agentic-mobile-control

Author	SHA1	Message	Date
q792602257	778af2da53	fix(cloud): align planner configuration and records Tests / Test passed: 856 Details	2026-07-15 09:43:14 +08:00
q792602257	03c7c30067	LLM_PROVIDER_ENC_KEY	2026-07-14 09:06:48 +08:00
q792602257	c162c2501b	feat(cloud): remove static credentials and add host console Tests / Test No test results found Details	2026-07-13 19:45:53 +08:00
q792602257	efeb3eb926	Implement edge-host-self-enrollment Tests / Test passed: 581 Details Host Agent: - One-time local operator account bootstrap (PBKDF2-HMAC-SHA256, atomic 0600-permission write) gating the daemon's first unattended start via a new `setup` CLI subcommand. - Default control-plane URL now https://amcp.home.jerryyan.top (env var override unchanged). - Enrollment no longer requires a pre-issued token; falls back to zero-token self-service enrollment when none is configured. Cloud control plane: - CLOUD_SELF_SERVICE_ENROLLMENT_ENABLED (default false) opt-in flag. - SelfServiceEnrollmentAuthProvider + ChainedEnrollmentAuthProvider: configured tokens still take priority; self-service only applies when no token matches, preserving edge-host-enrollment's token-bound path. - Fixed a latent bug in sql_repository.py::enroll_host: the token-conflict lookup used `== enrollment_token_digest`, which SQLAlchemy compiles to `IS NULL` when the value is None, so every self-service enrollment after the first would have falsely collided with an existing NULL-digest host. Skipped that lookup entirely when the digest is None. Docs/deploy: .env.example, compose.yaml, compose.deploy.yaml, CLOUD_DEPLOYMENT.md, MACOS_IPHONE_SETUP.md updated for the new flag, URL default, and required `device-host-agent setup` step. Verification: 494 non-integration tests pass; openspec validate --strict passes. PostgreSQL-backed contract tests and full manual end-to-end verification were not run (no Postgres/Docker or reachable cloud-api in this environment); noted as unchecked in tasks.md 7.2/7.4.	2026-07-13 18:30:49 +08:00
q792602257	cdef630e67	feat(cloud-console): add user authentication and administration	2026-07-13 17:54:53 +08:00
q792602257	035b177128	云端地址 Tests / Test passed: 545 Details	2026-07-13 16:41:30 +08:00
q792602257	9f4641e4fc	Jenkins Tests / Test tests.test_workspace_packaging.test_workspace_distributions_own_expected_import_packages failed Details	2026-07-13 16:02:57 +08:00
q792602257andClaude Opus 4.6	2ccbc63d95	feat(cloud-api): bake cloud-console SPA into the image and serve at /console Multi-stage Dockerfile: stage 1 (node:20-bookworm-slim) builds cloud-console with vite base "/console/"; stage 2 (uv) copies dist/ to /app/console-static. Cloud API mounts the SPA at /console via SpaStaticFiles (StaticFiles subclass that falls back to index.html for deep-link refreshes) when the new CLOUD_CONSOLE_STATIC_DIR env is set, and 307-redirects / to /console/. Static files bypass bearer auth (the SPA shell is public; tokens are still required for /v1/*). Compose enables the mount by default; local dev still uses npm run dev + CLOUD_CONSOLE_CORS_ORIGINS. Jenkinsfile passes mirror overrides (NODE_IMAGE, NPM_REGISTRY, UV_IMAGE, APT_MIRROR, UV_INDEX_URL) as --build-arg, defaulting to CN mirrors (registry.jerryyan.net, registry.npmmirror.com, registry-ghcr.jerryyan.top, mirrors.aliyun.com) so CN builds don't time out; Dockerfile ARGs default to official upstreams so `docker build .` still works anywhere. Backend suite: 443 passed (-m "not integration"); cloud-console typecheck and production build succeed with the new base path. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-07-13 14:40:52 +08:00
q792602257	d673e77171	Jenkins打包 Tests / Test No test results found Details	2026-07-13 14:00:43 +08:00
q792602257	e61dcca801	feat(cloud): add edge host enrollment	2026-07-13 13:54:16 +08:00
q792602257	52dae806ef	Jenkins打包 Tests / Test No test results found Details	2026-07-13 10:42:31 +08:00