSH 配置注册，按 cli_type 投递（#740）。User SSH config registration with cli_type-aware delivery (#740).
• 守护进程持久任务资源遥测与 /profile 端点、工作完成快照（#776、#786）。Daemon durable task resource telemetry plus /profile endpoint and worker completion snapshots (#776, #786).
• 作业执行历史中的端到端智能体任务耗时与重设计的实时同步布局（#735、#736）。End-to-end agent task duration in job execution history; redesigned layout with real-time sync (#735, #736).
• 工作区卡片容器、内联页头、批量操作、平台分组的集成设置、统一品牌图标以及 AlertDialog 删除/归档流程（#741、#758、#761、#791）。Workspace card container, inline page headers, batch actions, platform-sectioned integrations settings, unified brand icons, and AlertDialog-based delete/archive flows (#741, #758, #761, #791).
• runtime guard explain 取证 CLI 与扩展的 runtime_guard_event 字段。runtime guard explain forensics CLI and extended runtime_guard_event columns.
• 自定义 CLI 升级清单、强制升级元数据与原子化 CLI 重装。Custom CLI upgrade manifest, forced upgrade metadata, and atomic CLI reinstall.
• 统一的 CI 构建时间戳；凌晨 6 点（北京时间）夜间构建。Unified CI build timestamps; nightly Beijing 06:00 build.
• 跨工作区的 License 邀请重发与席位重排。License invitation re-issue and seat reshuffle across workspaces.

改进Copy Anchor LinkChangedCopy Anchor Link

• 作业 actor 携带祖先作业 ID 与 origin_user_id，防止递归触发并保证审计链路完整（#813）。Job actor carries ancestor job IDs and origin_user_id to prevent recursive triggers and keep audit trails accurate (#813).
• 事件广播统一汇聚到单一工作区事件中心，HTTP handler 通过同一 broadcaster 扇出。Event broadcasts unified into a single workspace event hub; HTTP handlers fan out through one broadcaster.
• 通道会话来源与任务历史元数据贯穿规范会话记录。Channel session source and task history metadata propagate through the canonical session record.
• 技能搜索改用 CJK 友好的多关键词构造器并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
• 智能体创建向导支持对话式 AI 智能体创建，内置提示模板（#616）。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
• 工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
• 收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力（#607）。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
• 守护调度器协调子智能体最终结果并在检查后保留结果。Daemon scheduler coordinates subagent final results and preserves the final result after checks.
• 作业执行历史通过 WebSocket 事件刷新，外部状态无需轮询即可保持一致。Job execution history refreshes from websocket events so external state stays consistent without polling.
• 工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
• 提供商会话来源与任务历史元数据纳入助手消息去重。Provider session source and task history metadata participate in assistant-message dedup.
• runtime guard explain 输出统一为英文并在 Web UI 提供 i18n 字典。runtime guard explain output canonicalized to English with i18n dictionaries for the web UI.

修复Copy Anchor LinkFixedCopy Anchor Link

• Codex 用量按模型拆分；Codex stdout 用量上报进入仪表盘。Codex usage split by model; Codex stdout usage reporting surfaces in dashboards.
• 子智能体 message parent 保留；子线程消息安全过滤；子智能体名称传递至智能体任务标题。Subagent message parent preserved; subthread messages filtered safely; subagent names propagated into agent-task titles.
• 新会话记录模型上线后恢复 Lark 通道任务回复。Lark channel task replies restored after the new session record schema.
• Webhook 去重冲突通过 ON CONFLICT DO UPDATE 吸收（#799/#800）。Webhook dedup conflict absorbed via ON CONFLICT DO UPDATE (#799/#800).
• 合并评论计数包含 trigger；空合并评论隐藏；合并评论折叠。Merged comment count includes the trigger; empty merged comments hidden; merged comments collapse.
• 浏览器登录统一使用 cookie；locale cookie 与活动语言状态在 hydration 与设置间保持同步（#727）。Browser auth uses cookies consistently; locale cookie and active language state stay in sync across hydration and settings (#727).
• 转录搜索与 escape 快捷键不再穿透到工单页（#725）。Transcript search and escape shortcuts no longer leak to the ticket page (#725).
• ActorAvatar 不再渲染 UUID 缩写；ActorPicker 携带显示名（#759）。ActorAvatar no longer renders UUID initials; ActorPicker carries the display name (#759).
• 守护进程恢复按工作区过滤，避免拉起外部运行时（#766）。Daemon recovery filters by workspace so unrelated runtimes do not surface (#766).
• 调度器在生命周期检查后保留最终结果，可恢复准备阶段 panic，解析生命周期检查响应，并在协议关闭后保留超时。Scheduler preserves the final result after lifecycle checks, recovers preparation panics, parses lifecycle check responses, and preserves timeout after protocol close.
• 安装路径：安装时运行运行时环境探针；支持在线 CLI 准备；Windows 安装不再泄漏临时环境；离线 Docker 路径补充文档。Install path: runtime environment probe runs at install time; online CLI preparation supported; Windows install path no longer leaks the temp env; offline Docker paths documented.
• CLI 升级重装原子化，支持自定义升级清单，强制升级元数据正常流转。CLI upgrade reinstall is atomic and respects a custom upgrade manifest; forced upgrade metadata flows through.
• WebSocket 订阅者在资源变更时刷新（#712）。WebSocket subscribers refresh on resource mutations (#712).
• WebSocket 断线后重新拉取运行时资源数与守护健康端口。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
• 重复迁移幂等执行；make migrate-up 部分应用后再次运行不再触发重复键错误。Duplicate migrations are idempotent; make migrate-up after a partial apply no longer trips a duplicate-key error.
• 仪表盘同时展示成功与失败任务计数；空的 from/to 日期参数视为全时段用量（#771）。Dashboard surfaces failed task counts alongside successful ones; empty from/to date parameters render as all-time usage (#771).
• 在提供商会话响应中保留 Kimi stderr 错误码。Kimi stderr error codes preserved in provider session responses.
• 即使守护响应在上传中途丢失，也保留报告批次。Daemon report batches preserved when the daemon response drops mid-upload.
• 智能体任务派发链路保留发起用户上下文（#691）。Origin user context preserved across agent task dispatches (#691).
• 工单依赖目标工单通过 useTicket 单独加载；视角分组与术语对齐。Ticket dependency target tickets load individually via useTicket; perspective grouping and terminology aligned.
• 工单后端 ZIP 导出与评论解决契约弃用提示在 Web 端展示（#802）。Ticket backend ZIP export and comment resolution contracts deprecation notice surfaced in the web UI (#802).
• mop_ticket add-comment 调用正确的子命令；技能脚本末尾空白已清理。Skill subcommand mop_ticket add-comment invokes the correct subcommand; trailing whitespace in skill scripts removed.
• 触发器过滤条件在重载与守卫卸载间保留。Trigger filters persist across reloads and guard unload.
• 全运行时任务生命周期与作用域检查加固。Hardened task lifecycle and scope checks across the runtime.
• 工作区引导启用 skip-existing-agent 迁移，关闭引导无法绕过安全检查。Wizard onboarding skip-existing-agent migration applied so disabling onboarding cannot bypass the safety check.
• 本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
• 守护任务调度器延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
• 终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically; preserve terminal completion result across restarts.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 工作区事件统一经过单一 broadcaster，强制 origin_user_id 与因果祖先校验；作业不能订阅工作区之外的事件。Workspace events fan out through a single broadcaster that enforces origin_user_id and causal ancestor checks; jobs cannot subscribe to events outside their workspace scope.
• 即便发起方不在工作区成员中，所有 agent_task 行均记录 origin_user_id，跨域操作可被审计。origin_user_id recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
• 附件访问控制对所有查询路径执行 CanView/CanEdit/CanDelete，存储路径按工作区分隔。Attachment access control enforces CanView/CanEdit/CanDelete in every query path; storage paths are workspace-scoped.
• Webhook 去重改用原子 upsert，杜绝审计记录丢失或重复（#799/#800）。Webhook dedup uses an atomic upsert to prevent lost or duplicated audit records (#799/#800).

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 启动新版本服务前先执行常规数据库迁移。本版本包含 118+ 迁移：事件触发器注册、因果祖先 ID、工单短标识、主题生命周期、附件访问控制、技能调用记录、每日用量分析、守护工作完成快照、用户 SSH 配置元数据以及 runtime_guard_event 字段扩展。Apply database migrations before starting the new server. Migrations 118+ cover the event trigger registry, causal ancestor IDs, ticket short identifiers, topic lifecycle, attachment access control, skill invocations, daily usage analytics, daemon worker snapshots, user SSH config metadata, and runtime_guard_event columns.
• 已订阅 comment.created 的作业请重新审视：负载新增 ticketId、workspaceSlug、ticketPriority，需相应调整触发表达式。Review existing jobs subscribed to comment.created: the payload now includes ticketId, workspaceSlug, and ticketPriority — adjust trigger expressions accordingly.
• 守护升级请重新部署最新的 mopheusd 镜像；Linux 守护进程在首次心跳即可获得新的持久任务资源遥测 profile 端点与工作完成快照。Daemon upgrades should redeploy the latest mopheusd image; Linux daemons pick up the new durable task resource telemetry profile endpoint and worker completion snapshots on first heartbeat.
• 发布产物改发至华为云 OBS，安装工具链默认使用 OBS 镜像地址。请相应更新本地 install/env.example 中的 MOPHEUS_BACKEND_IMAGE/MOPHEUS_WEB_IMAGE。Release artifacts publish to Huawei OBS; installation tooling now expects the OBS-backed image tags. Update local install/env.example overrides accordingly.
• 自定义附件权限的工作区在迁移后请重新确认 CanView/CanEdit/CanDelete，默认能力检查已下放至 repo 层。Workspaces that customize attachment permissions should re-confirm CanView/CanEdit/CanDelete after migration; default capability checks now apply at the repo layer.
• 新建工作区默认启用 mop CLI 技能；存量工作区可从技能商店按需启用。The mop CLI skill is enabled by default for new workspaces; existing workspaces can opt in from the skill store.
• 守护恢复按工作区过滤，请确认运行时的注册工作区与预期一致后再重启。Daemon recovery now filters by workspace; ensure runtime registrations live in the expected workspace before restart.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 为编码智能体接入 CodeGraph 智能 — 已注册仓库上的编码智能体现在内置 using-codegraph 技能，附带按 commit 绑定的 sidecar SQLite 快照缓存，并在 worktree 准备阶段自动增量重建索引 (#675)。CodeGraph intelligence for coding agents — Coding agents on registered repositories ship with the using-codegraph skill, commit-bound sidecar SQLite snapshot caches, and incremental re-indexing during worktree provisioning (#675).
• 工作区文件中心 — 新增 /[workspace]/files 页面，聚合工单、评论、聊天会话中的所有附件，提供全文检索、类别筛选、网格/表格视图以及图像、PDF、Markdown、源码、CSV 的通用预览器 (#713)。Workspace files hub — A new /[workspace]/files page consolidates every attachment across tickets, comments, and chat sessions with full-text search, category filters, grid/table views, and a universal previewer for images, PDFs, Markdown, source code, and CSV (#713).
• 日语本地化 — 整个产品界面新增日语 (ja) 翻译，与英语、简体中文并列，含新的文件中心和智能体任务控件 (#706)。Japanese localization — The full product UI ships with Japanese (ja) translations alongside English and Simplified Chinese, including the new files hub and agent-task controls (#706).
• 运行时任务资源守护与熔断 — Linux 守护进程通过 rootless cgroup v2 与 procfs 采样收集每任务 RSS、每运行时总量、进程数与完整进程树指标；三级级联（任务→运行时→工作区）合并阈值，超额告警升级为 kill。每次 kill/告警都会将结构化诊断上报控制面并写入 runtime_guard_event 表 (#694, #702, #710)。Runtime task resource guard and circuit breaker — Linux daemons collect per-task RSS, per-runtime totals, process counts, and full process-tree metrics via rootless cgroup v2 + procfs sampling. A 3-tier cascade merges guard thresholds; over-budget warnings ramp into kill. Every kill/warning streams structured diagnostics to the control plane, persisted in runtime_guard_event (#694, #702, #710).
• 工单级 Grill Me 评审 — 通过工单头部或操作菜单即可针对工单标题与描述发起 10 轮自反思评审，无需评论，结果以根评论回填 (#624, #642, #620)。Direct ticket-level Grill Me review — Trigger a 10-round self-reflective review against a ticket&#x27;s title and description from the ticket header or actions menu — no comment needed (#624, #642, #620).
• 个人运行时配置文件 — 用户可注册自定义配置文件（如 ~/.mopheus/*.toml），按 CLI 类型投递到沙箱任务，并支持托管 Ed25519/RSA SSH 密钥与用户优先的原生 OpenSSH 组合 (#685)。Personal runtime configuration files — Each user can register custom configuration files (e.g. ~/.mopheus/*.toml) which are delivered into sandbox tasks with CLI-type aware attachment, managed Ed25519/RSA SSH keys, and user-first native OpenSSH composition (#685).
• 以非 root 用户（UID 10001）运行守护进程容器 — mopheusd 在容器内以 mopheus 用户运行并匹配宿主机 UID，支持 rootless cgroup v2 层级并免去运行时提权 (#633)。Non-root daemon container (UID 10001) — mopheusd runs as the mopheus user inside the container with the matching host UID, enabling rootless cgroup v2 hierarchies (#633).
• 用户账号状态控制 — 工作区管理员可启用或停用单个账号；停用用户不可登录且不计入 License 配额 (#705)。User account status controls — Workspace admins can enable or disable individual accounts; disabled users are blocked from authentication and excluded from license quota counting (#705).
• 工单批量操作 — 新增工单操作栏支持批量归档、指派、修改优先级或迁移，CLI 子命令 mopheus ticket 也提供对应能力 (#653)。Batch ticket operations — A new ticket action bar lets operators archive, assign, re-prioritize, or move many tickets at once, mirrored in mopheus ticket CLI subcommands (#653).
• 工单运行数据后端 ZIP 导出 — 工单可导出包含所有评论、智能体任务运行和中间产物的 ZIP 包，便于离线审查与审计 (#667)。Backend ZIP export of ticket run data — Tickets expose a backend ZIP export of all comment threads, agent task runs, and intermediate artifacts for offline review (#667).

新增Copy Anchor LinkAddedCopy Anchor Link

• 编码智能体的 using-codegraph 内置技能，以及 .codegraph-cache/<sha>.db 提交绑定 sidecar 与增量 codegraph sync (#675)。CodeGraph sidecar snapshot cache at .codegraph-cache/<sha>.db with automatic incremental codegraph sync during worktree creation (#675).
• mopheus attachment list CLI 命令与 useFilesViewStore 视图模式持久化 (#713)。mopheus attachment list CLI and useFilesViewStore view-mode persistence (#713).
• user_config_file 表与个人沙箱运行时配置文件的设置界面，支持托管 SSH 密钥和用户优先的 OpenSSH 组合，按 cli_type 自动投递。user_config_file table and settings UI for personal sandbox runtime configuration files, managed SSH keys, and user-first OpenSSH composition, with cli_type-aware delivery.
• runtime_guard_event 审计表及 mopheus runtime guard events|explain CLI 命令 (#710)。runtime_guard_event audit table with full forensics plus mopheus runtime guard events|explain CLI (#710).
• usage_agent_task_report 持久化回执与用量快照去重，守护进程用量上报可安全重试。usage_agent_task_report durable receipts and usage snapshot dedupe so daemon usage reports are safe to retry.
• agent_task_interaction 表和 broadcaster，用于跨运行时的 WebSocket 评论同步 (#623)。agent_task_interaction table and broadcaster for websocket comment sync (#623).
• 智能体上的 is_griller 能力，用于 Griller 专业化 (#620)。is_griller capability on agents for Griller specialization (#620).
• 工单按更新时间与开始日期排序。Tickets updates-time sorting and start-date sorting.
• user.enabled 列及管理员启/停控制 (#705)。user.enabled column with admin enable/disable controls (#705).
• 工作区级用户环境变量 CRUD (#669)。Workspace-scoped user env vars at profile scope (#669).
• 跨运行时批量领取的交互式守护任务调度器 (#674)。Interactive daemon task scheduler with batch claim across runtimes (#674).
• 记忆命中次数 BIGINT 饱和保护 (#688)。Memory hit-count with BIGINT saturation clamp (#688).
• 附件 pg_bigm GIN 索引与 CJK 多关键词搜索。Attachment pg_bigm GIN index with CJK multi-term search.
• 收件箱批量归档/恢复/删除，含"全部删除"二次确认 (#662)。Bulk archive/restore/delete in the inbox with explicit "delete all" confirmation (#662).
• mopheus job update 的 --action-type 参数，以及安装时生成的 mop 快捷别名。CLI --action-type flag for mopheus job update and mop install-time shortcut alias.
• Mopheus 与 CodeGraph OSS License 声明打包进发布产物 (#676)。Mopheus and CodeGraph OSS license notices packaged into release artifacts (#676).

改进Copy Anchor LinkChangedCopy Anchor Link

• License 邀请流程支持跨工作区重发与席位重排。License invitation flow supports re-issue and seat reshuffle across workspaces.
• 收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力 (#607)。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
• 智能体创建向导支持对话式 AI 智能体创建，内置提示模板 (#616)。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
• 技能搜索改用 CJK 友好的多关键词构造器，并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
• 工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
• 通道会话来源与任务历史元数据纳入规范会话记录 (#623)。Channel session source and task history metadata carry through to the canonical session record (#623).
• 作业列表改为由 WebSocket 事件刷新，外部任务状态无需轮询即可保持一致。Jobs list refreshes from websocket events so external task state stays consistent without polling.
• 工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
• 提供商会话来源与任务历史元数据纳入助手消息去重，避免同一输出跨智能体重复。Provider session source and task history metadata participate in assistant-message dedup so the same output is never re-emitted across agents.

修复Copy Anchor LinkFixedCopy Anchor Link

• 记忆任务在上下文候选为空时返回 nil，避免误导性"记忆"标注 (#721)。Return nil from memory task recall when the context candidate set is empty so prompts do not get a spurious "memory" attribution (#721).
• 拒绝非 ASCII 工作区 slug 并给出明确校验信息 (#715)。Reject non-ASCII workspace slugs with a clear validation message (#715).
• 安装汇总中显示生成的管理员凭据，减少登录翻查安装日志的需求 (#715)。Show generated admin credentials in the install summary (#715).
• 资源变更事件刷新所有 WebSocket 订阅者；工单更新无需手动刷新即可传播 (#712)。Refresh resource mutations across all websocket subscribers; ticket updates propagate without a manual reload (#712).
• WebSocket 断线后重新拉取运行时资源数与守护进程健康端口，确保守护进程恢复。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
• 重复迁移改为幂等执行，部分应用后再次执行 make migrate-up 不再触发重复键错误。Make duplicate migrations idempotent so re-running make migrate-up after a partial apply no longer trips a duplicate-key error.
• 仪表盘同时展示失败任务计数，便于准确用量对比。Surface failed task counts in the dashboard alongside successful ones for accurate usage diffing.
• 恢复分页工单列表的服务端排序，覆盖旧的本地过滤导致的状态错乱 (#660)。Restore server-side sorting for paginated ticket lists (#660).
• 在提供商会话响应中保留 Kimi stderr 错误码，失败诊断保持真实 (#665)。Preserve Kimi stderr error codes in provider session responses (#665).
• agent_task 持久事件负载大小封顶，避免 stdout 失控阻塞守护运行器。Bound durable event payload sizes for agent_task so a runaway stdout cannot stall the daemon runner.
• 启动任务时保留守护进程绑定的健康端口。Preserve the daemon&#x27;s bound health port when starting tasks.
• 守护进程在 WebSocket 断开后恢复运行时，杜绝"幽灵运行时"。Restore runtimes after a websocket disconnect so daemons recover gracefully.
• 在智能体任务派发链路中保留发起用户上下文 (#691)。Preserve origin user context across agent task dispatches (#691).
• 即使守护响应在上传中途丢失，也保留守护进程报告批次。Preserve daemon report batches even when the daemon&#x27;s response drops mid-upload.
• 当本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude，不影响覆盖率目标。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
• 守护任务调度器转入延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
• 终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically and preserve terminal completion result across restarts.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 工作区文件中心复用现有 Attachment 查看能力与工作区作用域，对每次查询强制鉴权。Workspace files hub enforces the existing Attachment viewer capability and reuses workspace scoping for every query.
• 运行时守护告警与 kill 事件写入服务端审计表，并配有专用取证 CLI。Runtime guard alarm and kill events stream to a server-side audit table with dedicated forensic CLI commands.
• 所有 agent_task 行均记录 origin_user_id，即便发起方不在工作区成员中，审计链路也能覆盖跨域操作。origin_user_id is recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
• 工作区引导的"永久跳过"偏好走"跳过现存智能体"迁移，避免通过关闭引导绕过安全检查。Wizard onboarding routes the skip-permanently preference through the new "skip existing agent" migration so disabling onboarding cannot bypass the safety check.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 启动新版本服务前先执行常规数据库迁移。本版本包含 106–117 迁移：griller 智能体标志、智能体任务交互历史、用量快照去重、持久化用量回执、智能体任务发起用户、待处理任务唯一索引、技能名长度、用户配置文件、运行时守护审计、用户配置 CLI 类型、智能体任务作业运行索引、记忆召回命中计数、用户启用状态、附件 pg_bigm 搜索索引以及敏感 SSH 配置元数据。Apply the database migrations before starting the new server. This release includes migrations 106–117 for griller agent flag, agent-task interaction history, usage snapshot dedupe, durable usage receipts, agent-task origin user, pending-task indexes, skill name length, user config files, runtime guard audit, user config CLI type, agent-task job-run index, memory recall hit count, user account status, attachment pg_bigm search index, and sensitive SSH config metadata.
• Linux 守护进程建议改用 mopheus 用户（UID 10001）重新部署，以启用 rootless cgroup v2 与完整进程树守护；当前以 root 运行的守护进程仍可工作，但应尽快完成切换。Linux daemons should be redeployed as the mopheus user (UID 10001) to take advantage of rootless cgroup v2 and the full process-tree guard. Existing root daemons keep working but should be migrated promptly.
• 工作区可在 用户设置 → 运行时配置文件 中注册个人运行时配置文件，下一次任务调度将自动按 CLI 类型投递。Existing workspaces can register personal runtime configuration files under User Settings → Runtime Config Files; CLI-type-aware delivery is automatic from the next task schedule.
• Linux 守护进程默认上报运行时守护诊断。可通过 mopheus runtime guard events 与 mopheus runtime guard explain <task-id> 进行事后取证。Daemons running on Linux now report runtime guard diagnostics by default. Use mopheus runtime guard events and mopheus runtime guard explain <task-id> for post-mortem forensics.
• 新增用户账号启停控制，存量账号默认启用。停用用户无法登录且不计入 License 配额。New user account status controls let admins disable individual accounts; legacy accounts default to enabled. Disabled users cannot authenticate and are excluded from license quota counting.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 守护进程 Claim 传输加密 — 守护进程与服务器之间的 Claim 流量使用每运行时独立的 X25519 密钥端到端密封（issue #556）。守护进程将密钥持久化到专用 keystore，服务器在注册与心跳时校验密钥，明文 fallback 由双重测试守护并具备警告与自愈路径。Daemon claim transport encryption — Daemon↔server claim traffic is now sealed end-to-end with per-runtime X25519 keys (issue #556). Each daemon persists its key in a dedicated keystore, the server validates the key on registration/heartbeat, and plaintext claim fallback is gated by a dual test plan with a warn-and-self-heal path.
• 工作区引导向导 — 重设计的 7 关引导流程，附带中英双语演示数据、迁移时可选启用演示开关，以及"永久跳过"偏好；现有工作区不会再看到引导界面，记忆蒸馏默认启用。Workspace onboarding wizard — A redesigned 7-quest onboarding flow ships with bilingual demo seeds, an opt-in demo data switch for migrations, and a "skip permanently" preference so existing workspaces do not see onboarding again. Memory distillation is enabled by default as part of the new flow.
• 技能快捷能力 — 将富技能转化为工单头部一键可执行的快捷动作，提供工作区级能力开关，快捷面板上展示明确的描述（#542、#571）。Skill shortcuts capability — Turn rich skills into one-click executable actions callable directly from ticket headers, with a workspace-level capability toggle and explicit descriptions on the shortcuts UI (#542, #571).
• 智能体环境变量静态加密 — 智能体环境变量改用每值 ENC1 方案存储，工作区密钥与加密数据分离，运行时仍可即时读取（#554）。Agent environment-variable encryption at rest — Agent env vars are now stored with a per-value ENC1 scheme, keeping the workspace key separate from the encrypted blobs while preserving live reads (#554).
• 守护进程中断任务恢复 — 守护进程不再因中途关闭而丢任务：新增的恢复流程会在下次启动时还原正在运行的任务，并配套加强 systemctl 与安装阶段的所有权处理（#585、#581）。Daemon task recovery after shutdown — Interrupting a daemon mid-task no longer strands work: the new recovery flow restores in-flight tasks on next startup, paired with refined systemctl and ownership handling during install (#585, #581).
• CLI 能力扩展 — 新增 mopheus email send 子命令、聊天消息游标分页列表、ticket/repo/chat 命令的 nextBefore 结构化输出、列表分页信息，以及默认拒绝以 root 身份运行守护进程（#547、#559、#560）。More capable CLI surface — mopheus email send subcommand, chat message listing with cursor paging, structured nextBefore output on ticket/repo/chat commands, list pagination info, and a hard refusal to run the daemon as root by default (#547, #559, #560).

新增Copy Anchor LinkAddedCopy Anchor Link

• 按 profile 划分的守护进程安装与 systemctl 全生命周期管理，镜像加载改为流式解压以避免重复压缩。Per-profile daemon install and systemctl-managed lifecycle with stream-decompressed image loading to avoid double compression.
• 技能标签、工作区 bundle 支持，以及新的 shortcuts 特性开关。Skill labels, workspace bundle support, and a new shortcuts feature flag.
• 跨工单评论控制与重构后的工作区中间件，支撑智能体任务场景。Cross-ticket comment control and refactored workspace middleware for the agent task surface.
• mopheus email send 子命令以及带游标分页的聊天消息列表。mopheus email send subcommand and chat message list with cursor paging.
• 工作区删除事件即时通知已连接客户端。Workspace deleted event notifies connected clients immediately.
• 默认智能体任务超时由 2h 提升为 24h，原值会备份便于恢复。Default agent-task timeout raised from 2h to 24h, with previous values preserved for restoration.
• 系统配置页面对未配置项提供专门的视觉区分。Distinguishing visual treatment for unconfigured values on the system config page.
• 技能快捷能力默认开启，可在工单头部直接调用。Skill shortcut capability enabled by default and usable from the ticket header.
• 智能体任务父工单唤醒表，支持延迟唤醒、追踪与状态流转时的去重恢复。Agent-task parent wake table with deferred wakes, traces, and deduped resumptions when subtickets move between states.
• 附件富文本预览及源码切换（#576）。Rich-text attachment preview with a source toggle (#576).

改进Copy Anchor LinkChangedCopy Anchor Link

• 守护进程 Claim 密钥包迁入独立的 claimkey/claimcrypto 路径，配套明确 fallback 与警告自愈覆盖（#591、#588）。Daemon claim key package moved under a dedicated claimkey/claimcrypto path with explicit fallback and warn-and-self-heal coverage (#591, #588).
• 通道会话来源与任务历史元数据正式纳入会话主记录。Channel session source and task history metadata are now part of the canonical session record.
• 提供商运行时、评论跟进与 ACP 加固合并到新的 line-protocol runner，共用一套生命周期（#559）。Provider runtime, comment follow-up, and ACP hardening folded into the new line-protocol runner so providers share one lifecycle (#559).
• 工单依赖可标记为 enforced，未完成的依赖会阻断指派与状态流转。Ticket dependency can be marked enforced so incomplete predecessors block assignment and status changes.
• 工作区引导流程重画为 7 关，附带中英双语演示数据与永久跳过偏好。Workspace onboarding quest flow redrawn to seven steps with bilingual demo seeds and skip-permanently preference.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 守护进程 Claim 传输使用 X25519 与每运行时密钥端到端加密；迁移窗口内保留明文 fallback 模式（#556、#580）。Daemon claim transport encrypted end-to-end with X25519 + per-runtime keys; legacy plaintext mode remains for the migration window (#556, #580).
• 智能体环境变量采用 ENC1 每值方案静态加密，密钥材料不进入数据库行。Agent env vars encrypted at rest using the ENC1 per-value scheme; key material stays out of the database row.
• 钉钉绑定限制为智能体负责人，关闭此前的跨负责人通道。DingTalk binding restricted to agent owners; the previous cross-owner flow is closed.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 启动新版本服务前先执行常规数据库迁移。本版本包含 099–105 迁移：技能快捷、智能体任务超时默认值、守护进程公钥列、工作区引导、记忆特性默认启用、智能体任务父工单唤醒以及现有智能体跳过引导。Apply the database migrations before starting the new server. This release includes migrations 099–105 for skill shortcuts, agent-task timeout default, daemon public-key column, workspace onboarding, memory feature default-on, agent-task parent wake, and skip-existing-agent onboarding.
• 现有守护进程需重新注册（或等待下一次心跳）以生成并持久化 X25519 Claim 密钥；在公钥回填前，Claim 流量仍以明文 fallback 模式运行。Existing daemons must re-register (or wait for the next heartbeat) so they generate and persist their X25519 claim key; daemons without a public key continue to operate in legacy plaintext claim mode until they do.
• 默认 agent_task_timeout 现为 24h。自定义值会自动备份到 agent_task_timeout_previous；如需保留原行为请在迁移后恢复。The default agent_task_timeout is now 24h. Custom values are backed up to agent_task_timeout_previous automatically; restore them after the migration if the old behavior was intentional.
• 守护进程必须以非 root 用户运行 —— CLI 默认拒绝以 root 启动，除非显式设置 MOPHEUS_ALLOW_ROOT=1。Run the daemon as a non-root user — the CLI now refuses root execution unless MOPHEUS_ALLOW_ROOT=1 is set.
• 工作区引导默认开启；现有工作区会被标记为已引导，自动跳过新流程。如需长期关闭，可在偏好中选择"永久跳过"。Workspace onboarding is enabled by default; existing workspaces are marked as already-onboarded so they skip the new flow automatically.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 钉钉智能机器人与群聊集成 — 打通钉钉 Stream 机器人的完整接入流程，支持 Stream 模式免公网 IP 连接、二维码扫码绑定账号、交互式 Markdown 与卡片消息渲染、双向富媒体附件传输，以及 AES-256 密钥生命周期管理与平滑轮换。DingTalk channel integration — Connect DingTalk Stream bots end to end, including Stream connection mode, QR code account binding, interactive Markdown and card rendering, inbound/outbound media handling, and AES-256 secret lifecycle management.
• 智能体文件系统可见性沙箱 — 在 Linux 环境下支持基于 Bubblewrap (bwrap) 的文件系统隔离沙箱，将智能体运行时严格限制在指定的工作区、独立临时目录和用户主目录内，杜绝跨工作区与宿主机敏感文件泄露。Agent filesystem sandbox — Protect host environments on Linux using Bubblewrap (bwrap) filesystem isolation, confining agent execution to its workspace and temporary directory while preventing host and cross-workspace leakage.
• 私有 S3 存储桶与预签名 URL — 新增 s3_private 配置支持私有 S3 兼容对象存储桶，通过 SigV4 预签名 URL 访问附件和媒体资源，无需开放存储桶公网读权限。Private S3 storage & presigned URLs — Support private S3-compatible buckets via SigV4 presigned URLs (s3_private), ensuring secure attachment and media asset delivery without public bucket permissions.
• 工单定时激活与到期提醒 — 支持设置工单计划激活时间（activate_at），后台调度自动将待处理工单转为进行中状态；提供工单到期自动提醒机制与处理状态追踪。Ticket scheduled activation & due reminders — Schedule tickets for future activation with automatic transition to in-progress status, and track due dates with automated background reminder processing.
• 模板系统基础设施 — 引入工作区、分组、智能体、团队和技能的复用模板数据库架构与多语言分类目录，为模板化快速初始化奠定基础。Template system foundation — Platform-level schema and multilingual catalog for reusable workspace, group, agent, team, and skill templates.

新增Copy Anchor LinkAddedCopy Anchor Link

• 支持在智能体设置界面和 API 中直接解绑或清空已分配的运行时。Unbind and clear runtime assignments from agents in both UI and API.
• 管理员设置新增钉钉集成配置面板，新增 /dingtalk/bind 账号绑定页面与渠道图标。DingTalk bot integration settings in admin configuration, /dingtalk/bind authorization flow, and channel badges.
• 存储模块支持 s3_private 配置项，启用时自动生成预签名下载链接并配置私有缓存头。Configurable s3_private storage mode for presigned URL delivery and private cache headers.
• 工单定时激活与到期提醒后台处理机制，支持自动流转与提醒消费记录。Ticket scheduled activation (activate_at) and due date reminder tracking with automatic background dispatch.
• 向外部聊天渠道推送工单更新时增加标题与可点击引用链接展示。Push ticket updates to external channels formatted with ticket titles and clickable references.
• 模板系统数据表、分类元数据与中英文多语言翻译定义。Schema, category definitions, and multilingual translations for workspace and entity templates.

改进Copy Anchor LinkChangedCopy Anchor Link

• 统一 Lark/飞书、企业微信和钉钉的通道底层架构，将内容渲染与底层传输彻底解耦。Channel architecture unified across Lark, WeCom, and DingTalk, separating outbound content rendering from transport delivery.
• 团队成员管理支持按智能体 ID 或成员 ID 进行身份提升（设为负责人）和移除。Team member management allows promoting and removing members by either agent ID or member ID.
• Daemon 动态健康检查端口支持持久化并在启动时可靠刷新。Daemon dynamic health ports are persisted and refreshed reliably during daemon startup.
• 未配置可选登录方式时，Web 登录页默认隐藏未启用的登录入口。Optional login methods in web UI are hidden by default when unconfigured.
• 后端 HTTP 路由统一集中工作区上下文绑定逻辑。Centralized workspace context binding across backend HTTP routes.

修复Copy Anchor LinkFixedCopy Anchor Link

• 严格校验并拒绝跨工作区的智能体工单指派，防止租户隔离穿透。Cross-workspace agent ticket assignments are rejected to prevent cross-tenant access.
• 渠道媒体上传中断时及时清理任务，避免媒体处理协程残留。Interrupted channel media tasks are canceled cleanly to avoid stalled worker routines.
• 钉钉 Stream 连接在确认回执阶段能够优雅容忍网络断开并自动重连。DingTalk Stream connections tolerate network disconnects gracefully during acknowledgment.
• 修复 CLI 移除工单依赖时的 API 接口路由路径错误。CLI ticket dependency removal uses the correct API endpoint.
• 准确识别系统评论，清晰区分跨工单任务评论之间的关联关系。System comments and cross-ticket task relationships are identified accurately.
• 修复工单事件触发时 WebSocket 实时刷新面板看板状态的同步问题。Real-time ticket boards refresh immediately on ticket status changes via WebSocket events.
• 测试套件隔离用户本地 ~/.config 和 HOME 目录，消除不必要的后端测试延迟。Test suites isolated from user ~/.config and HOME directories with improved execution speed.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 智能体文件系统可见性沙箱（bwrap）防止对宿主机非授权路径的访问与跨工作区越权。Agent filesystem visibility sandbox (bwrap) prevents unauthorized host filesystem access and workspace crossing.
• 工单指派边界强化跨工作区校验，杜绝权限绕过。Cross-workspace authorization enforced on agent ticket assignment boundaries.
• 钉钉机器人凭据采用 AES-256 静态落盘加密，并提供平滑密钥轮换机制。DingTalk bot secrets encrypted at rest with AES-256 and seamless key rotation support.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 启动新版本服务前先执行常规数据库迁移。本版本包含 094–098 迁移：钉钉通道支持、私有 S3 存储配置、工单定时激活与到期提醒、模板系统表结构以及工单激活请求人记录。Apply database migrations before starting the updated server. This release includes migrations 094–098 for DingTalk channel support, private S3 configuration, ticket timing/reminders, template system schema, and ticket activation requester auditing.
• 如需启用 Linux 智能体文件系统沙箱，请在宿主机安装 bubblewrap（bwrap）并在环境配置中设置 MOPHEUS_SANDBOX_ENABLED=true。To enable the Linux agent filesystem sandbox, install bubblewrap (bwrap) on host runtime machines and set MOPHEUS_SANDBOX_ENABLED=true.
• 使用私有 S3 兼容存储桶时，请将 s3_private 设置为 true，以确保存档文件下载通过 SigV4 预签名链接安全访问。For private S3 bucket deployments, enable s3_private in platform configuration so attachment downloads automatically use SigV4 presigned URLs.

重点更新Copy Anchor LinkHighlightsCopy Anchor Link

• 企业微信智能机器人集成 — 打通企业微信机器人的完整接入流程，包括引导配置、身份与会话绑定、接收媒体、向外发送工单与任务更新，以及中英文管理与产品文档。WeCom smart-bot integration — Connect WeCom bots end to end, including onboarding, identity and session binding, inbound media, outbound ticket and task updates, and bilingual administration and product documentation.
• 可追踪、可延迟的智能体任务 — 评论触发的任务会合并后续跟进；附件准备完成前任务可以进入延迟状态；工单详情新增交互式任务流视图，展示评论、委派、下游工单和任务状态。Traceable and deferred agent work — Comment-triggered tasks coalesce follow-ups, tasks can wait in a deferred state until attachments are ready, and ticket details include an interactive task-flow view for comments, delegation, downstream tickets, and task status.
• 领域感知的记忆蒸馏 — 支持自动、仅通用和专业模式；记录实际生效的技能用于审计；使用通用记忆类型名称；强制重新蒸馏改为原子操作，只有成功创建替代任务时才会清理现有记忆。Domain-aware memory distillation — Distillation supports automatic, general-only, and specialty modes, records effective skills for audit, exposes generic memory type names, and makes forced re-distillation atomic.
• 更完善的智能体管理 — 工作区成员可批量分配运行时、归档、恢复和转移负责人，并进行全量校验；服务器端强制执行私有智能体权限；默认智能体 License 配额提升为 10。Stronger Agent administration — Workspace members can bulk assign runtimes, archive, restore, and transfer ownership with all-or-nothing validation; private Agent permissions are enforced server-side and the default Agent license quota is 10.

新增Copy Anchor LinkAddedCopy Anchor Link

• 按用户和工作区持久化工单筛选条件与搜索条件；URL 日期范围保持最高优先级，面板各列统一应用日期过滤。Persisted ticket filters and search per user and workspace, with URL date ranges remaining authoritative and date filters applied consistently to board columns.
• 按使用情况和负责人筛选技能；新增与 SKILL.md 同步的记忆蒸馏能力开关；手工创建技能的表单简化，并提供 Frontmatter 校验与明确错误信息。Skill filtering by usage and owner, a memory-distillation capability toggle synchronized with SKILL.md, and a simplified manual creation form with Frontmatter validation and actionable errors.
• 多服务器部署支持基于 Redis 共享本地技能发现与导入请求状态；单服务器部署继续使用内存回退方案。Redis-backed shared state for local Skill discovery and import requests in multi-server deployments, with the existing in-memory fallback for single-server deployments.
• 工作区收件箱未读角标、持久化侧边栏折叠状态、折叠侧边栏中的置顶工单入口、记忆筛选总数，以及智能体任务悬浮控件位置持久化。Workspace inbox unread badges, persisted sidebar collapse state, pinned-ticket access in the collapsed sidebar, memory filtered totals, and persisted floating agent-task control placement.
• 通道会话来源与任务历史、工作区用户绑定同步、统一的智能体运行时配置、CLI 交互式 token 登录，以及支持的安装器自动配置 CLI 工具。Channel session source and task history, workspace user binding synchronization, consolidated Agent runtime configuration, CLI interactive token login, and automatic CLI tool configuration in supported installers.

改进Copy Anchor LinkChangedCopy Anchor Link

• 技能元数据编辑现在以完整的 SKILL.md（包括 Frontmatter）作为唯一编辑来源；支持的保存和导入覆盖流程会据此生成数据库投影。Skill metadata editing now uses the complete SKILL.md source, including Frontmatter, as the canonical editing surface; database projections are derived during supported saves and import overwrites.
• ZIP 与文件系统技能导入共用同一发现遍历器，统一忽略 macOS 元数据并校验解压路径。ZIP and filesystem Skill imports now share one discovery walker that consistently ignores macOS metadata and validates extracted paths.
• 工单、智能体、团队和自动任务的创建与编辑界面统一应用编辑器显示偏好。Editor display preferences apply consistently to ticket, Agent, team, and scheduled-task creation and editing surfaces.
• 团队负责人委派指引现在要求有效的提及链接，并在执行前扫描裸 @。Team-leader delegation instructions now require valid mention links and a bare-@ preflight scan.
• 工单讨论新增父子回复导航、跳转到最后回复、更可靠的收件箱目标滚动、更紧凑的工具栏，以及任务图实时刷新。Ticket discussions gained parent/reply navigation, last-reply shortcuts, more reliable inbox-target scrolling, a more compact toolbar, and live task-graph refreshes.
• 运行时列表将离线项置于末尾，并显示负责人名称而不是负责人 ID。Runtime lists put offline entries last and show owner display names instead of owner IDs.
• 在线安装增强了对 CLI 资源不可用、Podman Docker 别名、静默 wget、文本附件扩展名确定性以及 PowerShell 安装流程的处理能力。Online installation is more resilient across unavailable CLI assets, Podman Docker aliases, quiet wget execution, deterministic text attachment extensions, and the PowerShell installer path.

修复Copy Anchor LinkFixedCopy Anchor Link

• Claude、Codex、KimiCode、OpenCode、ACP 与 Pi 的运行时 panic 现在限制在对应任务内；清理、终端结果、会话 ID 与通道关闭行为保持确定性。Provider runtime panics are contained to the affected task across Claude, Codex, KimiCode, OpenCode, ACP, and Pi; cleanup, terminal results, session IDs, and channel closure remain deterministic.
• 父工单详情中继续显示已归档的子工单，同时普通工单列表默认仍隐藏已归档工单。Archived subtickets remain visible from their parent while general ticket lists continue to hide archived tickets by default.
• 评论派发正确处理成员后续回复、自提及、缺失的合并任务 ID，以及 pending/running 任务的后继任务，不再丢失工作。Comment dispatch handles member follow-ups, self-mentions, missing coalesced IDs, and pending/running task successors without losing work.
• 企业微信凭据轮换与加密媒体元数据处理更加安全；缺失 webhook trigger 时不再触发 nil 错误。WeCom credential rotation and encrypted media metadata handling are safer, and missing webhook triggers no longer cause nil failures.
• 技能 Frontmatter 样式与 Markdown 编辑行为统一；重复的手工技能名称会显示明确错误；本地技能请求轮询可跨 API 实例工作。Skill Frontmatter styling and Markdown editing are consistent, duplicate manual Skill names produce a specific error, and local Skill request polling works across API instances.
• 修复搜索键盘导航、空工单建议、工单提及、智能体任务消息输出存储、快照轮询、悬浮按钮位置持久化，以及延迟/终态任务状态过滤的一致性问题。Search keyboard navigation, empty ticket suggestions, ticket mentions, agent-task message output storage, snapshot polling, FAB placement persistence, and deferred/terminal task status filtering now behave consistently.
• CLI 在智能体任务内运行时拒绝切换工作区，避免任务上下文被静默切换。The CLI refuses workspace switching while operating inside an Agent task.

安全Copy Anchor LinkSecurityCopy Anchor Link

• 技能 ZIP 解压会拒绝路径穿越，并在发现文件前统一过滤元数据。Skill ZIP extraction rejects path traversal and applies centralized metadata filtering before discovery.
• 服务器端强制执行私有智能体的编辑、管理和负责人转移权限；批量操作先完整校验，不会产生部分变更。Private Agent edit, management, and ownership-transfer permissions are enforced by the server, including bulk operations with pre-validation and no partial mutation.
• 企业微信密钥轮换过程保持可解密性；运行时 panic 详情保留在服务器日志中，不暴露给任务用户。WeCom secret-key rotation preserves decryptability during transitions, and provider panic details remain in server logs rather than task-facing errors.

升级说明Copy Anchor LinkUpgrade NotesCopy Anchor Link

• 启动新版本服务前先执行常规数据库迁移。本版本包含评论任务合并、延迟任务状态、二进制任务输出、企业微信/通道元数据、任务流种子数据、中文全文搜索和通道会话标识相关迁移。Apply the normal database migrations before starting the new server. This release includes migrations for comment-task coalescing, deferred task status, binary task output, WeCom/channel metadata, task-flow seed data, Chinese full-text search, and channel session identifiers.
• systemd 单元名称已改为 mopheus-daemon.service；请更新仍引用旧单元名称的服务管理脚本。The systemd unit is now named mopheus-daemon.service; update service-management automation that still references the former unit name.
• 启用企业微信集成前请配置新的企业微信设置。多服务器部署应配置 Redis，以便在 API 实例之间共享本地技能发现与导入请求状态。Configure the new WeCom settings before enabling the integration. Multi-server installations should configure Redis so local Skill discovery/import request state is shared across API instances.
• 技能编辑器无需手工改写数据；现有 SKILL.md 的 Frontmatter 会在后续支持的保存和覆盖导入操作中成为权威来源。No manual data rewrite is required for the Skill editor changes; existing SKILL.md Frontmatter becomes the canonical source during subsequent supported saves and overwrites.

新增Copy Anchor LinkNewCopy Anchor Link

• 通道整合 — Lark 与飞书统一在同一通道引擎下，支持媒体状态清理、任务批处理语义以及按工作区隔离的聊天写入。Channel unification — Lark and Feishu consolidated under one channel engine with media-state cleanup, task-batching semantics, and workspace-scoped chat writes.
• 守护进程身份与新运行时 — 运行时注册支持 profile tag，守护进程按 profile 区分身份，并新增 pi-coding-agent 提供商。Daemon identity & new runtime — profile-tagged runtime registration, per-profile daemon identity, and a new pi-coding-agent provider.
• 工作区管理 — 批量邀请并附带技能、运行时可见的资源授权、支持分页与刷新授权的角色，以及新增的资源授权模型。Workspace management — batch invites that include skills, visible resource grants on runtimes, paginated roles with refresh grants, and a new resource-grant model.
• RBAC 资源授权 — 成员可自助管理智能体访问，智能体生命周期操作按工作区隔离。RBAC resource grants — self-managed agent access for members and lifecycle operations gated by workspace scope.
• 工单与元数据 — 元数据 CRUD 走 service 层并配套选择器 UI，新增评论 Enter 键行为偏好、工单列表搜索过滤器，my-tickets 范围过滤下推到后端。Tickets & metadata — metadata CRUD via the service layer with a picker UI, comment Enter-key behavior preference, ticket list search filter, and my-tickets scope filtering pushed to the backend.
• CLI 增强 — 新增 skill list 查询参数；工单命令支持 --project-id 别名；智能体与团队创建命令支持 --description-stdin 与 --description-file。CLI surface — skill list query flags, ticket list search filter, --project-id alias on ticket commands, --description-stdin and --description-file on agent and team create.
• 个人偏好设置 — 个人偏好、通知设置、键盘快捷键录制与编辑器显示模式偏好。Profile & preferences — personal preferences, notification settings, keyboard shortcut recording, and editor display-mode preferences.
• 任务清单 — 智能体任务新增随任务运行的本地 checklist。Agent-task checklist — per-task run-local checklist surfaced to CLI sessions.
• License CLI — mopheus-license 新增模板预设。License CLI — template presets available in mopheus-license.

改进Copy Anchor LinkImprovedCopy Anchor Link

• 编辑器行为 — Enter 与 Mod-Enter 互补处理；检测快捷键冲突；/add comment 风格在提示词中统一。Editor behavior — Enter / Mod-Enter complementary handling, shortcuts conflict detection, and /add comment style unified across prompts.
• 蒸馏流程 — 记忆更新支持重新蒸馏的选择信号；去重逻辑与 mopheus memory 子命令对齐。Distillation — redistillation choices signal for memory refinement; dedup logic aligned with mopheus memory subcommand.
• 激活与注册 — 运行时注册时保留激活状态；新智能体默认 normal 角色。Activation & registration — runtime activation preserved on register; new agents default to the normal role.
• 国际化 — 工作区设置页各 Tab 完成翻译；新增记忆角色范围标签。i18n — workspace settings tabs translated; memory role scope label added.
• 守护进程运行时 — 每次智能体任务运行后清理任务级技能。Hermes channel — per-task skills cleared between agent-task runs.
• Codex 沙箱 — macOS 沙箱与 Linux 行为对齐。Codex sandbox — macOS sandbox aligned with the Linux behavior.
• 通道安装流程 — 接受邀请后刷新工作区列表；删除时清理媒体状态。Channel install flows — workspaces refresh after invitation acceptance; media state cleaned on deletion.
• 输出示例 — slim 提示词的 repo 命令样例与现行 CLI 参数对齐；新增按提供商的 task tracking 说明。Output guidance — slim repo command examples aligned with current CLI flags; provider-specific task tracking guidance added.

修复Copy Anchor LinkFixedCopy Anchor Link

• 跨工作区加固 — 关闭团队 CRUD、成员加入、智能体生命周期、jobs/triggers/runs、运行时、收件箱操作、技能 CRUD、附件、工单 pin、标签、团队负责人、聊天写入、Lark 安装绑定以及 License 配额检查中残留的跨工作区泄漏。Cross-workspace hardening — closing leaks in team CRUD, member onboarding, agent lifecycles, jobs/triggers/runs, runtimes, inbox operations, skill CRUD, attachments, ticket pins, labels, team leaders, chat writes, Lark installation/binding, and license quota checks.
• 品牌重命名 — moclaw → mopheus，覆盖 CLI、脚本、文档与各包。Brand rename — moclaw → mopheus across CLI, scripts, docs, and packages.
• 标签操作类型重命名 — TicketLableOperationParams → TicketLabelOperationParams。Label operation type rename — TicketLableOperationParams → TicketLabelOperationParams.
• 鉴权 — 明确当前密码要求；JWT 过期单独报告；集中用户错误码。Auth — current-password requirement clarified; expired JWT sessions report a distinct error; user error codes centralized.
• 守护进程 — 先前工作目录失效时优雅处理；运行时被禁用时允许负责人心跳；心跳回收限定为快照长度。Daemon — graceful handling when the prior working directory is unavailable; allow owner heartbeats when the runtime is disabled; bound heartbeat drain to snapshot length.
• 工作区 — 仅负责人可删除；接受重命名前的 License 代码；配置变更后刷新工作区数据。Workspace — enforce owner-only deletion; accept pre-rename license codes; refresh workspace data on config changes.
• 迁移与安装升级 — 跨升级保留已有表数据与自定义系统配置；避免重复注入已迁移的环境变量；强化重命名后的升级脚本。Migration & install upgrades — preserve existing table data and custom system config across upgrades; avoid duplicating migrated environment keys; harden renamed upgrade scripts.
• 技能 — 技能列表分页；统一脚本文件权限；恢复导入编排。Skills — paginated skills list, normalized script file permissions, renewal of import orchestration.
• 智能体 — 监听 kimi 缺会话日志并自动重试 resume；配置 ACP 非交互权限；运行时离线时任务进入队列；将 Codex 计划更新作为工具事件上报。Agent — detect kimi missing sessions from stderr and retry resume; configure ACP unattended permissions; queue agent tasks when the runtime is offline; surface Codex plan updates as tool events.
• 通知 — 当前聚焦窗口时抑制横幅；允许前台通知测试。Notifications — suppress banners while focused; foreground tests allowed.
• 编辑器 — 限制大附件预览；长评论导航、聊天消息复制按钮、按结构化 ID 路由群体 @ 提及。Editor — limit large attachment previews; long-comment navigation, chat copy button, group mention routing by structured ids.
• 收件箱 — 合并工单已读与归档操作；单项操作按工作区与收件人隔离。Inbox — group ticket read and archive actions; scope single-item operations by workspace and recipient.
• 通道 — 保留侧边栏聊天入口；删除时清理媒体状态。Hermes channel — keep the sidebar chat available; clean media state on deletion.
• 后端 — 运行时被禁用但负责人在线时允许心跳与注册；守护进程解决 claim 的工作区；为 JOIN 查询补全列限定。Backend — allow heartbeat and registration for disabled runtimes when the owner is active; resolve daemon claim workspace; qualify joined SQL column references.

新增Copy Anchor LinkNewCopy Anchor Link