fix(sync): resolve main into v1.2.5 conflicts

.github/release-notes/v1.2.4.md

@@ -0,0 +1,19 @@
+# Memmy v1.2.4
+
+## Highlights
+
+- Improved OpenCode V2 conversation capture for continuous sessions and real-scan-first flows, with lifecycle completion, deduplication, and recoverable behavior while L3 is unavailable. WeChat capture now retries transient changes and cancels pending collection work on exit.
+- Unified credential sources and account projection for BYOK and built-in model configuration, isolated connection-test responses after page unload, and preserved migrated model modes. Added model-thinking levels, token budgets, protocol selection, vision capability, and DeepSeek-V4.1-Flash-1017 capability registration.
+- Improved Agent runtime Hook lifecycle handling, execution waits, OpenAI-compatible requests, model-error diagnostics, and tool-result handling. Explicit stop now replaces whole-turn timeout behavior, and resumed sessions continue with an explicit model selection.
+
+## Agent and Desktop improvements
+
+- Improved Memory reliability with cross-account candidate deduplication, Embedding input validation, failed-batch isolation, task-memory deletion, capture boundaries, and runtime builds with checksums for each platform artifact.
+- Expanded the desktop experience with slash-command and subcommand suggestions, skill Markdown display, social-login entry points, model-thinking controls, and browser/computer-history authorization and recovery paths. Windows History and WeChat flows retain visible failures and their privacy boundaries.
+- Unified Agent and Memory multi-platform runtime builds, version synchronization, and dependency-install scripts while keeping source, installer, and runtime metadata aligned.
+
+## Upgrade notes
+
+- Memmy Desktop and Agent are version `1.2.4`.
+- The bundled Memory service, viewer, and CLI remain independently versioned. This file records the v1.2.4 product scope only.
+- Real installation, in-place upgrade, and signed-release validation remain separate release gates. Full Harness regression, independent review, Draft PR, merge, signed tag, packaging, and publication are also separate gates.

.github/workflows/github-draft-release-v2.yml

@@ -354,19 +354,42 @@ jobs:
           mv release-assets/COMPARE.complete.json release-assets/COMPARE.json
 
           : > release-assets/PULL_REQUESTS.jsonl
+          api_url="${GITHUB_API_URL:-https://api.github.com}"
           while IFS= read -r commit_sha; do
-            if ! gh api --paginate \
-              -H "Accept: application/vnd.github+json" \
-              "repos/${GITHUB_REPOSITORY}/commits/${commit_sha}/pulls?per_page=100" \
-              --jq '.[] | {
-                number,
-                title,
-                htmlUrl: .html_url,
-                mergedAt: .merged_at,
-                baseRef: .base.ref,
-                headRef: .head.ref
-              }' >> release-assets/PULL_REQUESTS.jsonl; then
-              echo "::error title=Pull request evidence failed::Could not fetch associated PRs for commit $commit_sha. Manual recovery: re-run after GitHub API recovers or inspect the commit manually." >&2
+            pr_response="release-assets/PR_${commit_sha}.json"
+            pr_success="false"
+            for attempt in 1 2 3; do
+              rm -f "$pr_response"
+              http_status="$(
+                curl --silent --show-error --location \
+                  --retry 4 --retry-delay 2 --retry-max-time 30 --retry-all-errors \
+                  --connect-timeout 10 --max-time 45 \
+                  --header "Accept: application/vnd.github+json" \
+                  --header "Authorization: Bearer ${GH_TOKEN}" \
+                  --header "X-GitHub-Api-Version: 2022-11-28" \
+                  --output "$pr_response" \
+                  --write-out '%{http_code}' \
+                  "$api_url/repos/${GITHUB_REPOSITORY}/commits/${commit_sha}/pulls?per_page=100" || true
+              )"
+              if [[ "$http_status" == "200" ]] \
+                && jq -e 'type == "array"' "$pr_response" >/dev/null 2>&1; then
+                jq -c '.[] | {
+                  number,
+                  title,
+                  htmlUrl: .html_url,
+                  mergedAt: .merged_at,
+                  baseRef: .base.ref,
+                  headRef: .head.ref
+                }' "$pr_response" >> release-assets/PULL_REQUESTS.jsonl
+                pr_success="true"
+                break
+              fi
+              echo "::warning title=Retrying pull request evidence::GitHub PR metadata for commit $commit_sha was unavailable or malformed (HTTP $http_status, attempt $attempt/3)." >&2
+              sleep "$((attempt * 2))"
+            done
+            rm -f "$pr_response"
+            if [[ "$pr_success" != "true" ]]; then
+              echo "::error title=Pull request evidence failed::Could not fetch valid associated PRs for commit $commit_sha after 3 attempts. Manual recovery: re-run after GitHub API recovers or inspect the commit manually." >&2
               exit 1
             fi
           done < <(jq -r '.commits[].sha' release-assets/COMPARE.json)

.github/workflows/memory-release.yml

@@ -6,7 +6,7 @@ on:
       version:
         description: Memory version (X.Y.Z)
         required: true
-        default: 2.1.6
+        default: 2.1.7
   push:
     tags:
       - "memory-v*"

.github/workflows/runtime-artifacts.yml

@@ -0,0 +1,101 @@
+name: Agent and Memory runtime artifacts
+run-name: runtime-artifacts-${{ github.ref_name }}
+
+on:
+  workflow_dispatch:
+    inputs:
+      runtime:
+        description: Runtime packages to build
+        type: choice
+        options: [both, memory]
+        default: both
+  push:
+    branches: [zy_memory_runtime_*]
+permissions:
+  contents: read
+
+jobs:
+  build:
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - target: darwin-arm64
+            runner: macos-14
+            arch: arm64
+          - target: darwin-x64
+            runner: macos-15-intel
+            arch: x64
+          - target: linux-arm64
+            runner: ubuntu-24.04-arm
+            arch: arm64
+          - target: linux-x64
+            runner: ubuntu-24.04
+            arch: x64
+          - target: windows-arm64
+            runner: windows-11-arm
+            arch: arm64
+          - target: windows-x64
+            runner: windows-2025
+            arch: x64
+    runs-on: ${{ matrix.runner }}
+    timeout-minutes: 45
+    defaults:
+      run:
+        shell: bash
+    env:
+      COPYFILE_DISABLE: '1'
+      PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: '1'
+      ELECTRON_SKIP_BINARY_DOWNLOAD: '1'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 26.0.0
+          architecture: ${{ matrix.arch }}
+          cache: npm
+      - name: Install build dependencies
+        run: npm ci --no-audit --no-fund
+      - name: Install Agent build dependencies
+        if: github.event_name == 'workflow_dispatch' && inputs.runtime != 'memory'
+        run: npm --prefix App/memmy-agent install --ignore-scripts --no-audit --no-fund
+      - name: Build Agent runtime
+        if: github.event_name == 'workflow_dispatch' && inputs.runtime != 'memory'
+        run: npm run agent:runtime:package -- --target "${{ matrix.target }}" --output "$RUNNER_TEMP/runtime-artifacts"
+      - name: Build Memory runtime
+        run: npm run runtime:package -w @memmy/memory -- --target "${{ matrix.target }}" --output "$RUNNER_TEMP/runtime-artifacts"
+      - name: Verify unpacked runtimes and native dependencies
+        run: node scripts/internal/shared/verify-runtime-artifacts.mjs "$RUNNER_TEMP/runtime-artifacts" "${{ matrix.target }}" "${{ inputs.runtime || 'memory' }}"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: runtimes-${{ matrix.target }}
+          path: ${{ runner.temp }}/runtime-artifacts/*
+          if-no-files-found: error
+          compression-level: 0
+          retention-days: 14
+
+  collect:
+    needs: build
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 26.0.0
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: runtimes-*
+          path: runtime-input
+      - name: Collect runtime archives with checksums
+        run: node scripts/internal/shared/collect-runtime-artifacts.mjs runtime-input runtime-output "${{ inputs.runtime || 'memory' }}"
+      - uses: actions/upload-artifact@v4
+        with:
+          name: all-platform-runtimes
+          path: runtime-output/*
+          if-no-files-found: error
+          compression-level: 0
+          retention-days: 14

.github/workflows/windows-computer-history-validation.yml

@@ -5,6 +5,7 @@ on:
     paths:
       - ".github/workflows/windows-computer-history-validation.yml"
       - "App/native-computer-history/**"
+      - "App/native-computer-use/**"
       - "App/memmy-agent/src/tools/computer-history/**"
       - "App/memmy-agent/tests/tools/computer-history/**"
       - "App/memmy-agent/scripts/copy-build-assets.mjs"
@@ -24,12 +25,15 @@ jobs:
   validate:
     runs-on: windows-2025
     timeout-minutes: 30
+    env:
+      EXPECTED_SOURCE_SHA: ${{ github.event.pull_request.head.sha || github.sha }}
     defaults:
       run:
         shell: pwsh
     steps:
       - uses: actions/checkout@v4
         with:
+          ref: ${{ github.event.pull_request.head.sha || github.sha }}
           persist-credentials: false
       - uses: actions/setup-node@v4
         with:
@@ -39,7 +43,9 @@ jobs:
       - uses: actions/setup-go@v5
         with:
           go-version: "1.22.12"
-          cache-dependency-path: App/native-computer-history/apps/OpenComputerHistoryWindows/go.mod
+          cache-dependency-path: |
+            App/native-computer-history/apps/OpenComputerHistoryWindows/go.mod
+            App/native-computer-use/apps/OpenComputerUseWindows/go.mod
       - name: Require Windows 11
         run: |
           $ErrorActionPreference = 'Stop'
@@ -51,6 +57,7 @@ jobs:
       - name: Install standalone agent dependencies
         run: npm ci --prefix App/memmy-agent
       - name: Validate native protocol and lifecycle without desktop access
+        id: native_history_tests
         run: |
           $ErrorActionPreference = 'Stop'
           Push-Location App/native-computer-history/apps/OpenComputerHistoryWindows
@@ -62,6 +69,15 @@ jobs:
             go vet -unsafeptr=false ./...
             if ($LASTEXITCODE -ne 0) { throw 'Native recorder vet failed' }
           } finally { Pop-Location }
+      - name: Validate native Computer Use Go module
+        id: native_computer_use_tests
+        run: |
+          $ErrorActionPreference = 'Stop'
+          Push-Location App/native-computer-use/apps/OpenComputerUseWindows
+          try {
+            go test ./...
+            if ($LASTEXITCODE -ne 0) { throw 'Native Computer Use tests failed' }
+          } finally { Pop-Location }
       - name: Build agent and native History recorder from source
         run: npm --prefix App/memmy-agent run build
       - name: Validate packaged app icons with Windows PowerShell 5.1
@@ -155,10 +171,55 @@ jobs:
           node node_modules/vitest/vitest.mjs run
           App/shell/desktop/tests/packaged-runtime-boundary.test.ts
           -t "requires the native Windows 11 History recorder"
+      - name: Emit exact-source Windows provider receipt
+        id: windows_provider_receipt
+        if: ${{ success() && steps.native_history_tests.outcome == 'success' && steps.native_computer_use_tests.outcome == 'success' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) }}
+        run: |
+          $ErrorActionPreference = 'Stop'
+          if ($env:RUNNER_OS -ne 'Windows') { throw 'Windows provider receipt requires a Windows runner' }
+          $head = (git rev-parse HEAD).Trim()
+          if ($LASTEXITCODE -ne 0 -or $head -ne $env:EXPECTED_SOURCE_SHA) {
+            throw "Executed checkout $head does not match expected source $env:EXPECTED_SOURCE_SHA"
+          }
+          git diff --quiet
+          if ($LASTEXITCODE -ne 0) { throw 'Tracked source changed during validation' }
+          git diff --cached --quiet
+          if ($LASTEXITCODE -ne 0) { throw 'Index changed during validation' }
+          $receipt = [ordered]@{
+            schemaVersion = 1
+            provider = 'windows'
+            status = 'passed'
+            headSha = $head
+            repository = $env:GITHUB_REPOSITORY
+            workflowRef = $env:GITHUB_WORKFLOW_REF
+            workflowSha = $env:GITHUB_WORKFLOW_SHA
+            runId = $env:GITHUB_RUN_ID
+            runAttempt = [int]$env:GITHUB_RUN_ATTEMPT
+            runnerOS = $env:RUNNER_OS
+            runnerArch = $env:RUNNER_ARCH
+            windowsBuild = [Environment]::OSVersion.Version.Build
+            generatedAt = [DateTime]::UtcNow.ToString('o')
+            nativeModules = @(
+              'App/native-computer-history/apps/OpenComputerHistoryWindows'
+              'App/native-computer-use/apps/OpenComputerUseWindows'
+            )
+            liveCaptureValidated = $false
+            signedInstallerValidated = $false
+          }
+          $receipt | ConvertTo-Json -Depth 4 | Set-Content -LiteralPath windows-provider-receipt.json -Encoding utf8NoBOM
+      - name: Upload exact-source Windows provider receipt
+        if: ${{ success() && steps.windows_provider_receipt.outcome == 'success' }}
+        uses: actions/upload-artifact@v4
+        with:
+          name: windows-provider-receipt-${{ env.EXPECTED_SOURCE_SHA }}-${{ github.run_attempt }}
+          path: windows-provider-receipt.json
+          if-no-files-found: error
+          retention-days: 14
       - name: Record validation scope
         if: ${{ always() }}
         run: |
           @'
           Validates source-built Windows History recorder identity, PE architecture, exact embedded worker source, pure recorder state/lifecycle self-tests, UTF-8 app catalog output, runtime asset copy, and packaging rules. This does not start live recording or prove real UI Automation/hook behavior.
+          Both native Windows Go modules are tested. The provider receipt is limited to the checks in this job; it does not prove live capture or signed-installer acceptance.
           A signed NSIS installer and a representative real-app capture matrix still require installation testing on a Windows 11 machine.
           '@ | Add-Content -Path $env:GITHUB_STEP_SUMMARY

.gitignore

@@ -1,5 +1,6 @@
 node_modules/
 dist/
+App/memmy-agent/npm-packages/
 release/
 App/shell/desktop/release/
 Mac软件打包/

AgentSourceCore/src/index.ts

@@ -4,6 +4,7 @@ export * from "./cursor-source-turn.js";
 export * from "./claude-code-source-turn.js";
 export * from "./openclaw-source-turn.js";
 export * from "./opencode-source-turn.js";
+export * from "./opencode-database-source.js";
 export * from "./hermes-source-turn.js";
 export * from "./deepseek-source-turn.js";
 export * from "./deepseek-session-files.js";