RELEASES · CHANGELOG

更新日志Release notes

Mopheus 每个版本的变更内容，按发布时间倒序排列。内容同步自产品文档（当前为本地快照）。What changed in each Mopheus release, newest first. Synced from product docs (showing committed snapshot).

最新可下载版本：v2.2.13 · 此版本更新说明待同步。

在文档中查看完整更新日志 →View full changelog in docs →

v2.2.7

2026-09-19

重点更新Highlights

IT 资产本体与拓扑图 — 内置 17 个权威概念与 7 个规范谓词，配合严格的 JSONSchema 属性校验、基于权重的 Dijkstra / BFS 最短路径求解器、多跳邻域遍历以及 mop asset apply/inspect/resolve/topology/path/concept list|get CLI 命令面；同步提供 mopheus-assets 内置技能以及三语文档（#515）。IT asset ontology and topology graph — 17 authoritative concepts and 7 canonical predicates with strict JSONSchema attribute validation, weighted Dijkstra and BFS shortest-path solver, multi-hop neighborhood traversal, and a CLI surface (mop asset apply/inspect/resolve/topology/path/concept list|get). Ships with the mopheus-assets builtin skill and trilingual documentation (#515).
JumpServer SSH 提供商 — 首个 SSH 提供商，覆盖 mop ssh list|exec|upload。连接前会解析授权资产与账号，支持连接用户、脚本、环境变量、密钥与 Connection Token 鉴权，JumpServer 节点树缓存以及 KoKo SFTP 上传；工程细节见 docs/mopheus-ssh.md（#964）。JumpServer SSH provider — First SSH provider with mop ssh list|exec|upload. Resolves authorized assets and accounts before connecting, supports connection users, scripts, environment variables, private-key and Connection Token authentication, JumpServer node-tree caching, and SFTP upload via KoKo. Engineering details in docs/mopheus-ssh.md (#964).
运行时配置模板分组 — 运行时配置文件被建模为由 CLI 组拥有多个文件的结构。mes-cli 组同时暴露 ~/.mes/config.yaml 与敏感文件 ~/.mes/token.env 并加密存储。新增 mop user config-file render|get|delete 命令以及 Web UI 分组渲染（#950）。Grouped runtime configuration templates — Runtime config files are modelled as CLI groups owning one or more files. The mes-cli group now exposes both ~/.mes/config.yaml and the sensitive ~/.mes/token.env with encrypted storage. Adds mop user config-file render|get|delete and grouped Web UI rendering (#950).
通道安装消息与技能 — 新增 mop channel 安装、绑定、聊天与发送 CLI 流程，安装感知的智能体授权、发送持久化、mopheus-channel-messaging 内置技能以及 E2E 覆盖。Channel installation messaging and skill — New mop channel install, bind, chat, and send flows with installation-aware agent authorization, outbound persistence, the mopheus-channel-messaging builtin skill, and E2E coverage.
通道留存清理 — 新增由 channel_retention Cron 驱动的清理端点，配合仓储与服务层管道以清除过期发送记录与孤儿安装状态（#934 衍生）。Channel retention cleanup — New channel_retention cron-driven cleanup endpoint plus repository and service plumbing to purge stale outbound records and orphaned installation state (#934-adjacent).
守护进程跨会话断点续传 — 新增 original_agent_task_id 血统追踪、一级孤立尝试续传、二级多跳祖先会话继承、Antigravity 会话持久化到工作区提供商状态以及结构化重试提示词（#936）。Daemon session-inherited breakpoint resumption — Adds original_agent_task_id lineage, Tier 1 orphan attempt resumption, Tier 2 multi-hop ancestor session inheritance, Antigravity conversation persistence into workspace provider-state, and structured retry prompt guidance (#936).
Swagger API 文档 — 补齐 HTTP 端点文档并生成 Swagger 资源，可选 Swagger UI、Bearer 鉴权元数据以及跨运行时配置的集中环境解析。Swagger API documentation — Documented HTTP endpoints with generated Swagger assets, optional Swagger UI, Bearer auth metadata, and centralized environment parsing across runtime configuration.
工作区设置中的资产与运行时守护特性开关 — 补齐 asset（IT 资产本体）和 runtime_guard（运行时任务守护）特性开关，将 widget 改名 "Ticket Widgets"，并按字典序排列以与 Admin Site 对齐（#970）。Asset and runtime-guard feature flags in workspace settings — Adds the missing asset (IT Asset Ontology) and runtime_guard (Runtime Task Guard) flags to workspace features, renames widget to "Ticket Widgets", and orders features alphabetically to match the Admin Site (#970).
前端存储加固 — 在 localStorage / sessionStorage 被拒绝、只读或耗尽的浏览器与嵌入式场景中稳定运行（#961）。Hardened frontend storage — Survives browsers and embedding contexts where localStorage or sessionStorage are denied, read-only, or exhausted (#961).
WeCom 发布通知 — 发布工作流在配置了 WeCom webhook 密钥时，会在成功后发送通知消息。WeCom release notifications — The release workflow now posts a success message to WeCom when the configured webhook secret is set.
资产拓扑探查智能体技能 — mopheus-assets 让智能体在故障排查与爆炸半径分析中查询、解析与遍历企业资产拓扑。Asset topology explorer agent skill — mopheus-assets lets agents query, resolve, and navigate enterprise asset topologies for incident response and blast-radius analysis.

新增New

IT 资产本体、拓扑图与概念校验（#515）。IT asset ontology, topology graph, and concept validation (#515).
mop asset 命令族：apply、inspect、resolve、topology、path 与 concept list|get。mop asset command suite: apply, inspect, resolve, topology, path, and concept list|get.
IT 资产三语（英/简中/日）文档与 Excel 资产台账模板。IT asset documentation in English, Simplified Chinese, and Japanese with an Excel asset ledger template.
JumpServer SSH 提供商及 mop ssh list|exec|upload 与工程文档（#964）。JumpServer SSH provider with mop ssh list|exec|upload and engineering documentation (#964).
运行时配置模板分组，含嵌套 Files 与 mes-cli/token.env 敏感模板（#950）。Grouped runtime configuration templates with nested Files entries and the mes-cli/token.env sensitive template (#950).
通道安装消息、绑定 CLI 流程、发送持久化与 mopheus-channel-messaging 内置技能。Channel installation messaging, binding CLI flows, outbound persistence, and the mopheus-channel-messaging builtin skill.
通道留存清理 Cron、仓储支持以及工作区分域留存配置。Channel retention cleanup cron job, repository support, and workspace-scoped retention configuration.
守护进程跨会话断点续传，含重试血统与 Antigravity 会话持久化（#936）。Daemon session-inherited breakpoint resumption with retry lineage and Antigravity conversation persistence (#936).
Swagger 文档与环境配置，可选 Swagger UI 集成。Swagger docs and env config with optional Swagger UI integration.
工作区设置中的 asset 与 runtime_guard 特性开关以及 useFeatureFlags Hook（#970）。asset and runtime_guard feature flags in workspace settings and the useFeatureFlags hook (#970).
与 widget、memory 并列的 runtimeGuard 与 asset 特性开关。runtimeGuard and asset flags alongside the existing widget and memory flags.
钉钉集成截图与全新搭建指南。DingTalk integration screenshots and refreshed setup guide.
兼容 BSD sed 的在线 CLI 安装脚本。BSD-sed-compatible online CLI install scripts.
飞书音频消息下载修复，钉钉与企业微信媒体下载生命周期日志。Lark audio-message download fix and media download lifecycle logging for DingTalk and WeCom.
Admin Site 与工作区设置按规范顺序展示特性开关。Workspace feature-flag ordering in Admin Site and Workspace Settings to match the canonical list.
Web UI 配置子菜单与 SkillFileTree 目录节点文件创建控件。Config-file submenus and SkillFileTree directory-node file creation controls in the Web UI.

改进Improved

通道发送加固：跨集成的重试语义、键/原因注册表与作用域执行（#911 续作）。Outbound channel delivery hardened with retry semantics, key/reason registries, and scope enforcement across all integrations (#911 follow-ups).
通道安装存储在绑定令牌轮换与重绑期间保留用户配置快照。Channel installation store retains user-profile snapshots across binding-token rotations and rebinds.
mop profile 与配置文件按"全局基线 + 工作区覆盖"解析，模板改为服务端管理。mop profile and config files are resolved from a global baseline plus per-workspace overrides; templates are now server-owned.
mop channel CLI 新增 install、bind、chat、send 子命令，支持安装感知的智能体任务授权。mop channel CLI gains install, bind, chat, and send subcommands with installation-aware agent-task authorization.
在 localStorage / sessionStorage 不可用、只读或耗尽时回退至内存态（#961）。Frontend storage falls back to in-memory state when localStorage or sessionStorage are unavailable, read-only, or exhausted (#961).
运行时下拉隐藏已禁用或不可用运行时（#926）。Runtime picker dropdown hides disabled and unusable runtimes (#926).
Web 管理设置与工作区设置按 asset、git、memory、runtime_guard、shortcuts、widget 规范顺序展示特性。Web admin settings and workspace settings now show asset, git, memory, runtime_guard, shortcuts, and widget features in a canonical order.
技能搜索采用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局。Skill search uses a CJK-friendly multi-keyword builder; ticket list context menu and detail actions use a slimmer layout.
提供商会话来源与任务历史元数据通过规范会话记录传播，并改进助手消息去重。Provider session sources and task-history metadata propagate via the canonical session record and dedupe assistant messages.

修复Fixed

secretredact 屏蔽 Bearer、Basic 与 Token 凭据，同时保留鉴权方案前缀。secretredact masks Bearer, Basic, and Token values in sensitive assignments while preserving the authentication scheme.
通道安装重绑期间保留用户配置（fix(integrations) 系列）。Channel install rebinds preserve user profiles across binding-token rotations (fix(integrations) series).
通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域。Channel media gates no longer block retryable delivery and respect agent execution scope.
前端存储在隐私模式或沙箱嵌入场景下不再崩溃（#961）。Front-end storage no longer crashes in private browsing or sandboxed embedding contexts (#961).
Tiptap 在嵌套列表项内保留围栏代码块（#941）。Tiptap preserves fenced code blocks inside nested list items (#941).
当无智能体触发且无具名阻塞目标时，工单评论触发器预览静默；智能体芯片展示来源、点击跳过/恢复提示（#934）。Comment trigger preview is silent when no agent is triggered and no named blocked targets exist; agent chips render with source attribution and click-to-skip/click-to-restore hints (#934).
仅当受让人为团队时才发出"团队负责人不可用"原因。Comment team-leader unavailable reason only emits when the assignee is a team.
守护进程任务令牌检查不再在 E2E 主机环境下反转（#928）。Daemon task-token check no longer inverts on E2E host environments (#928).
守护进程沙箱凭据、profile 恢复记录与 Antigravity 运行时沙箱边界处理保持一致。Daemon sandbox creds, profile-recovery records, and Antigravity runtime sandbox isolation now share consistent boundary handling.
删除父工单时在删除事务内将子工单的 parent_ticket_id 置空（#942）。Ticketing: child tickets are unlinked (parent_ticket_id = NULL) on parent ticket deletion within the deletion transaction (#942).
智能体任务重试保留触发评论字段与血统。Agent task retry preserves trigger-comment fields and lineage.
删除工作区时级联清理 RBAC 数据以及 user_role / team_member 记录。Workspace deletion cascades RBAC data and cleans user_role / team_member rows.
Cron 调度关闭硬化，避免重复 close；私有绑定与调度循环统一。Cron scheduler shutdown is hardened against double close; private binds are unified with the scheduling loop.
配置文件保存失败时前端展示本地化降级提示。Config-file save failures surface localized fallback messages in the frontend.
mopheus channel CLI 安装消息与 Web UI 安装向导对齐。mopheus channel CLI install messages align with the Web UI installation wizard.
Antigravity 流式文本差分在步骤边界聚合以降低开销（#896 续作）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896 follow-up).
mop user config-file templates 正确展示分组模板与单个文件路径。mop user config-file templates correctly displays grouped templates and individual file paths.

安全Security

环境变量风格赋值中的 Bearer、Basic、Token 凭据在保留鉴权方案的同时被屏蔽。Bearer, Basic, and Token credentials in env-var-style assignments are masked while keeping the authentication scheme visible.
集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.

v2.2.6

2026-09-12

重点更新Highlights

Google Antigravity CLI 提供商 — 原生支持 agy CLI 运行时，自动探测并启用 stream-json 流水线、实时转录流式传输、通过 --conversation <id> 恢复会话以及下一轮引导能力，配合流式边界聚合与运行时沙箱隔离加固（#874、#894、#896）。Google Antigravity CLI provider — Native runtime support for the agy CLI with auto-detection, stream-json pipeline, live transcript streaming, conversation resumption via --conversation <id>, and next-turn steering, hardened by runtime sandbox isolation and step-boundary streaming aggregation (#874, #894, #896).
工单交互式决策小组件 — 工单评论与时间线中支持 single-select、multi-select 与 confirm-action 组件，配备乐观并发锁、审计日志、工作区级特性开关、mopheus-ticket-widgets 内置技能以及精简提示词微规范（#860、#907）。Interactive decision widgets for tickets — Single-select, multi-select, and confirm-action widgets in ticket comments and timelines with optimistic concurrency locks, audit log, workspace feature flag, the mopheus-ticket-widgets builtin skill, and a slim-prompt micro-spec (#860, #907).
工作区分域用户配置文件 — 环境变量与配置文件按工作区隔离存储，加密保存，提供服务端模板、二进制预览以及 mopheus user env / mopheus user config-file CLI 命令（#901、#885）。Workspace-scoped user profiles — Environment variables and configuration files are isolated per workspace with encrypted values, server-owned templates, binary previews, and the mopheus user env / mopheus user config-file CLI surface (#901, #885).
守护进程默认启用文件系统沙箱 — 守护进程默认激活文件系统沙箱，需通过 MOPHEUS_DAEMON_SANDBOX=false|0|off 显式关闭，新策略在重启与回归测试中得到保留（#906、#843）。Filesystem sandbox enabled by default — The daemon now activates the filesystem sandbox unless explicitly opted out via MOPHEUS_DAEMON_SANDBOX=false|0|off; the new policy survives restarts and is covered by regression tests (#906, #843).
作业 Quartz 计划触发器 — 新增 cron_dialect=quartz 触发器，支持 ? 月份/星期语义、可选 startAt/expiresAt 边界、可视化计划编辑器与未来运行预览，并补齐方言感知的 CLI 帮助（#884）。Quartz schedule triggers for jobs — Add cron_dialect=quartz triggers with ? day-of-month/day-of-week semantics, optional startAt/expiresAt boundaries, an interactive schedule editor with future-run previews, and dialect-aware CLI help (#884).
凭据与认证信息脱敏 — 智能体输出会脱敏内嵌凭据，认证环境变量在写入日志前被屏蔽，集成审计表不再泄露敏感标签（系列安全加固）。Credential and auth redaction — Agent output redacts embedded credentials, auth environment values are masked before logging, and the integration audit table no longer leaks sensitive labels (security hardening series).
通道异步外发与作用域执行 — 通道通过统一生命周期流异步发送消息，移除不可重试的媒体门禁，并强制执行智能体作用域（#911 及通道重构）。Channel async outbound delivery and scope enforcement — Channels ship messages asynchronously through a centralized lifecycle flow, drop non-retryable media gates, and enforce agent execution scope (#911, channel refactors).
Worktree 注册中心 — mopheus repo worktree list|prune 协调 bare-repo sidecar 元数据，支持按工作区与工单选择子集，并对脏/未推送 worktree 安全复用或驱逐（#905）。Retained worktree registry — mopheus repo worktree list|prune reconciles bare-repo sidecar metadata, supports per-workspace and per-ticket selectors, and safely reuses or evicts worktrees with dirty/unpushed detection (#905).
评论触发器预览与标签化体验 — 工单展示实时评论触发器预览，在标题下方渲染创建者与创建时间，并以共享规范常量统一 "我的工单" 筛选（#909、#923、#921）。Comment trigger previews and label-driven UX — Tickets expose live comment trigger previews, render the ticket creator and creation timestamp below the title, and standardize the My Tickets filter on a shared canonical constant set (#909, #923, #921).
自动化任务的结构化收件箱卡片 — 自动化作业运行与智能体任务失败通知升级为结构化卡片，附带快捷操作与转录直链（#868、#840）。Structured inbox cards for automated runs — Automated job-run and agent-task failure notifications now ship structured cards with quick actions and a direct transcript link (#868, #840).

新增New

Antigravity CLI 提供商，含 stream-json 流水线、转录流、会话恢复，以及提供商选择页的 agy 品牌图标（#874）。Antigravity CLI provider with stream-json pipeline, transcript streaming, conversation resumption, and agy brand logo in the provider picker (#874).
交互式决策小组件，含乐观状态、审计日志、React 组件、多语言本地化以及 mopheus-ticket-widgets 内置技能（#860）。Interactive decision widgets with optimistic state, audit log, React components, multilingual localization, and a mopheus-ticket-widgets builtin skill (#860).
工作区分域用户环境变量与配置文件，加密存储、服务端模板、二进制只读预览（#901）。Workspace-scoped user environment variables and configuration files with encrypted storage, server-owned templates, and binary read-only previews (#901).
Quartz 计划触发器、可视化计划编辑器、未来运行预览 API、本地化人类可读计划文案（#884）。Quartz schedule triggers, multi-select schedule editor, future-run preview API, and locale-aware humanized schedule text (#884).
Worktree 注册中心 CLI 与本地守护 list/prune 端点，按工作区隔离（#905）。Retained worktree registry CLI plus local daemon list/prune endpoints with workspace scope (#905).
通道异步外发，统一生命周期 outbound 流。Async outbound channel delivery with a centralized lifecycle outbound flow.
工单评论触发器预览（#909）。Comment trigger previews in ticket timelines (#909).
mop ticket create 与 mop ticket update 新增 --label / --labels 选项（#918）。--label and --labels flags on mop ticket create and mop ticket update (#918).
mop chat channel list 用于检查通道绑定与提供商作用域。mop chat channel list to inspect channel bindings and provider scoping.
mop feature list / mop feature check 命令以及只读 mop profile 子命令族（list、show）（#858 及后续）。mop feature list and mop feature check commands plus a read-only mop profile family (list, show) (#858 and follow-up).
mop 守护升级流程，支持清单驱动的原子化重装。mop daemon upgrade flow with manifest-driven atomic reinstall.
工作区分域邮件配置与派发委托，工作区设置中显示附件大小限制。Workspace-scoped email configuration and dispatch delegation plus an attachment-limit summary in workspace settings.
作业运行通知卡片，含结构化详情与直链入口（#868）。Job run notification cards with structured details and a direct link to the originating run (#868).
智能体任务失败通知，含"查看转录"快捷入口并在收件箱列出失败运行（#840）。Agent task failure notifications with a "view transcript" action and listing of failed runs in the inbox (#840).
工单创建者显示名与创建时间渲染在标题下方（#923）。Ticket creator display name and creation timestamp rendered below the title (#923).
智能体头像显示在 Web 智能体列表中。Agent avatars in the web agent list.
聊天主题支持会话 ID 一键复制。Topic session-id copy button in chat.
CLI 支持长聊天消息输入；聊天支持智能体会话路由与提供商感知的选择。Long chat message input on the CLI; agent chat routing for sessions with provider-aware selection.
决策小组件微规范内联至精简提示词，并随附 mopheus-ticket-widgets 技能参考（#907）。Decision widget micro-spec inlined in the slim prompt and the mopheus-ticket-widgets skill reference (#907).
沙箱挂载计划修复与守护进程显式沙箱退出值（#843、#906）。Sandbox mount plan fix and explicit daemon sandbox opt-out values (#843, #906).
沙箱凭据隔离、profile 恢复记录隔离、Antigravity 运行时沙箱隔离（#894）。Sandbox credential isolation, profile recovery isolation, and Antigravity runtime sandbox isolation (#894).
提供商会话 ID 的订阅级传播及跨重启持久化（#885）。Subscription propagation for provider session IDs and persistence across restarts (#885).
"我的工单" 默认切换至全工作区作用域与规范筛选常量（#921）。My Tickets default-to-all-scope toggle and canonical filter constants (#921).
分域用户快捷命令、Pi 提供商 RPC 迁移以及 Antigravity 品牌图标。Scoped user shortcut commands, Pi provider RPC migration, and the Antigravity brand logo.
CLI job create --cron-dialect quartz 支持 start-at 与 expires-at 边界。CLI job create --cron-dialect quartz with start-at and expires-at boundaries.
docs/blog 新增 Mopheus Chat 与 Event Jobs 中文 ChatOps 集成指南。Chinese ChatOps integration guide for Mopheus Chat and Event Jobs in docs/blog.
提供商集成指南与 Antigravity 提供商文档，覆盖 EN/ZH/JA。Provider integration guide and Antigravity provider documentation in EN/ZH/JA.
项目文档新增安全边界指南。Security boundaries guide in the project documentation.

改进Improved

守护进程默认启用文件系统沙箱，仅可通过显式环境变量关闭（#906）。Daemon defaults the filesystem sandbox to enabled; only an explicit environment opt-out disables it (#906).
收件箱通知以正交工具栏重新设计，新增取消归档与分域批量操作；自动化作业与智能体失败通知升级为带快捷入口的结构化卡片（#868、#840）。Inbox notifications rearchitected around an orthogonal toolbar with unarchive and scoped batch actions; automated job-run and agent-task failures now ship structured cards with quick actions (#868, #840).
通道外发改用异步执行并集中键/原因注册；强制执行智能体作用域，移除不可重试的媒体门禁（#911）。Channel outbound delivery is asynchronous with centralized key/reason registries; agent execution scope is enforced and non-retryable media gates are dropped (#911).
mop profile 与配置文件按全局基线 + 工作区覆盖解析；模板由服务端下发，移除客户端硬编码（#901）。mop profiles and config files resolve a global baseline plus workspace overrides by path; templates come from the server instead of client-side hard-coding (#901).
守护工作任务的跨重启状态持久化、Claude 缓存延迟清理、沙箱凭据与 profile 恢复记录按工作区隔离。Daemon worker tasks persist their state across restarts, defer Claude cache cleanup, and isolate sandbox credentials and profile recovery records.
技能搜索使用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局（#900）。Skill search uses a CJK-friendly multi-term builder; ticket list context menu and detail actions use a streamlined layout (#900).
智能体创建向导支持对话式创建流程与内置提示模板；工作区引导保留 7 步流程，迁移可幂等重跑。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates; workspace onboarding remains a 7-step flow with idempotent re-runs.
提供商会话来源与任务历史元数据贯穿规范会话记录，辅助助手消息去重。Provider session source and task history metadata now flow through the canonical session record for assistant-message dedup.
工作区文件中心的 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商工作区状态按智能体隔离，MCP 用量按租户统计。Provider workspace state is isolated per agent so MCP usage tracking stays per-tenant.
Antigravity 流式文本增量在步骤边界聚合以减少开销（#896）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896).
Antigravity 运行时在沙箱内保留原生 HOME，并在流中断时恢复新会话。Antigravity runtime preserves the native HOME under sandbox and recovers fresh sessions on stream interrupt.

修复Fixed

智能体输出脱敏内嵌凭据；认证环境变量写入日志前被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked before logging (fix(security) series).
集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.
通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域（#911）。Channel media gates no longer block retryable deliveries and respect agent execution scope (#911).
通道会话来源元数据在规范会话记录中保持一致。Channel session source metadata is consistently recorded across the canonical session record.
工单讨论时间线支持引用回复与统一活动历史。Ticket discussion timeline supports quote replies and a unified activity history.
移动端作业弹窗在 Mopheus 壳内可正常滚动。Mobile job dialog scrolls correctly inside the Mopheus shell.
作业受让人按工作区隔离，跨工作区触发不会误触发。Job assignees are isolated by workspace so cross-workspace triggers cannot fire.
作业 cron 表达式空字段改用 Quartz 兼容通配符，避免计划停摆。Job cron expressions with empty cron fields now use Quartz-compatible wildcards so schedules never stall.
评论 ID 在组件选择中正确往返，浮动提交栏保留用户状态。Comment IDs round-trip through widget choices so the floating submission bar preserves user state.
失败的智能体任务运行在收件箱中展示，并提供转录入口（#840）。Failed agent task runs surface in the inbox with a transcript action instead of being hidden (#840).
工单执行运行行恢复"快速停止"按钮。Quick stop button is restored on the ticket execution run row.
工作区引导跳过时不再导致页面 pointer-events 卡死（#846）。Onboarding wizard no longer leaves the body with stuck pointer-events after skipping (#846).
Antigravity 流式中断后保留已完成回合，并使用新会话恢复。Antigravity streaming interruptions preserve completed turns and recover with a fresh session.
Pi 提供商经由 RPC 恢复会话并进行能力校验（#887）。Pi provider resumes sessions via RPC with capability checks (#887).
Antigravity 运行时捕获提前退出，并在沙箱内保留原生 HOME。Antigravity runtime captures premature exits and preserves the native HOME under sandbox.
工作区销毁时同步清理 worktree sidecar 与 CodeGraph 快照。Workspace teardown cleanly removes worktree sidecars and CodeGraph snapshots.
工作区沙箱设置在守护重启与显式退出值下保持有效（#906）。Workspace sandbox settings survive background daemon restarts and explicit opt-out values (#906).
沙箱凭据与宿主机隔离；profile 恢复记录按工作区隔离。Sandbox credentials are isolated from the host; profile recovery records are isolated per workspace.

安全Security

守护进程默认启用文件系统沙箱（#906）。Filesystem sandbox enabled by default for the daemon (#906).
智能体输出脱敏内嵌凭据；认证环境变量在日志与审计表中被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked in logs and audit tables (fix(security) series).
沙箱凭据、profile 恢复记录与 Antigravity 运行时状态与宿主机隔离。Sandbox credentials, profile recovery records, and Antigravity runtime state are isolated from the host.
提供商工作区状态按智能体分区，避免跨工作区数据通过提供商缓存泄露。Provider workspace state is partitioned per agent so cross-workspace data does not leak through provider caches.

升级说明Upgrade Notes

守护进程默认启用文件系统沙箱。如过去通过环境变量关闭，请显式设置 MOPHEUS_DAEMON_SANDBOX=false（或 0/off，不区分大小写）；否则将保持新默认。The daemon now enables the filesystem sandbox by default. Operators that previously disabled it via environment must explicitly set MOPHEUS_DAEMON_SANDBOX=false (or 0/off, case-insensitive) on the daemon process; otherwise sandboxing stays on and matches the new default.
工作区分域用户环境变量与配置文件需要本次新增的 schema 迁移。已有全局配置保持为基线，工作区覆盖在迁移完成后生效。Workspace-scoped user environment variables and configuration files require the schema bump introduced in this release. Pre-existing global profiles remain the baseline; new workspace overrides take effect after migration.
Quartz 计划触发器按触发器粒度选择开启；既有 Standard 五字段触发器保持原行为，存在 Quartz 行时回滚迁移会被拒绝，以保证持久化表达式可读。Quartz schedule triggers are opt-in per trigger. Existing Standard five-field triggers continue to use the legacy grammar; reverting a migration is refused while Quartz rows exist to keep persisted expressions readable.
交互式决策小组件依赖工作区 widget 特性开关；关闭或未配置时评论降级为标准语法高亮代码块。Interactive decision widgets require the widget workspace feature flag; comments degrade to standard syntax-highlighted code blocks when the flag is disabled or unset.
使用 Antigravity 提供商需在环境中有可调用的 agy（或通过 MOPHEUS_ANTIGRAVITY_PATH 指定），且 CLI 支持 --input-format stream-json --output-format stream-json --dangerously-skip-permissions。Antigravity CLI is required at agy (or MOPHEUS_ANTIGRAVITY_PATH) to use the new provider; the CLI must be invokable with --input-format stream-json --output-format stream-json --dangerously-skip-permissions.

v2.2.5

2026-09-05

重点更新Highlights

事件驱动作业与因果循环防护 — 作业可订阅内部事件（如 comment.created、ticket.created）并配置结构化过滤条件；因果祖先图阻断递归触发循环，事件负载新增自描述枚举名、工单上下文与 ticketPriority，便于精准路由（#795、#805、#806、#811、#813、#814、#817、#808、#809）。Event-driven jobs with causal loop containment — Jobs subscribe to internal events (comment.created, ticket.created, …) with structured filters. A causal ancestor graph prevents recursive trigger loops, and event payloads now expose self-describing enum names, ticket context, and ticketPriority for accurate routing (#795, #805, #806, #811, #813, #814, #817, #808, #809).
子智能体谱系与生命周期追踪 — 子智能体运行持久化父级谱系，Claude 子智能体跟踪生命周期，调度器协调子智能体的最终结果。提供商工作区状态按智能体隔离，Codex MCP 调用与 Claude 用量一并记录（#767、#803、#828、#830）。Subagent lineage and lifecycle tracking — Subagent runs persist parent lineage, Claude subagents track lifecycle transitions, and the scheduler coordinates subagent final results. Provider workspace state is isolated per agent, and Codex MCP calls are recorded alongside Claude usage (#767, #803, #828, #830).
mop CLI 技能与发布同步工作流 — 新增 mop CLI 技能与发布同步工作流，智能体无需自定义脚本即可搭建 PR、同步发布产物、检索模型枚举；using-codegraph 现要求 worktree 前置并提供 MCP 兼容指南（#616/#820、#746）。mop CLI skill and release sync workflow — A new mop CLI skill ships with the release sync workflow so agents scaffold PRs, sync release artifacts, and discover model enums without bespoke scripts; using-codegraph now mandates a worktree prerequisite and ships MCP-compatible guides (#616/#820, #746).
附件访问控制与隔离 — 附件在查询与存储路径上统一执行工作区级 CanView/CanEdit/CanDelete 能力检查，来源标签附带父工单标识与短 ID（#730/#734、#731/#733）。File attachment access control and isolation — Attachments enforce workspace-scoped CanView/CanEdit/CanDelete capabilities in queries and storage paths, with origin labels that include the parent ticket identifier and short ID (#730/#734, #731/#733).
工单短标识 — 工单在 UUID 之外暴露稳定短 ID，并贯穿 CLI、Web 与 mop 输出（#818）。Short ticket identifiers — Tickets expose a stable short ID alongside the UUID, mirrored across CLI, web, and mop outputs (#818).
主题生命周期管理 — 一级主题生命周期 API 让工作区可审计地归档、恢复与清理主题（#824）。Topic lifecycle management — A first-class topic lifecycle API lets workspaces archive, restore, and clean up topics with audit-friendly state transitions (#824).
用户 SSH 配置管理 — 用户可在设置中注册 SSH 配置文件，通过运行时配置管线投递到沙箱任务，并按原生 OpenSSH 组合（#740）。User SSH config management — Members register SSH config files delivered into sandbox tasks via the runtime config file pipeline, with native OpenSSH composition (#740).
技能调用与合成 — 每次技能调用都被记录用于审计，蒸馏记忆可合成为可复用技能，每日用量汇总驱动工作区分析（#737、#754、#822）。Skill invocations and synthesis — Every skill invocation is recorded for auditability, distilled memories can be synthesized into reusable skills, and a daily-usage rollup powers workspace analytics (#737, #754, #822).
守护遥测、快照与工作区恢复过滤 — 守护进程采集每任务资源遥测、发出持久化工作完成快照，并在恢复时按工作区过滤，避免重启时拉起外部运行时（#766、#776、#786）。Daemon telemetry, snapshots, and worker recovery — Daemons collect per-task resource telemetry, emit durable worker completion snapshots, and filter recovery by workspace so a restart never picks up a foreign runtime (#766, #776, #786).
发布产物迁移至华为云 OBS — 发布镜像与许可证声明改发至华为云 OBS，加速中国大陆区域安装。Release artifacts on Huawei OBS — Release images and license notices publish to Huawei OBS, accelerating installs in mainland China regions.
工作区 UI 标准化 — 工作区列表、头部、集成设置、品牌图标与确认弹窗统一为卡片容器布局，含内联页头、批量操作、平台分组的集成页以及带后果提示的删除/归档确认弹窗（#741、#758、#761、#791）。Standardized workspace UI — Workspace list, header, integrations settings, brand icons, and confirmation dialogs follow a unified card container layout with inline page headers, batch actions, platform-sectioned integrations, and delete/archive dialogs with explicit consequence warnings (#741, #758, #761, #791).

新增New

内部事件触发器与因果循环防护；运行时附加因果祖先上下文并下发事件广播（#795、#814）。Internal event triggers with causal loop containment; runtime attaches causal ancestor context and grants event broadcasts (#795, #814).
事件负载新增 ticketId、shortId、workspaceSlug、ticketPriority 及自描述枚举 *Name 字段（#805、#806、#817）。Event payloads enriched with ticketId, shortId, workspaceSlug, ticketPriority, and self-describing enum *Name companions (#805, #806, #817).
作业触发器页可视化事件过滤规则，事件作业禁用手动触发（#808、#809）。Job triggers tab visualizes event filter rules; manual trigger disabled for event jobs (#808, #809).
子智能体谱系表、Claude 子智能体生命周期、子智能体回合协同、提供商工作区状态隔离与 Codex MCP 调用记录（#767、#803、#828、#830）。Subagent lineage table, Claude subagent lifecycle tracking, subagent turn coordination, provider workspace state isolation, and Codex MCP call recording (#767, #803, #828, #830).
智能体即时交互转向（#788）。Immediate agent interaction steering (#788).
工单短标识列、API、CLI 与 mop 集成（#818）。Short ticket identifier column, API, CLI, and mop integration (#818).
主题生命周期端点与审计钩子（#824）。Topic lifecycle management endpoints and audit hooks (#824).
附件访问控制与可见性隔离；附件来源显示附带工单 ID 与短 ID（#730/#734、#731/#733）。Attachment access control + visibility isolation; attachment origin display carries ticket ID and short ID (#730/#734, #731/#733).
技能调用记录表、每日技能用量分析与记忆合成技能（#737、#754、#822）。Skill invocation tracking table, daily skill usage analytics, and memory-to-skill synthesis (#737, #754, #822).
mop CLI 技能、mop_ticket 帮助脚本、模型枚举参考与发布同步工作流（#616/#820）。mop CLI skill, mop_ticket helper scripts, model enum references, and release-sync workflow (#616/#820).
using-codegraph 技能 worktree 前置与 MCP 兼容（#746）。using-codegraph skill worktree prerequisite and MCP compatibility (#746).
用户 SSH 配置注册，按 cli_type 投递（#740）。User SSH config registration with cli_type-aware delivery (#740).
守护进程持久任务资源遥测与 /profile 端点、工作完成快照（#776、#786）。Daemon durable task resource telemetry plus /profile endpoint and worker completion snapshots (#776, #786).
作业执行历史中的端到端智能体任务耗时与重设计的实时同步布局（#735、#736）。End-to-end agent task duration in job execution history; redesigned layout with real-time sync (#735, #736).
工作区卡片容器、内联页头、批量操作、平台分组的集成设置、统一品牌图标以及 AlertDialog 删除/归档流程（#741、#758、#761、#791）。Workspace card container, inline page headers, batch actions, platform-sectioned integrations settings, unified brand icons, and AlertDialog-based delete/archive flows (#741, #758, #761, #791).
runtime guard explain 取证 CLI 与扩展的 runtime_guard_event 字段。runtime guard explain forensics CLI and extended runtime_guard_event columns.
自定义 CLI 升级清单、强制升级元数据与原子化 CLI 重装。Custom CLI upgrade manifest, forced upgrade metadata, and atomic CLI reinstall.
统一的 CI 构建时间戳；凌晨 6 点（北京时间）夜间构建。Unified CI build timestamps; nightly Beijing 06:00 build.
跨工作区的 License 邀请重发与席位重排。License invitation re-issue and seat reshuffle across workspaces.

改进Improved

作业 actor 携带祖先作业 ID 与 origin_user_id，防止递归触发并保证审计链路完整（#813）。Job actor carries ancestor job IDs and origin_user_id to prevent recursive triggers and keep audit trails accurate (#813).
事件广播统一汇聚到单一工作区事件中心，HTTP handler 通过同一 broadcaster 扇出。Event broadcasts unified into a single workspace event hub; HTTP handlers fan out through one broadcaster.
通道会话来源与任务历史元数据贯穿规范会话记录。Channel session source and task history metadata propagate through the canonical session record.
技能搜索改用 CJK 友好的多关键词构造器并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
智能体创建向导支持对话式 AI 智能体创建，内置提示模板（#616）。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力（#607）。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
守护调度器协调子智能体最终结果并在检查后保留结果。Daemon scheduler coordinates subagent final results and preserves the final result after checks.
作业执行历史通过 WebSocket 事件刷新，外部状态无需轮询即可保持一致。Job execution history refreshes from websocket events so external state stays consistent without polling.
工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商会话来源与任务历史元数据纳入助手消息去重。Provider session source and task history metadata participate in assistant-message dedup.
runtime guard explain 输出统一为英文并在 Web UI 提供 i18n 字典。runtime guard explain output canonicalized to English with i18n dictionaries for the web UI.

修复Fixed

Codex 用量按模型拆分；Codex stdout 用量上报进入仪表盘。Codex usage split by model; Codex stdout usage reporting surfaces in dashboards.
子智能体 message parent 保留；子线程消息安全过滤；子智能体名称传递至智能体任务标题。Subagent message parent preserved; subthread messages filtered safely; subagent names propagated into agent-task titles.
新会话记录模型上线后恢复 Lark 通道任务回复。Lark channel task replies restored after the new session record schema.
Webhook 去重冲突通过 ON CONFLICT DO UPDATE 吸收（#799/#800）。Webhook dedup conflict absorbed via ON CONFLICT DO UPDATE (#799/#800).
合并评论计数包含 trigger；空合并评论隐藏；合并评论折叠。Merged comment count includes the trigger; empty merged comments hidden; merged comments collapse.
浏览器登录统一使用 cookie；locale cookie 与活动语言状态在 hydration 与设置间保持同步（#727）。Browser auth uses cookies consistently; locale cookie and active language state stay in sync across hydration and settings (#727).
转录搜索与 escape 快捷键不再穿透到工单页（#725）。Transcript search and escape shortcuts no longer leak to the ticket page (#725).
ActorAvatar 不再渲染 UUID 缩写；ActorPicker 携带显示名（#759）。ActorAvatar no longer renders UUID initials; ActorPicker carries the display name (#759).
守护进程恢复按工作区过滤，避免拉起外部运行时（#766）。Daemon recovery filters by workspace so unrelated runtimes do not surface (#766).
调度器在生命周期检查后保留最终结果，可恢复准备阶段 panic，解析生命周期检查响应，并在协议关闭后保留超时。Scheduler preserves the final result after lifecycle checks, recovers preparation panics, parses lifecycle check responses, and preserves timeout after protocol close.
安装路径：安装时运行运行时环境探针；支持在线 CLI 准备；Windows 安装不再泄漏临时环境；离线 Docker 路径补充文档。Install path: runtime environment probe runs at install time; online CLI preparation supported; Windows install path no longer leaks the temp env; offline Docker paths documented.
CLI 升级重装原子化，支持自定义升级清单，强制升级元数据正常流转。CLI upgrade reinstall is atomic and respects a custom upgrade manifest; forced upgrade metadata flows through.
WebSocket 订阅者在资源变更时刷新（#712）。WebSocket subscribers refresh on resource mutations (#712).
WebSocket 断线后重新拉取运行时资源数与守护健康端口。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
重复迁移幂等执行；make migrate-up 部分应用后再次运行不再触发重复键错误。Duplicate migrations are idempotent; make migrate-up after a partial apply no longer trips a duplicate-key error.
仪表盘同时展示成功与失败任务计数；空的 from/to 日期参数视为全时段用量（#771）。Dashboard surfaces failed task counts alongside successful ones; empty from/to date parameters render as all-time usage (#771).
在提供商会话响应中保留 Kimi stderr 错误码。Kimi stderr error codes preserved in provider session responses.
即使守护响应在上传中途丢失，也保留报告批次。Daemon report batches preserved when the daemon response drops mid-upload.
智能体任务派发链路保留发起用户上下文（#691）。Origin user context preserved across agent task dispatches (#691).
工单依赖目标工单通过 useTicket 单独加载；视角分组与术语对齐。Ticket dependency target tickets load individually via useTicket; perspective grouping and terminology aligned.
工单后端 ZIP 导出与评论解决契约弃用提示在 Web 端展示（#802）。Ticket backend ZIP export and comment resolution contracts deprecation notice surfaced in the web UI (#802).
mop_ticket add-comment 调用正确的子命令；技能脚本末尾空白已清理。Skill subcommand mop_ticket add-comment invokes the correct subcommand; trailing whitespace in skill scripts removed.
触发器过滤条件在重载与守卫卸载间保留。Trigger filters persist across reloads and guard unload.
全运行时任务生命周期与作用域检查加固。Hardened task lifecycle and scope checks across the runtime.
工作区引导启用 skip-existing-agent 迁移，关闭引导无法绕过安全检查。Wizard onboarding skip-existing-agent migration applied so disabling onboarding cannot bypass the safety check.
本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
守护任务调度器延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically; preserve terminal completion result across restarts.

安全Security

工作区事件统一经过单一 broadcaster，强制 origin_user_id 与因果祖先校验；作业不能订阅工作区之外的事件。Workspace events fan out through a single broadcaster that enforces origin_user_id and causal ancestor checks; jobs cannot subscribe to events outside their workspace scope.
即便发起方不在工作区成员中，所有 agent_task 行均记录 origin_user_id，跨域操作可被审计。origin_user_id recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
附件访问控制对所有查询路径执行 CanView/CanEdit/CanDelete，存储路径按工作区分隔。Attachment access control enforces CanView/CanEdit/CanDelete in every query path; storage paths are workspace-scoped.
Webhook 去重改用原子 upsert，杜绝审计记录丢失或重复（#799/#800）。Webhook dedup uses an atomic upsert to prevent lost or duplicated audit records (#799/#800).

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 118+ 迁移：事件触发器注册、因果祖先 ID、工单短标识、主题生命周期、附件访问控制、技能调用记录、每日用量分析、守护工作完成快照、用户 SSH 配置元数据以及 runtime_guard_event 字段扩展。Apply database migrations before starting the new server. Migrations 118+ cover the event trigger registry, causal ancestor IDs, ticket short identifiers, topic lifecycle, attachment access control, skill invocations, daily usage analytics, daemon worker snapshots, user SSH config metadata, and runtime_guard_event columns.
已订阅 comment.created 的作业请重新审视：负载新增 ticketId、workspaceSlug、ticketPriority，需相应调整触发表达式。Review existing jobs subscribed to comment.created: the payload now includes ticketId, workspaceSlug, and ticketPriority — adjust trigger expressions accordingly.
守护升级请重新部署最新的 mopheusd 镜像；Linux 守护进程在首次心跳即可获得新的持久任务资源遥测 profile 端点与工作完成快照。Daemon upgrades should redeploy the latest mopheusd image; Linux daemons pick up the new durable task resource telemetry profile endpoint and worker completion snapshots on first heartbeat.
发布产物改发至华为云 OBS，安装工具链默认使用 OBS 镜像地址。请相应更新本地 install/env.example 中的 MOPHEUS_BACKEND_IMAGE/MOPHEUS_WEB_IMAGE。Release artifacts publish to Huawei OBS; installation tooling now expects the OBS-backed image tags. Update local install/env.example overrides accordingly.
自定义附件权限的工作区在迁移后请重新确认 CanView/CanEdit/CanDelete，默认能力检查已下放至 repo 层。Workspaces that customize attachment permissions should re-confirm CanView/CanEdit/CanDelete after migration; default capability checks now apply at the repo layer.
新建工作区默认启用 mop CLI 技能；存量工作区可从技能商店按需启用。The mop CLI skill is enabled by default for new workspaces; existing workspaces can opt in from the skill store.
守护恢复按工作区过滤，请确认运行时的注册工作区与预期一致后再重启。Daemon recovery now filters by workspace; ensure runtime registrations live in the expected workspace before restart.

v2.2.4

2026-08-29

重点更新Highlights

为编码智能体接入 CodeGraph 智能 — 已注册仓库上的编码智能体现在内置 using-codegraph 技能，附带按 commit 绑定的 sidecar SQLite 快照缓存，并在 worktree 准备阶段自动增量重建索引 (#675)。CodeGraph intelligence for coding agents — Coding agents on registered repositories ship with the using-codegraph skill, commit-bound sidecar SQLite snapshot caches, and incremental re-indexing during worktree provisioning (#675).
工作区文件中心 — 新增 /[workspace]/files 页面，聚合工单、评论、聊天会话中的所有附件，提供全文检索、类别筛选、网格/表格视图以及图像、PDF、Markdown、源码、CSV 的通用预览器 (#713)。Workspace files hub — A new /[workspace]/files page consolidates every attachment across tickets, comments, and chat sessions with full-text search, category filters, grid/table views, and a universal previewer for images, PDFs, Markdown, source code, and CSV (#713).
日语本地化 — 整个产品界面新增日语 (ja) 翻译，与英语、简体中文并列，含新的文件中心和智能体任务控件 (#706)。Japanese localization — The full product UI ships with Japanese (ja) translations alongside English and Simplified Chinese, including the new files hub and agent-task controls (#706).
运行时任务资源守护与熔断 — Linux 守护进程通过 rootless cgroup v2 与 procfs 采样收集每任务 RSS、每运行时总量、进程数与完整进程树指标；三级级联（任务→运行时→工作区）合并阈值，超额告警升级为 kill。每次 kill/告警都会将结构化诊断上报控制面并写入 runtime_guard_event 表 (#694, #702, #710)。Runtime task resource guard and circuit breaker — Linux daemons collect per-task RSS, per-runtime totals, process counts, and full process-tree metrics via rootless cgroup v2 + procfs sampling. A 3-tier cascade merges guard thresholds; over-budget warnings ramp into kill. Every kill/warning streams structured diagnostics to the control plane, persisted in runtime_guard_event (#694, #702, #710).
工单级 Grill Me 评审 — 通过工单头部或操作菜单即可针对工单标题与描述发起 10 轮自反思评审，无需评论，结果以根评论回填 (#624, #642, #620)。Direct ticket-level Grill Me review — Trigger a 10-round self-reflective review against a ticket's title and description from the ticket header or actions menu — no comment needed (#624, #642, #620).
个人运行时配置文件 — 用户可注册自定义配置文件（如 ~/.mopheus/*.toml），按 CLI 类型投递到沙箱任务，并支持托管 Ed25519/RSA SSH 密钥与用户优先的原生 OpenSSH 组合 (#685)。Personal runtime configuration files — Each user can register custom configuration files (e.g. ~/.mopheus/*.toml) which are delivered into sandbox tasks with CLI-type aware attachment, managed Ed25519/RSA SSH keys, and user-first native OpenSSH composition (#685).
以非 root 用户（UID 10001）运行守护进程容器 — mopheusd 在容器内以 mopheus 用户运行并匹配宿主机 UID，支持 rootless cgroup v2 层级并免去运行时提权 (#633)。Non-root daemon container (UID 10001) — mopheusd runs as the mopheus user inside the container with the matching host UID, enabling rootless cgroup v2 hierarchies (#633).
用户账号状态控制 — 工作区管理员可启用或停用单个账号；停用用户不可登录且不计入 License 配额 (#705)。User account status controls — Workspace admins can enable or disable individual accounts; disabled users are blocked from authentication and excluded from license quota counting (#705).
工单批量操作 — 新增工单操作栏支持批量归档、指派、修改优先级或迁移，CLI 子命令 mopheus ticket 也提供对应能力 (#653)。Batch ticket operations — A new ticket action bar lets operators archive, assign, re-prioritize, or move many tickets at once, mirrored in mopheus ticket CLI subcommands (#653).
工单运行数据后端 ZIP 导出 — 工单可导出包含所有评论、智能体任务运行和中间产物的 ZIP 包，便于离线审查与审计 (#667)。Backend ZIP export of ticket run data — Tickets expose a backend ZIP export of all comment threads, agent task runs, and intermediate artifacts for offline review (#667).

新增New

编码智能体的 using-codegraph 内置技能，以及 .codegraph-cache/<sha>.db 提交绑定 sidecar 与增量 codegraph sync (#675)。CodeGraph sidecar snapshot cache at .codegraph-cache/<sha>.db with automatic incremental codegraph sync during worktree creation (#675).
mopheus attachment list CLI 命令与 useFilesViewStore 视图模式持久化 (#713)。mopheus attachment list CLI and useFilesViewStore view-mode persistence (#713).
user_config_file 表与个人沙箱运行时配置文件的设置界面，支持托管 SSH 密钥和用户优先的 OpenSSH 组合，按 cli_type 自动投递。user_config_file table and settings UI for personal sandbox runtime configuration files, managed SSH keys, and user-first OpenSSH composition, with cli_type-aware delivery.
runtime_guard_event 审计表及 mopheus runtime guard events|explain CLI 命令 (#710)。runtime_guard_event audit table with full forensics plus mopheus runtime guard events|explain CLI (#710).
usage_agent_task_report 持久化回执与用量快照去重，守护进程用量上报可安全重试。usage_agent_task_report durable receipts and usage snapshot dedupe so daemon usage reports are safe to retry.
agent_task_interaction 表和 broadcaster，用于跨运行时的 WebSocket 评论同步 (#623)。agent_task_interaction table and broadcaster for websocket comment sync (#623).
智能体上的 is_griller 能力，用于 Griller 专业化 (#620)。is_griller capability on agents for Griller specialization (#620).
工单按更新时间与开始日期排序。Tickets updates-time sorting and start-date sorting.
user.enabled 列及管理员启/停控制 (#705)。user.enabled column with admin enable/disable controls (#705).
工作区级用户环境变量 CRUD (#669)。Workspace-scoped user env vars at profile scope (#669).
跨运行时批量领取的交互式守护任务调度器 (#674)。Interactive daemon task scheduler with batch claim across runtimes (#674).
记忆命中次数 BIGINT 饱和保护 (#688)。Memory hit-count with BIGINT saturation clamp (#688).
附件 pg_bigm GIN 索引与 CJK 多关键词搜索。Attachment pg_bigm GIN index with CJK multi-term search.
收件箱批量归档/恢复/删除，含"全部删除"二次确认 (#662)。Bulk archive/restore/delete in the inbox with explicit "delete all" confirmation (#662).
mopheus job update 的 --action-type 参数，以及安装时生成的 mop 快捷别名。CLI --action-type flag for mopheus job update and mop install-time shortcut alias.
Mopheus 与 CodeGraph OSS License 声明打包进发布产物 (#676)。Mopheus and CodeGraph OSS license notices packaged into release artifacts (#676).

改进Improved

License 邀请流程支持跨工作区重发与席位重排。License invitation flow supports re-issue and seat reshuffle across workspaces.
收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力 (#607)。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
智能体创建向导支持对话式 AI 智能体创建，内置提示模板 (#616)。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
技能搜索改用 CJK 友好的多关键词构造器，并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
通道会话来源与任务历史元数据纳入规范会话记录 (#623)。Channel session source and task history metadata carry through to the canonical session record (#623).
作业列表改为由 WebSocket 事件刷新，外部任务状态无需轮询即可保持一致。Jobs list refreshes from websocket events so external task state stays consistent without polling.
工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商会话来源与任务历史元数据纳入助手消息去重，避免同一输出跨智能体重复。Provider session source and task history metadata participate in assistant-message dedup so the same output is never re-emitted across agents.

修复Fixed

记忆任务在上下文候选为空时返回 nil，避免误导性"记忆"标注 (#721)。Return nil from memory task recall when the context candidate set is empty so prompts do not get a spurious "memory" attribution (#721).
拒绝非 ASCII 工作区 slug 并给出明确校验信息 (#715)。Reject non-ASCII workspace slugs with a clear validation message (#715).
安装汇总中显示生成的管理员凭据，减少登录翻查安装日志的需求 (#715)。Show generated admin credentials in the install summary (#715).
资源变更事件刷新所有 WebSocket 订阅者；工单更新无需手动刷新即可传播 (#712)。Refresh resource mutations across all websocket subscribers; ticket updates propagate without a manual reload (#712).
WebSocket 断线后重新拉取运行时资源数与守护进程健康端口，确保守护进程恢复。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
重复迁移改为幂等执行，部分应用后再次执行 make migrate-up 不再触发重复键错误。Make duplicate migrations idempotent so re-running make migrate-up after a partial apply no longer trips a duplicate-key error.
仪表盘同时展示失败任务计数，便于准确用量对比。Surface failed task counts in the dashboard alongside successful ones for accurate usage diffing.
恢复分页工单列表的服务端排序，覆盖旧的本地过滤导致的状态错乱 (#660)。Restore server-side sorting for paginated ticket lists (#660).
在提供商会话响应中保留 Kimi stderr 错误码，失败诊断保持真实 (#665)。Preserve Kimi stderr error codes in provider session responses (#665).
agent_task 持久事件负载大小封顶，避免 stdout 失控阻塞守护运行器。Bound durable event payload sizes for agent_task so a runaway stdout cannot stall the daemon runner.
启动任务时保留守护进程绑定的健康端口。Preserve the daemon's bound health port when starting tasks.
守护进程在 WebSocket 断开后恢复运行时，杜绝"幽灵运行时"。Restore runtimes after a websocket disconnect so daemons recover gracefully.
在智能体任务派发链路中保留发起用户上下文 (#691)。Preserve origin user context across agent task dispatches (#691).
即使守护响应在上传中途丢失，也保留守护进程报告批次。Preserve daemon report batches even when the daemon's response drops mid-upload.
当本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude，不影响覆盖率目标。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
守护任务调度器转入延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically and preserve terminal completion result across restarts.

安全Security

工作区文件中心复用现有 Attachment 查看能力与工作区作用域，对每次查询强制鉴权。Workspace files hub enforces the existing Attachment viewer capability and reuses workspace scoping for every query.
运行时守护告警与 kill 事件写入服务端审计表，并配有专用取证 CLI。Runtime guard alarm and kill events stream to a server-side audit table with dedicated forensic CLI commands.
所有 agent_task 行均记录 origin_user_id，即便发起方不在工作区成员中，审计链路也能覆盖跨域操作。origin_user_id is recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
工作区引导的"永久跳过"偏好走"跳过现存智能体"迁移，避免通过关闭引导绕过安全检查。Wizard onboarding routes the skip-permanently preference through the new "skip existing agent" migration so disabling onboarding cannot bypass the safety check.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 106–117 迁移：griller 智能体标志、智能体任务交互历史、用量快照去重、持久化用量回执、智能体任务发起用户、待处理任务唯一索引、技能名长度、用户配置文件、运行时守护审计、用户配置 CLI 类型、智能体任务作业运行索引、记忆召回命中计数、用户启用状态、附件 pg_bigm 搜索索引以及敏感 SSH 配置元数据。Apply the database migrations before starting the new server. This release includes migrations 106–117 for griller agent flag, agent-task interaction history, usage snapshot dedupe, durable usage receipts, agent-task origin user, pending-task indexes, skill name length, user config files, runtime guard audit, user config CLI type, agent-task job-run index, memory recall hit count, user account status, attachment pg_bigm search index, and sensitive SSH config metadata.
Linux 守护进程建议改用 mopheus 用户（UID 10001）重新部署，以启用 rootless cgroup v2 与完整进程树守护；当前以 root 运行的守护进程仍可工作，但应尽快完成切换。Linux daemons should be redeployed as the mopheus user (UID 10001) to take advantage of rootless cgroup v2 and the full process-tree guard. Existing root daemons keep working but should be migrated promptly.
工作区可在用户设置 → 运行时配置文件中注册个人运行时配置文件，下一次任务调度将自动按 CLI 类型投递。Existing workspaces can register personal runtime configuration files under User Settings → Runtime Config Files; CLI-type-aware delivery is automatic from the next task schedule.
Linux 守护进程默认上报运行时守护诊断。可通过 mopheus runtime guard events 与 mopheus runtime guard explain <task-id> 进行事后取证。Daemons running on Linux now report runtime guard diagnostics by default. Use mopheus runtime guard events and mopheus runtime guard explain <task-id> for post-mortem forensics.
新增用户账号启停控制，存量账号默认启用。停用用户无法登录且不计入 License 配额。New user account status controls let admins disable individual accounts; legacy accounts default to enabled. Disabled users cannot authenticate and are excluded from license quota counting.

v2.2.3

2026-08-22

重点更新Highlights

守护进程 Claim 传输加密 — 守护进程与服务器之间的 Claim 流量使用每运行时独立的 X25519 密钥端到端密封（issue #556）。守护进程将密钥持久化到专用 keystore，服务器在注册与心跳时校验密钥，明文 fallback 由双重测试守护并具备警告与自愈路径。Daemon claim transport encryption — Daemon↔server claim traffic is now sealed end-to-end with per-runtime X25519 keys (issue #556). Each daemon persists its key in a dedicated keystore, the server validates the key on registration/heartbeat, and plaintext claim fallback is gated by a dual test plan with a warn-and-self-heal path.
工作区引导向导 — 重设计的 7 关引导流程，附带中英双语演示数据、迁移时可选启用演示开关，以及"永久跳过"偏好；现有工作区不会再看到引导界面，记忆蒸馏默认启用。Workspace onboarding wizard — A redesigned 7-quest onboarding flow ships with bilingual demo seeds, an opt-in demo data switch for migrations, and a "skip permanently" preference so existing workspaces do not see onboarding again. Memory distillation is enabled by default as part of the new flow.
技能快捷能力 — 将富技能转化为工单头部一键可执行的快捷动作，提供工作区级能力开关，快捷面板上展示明确的描述（#542、#571）。Skill shortcuts capability — Turn rich skills into one-click executable actions callable directly from ticket headers, with a workspace-level capability toggle and explicit descriptions on the shortcuts UI (#542, #571).
智能体环境变量静态加密 — 智能体环境变量改用每值 ENC1 方案存储，工作区密钥与加密数据分离，运行时仍可即时读取（#554）。Agent environment-variable encryption at rest — Agent env vars are now stored with a per-value ENC1 scheme, keeping the workspace key separate from the encrypted blobs while preserving live reads (#554).
守护进程中断任务恢复 — 守护进程不再因中途关闭而丢任务：新增的恢复流程会在下次启动时还原正在运行的任务，并配套加强 systemctl 与安装阶段的所有权处理（#585、#581）。Daemon task recovery after shutdown — Interrupting a daemon mid-task no longer strands work: the new recovery flow restores in-flight tasks on next startup, paired with refined systemctl and ownership handling during install (#585, #581).
CLI 能力扩展 — 新增 mopheus email send 子命令、聊天消息游标分页列表、ticket/repo/chat 命令的 nextBefore 结构化输出、列表分页信息，以及默认拒绝以 root 身份运行守护进程（#547、#559、#560）。More capable CLI surface — mopheus email send subcommand, chat message listing with cursor paging, structured nextBefore output on ticket/repo/chat commands, list pagination info, and a hard refusal to run the daemon as root by default (#547, #559, #560).

新增New

按 profile 划分的守护进程安装与 systemctl 全生命周期管理，镜像加载改为流式解压以避免重复压缩。Per-profile daemon install and systemctl-managed lifecycle with stream-decompressed image loading to avoid double compression.
技能标签、工作区 bundle 支持，以及新的 shortcuts 特性开关。Skill labels, workspace bundle support, and a new shortcuts feature flag.
跨工单评论控制与重构后的工作区中间件，支撑智能体任务场景。Cross-ticket comment control and refactored workspace middleware for the agent task surface.
mopheus email send 子命令以及带游标分页的聊天消息列表。mopheus email send subcommand and chat message list with cursor paging.
工作区删除事件即时通知已连接客户端。Workspace deleted event notifies connected clients immediately.
默认智能体任务超时由 2h 提升为 24h，原值会备份便于恢复。Default agent-task timeout raised from 2h to 24h, with previous values preserved for restoration.
系统配置页面对未配置项提供专门的视觉区分。Distinguishing visual treatment for unconfigured values on the system config page.
技能快捷能力默认开启，可在工单头部直接调用。Skill shortcut capability enabled by default and usable from the ticket header.
智能体任务父工单唤醒表，支持延迟唤醒、追踪与状态流转时的去重恢复。Agent-task parent wake table with deferred wakes, traces, and deduped resumptions when subtickets move between states.
附件富文本预览及源码切换（#576）。Rich-text attachment preview with a source toggle (#576).

改进Improved

守护进程 Claim 密钥包迁入独立的 claimkey/claimcrypto 路径，配套明确 fallback 与警告自愈覆盖（#591、#588）。Daemon claim key package moved under a dedicated claimkey/claimcrypto path with explicit fallback and warn-and-self-heal coverage (#591, #588).
通道会话来源与任务历史元数据正式纳入会话主记录。Channel session source and task history metadata are now part of the canonical session record.
提供商运行时、评论跟进与 ACP 加固合并到新的 line-protocol runner，共用一套生命周期（#559）。Provider runtime, comment follow-up, and ACP hardening folded into the new line-protocol runner so providers share one lifecycle (#559).
工单依赖可标记为 enforced，未完成的依赖会阻断指派与状态流转。Ticket dependency can be marked enforced so incomplete predecessors block assignment and status changes.
工作区引导流程重画为 7 关，附带中英双语演示数据与永久跳过偏好。Workspace onboarding quest flow redrawn to seven steps with bilingual demo seeds and skip-permanently preference.

安全Security

守护进程 Claim 传输使用 X25519 与每运行时密钥端到端加密；迁移窗口内保留明文 fallback 模式（#556、#580）。Daemon claim transport encrypted end-to-end with X25519 + per-runtime keys; legacy plaintext mode remains for the migration window (#556, #580).
智能体环境变量采用 ENC1 每值方案静态加密，密钥材料不进入数据库行。Agent env vars encrypted at rest using the ENC1 per-value scheme; key material stays out of the database row.
钉钉绑定限制为智能体负责人，关闭此前的跨负责人通道。DingTalk binding restricted to agent owners; the previous cross-owner flow is closed.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 099–105 迁移：技能快捷、智能体任务超时默认值、守护进程公钥列、工作区引导、记忆特性默认启用、智能体任务父工单唤醒以及现有智能体跳过引导。Apply the database migrations before starting the new server. This release includes migrations 099–105 for skill shortcuts, agent-task timeout default, daemon public-key column, workspace onboarding, memory feature default-on, agent-task parent wake, and skip-existing-agent onboarding.
现有守护进程需重新注册（或等待下一次心跳）以生成并持久化 X25519 Claim 密钥；在公钥回填前，Claim 流量仍以明文 fallback 模式运行。Existing daemons must re-register (or wait for the next heartbeat) so they generate and persist their X25519 claim key; daemons without a public key continue to operate in legacy plaintext claim mode until they do.
默认 agent_task_timeout 现为 24h。自定义值会自动备份到 agent_task_timeout_previous；如需保留原行为请在迁移后恢复。The default agent_task_timeout is now 24h. Custom values are backed up to agent_task_timeout_previous automatically; restore them after the migration if the old behavior was intentional.
守护进程必须以非 root 用户运行 —— CLI 默认拒绝以 root 启动，除非显式设置 MOPHEUS_ALLOW_ROOT=1。Run the daemon as a non-root user — the CLI now refuses root execution unless MOPHEUS_ALLOW_ROOT=1 is set.
工作区引导默认开启；现有工作区会被标记为已引导，自动跳过新流程。如需长期关闭，可在偏好中选择"永久跳过"。Workspace onboarding is enabled by default; existing workspaces are marked as already-onboarded so they skip the new flow automatically.

v2.2.2

2026-08-15

重点更新Highlights

钉钉智能机器人与群聊集成 — 打通钉钉 Stream 机器人的完整接入流程，支持 Stream 模式免公网 IP 连接、二维码扫码绑定账号、交互式 Markdown 与卡片消息渲染、双向富媒体附件传输，以及 AES-256 密钥生命周期管理与平滑轮换。DingTalk channel integration — Connect DingTalk Stream bots end to end, including Stream connection mode, QR code account binding, interactive Markdown and card rendering, inbound/outbound media handling, and AES-256 secret lifecycle management.
智能体文件系统可见性沙箱 — 在 Linux 环境下支持基于 Bubblewrap (bwrap) 的文件系统隔离沙箱，将智能体运行时严格限制在指定的工作区、独立临时目录和用户主目录内，杜绝跨工作区与宿主机敏感文件泄露。Agent filesystem sandbox — Protect host environments on Linux using Bubblewrap (bwrap) filesystem isolation, confining agent execution to its workspace and temporary directory while preventing host and cross-workspace leakage.
私有 S3 存储桶与预签名 URL — 新增 s3_private 配置支持私有 S3 兼容对象存储桶，通过 SigV4 预签名 URL 访问附件和媒体资源，无需开放存储桶公网读权限。Private S3 storage & presigned URLs — Support private S3-compatible buckets via SigV4 presigned URLs (s3_private), ensuring secure attachment and media asset delivery without public bucket permissions.
工单定时激活与到期提醒 — 支持设置工单计划激活时间（activate_at），后台调度自动将待处理工单转为进行中状态；提供工单到期自动提醒机制与处理状态追踪。Ticket scheduled activation & due reminders — Schedule tickets for future activation with automatic transition to in-progress status, and track due dates with automated background reminder processing.
模板系统基础设施 — 引入工作区、分组、智能体、团队和技能的复用模板数据库架构与多语言分类目录，为模板化快速初始化奠定基础。Template system foundation — Platform-level schema and multilingual catalog for reusable workspace, group, agent, team, and skill templates.

新增New

支持在智能体设置界面和 API 中直接解绑或清空已分配的运行时。Unbind and clear runtime assignments from agents in both UI and API.
管理员设置新增钉钉集成配置面板，新增 /dingtalk/bind 账号绑定页面与渠道图标。DingTalk bot integration settings in admin configuration, /dingtalk/bind authorization flow, and channel badges.
存储模块支持 s3_private 配置项，启用时自动生成预签名下载链接并配置私有缓存头。Configurable s3_private storage mode for presigned URL delivery and private cache headers.
工单定时激活与到期提醒后台处理机制，支持自动流转与提醒消费记录。Ticket scheduled activation (activate_at) and due date reminder tracking with automatic background dispatch.
向外部聊天渠道推送工单更新时增加标题与可点击引用链接展示。Push ticket updates to external channels formatted with ticket titles and clickable references.
模板系统数据表、分类元数据与中英文多语言翻译定义。Schema, category definitions, and multilingual translations for workspace and entity templates.

改进Improved

统一 Lark/飞书、企业微信和钉钉的通道底层架构，将内容渲染与底层传输彻底解耦。Channel architecture unified across Lark, WeCom, and DingTalk, separating outbound content rendering from transport delivery.
团队成员管理支持按智能体 ID 或成员 ID 进行身份提升（设为负责人）和移除。Team member management allows promoting and removing members by either agent ID or member ID.
Daemon 动态健康检查端口支持持久化并在启动时可靠刷新。Daemon dynamic health ports are persisted and refreshed reliably during daemon startup.
未配置可选登录方式时，Web 登录页默认隐藏未启用的登录入口。Optional login methods in web UI are hidden by default when unconfigured.
后端 HTTP 路由统一集中工作区上下文绑定逻辑。Centralized workspace context binding across backend HTTP routes.

修复Fixed

严格校验并拒绝跨工作区的智能体工单指派，防止租户隔离穿透。Cross-workspace agent ticket assignments are rejected to prevent cross-tenant access.
渠道媒体上传中断时及时清理任务，避免媒体处理协程残留。Interrupted channel media tasks are canceled cleanly to avoid stalled worker routines.
钉钉 Stream 连接在确认回执阶段能够优雅容忍网络断开并自动重连。DingTalk Stream connections tolerate network disconnects gracefully during acknowledgment.
修复 CLI 移除工单依赖时的 API 接口路由路径错误。CLI ticket dependency removal uses the correct API endpoint.
准确识别系统评论，清晰区分跨工单任务评论之间的关联关系。System comments and cross-ticket task relationships are identified accurately.
修复工单事件触发时 WebSocket 实时刷新面板看板状态的同步问题。Real-time ticket boards refresh immediately on ticket status changes via WebSocket events.
测试套件隔离用户本地 ~/.config 和 HOME 目录，消除不必要的后端测试延迟。Test suites isolated from user ~/.config and HOME directories with improved execution speed.

安全Security

智能体文件系统可见性沙箱（bwrap）防止对宿主机非授权路径的访问与跨工作区越权。Agent filesystem visibility sandbox (bwrap) prevents unauthorized host filesystem access and workspace crossing.
工单指派边界强化跨工作区校验，杜绝权限绕过。Cross-workspace authorization enforced on agent ticket assignment boundaries.
钉钉机器人凭据采用 AES-256 静态落盘加密，并提供平滑密钥轮换机制。DingTalk bot secrets encrypted at rest with AES-256 and seamless key rotation support.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 094–098 迁移：钉钉通道支持、私有 S3 存储配置、工单定时激活与到期提醒、模板系统表结构以及工单激活请求人记录。Apply database migrations before starting the updated server. This release includes migrations 094–098 for DingTalk channel support, private S3 configuration, ticket timing/reminders, template system schema, and ticket activation requester auditing.
如需启用 Linux 智能体文件系统沙箱，请在宿主机安装 bubblewrap（bwrap）并在环境配置中设置 MOPHEUS_SANDBOX_ENABLED=true。To enable the Linux agent filesystem sandbox, install bubblewrap (bwrap) on host runtime machines and set MOPHEUS_SANDBOX_ENABLED=true.
使用私有 S3 兼容存储桶时，请将 s3_private 设置为 true，以确保存档文件下载通过 SigV4 预签名链接安全访问。For private S3 bucket deployments, enable s3_private in platform configuration so attachment downloads automatically use SigV4 presigned URLs.

v2.2.1

2026-08-12

重点更新Highlights

企业微信智能机器人集成 — 打通企业微信机器人的完整接入流程，包括引导配置、身份与会话绑定、接收媒体、向外发送工单与任务更新，以及中英文管理与产品文档。WeCom smart-bot integration — Connect WeCom bots end to end, including onboarding, identity and session binding, inbound media, outbound ticket and task updates, and bilingual administration and product documentation.
可追踪、可延迟的智能体任务 — 评论触发的任务会合并后续跟进；附件准备完成前任务可以进入延迟状态；工单详情新增交互式任务流视图，展示评论、委派、下游工单和任务状态。Traceable and deferred agent work — Comment-triggered tasks coalesce follow-ups, tasks can wait in a deferred state until attachments are ready, and ticket details include an interactive task-flow view for comments, delegation, downstream tickets, and task status.
领域感知的记忆蒸馏 — 支持自动、仅通用和专业模式；记录实际生效的技能用于审计；使用通用记忆类型名称；强制重新蒸馏改为原子操作，只有成功创建替代任务时才会清理现有记忆。Domain-aware memory distillation — Distillation supports automatic, general-only, and specialty modes, records effective skills for audit, exposes generic memory type names, and makes forced re-distillation atomic.
更完善的智能体管理 — 工作区成员可批量分配运行时、归档、恢复和转移负责人，并进行全量校验；服务器端强制执行私有智能体权限；默认智能体 License 配额提升为 10。Stronger Agent administration — Workspace members can bulk assign runtimes, archive, restore, and transfer ownership with all-or-nothing validation; private Agent permissions are enforced server-side and the default Agent license quota is 10.

新增New

按用户和工作区持久化工单筛选条件与搜索条件；URL 日期范围保持最高优先级，面板各列统一应用日期过滤。Persisted ticket filters and search per user and workspace, with URL date ranges remaining authoritative and date filters applied consistently to board columns.
按使用情况和负责人筛选技能；新增与 SKILL.md 同步的记忆蒸馏能力开关；手工创建技能的表单简化，并提供 Frontmatter 校验与明确错误信息。Skill filtering by usage and owner, a memory-distillation capability toggle synchronized with SKILL.md, and a simplified manual creation form with Frontmatter validation and actionable errors.
多服务器部署支持基于 Redis 共享本地技能发现与导入请求状态；单服务器部署继续使用内存回退方案。Redis-backed shared state for local Skill discovery and import requests in multi-server deployments, with the existing in-memory fallback for single-server deployments.
工作区收件箱未读角标、持久化侧边栏折叠状态、折叠侧边栏中的置顶工单入口、记忆筛选总数，以及智能体任务悬浮控件位置持久化。Workspace inbox unread badges, persisted sidebar collapse state, pinned-ticket access in the collapsed sidebar, memory filtered totals, and persisted floating agent-task control placement.
通道会话来源与任务历史、工作区用户绑定同步、统一的智能体运行时配置、CLI 交互式 token 登录，以及支持的安装器自动配置 CLI 工具。Channel session source and task history, workspace user binding synchronization, consolidated Agent runtime configuration, CLI interactive token login, and automatic CLI tool configuration in supported installers.

改进Improved

技能元数据编辑现在以完整的 SKILL.md（包括 Frontmatter）作为唯一编辑来源；支持的保存和导入覆盖流程会据此生成数据库投影。Skill metadata editing now uses the complete SKILL.md source, including Frontmatter, as the canonical editing surface; database projections are derived during supported saves and import overwrites.
ZIP 与文件系统技能导入共用同一发现遍历器，统一忽略 macOS 元数据并校验解压路径。ZIP and filesystem Skill imports now share one discovery walker that consistently ignores macOS metadata and validates extracted paths.
工单、智能体、团队和自动任务的创建与编辑界面统一应用编辑器显示偏好。Editor display preferences apply consistently to ticket, Agent, team, and scheduled-task creation and editing surfaces.
团队负责人委派指引现在要求有效的提及链接，并在执行前扫描裸 @。Team-leader delegation instructions now require valid mention links and a bare-@ preflight scan.
工单讨论新增父子回复导航、跳转到最后回复、更可靠的收件箱目标滚动、更紧凑的工具栏，以及任务图实时刷新。Ticket discussions gained parent/reply navigation, last-reply shortcuts, more reliable inbox-target scrolling, a more compact toolbar, and live task-graph refreshes.
运行时列表将离线项置于末尾，并显示负责人名称而不是负责人 ID。Runtime lists put offline entries last and show owner display names instead of owner IDs.
在线安装增强了对 CLI 资源不可用、Podman Docker 别名、静默 wget、文本附件扩展名确定性以及 PowerShell 安装流程的处理能力。Online installation is more resilient across unavailable CLI assets, Podman Docker aliases, quiet wget execution, deterministic text attachment extensions, and the PowerShell installer path.

修复Fixed

Claude、Codex、KimiCode、OpenCode、ACP 与 Pi 的运行时 panic 现在限制在对应任务内；清理、终端结果、会话 ID 与通道关闭行为保持确定性。Provider runtime panics are contained to the affected task across Claude, Codex, KimiCode, OpenCode, ACP, and Pi; cleanup, terminal results, session IDs, and channel closure remain deterministic.
父工单详情中继续显示已归档的子工单，同时普通工单列表默认仍隐藏已归档工单。Archived subtickets remain visible from their parent while general ticket lists continue to hide archived tickets by default.
评论派发正确处理成员后续回复、自提及、缺失的合并任务 ID，以及 pending/running 任务的后继任务，不再丢失工作。Comment dispatch handles member follow-ups, self-mentions, missing coalesced IDs, and pending/running task successors without losing work.
企业微信凭据轮换与加密媒体元数据处理更加安全；缺失 webhook trigger 时不再触发 nil 错误。WeCom credential rotation and encrypted media metadata handling are safer, and missing webhook triggers no longer cause nil failures.
技能 Frontmatter 样式与 Markdown 编辑行为统一；重复的手工技能名称会显示明确错误；本地技能请求轮询可跨 API 实例工作。Skill Frontmatter styling and Markdown editing are consistent, duplicate manual Skill names produce a specific error, and local Skill request polling works across API instances.
修复搜索键盘导航、空工单建议、工单提及、智能体任务消息输出存储、快照轮询、悬浮按钮位置持久化，以及延迟/终态任务状态过滤的一致性问题。Search keyboard navigation, empty ticket suggestions, ticket mentions, agent-task message output storage, snapshot polling, FAB placement persistence, and deferred/terminal task status filtering now behave consistently.
CLI 在智能体任务内运行时拒绝切换工作区，避免任务上下文被静默切换。The CLI refuses workspace switching while operating inside an Agent task.

安全Security

技能 ZIP 解压会拒绝路径穿越，并在发现文件前统一过滤元数据。Skill ZIP extraction rejects path traversal and applies centralized metadata filtering before discovery.
服务器端强制执行私有智能体的编辑、管理和负责人转移权限；批量操作先完整校验，不会产生部分变更。Private Agent edit, management, and ownership-transfer permissions are enforced by the server, including bulk operations with pre-validation and no partial mutation.
企业微信密钥轮换过程保持可解密性；运行时 panic 详情保留在服务器日志中，不暴露给任务用户。WeCom secret-key rotation preserves decryptability during transitions, and provider panic details remain in server logs rather than task-facing errors.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含评论任务合并、延迟任务状态、二进制任务输出、企业微信/通道元数据、任务流种子数据、中文全文搜索和通道会话标识相关迁移。Apply the normal database migrations before starting the new server. This release includes migrations for comment-task coalescing, deferred task status, binary task output, WeCom/channel metadata, task-flow seed data, Chinese full-text search, and channel session identifiers.
systemd 单元名称已改为 mopheus-daemon.service；请更新仍引用旧单元名称的服务管理脚本。The systemd unit is now named mopheus-daemon.service; update service-management automation that still references the former unit name.
启用企业微信集成前请配置新的企业微信设置。多服务器部署应配置 Redis，以便在 API 实例之间共享本地技能发现与导入请求状态。Configure the new WeCom settings before enabling the integration. Multi-server installations should configure Redis so local Skill discovery/import request state is shared across API instances.
技能编辑器无需手工改写数据；现有 SKILL.md 的 Frontmatter 会在后续支持的保存和覆盖导入操作中成为权威来源。No manual data rewrite is required for the Skill editor changes; existing SKILL.md Frontmatter becomes the canonical source during subsequent supported saves and overwrites.

v2.2.0

2026-08-06

新增New

通道整合 — Lark 与飞书统一在同一通道引擎下，支持媒体状态清理、任务批处理语义以及按工作区隔离的聊天写入。Channel unification — Lark and Feishu consolidated under one channel engine with media-state cleanup, task-batching semantics, and workspace-scoped chat writes.
守护进程身份与新运行时 — 运行时注册支持 profile tag，守护进程按 profile 区分身份，并新增 pi-coding-agent 提供商。Daemon identity & new runtime — profile-tagged runtime registration, per-profile daemon identity, and a new pi-coding-agent provider.
工作区管理 — 批量邀请并附带技能、运行时可见的资源授权、支持分页与刷新授权的角色，以及新增的资源授权模型。Workspace management — batch invites that include skills, visible resource grants on runtimes, paginated roles with refresh grants, and a new resource-grant model.
RBAC 资源授权 — 成员可自助管理智能体访问，智能体生命周期操作按工作区隔离。RBAC resource grants — self-managed agent access for members and lifecycle operations gated by workspace scope.
工单与元数据 — 元数据 CRUD 走 service 层并配套选择器 UI，新增评论 Enter 键行为偏好、工单列表搜索过滤器，my-tickets 范围过滤下推到后端。Tickets & metadata — metadata CRUD via the service layer with a picker UI, comment Enter-key behavior preference, ticket list search filter, and my-tickets scope filtering pushed to the backend.
CLI 增强 — 新增 skill list 查询参数；工单命令支持 --project-id 别名；智能体与团队创建命令支持 --description-stdin 与 --description-file。CLI surface — skill list query flags, ticket list search filter, --project-id alias on ticket commands, --description-stdin and --description-file on agent and team create.
个人偏好设置 — 个人偏好、通知设置、键盘快捷键录制与编辑器显示模式偏好。Profile & preferences — personal preferences, notification settings, keyboard shortcut recording, and editor display-mode preferences.
任务清单 — 智能体任务新增随任务运行的本地 checklist。Agent-task checklist — per-task run-local checklist surfaced to CLI sessions.
License CLI — mopheus-license 新增模板预设。License CLI — template presets available in mopheus-license.

改进Improved

编辑器行为 — Enter 与 Mod-Enter 互补处理；检测快捷键冲突；/add comment 风格在提示词中统一。Editor behavior — Enter / Mod-Enter complementary handling, shortcuts conflict detection, and /add comment style unified across prompts.
蒸馏流程 — 记忆更新支持重新蒸馏的选择信号；去重逻辑与 mopheus memory 子命令对齐。Distillation — redistillation choices signal for memory refinement; dedup logic aligned with mopheus memory subcommand.
激活与注册 — 运行时注册时保留激活状态；新智能体默认 normal 角色。Activation & registration — runtime activation preserved on register; new agents default to the normal role.
国际化 — 工作区设置页各 Tab 完成翻译；新增记忆角色范围标签。i18n — workspace settings tabs translated; memory role scope label added.
守护进程运行时 — 每次智能体任务运行后清理任务级技能。Hermes channel — per-task skills cleared between agent-task runs.
Codex 沙箱 — macOS 沙箱与 Linux 行为对齐。Codex sandbox — macOS sandbox aligned with the Linux behavior.
通道安装流程 — 接受邀请后刷新工作区列表；删除时清理媒体状态。Channel install flows — workspaces refresh after invitation acceptance; media state cleaned on deletion.
输出示例 — slim 提示词的 repo 命令样例与现行 CLI 参数对齐；新增按提供商的 task tracking 说明。Output guidance — slim repo command examples aligned with current CLI flags; provider-specific task tracking guidance added.

修复Fixed

跨工作区加固 — 关闭团队 CRUD、成员加入、智能体生命周期、jobs/triggers/runs、运行时、收件箱操作、技能 CRUD、附件、工单 pin、标签、团队负责人、聊天写入、Lark 安装绑定以及 License 配额检查中残留的跨工作区泄漏。Cross-workspace hardening — closing leaks in team CRUD, member onboarding, agent lifecycles, jobs/triggers/runs, runtimes, inbox operations, skill CRUD, attachments, ticket pins, labels, team leaders, chat writes, Lark installation/binding, and license quota checks.
品牌重命名 — moclaw → mopheus，覆盖 CLI、脚本、文档与各包。Brand rename — moclaw → mopheus across CLI, scripts, docs, and packages.
标签操作类型重命名 — TicketLableOperationParams → TicketLabelOperationParams。Label operation type rename — TicketLableOperationParams → TicketLabelOperationParams.
鉴权 — 明确当前密码要求；JWT 过期单独报告；集中用户错误码。Auth — current-password requirement clarified; expired JWT sessions report a distinct error; user error codes centralized.
守护进程 — 先前工作目录失效时优雅处理；运行时被禁用时允许负责人心跳；心跳回收限定为快照长度。Daemon — graceful handling when the prior working directory is unavailable; allow owner heartbeats when the runtime is disabled; bound heartbeat drain to snapshot length.
工作区 — 仅负责人可删除；接受重命名前的 License 代码；配置变更后刷新工作区数据。Workspace — enforce owner-only deletion; accept pre-rename license codes; refresh workspace data on config changes.
迁移与安装升级 — 跨升级保留已有表数据与自定义系统配置；避免重复注入已迁移的环境变量；强化重命名后的升级脚本。Migration & install upgrades — preserve existing table data and custom system config across upgrades; avoid duplicating migrated environment keys; harden renamed upgrade scripts.
技能 — 技能列表分页；统一脚本文件权限；恢复导入编排。Skills — paginated skills list, normalized script file permissions, renewal of import orchestration.
智能体 — 监听 kimi 缺会话日志并自动重试 resume；配置 ACP 非交互权限；运行时离线时任务进入队列；将 Codex 计划更新作为工具事件上报。Agent — detect kimi missing sessions from stderr and retry resume; configure ACP unattended permissions; queue agent tasks when the runtime is offline; surface Codex plan updates as tool events.
通知 — 当前聚焦窗口时抑制横幅；允许前台通知测试。Notifications — suppress banners while focused; foreground tests allowed.
编辑器 — 限制大附件预览；长评论导航、聊天消息复制按钮、按结构化 ID 路由群体 @ 提及。Editor — limit large attachment previews; long-comment navigation, chat copy button, group mention routing by structured ids.
收件箱 — 合并工单已读与归档操作；单项操作按工作区与收件人隔离。Inbox — group ticket read and archive actions; scope single-item operations by workspace and recipient.
通道 — 保留侧边栏聊天入口；删除时清理媒体状态。Hermes channel — keep the sidebar chat available; clean media state on deletion.
后端 — 运行时被禁用但负责人在线时允许心跳与注册；守护进程解决 claim 的工作区；为 JOIN 查询补全列限定。Backend — allow heartbeat and registration for disabled runtimes when the owner is active; resolve daemon claim workspace; qualify joined SQL column references.

v2.1.3

2026-07-21

新增New

知识图谱 — 基于 AGE 的知识图谱，支持子图导航与编辑操作（合并标签、移除边、更新节点元数据），并提供 RebuildGraph 命令。Knowledge graph — AGE-backed knowledge graph with subgraph navigation, edit operations (merge tags, remove edge, update node metadata), and a RebuildGraph command.
记忆系统 — 工作区记忆以文件形式写入供智能体提示注入；智能体工作流内置检索指引；认领时按工单上下文触发 recall；检索结果表格新增标题；CJK 按范围检索；删除最后一条记忆时清理蒸馏状态；删除后让所有记忆查询失效；新增 hasEmbedding 字段；支持按字段编辑与 JSON view 编辑器；CLI 新增 --disable-memory-retrieve 标志。Memory system — workspace memories written as files for agent prompt injection, retrieval guidance for agent workflows, recall by ticket context at claim time, table output with title, scoped CJK retrieval, status cleanup on memory deletion, invalidation of all memory queries on delete, hasEmbedding field, per-field editing, JSON view editor for context tags, and a --disable-memory-retrieve CLI flag.
搜索 — 工单基于 pg_bigm 的 CJK 子串与多词分层搜索，CJK 文本搜索增加 ILIKE 子串兜底，并通过 zhparser 提供中文全文搜索。Search — pg_bigm-backed CJK substring and multi-word tiered search for tickets, ILIKE substring fallback for CJK, and Chinese full-text search via zhparser.
技能体验 — 可搜索的技能选择器附带表格视图；页面进入时重新拉取；展示技能总数；保留列表搜索状态；导入时保留文件权限。Skills UX — searchable skills dialog with table view, page-entry refetch, total skill count, list search state preserved, and file mode preservation during import.
License — 离线授权强制生效；默认记忆上限提升到 50。License — offline authorization enforcement and the default memory limit raised to 50.
CLI 增强 — tickets create 接受 --parent（作为 --parent-id 别名）与 --project-id 别名；智能体与团队创建命令新增 --description-stdin 与 --description-file。CLI surface — tickets create accepts --parent as an alias of --parent-id and --project-id as an alias; agent and team create commands gain --description-stdin and --description-file.
侧边栏与导航 — 侧边栏展示被 pin 的工单；工单区段默认折叠并限制附件显示数量。Sidebar & navigation — pinned tickets shown in the sidebar and default-collapsed ticket sections with limited attachment display.
智能体任务悬浮按钮 — 扩展为 6 个停靠位并入 FabGroup，新增专属工单链接按钮与更宽的抽屉。Agent-tasks FAB — expanded to six anchor positions and stacks in FabGroup, with a dedicated ticket link button and widened drawer.
运行时导入 — 运行时导入对话框支持搜索过滤。Runtime import — search filtering in the runtime import dialog.
守护进程控制 — 单任务 subagent 上限通过提示注入生效；按任务清理 ~/.claude/projects 缓存；解析 subagent 生命周期事件。Daemon control — per-task subagent limit with prompt injection and ~/.claude/projects cache cleanup per task; subagent lifecycle event parsing.
智能体环境 — Claude 启用任务级 CLAUDE_CONFIG_DIR；cliProvider 接入 homeSeeder 钩子。Agent environment — task-scoped CLAUDE_CONFIG_DIR for Claude and a homeSeeder hook on cliProvider.

改进Improved

守护进程 WebSocket 稳定性 — 部署后刷新过期客户端；工单 WebSocket 事件触发后让工单面板查询失效。WebSocket client stability — refresh stale clients after deploy; invalidate the tickets-board query on ticket WS events.
智能体任务活动 — 任务列表接口恢复批量用量；消息懒加载并支持分页。Agent-task activity — restore batch usage in the task list endpoint; lazy-load messages with pagination.
蒸馏提示词 — 在聊天模式下加强记忆检索触发条件；校准记忆 CLI 命令引用。Distillation prompt — strengthen memory retrieval trigger in chat mode; tighten memory CLI command references.
编辑器 — 从右下角点击悬浮按钮时跳到左上；抑制无意义的扩展注入噪声。Editor — FAB jumps to top-left on click from bottom-right position; suppress body hydration extension noise.
工单体验 — 设置父工单后恢复页面可点击性；智能体任务悬浮按钮支持拖到角落；评论与活动时间线显示绝对时间。Tickets UX — restore page clickability after setting parent ticket; agent task floating action button drag-to-corner behavior; absolute timestamps in comment and activity timeline.
默认提示词 — 强化 slim 提供商提示词；Claude 默认提示词由 v1 切换为 v2。Default prompt — slim provider prompt hardened; Claude default prompt switched from v1 to v2.

修复Fixed

记忆 — 修正 V1 记忆提示词路径与索引格式；修正 searchSimilarMemories 的 SQL 参数编号与范围过滤；处理最后一轮评审意见。Memory — fix V1 memory prompt paths and index format; fix searchSimilarMemories SQL parameter numbering and scope filtering; address final review findings.
技能 — 导入时保留文件权限；导入时保留脚本元数据；保留可执行的技能脚本；批量智能体使用情况查询；进入页面重新拉取列表；显示技能总数。Skills — preserve file modes during import; preserve script metadata during import; preserve executable skill scripts; batch agent usage lookup; refetch list on page entry; show total skill count.
安装与打包 — 避免重复拷贝已下载的归档包；在线升级拉取所有服务，不仅限后端+前端；加固跨平台在线安装脚本；更新安装环境示例。Install & packaging — avoid copying downloaded archives; pull all services during online update, not just backend and frontend; harden online install scripts across platforms; update install env example.
守护进程 — Claude 缓存清理按任务范围；技能运行后恢复工作流；监听 Kimi stderr 中缺失的会话日志；缺失 resume 时重试。Daemon — scope Claude cache cleanup per task; resume workflow after skill runs; detect Kimi missing sessions from stderr; retry missing resume sessions.
工单 — 校验元数据 JSON 过滤器；仓库查询绑定事务；删除工单后工单面板保持原位。Tickets — validate metadata JSON filters; bind repositories to transactions; keep the board in place after delete.
Web — 部署后刷新过期客户端；移除未使用的 serverActions 配置；处理最后一轮评审意见。Web — refresh stale clients after deploy; remove unused serverActions config; clean up final review findings.
工单作用域 — 级联删除 memory_source 与 memory_distillation。Tickets scope — cascade delete memory_source and memory_distillation.
智能体 — 保留可执行的技能脚本；提示完成后停止 ACP 进程。Agent — preserve executable skill scripts; stop ACP process after prompt completion.
提示词 — 让记忆检索指引与现行 CLI 标志一致。Prompt — restore memory retrieval guidance references to match actual CLI flags.

v2.1.2

2026-07-08

新增New

Codex 提供商 — Codex 运行时支持，智能体执行能力对齐（MCP、沙箱、记忆处理、会话用量跟踪）。Codex provider — Codex runtime support with full agent execution parity (MCP, sandbox, memory handling, session usage tracking).
GitHub 集成 — 注册仓库、同步 PR 与 Issue、关联到工单，并从 CLI 驱动完整的 checkout → 编码 → PR → 同步流程。GitHub integration — Register repositories, sync PRs and issues, link them to tickets, and drive the full checkout → code → PR → sync workflow from the CLI.
群聊 — 话题、表情回应、回复、成员管理、提及过滤、可点击的工单标识符和悬浮卡片。Group chat — Topics, reactions, replies, member management, mention filtering, clickable ticket identifiers, and hover cards.
技能导入 — 支持从 URL 导入、解析 GitHub、上传 zip 或本地导入。Skill import — Import skills from a URL, parse from GitHub, upload a zip, or import locally.
权限（RBAC） — 观察者（Observer）角色、邀请成员时选择角色、新增细粒度权限。RBAC — Observer role, role selection during member invites, and new scoped permissions.
/note 命令 — 在评论中抑制智能体触发。/note command — Suppress agent triggering from a comment.

改进Improved

工单与工作区体验：脏数据守卫、显式的编辑/保存/取消流程、右键菜单选择器、标识符前缀、终态状态级联到子工单。Ticket and workspace UX: dirty guards, explicit edit/save/cancel flows, context-menu pickers, identifier prefixes, terminal status cascading to subtickets.
智能体任务悬浮按钮、活动任务展示和拖拽到角落。Agent task floating action button, active-task display, and drag-to-corner behavior.
Helm chart 与安装/更新打包。Helm chart and install/update packaging.
营销站点脚手架（Next.js + i18n）。Marketing site scaffold (Next.js + i18n).

修复Fixed

守护进程 WebSocket 稳定性（减少不必要的重连；修复强制重新注册时的 1006）。Daemon WebSocket stability (fewer unnecessary reconnects; fixed 1006 on forced re-registration).
按会话上下文修复智能体任务触发评论的去重。Agent task trigger-comment deduplication by thread context.
仓库查询别名、NULL 扫描处理、重复仓库 URL、UUID 解析和缺失的触发线程 ID。Repository query aliases, NULL scan handling, duplicate repo URLs, UUID resolution, and missing trigger thread IDs.
全零用量桶不再显示为合成的模型行。All-zero usage buckets no longer appear as synthetic model rows.
长评论显示、提及选择器键盘选择、时间线折叠和记忆提取界面。Long comment display, mention picker keyboard selection, timeline collapsing, and memory extraction UI.

v2.1.1

2026-06-30

本版本包含围绕 `runtime_daily` 的数据库和用量上报变更。依赖运行时用量总数据前请先执行迁移。Includes database and usage-reporting changes around `runtime_daily`. Apply migrations before relying on runtime usage totals.

新增New

工作区 slug 实时校验，随机后缀生成更安全。Live workspace slug validation with safer random suffix generation.
全局搜索中的工单 ID 匹配，元数据值渲染为可点击 URL。Ticket ID matching in global search and clickable URLs for metadata values.
运行时用量准确性 — 任务计数改用 runtime_daily 作为来源；缓存 Token 总量在用量中展示。Runtime usage accuracy — task counts now sourced from runtime_daily; cache token totals surfaced in usage reporting.
远程 CLI 安装和安装备份工具。Remote CLI installation and install backup tooling.
智能体运行列表中展示请求者和运行时信息；仪表盘活动日志改进。Requester and runtime info in agent run lists; dashboard activity log improvements.

改进Improved

提示词元数据键拆分为必选和可选两级。Prompt metadata split into mandatory and optional tiers.
飞书区域标签统一为 "Feishu" / "飞书"。Feishu region labels unified to "Feishu" / "飞书".
测试覆盖率：webhook 80.8% → 88.8%，鉴权 80.8% → 94.2%。Test coverage: webhooks 80.8% → 88.8%, auth 80.8% → 94.2%.

修复Fixed

工单元数据 CLI 对响应信封的解析。Ticket metadata CLI parsing against response envelopes.
运行时用量重复计数；数字输入框在退格时卡在 0。Runtime usage double-counting; number inputs stuck at 0 on backspace.
按扩展名覆盖附件 content-type；重复添加成员（409）。Attachment content-type via extension overrides; duplicate member add (409).
隐藏智能体环境变量字段的浏览器自动填充；CLI 在 401 时的会话重试；安装健康检查端点路径。Browser autofill on hidden agent env-var fields; CLI session retry on 401; install health-check endpoint path.

v2.1.0

2026-06-25

首个 2.x 版本。发布时未逐条记录详细说明。Initial 2.x release. Detailed per-item notes were not captured at tag time.

需要产品内文档视图？请打开官网首页或前往中文更新日志 / English changelog。Prefer the in-product docs view? Open the homepage or visit the Chinese changelog / English changelog.

RELEASES · CHANGELOG

更新日志Release notes

最新可下载版本：v2.2.13 · 此版本更新说明待同步。

在文档中查看完整更新日志 →View full changelog in docs →

v2.2.7

2026-09-19

重点更新Highlights

IT 资产本体与拓扑图 — 内置 17 个权威概念与 7 个规范谓词，配合严格的 JSONSchema 属性校验、基于权重的 Dijkstra / BFS 最短路径求解器、多跳邻域遍历以及 mop asset apply/inspect/resolve/topology/path/concept list|get CLI 命令面；同步提供 mopheus-assets 内置技能以及三语文档（#515）。IT asset ontology and topology graph — 17 authoritative concepts and 7 canonical predicates with strict JSONSchema attribute validation, weighted Dijkstra and BFS shortest-path solver, multi-hop neighborhood traversal, and a CLI surface (mop asset apply/inspect/resolve/topology/path/concept list|get). Ships with the mopheus-assets builtin skill and trilingual documentation (#515).
JumpServer SSH 提供商 — 首个 SSH 提供商，覆盖 mop ssh list|exec|upload。连接前会解析授权资产与账号，支持连接用户、脚本、环境变量、密钥与 Connection Token 鉴权，JumpServer 节点树缓存以及 KoKo SFTP 上传；工程细节见 docs/mopheus-ssh.md（#964）。JumpServer SSH provider — First SSH provider with mop ssh list|exec|upload. Resolves authorized assets and accounts before connecting, supports connection users, scripts, environment variables, private-key and Connection Token authentication, JumpServer node-tree caching, and SFTP upload via KoKo. Engineering details in docs/mopheus-ssh.md (#964).
运行时配置模板分组 — 运行时配置文件被建模为由 CLI 组拥有多个文件的结构。mes-cli 组同时暴露 ~/.mes/config.yaml 与敏感文件 ~/.mes/token.env 并加密存储。新增 mop user config-file render|get|delete 命令以及 Web UI 分组渲染（#950）。Grouped runtime configuration templates — Runtime config files are modelled as CLI groups owning one or more files. The mes-cli group now exposes both ~/.mes/config.yaml and the sensitive ~/.mes/token.env with encrypted storage. Adds mop user config-file render|get|delete and grouped Web UI rendering (#950).
通道安装消息与技能 — 新增 mop channel 安装、绑定、聊天与发送 CLI 流程，安装感知的智能体授权、发送持久化、mopheus-channel-messaging 内置技能以及 E2E 覆盖。Channel installation messaging and skill — New mop channel install, bind, chat, and send flows with installation-aware agent authorization, outbound persistence, the mopheus-channel-messaging builtin skill, and E2E coverage.
通道留存清理 — 新增由 channel_retention Cron 驱动的清理端点，配合仓储与服务层管道以清除过期发送记录与孤儿安装状态（#934 衍生）。Channel retention cleanup — New channel_retention cron-driven cleanup endpoint plus repository and service plumbing to purge stale outbound records and orphaned installation state (#934-adjacent).
守护进程跨会话断点续传 — 新增 original_agent_task_id 血统追踪、一级孤立尝试续传、二级多跳祖先会话继承、Antigravity 会话持久化到工作区提供商状态以及结构化重试提示词（#936）。Daemon session-inherited breakpoint resumption — Adds original_agent_task_id lineage, Tier 1 orphan attempt resumption, Tier 2 multi-hop ancestor session inheritance, Antigravity conversation persistence into workspace provider-state, and structured retry prompt guidance (#936).
Swagger API 文档 — 补齐 HTTP 端点文档并生成 Swagger 资源，可选 Swagger UI、Bearer 鉴权元数据以及跨运行时配置的集中环境解析。Swagger API documentation — Documented HTTP endpoints with generated Swagger assets, optional Swagger UI, Bearer auth metadata, and centralized environment parsing across runtime configuration.
工作区设置中的资产与运行时守护特性开关 — 补齐 asset（IT 资产本体）和 runtime_guard（运行时任务守护）特性开关，将 widget 改名 "Ticket Widgets"，并按字典序排列以与 Admin Site 对齐（#970）。Asset and runtime-guard feature flags in workspace settings — Adds the missing asset (IT Asset Ontology) and runtime_guard (Runtime Task Guard) flags to workspace features, renames widget to "Ticket Widgets", and orders features alphabetically to match the Admin Site (#970).
前端存储加固 — 在 localStorage / sessionStorage 被拒绝、只读或耗尽的浏览器与嵌入式场景中稳定运行（#961）。Hardened frontend storage — Survives browsers and embedding contexts where localStorage or sessionStorage are denied, read-only, or exhausted (#961).
WeCom 发布通知 — 发布工作流在配置了 WeCom webhook 密钥时，会在成功后发送通知消息。WeCom release notifications — The release workflow now posts a success message to WeCom when the configured webhook secret is set.
资产拓扑探查智能体技能 — mopheus-assets 让智能体在故障排查与爆炸半径分析中查询、解析与遍历企业资产拓扑。Asset topology explorer agent skill — mopheus-assets lets agents query, resolve, and navigate enterprise asset topologies for incident response and blast-radius analysis.

新增New

IT 资产本体、拓扑图与概念校验（#515）。IT asset ontology, topology graph, and concept validation (#515).
mop asset 命令族：apply、inspect、resolve、topology、path 与 concept list|get。mop asset command suite: apply, inspect, resolve, topology, path, and concept list|get.
IT 资产三语（英/简中/日）文档与 Excel 资产台账模板。IT asset documentation in English, Simplified Chinese, and Japanese with an Excel asset ledger template.
JumpServer SSH 提供商及 mop ssh list|exec|upload 与工程文档（#964）。JumpServer SSH provider with mop ssh list|exec|upload and engineering documentation (#964).
运行时配置模板分组，含嵌套 Files 与 mes-cli/token.env 敏感模板（#950）。Grouped runtime configuration templates with nested Files entries and the mes-cli/token.env sensitive template (#950).
通道安装消息、绑定 CLI 流程、发送持久化与 mopheus-channel-messaging 内置技能。Channel installation messaging, binding CLI flows, outbound persistence, and the mopheus-channel-messaging builtin skill.
通道留存清理 Cron、仓储支持以及工作区分域留存配置。Channel retention cleanup cron job, repository support, and workspace-scoped retention configuration.
守护进程跨会话断点续传，含重试血统与 Antigravity 会话持久化（#936）。Daemon session-inherited breakpoint resumption with retry lineage and Antigravity conversation persistence (#936).
Swagger 文档与环境配置，可选 Swagger UI 集成。Swagger docs and env config with optional Swagger UI integration.
工作区设置中的 asset 与 runtime_guard 特性开关以及 useFeatureFlags Hook（#970）。asset and runtime_guard feature flags in workspace settings and the useFeatureFlags hook (#970).
与 widget、memory 并列的 runtimeGuard 与 asset 特性开关。runtimeGuard and asset flags alongside the existing widget and memory flags.
钉钉集成截图与全新搭建指南。DingTalk integration screenshots and refreshed setup guide.
兼容 BSD sed 的在线 CLI 安装脚本。BSD-sed-compatible online CLI install scripts.
飞书音频消息下载修复，钉钉与企业微信媒体下载生命周期日志。Lark audio-message download fix and media download lifecycle logging for DingTalk and WeCom.
Admin Site 与工作区设置按规范顺序展示特性开关。Workspace feature-flag ordering in Admin Site and Workspace Settings to match the canonical list.
Web UI 配置子菜单与 SkillFileTree 目录节点文件创建控件。Config-file submenus and SkillFileTree directory-node file creation controls in the Web UI.

改进Improved

通道发送加固：跨集成的重试语义、键/原因注册表与作用域执行（#911 续作）。Outbound channel delivery hardened with retry semantics, key/reason registries, and scope enforcement across all integrations (#911 follow-ups).
通道安装存储在绑定令牌轮换与重绑期间保留用户配置快照。Channel installation store retains user-profile snapshots across binding-token rotations and rebinds.
mop profile 与配置文件按"全局基线 + 工作区覆盖"解析，模板改为服务端管理。mop profile and config files are resolved from a global baseline plus per-workspace overrides; templates are now server-owned.
mop channel CLI 新增 install、bind、chat、send 子命令，支持安装感知的智能体任务授权。mop channel CLI gains install, bind, chat, and send subcommands with installation-aware agent-task authorization.
在 localStorage / sessionStorage 不可用、只读或耗尽时回退至内存态（#961）。Frontend storage falls back to in-memory state when localStorage or sessionStorage are unavailable, read-only, or exhausted (#961).
运行时下拉隐藏已禁用或不可用运行时（#926）。Runtime picker dropdown hides disabled and unusable runtimes (#926).
Web 管理设置与工作区设置按 asset、git、memory、runtime_guard、shortcuts、widget 规范顺序展示特性。Web admin settings and workspace settings now show asset, git, memory, runtime_guard, shortcuts, and widget features in a canonical order.
技能搜索采用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局。Skill search uses a CJK-friendly multi-keyword builder; ticket list context menu and detail actions use a slimmer layout.
提供商会话来源与任务历史元数据通过规范会话记录传播，并改进助手消息去重。Provider session sources and task-history metadata propagate via the canonical session record and dedupe assistant messages.

修复Fixed

secretredact 屏蔽 Bearer、Basic 与 Token 凭据，同时保留鉴权方案前缀。secretredact masks Bearer, Basic, and Token values in sensitive assignments while preserving the authentication scheme.
通道安装重绑期间保留用户配置（fix(integrations) 系列）。Channel install rebinds preserve user profiles across binding-token rotations (fix(integrations) series).
通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域。Channel media gates no longer block retryable delivery and respect agent execution scope.
前端存储在隐私模式或沙箱嵌入场景下不再崩溃（#961）。Front-end storage no longer crashes in private browsing or sandboxed embedding contexts (#961).
Tiptap 在嵌套列表项内保留围栏代码块（#941）。Tiptap preserves fenced code blocks inside nested list items (#941).
当无智能体触发且无具名阻塞目标时，工单评论触发器预览静默；智能体芯片展示来源、点击跳过/恢复提示（#934）。Comment trigger preview is silent when no agent is triggered and no named blocked targets exist; agent chips render with source attribution and click-to-skip/click-to-restore hints (#934).
仅当受让人为团队时才发出"团队负责人不可用"原因。Comment team-leader unavailable reason only emits when the assignee is a team.
守护进程任务令牌检查不再在 E2E 主机环境下反转（#928）。Daemon task-token check no longer inverts on E2E host environments (#928).
守护进程沙箱凭据、profile 恢复记录与 Antigravity 运行时沙箱边界处理保持一致。Daemon sandbox creds, profile-recovery records, and Antigravity runtime sandbox isolation now share consistent boundary handling.
删除父工单时在删除事务内将子工单的 parent_ticket_id 置空（#942）。Ticketing: child tickets are unlinked (parent_ticket_id = NULL) on parent ticket deletion within the deletion transaction (#942).
智能体任务重试保留触发评论字段与血统。Agent task retry preserves trigger-comment fields and lineage.
删除工作区时级联清理 RBAC 数据以及 user_role / team_member 记录。Workspace deletion cascades RBAC data and cleans user_role / team_member rows.
Cron 调度关闭硬化，避免重复 close；私有绑定与调度循环统一。Cron scheduler shutdown is hardened against double close; private binds are unified with the scheduling loop.
配置文件保存失败时前端展示本地化降级提示。Config-file save failures surface localized fallback messages in the frontend.
mopheus channel CLI 安装消息与 Web UI 安装向导对齐。mopheus channel CLI install messages align with the Web UI installation wizard.
Antigravity 流式文本差分在步骤边界聚合以降低开销（#896 续作）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896 follow-up).
mop user config-file templates 正确展示分组模板与单个文件路径。mop user config-file templates correctly displays grouped templates and individual file paths.

安全Security

环境变量风格赋值中的 Bearer、Basic、Token 凭据在保留鉴权方案的同时被屏蔽。Bearer, Basic, and Token credentials in env-var-style assignments are masked while keeping the authentication scheme visible.
集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.

v2.2.6

2026-09-12

重点更新Highlights

Google Antigravity CLI 提供商 — 原生支持 agy CLI 运行时，自动探测并启用 stream-json 流水线、实时转录流式传输、通过 --conversation <id> 恢复会话以及下一轮引导能力，配合流式边界聚合与运行时沙箱隔离加固（#874、#894、#896）。Google Antigravity CLI provider — Native runtime support for the agy CLI with auto-detection, stream-json pipeline, live transcript streaming, conversation resumption via --conversation <id>, and next-turn steering, hardened by runtime sandbox isolation and step-boundary streaming aggregation (#874, #894, #896).
工单交互式决策小组件 — 工单评论与时间线中支持 single-select、multi-select 与 confirm-action 组件，配备乐观并发锁、审计日志、工作区级特性开关、mopheus-ticket-widgets 内置技能以及精简提示词微规范（#860、#907）。Interactive decision widgets for tickets — Single-select, multi-select, and confirm-action widgets in ticket comments and timelines with optimistic concurrency locks, audit log, workspace feature flag, the mopheus-ticket-widgets builtin skill, and a slim-prompt micro-spec (#860, #907).
工作区分域用户配置文件 — 环境变量与配置文件按工作区隔离存储，加密保存，提供服务端模板、二进制预览以及 mopheus user env / mopheus user config-file CLI 命令（#901、#885）。Workspace-scoped user profiles — Environment variables and configuration files are isolated per workspace with encrypted values, server-owned templates, binary previews, and the mopheus user env / mopheus user config-file CLI surface (#901, #885).
守护进程默认启用文件系统沙箱 — 守护进程默认激活文件系统沙箱，需通过 MOPHEUS_DAEMON_SANDBOX=false|0|off 显式关闭，新策略在重启与回归测试中得到保留（#906、#843）。Filesystem sandbox enabled by default — The daemon now activates the filesystem sandbox unless explicitly opted out via MOPHEUS_DAEMON_SANDBOX=false|0|off; the new policy survives restarts and is covered by regression tests (#906, #843).
作业 Quartz 计划触发器 — 新增 cron_dialect=quartz 触发器，支持 ? 月份/星期语义、可选 startAt/expiresAt 边界、可视化计划编辑器与未来运行预览，并补齐方言感知的 CLI 帮助（#884）。Quartz schedule triggers for jobs — Add cron_dialect=quartz triggers with ? day-of-month/day-of-week semantics, optional startAt/expiresAt boundaries, an interactive schedule editor with future-run previews, and dialect-aware CLI help (#884).
凭据与认证信息脱敏 — 智能体输出会脱敏内嵌凭据，认证环境变量在写入日志前被屏蔽，集成审计表不再泄露敏感标签（系列安全加固）。Credential and auth redaction — Agent output redacts embedded credentials, auth environment values are masked before logging, and the integration audit table no longer leaks sensitive labels (security hardening series).
通道异步外发与作用域执行 — 通道通过统一生命周期流异步发送消息，移除不可重试的媒体门禁，并强制执行智能体作用域（#911 及通道重构）。Channel async outbound delivery and scope enforcement — Channels ship messages asynchronously through a centralized lifecycle flow, drop non-retryable media gates, and enforce agent execution scope (#911, channel refactors).
Worktree 注册中心 — mopheus repo worktree list|prune 协调 bare-repo sidecar 元数据，支持按工作区与工单选择子集，并对脏/未推送 worktree 安全复用或驱逐（#905）。Retained worktree registry — mopheus repo worktree list|prune reconciles bare-repo sidecar metadata, supports per-workspace and per-ticket selectors, and safely reuses or evicts worktrees with dirty/unpushed detection (#905).
评论触发器预览与标签化体验 — 工单展示实时评论触发器预览，在标题下方渲染创建者与创建时间，并以共享规范常量统一 "我的工单" 筛选（#909、#923、#921）。Comment trigger previews and label-driven UX — Tickets expose live comment trigger previews, render the ticket creator and creation timestamp below the title, and standardize the My Tickets filter on a shared canonical constant set (#909, #923, #921).
自动化任务的结构化收件箱卡片 — 自动化作业运行与智能体任务失败通知升级为结构化卡片，附带快捷操作与转录直链（#868、#840）。Structured inbox cards for automated runs — Automated job-run and agent-task failure notifications now ship structured cards with quick actions and a direct transcript link (#868, #840).

新增New

Antigravity CLI 提供商，含 stream-json 流水线、转录流、会话恢复，以及提供商选择页的 agy 品牌图标（#874）。Antigravity CLI provider with stream-json pipeline, transcript streaming, conversation resumption, and agy brand logo in the provider picker (#874).
交互式决策小组件，含乐观状态、审计日志、React 组件、多语言本地化以及 mopheus-ticket-widgets 内置技能（#860）。Interactive decision widgets with optimistic state, audit log, React components, multilingual localization, and a mopheus-ticket-widgets builtin skill (#860).
工作区分域用户环境变量与配置文件，加密存储、服务端模板、二进制只读预览（#901）。Workspace-scoped user environment variables and configuration files with encrypted storage, server-owned templates, and binary read-only previews (#901).
Quartz 计划触发器、可视化计划编辑器、未来运行预览 API、本地化人类可读计划文案（#884）。Quartz schedule triggers, multi-select schedule editor, future-run preview API, and locale-aware humanized schedule text (#884).
Worktree 注册中心 CLI 与本地守护 list/prune 端点，按工作区隔离（#905）。Retained worktree registry CLI plus local daemon list/prune endpoints with workspace scope (#905).
通道异步外发，统一生命周期 outbound 流。Async outbound channel delivery with a centralized lifecycle outbound flow.
工单评论触发器预览（#909）。Comment trigger previews in ticket timelines (#909).
mop ticket create 与 mop ticket update 新增 --label / --labels 选项（#918）。--label and --labels flags on mop ticket create and mop ticket update (#918).
mop chat channel list 用于检查通道绑定与提供商作用域。mop chat channel list to inspect channel bindings and provider scoping.
mop feature list / mop feature check 命令以及只读 mop profile 子命令族（list、show）（#858 及后续）。mop feature list and mop feature check commands plus a read-only mop profile family (list, show) (#858 and follow-up).
mop 守护升级流程，支持清单驱动的原子化重装。mop daemon upgrade flow with manifest-driven atomic reinstall.
工作区分域邮件配置与派发委托，工作区设置中显示附件大小限制。Workspace-scoped email configuration and dispatch delegation plus an attachment-limit summary in workspace settings.
作业运行通知卡片，含结构化详情与直链入口（#868）。Job run notification cards with structured details and a direct link to the originating run (#868).
智能体任务失败通知，含"查看转录"快捷入口并在收件箱列出失败运行（#840）。Agent task failure notifications with a "view transcript" action and listing of failed runs in the inbox (#840).
工单创建者显示名与创建时间渲染在标题下方（#923）。Ticket creator display name and creation timestamp rendered below the title (#923).
智能体头像显示在 Web 智能体列表中。Agent avatars in the web agent list.
聊天主题支持会话 ID 一键复制。Topic session-id copy button in chat.
CLI 支持长聊天消息输入；聊天支持智能体会话路由与提供商感知的选择。Long chat message input on the CLI; agent chat routing for sessions with provider-aware selection.
决策小组件微规范内联至精简提示词，并随附 mopheus-ticket-widgets 技能参考（#907）。Decision widget micro-spec inlined in the slim prompt and the mopheus-ticket-widgets skill reference (#907).
沙箱挂载计划修复与守护进程显式沙箱退出值（#843、#906）。Sandbox mount plan fix and explicit daemon sandbox opt-out values (#843, #906).
沙箱凭据隔离、profile 恢复记录隔离、Antigravity 运行时沙箱隔离（#894）。Sandbox credential isolation, profile recovery isolation, and Antigravity runtime sandbox isolation (#894).
提供商会话 ID 的订阅级传播及跨重启持久化（#885）。Subscription propagation for provider session IDs and persistence across restarts (#885).
"我的工单" 默认切换至全工作区作用域与规范筛选常量（#921）。My Tickets default-to-all-scope toggle and canonical filter constants (#921).
分域用户快捷命令、Pi 提供商 RPC 迁移以及 Antigravity 品牌图标。Scoped user shortcut commands, Pi provider RPC migration, and the Antigravity brand logo.
CLI job create --cron-dialect quartz 支持 start-at 与 expires-at 边界。CLI job create --cron-dialect quartz with start-at and expires-at boundaries.
docs/blog 新增 Mopheus Chat 与 Event Jobs 中文 ChatOps 集成指南。Chinese ChatOps integration guide for Mopheus Chat and Event Jobs in docs/blog.
提供商集成指南与 Antigravity 提供商文档，覆盖 EN/ZH/JA。Provider integration guide and Antigravity provider documentation in EN/ZH/JA.
项目文档新增安全边界指南。Security boundaries guide in the project documentation.

改进Improved

守护进程默认启用文件系统沙箱，仅可通过显式环境变量关闭（#906）。Daemon defaults the filesystem sandbox to enabled; only an explicit environment opt-out disables it (#906).
收件箱通知以正交工具栏重新设计，新增取消归档与分域批量操作；自动化作业与智能体失败通知升级为带快捷入口的结构化卡片（#868、#840）。Inbox notifications rearchitected around an orthogonal toolbar with unarchive and scoped batch actions; automated job-run and agent-task failures now ship structured cards with quick actions (#868, #840).
通道外发改用异步执行并集中键/原因注册；强制执行智能体作用域，移除不可重试的媒体门禁（#911）。Channel outbound delivery is asynchronous with centralized key/reason registries; agent execution scope is enforced and non-retryable media gates are dropped (#911).
mop profile 与配置文件按全局基线 + 工作区覆盖解析；模板由服务端下发，移除客户端硬编码（#901）。mop profiles and config files resolve a global baseline plus workspace overrides by path; templates come from the server instead of client-side hard-coding (#901).
守护工作任务的跨重启状态持久化、Claude 缓存延迟清理、沙箱凭据与 profile 恢复记录按工作区隔离。Daemon worker tasks persist their state across restarts, defer Claude cache cleanup, and isolate sandbox credentials and profile recovery records.
技能搜索使用 CJK 友好的多关键词构造器；工单列表上下文菜单与详情操作改用精简布局（#900）。Skill search uses a CJK-friendly multi-term builder; ticket list context menu and detail actions use a streamlined layout (#900).
智能体创建向导支持对话式创建流程与内置提示模板；工作区引导保留 7 步流程，迁移可幂等重跑。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates; workspace onboarding remains a 7-step flow with idempotent re-runs.
提供商会话来源与任务历史元数据贯穿规范会话记录，辅助助手消息去重。Provider session source and task history metadata now flow through the canonical session record for assistant-message dedup.
工作区文件中心的 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商工作区状态按智能体隔离，MCP 用量按租户统计。Provider workspace state is isolated per agent so MCP usage tracking stays per-tenant.
Antigravity 流式文本增量在步骤边界聚合以减少开销（#896）。Antigravity streaming text deltas aggregate at step boundaries to reduce overhead (#896).
Antigravity 运行时在沙箱内保留原生 HOME，并在流中断时恢复新会话。Antigravity runtime preserves the native HOME under sandbox and recovers fresh sessions on stream interrupt.

修复Fixed

智能体输出脱敏内嵌凭据；认证环境变量写入日志前被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked before logging (fix(security) series).
集成审计表不再泄露敏感标签。Integration audit table no longer leaks sensitive labels.
通道媒体门禁不再阻塞可重试投递，并尊重智能体作用域（#911）。Channel media gates no longer block retryable deliveries and respect agent execution scope (#911).
通道会话来源元数据在规范会话记录中保持一致。Channel session source metadata is consistently recorded across the canonical session record.
工单讨论时间线支持引用回复与统一活动历史。Ticket discussion timeline supports quote replies and a unified activity history.
移动端作业弹窗在 Mopheus 壳内可正常滚动。Mobile job dialog scrolls correctly inside the Mopheus shell.
作业受让人按工作区隔离，跨工作区触发不会误触发。Job assignees are isolated by workspace so cross-workspace triggers cannot fire.
作业 cron 表达式空字段改用 Quartz 兼容通配符，避免计划停摆。Job cron expressions with empty cron fields now use Quartz-compatible wildcards so schedules never stall.
评论 ID 在组件选择中正确往返，浮动提交栏保留用户状态。Comment IDs round-trip through widget choices so the floating submission bar preserves user state.
失败的智能体任务运行在收件箱中展示，并提供转录入口（#840）。Failed agent task runs surface in the inbox with a transcript action instead of being hidden (#840).
工单执行运行行恢复"快速停止"按钮。Quick stop button is restored on the ticket execution run row.
工作区引导跳过时不再导致页面 pointer-events 卡死（#846）。Onboarding wizard no longer leaves the body with stuck pointer-events after skipping (#846).
Antigravity 流式中断后保留已完成回合，并使用新会话恢复。Antigravity streaming interruptions preserve completed turns and recover with a fresh session.
Pi 提供商经由 RPC 恢复会话并进行能力校验（#887）。Pi provider resumes sessions via RPC with capability checks (#887).
Antigravity 运行时捕获提前退出，并在沙箱内保留原生 HOME。Antigravity runtime captures premature exits and preserves the native HOME under sandbox.
工作区销毁时同步清理 worktree sidecar 与 CodeGraph 快照。Workspace teardown cleanly removes worktree sidecars and CodeGraph snapshots.
工作区沙箱设置在守护重启与显式退出值下保持有效（#906）。Workspace sandbox settings survive background daemon restarts and explicit opt-out values (#906).
沙箱凭据与宿主机隔离；profile 恢复记录按工作区隔离。Sandbox credentials are isolated from the host; profile recovery records are isolated per workspace.

安全Security

守护进程默认启用文件系统沙箱（#906）。Filesystem sandbox enabled by default for the daemon (#906).
智能体输出脱敏内嵌凭据；认证环境变量在日志与审计表中被屏蔽（fix(security) 系列）。Agent output redacts embedded credentials; auth environment values are masked in logs and audit tables (fix(security) series).
沙箱凭据、profile 恢复记录与 Antigravity 运行时状态与宿主机隔离。Sandbox credentials, profile recovery records, and Antigravity runtime state are isolated from the host.
提供商工作区状态按智能体分区，避免跨工作区数据通过提供商缓存泄露。Provider workspace state is partitioned per agent so cross-workspace data does not leak through provider caches.

升级说明Upgrade Notes

守护进程默认启用文件系统沙箱。如过去通过环境变量关闭，请显式设置 MOPHEUS_DAEMON_SANDBOX=false（或 0/off，不区分大小写）；否则将保持新默认。The daemon now enables the filesystem sandbox by default. Operators that previously disabled it via environment must explicitly set MOPHEUS_DAEMON_SANDBOX=false (or 0/off, case-insensitive) on the daemon process; otherwise sandboxing stays on and matches the new default.
工作区分域用户环境变量与配置文件需要本次新增的 schema 迁移。已有全局配置保持为基线，工作区覆盖在迁移完成后生效。Workspace-scoped user environment variables and configuration files require the schema bump introduced in this release. Pre-existing global profiles remain the baseline; new workspace overrides take effect after migration.
Quartz 计划触发器按触发器粒度选择开启；既有 Standard 五字段触发器保持原行为，存在 Quartz 行时回滚迁移会被拒绝，以保证持久化表达式可读。Quartz schedule triggers are opt-in per trigger. Existing Standard five-field triggers continue to use the legacy grammar; reverting a migration is refused while Quartz rows exist to keep persisted expressions readable.
交互式决策小组件依赖工作区 widget 特性开关；关闭或未配置时评论降级为标准语法高亮代码块。Interactive decision widgets require the widget workspace feature flag; comments degrade to standard syntax-highlighted code blocks when the flag is disabled or unset.
使用 Antigravity 提供商需在环境中有可调用的 agy（或通过 MOPHEUS_ANTIGRAVITY_PATH 指定），且 CLI 支持 --input-format stream-json --output-format stream-json --dangerously-skip-permissions。Antigravity CLI is required at agy (or MOPHEUS_ANTIGRAVITY_PATH) to use the new provider; the CLI must be invokable with --input-format stream-json --output-format stream-json --dangerously-skip-permissions.

v2.2.5

2026-09-05

重点更新Highlights

事件驱动作业与因果循环防护 — 作业可订阅内部事件（如 comment.created、ticket.created）并配置结构化过滤条件；因果祖先图阻断递归触发循环，事件负载新增自描述枚举名、工单上下文与 ticketPriority，便于精准路由（#795、#805、#806、#811、#813、#814、#817、#808、#809）。Event-driven jobs with causal loop containment — Jobs subscribe to internal events (comment.created, ticket.created, …) with structured filters. A causal ancestor graph prevents recursive trigger loops, and event payloads now expose self-describing enum names, ticket context, and ticketPriority for accurate routing (#795, #805, #806, #811, #813, #814, #817, #808, #809).
子智能体谱系与生命周期追踪 — 子智能体运行持久化父级谱系，Claude 子智能体跟踪生命周期，调度器协调子智能体的最终结果。提供商工作区状态按智能体隔离，Codex MCP 调用与 Claude 用量一并记录（#767、#803、#828、#830）。Subagent lineage and lifecycle tracking — Subagent runs persist parent lineage, Claude subagents track lifecycle transitions, and the scheduler coordinates subagent final results. Provider workspace state is isolated per agent, and Codex MCP calls are recorded alongside Claude usage (#767, #803, #828, #830).
mop CLI 技能与发布同步工作流 — 新增 mop CLI 技能与发布同步工作流，智能体无需自定义脚本即可搭建 PR、同步发布产物、检索模型枚举；using-codegraph 现要求 worktree 前置并提供 MCP 兼容指南（#616/#820、#746）。mop CLI skill and release sync workflow — A new mop CLI skill ships with the release sync workflow so agents scaffold PRs, sync release artifacts, and discover model enums without bespoke scripts; using-codegraph now mandates a worktree prerequisite and ships MCP-compatible guides (#616/#820, #746).
附件访问控制与隔离 — 附件在查询与存储路径上统一执行工作区级 CanView/CanEdit/CanDelete 能力检查，来源标签附带父工单标识与短 ID（#730/#734、#731/#733）。File attachment access control and isolation — Attachments enforce workspace-scoped CanView/CanEdit/CanDelete capabilities in queries and storage paths, with origin labels that include the parent ticket identifier and short ID (#730/#734, #731/#733).
工单短标识 — 工单在 UUID 之外暴露稳定短 ID，并贯穿 CLI、Web 与 mop 输出（#818）。Short ticket identifiers — Tickets expose a stable short ID alongside the UUID, mirrored across CLI, web, and mop outputs (#818).
主题生命周期管理 — 一级主题生命周期 API 让工作区可审计地归档、恢复与清理主题（#824）。Topic lifecycle management — A first-class topic lifecycle API lets workspaces archive, restore, and clean up topics with audit-friendly state transitions (#824).
用户 SSH 配置管理 — 用户可在设置中注册 SSH 配置文件，通过运行时配置管线投递到沙箱任务，并按原生 OpenSSH 组合（#740）。User SSH config management — Members register SSH config files delivered into sandbox tasks via the runtime config file pipeline, with native OpenSSH composition (#740).
技能调用与合成 — 每次技能调用都被记录用于审计，蒸馏记忆可合成为可复用技能，每日用量汇总驱动工作区分析（#737、#754、#822）。Skill invocations and synthesis — Every skill invocation is recorded for auditability, distilled memories can be synthesized into reusable skills, and a daily-usage rollup powers workspace analytics (#737, #754, #822).
守护遥测、快照与工作区恢复过滤 — 守护进程采集每任务资源遥测、发出持久化工作完成快照，并在恢复时按工作区过滤，避免重启时拉起外部运行时（#766、#776、#786）。Daemon telemetry, snapshots, and worker recovery — Daemons collect per-task resource telemetry, emit durable worker completion snapshots, and filter recovery by workspace so a restart never picks up a foreign runtime (#766, #776, #786).
发布产物迁移至华为云 OBS — 发布镜像与许可证声明改发至华为云 OBS，加速中国大陆区域安装。Release artifacts on Huawei OBS — Release images and license notices publish to Huawei OBS, accelerating installs in mainland China regions.
工作区 UI 标准化 — 工作区列表、头部、集成设置、品牌图标与确认弹窗统一为卡片容器布局，含内联页头、批量操作、平台分组的集成页以及带后果提示的删除/归档确认弹窗（#741、#758、#761、#791）。Standardized workspace UI — Workspace list, header, integrations settings, brand icons, and confirmation dialogs follow a unified card container layout with inline page headers, batch actions, platform-sectioned integrations, and delete/archive dialogs with explicit consequence warnings (#741, #758, #761, #791).

新增New

内部事件触发器与因果循环防护；运行时附加因果祖先上下文并下发事件广播（#795、#814）。Internal event triggers with causal loop containment; runtime attaches causal ancestor context and grants event broadcasts (#795, #814).
事件负载新增 ticketId、shortId、workspaceSlug、ticketPriority 及自描述枚举 *Name 字段（#805、#806、#817）。Event payloads enriched with ticketId, shortId, workspaceSlug, ticketPriority, and self-describing enum *Name companions (#805, #806, #817).
作业触发器页可视化事件过滤规则，事件作业禁用手动触发（#808、#809）。Job triggers tab visualizes event filter rules; manual trigger disabled for event jobs (#808, #809).
子智能体谱系表、Claude 子智能体生命周期、子智能体回合协同、提供商工作区状态隔离与 Codex MCP 调用记录（#767、#803、#828、#830）。Subagent lineage table, Claude subagent lifecycle tracking, subagent turn coordination, provider workspace state isolation, and Codex MCP call recording (#767, #803, #828, #830).
智能体即时交互转向（#788）。Immediate agent interaction steering (#788).
工单短标识列、API、CLI 与 mop 集成（#818）。Short ticket identifier column, API, CLI, and mop integration (#818).
主题生命周期端点与审计钩子（#824）。Topic lifecycle management endpoints and audit hooks (#824).
附件访问控制与可见性隔离；附件来源显示附带工单 ID 与短 ID（#730/#734、#731/#733）。Attachment access control + visibility isolation; attachment origin display carries ticket ID and short ID (#730/#734, #731/#733).
技能调用记录表、每日技能用量分析与记忆合成技能（#737、#754、#822）。Skill invocation tracking table, daily skill usage analytics, and memory-to-skill synthesis (#737, #754, #822).
mop CLI 技能、mop_ticket 帮助脚本、模型枚举参考与发布同步工作流（#616/#820）。mop CLI skill, mop_ticket helper scripts, model enum references, and release-sync workflow (#616/#820).
using-codegraph 技能 worktree 前置与 MCP 兼容（#746）。using-codegraph skill worktree prerequisite and MCP compatibility (#746).
用户 SSH 配置注册，按 cli_type 投递（#740）。User SSH config registration with cli_type-aware delivery (#740).
守护进程持久任务资源遥测与 /profile 端点、工作完成快照（#776、#786）。Daemon durable task resource telemetry plus /profile endpoint and worker completion snapshots (#776, #786).
作业执行历史中的端到端智能体任务耗时与重设计的实时同步布局（#735、#736）。End-to-end agent task duration in job execution history; redesigned layout with real-time sync (#735, #736).
工作区卡片容器、内联页头、批量操作、平台分组的集成设置、统一品牌图标以及 AlertDialog 删除/归档流程（#741、#758、#761、#791）。Workspace card container, inline page headers, batch actions, platform-sectioned integrations settings, unified brand icons, and AlertDialog-based delete/archive flows (#741, #758, #761, #791).
runtime guard explain 取证 CLI 与扩展的 runtime_guard_event 字段。runtime guard explain forensics CLI and extended runtime_guard_event columns.
自定义 CLI 升级清单、强制升级元数据与原子化 CLI 重装。Custom CLI upgrade manifest, forced upgrade metadata, and atomic CLI reinstall.
统一的 CI 构建时间戳；凌晨 6 点（北京时间）夜间构建。Unified CI build timestamps; nightly Beijing 06:00 build.
跨工作区的 License 邀请重发与席位重排。License invitation re-issue and seat reshuffle across workspaces.

改进Improved

作业 actor 携带祖先作业 ID 与 origin_user_id，防止递归触发并保证审计链路完整（#813）。Job actor carries ancestor job IDs and origin_user_id to prevent recursive triggers and keep audit trails accurate (#813).
事件广播统一汇聚到单一工作区事件中心，HTTP handler 通过同一 broadcaster 扇出。Event broadcasts unified into a single workspace event hub; HTTP handlers fan out through one broadcaster.
通道会话来源与任务历史元数据贯穿规范会话记录。Channel session source and task history metadata propagate through the canonical session record.
技能搜索改用 CJK 友好的多关键词构造器并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
智能体创建向导支持对话式 AI 智能体创建，内置提示模板（#616）。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力（#607）。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
守护调度器协调子智能体最终结果并在检查后保留结果。Daemon scheduler coordinates subagent final results and preserves the final result after checks.
作业执行历史通过 WebSocket 事件刷新，外部状态无需轮询即可保持一致。Job execution history refreshes from websocket events so external state stays consistent without polling.
工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商会话来源与任务历史元数据纳入助手消息去重。Provider session source and task history metadata participate in assistant-message dedup.
runtime guard explain 输出统一为英文并在 Web UI 提供 i18n 字典。runtime guard explain output canonicalized to English with i18n dictionaries for the web UI.

修复Fixed

Codex 用量按模型拆分；Codex stdout 用量上报进入仪表盘。Codex usage split by model; Codex stdout usage reporting surfaces in dashboards.
子智能体 message parent 保留；子线程消息安全过滤；子智能体名称传递至智能体任务标题。Subagent message parent preserved; subthread messages filtered safely; subagent names propagated into agent-task titles.
新会话记录模型上线后恢复 Lark 通道任务回复。Lark channel task replies restored after the new session record schema.
Webhook 去重冲突通过 ON CONFLICT DO UPDATE 吸收（#799/#800）。Webhook dedup conflict absorbed via ON CONFLICT DO UPDATE (#799/#800).
合并评论计数包含 trigger；空合并评论隐藏；合并评论折叠。Merged comment count includes the trigger; empty merged comments hidden; merged comments collapse.
浏览器登录统一使用 cookie；locale cookie 与活动语言状态在 hydration 与设置间保持同步（#727）。Browser auth uses cookies consistently; locale cookie and active language state stay in sync across hydration and settings (#727).
转录搜索与 escape 快捷键不再穿透到工单页（#725）。Transcript search and escape shortcuts no longer leak to the ticket page (#725).
ActorAvatar 不再渲染 UUID 缩写；ActorPicker 携带显示名（#759）。ActorAvatar no longer renders UUID initials; ActorPicker carries the display name (#759).
守护进程恢复按工作区过滤，避免拉起外部运行时（#766）。Daemon recovery filters by workspace so unrelated runtimes do not surface (#766).
调度器在生命周期检查后保留最终结果，可恢复准备阶段 panic，解析生命周期检查响应，并在协议关闭后保留超时。Scheduler preserves the final result after lifecycle checks, recovers preparation panics, parses lifecycle check responses, and preserves timeout after protocol close.
安装路径：安装时运行运行时环境探针；支持在线 CLI 准备；Windows 安装不再泄漏临时环境；离线 Docker 路径补充文档。Install path: runtime environment probe runs at install time; online CLI preparation supported; Windows install path no longer leaks the temp env; offline Docker paths documented.
CLI 升级重装原子化，支持自定义升级清单，强制升级元数据正常流转。CLI upgrade reinstall is atomic and respects a custom upgrade manifest; forced upgrade metadata flows through.
WebSocket 订阅者在资源变更时刷新（#712）。WebSocket subscribers refresh on resource mutations (#712).
WebSocket 断线后重新拉取运行时资源数与守护健康端口。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
重复迁移幂等执行；make migrate-up 部分应用后再次运行不再触发重复键错误。Duplicate migrations are idempotent; make migrate-up after a partial apply no longer trips a duplicate-key error.
仪表盘同时展示成功与失败任务计数；空的 from/to 日期参数视为全时段用量（#771）。Dashboard surfaces failed task counts alongside successful ones; empty from/to date parameters render as all-time usage (#771).
在提供商会话响应中保留 Kimi stderr 错误码。Kimi stderr error codes preserved in provider session responses.
即使守护响应在上传中途丢失，也保留报告批次。Daemon report batches preserved when the daemon response drops mid-upload.
智能体任务派发链路保留发起用户上下文（#691）。Origin user context preserved across agent task dispatches (#691).
工单依赖目标工单通过 useTicket 单独加载；视角分组与术语对齐。Ticket dependency target tickets load individually via useTicket; perspective grouping and terminology aligned.
工单后端 ZIP 导出与评论解决契约弃用提示在 Web 端展示（#802）。Ticket backend ZIP export and comment resolution contracts deprecation notice surfaced in the web UI (#802).
mop_ticket add-comment 调用正确的子命令；技能脚本末尾空白已清理。Skill subcommand mop_ticket add-comment invokes the correct subcommand; trailing whitespace in skill scripts removed.
触发器过滤条件在重载与守卫卸载间保留。Trigger filters persist across reloads and guard unload.
全运行时任务生命周期与作用域检查加固。Hardened task lifecycle and scope checks across the runtime.
工作区引导启用 skip-existing-agent 迁移，关闭引导无法绕过安全检查。Wizard onboarding skip-existing-agent migration applied so disabling onboarding cannot bypass the safety check.
本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
守护任务调度器延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically; preserve terminal completion result across restarts.

安全Security

工作区事件统一经过单一 broadcaster，强制 origin_user_id 与因果祖先校验；作业不能订阅工作区之外的事件。Workspace events fan out through a single broadcaster that enforces origin_user_id and causal ancestor checks; jobs cannot subscribe to events outside their workspace scope.
即便发起方不在工作区成员中，所有 agent_task 行均记录 origin_user_id，跨域操作可被审计。origin_user_id recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
附件访问控制对所有查询路径执行 CanView/CanEdit/CanDelete，存储路径按工作区分隔。Attachment access control enforces CanView/CanEdit/CanDelete in every query path; storage paths are workspace-scoped.
Webhook 去重改用原子 upsert，杜绝审计记录丢失或重复（#799/#800）。Webhook dedup uses an atomic upsert to prevent lost or duplicated audit records (#799/#800).

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 118+ 迁移：事件触发器注册、因果祖先 ID、工单短标识、主题生命周期、附件访问控制、技能调用记录、每日用量分析、守护工作完成快照、用户 SSH 配置元数据以及 runtime_guard_event 字段扩展。Apply database migrations before starting the new server. Migrations 118+ cover the event trigger registry, causal ancestor IDs, ticket short identifiers, topic lifecycle, attachment access control, skill invocations, daily usage analytics, daemon worker snapshots, user SSH config metadata, and runtime_guard_event columns.
已订阅 comment.created 的作业请重新审视：负载新增 ticketId、workspaceSlug、ticketPriority，需相应调整触发表达式。Review existing jobs subscribed to comment.created: the payload now includes ticketId, workspaceSlug, and ticketPriority — adjust trigger expressions accordingly.
守护升级请重新部署最新的 mopheusd 镜像；Linux 守护进程在首次心跳即可获得新的持久任务资源遥测 profile 端点与工作完成快照。Daemon upgrades should redeploy the latest mopheusd image; Linux daemons pick up the new durable task resource telemetry profile endpoint and worker completion snapshots on first heartbeat.
发布产物改发至华为云 OBS，安装工具链默认使用 OBS 镜像地址。请相应更新本地 install/env.example 中的 MOPHEUS_BACKEND_IMAGE/MOPHEUS_WEB_IMAGE。Release artifacts publish to Huawei OBS; installation tooling now expects the OBS-backed image tags. Update local install/env.example overrides accordingly.
自定义附件权限的工作区在迁移后请重新确认 CanView/CanEdit/CanDelete，默认能力检查已下放至 repo 层。Workspaces that customize attachment permissions should re-confirm CanView/CanEdit/CanDelete after migration; default capability checks now apply at the repo layer.
新建工作区默认启用 mop CLI 技能；存量工作区可从技能商店按需启用。The mop CLI skill is enabled by default for new workspaces; existing workspaces can opt in from the skill store.
守护恢复按工作区过滤，请确认运行时的注册工作区与预期一致后再重启。Daemon recovery now filters by workspace; ensure runtime registrations live in the expected workspace before restart.

v2.2.4

2026-08-29

重点更新Highlights

为编码智能体接入 CodeGraph 智能 — 已注册仓库上的编码智能体现在内置 using-codegraph 技能，附带按 commit 绑定的 sidecar SQLite 快照缓存，并在 worktree 准备阶段自动增量重建索引 (#675)。CodeGraph intelligence for coding agents — Coding agents on registered repositories ship with the using-codegraph skill, commit-bound sidecar SQLite snapshot caches, and incremental re-indexing during worktree provisioning (#675).
工作区文件中心 — 新增 /[workspace]/files 页面，聚合工单、评论、聊天会话中的所有附件，提供全文检索、类别筛选、网格/表格视图以及图像、PDF、Markdown、源码、CSV 的通用预览器 (#713)。Workspace files hub — A new /[workspace]/files page consolidates every attachment across tickets, comments, and chat sessions with full-text search, category filters, grid/table views, and a universal previewer for images, PDFs, Markdown, source code, and CSV (#713).
日语本地化 — 整个产品界面新增日语 (ja) 翻译，与英语、简体中文并列，含新的文件中心和智能体任务控件 (#706)。Japanese localization — The full product UI ships with Japanese (ja) translations alongside English and Simplified Chinese, including the new files hub and agent-task controls (#706).
运行时任务资源守护与熔断 — Linux 守护进程通过 rootless cgroup v2 与 procfs 采样收集每任务 RSS、每运行时总量、进程数与完整进程树指标；三级级联（任务→运行时→工作区）合并阈值，超额告警升级为 kill。每次 kill/告警都会将结构化诊断上报控制面并写入 runtime_guard_event 表 (#694, #702, #710)。Runtime task resource guard and circuit breaker — Linux daemons collect per-task RSS, per-runtime totals, process counts, and full process-tree metrics via rootless cgroup v2 + procfs sampling. A 3-tier cascade merges guard thresholds; over-budget warnings ramp into kill. Every kill/warning streams structured diagnostics to the control plane, persisted in runtime_guard_event (#694, #702, #710).
工单级 Grill Me 评审 — 通过工单头部或操作菜单即可针对工单标题与描述发起 10 轮自反思评审，无需评论，结果以根评论回填 (#624, #642, #620)。Direct ticket-level Grill Me review — Trigger a 10-round self-reflective review against a ticket's title and description from the ticket header or actions menu — no comment needed (#624, #642, #620).
个人运行时配置文件 — 用户可注册自定义配置文件（如 ~/.mopheus/*.toml），按 CLI 类型投递到沙箱任务，并支持托管 Ed25519/RSA SSH 密钥与用户优先的原生 OpenSSH 组合 (#685)。Personal runtime configuration files — Each user can register custom configuration files (e.g. ~/.mopheus/*.toml) which are delivered into sandbox tasks with CLI-type aware attachment, managed Ed25519/RSA SSH keys, and user-first native OpenSSH composition (#685).
以非 root 用户（UID 10001）运行守护进程容器 — mopheusd 在容器内以 mopheus 用户运行并匹配宿主机 UID，支持 rootless cgroup v2 层级并免去运行时提权 (#633)。Non-root daemon container (UID 10001) — mopheusd runs as the mopheus user inside the container with the matching host UID, enabling rootless cgroup v2 hierarchies (#633).
用户账号状态控制 — 工作区管理员可启用或停用单个账号；停用用户不可登录且不计入 License 配额 (#705)。User account status controls — Workspace admins can enable or disable individual accounts; disabled users are blocked from authentication and excluded from license quota counting (#705).
工单批量操作 — 新增工单操作栏支持批量归档、指派、修改优先级或迁移，CLI 子命令 mopheus ticket 也提供对应能力 (#653)。Batch ticket operations — A new ticket action bar lets operators archive, assign, re-prioritize, or move many tickets at once, mirrored in mopheus ticket CLI subcommands (#653).
工单运行数据后端 ZIP 导出 — 工单可导出包含所有评论、智能体任务运行和中间产物的 ZIP 包，便于离线审查与审计 (#667)。Backend ZIP export of ticket run data — Tickets expose a backend ZIP export of all comment threads, agent task runs, and intermediate artifacts for offline review (#667).

新增New

编码智能体的 using-codegraph 内置技能，以及 .codegraph-cache/<sha>.db 提交绑定 sidecar 与增量 codegraph sync (#675)。CodeGraph sidecar snapshot cache at .codegraph-cache/<sha>.db with automatic incremental codegraph sync during worktree creation (#675).
mopheus attachment list CLI 命令与 useFilesViewStore 视图模式持久化 (#713)。mopheus attachment list CLI and useFilesViewStore view-mode persistence (#713).
user_config_file 表与个人沙箱运行时配置文件的设置界面，支持托管 SSH 密钥和用户优先的 OpenSSH 组合，按 cli_type 自动投递。user_config_file table and settings UI for personal sandbox runtime configuration files, managed SSH keys, and user-first OpenSSH composition, with cli_type-aware delivery.
runtime_guard_event 审计表及 mopheus runtime guard events|explain CLI 命令 (#710)。runtime_guard_event audit table with full forensics plus mopheus runtime guard events|explain CLI (#710).
usage_agent_task_report 持久化回执与用量快照去重，守护进程用量上报可安全重试。usage_agent_task_report durable receipts and usage snapshot dedupe so daemon usage reports are safe to retry.
agent_task_interaction 表和 broadcaster，用于跨运行时的 WebSocket 评论同步 (#623)。agent_task_interaction table and broadcaster for websocket comment sync (#623).
智能体上的 is_griller 能力，用于 Griller 专业化 (#620)。is_griller capability on agents for Griller specialization (#620).
工单按更新时间与开始日期排序。Tickets updates-time sorting and start-date sorting.
user.enabled 列及管理员启/停控制 (#705)。user.enabled column with admin enable/disable controls (#705).
工作区级用户环境变量 CRUD (#669)。Workspace-scoped user env vars at profile scope (#669).
跨运行时批量领取的交互式守护任务调度器 (#674)。Interactive daemon task scheduler with batch claim across runtimes (#674).
记忆命中次数 BIGINT 饱和保护 (#688)。Memory hit-count with BIGINT saturation clamp (#688).
附件 pg_bigm GIN 索引与 CJK 多关键词搜索。Attachment pg_bigm GIN index with CJK multi-term search.
收件箱批量归档/恢复/删除，含"全部删除"二次确认 (#662)。Bulk archive/restore/delete in the inbox with explicit "delete all" confirmation (#662).
mopheus job update 的 --action-type 参数，以及安装时生成的 mop 快捷别名。CLI --action-type flag for mopheus job update and mop install-time shortcut alias.
Mopheus 与 CodeGraph OSS License 声明打包进发布产物 (#676)。Mopheus and CodeGraph OSS license notices packaged into release artifacts (#676).

改进Improved

License 邀请流程支持跨工作区重发与席位重排。License invitation flow supports re-issue and seat reshuffle across workspaces.
收件箱与工单操作统一消费后端打戳的 CanEdit/CanDelete 能力 (#607)。Inbox and ticket actions consume backend-stamped CanEdit/CanDelete viewer capabilities (#607).
智能体创建向导支持对话式 AI 智能体创建，内置提示模板 (#616)。Agent-builder wizard supports conversational AI agent creation with bundled prompt templates (#616).
技能搜索改用 CJK 友好的多关键词构造器，并加长 name 列。Skill search switched to a CJK-friendly multi-term builder with longer name columns.
工作区引导保留 7 步流程，附带中英演示数据、"永久跳过"偏好以及可幂等重跑的迁移。Wizard onboarding remains a 7-step flow with bilingual demo seeds, "skip permanently" preference, and idempotent re-runs.
通道会话来源与任务历史元数据纳入规范会话记录 (#623)。Channel session source and task history metadata carry through to the canonical session record (#623).
作业列表改为由 WebSocket 事件刷新，外部任务状态无需轮询即可保持一致。Jobs list refreshes from websocket events so external task state stays consistent without polling.
工作区文件中心 grid/table 视图偏好跨导航持久化。Workspace files hub preference for grid/table view is persisted across navigation.
提供商会话来源与任务历史元数据纳入助手消息去重，避免同一输出跨智能体重复。Provider session source and task history metadata participate in assistant-message dedup so the same output is never re-emitted across agents.

修复Fixed

记忆任务在上下文候选为空时返回 nil，避免误导性"记忆"标注 (#721)。Return nil from memory task recall when the context candidate set is empty so prompts do not get a spurious "memory" attribution (#721).
拒绝非 ASCII 工作区 slug 并给出明确校验信息 (#715)。Reject non-ASCII workspace slugs with a clear validation message (#715).
安装汇总中显示生成的管理员凭据，减少登录翻查安装日志的需求 (#715)。Show generated admin credentials in the install summary (#715).
资源变更事件刷新所有 WebSocket 订阅者；工单更新无需手动刷新即可传播 (#712)。Refresh resource mutations across all websocket subscribers; ticket updates propagate without a manual reload (#712).
WebSocket 断线后重新拉取运行时资源数与守护进程健康端口，确保守护进程恢复。Refresh runtime resource counts and the daemon health port after a websocket reconnect.
重复迁移改为幂等执行，部分应用后再次执行 make migrate-up 不再触发重复键错误。Make duplicate migrations idempotent so re-running make migrate-up after a partial apply no longer trips a duplicate-key error.
仪表盘同时展示失败任务计数，便于准确用量对比。Surface failed task counts in the dashboard alongside successful ones for accurate usage diffing.
恢复分页工单列表的服务端排序，覆盖旧的本地过滤导致的状态错乱 (#660)。Restore server-side sorting for paginated ticket lists (#660).
在提供商会话响应中保留 Kimi stderr 错误码，失败诊断保持真实 (#665)。Preserve Kimi stderr error codes in provider session responses (#665).
agent_task 持久事件负载大小封顶，避免 stdout 失控阻塞守护运行器。Bound durable event payload sizes for agent_task so a runaway stdout cannot stall the daemon runner.
启动任务时保留守护进程绑定的健康端口。Preserve the daemon's bound health port when starting tasks.
守护进程在 WebSocket 断开后恢复运行时，杜绝"幽灵运行时"。Restore runtimes after a websocket disconnect so daemons recover gracefully.
在智能体任务派发链路中保留发起用户上下文 (#691)。Preserve origin user context across agent task dispatches (#691).
即使守护响应在上传中途丢失，也保留守护进程报告批次。Preserve daemon report batches even when the daemon's response drops mid-upload.
当本地未安装 CodeGraph 时跳过 TestCreateWorktree_CodeGraphProvisioningAndExclude，不影响覆盖率目标。Skip flaky TestCreateWorktree_CodeGraphProvisioningAndExclude when CodeGraph is not installed.
守护任务调度器转入延迟后仍能恢复工单评论跟进。Restore ticket comment follow-up after the daemon-task scheduler deferral.
终态报告按确定性顺序回放，并在重启后保留终态完成结果。Order terminal report replay deterministically and preserve terminal completion result across restarts.

安全Security

工作区文件中心复用现有 Attachment 查看能力与工作区作用域，对每次查询强制鉴权。Workspace files hub enforces the existing Attachment viewer capability and reuses workspace scoping for every query.
运行时守护告警与 kill 事件写入服务端审计表，并配有专用取证 CLI。Runtime guard alarm and kill events stream to a server-side audit table with dedicated forensic CLI commands.
所有 agent_task 行均记录 origin_user_id，即便发起方不在工作区成员中，审计链路也能覆盖跨域操作。origin_user_id is recorded on every agent_task row even when initiated outside a workspace membership, so audit trails capture cross-scope actions.
工作区引导的"永久跳过"偏好走"跳过现存智能体"迁移，避免通过关闭引导绕过安全检查。Wizard onboarding routes the skip-permanently preference through the new "skip existing agent" migration so disabling onboarding cannot bypass the safety check.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 106–117 迁移：griller 智能体标志、智能体任务交互历史、用量快照去重、持久化用量回执、智能体任务发起用户、待处理任务唯一索引、技能名长度、用户配置文件、运行时守护审计、用户配置 CLI 类型、智能体任务作业运行索引、记忆召回命中计数、用户启用状态、附件 pg_bigm 搜索索引以及敏感 SSH 配置元数据。Apply the database migrations before starting the new server. This release includes migrations 106–117 for griller agent flag, agent-task interaction history, usage snapshot dedupe, durable usage receipts, agent-task origin user, pending-task indexes, skill name length, user config files, runtime guard audit, user config CLI type, agent-task job-run index, memory recall hit count, user account status, attachment pg_bigm search index, and sensitive SSH config metadata.
Linux 守护进程建议改用 mopheus 用户（UID 10001）重新部署，以启用 rootless cgroup v2 与完整进程树守护；当前以 root 运行的守护进程仍可工作，但应尽快完成切换。Linux daemons should be redeployed as the mopheus user (UID 10001) to take advantage of rootless cgroup v2 and the full process-tree guard. Existing root daemons keep working but should be migrated promptly.
工作区可在用户设置 → 运行时配置文件中注册个人运行时配置文件，下一次任务调度将自动按 CLI 类型投递。Existing workspaces can register personal runtime configuration files under User Settings → Runtime Config Files; CLI-type-aware delivery is automatic from the next task schedule.
Linux 守护进程默认上报运行时守护诊断。可通过 mopheus runtime guard events 与 mopheus runtime guard explain <task-id> 进行事后取证。Daemons running on Linux now report runtime guard diagnostics by default. Use mopheus runtime guard events and mopheus runtime guard explain <task-id> for post-mortem forensics.
新增用户账号启停控制，存量账号默认启用。停用用户无法登录且不计入 License 配额。New user account status controls let admins disable individual accounts; legacy accounts default to enabled. Disabled users cannot authenticate and are excluded from license quota counting.

v2.2.3

2026-08-22

重点更新Highlights

守护进程 Claim 传输加密 — 守护进程与服务器之间的 Claim 流量使用每运行时独立的 X25519 密钥端到端密封（issue #556）。守护进程将密钥持久化到专用 keystore，服务器在注册与心跳时校验密钥，明文 fallback 由双重测试守护并具备警告与自愈路径。Daemon claim transport encryption — Daemon↔server claim traffic is now sealed end-to-end with per-runtime X25519 keys (issue #556). Each daemon persists its key in a dedicated keystore, the server validates the key on registration/heartbeat, and plaintext claim fallback is gated by a dual test plan with a warn-and-self-heal path.
工作区引导向导 — 重设计的 7 关引导流程，附带中英双语演示数据、迁移时可选启用演示开关，以及"永久跳过"偏好；现有工作区不会再看到引导界面，记忆蒸馏默认启用。Workspace onboarding wizard — A redesigned 7-quest onboarding flow ships with bilingual demo seeds, an opt-in demo data switch for migrations, and a "skip permanently" preference so existing workspaces do not see onboarding again. Memory distillation is enabled by default as part of the new flow.
技能快捷能力 — 将富技能转化为工单头部一键可执行的快捷动作，提供工作区级能力开关，快捷面板上展示明确的描述（#542、#571）。Skill shortcuts capability — Turn rich skills into one-click executable actions callable directly from ticket headers, with a workspace-level capability toggle and explicit descriptions on the shortcuts UI (#542, #571).
智能体环境变量静态加密 — 智能体环境变量改用每值 ENC1 方案存储，工作区密钥与加密数据分离，运行时仍可即时读取（#554）。Agent environment-variable encryption at rest — Agent env vars are now stored with a per-value ENC1 scheme, keeping the workspace key separate from the encrypted blobs while preserving live reads (#554).
守护进程中断任务恢复 — 守护进程不再因中途关闭而丢任务：新增的恢复流程会在下次启动时还原正在运行的任务，并配套加强 systemctl 与安装阶段的所有权处理（#585、#581）。Daemon task recovery after shutdown — Interrupting a daemon mid-task no longer strands work: the new recovery flow restores in-flight tasks on next startup, paired with refined systemctl and ownership handling during install (#585, #581).
CLI 能力扩展 — 新增 mopheus email send 子命令、聊天消息游标分页列表、ticket/repo/chat 命令的 nextBefore 结构化输出、列表分页信息，以及默认拒绝以 root 身份运行守护进程（#547、#559、#560）。More capable CLI surface — mopheus email send subcommand, chat message listing with cursor paging, structured nextBefore output on ticket/repo/chat commands, list pagination info, and a hard refusal to run the daemon as root by default (#547, #559, #560).

新增New

按 profile 划分的守护进程安装与 systemctl 全生命周期管理，镜像加载改为流式解压以避免重复压缩。Per-profile daemon install and systemctl-managed lifecycle with stream-decompressed image loading to avoid double compression.
技能标签、工作区 bundle 支持，以及新的 shortcuts 特性开关。Skill labels, workspace bundle support, and a new shortcuts feature flag.
跨工单评论控制与重构后的工作区中间件，支撑智能体任务场景。Cross-ticket comment control and refactored workspace middleware for the agent task surface.
mopheus email send 子命令以及带游标分页的聊天消息列表。mopheus email send subcommand and chat message list with cursor paging.
工作区删除事件即时通知已连接客户端。Workspace deleted event notifies connected clients immediately.
默认智能体任务超时由 2h 提升为 24h，原值会备份便于恢复。Default agent-task timeout raised from 2h to 24h, with previous values preserved for restoration.
系统配置页面对未配置项提供专门的视觉区分。Distinguishing visual treatment for unconfigured values on the system config page.
技能快捷能力默认开启，可在工单头部直接调用。Skill shortcut capability enabled by default and usable from the ticket header.
智能体任务父工单唤醒表，支持延迟唤醒、追踪与状态流转时的去重恢复。Agent-task parent wake table with deferred wakes, traces, and deduped resumptions when subtickets move between states.
附件富文本预览及源码切换（#576）。Rich-text attachment preview with a source toggle (#576).

改进Improved

守护进程 Claim 密钥包迁入独立的 claimkey/claimcrypto 路径，配套明确 fallback 与警告自愈覆盖（#591、#588）。Daemon claim key package moved under a dedicated claimkey/claimcrypto path with explicit fallback and warn-and-self-heal coverage (#591, #588).
通道会话来源与任务历史元数据正式纳入会话主记录。Channel session source and task history metadata are now part of the canonical session record.
提供商运行时、评论跟进与 ACP 加固合并到新的 line-protocol runner，共用一套生命周期（#559）。Provider runtime, comment follow-up, and ACP hardening folded into the new line-protocol runner so providers share one lifecycle (#559).
工单依赖可标记为 enforced，未完成的依赖会阻断指派与状态流转。Ticket dependency can be marked enforced so incomplete predecessors block assignment and status changes.
工作区引导流程重画为 7 关，附带中英双语演示数据与永久跳过偏好。Workspace onboarding quest flow redrawn to seven steps with bilingual demo seeds and skip-permanently preference.

安全Security

守护进程 Claim 传输使用 X25519 与每运行时密钥端到端加密；迁移窗口内保留明文 fallback 模式（#556、#580）。Daemon claim transport encrypted end-to-end with X25519 + per-runtime keys; legacy plaintext mode remains for the migration window (#556, #580).
智能体环境变量采用 ENC1 每值方案静态加密，密钥材料不进入数据库行。Agent env vars encrypted at rest using the ENC1 per-value scheme; key material stays out of the database row.
钉钉绑定限制为智能体负责人，关闭此前的跨负责人通道。DingTalk binding restricted to agent owners; the previous cross-owner flow is closed.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 099–105 迁移：技能快捷、智能体任务超时默认值、守护进程公钥列、工作区引导、记忆特性默认启用、智能体任务父工单唤醒以及现有智能体跳过引导。Apply the database migrations before starting the new server. This release includes migrations 099–105 for skill shortcuts, agent-task timeout default, daemon public-key column, workspace onboarding, memory feature default-on, agent-task parent wake, and skip-existing-agent onboarding.
现有守护进程需重新注册（或等待下一次心跳）以生成并持久化 X25519 Claim 密钥；在公钥回填前，Claim 流量仍以明文 fallback 模式运行。Existing daemons must re-register (or wait for the next heartbeat) so they generate and persist their X25519 claim key; daemons without a public key continue to operate in legacy plaintext claim mode until they do.
默认 agent_task_timeout 现为 24h。自定义值会自动备份到 agent_task_timeout_previous；如需保留原行为请在迁移后恢复。The default agent_task_timeout is now 24h. Custom values are backed up to agent_task_timeout_previous automatically; restore them after the migration if the old behavior was intentional.
守护进程必须以非 root 用户运行 —— CLI 默认拒绝以 root 启动，除非显式设置 MOPHEUS_ALLOW_ROOT=1。Run the daemon as a non-root user — the CLI now refuses root execution unless MOPHEUS_ALLOW_ROOT=1 is set.
工作区引导默认开启；现有工作区会被标记为已引导，自动跳过新流程。如需长期关闭，可在偏好中选择"永久跳过"。Workspace onboarding is enabled by default; existing workspaces are marked as already-onboarded so they skip the new flow automatically.

v2.2.2

2026-08-15

重点更新Highlights

钉钉智能机器人与群聊集成 — 打通钉钉 Stream 机器人的完整接入流程，支持 Stream 模式免公网 IP 连接、二维码扫码绑定账号、交互式 Markdown 与卡片消息渲染、双向富媒体附件传输，以及 AES-256 密钥生命周期管理与平滑轮换。DingTalk channel integration — Connect DingTalk Stream bots end to end, including Stream connection mode, QR code account binding, interactive Markdown and card rendering, inbound/outbound media handling, and AES-256 secret lifecycle management.
智能体文件系统可见性沙箱 — 在 Linux 环境下支持基于 Bubblewrap (bwrap) 的文件系统隔离沙箱，将智能体运行时严格限制在指定的工作区、独立临时目录和用户主目录内，杜绝跨工作区与宿主机敏感文件泄露。Agent filesystem sandbox — Protect host environments on Linux using Bubblewrap (bwrap) filesystem isolation, confining agent execution to its workspace and temporary directory while preventing host and cross-workspace leakage.
私有 S3 存储桶与预签名 URL — 新增 s3_private 配置支持私有 S3 兼容对象存储桶，通过 SigV4 预签名 URL 访问附件和媒体资源，无需开放存储桶公网读权限。Private S3 storage & presigned URLs — Support private S3-compatible buckets via SigV4 presigned URLs (s3_private), ensuring secure attachment and media asset delivery without public bucket permissions.
工单定时激活与到期提醒 — 支持设置工单计划激活时间（activate_at），后台调度自动将待处理工单转为进行中状态；提供工单到期自动提醒机制与处理状态追踪。Ticket scheduled activation & due reminders — Schedule tickets for future activation with automatic transition to in-progress status, and track due dates with automated background reminder processing.
模板系统基础设施 — 引入工作区、分组、智能体、团队和技能的复用模板数据库架构与多语言分类目录，为模板化快速初始化奠定基础。Template system foundation — Platform-level schema and multilingual catalog for reusable workspace, group, agent, team, and skill templates.

新增New

支持在智能体设置界面和 API 中直接解绑或清空已分配的运行时。Unbind and clear runtime assignments from agents in both UI and API.
管理员设置新增钉钉集成配置面板，新增 /dingtalk/bind 账号绑定页面与渠道图标。DingTalk bot integration settings in admin configuration, /dingtalk/bind authorization flow, and channel badges.
存储模块支持 s3_private 配置项，启用时自动生成预签名下载链接并配置私有缓存头。Configurable s3_private storage mode for presigned URL delivery and private cache headers.
工单定时激活与到期提醒后台处理机制，支持自动流转与提醒消费记录。Ticket scheduled activation (activate_at) and due date reminder tracking with automatic background dispatch.
向外部聊天渠道推送工单更新时增加标题与可点击引用链接展示。Push ticket updates to external channels formatted with ticket titles and clickable references.
模板系统数据表、分类元数据与中英文多语言翻译定义。Schema, category definitions, and multilingual translations for workspace and entity templates.

改进Improved

统一 Lark/飞书、企业微信和钉钉的通道底层架构，将内容渲染与底层传输彻底解耦。Channel architecture unified across Lark, WeCom, and DingTalk, separating outbound content rendering from transport delivery.
团队成员管理支持按智能体 ID 或成员 ID 进行身份提升（设为负责人）和移除。Team member management allows promoting and removing members by either agent ID or member ID.
Daemon 动态健康检查端口支持持久化并在启动时可靠刷新。Daemon dynamic health ports are persisted and refreshed reliably during daemon startup.
未配置可选登录方式时，Web 登录页默认隐藏未启用的登录入口。Optional login methods in web UI are hidden by default when unconfigured.
后端 HTTP 路由统一集中工作区上下文绑定逻辑。Centralized workspace context binding across backend HTTP routes.

修复Fixed

严格校验并拒绝跨工作区的智能体工单指派，防止租户隔离穿透。Cross-workspace agent ticket assignments are rejected to prevent cross-tenant access.
渠道媒体上传中断时及时清理任务，避免媒体处理协程残留。Interrupted channel media tasks are canceled cleanly to avoid stalled worker routines.
钉钉 Stream 连接在确认回执阶段能够优雅容忍网络断开并自动重连。DingTalk Stream connections tolerate network disconnects gracefully during acknowledgment.
修复 CLI 移除工单依赖时的 API 接口路由路径错误。CLI ticket dependency removal uses the correct API endpoint.
准确识别系统评论，清晰区分跨工单任务评论之间的关联关系。System comments and cross-ticket task relationships are identified accurately.
修复工单事件触发时 WebSocket 实时刷新面板看板状态的同步问题。Real-time ticket boards refresh immediately on ticket status changes via WebSocket events.
测试套件隔离用户本地 ~/.config 和 HOME 目录，消除不必要的后端测试延迟。Test suites isolated from user ~/.config and HOME directories with improved execution speed.

安全Security

智能体文件系统可见性沙箱（bwrap）防止对宿主机非授权路径的访问与跨工作区越权。Agent filesystem visibility sandbox (bwrap) prevents unauthorized host filesystem access and workspace crossing.
工单指派边界强化跨工作区校验，杜绝权限绕过。Cross-workspace authorization enforced on agent ticket assignment boundaries.
钉钉机器人凭据采用 AES-256 静态落盘加密，并提供平滑密钥轮换机制。DingTalk bot secrets encrypted at rest with AES-256 and seamless key rotation support.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含 094–098 迁移：钉钉通道支持、私有 S3 存储配置、工单定时激活与到期提醒、模板系统表结构以及工单激活请求人记录。Apply database migrations before starting the updated server. This release includes migrations 094–098 for DingTalk channel support, private S3 configuration, ticket timing/reminders, template system schema, and ticket activation requester auditing.
如需启用 Linux 智能体文件系统沙箱，请在宿主机安装 bubblewrap（bwrap）并在环境配置中设置 MOPHEUS_SANDBOX_ENABLED=true。To enable the Linux agent filesystem sandbox, install bubblewrap (bwrap) on host runtime machines and set MOPHEUS_SANDBOX_ENABLED=true.
使用私有 S3 兼容存储桶时，请将 s3_private 设置为 true，以确保存档文件下载通过 SigV4 预签名链接安全访问。For private S3 bucket deployments, enable s3_private in platform configuration so attachment downloads automatically use SigV4 presigned URLs.

v2.2.1

2026-08-12

重点更新Highlights

企业微信智能机器人集成 — 打通企业微信机器人的完整接入流程，包括引导配置、身份与会话绑定、接收媒体、向外发送工单与任务更新，以及中英文管理与产品文档。WeCom smart-bot integration — Connect WeCom bots end to end, including onboarding, identity and session binding, inbound media, outbound ticket and task updates, and bilingual administration and product documentation.
可追踪、可延迟的智能体任务 — 评论触发的任务会合并后续跟进；附件准备完成前任务可以进入延迟状态；工单详情新增交互式任务流视图，展示评论、委派、下游工单和任务状态。Traceable and deferred agent work — Comment-triggered tasks coalesce follow-ups, tasks can wait in a deferred state until attachments are ready, and ticket details include an interactive task-flow view for comments, delegation, downstream tickets, and task status.
领域感知的记忆蒸馏 — 支持自动、仅通用和专业模式；记录实际生效的技能用于审计；使用通用记忆类型名称；强制重新蒸馏改为原子操作，只有成功创建替代任务时才会清理现有记忆。Domain-aware memory distillation — Distillation supports automatic, general-only, and specialty modes, records effective skills for audit, exposes generic memory type names, and makes forced re-distillation atomic.
更完善的智能体管理 — 工作区成员可批量分配运行时、归档、恢复和转移负责人，并进行全量校验；服务器端强制执行私有智能体权限；默认智能体 License 配额提升为 10。Stronger Agent administration — Workspace members can bulk assign runtimes, archive, restore, and transfer ownership with all-or-nothing validation; private Agent permissions are enforced server-side and the default Agent license quota is 10.

新增New

按用户和工作区持久化工单筛选条件与搜索条件；URL 日期范围保持最高优先级，面板各列统一应用日期过滤。Persisted ticket filters and search per user and workspace, with URL date ranges remaining authoritative and date filters applied consistently to board columns.
按使用情况和负责人筛选技能；新增与 SKILL.md 同步的记忆蒸馏能力开关；手工创建技能的表单简化，并提供 Frontmatter 校验与明确错误信息。Skill filtering by usage and owner, a memory-distillation capability toggle synchronized with SKILL.md, and a simplified manual creation form with Frontmatter validation and actionable errors.
多服务器部署支持基于 Redis 共享本地技能发现与导入请求状态；单服务器部署继续使用内存回退方案。Redis-backed shared state for local Skill discovery and import requests in multi-server deployments, with the existing in-memory fallback for single-server deployments.
工作区收件箱未读角标、持久化侧边栏折叠状态、折叠侧边栏中的置顶工单入口、记忆筛选总数，以及智能体任务悬浮控件位置持久化。Workspace inbox unread badges, persisted sidebar collapse state, pinned-ticket access in the collapsed sidebar, memory filtered totals, and persisted floating agent-task control placement.
通道会话来源与任务历史、工作区用户绑定同步、统一的智能体运行时配置、CLI 交互式 token 登录，以及支持的安装器自动配置 CLI 工具。Channel session source and task history, workspace user binding synchronization, consolidated Agent runtime configuration, CLI interactive token login, and automatic CLI tool configuration in supported installers.

改进Improved

技能元数据编辑现在以完整的 SKILL.md（包括 Frontmatter）作为唯一编辑来源；支持的保存和导入覆盖流程会据此生成数据库投影。Skill metadata editing now uses the complete SKILL.md source, including Frontmatter, as the canonical editing surface; database projections are derived during supported saves and import overwrites.
ZIP 与文件系统技能导入共用同一发现遍历器，统一忽略 macOS 元数据并校验解压路径。ZIP and filesystem Skill imports now share one discovery walker that consistently ignores macOS metadata and validates extracted paths.
工单、智能体、团队和自动任务的创建与编辑界面统一应用编辑器显示偏好。Editor display preferences apply consistently to ticket, Agent, team, and scheduled-task creation and editing surfaces.
团队负责人委派指引现在要求有效的提及链接，并在执行前扫描裸 @。Team-leader delegation instructions now require valid mention links and a bare-@ preflight scan.
工单讨论新增父子回复导航、跳转到最后回复、更可靠的收件箱目标滚动、更紧凑的工具栏，以及任务图实时刷新。Ticket discussions gained parent/reply navigation, last-reply shortcuts, more reliable inbox-target scrolling, a more compact toolbar, and live task-graph refreshes.
运行时列表将离线项置于末尾，并显示负责人名称而不是负责人 ID。Runtime lists put offline entries last and show owner display names instead of owner IDs.
在线安装增强了对 CLI 资源不可用、Podman Docker 别名、静默 wget、文本附件扩展名确定性以及 PowerShell 安装流程的处理能力。Online installation is more resilient across unavailable CLI assets, Podman Docker aliases, quiet wget execution, deterministic text attachment extensions, and the PowerShell installer path.

修复Fixed

Claude、Codex、KimiCode、OpenCode、ACP 与 Pi 的运行时 panic 现在限制在对应任务内；清理、终端结果、会话 ID 与通道关闭行为保持确定性。Provider runtime panics are contained to the affected task across Claude, Codex, KimiCode, OpenCode, ACP, and Pi; cleanup, terminal results, session IDs, and channel closure remain deterministic.
父工单详情中继续显示已归档的子工单，同时普通工单列表默认仍隐藏已归档工单。Archived subtickets remain visible from their parent while general ticket lists continue to hide archived tickets by default.
评论派发正确处理成员后续回复、自提及、缺失的合并任务 ID，以及 pending/running 任务的后继任务，不再丢失工作。Comment dispatch handles member follow-ups, self-mentions, missing coalesced IDs, and pending/running task successors without losing work.
企业微信凭据轮换与加密媒体元数据处理更加安全；缺失 webhook trigger 时不再触发 nil 错误。WeCom credential rotation and encrypted media metadata handling are safer, and missing webhook triggers no longer cause nil failures.
技能 Frontmatter 样式与 Markdown 编辑行为统一；重复的手工技能名称会显示明确错误；本地技能请求轮询可跨 API 实例工作。Skill Frontmatter styling and Markdown editing are consistent, duplicate manual Skill names produce a specific error, and local Skill request polling works across API instances.
修复搜索键盘导航、空工单建议、工单提及、智能体任务消息输出存储、快照轮询、悬浮按钮位置持久化，以及延迟/终态任务状态过滤的一致性问题。Search keyboard navigation, empty ticket suggestions, ticket mentions, agent-task message output storage, snapshot polling, FAB placement persistence, and deferred/terminal task status filtering now behave consistently.
CLI 在智能体任务内运行时拒绝切换工作区，避免任务上下文被静默切换。The CLI refuses workspace switching while operating inside an Agent task.

安全Security

技能 ZIP 解压会拒绝路径穿越，并在发现文件前统一过滤元数据。Skill ZIP extraction rejects path traversal and applies centralized metadata filtering before discovery.
服务器端强制执行私有智能体的编辑、管理和负责人转移权限；批量操作先完整校验，不会产生部分变更。Private Agent edit, management, and ownership-transfer permissions are enforced by the server, including bulk operations with pre-validation and no partial mutation.
企业微信密钥轮换过程保持可解密性；运行时 panic 详情保留在服务器日志中，不暴露给任务用户。WeCom secret-key rotation preserves decryptability during transitions, and provider panic details remain in server logs rather than task-facing errors.

升级说明Upgrade Notes

启动新版本服务前先执行常规数据库迁移。本版本包含评论任务合并、延迟任务状态、二进制任务输出、企业微信/通道元数据、任务流种子数据、中文全文搜索和通道会话标识相关迁移。Apply the normal database migrations before starting the new server. This release includes migrations for comment-task coalescing, deferred task status, binary task output, WeCom/channel metadata, task-flow seed data, Chinese full-text search, and channel session identifiers.
systemd 单元名称已改为 mopheus-daemon.service；请更新仍引用旧单元名称的服务管理脚本。The systemd unit is now named mopheus-daemon.service; update service-management automation that still references the former unit name.
启用企业微信集成前请配置新的企业微信设置。多服务器部署应配置 Redis，以便在 API 实例之间共享本地技能发现与导入请求状态。Configure the new WeCom settings before enabling the integration. Multi-server installations should configure Redis so local Skill discovery/import request state is shared across API instances.
技能编辑器无需手工改写数据；现有 SKILL.md 的 Frontmatter 会在后续支持的保存和覆盖导入操作中成为权威来源。No manual data rewrite is required for the Skill editor changes; existing SKILL.md Frontmatter becomes the canonical source during subsequent supported saves and overwrites.

v2.2.0

2026-08-06

新增New

通道整合 — Lark 与飞书统一在同一通道引擎下，支持媒体状态清理、任务批处理语义以及按工作区隔离的聊天写入。Channel unification — Lark and Feishu consolidated under one channel engine with media-state cleanup, task-batching semantics, and workspace-scoped chat writes.
守护进程身份与新运行时 — 运行时注册支持 profile tag，守护进程按 profile 区分身份，并新增 pi-coding-agent 提供商。Daemon identity & new runtime — profile-tagged runtime registration, per-profile daemon identity, and a new pi-coding-agent provider.
工作区管理 — 批量邀请并附带技能、运行时可见的资源授权、支持分页与刷新授权的角色，以及新增的资源授权模型。Workspace management — batch invites that include skills, visible resource grants on runtimes, paginated roles with refresh grants, and a new resource-grant model.
RBAC 资源授权 — 成员可自助管理智能体访问，智能体生命周期操作按工作区隔离。RBAC resource grants — self-managed agent access for members and lifecycle operations gated by workspace scope.
工单与元数据 — 元数据 CRUD 走 service 层并配套选择器 UI，新增评论 Enter 键行为偏好、工单列表搜索过滤器，my-tickets 范围过滤下推到后端。Tickets & metadata — metadata CRUD via the service layer with a picker UI, comment Enter-key behavior preference, ticket list search filter, and my-tickets scope filtering pushed to the backend.
CLI 增强 — 新增 skill list 查询参数；工单命令支持 --project-id 别名；智能体与团队创建命令支持 --description-stdin 与 --description-file。CLI surface — skill list query flags, ticket list search filter, --project-id alias on ticket commands, --description-stdin and --description-file on agent and team create.
个人偏好设置 — 个人偏好、通知设置、键盘快捷键录制与编辑器显示模式偏好。Profile & preferences — personal preferences, notification settings, keyboard shortcut recording, and editor display-mode preferences.
任务清单 — 智能体任务新增随任务运行的本地 checklist。Agent-task checklist — per-task run-local checklist surfaced to CLI sessions.
License CLI — mopheus-license 新增模板预设。License CLI — template presets available in mopheus-license.

改进Improved

编辑器行为 — Enter 与 Mod-Enter 互补处理；检测快捷键冲突；/add comment 风格在提示词中统一。Editor behavior — Enter / Mod-Enter complementary handling, shortcuts conflict detection, and /add comment style unified across prompts.
蒸馏流程 — 记忆更新支持重新蒸馏的选择信号；去重逻辑与 mopheus memory 子命令对齐。Distillation — redistillation choices signal for memory refinement; dedup logic aligned with mopheus memory subcommand.
激活与注册 — 运行时注册时保留激活状态；新智能体默认 normal 角色。Activation & registration — runtime activation preserved on register; new agents default to the normal role.
国际化 — 工作区设置页各 Tab 完成翻译；新增记忆角色范围标签。i18n — workspace settings tabs translated; memory role scope label added.
守护进程运行时 — 每次智能体任务运行后清理任务级技能。Hermes channel — per-task skills cleared between agent-task runs.
Codex 沙箱 — macOS 沙箱与 Linux 行为对齐。Codex sandbox — macOS sandbox aligned with the Linux behavior.
通道安装流程 — 接受邀请后刷新工作区列表；删除时清理媒体状态。Channel install flows — workspaces refresh after invitation acceptance; media state cleaned on deletion.
输出示例 — slim 提示词的 repo 命令样例与现行 CLI 参数对齐；新增按提供商的 task tracking 说明。Output guidance — slim repo command examples aligned with current CLI flags; provider-specific task tracking guidance added.

修复Fixed

跨工作区加固 — 关闭团队 CRUD、成员加入、智能体生命周期、jobs/triggers/runs、运行时、收件箱操作、技能 CRUD、附件、工单 pin、标签、团队负责人、聊天写入、Lark 安装绑定以及 License 配额检查中残留的跨工作区泄漏。Cross-workspace hardening — closing leaks in team CRUD, member onboarding, agent lifecycles, jobs/triggers/runs, runtimes, inbox operations, skill CRUD, attachments, ticket pins, labels, team leaders, chat writes, Lark installation/binding, and license quota checks.
品牌重命名 — moclaw → mopheus，覆盖 CLI、脚本、文档与各包。Brand rename — moclaw → mopheus across CLI, scripts, docs, and packages.
标签操作类型重命名 — TicketLableOperationParams → TicketLabelOperationParams。Label operation type rename — TicketLableOperationParams → TicketLabelOperationParams.
鉴权 — 明确当前密码要求；JWT 过期单独报告；集中用户错误码。Auth — current-password requirement clarified; expired JWT sessions report a distinct error; user error codes centralized.
守护进程 — 先前工作目录失效时优雅处理；运行时被禁用时允许负责人心跳；心跳回收限定为快照长度。Daemon — graceful handling when the prior working directory is unavailable; allow owner heartbeats when the runtime is disabled; bound heartbeat drain to snapshot length.
工作区 — 仅负责人可删除；接受重命名前的 License 代码；配置变更后刷新工作区数据。Workspace — enforce owner-only deletion; accept pre-rename license codes; refresh workspace data on config changes.
迁移与安装升级 — 跨升级保留已有表数据与自定义系统配置；避免重复注入已迁移的环境变量；强化重命名后的升级脚本。Migration & install upgrades — preserve existing table data and custom system config across upgrades; avoid duplicating migrated environment keys; harden renamed upgrade scripts.
技能 — 技能列表分页；统一脚本文件权限；恢复导入编排。Skills — paginated skills list, normalized script file permissions, renewal of import orchestration.
智能体 — 监听 kimi 缺会话日志并自动重试 resume；配置 ACP 非交互权限；运行时离线时任务进入队列；将 Codex 计划更新作为工具事件上报。Agent — detect kimi missing sessions from stderr and retry resume; configure ACP unattended permissions; queue agent tasks when the runtime is offline; surface Codex plan updates as tool events.
通知 — 当前聚焦窗口时抑制横幅；允许前台通知测试。Notifications — suppress banners while focused; foreground tests allowed.
编辑器 — 限制大附件预览；长评论导航、聊天消息复制按钮、按结构化 ID 路由群体 @ 提及。Editor — limit large attachment previews; long-comment navigation, chat copy button, group mention routing by structured ids.
收件箱 — 合并工单已读与归档操作；单项操作按工作区与收件人隔离。Inbox — group ticket read and archive actions; scope single-item operations by workspace and recipient.
通道 — 保留侧边栏聊天入口；删除时清理媒体状态。Hermes channel — keep the sidebar chat available; clean media state on deletion.
后端 — 运行时被禁用但负责人在线时允许心跳与注册；守护进程解决 claim 的工作区；为 JOIN 查询补全列限定。Backend — allow heartbeat and registration for disabled runtimes when the owner is active; resolve daemon claim workspace; qualify joined SQL column references.

v2.1.3

2026-07-21

新增New

知识图谱 — 基于 AGE 的知识图谱，支持子图导航与编辑操作（合并标签、移除边、更新节点元数据），并提供 RebuildGraph 命令。Knowledge graph — AGE-backed knowledge graph with subgraph navigation, edit operations (merge tags, remove edge, update node metadata), and a RebuildGraph command.
记忆系统 — 工作区记忆以文件形式写入供智能体提示注入；智能体工作流内置检索指引；认领时按工单上下文触发 recall；检索结果表格新增标题；CJK 按范围检索；删除最后一条记忆时清理蒸馏状态；删除后让所有记忆查询失效；新增 hasEmbedding 字段；支持按字段编辑与 JSON view 编辑器；CLI 新增 --disable-memory-retrieve 标志。Memory system — workspace memories written as files for agent prompt injection, retrieval guidance for agent workflows, recall by ticket context at claim time, table output with title, scoped CJK retrieval, status cleanup on memory deletion, invalidation of all memory queries on delete, hasEmbedding field, per-field editing, JSON view editor for context tags, and a --disable-memory-retrieve CLI flag.
搜索 — 工单基于 pg_bigm 的 CJK 子串与多词分层搜索，CJK 文本搜索增加 ILIKE 子串兜底，并通过 zhparser 提供中文全文搜索。Search — pg_bigm-backed CJK substring and multi-word tiered search for tickets, ILIKE substring fallback for CJK, and Chinese full-text search via zhparser.
技能体验 — 可搜索的技能选择器附带表格视图；页面进入时重新拉取；展示技能总数；保留列表搜索状态；导入时保留文件权限。Skills UX — searchable skills dialog with table view, page-entry refetch, total skill count, list search state preserved, and file mode preservation during import.
License — 离线授权强制生效；默认记忆上限提升到 50。License — offline authorization enforcement and the default memory limit raised to 50.
CLI 增强 — tickets create 接受 --parent（作为 --parent-id 别名）与 --project-id 别名；智能体与团队创建命令新增 --description-stdin 与 --description-file。CLI surface — tickets create accepts --parent as an alias of --parent-id and --project-id as an alias; agent and team create commands gain --description-stdin and --description-file.
侧边栏与导航 — 侧边栏展示被 pin 的工单；工单区段默认折叠并限制附件显示数量。Sidebar & navigation — pinned tickets shown in the sidebar and default-collapsed ticket sections with limited attachment display.
智能体任务悬浮按钮 — 扩展为 6 个停靠位并入 FabGroup，新增专属工单链接按钮与更宽的抽屉。Agent-tasks FAB — expanded to six anchor positions and stacks in FabGroup, with a dedicated ticket link button and widened drawer.
运行时导入 — 运行时导入对话框支持搜索过滤。Runtime import — search filtering in the runtime import dialog.
守护进程控制 — 单任务 subagent 上限通过提示注入生效；按任务清理 ~/.claude/projects 缓存；解析 subagent 生命周期事件。Daemon control — per-task subagent limit with prompt injection and ~/.claude/projects cache cleanup per task; subagent lifecycle event parsing.
智能体环境 — Claude 启用任务级 CLAUDE_CONFIG_DIR；cliProvider 接入 homeSeeder 钩子。Agent environment — task-scoped CLAUDE_CONFIG_DIR for Claude and a homeSeeder hook on cliProvider.

改进Improved

守护进程 WebSocket 稳定性 — 部署后刷新过期客户端；工单 WebSocket 事件触发后让工单面板查询失效。WebSocket client stability — refresh stale clients after deploy; invalidate the tickets-board query on ticket WS events.
智能体任务活动 — 任务列表接口恢复批量用量；消息懒加载并支持分页。Agent-task activity — restore batch usage in the task list endpoint; lazy-load messages with pagination.
蒸馏提示词 — 在聊天模式下加强记忆检索触发条件；校准记忆 CLI 命令引用。Distillation prompt — strengthen memory retrieval trigger in chat mode; tighten memory CLI command references.
编辑器 — 从右下角点击悬浮按钮时跳到左上；抑制无意义的扩展注入噪声。Editor — FAB jumps to top-left on click from bottom-right position; suppress body hydration extension noise.
工单体验 — 设置父工单后恢复页面可点击性；智能体任务悬浮按钮支持拖到角落；评论与活动时间线显示绝对时间。Tickets UX — restore page clickability after setting parent ticket; agent task floating action button drag-to-corner behavior; absolute timestamps in comment and activity timeline.
默认提示词 — 强化 slim 提供商提示词；Claude 默认提示词由 v1 切换为 v2。Default prompt — slim provider prompt hardened; Claude default prompt switched from v1 to v2.

修复Fixed

记忆 — 修正 V1 记忆提示词路径与索引格式；修正 searchSimilarMemories 的 SQL 参数编号与范围过滤；处理最后一轮评审意见。Memory — fix V1 memory prompt paths and index format; fix searchSimilarMemories SQL parameter numbering and scope filtering; address final review findings.
技能 — 导入时保留文件权限；导入时保留脚本元数据；保留可执行的技能脚本；批量智能体使用情况查询；进入页面重新拉取列表；显示技能总数。Skills — preserve file modes during import; preserve script metadata during import; preserve executable skill scripts; batch agent usage lookup; refetch list on page entry; show total skill count.
安装与打包 — 避免重复拷贝已下载的归档包；在线升级拉取所有服务，不仅限后端+前端；加固跨平台在线安装脚本；更新安装环境示例。Install & packaging — avoid copying downloaded archives; pull all services during online update, not just backend and frontend; harden online install scripts across platforms; update install env example.
守护进程 — Claude 缓存清理按任务范围；技能运行后恢复工作流；监听 Kimi stderr 中缺失的会话日志；缺失 resume 时重试。Daemon — scope Claude cache cleanup per task; resume workflow after skill runs; detect Kimi missing sessions from stderr; retry missing resume sessions.
工单 — 校验元数据 JSON 过滤器；仓库查询绑定事务；删除工单后工单面板保持原位。Tickets — validate metadata JSON filters; bind repositories to transactions; keep the board in place after delete.
Web — 部署后刷新过期客户端；移除未使用的 serverActions 配置；处理最后一轮评审意见。Web — refresh stale clients after deploy; remove unused serverActions config; clean up final review findings.
工单作用域 — 级联删除 memory_source 与 memory_distillation。Tickets scope — cascade delete memory_source and memory_distillation.
智能体 — 保留可执行的技能脚本；提示完成后停止 ACP 进程。Agent — preserve executable skill scripts; stop ACP process after prompt completion.
提示词 — 让记忆检索指引与现行 CLI 标志一致。Prompt — restore memory retrieval guidance references to match actual CLI flags.

v2.1.2

2026-07-08

新增New

Codex 提供商 — Codex 运行时支持，智能体执行能力对齐（MCP、沙箱、记忆处理、会话用量跟踪）。Codex provider — Codex runtime support with full agent execution parity (MCP, sandbox, memory handling, session usage tracking).
GitHub 集成 — 注册仓库、同步 PR 与 Issue、关联到工单，并从 CLI 驱动完整的 checkout → 编码 → PR → 同步流程。GitHub integration — Register repositories, sync PRs and issues, link them to tickets, and drive the full checkout → code → PR → sync workflow from the CLI.
群聊 — 话题、表情回应、回复、成员管理、提及过滤、可点击的工单标识符和悬浮卡片。Group chat — Topics, reactions, replies, member management, mention filtering, clickable ticket identifiers, and hover cards.
技能导入 — 支持从 URL 导入、解析 GitHub、上传 zip 或本地导入。Skill import — Import skills from a URL, parse from GitHub, upload a zip, or import locally.
权限（RBAC） — 观察者（Observer）角色、邀请成员时选择角色、新增细粒度权限。RBAC — Observer role, role selection during member invites, and new scoped permissions.
/note 命令 — 在评论中抑制智能体触发。/note command — Suppress agent triggering from a comment.

改进Improved

工单与工作区体验：脏数据守卫、显式的编辑/保存/取消流程、右键菜单选择器、标识符前缀、终态状态级联到子工单。Ticket and workspace UX: dirty guards, explicit edit/save/cancel flows, context-menu pickers, identifier prefixes, terminal status cascading to subtickets.
智能体任务悬浮按钮、活动任务展示和拖拽到角落。Agent task floating action button, active-task display, and drag-to-corner behavior.
Helm chart 与安装/更新打包。Helm chart and install/update packaging.
营销站点脚手架（Next.js + i18n）。Marketing site scaffold (Next.js + i18n).

修复Fixed

守护进程 WebSocket 稳定性（减少不必要的重连；修复强制重新注册时的 1006）。Daemon WebSocket stability (fewer unnecessary reconnects; fixed 1006 on forced re-registration).
按会话上下文修复智能体任务触发评论的去重。Agent task trigger-comment deduplication by thread context.
仓库查询别名、NULL 扫描处理、重复仓库 URL、UUID 解析和缺失的触发线程 ID。Repository query aliases, NULL scan handling, duplicate repo URLs, UUID resolution, and missing trigger thread IDs.
全零用量桶不再显示为合成的模型行。All-zero usage buckets no longer appear as synthetic model rows.
长评论显示、提及选择器键盘选择、时间线折叠和记忆提取界面。Long comment display, mention picker keyboard selection, timeline collapsing, and memory extraction UI.

v2.1.1

2026-06-30

新增New

工作区 slug 实时校验，随机后缀生成更安全。Live workspace slug validation with safer random suffix generation.
全局搜索中的工单 ID 匹配，元数据值渲染为可点击 URL。Ticket ID matching in global search and clickable URLs for metadata values.
运行时用量准确性 — 任务计数改用 runtime_daily 作为来源；缓存 Token 总量在用量中展示。Runtime usage accuracy — task counts now sourced from runtime_daily; cache token totals surfaced in usage reporting.
远程 CLI 安装和安装备份工具。Remote CLI installation and install backup tooling.
智能体运行列表中展示请求者和运行时信息；仪表盘活动日志改进。Requester and runtime info in agent run lists; dashboard activity log improvements.

改进Improved

提示词元数据键拆分为必选和可选两级。Prompt metadata split into mandatory and optional tiers.
飞书区域标签统一为 "Feishu" / "飞书"。Feishu region labels unified to "Feishu" / "飞书".
测试覆盖率：webhook 80.8% → 88.8%，鉴权 80.8% → 94.2%。Test coverage: webhooks 80.8% → 88.8%, auth 80.8% → 94.2%.

修复Fixed

工单元数据 CLI 对响应信封的解析。Ticket metadata CLI parsing against response envelopes.
运行时用量重复计数；数字输入框在退格时卡在 0。Runtime usage double-counting; number inputs stuck at 0 on backspace.
按扩展名覆盖附件 content-type；重复添加成员（409）。Attachment content-type via extension overrides; duplicate member add (409).
隐藏智能体环境变量字段的浏览器自动填充；CLI 在 401 时的会话重试；安装健康检查端点路径。Browser autofill on hidden agent env-var fields; CLI session retry on 401; install health-check endpoint path.

v2.1.0

2026-06-25

首个 2.x 版本。发布时未逐条记录详细说明。Initial 2.x release. Detailed per-item notes were not captured at tag time.