chore: release 0.9.26

.gitignore

@@ -72,13 +72,7 @@ src/octop/dashboard/assets/*
 !src/octop/dashboard/__init__.py
 !src/octop/dashboard/.gitkeep
 
-# 美团生活助手专家：随包分发 pt-passport 运行时（Docker 镜像无 npm，
-# 依赖此预装产物执行认证；包内文件由来源 tgz 固定，不会被误提交污染）
-# 注意：git 不会进入被忽略的目录，因此必须先反排除 node_modules 目录本身
-!src/octop/infra/agents/experts/library/meituan-living-assistant/
-!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/
-!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/
-!src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/
+# Ship Meituan pt-passport runtime; override global node_modules/ ignore.
 !src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/node_modules/
 !src/octop/infra/agents/experts/library/meituan-living-assistant/skills/meituan-deals/scripts/node_modules/**
 
@@ -98,6 +92,10 @@ logs/
 # Local monorepo dev helpers (not for upstream)
 scripts/dev-local-link.sh
 
+# Local downloaded platform-tools for mobile DinD testing
+.tools/
+.tools-sdk/
+
 # Local agent planning docs (not for upstream)
 docs/superpowers/
 scripts/lh_image_install_octop_tencentos.sh

CHANGELOG.md

@@ -6,6 +6,18 @@
 
 ## [Unreleased]
 
+## [0.9.26] - 2026-08-23
+
+### 新增
+
+- 远程手机（实验性）：安装时探测主机移动能力（`capabilities.mobile`，物理机 / Redroid / KVM）；能力开启后开放 `GET /api/settings/capabilities` 与 `/api/mobile/*`。控制台「远程手机」支持 adb H.264/JPEG 推流、触控、画质预设、设备信息与 AI 助手面板；智能体移动工具绑定当前远程手机会话
+- 控制台布局支持经典 / 极简模式，聊天记录统一承载；用户可选填邮箱（邀请 / 登录）；知识库支持应用内编辑 markdown / txt；远程桌面与远程手机合并为统一控制入口
+
+### 修复
+
+- 邀请链接统一为 `/invite?code=`，修复邀请页居中与移动端在 overflow-hidden 壳下的滚动；启动前显示 logo 加载动画；设置页邮箱输入图标对齐；移除聊天坞中的远程手机入口
+- 加固 dashboard 鉴权与请求层（setup 锁定 503、401 刷新）、登录页与 AuthGuard 体验；按服务器能力门控移动端功能；远程控制中枢页签文案缩短为「服务器 / 手机」
+
 ## [0.9.25] - 2026-08-21
 
 ### 新增

README.md

@@ -9,7 +9,7 @@
 <p align="center">
   <a href="https://www.python.org/downloads/"><img alt="Python 3.12+" src="https://img.shields.io/badge/python-3.12%2B-blue?logo=python&logoColor=white" /></a>
   <a href="https://github.com/TencentCloud/Octop/blob/main/LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-green" /></a>
-  <a href="https://github.com/TencentCloud/Octop/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.9.25-orange" /></a>
+  <a href="https://github.com/TencentCloud/Octop/releases"><img alt="Version" src="https://img.shields.io/badge/version-0.9.26-orange" /></a>
   <a href="https://pypi.org/project/octop/"><img src="https://img.shields.io/pypi/v/octop" alt="PyPI" /></a>
   <a href="https://github.com/astral-sh/ruff"><img alt="Code Style: Ruff" src="https://img.shields.io/badge/code%20style-ruff-000000?logo=ruff&logoColor=white" /></a>
   <a href="https://github.com/TencentCloud/Octop"><img alt="GitHub stars" src="https://img.shields.io/github/stars/TencentCloud/Octop?style=social" /></a>

dashboard/index.html

@@ -30,6 +30,109 @@
     <!-- Web App Manifest -->
     <link rel="manifest" href="/manifest.json" />
     <title>Octop</title>
+    <!--
+      First-paint boot splash: visible before JS chunks parse. React.createRoot
+      replaces #root contents on mount, so this disappears automatically.
+    -->
+    <style>
+      html,
+      body {
+        height: 100%;
+        margin: 0;
+        background: #f7f8fa;
+      }
+      #root {
+        min-height: 100%;
+        min-height: 100dvh;
+      }
+      #octop-boot {
+        /* fixed + inset: always viewport-centered before app CSS sets #root height */
+        position: fixed;
+        inset: 0;
+        z-index: 2147483646;
+        box-sizing: border-box;
+        display: flex;
+        flex-direction: column;
+        align-items: center;
+        justify-content: center;
+        gap: 20px;
+        padding: 24px;
+        margin: 0;
+        background: #f7f8fa;
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI",
+          "Noto Sans SC", sans-serif;
+        color: #8b8fa3;
+      }
+      @media (prefers-color-scheme: dark) {
+        html,
+        body {
+          background: #12141c;
+        }
+        #octop-boot {
+          background: #12141c;
+          color: rgba(255, 255, 255, 0.55);
+        }
+      }
+      #octop-boot-mark {
+        position: relative;
+        width: 88px;
+        height: 88px;
+        flex: none;
+      }
+      #octop-boot-ring {
+        box-sizing: border-box;
+        position: absolute;
+        inset: 0;
+        border-radius: 50%;
+        border: 3px solid rgba(232, 93, 117, 0.18);
+        border-top-color: #e85d75;
+        animation: octop-boot-spin 0.85s linear infinite;
+      }
+      @media (prefers-color-scheme: dark) {
+        #octop-boot-ring {
+          border-color: rgba(240, 139, 154, 0.22);
+          border-top-color: #f08b9a;
+        }
+      }
+      #octop-boot-logo {
+        position: absolute;
+        inset: 14px;
+        width: 60px;
+        height: 60px;
+        border-radius: 14px;
+        object-fit: contain;
+        display: block;
+        animation: octop-boot-breathe 1.6s ease-in-out infinite;
+      }
+      #octop-boot-text {
+        font-size: 14px;
+        font-weight: 500;
+        letter-spacing: 0.04em;
+        user-select: none;
+      }
+      @keyframes octop-boot-spin {
+        to {
+          transform: rotate(360deg);
+        }
+      }
+      @keyframes octop-boot-breathe {
+        0%,
+        100% {
+          transform: scale(1);
+          opacity: 1;
+        }
+        50% {
+          transform: scale(0.94);
+          opacity: 0.88;
+        }
+      }
+      @media (prefers-reduced-motion: reduce) {
+        #octop-boot-ring,
+        #octop-boot-logo {
+          animation: none;
+        }
+      }
+    </style>
     <!--
       Classic script (not type=module) so it runs even when hashed chunks 404.
       Shares octop:chunk-reload with reloadOnStaleChunk.ts.
@@ -90,7 +193,35 @@
     </script>
   </head>
   <body>
-    <div id="root"></div>
+    <div id="root">
+      <div id="octop-boot" role="status" aria-live="polite">
+        <div id="octop-boot-mark" aria-hidden="true">
+          <div id="octop-boot-ring"></div>
+          <img
+            id="octop-boot-logo"
+            src="/logo.svg"
+            alt=""
+            width="60"
+            height="60"
+          />
+        </div>
+        <div id="octop-boot-text">Loading…</div>
+      </div>
+    </div>
+    <script>
+      (function () {
+        var el = document.getElementById("octop-boot-text");
+        if (!el) return;
+        try {
+          var lang = (
+            navigator.language ||
+            navigator.userLanguage ||
+            ""
+          ).toLowerCase();
+          if (lang.indexOf("zh") === 0) el.textContent = "加载中…";
+        } catch (e) {}
+      })();
+    </script>
     <script type="module" src="/src/main.tsx"></script>
   </body>
 </html>

dashboard/src/App.tsx

@@ -13,6 +13,7 @@ import { AntdAppProvider } from "./components/AntdAppProvider";
 import GlobalErrorBoundary from "./components/ErrorBoundary";
 import { ThemeProvider, useTheme } from "./context/ThemeContext";
 import { AgentProvider } from "./context/AgentContext";
+import { LayoutModeProvider } from "./context/LayoutModeContext";
 import { VoiceOutputProvider } from "./context/VoiceOutputContext";
 import { useIsMobile } from "./hooks/useIsMobile";
 import { useUnauthorizedRedirect } from "./hooks/useUnauthorizedRedirect";
@@ -109,9 +110,11 @@ function ThemedApp() {
             element={
               <AuthGuard>
                 <AgentProvider>
-                  <VoiceOutputProvider>
-                    <MainLayout />
-                  </VoiceOutputProvider>
+                  <LayoutModeProvider>
+                    <VoiceOutputProvider>
+                      <MainLayout />
+                    </VoiceOutputProvider>
+                  </LayoutModeProvider>
                 </AgentProvider>
               </AuthGuard>
             }

dashboard/src/api/index.ts

@@ -1,6 +1,15 @@
 export * from "./types";
 
-export { request, setAuthToken, getAuthToken, clearAuthToken } from "./request";
+export {
+  request,
+  setAuthToken,
+  getAuthToken,
+  clearAuthToken,
+  markSetupRequired,
+  clearSetupRequired,
+  isSetupRequiredKnown,
+  SetupRequiredError,
+} from "./request";
 
 export { getApiUrl, getWsUrl } from "./config";
 

dashboard/src/api/modules/auth.ts

@@ -1,4 +1,4 @@
-import { request } from "../request";
+import { clearSetupRequired, markSetupRequired, request } from "../request";
 
 /**
  * Auth + setup module — adapted to octop's multi-user backend.
@@ -84,32 +84,65 @@ interface RawLoginResponse {
   user: OctopUser;
 }
 
+/** Coalesce AuthGuard / Login / Setup probing the same endpoint in parallel. */
+let statusInFlight: Promise<AuthStatus> | null = null;
+
+/** Drop any in-flight setup-status probe (e.g. after creating the admin). */
+export function invalidateAuthStatusCache(): void {
+  statusInFlight = null;
+}
+
+function applySetupFlags(status: AuthStatus): AuthStatus {
+  if (status.setup_required) {
+    markSetupRequired();
+  } else {
+    clearSetupRequired();
+  }
+  return status;
+}
+
 export const authApi = {
   /** Probe whether the initial admin has been created. */
   getAuthStatus: async (): Promise<AuthStatus> => {
-    const raw = await request<RawSetupStatus>("/setup/status");
-    return {
-      setup_required: raw.setup_required,
-      setup_done: !raw.setup_required,
-      enabled: true,
-      has_password: true,
-      wizard_password_exists: raw.wizard_password_exists ?? false,
-      wizard_password_required: raw.wizard_password_required ?? true,
-      wizard_password_path: raw.wizard_password_path,
-      database_bound: raw.database_bound ?? false,
-      database_driver: raw.database_driver ?? null,
-    };
+    if (statusInFlight) return statusInFlight;
+
+    statusInFlight = (async () => {
+      try {
+        const raw = await request<RawSetupStatus>("/setup/status");
+        const value: AuthStatus = {
+          setup_required: raw.setup_required,
+          setup_done: !raw.setup_required,
+          enabled: true,
+          has_password: true,
+          wizard_password_exists: raw.wizard_password_exists ?? false,
+          wizard_password_required: raw.wizard_password_required ?? true,
+          wizard_password_path: raw.wizard_password_path,
+          database_bound: raw.database_bound ?? false,
+          database_driver: raw.database_driver ?? null,
+        };
+        return applySetupFlags(value);
+      } finally {
+        statusInFlight = null;
+      }
+    })();
+
+    return statusInFlight;
   },
 
   /** Bootstrap the first admin (only succeeds while user_manager is empty). */
-  createInitialAdmin: (body: SetupBody) =>
-    request<{ id: number; username: string; role: string }>(
-      "/setup/initial-admin",
-      {
-        method: "POST",
-        body: JSON.stringify(body),
-      },
-    ),
+  createInitialAdmin: async (body: SetupBody) => {
+    const result = await request<{
+      id: number;
+      username: string;
+      role: string;
+    }>("/setup/initial-admin", {
+      method: "POST",
+      body: JSON.stringify(body),
+    });
+    invalidateAuthStatusCache();
+    clearSetupRequired();
+    return result;
+  },
 
   /** Login — octop uses username + password. */
   login: async (username: string, password: string): Promise<LoginResponse> => {

dashboard/src/api/modules/invites.ts

@@ -27,6 +27,7 @@ export interface InviteRedeemBody {
   username: string;
   password: string;
   display_name?: string | null;
+  email?: string | null;
 }
 
 export interface InviteRedeemResponse {
@@ -46,7 +47,7 @@ export interface InviteRedeemResponse {
 /** Prefer the browser origin so copied links match how admins reach the UI. */
 export function localInviteUrl(code: string): string {
   const origin = typeof window !== "undefined" ? window.location.origin : "";
-  return `${origin}/?invite=${encodeURIComponent(code)}`;
+  return `${origin}/invite?code=${encodeURIComponent(code)}`;
 }
 
 export const invitesApi = {

dashboard/src/api/modules/knowledgeBases.ts

@@ -190,6 +190,37 @@ export const knowledgeBasesApi = {
       body: JSON.stringify({ path }),
     }),
 
+  createTextDocument: (
+    id: string,
+    body: {
+      name: string;
+      format: "md" | "txt";
+      content?: string;
+      path?: string;
+    },
+  ) =>
+    request<KnowledgeDocument>(`/knowledge-bases/${id}/documents/text`, {
+      method: "POST",
+      body: JSON.stringify(body),
+    }),
+
+  getTextDocument: (id: string, documentId: string) =>
+    request<{
+      id: string;
+      filename: string;
+      content_type: string;
+      text: string;
+    }>(`/knowledge-bases/${id}/documents/${documentId}/content`),
+
+  updateTextDocument: (id: string, documentId: string, content: string) =>
+    request<KnowledgeDocument>(
+      `/knowledge-bases/${id}/documents/${documentId}/content`,
+      {
+        method: "PUT",
+        body: JSON.stringify({ content }),
+      },
+    ),
+
   uploadDocument: (id: string, file: File, relativePath?: string) => {
     const body = new FormData();
     body.append("upload", file);