TencentCloud · jubaoliang · Aug 21, 2026 · Aug 15, 2026 · Aug 16, 2026 · Aug 14, 2026
diff --git a/.gitignore b/.gitignore
@@ -72,6 +72,16 @@ src/octop/dashboard/assets/*
 !src/octop/dashboard/__init__.py
 !src/octop/dashboard/.gitkeep
 
+# 美团生活助手专家：随包分发 pt-passport 运行时（Docker 镜像无 npm，
+# 依赖此预装产物执行认证；包内文件由来源 tgz 固定，不会被误提交污染）
+# 注意：git 不会进入被忽略的目录，因此必须先反排除 node_modules 目录本身
+!src/octop/infra/agents/experts/library/meituan-living-assistant/
+!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/
+!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/
+!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/
+!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/node_modules/
+!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/node_modules/**
+
 # Local databases
 *.sqlite
 *.sqlite-journal

diff --git a/AGENTS.md b/AGENTS.md
@@ -206,6 +206,8 @@ make build-frontend                     # dashboard/ → src/octop/dashboard/
 
 **Agent workspace I/O:** All reads/writes of agent workspace **content files** go through `HarnessAgent.workspace` (`BackendWorkspace` from `harness-agent`). Do **not** use `agent.backend` directly, `resolve_harness_backend`, or `Path.write_text` / `read_text` on `~/.octop/agents/<id>/` for workspace content. Do **not** branch on backend type or `virtual_mode` in Octop — path rules live in `BackendWorkspace`.
 
+New agents additionally keep system-scoped files under `{workspace}/.octop/` (e.g. sessions/sqlite, skills/agents system trees, auth tokens under `.octop/auth`). `system_files_path` is internal and not user-configurable; the `.octop` directory is created on first harness workspace init. Legacy agents keep auth at `{workspace}/.octop-auth`.
+
 | Context | Entry |
 |---------|--------|
 | HTTP (agent must be running) | `require_running_workspace()` in `api/common/workspace.py` |
@@ -216,10 +218,35 @@ make build-frontend                     # dashboard/ → src/octop/dashboard/
 
 **Chat attachments:** Dashboard uploads go to `{workspace}/inbound/` via `api/common/attachments.py` + `api/routers/uploads.py`, not a separate `~/.octop/uploads/` store.
 
-**Database:** Add columns via a new numbered migration
-(`infra/db/migrations/00N_description.sql` **and** matching
-`00N_description.pg.sql` for PostgreSQL), then bump the version
-assertion in `tests/unit/db/test_db_pool.py` (currently `v == 1`).
+**Database:** SQLite and PostgreSQL share one schema. Add or change tables via a numbered pair
+`infra/db/migrations/00N_description.sql` **and** `00N_description.pg.sql`, then bump the
+version assertion in `tests/unit/db/test_db_pool.py` (currently `v == 7`). Rebuilds that SQLite
+cannot express as `ALTER` live in `infra/db/migrate.py` helpers and must stay idempotent.
+
+Unreleased schema work on `develop` **folds into the current unreleased `00N`**, not a new
+`00N+1`. Only cut a new number after that version has shipped (or after a local DB at `N` would
+otherwise skip the change). `_schema_version` is an applied-migration watermark, not a changelog
+of every edit. The numbered SQL pair is the canonical v(N-1)→vN DDL (including table rebuilds);
+`migrate.py` helpers must stay equivalent and idempotent for SQLite `ADD COLUMN` and for
+databases whose recorded version skipped the file. Do not re-apply a RENAME rebuild just to
+clamp `_schema_version`.
+
+Resource tables (API-visible entities: `agents`, `channels`, `threads`, `cron_jobs`,
+`knowledge_bases`, `knowledge_documents`, `skill_packages`, `published_experts`, …) use:
+
+| Column | Role |
+|--------|------|
+| `id` | Integer surrogate PK (`AUTOINCREMENT` / `GENERATED BY DEFAULT AS IDENTITY`) |
+| `{entity}_id` | Public string UNIQUE (ULID / short id). APIs, paths, and other tables use this |
+
+Child rows store the **string** id (`knowledge_base_id` or a short alias such as `kb_id`,
+`agent_id`, `thread_id`) and `REFERENCES parent({entity}_id)`. Never FK the integer `id`.
+Repos map `row.id` to the public string; keep the integer as `row.pk` when both are needed.
+
+Do **not** force this onto: `users` (integer `user_id` FKs; login identity is `username`);
+name-keyed config (`providers`, `voice_providers`, `storage_backends`); append-only logs
+(`usage_log`, `audit_log`, `care_push_records`); KV (`settings`, `secrets`); 1:1 extensions
+(`proactive_care_config` keyed by `agent_id`); ephemeral rows (`sso_login_states`).
 
 **Slash commands:** `infra/gateway/slash/dispatcher.py` routes; `handlers/` implements; catalog in `catalog.py`.
 

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,32 @@
 
 ## [Unreleased]
 
+## [0.9.25] - 2026-08-21
+
+### 新增
+
+- Token 计量新增缓存命中支持：按模型调用累计未缓存输入、缓存读取、缓存写入、推理 Token 与模型调用次数；用量页和消息气泡展示缓存命中数据。
+- 编辑专家抽屉可修改标题语（欢迎语），与创建时同一字段，写入智能体实例而非仅页面配置
+- 专家支持上传自定义头像，写入工作区 `.octop/avatar.png`（或 jpg/webp/gif）并通过 `agents.icon_url` 展示；发布快照会带上头像，安装后自动绑定。未设置时仍用配色 + Lucide 图标
+- 实例化专家的欢迎语改为单一 `welcome_message` 字段（用户自填，不再分中英）；专家模板仍保留双语欢迎词
+- 智能体状态接口返回 `memory_maintenance`（queued / pruning / compacting）。聊天页显示阶段进度条，整理本库时暂停发送；专家卡片显示「整理记忆」标签。
+- 聊天页：文件工具卡片显示「编辑了 N 个文件」（不含截图）；文件面板标题改为「文件变更」。会话 `artifacts` 由 Octop 工具中间件在写文件 / 发文件 / 桌面截图成功后写入，切换会话后仍可在文件变更中查看。路径优先取工具 args，仅在 args 没有 path 时才扫结果文本。专家选择器「共享」标记与名称同一行。右侧增加工作区入口；工作区目录树支持将文件拖到其他文件夹。
+- 知识库、技能包、已发布专家改为整数自增 `id` + 对外字符串 ID（`knowledge_base_id` / `skill_package_id` / `published_expert_id`；文档用 `kb_id` 关联）。`agents` 仍用字符串引用技能包与已发布专家。知识库文档支持文件夹路径；分片大小等仍存实例 `settings`。删除未使用的 `knowledge_base_members`。上述库变更与专家资料列、会话 artifacts、实例欢迎语单字段一并作为 schema v7。
+- 对话检索结果附带知识库引用标记；聊天页在回答下方展示可点击的来源文档（跳转知识库页）
+
+### 修复
+
+- 技能：修复编辑已导入技能并保存后，技能内其余文件与文件夹（README.md、references/ 等）被整体清除的问题——内容编辑（仅 SKILL.md）现原地覆盖清单文件、保留全部同级文件；携带完整 `files` 载荷的更新仍整目录替换（与覆盖重装语义一致）
+- Harness usage 事件按稳定调用 ID 去重，避免流重放重复计费；上下文环保留路由模型的真实窗口上限，并将构成拆分明确显示为近似估算。
+- Admin 环境变量未进入正在运行的 Agent：本地 shell 默认不继承进程 env，Docker exec 也不传 env，工作区 `.env` 只落盘不注入。现本地 shell 每次 execute 继承当前进程环境（含 `~/.octop/env`）并 overlay 工作区 `.env`；Docker 热读全局文件 + 工作区 `.env` + 最小 PATH（不含完整宿主机环境）。保存 Admin 列表会从进程环境删除已去掉的键；仅搜索类 key 变化时后台 reload Agent。MCP stdio 只注入 SDK 安全子集 + 全局/连接器 env，不再灌入整份 `os.environ`。
+- Token 用量账本每轮只记下最后一次模型调用，工具循环中前面若干次调用被丢弃，页面合计会远低于聊天里看到的用量；现按该轮全部 AI 调用的 `usage_metadata` 累加，以 `state_snapshot` 为权威终值（snapshot 之后的增量不再相加），畸形 usage 字段跳过以免打断对话
+- 插件工具使用中文等非 ASCII 名称时 LLM 调用失败：主流 API 要求工具名匹配 `^[a-zA-Z0-9_-]{1,64}$`，现自动将非法名称转写为合法拼音名（`pypinyin` 缺失时退回下划线替换），冲突追加 `_2`/`_3` 后缀，并在工具描述前缀 `[原名: …]` 保留原名映射；`config_json.plugins` 配置键与插件内部仍使用原始名称，路由不受影响
+- 修复聊天页在"生成中"时于输入框持续打字导致消息列表上下轻微抖动的问题：输入框高度测量改为在离屏克隆节点上进行，不再瞬态改变页面布局
+- 工作区读写在 harness 后台重建窗口（DB 仍为 running）回退到 `workspace_for_agent`，避免误报 `AGENT_NOT_RUNNING`
+- 聊天页上下文占用环：旧会话没有分段快照时，从消息上已有的 `usage_metadata` / `response_metadata.token_usage` 回填已用量；相对 1M 级窗口不再把真实占用四舍五入成 0%
+- 专家抽屉保存页面配置时合并写入 `manifest.json`：保留其它字段与另一语言欢迎语；加载未完成或未改动时不写文件
+- 修复个性化「通道」面板在页面放大后不出现纵向滚动条、被挤出的通道卡片无法查看的问题：工具栏固定、卡片网格改为内部滚动区（与技能面板一致），移动端仍整页滚动
+
 ## [0.9.24] - 2026-08-15
 
 ### 新增
@@ -17,7 +43,7 @@
 - 技能：新增对话式技能管理器（SkillHub），并兼容 Windows
 - 备份：新增自动定时系统备份
 - 频道：新增 final-only 仅终稿回复模式
-- 线程：支持会话线程分叉（fork）
+- 线程：支持从 AI 回复处分叉会话（fork）
 - 体验：HITL 工具选择器、运行时按需安装、KB/技能 UX 优化；对话与镜像等界面打磨；知识嵌入初始化流程加固
 
 ### 修复

diff --git a/README.md b/README.md
@@ -9,7 +9,7 @@
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
   <a href="https://github.com/TencentCloud/Octop/blob/main/LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-green" /></a>
-  <a href="https://github.com/TencentCloud/Octop/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.9.24-orange" /></a>
+  <a href="https://github.com/TencentCloud/Octop/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.9.25-orange" /></a>
   <a href="https://pypi.org/project/octop/"><img src="https://img.shields.io/pypi/v/octop" alt="PyPI" /></a>
   <a href="https://github.com/astral-sh/ruff"><img alt="Code Style: Ruff" src="https://img.shields.io/badge/code%20style-ruff-000000?logo=ruff&logoColor=white" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="GitHub stars" src="https://img.shields.io/github/stars/TencentCloud/Octop?style=social" /></a>

diff --git a/dashboard/src/App.tsx b/dashboard/src/App.tsx
@@ -7,6 +7,7 @@ import MainLayout from "./layouts/MainLayout";
 import LoginPage from "./pages/Login";
 import OidcComplete from "./pages/Login/OidcComplete";
 import SetupPage from "./pages/Setup";
+import InvitePage from "./pages/Invite";
 import AuthGuard from "./components/AuthGuard";
 import { AntdAppProvider } from "./components/AntdAppProvider";
 import GlobalErrorBoundary from "./components/ErrorBoundary";
@@ -15,7 +16,7 @@ import { AgentProvider } from "./context/AgentContext";
 import { VoiceOutputProvider } from "./context/VoiceOutputContext";
 import { useIsMobile } from "./hooks/useIsMobile";
 import { useUnauthorizedRedirect } from "./hooks/useUnauthorizedRedirect";
-import { ANTD_BRAND_TOKENS } from "./styles/themePalettes";
+import { brandTokensFor } from "./styles/themePalettes";
 import "./styles/theme-vars.css";
 import "./styles/layout.css";
 import "./styles/form-override.css";
@@ -28,10 +29,10 @@ const GlobalStyle = createGlobalStyle`
 `;
 
 function ThemedApp() {
-  const { isDark, palette } = useTheme();
+  const { isDark, palette, customColor } = useTheme();
   const { t } = useTranslation();
   const isMobile = useIsMobile();
-  const brandTokens = ANTD_BRAND_TOKENS[palette][isDark ? "dark" : "light"];
+  const brandTokens = brandTokensFor(palette, isDark, customColor);
 
   useUnauthorizedRedirect();
 
@@ -102,6 +103,7 @@ function ThemedApp() {
           <Route path="/login" element={<LoginPage />} />
           <Route path="/login/oidc/complete" element={<OidcComplete />} />
           <Route path="/setup" element={<SetupPage />} />
+          <Route path="/invite" element={<InvitePage />} />
           <Route
             path="/*"
             element={

diff --git a/dashboard/src/api/modules/expertMarket.ts b/dashboard/src/api/modules/expertMarket.ts
@@ -45,6 +45,7 @@ export interface CreateMarketExpertResponse {
   state: string;
   expert_id: string;
   icon_name?: string | null;
+  icon_url?: string | null;
   color?: string | null;
   market: {
     source: string;
@@ -63,6 +64,7 @@ export interface CreateMarketExpertBody {
   backend?: Record<string, unknown>;
   skill_package_ids?: string[];
   color?: string;
+  welcome_message?: string;
   max_iters?: number | null;
   max_input_length?: number | null;
   temperature?: number | null;

diff --git a/dashboard/src/api/modules/invites.ts b/dashboard/src/api/modules/invites.ts
@@ -0,0 +1,75 @@
+import { request } from "../request";
+
+export type InviteStatus = "pending" | "used" | "expired" | "revoked";
+
+export interface InviteRow {
+  id: number;
+  code: string;
+  note: string | null;
+  created_by: number;
+  created_at: number;
+  expires_at: number;
+  used_at: number | null;
+  used_by_user_id: number | null;
+  revoked_at: number | null;
+  status: InviteStatus;
+  invite_path: string;
+  invite_url: string;
+}
+
+export interface InviteCreateBody {
+  note?: string | null;
+  expires_in_days?: number;
+}
+
+export interface InviteRedeemBody {
+  code: string;
+  username: string;
+  password: string;
+  display_name?: string | null;
+}
+
+export interface InviteRedeemResponse {
+  access_token: string;
+  token_type: string;
+  expires_in: number;
+  user: {
+    id: number;
+    username: string;
+    role: "admin" | "user";
+    display_name: string | null;
+    locale: string;
+    permissions?: string[];
+  };
+}
+
+/** Prefer the browser origin so copied links match how admins reach the UI. */
+export function localInviteUrl(code: string): string {
+  const origin = typeof window !== "undefined" ? window.location.origin : "";
+  return `${origin}/?invite=${encodeURIComponent(code)}`;
+}
+
+export const invitesApi = {
+  list: () => request<InviteRow[]>("/users/invites"),
+
+  create: (body: InviteCreateBody = {}) =>
+    request<InviteRow>("/users/invites", {
+      method: "POST",
+      body: JSON.stringify(body),
+    }),
+
+  revoke: (id: number) =>
+    request<InviteRow>(`/users/invites/${id}/revoke`, { method: "POST" }),
+
+  validate: (code: string) =>
+    request<{ ok: boolean; expires_at: number }>("/auth/invite/validate", {
+      method: "POST",
+      body: JSON.stringify({ code }),
+    }),
+
+  redeem: (body: InviteRedeemBody) =>
+    request<InviteRedeemResponse>("/auth/invite/redeem", {
+      method: "POST",
+      body: JSON.stringify(body),
+    }),
+};
diff --git a/dashboard/src/api/modules/knowledgeBases.ts b/dashboard/src/api/modules/knowledgeBases.ts
@@ -24,6 +24,8 @@ export interface KnowledgeCapability {
 
 export interface KnowledgeBase {
   id: string;
+  knowledge_base_id?: string;
+  pk?: number;
   owner_user_id: number;
   owner_username?: string | null;
   owner_display_name?: string | null;
@@ -41,8 +43,11 @@ export interface KnowledgeBase {
 
 export interface KnowledgeDocument {
   id: string;
+  document_id?: string;
   kb_id: string;
+  path?: string;
   filename: string;
+  is_dir?: boolean;
   content_type: string;
   byte_size: number;
   content_hash: string;
@@ -118,6 +123,17 @@ export const knowledgeBasesApi = {
       "/knowledge-bases/onnx-download-status",
     ),
 
+  testOnnx: (model: string) =>
+    request<{
+      ok: boolean;
+      latency_ms?: number | null;
+      dim?: number | null;
+      error?: string | null;
+    }>("/knowledge-bases/onnx-test", {
+      method: "POST",
+      body: JSON.stringify({ model }),
+    }),
+
   activateOnnx: (model: string) =>
     request<{ enabled: boolean; model: string; ready: boolean }>(
       "/knowledge-bases/onnx-activate",
@@ -159,12 +175,25 @@ export const knowledgeBasesApi = {
   delete: (id: string) =>
     request<void>(`/knowledge-bases/${id}`, { method: "DELETE" }),
 
-  listDocuments: (id: string) =>
-    request<KnowledgeDocument[]>(`/knowledge-bases/${id}/documents`),
+  listDocuments: (id: string, prefix?: string) =>
+    request<KnowledgeDocument[]>(
+      prefix
+        ? `/knowledge-bases/${id}/documents?prefix=${encodeURIComponent(
+            prefix,
+          )}`
+        : `/knowledge-bases/${id}/documents`,
+    ),
+
+  createFolder: (id: string, path: string) =>
+    request<KnowledgeDocument>(`/knowledge-bases/${id}/folders`, {
+      method: "POST",
+      body: JSON.stringify({ path }),
+    }),
 
-  uploadDocument: (id: string, file: File) => {
+  uploadDocument: (id: string, file: File, relativePath?: string) => {
     const body = new FormData();
     body.append("upload", file);
+    if (relativePath) body.append("path", relativePath);
     return requestUpload<KnowledgeDocument>(
       `/knowledge-bases/${id}/documents`,
       body,

diff --git a/dashboard/src/api/modules/memoryDashboard.ts b/dashboard/src/api/modules/memoryDashboard.ts
@@ -237,6 +237,16 @@ export interface RejectCandidateResponse {
   status: "rejected";
 }
 
+export interface LastExtractRun {
+  timestamp?: string;
+  session_id?: string | null;
+  quiet?: boolean;
+  note?: string;
+  events_extracted?: number;
+  candidates?: number;
+  failure_reason?: string | null;
+}
+
 export interface StatsCounts {
   raw_events: number;
   atoms: number;
@@ -247,6 +257,7 @@ export interface StatsCounts {
   atoms_delta_7d: number;
   entities_delta_7d: number;
   episodes_delta_7d: number;
+  last_extract_run?: LastExtractRun | null;
 }
 
 export interface StatsAtomKindsResponse {

diff --git a/dashboard/src/api/modules/octopAgents.ts b/dashboard/src/api/modules/octopAgents.ts
@@ -1,8 +1,22 @@
-import { request } from "../request";
+import { request, requestUpload } from "../request";
 
 export const octopAgentsApi = {
   markRead: (agentId: string) =>
     request<void>(`/agents/${encodeURIComponent(agentId)}/read`, {
       method: "POST",
     }),
+
+  uploadAvatar: (agentId: string, file: File) => {
+    const body = new FormData();
+    body.append("file", file);
+    return requestUpload<{ icon_url: string }>(
+      `/agents/${encodeURIComponent(agentId)}/avatar`,
+      body,
+    );
+  },
+
+  deleteAvatar: (agentId: string) =>
+    request<void>(`/agents/${encodeURIComponent(agentId)}/avatar`, {
+      method: "DELETE",
+    }),
 };
diff --git a/dashboard/src/api/modules/octopThreads.ts b/dashboard/src/api/modules/octopThreads.ts
@@ -15,6 +15,7 @@ export interface OctopThread {
   model_ref?: string | null;
   reasoning_mode?: "auto" | "enabled" | "disabled" | null;
   reasoning_effort?: string | null;
+  artifacts?: string[];
 }
 
 export interface OctopThreadHistory {
@@ -37,6 +38,7 @@ export interface OctopThreadHistory {
   turn_active?: boolean;
   /** Pending tool approval for this thread (survives page reload). */
   hitl_pending?: HitlPendingPayload | null;
+  artifacts?: string[];
 }
 
 export interface OctopThreadPatch {
@@ -156,9 +158,9 @@ export const octopThreadsApi = {
     agentId: string,
     threadId: string,
     body: {
-      message_id: string;
+      message_id?: string;
       content?: string;
-      user_turns_from_end?: number;
+      assistant_turns_from_end?: number;
     },
   ) =>
     request<{