feat: move desktop runtime behind app server

Author: t

apps/desktop/README.md

@@ -16,13 +16,13 @@ src/                 renderer（React + Vite，无 Tailwind，手写设计系统
                      Plugins / Repl / Sessions / Settings / Skills
   components/        Sidebar / InspectorRail / ToolCard / UpdateBanner …
   lib/               tauri-api（renderer↔Rust IPC 封装）· protocol-client ·
-                     mac-agent（实验期 fallback）· repl-stream · updater …
+                     protocol-agent · repl-stream · updater …
 src-tauri/           Rust 主进程
   src/app_server.rs  bundled runtime 启停、stdio 与 crash event
   src/commands.rs    #[tauri::command] —— renderer 通过 invoke() 调用
-  src/credentials.rs 凭据读写（原子写入）
+  src/credentials.rs 凭据保存与无密钥状态查询
   src/settings.rs    设置持久化
-  src/tools.rs       工具实现
+  src/tools.rs       legacy native helpers（renderer 仅暴露只读 file read）
   src/lib.rs         Tauri builder / 插件注册
   tauri.conf.json    窗口 + 构建 + 打包配置
   capabilities/      权限能力声明
@@ -32,10 +32,10 @@ src-tauri/           Rust 主进程
 renderer ↔ Rust 的 IPC 边界由 `src/lib/tauri-api.ts` 封装，契约测试见
 `src/lib/tauri-api.test.ts`（#84）。
 
-实验 app-server 由 Tauri 作为 target-specific sidecar 监督。`apps/server` 会被打成单个
+app-server 由 Tauri 作为 target-specific sidecar 监督。`apps/server` 会被打成单个
 `app-server.cjs` resource，Node runtime 通过 `bundle.externalBin` 进入 `.app`；renderer 只能通过
-Rust commands 与版本化协议通信，不能直接使用 shell plugin。现有 `mac-agent` 在迁移期保留为显式
-fallback，不能作为长期双架构。
+Rust commands 与版本化协议通信，不能直接使用 shell plugin。provider、agent loop、tools、权限、
+session materialization 和凭证明文都只存在于 sidecar；renderer 不再带有第二套运行时。
 
 ## 开发
 

apps/desktop/src-tauri/src/commands.rs

@@ -25,8 +25,8 @@ pub fn get_app_info() -> AppInfo {
 }
 
 #[tauri::command]
-pub fn read_credentials() -> Result<Credentials, String> {
-    credentials::read()
+pub fn credential_status() -> Result<credentials::CredentialStatus, String> {
+    credentials::status()
 }
 
 #[tauri::command]
@@ -116,71 +116,10 @@ pub fn append_allow_matcher(matcher: String) -> Result<(), String> {
     settings::write_user(&value)
 }
 
-/// Create a new session JSONL with a metadata header line. Returns the
-/// generated session id. The id format matches what @deepcode/core's
-/// SessionManager produces: `YYYY-MM-DD-<random>`.
-#[tauri::command]
-pub fn session_create(cwd: String) -> Result<String, String> {
-    let Some(home) = dirs::home_dir() else {
-        return Err("no home directory".into());
-    };
-    let now = std::time::SystemTime::now();
-    let secs = now
-        .duration_since(std::time::UNIX_EPOCH)
-        .map_err(|e| e.to_string())?
-        .as_secs();
-    let date = format_date(secs);
-    // Lightweight unique suffix from time-nanos — no extra crate dep
-    let nanos = now
-        .duration_since(std::time::UNIX_EPOCH)
-        .map_err(|e| e.to_string())?
-        .subsec_nanos();
-    let rand_id = format!("{:08x}", nanos);
-    let id = format!("{}-{}", date, rand_id);
-    let dir = home.join(".deepcode").join("sessions");
-    std::fs::create_dir_all(&dir).map_err(|e| format!("mkdir {}: {}", dir.display(), e))?;
-    let path = dir.join(format!("{}.v1.jsonl", id));
-    let header = serde_json::json!({
-        "type": "session_meta",
-        "schema_version": 1,
-        "id": id,
-        "cwd": cwd,
-        "created_at": secs,
-        "client": "desktop"
-    });
-    let line = format!("{}\n", header);
-    std::fs::write(&path, line).map_err(|e| format!("write {}: {}", path.display(), e))?;
-    Ok(id)
-}
-
-/// Append a single JSON line to a session's JSONL file.
-#[tauri::command]
-pub fn session_append(id: String, message: serde_json::Value) -> Result<(), String> {
-    safe_session_id(&id)?;
-    let Some(home) = dirs::home_dir() else {
-        return Err("no home directory".into());
-    };
-    let dir = home.join(".deepcode").join("sessions");
-    std::fs::create_dir_all(&dir).map_err(|e| format!("mkdir {}: {}", dir.display(), e))?;
-    let _lock = SessionWriterLock::acquire(&dir, &id)?;
-    let path = ensure_canonical_session(&dir, &id)?;
-    let mut normalized = message;
-    normalized["type"] = serde_json::Value::String("message".to_string());
-    normalized["schema_version"] = serde_json::Value::Number(1.into());
-    let line = format!("{}\n", normalized);
-    let mut f = std::fs::OpenOptions::new()
-        .create(true)
-        .append(true)
-        .open(&path)
-        .map_err(|e| format!("open {}: {}", path.display(), e))?;
-    f.write_all(line.as_bytes())
-        .map_err(|e| format!("write {}: {}", path.display(), e))
-}
-
 /// Read a session's JSONL and return its message lines (skipping the
 /// `session_meta` header and any unparseable lines). Each returned value is the
-/// stored message object as written by session_append: `{ type, role, content,
-/// timestamp }`. Returns an empty vec if the file doesn't exist.
+/// canonical `{ type, role, content, timestamp }` object. Returns an empty vec
+/// if the file doesn't exist.
 #[tauri::command]
 pub fn session_read(id: String) -> Result<Vec<serde_json::Value>, String> {
     safe_session_id(&id)?;
@@ -318,24 +257,6 @@ fn parse_session_messages(text: &str) -> Result<Vec<serde_json::Value>, String>
     Ok(out)
 }
 
-fn format_date(secs: u64) -> String {
-    // Simple YYYY-MM-DD; days since epoch math is enough for filename use.
-    let days = secs / 86_400;
-    // Reference: 1970-01-01 was a Thursday; we compute YMD via the
-    // standard "civil_from_days" algorithm by Howard Hinnant.
-    let z = days as i64 + 719_468;
-    let era = if z >= 0 { z } else { z - 146_096 } / 146_097;
-    let doe = (z - era * 146_097) as u64;
-    let yoe = (doe - doe / 1460 + doe / 36524 - doe / 146_096) / 365;
-    let y = yoe as i64 + era * 400;
-    let doy = doe - (365 * yoe + yoe / 4 - yoe / 100);
-    let mp = (5 * doy + 2) / 153;
-    let d = doy - (153 * mp + 2) / 5 + 1;
-    let m = if mp < 10 { mp + 3 } else { mp - 9 };
-    let y = if m <= 2 { y + 1 } else { y };
-    format!("{:04}-{:02}-{:02}", y, m, d)
-}
-
 /// List session files under ~/.deepcode/sessions/. Returns just metadata.
 #[derive(Serialize)]
 pub struct SessionMeta {

apps/desktop/src-tauri/src/credentials.rs

@@ -14,6 +14,14 @@ pub struct Credentials {
     pub base_url: Option<String>,
 }
 
+#[derive(Debug, Serialize, Clone)]
+#[serde(rename_all = "camelCase")]
+pub struct CredentialStatus {
+    pub has_key: bool,
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub base_url: Option<String>,
+}
+
 pub fn credentials_path() -> Option<PathBuf> {
     let home = dirs::home_dir()?;
     Some(home.join(".deepcode").join("credentials.json"))
@@ -30,6 +38,21 @@ pub fn read() -> Result<Credentials, String> {
     }
 }
 
+pub fn status() -> Result<CredentialStatus, String> {
+    let credentials = read()?;
+    Ok(CredentialStatus {
+        has_key: credentials
+            .api_key
+            .as_ref()
+            .is_some_and(|value| !value.is_empty())
+            || credentials
+                .auth_token
+                .as_ref()
+                .is_some_and(|value| !value.is_empty()),
+        base_url: credentials.base_url,
+    })
+}
+
 pub fn write(creds: &Credentials) -> Result<(), String> {
     let Some(path) = credentials_path() else {
         return Err("no home directory".into());
@@ -49,9 +72,8 @@ pub fn write(creds: &Credentials) -> Result<(), String> {
 }
 
 // ── Serde contract ─────────────────────────────────────────────────────
-// tauri-api.ts#readCredentials reads `api_key`/`auth_token`/`base_url` (snake)
-// and maps them to camelCase itself. Lock that shape + the skip-if-None omission
-// the TS side relies on (missing field → undefined). See HANDOFF §8a.
+// Credentials remain backend-only. The renderer receives CredentialStatus,
+// while this shape stays compatible with the CLI's credentials.json.
 #[cfg(test)]
 mod contract_tests {
     use super::*;
@@ -76,4 +98,17 @@ mod contract_tests {
         let v = serde_json::to_value(Credentials::default()).unwrap();
         assert_eq!(v.as_object().unwrap().len(), 0, "None fields must be skipped: {v}");
     }
+
+    #[test]
+    fn status_never_serializes_credentials() {
+        let value = serde_json::to_value(CredentialStatus {
+            has_key: true,
+            base_url: Some("https://host/v1".into()),
+        })
+        .unwrap();
+        assert_eq!(value["hasKey"], true);
+        assert_eq!(value["baseUrl"], "https://host/v1");
+        assert!(value.get("api_key").is_none());
+        assert!(value.get("auth_token").is_none());
+    }
 }

apps/desktop/src-tauri/src/lib.rs

@@ -3,17 +3,17 @@
 //
 // Architecture: most of DeepCode's logic lives in @deepcode/core (TypeScript).
 // The Tauri backend's job is to host the webview and expose a few native
-// commands that the frontend can't do (file dialogs, credentials read/write,
-// settings file IO, child-process spawn for CLI integration).
-//
-// During the protocol rollout, Rust also supervises the bundled app-server
-// sidecar. The renderer loop remains only as an explicit compatibility path.
+// commands that the frontend can't do (file dialogs, credential save/status,
+// settings/session index IO, and read-only file previews). Rust supervises the
+// bundled app-server sidecar; runtime/tool execution never runs in the webview.
 
 mod app_server;
 mod commands;
 mod credentials;
 mod settings;
+#[allow(dead_code)] // mutation-only snapshot helpers remain for compatibility tests
 mod snapshots;
+#[allow(dead_code)] // legacy native mutation helpers are no longer renderer commands
 mod tools;
 mod voice;
 
@@ -22,15 +22,13 @@ use app_server::{
 };
 use commands::{
     append_allow_matcher, cli_path, get_app_info, get_settings_path, list_plugins, list_sessions,
-    list_skills, load_keybindings, load_settings_file, open_url, read_credentials,
-    save_credentials, save_keybindings, save_settings_file, session_append, session_archive,
-    session_create, session_delete, session_read, session_set_title,
+    credential_status, list_skills, load_keybindings, load_settings_file, open_url,
+    save_credentials, save_keybindings, save_settings_file, session_archive, session_delete,
+    session_read, session_set_title,
 };
 use snapshots::session_snapshots;
 use tauri::Manager;
-use tools::{
-    tool_bash, tool_bash_cancel, tool_edit, tool_glob, tool_grep, tool_read, tool_write, BashState,
-};
+use tools::tool_read;
 use voice::{voice_cancel, voice_start, voice_status, voice_stop, VoiceState};
 
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
@@ -43,24 +41,21 @@ pub fn run() {
         .plugin(tauri_plugin_updater::Builder::new().build())
         .plugin(tauri_plugin_process::init())
         .manage(VoiceState::default())
-        .manage(BashState::default())
         .manage(AppServerState::default())
         .invoke_handler(tauri::generate_handler![
             get_app_info,
             app_server_start,
             app_server_send,
             app_server_stop,
             app_server_status,
-            read_credentials,
+            credential_status,
             save_credentials,
             load_settings_file,
             save_settings_file,
             get_settings_path,
             append_allow_matcher,
             load_keybindings,
             save_keybindings,
-            session_create,
-            session_append,
             session_read,
             session_set_title,
             session_delete,
@@ -71,12 +66,6 @@ pub fn run() {
             cli_path,
             open_url,
             tool_read,
-            tool_write,
-            tool_edit,
-            tool_bash,
-            tool_bash_cancel,
-            tool_glob,
-            tool_grep,
             session_snapshots,
             voice_status,
             voice_start,

apps/desktop/src-tauri/src/tools.rs

@@ -87,7 +87,16 @@ pub async fn tool_read(
     offset: Option<usize>,
     limit: Option<usize>,
 ) -> Result<ReadOk, String> {
-    let raw = tokio::fs::read_to_string(&file_path)
+    let resolved = tokio::fs::canonicalize(&file_path)
+        .await
+        .map_err(|e| format!("read {}: {}", file_path, e))?;
+    let credentials_path = if let Some(path) = crate::credentials::credentials_path() {
+        tokio::fs::canonicalize(path).await.ok()
+    } else {
+        None
+    };
+    reject_credentials_path(&resolved, credentials_path.as_deref())?;
+    let raw = tokio::fs::read_to_string(&resolved)
         .await
         .map_err(|e| format!("read {}: {}", file_path, e))?;
     let lines: Vec<&str> = raw.split('\n').collect();
@@ -129,6 +138,14 @@ pub async fn tool_read(
     })
 }
 
+fn reject_credentials_path(resolved: &Path, credentials_path: Option<&Path>) -> Result<(), String> {
+    if credentials_path.is_some_and(|path| resolved == path) {
+        Err("credential files are backend-only".to_string())
+    } else {
+        Ok(())
+    }
+}
+
 // ──────────────────────────────────────────────────────────────────────────
 // Write
 // ──────────────────────────────────────────────────────────────────────────
@@ -528,6 +545,13 @@ mod casing_tests {
         );
     }
 
+    #[test]
+    fn renderer_read_rejects_backend_credentials() {
+        let credential = Path::new("/home/user/.deepcode/credentials.json");
+        assert!(reject_credentials_path(credential, Some(credential)).is_err());
+        assert!(reject_credentials_path(Path::new("/workspace/src.ts"), Some(credential)).is_ok());
+    }
+
     #[test]
     fn edit_ok_serializes_camel_case() {
         let v = serde_json::to_value(EditOk {

apps/desktop/src/App.tsx

@@ -3,7 +3,7 @@
 // Milestone: 0.1.2 — adds project-folder flow + inspector wiring + session refresh.
 
 import { useCallback, useEffect, useState } from 'react';
-import { contextWindowFor } from '@deepcode/core/dist/providers/deepseek.js';
+import { contextWindowFor } from '@deepcode/core/dist/providers/model-metadata.js';
 import { FilePanel } from './components/FilePanel.js';
 import { InspectorPanel } from './components/InspectorPanel.js';
 import { InspectorRail } from './components/InspectorRail.js';
@@ -12,7 +12,7 @@ import { SETTINGS_FAMILY, SettingsLayout } from './components/SettingsLayout.js'
 import { Sidebar } from './components/Sidebar.js';
 import { UpdateBanner } from './components/UpdateBanner.js';
 import { registerShortcut } from './lib/keyboard.js';
-import { clearHistory as clearAgentHistory } from './lib/mac-agent.js';
+import { clearProtocolThread as clearAgentHistory } from './lib/protocol-agent.js';
 import { loadProjectPath, saveProjectPath } from './lib/project.js';
 import { storedToMsgs, type Msg } from './lib/repl-stream.js';
 import { onUpdateDownloaded, startUpdaterPolling } from './lib/updater.js';
@@ -243,6 +243,7 @@ export function App(): JSX.Element {
           setScreen,
           projectPath,
           () => setSessionEpoch((k) => k + 1),
+          setActiveSessionId,
           handleInspector,
           resumedMessages,
           openFile,
@@ -290,6 +291,7 @@ function renderScreen(
   setScreen: (s: ScreenName) => void,
   projectPath: string,
   onTurnComplete: () => void,
+  onSessionStarted: (sessionId: string) => void,
   onInspector: (patch: Partial<InspectorData>) => void,
   initialMessages?: Msg[],
   onOpenFile?: (path: string) => void,
@@ -301,6 +303,7 @@ function renderScreen(
         <ReplScreen
           projectPath={projectPath}
           onTurnComplete={onTurnComplete}
+          onSessionStarted={onSessionStarted}
           initialMessages={initialMessages}
           onInspector={onInspector}
           onOpenFile={onOpenFile}
@@ -327,6 +330,7 @@ function renderScreen(
         <ReplScreen
           projectPath={projectPath}
           onTurnComplete={onTurnComplete}
+          onSessionStarted={onSessionStarted}
           initialMessages={initialMessages}
           onInspector={onInspector}
           onOpenFile={onOpenFile}

apps/desktop/src/components/InspectorPanel.tsx

@@ -11,7 +11,7 @@
 // empty state rather than a placeholder — per HANDOFF: no fake sections.
 
 import { useEffect, useRef } from 'react';
-import { contextWindowFor } from '@deepcode/core/dist/providers/deepseek.js';
+import { contextWindowFor } from '@deepcode/core/dist/providers/model-metadata.js';
 import { projectName } from '../lib/project.js';
 import type { InspectorData, InspectorSection } from '../types/inspector.js';