diff --git a/.github/workflows/desktop-release-package.yml b/.github/workflows/desktop-release-package.yml
index 0728eda80..e0f0e47b1 100644
--- a/.github/workflows/desktop-release-package.yml
+++ b/.github/workflows/desktop-release-package.yml
@@ -23,34 +23,46 @@ name: Build Desktop Portable Packages
           - "macos"
 
 permissions:
-  contents: write
+  contents: read
+
+env:
+  NODE_VERSION: "22.23.2"
+  RUST_TOOLCHAIN: "1.95.0"
+  PBS_RELEASE: "20260814"
+  PBS_PYTHON_VERSION: "3.12.14"
 
 jobs:
   # ----------------------------------------------------------------------------
   build-windows:
     name: Windows portable
-    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event.inputs.target == 'all' || github.event.inputs.target == 'windows' }}
-    runs-on: windows-latest
+    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'windows')) }}
+    runs-on: windows-2025
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: 20
+          node-version: ${{ env.NODE_VERSION }}
 
       - name: Set up Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
+        with:
+          toolchain: ${{ env.RUST_TOOLCHAIN }}
 
       - name: Cache Rust build
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
         with:
           workspaces: frontends/desktop/src-tauri -> target
 
       - name: Install desktop dependencies
         working-directory: frontends/desktop
-        run: npm install
+        run: npm ci
 
       - name: Build Windows desktop exe
         working-directory: frontends/desktop
@@ -58,8 +70,6 @@ jobs:
 
       - name: Assemble self-contained portable bundle
         shell: bash
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
 
@@ -77,18 +87,16 @@ jobs:
           cp frontends/desktop/packaging/scripts/windows/uninstall.bat "$PKG/uninstall.bat"
           cp frontends/desktop/packaging/scripts/windows/uninstall_windows.ps1 "$RUNTIME/uninstall_windows.ps1"
 
-          # Embedded Python (python-build-standalone, windows x86_64, 3.12 install_only).
-          # browser_download_url is URL-encoded ('+' -> '%2B'); match loosely with '.*'.
-          PBS_URL="$(curl -fsSL -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/repos/astral-sh/python-build-standalone/releases/latest \
-            | grep -o '"browser_download_url": *"[^"]*"' \
-            | grep 'cpython-3\.12\.[0-9].*x86_64-pc-windows-msvc-install_only\.tar\.gz' \
-            | head -1 | sed -E 's/.*"(https[^"]+)"/\1/')"
-          [[ -n "$PBS_URL" ]] || { echo "Could not resolve python-build-standalone download URL" >&2; exit 1; }
+          # Fixed python-build-standalone Windows x86_64 archive.
+          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-x86_64-pc-windows-msvc-install_only.tar.gz"
+          PBS_SHA256="7330282b47cd43a66b702d39078d2e5a88e580cee351d82f95045f21f5ee042a"
+          PBS_ARCHIVE="${RUNNER_TEMP}/pbs-windows-x86_64.tar.gz"
           echo "Python build-standalone: $PBS_URL"
-          curl -fsSL -o /tmp/pbs.tar.gz "$PBS_URL"
-          tar -xzf /tmp/pbs.tar.gz -C "$RUNTIME"   # extracts a 'python/' dir (python.exe at top)
+          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
+          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | sha256sum --check --strict -
+          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME"   # extracts a 'python/' dir (python.exe at top)
           PY="$RUNTIME/python/python.exe"
-          "$PY" --version
+          "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine().lower() in ("amd64", "x86_64"); print(sys.version)'
 
           # App-local UCRT: python-build-standalone links the Universal CRT dynamically
           # and does NOT bundle it. Win10/11 ship UCRT in-box, but stripped/older images
@@ -104,11 +112,11 @@ jobs:
           test -f "$RUNTIME/python/api-ms-win-crt-runtime-l1-1-0.dll" \
             || { echo "UCRT DLLs missing after copy" >&2; exit 1; }
 
-          # Offline wheels (native win_amd64 wheels for the embedded python)
+          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
           mkdir -p "$RUNTIME/wheels"
-          "$PY" -m pip download --dest "$RUNTIME/wheels" \
-            "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil \
-            fastapi uvicorn websockets pydantic setuptools wheel
+          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME/wheels/requirements.txt"
+          "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME/wheels" \
+            --requirement "$RUNTIME/wheels/requirements.txt"
 
           # Runtime source (project root minus heavy/dev/build dirs)
           mkdir -p "$RUNTIME/app"
@@ -116,6 +124,7 @@ jobs:
             --exclude='./.git' --exclude='./.github' \
             --exclude='./frontends/desktop/src-tauri' \
             --exclude='./frontends/desktop/node_modules' \
+            --exclude='./frontends/desktop/dist' \
             --exclude='./frontends/desktop/packaging' --exclude='./docs' \
             --exclude='./assets/demo' --exclude='./assets/images' \
             --exclude='./assets/GenericAgent_Technical_Report.pdf' \
@@ -127,6 +136,7 @@ jobs:
           test -f "$RUNTIME/app/agentmain.py"
           test -f "$RUNTIME/app/frontends/desktop_bridge.py"
           test -f "$RUNTIME/app/frontends/desktop/static/index.html"
+          test ! -e "$RUNTIME/app/frontends/desktop/dist"
 
           # Drop python debug symbols (.pdb) to slim the package (~80MB)
           find "$RUNTIME/python" -name '*.pdb' -delete 2>/dev/null || true
@@ -192,7 +202,7 @@ jobs:
           Get-ChildItem artifacts/windows/out | Format-Table Name, Length
 
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: GenericAgent-Desktop-Windows-Portable-${{ github.run_number }}
           path: |
@@ -200,69 +210,31 @@ jobs:
             artifacts/windows/out/SHA256SUMS-windows.txt
           if-no-files-found: error
 
-      - name: Publish into unified Release (tag push only)
-        if: ${{ startsWith(github.ref, 'refs/tags/') }}
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          TAG_NAME="${{ github.ref_name }}"
-          TITLE="GenericAgent Desktop ${TAG_NAME}"
-          cat > "${RUNNER_TEMP:-/tmp}/ga_notes.md" <<'EOF'
-          GenericAgent Desktop 桌面版 / Desktop
-
-          无需自行安装 Python、无需联网安装依赖、无需源码；首次启动会自动准备内置运行环境。
-          No separate Python install, no internet for dependencies, no source checkout required; the bundled runtime is prepared on first launch.
-
-          ## 安装方法 / Installation
-          - Windows: 下载 `GenericAgent-Desktop-Windows-Portable.zip`，解压后双击 `GenericAgent.exe` 启动。卸载时先退出应用，再双击包内 `uninstall.bat`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Windows-Portable.zip`, extract it, then double-click `GenericAgent.exe`. To uninstall, quit the app, double-click `uninstall.bat`, then delete the extracted folder.
-          - Linux: 下载 `GenericAgent-Desktop-Linux-Portable.tar.gz`，解压后执行 `chmod +x GenericAgent.AppImage`，再运行 `./GenericAgent.AppImage`。卸载时先退出应用，再运行 `./uninstall.sh`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Linux-Portable.tar.gz`, extract it, run `chmod +x GenericAgent.AppImage`, then launch `./GenericAgent.AppImage`. To uninstall, quit the app, run `./uninstall.sh`, then delete the extracted folder.
-          - macOS: 下载 `GenericAgent-Desktop-macOS.dmg`，双击打开 DMG，把 `GenericAgent.app` 拖入 `Applications`，之后在“应用程序 / Applications”中启动。若出现“无法验证开发者”等提示，请右键应用选择“打开”，或在“系统设置 → 隐私与安全性”中允许打开。卸载时先退出应用，再从 Applications 删除 `GenericAgent.app`。
-            Download `GenericAgent-Desktop-macOS.dmg`, open it, drag `GenericAgent.app` to `Applications`, then launch it from Applications. If macOS says the developer cannot be verified, right-click the app and choose Open, or allow it in System Settings → Privacy & Security. To uninstall, quit the app, then delete `GenericAgent.app` from Applications.
-
-          ## 首次启动 / First launch
-          首次启动会自动离线准备运行环境（安装依赖），有进度条，完成后进入主界面；之后启动会更快。
-          The first launch prepares the runtime offline (installs deps) with a progress bar, then opens the main window; later launches are faster.
-
-          ## 说明 / Notes
-          - 想真正对话需在程序内配置模型 / API Key。Configure a model / API key in-app to start chatting.
-          - Windows Defender 防火墙可能会拦截 `127.0.0.1` / `localhost` 回环连接，导致程序无法启动或连接本机服务；请允许 `GenericAgent.exe` 和随包的 `python.exe` 通过防火墙后重启。Windows Defender Firewall may block the local loopback connection; allow `GenericAgent.exe` and the bundled `python.exe` through the firewall, then restart the app.
-          - Windows/Linux 为便携包，可整体移动到任意目录后继续使用。Windows/Linux packages are portable and can be moved as a whole folder.
-          - Windows/Linux 包内附 `readme.txt`（中英）。Windows/Linux packages include a bilingual `readme.txt`.
-          EOF
-          # Create the shared release if it does not exist yet (another OS job may win the race).
-          # Race-safe: the 3 OS jobs share ONE release. Retry create until the release
-          # actually exists (a simultaneous create from another job can fail), so the
-          # upload below never races a not-yet-created release.
-          for _ in $(seq 1 15); do
-            gh release view "$TAG_NAME" >/dev/null 2>&1 && break
-            gh release create "$TAG_NAME" --target "${{ github.sha }}" --title "$TITLE" --notes-file "${RUNNER_TEMP:-/tmp}/ga_notes.md" --prerelease 2>/dev/null || true
-            sleep 3
-          done
-          gh release upload "$TAG_NAME" artifacts/windows/out/* --clobber
-
   # ----------------------------------------------------------------------------
   build-linux:
     name: Linux portable
-    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event.inputs.target == 'all' || github.event.inputs.target == 'linux' }}
+    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'linux')) }}
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: 20
+          node-version: ${{ env.NODE_VERSION }}
 
       - name: Set up Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
+        with:
+          toolchain: ${{ env.RUST_TOOLCHAIN }}
 
       - name: Cache Rust build
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
         with:
           workspaces: frontends/desktop/src-tauri -> target
 
@@ -278,7 +250,7 @@ jobs:
 
       - name: Install desktop dependencies
         working-directory: frontends/desktop
-        run: npm install
+        run: npm ci
 
       - name: Build Linux AppImage
         working-directory: frontends/desktop
@@ -286,8 +258,6 @@ jobs:
 
       - name: Assemble self-contained portable bundle
         shell: bash
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           APPIMAGE_SRC="$(find frontends/desktop/src-tauri/target/release/bundle/appimage -maxdepth 1 -type f -name '*.AppImage' | head -n 1)"
@@ -308,23 +278,22 @@ jobs:
           cp frontends/desktop/packaging/scripts/linux/uninstall.sh "$PKG/uninstall.sh"
           chmod +x "$PKG/uninstall.sh"
 
-          # Embedded Python (python-build-standalone, linux x86_64, 3.12 install_only).
-          PBS_URL="$(curl -fsSL -H "Authorization: Bearer $GH_TOKEN" https://api.github.com/repos/astral-sh/python-build-standalone/releases/latest \
-            | grep -o '"browser_download_url": *"[^"]*"' \
-            | grep 'cpython-3\.12\.[0-9].*x86_64-unknown-linux-gnu-install_only\.tar\.gz' \
-            | head -1 | sed -E 's/.*"(https[^"]+)"/\1/')"
-          [[ -n "$PBS_URL" ]] || { echo "Could not resolve python-build-standalone download URL" >&2; exit 1; }
+          # Fixed python-build-standalone Linux x86_64 archive.
+          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          PBS_SHA256="3297691ae34f75fed81ac424e040145fccb0bafe8e581cd5cadbddfa1c0766c0"
+          PBS_ARCHIVE="${RUNNER_TEMP}/pbs-linux-x86_64.tar.gz"
           echo "Python build-standalone: $PBS_URL"
-          curl -fsSL -o /tmp/pbs.tar.gz "$PBS_URL"
-          tar -xzf /tmp/pbs.tar.gz -C "$RUNTIME"   # extracts a 'python/' dir
+          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
+          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | sha256sum --check --strict -
+          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME"   # extracts a 'python/' dir
           PY="$RUNTIME/python/bin/python3"
-          "$PY" --version
+          "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine() == "x86_64"; print(sys.version)'
 
-          # Offline wheels (native linux wheels for the embedded python)
+          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
           mkdir -p "$RUNTIME/wheels"
-          "$PY" -m pip download --dest "$RUNTIME/wheels" \
-            "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil \
-            fastapi uvicorn websockets pydantic setuptools wheel
+          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME/wheels/requirements.txt"
+          "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME/wheels" \
+            --requirement "$RUNTIME/wheels/requirements.txt"
 
           # Runtime source (project root minus heavy/dev/build dirs)
           mkdir -p "$RUNTIME/app"
@@ -332,6 +301,7 @@ jobs:
             --exclude='./.git' --exclude='./.github' \
             --exclude='./frontends/desktop/src-tauri' \
             --exclude='./frontends/desktop/node_modules' \
+            --exclude='./frontends/desktop/dist' \
             --exclude='./frontends/desktop/packaging' --exclude='./docs' \
             --exclude='./assets/demo' --exclude='./assets/images' \
             --exclude='./assets/GenericAgent_Technical_Report.pdf' \
@@ -343,6 +313,7 @@ jobs:
           test -f "$RUNTIME/app/agentmain.py"
           test -f "$RUNTIME/app/frontends/desktop_bridge.py"
           test -f "$RUNTIME/app/frontends/desktop/static/index.html"
+          test ! -e "$RUNTIME/app/frontends/desktop/dist"
 
           # Drop python debug/cache bits to slim the package
           find "$RUNTIME/python" -name '__pycache__' -type d -prune -exec rm -rf {} + 2>/dev/null || true
@@ -405,7 +376,7 @@ jobs:
           ls -lh artifacts/linux/out
 
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: GenericAgent-Desktop-Linux-Portable-${{ github.run_number }}
           path: |
@@ -413,136 +384,91 @@ jobs:
             artifacts/linux/out/SHA256SUMS-linux.txt
           if-no-files-found: error
 
-      - name: Publish into unified Release (tag push only)
-        if: ${{ startsWith(github.ref, 'refs/tags/') }}
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        shell: bash
-        run: |
-          set -euo pipefail
-          TAG_NAME="${{ github.ref_name }}"
-          TITLE="GenericAgent Desktop ${TAG_NAME}"
-          cat > "${RUNNER_TEMP:-/tmp}/ga_notes.md" <<'EOF'
-          GenericAgent Desktop 桌面版 / Desktop
-
-          无需自行安装 Python、无需联网安装依赖、无需源码；首次启动会自动准备内置运行环境。
-          No separate Python install, no internet for dependencies, no source checkout required; the bundled runtime is prepared on first launch.
-
-          ## 安装方法 / Installation
-          - Windows: 下载 `GenericAgent-Desktop-Windows-Portable.zip`，解压后双击 `GenericAgent.exe` 启动。卸载时先退出应用，再双击包内 `uninstall.bat`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Windows-Portable.zip`, extract it, then double-click `GenericAgent.exe`. To uninstall, quit the app, double-click `uninstall.bat`, then delete the extracted folder.
-          - Linux: 下载 `GenericAgent-Desktop-Linux-Portable.tar.gz`，解压后执行 `chmod +x GenericAgent.AppImage`，再运行 `./GenericAgent.AppImage`。卸载时先退出应用，再运行 `./uninstall.sh`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Linux-Portable.tar.gz`, extract it, run `chmod +x GenericAgent.AppImage`, then launch `./GenericAgent.AppImage`. To uninstall, quit the app, run `./uninstall.sh`, then delete the extracted folder.
-          - macOS: 下载 `GenericAgent-Desktop-macOS.dmg`，双击打开 DMG，把 `GenericAgent.app` 拖入 `Applications`，之后在“应用程序 / Applications”中启动。若出现“无法验证开发者”等提示，请右键应用选择“打开”，或在“系统设置 → 隐私与安全性”中允许打开。卸载时先退出应用，再从 Applications 删除 `GenericAgent.app`。
-            Download `GenericAgent-Desktop-macOS.dmg`, open it, drag `GenericAgent.app` to `Applications`, then launch it from Applications. If macOS says the developer cannot be verified, right-click the app and choose Open, or allow it in System Settings → Privacy & Security. To uninstall, quit the app, then delete `GenericAgent.app` from Applications.
-
-          ## 首次启动 / First launch
-          首次启动会自动离线准备运行环境（安装依赖），有进度条，完成后进入主界面；之后启动会更快。
-          The first launch prepares the runtime offline (installs deps) with a progress bar, then opens the main window; later launches are faster.
-
-          ## 说明 / Notes
-          - 想真正对话需在程序内配置模型 / API Key。Configure a model / API key in-app to start chatting.
-          - Windows Defender 防火墙可能会拦截 `127.0.0.1` / `localhost` 回环连接，导致程序无法启动或连接本机服务；请允许 `GenericAgent.exe` 和随包的 `python.exe` 通过防火墙后重启。Windows Defender Firewall may block the local loopback connection; allow `GenericAgent.exe` and the bundled `python.exe` through the firewall, then restart the app.
-          - Windows/Linux 为便携包，可整体移动到任意目录后继续使用。Windows/Linux packages are portable and can be moved as a whole folder.
-          - Windows/Linux 包内附 `readme.txt`（中英）。Windows/Linux packages include a bilingual `readme.txt`.
-          EOF
-          # Race-safe: the 3 OS jobs share ONE release. Retry create until the release
-          # actually exists (a simultaneous create from another job can fail), so the
-          # upload below never races a not-yet-created release.
-          for _ in $(seq 1 15); do
-            gh release view "$TAG_NAME" >/dev/null 2>&1 && break
-            gh release create "$TAG_NAME" --target "${{ github.sha }}" --title "$TITLE" --notes-file "${RUNNER_TEMP:-/tmp}/ga_notes.md" --prerelease 2>/dev/null || true
-            sleep 3
-          done
-          gh release upload "$TAG_NAME" artifacts/linux/out/* --clobber
-
   # ----------------------------------------------------------------------------
   build-macos:
-    name: macOS DMG
-    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event.inputs.target == 'all' || github.event.inputs.target == 'macos' }}
-    runs-on: macos-latest
+    name: macOS arm64 DMG
+    if: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-')) || (github.event_name == 'workflow_dispatch' && (github.event.inputs.target == 'all' || github.event.inputs.target == 'macos')) }}
+    runs-on: macos-15
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+        with:
+          persist-credentials: false
 
       - name: Set up Node.js
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
         with:
-          node-version: 20
+          node-version: ${{ env.NODE_VERSION }}
 
       - name: Set up Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable action snapshot
+        with:
+          toolchain: ${{ env.RUST_TOOLCHAIN }}
 
       - name: Cache Rust build
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7 # v2.9.2
         with:
           workspaces: frontends/desktop/src-tauri -> target
 
       - name: Install desktop dependencies
         working-directory: frontends/desktop
-        run: npm install
+        run: npm ci
+
+      - name: Set up Python packaging runtime
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ env.PBS_PYTHON_VERSION }}
 
       - name: Install Python packaging tools
-        run: python3 -m pip install --break-system-packages ds_store
+        run: >-
+          python3 -m pip install --require-hashes --only-binary=:all:
+          --requirement frontends/desktop/packaging/dmg-build-requirements.txt
+
+      - name: Assert macOS runner architecture
+        run: test "$(uname -m)" = arm64
 
       - name: Build macOS .app
         working-directory: frontends/desktop
         run: npm run tauri build -- --bundles app
 
-      - name: Assemble self-contained portable bundle and DMG app
+      - name: Assemble self-contained DMG app
         shell: bash
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euo pipefail
           APP_SRC="$(find frontends/desktop/src-tauri/target/release/bundle/macos -maxdepth 1 -name '*.app' -type d | head -n 1)"
           [[ -n "$APP_SRC" ]] || { echo "No .app found" >&2; exit 1; }
 
-          # Build one runtime/ tree, then reuse it for both macOS deliverables:
-          # 1) Portable zip: GenericAgent.app + runtime/ + helper scripts.
-          # 2) Standard DMG: GenericAgent.app with runtime embedded in Contents/Resources/runtime.
+          # Build one runtime tree and embed it only in the final DMG application.
           RUNTIME_SRC="artifacts/macos/runtime-src"
           mkdir -p "$RUNTIME_SRC"
           cp frontends/desktop/packaging/scripts/macos/install_macos.sh "$RUNTIME_SRC/install_macos.sh"
           chmod +x "$RUNTIME_SRC/install_macos.sh"
 
-          # Embedded Python (python-build-standalone, macOS, 3.12 install_only; aarch64 preferred).
-          PBS_URL="$(python3 - <<'PY'
-          import json, os, urllib.request
-          api='https://api.github.com/repos/astral-sh/python-build-standalone/releases/latest'
-          req=urllib.request.Request(api)
-          token=os.environ.get('GH_TOKEN')
-          if token:
-              req.add_header('Authorization', 'Bearer ' + token)
-          data=json.load(urllib.request.urlopen(req, timeout=60))
-          assets=data.get('assets', [])
-          for arch in ('aarch64-apple-darwin', 'x86_64-apple-darwin'):
-              for a in assets:
-                  name=a.get('name','')
-                  if 'cpython-3.12' in name and arch in name and name.endswith('install_only.tar.gz') and 'stripped' not in name:
-                      print(a['browser_download_url']); raise SystemExit
-          raise SystemExit('No suitable python-build-standalone macOS asset found')
-          PY
-          )"
+          # Fixed python-build-standalone macOS arm64 archive.
+          PBS_URL="https://github.com/astral-sh/python-build-standalone/releases/download/${PBS_RELEASE}/cpython-${PBS_PYTHON_VERSION}%2B${PBS_RELEASE}-aarch64-apple-darwin-install_only.tar.gz"
+          PBS_SHA256="4572133a5542f306b9bdb155da5800f9e38950cd0a98d469b832ce256fe299ea"
+          PBS_ARCHIVE="${RUNNER_TEMP}/pbs-macos-aarch64.tar.gz"
           echo "Python build-standalone: $PBS_URL"
-          curl -L --fail --retry 3 -o /tmp/pbs-macos.tar.gz "$PBS_URL"
-          tar -xzf /tmp/pbs-macos.tar.gz -C "$RUNTIME_SRC"   # extracts a 'python/' dir
+          curl --proto '=https' --tlsv1.2 --fail --location --retry 3 --output "$PBS_ARCHIVE" "$PBS_URL"
+          printf '%s  %s\n' "$PBS_SHA256" "$PBS_ARCHIVE" | shasum -a 256 --check -
+          tar -xzf "$PBS_ARCHIVE" -C "$RUNTIME_SRC"   # extracts a 'python/' dir
           PY="$RUNTIME_SRC/python/bin/python3"
-          "$PY" --version
+          "$PY" -c 'import platform, sys; assert sys.version_info[:3] == (3, 12, 14); assert platform.machine() == "arm64"; print(sys.version)'
 
-          # Offline wheels
+          # Offline binary-only wheels. requirements.txt pins direct and transitive versions.
           mkdir -p "$RUNTIME_SRC/wheels"
-          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip download --dest "$RUNTIME_SRC/wheels" \
-            "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil \
-            fastapi uvicorn websockets pydantic setuptools wheel
+          cp frontends/desktop/packaging/python-runtime-requirements.txt "$RUNTIME_SRC/wheels/requirements.txt"
+          PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip download --only-binary=:all: --dest "$RUNTIME_SRC/wheels" \
+            --requirement "$RUNTIME_SRC/wheels/requirements.txt"
 
           # macOS applications must be immutable at first launch. Install from the downloaded
           # wheelhouse before the runtime enters the signed .app, then carry a durable marker.
-          # setuptools/wheel stay in the offline wheelhouse for recovery, but are build tools and
-          # are not needed in the prepared runtime. Bytecode writes are disabled at runtime too.
+          # The binary-only offline repair path needs neither setuptools nor wheel. Remove any
+          # copies shipped in the base interpreter; bytecode writes are disabled at runtime too.
           PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip install --no-compile --no-index --find-links "$RUNTIME_SRC/wheels" \
-            "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil \
-            fastapi uvicorn websockets pydantic
+            --requirement "$RUNTIME_SRC/wheels/requirements.txt"
           PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip uninstall --yes setuptools wheel
           PYTHONDONTWRITEBYTECODE=1 "$PY" -m pip check
 
@@ -572,6 +498,7 @@ jobs:
             --exclude='.git' --exclude='.github' \
             --exclude='frontends/desktop/src-tauri' \
             --exclude='frontends/desktop/node_modules' \
+            --exclude='frontends/desktop/dist' \
             --exclude='frontends/desktop/packaging' --exclude='docs' \
             --exclude='assets/demo' --exclude='assets/images' \
             --exclude='assets/GenericAgent_Technical_Report.pdf' \
@@ -583,55 +510,11 @@ jobs:
           test -f "$RUNTIME_SRC/app/agentmain.py"
           test -f "$RUNTIME_SRC/app/frontends/desktop_bridge.py"
           test -f "$RUNTIME_SRC/app/frontends/desktop/static/index.html"
+          test ! -e "$RUNTIME_SRC/app/frontends/desktop/dist"
 
-          PORTABLE="artifacts/macos/GenericAgent-Desktop-macOS-Portable"
           DMG_STAGE="artifacts/macos/dmg-stage"
           DMG_APP="$DMG_STAGE/GenericAgent.app"
-          mkdir -p "$PORTABLE" "$DMG_STAGE"
-
-          # Portable zip: keep the existing release shape and helper scripts.
-          ditto "$APP_SRC" "$PORTABLE/GenericAgent.app"
-          ditto "$RUNTIME_SRC" "$PORTABLE/runtime"
-          test -s "$PORTABLE/runtime/.prepared"
-          cp frontends/desktop/packaging/scripts/macos/uninstall.command "$PORTABLE/uninstall.command"
-          chmod +x "$PORTABLE/uninstall.command"
-          cat > "$PORTABLE/Start GenericAgent.command" <<'EOF'
-          #!/bin/bash
-          DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-          xattr -cr "$DIR/GenericAgent.app" 2>/dev/null || true
-          open "$DIR/GenericAgent.app"
-          EOF
-          chmod +x "$PORTABLE/Start GenericAgent.command"
-
-          cat > "$PORTABLE/readme.txt" <<'EOF'
-          ================ 中文 ================
-          GenericAgent Desktop — macOS 便携版（自包含）
-
-          无需安装 Python、无需联网装依赖、无需源码仓库——全部已内置。
-
-          使用
-          推荐：双击 “Start GenericAgent.command” 启动。也可直接双击 GenericAgent.app。
-          请保持目录结构不变：GenericAgent.app 与 runtime/ 必须在同一目录下。
-
-          卸载
-          双击 uninstall.command，或退出程序后删除整个便携文件夹。
-
-          ================ English ================
-          GenericAgent Desktop — macOS Portable (self-contained)
-
-          No Python install, no internet for dependencies, no source checkout — everything is bundled.
-
-          Usage
-          Recommended: double-click "Start GenericAgent.command". You can also double-click GenericAgent.app.
-          Keep the folder layout intact: GenericAgent.app and runtime/ must stay in the same directory.
-
-          Uninstall
-          Double-click uninstall.command, or quit the app and delete the whole portable folder.
-          EOF
-          sed -i '' 's/^          //' "$PORTABLE/readme.txt"
-
-          codesign --force --deep --sign - "$PORTABLE/GenericAgent.app"
-          codesign --verify --deep --strict "$PORTABLE/GenericAgent.app" || true
+          mkdir -p "$DMG_STAGE"
 
           # Standard DMG: GenericAgent.app + Applications alias. The post-build
           # repackager below writes the curated two-icon Finder layout.
@@ -651,8 +534,9 @@ jobs:
             echo "Python bytecode cache remains in final DMG app" >&2
             exit 1
           fi
+          # Ad-hoc signing only: this is not Developer ID signing or notarization.
           codesign --force --deep --sign - "$DMG_APP"
-          codesign --verify --deep --strict "$DMG_APP" || true
+          codesign --verify --deep --strict "$DMG_APP"
           ln -s /Applications "$DMG_STAGE/Applications"
 
           mkdir -p artifacts/macos/out
@@ -661,67 +545,149 @@ jobs:
             -srcfolder "$DMG_STAGE" \
             -ov \
             -format UDZO \
-            "artifacts/macos/out/GenericAgent-Desktop-macOS.dmg"
+            "artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg"
 
           # Restore the intentionally minimal Finder presentation: only the app
           # and Applications shortcut, with the established window/icon layout.
-          bash frontends/desktop/scripts/post-dmg.sh "artifacts/macos/out/GenericAgent-Desktop-macOS.dmg"
+          bash frontends/desktop/scripts/post-dmg.sh "artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg"
 
           (
             cd artifacts/macos/out
-            shasum -a 256 "GenericAgent-Desktop-macOS.dmg" \
-              > "GenericAgent-Desktop-macOS.dmg.sha256"
+            shasum -a 256 "GenericAgent-Desktop-macOS-aarch64.dmg" \
+              > "GenericAgent-Desktop-macOS-aarch64.dmg.sha256"
           )
 
           echo "DMG stage tree:"
           find "$DMG_STAGE" -maxdepth 2 -print | sort
 
       - name: Upload workflow artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: GenericAgent-Desktop-macOS-DMG-${{ github.run_number }}
-          path: artifacts/macos/out/*
+          name: GenericAgent-Desktop-macOS-aarch64-DMG-${{ github.run_number }}
+          path: |
+            artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg
+            artifacts/macos/out/GenericAgent-Desktop-macOS-aarch64.dmg.sha256
           if-no-files-found: error
 
-      - name: Publish into unified Release (tag push only)
-        if: ${{ startsWith(github.ref, 'refs/tags/') }}
+  # ----------------------------------------------------------------------------
+  publish-release:
+    name: Publish one atomic prerelease
+    needs: [build-windows, build-linux, build-macos]
+    if: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/desktop-portable-') && needs.build-windows.result == 'success' && needs.build-linux.result == 'success' && needs.build-macos.result == 'success' }}
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+    steps:
+      - name: Download Windows candidate
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        with:
+          name: GenericAgent-Desktop-Windows-Portable-${{ github.run_number }}
+          path: ${{ runner.temp }}/release-assets
+
+      - name: Download Linux candidate
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        with:
+          name: GenericAgent-Desktop-Linux-Portable-${{ github.run_number }}
+          path: ${{ runner.temp }}/release-assets
+
+      - name: Download macOS arm64 candidate
+        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        with:
+          name: GenericAgent-Desktop-macOS-aarch64-DMG-${{ github.run_number }}
+          path: ${{ runner.temp }}/release-assets
+
+      - name: Validate six assets and publish prerelease
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         shell: bash
         run: |
           set -euo pipefail
+
+          ASSET_DIR="${RUNNER_TEMP}/release-assets"
+          EXPECTED=(
+            GenericAgent-Desktop-Linux-Portable.tar.gz
+            GenericAgent-Desktop-Windows-Portable.zip
+            GenericAgent-Desktop-macOS-aarch64.dmg
+            GenericAgent-Desktop-macOS-aarch64.dmg.sha256
+            SHA256SUMS-linux.txt
+            SHA256SUMS-windows.txt
+          )
+
+          if find "$ASSET_DIR" -mindepth 1 -maxdepth 1 ! -type f -print -quit | grep -q .; then
+            echo "Release staging contains a non-regular entry" >&2
+            find "$ASSET_DIR" -mindepth 1 -maxdepth 1 -print >&2
+            exit 1
+          fi
+          mapfile -t ACTUAL < <(find "$ASSET_DIR" -mindepth 1 -maxdepth 1 -type f -printf '%f\n' | LC_ALL=C sort)
+          if ! diff -u <(printf '%s\n' "${EXPECTED[@]}") <(printf '%s\n' "${ACTUAL[@]}"); then
+            echo "Release staging must contain exactly the six expected files" >&2
+            exit 1
+          fi
+          for filename in "${EXPECTED[@]}"; do
+            test -s "$ASSET_DIR/$filename" || { echo "Missing or empty release asset: $filename" >&2; exit 1; }
+          done
+
+          verify_checksum_manifest() {
+            local manifest="$1"
+            local payload="$2"
+            local normalized="${RUNNER_TEMP}/${manifest}.normalized"
+            tr -d '\r' < "$ASSET_DIR/$manifest" > "$normalized"
+            awk -v expected="$payload" '
+              NF == 2 && $1 ~ /^[0-9a-fA-F]{64}$/ && $2 == expected { valid += 1 }
+              END { exit !(NR == 1 && valid == 1) }
+            ' "$normalized"
+            (cd "$ASSET_DIR" && sha256sum --check --strict "$normalized")
+          }
+          verify_checksum_manifest SHA256SUMS-windows.txt GenericAgent-Desktop-Windows-Portable.zip
+          verify_checksum_manifest SHA256SUMS-linux.txt GenericAgent-Desktop-Linux-Portable.tar.gz
+          verify_checksum_manifest GenericAgent-Desktop-macOS-aarch64.dmg.sha256 GenericAgent-Desktop-macOS-aarch64.dmg
+
           TAG_NAME="${{ github.ref_name }}"
           TITLE="GenericAgent Desktop ${TAG_NAME}"
-          cat > "${RUNNER_TEMP:-/tmp}/ga_notes.md" <<'EOF'
+          NOTES_FILE="${RUNNER_TEMP}/ga-release-notes.md"
+          cat > "$NOTES_FILE" <<'EOF'
           GenericAgent Desktop 桌面版 / Desktop
 
-          无需自行安装 Python、无需联网安装依赖、无需源码；首次启动会自动准备内置运行环境。
-          No separate Python install, no internet for dependencies, no source checkout required; the bundled runtime is prepared on first launch.
+          三个平台产物来自同一提交，并在公开发布前统一验证。All three platform artifacts come from one commit and are validated before publication.
 
           ## 安装方法 / Installation
-          - Windows: 下载 `GenericAgent-Desktop-Windows-Portable.zip`，解压后双击 `GenericAgent.exe` 启动。卸载时先退出应用，再双击包内 `uninstall.bat`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Windows-Portable.zip`, extract it, then double-click `GenericAgent.exe`. To uninstall, quit the app, double-click `uninstall.bat`, then delete the extracted folder.
-          - Linux: 下载 `GenericAgent-Desktop-Linux-Portable.tar.gz`，解压后执行 `chmod +x GenericAgent.AppImage`，再运行 `./GenericAgent.AppImage`。卸载时先退出应用，再运行 `./uninstall.sh`，最后删除整个解压目录。
-            Download `GenericAgent-Desktop-Linux-Portable.tar.gz`, extract it, run `chmod +x GenericAgent.AppImage`, then launch `./GenericAgent.AppImage`. To uninstall, quit the app, run `./uninstall.sh`, then delete the extracted folder.
-          - macOS: 下载 `GenericAgent-Desktop-macOS.dmg`，双击打开 DMG，把 `GenericAgent.app` 拖入 `Applications`，之后在“应用程序 / Applications”中启动。若出现“无法验证开发者”等提示，请右键应用选择“打开”，或在“系统设置 → 隐私与安全性”中允许打开。卸载时先退出应用，再从 Applications 删除 `GenericAgent.app`。
-            Download `GenericAgent-Desktop-macOS.dmg`, open it, drag `GenericAgent.app` to `Applications`, then launch it from Applications. If macOS says the developer cannot be verified, right-click the app and choose Open, or allow it in System Settings → Privacy & Security. To uninstall, quit the app, then delete `GenericAgent.app` from Applications.
-
-          ## 首次启动 / First launch
-          首次启动会自动离线准备运行环境（安装依赖），有进度条，完成后进入主界面；之后启动会更快。
-          The first launch prepares the runtime offline (installs deps) with a progress bar, then opens the main window; later launches are faster.
-
-          ## 说明 / Notes
-          - 想真正对话需在程序内配置模型 / API Key。Configure a model / API key in-app to start chatting.
-          - Windows Defender 防火墙可能会拦截 `127.0.0.1` / `localhost` 回环连接，导致程序无法启动或连接本机服务；请允许 `GenericAgent.exe` 和随包的 `python.exe` 通过防火墙后重启。Windows Defender Firewall may block the local loopback connection; allow `GenericAgent.exe` and the bundled `python.exe` through the firewall, then restart the app.
-          - Windows/Linux 为便携包，可整体移动到任意目录后继续使用。Windows/Linux packages are portable and can be moved as a whole folder.
-          - Windows/Linux 包内附 `readme.txt`（中英）。Windows/Linux packages include a bilingual `readme.txt`.
+          - Windows x64：下载 `GenericAgent-Desktop-Windows-Portable.zip`，解压后双击 `GenericAgent.exe`。卸载时运行 `uninstall.bat`，再删除解压目录。
+            Windows x64: extract `GenericAgent-Desktop-Windows-Portable.zip`, then launch `GenericAgent.exe`. Run `uninstall.bat` before deleting the extracted directory.
+          - Linux x86_64：下载并解压 `GenericAgent-Desktop-Linux-Portable.tar.gz`，执行 `chmod +x GenericAgent.AppImage` 后运行它。卸载时运行 `uninstall.sh`，再删除解压目录。
+            Linux x86_64: extract `GenericAgent-Desktop-Linux-Portable.tar.gz`, run `chmod +x GenericAgent.AppImage`, then launch it. Run `uninstall.sh` before deleting the extracted directory.
+          - macOS Apple silicon (arm64)：打开 `GenericAgent-Desktop-macOS-aarch64.dmg`，把 `GenericAgent.app` 拖入 Applications。
+            macOS Apple silicon (arm64): open `GenericAgent-Desktop-macOS-aarch64.dmg` and drag `GenericAgent.app` to Applications.
+
+          ## 签名状态 / Signing status
+          macOS 应用仅使用 ad-hoc 签名，未使用 Apple Developer ID，也未 notarize。首次打开可能需要右键选择“打开”或在“隐私与安全性”中允许。
+          The macOS app is ad-hoc signed only. It is neither Developer ID signed nor notarized; first launch may require Open from the context menu or approval in Privacy & Security.
+
+          SHA-256 清单与各产物一同发布。SHA-256 manifests are included with the artifacts.
           EOF
-          # Race-safe: the 3 OS jobs share ONE release. Retry create until the release
-          # actually exists (a simultaneous create from another job can fail), so the
-          # upload below never races a not-yet-created release.
-          for _ in $(seq 1 15); do
-            gh release view "$TAG_NAME" >/dev/null 2>&1 && break
-            gh release create "$TAG_NAME" --target "${{ github.sha }}" --title "$TITLE" --notes-file "${RUNNER_TEMP:-/tmp}/ga_notes.md" --prerelease 2>/dev/null || true
-            sleep 3
+          sed -i 's/^          //' "$NOTES_FILE"
+
+          if gh release view "$TAG_NAME" >/dev/null 2>&1; then
+            echo "A release already exists for $TAG_NAME; refusing to overwrite it" >&2
+            exit 1
+          fi
+
+          ASSETS=()
+          for filename in "${EXPECTED[@]}"; do
+            ASSETS+=("$ASSET_DIR/$filename")
           done
-          gh release upload "$TAG_NAME" artifacts/macos/out/* --clobber
+          # Keep the release invisible while all assets upload; only the final edit publishes it.
+          gh release create "$TAG_NAME" "${ASSETS[@]}" \
+            --target "${{ github.sha }}" \
+            --title "$TITLE" \
+            --notes-file "$NOTES_FILE" \
+            --draft \
+            --prerelease
+
+          mapfile -t REMOTE_ASSETS < <(gh release view "$TAG_NAME" --json assets --jq '.assets[].name' | LC_ALL=C sort)
+          diff -u <(printf '%s\n' "${EXPECTED[@]}") <(printf '%s\n' "${REMOTE_ASSETS[@]}")
+          test "$(gh release view "$TAG_NAME" --json isDraft --jq '.isDraft')" = true
+          test "$(gh release view "$TAG_NAME" --json isPrerelease --jq '.isPrerelease')" = true
+
+          gh release edit "$TAG_NAME" --draft=false --prerelease
+          test "$(gh release view "$TAG_NAME" --json isDraft --jq '.isDraft')" = false
+          test "$(gh release view "$TAG_NAME" --json isPrerelease --jq '.isPrerelease')" = true
diff --git a/frontends/cost_tracker.py b/frontends/cost_tracker.py
index 0471129fb..c83ccfe7c 100644
--- a/frontends/cost_tracker.py
+++ b/frontends/cost_tracker.py
@@ -162,6 +162,11 @@ def init_ledger(root: str) -> None:
 
 def _append_ledger(thread_key: str, inp: int, out: int, cc: int, cr: int) -> None:
     global _ledger_uncompacted_bytes
+    # TUI and conductor processes install the in-memory tracker but never call
+    # init_ledger(). Keep their historical hot path to one lock-free branch:
+    # no clock lookup, JSON encoding, byte counting, or ledger lock acquisition.
+    if _ledger_fd is None:
+        return
     line = json.dumps(
         {"t": time.time(), "k": thread_key, "i": inp, "o": out, "cc": cc, "cr": cr},
         separators=(",", ":"),
diff --git a/frontends/data_backup.py b/frontends/data_backup.py
index 4d711fff8..964d563e7 100644
--- a/frontends/data_backup.py
+++ b/frontends/data_backup.py
@@ -3,14 +3,17 @@
 
 import contextlib
 import datetime as dt
+import errno
 import json
 import os
+import re
 import shutil
 import stat
 import tempfile
+import uuid
 import zipfile
 from pathlib import Path, PurePosixPath
-from typing import Iterator
+from typing import Any, Callable, Iterable, Iterator
 
 
 BACKUP_SCHEMA = "genericagent.data-backup"
@@ -24,6 +27,8 @@
     PurePosixPath("temp/desktop_sessions"),
 )
 
+_DESKTOP_SESSION_ID_RE = re.compile(r"[A-Za-z0-9][A-Za-z0-9_-]{0,127}")
+
 
 class BackupFormatError(ValueError):
     """Raised when a backup cannot be trusted or is not compatible."""
@@ -210,6 +215,11 @@ def _validated_zip(archive: zipfile.ZipFile) -> tuple[dict, list[zipfile.ZipInfo
 def _legacy_inspection(root: Path) -> dict:
     files = _source_files(root)
     paths = [relative for _, relative in files]
+    has_data_folder = any(
+        (root.joinpath(*prefix.parts).is_dir()
+         and not root.joinpath(*prefix.parts).is_symlink())
+        for prefix in _DATA_PREFIXES[:2]
+    )
     legacy_session_files = [
         root / "temp" / "desktop_sessions.json",
         root / "temp" / "desktop_sessions.json.migrated",
@@ -217,8 +227,10 @@ def _legacy_inspection(root: Path) -> dict:
     legacy_session_count = sum(
         path.is_file() and not path.is_symlink() for path in legacy_session_files
     )
-    if not files and not legacy_session_count:
-        raise BackupFormatError("no memory or session data found")
+    if not has_data_folder:
+        raise BackupFormatError(
+            "not a GA directory (no memory/ or temp/model_responses/)"
+        )
     counts = _content_counts(paths)
     counts["sessions"] += legacy_session_count
     return {
@@ -276,47 +288,381 @@ def materialize_import_source(source_path: str) -> Iterator[Path]:
         yield target_root
 
 
-def merge_data_files(source_dir: str, ga_root: str) -> dict:
+def _is_desktop_session_id(value: object) -> bool:
+    session_id = str(value or "")
+    return (
+        not session_id.startswith("tui_")
+        and _DESKTOP_SESSION_ID_RE.fullmatch(session_id) is not None
+    )
+
+
+def _read_source_sessions(source: Path) -> tuple[list[dict], bool, int]:
+    """Read supported Desktop session stores without trusting filenames.
+
+    Corrupt/non-Desktop records are skipped. The skipped count is intentionally
+    record-oriented; an unreadable file counts as one skipped source record.
+    """
+    items: list[dict] = []
+    found = False
+    skipped = 0
+    sessions_dir = source / "temp" / "desktop_sessions"
+    if sessions_dir.is_dir() and not sessions_dir.is_symlink():
+        for session_file in sorted(sessions_dir.glob("*.json")):
+            if session_file.is_symlink() or not session_file.is_file():
+                continue
+            found = True
+            try:
+                item = json.loads(session_file.read_text(encoding="utf-8"))
+            except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
+                skipped += 1
+                continue
+            if isinstance(item, dict):
+                items.append(item)
+            else:
+                skipped += 1
+
+    for legacy in (
+        source / "temp" / "desktop_sessions.json",
+        source / "temp" / "desktop_sessions.json.migrated",
+    ):
+        if legacy.is_symlink() or not legacy.is_file():
+            continue
+        found = True
+        try:
+            document = json.loads(legacy.read_text(encoding="utf-8"))
+        except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
+            skipped += 1
+            continue
+        if not isinstance(document, list):
+            skipped += 1
+            continue
+        for item in document:
+            if isinstance(item, dict):
+                items.append(item)
+            else:
+                skipped += 1
+    return items, found, skipped
+
+
+def _existing_session_ids(destination_root: Path) -> set[str]:
+    ids: set[str] = set()
+    sessions_dir = destination_root / "temp" / "desktop_sessions"
+    if not sessions_dir.is_dir() or sessions_dir.is_symlink():
+        return ids
+    for session_file in sorted(sessions_dir.glob("*.json")):
+        if session_file.is_symlink() or not session_file.is_file():
+            continue
+        if _is_desktop_session_id(session_file.stem):
+            ids.add(session_file.stem)
+        try:
+            item = json.loads(session_file.read_text(encoding="utf-8"))
+        except (OSError, UnicodeError, json.JSONDecodeError, ValueError):
+            continue
+        if isinstance(item, dict) and _is_desktop_session_id(item.get("id")):
+            ids.add(str(item["id"]))
+    return ids
+
+
+def _remove_path(path: Path) -> None:
+    if path.is_symlink() or path.is_file():
+        path.unlink()
+    elif path.is_dir():
+        shutil.rmtree(path)
+
+
+def _copy_tree_strict(source: Path, destination: Path) -> None:
+    """Copy a complete tree while refusing links and special files."""
+    if source.is_symlink() or not source.is_dir():
+        raise ValueError(f"cannot safely copy data folder: {source}")
+    destination.mkdir(parents=True, exist_ok=False)
+    for item in sorted(source.iterdir(), key=lambda path: path.name):
+        if item.is_symlink():
+            raise ValueError(f"data folder contains a symbolic link: {item}")
+        target = destination / item.name
+        if item.is_dir():
+            _copy_tree_strict(item, target)
+        elif item.is_file():
+            shutil.copy2(item, target)
+        else:
+            raise ValueError(f"data folder contains an unsupported file: {item}")
+
+
+def _prepare_overlay_target(root: Path, relative: PurePosixPath) -> Path:
+    current = root
+    for part in relative.parts[:-1]:
+        current = current / part
+        if current.is_symlink():
+            raise ValueError(f"memory destination contains a symbolic link: {current}")
+        if current.exists() and not current.is_dir():
+            _remove_path(current)
+        current.mkdir(exist_ok=True)
+    target = root.joinpath(*relative.parts)
+    if target.is_symlink() or target.is_dir():
+        _remove_path(target)
+    return target
+
+
+def _assert_safe_new_target(root: Path, target: Path) -> None:
+    relative = target.relative_to(root)
+    current = root
+    for part in relative.parts[:-1]:
+        current = current / part
+        if current.is_symlink():
+            raise ValueError(f"data destination contains a symbolic link: {current}")
+        if current.exists() and not current.is_dir():
+            raise ValueError(f"data destination parent is not a directory: {current}")
+
+
+def _new_backup_path(destination_root: Path) -> Path:
+    timestamp = dt.datetime.now().strftime("%Y%m%d_%H%M%S_%f")
+    backup_parent = destination_root / "temp"
+    for suffix in range(1000):
+        tail = "" if suffix == 0 else f"_{suffix}"
+        candidate = backup_parent / f"memory_import_backup_{timestamp}{tail}"
+        if not candidate.exists() and not candidate.is_symlink():
+            return candidate
+    raise OSError("cannot allocate a unique memory backup directory")
+
+
+def _create_memory_backup(destination_root: Path, memory_root: Path) -> Path:
+    backup_dir = _new_backup_path(destination_root)
+    backup_parent = backup_dir.parent
+    if backup_parent.is_symlink() or (
+        backup_parent.exists() and not backup_parent.is_dir()
+    ):
+        raise ValueError("current backup destination is not a safe directory")
+    backup_parent.mkdir(parents=True, exist_ok=True)
+    staging = backup_parent / f".{backup_dir.name}.staging-{uuid.uuid4().hex}"
+    try:
+        staging.mkdir()
+        _copy_tree_strict(memory_root, staging / "memory")
+        os.replace(staging, backup_dir)
+    except Exception:
+        with contextlib.suppress(OSError):
+            _remove_path(staging)
+        raise
+    return backup_dir
+
+
+def _install_file_add_only(staged: Path, target: Path) -> None:
+    """Install one staged file without ever replacing an existing path."""
+    try:
+        os.link(staged, target, follow_symlinks=False)
+    except OSError as error:
+        unsupported_link_errors = {
+            errno.EINVAL,
+            errno.EPERM,
+            errno.EXDEV,
+            getattr(errno, "ENOTSUP", errno.EINVAL),
+            getattr(errno, "EOPNOTSUPP", errno.EINVAL),
+        }
+        if error.errno not in unsupported_link_errors:
+            raise
+
+        # Some removable/network filesystems do not implement hard links.
+        # O_EXCL retains the add-only contract there; a failed copy removes
+        # only the path this call successfully created.
+        flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL
+        flags |= getattr(os, "O_BINARY", 0)
+        descriptor: int | None = None
+        created = False
+        try:
+            descriptor = os.open(target, flags, stat.S_IMODE(staged.stat().st_mode))
+            created = True
+            with staged.open("rb") as reader, os.fdopen(descriptor, "wb") as writer:
+                descriptor = None
+                shutil.copyfileobj(reader, writer)
+                writer.flush()
+                os.fsync(writer.fileno())
+        except Exception:
+            if descriptor is not None:
+                with contextlib.suppress(OSError):
+                    os.close(descriptor)
+            if created:
+                with contextlib.suppress(OSError):
+                    target.unlink()
+            raise
+    with contextlib.suppress(OSError):
+        staged.unlink()
+
+
+def merge_data_files(
+    source_dir: str,
+    ga_root: str,
+    *,
+    existing_session_ids: Iterable[str] | None = None,
+    session_preparer: Callable[[dict], object] | None = None,
+) -> dict[str, Any]:
+    """Transactionally merge a validated data tree into ``ga_root``.
+
+    ``memory`` is source-wins after a durable full backup, responses and
+    Desktop sessions are add-only, and any activation error rolls back files
+    installed by this call. ``session_preparer`` lets the bridge validate and
+    construct its in-memory Session objects before any destination is changed.
+    """
     source = Path(source_dir).expanduser().resolve()
     destination_root = Path(ga_root).expanduser().resolve()
     if not source.is_dir():
         raise ValueError("source data folder is unavailable")
+    if not destination_root.is_dir():
+        raise ValueError("current data destination is unavailable")
     if source == destination_root:
         raise ValueError("source is the same as current data")
 
     inspection = _legacy_inspection(source)
-    memory_copied = 0
-    memory_skipped = 0
-    responses_copied = 0
+    source_memory = source.joinpath(*_DATA_PREFIXES[0].parts)
+    source_responses = source.joinpath(*_DATA_PREFIXES[1].parts)
+    destination_memory = destination_root.joinpath(*_DATA_PREFIXES[0].parts)
+    destination_responses = destination_root.joinpath(*_DATA_PREFIXES[1].parts)
+    has_source_memory = source_memory.is_dir() and not source_memory.is_symlink()
+
+    memory_files = list(_iter_regular_files(source_memory)) if has_source_memory else []
+    response_files: list[tuple[Path, PurePosixPath, Path]] = []
     responses_skipped = 0
-
-    for prefix, copied_key, skipped_key in (
-        (_DATA_PREFIXES[0], "memoryCopied", "memorySkipped"),
-        (_DATA_PREFIXES[1], "responsesCopied", "responsesSkipped"),
-    ):
-        copied = 0
-        skipped = 0
-        source_root = source.joinpath(*prefix.parts)
-        if source_root.is_dir() and not source_root.is_symlink():
-            for item, relative in _iter_regular_files(source_root):
-                target = destination_root.joinpath(*prefix.parts, *relative.parts)
-                if target.exists():
-                    skipped += 1
-                    continue
+    if source_responses.is_dir() and not source_responses.is_symlink():
+        for item, relative in _iter_regular_files(source_responses):
+            target = destination_responses.joinpath(*relative.parts)
+            if target.exists() or target.is_symlink():
+                responses_skipped += 1
+                continue
+            _assert_safe_new_target(destination_root, target)
+            response_files.append((item, relative, target))
+
+    source_session_items, sessions_found, sessions_skipped = _read_source_sessions(source)
+    known_session_ids = _existing_session_ids(destination_root)
+    if existing_session_ids is not None:
+        known_session_ids.update(
+            str(value) for value in existing_session_ids if _is_desktop_session_id(value)
+        )
+    planned_session_ids: set[str] = set()
+    session_files: list[tuple[str, dict, Path, object]] = []
+    for item in source_session_items:
+        session_id = item.get("id")
+        if not _is_desktop_session_id(session_id):
+            sessions_skipped += 1
+            continue
+        session_id = str(session_id)
+        target = destination_root / "temp" / "desktop_sessions" / f"{session_id}.json"
+        if (
+            session_id in known_session_ids
+            or session_id in planned_session_ids
+            or target.exists()
+            or target.is_symlink()
+        ):
+            sessions_skipped += 1
+            continue
+        _assert_safe_new_target(destination_root, target)
+        try:
+            prepared = session_preparer(item) if session_preparer is not None else item
+        except Exception:
+            sessions_skipped += 1
+            continue
+        planned_session_ids.add(session_id)
+        session_files.append((session_id, item, target, prepared))
+
+    backup_dir = ""
+    prepared_sessions = [entry[3] for entry in session_files]
+    with tempfile.TemporaryDirectory(
+        prefix=".genericagent-memory-import-",
+        dir=destination_root,
+    ) as temp_dir:
+        staging_root = Path(temp_dir)
+        staged_memory = staging_root / "memory"
+        if has_source_memory:
+            if destination_memory.is_symlink() or (
+                destination_memory.exists() and not destination_memory.is_dir()
+            ):
+                raise ValueError("current memory destination is not a safe directory")
+            if destination_memory.is_dir():
+                _copy_tree_strict(destination_memory, staged_memory)
+            else:
+                staged_memory.mkdir()
+            for item, relative in memory_files:
+                target = _prepare_overlay_target(staged_memory, relative)
                 target.parent.mkdir(parents=True, exist_ok=True)
                 shutil.copy2(item, target)
-                copied += 1
-        if copied_key == "memoryCopied":
-            memory_copied, memory_skipped = copied, skipped
-        else:
-            responses_copied, responses_skipped = copied, skipped
 
-    return {
+        staged_responses: list[tuple[Path, Path]] = []
+        for item, relative, target in response_files:
+            staged = staging_root / "responses" / Path(*relative.parts)
+            staged.parent.mkdir(parents=True, exist_ok=True)
+            shutil.copy2(item, staged)
+            staged_responses.append((staged, target))
+
+        staged_sessions: list[tuple[Path, Path]] = []
+        for session_id, item, target, _prepared in session_files:
+            staged = staging_root / "sessions" / f"{session_id}.json"
+            staged.parent.mkdir(parents=True, exist_ok=True)
+            staged.write_text(
+                json.dumps(item, ensure_ascii=False, default=str),
+                encoding="utf-8",
+            )
+            staged_sessions.append((staged, target))
+
+        memory_nonempty = (
+            destination_memory.is_dir()
+            and next(destination_memory.iterdir(), None) is not None
+        )
+        if has_source_memory and memory_nonempty:
+            backup_dir = str(_create_memory_backup(destination_root, destination_memory))
+
+        installed_files: list[Path] = []
+        previous_memory = staging_root / "previous-memory"
+        memory_original_moved = False
+        memory_activated = False
+        memory_existed = destination_memory.is_dir()
+        try:
+            if has_source_memory:
+                if memory_existed:
+                    os.replace(destination_memory, previous_memory)
+                    memory_original_moved = True
+                os.replace(staged_memory, destination_memory)
+                memory_activated = True
+
+            for staged, target in (*staged_responses, *staged_sessions):
+                if target.exists() or target.is_symlink():
+                    raise OSError(f"data destination changed during import: {target}")
+                _assert_safe_new_target(destination_root, target)
+                target.parent.mkdir(parents=True, exist_ok=True)
+                # Staging shares the destination filesystem. A hard link gives
+                # POSIX/Windows create-if-absent semantics: unlike replace(), it
+                # cannot overwrite a response/session created concurrently.
+                _install_file_add_only(staged, target)
+                installed_files.append(target)
+        except Exception as error:
+            rollback_errors: list[str] = []
+            for target in reversed(installed_files):
+                try:
+                    target.unlink()
+                except OSError as rollback_error:
+                    rollback_errors.append(str(rollback_error))
+            if memory_activated or memory_original_moved:
+                try:
+                    if destination_memory.exists() or destination_memory.is_symlink():
+                        _remove_path(destination_memory)
+                    if memory_original_moved:
+                        os.replace(previous_memory, destination_memory)
+                except OSError as rollback_error:
+                    rollback_errors.append(str(rollback_error))
+            if rollback_errors:
+                raise OSError(
+                    f"data import failed: {error}; rollback failed: "
+                    + "; ".join(rollback_errors)
+                ) from error
+            raise
+
+    result: dict[str, Any] = {
         "ok": True,
-        "memoryCopied": memory_copied,
-        "memorySkipped": memory_skipped,
-        "responsesCopied": responses_copied,
+        "memoryCopied": len(memory_files),
+        "memorySkipped": 0,
+        "responsesCopied": len(response_files),
         "responsesSkipped": responses_skipped,
-        "backupDir": "",
+        "sessionsAdded": len(session_files),
+        "sessionsSkipped": sessions_skipped,
+        "sessionsFileFound": sessions_found,
+        "backupDir": backup_dir,
         "sourceType": inspection["sourceType"],
     }
+    if session_preparer is not None:
+        result["_preparedSessions"] = prepared_sessions
+    return result
diff --git a/frontends/desktop/e2e/macos/README.md b/frontends/desktop/e2e/macos/README.md
index 8846c410d..42cad666e 100644
--- a/frontends/desktop/e2e/macos/README.md
+++ b/frontends/desktop/e2e/macos/README.md
@@ -6,11 +6,15 @@ binary, and later moves that exact app to a path containing spaces and Chinese c
 
 ```bash
 frontends/desktop/e2e/macos/Invoke-macOSUserJourney.sh \
-  --artifact /path/GenericAgent-Desktop-macOS.dmg \
+  --artifact /path/GenericAgent-Desktop-macOS-aarch64.dmg \
   --expected-commit <candidate-sha> \
   --keep-work-dir
 ```
 
+The release workflow builds this artifact on the explicit macOS 15 arm64 runner and names it
+`aarch64`; it is not an Intel/universal binary. The app is ad-hoc signed only, not Developer ID
+signed or notarized.
+
 In addition to the shared chat/data/port/relocation checks, this journey hard-fails if the DMG
 does not contain the build-time `.prepared` marker or if any file inside the `.app` changes from
 first launch through restart and relocation. It verifies the package bridge remains inside the
diff --git a/frontends/desktop/packaging/README.md b/frontends/desktop/packaging/README.md
index 961e7319c..433e46392 100644
--- a/frontends/desktop/packaging/README.md
+++ b/frontends/desktop/packaging/README.md
@@ -2,7 +2,7 @@
 
 桌面端发布相关材料。本目录的内容**不会**整体打进发布包——CI
 （`.github/workflows/desktop-release-package.yml`）只从这里挑选 `scripts/` 下的
-安装/卸载脚本拷进各平台的发布产物，其余文件对构建打包过程是只读参考。
+安装/卸载脚本和两个 requirements lock；其余文件对构建打包过程是只读参考。
 
 ## 目录结构
 
@@ -11,7 +11,9 @@ frontends/desktop/packaging/
 ├── README.md            # 本说明
 ├── CHECKLIST.md         # 发布前功能测试清单（测试协调用，不参与打包）
 ├── TODO.md              # 各平台测试分工与计划（测试协调用，不参与打包）
-└── scripts/             # ← 唯一被 CI 消费的内容
+├── python-runtime-requirements.txt # 三个平台的精确 Python runtime 依赖图
+├── dmg-build-requirements.txt      # 仅 CI 使用、带 SHA-256 的 DMG 布局工具
+└── scripts/             # 平台安装/卸载脚本
     ├── windows/
     │   ├── install_windows.ps1     # 环境准备脚本
     │   ├── uninstall.bat           # 卸载入口（向用户确认后调用 ps1）
@@ -28,12 +30,96 @@ frontends/desktop/packaging/
 
 `desktop-release-package.yml` 在打各平台 portable 包时，把对应平台的脚本
 `cp` 进发布目录（例如 Windows 包里放 `install_windows.ps1` /
-`uninstall.bat` / `uninstall_windows.ps1`）。**修改安装/卸载行为只需改
-`scripts/` 下的文件，不需要动 workflow。**
+`uninstall.bat` / `uninstall_windows.ps1`）。Python wheelhouse 同时带入
+`python-runtime-requirements.txt` 的副本，首次离线准备与 macOS 离线修复都必须从该
+精确版本清单安装。macOS 当前只发布 DMG；`uninstall.command` 保留为脚本材料，但不再
+复制到不会上传的 portable 临时目录。
 
 > 说明：实际的桌面壳二进制（`GenericAgent.exe` / `.AppImage` / `.app`）由 CI
 > 构建生成并发布到 GitHub Release，不在本仓库内提交，也不在本目录占位。
 
+## Release 权限与发布流程
+
+```text
+desktop-portable-* tag push
+  ├─ Windows build (contents:read) ─┐
+  ├─ Linux build   (contents:read) ─┼─ Actions artifacts ─┐
+  └─ macOS build   (contents:read) ─┘                     │
+                                                          ▼
+                                      publish-release (contents:write)
+                                      精确下载三个 artifact
+                                      校验六个文件名/非空/SHA-256
+                                      创建不可见 draft 并一次上传
+                                      校验远端六个 assets
+                                      公开为统一 prerelease
+```
+
+三个 build job 的 checkout 均设置 `persist-credentials: false`，不接收写 token，也不调用
+GitHub Release API。`publish-release` 显式 `needs` 三个平台，且只在 tag push、三个结果都为
+`success` 时运行；它不 checkout、不运行 npm/pip/Cargo 或仓库构建脚本。上传失败时最多留下
+不可见 draft，不会向用户暴露半套 Release；发布者也拒绝覆盖同 tag 的既有 Release。
+
+`workflow_dispatch` 只运行所选平台（或 all）的候选 artifact 构建。即使未选择的 jobs 是
+`skipped`，发布 job 的事件与三个 `success` 条件也不会成立，因此手工运行不会创建 Release。
+应用 metadata 版本仍为 `0.2.0`；workflow 只消费维护者实际 push 的匹配 tag，不创建、移动或
+改写既有 tag，也不把 `V2.0.0` 等公开命名强行绑定到应用 metadata。
+
+统一 prerelease 必须精确包含以下六个文件：
+
+- `GenericAgent-Desktop-Windows-Portable.zip`
+- `SHA256SUMS-windows.txt`
+- `GenericAgent-Desktop-Linux-Portable.tar.gz`
+- `SHA256SUMS-linux.txt`
+- `GenericAgent-Desktop-macOS-aarch64.dmg`
+- `GenericAgent-Desktop-macOS-aarch64.dmg.sha256`
+
+## 固定输入与可复现边界
+
+- npm 使用 `npm ci` 和已提交的 `package-lock.json`；Node 固定为 `22.23.2`。
+- Rust toolchain 固定为 `1.95.0`，crate 图由 `Cargo.lock` 固定。
+- `actions/checkout`、`setup-node`、`setup-python`、artifact upload/download、Rust toolchain
+  action 与 Rust cache action 均固定完整 commit SHA，workflow 行尾保留对应版本/来源注释。
+- python-build-standalone 固定 release `20260814`、CPython `3.12.14` 和明确架构；Windows
+  x86_64、Linux x86_64、macOS arm64 三个 tarball 均在解压前校验已记录的 SHA-256。
+- Python runtime 的 32 个直接/传递依赖全部在 `python-runtime-requirements.txt` 使用 `==`；
+  wheel 下载强制 `--only-binary=:all:`。因此离线准备不需要 `setuptools`/`wheel`，二者不再
+  放入 wheelhouse。macOS 的 `ds-store==1.3.3` 与 `mac-alias==2.2.3` 另行使用 wheel hash 锁。
+- runner label 使用 `windows-2025`、`ubuntu-24.04`、`macos-15`。GitHub 当前的
+  `macos-15` 标准 runner 是 Apple silicon；workflow 仍以 `uname -m == arm64` 硬断言，
+  PBS 与最终 DMG 名称也明确为 `aarch64`。
+
+这里不声称 bit-for-bit reproducible，仍有以下明确风险：GitHub runner label 内的 image
+revision 会更新；Ubuntu apt 包与 Windows runner 提供的 UCRT SDK 版本未锁；Python runtime
+依赖版本虽已固定，但三平台 wheel 文件 hash 尚未完整写入跨平台 lock；Tauri/系统打包工具
+也可能写入时间戳或平台元数据。以上变化必须由真包 SHA-256 与 L5 旅程留证，不能把当前约束
+描述成完整可复现构建。
+
+## macOS 架构与签名事实
+
+当前 macOS 产物只支持 Apple silicon arm64，文件名为
+`GenericAgent-Desktop-macOS-aarch64.dmg`。应用在嵌入 runtime 后只做 ad-hoc signing，且
+`codesign --verify --deep --strict` 失败会直接终止构建。当前没有 Apple Developer ID 签名，
+也没有 notarization；Release notes 必须保留这一事实，不能描述为已公证或受 Apple 信任。
+
+## 包体精简记录
+
+下列实测基于从 commit `e09643142d445424d1d3cb779245da0e920e2339` 派生的本任务工作树，
+在 2026-08-22 以 Node `22.23.2` 执行 `npm ci` + production build，并用 workflow 同等
+source excludes 对 runtime/app 源树做 gzip 对比：
+
+| 项目 | 结果 | 性质 |
+|---|---:|---|
+| 生成的 `frontends/desktop/dist` | 106 files / 4,687,796 bytes | 实测未压缩 payload |
+| runtime source gzip（仍含 dist） | 4,410,077 bytes | 实测对照 |
+| runtime source gzip（排除 dist） | 2,529,269 bytes | 实测新结果 |
+| 单份 runtime source gzip 减少 | 1,880,808 bytes（约 1.79 MiB） | 实测；最终 ZIP/tar.gz/DMG 会因各自压缩器而不同 |
+
+`setuptools-84.0.0` 与 `wheel-0.48.0` 的当前 wheel 合计实测为 851,536 bytes（约
+0.81 MiB）；这是对旧浮动解析在测量时点的估算，每个平台最终压缩包的实际差值会不同，不能
+当作历史产物精确差值。删除 macOS portable staging 对发布 DMG 的包体差值是 **0**（该目录
+从未上传）；CI 峰值磁盘预计减少一份 `.app + runtime` 的重复副本，但未运行完整远端 macOS
+job 测量，因此只记录为估算，不给出伪精确数字。
+
 ## 自动化测试体系
 
 CI 会先运行零依赖的 `npm run test:ci-contract`，确认 workflow、npm 清单与锁文件、
diff --git a/frontends/desktop/packaging/dmg-build-requirements.txt b/frontends/desktop/packaging/dmg-build-requirements.txt
new file mode 100644
index 000000000..677ed72bc
--- /dev/null
+++ b/frontends/desktop/packaging/dmg-build-requirements.txt
@@ -0,0 +1,5 @@
+# Pure-Python tools used only to write the curated Finder layout.
+ds-store==1.3.3 \
+    --hash=sha256:b92a371efbf1b4ccce2a04d1ed13fceacc4736c81ba09cf5aefb74c088160a35
+mac-alias==2.2.3 \
+    --hash=sha256:7362b521d2132ef92f606a37abfed5fcd849ceb2f28b6f9743e014b02af92f0d
diff --git a/frontends/desktop/packaging/python-runtime-requirements.txt b/frontends/desktop/packaging/python-runtime-requirements.txt
new file mode 100644
index 000000000..3fe5dd802
--- /dev/null
+++ b/frontends/desktop/packaging/python-runtime-requirements.txt
@@ -0,0 +1,37 @@
+# Desktop embedded-runtime lock for CPython 3.12.14.
+#
+# Direct and transitive versions are exact so all three builders resolve the same
+# dependency graph. Wheel file hashes remain platform-specific and are not locked
+# here; see README.md for that remaining reproducibility risk.
+aiohappyeyeballs==2.7.1
+aiohttp==3.14.3
+aiosignal==1.4.0
+annotated-doc==0.0.5
+annotated-types==0.8.0
+anyio==4.14.2
+attrs==26.1.0
+beautifulsoup4==4.15.0
+bottle==0.13.4
+certifi==2026.7.22
+charset-normalizer==3.5.1
+click==8.4.2
+colorama==0.4.6
+fastapi==0.141.1
+frozenlist==1.8.0
+h11==0.16.0
+idna==3.19
+multidict==6.7.1
+propcache==0.5.2
+psutil==7.1.1
+pydantic==2.13.4
+pydantic-core==2.46.4
+requests==2.34.2
+simple-websocket-server==0.4.4
+soupsieve==2.9.2
+starlette==1.6.0
+typing-extensions==4.16.0
+typing-inspection==0.4.4
+urllib3==2.7.0
+uvicorn==0.52.1
+websockets==17.0.1
+yarl==1.24.5
diff --git a/frontends/desktop/packaging/scripts/linux/install_linux.sh b/frontends/desktop/packaging/scripts/linux/install_linux.sh
index f8b14242c..efdf3c07b 100755
--- a/frontends/desktop/packaging/scripts/linux/install_linux.sh
+++ b/frontends/desktop/packaging/scripts/linux/install_linux.sh
@@ -199,13 +199,15 @@ install_dependencies() {
   if [[ -n "$WHEEL_DIR" ]]; then
     # Offline (portable bundle): install from local wheels only, no network, no pip self-upgrade.
     log_step "Install dependencies offline from $WHEEL_DIR"
+    local locked_requirements="$WHEEL_DIR/requirements.txt"
+    [[ -f "$locked_requirements" ]] || fail "Pinned offline requirements are missing: $locked_requirements"
     # Install deps directly (NOT an editable -e of the source): an editable install bakes the
     # project's absolute path into a .pth. Combined with --no-venv (deps go into the relocatable
     # embedded python) this keeps the portable bundle movable. The bridge adds the source to
     # sys.path itself (ensure_ga_import_path), so no install of the project is needed.
     # shellcheck disable=SC2086
     "$py" -m pip install --no-index --find-links "$WHEEL_DIR" \
-      "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil $EXTRA_PACKAGES \
+      --requirement "$locked_requirements" $EXTRA_PACKAGES \
       || fail "Offline pip install failed (check wheel dir)."
   else
     log_step "Install/refresh minimal Python dependencies"
diff --git a/frontends/desktop/packaging/scripts/macos/install_macos.sh b/frontends/desktop/packaging/scripts/macos/install_macos.sh
index 39c4652ab..56169d763 100755
--- a/frontends/desktop/packaging/scripts/macos/install_macos.sh
+++ b/frontends/desktop/packaging/scripts/macos/install_macos.sh
@@ -119,7 +119,10 @@ install_deps() {
   if [[ -n "$WHEEL_DIR" && -d "$WHEEL_DIR" ]]; then
     # A wheelhouse repair only needs pip itself. Keep the path fully offline and
     # do not install setuptools/wheel into the prepared runtime.
-    "$py" -m pip install --no-compile --no-index --find-links "$WHEEL_DIR" "${pkgs[@]}"
+    local locked_requirements="$WHEEL_DIR/requirements.txt"
+    [[ -f "$locked_requirements" ]] || fail "Pinned offline requirements are missing: $locked_requirements"
+    "$py" -m pip install --no-compile --no-index --find-links "$WHEEL_DIR" \
+      --requirement "$locked_requirements" "${pkgs[@]:6}"
   else
     log_warn "No wheel dir supplied; falling back to online pip install"
     "$py" -m pip install --upgrade pip setuptools wheel
diff --git a/frontends/desktop/packaging/scripts/windows/install_windows.ps1 b/frontends/desktop/packaging/scripts/windows/install_windows.ps1
index e501d5b30..1b1035301 100644
--- a/frontends/desktop/packaging/scripts/windows/install_windows.ps1
+++ b/frontends/desktop/packaging/scripts/windows/install_windows.ps1
@@ -159,6 +159,10 @@ function Install-Dependencies([string]$root, [string]$py) {
     # Offline mode (portable bundle): install from local wheels only, no network, no pip self-upgrade.
     if ($WheelDir) {
         $wd = (Resolve-Path $WheelDir -ErrorAction Stop).Path
+        $lockedRequirements = Join-Path $wd "requirements.txt"
+        if (-not (Test-Path $lockedRequirements -PathType Leaf)) {
+            Fail "Pinned offline requirements are missing: $lockedRequirements"
+        }
         Write-Ok "offline wheels: $wd"
         if ($extra.Count) { Write-Ok "extra packages: $($extra -join ', ')" }
         Write-Host "GAPROGRESS|deps"
@@ -167,7 +171,7 @@ function Install-Dependencies([string]$root, [string]$py) {
         # project's absolute path into a .pth. With -NoVenv (deps go into the relocatable embedded
         # python) this keeps the portable bundle movable. The bridge adds the source to sys.path
         # itself (ensure_ga_import_path), so the project itself need not be installed.
-        & $py -m pip install --no-index --find-links $wd "requests>=2.28" "beautifulsoup4>=4.12" "bottle>=0.12" "simple-websocket-server>=0.4" "aiohttp>=3.9" psutil @extra
+        & $py -m pip install --no-index --find-links $wd --requirement $lockedRequirements @extra
         if ($LASTEXITCODE -ne 0) { Fail "offline pip install failed (check wheels dir)." }
         Write-Host "GAPROGRESS|done"
         return
diff --git a/frontends/desktop/public/assets/fonts/README.md b/frontends/desktop/public/assets/fonts/README.md
deleted file mode 100644
index f8e5a57e8..000000000
--- a/frontends/desktop/public/assets/fonts/README.md
+++ /dev/null
@@ -1,34 +0,0 @@
-# Desktop Font Assets
-
-These font files are the offline Latin bundle for the vanilla desktop shell.
-
-## Files
-
-- `azonix-wordmark.woff2`
-  - Role: brand wordmark only
-  - Source: converted on 2026-05-25 from the local owner-installed file at `~/Library/Fonts/azonix/Azonix.otf`
-  - License: owner-provided / verify before external redistribution
-  - Note: this repo currently treats Azonix as a project-local brand asset
-
-- `lexend-latin.woff2`
-  - Role: English titles and navigation
-  - Source: Google Fonts CSS2 API, specimen page <https://fonts.google.com/specimen/Lexend>
-  - Downloaded: 2026-05-25
-  - License: SIL Open Font License 1.1
-
-- `noto-sans-latin.woff2`
-  - Role: English body copy and default Latin UI text
-  - Source: Google Fonts CSS2 API, specimen page <https://fonts.google.com/noto/specimen/Noto+Sans>
-  - Downloaded: 2026-05-25
-  - License: SIL Open Font License 1.1
-
-- `jetbrains-mono-latin.woff2`
-  - Role: config/value dense controls and numeric surfaces
-  - Source: Google Fonts CSS2 API, specimen page <https://fonts.google.com/specimen/JetBrains+Mono>
-  - Downloaded: 2026-05-25
-  - License: SIL Open Font License 1.1
-
-## Notes
-
-- Only Latin subsets are bundled here. Chinese UI text continues to use the existing system fallback stack.
-- Runtime does not fetch fonts from a CDN. `frontends/desktop/static/assets/fonts/fonts.css` is the only font entrypoint for the vanilla shell.
diff --git a/frontends/desktop/public/assets/fonts/azonix-wordmark.woff2 b/frontends/desktop/public/assets/fonts/azonix-wordmark.woff2
deleted file mode 100644
index 947bfbebc..000000000
Binary files a/frontends/desktop/public/assets/fonts/azonix-wordmark.woff2 and /dev/null differ
diff --git a/frontends/desktop/public/assets/fonts/fonts.css b/frontends/desktop/public/assets/fonts/fonts.css
deleted file mode 100644
index 8103b351d..000000000
--- a/frontends/desktop/public/assets/fonts/fonts.css
+++ /dev/null
@@ -1,21 +0,0 @@
-@font-face {
-  font-family: "GA Azonix";
-  src:
-    url("./azonix-wordmark.woff2") format("woff2"),
-    local("Azonix"),
-    local("Azonix Regular"),
-    local("Azonix-Regular");
-  font-style: normal;
-  font-weight: 400;
-  font-display: swap;
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+20AC, U+2122, U+2212, U+FEFF, U+FFFD;
-}
-
-@font-face {
-  font-family: "GA JetBrains Mono";
-  src: url("./jetbrains-mono-latin.woff2") format("woff2");
-  font-style: normal;
-  font-weight: 400 600;
-  font-display: swap;
-  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
-}
diff --git a/frontends/desktop/public/assets/fonts/jetbrains-mono-latin.woff2 b/frontends/desktop/public/assets/fonts/jetbrains-mono-latin.woff2
deleted file mode 100644
index 2ca6ac605..000000000
Binary files a/frontends/desktop/public/assets/fonts/jetbrains-mono-latin.woff2 and /dev/null differ
diff --git a/frontends/desktop/public/assets/fonts/lexend-latin.woff2 b/frontends/desktop/public/assets/fonts/lexend-latin.woff2
deleted file mode 100644
index 0968c152f..000000000
Binary files a/frontends/desktop/public/assets/fonts/lexend-latin.woff2 and /dev/null differ
diff --git a/frontends/desktop/public/assets/fonts/noto-sans-latin.woff2 b/frontends/desktop/public/assets/fonts/noto-sans-latin.woff2
deleted file mode 100644
index e08293045..000000000
Binary files a/frontends/desktop/public/assets/fonts/noto-sans-latin.woff2 and /dev/null differ
diff --git a/frontends/desktop/public/i18n.js b/frontends/desktop/public/i18n.js
deleted file mode 100644
index 0c90a9f9e..000000000
--- a/frontends/desktop/public/i18n.js
+++ /dev/null
@@ -1,496 +0,0 @@
-(() => {
-  const I18N = {
-  zh: {
-    'app.title': 'GenericAgent 桌面版',
-    'brand.sub': '桌面终端',
-    'nav.chat': '聊天', 'nav.services': '后台服务', 'nav.channels': '消息通道', 'nav.status': '状态面板',
-    'nav.collab': '指挥家', 'nav.token': '用量',
-    'foot.settings': '配置', 'foot.ver': 'GenericAgent · 桌面版',
-    'chat.startTitle': '开始对话', 'chat.startSub': '直接输入，或点预设功能一键启动',
-    'preset.butler.t': '指挥家', 'preset.butler.d': '复杂任务自动拆解，只需查看进度和简报',
-    'preset.plan.t': 'Plan 模式', 'preset.plan.d': '加载 Plan SOP，按探索→规划→执行→验证流程',
-    'preset.goal.t': 'Goal 模式', 'preset.goal.d': '设定目标，自主完成',
-    'preset.autonomous.t': '自主行动', 'preset.autonomous.d': '按 SOP 规划/执行任务,产出报告(reflect/autonomous.py 同源)',
-    'preset.hive.t': 'Hive 协作', 'preset.hive.d': '多 worker 协同攻坚',
-    'preset.review.t': '深度复核', 'preset.review.d': '挑刺式质量把关',
-    'preset.findwork.t': '找点事做', 'preset.findwork.d': '分析当前情况,推荐一批让你感兴趣的 TODO',
-    'preset.mine.t': '我的·周报', 'preset.mine.d': '自定义：抓本周提交并写周报',
-    'preset.add.t': '自定义', 'preset.add.d': '任意一句话存为功能',
-    'composer.placeholder': 'GA 能帮你做些什么？',
-    'search.placeholder': '搜索会话…', 'conv.new': '新对话',
-    'ctx.pin': '置顶', 'ctx.unpin': '取消置顶', 'ctx.rename': '重命名', 'ctx.del': '删除',
-    'common.close': '关闭', 'common.more': '更多', 'common.optional': '选填', 'common.save': '保存',
-    'modal.preset': '预设功能', 'modal.addModel': '添加模型', 'modal.editModel': '编辑模型', 'modal.settings': '配置',
-    'modal.customPreset': '自定义预设',
-    'modal.editCustomPreset': '编辑任务',
-    'customPreset.titlePh': '标题，例如「写周报」',
-    'customPreset.promptPh': 'Prompt 内容，发送时会作为消息提交',
-    'customPreset.empty': '标题和 Prompt 不能为空',
-    'customPreset.removeTitle': '删除',
-    'customPreset.editTitle': '编辑',
-    'builtinPreset.restoreBtn': '恢复默认预设',
-    'set.appearance': '外观', 'set.plainUi': '素色', 'set.fontSize': '聊天字号', 'set.lang': '语言', 'set.model': '模型', 'set.addModel': '添加模型', 'set.features': '功能', 'set.importMykey': '导入已有模型配置（mykey.py）', 'set.exportMykey': '导出当前模型配置', 'set.importMemory': '导入已有记忆与会话记录（选择 GenericAgent 根目录）', 'set.gaSource': '接入独立 GenericAgent 源码（把桌面版当作壳）', 'set.gaSourceClear': '取消接入，改用内置版本', 'set.gaSourceCurrent': '当前接入', 'set.serviceManager': '后台服务管理',
-    'shortcut.askConfirm': '是否在桌面创建 GenericAgent 快捷方式？',
-    'appearance.light': '浅色', 'appearance.dark': '深色',
-    'set.noModels': '暂无模型，点击下方添加',
-    'lang.zh': '简体中文', 'lang.en': 'English',
-    'model.name': '备注', 'model.namePh': '会显示在模型列表',
-    'model.apikey': 'API Key', 'model.apikeyPh': 'sk-...', 'model.apikeyKeep': '留空则保持原 Key 不变',
-    'model.apibase': 'API 地址', 'model.apibasePh': 'https://.../v1/messages',
-    'model.protocol': '协议', 'model.protocolPick': '请选择…', 'model.protocolOai': 'OpenAI 兼容 (chat/completions)', 'model.protocolClaude': 'Anthropic (Claude /v1/messages)',
-    'model.stream': '响应方式', 'model.streamOn': '流式', 'model.streamOff': '非流式',
-    'model.model': '模型', 'model.modelPh': 'model 参数名',
-    'model.modelHint': '须与中转站/官方文档中的 model 字段完全一致',
-    'model.retries': '重试 (次)', 'model.connTimeout': '连接超时 (s)', 'model.readTimeout': '读取超时 (s)',
-    'model.save': '保存', 'common.cancel': '取消', 'common.confirm': '确认', 'common.edit': '编辑', 'common.delete': '删除',
-    'pq.title': '快速接入官方模型', 'pq.sub': '填好 API Key 即可使用', 'pq.toggle': '展开 / 收起',
-    'pq.deepseekDesc': '官方 API · OpenAI 兼容', 'pq.qwenDesc': '通义千问 · 阿里云百炼',
-    'guide.step1': '点击下方链接，登录后创建并复制 API Key',
-    'guide.step2': '把 Key 粘贴到下方「API Key」输入框',
-    'guide.step3': '点击保存，即可在模型列表中选用',
-    'guide.prefillTip': '已为你预填 API 地址、协议与模型，可按需修改',
-    'guide.getKey': '获取 {name} 的 API Key', 'guide.copy': '复制链接', 'guide.copied': '链接已复制',
-    'err.modelSave': '保存失败', 'err.modelSwitch': '切换模型失败', 'err.modelRequired': '请填写模型、API Key 和 API 地址',
-    'err.modelDelete': '删除失败', 'err.modelDeleteLast': '至少保留一个模型',
-    'confirm.modelDelete': '确定删除该模型配置？',
-    'model.aggregation': '渠道组（自动故障转移）', 'model.aggregationShort': '渠道组', 'model.aggregationDesc': '按顺序尝试，失败自动切换到下一个',
-    'model.emptyMixin': '尚未加入模型',
-    'model.addToMixin': '加入渠道组', 'model.inMixin': '已在渠道组', 'model.removeFromMixin': '移出渠道组', 'model.alreadyInMixin': '已在渠道组中', 'model.dragReorder': '拖拽调整顺序',
-    'err.mixinFailed': '操作失败',
-    'page.services.title': '后台服务', 'page.services.sub': 'IM 消息通道与后台进程，集中查看、启停与日志',
-    'page.channels.title': '消息通道', 'page.channels.sub': '后台 IM 进程：列表、启停与日志（同 hub.pyw）',
-    'page.status.title': '状态面板', 'page.status.sub': 'hub.pyw 管理的后台进程/服务，集中查看与启停',
-    'page.collab.title': '指挥家', 'page.collab.sub': '交代目标，自动拆活与跟进',
-    'collab.progressTitle': '分工进度',
-    'collab.progressEmpty': '还没有任务在执行。告诉指挥家你的目标后，这里会显示拆分后的处理进度。',
-    'collab.placeholder': '请对指挥家描述你想完成的目标',
-    'collab.guideTitle': '把要完成的事告诉指挥家',
-    'collab.guideWhen': '适合需要多步处理、要花一些时间才能完成的目标。日常聊天和快问快答，请用左侧「聊天」。',
-    'collab.guideStep1t': '描述目标',
-    'collab.guideStep1d': '在聊天框里写下你想做的事，发给指挥家',
-    'collab.guideStep2t': '自动拆解',
-    'collab.guideStep2d': '指挥家自动拆解、分配任务，实时监督和调度',
-    'collab.guideStep3t': '交付摘要',
-    'collab.guideStep3d': '指挥家根据执行状态，呈上任务简报',
-    'collab.guideStep4t': '随时调整',
-    'collab.guideStep4d': '随时补充要求或细节，指挥家都会处理',
-    'collab.chipProgress': '现在进展如何？',
-    'collab.chipPause': '先暂停当前任务',
-    'collab.chipSummary': '总结一下目前的结果',
-    'collab.showProgressTitle': '查看分工进度',
-    'collab.statRunning': '进行中',
-    'collab.statDone': '已完成',
-    'collab.plusMenu': '更多操作',
-    'collab.switchMode': '切换模式',
-    'collab.typing': '指挥家正在处理',
-    'collab.offline': '无法连接指挥家服务，请确认后端已启动。',
-    'collab.retry': '重试',
-    'collab.reconnect': '连接断开，正在重连… 已保留上次任务进度。',
-    'collab.reconnectIn': '{n} 秒后重试',
-    'collab.stRunning': '执行中', 'collab.stReported': '已回报', 'collab.stPaused': '已暂停',
-    'collab.stFailed': '遇到问题', 'collab.stTerminated': '已终止',
-    'collab.summaryRunning': '正在处理中…', 'collab.summaryWait': '等待回报',
-    'collab.taskFallback': '任务 {n}',
-    'collab.timeJust': '刚刚',
-    'collab.timeSec': '{n} 秒前',
-    'collab.timeMin': '{n} 分钟前',
-    'collab.timeHr': '{n} 小时前',
-    'collab.timeDay': '{n} 天前',
-    'page.token.title': '用量', 'page.token.sub': '每会话与累计用量及缓存率',
-    'status.connecting': '正在连接…', 'status.ready': '服务在线', 'status.running': '处理中',
-    'status.disconnected': '服务离线', 'status.stopped': '已停止', 'status.idle': '待命',
-    'conv.emptyList': '暂无会话，点「＋ 新对话」开始', 'conv.defaultTitle': '新对话',
-    'err.bridge': '服务未响应', 'err.newSession': '新建会话失败', 'err.poll': '轮询失败', 'err.stop': '停止失败',
-    'err.interruptTimeout': '等待上一轮停止超时，请稍后再试',
-    'sys.interruptPrev.hint': '已停止上一轮，正在处理新消息',
-    'chat.interrupting': '正在停止上一轮…',
-    'chat.sessionLoading': '正在加载会话…',
-    'sys.stopRequested': '已请求停止',
-    'slash.help': '可用命令：\n/new 新会话  /clear 清屏  /stop 停止  /settings 设置',
-    'slash.unknown': '未知命令',
-    'upload.hint': '上传文件：选择 / 拖拽 / 粘贴',
-    'upload.button': '上传文件',
-    'upload.tooLarge': '文件过大或数量超限', 'upload.empty': '跳过空文件',
-    'upload.failed': '上传失败',
-    'err.charLimit': '已达字数上限（{n}），发送时将自动截断', 'err.charLimitReached': '已达字数上限（{n}）', 'err.numMax': '不能超过 {n}',
-    'file.openFailed': '无法打开文件',
-    'file.kindGeneric': '文件',
-    'file.kindDoc': '文档',
-    'file.kindSheet': '表格',
-    'file.kindSlide': '幻灯片',
-    'file.kindCode': '代码',
-    'file.kindArchive': '压缩包',
-    'file.kindAudio': '音频',
-    'file.kindVideo': '视频',
-    'upload.removeTitle': '移除',
-    'upload.dropHint': '松开以上传文件',
-    'lightbox.closeTitle': '关闭',
-    'fold.thinking': '思考', 'fold.tool': '工具调用', 'fold.toolResult': '工具结果', 'fold.llm': 'LLM Running', 'fold.turn': '第 {n} 轮',
-    'plan.header': '计划 ({done}/{total})', 'plan.complete': '✓ 计划完成 ({n}/{n})',
-    'plan.running': '计划执行中', 'plan.completeTitle': '计划完成',
-    'plan.placeholder': '计划模式已激活', 'plan.waiting': '等待写入 {path} …', 'plan.overflow': '还有 {n} 项',
-    'plan.current': '当前', 'plan.fold': '折叠', 'plan.collapse': '收起', 'plan.expand': '展开', 'plan.details': '详情', 'plan.dismiss': '不再显示',
-    'plan.capsuleRunning': '运行中', 'plan.capsuleComplete': '已完成',
-    'timing.elapsed': '已运行 {t}',
-    'model.auto': '自动选择',
-    'model.menuLabel': '选择模型',
-    'chip.plan': 'Plan',
-    'chip.auto': 'Auto',
-    'ch.wechat': '微信', 'ch.wecom': '企业微信', 'ch.lark': '飞书', 'ch.dingtalk': '钉钉',
-    'ch.qq': 'QQ', 'ch.telegram': 'Telegram', 'ch.discord': 'Discord',
-    'ch.loading': '加载中…', 'ch.empty': '未发现 IM 进程脚本',
-    'ch.logEmpty': '暂无日志',
-    'err.channelLoad': '加载失败', 'err.channelStart': '启动失败', 'err.channelStop': '停止失败',
-    'err.mykeyImport': '导入模型配置失败',
-    'err.mykeyExport': '导出模型配置失败',
-    'err.channelNotConfigured': '请先在 mykey.py 中配置该平台',
-    'sys.channelStarted': '已启动', 'sys.channelStopped': '已停止',
-    'modal.channelLogs': '进程日志',
-    'modal.mykeyConfig': 'mykey.py 配置',
-    'sys.configSaved': '配置已保存',
-    'sys.mykeyImported': '模型配置已导入',
-    'sys.mykeyExported': '模型配置已导出',
-    'sys.memoryImported': '记忆已导入',
-    'err.memoryImport': '导入记忆失败',
-    'sys.memoryImportBackup': '原记忆已备份至',
-    'sys.memorySessions': '会话',
-    'sys.gaSourcePickTitle': '选择要接入的 GenericAgent 源码根目录（含 agentmain.py）',
-    'sys.gaSourceSwitching': '正在切换并重启后端...',
-    'sys.gaSourceSet': '已接入独立 GenericAgent',
-    'sys.gaSourceCleared': '已取消接入，恢复内置版本',
-    'err.gaSourceSet': '接入失败',
-    'err.gaSourceDesktopOnly': '此功能仅在桌面版中可用',
-    'sys.memoryPickTitle': '选择 GenericAgent 根目录（包含 memory 与 temp 的目录）',
-    'sys.memoryImportPrompt': '请输入 GenericAgent 根目录的完整路径（包含 memory 与 temp 的目录，而非 memory 文件夹本身）：',
-    'st.starting': '启动中…', 'st.stopping': '停止中…', 'st.online': '在线', 'st.offline': '离线', 'st.error': '错误', 'st.running': '运行', 'st.abnormal': '异常', 'st.missingDeps': '待安装',
-    'act.configure': '配置', 'act.logs': '日志', 'act.restart': '重启', 'act.stop': '停止', 'act.start': '启动', 'act.exit': '退出', 'act.installDeps': '安装依赖', 'act.installing': '安装中…',
-    'act.copy': '复制', 'act.copied': '已复制', 'act.copyTex': 'TeX', 'act.send': '发送',
-    'sys.depsInstalled': '依赖安装完成', 'err.installDeps': '安装失败',
-    'proc.imbotWechat': 'imbot · 微信', 'proc.imbotDing': 'imbot · 钉钉', 'proc.scheduler': '定时任务调度', 'proc.conductor': '指挥家',
-    'cm.scheduling': '调度中', 'cm.running': '执行中', 'cm.idleSt': '空闲',
-    'cm.master': '已派 3 子任务', 'cm.w1': '子任务：抓取数据', 'cm.w2': '子任务：复核结果', 'cm.sub': '等待派单',
-    'tok.total': '累计', 'tok.cost': '缓存率', 'tok.today': '今日', 'tok.tabAll': '聊天', 'tok.tabConductor': '指挥家', 'tok.condTotal': '指挥家累计', 'tok.condCurrent': '指挥家本次', 'tok.condTip': '指挥家消耗不计入聊天累计', 'tok.condOffline': '指挥家服务离线', 'tok.disclaimer': '不同 API 网站的计费价格可能会有差异，请以实际网站为准。',
-    'tok.colSession': '会话', 'tok.colIn': '输入', 'tok.colOut': '输出', 'tok.colCacheW': '缓存写入', 'tok.colCache': '缓存读取', 'tok.colCost': '成本',
-    'tok.from': '从', 'tok.to': '到', 'tok.reset': '重置', 'tok.noData': '暂无记录', 'tok.deleted': '此会话已删除',
-    'tok.pricingUnknown': '⚠ 此模型计费规则尚未明确，按默认估算',
-    'tok.priceInput': '输入: $', 'tok.priceOutput': '输出: $',
-    'tok.priceCacheW': '缓存写入: $', 'tok.priceCacheR': '缓存读取: $',
-    'presetPrompt.goal': '进入 Goal 模式：读 L3 goal mode SOP，自主达成我接下来描述的目标。',
-    'presetPrompt.plan': '进入 Plan 模式：先读 memory/plan_sop.md，按其中「探索→规划→执行→验证」流程，等我接下来描述要做的任务。',
-    'presetPrompt.autonomous': '🤖 进入自主行动模式：阅读 memory/autonomous_operation_sop.md，按 SOP 选取或规划任务,独立执行并产出报告。',
-    'presetPrompt.hive': '启动 Goal Hive 模式：按 hive SOP 拉起多个 worker 协同完成我接下来的目标。',
-    'presetPrompt.review': '进入监察者模式：对刚才的产出严格挑刺、逐项复核并报告问题。',
-    'presetPrompt.findwork': '按照自主行动的规划部分，充分分析我的情况，给我生成一批 TODO，务必让我感兴趣。',
-    'presetPrompt.mine': '抓取本周的 git 提交并写一份周报。',
-    'ask.banner': 'GA 等你回答',
-    'ask.replyHint': '在下方输入框回复',
-    'ask.placeholderOpen': '在此输入你的回答… (Enter 发送)',
-  },
-  en: {
-    'app.title': 'GenericAgent Desktop',
-    'brand.sub': 'Desktop terminal',
-    'nav.chat': 'Chat', 'nav.services': 'Services', 'nav.channels': 'Channels', 'nav.status': 'Status',
-    'nav.collab': 'Conductor', 'nav.token': 'Usage',
-    'foot.settings': 'Settings', 'foot.ver': 'GenericAgent · Desktop',
-    'chat.startTitle': 'Start a conversation', 'chat.startSub': 'Type a message, or pick a preset',
-    'preset.butler.t': 'Conductor', 'preset.butler.d': 'Auto-decompose complex tasks; just check progress and briefings',
-    'preset.plan.t': 'Plan mode', 'preset.plan.d': 'Load Plan SOP — explore→plan→execute→verify',
-    'preset.goal.t': 'Goal mode', 'preset.goal.d': 'Set a goal, run autonomously',
-    'preset.autonomous.t': 'Autonomous mode', 'preset.autonomous.d': 'Plan/execute tasks per SOP and produce reports (same as reflect/autonomous.py)',
-    'preset.hive.t': 'Hive', 'preset.hive.d': 'Multi-worker collaboration',
-    'preset.review.t': 'Deep review', 'preset.review.d': 'Strict quality check',
-    'preset.findwork.t': 'Find me work', 'preset.findwork.d': 'Analyze my context and suggest a batch of interesting TODOs',
-    'preset.mine.t': 'My · Weekly', 'preset.mine.d': 'Custom: weekly report from commits',
-    'preset.add.t': 'Custom', 'preset.add.d': 'Save any prompt as a function',
-    'composer.placeholder': 'What can GA do for you?',
-    'search.placeholder': 'Search chats…', 'conv.new': 'New chat',
-    'ctx.pin': 'Pin', 'ctx.unpin': 'Unpin', 'ctx.rename': 'Rename', 'ctx.del': 'Delete',
-    'common.close': 'Close', 'common.more': 'More', 'common.optional': 'Optional', 'common.save': 'Save',
-    'modal.preset': 'Presets', 'modal.addModel': 'Add model', 'modal.editModel': 'Edit model', 'modal.settings': 'Settings',
-    'modal.customPreset': 'Custom preset',
-    'modal.editCustomPreset': 'Edit task',
-    'customPreset.titlePh': 'Title, e.g. "Weekly report"',
-    'customPreset.promptPh': 'Prompt body — sent as the message when clicked',
-    'customPreset.empty': 'Title and Prompt cannot be empty',
-    'customPreset.removeTitle': 'Delete',
-    'customPreset.editTitle': 'Edit',
-    'builtinPreset.restoreBtn': 'Restore defaults',
-    'set.appearance': 'Appearance', 'set.plainUi': 'Plain', 'set.fontSize': 'Chat font size', 'set.lang': 'Language', 'set.model': 'Model', 'set.addModel': 'Add model', 'set.features': 'Features', 'set.importMykey': 'Import model config (mykey.py)', 'set.exportMykey': 'Export current model config', 'set.importMemory': 'Import existing memory & sessions (select GenericAgent root)', 'set.gaSource': 'Connect to a separate GenericAgent source (use desktop as a shell)', 'set.gaSourceClear': 'Disconnect, use the bundled version', 'set.gaSourceCurrent': 'Connected to', 'set.serviceManager': 'Service manager',
-    'shortcut.askConfirm': 'Create a desktop shortcut for GenericAgent?',
-    'appearance.light': 'Light', 'appearance.dark': 'Dark',
-    'set.noModels': 'No models yet — add one below',
-    'lang.zh': '简体中文', 'lang.en': 'English',
-    'model.name': 'Note', 'model.namePh': 'Shown in the model list',
-    'model.apikey': 'API Key', 'model.apikeyPh': 'sk-...', 'model.apikeyKeep': 'Leave blank to keep the current key',
-    'model.apibase': 'API base URL', 'model.apibasePh': 'https://.../v1/messages',
-    'model.protocol': 'Protocol', 'model.protocolPick': 'Select…', 'model.protocolOai': 'OpenAI-compatible (chat/completions)', 'model.protocolClaude': 'Anthropic (Claude /v1/messages)',
-    'model.stream': 'Response', 'model.streamOn': 'Stream', 'model.streamOff': 'Non-stream',
-    'model.model': 'Model', 'model.modelPh': 'model parameter name',
-    'model.modelHint': 'Must match the model field in your provider docs exactly',
-    'model.retries': 'Retries (×)', 'model.connTimeout': 'Connect (s)', 'model.readTimeout': 'Read (s)',
-    'model.save': 'Save', 'common.cancel': 'Cancel', 'common.confirm': 'Confirm', 'common.edit': 'Edit', 'common.delete': 'Delete',
-    'pq.title': 'Quick connect a model', 'pq.sub': 'Add your API key to get started', 'pq.toggle': 'Expand / collapse',
-    'pq.deepseekDesc': 'Official API · OpenAI-compatible', 'pq.qwenDesc': 'Tongyi Qwen · Aliyun Bailian',
-    'guide.step1': 'Open the link, sign in, then create & copy your API key',
-    'guide.step2': 'Paste the key into the “API Key” field below',
-    'guide.step3': 'Click Save — then pick it from the model list',
-    'guide.prefillTip': 'API base, protocol and model are pre-filled — edit if needed',
-    'guide.getKey': 'Get your {name} API key', 'guide.copy': 'Copy link', 'guide.copied': 'Link copied',
-    'err.modelSave': 'Save failed', 'err.modelSwitch': 'Failed to switch model', 'err.modelRequired': 'Model, API Key and base URL are required',
-    'err.modelDelete': 'Delete failed', 'err.modelDeleteLast': 'At least one model is required',
-    'confirm.modelDelete': 'Delete this model profile?',
-    'model.aggregation': 'Channel group (auto failover)', 'model.aggregationShort': 'Channel group', 'model.aggregationDesc': 'Tries in order, switches to the next on failure',
-    'model.emptyMixin': 'No models added yet',
-    'model.addToMixin': 'Add to channel', 'model.inMixin': 'In channel', 'model.removeFromMixin': 'Remove from channel', 'model.alreadyInMixin': 'Already in the channel', 'model.dragReorder': 'Drag to reorder',
-    'err.mixinFailed': 'Operation failed',
-    'page.services.title': 'Services', 'page.services.sub': 'IM channels and background processes — view, start/stop, logs',
-    'page.channels.title': 'Channels', 'page.channels.sub': 'Background IM processes: list, start/stop, logs (hub.pyw style)',
-    'page.status.title': 'Status', 'page.status.sub': 'Background processes/services managed by hub.pyw',
-    'page.collab.title': 'Conductor', 'page.collab.sub': 'Describe a goal — split, delegate, and follow up',
-    'collab.progressTitle': 'Progress',
-    'collab.progressEmpty': 'No tasks running yet. After you describe a goal to Conductor, split tasks will appear here.',
-    'collab.placeholder': 'Describe the goal you want to accomplish',
-    'collab.guideTitle': 'Tell Conductor what you want done',
-    'collab.guideWhen': 'Best for multi-step goals that take a while. For everyday chat and quick questions, use Chat in the sidebar.',
-    'collab.guideStep1t': 'Describe your goal',
-    'collab.guideStep1d': 'Write what you want done in the chat box and send it to Conductor',
-    'collab.guideStep2t': 'Auto breakdown',
-    'collab.guideStep2d': 'Conductor breaks down, assigns, monitors, and coordinates',
-    'collab.guideStep3t': 'Summary',
-    'collab.guideStep3d': 'Conductor delivers a briefing based on execution status',
-    'collab.guideStep4t': 'Adjust anytime',
-    'collab.guideStep4d': 'Add requirements or details anytime — Conductor handles them',
-    'collab.chipProgress': 'How is it going?',
-    'collab.chipPause': 'Pause current tasks',
-    'collab.chipSummary': 'Summarize progress so far',
-    'collab.showProgressTitle': 'View task progress',
-    'collab.statRunning': 'Running',
-    'collab.statDone': 'Done',
-    'collab.plusMenu': 'More actions',
-    'collab.switchMode': 'Switch mode',
-    'collab.typing': 'Conductor is working',
-    'collab.offline': 'Cannot reach the service. Make sure the backend is running.',
-    'collab.retry': 'Retry',
-    'collab.reconnect': 'Disconnected — reconnecting… Your last progress is kept.',
-    'collab.reconnectIn': 'Retry in {n}s',
-    'collab.stRunning': 'Running', 'collab.stReported': 'Reported', 'collab.stPaused': 'Paused',
-    'collab.stFailed': 'Issue', 'collab.stTerminated': 'Ended',
-    'collab.summaryRunning': 'Working…', 'collab.summaryWait': 'Awaiting report',
-    'collab.taskFallback': 'Task {n}',
-    'collab.timeJust': 'just now',
-    'collab.timeSec': '{n}s ago',
-    'collab.timeMin': '{n}m ago',
-    'collab.timeHr': '{n}h ago',
-    'collab.timeDay': '{n}d ago',
-    'page.token.title': 'Usage', 'page.token.sub': 'Per-session and total usage & cache rate',
-    'status.connecting': 'Connecting…', 'status.ready': 'Service online', 'status.running': 'Working…',
-    'status.disconnected': 'Service offline', 'status.stopped': 'Stopped', 'status.idle': 'Standby',
-    'conv.emptyList': 'No chats yet — click “＋ New chat”', 'conv.defaultTitle': 'New chat',
-    'err.bridge': 'Service not responding', 'err.newSession': 'Failed to create session', 'err.poll': 'Polling failed', 'err.stop': 'Stop failed',
-    'err.interruptTimeout': 'Timed out waiting for the previous reply to stop — try again',
-    'sys.interruptPrev.hint': 'Previous reply stopped — processing new message',
-    'chat.interrupting': 'Stopping previous reply…',
-    'chat.sessionLoading': 'Loading conversation…',
-    'sys.stopRequested': 'Stop requested',
-    'slash.help': 'Commands:\n/new new chat  /clear clear  /stop stop  /settings settings',
-    'slash.unknown': 'Unknown command',
-    'upload.hint': 'Upload file: pick / drag / paste',
-    'upload.button': 'Upload file',
-    'upload.tooLarge': 'File too large or limit reached', 'upload.empty': 'Skipped empty file',
-    'upload.failed': 'Upload failed',
-    'err.charLimit': 'Character limit reached ({n}), text will be truncated on send', 'err.charLimitReached': 'Character limit reached ({n})', 'err.numMax': 'Cannot exceed {n}',
-    'file.openFailed': 'Cannot open file',
-    'file.kindGeneric': 'File',
-    'file.kindDoc': 'Document',
-    'file.kindSheet': 'Spreadsheet',
-    'file.kindSlide': 'Slides',
-    'file.kindCode': 'Code',
-    'file.kindArchive': 'Archive',
-    'file.kindAudio': 'Audio',
-    'file.kindVideo': 'Video',
-    'upload.removeTitle': 'Remove',
-    'upload.dropHint': 'Drop to upload files',
-    'lightbox.closeTitle': 'Close',
-    'fold.thinking': 'Thinking', 'fold.tool': 'Tool call', 'fold.toolResult': 'Tool result', 'fold.llm': 'LLM Running', 'fold.turn': 'Turn {n}',
-    'plan.header': 'Plan ({done}/{total})', 'plan.complete': '✓ Plan complete ({n}/{n})',
-    'plan.running': 'Running plan', 'plan.completeTitle': 'Plan complete',
-    'plan.placeholder': 'Plan mode activated', 'plan.waiting': 'waiting for {path} …', 'plan.overflow': '+{n} more',
-    'plan.current': 'Now', 'plan.fold': 'Fold', 'plan.collapse': 'Collapse', 'plan.expand': 'Expand', 'plan.details': 'Details', 'plan.dismiss': 'Hide',
-    'plan.capsuleRunning': 'Running', 'plan.capsuleComplete': 'Done',
-    'timing.elapsed': 'Elapsed {t}',
-    'model.auto': 'Auto',
-    'model.menuLabel': 'Select model',
-    'chip.plan': 'Plan',
-    'chip.auto': 'Auto',
-    'ch.wechat': 'WeChat', 'ch.wecom': 'WeCom', 'ch.lark': 'Lark', 'ch.dingtalk': 'DingTalk',
-    'ch.qq': 'QQ', 'ch.telegram': 'Telegram', 'ch.discord': 'Discord',
-    'ch.loading': 'Loading…', 'ch.empty': 'No IM process scripts found',
-    'ch.logEmpty': 'No log output yet',
-    'err.channelLoad': 'Failed to load', 'err.channelStart': 'Start failed', 'err.channelStop': 'Stop failed',
-    'err.mykeyImport': 'Failed to import model config',
-    'err.mykeyExport': 'Failed to export model config',
-    'err.channelNotConfigured': 'Configure this platform in mykey.py first',
-    'sys.channelStarted': 'Started', 'sys.channelStopped': 'Stopped',
-    'modal.channelLogs': 'Process logs',
-    'modal.mykeyConfig': 'mykey.py',
-    'sys.configSaved': 'Configuration saved',
-    'sys.mykeyImported': 'Model config imported',
-    'sys.mykeyExported': 'Model config exported',
-    'sys.memoryImported': 'Memory imported',
-    'err.memoryImport': 'Failed to import memory',
-    'sys.memoryImportBackup': 'Previous memory backed up to',
-    'sys.memorySessions': 'sessions',
-    'sys.gaSourcePickTitle': 'Select the GenericAgent source root to connect to (contains agentmain.py)',
-    'sys.gaSourceSwitching': 'Switching and restarting the backend...',
-    'sys.gaSourceSet': 'Connected to the external GenericAgent',
-    'sys.gaSourceCleared': 'Disconnected, restored the bundled version',
-    'err.gaSourceSet': 'Failed to connect',
-    'err.gaSourceDesktopOnly': 'This feature is only available in the desktop app',
-    'sys.memoryPickTitle': 'Select the GenericAgent root directory (the folder containing memory and temp)',
-    'sys.memoryImportPrompt': 'Enter the full path of the GenericAgent root directory (the folder containing memory and temp, not the memory folder itself):',
-    'st.starting': 'Starting…', 'st.stopping': 'Stopping…', 'st.online': 'Online', 'st.offline': 'Offline', 'st.error': 'Error', 'st.running': 'Running', 'st.abnormal': 'Error', 'st.missingDeps': 'Needs Setup',
-    'act.configure': 'Configure', 'act.logs': 'Logs', 'act.restart': 'Restart', 'act.stop': 'Stop', 'act.start': 'Start', 'act.exit': 'Exit', 'act.installDeps': 'Install', 'act.installing': 'Installing…',
-    'act.copy': 'Copy', 'act.copied': 'Copied', 'act.copyTex': 'TeX', 'act.send': 'Send',
-    'sys.depsInstalled': 'Dependencies installed', 'err.installDeps': 'Install failed',
-    'proc.imbotWechat': 'imbot · WeChat', 'proc.imbotDing': 'imbot · DingTalk', 'proc.scheduler': 'Scheduler', 'proc.conductor': 'Conductor',
-    'cm.scheduling': 'Scheduling', 'cm.running': 'Running', 'cm.idleSt': 'Idle',
-    'cm.master': 'Dispatched 3 subtasks', 'cm.w1': 'Subtask: fetch data', 'cm.w2': 'Subtask: review results', 'cm.sub': 'Waiting for tasks',
-    'tok.total': 'Total', 'tok.cost': 'Cache rate', 'tok.today': 'Today', 'tok.tabAll': 'Chat', 'tok.tabConductor': 'Conductor', 'tok.condTotal': 'Conductor Total', 'tok.condCurrent': 'Conductor Current', 'tok.condTip': 'Conductor usage is not included in chat totals', 'tok.condOffline': 'Service offline', 'tok.disclaimer': 'Pricing may vary by API provider. Please refer to the actual website.',
-    'tok.colSession': 'Session', 'tok.colIn': 'Input', 'tok.colOut': 'Output', 'tok.colCacheW': 'Cache write', 'tok.colCache': 'Cache read', 'tok.colCost': 'Cost',
-    'tok.from': 'From', 'tok.to': 'To', 'tok.reset': 'Reset', 'tok.noData': 'No records', 'tok.deleted': 'Session deleted',
-    'tok.pricingUnknown': '⚠ Pricing not confirmed, using defaults',
-    'tok.priceInput': 'Input: $', 'tok.priceOutput': 'Output: $',
-    'tok.priceCacheW': 'Cache write: $', 'tok.priceCacheR': 'Cache read: $',
-    'presetPrompt.goal': 'Enter Goal mode: read the L3 goal-mode SOP and autonomously achieve the goal I describe next.',
-    'presetPrompt.plan': 'Enter Plan mode: first read memory/plan_sop.md, follow its explore→plan→execute→verify flow, and wait for the task I describe next.',
-    'presetPrompt.autonomous': '🤖 Enter autonomous mode: read memory/autonomous_operation_sop.md, follow the SOP to pick or plan a task, execute independently, and produce a report.',
-    'presetPrompt.hive': 'Start Goal Hive mode: per the hive SOP, spawn multiple workers to collaboratively achieve the goal I describe next.',
-    'presetPrompt.review': 'Enter reviewer mode: strictly scrutinize the previous output, review item by item and report issues.',
-    'presetPrompt.findwork': 'Following the autonomous planning section, analyze my situation thoroughly and generate a batch of TODOs that genuinely interest me.',
-    'presetPrompt.mine': 'Collect this week\'s git commits and write a weekly report.',
-    'ask.banner': 'GA is waiting for your answer',
-    'ask.replyHint': 'Reply in the input below',
-    'ask.placeholderOpen': 'Type your answer here… (Enter to send)',
-  },
-};
-
-  const BOOT_I18N = {
-  zh: {
-    'loading.starting_app': '正在启动 GenericAgent...',
-    'loading.start': '首次运行：正在准备运行环境...',
-    'loading.venv': '正在创建运行环境...',
-    'loading.deps': '正在安装依赖...',
-    'loading.done': '依赖安装完成',
-    'loading.starting': '正在启动服务...',
-    'setup.title': 'GenericAgent - 设置',
-    'setup.heading': '需要设置',
-    'setup.backend_failed': '后端未能启动，请配置下方路径。',
-    'setup.prepare_error': '安装失败，错误详情：',
-    'setup.py_label': 'Python 解释器路径',
-    'setup.py_placeholder': 'python / 解释器路径',
-    'setup.py_hint': '例如 C:/Python312/python.exe 或 ~/miniconda3/envs/myenv/bin/python',
-    'setup.project_label': '项目目录',
-    'setup.project_placeholder': 'GenericAgent 文件夹路径',
-    'setup.project_hint': '包含 frontends/desktop_bridge.py 的文件夹',
-    'setup.start': '启动',
-    'setup.err_py': '请输入 Python 路径',
-    'setup.err_project': '请输入项目目录',
-    'setup.starting_bridge': '正在启动 bridge...',
-    'setup.connected': '已连接，正在打开主窗口...',
-    'setup.failed': '启动失败：{error}',
-    'setup.limit': '已达字符数上限（{n}）'
-  },
-  en: {
-    'loading.starting_app': 'Starting GenericAgent...',
-    'loading.start': 'First run: preparing the runtime...',
-    'loading.venv': 'Creating the runtime environment...',
-    'loading.deps': 'Installing dependencies...',
-    'loading.done': 'Dependencies installed',
-    'loading.starting': 'Starting services...',
-    'setup.title': 'GenericAgent - Setup',
-    'setup.heading': 'Setup Required',
-    'setup.backend_failed': 'The backend could not start. Please configure the paths below.',
-    'setup.prepare_error': 'Setup failed. Details:',
-    'setup.py_label': 'Python interpreter path',
-    'setup.py_placeholder': 'python / path to interpreter',
-    'setup.py_hint': 'e.g. C:/Python312/python.exe or ~/miniconda3/envs/myenv/bin/python',
-    'setup.project_label': 'Project directory',
-    'setup.project_placeholder': 'path to GenericAgent folder',
-    'setup.project_hint': 'The folder containing frontends/desktop_bridge.py',
-    'setup.start': 'Start',
-    'setup.err_py': 'Please enter Python path',
-    'setup.err_project': 'Please enter project directory',
-    'setup.starting_bridge': 'Starting bridge...',
-    'setup.connected': 'Connected. Opening the main window...',
-    'setup.failed': 'Failed: {error}',
-    'setup.limit': 'Character limit reached ({n})'
-  }
-};
-
-  for (const [code, messages] of Object.entries(BOOT_I18N)) {
-    I18N[code] = Object.assign(I18N[code] || {}, messages);
-  }
-
-  const LANGS = Object.freeze(Object.keys(I18N));
-
-  function normalizeLang(code) {
-    return LANGS.includes(code) ? code : 'zh';
-  }
-
-  function browserLang() {
-    return (navigator.language || '').toLowerCase().startsWith('zh') ? 'zh' : 'en';
-  }
-
-  function bootLang() {
-    try {
-      const saved = localStorage.getItem('ga_lang');
-      if (LANGS.includes(saved)) return saved;
-    } catch (_) {}
-    return browserLang();
-  }
-
-  function tFor(lang, key, vars) {
-    const active = normalizeLang(lang);
-    let text = (I18N[active] && I18N[active][key]) || (I18N.zh && I18N.zh[key]) || (I18N.en && I18N.en[key]) || key;
-    if (vars) {
-      for (const [name, value] of Object.entries(vars)) {
-        text = text.replaceAll(`{${name}}`, String(value));
-      }
-    }
-    return text;
-  }
-
-  function apply(root, activeLang) {
-    const lang = normalizeLang(activeLang || bootLang());
-    const scope = root || document;
-    if (scope === document) document.documentElement.lang = lang === 'en' ? 'en' : 'zh-CN';
-    scope.querySelectorAll('[data-i18n]').forEach(el => {
-      el.textContent = tFor(lang, el.dataset.i18n);
-    });
-    scope.querySelectorAll('[data-i18n-ph]').forEach(el => {
-      el.setAttribute('data-ph', tFor(lang, el.dataset.i18nPh));
-    });
-    scope.querySelectorAll('[data-i18n-placeholder]').forEach(el => {
-      el.setAttribute('placeholder', tFor(lang, el.dataset.i18nPlaceholder));
-    });
-    scope.querySelectorAll('[data-i18n-title]').forEach(el => {
-      el.setAttribute('title', tFor(lang, el.dataset.i18nTitle));
-      el.setAttribute('aria-label', tFor(lang, el.dataset.i18nTitle));
-    });
-  }
-
-  window.GA_I18N = {
-    dict: I18N,
-    languages: LANGS,
-    t: tFor,
-    apply,
-    bootLang,
-    browserLang,
-  };
-
-  window.GA_BOOT_I18N = {
-    get lang() { return bootLang(); },
-    t(key, vars) { return tFor(bootLang(), key, vars); },
-    apply(root) { return apply(root || document, bootLang()); },
-  };
-})();
diff --git a/frontends/desktop/public/phosphor-icons.js b/frontends/desktop/public/phosphor-icons.js
deleted file mode 100644
index 101df095b..000000000
--- a/frontends/desktop/public/phosphor-icons.js
+++ /dev/null
@@ -1,101 +0,0 @@
-(() => {
-  const PATHS = {
-    chatTeardropText:
-      'M172,112a8,8,0,0,1-8,8H96a8,8,0,0,1,0-16h68A8,8,0,0,1,172,112Zm-8,24H96a8,8,0,0,0,0,16h68a8,8,0,0,0,0-16Zm68-12A100.11,100.11,0,0,1,132,224H48a16,16,0,0,1-16-16V124a100,100,0,0,1,200,0Zm-16,0a84,84,0,0,0-168,0v84h84A84.09,84.09,0,0,0,216,124Z',
-    broadcast:
-      'M128,88a40,40,0,1,0,40,40A40,40,0,0,0,128,88Zm0,64a24,24,0,1,1,24-24A24,24,0,0,1,128,152Zm73.71,7.14a80,80,0,0,1-14.08,22.2,8,8,0,0,1-11.92-10.67,63.95,63.95,0,0,0,0-85.33,8,8,0,1,1,11.92-10.67,80.08,80.08,0,0,1,14.08,84.47ZM69,103.09a64,64,0,0,0,11.26,67.58,8,8,0,0,1-11.92,10.67,79.93,79.93,0,0,1,0-106.67A8,8,0,1,1,80.29,85.34,63.77,63.77,0,0,0,69,103.09ZM248,128a119.58,119.58,0,0,1-34.29,84,8,8,0,1,1-11.42-11.2,103.9,103.9,0,0,0,0-145.56A8,8,0,1,1,213.71,44,119.58,119.58,0,0,1,248,128ZM53.71,200.78A8,8,0,1,1,42.29,212a119.87,119.87,0,0,1,0-168,8,8,0,1,1,11.42,11.2,103.9,103.9,0,0,0,0,145.56Z',
-    chartBar:
-      'M224,200h-8V40a8,8,0,0,0-8-8H152a8,8,0,0,0-8,8V80H96a8,8,0,0,0-8,8v40H48a8,8,0,0,0-8,8v64H32a8,8,0,0,0,0,16H224a8,8,0,0,0,0-16ZM160,48h40V200H160ZM104,96h40V200H104ZM56,144H88v56H56Z',
-    usersThree:
-      'M244.8,150.4a8,8,0,0,1-11.2-1.6A51.6,51.6,0,0,0,192,128a8,8,0,0,1-7.37-4.89,8,8,0,0,1,0-6.22A8,8,0,0,1,192,112a24,24,0,1,0-23.24-30,8,8,0,1,1-15.5-4A40,40,0,1,1,219,117.51a67.94,67.94,0,0,1,27.43,21.68A8,8,0,0,1,244.8,150.4ZM190.92,212a8,8,0,1,1-13.84,8,57,57,0,0,0-98.16,0,8,8,0,1,1-13.84-8,72.06,72.06,0,0,1,33.74-29.92,48,48,0,1,1,58.36,0A72.06,72.06,0,0,1,190.92,212ZM128,176a32,32,0,1,0-32-32A32,32,0,0,0,128,176ZM72,120a8,8,0,0,0-8-8A24,24,0,1,1,87.24,82a8,8,0,1,0,15.5-4A40,40,0,1,0,37,117.51,67.94,67.94,0,0,0,9.6,139.19a8,8,0,1,0,12.8,9.61A51.6,51.6,0,0,1,64,128,8,8,0,0,0,72,120Z',
-    coins:
-      'M184,89.57V84c0-25.08-37.83-44-88-44S8,58.92,8,84v40c0,20.89,26.25,37.49,64,42.46V172c0,25.08,37.83,44,88,44s88-18.92,88-44V132C248,111.3,222.58,94.68,184,89.57ZM232,132c0,13.22-30.79,28-72,28-3.73,0-7.43-.13-11.08-.37C170.49,151.77,184,139,184,124V105.74C213.87,110.19,232,122.27,232,132ZM72,150.25V126.46A183.74,183.74,0,0,0,96,128a183.74,183.74,0,0,0,24-1.54v23.79A163,163,0,0,1,96,152,163,163,0,0,1,72,150.25Zm96-40.32V124c0,8.39-12.41,17.4-32,22.87V123.5C148.91,120.37,159.84,115.71,168,109.93ZM96,56c41.21,0,72,14.78,72,28s-30.79,28-72,28S24,97.22,24,84,54.79,56,96,56ZM24,124V109.93c8.16,5.78,19.09,10.44,32,13.57v23.37C36.41,141.4,24,132.39,24,124Zm64,48v-4.17c2.63.1,5.29.17,8,.17,3.88,0,7.67-.13,11.39-.35A121.92,121.92,0,0,0,120,171.41v23.46C100.41,189.4,88,180.39,88,172Zm48,26.25V174.4a179.48,179.48,0,0,0,24,1.6,183.74,183.74,0,0,0,24-1.54v23.79a165.45,165.45,0,0,1-48,0Zm64-3.38V171.5c12.91-3.13,23.84-7.79,32-13.57V172C232,180.39,219.59,189.4,200,194.87Z',
-    sidebarSimple:
-      'M216,40H40A16,16,0,0,0,24,56V200a16,16,0,0,0,16,16H216a16,16,0,0,0,16-16V56A16,16,0,0,0,216,40ZM40,56H80V200H40ZM216,200H96V56H216V200Z',
-    pencilSimple:
-      'M227.31,73.37,182.63,28.68a16,16,0,0,0-22.63,0L36.69,152A15.86,15.86,0,0,0,32,163.31V208a16,16,0,0,0,16,16H92.69A15.86,15.86,0,0,0,104,219.31L227.31,96a16,16,0,0,0,0-22.63ZM92.69,208H48V163.31l88-88L180.69,120ZM192,108.68,147.31,64l24-24L216,84.68Z',
-    magnifyingGlass:
-      'M229.66,218.34l-50.07-50.06a88.11,88.11,0,1,0-11.31,11.31l50.06,50.07a8,8,0,0,0,11.32-11.32ZM40,112a72,72,0,1,1,72,72A72.08,72.08,0,0,1,40,112Z',
-    books:
-      'M231.65,194.55,198.46,36.75a16,16,0,0,0-19-12.39L132.65,34.42a16.08,16.08,0,0,0-12.3,19l33.19,157.8A16,16,0,0,0,169.16,224a16.25,16.25,0,0,0,3.38-.36l46.81-10.06A16.09,16.09,0,0,0,231.65,194.55ZM136,50.15c0-.06,0-.09,0-.09l46.8-10,3.33,15.87L139.33,66Zm6.62,31.47,46.82-10.05,3.34,15.9L146,97.53Zm6.64,31.57,46.82-10.06,13.3,63.24-46.82,10.06ZM216,197.94l-46.8,10-3.33-15.87L212.67,182,216,197.85C216,197.91,216,197.94,216,197.94ZM104,32H56A16,16,0,0,0,40,48V208a16,16,0,0,0,16,16h48a16,16,0,0,0,16-16V48A16,16,0,0,0,104,32ZM56,48h48V64H56Zm0,32h48v96H56Zm48,128H56V192h48v16Z',
-    gridFour:
-      'M200,40H56A16,16,0,0,0,40,56V200a16,16,0,0,0,16,16H200a16,16,0,0,0,16-16V56A16,16,0,0,0,200,40Zm0,80H136V56h64ZM120,56v64H56V56ZM56,136h64v64H56Zm144,64H136V136h64v64Z',
-    robot:
-      'M200,48H136V16a8,8,0,0,0-16,0V48H56A32,32,0,0,0,24,80V192a32,32,0,0,0,32,32H200a32,32,0,0,0,32-32V80A32,32,0,0,0,200,48Zm16,144a16,16,0,0,1-16,16H56a16,16,0,0,1-16-16V80A16,16,0,0,1,56,64H200a16,16,0,0,1,16,16Zm-52-56H92a28,28,0,0,0,0,56h72a28,28,0,0,0,0-56Zm-24,16v24H116V152ZM80,164a12,12,0,0,1,12-12h8v24H92A12,12,0,0,1,80,164Zm84,12h-8V152h8a12,12,0,0,1,0,24ZM72,108a12,12,0,1,1,12,12A12,12,0,0,1,72,108Zm88,0a12,12,0,1,1,12,12A12,12,0,0,1,160,108Z',
-    dotsThree:
-      'M140,128a12,12,0,1,1-12-12A12,12,0,0,1,140,128Zm56-12a12,12,0,1,0,12,12A12,12,0,0,0,196,116ZM60,116a12,12,0,1,0,12,12A12,12,0,0,0,60,116Z',
-    folderSimplePlus:
-      'M216,72H130.67L102.93,51.2a16.12,16.12,0,0,0-9.6-3.2H40A16,16,0,0,0,24,64V200a16,16,0,0,0,16,16H216.89A15.13,15.13,0,0,0,232,200.89V88A16,16,0,0,0,216,72Zm0,128H40V64H93.33L123.2,86.4A8,8,0,0,0,128,88h88Zm-56-56a8,8,0,0,1-8,8H136v16a8,8,0,0,1-16,0V152H104a8,8,0,0,1,0-16h16V120a8,8,0,0,1,16,0v16h16A8,8,0,0,1,160,144Z',
-    folderSimple:
-      'M216,72H130.67L102.93,51.2a16.12,16.12,0,0,0-9.6-3.2H40A16,16,0,0,0,24,64V200a16,16,0,0,0,16,16H216.89A15.13,15.13,0,0,0,232,200.89V88A16,16,0,0,0,216,72Zm0,128H40V64H93.33L123.2,86.4A8,8,0,0,0,128,88h88Z',
-    bracketsCurly:
-      'M43.18,128a29.78,29.78,0,0,1,8,10.26c4.8,9.9,4.8,22,4.8,33.74,0,24.31,1,36,24,36a8,8,0,0,1,0,16c-17.48,0-29.32-6.14-35.2-18.26-4.8-9.9-4.8-22-4.8-33.74,0-24.31-1-36-24-36a8,8,0,0,1,0-16c23,0,24-11.69,24-36,0-11.72,0-23.84,4.8-33.74C50.68,38.14,62.52,32,80,32a8,8,0,0,1,0,16C57,48,56,59.69,56,84c0,11.72,0,23.84-4.8,33.74A29.78,29.78,0,0,1,43.18,128ZM240,120c-23,0-24-11.69-24-36,0-11.72,0-23.84-4.8-33.74C205.32,38.14,193.48,32,176,32a8,8,0,0,0,0,16c23,0,24,11.69,24,36,0,11.72,0,23.84,4.8,33.74a29.78,29.78,0,0,0,8,10.26,29.78,29.78,0,0,0-8,10.26c-4.8,9.9-4.8,22-4.8,33.74,0,24.31-1,36-24,36a8,8,0,0,0,0,16c17.48,0,29.32-6.14,35.2-18.26,4.8-9.9,4.8-22,4.8-33.74,0-24.31,1-36,24-36a8,8,0,0,0,0-16Z',
-    gear:
-      'M128,80a48,48,0,1,0,48,48A48.05,48.05,0,0,0,128,80Zm0,80a32,32,0,1,1,32-32A32,32,0,0,1,128,160Zm88-29.84q.06-2.16,0-4.32l14.92-18.64a8,8,0,0,0,1.48-7.06,107.21,107.21,0,0,0-10.88-26.25,8,8,0,0,0-6-3.93l-23.72-2.64q-1.48-1.56-3-3L186,40.54a8,8,0,0,0-3.94-6,107.71,107.71,0,0,0-26.25-10.87,8,8,0,0,0-7.06,1.49L130.16,40Q128,40,125.84,40L107.2,25.11a8,8,0,0,0-7.06-1.48A107.6,107.6,0,0,0,73.89,34.51a8,8,0,0,0-3.93,6L67.32,64.27q-1.56,1.49-3,3L40.54,70a8,8,0,0,0-6,3.94,107.71,107.71,0,0,0-10.87,26.25,8,8,0,0,0,1.49,7.06L40,125.84Q40,128,40,130.16L25.11,148.8a8,8,0,0,0-1.48,7.06,107.21,107.21,0,0,0,10.88,26.25,8,8,0,0,0,6,3.93l23.72,2.64q1.49,1.56,3,3L70,215.46a8,8,0,0,0,3.94,6,107.71,107.71,0,0,0,26.25,10.87,8,8,0,0,0,7.06-1.49L125.84,216q2.16.06,4.32,0l18.64,14.92a8,8,0,0,0,7.06,1.48,107.21,107.21,0,0,0,26.25-10.88,8,8,0,0,0,3.93-6l2.64-23.72q1.56-1.48,3-3L215.46,186a8,8,0,0,0,6-3.94,107.71,107.71,0,0,0,10.87-26.25,8,8,0,0,0-1.49-7.06Zm-16.1-6.5a73.93,73.93,0,0,1,0,8.68,8,8,0,0,0,1.74,5.48l14.19,17.73a91.57,91.57,0,0,1-6.23,15L187,173.11a8,8,0,0,0-5.1,2.64,74.11,74.11,0,0,1-6.14,6.14,8,8,0,0,0-2.64,5.1l-2.51,22.58a91.32,91.32,0,0,1-15,6.23l-17.74-14.19a8,8,0,0,0-5-1.75h-.48a73.93,73.93,0,0,1-8.68,0,8,8,0,0,0-5.48,1.74L100.45,215.8a91.57,91.57,0,0,1-15-6.23L82.89,187a8,8,0,0,0-2.64-5.1,74.11,74.11,0,0,1-6.14-6.14,8,8,0,0,0-5.1-2.64L46.43,170.6a91.32,91.32,0,0,1-6.23-15l14.19-17.74a8,8,0,0,0,1.74-5.48,73.93,73.93,0,0,1,0-8.68,8,8,0,0,0-1.74-5.48L40.2,100.45a91.57,91.57,0,0,1,6.23-15L69,82.89a8,8,0,0,0,5.1-2.64,74.11,74.11,0,0,1,6.14-6.14A8,8,0,0,0,82.89,69L85.4,46.43a91.32,91.32,0,0,1,15-6.23l17.74,14.19a8,8,0,0,0,5.48,1.74,73.93,73.93,0,0,1,8.68,0,8,8,0,0,0,5.48-1.74L155.55,40.2a91.57,91.57,0,0,1,15,6.23L173.11,69a8,8,0,0,0,2.64,5.1,74.11,74.11,0,0,1,6.14,6.14,8,8,0,0,0,5.1,2.64l22.58,2.51a91.32,91.32,0,0,1,6.23,15l-14.19,17.74A8,8,0,0,0,199.87,123.66Z',
-    caretLeft:
-      'M165.66,202.34a8,8,0,0,1-11.32,11.32l-80-80a8,8,0,0,1,0-11.32l80-80a8,8,0,0,1,11.32,11.32L91.31,128Z',
-    caretDown:
-      'M213.66,101.66l-80,80a8,8,0,0,1-11.32,0l-80-80A8,8,0,0,1,53.66,90.34L128,164.69l74.34-74.35a8,8,0,0,1,11.32,11.32Z',
-    caretRight:
-      'M181.66,133.66l-80,80a8,8,0,0,1-11.32-11.32L164.69,128,90.34,53.66a8,8,0,0,1,11.32-11.32l80,80A8,8,0,0,1,181.66,133.66Z',
-    paperPlaneTilt:
-      'M227.32,28.68a16,16,0,0,0-15.66-4.08l-.15,0L19.57,82.84a16,16,0,0,0-2.49,29.8L102,154l41.3,84.87A15.86,15.86,0,0,0,157.74,248q.69,0,1.38-.06a15.88,15.88,0,0,0,14-11.51l58.2-191.94c0-.05,0-.1,0-.15A16,16,0,0,0,227.32,28.68ZM157.83,231.85l-.05.14,0-.07-40.06-82.3,48-48a8,8,0,0,0-11.31-11.31l-48,48L24.08,98.25l-.07,0,.14,0L216,40Z',
-    paperclip:
-      'M209.66,122.34a8,8,0,0,1,0,11.32l-82.05,82a56,56,0,0,1-79.2-79.21L147.67,35.73a40,40,0,1,1,56.61,56.55L105,193A24,24,0,1,1,71,159L154.3,74.38A8,8,0,1,1,165.7,85.6L82.39,170.31a8,8,0,1,0,11.27,11.36L192.93,81A24,24,0,1,0,159,47L59.76,147.68a40,40,0,1,0,56.53,56.62l82.06-82A8,8,0,0,1,209.66,122.34Z',
-    lightning:
-      'M215.79,118.17a8,8,0,0,0-5-5.66L153.18,90.9l14.66-73.33a8,8,0,0,0-13.69-7l-112,120a8,8,0,0,0,3,13l57.63,21.61L88.16,238.43a8,8,0,0,0,13.69,7l112-120A8,8,0,0,0,215.79,118.17ZM109.37,214l10.47-52.38a8,8,0,0,0-5-9.06L62,132.71l84.62-90.66L136.16,94.43a8,8,0,0,0,5,9.06l52.8,19.8Z',
-    pushPinSimple:
-      'M216,168h-9.29L185.54,48H192a8,8,0,0,0,0-16H64a8,8,0,0,0,0,16h6.46L49.29,168H40a8,8,0,0,0,0,16h80v56a8,8,0,0,0,16,0V184h80a8,8,0,0,0,0-16ZM86.71,48h82.58l21.17,120H65.54Z',
-    trash:
-      'M216,48H176V40a24,24,0,0,0-24-24H104A24,24,0,0,0,80,40v8H40a8,8,0,0,0,0,16h8V208a16,16,0,0,0,16,16H192a16,16,0,0,0,16-16V64h8a8,8,0,0,0,0-16ZM96,40a8,8,0,0,1,8-8h48a8,8,0,0,1,8,8v8H96Zm96,168H64V64H192ZM112,104v64a8,8,0,0,1-16,0V104a8,8,0,0,1,16,0Zm48,0v64a8,8,0,0,1-16,0V104a8,8,0,0,1,16,0Z',
-    x:
-      'M205.66,194.34a8,8,0,0,1-11.32,11.32L128,139.31,61.66,205.66a8,8,0,0,1-11.32-11.32L116.69,128,50.34,61.66A8,8,0,0,1,61.66,50.34L128,116.69l66.34-66.35a8,8,0,0,1,11.32,11.32L139.31,128Z',
-    dotsThreeVertical:
-      'M140,128a12,12,0,1,1-12-12A12,12,0,0,1,140,128Zm0-56a12,12,0,1,1-12-12A12,12,0,0,1,140,72Zm0,112a12,12,0,1,1-12-12A12,12,0,0,1,140,184Z',
-    plus:
-      'M224,128a8,8,0,0,1-8,8H136v80a8,8,0,0,1-16,0V136H40a8,8,0,0,1,0-16h80V40a8,8,0,0,1,16,0v80h80A8,8,0,0,1,224,128Z',
-    copy:
-      'M216,32H88a8,8,0,0,0-8,8V80H40a8,8,0,0,0-8,8V216a8,8,0,0,0,8,8H168a8,8,0,0,0,8-8V176h40a8,8,0,0,0,8-8V40A8,8,0,0,0,216,32ZM160,208H48V96H160Zm48-48H176V88a8,8,0,0,0-8-8H96V48H208Z',
-    check:
-      'M229.66,77.66l-128,128a8,8,0,0,1-11.32,0l-56-56a8,8,0,0,1,11.32-11.32L96,188.69,218.34,66.34a8,8,0,0,1,11.32,11.32Z',
-    crosshair:
-      'M232,120h-8.34A96.14,96.14,0,0,0,136,32.34V24a8,8,0,0,0-16,0v8.34A96.14,96.14,0,0,0,32.34,120H24a8,8,0,0,0,0,16h8.34A96.14,96.14,0,0,0,120,223.66V232a8,8,0,0,0,16,0v-8.34A96.14,96.14,0,0,0,223.66,136H232a8,8,0,0,0,0-16Zm-96,87.6V200a8,8,0,0,0-16,0v7.6A80.15,80.15,0,0,1,48.4,136H56a8,8,0,0,0,0-16H48.4A80.15,80.15,0,0,1,120,48.4V56a8,8,0,0,0,16,0V48.4A80.15,80.15,0,0,1,207.6,120H200a8,8,0,0,0,0,16h7.6A80.15,80.15,0,0,1,136,207.6ZM128,88a40,40,0,1,0,40,40A40,40,0,0,0,128,88Zm0,64a24,24,0,1,1,24-24A24,24,0,0,1,128,152Z',
-    compass:
-      'M128,24A104,104,0,1,0,232,128,104.11,104.11,0,0,0,128,24Zm0,192a88,88,0,1,1,88-88A88.1,88.1,0,0,1,128,216ZM172.42,72.84l-64,32a8.05,8.05,0,0,0-3.58,3.58l-32,64A8,8,0,0,0,80,184a8.1,8.1,0,0,0,3.58-.84l64-32a8.05,8.05,0,0,0,3.58-3.58l32-64a8,8,0,0,0-10.74-10.74ZM138,138,97.89,158.11,118,118l40.15-20.07Z',
-    listChecks:
-      'M224,128a8,8,0,0,1-8,8H128a8,8,0,0,1,0-16h88A8,8,0,0,1,224,128ZM128,72h88a8,8,0,0,0,0-16H128a8,8,0,0,0,0,16Zm88,112H128a8,8,0,0,0,0,16h88a8,8,0,0,0,0-16ZM82.34,42.34,56,68.69,45.66,58.34A8,8,0,0,0,34.34,69.66l16,16a8,8,0,0,0,11.32,0l32-32A8,8,0,0,0,82.34,42.34Zm0,64L56,132.69,45.66,122.34a8,8,0,0,0-11.32,11.32l16,16a8,8,0,0,0,11.32,0l32-32a8,8,0,0,0-11.32-11.32Zm0,64L56,196.69,45.66,186.34a8,8,0,0,0-11.32,11.32l16,16a8,8,0,0,0,11.32,0l32-32a8,8,0,0,0-11.32-11.32Z',
-    star:
-      'M239.18,97.26A16.38,16.38,0,0,0,224.92,86l-59-4.76L143.14,26.15a16.36,16.36,0,0,0-30.27,0L90.11,81.23,31.08,86a16.46,16.46,0,0,0-9.37,28.86l45,38.83L53,211.75a16.38,16.38,0,0,0,24.5,17.82L128,198.49l50.53,31.08A16.4,16.4,0,0,0,203,211.75l-13.76-58.07,45-38.83A16.43,16.43,0,0,0,239.18,97.26Zm-15.34,5.47-48.7,42a8,8,0,0,0-2.56,7.91l14.88,62.8a.37.37,0,0,1-.17.48c-.18.14-.23.11-.38,0l-54.72-33.65a8,8,0,0,0-8.38,0L69.09,215.94c-.15.09-.19.12-.38,0a.37.37,0,0,1-.17-.48l14.88-62.8a8,8,0,0,0-2.56-7.91l-48.7-42c-.12-.1-.23-.19-.13-.5s.18-.27.33-.29l63.92-5.16A8,8,0,0,0,103,91.86l24.62-59.61c.08-.17.11-.25.35-.25s.27.08.35.25L153,91.86a8,8,0,0,0,6.75,4.92l63.92,5.16c.15,0,.24,0,.33.29S224,102.63,223.84,102.73Z',
-    fileText:
-      'M213.66,82.34l-56-56A8,8,0,0,0,152,24H56A16,16,0,0,0,40,40V216a16,16,0,0,0,16,16H200a16,16,0,0,0,16-16V88A8,8,0,0,0,213.66,82.34ZM160,51.31,188.69,80H160ZM200,216H56V40h88V88a8,8,0,0,0,8,8h48V216Zm-32-80a8,8,0,0,1-8,8H96a8,8,0,0,1,0-16h64A8,8,0,0,1,168,136Zm0,32a8,8,0,0,1-8,8H96a8,8,0,0,1,0-16h64A8,8,0,0,1,168,168Z',
-    gitFork:
-      'M224,64a32,32,0,1,0-40,31v17a8,8,0,0,1-8,8H80a8,8,0,0,1-8-8V95a32,32,0,1,0-16,0v17a24,24,0,0,0,24,24h40v25a32,32,0,1,0,16,0V136h40a24,24,0,0,0,24-24V95A32.06,32.06,0,0,0,224,64ZM48,64A16,16,0,1,1,64,80,16,16,0,0,1,48,64Zm96,128a16,16,0,1,1-16-16A16,16,0,0,1,144,192ZM192,80a16,16,0,1,1,16-16A16,16,0,0,1,192,80Z',
-    hexagon:
-      'M223.68,66.15,135.68,18h0a15.88,15.88,0,0,0-15.36,0l-88,48.17a16,16,0,0,0-8.32,14v95.64a16,16,0,0,0,8.32,14l88,48.17a15.88,15.88,0,0,0,15.36,0l88-48.17a16,16,0,0,0,8.32-14V80.18A16,16,0,0,0,223.68,66.15ZM216,175.82,128,224,40,175.82V80.18L128,32h0l88,48.17Z',
-  };
-
-  function gaIcon(name, className = '') {
-    const d = PATHS[name];
-    if (!d) return '';
-    const cls = className ? ` class="${className}"` : '';
-    return `<svg${cls} xmlns="http://www.w3.org/2000/svg" width="1em" height="1em" viewBox="0 0 256 256" fill="currentColor" aria-hidden="true" focusable="false"><path d="${d}"/></svg>`;
-  }
-
-  function gaHydrateIcons(root = document) {
-    root.querySelectorAll('[data-ga-icon]').forEach((node) => {
-      node.outerHTML = gaIcon(node.dataset.gaIcon, node.className || '');
-    });
-  }
-
-  window.GA_ICON_PATHS = PATHS;
-  window.gaIcon = gaIcon;
-  window.gaHydrateIcons = gaHydrateIcons;
-
-  if (typeof document !== 'undefined') {
-    const hydrate = () => gaHydrateIcons(document);
-    hydrate();
-    if (document.readyState === 'loading') {
-      document.addEventListener('DOMContentLoaded', hydrate, { once: true });
-    }
-  }
-})();
diff --git a/frontends/desktop/public/styles.css b/frontends/desktop/public/styles.css
deleted file mode 100644
index 710ad4244..000000000
--- a/frontends/desktop/public/styles.css
+++ /dev/null
@@ -1,2668 +0,0 @@
-/* GenericAgent 桌面版 — 界面骨架 mockup
-   仅布局与视觉占位。所有颜色均走 CSS 变量，主题可整体切换（无硬编码颜色）。 */
-
-* { box-sizing: border-box; margin: 0; padding: 0; }
-
-/* —— 全局滚动条 —— */
-::-webkit-scrollbar{ width:6px; height:6px; }
-::-webkit-scrollbar-track{ background:transparent; }
-::-webkit-scrollbar-thumb{
-  background:var(--line);
-  border-radius:0;
-}
-::-webkit-scrollbar-thumb:hover{ background:var(--line-strong); }
-::-webkit-scrollbar-corner{ background:transparent; }
-
-:root{
-  --font-sans:-apple-system,BlinkMacSystemFont,system-ui,"Segoe UI Variable","Segoe UI","PingFang SC","Hiragino Sans GB","Microsoft YaHei UI","Microsoft YaHei",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Noto Color Emoji",emoji;
-  --font-brand:"GA Azonix",var(--font-sans);
-  --font-mono:"GA JetBrains Mono",ui-monospace,"SFMono-Regular",Menlo,Monaco,Consolas,"Liberation Mono","Courier New","PingFang SC","Hiragino Sans GB","Microsoft YaHei UI","Microsoft YaHei",monospace;
-  --font-num:var(--font-mono);
-  --font-num-variant:lining-nums tabular-nums;
-  --chat-col-w:760px;
-  /* —— 基础面 —— */
-  --bg-base:#f4f5f7;
-  --bg:var(--bg-base);
-  --panel:#ffffff;
-  --card:#ffffff;
-  --field-bg:#fafbfc;
-  --line-base:#e9eaee;
-  --line:var(--line-base);
-  --line-soft-base:#f0f1f4;
-  --line-soft:var(--line-soft-base);
-  --line-strong:#d4d8e0;    /* hover 描边 */
-  --hover-2:#eceef2;        /* 次级 hover 底 */
-  --hover-dim:#0000000f;
-
-  /* —— 文字 —— */
-  --txt:#1f2430;
-  --txt-strong:#3b414f;     /* 标题 */
-  --txt-2:#4a4f5c;          /* 常规可点文字 */
-  --txt-3:#5b6170;
-  --muted:#656b7a;
-  --muted2:#767d8d;
-  --placeholder:#c4cad6;
-  --icon:#6b7180;
-  --on-accent:#ffffff;      /* 彩色底上的字/图标 */
-
-  /* —— 强调色(只保留灰色亮色主题,删去 mac 8 色主题切换)—— */
-  --accent:#8e8e93;
-  --accent-bg:#eef0f3;
-  --accent-soft:#f4f5f7;
-  /* 向后兼容别名:旧代码 / 未合并分支(如 PR#1)仍用 --blue* */
-  --blue:var(--accent); --blue-bg:var(--accent-bg); --blue-soft:var(--accent-soft);
-
-  /* —— 品牌徽标渐变 —— */
-  --brand1:#ffb35c;
-  --brand2:#ff7a59;
-
-  /* —— 状态：成功 / 危险 / 关闭 —— */
-  --ok:#39a85a;
-  --ok-strong:#2f9e54;
-  --ok-bg:#e9f7ee;
-  --ok-ring:#39a85a33;
-  /* 发送键专用：浅色=黑色，深色在 dark 块里覆盖为深蓝 */
-  --ink-green:#1a1a1a;
-  --ink-green-hover:#000000;
-  --danger:#d64545;
-  --danger-dot:#e23b3b;
-  --danger-text:#d3514f;
-  --danger-bg:#fdeceb;
-  --danger-ring:#e23b3b38;
-  --confirm-primary-bg:#1a1a1a;
-  --confirm-primary-fg:#ffffff;
-  --success:var(--ok-strong);
-  --success-bg:var(--ok-bg);
-  --success-ring:var(--ok-ring);
-  --off-bg:#eef0f3;
-  --switch-off:#cfd4de;
-  --dot-idle:#c2c7d0;
-
-  /* —— 外观切换页的样本色（不跟随当前主题，固定为 light/dark 实际配色） —— */
-  --sample-light-bg:#f4f5f7;
-  --sample-light-panel:#ffffff;
-  --sample-light-line:#e9eaee;
-  --sample-dark-bg:#161b22;
-  --sample-dark-panel:#21262d;
-  --sample-dark-line:#484f58;
-
-  /* —— 阴影 / 遮罩 —— */
-  --overlay:#14192861;
-  --shadow:0 1px 2px #1419280a, 0 8px 24px #1419280d;
-  --shadow-pop:0 8px 24px #14192829;
-  --shadow-modal:0 18px 50px #14192847;
-
-  --divider-base:rgba(0,0,0,.12);
-  --divider:var(--divider-base);
-  --tooltip-bg:var(--card);
-  --tooltip-fg:var(--txt);
-  --tooltip-border:var(--line-strong);
-
-  --radius:4px; --radius-sm:2px;
-  /* —— 折叠块 —— */
-  --fold-thinking-border:#d4c090;
-  --fold-thinking-bg:#fefbf3;
-  --fold-tool-border:#90b8d4;
-  --fold-tool-bg:#f3f8fe;
-  --fold-result-border:#a0d4a0;
-  --fold-result-bg:#f4fdf4;
-  --fold-turn-border:var(--line);
-  --fold-turn-bg:var(--field-bg);
-  --fold-retry-border:var(--line-soft);
-  --fold-retry-bg:transparent;
-}
-
-/* —— 主题色板(素色:仅 accent 浅底) —— */
-html[data-theme]{
-  --accent-bg:color-mix(in srgb, var(--accent) 14%, var(--panel));
-  --accent-soft:color-mix(in srgb, var(--accent) 7%, var(--panel));
-  --brand1:color-mix(in srgb, var(--accent) 40%, #ffc978);
-  --brand2:var(--accent);
-}
-
-/* —— 外观：浅色（accent 轻 tint 页面/边框）—— */
-html[data-appearance="light"]:not([data-plain="1"])[data-theme]{
-  --accent-bg:color-mix(in srgb, var(--accent) 20%, var(--panel));
-  --accent-soft:color-mix(in srgb, var(--accent) 11%, var(--panel));
-  --bg:color-mix(in srgb, var(--accent) 7%, var(--bg-base));
-  --line:color-mix(in srgb, var(--accent) 16%, var(--line-base));
-  --line-soft:color-mix(in srgb, var(--accent) 10%, var(--line-soft-base));
-  --divider:var(--divider-base);
-}
-
-/* —— 外观：深色 —— */
-html[data-appearance="dark"]{
-  --bg-base:#161b22;
-  --bg:#161b22;
-  --panel:#21262d;
-  --card:#21262d;
-  --field-bg:#161b22;
-  --line-base:#484f58;
-  --line:#484f58;
-  --line-soft-base:#30363d;
-  --line-soft:#30363d;
-  --line-strong:#656d76;
-  --hover-2:#30363d;
-  --hover-dim:#ffffff0f;
-  --txt:#e6edf3;
-  --txt-strong:#ffffff;
-  --txt-2:#c9d1d9;
-  --txt-3:#afb8c1;
-  --muted:#9aa3af;
-  --muted2:#828b96;
-  --placeholder:#656d76;
-  --icon:#7d8590;
-  --off-bg:#30363d;
-  --switch-off:#656d76;
-  --dot-idle:#656d76;
-  --ok:#3fb950;
-  --ok-strong:#46c35a;
-  --ok-bg:#12261e;
-  --ok-ring:#3fb95033;
-  --danger:#f85149;
-  --danger-dot:#f85149;
-  --danger-text:#ff7b72;
-  --danger-bg:#2d1515;
-  --danger-ring:#f8514938;
-  --confirm-primary-bg:#e6edf3;
-  --confirm-primary-fg:#161b22;
-  --overlay:#010409a6;
-  --shadow:0 1px 2px #01040966, 0 8px 24px #01040966;
-  --shadow-pop:0 8px 24px #01040999;
-  --shadow-modal:0 18px 50px #010409cc;
-  /* —— 折叠块（dark 覆盖） —— */
-  --fold-thinking-border:#6b5b30;
-  --fold-thinking-bg:#2a2418;
-  --fold-tool-border:#3a5066;
-  --fold-tool-bg:#16202b;
-  --fold-result-border:#3f6647;
-  --fold-result-bg:#15241a;
-  --divider-base:rgba(255,255,255,.10);
-  --divider:var(--divider-base);
-  /* 发送键：深色用鲜亮深蓝 */
-  --ink-green:#2559d8;
-  --ink-green-hover:#3a6ef0;
-}
-html[data-appearance="dark"][data-theme]{
-  --accent-bg:color-mix(in srgb, var(--accent) 22%, var(--panel));
-  --accent-soft:color-mix(in srgb, var(--accent) 12%, var(--panel));
-  --divider:var(--divider-base);
-}
-
-html,body{ height:100%; }
-html{ --chat-font:13px; }
-body{ background:var(--bg); color:var(--txt); font-size:13px; overflow:hidden; font-family:var(--font-sans); }
-
-#app{
-  width:100vw; height:100vh; background:var(--bg);
-  overflow:hidden; display:flex; flex-direction:column;
-}
-
-/* ---- 弹窗（添加模型 / 配置）---- */
-.chip.add-model{ padding:5px 8px; }
-.modal{ position:fixed; inset:0; z-index:500; display:flex; align-items:center; justify-content:center; }
-.modal[hidden]{ display:none; }
-/* 添加模型是从「配置」里二级弹出，需盖在配置之上 */
-#add-model-modal{ z-index:600; }
-#confirm-modal{ z-index:700; }
-.modal-backdrop{ position:absolute; inset:0; background:var(--overlay); }
-.modal-card{
-  position:relative; width:420px; max-width:92vw; max-height:86vh; overflow:hidden;
-  background:var(--panel); border:1px solid var(--line); border-radius:6px;
-  box-shadow:var(--shadow-modal); display:flex; flex-direction:column;
-}
-/* 弹出动画 */
-@keyframes modalBgIn{ from{ opacity:0 } to{ opacity:1 } }
-@keyframes modalCardIn{
-  from{ opacity:0; transform:translateY(10px) scale(.96); }
-  to{ opacity:1; transform:none; }
-}
-.modal:not([hidden]) .modal-backdrop{ animation:modalBgIn .15s ease-out; }
-.modal:not([hidden]) .modal-card{ animation:modalCardIn .18s cubic-bezier(.2,.7,.3,1); }
-
-.modal-head{
-  display:flex; align-items:center; justify-content:space-between;
-  padding:16px 18px; border-bottom:1px solid var(--line-soft);
-}
-.modal-title{ font-size:15px; font-weight:600; color:var(--txt-strong); }
-.modal-x{
-  width:28px; height:28px; border:none; background:transparent; cursor:pointer;
-  color:var(--muted); border-radius:4px; display:flex; align-items:center; justify-content:center;
-}
-.modal-x svg{ width:16px; height:16px; }
-.modal-x:hover{ background:var(--line-soft); }
-.modal-body{ flex:1; min-height:340px; overflow:auto; }
-
-/* 配置弹窗内的骨架控件（未实现逻辑）*/
-.set-body{ min-height:0; padding:18px; display:flex; flex-direction:column; gap:22px; }
-.set-block{ display:flex; flex-direction:column; gap:0; }
-.preset-pop{ min-height:0; padding:18px; display:flex; flex-direction:column; gap:14px; }
-.set-sec-t{ font-size:12px; font-weight:500; color:var(--txt-2); margin-bottom:10px; }
-
-/* 外观：mac 式预览卡片 */
-.appear-cards{ display:grid; grid-template-columns:1fr 1fr; gap:10px; }
-.appear-card{
-  display:flex; flex-direction:column; align-items:center; gap:8px;
-  padding:10px 8px 9px; border:2px solid var(--line); border-radius:4px;
-  background:var(--field-bg); cursor:pointer; font-family:inherit; transition:.15s;
-}
-.appear-card:hover{ border-color:var(--line-strong); background:var(--line-soft); }
-.appear-card.sel{
-  border-color:var(--accent); background:var(--accent-bg);
-  box-shadow:0 0 0 1px color-mix(in srgb, var(--accent) 25%, transparent);
-}
-.appear-preview{
-  width:100%; height:44px; border-radius:4px; border:1px solid var(--line);
-  position:relative; overflow:hidden;
-}
-.appear-preview-light{
-  background:linear-gradient(180deg, var(--sample-light-bg) 0%, var(--sample-light-bg) 42%, var(--sample-light-panel) 42%, var(--sample-light-panel) 100%);
-}
-.appear-preview-light::after{
-  content:''; position:absolute; left:10%; top:52%; width:55%; height:7px;
-  border-radius:4px; background:var(--sample-light-line);
-}
-.appear-preview-dark{
-  background:linear-gradient(180deg, var(--sample-dark-bg) 0%, var(--sample-dark-bg) 42%, var(--sample-dark-panel) 42%, var(--sample-dark-panel) 100%);
-  border-color:var(--sample-dark-line);
-}
-.appear-preview-dark::after{
-  content:''; position:absolute; left:10%; top:52%; width:55%; height:7px;
-  border-radius:4px; background:var(--sample-dark-line);
-}
-.appear-name{ font-size:12px; font-weight:500; color:var(--txt-2); font-family:var(--font-sans); }
-.appear-card.sel .appear-name{ color:var(--accent); }
-
-/* 素色：mac/iOS 设置行 + Toggle Switch */
-.set-toggle-row{
-  display:flex; align-items:center; justify-content:space-between; gap:12px;
-  margin-top:10px; padding:10px 12px;
-  border:1px solid var(--line); border-radius:4px; background:var(--field-bg);
-}
-.set-toggle-row[hidden]{ display:none; }
-.set-toggle-label{ font-size:13px; font-weight:500; color:var(--txt-2); font-family:var(--font-sans); }
-.set-switch{
-  position:relative; flex:0 0 auto; width:44px; height:26px;
-  border:none; border-radius:999px; background:var(--switch-off);
-  cursor:pointer; transition:background .2s; padding:0;
-}
-.set-switch[aria-checked="true"]{ background:var(--accent); }
-.set-switch-knob{
-  position:absolute; top:2px; left:2px; width:22px; height:22px;
-  border-radius:50%; background:var(--card);
-  box-shadow:0 1px 3px var(--hover-dim); transition:transform .2s;
-}
-.set-switch[aria-checked="true"] .set-switch-knob{ transform:translateX(18px); }
-.set-switch:focus-visible{ outline:2px solid var(--accent); outline-offset:2px; }
-
-.lang-list{ margin-bottom:0; }
-
-.chat-font-panel{
-  display:grid; grid-template-columns:1fr auto; grid-template-rows:auto auto;
-  column-gap:14px; row-gap:6px; align-items:center;
-  padding:12px 14px; border:1px solid var(--line); border-radius:4px;
-  background:var(--field-bg);
-}
-.chat-font-stepper{ grid-column:1; grid-row:1; cursor:pointer; touch-action:none; border-radius:4px; }
-.chat-font-value{
-  grid-column:2; grid-row:1 / 3; align-self:center;
-  font-size:13px; font-weight:500; color:var(--txt-strong);
-  font-variant-numeric:var(--font-num-variant); text-align:right; line-height:1;
-  padding-left:14px; border-left:1px solid var(--line); min-width:42px;
-}
-.chat-font-scale{ grid-column:1; grid-row:2; }
-.chat-font-stepper:focus{ outline:none; }
-.chat-font-stepper:focus-visible{
-  outline:2px solid var(--accent); outline-offset:2px;
-}
-.chat-font-segments{
-  display:grid; grid-template-columns:repeat(11, 1fr); gap:3px;
-}
-.chat-font-seg{
-  height:7px; border:none; padding:0; margin:0; border-radius:2px;
-  background:var(--line); cursor:pointer;
-  transition:background .12s;
-}
-.chat-font-seg.on{ background:color-mix(in srgb, var(--accent) 55%, var(--line)); }
-.chat-font-seg.cur{ background:var(--accent); }
-.chat-font-seg:hover{ background:color-mix(in srgb, var(--accent) 35%, var(--line)); }
-.chat-font-seg.on:hover{ background:color-mix(in srgb, var(--accent) 55%, var(--line)); }
-.chat-font-seg.cur:hover{ background:var(--accent); }
-.chat-font-scale{
-  display:grid; grid-template-columns:repeat(11, 1fr); gap:3px;
-  font-size:11px; line-height:1; color:var(--muted);
-  font-family:var(--font-num); font-variant-numeric:var(--font-num-variant);
-}
-.chat-font-scale-min{ grid-column:1; justify-self:start; }
-.chat-font-scale-max{ grid-column:11; justify-self:end; }
-
-/* 颜色色盘已删除(只保留灰色亮色主题) */
-.model-list{ display:flex; flex-direction:column; gap:4px; margin-bottom:10px; max-height:340px; overflow:auto; }
-.model-row{
-  display:flex; align-items:center; gap:10px; padding:8px 10px;
-  border:1px solid var(--line); border-radius:4px; background:var(--field-bg);
-  cursor:pointer; font-size:13px; color:var(--txt-2); transition:.12s;
-}
-.model-row:hover{ background:var(--line-soft); border-color:var(--line-strong); }
-/* 选中态：文字用强调色 --txt-strong（而非偏灰的 --accent），保证选中后只会更清晰、不会变淡 */
-.model-row.sel{ background:var(--accent-bg); border-color:var(--accent); color:var(--txt-strong); }
-.model-row input{ accent-color:var(--accent); flex:0 0 auto; pointer-events:none; }
-.flag{ width:20px; height:14px; flex:0 0 auto; border-radius:2px; box-shadow:0 0 0 1px var(--line); display:inline-block; }
-.model-row-name{ flex:1; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-.model-row-actions{
-  display:flex; gap:2px; flex:0 0 auto; opacity:0; transition:opacity .12s;
-}
-.model-row:hover .model-row-actions,
-.model-row.sel .model-row-actions{ opacity:1; }
-.model-act{
-  width:28px; height:28px; border:none; background:transparent; cursor:pointer;
-  color:var(--muted); border-radius:4px; display:flex; align-items:center; justify-content:center;
-  padding:0; flex:0 0 auto;
-}
-.model-act:hover{ background:var(--hover-dim); color:var(--txt-2); }
-.model-act-del:hover{ color:var(--danger-text); }
-.model-act svg{ width:14px; height:14px; pointer-events:none; }
-.set-empty{ font-size:12px; color:var(--muted); padding:6px 0; }
-/* 聚合渠道分组：与独立模型同款行样式，仅多一个折叠箭头，且紧贴下方独立模型 */
-.model-group{ display:flex; flex-direction:column; gap:4px; }
-.model-mixin-caret{ display:flex; align-items:center; justify-content:center; flex:0 0 auto; height:28px; color:var(--muted); cursor:pointer; }
-/* 渠道组是中文标签而非代码标识符，用界面 sans 字体，避免落到等宽字体的中文回退 */
-.model-row--mixin .model-row-name{ font-family:var(--font-sans); }
-.model-mixin-caret svg{ width:13px; height:13px; pointer-events:none; }
-.model-mixin-body{ display:flex; flex-direction:column; gap:3px; margin:2px 0 2px 14px; padding-left:10px; border-left:1px dashed var(--line-strong); }
-.model-mixin-empty{ font-size:12px; color:var(--muted); padding:4px 2px; }
-.model-member{ display:flex; align-items:center; gap:8px; padding:5px 8px; border-radius:4px; font-size:12px; color:var(--txt-2); background:var(--field-bg); border:1px solid var(--line); }
-.model-member:hover{ background:var(--line-soft); }
-.model-member.dragging{ opacity:.78; box-shadow:0 3px 12px rgba(0,0,0,.12); }
-.model-member-drag{
-  width:16px; height:20px; flex:0 0 auto; border:none; background:transparent; color:var(--muted);
-  border-radius:4px; display:flex; align-items:center; justify-content:center; padding:0;
-  cursor:grab; touch-action:none; user-select:none;
-}
-.model-member-drag:active{ cursor:grabbing; }
-.grip-dot{
-  width:2px; height:2px; border-radius:50%; background:currentColor;
-  box-shadow:0 -4px 0 currentColor, 0 4px 0 currentColor, 5px -4px 0 currentColor, 5px 0 0 currentColor, 5px 4px 0 currentColor;
-  transform:translateX(-2.5px); opacity:.68;
-}
-.model-member:hover .model-member-drag{ color:var(--txt-2); background:var(--hover-dim); }
-.mixin-dragging{ cursor:grabbing; }
-.model-member-name{ flex:1; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-.model-member .model-act{ width:22px; height:22px; opacity:.6; }
-.model-member:hover .model-act{ opacity:1; }
-.model-act-addmix:hover{ color:var(--accent); }
-/* 已在渠道组：➕ 仍是「加入」按钮，但给个淡淡的 accent 提示，点击只弹「已在渠道组中」 */
-.model-act-addmix.is-in{ color:var(--accent); opacity:.5; }
-.model-act-addmix.is-in:hover{ opacity:.8; }
-/* 轻提示 toast（屏幕顶部）*/
-.ga-toast{
-  position:fixed; left:50%; top:72px; transform:translateX(-50%) translateY(-8px);
-  background:var(--card); color:var(--txt); border:1px solid var(--line-strong);
-  border-radius:6px; padding:10px 18px; font-size:13px; font-family:var(--font-sans);
-  box-shadow:0 8px 28px rgba(0,0,0,.24); opacity:0; pointer-events:none;
-  transition:opacity .18s, transform .18s; z-index:9999;
-}
-.ga-toast.show{ opacity:1; transform:translateX(-50%) translateY(0); }
-.ga-tooltip{
-  position:fixed; z-index:10000; max-width:min(320px, calc(100vw - 16px));
-  padding:6px 8px; border:1px solid var(--tooltip-border); border-radius:4px;
-  background:var(--tooltip-bg);
-  color:var(--tooltip-fg); font:12px/1.35 var(--font-sans);
-  box-shadow:0 8px 20px #00000026;
-  pointer-events:none; opacity:0; transform:translateY(2px);
-  transition:opacity .12s, transform .12s;
-  white-space:normal; overflow-wrap:anywhere;
-}
-.ga-tooltip.show{ opacity:1; transform:translateY(0); }
-.set-btn{
-  width:100%; display:flex; align-items:center; gap:8px;
-  border:1px solid var(--line); background:var(--card); color:var(--txt-2);
-  border-radius:4px; padding:10px 12px; font-size:13px; font-weight:500;
-  font-family:inherit; cursor:pointer; transition:.12s;
-}
-.set-btn svg{ width:15px; height:15px; flex:0 0 auto; color:var(--accent); }
-.set-btn:hover{ background:var(--line-soft); border-color:var(--line-strong); }
-.set-btn.primary{ background:var(--confirm-primary-bg); color:var(--confirm-primary-fg); border-color:var(--confirm-primary-bg); }
-.set-btn.primary:hover{ filter:brightness(1.05); }
-.set-btn.danger{ background:var(--danger-bg); color:var(--danger-text); border-color:var(--danger-ring); }
-.set-btn.danger:hover{ background:var(--danger-bg); border-color:var(--danger-text); }
-.set-btn.ghost{ background:transparent; }
-.set-btn-follow{ margin-top:8px; }
-.model-form-body{ min-height:0; }
-.model-form{ padding:18px; display:flex; flex-direction:column; gap:12px; }
-.model-form label{ display:flex; flex-direction:column; gap:5px; font-size:12px; font-weight:500; color:var(--txt-2); }
-.field-label{ display:inline-flex; align-items:center; gap:2px; font-family:var(--font-sans); }
-.field-req{ color:var(--danger-text); font-weight:500; line-height:1; }
-.model-form input{
-  border:1px solid var(--line); border-radius:4px; padding:8px 10px;
-  font-size:13px; font-family:inherit; background:var(--field-bg); color:var(--txt);
-}
-.model-form input:focus{ outline:none; border-color:var(--accent); }
-.model-form input::placeholder{ color:var(--placeholder); opacity:1; }
-
-/* 协议选择:分段控件(替代 native dropdown,样式可控)*/
-.model-form-field{ display:flex; flex-direction:column; gap:5px; font-size:12px; font-weight:500; color:var(--txt-2); }
-.seg-group{
-  display:flex; gap:4px; padding:3px;
-  border:1px solid var(--line); border-radius:4px; background:var(--field-bg);
-}
-.seg-opt{
-  flex:1; display:flex; align-items:center; justify-content:center;
-  padding:7px 10px; border-radius:4px; cursor:pointer;
-  font-size:12px; font-weight:500; color:var(--txt-2); font-family:var(--font-sans);
-  transition:background .12s, color .12s; user-select:none;
-}
-.seg-opt input{ position:absolute; opacity:0; pointer-events:none; }
-.seg-opt:hover{ background:var(--line-soft); color:var(--txt); }
-.seg-opt:has(input:checked){ background:var(--accent); color:var(--on-accent); }
-.seg-opt:has(input:checked):hover{ background:var(--accent); color:var(--on-accent); }
-.model-form .field-hint{ font-size:11px; font-weight:400; color:var(--muted); line-height:1.35; margin-top:2px; }
-#add-model-form .model-form-row{
-  display:grid; grid-template-columns:repeat(3,minmax(0,1fr)); gap:8px; width:100%;
-}
-#add-model-form .model-form-mini{
-  gap:4px; font-size:11px; font-weight:500; font-family:var(--font-sans);
-}
-#add-model-form .model-form-mini input[type="number"]{
-  padding:5px 6px; font-size:12px; line-height:1; height:30px;
-  border:1px solid var(--line); border-radius:4px;
-  background:var(--field-bg); color:var(--txt); font-family:inherit;
-}
-#add-model-form .model-form-mini input[type="number"]:focus{
-  outline:none; border-color:var(--accent);
-}
-.model-form-actions{ display:flex; gap:8px; margin-top:4px; }
-.model-form-actions .set-btn{ flex:1; justify-content:center; }
-.model-form-err{ font-size:12px; color:var(--danger-text); }
-
-.body{
-  --shell-pad:14px;
-  --shell-head-h:28px;
-  --shell-gap:10px;
-  --new-conv-h:40px;
-  --conv-list-pad-top:0;
-  --nav-align-pad:var(--shell-gap);
-  --chat-stack-gap:10px;
-  flex:1;
-  display:grid;
-  grid-template-columns:auto 0 minmax(0, 1fr) 0 auto;
-  grid-template-rows:minmax(0, 1fr);
-  min-height:0;
-  background:var(--bg);
-  padding:0;
-  position:relative;
-}
-.body > .sidebar{ grid-column:1; grid-row:1; min-height:0; }
-.body > .sb-resize{ grid-column:2; grid-row:1; }
-.body > .main{ grid-column:3; grid-row:1; min-width:0; min-height:0; }
-.body > .rp-resize{ grid-column:4; grid-row:1; }
-.body > .rightpanel{ grid-column:5; grid-row:1; min-height:0; }
-
-/* ============ ① 侧边栏（立体卡片 · 美术重点）============ */
-.sidebar{
-  width:232px; background:var(--panel);
-  border-right:1px solid var(--divider); border-radius:0; box-shadow:none;
-  overflow:hidden; display:flex; flex-direction:column;
-  padding:var(--shell-pad) 12px 12px;
-  box-sizing:border-box;
-  transition:width .2s, padding .2s, opacity .15s;
-}
-.brand{
-  display:flex; align-items:center; gap:0;
-  flex:0 0 var(--shell-head-h);
-  height:var(--shell-head-h);
-  max-height:var(--shell-head-h);
-  padding:0 6px;
-  box-sizing:border-box;
-  overflow:hidden;
-}
-.brand-text{ display:flex; flex-direction:column; min-width:0; justify-content:center; }
-.brand-name{
-  font-family:var(--font-brand);
-  font-weight:400;
-  font-size:17px;
-  line-height:1;
-  white-space:nowrap;
-}
-.brand-sub{ display:none; }
-
-.ga-num{
-  font-family:var(--font-num);
-  font-variant-numeric:var(--font-num-variant);
-}
-
-.nav{
-  display:flex; flex-direction:column; gap:2px; flex:1; min-height:0;
-  overflow:auto;
-  padding-top:var(--nav-align-pad);
-  box-sizing:border-box;
-}
-.nav-item{
-  display:flex; align-items:center; gap:8px; padding:0 8px;
-  height:28px; border-radius:var(--radius-sm); color:var(--txt-2); cursor:pointer;
-  font-size:13px; user-select:none; font-family:var(--font-sans);
-}
-.ic{ width:16px; height:16px; flex:0 0 auto; }
-.nav-item .ic{ opacity:.85; }
-.fr-l{ display:flex; align-items:center; gap:8px; }
-.nav-item:hover{ background:var(--line-soft); }
-/* 选中态保留"加粗"观感,但用 text-shadow 模拟而非 font-weight,
-   避免真正改变字重导致字形占位变宽、引起布局抖动 */
-.nav-item.active{ background:var(--accent-bg); color:var(--txt-strong); text-shadow:-.3px 0 currentColor, .3px 0 currentColor, 0 0 .5px currentColor; }
-.nav-item.active .ic{ opacity:1; }
-.beta{
-  margin-left:auto; font-size:9px; font-weight:500; color:var(--accent);
-  background:var(--accent-soft); padding:1px 6px; border-radius:10px;
-}
-.nav-item.active .beta{ background:var(--card); }
-
-/* margin-top:6px 跟 .provider-quickstart 内部的 gap:6px 对齐,
-   保证「通义千问 → 配置」和「pq-head → DeepSeek」间距一致 */
-.sidebar-foot{ border-top:none; padding-top:0; margin-top:6px; }
-.foot-ver{
-  font-size:10px; color:var(--muted2); padding:10px 10px 2px;
-  font-family:var(--font-num); font-variant-numeric:var(--font-num-variant);
-}
-.foot-row{
-  display:flex; justify-content:space-between; align-items:center;
-  padding:14px 10px; border-radius:var(--radius-sm); color:var(--txt-2); cursor:pointer;
-  font-family:var(--font-sans);
-}
-.foot-row:hover{ background:var(--line-soft); }
-.chev{ width:14px; height:14px; color:var(--muted2); flex:0 0 auto; }
-
-/* ── 侧边栏「快速接入官方模型」:头部与「配置」按钮同款 foot-row 风格,
-   左侧 lightning 图标 + 标题,右侧 caretRight 跟"配置"完全一致,
-   展开时旋转 90° 朝下,折叠时朝右(== "配置"的 >)。默认展开,可折叠。── */
-.provider-quickstart{
-  flex:0 0 auto; margin-top:8px;
-  display:flex; flex-direction:column; gap:6px;
-}
-.pq-head{
-  display:flex; justify-content:space-between; align-items:center;
-  padding:14px 10px; border-radius:var(--radius-sm); color:var(--txt-2); cursor:pointer;
-  font-family:var(--font-sans); user-select:none;
-}
-.pq-head:hover{ background:var(--line-soft); }
-.pq-collapse{ transition:transform .18s; transform-origin:center; }
-.pq-head:hover .pq-collapse{ color:var(--txt-2); }
-.pq-body{ display:flex; flex-direction:column; gap:6px; padding:0 10px; }
-/* 默认展开:箭头朝下;折叠:箭头朝右(== 「配置」的 >) */
-.provider-quickstart:not(.collapsed) .pq-collapse{ transform:rotate(90deg); }
-.provider-quickstart.collapsed .pq-collapse{ transform:rotate(0deg); }
-.provider-quickstart.collapsed{ gap:0; }
-.provider-quickstart.collapsed .pq-body{ display:none; }
-.pq-btn{
-  display:flex; align-items:center; gap:8px; width:100%;
-  padding:7px 8px; border:1px solid var(--line-base); border-radius:var(--radius-sm);
-  background:var(--field-bg); cursor:pointer; text-align:left;
-  transition:border-color .15s, background .15s;
-}
-.pq-btn:hover{ background:var(--line-soft); border-color:var(--line-base); }
-.pq-logo{
-  flex:0 0 auto; width:26px; height:26px; border-radius:7px;
-  display:flex; align-items:center; justify-content:center;
-}
-.pq-logo svg{ width:16px; height:16px; }
-.pq-btn-text{ flex:1; min-width:0; display:flex; flex-direction:column; gap:1px; }
-.pq-btn-name{ font-size:12px; font-weight:500; color:var(--txt); line-height:1.35; }
-.pq-btn-desc{ font-size:10px; color:var(--muted); line-height:1; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
-.pq-arrow{ flex:0 0 auto; width:13px; height:13px; color:var(--muted2); transition:transform .15s, color .15s; }
-.pq-btn:hover .pq-arrow{ color:var(--txt-2); transform:none; }
-
-/* ── 添加模型弹窗内的接入指引横幅 ── */
-.model-guide{
-  margin:18px 18px 0; padding:12px 14px;
-  border:1px solid var(--line-base); border-radius:var(--radius-sm);
-  background:var(--field-bg);
-}
-.model-guide-head{ display:flex; align-items:center; gap:8px; margin-bottom:8px; }
-.model-guide-logo{
-  flex:0 0 auto; width:24px; height:24px; border-radius:6px;
-  display:flex; align-items:center; justify-content:center;
-}
-.model-guide-logo svg{ width:15px; height:15px; }
-.model-guide-name{ font-size:13px; font-weight:600; color:var(--txt-strong); }
-.model-guide-steps{ margin:0 0 8px; padding-left:18px; display:flex; flex-direction:column; gap:3px; }
-.model-guide-steps li{ font-size:12px; color:var(--txt-2); line-height:1.55; }
-.model-guide-link-row{ display:flex; align-items:center; gap:6px; }
-.model-guide-link{
-  flex:1; min-width:0; font-size:12px; font-weight:500; color:var(--accent);
-  text-decoration:none; overflow:hidden; text-overflow:ellipsis; white-space:nowrap;
-}
-.model-guide-link:hover{ text-decoration:underline; }
-.model-guide-copy{
-  flex:0 0 auto; width:26px; height:26px; border:1px solid var(--line);
-  border-radius:6px; background:var(--panel); color:var(--muted);
-  display:flex; align-items:center; justify-content:center; cursor:pointer;
-}
-.model-guide-copy:hover{ color:var(--accent); border-color:var(--accent); }
-.model-guide-copy svg{ width:14px; height:14px; display:block; }
-.model-guide-tip{ margin:8px 0 0; font-size:11px; color:var(--muted); line-height:1.35; }
-.confirm-card{ width:360px; }
-.confirm-body{ min-height:0; padding:18px; }
-.confirm-message{ white-space:pre-wrap; color:var(--txt-2); font-size:13px; line-height:1.55; }
-.confirm-actions{ display:flex; gap:10px; margin-top:18px; }
-.confirm-actions .set-btn{ flex:1; justify-content:center; }
-
-/* ============ 中间主区 ============ */
-.main{
-  display:flex; flex-direction:column; min-width:0; min-height:0;
-  background:var(--panel);
-  border:0;
-  border-radius:0; box-shadow:none; overflow:hidden;
-  padding-top:var(--shell-pad);
-  box-sizing:border-box;
-}
-
-.topbar{
-  height:46px; flex:0 0 46px; display:flex; align-items:center;
-  justify-content:space-between; padding:0 16px; border-bottom:none;
-  background:var(--panel);
-}
-/* 各页面自带的顶栏(融入页面、随页面切换),沿用旧 .topbar 视觉,但归属各 page */
-.page > .page-top{
-  height:var(--shell-head-h); max-height:var(--shell-head-h);
-  flex:0 0 var(--shell-head-h);
-  display:grid; grid-template-columns:28px 1fr 28px; align-items:center;
-  padding:0 4px; column-gap:8px;
-  background:var(--panel);
-  box-sizing:border-box;
-}
-.page > .page-top .run-state{
-  grid-column:2; justify-self:center;
-  height:var(--shell-head-h); max-height:var(--shell-head-h);
-}
-.page > .page-top .pt-sb-toggle{ grid-column:1; justify-self:start; }
-.page > .page-top .pt-rp-toggle{ grid-column:3; justify-self:end; }
-.page > .page-top .pt-spacer{ grid-column:2; }
-/* 顶栏左右两侧的纯图标按钮(无边框、无背景):
-   左 .pt-sb-toggle = 开关左栏,右 .pt-rp-toggle = 开关右栏。
-   收起时 svg 旋转 180°,跟之前那两个箭头 toggle 的视觉行为一致。 */
-.pt-icon{
-  width:28px; height:28px; display:inline-flex; align-items:center; justify-content:center;
-  background:transparent; border:none; padding:0; flex:0 0 auto;
-  color:var(--txt-2); opacity:.7; cursor:pointer;
-  transition:opacity .15s, color .15s;
-}
-.pt-icon:hover{ opacity:1; color:var(--txt); }
-.pt-icon svg{ width:16px; height:16px; transition:transform .2s; }
-.body.sb-collapsed .pt-sb-toggle svg,
-.body.rp-collapsed .pt-rp-toggle svg{ transform:rotate(180deg); }
-.pt-spacer{ flex:1 1 auto; }
-.tb-left{ display:flex; align-items:center; gap:14px; font-size:12px; }
-.pill{
-  border:1px solid var(--line); background:var(--card); border-radius:20px;
-  padding:5px 12px; font-size:12px; color:var(--txt-2); cursor:pointer;
-}
-.pill:hover{ border-color:var(--line-strong); }
-/* 纯状态展示组件（不可点）：就绪/运行中=绿，未连接=红，连接中=灰 */
-.run-state{
-  display:flex; align-items:center; gap:9px; height:var(--shell-head-h); color:var(--ok);
-  font-weight:500; font-size:12px; border:none; background:transparent;
-  padding:0; font-family:inherit; cursor:default; line-height:1;
-}
-.run-state .dot{
-  width:9px; height:9px; border-radius:50%; background:var(--ok); flex:0 0 auto;
-}
-.run-state.connecting{ color:var(--muted); }
-.run-state.connecting .dot{ background:var(--muted2); }
-.run-state.offline{ color:var(--danger); }
-.run-state.offline .dot{ background:var(--danger-dot); }
-.run-state.busy{ color:var(--ok); }
-
-/* 呼吸灯：内圈常亮(容器 60%) + 中圈扩散（无转圈） */
-.ga-status-breathe,
-.run-state.busy .dot{
-  --breathe-color:var(--ok);
-  --breathe-box:12px;
-  --breathe-core:calc(var(--breathe-box) * 0.6);
-  position:relative;
-  display:inline-block;
-  width:var(--breathe-box);
-  height:var(--breathe-box);
-  flex:0 0 auto;
-  background:transparent !important;
-  border:none;
-  vertical-align:middle;
-}
-.ga-status-breathe--sm{ --breathe-box:10px; }
-.run-state.busy .dot{
-  width:var(--breathe-box);
-  height:var(--breathe-box);
-}
-.ga-status-breathe__core,
-.run-state.busy .dot::before{
-  content:'';
-  position:absolute;
-  inset:0;
-  margin:auto;
-  width:var(--breathe-core); height:var(--breathe-core);
-  transform:none;
-  border-radius:50%;
-  background:var(--breathe-color);
-  z-index:2;
-}
-.ga-status-breathe__ring,
-.run-state.busy .dot::after{
-  content:'';
-  position:absolute;
-  inset:0;
-  margin:auto;
-  width:var(--breathe-core); height:var(--breathe-core);
-  transform:none;
-  transform-origin:center;
-  border-radius:50%;
-  border:1px solid color-mix(in srgb, var(--breathe-color) 52%, transparent);
-  z-index:1;
-  pointer-events:none;
-  animation:ga-status-breathe 1.75s ease-out infinite;
-}
-@keyframes ga-status-breathe{
-  0%{ transform:scale(1); opacity:.55; }
-  100%{ transform:scale(2.35); opacity:0; }
-}
-.link{ color:var(--accent); cursor:pointer; }
-.muted{ color:var(--muted); }
-.ic-btn{
-  width:30px; height:30px; border-radius:4px; border:1px solid transparent;
-  background:transparent; cursor:pointer; color:var(--icon);
-  display:flex; align-items:center; justify-content:center;
-}
-.ic-btn svg{ width:16px; height:16px; }
-.ic-btn:hover{ background:var(--line-soft); }
-
-.chat-tools{
-  display:flex; align-items:center; gap:8px; padding:10px 16px;
-  border-bottom:none;
-}
-.chat-tools .spacer{ flex:1; }
-
-/* ---- 多页面容器：一项导航一页 ---- */
-#pages{ flex:1; min-height:0; display:flex; flex-direction:column; }
-.page{ display:none; flex:1; min-height:0; flex-direction:column; min-width:0; }
-.page.active{ display:flex; }
-.page-pad{ flex:1; overflow:auto; padding:26px 30px; }
-.page-title{ font-size:18px; font-weight:600; color:var(--txt-strong); font-family:var(--font-sans); }
-.page-sub{ font-size:12px; color:var(--muted); margin-top:5px; margin-bottom:16px; }
-
-/* 聊天 / Conductor 共用对话布局（page--chat-ui） */
-.page.page--chat-ui{ min-height:0; width:100%; }
-.page.page--chat-ui > .page-top{ flex:0 0 var(--shell-head-h); }
-.page.page--chat-ui > .chat-shell{
-  flex:1; min-height:0; width:100%;
-  margin-top:var(--shell-gap);
-  padding:0 16px 16px;
-  display:flex; flex-direction:column;
-  box-sizing:border-box;
-}
-.page.page--chat-ui > .chat-shell > .chat-panel{
-  flex:1; min-height:0; width:100%;
-  display:flex; flex-direction:column;
-  gap:var(--chat-stack-gap);
-  box-sizing:border-box;
-}
-.page.page--chat-ui .msg-area{
-  position:relative;
-  flex:1; min-height:0;
-  width:100%;
-  overflow:auto;
-  display:flex;
-  flex-direction:column;
-  align-items:stretch;
-  justify-content:center;
-  gap:14px;
-  padding:16px 0;
-  margin:0;
-  border:none;
-  border-radius:0;
-  background:transparent;
-  box-sizing:border-box;
-}
-.page.page--chat-ui .composer-anchor,
-.page.page--chat-ui .composer,
-.page.page--chat-ui .composer-slot,
-.page.page--chat-ui .composer-inset{
-  width:100%;
-  min-width:0;
-  box-sizing:border-box;
-}
-.page.page--chat-ui .composer-anchor{
-  flex:0 0 auto;
-  padding:0;
-  margin:0;
-  background:transparent;
-}
-.page.page--chat-ui .composer{
-  padding:10px 0 0;
-}
-.page.page--chat-ui .composer-inset{
-  border:1px solid var(--line);
-  border-radius:var(--radius);
-  background:var(--card);
-}
-.page.page--chat-ui .msgs{
-  width:100%;
-  max-width:var(--chat-col-w);
-  margin:0 auto;
-}
-.page.page--chat-ui .chat-start{
-  width:100%;
-  max-width:var(--chat-col-w);
-  margin:0 auto;
-}
-
-/* 聊天页（其它页面仍用下方默认） */
-.msg-area{
-  position:relative;
-  flex:1; overflow:auto; display:flex; flex-direction:column;
-  align-items:center; justify-content:center; gap:14px; padding:24px;
-  border:1px solid var(--line);
-}
-.session-loading{
-  position:absolute; inset:0; z-index:25;
-  display:flex; flex-direction:column; align-items:center; justify-content:center; gap:10px;
-  background:color-mix(in srgb, var(--panel) 88%, transparent);
-  font-size:13px; font-weight:500; color:var(--txt-2);
-  pointer-events:none;
-}
-.session-loading[hidden]{ display:none !important; }
-.msg-area.is-session-loading .chat-start,
-.msg-area.is-session-loading .msgs{ visibility:hidden; }
-.msg-area.has-msgs .msg-loading{ margin-top:auto; }
-.msg-loading{
-  position:sticky; bottom:16px; align-self:center; z-index:20;
-  display:flex; align-items:center; gap:10px;
-  margin-top:12px; padding:10px 16px;
-  border-radius:999px; background:var(--card);
-  border:1px solid color-mix(in srgb, var(--accent) 35%, var(--line));
-  box-shadow:var(--shadow-pop);
-  font-size:13px; font-weight:500; color:var(--txt);
-  pointer-events:none;
-}
-.msg-loading[hidden]{ display:none !important; }
-.msg-area.is-loading .msg-loading{ animation:msg-loading-in .2s ease-out; }
-@keyframes msg-loading-in{
-  from{ opacity:0; transform:translateY(8px); }
-  to{ opacity:1; transform:translateY(0); }
-}
-.ga-spin{
-  width:20px; height:20px; flex:0 0 auto;
-  border:2.5px solid var(--line); border-top-color:var(--accent);
-  border-radius:50%; animation:ga-spin .65s linear infinite;
-}
-@keyframes ga-spin{ to{ transform:rotate(360deg); } }
-/* 有消息时必须顶对齐：父级 .page--chat-ui .msg-area 的 center 优先级更高，否则会滚不到顶部 */
-.page.page--chat-ui .msg-area.has-msgs{ align-items:stretch; justify-content:flex-start; }
-.conv-empty{ color:var(--muted2); font-size:12px; }
-
-/* 消息流 */
-.msgs{ width:100%; max-width:var(--chat-col-w); margin:0 auto; display:flex; flex-direction:column; gap:14px; }
-.msg{ display:flex; flex-wrap:wrap; }
-.msg.user{ justify-content:flex-end; }
-.msg.assistant,.msg.error{ justify-content:flex-start; }
-.msg.system{ justify-content:center; }
-.bubble{
-  max-width:80%; padding:10px 14px; border-radius:6px; font-size:var(--chat-font);
-  line-height:1.55; white-space:pre-wrap; word-break:break-word;
-  background:var(--accent-bg); color:var(--txt-strong);
-}
-.bubble.md{ white-space:normal; background:transparent; color:var(--txt); max-width:100%; width:100%; border-radius:4px; }
-.bubble.err{ background:var(--danger-bg); color:var(--danger-text); white-space:normal; }
-.bubble.sys{ background:transparent; color:var(--muted); font-size:12px; padding:4px 8px; }
-.bubble.md p{ margin:0 0 8px; } .bubble.md p:last-child{ margin:0; }
-/* ---- TUI 风格代码块 ---- */
-.code-block{ border:1px solid var(--line); border-radius:var(--radius-sm); overflow:hidden; margin:8px 0; }
-.code-block-head{
-  display:flex; align-items:center; justify-content:space-between;
-  padding:4px 12px; background:var(--field-bg); border-bottom:1px solid var(--line);
-  font-family:var(--font-mono); font-size:.75em; color:var(--muted);
-}
-.code-block-lang{ text-transform:uppercase; letter-spacing:.5px; font-weight:500; }
-.code-block-copy{
-  background:none; border:none; color:var(--muted); cursor:pointer;
-  font-size:1.1em; padding:2px 4px; border-radius:3px; line-height:1;
-  transition:color .15s, background .15s;
-}
-.code-block-copy:hover{ color:var(--txt); background:var(--hover-dim); }
-.code-block pre{ margin:0; border:none; border-radius:0; }
-.bubble.md pre{ background:var(--field-bg); border:1px solid var(--line); border-radius:4px; padding:10px 12px; overflow:auto; font-size:.86em; font-family:var(--font-mono); }
-.bubble.md pre code{ font-family:var(--font-mono); }
-.bubble.md .code-block pre{ background:var(--field-bg); border:none; border-radius:0; padding:12px 14px; overflow:auto; font-size:.86em; margin:0; }
-.bubble.md .code-block{ border:1px solid var(--line); }
-.bubble.md :not(pre) > code{ background:var(--field-bg); border-radius:4px; padding:1px 5px; font-size:.86em; font-family:var(--font-mono); }
-.bubble.md a{ color:var(--accent); }
-.bubble.md ul,.bubble.md ol{ margin:0 0 8px; padding-left:20px; }
-.bubble.md blockquote{
-  margin:0 0 8px; padding:0 0 0 12px;
-  border-left:3px solid var(--line-strong); color:var(--txt-2);
-}
-.bubble.md h1,.bubble.md h2,.bubble.md h3,.bubble.md h4,.bubble.md h5,.bubble.md h6{
-  color:var(--txt-strong); margin:0 0 8px; line-height:1.35; font-weight:600;
-}
-.bubble.md h1{ font-size:1.3em; } .bubble.md h2{ font-size:1.15em; } .bubble.md h3{ font-size:1.05em; }
-.bubble.md strong,.bubble.md b{ color:var(--txt-strong); font-weight:600; }
-.bubble.md hr{ border:none; border-top:1px solid var(--line-strong); margin:10px 0; }
-.bubble.md table{ width:100%; border-collapse:collapse; margin:0 0 8px; font-size:.92em; }
-.bubble.md th,.bubble.md td{ border:1px solid var(--line); padding:6px 10px; text-align:left; }
-.bubble.md th{ background:var(--line-soft); color:var(--txt-strong); }
-.fold{ margin:6px 0; border:none; border-radius:0; background:transparent; }
-.bubble .fold summary{ cursor:pointer; padding:6px 10px; font-size:.86em; color:var(--muted); user-select:none; list-style:none; display:flex; align-items:center; gap:4px; }
-.bubble .fold summary::-webkit-details-marker{ display:none; }
-.bubble .fold summary::marker{ display:none; content:''; }
-.bubble .fold summary::before{ content:'▶'; font-size:.7em; display:inline-block; transition:transform .2s ease; }
-.fold[open] > summary::before{ transform:rotate(90deg); }
-.bubble .fold summary:hover{ color:var(--txt-2); }
-.bubble .fold pre{ margin:0; padding:10px 12px; border:none; background:transparent; font-size:.86em; overflow:auto; }
-.cursor{ display:inline-block; width:7px; height:14px; background:var(--accent); vertical-align:-2px; margin-left:2px; animation:blink 1s steps(2) infinite; }
-.draft-tw-plain{
-  white-space:pre-wrap; word-break:break-word;
-  font-family:inherit; font-size:inherit; line-height:inherit;
-}
-.draft-tw-plain:empty{ display:none; }
-@keyframes blink{ 50%{ opacity:0; } }
-
-/* 预设功能卡片（现在嵌在聊天空状态）*/
-.chat-start{ width:100%; max-width:560px; }
-html[data-boot-has-sessions] .chat-start{ display:none !important; }
-.feature-head{ text-align:center; margin-bottom:22px; }
-.feature-grid{ display:grid; grid-template-columns:repeat(auto-fill,minmax(150px,1fr)); gap:12px; }
-.fcard{
-  border:1px solid var(--line); border-radius:4px; background:var(--card);
-  padding:16px 14px; cursor:pointer; transition:.15s;
-}
-.fcard:hover{ border-color:var(--accent); box-shadow:var(--shadow); transform:translateY(-1px); }
-.fcard.add{ border-style:dashed; background:var(--accent-soft); }
-.fc-ic{ width:26px; height:26px; color:var(--txt-strong); }
-.fc-t{
-  font-weight:500; font-size:13px; margin-top:10px; font-family:var(--font-sans);
-  white-space:nowrap; overflow:hidden; text-overflow:ellipsis;
-}
-.fc-d{
-  font-size:11px; color:var(--muted); margin-top:3px;
-  display:-webkit-box; -webkit-box-orient:vertical;
-  -webkit-line-clamp:2; line-clamp:2;
-  overflow:hidden; text-overflow:ellipsis; word-break:break-word;
-}
-
-/* 后台服务页 — 下划线 Tab(消息通道 / 状态面板)。margin 与 .tok-tabs 对齐
-   保证两个页面标题与 tab 之间间距一致 */
-.svc-tabs{
-  display:flex; gap:28px; margin:10px 0 0;
-  border-bottom:1px solid var(--line);
-}
-.svc-tab{
-  padding:12px 0 10px; margin-bottom:-1px;
-  font-size:14px; font-weight:500; border:none; background:transparent;
-  color:var(--muted); cursor:pointer;
-  border-bottom:2px solid transparent; transition:color .15s, border-color .15s;
-}
-.svc-tab:hover{ color:var(--txt); }
-.svc-tab.active{ color:var(--txt-strong); border-bottom-color:var(--txt-strong); }
-.svc-panel{ display:none; margin-top:16px; }
-.svc-panel.active{ display:block; }
-.svc-panel .list{ margin-top:0; }
-
-/* 通用列表（消息通道 / 状态面板 / token 明细）*/
-.list{ display:flex; flex-direction:column; gap:6px; margin-top:14px; }
-.list-row{
-  display:flex; align-items:center; gap:12px; padding:11px 14px;
-  border:1px solid var(--line); border-radius:var(--radius-sm); background:var(--card); font-size:13px;
-}
-.list-row.head{ background:var(--line-soft); color:var(--muted); font-size:11px; border:none; }
-.lr-ic{ width:18px; height:18px; color:var(--muted); flex:0 0 auto; }
-.grow{ flex:1; }
-.kv{ color:var(--muted); font-size:12px; min-width:54px; text-align:right; }
-.lr-st{ font-size:11px; padding:2px 8px; border-radius:10px; font-weight:500; }
-.lr-st.on{ color:var(--ok-strong); background:var(--ok-bg); }
-.lr-st.off{ color:var(--muted); background:var(--off-bg); }
-.lr-st.err{ color:var(--danger-text); background:var(--danger-bg); }
-.sw-mini{ width:32px; height:18px; border:none; border-radius:12px; background:var(--switch-off); position:relative; cursor:pointer; }
-.sw-mini i{ position:absolute; top:2px; left:2px; width:14px; height:14px; background:var(--on-accent); border-radius:50%; transition:.15s; }
-.sw-mini.on{ background:var(--accent); }
-.sw-mini.on i{ left:16px; }
-.sw-mini:disabled{ opacity:.45; cursor:not-allowed; }
-.link.sm{ font-size:12px; }
-.link-btn{
-  border:none; background:none; padding:0; font:inherit;
-  color:var(--accent); cursor:pointer;
-}
-.link-btn:disabled{ opacity:.45; cursor:not-allowed; }
-.list-row .link-btn, .list-row .sw-mini{ flex-shrink:0; }
-.list-empty{
-  margin-top:14px; padding:24px; text-align:center;
-  font-size:13px; color:var(--muted);
-}
-.toast-root{
-  position:fixed; left:50%; top:72px; transform:translateX(-50%);
-  z-index:99999; display:flex; flex-direction:column; align-items:center; gap:8px;
-  pointer-events:none; max-width:min(420px,92vw); width:max-content;
-}
-.toast{
-  padding:12px 20px; border-radius:var(--radius-sm);
-  font-size:13px; line-height:1.35;
-  box-shadow:var(--shadow-pop);
-  opacity:0; transform:translateY(-8px); transition:opacity .28s ease, transform .28s ease;
-  pointer-events:auto; text-align:center; min-width:200px;
-}
-.toast.show{ opacity:1; transform:translateY(0); }
-.toast-ok{
-  color:var(--success); background:var(--success-bg); border:1px solid var(--success-ring);
-}
-.toast-err{
-  color:var(--danger-text); background:var(--danger-bg); border:1px solid var(--danger-ring);
-}
-.toast-info{
-  color:var(--muted); background:var(--card); border:1px solid var(--line);
-  box-shadow:var(--shadow); padding:6px 12px; min-width:0; font-size:12px;
-}
-.toast-title{ font-weight:500; display:block; margin-bottom:2px; }
-.toast-detail{ font-size:12px; opacity:.88; display:block; word-break:break-word; }
-.toast-info .toast-title{ font-weight:500; margin-bottom:0; }
-.composer.is-locked{
-  opacity:.55; pointer-events:none; filter:saturate(.75);
-}
-.composer.is-locked .input{
-  background:var(--field-bg); cursor:not-allowed;
-}
-.chan-log-pre{
-  max-height:360px; overflow:auto; margin:0;
-  font-family:var(--font-mono); font-variant-numeric:var(--font-num-variant); font-size:13px; line-height:1.55;
-  color:var(--txt-2); background:var(--field-bg);
-  border:1px solid var(--line); border-radius:var(--radius-sm);
-  padding:14px 16px; white-space:pre-wrap; word-break:break-word;
-}
-.modal-card-wide{ width:min(720px,92vw); }
-.modal-card-inset{ width:min(680px,calc(92vw - 48px)); }
-.modal-body-inset{ padding:0 18px 18px; min-height:0; }
-.chan-config-body{
-  display:flex; flex-direction:column; gap:8px;
-}
-.mykey-editor{
-  flex:1; min-height:420px; width:100%;
-  padding:0; margin:0;
-  font-family:var(--font-mono); font-variant-numeric:var(--font-num-variant); font-size:13px; line-height:1.55;
-  color:var(--txt); background:var(--card);
-  border:none; border-radius:0; resize:vertical; outline:none;
-}
-.mykey-editor:focus{ outline:none; }
-.chan-config-foot{
-  display:flex; justify-content:flex-end;
-}
-.chan-config-save{
-  border:1px solid var(--line); background:var(--card); color:var(--txt-2);
-  border-radius:6px; padding:5px 12px; font-size:12px; font-weight:500;
-  font-family:inherit; cursor:pointer;
-}
-.chan-config-save:hover{ background:var(--hover-2); }
-.chan-config-save:disabled{ opacity:.45; cursor:not-allowed; }
-.chan-meta{ display:flex; flex-direction:column; gap:2px; min-width:0; }
-.chan-meta .chan-name{ font-size:14px; }
-.chan-meta .chan-path{ font-size:11px; color:var(--muted); font-family:var(--font-mono); font-variant-numeric:var(--font-num-variant); }
-
-/* 协作动态卡片 */
-.card-row{ display:grid; grid-template-columns:repeat(auto-fill,minmax(150px,1fr)); gap:12px; margin:14px 0; }
-.card-mini{ border:1px solid var(--line); border-radius:var(--radius-sm); background:var(--card); padding:14px; }
-.card-mini b{ font-size:13px; }
-.cm-st{ font-size:11px; font-weight:500; margin-top:8px; }
-.cm-st.on{ color:var(--ok-strong); } .cm-st.idle{ color:var(--muted); }
-.cm-d{ font-size:11px; color:var(--muted); margin-top:4px; }
-
-/* token 汇总卡 — tab 复用 .svc-tabs/.svc-tab 的下划线样式(原蓝色 pill 弃用) */
-.tok-tabs{
-  display:flex; gap:28px; margin:10px 0 0;
-  border-bottom:1px solid var(--line);
-}
-.tok-tab{
-  padding:12px 0 10px; margin-bottom:-1px;
-  font-size:14px; font-weight:500; border:none; background:transparent;
-  color:var(--muted); cursor:pointer;
-  border-bottom:2px solid transparent; transition:color .15s, border-color .15s;
-}
-.tok-tab:hover{ color:var(--txt); background:transparent; }
-.tok-tab.active{
-  color:var(--txt-strong); border-color:transparent; border-bottom-color:var(--txt-strong);
-  background:transparent;
-}
-.tok-filter{ display:flex; align-items:center; gap:8px; margin:12px 0; flex-wrap:wrap; }
-.tok-filter label{ font-size:12px; color:var(--muted); }
-.tok-date{
-  box-sizing:border-box; height:30px;
-  border:1px solid var(--line); border-radius:6px; padding:0 8px;
-  font-size:12px; background:var(--field-bg); color:var(--txt); cursor:pointer;
-  width:160px;
-}
-.tok-date:focus{ border-color:var(--accent); outline:none; }
-/* Flatpickr 主题覆盖 — 全部使用项目 CSS 变量 */
-.flatpickr-calendar{
-  background:var(--card) !important; border:1px solid var(--line) !important; border-radius:var(--radius) !important;
-  box-shadow:var(--shadow-pop) !important; font-family:inherit !important; font-size:13px !important;
-}
-.flatpickr-months .flatpickr-month,
-.flatpickr-current-month{ color:var(--txt) !important; fill:var(--txt) !important; font-weight:500 !important; }
-.flatpickr-current-month .flatpickr-monthDropdown-months,
-.flatpickr-current-month input.cur-year{ color:var(--txt) !important; background:var(--field-bg) !important; font-weight:500 !important; font-size:13px !important; }
-.flatpickr-weekdays{ background:var(--field-bg) !important; }
-span.flatpickr-weekday{ color:var(--muted) !important; font-size:11px; }
-.flatpickr-day{
-  color:var(--txt) !important; border-radius:6px;
-}
-.flatpickr-day:hover{ background:var(--hover-2) !important; border-color:transparent !important; }
-.flatpickr-day.today{ border-color:var(--accent) !important; }
-.flatpickr-day.selected{ background:var(--accent) !important; color:var(--on-accent) !important; border-color:var(--accent) !important; }
-.flatpickr-day.prevMonthDay,
-.flatpickr-day.nextMonthDay{ color:var(--muted2) !important; }
-.flatpickr-time input,
-.flatpickr-time .flatpickr-am-pm{ color:var(--txt) !important; background:var(--field-bg) !important; }
-.flatpickr-time input:hover,
-.flatpickr-time input:focus{ background:var(--hover-2) !important; }
-.numInputWrapper:hover{ background:var(--hover-2) !important; }
-.flatpickr-months .flatpickr-prev-month,
-.flatpickr-months .flatpickr-next-month{ fill:var(--txt-2) !important; }
-.flatpickr-months .flatpickr-prev-month:hover svg,
-.flatpickr-months .flatpickr-next-month:hover svg{ fill:var(--txt) !important; }
-.tok-reset{
-  box-sizing:border-box; height:30px; display:inline-flex; align-items:center;
-  border:1px solid var(--line); border-radius:4px; padding:0 10px;
-  font-size:12px; background:var(--field-bg); color:var(--muted); cursor:pointer;
-}
-.tok-reset:hover{ background:var(--hover-2); color:var(--txt-2); }
-/* 固定列宽:数字列按 fmtTok 最长输出"123.45M"宽度估算固定 px,
-   第一列(会话名/指挥家累计 等)拿剩余空间,过长用省略号 + title tooltip */
-.tok-table{ width:100%; border-collapse:collapse; margin-top:14px; font-size:13px; table-layout:fixed; }
-.tok-table th{ text-align:left; padding:8px 12px; font-size:11px; color:var(--muted); background:var(--line-soft); font-weight:500; }
-.tok-table th:not(:first-child){ text-align:right; }
-.tok-table td{ padding:9px 12px; border-bottom:1px solid var(--line-soft); }
-.tok-table td:not(:first-child){ text-align:right; color:var(--muted); font-size:12px; font-family:var(--font-num); font-variant-numeric:var(--font-num-variant); }
-.tok-table td:first-child{ font-weight:500; color:var(--txt-strong); }
-/* 第一列自动占剩余宽度,溢出省略 */
-.tok-table th:first-child, .tok-table td:first-child{
-  overflow:hidden; text-overflow:ellipsis; white-space:nowrap;
-}
-/* 数字列固定 80px,缓存率列 85px */
-.tok-table th:nth-child(n+2):nth-child(-n+5),
-.tok-table td:nth-child(n+2):nth-child(-n+5){ width:80px; }
-.tok-table th:nth-child(6),
-.tok-table td:nth-child(6){ width:85px; }
-/* Conductor tab 只有两行汇总: 用自动列宽铺满,数字列均匀分布,不让首列吃掉所有空间 */
-.tok-table--conductor{ table-layout:auto; }
-.tok-table--conductor th:first-child, .tok-table--conductor td:first-child{ overflow:visible; white-space:nowrap; }
-.tok-table--conductor th:nth-child(n+2):nth-child(-n+5),
-.tok-table--conductor td:nth-child(n+2):nth-child(-n+5),
-.tok-table--conductor th:nth-child(6),
-.tok-table--conductor td:nth-child(6){ width:auto; }
-.tok-row-session{ cursor:pointer; }
-.tok-row-session:hover td{ background:var(--hover-dim); }
-.tok-row-session td:first-child::before{ content:'▶'; margin-right:6px; font-size:10px; color:var(--muted2); transition:transform .15s; display:inline-block; }
-.tok-row-session.open td:first-child::before{ transform:rotate(90deg); }
-.tok-row-conductor{ cursor:default; }
-.tok-row-conductor td:first-child::before{ content:''; margin:0; }
-.tok-cond-ico{ width:1em; height:1em; vertical-align:-0.15em; margin-right:5px; }
-.tok-row-conductor:hover td{ background:var(--hover-dim); }
-.tok-detail td{ padding:5px 12px 5px 32px; font-size:11px; color:var(--muted); border-bottom:1px solid var(--line-soft); background:var(--field-bg); }
-.tok-detail td:not(:first-child){ text-align:right; }
-.tok-detail[hidden]{ display:none; }
-.tok-model-tip{
-  color:var(--accent);
-}
-.tok-pager{ display:flex; gap:4px; justify-content:center; margin-top:12px; flex-wrap:wrap; align-items:center; }
-.tok-pager button{
-  min-width:28px; height:28px; border:1px solid var(--line); border-radius:4px;
-  background:var(--card); color:var(--txt-2); font-size:12px; cursor:pointer;
-  display:inline-flex; align-items:center; justify-content:center;
-}
-/* 首尾箭头按钮用 phosphor SVG,跟侧栏 .chev 同款灰色,尺寸略小 */
-.tok-pager-arrow svg{ width:12px; height:12px; color:var(--muted2); }
-.tok-pager-arrow:hover:not(:disabled) svg{ color:var(--txt-2); }
-.tok-pager button:hover:not(:disabled){ background:var(--hover-2); }
-.tok-pager button:disabled{ opacity:.4; cursor:default; }
-.tok-pager button.active{ background:var(--accent); color:var(--on-accent); border-color:var(--accent); }
-.tok-pager-gap{ color:var(--muted); padding:0 4px; font-size:12px; user-select:none; }
-.tok-deleted{ margin-left:6px; font-size:10px; font-weight:400; color:var(--muted2); background:var(--line-soft); border-radius:3px; padding:1px 5px; }
-.stat-row{ display:flex; gap:12px; margin:14px 0; }
-.stat{ flex:1; border:1px solid var(--line); border-radius:var(--radius); background:var(--card); padding:16px; text-align:center; }
-.s-n{ font-size:20px; font-weight:600; color:var(--txt-strong); font-family:var(--font-num); font-variant-numeric:var(--font-num-variant); }
-.s-l{ font-size:11px; color:var(--muted); margin-top:4px; }
-
-.composer{
-  position:relative; padding:12px 16px 16px;
-  border-top:none;
-  background:var(--panel);
-}
-.chip{
-  border:1px solid var(--line); background:transparent; border-radius:0;
-  padding:0 11px; min-height:30px; font-size:12px; font-weight:500; color:var(--txt-2); cursor:pointer;
-  font-family:var(--font-sans);
-  display:inline-flex; align-items:center; gap:5px;
-}
-.chip.sm{
-  padding:0 12px;
-  min-height:32px;
-  font-family:var(--font-sans);
-  font-size:14px;
-  font-weight:700;
-  line-height:1;
-  text-transform:uppercase;
-  color:var(--txt-strong);
-  background:var(--field-bg);
-  border-color:var(--line-strong);
-}
-.chip-ic{ width:12px; height:12px; flex:0 0 auto; transition:transform .18s; }
-.chip.open .chip-ic{ transform:rotate(180deg); }
-.cb-left .chip{
-  border-top:0; border-bottom:0; border-left:0; border-right:1px solid var(--line);
-  background:transparent;
-}
-.cb-left .chip.sm{
-  background:var(--field-bg);
-  color:var(--txt-strong);
-  border-right:1px solid var(--line-strong);
-}
-.cb-left .chip:first-child{ border-left:0; border-top-left-radius:4px; border-bottom-left-radius:4px; }
-.cb-left .chip:last-child{ border-right:0; border-top-right-radius:4px; border-bottom-right-radius:4px; }
-.cb-left .chip:only-child{ border-radius:4px; border-right:0; }
-.composer-inset{
-  width:100%;
-  border:1px solid var(--line); border-radius:var(--radius);
-  background:var(--card);
-  display:grid;
-  grid-template-columns:1fr;
-}
-.composer-inset .thumb-strip{ padding:8px 12px 0; }
-.composer-inset.is-inline{
-  grid-template-columns:1fr auto;
-}
-.composer-inset.is-inline .thumb-strip{ grid-column:1 / -1; }
-.composer-inset.is-inline .input{ grid-column:1; }
-.composer-inset.is-inline .composer-bot{
-  grid-column:2;
-  padding:0 8px 0 0;
-  align-self:end;
-}
-.composer-inset.is-inline .composer-bot .spacer{ display:none; }
-.composer-inset .input{
-  width:100%; min-height:38px; max-height:160px; overflow-y:auto;
-  border:none; border-radius:0; background:transparent;
-  padding:10px 12px; font-size:13px; line-height:1.55; outline:none;
-  font-family:inherit; color:var(--txt);
-  white-space:pre-wrap; word-break:break-word;
-}
-/* contenteditable 空提示（textarea 的 placeholder 等价物）*/
-.composer-inset .input:empty::before{
-  content:attr(data-ph); color:var(--muted); pointer-events:none;
-  font-size:13px; font-weight:400;
-}
-.composer-inset .composer-bot{
-  margin-top:0; padding:2px 10px 8px; justify-content:flex-start;
-}
-.composer-inset .composer-bot .spacer{ flex:1; }
-.composer-plus-wrap{ position:relative; flex:0 0 auto; }
-.composer-plus-wrap .composer-menu{
-  left:0; right:auto; top:auto; bottom:calc(100% + 6px); min-width:180px;
-}
-.composer-plus{ width:34px; height:34px; }
-.composer-inset .composer-bot > #model-chip,
-.composer-inset .composer-bot > #cdb-model-chip{ border:none; border-radius:4px; }
-/* 原子附件 chip（像 @人，光标进不去、退格整块删）*/
-.ph-chip{
-  display:inline-flex; align-items:center; vertical-align:baseline;
-  margin:0 2px; padding:1px 8px; border-radius:6px;
-  background:color-mix(in srgb, var(--accent) 22%, transparent); color:var(--accent);
-  font-size:.9em; white-space:nowrap; user-select:none; cursor:default;
-}
-.composer-bot{ display:flex; align-items:center; justify-content:flex-end; gap:8px; }
-.cb-left{
-  display:inline-flex; align-items:stretch; gap:0;
-  border:1px solid var(--line); border-radius:4px; overflow:hidden;
-  background:var(--field-bg);
-}
-.send{
-  position:relative;
-  width:34px; height:34px; border-radius:6px; border:none; cursor:pointer;
-  background:var(--ink-green); color:#fff;
-  display:flex; align-items:center; justify-content:center;
-  transition:background .15s;
-}
-.send:hover:not(:disabled):not(.is-stop){ background:var(--ink-green-hover); }
-.send:disabled{ opacity:.7; cursor:not-allowed; }
-.send.is-busy svg{ visibility:hidden; }
-.send.is-busy::after{
-  content:''; position:absolute; inset:0; margin:auto;
-  width:16px; height:16px;
-  border:2px solid color-mix(in srgb, var(--on-accent) 35%, transparent);
-  border-top-color:var(--on-accent); border-radius:50%;
-  animation:ga-spin .65s linear infinite;
-}
-.send svg{ width:15px; height:15px; }
-/* 运行中：发送键变红色停止键（点击=暂停当前回合）。回车仍走发送（打断重发）。 */
-.send.is-stop{ background:var(--danger); cursor:pointer; }
-.send.is-stop:hover{ background:var(--danger-dot); }
-.send.is-stop svg{ display:none; }
-.send.is-stop::after{
-  content:''; width:12px; height:12px; border-radius:3px;
-  background:var(--on-accent);
-}
-
-/* ============ ④ 右侧会话面板 ============ */
-.rp-toggle, .sb-toggle{
-  position:relative; z-index:10; align-self:center;
-  width:20px; height:36px; border:0; background:none; border-radius:4px;
-  cursor:pointer; display:flex; align-items:center; justify-content:center;
-  color:var(--txt-2); flex:0 0 auto; margin-right:-10px; margin-left:-10px;
-  opacity:.55;  /* 展开态：纯图标按钮，无底无框 */
-  transition:color .15s, opacity .15s, background .15s, width .2s, margin .2s;
-}
-.rp-toggle:hover, .sb-toggle:hover{ opacity:1; color:var(--txt); background:var(--hover-2); }
-.rp-toggle svg, .sb-toggle svg{ width:14px; height:14px; transition:transform .2s; }
-/* 视觉上压进对应面板内侧（不改变 flex 布局，仅位移） */
-.rp-toggle{ transform:translateX(24px); }
-.sb-toggle{ transform:translateX(-22px); }
-
-.body.rp-collapsed .rp-toggle svg,
-.body.sb-collapsed .sb-toggle svg{ transform:rotate(180deg); }
-.body.rp-collapsed .rp-toggle{
-  position:absolute; right:7px; top:50%; transform:translateY(-50%);
-  margin:0; width:20px; opacity:.6;
-  border:1px solid var(--line); background:var(--panel);  /* 折叠态：恢复成边缘小标签 */
-}
-.body.sb-collapsed .sb-toggle{
-  position:absolute; left:7px; top:50%; transform:translateY(-50%);
-  margin:0; width:20px; opacity:.6;
-  border:1px solid var(--line); background:var(--panel);
-}
-.body.rp-collapsed .rp-toggle:hover,
-.body.sb-collapsed .sb-toggle:hover{ opacity:1; background:var(--panel); border-color:var(--line-strong); }
-
-.rp-resize, .sb-resize{
-  width:6px; min-width:0; cursor:col-resize; border-radius:2px;
-  background:transparent; transition:background .15s;
-  align-self:stretch; justify-self:stretch;
-  position:relative; z-index:5;
-  margin:0 -3px;
-}
-.rp-resize:hover, .rp-resize.dragging,
-.sb-resize:hover, .sb-resize.dragging{ background:var(--line-strong); }
-.body.rp-collapsed .rp-resize,
-.body.sb-collapsed .sb-resize{ display:none; }
-
-/* 侧边栏折叠时整块隐藏 */
-.body.sb-collapsed .sidebar{
-  width:0; padding:0; border:none; opacity:0; pointer-events:none; overflow:hidden;
-  margin:0; display:none;
-}
-
-.rightpanel{
-  width:220px; background:var(--panel);
-  border-left:1px solid var(--divider); border-radius:0; box-shadow:none;
-  overflow:hidden;
-  padding:var(--shell-pad) 12px 12px;
-  box-sizing:border-box;
-  display:flex; flex-direction:column; gap:var(--shell-gap);
-  transition:width .2s, padding .2s, opacity .15s;
-}
-.rp-head{
-  flex:0 0 auto;
-  display:block;
-  box-sizing:border-box;
-}
-.search{
-  display:flex; align-items:center; gap:6px; border:1px solid var(--line);
-  border-radius:4px; padding:0 10px; color:var(--muted); font-size:12px;
-  min-height:var(--shell-head-h);
-  box-sizing:border-box;
-}
-.search input{ border:none; outline:none; flex:1; font-size:12px; background:transparent; color:var(--txt); }
-.search-ic{ width:14px; height:14px; color:var(--muted); flex:0 0 auto; }
-.new-conv{
-  flex:0 0 var(--new-conv-h);
-  min-height:var(--new-conv-h);
-  width:100%;
-  box-sizing:border-box;
-  border:1px solid var(--line); background:var(--line-soft); border-radius:4px;
-  padding:0 12px; font-size:13px; color:var(--txt-2); cursor:pointer; font-weight:500;
-  display:flex; align-items:center; justify-content:center; gap:7px; font-family:var(--font-sans);
-}
-.new-conv svg{ width:14px; height:14px; }
-.new-conv:hover{ background:var(--hover-2); }
-.conv-list{
-  flex:1; display:flex; flex-direction:column; align-items:stretch; gap:6px;
-  padding-top:var(--conv-list-pad-top);
-  overflow:auto; min-height:0;
-  scrollbar-width:none;
-  -ms-overflow-style:none;
-}
-.conv-list::-webkit-scrollbar{ display:none; width:0; height:0; }
-.body.rp-collapsed .rightpanel{
-  width:0; padding:0; border:none; opacity:0; pointer-events:none; overflow:hidden;
-  margin:0; display:none;
-}
-.conv-empty{ color:var(--muted2); font-size:12px; }
-.conv-item{ display:flex; align-items:center; gap:9px; padding:9px 10px; border-radius:4px; cursor:pointer; }
-.conv-item:hover{ background:var(--line-soft); }
-.conv-item.active{ background:var(--accent-bg); }
-.conv-item.renaming{
-  cursor:default;
-  background:color-mix(in srgb, var(--accent-bg) 70%, var(--panel));
-}
-.ci-dot{ width:7px; height:7px; border-radius:50%; background:var(--ok); flex:0 0 auto; }
-.conv-item.idle .ci-dot{ background:var(--dot-idle); }
-.ci-main{ flex:1; min-width:0; }
-.ci-title{ font-size:13px; font-weight:500; color:var(--txt-strong); white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
-.ci-rename-input{
-  display:block; width:100%; min-width:0; height:24px; box-sizing:border-box;
-  margin:-3px 0 -2px; padding:0 7px;
-  border:1px solid color-mix(in srgb, var(--accent) 44%, var(--line-strong));
-  border-radius:4px; background:var(--card); outline:none;
-  color:var(--txt-strong); caret-color:var(--accent);
-  font-family:var(--font-sans); font-size:13px; font-weight:500; line-height:22px;
-  box-shadow:0 0 0 2px color-mix(in srgb, var(--accent) 10%, transparent);
-  transition:border-color .12s, box-shadow .12s, background .12s;
-}
-.ci-rename-input:focus{
-  border-color:var(--accent);
-  background:var(--field-bg);
-  box-shadow:0 0 0 3px color-mix(in srgb, var(--accent) 16%, transparent);
-}
-.ci-rename-input::selection{ background:color-mix(in srgb, var(--accent) 28%, transparent); }
-.ci-pin{ width:14px; height:14px; color:var(--accent); margin-right:3px; vertical-align:-3px; flex:0 0 auto; display:inline-block; }
-.ci-meta{ font-size:11px; color:var(--muted); margin-top:2px; }
-.ci-more{
-  flex:0 0 auto; width:26px; height:26px; border:none; background:transparent;
-  color:var(--txt-3); border-radius:4px; cursor:pointer;
-  display:flex; align-items:center; justify-content:center;
-  opacity:0; transition:opacity .12s;
-}
-.ci-more svg{ width:20px; height:20px; }
-.conv-item:hover .ci-more, .conv-item.active .ci-more{ opacity:1; }
-.conv-item.renaming .ci-more{ opacity:0; pointer-events:none; }
-.ci-more:hover{ background:var(--hover-dim); color:var(--txt-2); }
-
-.ctx-menu{
-  position:fixed; z-index:200; min-width:124px; background:var(--card);
-  border:1px solid var(--line); border-radius:4px; padding:4px;
-  box-shadow:var(--shadow-pop);
-}
-.ctx-menu[hidden]{ display:none; }
-.ctx-item{
-  display:flex; align-items:center; gap:8px; padding:8px 10px;
-  font-size:12px; border-radius:4px; cursor:pointer; color:var(--txt-strong); user-select:none;
-}
-.ctx-item svg{ width:15px; height:15px; flex:0 0 auto; }
-.ctx-item:hover{ background:var(--line-soft); }
-.ctx-item.danger{ color:var(--danger); }
-.ctx-item.danger:hover{ background:var(--danger-bg); }
-
-/* Plan 卡片：吸附在输入框左上方（半悬浮窄卡） */
-.composer-anchor{
-  position:relative;
-  flex:0 0 auto;
-  padding:0;
-  background:var(--panel);
-}
-.composer-anchor > .composer{
-  padding:0;
-  background:transparent;
-}
-.composer-slot{
-  position:relative;
-  width:100%;
-}
-.plan-card{
-  position:absolute;
-  left:12px;
-  bottom:calc(100% + 8px);
-  z-index:13;
-  width:min(640px, calc(100% - 24px));
-  min-width:280px;
-  max-width:100%;
-  box-sizing:border-box;
-  font-size:13px;
-  line-height:1.45;
-  color:var(--txt);
-  pointer-events:auto;
-}
-.plan-card[hidden]{ display:none !important; }
-.plan-card--expanded{
-  padding:14px 16px 12px 18px;
-  background:color-mix(in srgb, var(--card) 94%, var(--accent) 6%);
-  border:1px solid var(--line);
-  border-radius:8px;
-  box-shadow:0 12px 32px #14192818, 0 1px 2px #14192814;
-  overflow:hidden;
-}
-.plan-card--expanded::before{
-  content:"";
-  position:absolute;
-  left:0;
-  top:0;
-  bottom:0;
-  width:4px;
-  background:var(--accent);
-}
-.plan-card--collapsed{
-  width:auto;
-  min-width:0;
-  max-width:min(520px, 70%);
-}
-/* Keep the composer rounded while the plan card floats above it. */
-.composer-slot:has(.plan-card:not([hidden])) .composer-inset{
-  border-top-left-radius:var(--radius);
-  border-top-right-radius:var(--radius);
-}
-.composer-slot:has(.plan-card--collapsed:not([hidden])) .plan-capsule{
-  box-shadow:0 10px 24px #14192814, 0 1px 2px #14192810;
-}
-.plan-card-head{
-  display:flex;
-  align-items:center;
-  gap:10px;
-  margin-bottom:10px;
-  min-height:26px;
-}
-.plan-status-dot{
-  flex:0 0 auto;
-  width:8px; height:8px;
-  border-radius:50%;
-  background:var(--accent);
-  box-shadow:0 0 0 4px color-mix(in srgb, var(--accent) 14%, transparent);
-}
-.plan-card--complete .plan-status-dot{
-  background:var(--success);
-  box-shadow:0 0 0 4px var(--success-ring);
-}
-.plan-card--placeholder .plan-status-dot{
-  animation:plan-dot-pulse 1.4s ease-in-out infinite;
-}
-@keyframes plan-dot-pulse{
-  0%,100%{ opacity:1; transform:scale(1); }
-  50%{ opacity:.55; transform:scale(.92); }
-}
-.plan-title{
-  flex:1 1 auto;
-  font-weight:700;
-  font-size:14px;
-  color:var(--txt-strong);
-  min-width:0;
-  white-space:nowrap;
-  overflow:hidden;
-  text-overflow:ellipsis;
-}
-.plan-progress{
-  flex:0 0 auto;
-  display:inline-flex;
-  align-items:center;
-  min-height:24px;
-  padding:0 8px;
-  border:1px solid color-mix(in srgb, var(--accent) 26%, var(--line));
-  border-radius:999px;
-  background:color-mix(in srgb, var(--accent) 9%, var(--card));
-  font-weight:700;
-  font-size:12px;
-  color:var(--txt-strong);
-  font-family:var(--font-num);
-  font-variant-numeric:var(--font-num-variant);
-}
-.plan-card--complete .plan-progress{
-  color:var(--success);
-  border-color:color-mix(in srgb, var(--success) 28%, var(--line));
-  background:var(--success-bg);
-}
-.plan-head-actions{
-  flex:0 0 auto;
-  display:flex;
-  align-items:center;
-  gap:6px;
-}
-.plan-btn{
-  display:inline-flex;
-  align-items:center;
-  justify-content:center;
-  gap:5px;
-  min-height:26px;
-  border:1px solid transparent;
-  background:transparent;
-  padding:0 8px;
-  font-size:12px;
-  font-weight:600;
-  color:var(--muted);
-  cursor:pointer;
-  border-radius:6px;
-  font-family:var(--font-sans);
-  transition:background .15s, border-color .15s, color .15s;
-}
-.plan-btn:hover{
-  background:var(--field-bg);
-  border-color:var(--line);
-  color:var(--txt-strong);
-}
-.plan-btn-ic{
-  width:12px;
-  height:12px;
-  flex:0 0 auto;
-}
-.plan-current{
-  display:flex;
-  gap:6px;
-  align-items:flex-start;
-  margin:0 0 10px 0;
-  padding:8px 10px;
-  border:1px solid var(--line-soft);
-  border-radius:6px;
-  background:color-mix(in srgb, var(--field-bg) 82%, var(--accent) 18%);
-}
-.plan-current-label{
-  flex:0 0 auto;
-  color:var(--muted);
-  font-size:12px;
-}
-.plan-current-text{
-  flex:1 1 auto;
-  color:var(--txt-strong);
-  font-weight:600;
-  word-break:break-word;
-}
-.plan-card--complete .plan-current-text{ color:var(--success); }
-.plan-wait{
-  color:var(--muted2);
-  padding:4px 0 2px;
-  font-size:12px;
-}
-.plan-items{
-  list-style:none;
-  margin:0;
-  padding:0;
-}
-.plan-item{
-  display:flex;
-  gap:10px;
-  align-items:flex-start;
-  padding:5px 0;
-  min-height:26px;
-}
-.plan-item-mark{
-  flex:0 0 auto;
-  position:relative;
-  display:inline-flex;
-  align-items:center;
-  justify-content:center;
-  width:16px;
-  height:16px;
-  margin-top:2px;
-  border:1px solid var(--line-strong);
-  border-radius:50%;
-  background:var(--card);
-  color:var(--muted);
-  font-size:0;
-}
-.plan-item-text{
-  flex:1 1 auto;
-  word-break:break-word;
-  color:var(--txt-2);
-}
-.plan-item--done .plan-item-mark{
-  color:var(--success);
-  border-color:color-mix(in srgb, var(--success) 40%, var(--line));
-  background:var(--success-bg);
-}
-.plan-item--done .plan-item-mark::after{
-  content:"";
-  width:7px;
-  height:4px;
-  border-left:2px solid currentColor;
-  border-bottom:2px solid currentColor;
-  transform:translateY(-1px) rotate(-45deg);
-}
-.plan-item--done .plan-item-text{
-  color:var(--muted);
-  opacity:.78;
-}
-.plan-item--done .plan-item-text{ text-decoration:line-through; }
-.plan-item--current .plan-item-mark{
-  border-color:var(--accent);
-  background:var(--accent);
-  box-shadow:0 0 0 4px color-mix(in srgb, var(--accent) 12%, transparent);
-}
-.plan-item--current .plan-item-mark::after{
-  content:"";
-  width:5px;
-  height:5px;
-  border-radius:50%;
-  background:var(--on-accent);
-}
-.plan-item--current .plan-item-text{
-  color:var(--txt-strong);
-  font-weight:700;
-}
-.plan-item--pending .plan-item-mark::after{
-  content:"";
-  width:4px;
-  height:4px;
-  border-radius:50%;
-  background:var(--line-strong);
-}
-.plan-item--pending .plan-item-text{ color:var(--muted); }
-.plan-item--error .plan-item-mark{
-  color:var(--danger);
-  border-color:color-mix(in srgb, var(--danger) 38%, var(--line));
-  background:var(--danger-bg);
-}
-.plan-item--error .plan-item-mark::before,
-.plan-item--error .plan-item-mark::after{
-  content:"";
-  position:absolute;
-  width:8px;
-  height:2px;
-  border-radius:999px;
-  background:currentColor;
-}
-.plan-item--error .plan-item-mark::before{ transform:rotate(45deg); }
-.plan-item--error .plan-item-mark::after{ transform:rotate(-45deg); }
-.plan-item--error .plan-item-text{ color:var(--danger); }
-.plan-item--warn .plan-item-mark{
-  color:#c67600;
-  border-color:color-mix(in srgb, #c67600 38%, var(--line));
-  background:color-mix(in srgb, #c67600 12%, var(--card));
-  font-size:10px;
-  font-weight:800;
-}
-.plan-item--warn .plan-item-mark::after{ content:"!"; }
-.plan-item--warn .plan-item-text{ color:#9b6100; }
-html[data-appearance="dark"] .plan-item--warn .plan-item-mark,
-html[data-appearance="dark"] .plan-item--warn .plan-item-text{ color:#f0a020; }
-.plan-foot{
-  display:flex;
-  justify-content:flex-end;
-  gap:8px;
-  padding-top:10px;
-  border-top:1px solid var(--line-soft);
-  margin-top:6px;
-}
-.plan-more-hint{
-  flex:1 1 auto;
-  align-self:center;
-  font-size:12px;
-  color:var(--muted2);
-  text-align:left;
-}
-.plan-capsule{
-  display:inline-flex;
-  align-items:center;
-  gap:8px;
-  max-width:100%;
-  min-height:34px;
-  padding:0 12px 0 10px;
-  border:1px solid var(--line);
-  border-radius:999px;
-  background:color-mix(in srgb, var(--card) 94%, var(--accent) 6%);
-  cursor:pointer;
-  font-size:12px;
-  font-weight:600;
-  color:var(--txt);
-  box-shadow:0 10px 24px #14192814, 0 1px 2px #14192810;
-  font-family:var(--font-sans);
-  transition:background .15s, border-color .15s, box-shadow .15s;
-}
-.plan-capsule:hover{
-  border-color:var(--line-strong);
-  background:var(--card);
-  box-shadow:0 12px 28px #1419281f, 0 1px 2px #14192812;
-}
-.plan-capsule-ic{
-  width:15px;
-  height:15px;
-  flex:0 0 auto;
-  color:var(--muted);
-}
-.plan-capsule-chevron{
-  width:12px;
-  height:12px;
-  flex:0 0 auto;
-  color:var(--muted2);
-}
-.plan-capsule-text{
-  min-width:0;
-  white-space:nowrap;
-  overflow:hidden;
-  text-overflow:ellipsis;
-  color:var(--txt-2);
-}
-.plan-capsule-text em{
-  font-style:normal;
-  color:var(--accent);
-  font-weight:600;
-}
-.plan-card--complete .plan-capsule{
-  background:color-mix(in srgb, var(--card) 88%, var(--success) 12%);
-}
-.plan-card--complete .plan-capsule-text em{ color:var(--success); }
-
-/* ─── chat composer: Plan/Auto toggle ─── */
-.chip.on{
-  background:var(--accent);
-  color:var(--on-accent);
-  border-color:var(--accent);
-  font-weight:700;
-}
-/* 组内 .cb-left .chip.sm 的底色/字色优先级(0,3,0)高于 .chip.on(0,2,0)，会把开态盖掉，
-   导致根本看不出开/关；这里用 (0,4,0) 覆盖：开态 = 主题色实底高亮，一眼可辨 */
-.cb-left .chip.sm.on{
-  background:var(--accent);
-  color:var(--on-accent);
-  border-right-color:var(--accent);
-}
-
-/* ─── chat composer: model dropdown menu ─── */
-.ga-menu{
-  position:absolute;
-  background:var(--card);
-  border:1px solid var(--line);
-  border-radius:4px;
-  box-shadow:var(--shadow);
-  padding:4px;
-  min-width:160px;
-  z-index:50;
-}
-.ga-menu-item{
-  display:block;
-  width:100%;
-  text-align:left;
-  background:transparent;
-  border:0;
-  padding:6px 10px;
-  border-radius:4px;
-  font:inherit;
-  color:var(--txt-2);
-  cursor:pointer;
-  font-family:var(--font-mono);
-  font-variant-numeric:var(--font-num-variant);
-}
-.ga-menu-item:hover{ background:var(--hover-2); }
-.ga-menu-item.active{ color:var(--txt-strong); }  /* 选中项用强调色而非发灰的 --accent，避免变淡 */
-/* 浅色模式：模型下拉里选中项仅靠文字色区分太弱——加背景 + 加粗，一眼可辨 */
-html[data-appearance="light"] .ga-menu-item.active{
-  background:color-mix(in srgb, var(--accent) 16%, var(--panel));
-  font-weight:700;
-}
-/* 深色模式：同样处理 */
-html[data-appearance="dark"] .ga-menu-item.active{
-  background:color-mix(in srgb, var(--accent) 22%, var(--panel));
-  font-weight:700;
-}
-.composer-menu .ga-menu-item{
-  display:flex; align-items:center; gap:8px;
-}
-.composer-menu .ga-menu-item svg{ width:16px; height:16px; flex:0 0 auto; color:var(--icon); }
-
-/* ─── chat composer: image thumb strip ─── */
-.thumb-strip{
-  display:flex;
-  flex-wrap:wrap;
-  gap:6px;
-  padding:6px 0;
-}
-.thumb{
-  position:relative;
-  width:48px;
-  height:48px;
-  border:1px solid var(--line);
-  border-radius:4px;
-  overflow:hidden;
-  background:var(--field-bg);
-}
-.thumb img{
-  width:100%;
-  height:100%;
-  object-fit:cover;
-  display:block;
-}
-.thumb .x{
-  position:absolute;
-  top:1px;
-  right:1px;
-  width:16px;
-  height:16px;
-  border-radius:4px;
-  border:0;
-  background:var(--card);
-  color:var(--txt-2);
-  font-size:11px;
-  line-height:1;
-  cursor:pointer;
-  display:flex;
-  align-items:center;
-  justify-content:center;
-  padding:0;
-}
-.thumb .x:hover{ color:var(--danger); }
-
-.file-chip{
-  position:relative;
-  display:inline-flex;
-  align-items:center;
-  gap:6px;
-  height:32px;
-  padding:0 28px 0 10px;
-  border:1px solid var(--line);
-  border-radius:4px;
-  background:var(--field-bg);
-  color:var(--txt);
-  font-size:12px;
-  max-width:220px;
-}
-.file-chip svg{
-  width:14px; height:14px;
-  color:var(--txt-2);
-  flex:0 0 auto;
-}
-.file-chip .fc-name{
-  white-space:nowrap;
-  overflow:hidden;
-  text-overflow:ellipsis;
-}
-.file-chip .x{
-  position:absolute;
-  top:50%;
-  right:4px;
-  transform:translateY(-50%);
-  width:18px; height:18px;
-  border-radius:4px;
-  border:0;
-  background:transparent;
-  color:var(--txt-2);
-  font-size:13px;
-  line-height:1;
-  cursor:pointer;
-  display:flex;
-  align-items:center;
-  justify-content:center;
-  padding:0;
-}
-.file-chip .x:hover{ color:var(--danger); }
-
-/* ─── thumb-strip 里的文件 chip：升级成卡片样式（与消息中一致） ─── */
-.thumb-strip .file-chip.pending{
-  height:auto;
-  min-height:52px;
-  padding:8px 32px 8px 8px;
-  gap:9px;
-  max-width:240px;
-  border-radius:4px;
-  background:var(--panel);
-  cursor:pointer;
-  transition:background .15s, border-color .15s, box-shadow .15s;
-}
-.thumb-strip .file-chip.pending:hover{
-  background:var(--hover-2);
-  border-color:var(--line-strong);
-  box-shadow:var(--shadow);
-}
-.thumb-strip .file-chip.pending .fc-icon{
-  width:32px; height:32px;
-  flex:0 0 auto;
-  border-radius:4px;
-  background:var(--accent-bg);
-  color:var(--accent);
-  display:flex; align-items:center; justify-content:center;
-}
-.thumb-strip .file-chip.pending .fc-icon svg{
-  width:16px; height:16px;
-  color:inherit;
-}
-.thumb-strip .file-chip.pending .fc-meta{
-  display:flex; flex-direction:column;
-  min-width:0;
-  line-height:1.35;
-}
-.thumb-strip .file-chip.pending .fc-name{
-  font-size:12px;
-  font-weight:500;
-  color:var(--txt-strong);
-  white-space:nowrap; overflow:hidden; text-overflow:ellipsis;
-}
-.thumb-strip .file-chip.pending .fc-sub{
-  font-size:11px;
-  color:var(--muted);
-  margin-top:1px;
-}
-
-/* ─── chat panel: drag-over overlay ─── */
-.main.dragover{ position:relative; }
-.main.dragover::after{
-  content: attr(data-drop-hint);
-  position:absolute; inset:0;
-  display:flex; align-items:center; justify-content:center;
-  background:var(--accent-bg);
-  color:var(--accent);
-  border:2px dashed var(--accent);
-  border-radius:0;
-  font-size:15px; font-weight:500;
-  pointer-events:none;
-  z-index:50;
-}
-
-/* ─── message bubble: image attachments (Gemini-style: image floats free, text in its own bubble) ─── */
-.user-stack{
-  display:flex; flex-direction:column; align-items:flex-end;
-  gap:6px; max-width:80%;
-}
-.user-imgs{
-  display:flex; flex-wrap:wrap; gap:4px;
-  justify-content:flex-end;
-}
-.user-imgs img{
-  width:120px; height:120px;
-  border-radius:12px;
-  background:var(--field-bg);
-  object-fit:cover;
-  cursor:zoom-in;
-  display:block;
-}
-.user-files{
-  display:flex; flex-direction:column; gap:6px;
-  align-items:flex-end;
-}
-.user-files .file-chip{
-  height:auto;
-  min-height:56px;
-  padding:10px 14px 10px 10px;
-  gap:10px;
-  max-width:280px;
-  border-radius:4px;
-  background:var(--panel);
-  cursor:pointer;
-  transition:background .15s, border-color .15s, box-shadow .15s, transform .15s;
-}
-.user-files .file-chip:hover{
-  background:var(--hover-2);
-  border-color:var(--line-strong);
-  box-shadow:var(--shadow);
-  transform:translateY(-1px);
-}
-.user-files .file-chip .fc-icon{
-  width:36px; height:36px;
-  flex:0 0 auto;
-  border-radius:4px;
-  background:var(--accent-bg);
-  color:var(--accent);
-  display:flex; align-items:center; justify-content:center;
-}
-.user-files .file-chip .fc-icon svg{
-  width:18px; height:18px;
-  color:inherit;
-}
-.user-files .file-chip .fc-meta{
-  display:flex; flex-direction:column;
-  min-width:0;
-  line-height:1.35;
-}
-.user-files .file-chip .fc-name{
-  font-size:13px;
-  font-weight:500;
-  color:var(--txt-strong);
-  white-space:nowrap; overflow:hidden; text-overflow:ellipsis;
-}
-.user-files .file-chip .fc-sub{
-  font-size:11px;
-  color:var(--muted);
-  margin-top:2px;
-}
-.user-stack .bubble{ max-width:100%; }
-
-/* ─── lightbox (image preview) ─── */
-.lightbox{
-  position:fixed; inset:0; z-index:600;
-  display:flex; align-items:center; justify-content:center;
-}
-.lightbox[hidden]{ display:none; }
-.lightbox-backdrop{
-  position:absolute; inset:0;
-  background:var(--overlay);
-}
-.lightbox-img{
-  position:relative;
-  max-width:90vw; max-height:90vh;
-  border-radius:8px;
-  box-shadow:var(--shadow-modal);
-  background:var(--card);
-}
-.lightbox-x{
-  position:absolute; top:16px; right:16px;
-  width:36px; height:36px;
-  border:0; border-radius:4px;
-  background:var(--card); color:var(--txt-2);
-  font-size:20px; line-height:1;
-  cursor:pointer;
-  box-shadow:var(--shadow-pop);
-  display:flex; align-items:center; justify-content:center;
-  padding:0;
-}
-.lightbox-x:hover{ color:var(--danger); }
-.thumb img{ cursor:zoom-in; }
-
-/* ─── 自定义预设：卡上的删除按钮 ─── */
-.fcard{ position:relative; }
-.fcard .fc-x{
-  position:absolute; top:6px; right:6px;
-  width:20px; height:20px;
-  border:0; border-radius:4px;
-  background:var(--card); color:var(--txt-2);
-  font-size:14px; line-height:1;
-  cursor:pointer;
-  box-shadow:var(--shadow);
-  display:none; align-items:center; justify-content:center;
-  padding:0;
-}
-.fcard:hover .fc-x{ display:flex; }
-.fcard .fc-x:hover{ color:var(--danger); }
-
-/* ─── 自定义预设：卡上的编辑按钮（删除按钮左侧）─── */
-.fcard .fc-edit{
-  position:absolute; top:6px; right:30px;
-  width:20px; height:20px;
-  border:0; border-radius:4px;
-  background:var(--card); color:var(--txt-2);
-  cursor:pointer;
-  box-shadow:var(--shadow);
-  display:none; align-items:center; justify-content:center;
-  padding:0;
-}
-.fcard .fc-edit svg{ width:13px; height:13px; }
-.fcard:hover .fc-edit{ display:flex; }
-.fcard .fc-edit:hover{ color:var(--txt-strong); }
-
-/* ─── 自定义预设 modal 表单 ─── */
-.cp-body{
-  padding:18px; display:flex; flex-direction:column; gap:12px;
-  min-height:0;
-}
-.cp-input, .cp-textarea{
-  width:100%; box-sizing:border-box;
-  padding:10px 12px;
-  background:var(--field-bg);
-  border:1px solid var(--line); border-radius:4px;
-  color:var(--txt); font:inherit;
-  outline:none;
-}
-.cp-input:focus, .cp-textarea:focus{ border-color:var(--accent); }
-.cp-textarea{ resize:vertical; min-height:120px; }
-.cp-error{
-  font-size:12px; color:var(--danger);
-}
-.cp-actions{
-  display:flex; justify-content:flex-end; gap:8px;
-  margin-top:4px;
-}
-.cp-btn{
-  padding:8px 16px;
-  border:1px solid var(--line); border-radius:4px;
-  background:var(--card); color:var(--txt);
-  cursor:pointer; font:inherit;
-}
-.cp-btn:hover{ background:var(--hover-2); }
-.cp-btn-primary{
-  background:var(--accent); color:var(--on-accent); border-color:var(--accent);
-}
-.cp-btn-primary:hover{ background:var(--accent); opacity:.9; }
-
-.preset-restore{
-  margin-left:auto; margin-right:8px;
-  padding:5px 12px; font-size:12px;
-  border:1px solid var(--line); border-radius:4px;
-  background:var(--card); color:var(--txt-2);
-  cursor:pointer; font-family:inherit;
-}
-.preset-restore:hover{ background:var(--hover-2); color:var(--accent); border-color:var(--accent); }
-.preset-restore[hidden]{ display:none; }
-
-.modal-title,
-.set-sec-t{
-  font-family:var(--font-sans);
-}
-
-.model-row-name,
-#model-chip .model-name,
-#cdb-model-chip .model-name,
-.model-form input,
-#add-model-form .model-form-mini input[type="number"],
-.chat-font-value,
-.kv{
-  font-family:var(--font-mono);
-  font-variant-numeric:var(--font-num-variant);
-}
-
-/* ═══════════════ Markdown 渲染增强 (from PR) ═══════════════ */
-.fold-pre{ white-space:pre-wrap; word-break:break-word; max-height:300px; overflow:auto; }
-.fold.fold-thinking{ border-color:var(--fold-thinking-border); background:var(--fold-thinking-bg); }
-.fold.fold-tool{ border:none; background:transparent; }
-.fold.fold-tool-live > summary{ opacity:.85; font-style:italic; }
-.fold.fold-result{ border:none; background:transparent; }
-.fold.fold-turn{ border-color:var(--fold-turn-border); background:var(--fold-turn-bg); }
-.fold.fold-turn > summary{ font-weight:500; color:var(--txt-2); white-space:nowrap; overflow:hidden; }
-.fold.fold-retry{ border-color:var(--fold-retry-border); background:var(--fold-retry-bg); border-style:dashed; }
-.fold.fold-retry > summary{ font-size:11px; color:var(--muted2); font-weight:400; }
-.fold.fold-retry pre{ font-size:11px; color:var(--muted); }
-/* ---- 代码块容器 + 复制按钮 ---- */
-.bubble.md pre{ position:relative; background:var(--field-bg); border-radius:8px; padding:12px; overflow-x:auto; }
-.bubble.md pre code{ font-size:.92em; }
-.code-copy-btn{
-  position:absolute; top:6px; right:6px; z-index:1;
-  border:1px solid var(--line); background:var(--card); color:var(--muted);
-  border-radius:6px; padding:4px; font-size:0; cursor:pointer;
-  opacity:0; transition:opacity .15s, background .12s;
-  display:flex; align-items:center; justify-content:center;
-}
-.bubble.md pre:hover .code-copy-btn{ opacity:1; }
-.code-copy-btn:hover{ background:var(--line-soft); color:var(--txt-2); }
-.code-copy-btn svg{ width:14px; height:14px; }
-/* ---- KaTeX 公式 ---- */
-.katex-block{ display:block; text-align:center; margin:12px 0; overflow-x:auto; }
-.katex-inline{ display:inline; }
-.katex-block .katex{ font-size:1.1em; }
-.latex-copy-btn{
-  position:absolute; top:4px; right:4px; z-index:1;
-  background:none; border:none; color:var(--muted); cursor:pointer;
-  font-size:0.82em; padding:2px 4px; border-radius:3px; line-height:1;
-  opacity:0; transition:opacity .15s, color .15s, background .15s;
-}
-.katex-block{ position:relative; }
-.katex-block:hover .latex-copy-btn{ opacity:1; }
-.latex-copy-btn:hover{ color:var(--txt); background:var(--hover-dim); }
-/* ---- 气泡级复制按钮 (F2) ---- */
-.bubble-copy-btn{
-  display:inline-flex; align-items:center; flex-basis:100%;
-  margin-top:2px; padding:2px 4px; border:none; background:none;
-  color:var(--muted); cursor:pointer; opacity:0; transition:opacity .15s;
-}
-.msg:hover .bubble-copy-btn{ opacity:1; }
-.msg.user .bubble-copy-btn{ justify-content:flex-end; }
-.msg.assistant .bubble-copy-btn{ justify-content:flex-start; }
-.bubble-copy-btn:hover{ color:var(--txt-2); }
-.bubble-copy-btn svg{ width:14px; height:14px; }
-/* ---- highlight.js 适配 ---- */
-.hljs{ background:transparent !important; padding:0 !important; }
-html[data-appearance="dark"] .bubble.md{
-  --md-link:color-mix(in srgb, var(--accent) 42%, var(--txt-strong));
-}
-html[data-appearance="dark"] .bubble.md .katex{ color:var(--txt); }
-html[data-appearance="dark"] .bubble.md a{ color:var(--md-link); }
-html[data-appearance="dark"] .bubble.md :not(pre) > code{
-  background:var(--line-soft); border:1px solid var(--line); color:var(--txt);
-}
-html[data-appearance="dark"] .bubble.md pre{
-  background:var(--line-soft); border-color:var(--line-strong);
-}
-html[data-appearance="dark"] .bubble.md pre code{ color:var(--txt-2); }
-/* ---- 打字机光标 ---- */
-.cursor-blink::after{
-  content:'▍'; animation:blink 1s step-end infinite; color:var(--accent);
-}
-@keyframes blink{ 50%{ opacity:0; } }
-/* —— 最后一轮 summary 弱化显示 —— */
-.turn-summary{
-  display:block; font-style:italic; color:var(--muted);
-  font-size:12px; margin-bottom:6px;
-  white-space:nowrap; overflow:hidden; text-overflow:ellipsis;
-}
-/* 历史轮 <summary> 头部的副标题（来自模型 <summary> 抽取） */
-.fold-turn > summary .turn-head-sum{
-  font-style:italic; color:var(--muted); font-weight:normal; margin-left:4px;
-  min-width:0; overflow:hidden; text-overflow:ellipsis;
-}
-
-/* —— ask_user 显眼提醒 —— */
-.ask-user-notice{
-  margin:8px 0 4px;
-  border:1px solid var(--line);
-  border-left:3px solid var(--accent);
-  border-radius:0;
-  background:color-mix(in srgb, var(--accent-bg) 55%, var(--card));
-  padding:10px 12px;
-}
-.ask-user-notice.is-active{
-  border-color:color-mix(in srgb, var(--accent) 28%, var(--line));
-  background:color-mix(in srgb, var(--accent-bg) 72%, var(--card));
-}
-.ask-user-notice.is-answered{
-  opacity:.78;
-  background:var(--card);
-  border-color:var(--line);
-  border-left-color:var(--muted2);
-}
-.ask-user-banner{
-  display:flex; align-items:baseline; flex-wrap:wrap;
-  gap:4px 6px;
-  margin-bottom:8px;
-  line-height:1.35;
-}
-.ask-user-banner-text{
-  font-size:13px; font-weight:600;
-  color:var(--txt-strong);
-}
-.ask-user-notice.is-active .ask-user-banner-text{
-  color:var(--accent);
-}
-.ask-user-notice.is-answered .ask-user-banner-text{
-  color:var(--muted);
-}
-.ask-user-banner-sep{
-  color:var(--muted2);
-  font-size:12px; user-select:none;
-}
-.ask-user-banner-hint{
-  font-size:12px; font-weight:400; color:var(--muted);
-}
-.ask-user-body{
-  font-size:14px; line-height:1.55; color:var(--txt);
-  font-weight:500; margin:0;
-}
-.ask-user-body strong{ color:var(--txt-strong); }
-.ask-user-body code{
-  background:rgba(127,127,127,.14);
-  padding:1px 5px; border-radius:4px; font-size:.92em;
-}
-/* 覆盖 .bubble.md ul/ol/p，题干内列表与正文左缘对齐 */
-.bubble.md .ask-user-notice .ask-user-body p{
-  margin:0 0 4px;
-}
-.bubble.md .ask-user-notice .ask-user-body p:last-child{
-  margin-bottom:0;
-}
-.bubble.md .ask-user-notice .ask-user-body p.ask-option-line{
-  padding-left:1.25em;
-  margin:0;
-  font-weight:400;
-}
-.bubble.md .ask-user-notice .ask-user-body span.ask-option-line{
-  display:block;
-  padding-left:1.25em;
-  margin:0;
-  font-weight:400;
-  line-height:1.55;
-}
-.bubble.md .ask-user-notice .ask-user-body ul,
-.bubble.md .ask-user-notice .ask-user-body ol{
-  margin:4px 0 0; padding:0; list-style:none;
-}
-.bubble.md .ask-user-notice .ask-user-body ul > li,
-.bubble.md .ask-user-notice .ask-user-body ol > li{
-  margin:0; padding:2px 0; padding-left:0;
-}
-.bubble.md .ask-user-notice .ask-user-body ol{
-  counter-reset:ask-ol;
-}
-.bubble.md .ask-user-notice .ask-user-body ol > li{
-  counter-increment:ask-ol;
-  display:block;
-}
-.bubble.md .ask-user-notice .ask-user-body ol > li::before{
-  content:counter(ask-ol) ". ";
-  font-weight:500;
-  color:color-mix(in srgb, var(--txt) 38%, var(--muted));
-}
-.bubble.md .ask-user-notice .ask-user-body ol > li > p{
-  display:inline;
-  margin:0;
-}
-.ask-user-notice.is-active .ask-user-body ol > li::before{
-  color:color-mix(in srgb, var(--accent) 72%, var(--txt));
-}
-.ask-candidates{
-  display:flex; flex-direction:column; gap:0;
-}
-.ask-candidates li{
-  display:block;
-  font-size:14px; line-height:1.55; color:var(--txt);
-}
-.ask-candidate-key{
-  font-weight:500;
-  color:color-mix(in srgb, var(--txt) 38%, var(--muted));
-}
-.ask-user-notice.is-active .ask-candidate-key{
-  color:color-mix(in srgb, var(--accent) 72%, var(--txt));
-}
-.ask-user-notice.is-answered .ask-candidate-key{
-  color:var(--muted2);
-}
-.ask-candidate-label{
-  white-space:pre-wrap; word-break:break-word;
-}
-
-/* —— 消息计时 badge —— */
-.task-elapsed{
-  display:block; font-size:11px; color:var(--muted);
-  line-height:1; min-height:18px;
-  padding:0 6px; margin-bottom:2px;
-  border-radius:var(--radius-sm);
-}
-
-/* ---- Conductor(仅保留与主聊天不同的部分,布局见 .page--chat-ui) ---- */
-#collab-welcome[hidden], .collab-msgs .msgs[hidden],
-.collab-rail[hidden], .collab-prog-stats[hidden],
-.collab-rail-run[hidden], .collab-rail-done[hidden], .collab-rail-issue[hidden]{ display:none !important; }
-/* 顶栏中央:状态栏 + 离线时的刷新图标按钮(取代原本的 banner+重试) */
-.page > .page-top .page-top-center{
-  grid-column:2; display:flex; align-items:center; justify-content:center; gap:6px;
-  min-width:0;
-}
-/* 收尾按钮:跟 .preset-restore 同款 — 白底 + 中性边框, hover 转 accent 色 */
-.collab-retry-btn{
-  width:24px; height:24px;
-  border:1px solid var(--line); background:var(--card); border-radius:4px;
-  opacity:1; color:var(--txt-2);
-}
-.collab-retry-btn:hover{ background:var(--hover-2); color:var(--accent); border-color:var(--accent); opacity:1; }
-.collab-retry-btn svg{ width:14px; height:14px; }
-.collab-retry-btn[hidden]{ display:none !important; }
-.page.page--chat-ui[data-page="collab"] .msg-area.collab-msgs{ overflow:hidden; padding:0; }
-.page.page--chat-ui[data-page="collab"] .collab-scroll{
-  flex:1 1 0; min-height:0; overflow:auto;
-  display:flex; flex-direction:column; align-items:center; justify-content:center; gap:14px;
-  padding:16px;
-}
-.page.page--chat-ui[data-page="collab"] .collab-msgs.has-msgs .collab-scroll{
-  align-items:stretch; justify-content:flex-start;
-}
-.page.page--chat-ui[data-page="collab"] .collab-overlay{
-  position:absolute; inset:0; z-index:10; pointer-events:none;
-}
-.page.page--chat-ui[data-page="collab"] .collab-overlay > .collab-rail,
-.page.page--chat-ui[data-page="collab"] .collab-overlay > .collab-prog-panel{ pointer-events:auto; }
-.page.page--chat-ui[data-page="collab"].dragover .collab-msgs::after{
-  content:attr(data-drop-hint); position:absolute; inset:8px; z-index:20; pointer-events:none;
-  display:flex; align-items:center; justify-content:center; border-radius:var(--radius);
-  border:2px dashed var(--accent); background:color-mix(in srgb, var(--accent) 8%, var(--panel));
-  font-size:13px; color:var(--accent); font-weight:500;
-}
-.collab-rail{
-  position:absolute; left:0; top:50%; z-index:14;
-  transform:translateY(-50%);
-  transition:left .22s ease-out;
-}
-.page.page--chat-ui[data-page="collab"].collab-prog-open .collab-rail{ left:232px; }
-.collab-rail-handle{
-  display:flex; flex-direction:column; align-items:center; justify-content:center; gap:5px;
-  width:22px; padding:10px 3px; cursor:pointer;
-  border:1px solid var(--line); border-left:none;
-  border-radius:0 var(--radius-sm) var(--radius-sm) 0;
-  background:var(--card); color:var(--muted);
-  box-shadow:2px 0 8px rgba(0,0,0,.06);
-  transition:border-color .2s, color .2s, box-shadow .2s;
-}
-.collab-rail-handle:hover{ border-color:var(--line-strong); color:var(--txt-2); box-shadow:2px 0 12px rgba(0,0,0,.1); }
-.collab-rail-grip{
-  width:3px; height:18px; border-radius:2px;
-  background:linear-gradient(180deg, transparent, var(--line-strong) 20%, var(--line-strong) 80%, transparent);
-  opacity:.55;
-}
-.collab-rail-chev{ width:12px; height:12px; flex:0 0 auto; transition:transform .22s ease-out; }
-.page.page--chat-ui[data-page="collab"].collab-prog-open .collab-rail-chev{ transform:rotate(180deg); }
-.collab-rail-badge{
-  display:flex; flex-direction:column; align-items:center; gap:2px;
-  font-size:10px; font-weight:500; line-height:1;
-  font-family:var(--font-num); font-variant-numeric:var(--font-num-variant);
-}
-.collab-rail-badge.pulse{ animation:collab-rail-pulse .55s ease-out; }
-@keyframes collab-rail-pulse{
-  0%{ transform:scale(1); }
-  35%{ transform:scale(1.12); }
-  100%{ transform:scale(1); }
-}
-/* 把手运行数：转圈与呼吸上下分开，转圈内不叠绿点 */
-.collab-rail-spin{
-  display:block;
-  width:12px; height:12px;
-  margin:0 auto;
-  border-radius:50%;
-  background:transparent;
-  border:2px solid color-mix(in srgb, var(--ok) 22%, transparent);
-  border-top-color:var(--ok);
-  animation:collab-rail-spin .8s linear infinite;
-}
-@keyframes collab-rail-spin{ to{ transform:rotate(360deg); } }
-.collab-rail-dot{ width:6px; height:6px; border-radius:50%; background:var(--ok); flex:0 0 auto; }
-.collab-rail-run .n{ color:var(--ok); }
-.collab-rail-done .n{ color:var(--muted); }
-.collab-rail-done .collab-rail-dot{ background:var(--muted2); }
-.collab-rail-issue .n{ color:var(--danger); }
-.collab-rail-dot--danger{ background:var(--danger-dot); }
-.collab-prog-panel{
-  position:absolute; top:0; left:0; bottom:0; width:232px; z-index:12;
-  display:flex; flex-direction:column; overflow:hidden;
-  background:var(--panel); border-right:1px solid var(--line);
-  box-shadow:4px 0 16px rgba(0,0,0,.06);
-  transform:translateX(-100%); transition:transform .22s ease-out;
-  pointer-events:none;
-}
-.page.page--chat-ui[data-page="collab"].collab-prog-open .collab-prog-panel{
-  transform:translateX(0); pointer-events:auto;
-}
-.collab-prog-panel-head{
-  flex:0 0 auto; display:flex; align-items:center; justify-content:space-between; gap:6px;
-  padding:8px 8px 4px 12px;
-  font-size:13px; font-weight:600; color:var(--txt-strong);
-}
-.collab-prog-panel-head .ic-btn{ width:26px; height:26px; }
-.collab-prog-panel-head .ic-btn svg{ width:14px; height:14px; }
-.collab-prog-stats{
-  flex:0 0 auto; display:flex; flex-wrap:wrap; gap:5px;
-  padding:2px 10px 5px;
-}
-.collab-stat{
-  display:inline-flex; align-items:center; gap:4px;
-  font-size:10px; font-weight:500; padding:2px 7px; border-radius:4px;
-  line-height:1.35;
-}
-.collab-stat--running{ color:var(--ok); background:color-mix(in srgb, var(--ok) 10%, var(--panel)); }
-.collab-stat--done{ color:var(--muted); background:color-mix(in srgb, var(--muted) 10%, var(--panel)); }
-.collab-prog-stats .ga-status-breathe--sm{ --breathe-box:8px; }
-.collab-prog-stats .collab-rail-dot{ width:5px; height:5px; }
-.collab-stat--done .collab-rail-dot{ background:var(--muted2); }
-.collab-stat .n{ font-family:var(--font-num); font-variant-numeric:var(--font-num-variant); font-weight:500; font-size:10px; }
-.collab-progress-empty{
-  flex:0 0 auto; font-size:12px; color:var(--muted); line-height:1.35;
-  padding:4px 10px 2px;
-}
-#collab-workers{
-  flex:1 1 0; min-height:0; overflow-y:auto; padding:6px 10px 12px;
-}
-.collab-card{
-  position:relative;
-  border:1px solid var(--line); border-radius:6px; background:var(--card);
-  padding:8px 10px 8px 12px; margin-bottom:6px; border-left:3px solid var(--collab-st, var(--line));
-  box-shadow:0 1px 4px rgba(0,0,0,.04);
-  transition:border-color .3s, box-shadow .3s, transform .2s;
-}
-.collab-card.pulse{ animation:collab-rail-pulse .55s ease-out; }
-.collab-card:hover{ transform:translateY(-1px); box-shadow:0 4px 14px rgba(0,0,0,.07); }
-.collab-card--running{ --collab-st:var(--ok); }
-.collab-card--reported{ --collab-st:var(--muted); }
-.collab-card--paused{ --collab-st:var(--amber); }
-.collab-card--failed{ --collab-st:var(--danger); }
-.collab-card--terminated{ --collab-st:var(--line-strong); }
-.collab-card-st{ display:flex; align-items:center; gap:5px; font-size:11px; color:var(--muted); margin-bottom:4px; flex-wrap:wrap; }
-.collab-dot{ width:7px; height:7px; border-radius:50%; background:var(--collab-st); flex:0 0 auto; }
-.collab-st-ic{ display:inline-flex; align-items:center; justify-content:center; width:14px; height:14px; font-size:10px; font-weight:500; flex:0 0 auto; }
-.collab-st-ic--ok{ color:var(--ok); }
-.collab-st-ic--done{ color:var(--muted); }
-.collab-st-ic--warn{ color:var(--danger); }
-.collab-st-ic--pause,.collab-st-ic--off{ color:var(--muted); }
-.collab-card-time{ margin-left:auto; font-size:10px; color:var(--muted); opacity:.85; }
-.collab-card-title{ font-size:13px; font-weight:500; color:var(--txt-strong); margin-bottom:3px; line-height:1.35; }
-.collab-card-sum{ font-size:11px; color:var(--muted); line-height:1.35; cursor:pointer; }
-.collab-drawer-wrap{ position:fixed; inset:0; z-index:550; display:flex; }
-.collab-drawer-backdrop{ position:absolute; inset:0; background:var(--overlay); }
-.collab-drawer{
-  position:absolute; right:0; top:0; bottom:0; width:min(420px,85vw);
-  background:var(--panel); border-left:1px solid var(--line);
-  box-shadow:var(--shadow-modal); display:flex; flex-direction:column;
-  animation:collabDrawerIn .2s ease-out;
-}
-@keyframes collabDrawerIn{ from{ transform:translateX(100%); } to{ transform:translateX(0); } }
-.collab-drawer-head{
-  display:flex; align-items:center; justify-content:space-between;
-  padding:14px 16px; border-bottom:1px solid var(--line-soft);
-}
-.collab-drawer-title{ font-size:14px; font-weight:600; color:var(--txt-strong); }
-.collab-drawer-body{
-  flex:1; overflow-y:auto; padding:16px; font-size:13px; line-height:1.55; color:var(--txt);
-}
-.collab-drawer-body p,.collab-drawer-body ul,.collab-drawer-body ol,.collab-drawer-body pre{ margin:0 0 .5em; }
-.collab-drawer-body code{ font-size:12px; background:var(--field-bg); padding:1px 4px; border-radius:4px; }
-.collab-drawer-body pre code{ display:block; padding:8px; border-radius:6px; white-space:pre-wrap; }
-.collab-msg-enter{ animation:collab-msg-in .35s ease-out both; }
-.bubble.sys .collab-wait-dots{
-  display:inline-flex; align-items:center; justify-content:center; gap:5px;
-  vertical-align:middle; padding:2px 0;
-}
-.collab-wait-dots i{
-  display:block; width:5px; height:5px; border-radius:50%; background:var(--muted);
-  animation:collab-wait-dot 1.2s ease-in-out infinite; font-style:normal;
-}
-.collab-wait-dots i:nth-child(1){ animation-delay:0s; }
-.collab-wait-dots i:nth-child(2){ animation-delay:.2s; }
-.collab-wait-dots i:nth-child(3){ animation-delay:.4s; }
-@keyframes collab-wait-dot{
-  0%,80%,100%{ opacity:.35; transform:translateY(0); }
-  40%{ opacity:1; transform:translateY(-3px); }
-}
-@keyframes collab-msg-in{
-  from{ opacity:0; transform:translateY(8px); }
-  to{ opacity:1; transform:translateY(0); }
-}
-.collab-guide{ width:100%; max-width:var(--chat-col-w); margin:0 auto; }
-.collab-guide .feature-head{ text-align:center; margin-bottom:22px; }
-.collab-guide .page-title{ font-size:20px; line-height:1.35; margin-bottom:2px; }
-.collab-guide .page-sub{ font-size:13px; line-height:1.55; margin-top:10px; margin-bottom:0; }
-.collab-guide-steps{
-  display:grid; grid-template-columns:repeat(4, minmax(0, 1fr)); gap:48px 56px;
-  margin:0 0 8px; align-items:start;
-}
-.collab-guide-step{
-  display:flex; flex-direction:column; align-items:center; gap:22px;
-  text-align:center; min-height:100%;
-}
-.collab-guide-ic{
-  flex:0 0 auto; width:52px; height:52px; border-radius:14px;
-  display:flex; align-items:center; justify-content:center;
-  background:color-mix(in srgb, var(--accent) 10%, var(--panel));
-  color:var(--accent);
-  border:1px solid color-mix(in srgb, var(--accent) 16%, var(--line));
-}
-.collab-guide-ic svg{ width:24px; height:24px; }
-.collab-guide-txt{ display:flex; flex-direction:column; gap:12px; width:100%; }
-.collab-guide-label{ font-size:14px; font-weight:500; color:var(--txt-strong); line-height:1.35; }
-.collab-guide-desc{ font-size:12px; font-weight:400; font-style:italic; color:var(--muted); line-height:1.55; }
-.collab-nav-badge{
-  margin-left:auto; min-width:18px; height:18px; padding:0 5px; border-radius:999px;
-  background:var(--ok); color:#fff; font-size:10px; font-weight:500; line-height:1; text-align:center;
-}
-.page.page--chat-ui[data-page="collab"] > .chat-shell > .chat-panel > .collab-quick{
-  flex:0 0 auto;
-  display:flex; flex-wrap:wrap; gap:8px;
-}
-@media (max-width:900px){
-  .collab-guide-steps{ grid-template-columns:repeat(2, minmax(0, 1fr)); gap:40px 32px; }
-  .collab-guide-step{ gap:20px; }
-  .page.page--chat-ui[data-page="collab"].collab-prog-open .collab-rail{ left:min(232px, 72vw); }
-  .collab-prog-panel{ width:min(232px, 72vw); }
-}
diff --git a/frontends/desktop/public/vendor/marked.min.js b/frontends/desktop/public/vendor/marked.min.js
deleted file mode 100644
index 4052d1b49..000000000
--- a/frontends/desktop/public/vendor/marked.min.js
+++ /dev/null
@@ -1,6 +0,0 @@
-/**
- * marked v15.0.7 - a markdown parser
- * Copyright (c) 2011-2025, Christopher Jeffrey. (MIT Licensed)
- * https://github.com/markedjs/marked
- */
-!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e||self).marked={})}(this,(function(e){"use strict";function t(){return{async:!1,breaks:!1,extensions:null,gfm:!0,hooks:null,pedantic:!1,renderer:null,silent:!1,tokenizer:null,walkTokens:null}}function n(t){e.defaults=t}e.defaults={async:!1,breaks:!1,extensions:null,gfm:!0,hooks:null,pedantic:!1,renderer:null,silent:!1,tokenizer:null,walkTokens:null};const s={exec:()=>null};function r(e,t=""){let n="string"==typeof e?e:e.source;const s={replace:(e,t)=>{let r="string"==typeof t?t:t.source;return r=r.replace(i.caret,"$1"),n=n.replace(e,r),s},getRegex:()=>new RegExp(n,t)};return s}const i={codeRemoveIndent:/^(?: {1,4}| {0,3}\t)/gm,outputLinkReplace:/\\([\[\]])/g,indentCodeCompensation:/^(\s+)(?:```)/,beginningSpace:/^\s+/,endingHash:/#$/,startingSpaceChar:/^ /,endingSpaceChar:/ $/,nonSpaceChar:/[^ ]/,newLineCharGlobal:/\n/g,tabCharGlobal:/\t/g,multipleSpaceGlobal:/\s+/g,blankLine:/^[ \t]*$/,doubleBlankLine:/\n[ \t]*\n[ \t]*$/,blockquoteStart:/^ {0,3}>/,blockquoteSetextReplace:/\n {0,3}((?:=+|-+) *)(?=\n|$)/g,blockquoteSetextReplace2:/^ {0,3}>[ \t]?/gm,listReplaceTabs:/^\t+/,listReplaceNesting:/^ {1,4}(?=( {4})*[^ ])/g,listIsTask:/^\[[ xX]\] /,listReplaceTask:/^\[[ xX]\] +/,anyLine:/\n.*\n/,hrefBrackets:/^<(.*)>$/,tableDelimiter:/[:|]/,tableAlignChars:/^\||\| *$/g,tableRowBlankLine:/\n[ \t]*$/,tableAlignRight:/^ *-+: *$/,tableAlignCenter:/^ *:-+: *$/,tableAlignLeft:/^ *:-+ *$/,startATag:/^<a /i,endATag:/^<\/a>/i,startPreScriptTag:/^<(pre|code|kbd|script)(\s|>)/i,endPreScriptTag:/^<\/(pre|code|kbd|script)(\s|>)/i,startAngleBracket:/^</,endAngleBracket:/>$/,pedanticHrefTitle:/^([^'"]*[^\s])\s+(['"])(.*)\2/,unicodeAlphaNumeric:/[\p{L}\p{N}]/u,escapeTest:/[&<>"']/,escapeReplace:/[&<>"']/g,escapeTestNoEncode:/[<>"']|&(?!(#\d{1,7}|#[Xx][a-fA-F0-9]{1,6}|\w+);)/,escapeReplaceNoEncode:/[<>"']|&(?!(#\d{1,7}|#[Xx][a-fA-F0-9]{1,6}|\w+);)/g,unescapeTest:/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(?:\w+));?/gi,caret:/(^|[^\[])\^/g,percentDecode:/%25/g,findPipe:/\|/g,splitPipe:/ \|/,slashPipe:/\\\|/g,carriageReturn:/\r\n|\r/g,spaceLine:/^ +$/gm,notSpaceStart:/^\S*/,endingNewline:/\n$/,listItemRegex:e=>new RegExp(`^( {0,3}${e})((?:[\t ][^\\n]*)?(?:\\n|$))`),nextBulletRegex:e=>new RegExp(`^ {0,${Math.min(3,e-1)}}(?:[*+-]|\\d{1,9}[.)])((?:[ \t][^\\n]*)?(?:\\n|$))`),hrRegex:e=>new RegExp(`^ {0,${Math.min(3,e-1)}}((?:- *){3,}|(?:_ *){3,}|(?:\\* *){3,})(?:\\n+|$)`),fencesBeginRegex:e=>new RegExp(`^ {0,${Math.min(3,e-1)}}(?:\`\`\`|~~~)`),headingBeginRegex:e=>new RegExp(`^ {0,${Math.min(3,e-1)}}#`),htmlBeginRegex:e=>new RegExp(`^ {0,${Math.min(3,e-1)}}<(?:[a-z].*>|!--)`,"i")},l=/^ {0,3}((?:-[\t ]*){3,}|(?:_[ \t]*){3,}|(?:\*[ \t]*){3,})(?:\n+|$)/,o=/(?:[*+-]|\d{1,9}[.)])/,a=/^(?!bull |blockCode|fences|blockquote|heading|html|table)((?:.|\n(?!\s*?\n|bull |blockCode|fences|blockquote|heading|html|table))+?)\n {0,3}(=+|-+) *(?:\n+|$)/,c=r(a).replace(/bull/g,o).replace(/blockCode/g,/(?: {4}| {0,3}\t)/).replace(/fences/g,/ {0,3}(?:`{3,}|~{3,})/).replace(/blockquote/g,/ {0,3}>/).replace(/heading/g,/ {0,3}#{1,6}/).replace(/html/g,/ {0,3}<[^\n>]+>\n/).replace(/\|table/g,"").getRegex(),h=r(a).replace(/bull/g,o).replace(/blockCode/g,/(?: {4}| {0,3}\t)/).replace(/fences/g,/ {0,3}(?:`{3,}|~{3,})/).replace(/blockquote/g,/ {0,3}>/).replace(/heading/g,/ {0,3}#{1,6}/).replace(/html/g,/ {0,3}<[^\n>]+>\n/).replace(/table/g,/ {0,3}\|?(?:[:\- ]*\|)+[\:\- ]*\n/).getRegex(),p=/^([^\n]+(?:\n(?!hr|heading|lheading|blockquote|fences|list|html|table| +\n)[^\n]+)*)/,u=/(?!\s*\])(?:\\.|[^\[\]\\])+/,g=r(/^ {0,3}\[(label)\]: *(?:\n[ \t]*)?([^<\s][^\s]*|<.*?>)(?:(?: +(?:\n[ \t]*)?| *\n[ \t]*)(title))? *(?:\n+|$)/).replace("label",u).replace("title",/(?:"(?:\\"?|[^"\\])*"|'[^'\n]*(?:\n[^'\n]+)*\n?'|\([^()]*\))/).getRegex(),k=r(/^( {0,3}bull)([ \t][^\n]+?)?(?:\n|$)/).replace(/bull/g,o).getRegex(),d="address|article|aside|base|basefont|blockquote|body|caption|center|col|colgroup|dd|details|dialog|dir|div|dl|dt|fieldset|figcaption|figure|footer|form|frame|frameset|h[1-6]|head|header|hr|html|iframe|legend|li|link|main|menu|menuitem|meta|nav|noframes|ol|optgroup|option|p|param|search|section|summary|table|tbody|td|tfoot|th|thead|title|tr|track|ul",f=/<!--(?:-?>|[\s\S]*?(?:-->|$))/,x=r("^ {0,3}(?:<(script|pre|style|textarea)[\\s>][\\s\\S]*?(?:</\\1>[^\\n]*\\n+|$)|comment[^\\n]*(\\n+|$)|<\\?[\\s\\S]*?(?:\\?>\\n*|$)|<![A-Z][\\s\\S]*?(?:>\\n*|$)|<!\\[CDATA\\[[\\s\\S]*?(?:\\]\\]>\\n*|$)|</?(tag)(?: +|\\n|/?>)[\\s\\S]*?(?:(?:\\n[ \t]*)+\\n|$)|<(?!script|pre|style|textarea)([a-z][\\w-]*)(?:attribute)*? */?>(?=[ \\t]*(?:\\n|$))[\\s\\S]*?(?:(?:\\n[ \t]*)+\\n|$)|</(?!script|pre|style|textarea)[a-z][\\w-]*\\s*>(?=[ \\t]*(?:\\n|$))[\\s\\S]*?(?:(?:\\n[ \t]*)+\\n|$))","i").replace("comment",f).replace("tag",d).replace("attribute",/ +[a-zA-Z:_][\w.:-]*(?: *= *"[^"\n]*"| *= *'[^'\n]*'| *= *[^\s"'=<>`]+)?/).getRegex(),b=r(p).replace("hr",l).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("|lheading","").replace("|table","").replace("blockquote"," {0,3}>").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~{3,})[^\\n]*\\n").replace("list"," {0,3}(?:[*+-]|1[.)]) ").replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",d).getRegex(),w={blockquote:r(/^( {0,3}> ?(paragraph|[^\n]*)(?:\n|$))+/).replace("paragraph",b).getRegex(),code:/^((?: {4}| {0,3}\t)[^\n]+(?:\n(?:[ \t]*(?:\n|$))*)?)+/,def:g,fences:/^ {0,3}(`{3,}(?=[^`\n]*(?:\n|$))|~{3,})([^\n]*)(?:\n|$)(?:|([\s\S]*?)(?:\n|$))(?: {0,3}\1[~`]* *(?=\n|$)|$)/,heading:/^ {0,3}(#{1,6})(?=\s|$)(.*)(?:\n+|$)/,hr:l,html:x,lheading:c,list:k,newline:/^(?:[ \t]*(?:\n|$))+/,paragraph:b,table:s,text:/^[^\n]+/},m=r("^ *([^\\n ].*)\\n {0,3}((?:\\| *)?:?-+:? *(?:\\| *:?-+:? *)*(?:\\| *)?)(?:\\n((?:(?! *\\n|hr|heading|blockquote|code|fences|list|html).*(?:\\n|$))*)\\n*|$)").replace("hr",l).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("blockquote"," {0,3}>").replace("code","(?: {4}| {0,3}\t)[^\\n]").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~{3,})[^\\n]*\\n").replace("list"," {0,3}(?:[*+-]|1[.)]) ").replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",d).getRegex(),y={...w,lheading:h,table:m,paragraph:r(p).replace("hr",l).replace("heading"," {0,3}#{1,6}(?:\\s|$)").replace("|lheading","").replace("table",m).replace("blockquote"," {0,3}>").replace("fences"," {0,3}(?:`{3,}(?=[^`\\n]*\\n)|~{3,})[^\\n]*\\n").replace("list"," {0,3}(?:[*+-]|1[.)]) ").replace("html","</?(?:tag)(?: +|\\n|/?>)|<(?:script|pre|style|textarea|!--)").replace("tag",d).getRegex()},$={...w,html:r("^ *(?:comment *(?:\\n|\\s*$)|<(tag)[\\s\\S]+?</\\1> *(?:\\n{2,}|\\s*$)|<tag(?:\"[^\"]*\"|'[^']*'|\\s[^'\"/>\\s]*)*?/?> *(?:\\n{2,}|\\s*$))").replace("comment",f).replace(/tag/g,"(?!(?:a|em|strong|small|s|cite|q|dfn|abbr|data|time|code|var|samp|kbd|sub|sup|i|b|u|mark|ruby|rt|rp|bdi|bdo|span|br|wbr|ins|del|img)\\b)\\w+(?!:|[^\\w\\s@]*@)\\b").getRegex(),def:/^ *\[([^\]]+)\]: *<?([^\s>]+)>?(?: +(["(][^\n]+[")]))? *(?:\n+|$)/,heading:/^(#{1,6})(.*)(?:\n+|$)/,fences:s,lheading:/^(.+?)\n {0,3}(=+|-+) *(?:\n+|$)/,paragraph:r(p).replace("hr",l).replace("heading"," *#{1,6} *[^\n]").replace("lheading",c).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},R=/^( {2,}|\\)\n(?!\s*$)/,S=/[\p{P}\p{S}]/u,T=/[\s\p{P}\p{S}]/u,z=/[^\s\p{P}\p{S}]/u,A=r(/^((?![*_])punctSpace)/,"u").replace(/punctSpace/g,T).getRegex(),_=/(?!~)[\p{P}\p{S}]/u,P=/^(?:\*+(?:((?!\*)punct)|[^\s*]))|^_+(?:((?!_)punct)|([^\s_]))/,I=r(P,"u").replace(/punct/g,S).getRegex(),L=r(P,"u").replace(/punct/g,_).getRegex(),B="^[^_*]*?__[^_*]*?\\*[^_*]*?(?=__)|[^*]+(?=[^*])|(?!\\*)punct(\\*+)(?=[\\s]|$)|notPunctSpace(\\*+)(?!\\*)(?=punctSpace|$)|(?!\\*)punctSpace(\\*+)(?=notPunctSpace)|[\\s](\\*+)(?!\\*)(?=punct)|(?!\\*)punct(\\*+)(?!\\*)(?=punct)|notPunctSpace(\\*+)(?=notPunctSpace)",C=r(B,"gu").replace(/notPunctSpace/g,z).replace(/punctSpace/g,T).replace(/punct/g,S).getRegex(),q=r(B,"gu").replace(/notPunctSpace/g,/(?:[^\s\p{P}\p{S}]|~)/u).replace(/punctSpace/g,/(?!~)[\s\p{P}\p{S}]/u).replace(/punct/g,_).getRegex(),E=r("^[^_*]*?\\*\\*[^_*]*?_[^_*]*?(?=\\*\\*)|[^_]+(?=[^_])|(?!_)punct(_+)(?=[\\s]|$)|notPunctSpace(_+)(?!_)(?=punctSpace|$)|(?!_)punctSpace(_+)(?=notPunctSpace)|[\\s](_+)(?!_)(?=punct)|(?!_)punct(_+)(?!_)(?=punct)","gu").replace(/notPunctSpace/g,z).replace(/punctSpace/g,T).replace(/punct/g,S).getRegex(),Z=r(/\\(punct)/,"gu").replace(/punct/g,S).getRegex(),v=r(/^<(scheme:[^\s\x00-\x1f<>]*|email)>/).replace("scheme",/[a-zA-Z][a-zA-Z0-9+.-]{1,31}/).replace("email",/[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+(@)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(?:\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)+(?![-_])/).getRegex(),D=r(f).replace("(?:--\x3e|$)","--\x3e").getRegex(),M=r("^comment|^</[a-zA-Z][\\w:-]*\\s*>|^<[a-zA-Z][\\w-]*(?:attribute)*?\\s*/?>|^<\\?[\\s\\S]*?\\?>|^<![a-zA-Z]+\\s[\\s\\S]*?>|^<!\\[CDATA\\[[\\s\\S]*?\\]\\]>").replace("comment",D).replace("attribute",/\s+[a-zA-Z:_][\w.:-]*(?:\s*=\s*"[^"]*"|\s*=\s*'[^']*'|\s*=\s*[^\s"'=<>`]+)?/).getRegex(),O=/(?:\[(?:\\.|[^\[\]\\])*\]|\\.|`[^`]*`|[^\[\]\\`])*?/,Q=r(/^!?\[(label)\]\(\s*(href)(?:\s+(title))?\s*\)/).replace("label",O).replace("href",/<(?:\\.|[^\n<>\\])+>|[^\s\x00-\x1f]*/).replace("title",/"(?:\\"?|[^"\\])*"|'(?:\\'?|[^'\\])*'|\((?:\\\)?|[^)\\])*\)/).getRegex(),j=r(/^!?\[(label)\]\[(ref)\]/).replace("label",O).replace("ref",u).getRegex(),N=r(/^!?\[(ref)\](?:\[\])?/).replace("ref",u).getRegex(),G={_backpedal:s,anyPunctuation:Z,autolink:v,blockSkip:/\[[^[\]]*?\]\((?:\\.|[^\\\(\)]|\((?:\\.|[^\\\(\)])*\))*\)|`[^`]*?`|<[^<>]*?>/g,br:R,code:/^(`+)([^`]|[^`][\s\S]*?[^`])\1(?!`)/,del:s,emStrongLDelim:I,emStrongRDelimAst:C,emStrongRDelimUnd:E,escape:/^\\([!"#$%&'()*+,\-./:;<=>?@\[\]\\^_`{|}~])/,link:Q,nolink:N,punctuation:A,reflink:j,reflinkSearch:r("reflink|nolink(?!\\()","g").replace("reflink",j).replace("nolink",N).getRegex(),tag:M,text:/^(`+|[^`])(?:(?= {2,}\n)|[\s\S]*?(?:(?=[\\<!\[`*_]|\b_|$)|[^ ](?= {2,}\n)))/,url:s},H={...G,link:r(/^!?\[(label)\]\((.*?)\)/).replace("label",O).getRegex(),reflink:r(/^!?\[(label)\]\s*\[([^\]]*)\]/).replace("label",O).getRegex()},X={...G,emStrongRDelimAst:q,emStrongLDelim:L,url:r(/^((?:ftp|https?):\/\/|www\.)(?:[a-zA-Z0-9\-]+\.?)+[^\s<]*|^email/,"i").replace("email",/[A-Za-z0-9._+-]+(@)[a-zA-Z0-9-_]+(?:\.[a-zA-Z0-9-_]*[a-zA-Z0-9])+(?![-_])/).getRegex(),_backpedal:/(?:[^?!.,:;*_'"~()&]+|\([^)]*\)|&(?![a-zA-Z0-9]+;$)|[?!.,:;*_'"~)]+(?!$))+/,del:/^(~~?)(?=[^\s~])((?:\\.|[^\\])*?(?:\\.|[^\s~\\]))\1(?=[^~]|$)/,text:/^([`~]+|[^`~])(?:(?= {2,}\n)|(?=[a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-]+@)|[\s\S]*?(?:(?=[\\<!\[`*~_]|\b_|https?:\/\/|ftp:\/\/|www\.|$)|[^ ](?= {2,}\n)|[^a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-](?=[a-zA-Z0-9.!#$%&'*+\/=?_`{\|}~-]+@)))/},F={...X,br:r(R).replace("{2,}","*").getRegex(),text:r(X.text).replace("\\b_","\\b_| {2,}\\n").replace(/\{2,\}/g,"*").getRegex()},U={normal:w,gfm:y,pedantic:$},J={normal:G,gfm:X,breaks:F,pedantic:H},K={"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"},V=e=>K[e];function W(e,t){if(t){if(i.escapeTest.test(e))return e.replace(i.escapeReplace,V)}else if(i.escapeTestNoEncode.test(e))return e.replace(i.escapeReplaceNoEncode,V);return e}function Y(e){try{e=encodeURI(e).replace(i.percentDecode,"%")}catch{return null}return e}function ee(e,t){const n=e.replace(i.findPipe,((e,t,n)=>{let s=!1,r=t;for(;--r>=0&&"\\"===n[r];)s=!s;return s?"|":" |"})).split(i.splitPipe);let s=0;if(n[0].trim()||n.shift(),n.length>0&&!n.at(-1)?.trim()&&n.pop(),t)if(n.length>t)n.splice(t);else for(;n.length<t;)n.push("");for(;s<n.length;s++)n[s]=n[s].trim().replace(i.slashPipe,"|");return n}function te(e,t,n){const s=e.length;if(0===s)return"";let r=0;for(;r<s;){if(e.charAt(s-r-1)!==t)break;r++}return e.slice(0,s-r)}function ne(e,t,n,s,r){const i=t.href,l=t.title||null,o=e[1].replace(r.other.outputLinkReplace,"$1");if("!"!==e[0].charAt(0)){s.state.inLink=!0;const e={type:"link",raw:n,href:i,title:l,text:o,tokens:s.inlineTokens(o)};return s.state.inLink=!1,e}return{type:"image",raw:n,href:i,title:l,text:o}}class se{options;rules;lexer;constructor(t){this.options=t||e.defaults}space(e){const t=this.rules.block.newline.exec(e);if(t&&t[0].length>0)return{type:"space",raw:t[0]}}code(e){const t=this.rules.block.code.exec(e);if(t){const e=t[0].replace(this.rules.other.codeRemoveIndent,"");return{type:"code",raw:t[0],codeBlockStyle:"indented",text:this.options.pedantic?e:te(e,"\n")}}}fences(e){const t=this.rules.block.fences.exec(e);if(t){const e=t[0],n=function(e,t,n){const s=e.match(n.other.indentCodeCompensation);if(null===s)return t;const r=s[1];return t.split("\n").map((e=>{const t=e.match(n.other.beginningSpace);if(null===t)return e;const[s]=t;return s.length>=r.length?e.slice(r.length):e})).join("\n")}(e,t[3]||"",this.rules);return{type:"code",raw:e,lang:t[2]?t[2].trim().replace(this.rules.inline.anyPunctuation,"$1"):t[2],text:n}}}heading(e){const t=this.rules.block.heading.exec(e);if(t){let e=t[2].trim();if(this.rules.other.endingHash.test(e)){const t=te(e,"#");this.options.pedantic?e=t.trim():t&&!this.rules.other.endingSpaceChar.test(t)||(e=t.trim())}return{type:"heading",raw:t[0],depth:t[1].length,text:e,tokens:this.lexer.inline(e)}}}hr(e){const t=this.rules.block.hr.exec(e);if(t)return{type:"hr",raw:te(t[0],"\n")}}blockquote(e){const t=this.rules.block.blockquote.exec(e);if(t){let e=te(t[0],"\n").split("\n"),n="",s="";const r=[];for(;e.length>0;){let t=!1;const i=[];let l;for(l=0;l<e.length;l++)if(this.rules.other.blockquoteStart.test(e[l]))i.push(e[l]),t=!0;else{if(t)break;i.push(e[l])}e=e.slice(l);const o=i.join("\n"),a=o.replace(this.rules.other.blockquoteSetextReplace,"\n    $1").replace(this.rules.other.blockquoteSetextReplace2,"");n=n?`${n}\n${o}`:o,s=s?`${s}\n${a}`:a;const c=this.lexer.state.top;if(this.lexer.state.top=!0,this.lexer.blockTokens(a,r,!0),this.lexer.state.top=c,0===e.length)break;const h=r.at(-1);if("code"===h?.type)break;if("blockquote"===h?.type){const t=h,i=t.raw+"\n"+e.join("\n"),l=this.blockquote(i);r[r.length-1]=l,n=n.substring(0,n.length-t.raw.length)+l.raw,s=s.substring(0,s.length-t.text.length)+l.text;break}if("list"!==h?.type);else{const t=h,i=t.raw+"\n"+e.join("\n"),l=this.list(i);r[r.length-1]=l,n=n.substring(0,n.length-h.raw.length)+l.raw,s=s.substring(0,s.length-t.raw.length)+l.raw,e=i.substring(r.at(-1).raw.length).split("\n")}}return{type:"blockquote",raw:n,tokens:r,text:s}}}list(e){let t=this.rules.block.list.exec(e);if(t){let n=t[1].trim();const s=n.length>1,r={type:"list",raw:"",ordered:s,start:s?+n.slice(0,-1):"",loose:!1,items:[]};n=s?`\\d{1,9}\\${n.slice(-1)}`:`\\${n}`,this.options.pedantic&&(n=s?n:"[*+-]");const i=this.rules.other.listItemRegex(n);let l=!1;for(;e;){let n=!1,s="",o="";if(!(t=i.exec(e)))break;if(this.rules.block.hr.test(e))break;s=t[0],e=e.substring(s.length);let a=t[2].split("\n",1)[0].replace(this.rules.other.listReplaceTabs,(e=>" ".repeat(3*e.length))),c=e.split("\n",1)[0],h=!a.trim(),p=0;if(this.options.pedantic?(p=2,o=a.trimStart()):h?p=t[1].length+1:(p=t[2].search(this.rules.other.nonSpaceChar),p=p>4?1:p,o=a.slice(p),p+=t[1].length),h&&this.rules.other.blankLine.test(c)&&(s+=c+"\n",e=e.substring(c.length+1),n=!0),!n){const t=this.rules.other.nextBulletRegex(p),n=this.rules.other.hrRegex(p),r=this.rules.other.fencesBeginRegex(p),i=this.rules.other.headingBeginRegex(p),l=this.rules.other.htmlBeginRegex(p);for(;e;){const u=e.split("\n",1)[0];let g;if(c=u,this.options.pedantic?(c=c.replace(this.rules.other.listReplaceNesting,"  "),g=c):g=c.replace(this.rules.other.tabCharGlobal,"    "),r.test(c))break;if(i.test(c))break;if(l.test(c))break;if(t.test(c))break;if(n.test(c))break;if(g.search(this.rules.other.nonSpaceChar)>=p||!c.trim())o+="\n"+g.slice(p);else{if(h)break;if(a.replace(this.rules.other.tabCharGlobal,"    ").search(this.rules.other.nonSpaceChar)>=4)break;if(r.test(a))break;if(i.test(a))break;if(n.test(a))break;o+="\n"+c}h||c.trim()||(h=!0),s+=u+"\n",e=e.substring(u.length+1),a=g.slice(p)}}r.loose||(l?r.loose=!0:this.rules.other.doubleBlankLine.test(s)&&(l=!0));let u,g=null;this.options.gfm&&(g=this.rules.other.listIsTask.exec(o),g&&(u="[ ] "!==g[0],o=o.replace(this.rules.other.listReplaceTask,""))),r.items.push({type:"list_item",raw:s,task:!!g,checked:u,loose:!1,text:o,tokens:[]}),r.raw+=s}const o=r.items.at(-1);if(!o)return;o.raw=o.raw.trimEnd(),o.text=o.text.trimEnd(),r.raw=r.raw.trimEnd();for(let e=0;e<r.items.length;e++)if(this.lexer.state.top=!1,r.items[e].tokens=this.lexer.blockTokens(r.items[e].text,[]),!r.loose){const t=r.items[e].tokens.filter((e=>"space"===e.type)),n=t.length>0&&t.some((e=>this.rules.other.anyLine.test(e.raw)));r.loose=n}if(r.loose)for(let e=0;e<r.items.length;e++)r.items[e].loose=!0;return r}}html(e){const t=this.rules.block.html.exec(e);if(t){return{type:"html",block:!0,raw:t[0],pre:"pre"===t[1]||"script"===t[1]||"style"===t[1],text:t[0]}}}def(e){const t=this.rules.block.def.exec(e);if(t){const e=t[1].toLowerCase().replace(this.rules.other.multipleSpaceGlobal," "),n=t[2]?t[2].replace(this.rules.other.hrefBrackets,"$1").replace(this.rules.inline.anyPunctuation,"$1"):"",s=t[3]?t[3].substring(1,t[3].length-1).replace(this.rules.inline.anyPunctuation,"$1"):t[3];return{type:"def",tag:e,raw:t[0],href:n,title:s}}}table(e){const t=this.rules.block.table.exec(e);if(!t)return;if(!this.rules.other.tableDelimiter.test(t[2]))return;const n=ee(t[1]),s=t[2].replace(this.rules.other.tableAlignChars,"").split("|"),r=t[3]?.trim()?t[3].replace(this.rules.other.tableRowBlankLine,"").split("\n"):[],i={type:"table",raw:t[0],header:[],align:[],rows:[]};if(n.length===s.length){for(const e of s)this.rules.other.tableAlignRight.test(e)?i.align.push("right"):this.rules.other.tableAlignCenter.test(e)?i.align.push("center"):this.rules.other.tableAlignLeft.test(e)?i.align.push("left"):i.align.push(null);for(let e=0;e<n.length;e++)i.header.push({text:n[e],tokens:this.lexer.inline(n[e]),header:!0,align:i.align[e]});for(const e of r)i.rows.push(ee(e,i.header.length).map(((e,t)=>({text:e,tokens:this.lexer.inline(e),header:!1,align:i.align[t]}))));return i}}lheading(e){const t=this.rules.block.lheading.exec(e);if(t)return{type:"heading",raw:t[0],depth:"="===t[2].charAt(0)?1:2,text:t[1],tokens:this.lexer.inline(t[1])}}paragraph(e){const t=this.rules.block.paragraph.exec(e);if(t){const e="\n"===t[1].charAt(t[1].length-1)?t[1].slice(0,-1):t[1];return{type:"paragraph",raw:t[0],text:e,tokens:this.lexer.inline(e)}}}text(e){const t=this.rules.block.text.exec(e);if(t)return{type:"text",raw:t[0],text:t[0],tokens:this.lexer.inline(t[0])}}escape(e){const t=this.rules.inline.escape.exec(e);if(t)return{type:"escape",raw:t[0],text:t[1]}}tag(e){const t=this.rules.inline.tag.exec(e);if(t)return!this.lexer.state.inLink&&this.rules.other.startATag.test(t[0])?this.lexer.state.inLink=!0:this.lexer.state.inLink&&this.rules.other.endATag.test(t[0])&&(this.lexer.state.inLink=!1),!this.lexer.state.inRawBlock&&this.rules.other.startPreScriptTag.test(t[0])?this.lexer.state.inRawBlock=!0:this.lexer.state.inRawBlock&&this.rules.other.endPreScriptTag.test(t[0])&&(this.lexer.state.inRawBlock=!1),{type:"html",raw:t[0],inLink:this.lexer.state.inLink,inRawBlock:this.lexer.state.inRawBlock,block:!1,text:t[0]}}link(e){const t=this.rules.inline.link.exec(e);if(t){const e=t[2].trim();if(!this.options.pedantic&&this.rules.other.startAngleBracket.test(e)){if(!this.rules.other.endAngleBracket.test(e))return;const t=te(e.slice(0,-1),"\\");if((e.length-t.length)%2==0)return}else{const e=function(e,t){if(-1===e.indexOf(t[1]))return-1;let n=0;for(let s=0;s<e.length;s++)if("\\"===e[s])s++;else if(e[s]===t[0])n++;else if(e[s]===t[1]&&(n--,n<0))return s;return-1}(t[2],"()");if(e>-1){const n=(0===t[0].indexOf("!")?5:4)+t[1].length+e;t[2]=t[2].substring(0,e),t[0]=t[0].substring(0,n).trim(),t[3]=""}}let n=t[2],s="";if(this.options.pedantic){const e=this.rules.other.pedanticHrefTitle.exec(n);e&&(n=e[1],s=e[3])}else s=t[3]?t[3].slice(1,-1):"";return n=n.trim(),this.rules.other.startAngleBracket.test(n)&&(n=this.options.pedantic&&!this.rules.other.endAngleBracket.test(e)?n.slice(1):n.slice(1,-1)),ne(t,{href:n?n.replace(this.rules.inline.anyPunctuation,"$1"):n,title:s?s.replace(this.rules.inline.anyPunctuation,"$1"):s},t[0],this.lexer,this.rules)}}reflink(e,t){let n;if((n=this.rules.inline.reflink.exec(e))||(n=this.rules.inline.nolink.exec(e))){const e=t[(n[2]||n[1]).replace(this.rules.other.multipleSpaceGlobal," ").toLowerCase()];if(!e){const e=n[0].charAt(0);return{type:"text",raw:e,text:e}}return ne(n,e,n[0],this.lexer,this.rules)}}emStrong(e,t,n=""){let s=this.rules.inline.emStrongLDelim.exec(e);if(!s)return;if(s[3]&&n.match(this.rules.other.unicodeAlphaNumeric))return;if(!(s[1]||s[2]||"")||!n||this.rules.inline.punctuation.exec(n)){const n=[...s[0]].length-1;let r,i,l=n,o=0;const a="*"===s[0][0]?this.rules.inline.emStrongRDelimAst:this.rules.inline.emStrongRDelimUnd;for(a.lastIndex=0,t=t.slice(-1*e.length+n);null!=(s=a.exec(t));){if(r=s[1]||s[2]||s[3]||s[4]||s[5]||s[6],!r)continue;if(i=[...r].length,s[3]||s[4]){l+=i;continue}if((s[5]||s[6])&&n%3&&!((n+i)%3)){o+=i;continue}if(l-=i,l>0)continue;i=Math.min(i,i+l+o);const t=[...s[0]][0].length,a=e.slice(0,n+s.index+t+i);if(Math.min(n,i)%2){const e=a.slice(1,-1);return{type:"em",raw:a,text:e,tokens:this.lexer.inlineTokens(e)}}const c=a.slice(2,-2);return{type:"strong",raw:a,text:c,tokens:this.lexer.inlineTokens(c)}}}}codespan(e){const t=this.rules.inline.code.exec(e);if(t){let e=t[2].replace(this.rules.other.newLineCharGlobal," ");const n=this.rules.other.nonSpaceChar.test(e),s=this.rules.other.startingSpaceChar.test(e)&&this.rules.other.endingSpaceChar.test(e);return n&&s&&(e=e.substring(1,e.length-1)),{type:"codespan",raw:t[0],text:e}}}br(e){const t=this.rules.inline.br.exec(e);if(t)return{type:"br",raw:t[0]}}del(e){const t=this.rules.inline.del.exec(e);if(t)return{type:"del",raw:t[0],text:t[2],tokens:this.lexer.inlineTokens(t[2])}}autolink(e){const t=this.rules.inline.autolink.exec(e);if(t){let e,n;return"@"===t[2]?(e=t[1],n="mailto:"+e):(e=t[1],n=e),{type:"link",raw:t[0],text:e,href:n,tokens:[{type:"text",raw:e,text:e}]}}}url(e){let t;if(t=this.rules.inline.url.exec(e)){let e,n;if("@"===t[2])e=t[0],n="mailto:"+e;else{let s;do{s=t[0],t[0]=this.rules.inline._backpedal.exec(t[0])?.[0]??""}while(s!==t[0]);e=t[0],n="www."===t[1]?"http://"+t[0]:t[0]}return{type:"link",raw:t[0],text:e,href:n,tokens:[{type:"text",raw:e,text:e}]}}}inlineText(e){const t=this.rules.inline.text.exec(e);if(t){const e=this.lexer.state.inRawBlock;return{type:"text",raw:t[0],text:t[0],escaped:e}}}}class re{tokens;options;state;tokenizer;inlineQueue;constructor(t){this.tokens=[],this.tokens.links=Object.create(null),this.options=t||e.defaults,this.options.tokenizer=this.options.tokenizer||new se,this.tokenizer=this.options.tokenizer,this.tokenizer.options=this.options,this.tokenizer.lexer=this,this.inlineQueue=[],this.state={inLink:!1,inRawBlock:!1,top:!0};const n={other:i,block:U.normal,inline:J.normal};this.options.pedantic?(n.block=U.pedantic,n.inline=J.pedantic):this.options.gfm&&(n.block=U.gfm,this.options.breaks?n.inline=J.breaks:n.inline=J.gfm),this.tokenizer.rules=n}static get rules(){return{block:U,inline:J}}static lex(e,t){return new re(t).lex(e)}static lexInline(e,t){return new re(t).inlineTokens(e)}lex(e){e=e.replace(i.carriageReturn,"\n"),this.blockTokens(e,this.tokens);for(let e=0;e<this.inlineQueue.length;e++){const t=this.inlineQueue[e];this.inlineTokens(t.src,t.tokens)}return this.inlineQueue=[],this.tokens}blockTokens(e,t=[],n=!1){for(this.options.pedantic&&(e=e.replace(i.tabCharGlobal,"    ").replace(i.spaceLine,""));e;){let s;if(this.options.extensions?.block?.some((n=>!!(s=n.call({lexer:this},e,t))&&(e=e.substring(s.raw.length),t.push(s),!0))))continue;if(s=this.tokenizer.space(e)){e=e.substring(s.raw.length);const n=t.at(-1);1===s.raw.length&&void 0!==n?n.raw+="\n":t.push(s);continue}if(s=this.tokenizer.code(e)){e=e.substring(s.raw.length);const n=t.at(-1);"paragraph"===n?.type||"text"===n?.type?(n.raw+="\n"+s.raw,n.text+="\n"+s.text,this.inlineQueue.at(-1).src=n.text):t.push(s);continue}if(s=this.tokenizer.fences(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.heading(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.hr(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.blockquote(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.list(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.html(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.def(e)){e=e.substring(s.raw.length);const n=t.at(-1);"paragraph"===n?.type||"text"===n?.type?(n.raw+="\n"+s.raw,n.text+="\n"+s.raw,this.inlineQueue.at(-1).src=n.text):this.tokens.links[s.tag]||(this.tokens.links[s.tag]={href:s.href,title:s.title});continue}if(s=this.tokenizer.table(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.lheading(e)){e=e.substring(s.raw.length),t.push(s);continue}let r=e;if(this.options.extensions?.startBlock){let t=1/0;const n=e.slice(1);let s;this.options.extensions.startBlock.forEach((e=>{s=e.call({lexer:this},n),"number"==typeof s&&s>=0&&(t=Math.min(t,s))})),t<1/0&&t>=0&&(r=e.substring(0,t+1))}if(this.state.top&&(s=this.tokenizer.paragraph(r))){const i=t.at(-1);n&&"paragraph"===i?.type?(i.raw+="\n"+s.raw,i.text+="\n"+s.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=i.text):t.push(s),n=r.length!==e.length,e=e.substring(s.raw.length)}else if(s=this.tokenizer.text(e)){e=e.substring(s.raw.length);const n=t.at(-1);"text"===n?.type?(n.raw+="\n"+s.raw,n.text+="\n"+s.text,this.inlineQueue.pop(),this.inlineQueue.at(-1).src=n.text):t.push(s)}else if(e){const t="Infinite loop on byte: "+e.charCodeAt(0);if(this.options.silent){console.error(t);break}throw new Error(t)}}return this.state.top=!0,t}inline(e,t=[]){return this.inlineQueue.push({src:e,tokens:t}),t}inlineTokens(e,t=[]){let n=e,s=null;if(this.tokens.links){const e=Object.keys(this.tokens.links);if(e.length>0)for(;null!=(s=this.tokenizer.rules.inline.reflinkSearch.exec(n));)e.includes(s[0].slice(s[0].lastIndexOf("[")+1,-1))&&(n=n.slice(0,s.index)+"["+"a".repeat(s[0].length-2)+"]"+n.slice(this.tokenizer.rules.inline.reflinkSearch.lastIndex))}for(;null!=(s=this.tokenizer.rules.inline.blockSkip.exec(n));)n=n.slice(0,s.index)+"["+"a".repeat(s[0].length-2)+"]"+n.slice(this.tokenizer.rules.inline.blockSkip.lastIndex);for(;null!=(s=this.tokenizer.rules.inline.anyPunctuation.exec(n));)n=n.slice(0,s.index)+"++"+n.slice(this.tokenizer.rules.inline.anyPunctuation.lastIndex);let r=!1,i="";for(;e;){let s;if(r||(i=""),r=!1,this.options.extensions?.inline?.some((n=>!!(s=n.call({lexer:this},e,t))&&(e=e.substring(s.raw.length),t.push(s),!0))))continue;if(s=this.tokenizer.escape(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.tag(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.link(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.reflink(e,this.tokens.links)){e=e.substring(s.raw.length);const n=t.at(-1);"text"===s.type&&"text"===n?.type?(n.raw+=s.raw,n.text+=s.text):t.push(s);continue}if(s=this.tokenizer.emStrong(e,n,i)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.codespan(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.br(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.del(e)){e=e.substring(s.raw.length),t.push(s);continue}if(s=this.tokenizer.autolink(e)){e=e.substring(s.raw.length),t.push(s);continue}if(!this.state.inLink&&(s=this.tokenizer.url(e))){e=e.substring(s.raw.length),t.push(s);continue}let l=e;if(this.options.extensions?.startInline){let t=1/0;const n=e.slice(1);let s;this.options.extensions.startInline.forEach((e=>{s=e.call({lexer:this},n),"number"==typeof s&&s>=0&&(t=Math.min(t,s))})),t<1/0&&t>=0&&(l=e.substring(0,t+1))}if(s=this.tokenizer.inlineText(l)){e=e.substring(s.raw.length),"_"!==s.raw.slice(-1)&&(i=s.raw.slice(-1)),r=!0;const n=t.at(-1);"text"===n?.type?(n.raw+=s.raw,n.text+=s.text):t.push(s)}else if(e){const t="Infinite loop on byte: "+e.charCodeAt(0);if(this.options.silent){console.error(t);break}throw new Error(t)}}return t}}class ie{options;parser;constructor(t){this.options=t||e.defaults}space(e){return""}code({text:e,lang:t,escaped:n}){const s=(t||"").match(i.notSpaceStart)?.[0],r=e.replace(i.endingNewline,"")+"\n";return s?'<pre><code class="language-'+W(s)+'">'+(n?r:W(r,!0))+"</code></pre>\n":"<pre><code>"+(n?r:W(r,!0))+"</code></pre>\n"}blockquote({tokens:e}){return`<blockquote>\n${this.parser.parse(e)}</blockquote>\n`}html({text:e}){return e}heading({tokens:e,depth:t}){return`<h${t}>${this.parser.parseInline(e)}</h${t}>\n`}hr(e){return"<hr>\n"}list(e){const t=e.ordered,n=e.start;let s="";for(let t=0;t<e.items.length;t++){const n=e.items[t];s+=this.listitem(n)}const r=t?"ol":"ul";return"<"+r+(t&&1!==n?' start="'+n+'"':"")+">\n"+s+"</"+r+">\n"}listitem(e){let t="";if(e.task){const n=this.checkbox({checked:!!e.checked});e.loose?"paragraph"===e.tokens[0]?.type?(e.tokens[0].text=n+" "+e.tokens[0].text,e.tokens[0].tokens&&e.tokens[0].tokens.length>0&&"text"===e.tokens[0].tokens[0].type&&(e.tokens[0].tokens[0].text=n+" "+W(e.tokens[0].tokens[0].text),e.tokens[0].tokens[0].escaped=!0)):e.tokens.unshift({type:"text",raw:n+" ",text:n+" ",escaped:!0}):t+=n+" "}return t+=this.parser.parse(e.tokens,!!e.loose),`<li>${t}</li>\n`}checkbox({checked:e}){return"<input "+(e?'checked="" ':"")+'disabled="" type="checkbox">'}paragraph({tokens:e}){return`<p>${this.parser.parseInline(e)}</p>\n`}table(e){let t="",n="";for(let t=0;t<e.header.length;t++)n+=this.tablecell(e.header[t]);t+=this.tablerow({text:n});let s="";for(let t=0;t<e.rows.length;t++){const r=e.rows[t];n="";for(let e=0;e<r.length;e++)n+=this.tablecell(r[e]);s+=this.tablerow({text:n})}return s&&(s=`<tbody>${s}</tbody>`),"<table>\n<thead>\n"+t+"</thead>\n"+s+"</table>\n"}tablerow({text:e}){return`<tr>\n${e}</tr>\n`}tablecell(e){const t=this.parser.parseInline(e.tokens),n=e.header?"th":"td";return(e.align?`<${n} align="${e.align}">`:`<${n}>`)+t+`</${n}>\n`}strong({tokens:e}){return`<strong>${this.parser.parseInline(e)}</strong>`}em({tokens:e}){return`<em>${this.parser.parseInline(e)}</em>`}codespan({text:e}){return`<code>${W(e,!0)}</code>`}br(e){return"<br>"}del({tokens:e}){return`<del>${this.parser.parseInline(e)}</del>`}link({href:e,title:t,tokens:n}){const s=this.parser.parseInline(n),r=Y(e);if(null===r)return s;let i='<a href="'+(e=r)+'"';return t&&(i+=' title="'+W(t)+'"'),i+=">"+s+"</a>",i}image({href:e,title:t,text:n}){const s=Y(e);if(null===s)return W(n);let r=`<img src="${e=s}" alt="${n}"`;return t&&(r+=` title="${W(t)}"`),r+=">",r}text(e){return"tokens"in e&&e.tokens?this.parser.parseInline(e.tokens):"escaped"in e&&e.escaped?e.text:W(e.text)}}class le{strong({text:e}){return e}em({text:e}){return e}codespan({text:e}){return e}del({text:e}){return e}html({text:e}){return e}text({text:e}){return e}link({text:e}){return""+e}image({text:e}){return""+e}br(){return""}}class oe{options;renderer;textRenderer;constructor(t){this.options=t||e.defaults,this.options.renderer=this.options.renderer||new ie,this.renderer=this.options.renderer,this.renderer.options=this.options,this.renderer.parser=this,this.textRenderer=new le}static parse(e,t){return new oe(t).parse(e)}static parseInline(e,t){return new oe(t).parseInline(e)}parse(e,t=!0){let n="";for(let s=0;s<e.length;s++){const r=e[s];if(this.options.extensions?.renderers?.[r.type]){const e=r,t=this.options.extensions.renderers[e.type].call({parser:this},e);if(!1!==t||!["space","hr","heading","code","table","blockquote","list","html","paragraph","text"].includes(e.type)){n+=t||"";continue}}const i=r;switch(i.type){case"space":n+=this.renderer.space(i);continue;case"hr":n+=this.renderer.hr(i);continue;case"heading":n+=this.renderer.heading(i);continue;case"code":n+=this.renderer.code(i);continue;case"table":n+=this.renderer.table(i);continue;case"blockquote":n+=this.renderer.blockquote(i);continue;case"list":n+=this.renderer.list(i);continue;case"html":n+=this.renderer.html(i);continue;case"paragraph":n+=this.renderer.paragraph(i);continue;case"text":{let r=i,l=this.renderer.text(r);for(;s+1<e.length&&"text"===e[s+1].type;)r=e[++s],l+="\n"+this.renderer.text(r);n+=t?this.renderer.paragraph({type:"paragraph",raw:l,text:l,tokens:[{type:"text",raw:l,text:l,escaped:!0}]}):l;continue}default:{const e='Token with "'+i.type+'" type was not found.';if(this.options.silent)return console.error(e),"";throw new Error(e)}}}return n}parseInline(e,t=this.renderer){let n="";for(let s=0;s<e.length;s++){const r=e[s];if(this.options.extensions?.renderers?.[r.type]){const e=this.options.extensions.renderers[r.type].call({parser:this},r);if(!1!==e||!["escape","html","link","image","strong","em","codespan","br","del","text"].includes(r.type)){n+=e||"";continue}}const i=r;switch(i.type){case"escape":case"text":n+=t.text(i);break;case"html":n+=t.html(i);break;case"link":n+=t.link(i);break;case"image":n+=t.image(i);break;case"strong":n+=t.strong(i);break;case"em":n+=t.em(i);break;case"codespan":n+=t.codespan(i);break;case"br":n+=t.br(i);break;case"del":n+=t.del(i);break;default:{const e='Token with "'+i.type+'" type was not found.';if(this.options.silent)return console.error(e),"";throw new Error(e)}}}return n}}class ae{options;block;constructor(t){this.options=t||e.defaults}static passThroughHooks=new Set(["preprocess","postprocess","processAllTokens"]);preprocess(e){return e}postprocess(e){return e}processAllTokens(e){return e}provideLexer(){return this.block?re.lex:re.lexInline}provideParser(){return this.block?oe.parse:oe.parseInline}}class ce{defaults={async:!1,breaks:!1,extensions:null,gfm:!0,hooks:null,pedantic:!1,renderer:null,silent:!1,tokenizer:null,walkTokens:null};options=this.setOptions;parse=this.parseMarkdown(!0);parseInline=this.parseMarkdown(!1);Parser=oe;Renderer=ie;TextRenderer=le;Lexer=re;Tokenizer=se;Hooks=ae;constructor(...e){this.use(...e)}walkTokens(e,t){let n=[];for(const s of e)switch(n=n.concat(t.call(this,s)),s.type){case"table":{const e=s;for(const s of e.header)n=n.concat(this.walkTokens(s.tokens,t));for(const s of e.rows)for(const e of s)n=n.concat(this.walkTokens(e.tokens,t));break}case"list":{const e=s;n=n.concat(this.walkTokens(e.items,t));break}default:{const e=s;this.defaults.extensions?.childTokens?.[e.type]?this.defaults.extensions.childTokens[e.type].forEach((s=>{const r=e[s].flat(1/0);n=n.concat(this.walkTokens(r,t))})):e.tokens&&(n=n.concat(this.walkTokens(e.tokens,t)))}}return n}use(...e){const t=this.defaults.extensions||{renderers:{},childTokens:{}};return e.forEach((e=>{const n={...e};if(n.async=this.defaults.async||n.async||!1,e.extensions&&(e.extensions.forEach((e=>{if(!e.name)throw new Error("extension name required");if("renderer"in e){const n=t.renderers[e.name];t.renderers[e.name]=n?function(...t){let s=e.renderer.apply(this,t);return!1===s&&(s=n.apply(this,t)),s}:e.renderer}if("tokenizer"in e){if(!e.level||"block"!==e.level&&"inline"!==e.level)throw new Error("extension level must be 'block' or 'inline'");const n=t[e.level];n?n.unshift(e.tokenizer):t[e.level]=[e.tokenizer],e.start&&("block"===e.level?t.startBlock?t.startBlock.push(e.start):t.startBlock=[e.start]:"inline"===e.level&&(t.startInline?t.startInline.push(e.start):t.startInline=[e.start]))}"childTokens"in e&&e.childTokens&&(t.childTokens[e.name]=e.childTokens)})),n.extensions=t),e.renderer){const t=this.defaults.renderer||new ie(this.defaults);for(const n in e.renderer){if(!(n in t))throw new Error(`renderer '${n}' does not exist`);if(["options","parser"].includes(n))continue;const s=n,r=e.renderer[s],i=t[s];t[s]=(...e)=>{let n=r.apply(t,e);return!1===n&&(n=i.apply(t,e)),n||""}}n.renderer=t}if(e.tokenizer){const t=this.defaults.tokenizer||new se(this.defaults);for(const n in e.tokenizer){if(!(n in t))throw new Error(`tokenizer '${n}' does not exist`);if(["options","rules","lexer"].includes(n))continue;const s=n,r=e.tokenizer[s],i=t[s];t[s]=(...e)=>{let n=r.apply(t,e);return!1===n&&(n=i.apply(t,e)),n}}n.tokenizer=t}if(e.hooks){const t=this.defaults.hooks||new ae;for(const n in e.hooks){if(!(n in t))throw new Error(`hook '${n}' does not exist`);if(["options","block"].includes(n))continue;const s=n,r=e.hooks[s],i=t[s];ae.passThroughHooks.has(n)?t[s]=e=>{if(this.defaults.async)return Promise.resolve(r.call(t,e)).then((e=>i.call(t,e)));const n=r.call(t,e);return i.call(t,n)}:t[s]=(...e)=>{let n=r.apply(t,e);return!1===n&&(n=i.apply(t,e)),n}}n.hooks=t}if(e.walkTokens){const t=this.defaults.walkTokens,s=e.walkTokens;n.walkTokens=function(e){let n=[];return n.push(s.call(this,e)),t&&(n=n.concat(t.call(this,e))),n}}this.defaults={...this.defaults,...n}})),this}setOptions(e){return this.defaults={...this.defaults,...e},this}lexer(e,t){return re.lex(e,t??this.defaults)}parser(e,t){return oe.parse(e,t??this.defaults)}parseMarkdown(e){return(t,n)=>{const s={...n},r={...this.defaults,...s},i=this.onError(!!r.silent,!!r.async);if(!0===this.defaults.async&&!1===s.async)return i(new Error("marked(): The async option was set to true by an extension. Remove async: false from the parse options object to return a Promise."));if(null==t)return i(new Error("marked(): input parameter is undefined or null"));if("string"!=typeof t)return i(new Error("marked(): input parameter is of type "+Object.prototype.toString.call(t)+", string expected"));r.hooks&&(r.hooks.options=r,r.hooks.block=e);const l=r.hooks?r.hooks.provideLexer():e?re.lex:re.lexInline,o=r.hooks?r.hooks.provideParser():e?oe.parse:oe.parseInline;if(r.async)return Promise.resolve(r.hooks?r.hooks.preprocess(t):t).then((e=>l(e,r))).then((e=>r.hooks?r.hooks.processAllTokens(e):e)).then((e=>r.walkTokens?Promise.all(this.walkTokens(e,r.walkTokens)).then((()=>e)):e)).then((e=>o(e,r))).then((e=>r.hooks?r.hooks.postprocess(e):e)).catch(i);try{r.hooks&&(t=r.hooks.preprocess(t));let e=l(t,r);r.hooks&&(e=r.hooks.processAllTokens(e)),r.walkTokens&&this.walkTokens(e,r.walkTokens);let n=o(e,r);return r.hooks&&(n=r.hooks.postprocess(n)),n}catch(e){return i(e)}}}onError(e,t){return n=>{if(n.message+="\nPlease report this to https://github.com/markedjs/marked.",e){const e="<p>An error occurred:</p><pre>"+W(n.message+"",!0)+"</pre>";return t?Promise.resolve(e):e}if(t)return Promise.reject(n);throw n}}}const he=new ce;function pe(e,t){return he.parse(e,t)}pe.options=pe.setOptions=function(e){return he.setOptions(e),pe.defaults=he.defaults,n(pe.defaults),pe},pe.getDefaults=t,pe.defaults=e.defaults,pe.use=function(...e){return he.use(...e),pe.defaults=he.defaults,n(pe.defaults),pe},pe.walkTokens=function(e,t){return he.walkTokens(e,t)},pe.parseInline=he.parseInline,pe.Parser=oe,pe.parser=oe.parse,pe.Renderer=ie,pe.TextRenderer=le,pe.Lexer=re,pe.lexer=re.lex,pe.Tokenizer=se,pe.Hooks=ae,pe.parse=pe;const ue=pe.options,ge=pe.setOptions,ke=pe.use,de=pe.walkTokens,fe=pe.parseInline,xe=pe,be=oe.parse,we=re.lex;e.Hooks=ae,e.Lexer=re,e.Marked=ce,e.Parser=oe,e.Renderer=ie,e.TextRenderer=le,e.Tokenizer=se,e.getDefaults=t,e.lexer=we,e.marked=pe,e.options=ue,e.parse=xe,e.parseInline=fe,e.parser=be,e.setOptions=ge,e.use=ke,e.walkTokens=de}));
diff --git a/frontends/desktop/scripts/assert-dist-built.mjs b/frontends/desktop/scripts/assert-dist-built.mjs
index b7046a5dd..34ad4debb 100644
--- a/frontends/desktop/scripts/assert-dist-built.mjs
+++ b/frontends/desktop/scripts/assert-dist-built.mjs
@@ -15,6 +15,10 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import {
+  REMOVED_LEGACY_REACT_PUBLIC_ASSETS,
+  REQUIRED_REACT_PUBLIC_ASSETS,
+} from './react-public-assets.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const DESKTOP_ROOT = path.resolve(__dirname, '..');
@@ -30,17 +34,28 @@ export function checkDistBuilt(distDir) {
 
   // React v2 public assets are an independent packaging boundary. The upstream static v1 tree is
   // deliberately not read here; its zero-diff invariant is enforced against the PR base in CI.
-  for (const publicAsset of ['fallback.html', 'i18n.js', 'styles.css']) {
+  for (const publicAsset of REQUIRED_REACT_PUBLIC_ASSETS) {
     const sourcePath = path.join(DESKTOP_ROOT, 'public', publicAsset);
     if (!fs.existsSync(sourcePath) || fs.statSync(sourcePath).size === 0) {
       return { ok: false, error: `public/${publicAsset} is missing or empty` };
     }
   }
+  for (const publicAsset of REMOVED_LEGACY_REACT_PUBLIC_ASSETS) {
+    if (fs.existsSync(path.join(DESKTOP_ROOT, 'public', publicAsset))) {
+      return { ok: false, error: `dead React v2 public asset was restored: public/${publicAsset}` };
+    }
+  }
 
   // 1. dist/ exists
   if (!fs.existsSync(distDir)) {
     return { ok: false, error: `no dist directory at ${distDir}` };
   }
+  for (const publicAsset of REQUIRED_REACT_PUBLIC_ASSETS) {
+    const builtPath = path.join(distDir, publicAsset);
+    if (!fs.existsSync(builtPath) || fs.statSync(builtPath).size === 0) {
+      return { ok: false, error: `${publicAsset} was not copied to dist/` };
+    }
+  }
 
   // 2. index.html exists and non-empty
   const indexPath = path.join(distDir, 'index.html');
@@ -77,6 +92,11 @@ export function checkDistBuilt(distDir) {
       return { ok: false, error: `fallback.html is missing the ${command} recovery contract` };
     }
   }
+  for (const publicAsset of REMOVED_LEGACY_REACT_PUBLIC_ASSETS) {
+    if (fs.existsSync(path.join(distDir, publicAsset))) {
+      return { ok: false, error: `dead React v2 public asset was copied to dist: ${publicAsset}` };
+    }
+  }
 
   // 4. assets/ contains at least one JS bundle
   const assetsDir = path.join(distDir, 'assets');
@@ -147,6 +167,7 @@ if (process.argv[1] && path.resolve(process.argv[1]) === path.resolve(fileURLToP
   console.log(`  ✓ dist/index.html present`);
   console.log(`  ✓ dist/loading.html present`);
   console.log(`  ✓ dual-contract loading and recovery assets are present`);
+  console.log(`  ✓ dead legacy React v2 public assets and fonts are absent`);
   console.log(`  ✓ React bundles contain no Desktop v1 gaLegacy dependency`);
   console.log(`  ✓ ${jsFiles.length} JS bundle(s), ${cssFiles.length} CSS file(s)`);
   console.log(`  ✓ Total assets size: ${(totalSize / 1024).toFixed(0)} KB`);
diff --git a/frontends/desktop/scripts/react-public-assets.mjs b/frontends/desktop/scripts/react-public-assets.mjs
new file mode 100644
index 000000000..835c05b28
--- /dev/null
+++ b/frontends/desktop/scripts/react-public-assets.mjs
@@ -0,0 +1,17 @@
+export const REQUIRED_REACT_PUBLIC_ASSETS = [
+  'fallback.html',
+  'assets/ga-logo.svg',
+];
+
+export const REMOVED_LEGACY_REACT_PUBLIC_ASSETS = [
+  'styles.css',
+  'i18n.js',
+  'phosphor-icons.js',
+  'vendor/marked.min.js',
+  'assets/fonts/fonts.css',
+  'assets/fonts/README.md',
+  'assets/fonts/azonix-wordmark.woff2',
+  'assets/fonts/jetbrains-mono-latin.woff2',
+  'assets/fonts/lexend-latin.woff2',
+  'assets/fonts/noto-sans-latin.woff2',
+];
diff --git a/frontends/desktop/scripts/test-packaging.mjs b/frontends/desktop/scripts/test-packaging.mjs
index b7204e26b..64f487c71 100644
--- a/frontends/desktop/scripts/test-packaging.mjs
+++ b/frontends/desktop/scripts/test-packaging.mjs
@@ -122,6 +122,48 @@ if (!fs.existsSync(scriptsDir)) {
     }
   }
 
+  const powershellScripts = [];
+  const windowsScriptsDir = path.join(scriptsDir, 'windows');
+  if (fs.existsSync(windowsScriptsDir)) {
+    for (const file of fs.readdirSync(windowsScriptsDir)) {
+      if (file.endsWith('.ps1')) powershellScripts.push(path.join(windowsScriptsDir, file));
+    }
+  }
+  let hasPowerShell = true;
+  try {
+    execFileSync('pwsh', ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', '$PSVersionTable.PSVersion.ToString()'], {
+      timeout: 5000,
+      stdio: 'ignore',
+    });
+  } catch (e) {
+    if (e.code === 'ENOENT') {
+      hasPowerShell = false;
+      warn('pwsh is unavailable; PowerShell parser checks were skipped');
+    } else {
+      bad(`pwsh probe failed: ${e.message}`);
+    }
+  }
+  if (hasPowerShell) {
+    for (const script of powershellScripts) {
+      const escapedPath = script.replaceAll("'", "''");
+      const command = [
+        '$tokens = $null',
+        '$errors = $null',
+        `[System.Management.Automation.Language.Parser]::ParseFile('${escapedPath}', [ref]$tokens, [ref]$errors) > $null`,
+        'if ($errors.Count -ne 0) { $errors | ForEach-Object { Write-Error $_ }; exit 1 }',
+      ].join('; ');
+      try {
+        execFileSync('pwsh', ['-NoLogo', '-NoProfile', '-NonInteractive', '-Command', command], {
+          timeout: 5000,
+          stdio: 'pipe',
+        });
+        ok(`syntax OK: ${path.relative(DESKTOP_ROOT, script)}`);
+      } catch (e) {
+        bad(`syntax error: ${path.relative(DESKTOP_ROOT, script)}\n    ${e.stderr?.toString().trim() || e.message}`);
+      }
+    }
+  }
+
   for (const relative of [
     'scripts/post-dmg.sh',
     'e2e/linux/Invoke-LinuxUserJourney.sh',
@@ -137,21 +179,90 @@ if (!fs.existsSync(scriptsDir)) {
   }
 
   for (const relative of [
+    'scripts/gen_ds_store.py',
     'e2e/package/real_package_journey.py',
     'e2e/package/verify_candidate_evidence.py',
   ]) {
     const script = path.join(DESKTOP_ROOT, relative);
     try {
-      execFileSync('python3', [script, '--help'], { timeout: 5000, stdio: 'ignore' });
-      ok(`CLI contract OK: ${relative}`);
+      execFileSync('python3', [
+        '-c',
+        'import ast, pathlib, sys; ast.parse(pathlib.Path(sys.argv[1]).read_text(encoding="utf-8"), filename=sys.argv[1])',
+        script,
+      ], { timeout: 5000, stdio: 'ignore' });
+      ok(`syntax OK: ${relative}`);
     } catch (e) {
-      bad(`CLI contract failed: ${relative}: ${e.message}`);
+      bad(`syntax error: ${relative}: ${e.message}`);
+      continue;
+    }
+    if (relative.startsWith('e2e/')) {
+      try {
+        execFileSync('python3', [script, '--help'], { timeout: 5000, stdio: 'ignore' });
+        ok(`CLI contract OK: ${relative}`);
+      } catch (e) {
+        bad(`CLI contract failed: ${relative}: ${e.message}`);
+      }
     }
   }
 }
 
-// ── 4. Release version consistency ──
-console.log('\n[4] Version consistency');
+// ── 4. Locked package inputs ──
+console.log('\n[4] Locked package inputs');
+
+const runtimeRequirementsPath = path.join(PACKAGING_DIR, 'python-runtime-requirements.txt');
+const dmgRequirementsPath = path.join(PACKAGING_DIR, 'dmg-build-requirements.txt');
+if (!fs.existsSync(runtimeRequirementsPath)) {
+  bad('packaging/python-runtime-requirements.txt is missing');
+} else {
+  const requirements = fs.readFileSync(runtimeRequirementsPath, 'utf8')
+    .split('\n')
+    .map((line) => line.trim())
+    .filter((line) => line && !line.startsWith('#'));
+  const invalid = requirements.filter((line) => !/^[a-z0-9][a-z0-9._-]*==[^\s]+$/i.test(line));
+  if (requirements.length > 20 && invalid.length === 0) {
+    ok(`${requirements.length} runtime requirements use exact versions`);
+  } else {
+    bad(`runtime requirements must be a complete exact lock; invalid: ${invalid.join(', ') || 'too few entries'}`);
+  }
+  const names = new Set(requirements.map((line) => line.split('==', 1)[0].toLowerCase()));
+  for (const name of ['requests', 'beautifulsoup4', 'bottle', 'simple-websocket-server', 'aiohttp', 'psutil', 'fastapi', 'uvicorn', 'websockets', 'pydantic']) {
+    if (names.has(name)) ok(`runtime lock includes ${name}`);
+    else bad(`runtime lock is missing ${name}`);
+  }
+  if (!names.has('setuptools') && !names.has('wheel')) {
+    ok('binary-only runtime wheelhouse excludes setuptools and wheel');
+  } else {
+    bad('binary-only runtime wheelhouse must exclude setuptools and wheel');
+  }
+}
+
+if (!fs.existsSync(dmgRequirementsPath)) {
+  bad('packaging/dmg-build-requirements.txt is missing');
+} else {
+  const requirements = fs.readFileSync(dmgRequirementsPath, 'utf8');
+  const hashes = requirements.match(/--hash=sha256:[0-9a-f]{64}/g) ?? [];
+  if (requirements.includes('ds-store==1.3.3') && requirements.includes('mac-alias==2.2.3') && hashes.length === 2) {
+    ok('DMG build requirements use exact versions and SHA-256 hashes');
+  } else {
+    bad('DMG build requirements are not fully pinned and hash-locked');
+  }
+}
+
+for (const relative of [
+  'scripts/windows/install_windows.ps1',
+  'scripts/linux/install_linux.sh',
+  'scripts/macos/install_macos.sh',
+]) {
+  const content = fs.readFileSync(path.join(PACKAGING_DIR, relative), 'utf8');
+  if (content.includes('requirements.txt') && content.includes('--requirement')) {
+    ok(`offline installer consumes packaged requirements lock: ${relative}`);
+  } else {
+    bad(`offline installer bypasses packaged requirements lock: ${relative}`);
+  }
+}
+
+// ── 5. Release version consistency ──
+console.log('\n[5] Version consistency');
 
 const cargoPath = path.join(TAURI_DIR, 'Cargo.toml');
 const cargoLockPath = path.join(TAURI_DIR, 'Cargo.lock');
diff --git a/frontends/desktop/scripts/verify-ci-contract.mjs b/frontends/desktop/scripts/verify-ci-contract.mjs
index ef90a9b3a..7f815a784 100644
--- a/frontends/desktop/scripts/verify-ci-contract.mjs
+++ b/frontends/desktop/scripts/verify-ci-contract.mjs
@@ -1,6 +1,10 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import {
+  REMOVED_LEGACY_REACT_PUBLIC_ASSETS,
+  REQUIRED_REACT_PUBLIC_ASSETS,
+} from './react-public-assets.mjs';
 
 const scriptDir = path.dirname(fileURLToPath(import.meta.url));
 const desktopRoot = path.resolve(scriptDir, '..');
@@ -93,16 +97,204 @@ for (const workflowPath of workflowPaths) {
 }
 
 const releaseWorkflow = readText('.github/workflows/desktop-release-package.yml', repoRoot);
-for (const job of ['build-windows', 'build-linux', 'build-macos']) {
-  check(new RegExp(`^  ${job}:\\s*$`, 'm').test(releaseWorkflow), `release workflow keeps upstream job: ${job}`);
+function workflowJob(workflow, name) {
+  const header = new RegExp(`^  ${name}:\\s*$`, 'm');
+  const match = header.exec(workflow);
+  if (!match) return '';
+  const remainder = workflow.slice(match.index + match[0].length);
+  const nextJob = /^  [a-zA-Z0-9_-]+:\s*$/m.exec(remainder);
+  return nextJob ? remainder.slice(0, nextJob.index) : remainder;
 }
-const macJobOffset = releaseWorkflow.search(/^  build-macos:\s*$/m);
-const macJobWorkflow = macJobOffset >= 0 ? releaseWorkflow.slice(macJobOffset) : '';
+
+const buildJobs = ['build-windows', 'build-linux', 'build-macos'];
+const releaseJobsSection = releaseWorkflow.slice(releaseWorkflow.search(/^jobs:\s*$/m));
+const releaseJobNames = [...releaseJobsSection.matchAll(/^  ([a-zA-Z0-9_-]+):\s*$/gm)].map((match) => match[1]);
+check(
+  JSON.stringify(releaseJobNames) === JSON.stringify([...buildJobs, 'publish-release']),
+  'release workflow contains only three builders and one publisher',
+);
+const buildJobWorkflows = Object.fromEntries(buildJobs.map((job) => [job, workflowJob(releaseWorkflow, job)]));
+for (const job of buildJobs) {
+  const workflow = buildJobWorkflows[job];
+  check(Boolean(workflow), `release workflow keeps build job: ${job}`);
+  check(
+    /^    permissions:\n      contents: read\s*$/m.test(workflow)
+      && !/^      [a-z-]+:\s+(?:write|read)\s*$/m.test(workflow.replace('      contents: read', '')),
+    `${job} has only contents: read permission`,
+  );
+  check(
+    /uses: actions\/checkout@[0-9a-f]{40}[^\n]*\n        with:\n          persist-credentials: false/.test(workflow),
+    `${job} checkout does not persist credentials`,
+  );
+  check(
+    !workflow.includes('secrets.GITHUB_TOKEN') && !/\bgh release\b/.test(workflow),
+    `${job} neither receives a release token nor publishes`,
+  );
+  check(
+    workflow.includes('npm ci') && !workflow.includes('npm install'),
+    `${job} installs the locked npm graph with npm ci`,
+  );
+  check(
+    workflow.includes("--exclude='./frontends/desktop/dist'")
+      || workflow.includes("--exclude='frontends/desktop/dist'"),
+    `${job} excludes the Tauri-embedded React dist from runtime/app`,
+  );
+  check(
+    workflow.includes('test ! -e "$RUNTIME/app/frontends/desktop/dist"')
+      || workflow.includes('test ! -e "$RUNTIME_SRC/app/frontends/desktop/dist"'),
+    `${job} hard-fails if React dist re-enters runtime/app`,
+  );
+  check(
+    workflow.includes('pip download --only-binary=:all:')
+      && workflow.includes('packaging/python-runtime-requirements.txt'),
+    `${job} downloads the exact binary-only runtime requirement set`,
+  );
+}
+
+check(
+  /^permissions:\n  contents: read\s*$/m.test(releaseWorkflow),
+  'release workflow defaults to contents: read',
+);
+
+const pinnedActionRefs = new Set([
+  'actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd',
+  'actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444',
+  'actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97',
+  'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a',
+  'actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131',
+  'dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c',
+  'Swatinem/rust-cache@63fed3e2fecf6f7b51dc6f043341b79ef82a9ae7',
+]);
+const actionLines = releaseWorkflow.split('\n').filter((line) => /\buses:\s+/.test(line));
+for (const line of actionLines) {
+  const match = line.match(/uses:\s+([^\s#]+)(?:\s+#\s+(.+))?$/);
+  check(
+    Boolean(match && pinnedActionRefs.has(match[1]) && match[2]),
+    `release action is a trusted full-SHA pin with a version/source comment: ${match?.[1] ?? line.trim()}`,
+  );
+}
+for (const actionRef of pinnedActionRefs) {
+  check(releaseWorkflow.includes(actionRef), `release workflow includes pinned action: ${actionRef}`);
+}
+
+check(
+  releaseWorkflow.includes('NODE_VERSION: "22.23.2"')
+    && releaseWorkflow.includes('RUST_TOOLCHAIN: "1.95.0"')
+    && releaseWorkflow.includes('PBS_RELEASE: "20260814"')
+    && releaseWorkflow.includes('PBS_PYTHON_VERSION: "3.12.14"')
+    && !releaseWorkflow.includes('/releases/latest'),
+  'Node, Rust, and python-build-standalone versions are exact and do not use releases/latest',
+);
+for (const digest of [
+  '7330282b47cd43a66b702d39078d2e5a88e580cee351d82f95045f21f5ee042a',
+  '3297691ae34f75fed81ac424e040145fccb0bafe8e581cd5cadbddfa1c0766c0',
+  '4572133a5542f306b9bdb155da5800f9e38950cd0a98d469b832ce256fe299ea',
+]) {
+  check(releaseWorkflow.includes(digest), `release workflow pins PBS SHA-256: ${digest}`);
+}
+
+const runtimeRequirements = readText('packaging/python-runtime-requirements.txt');
+const runtimeRequirementLines = runtimeRequirements
+  .split('\n')
+  .map((line) => line.trim())
+  .filter((line) => line && !line.startsWith('#'));
+check(
+  runtimeRequirementLines.length > 20
+    && runtimeRequirementLines.every((line) => /^[a-z0-9][a-z0-9._-]*==[^\s]+$/i.test(line)),
+  'runtime direct and transitive requirements use exact versions',
+);
+for (const dependency of [
+  'requests',
+  'beautifulsoup4',
+  'bottle',
+  'simple-websocket-server',
+  'aiohttp',
+  'psutil',
+  'fastapi',
+  'uvicorn',
+  'websockets',
+  'pydantic',
+]) {
+  check(
+    runtimeRequirementLines.some((line) => line.startsWith(`${dependency}==`)),
+    `runtime lock includes direct dependency: ${dependency}`,
+  );
+}
+check(
+  !runtimeRequirementLines.some((line) => /^(?:setuptools|wheel)==/i.test(line)),
+  'binary-only recovery wheelhouse omits setuptools and wheel',
+);
+
+const dmgBuildRequirements = readText('packaging/dmg-build-requirements.txt');
+check(
+  dmgBuildRequirements.includes('ds-store==1.3.3')
+    && dmgBuildRequirements.includes('mac-alias==2.2.3')
+    && (dmgBuildRequirements.match(/--hash=sha256:[0-9a-f]{64}/g) ?? []).length === 2,
+  'DMG layout build requirements are exact and hash-locked',
+);
+
+const publisherWorkflow = workflowJob(releaseWorkflow, 'publish-release');
+check(Boolean(publisherWorkflow), 'release workflow has one publisher job');
+check(
+  publisherWorkflow.includes('needs: [build-windows, build-linux, build-macos]')
+    && ['build-windows', 'build-linux', 'build-macos'].every((job) => publisherWorkflow.includes(`needs.${job}.result == 'success'`))
+    && publisherWorkflow.includes("github.event_name == 'push'")
+    && publisherWorkflow.includes("refs/tags/desktop-portable-"),
+  'publisher requires all three successful tag builds and cannot run for workflow_dispatch',
+);
+check(
+  /^    permissions:\n      contents: write\s*$/m.test(publisherWorkflow),
+  'only the publisher receives contents: write',
+);
+check(
+  (releaseWorkflow.match(/^      contents: write\s*$/gm) ?? []).length === 1,
+  'release workflow grants contents: write exactly once',
+);
+check(
+  !/\b(?:npm|pip|cargo|python3?)\b|actions\/checkout@|frontends\/desktop\/scripts\//.test(publisherWorkflow),
+  'publisher does not check out source or run package/build tooling',
+);
+check(
+  (publisherWorkflow.match(/actions\/download-artifact@/g) ?? []).length === 3,
+  'publisher downloads exactly three platform artifacts',
+);
+const expectedReleaseFiles = [
+  'GenericAgent-Desktop-Windows-Portable.zip',
+  'SHA256SUMS-windows.txt',
+  'GenericAgent-Desktop-Linux-Portable.tar.gz',
+  'SHA256SUMS-linux.txt',
+  'GenericAgent-Desktop-macOS-aarch64.dmg',
+  'GenericAgent-Desktop-macOS-aarch64.dmg.sha256',
+];
+for (const filename of expectedReleaseFiles) {
+  check(publisherWorkflow.includes(filename), `publisher expects release file: ${filename}`);
+}
+check(
+  publisherWorkflow.includes('Release staging must contain exactly the six expected files')
+    && (publisherWorkflow.match(/verify_checksum_manifest /g) ?? []).length === 3,
+  'publisher strictly checks the six-file set and all three payload checksums',
+);
+check(
+  (publisherWorkflow.match(/\bgh release create\b/g) ?? []).length === 1
+    && !publisherWorkflow.includes('gh release upload')
+    && publisherWorkflow.includes('--draft')
+    && publisherWorkflow.includes('gh release edit "$TAG_NAME" --draft=false --prerelease'),
+  'publisher creates one draft with all assets, verifies it, then atomically exposes the prerelease',
+);
+
+const macJobWorkflow = buildJobWorkflows['build-macos'];
 const postDmgScript = readText('scripts/post-dmg.sh');
 const macInstallScript = readText('packaging/scripts/macos/install_macos.sh');
 check(
-  macJobWorkflow.includes('python3 -m pip install --break-system-packages ds_store'),
-  'macOS packaging installs the DMG layout dependency',
+  macJobWorkflow.includes('runs-on: macos-15')
+    && macJobWorkflow.includes('test "$(uname -m)" = arm64')
+    && macJobWorkflow.includes('aarch64-apple-darwin-install_only.tar.gz')
+    && !macJobWorkflow.includes('x86_64-apple-darwin'),
+  'macOS packaging uses the explicit arm64 runner and runtime with an architecture assertion',
+);
+check(
+  /pip install --require-hashes --only-binary=:all:\s+--requirement frontends\/desktop\/packaging\/dmg-build-requirements\.txt/.test(macJobWorkflow),
+  'macOS packaging hash-locks the DMG layout dependency',
 );
 check(
   macJobWorkflow.includes('pip install --no-compile --no-index --find-links "$RUNTIME_SRC/wheels"')
@@ -111,9 +303,9 @@ check(
   'macOS packaging omits installed build tools and bytecode caches',
 );
 check(
-  macJobWorkflow.includes('fastapi uvicorn websockets pydantic setuptools wheel')
+  !macJobWorkflow.includes('fastapi uvicorn websockets pydantic setuptools wheel')
     && macJobWorkflow.includes('(\"setuptools\", \"wheel\", \"pkg_resources\")'),
-  'macOS packaging keeps recovery wheels but rejects build-tool runtime imports',
+  'macOS packaging removes build tools from both the recovery wheelhouse and installed runtime',
 );
 check(
   macJobWorkflow.includes('DMG_SITE_PACKAGES="$DMG_APP/Contents/Resources/runtime/python/lib/python3.12/site-packages"')
@@ -125,13 +317,26 @@ check(
 check(
   macInstallScript.includes('export PYTHONDONTWRITEBYTECODE=1')
     && macInstallScript.includes('pip install --no-compile --no-index --find-links "$WHEEL_DIR"')
+    && macInstallScript.includes('--requirement "$locked_requirements"')
     && macInstallScript.includes('pip install --upgrade pip setuptools wheel'),
-  'macOS offline repair is cache-free and keeps build-tool bootstrap online-only',
+  'macOS offline repair consumes the exact lock while online source repair keeps build tools separate',
 );
 check(
-  /bash frontends\/desktop\/scripts\/post-dmg\.sh "artifacts\/macos\/out\/GenericAgent-Desktop-macOS\.dmg"/.test(macJobWorkflow),
+  /bash frontends\/desktop\/scripts\/post-dmg\.sh "artifacts\/macos\/out\/GenericAgent-Desktop-macOS-aarch64\.dmg"/.test(macJobWorkflow),
   'macOS packaging applies the curated Finder layout',
 );
+check(
+  !macJobWorkflow.includes('PORTABLE=')
+    && (macJobWorkflow.match(/codesign --force --deep --sign -/g) ?? []).length === 1
+    && (macJobWorkflow.match(/codesign --verify --deep --strict/g) ?? []).length === 1
+    && !/codesign --verify[^\n]*\|\| true/.test(macJobWorkflow)
+    && macJobWorkflow.includes('Ad-hoc signing only'),
+  'macOS builds only the uploaded DMG and hard-fails ad-hoc signature verification',
+);
+check(
+  publisherWorkflow.includes('neither Developer ID signed nor notarized'),
+  'release notes accurately disclose the macOS signing and notarization status',
+);
 check(
   postDmgScript.includes('Only contains .app + Applications symlink + .DS_Store'),
   'DMG post-processing keeps the curated two-item volume',
@@ -182,10 +387,15 @@ check(
 );
 
 console.log('\n[4] bootstrap and window capability contract');
-for (const relativePath of ['public/fallback.html', 'public/i18n.js', 'public/styles.css']) {
+for (const publicAsset of REQUIRED_REACT_PUBLIC_ASSETS) {
+  const relativePath = `public/${publicAsset}`;
   const absolutePath = path.join(desktopRoot, relativePath);
   check(fs.existsSync(absolutePath) && fs.statSync(absolutePath).size > 0, `${relativePath} is present`);
 }
+for (const publicAsset of REMOVED_LEGACY_REACT_PUBLIC_ASSETS) {
+  const relativePath = `public/${publicAsset}`;
+  check(!fs.existsSync(path.join(desktopRoot, relativePath)), `${relativePath} stays removed from React v2`);
+}
 
 const capability = readJson('src-tauri/capabilities/default.json');
 const permissions = new Set(capability.permissions ?? []);
diff --git a/frontends/desktop/spec/FRONTEND_REFACTOR.md b/frontends/desktop/spec/FRONTEND_REFACTOR.md
index eaed7d1a0..3bce585bc 100644
--- a/frontends/desktop/spec/FRONTEND_REFACTOR.md
+++ b/frontends/desktop/spec/FRONTEND_REFACTOR.md
@@ -36,8 +36,11 @@ React stores/components
 ## 样式与组件
 
 - Semi Design 提供主界面、loading、setup、异常页和确认框组件。
-- `public/styles.css` 是 React 主界面的独立生产样式，不链接 `static/styles.css`。
-- `public/fallback.html` 的自定义 class 统一使用 `.ga-` 前缀，保证独立资源损坏恢复能力。
+- React 主入口从 `src/global.css` 加载全局样式，各组件直接导入自己的 CSS；Vite 将它们编译为
+  `dist/assets/**` 下的带哈希样式包，不加载已移除的 `public/styles.css`，也不链接
+  `static/styles.css`。
+- `public/fallback.html` 自带内联样式和恢复脚本，不依赖 React、Semi、Vite chunk 或上述全局样式；
+  其自定义 class 统一使用 `.ga-` 前缀，保证主资源损坏时仍可独立恢复。
 - 首屏内联骨架只负责避免空白与闪烁，React 挂载后由正式组件接管。
 
 ## 必要验证
diff --git a/frontends/desktop/src-tauri/build.rs b/frontends/desktop/src-tauri/build.rs
index 97ab5de72..2b5d70c5c 100644
--- a/frontends/desktop/src-tauri/build.rs
+++ b/frontends/desktop/src-tauri/build.rs
@@ -1,25 +1,39 @@
 use std::process::Command;
 
+fn git_text(args: &[&str]) -> Option<String> {
+    Command::new("git")
+        .args(args)
+        .output()
+        .ok()
+        .filter(|output| output.status.success())
+        .map(|output| String::from_utf8_lossy(&output.stdout).trim().to_string())
+        .filter(|value| !value.is_empty())
+}
+
 fn main() {
     // Build identity used to decide whether a bridge already holding :14168 belongs to THIS
     // build. commit hash + build timestamp → distinct on every build, even when the human
     // version in tauri.conf.json is unchanged (so same-version re-publishes still take over
     // a stale bridge). The bridge reports this back via GET /services/identity.
-    let commit = Command::new("git")
-        .args(["rev-parse", "--short", "HEAD"])
-        .output()
-        .ok()
-        .filter(|o| o.status.success())
-        .map(|o| String::from_utf8_lossy(&o.stdout).trim().to_string())
-        .filter(|s| !s.is_empty())
-        .unwrap_or_else(|| "nogit".to_string());
+    let source_revision = git_text(&["rev-parse", "HEAD"]).unwrap_or_else(|| "nogit".to_string());
+    let short_revision: String = source_revision.chars().take(12).collect();
     let stamp = std::time::SystemTime::now()
         .duration_since(std::time::UNIX_EPOCH)
         .map(|d| d.as_secs())
         .unwrap_or(0);
-    println!("cargo:rustc-env=GA_BUILD_ID={}-{}", commit, stamp);
-    // Re-run when the checked-out commit changes so the id stays fresh.
-    println!("cargo:rerun-if-changed=../../../.git/HEAD");
+    println!("cargo:rustc-env=GA_BUILD_ID={}-{}", short_revision, stamp);
+    println!("cargo:rustc-env=GA_SOURCE_REVISION={source_revision}");
+    // Watch both HEAD and its resolved branch ref. This works in ordinary
+    // checkouts, detached CI checkouts, and linked worktrees; watching only
+    // `<root>/.git/HEAD` misses branch advances and is invalid in a worktree.
+    if let Some(head_path) = git_text(&["rev-parse", "--git-path", "HEAD"]) {
+        println!("cargo:rerun-if-changed={head_path}");
+    }
+    if let Some(head_ref) = git_text(&["symbolic-ref", "-q", "HEAD"]) {
+        if let Some(ref_path) = git_text(&["rev-parse", "--git-path", &head_ref]) {
+            println!("cargo:rerun-if-changed={ref_path}");
+        }
+    }
 
     tauri_build::build()
 }
diff --git a/frontends/desktop/src-tauri/capabilities/default.json b/frontends/desktop/src-tauri/capabilities/default.json
index cf08e011c..5ae79f0d9 100644
--- a/frontends/desktop/src-tauri/capabilities/default.json
+++ b/frontends/desktop/src-tauri/capabilities/default.json
@@ -1,30 +1,19 @@
 {
   "identifier": "default",
-  "description": "Default capabilities for all windows",
-  "windows": ["main", "setup"],
-  "remote": {
-    "urls": ["http://127.0.0.1:14168", "http://localhost:14168"]
-  },
+  "description": "Least-privilege capabilities for the main application window",
+  "windows": ["main"],
   "permissions": [
-    "core:default",
-    "core:window:default",
-    "core:window:allow-show",
-    "core:window:allow-hide",
-    "core:window:allow-set-focus",
+    "core:event:allow-listen",
+    "core:event:allow-unlisten",
     "core:window:allow-minimize",
     "core:window:allow-toggle-maximize",
     "core:window:allow-close",
-    "core:window:allow-get-all-windows",
-    "core:webview:default",
+    "core:window:allow-start-dragging",
     "allow-start-bridge",
-    "allow-start-bridge-with-config",
     "allow-retry-bootstrap",
     "allow-get-bootstrap-snapshot",
-    "allow-get-config",
-    "allow-discover-python-for-project",
     "allow-export-mykey",
     "allow-pick-directory",
-    "allow-pick-python-interpreter",
     "allow-pick-data-backup-file",
     "allow-pick-data-export-path",
     "allow-reveal-in-file-manager",
@@ -34,7 +23,7 @@
     "allow-clear-ga-source",
     "allow-shortcut-should-ask",
     "allow-shortcut-decide",
-    "core:window:allow-start-dragging",
-    "opener:default"
+    "opener:allow-open-url",
+    "opener:allow-default-urls"
   ]
 }
diff --git a/frontends/desktop/src-tauri/capabilities/setup.json b/frontends/desktop/src-tauri/capabilities/setup.json
new file mode 100644
index 000000000..4e94ab66b
--- /dev/null
+++ b/frontends/desktop/src-tauri/capabilities/setup.json
@@ -0,0 +1,16 @@
+{
+  "identifier": "setup",
+  "description": "Startup-recovery commands for the setup window only",
+  "windows": ["setup"],
+  "permissions": [
+    "core:event:allow-listen",
+    "core:event:allow-unlisten",
+    "allow-start-bridge-with-config",
+    "allow-retry-bootstrap",
+    "allow-get-bootstrap-snapshot",
+    "allow-get-config",
+    "allow-discover-python-for-project",
+    "allow-pick-directory",
+    "allow-pick-python-interpreter"
+  ]
+}
diff --git a/frontends/desktop/src-tauri/src/lib.rs b/frontends/desktop/src-tauri/src/lib.rs
index ea2def975..a77b838af 100644
--- a/frontends/desktop/src-tauri/src/lib.rs
+++ b/frontends/desktop/src-tauri/src/lib.rs
@@ -868,30 +868,251 @@ fn restore_setting(key: &str, value: Option<String>) {
     }
 }
 
+const RUNTIME_MARKER_FILENAME: &str = ".ga-package-runtime.json";
+const RUNTIME_MARKER_SCHEMA: u32 = 1;
+const PRESERVED_RUNTIME_PATHS: [&str; 4] = ["mykey.py", "mykey.json", "memory", "temp"];
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct RuntimePackageMarker {
+    schema: u32,
+    package: String,
+    package_version: String,
+    build_id: String,
+    source_revision: String,
+}
+
+#[derive(Debug, Eq, PartialEq)]
+enum RuntimeCopyStatus {
+    Current,
+    Installed,
+    Refreshed,
+}
+
+fn expected_runtime_marker() -> RuntimePackageMarker {
+    RuntimePackageMarker {
+        schema: RUNTIME_MARKER_SCHEMA,
+        package: env!("CARGO_PKG_NAME").to_string(),
+        package_version: env!("CARGO_PKG_VERSION").to_string(),
+        build_id: env!("GA_BUILD_ID").to_string(),
+        source_revision: env!("GA_SOURCE_REVISION").to_string(),
+    }
+}
+
+fn runtime_marker_path(runtime: &Path) -> PathBuf {
+    runtime.join(RUNTIME_MARKER_FILENAME)
+}
+
+fn read_runtime_marker(runtime: &Path) -> Option<RuntimePackageMarker> {
+    let text = std::fs::read_to_string(runtime_marker_path(runtime)).ok()?;
+    serde_json::from_str(&text).ok()
+}
+
+fn runtime_copy_is_current(runtime: &Path, expected: &RuntimePackageMarker) -> bool {
+    runtime.join("agentmain.py").is_file()
+        && runtime
+            .join("frontends")
+            .join("desktop_bridge.py")
+            .is_file()
+        && read_runtime_marker(runtime).as_ref() == Some(expected)
+}
+
+fn remove_fs_path(path: &Path) -> Result<(), String> {
+    if path.is_symlink() || path.is_file() {
+        std::fs::remove_file(path).map_err(|error| format!("remove {:?}: {error}", path))
+    } else if path.is_dir() {
+        std::fs::remove_dir_all(path).map_err(|error| format!("remove {:?}: {error}", path))
+    } else {
+        Ok(())
+    }
+}
+
 fn copy_dir_replace(src: &Path, dst: &Path) -> Result<(), String> {
+    if src.is_symlink() || !src.is_dir() {
+        return Err(format!("refusing to copy unsafe directory {:?}", src));
+    }
     std::fs::create_dir_all(dst).map_err(|error| format!("create {:?}: {error}", dst))?;
     for entry in std::fs::read_dir(src).map_err(|error| format!("read {:?}: {error}", src))? {
         let entry = entry.map_err(|error| error.to_string())?;
         let source = entry.path();
         let destination = dst.join(entry.file_name());
         let file_type = entry.file_type().map_err(|error| error.to_string())?;
+        if file_type.is_symlink() {
+            return Err(format!("refusing to copy symbolic link {:?}", source));
+        }
         if file_type.is_dir() {
             if destination.exists() && !destination.is_dir() {
-                std::fs::remove_file(&destination)
-                    .map_err(|error| format!("remove {:?}: {error}", destination))?;
+                remove_fs_path(&destination)?;
             }
             copy_dir_replace(&source, &destination)?;
         } else if file_type.is_file() {
+            if destination.exists() && !destination.is_file() {
+                remove_fs_path(&destination)?;
+            }
             if let Some(parent) = destination.parent() {
                 std::fs::create_dir_all(parent).map_err(|error| error.to_string())?;
             }
             std::fs::copy(&source, &destination)
                 .map_err(|error| format!("copy {:?} -> {:?}: {error}", source, destination))?;
+        } else {
+            return Err(format!("refusing to copy special file {:?}", source));
+        }
+    }
+    Ok(())
+}
+
+fn copy_preserved_runtime_data(existing: &Path, staging: &Path) -> Result<(), String> {
+    for relative in PRESERVED_RUNTIME_PATHS {
+        let source = existing.join(relative);
+        if !source.exists() && !source.is_symlink() {
+            continue;
+        }
+        if source.is_symlink() {
+            return Err(format!(
+                "refusing to preserve symbolic-link user data {:?}",
+                source
+            ));
+        }
+        let destination = staging.join(relative);
+        remove_fs_path(&destination)?;
+        if source.is_dir() {
+            copy_dir_replace(&source, &destination)?;
+        } else if source.is_file() {
+            if let Some(parent) = destination.parent() {
+                std::fs::create_dir_all(parent).map_err(|error| error.to_string())?;
+            }
+            std::fs::copy(&source, &destination)
+                .map_err(|error| format!("preserve {:?} -> {:?}: {error}", source, destination))?;
+        } else {
+            return Err(format!("refusing to preserve special file {:?}", source));
         }
     }
     Ok(())
 }
 
+fn unique_runtime_sibling(parent: &Path, label: &str) -> Result<PathBuf, String> {
+    let nanos = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .map(|duration| duration.as_nanos())
+        .unwrap_or(0);
+    for suffix in 0..1000_u32 {
+        let candidate = parent.join(format!(
+            ".app-{label}-{}-{nanos}-{suffix}",
+            std::process::id()
+        ));
+        if !candidate.exists() && !candidate.is_symlink() {
+            return Ok(candidate);
+        }
+    }
+    Err(format!("cannot allocate runtime {label} path"))
+}
+
+fn refresh_runtime_copy_with_activation<F>(
+    source: &Path,
+    destination: &Path,
+    expected: &RuntimePackageMarker,
+    activate: F,
+) -> Result<RuntimeCopyStatus, String>
+where
+    F: FnOnce(&Path, &Path) -> std::io::Result<()>,
+{
+    if runtime_copy_is_current(destination, expected) {
+        return Ok(RuntimeCopyStatus::Current);
+    }
+    if source.is_symlink()
+        || !source.join("agentmain.py").is_file()
+        || !source.join("frontends").join("desktop_bridge.py").is_file()
+    {
+        return Err(format!(
+            "bundled core is incomplete at {}",
+            display_path(source)
+        ));
+    }
+    if destination.is_symlink() || (destination.exists() && !destination.is_dir()) {
+        return Err(format!(
+            "writable runtime is not a safe directory at {}",
+            display_path(destination)
+        ));
+    }
+    let parent = destination
+        .parent()
+        .ok_or_else(|| "writable runtime has no parent directory".to_string())?;
+    std::fs::create_dir_all(parent)
+        .map_err(|error| format!("create writable runtime parent: {error}"))?;
+    let staging = unique_runtime_sibling(parent, "staging")?;
+    std::fs::create_dir(&staging)
+        .map_err(|error| format!("create writable runtime staging dir: {error}"))?;
+
+    let prepare_result = (|| {
+        copy_dir_replace(source, &staging)?;
+        if destination.is_dir() {
+            copy_preserved_runtime_data(destination, &staging)?;
+        }
+        let marker = serde_json::to_string_pretty(expected)
+            .map_err(|error| format!("serialize runtime marker: {error}"))?;
+        std::fs::write(runtime_marker_path(&staging), marker + "\n")
+            .map_err(|error| format!("write runtime marker: {error}"))?;
+        if !runtime_copy_is_current(&staging, expected) {
+            return Err("staged writable runtime failed validation".to_string());
+        }
+        Ok(())
+    })();
+    if let Err(error) = prepare_result {
+        let _ = remove_fs_path(&staging);
+        return Err(error);
+    }
+
+    let existed = destination.is_dir();
+    let rollback = match unique_runtime_sibling(parent, "rollback") {
+        Ok(path) => path,
+        Err(error) => {
+            let _ = remove_fs_path(&staging);
+            return Err(error);
+        }
+    };
+    if existed {
+        if let Err(error) = std::fs::rename(destination, &rollback) {
+            let _ = remove_fs_path(&staging);
+            return Err(format!("backup previous writable runtime: {error}"));
+        }
+    }
+
+    if let Err(error) = activate(&staging, destination) {
+        let _ = remove_fs_path(&staging);
+        if existed {
+            if destination.exists() || destination.is_symlink() {
+                let _ = remove_fs_path(destination);
+            }
+            if let Err(rollback_error) = std::fs::rename(&rollback, destination) {
+                return Err(format!(
+                    "activate writable runtime: {error}; restore previous runtime from {}: {rollback_error}",
+                    display_path(&rollback)
+                ));
+            }
+        }
+        return Err(format!("activate writable runtime: {error}"));
+    }
+
+    if existed {
+        // The activated tree already contains copied user data. This old tree is
+        // retained until activation succeeds, then removed on a best-effort basis.
+        let _ = remove_fs_path(&rollback);
+        Ok(RuntimeCopyStatus::Refreshed)
+    } else {
+        Ok(RuntimeCopyStatus::Installed)
+    }
+}
+
+fn refresh_runtime_copy(
+    source: &Path,
+    destination: &Path,
+    expected: &RuntimePackageMarker,
+) -> Result<RuntimeCopyStatus, String> {
+    refresh_runtime_copy_with_activation(source, destination, expected, |staging, active| {
+        std::fs::rename(staging, active)
+    })
+}
+
 fn builtin_ga_root(project_dir: &str) -> PathBuf {
     #[cfg(target_os = "macos")]
     {
@@ -914,37 +1135,10 @@ fn ensure_builtin_ga_root(project_dir: &str) -> Result<(), String> {
     }
     let source = PathBuf::from(project_dir);
     let destination = builtin_ga_root(project_dir);
-    if same_path(&source, &destination) || destination.join("agentmain.py").exists() {
+    if same_path(&source, &destination) {
         return Ok(());
     }
-    if !source.join("agentmain.py").exists() {
-        return Err(format!(
-            "bundled core is missing at {}",
-            display_path(&source)
-        ));
-    }
-    let parent = destination
-        .parent()
-        .ok_or_else(|| "writable runtime has no parent directory".to_string())?;
-    std::fs::create_dir_all(parent)
-        .map_err(|error| format!("create writable runtime parent: {error}"))?;
-    let staging = parent.join(format!(".app-staging-{}", std::process::id()));
-    if staging.exists() {
-        std::fs::remove_dir_all(&staging)
-            .map_err(|error| format!("remove stale writable runtime staging dir: {error}"))?;
-    }
-    copy_dir_replace(&source, &staging)?;
-    match std::fs::rename(&staging, &destination) {
-        Ok(()) => Ok(()),
-        Err(_error) if destination.join("agentmain.py").exists() => {
-            let _ = std::fs::remove_dir_all(&staging);
-            Ok(())
-        }
-        Err(error) => {
-            let _ = std::fs::remove_dir_all(&staging);
-            Err(format!("activate writable runtime: {error}"))
-        }
-    }
+    refresh_runtime_copy(&source, &destination, &expected_runtime_marker()).map(|_| ())
 }
 
 fn same_path(a: &Path, b: &Path) -> bool {
@@ -2545,4 +2739,247 @@ mod tests {
             PathBuf::from("/home/user/.ga_desktop_settings.json")
         );
     }
+
+    fn runtime_test_root(label: &str) -> PathBuf {
+        let root = std::env::temp_dir().join(format!(
+            "ga-runtime-{label}-{}-{}",
+            std::process::id(),
+            std::time::SystemTime::now()
+                .duration_since(std::time::UNIX_EPOCH)
+                .unwrap()
+                .as_nanos()
+        ));
+        std::fs::create_dir_all(&root).unwrap();
+        root
+    }
+
+    fn seed_package_runtime(root: &Path, agent_text: &str, bridge_text: &str) {
+        std::fs::create_dir_all(root.join("frontends")).unwrap();
+        std::fs::create_dir_all(root.join("memory")).unwrap();
+        std::fs::create_dir_all(root.join("temp")).unwrap();
+        std::fs::write(root.join("agentmain.py"), agent_text).unwrap();
+        std::fs::write(
+            root.join("frontends").join("desktop_bridge.py"),
+            bridge_text,
+        )
+        .unwrap();
+        std::fs::write(root.join("memory").join("package-default.md"), "package").unwrap();
+        std::fs::write(root.join("temp").join("package-cache.txt"), "package").unwrap();
+        std::fs::write(root.join("mykey_template.py"), "# template").unwrap();
+    }
+
+    fn write_runtime_marker(root: &Path, marker: &RuntimePackageMarker) {
+        std::fs::write(
+            runtime_marker_path(root),
+            serde_json::to_string_pretty(marker).unwrap(),
+        )
+        .unwrap();
+    }
+
+    fn runtime_tree_bytes(root: &Path) -> Vec<(PathBuf, Vec<u8>)> {
+        fn collect(root: &Path, folder: &Path, output: &mut Vec<(PathBuf, Vec<u8>)>) {
+            for entry in std::fs::read_dir(folder).unwrap() {
+                let path = entry.unwrap().path();
+                if path.is_dir() {
+                    collect(root, &path, output);
+                } else {
+                    output.push((
+                        path.strip_prefix(root).unwrap().to_path_buf(),
+                        std::fs::read(path).unwrap(),
+                    ));
+                }
+            }
+        }
+
+        let mut output = Vec::new();
+        collect(root, root, &mut output);
+        output.sort_by(|left, right| left.0.cmp(&right.0));
+        output
+    }
+
+    #[test]
+    fn fresh_runtime_install_never_writes_the_packaged_source() {
+        let root = runtime_test_root("fresh-install");
+        let package = root
+            .join("GenericAgent.app")
+            .join("Contents")
+            .join("Resources");
+        let runtime = root.join("application-support").join("app");
+        seed_package_runtime(&package, "packaged agent", "packaged bridge");
+        let package_before = runtime_tree_bytes(&package);
+        let expected = expected_runtime_marker();
+
+        let result = refresh_runtime_copy(&package, &runtime, &expected).unwrap();
+
+        assert_eq!(result, RuntimeCopyStatus::Installed);
+        assert_eq!(runtime_tree_bytes(&package), package_before);
+        assert!(!runtime_marker_path(&package).exists());
+        assert_eq!(read_runtime_marker(&runtime), Some(expected));
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("agentmain.py")).unwrap(),
+            "packaged agent"
+        );
+        std::fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn stale_same_version_runtime_refreshes_package_code_and_preserves_user_data() {
+        let root = runtime_test_root("refresh");
+        let package = root.join("signed-package-app");
+        let runtime = root.join("application-support").join("app");
+        seed_package_runtime(&package, "new agent", "new bridge");
+        seed_package_runtime(&runtime, "old fork agent", "old fork bridge");
+
+        std::fs::write(runtime.join("mykey.py"), "user key").unwrap();
+        std::fs::write(runtime.join("mykey.json"), "user json key").unwrap();
+        std::fs::write(runtime.join("memory").join("user.md"), "remember me").unwrap();
+        std::fs::remove_file(runtime.join("memory").join("package-default.md")).unwrap();
+        let responses = runtime.join("temp").join("model_responses");
+        let sessions = runtime.join("temp").join("desktop_sessions");
+        std::fs::create_dir_all(&responses).unwrap();
+        std::fs::create_dir_all(&sessions).unwrap();
+        std::fs::write(responses.join("response.txt"), "response").unwrap();
+        std::fs::write(sessions.join("sess-one.json"), "session").unwrap();
+        std::fs::write(
+            runtime.join("temp").join("tui_v3_settings.json"),
+            "settings",
+        )
+        .unwrap();
+        std::fs::write(runtime.join("temp").join("token_ledger.jsonl"), "ledger").unwrap();
+        let host_settings = root.join(".ga_desktop_settings.json");
+        std::fs::write(&host_settings, "host settings").unwrap();
+
+        let expected = expected_runtime_marker();
+        let mut old_marker = expected.clone();
+        old_marker.build_id = "old-fork-build".to_string();
+        old_marker.source_revision = "old-fork-source".to_string();
+        write_runtime_marker(&runtime, &old_marker);
+
+        let result = refresh_runtime_copy(&package, &runtime, &expected).unwrap();
+
+        assert_eq!(result, RuntimeCopyStatus::Refreshed);
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("agentmain.py")).unwrap(),
+            "new agent"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("frontends").join("desktop_bridge.py")).unwrap(),
+            "new bridge"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("mykey.py")).unwrap(),
+            "user key"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("mykey.json")).unwrap(),
+            "user json key"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("memory").join("user.md")).unwrap(),
+            "remember me"
+        );
+        assert!(!runtime.join("memory").join("package-default.md").exists());
+        assert_eq!(
+            std::fs::read_to_string(responses.join("response.txt")).unwrap(),
+            "response"
+        );
+        assert_eq!(
+            std::fs::read_to_string(sessions.join("sess-one.json")).unwrap(),
+            "session"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("temp").join("tui_v3_settings.json")).unwrap(),
+            "settings"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("temp").join("token_ledger.jsonl")).unwrap(),
+            "ledger"
+        );
+        assert_eq!(read_runtime_marker(&runtime), Some(expected));
+        assert_eq!(
+            std::fs::read_to_string(&host_settings).unwrap(),
+            "host settings"
+        );
+        assert_eq!(
+            std::fs::read_to_string(package.join("agentmain.py")).unwrap(),
+            "new agent"
+        );
+        assert!(!runtime_marker_path(&package).exists());
+        std::fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn matching_runtime_marker_keeps_hot_start_copy_untouched() {
+        let root = runtime_test_root("current");
+        let package = root.join("signed-package-app");
+        let runtime = root.join("application-support").join("app");
+        seed_package_runtime(&package, "new package bytes", "new package bridge");
+        seed_package_runtime(&runtime, "already active bytes", "already active bridge");
+        let expected = expected_runtime_marker();
+        write_runtime_marker(&runtime, &expected);
+
+        let result = refresh_runtime_copy(&package, &runtime, &expected).unwrap();
+
+        assert_eq!(result, RuntimeCopyStatus::Current);
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("agentmain.py")).unwrap(),
+            "already active bytes"
+        );
+        std::fs::remove_dir_all(root).unwrap();
+    }
+
+    #[test]
+    fn failed_runtime_activation_restores_old_code_marker_and_user_data() {
+        let root = runtime_test_root("rollback");
+        let package = root.join("signed-package-app");
+        let runtime = root.join("application-support").join("app");
+        seed_package_runtime(&package, "new agent", "new bridge");
+        seed_package_runtime(&runtime, "old agent", "old bridge");
+        std::fs::write(runtime.join("mykey.py"), "user key").unwrap();
+        std::fs::write(runtime.join("memory").join("user.md"), "user memory").unwrap();
+        let expected = expected_runtime_marker();
+        let mut old_marker = expected.clone();
+        old_marker.build_id = "old-build".to_string();
+        write_runtime_marker(&runtime, &old_marker);
+
+        let error = refresh_runtime_copy_with_activation(
+            &package,
+            &runtime,
+            &expected,
+            |_staging, _destination| {
+                Err(std::io::Error::new(
+                    std::io::ErrorKind::PermissionDenied,
+                    "simulated activation failure",
+                ))
+            },
+        )
+        .unwrap_err();
+
+        assert!(error.contains("simulated activation failure"));
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("agentmain.py")).unwrap(),
+            "old agent"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("mykey.py")).unwrap(),
+            "user key"
+        );
+        assert_eq!(
+            std::fs::read_to_string(runtime.join("memory").join("user.md")).unwrap(),
+            "user memory"
+        );
+        assert_eq!(read_runtime_marker(&runtime), Some(old_marker));
+        let leftovers = std::fs::read_dir(runtime.parent().unwrap())
+            .unwrap()
+            .filter_map(Result::ok)
+            .filter(|entry| entry.file_name().to_string_lossy().starts_with(".app-"))
+            .count();
+        assert_eq!(leftovers, 0);
+        assert_eq!(
+            std::fs::read_to_string(package.join("agentmain.py")).unwrap(),
+            "new agent"
+        );
+        assert!(!runtime_marker_path(&package).exists());
+        std::fs::remove_dir_all(root).unwrap();
+    }
 }
diff --git a/frontends/desktop/src-tauri/tauri.conf.json b/frontends/desktop/src-tauri/tauri.conf.json
index e37e1f7ee..a2a9f0467 100644
--- a/frontends/desktop/src-tauri/tauri.conf.json
+++ b/frontends/desktop/src-tauri/tauri.conf.json
@@ -11,8 +11,37 @@
   "app": {
     "withGlobalTauri": true,
     "security": {
-      "csp": null,
-      "capabilities": ["default"]
+      "csp": {
+        "default-src": "'self' tauri: asset:",
+        "script-src": "'self'",
+        "style-src": "'self' 'unsafe-inline'",
+        "font-src": "'self' data: asset: http://asset.localhost",
+        "img-src": "'self' data: blob: asset: http://asset.localhost http://127.0.0.1:14168 http://localhost:14168",
+        "media-src": "'self' data: blob: http://127.0.0.1:14168 http://localhost:14168",
+        "connect-src": "'self' ipc: http://ipc.localhost http://127.0.0.1:14168 http://localhost:14168 ws://127.0.0.1:14168 ws://localhost:14168 http://127.0.0.1:8900 http://localhost:8900 ws://127.0.0.1:8900 ws://localhost:8900",
+        "worker-src": "'self' blob:",
+        "object-src": "'none'",
+        "base-uri": "'self'",
+        "form-action": "'none'",
+        "frame-src": "'none'",
+        "frame-ancestors": "'none'"
+      },
+      "devCsp": {
+        "default-src": "'self' tauri: asset: http://localhost:5173",
+        "script-src": "'self' 'unsafe-inline' 'unsafe-eval' http://localhost:5173",
+        "style-src": "'self' 'unsafe-inline' http://localhost:5173",
+        "font-src": "'self' data: asset: http://asset.localhost http://localhost:5173",
+        "img-src": "'self' data: blob: asset: http://asset.localhost http://localhost:5173 http://127.0.0.1:14168 http://localhost:14168",
+        "media-src": "'self' data: blob: http://127.0.0.1:14168 http://localhost:14168",
+        "connect-src": "'self' ipc: http://ipc.localhost http://localhost:5173 ws://localhost:5173 http://127.0.0.1:14168 http://localhost:14168 ws://127.0.0.1:14168 ws://localhost:14168 http://127.0.0.1:8900 http://localhost:8900 ws://127.0.0.1:8900 ws://localhost:8900",
+        "worker-src": "'self' blob:",
+        "object-src": "'none'",
+        "base-uri": "'self'",
+        "form-action": "'none'",
+        "frame-src": "'none'",
+        "frame-ancestors": "'none'"
+      },
+      "capabilities": ["default", "setup"]
     },
     "windows": [
       {
diff --git a/frontends/desktop/src-tauri/tauri.e2e.conf.json b/frontends/desktop/src-tauri/tauri.e2e.conf.json
index efa99192f..0df11198e 100644
--- a/frontends/desktop/src-tauri/tauri.e2e.conf.json
+++ b/frontends/desktop/src-tauri/tauri.e2e.conf.json
@@ -1,8 +1,12 @@
 {
   "app": {
     "security": {
+      "csp": {
+        "connect-src": "'self' ipc: http://ipc.localhost http://127.0.0.1:* ws://127.0.0.1:* http://localhost:14168 ws://localhost:14168 http://127.0.0.1:8900 http://localhost:8900 ws://127.0.0.1:8900 ws://localhost:8900"
+      },
       "capabilities": [
         "default",
+        "setup",
         {
           "identifier": "e2e",
           "description": "Test-only WebdriverIO capability",
diff --git a/frontends/desktop/src/__tests__/external-link-interceptor.test.ts b/frontends/desktop/src/__tests__/external-link-interceptor.test.ts
index ff891b594..2c8cfb121 100644
--- a/frontends/desktop/src/__tests__/external-link-interceptor.test.ts
+++ b/frontends/desktop/src/__tests__/external-link-interceptor.test.ts
@@ -1,38 +1,28 @@
 // @vitest-environment happy-dom
-import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import { describe, it, expect, beforeEach, afterEach, vi, type Mock } from 'vitest';
+import { handleRenderedContentLinkClick } from '../lib/rendered-content-policy';
 
 /**
  * Verifies that the global click delegate in main.tsx intercepts
  * external links and routes them to tauri-plugin-opener.
  */
 describe('external link interceptor', () => {
-  let openUrl: ReturnType<typeof vi.fn>;
+  let openUrl: Mock<(url: string) => void>;
   let cleanup: () => void;
 
   function installInterceptor() {
-    const handler = (e: MouseEvent) => {
-      const anchor = (e.target as HTMLElement).closest('a[href]') as HTMLAnchorElement | null;
-      if (!anchor) return;
-      const href = anchor.href;
-      if (!href || href.startsWith('javascript:')) return;
-      const url = new URL(href, location.href);
-      if (url.origin === location.origin) return;
-      e.preventDefault();
-      (window as any).__TAURI__.opener.openUrl(href);
-    };
+    const handler = (event: MouseEvent) => handleRenderedContentLinkClick(event, (url) => openUrl(url));
     document.addEventListener('click', handler);
     return () => document.removeEventListener('click', handler);
   }
 
   beforeEach(() => {
-    openUrl = vi.fn();
-    (window as any).__TAURI__ = { opener: { openUrl } };
+    openUrl = vi.fn<(url: string) => void>();
     cleanup = installInterceptor();
   });
 
   afterEach(() => {
     cleanup();
-    delete (window as any).__TAURI__;
   });
 
   it('intercepts external http links and calls opener.openUrl', () => {
@@ -63,7 +53,7 @@ describe('external link interceptor', () => {
     document.body.removeChild(a);
   });
 
-  it('does not intercept javascript: links', () => {
+  it('prevents javascript: links without invoking the opener', () => {
     const a = document.createElement('a');
     a.href = 'javascript:void(0)';
     a.textContent = 'Noop';
@@ -72,6 +62,26 @@ describe('external link interceptor', () => {
     const ev = new MouseEvent('click', { bubbles: true, cancelable: true });
     a.dispatchEvent(ev);
 
+    expect(ev.defaultPrevented).toBe(true);
+    expect(openUrl).not.toHaveBeenCalled();
+    document.body.removeChild(a);
+  });
+
+  it.each([
+    'file:///etc/passwd',
+    'data:text/html,<script>alert(1)</script>',
+    'blob:https://example.com/id',
+    '//example.com/protocol-relative',
+    '/relative/path',
+  ])('prevents non-web or non-explicit link %s', (href) => {
+    const a = document.createElement('a');
+    a.setAttribute('href', href);
+    document.body.appendChild(a);
+
+    const ev = new MouseEvent('click', { bubbles: true, cancelable: true });
+    a.dispatchEvent(ev);
+
+    expect(ev.defaultPrevented).toBe(true);
     expect(openUrl).not.toHaveBeenCalled();
     document.body.removeChild(a);
   });
@@ -94,6 +104,19 @@ describe('external link interceptor', () => {
     document.body.removeChild(a);
   });
 
+  it('intercepts KaTeX-style MathML href nodes', () => {
+    const mathLink = document.createElement('mrow');
+    mathLink.setAttribute('href', 'https://example.com/formula');
+    document.body.appendChild(mathLink);
+
+    const ev = new MouseEvent('click', { bubbles: true, cancelable: true });
+    mathLink.dispatchEvent(ev);
+
+    expect(ev.defaultPrevented).toBe(true);
+    expect(openUrl).toHaveBeenCalledWith('https://example.com/formula');
+    document.body.removeChild(mathLink);
+  });
+
   it('ignores clicks on non-anchor elements', () => {
     const div = document.createElement('div');
     div.textContent = 'just a div';
diff --git a/frontends/desktop/src/__tests__/rendered-content-policy.test.ts b/frontends/desktop/src/__tests__/rendered-content-policy.test.ts
new file mode 100644
index 000000000..2a5ce2fbc
--- /dev/null
+++ b/frontends/desktop/src/__tests__/rendered-content-policy.test.ts
@@ -0,0 +1,87 @@
+// @vitest-environment node
+import { describe, expect, it } from 'vitest';
+import katex from 'katex';
+import {
+  normalizeExternalHttpUrl,
+  normalizeMarkdownImageUrl,
+  trustKatexCommand,
+} from '../lib/rendered-content-policy';
+
+describe('rendered content URL policy', () => {
+  it('allows explicit HTTP(S) links and rejects every other link form', () => {
+    expect(normalizeExternalHttpUrl('https://example.com/docs?q=1')).toBe('https://example.com/docs?q=1');
+    expect(normalizeExternalHttpUrl('http://example.com')).toBe('http://example.com/');
+
+    for (const value of [
+      'javascript:alert(1)',
+      'file:///etc/passwd',
+      'data:text/html,<script>alert(1)</script>',
+      'blob:https://example.com/id',
+      '//example.com/path',
+      '/relative/path',
+      'https:\\example.com',
+    ]) {
+      expect(normalizeExternalHttpUrl(value)).toBeNull();
+    }
+  });
+
+  it('blocks remote Markdown images but keeps bounded local image sources', () => {
+    expect(normalizeMarkdownImageUrl('https://tracker.example/pixel.png')).toBeNull();
+    expect(normalizeMarkdownImageUrl('http://127.0.0.1:14168/tracker.png')).toBeNull();
+    expect(normalizeMarkdownImageUrl('//tracker.example/pixel.png')).toBeNull();
+    expect(normalizeMarkdownImageUrl('file:///etc/passwd')).toBeNull();
+    expect(normalizeMarkdownImageUrl('data:image/svg+xml,<svg onload=alert(1)>')).toBeNull();
+    expect(normalizeMarkdownImageUrl('data:text/html,<script>alert(1)</script>')).toBeNull();
+
+    expect(normalizeMarkdownImageUrl('data:image/png;base64,AAAA')).toBe('data:image/png;base64,AAAA');
+    expect(normalizeMarkdownImageUrl('blob:https://app.local/79d8')).toBe('blob:https://app.local/79d8');
+    expect(normalizeMarkdownImageUrl('asset://localhost/tmp/diagram.png')).toBe('asset://localhost/tmp/diagram.png');
+    expect(normalizeMarkdownImageUrl('asset://remote.example/tmp/diagram.png')).toBeNull();
+    expect(normalizeMarkdownImageUrl('http://asset.localhost/tmp/diagram.png')).toBe('http://asset.localhost/tmp/diagram.png');
+    expect(normalizeMarkdownImageUrl('/assets/ga-logo.svg')).toBe('/assets/ga-logo.svg');
+    expect(normalizeMarkdownImageUrl('assets/preview.png?v=1')).toBe('assets/preview.png?v=1');
+    expect(normalizeMarkdownImageUrl('/assets/../fallback.html')).toBeNull();
+    expect(normalizeMarkdownImageUrl('/assets/%2e%2e/fallback.html')).toBeNull();
+  });
+});
+
+describe('KaTeX trust policy', () => {
+  it('keeps ordinary formulas renderable', () => {
+    const html = katex.renderToString('\\frac{1}{n} \\sum_{i=1}^{n} x_i', {
+      throwOnError: true,
+      trust: trustKatexCommand,
+    });
+    expect(html).toContain('katex');
+    expect(html).toContain('frac');
+  });
+
+  it('allows only explicit HTTP(S) href/url commands', () => {
+    expect(trustKatexCommand({ command: '\\href', url: 'https://example.com', protocol: 'https' })).toBe(true);
+    expect(trustKatexCommand({ command: '\\url', url: 'http://example.com', protocol: 'http' })).toBe(true);
+    expect(trustKatexCommand({ command: '\\href', url: 'javascript:alert(1)', protocol: 'javascript' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\href', url: 'file:///etc/passwd', protocol: 'file' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\href', url: 'data:text/html,boom', protocol: 'data' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\href', url: '/relative', protocol: '_relative' })).toBe(false);
+  });
+
+  it('rejects every resource and arbitrary HTML command', () => {
+    expect(trustKatexCommand({ command: '\\includegraphics', url: 'https://example.com/pixel.png', protocol: 'https' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\includegraphics', url: 'data:image/png;base64,AAAA', protocol: 'data' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\htmlStyle', style: 'background:url(https://example.com)' })).toBe(false);
+    expect(trustKatexCommand({ command: '\\htmlClass', class: 'arbitrary' })).toBe(false);
+  });
+
+  it('does not emit dangerous links or external images', () => {
+    const dangerousLink = katex.renderToString('\\href{javascript:alert(1)}{bad}', {
+      throwOnError: false,
+      trust: trustKatexCommand,
+    });
+    const externalImage = katex.renderToString('\\includegraphics{https://example.com/pixel.png}', {
+      throwOnError: false,
+      trust: trustKatexCommand,
+    });
+
+    expect(dangerousLink).not.toMatch(/href=["']javascript:/i);
+    expect(externalImage).not.toContain('<img');
+  });
+});
diff --git a/frontends/desktop/src/__tests__/rendered-content-security.test.tsx b/frontends/desktop/src/__tests__/rendered-content-security.test.tsx
new file mode 100644
index 000000000..efe8e95fc
--- /dev/null
+++ b/frontends/desktop/src/__tests__/rendered-content-security.test.tsx
@@ -0,0 +1,72 @@
+// @vitest-environment happy-dom
+import { cleanup, render, screen } from '@testing-library/react';
+import { afterEach, describe, expect, it } from 'vitest';
+import { MarkdownPart } from '../components/chat/Thread/parts/MarkdownPart';
+import { SummaryPart } from '../components/chat/Thread/parts/SummaryPart';
+
+afterEach(cleanup);
+
+describe('model-authored Markdown rendering boundary', () => {
+  it('does not give remote Markdown images a loadable src', () => {
+    const { container } = render(
+      <>
+        <MarkdownPart content="![tracking pixel](https://tracker.example/pixel.png)" />
+        <SummaryPart content="![summary tracker](http://tracker.example/pixel.png)" />
+      </>,
+    );
+
+    expect(container.querySelector('img')).toBeNull();
+    expect(screen.getByText('tracking pixel').getAttribute('data-slot')).toBe('md-image-blocked');
+    expect(screen.getByText('summary tracker').getAttribute('data-slot')).toBe('md-image-blocked');
+  });
+
+  it('keeps a bounded embedded bitmap image available', () => {
+    render(<MarkdownPart content="![local preview](data:image/png;base64,AAAA)" />);
+
+    const image = screen.getByRole('img', { name: 'local preview' });
+    expect(image.getAttribute('src')).toBe('data:image/png;base64,AAAA');
+    expect(image.getAttribute('loading')).toBe('lazy');
+  });
+
+  it('renders ordinary formulas in Markdown and summaries', () => {
+    const { container } = render(
+      <>
+        <MarkdownPart content={'Pythagoras: $x^2 + y^2 = z^2$'} />
+        <SummaryPart content={'Euler: $e^{i\\pi} + 1 = 0$'} />
+      </>,
+    );
+
+    expect(container.querySelectorAll('.katex')).toHaveLength(2);
+  });
+
+  it('keeps an ordinary HTTPS link actionable and hardened', () => {
+    render(<MarkdownPart content="Read the [documentation](https://example.com/docs)." />);
+
+    const link = screen.getByRole('link', { name: 'documentation' });
+    expect(link.getAttribute('href')).toBe('https://example.com/docs');
+    expect(link.getAttribute('target')).toBe('_blank');
+    expect(link.getAttribute('rel')).toBe('noopener noreferrer');
+  });
+
+  it('allows an explicit HTTPS KaTeX link through the same URL boundary', () => {
+    const { container } = render(
+      <SummaryPart content={'$\\href{https://example.com/formula}{reference}$'} />,
+    );
+
+    const linkedNodes = [...container.querySelectorAll('[href]')];
+    expect(linkedNodes.length).toBeGreaterThan(0);
+    expect(linkedNodes.every((node) => node.getAttribute('href') === 'https://example.com/formula')).toBe(true);
+  });
+
+  it('removes dangerous Markdown links and KaTeX resource commands', () => {
+    const { container } = render(
+      <MarkdownPart
+        content={'[run](javascript:alert(1))\n\n$\\includegraphics{https://tracker.example/pixel.png}$'}
+      />,
+    );
+
+    expect(container.querySelector('a')).toBeNull();
+    expect(container.querySelector('img')).toBeNull();
+    expect(screen.getByText('run').getAttribute('data-slot')).toBe('md-link-blocked');
+  });
+});
diff --git a/frontends/desktop/src/components/chat/Thread/parts/MarkdownPart.tsx b/frontends/desktop/src/components/chat/Thread/parts/MarkdownPart.tsx
index ce951e4bd..74d601249 100644
--- a/frontends/desktop/src/components/chat/Thread/parts/MarkdownPart.tsx
+++ b/frontends/desktop/src/components/chat/Thread/parts/MarkdownPart.tsx
@@ -9,8 +9,13 @@ import { CodeBlock } from './CodeBlock';
 import { DiffLines } from './DiffLines';
 import { SafeMathBlock } from './SafeMath';
 import { HugeTextFallback } from './HugeTextFallback';
+import { SAFE_MARKDOWN_COMPONENTS } from './SafeMarkdownComponents';
 import { useSmoothReveal } from '../../../../hooks/useSmoothReveal';
 import { preprocessMarkdown } from '../../../../lib/markdown-preprocess';
+import {
+  SAFE_KATEX_OPTIONS,
+  renderedContentUrlTransform,
+} from '../../../../lib/rendered-content-policy';
 
 const KATEX_OPTIONS = {
   macros: {
@@ -23,8 +28,7 @@ const KATEX_OPTIONS = {
     '\\norm': '\\left\\lVert #1 \\right\\rVert',
     '\\abs': '\\left\\lvert #1 \\right\\rvert',
   },
-  strict: 'ignore' as const,
-  trust: true,
+  ...SAFE_KATEX_OPTIONS,
   errorColor: 'var(--semi-color-text-2)',
 };
 
@@ -38,6 +42,7 @@ interface Props {
 
 function makeComponents(isStreaming: boolean): Components {
   return {
+    ...SAFE_MARKDOWN_COMPONENTS,
     pre({ children }) {
       return <>{children}</>;
     },
@@ -92,6 +97,7 @@ export const MarkdownPart = memo(function MarkdownPart({ content, isStreaming =
         remarkPlugins={[remarkGfm, remarkMath]}
         rehypePlugins={[[rehypeKatex, KATEX_OPTIONS]]}
         components={components}
+        urlTransform={renderedContentUrlTransform}
       >
         {preprocessMarkdown(deferredText)}
       </ReactMarkdown>
diff --git a/frontends/desktop/src/components/chat/Thread/parts/SafeMarkdownComponents.tsx b/frontends/desktop/src/components/chat/Thread/parts/SafeMarkdownComponents.tsx
new file mode 100644
index 000000000..cbf190676
--- /dev/null
+++ b/frontends/desktop/src/components/chat/Thread/parts/SafeMarkdownComponents.tsx
@@ -0,0 +1,40 @@
+import type { Components } from 'react-markdown';
+import {
+  normalizeExternalHttpUrl,
+  normalizeMarkdownImageUrl,
+} from '../../../../lib/rendered-content-policy';
+
+/** Shared defense-in-depth components for every model-authored Markdown surface. */
+export const SAFE_MARKDOWN_COMPONENTS: Components = {
+  a({ href, children, node: _node, ...props }) {
+    const safeHref = normalizeExternalHttpUrl(href ?? '');
+    if (!safeHref) return <span data-slot="md-link-blocked">{children}</span>;
+
+    return (
+      <a
+        {...props}
+        href={safeHref}
+        target="_blank"
+        rel="noopener noreferrer"
+      >
+        {children}
+      </a>
+    );
+  },
+  img({ src, alt, node: _node, ...props }) {
+    const safeSrc = normalizeMarkdownImageUrl(src ?? '');
+    if (!safeSrc) {
+      return alt ? <span data-slot="md-image-blocked">{alt}</span> : null;
+    }
+
+    return (
+      <img
+        {...props}
+        src={safeSrc}
+        alt={alt ?? ''}
+        loading="lazy"
+        decoding="async"
+      />
+    );
+  },
+};
diff --git a/frontends/desktop/src/components/chat/Thread/parts/SummaryPart.tsx b/frontends/desktop/src/components/chat/Thread/parts/SummaryPart.tsx
index 284a2cd56..690a43c29 100644
--- a/frontends/desktop/src/components/chat/Thread/parts/SummaryPart.tsx
+++ b/frontends/desktop/src/components/chat/Thread/parts/SummaryPart.tsx
@@ -3,11 +3,16 @@ import ReactMarkdown from 'react-markdown';
 import remarkGfm from 'remark-gfm';
 import remarkMath from 'remark-math';
 import rehypeKatex from 'rehype-katex';
+import 'katex/dist/katex.min.css';
+import { SAFE_MARKDOWN_COMPONENTS } from './SafeMarkdownComponents';
 import { preprocessMarkdown } from '../../../../lib/markdown-preprocess';
+import {
+  SAFE_KATEX_OPTIONS,
+  renderedContentUrlTransform,
+} from '../../../../lib/rendered-content-policy';
 
 const KATEX_OPTIONS = {
-  strict: 'ignore' as const,
-  trust: true,
+  ...SAFE_KATEX_OPTIONS,
 };
 
 interface Props {
@@ -20,6 +25,8 @@ export const SummaryPart = memo(function SummaryPart({ content }: Props) {
       <ReactMarkdown
         remarkPlugins={[remarkGfm, remarkMath]}
         rehypePlugins={[[rehypeKatex, KATEX_OPTIONS]]}
+        components={SAFE_MARKDOWN_COMPONENTS}
+        urlTransform={renderedContentUrlTransform}
       >
         {preprocessMarkdown(content)}
       </ReactMarkdown>
diff --git a/frontends/desktop/src/lib/katex-memo.ts b/frontends/desktop/src/lib/katex-memo.ts
index bdd8dafb0..1afd33003 100644
--- a/frontends/desktop/src/lib/katex-memo.ts
+++ b/frontends/desktop/src/lib/katex-memo.ts
@@ -9,6 +9,7 @@
  */
 
 import katex from 'katex';
+import { trustKatexCommand } from './rendered-content-policy';
 
 // ---------------------------------------------------------------------------
 // LRU Cache
@@ -77,7 +78,12 @@ export function renderMathCached(
 
   // Level 1: strict
   try {
-    html = katex.renderToString(value, { displayMode, throwOnError: true, macros });
+    html = katex.renderToString(value, {
+      displayMode,
+      throwOnError: true,
+      macros,
+      trust: trustKatexCommand,
+    });
     cache.set(key, html);
     return html;
   } catch {
@@ -92,6 +98,7 @@ export function renderMathCached(
       strict: 'ignore',
       errorColor,
       macros,
+      trust: trustKatexCommand,
     });
     cache.set(key, html);
     return html;
diff --git a/frontends/desktop/src/lib/rendered-content-policy.ts b/frontends/desktop/src/lib/rendered-content-policy.ts
new file mode 100644
index 000000000..5b71b4fd7
--- /dev/null
+++ b/frontends/desktop/src/lib/rendered-content-policy.ts
@@ -0,0 +1,149 @@
+import type { KatexOptions, TrustContext } from 'katex';
+import type { UrlTransform } from 'react-markdown';
+
+const HTTP_PROTOCOLS = new Set(['http:', 'https:']);
+const KATEX_LINK_COMMANDS = new Set(['\\href', '\\url']);
+const SAFE_DATA_IMAGE = /^data:image\/(?:avif|gif|jpeg|png|webp);base64,[a-z0-9+/]+={0,2}$/i;
+const LOCAL_ASSET_PATH = /^(?:\/|\.\/)?assets\//;
+const ENCODED_PATH_SEPARATOR_OR_DOT = /%(?:2e|2f|5c)/i;
+const CONTROL_CHARACTER = /[\u0000-\u001f\u007f]/;
+
+/**
+ * Only browser-safe external web links are actionable in rendered model output.
+ * Requiring `//` after the scheme also rejects relative and protocol-relative URLs.
+ */
+export function normalizeExternalHttpUrl(value: string): string | null {
+  const candidate = value.trim();
+  if (!/^https?:\/\//i.test(candidate) || CONTROL_CHARACTER.test(candidate)) return null;
+
+  try {
+    const url = new URL(candidate);
+    return HTTP_PROTOCOLS.has(url.protocol) ? url.href : null;
+  } catch {
+    return null;
+  }
+}
+
+function normalizeLocalAssetPath(value: string): string | null {
+  if (
+    !LOCAL_ASSET_PATH.test(value)
+    || value.startsWith('//')
+    || value.includes('\\')
+    || ENCODED_PATH_SEPARATOR_OR_DOT.test(value)
+  ) {
+    return null;
+  }
+
+  try {
+    const url = new URL(value, 'https://genericagent.invalid/');
+    return url.origin === 'https://genericagent.invalid'
+      && url.pathname.startsWith('/assets/')
+      ? value
+      : null;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Markdown images are local-first. Remote HTTP(S) URLs never receive a `src`.
+ * Allowed sources are bounded bitmap data URLs, in-page blob URLs, Tauri asset
+ * protocol URLs, and files under the renderer's own `/assets/` directory.
+ */
+export function normalizeMarkdownImageUrl(value: string): string | null {
+  const candidate = value.trim();
+  if (!candidate || CONTROL_CHARACTER.test(candidate)) return null;
+
+  if (SAFE_DATA_IMAGE.test(candidate)) return candidate;
+  if (/^blob:/i.test(candidate)) {
+    try {
+      return new URL(candidate).protocol === 'blob:' ? candidate : null;
+    } catch {
+      return null;
+    }
+  }
+  if (/^asset:/i.test(candidate)) {
+    try {
+      const url = new URL(candidate);
+      return url.protocol === 'asset:'
+        && (url.hostname === '' || url.hostname === 'localhost')
+        && !url.username
+        && !url.password
+        ? candidate
+        : null;
+    } catch {
+      return null;
+    }
+  }
+
+  // Tauri uses this host form for converted local asset URLs on some platforms.
+  if (/^https?:\/\/asset\.localhost(?:\/|$)/i.test(candidate)) {
+    try {
+      const url = new URL(candidate);
+      return url.hostname === 'asset.localhost' && HTTP_PROTOCOLS.has(url.protocol)
+        ? url.href
+        : null;
+    } catch {
+      return null;
+    }
+  }
+
+  return normalizeLocalAssetPath(candidate);
+}
+
+/** ReactMarkdown applies this policy after remark/rehype plugins have run. */
+export const renderedContentUrlTransform: UrlTransform = (value, key, node) => {
+  if (key === 'href') return normalizeExternalHttpUrl(value) ?? undefined;
+  if (key === 'src' && node.tagName === 'img') return normalizeMarkdownImageUrl(value) ?? undefined;
+  return undefined;
+};
+
+/**
+ * KaTeX may create links, but never images or arbitrary HTML attributes/styles.
+ * Relative URLs and non-HTTP(S) protocols are rejected before markup is emitted.
+ */
+export function trustKatexCommand(context: TrustContext): boolean {
+  if (!KATEX_LINK_COMMANDS.has(context.command) || !('url' in context)) return false;
+  return normalizeExternalHttpUrl(context.url) !== null;
+}
+
+export const SAFE_KATEX_OPTIONS = {
+  strict: 'ignore',
+  trust: trustKatexCommand,
+} satisfies KatexOptions;
+
+export type ExternalUrlOpener = (url: string) => unknown;
+
+/**
+ * Block unsafe link navigation in every renderer. In Tauri, allowed external
+ * links are delegated to the opener plugin instead of navigating the webview.
+ */
+export function handleRenderedContentLinkClick(
+  event: MouseEvent,
+  openExternal?: ExternalUrlOpener,
+): void {
+  const target = event.target;
+  if (!(target instanceof Element)) return;
+
+  // KaTeX emits `href` on both HTML anchors and hidden accessible MathML nodes.
+  const link = target.closest('[href]');
+  if (!link) return;
+
+  const safeUrl = normalizeExternalHttpUrl(link.getAttribute('href') ?? '');
+  if (!safeUrl) {
+    event.preventDefault();
+    return;
+  }
+
+  const destination = new URL(safeUrl);
+  if (!openExternal || destination.origin === location.origin) return;
+
+  event.preventDefault();
+  try {
+    void Promise.resolve(openExternal(safeUrl)).catch((error: unknown) => {
+      console.error('[external-link] opener failed:', error);
+    });
+  } catch (error) {
+    console.error('[external-link] opener failed:', error);
+  }
+}
diff --git a/frontends/desktop/src/main.tsx b/frontends/desktop/src/main.tsx
index b96f03b89..3b12c27ca 100644
--- a/frontends/desktop/src/main.tsx
+++ b/frontends/desktop/src/main.tsx
@@ -2,23 +2,19 @@ import './platform';
 import '@semi-css';
 import './global.css';
 import './stores/bridgeActivity';
+import { handleRenderedContentLinkClick } from './lib/rendered-content-policy';
 
 if (document.documentElement.dataset.appearance === 'dark') {
   document.body.setAttribute('theme-mode', 'dark');
 }
 
-if ((window as any).__TAURI__) {
-  document.addEventListener('click', (e) => {
-    const anchor = (e.target as HTMLElement).closest('a[href]') as HTMLAnchorElement | null;
-    if (!anchor) return;
-    const href = anchor.href;
-    if (!href || href.startsWith('javascript:')) return;
-    const url = new URL(href, location.href);
-    if (url.origin === location.origin) return;
-    e.preventDefault();
-    (window as any).__TAURI__.opener.openUrl(href);
-  });
-}
+document.addEventListener('click', (event) => {
+  const opener = (window as any).__TAURI__?.opener;
+  handleRenderedContentLinkClick(
+    event,
+    typeof opener?.openUrl === 'function' ? (url) => opener.openUrl(url) : undefined,
+  );
+});
 
 setTimeout(() => {
   document.body.classList.remove('no-transition');
diff --git a/frontends/desktop_bridge.py b/frontends/desktop_bridge.py
index d0dc4a6c7..6855f600e 100644
--- a/frontends/desktop_bridge.py
+++ b/frontends/desktop_bridge.py
@@ -2233,7 +2233,7 @@ async def mykey_save_handler(request):
 
 
 def _import_memory_from(source_dir: str, ga_root: str) -> dict:
-    """Compatibility wrapper for add-only data import."""
+    """Compatibility wrapper for the transactional Desktop data import."""
     return merge_data_files(source_dir, ga_root)
 
 
@@ -2251,8 +2251,22 @@ async def memory_import_inspect_handler(request):
 
 def _import_data_source(source_path: str) -> dict:
     with materialize_import_source(source_path) as source_root:
-        result = _import_memory_from(str(source_root), manager.ga_root)
-        result.update(manager.import_sessions(str(source_root)))
+        with manager.lock:
+            existing_session_ids = set(manager.sessions)
+        result = merge_data_files(
+            str(source_root),
+            manager.ga_root,
+            existing_session_ids=existing_session_ids,
+            session_preparer=manager._session_from_item,
+        )
+        prepared_sessions = result.pop("_preparedSessions", [])
+        if prepared_sessions:
+            # Files are already committed atomically by merge_data_files. Adopt the
+            # prevalidated objects without a second persistence pass that could
+            # partially fail or overwrite an existing Desktop session.
+            with manager.lock:
+                for session in prepared_sessions:
+                    manager.sessions.setdefault(session.id, session)
         return result
 
 
@@ -2260,7 +2274,7 @@ async def memory_import_handler(request):
     data = await read_json(request)
     source_path = str(data.get("sourcePath") or data.get("sourceDir") or "").strip()
     if not source_path:
-        return json_ok({"ok": False, "error": "missing_sourcePath"}, status=400)
+        return json_ok({"ok": False, "error": "missing_sourceDir"}, status=400)
     try:
         result = await asyncio.to_thread(_import_data_source, source_path)
     except (BackupFormatError, OSError, ValueError) as error:
diff --git a/frontends/tests/test_bridge_sessions.py b/frontends/tests/test_bridge_sessions.py
index 21885606c..fb5545c36 100644
--- a/frontends/tests/test_bridge_sessions.py
+++ b/frontends/tests/test_bridge_sessions.py
@@ -171,6 +171,41 @@ def mutator():
         assert isinstance(data["llm_history"], list)
 
 
+class TestTransactionalDataImport:
+    def test_import_commits_new_session_file_and_in_memory_object_together(
+        self, manager: AgentManager, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "import-source"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "imported.md").write_text("new", encoding="utf-8")
+        sessions = source / "temp" / "desktop_sessions"
+        sessions.mkdir(parents=True)
+        sessions.joinpath("sess-imported.json").write_text(
+            json.dumps(
+                {
+                    "id": "sess-imported",
+                    "title": "Imported",
+                    "messages": [],
+                    "msg_seq": 0,
+                }
+            ),
+            encoding="utf-8",
+        )
+        monkeypatch.setattr(_mod, "manager", manager)
+
+        result = _mod._import_data_source(str(source))
+
+        assert result["ok"] is True
+        assert result["sessionsAdded"] == 1
+        assert "_preparedSessions" not in result
+        assert manager.sessions["sess-imported"].title == "Imported"
+        persisted = Path(manager.ga_root) / "temp" / "desktop_sessions" / "sess-imported.json"
+        assert json.loads(persisted.read_text(encoding="utf-8"))["id"] == "sess-imported"
+        assert (Path(manager.ga_root) / "memory" / "imported.md").read_text(
+            encoding="utf-8"
+        ) == "new"
+
+
 class TestLoadSessionsCorruptFile:
     """Verify that one corrupt file does not prevent loading others."""
 
diff --git a/frontends/tests/test_bridge_utils.py b/frontends/tests/test_bridge_utils.py
index b2bde8f58..e440260a6 100644
--- a/frontends/tests/test_bridge_utils.py
+++ b/frontends/tests/test_bridge_utils.py
@@ -4,15 +4,17 @@
 Run: pytest frontends/tests/test_bridge_utils.py -v
 """
 import ast
+import json
 import os
 import sys
 import re
 from pathlib import Path
+from types import SimpleNamespace
 
 # Add project root so we can import bridge helpers
 ROOT = Path(__file__).resolve().parent.parent.parent
 sys.path.insert(0, str(ROOT / "frontends"))
-from data_backup import merge_data_files
+from data_backup import materialize_import_source, merge_data_files
 
 # Import the functions under test (module-level helpers)
 import importlib.util
@@ -61,7 +63,7 @@ def test_invalid_override_falls_back_instead_of_becoming_app_dir(self, tmp_path,
 
 
 class TestMemoryImport:
-    def test_current_data_wins_for_memory_and_responses(self, tmp_path):
+    def test_source_memory_wins_while_current_responses_remain_add_only(self, tmp_path):
         source = tmp_path / "source"
         target = tmp_path / "target"
         (source / "memory").mkdir(parents=True)
@@ -77,14 +79,61 @@ def test_current_data_wins_for_memory_and_responses(self, tmp_path):
 
         result = merge_data_files(str(source), str(target))
 
-        assert result["memoryCopied"] == 1
-        assert result["memorySkipped"] == 1
+        assert result["memoryCopied"] == 2
+        assert result["memorySkipped"] == 0
         assert result["responsesCopied"] == 1
         assert result["responsesSkipped"] == 1
-        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "new"
         assert (target / "memory" / "added.md").read_text(encoding="utf-8") == "added"
         assert (target / "temp" / "model_responses" / "same.json").read_text(encoding="utf-8") == "old"
-        assert result["backupDir"] == ""
+        assert (Path(result["backupDir"]) / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+
+    def test_bridge_adopts_only_sessions_committed_by_transaction(self, tmp_path):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "imported.md").write_text("new", encoding="utf-8")
+        source_sessions = source / "temp" / "desktop_sessions"
+        source_sessions.mkdir(parents=True)
+        source_sessions.joinpath("sess-imported.json").write_text(
+            json.dumps({"id": "sess-imported", "title": "Imported", "messages": []}),
+            encoding="utf-8",
+        )
+        target.mkdir()
+
+        class Lock:
+            def __enter__(self):
+                return self
+
+            def __exit__(self, *_args):
+                return False
+
+        class Manager:
+            ga_root = str(target)
+            lock = Lock()
+            sessions = {}
+
+            @staticmethod
+            def _session_from_item(item):
+                return SimpleNamespace(id=item["id"], title=item.get("title", ""))
+
+        helpers = _load_named_helpers(
+            {"_import_data_source"},
+            {
+                "manager": Manager(),
+                "materialize_import_source": materialize_import_source,
+                "merge_data_files": merge_data_files,
+            },
+        )
+
+        result = helpers["_import_data_source"](str(source))
+
+        manager = helpers["manager"]
+        assert result["sessionsAdded"] == 1
+        assert "_preparedSessions" not in result
+        assert manager.sessions["sess-imported"].title == "Imported"
+        persisted = target / "temp" / "desktop_sessions" / "sess-imported.json"
+        assert json.loads(persisted.read_text(encoding="utf-8"))["id"] == "sess-imported"
 
 
 def _load_empty_turn_helpers():
@@ -293,8 +342,6 @@ def test_openai_alias(self):
 
 # === _format_py_dict ===
 
-import json
-
 def _format_py_dict(d):
     lines = [f"    '{k}': {json.dumps(v, ensure_ascii=False)}," if isinstance(v, str) else f"    '{k}': {v}," for k, v in d.items()]
     return "{\n" + "\n".join(lines) + "\n}"
diff --git a/frontends/tests/test_cost_tracker_ledger.py b/frontends/tests/test_cost_tracker_ledger.py
index b2012bd3b..36b059adf 100644
--- a/frontends/tests/test_cost_tracker_ledger.py
+++ b/frontends/tests/test_cost_tracker_ledger.py
@@ -38,6 +38,93 @@ def teardown_function() -> None:
     _close_ledger()
 
 
+def test_uninitialized_append_returns_before_clock_json_and_lock(monkeypatch):
+    class ForbiddenLock:
+        def __enter__(self):
+            raise AssertionError("uninitialized TUI path acquired the ledger lock")
+
+        def __exit__(self, *_args):
+            return False
+
+    monkeypatch.setattr(
+        cost_tracker.json,
+        "dumps",
+        lambda *_args, **_kwargs: (_ for _ in ()).throw(
+            AssertionError("uninitialized TUI path serialized JSON")
+        ),
+    )
+    monkeypatch.setattr(
+        cost_tracker.time,
+        "time",
+        lambda: (_ for _ in ()).throw(
+            AssertionError("uninitialized TUI path read the clock")
+        ),
+    )
+    monkeypatch.setattr(cost_tracker, "_ledger_lock", ForbiddenLock())
+
+    cost_tracker._append_ledger("tui-main", 1, 2, 3, 4)
+
+
+def test_public_tracker_and_context_interfaces_keep_tui_semantics(monkeypatch):
+    cost_tracker._trackers.clear()
+    tracker = cost_tracker.get("tui-main")
+    assert tracker is cost_tracker.get("tui-main")
+    tracker.requests = 2
+    tracker.input = 10
+    tracker.output = 4
+    tracker.cache_create = 3
+    tracker.cache_read = 5
+    tracker.started_at = 100.0
+    monkeypatch.setattr(cost_tracker.time, "time", lambda: 106.5)
+
+    assert tracker.total_input_side() == 18
+    assert tracker.total_tokens() == 22
+    assert tracker.cache_hit_rate() == pytest.approx(5 / 18 * 100)
+    assert tracker.elapsed_seconds() == 6.5
+    snapshot = cost_tracker.all_trackers()
+    assert snapshot == {"tui-main": tracker}
+    snapshot.clear()
+    assert cost_tracker.all_trackers() == {"tui-main": tracker}
+
+    backend = types.SimpleNamespace(
+        context_win="200",
+        history=[{"role": "user", "content": "你好"}],
+    )
+    assert cost_tracker.context_window_chars(backend) == 600
+    assert cost_tracker.current_input_chars(backend) == len(
+        json.dumps(backend.history[0], ensure_ascii=False)
+    )
+    assert cost_tracker.context_window_chars(types.SimpleNamespace(context_win="bad")) == 0
+
+
+def test_install_remains_idempotent_without_desktop_ledger(monkeypatch):
+    original_calls = []
+    printed = []
+    fake_llmcore = types.ModuleType("llmcore")
+    fake_llmcore._record_usage = lambda value, mode: original_calls.append((value, mode))
+    monkeypatch.setitem(sys.modules, "llmcore", fake_llmcore)
+    monkeypatch.setattr(cost_tracker, "_INSTALLED", False)
+    monkeypatch.setattr(cost_tracker, "_trackers", {})
+    monkeypatch.setattr("builtins.print", lambda *args, **_kwargs: printed.append(args))
+
+    cost_tracker.install()
+    wrapped_record = fake_llmcore._record_usage
+    wrapped_print = fake_llmcore.print
+    cost_tracker.install()
+
+    assert fake_llmcore._record_usage is wrapped_record
+    assert fake_llmcore.print is wrapped_print
+    fake_llmcore._record_usage(
+        {"prompt_tokens": 7, "prompt_tokens_details": {"cached_tokens": 2}},
+        "chat_completions",
+    )
+    fake_llmcore.print("[Output] tokens=3")
+    tracker = cost_tracker.get(threading.current_thread().name)
+    assert (tracker.requests, tracker.input, tracker.output, tracker.cache_read) == (1, 5, 3, 2)
+    assert original_calls and printed == [("[Output] tokens=3",)]
+    assert cost_tracker._ledger_path is None
+
+
 def test_append_persists_and_aggregates_per_session(tmp_path):
     cost_tracker.init_ledger(str(tmp_path))
 
diff --git a/frontends/tests/test_data_backup.py b/frontends/tests/test_data_backup.py
index dc27e1cbf..89a3dd8e4 100644
--- a/frontends/tests/test_data_backup.py
+++ b/frontends/tests/test_data_backup.py
@@ -7,6 +7,7 @@
 
 import pytest
 
+import frontends.data_backup as data_backup
 from frontends.data_backup import (
     BACKUP_FORMAT_VERSION,
     BACKUP_SCHEMA,
@@ -25,7 +26,10 @@ def _seed_data(root: Path) -> None:
     (root / "temp" / "model_responses").mkdir(parents=True)
     (root / "temp" / "model_responses" / "response.json").write_text("{}", encoding="utf-8")
     (root / "temp" / "desktop_sessions").mkdir(parents=True)
-    (root / "temp" / "desktop_sessions" / "sess-one.json").write_text("{}", encoding="utf-8")
+    (root / "temp" / "desktop_sessions" / "sess-one.json").write_text(
+        json.dumps({"id": "sess-one", "title": "One", "messages": []}),
+        encoding="utf-8",
+    )
     (root / "mykey.py").write_text("secret", encoding="utf-8")
     (root / "agentmain.py").write_text("code", encoding="utf-8")
     (root / "logs").mkdir()
@@ -156,19 +160,17 @@ def test_rejects_duplicate_paths_even_when_case_differs(self, tmp_path: Path):
         with pytest.raises(BackupFormatError, match="duplicate"):
             inspect_import_source(str(destination))
 
-    def test_accepts_legacy_session_only_folder(self, tmp_path: Path):
+    def test_rejects_session_only_folder_as_non_ga_source(self, tmp_path: Path):
         source = tmp_path / "legacy"
         (source / "temp").mkdir(parents=True)
         (source / "temp" / "desktop_sessions.json").write_text("[]", encoding="utf-8")
 
-        result = inspect_import_source(str(source))
-
-        assert result["sourceType"] == "legacyFolder"
-        assert result["content"]["sessions"] == 1
+        with pytest.raises(BackupFormatError, match="not a GA directory"):
+            inspect_import_source(str(source))
 
 
 class TestDataBackupImport:
-    def test_materializes_backup_and_merges_without_overwrite(self, tmp_path: Path):
+    def test_materializes_backup_and_applies_the_full_merge_contract(self, tmp_path: Path):
         source = tmp_path / "source"
         source.mkdir()
         _seed_data(source)
@@ -182,8 +184,254 @@ def test_materializes_backup_and_merges_without_overwrite(self, tmp_path: Path):
             result = merge_data_files(str(extracted), str(target))
             assert (extracted / "temp" / "desktop_sessions" / "sess-one.json").is_file()
 
-        assert result["memoryCopied"] == 1
-        assert result["memorySkipped"] == 1
+        assert result.keys() >= {
+            "ok",
+            "memoryCopied",
+            "responsesCopied",
+            "responsesSkipped",
+            "sessionsAdded",
+            "sessionsSkipped",
+            "sessionsFileFound",
+            "backupDir",
+        }
+        assert result["memoryCopied"] == 2
+        assert result["memorySkipped"] == 0
         assert result["responsesCopied"] == 1
-        assert (target / "memory" / "notes.md").read_text(encoding="utf-8") == "current"
+        assert result["sessionsAdded"] == 1
+        assert result["sessionsSkipped"] == 0
+        assert result["sessionsFileFound"] is True
+        assert (target / "memory" / "notes.md").read_text(encoding="utf-8") == "memory"
         assert (target / "memory" / "nested" / "facts.json").is_file()
+        assert (target / "temp" / "desktop_sessions" / "sess-one.json").is_file()
+        backup_dir = Path(result["backupDir"])
+        assert backup_dir.is_dir()
+        assert (backup_dir / "memory" / "notes.md").read_text(encoding="utf-8") == "current"
+
+    def test_memory_is_source_wins_responses_are_add_only(self, tmp_path: Path):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "same.md").write_text("new", encoding="utf-8")
+        (source / "memory" / "added.md").write_text("added", encoding="utf-8")
+        (source / "temp" / "model_responses").mkdir(parents=True)
+        (source / "temp" / "model_responses" / "same.json").write_text("new", encoding="utf-8")
+        (source / "temp" / "model_responses" / "added.json").write_text("added", encoding="utf-8")
+        (target / "memory").mkdir(parents=True)
+        (target / "memory" / "same.md").write_text("old", encoding="utf-8")
+        (target / "temp" / "model_responses").mkdir(parents=True)
+        (target / "temp" / "model_responses" / "same.json").write_text("old", encoding="utf-8")
+
+        result = merge_data_files(str(source), str(target))
+
+        assert result["memoryCopied"] == 2
+        assert result["responsesCopied"] == 1
+        assert result["responsesSkipped"] == 1
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "new"
+        assert (target / "memory" / "added.md").read_text(encoding="utf-8") == "added"
+        assert (target / "temp" / "model_responses" / "same.json").read_text(encoding="utf-8") == "old"
+        assert (target / "temp" / "model_responses" / "added.json").read_text(encoding="utf-8") == "added"
+        assert (Path(result["backupDir"]) / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+
+    def test_sessions_dedupe_by_desktop_id_across_new_and_legacy_stores(self, tmp_path: Path):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        source_sessions = source / "temp" / "desktop_sessions"
+        source_sessions.mkdir(parents=True)
+        (source_sessions / "existing.json").write_text(
+            json.dumps({"id": "sess-existing", "messages": []}), encoding="utf-8"
+        )
+        (source_sessions / "new.json").write_text(
+            json.dumps({"id": "sess-new", "messages": []}), encoding="utf-8"
+        )
+        (source_sessions / "tui.json").write_text(
+            json.dumps({"id": "tui_worker", "messages": []}), encoding="utf-8"
+        )
+        (source_sessions / "corrupt.json").write_text("{bad", encoding="utf-8")
+        (source / "temp" / "desktop_sessions.json").write_text(
+            json.dumps([
+                {"id": "sess-new", "messages": []},
+                {"id": "sess-legacy", "messages": []},
+                {"id": "../../escape", "messages": []},
+            ]),
+            encoding="utf-8",
+        )
+        target_sessions = target / "temp" / "desktop_sessions"
+        target_sessions.mkdir(parents=True)
+        (target_sessions / "different-name.json").write_text(
+            json.dumps({"id": "sess-existing", "messages": []}), encoding="utf-8"
+        )
+
+        result = merge_data_files(
+            str(source), str(target), existing_session_ids={"sess-in-memory"}
+        )
+
+        assert result["sessionsAdded"] == 2
+        assert result["sessionsSkipped"] == 5
+        assert result["sessionsFileFound"] is True
+        assert (target_sessions / "sess-new.json").is_file()
+        assert (target_sessions / "sess-legacy.json").is_file()
+        assert not (tmp_path / "escape.json").exists()
+
+    def test_empty_target_needs_no_backup_and_reports_missing_sessions(self, tmp_path: Path):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "one.md").write_text("one", encoding="utf-8")
+        target.mkdir()
+
+        result = merge_data_files(str(source), str(target))
+
+        assert result["backupDir"] == ""
+        assert result["sessionsAdded"] == 0
+        assert result["sessionsSkipped"] == 0
+        assert result["sessionsFileFound"] is False
+
+    def test_backup_failure_never_writes_the_destination(
+        self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "same.md").write_text("new", encoding="utf-8")
+        (source / "temp" / "model_responses").mkdir(parents=True)
+        (source / "temp" / "model_responses" / "added.json").write_text("new", encoding="utf-8")
+        (target / "memory").mkdir(parents=True)
+        (target / "memory" / "same.md").write_text("old", encoding="utf-8")
+
+        def fail_backup(*_args, **_kwargs):
+            raise OSError("backup disk full")
+
+        monkeypatch.setattr(data_backup, "_create_memory_backup", fail_backup)
+
+        with pytest.raises(OSError, match="backup disk full"):
+            merge_data_files(str(source), str(target))
+
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+        assert not (target / "temp" / "model_responses" / "added.json").exists()
+
+    def test_staging_copy_failure_cleans_up_without_partial_writes(
+        self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        responses = source / "temp" / "model_responses"
+        responses.mkdir(parents=True)
+        (responses / "a-ok.json").write_text("ok", encoding="utf-8")
+        (responses / "z-fail.json").write_text("fail", encoding="utf-8")
+        target.mkdir()
+        real_copy2 = data_backup.shutil.copy2
+
+        def fail_second_copy(source_path, destination_path, *args, **kwargs):
+            if Path(source_path).name == "z-fail.json":
+                raise OSError("copy failed")
+            return real_copy2(source_path, destination_path, *args, **kwargs)
+
+        monkeypatch.setattr(data_backup.shutil, "copy2", fail_second_copy)
+
+        with pytest.raises(OSError, match="copy failed"):
+            merge_data_files(str(source), str(target))
+
+        assert not (target / "temp" / "model_responses" / "a-ok.json").exists()
+        assert not list(target.glob(".genericagent-memory-import-*"))
+
+    def test_activation_partial_failure_rolls_memory_and_added_files_back(
+        self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "same.md").write_text("new", encoding="utf-8")
+        (source / "temp" / "model_responses").mkdir(parents=True)
+        (source / "temp" / "model_responses" / "fail.json").write_text("new", encoding="utf-8")
+        (target / "memory").mkdir(parents=True)
+        (target / "memory" / "same.md").write_text("old", encoding="utf-8")
+        failing_target = target / "temp" / "model_responses" / "fail.json"
+
+        real_install = data_backup._install_file_add_only
+
+        def fail_response_activation(source_path, destination_path):
+            if Path(destination_path) == failing_target:
+                raise OSError("activation failed")
+            return real_install(source_path, destination_path)
+
+        monkeypatch.setattr(
+            data_backup, "_install_file_add_only", fail_response_activation
+        )
+
+        with pytest.raises(OSError, match="activation failed"):
+            merge_data_files(str(source), str(target))
+
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+        assert not failing_target.exists()
+        backups = list((target / "temp").glob("memory_import_backup_*"))
+        assert len(backups) == 1
+        assert (backups[0] / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+
+    def test_add_only_install_falls_back_on_filesystems_without_hard_links(
+        self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        responses = source / "temp" / "model_responses"
+        responses.mkdir(parents=True)
+        (responses / "portable.json").write_text("portable", encoding="utf-8")
+        target.mkdir()
+
+        def unsupported_link(*_args, **_kwargs):
+            raise OSError(data_backup.errno.EOPNOTSUPP, "hard links unsupported")
+
+        monkeypatch.setattr(data_backup.os, "link", unsupported_link)
+
+        result = merge_data_files(str(source), str(target))
+
+        assert result["responsesCopied"] == 1
+        assert (
+            target / "temp" / "model_responses" / "portable.json"
+        ).read_text(encoding="utf-8") == "portable"
+
+    def test_concurrent_response_creation_is_never_overwritten(
+        self, tmp_path: Path, monkeypatch: pytest.MonkeyPatch
+    ):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "same.md").write_text("new", encoding="utf-8")
+        responses = source / "temp" / "model_responses"
+        responses.mkdir(parents=True)
+        (responses / "race.json").write_text("import", encoding="utf-8")
+        (target / "memory").mkdir(parents=True)
+        (target / "memory" / "same.md").write_text("old", encoding="utf-8")
+        racing_target = target / "temp" / "model_responses" / "race.json"
+        real_link = data_backup.os.link
+
+        def collide_then_link(source_path, destination_path, **kwargs):
+            destination = Path(destination_path)
+            if destination == racing_target:
+                destination.write_text("concurrent", encoding="utf-8")
+            return real_link(source_path, destination_path, **kwargs)
+
+        monkeypatch.setattr(data_backup.os, "link", collide_then_link)
+
+        with pytest.raises(FileExistsError):
+            merge_data_files(str(source), str(target))
+
+        assert racing_target.read_text(encoding="utf-8") == "concurrent"
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+
+    def test_memory_backup_refuses_symlinked_temp_directory(self, tmp_path: Path):
+        source = tmp_path / "source"
+        target = tmp_path / "target"
+        outside = tmp_path / "outside"
+        (source / "memory").mkdir(parents=True)
+        (source / "memory" / "same.md").write_text("new", encoding="utf-8")
+        (target / "memory").mkdir(parents=True)
+        (target / "memory" / "same.md").write_text("old", encoding="utf-8")
+        outside.mkdir()
+        (target / "temp").symlink_to(outside, target_is_directory=True)
+
+        with pytest.raises(ValueError, match="backup destination"):
+            merge_data_files(str(source), str(target))
+
+        assert (target / "memory" / "same.md").read_text(encoding="utf-8") == "old"
+        assert list(outside.iterdir()) == []
diff --git a/frontends/tests/test_tauri_security_contract.py b/frontends/tests/test_tauri_security_contract.py
new file mode 100644
index 000000000..2effa56ab
--- /dev/null
+++ b/frontends/tests/test_tauri_security_contract.py
@@ -0,0 +1,125 @@
+"""Security contracts for the packaged Tauri shell."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parent.parent.parent
+TAURI_ROOT = ROOT / "frontends" / "desktop" / "src-tauri"
+
+
+def _json(path: Path) -> dict:
+    return json.loads(path.read_text(encoding="utf-8"))
+
+
+def test_production_csp_is_local_and_keeps_required_tauri_ipc_and_services():
+    config = _json(TAURI_ROOT / "tauri.conf.json")
+    security = config["app"]["security"]
+    csp = security["csp"]
+
+    assert isinstance(csp, dict)
+    assert csp["object-src"] == "'none'"
+    assert csp["base-uri"] == "'self'"
+    assert csp["form-action"] == "'none'"
+    assert csp["frame-src"] == "'none'"
+    assert csp["frame-ancestors"] == "'none'"
+    assert "'unsafe-inline'" not in csp["script-src"]
+    assert "'unsafe-eval'" not in csp["script-src"]
+
+    connect_sources = set(csp["connect-src"].split())
+    assert {
+        "'self'",
+        "ipc:",
+        "http://ipc.localhost",
+        "http://127.0.0.1:14168",
+        "ws://127.0.0.1:14168",
+        "http://127.0.0.1:8900",
+        "ws://127.0.0.1:8900",
+    } <= connect_sources
+    assert not any("*" in source for source in connect_sources)
+    assert not any(source.startswith("https://") for source in connect_sources)
+
+
+def test_global_tauri_remains_only_because_bundled_compatibility_pages_use_it():
+    config = _json(TAURI_ROOT / "tauri.conf.json")
+    fallback = (ROOT / "frontends" / "desktop" / "public" / "fallback.html").read_text(
+        encoding="utf-8"
+    )
+
+    assert config["app"]["withGlobalTauri"] is True
+    assert "window.__TAURI__" in fallback
+
+
+def test_main_and_setup_capabilities_are_window_scoped_without_remote_ipc_access():
+    config = _json(TAURI_ROOT / "tauri.conf.json")
+    main = _json(TAURI_ROOT / "capabilities" / "default.json")
+    setup = _json(TAURI_ROOT / "capabilities" / "setup.json")
+
+    assert config["app"]["security"]["capabilities"] == ["default", "setup"]
+    assert main["windows"] == ["main"]
+    assert setup["windows"] == ["setup"]
+    assert "remote" not in main
+    assert "remote" not in setup
+
+    main_permissions = set(main["permissions"])
+    setup_permissions = set(setup["permissions"])
+    assert "core:default" not in main_permissions
+    assert "core:window:default" not in main_permissions
+    assert "core:webview:default" not in main_permissions
+    assert "opener:default" not in main_permissions
+    assert {
+        "core:window:allow-minimize",
+        "core:window:allow-toggle-maximize",
+        "core:window:allow-close",
+        "core:window:allow-start-dragging",
+        "opener:allow-open-url",
+        "opener:allow-default-urls",
+    } <= main_permissions
+
+    assert {
+        "allow-start-bridge-with-config",
+        "allow-retry-bootstrap",
+        "allow-get-bootstrap-snapshot",
+        "allow-get-config",
+        "allow-discover-python-for-project",
+        "allow-pick-directory",
+        "allow-pick-python-interpreter",
+    } <= setup_permissions
+    assert not setup_permissions.intersection(
+        {
+            "allow-export-mykey",
+            "allow-pick-data-export-path",
+            "allow-reveal-in-file-manager",
+            "allow-set-ga-source",
+            "allow-clear-ga-source",
+            "opener:allow-open-url",
+        }
+    )
+
+
+def test_e2e_config_only_adds_test_driver_and_dynamic_loopback_connectivity():
+    e2e = _json(TAURI_ROOT / "tauri.e2e.conf.json")
+    security = e2e["app"]["security"]
+    capabilities = security["capabilities"]
+    assert capabilities[:2] == ["default", "setup"]
+    capability = capabilities[2]
+
+    assert capability["identifier"] == "e2e"
+    assert capability["permissions"] == ["wdio:default"]
+
+    assert set(security["csp"]) == {"connect-src"}
+    connect_sources = set(security["csp"]["connect-src"].split())
+    assert {
+        "'self'",
+        "ipc:",
+        "http://ipc.localhost",
+        "http://127.0.0.1:*",
+        "ws://127.0.0.1:*",
+    } <= connect_sources
+    assert {source for source in connect_sources if "*" in source} == {
+        "http://127.0.0.1:*",
+        "ws://127.0.0.1:*",
+    }
+    assert not any(source.startswith("https://") for source in connect_sources)