fix(loopx): compact environment panel and clarify Node runtime status

- render the environment panel as a single compact column to avoid blank space
- explain that an unknown Node runtime has not been probed yet
- keep the probe/re-check action as the single follow-up

Author: xlx1212

docs/interactive-capabilities/README.md

@@ -27,9 +27,9 @@ OpenBitFun Playbook currently contains **22 features**, **21 settings pages**, a
 - Generated per-item interaction audit: `docs/interactive-capabilities/technical/product-control-open-audit.json`
 - Generated low-level audit map: `docs/interactive-capabilities/technical/tauri-command-map.json`
 
-说明书、网站、搜索和 Agent 只看“功能 + 设置 + 子能力”。每项子能力都必须引用已注册 Tauri Command 或可解析的源码标记；这些证据不会进入公开目录。当前 **673** 个 Tauri 命令只用于实现覆盖审计。产品 UI 交互源码会在生成和检查时扫描并校验，但不会保存成随普通 UI 改动频繁变化的版本化快照。
+说明书、网站、搜索和智能体只看“功能 + 设置 + 子能力”。每项子能力都必须引用已注册 Tauri Command 或可解析的源码标记；这些证据不会进入公开目录。当前 **664** 个 Tauri 命令只用于实现覆盖审计。产品 UI 交互源码会在生成和检查时扫描并校验，但不会保存成随普通 UI 改动频繁变化的版本化快照。
 
-Docs, website, search, and agents see only features, settings, and documented sub-capabilities. Every sub-capability must reference a registered Tauri command or a resolvable source marker; evidence is stripped from public projections. The **673** Tauri commands remain implementation-audit evidence only. Product UI interaction sources are scanned and validated during generation and checks, but are not stored as a versioned snapshot that churns with ordinary UI changes.
+Docs, website, search, and agents see only features, settings, and documented sub-capabilities. Every sub-capability must reference a registered Tauri command or a resolvable source marker; evidence is stripped from public projections. The **664** Tauri commands remain implementation-audit evidence only. Product UI interaction sources are scanned and validated during generation and checks, but are not stored as a versioned snapshot that churns with ordinary UI changes.
 
 ## 控制边界 / Control boundary
 

docs/interactive-capabilities/technical/tauri-command-map.json

@@ -1,13 +1,13 @@
 {
   "schemaVersion": 2,
   "generatedFrom": "src/shared/interactive-capabilities/catalog.json",
-  "catalogDigest": "d7a7419ddd673eb733ae8bd33dbb3dcd3b4d1ce0acfc953067a3403fe26d6699",
-  "commandCount": 673,
+  "catalogDigest": "5473331e06ecd4bfafbf9b547d48b4fe1561ccf69d86fdfde51ea10dc919531c",
+  "commandCount": 664,
   "coverage": {
-    "commandCount": 673,
-    "documentedCommandCount": 633,
-    "implementationCommandCount": 40,
-    "implementationDigest": "c0a1edc760154624bd17f742f82fb66d08af6e8e2b32e99829e92ed6a75cd75e"
+    "commandCount": 664,
+    "documentedCommandCount": 613,
+    "implementationCommandCount": 51,
+    "implementationDigest": "233258957d404d017612c63fc57b2d6630543a50c4a10c059b5fb2623b621827"
   },
   "commands": [
     {
@@ -5836,38 +5836,6 @@
       "signature": "fn miniapp_loopx_turn_output_since( app_state: State<'_, AppState>, controller: State<'_, LoopxControllerState>, request: MiniAppLoopxTurnOutputSinceRequest, ) -> Result<LoopxTurnOutputSinceResponse, String>",
       "remoteWorkspacePolicy": "RemoteUnsupported"
     },
-    {
-      "id": "miniapp_market_auth_poll",
-      "moduleId": "miniapp_market",
-      "capabilityId": "feature.miniapps",
-      "capabilityIds": [
-        "feature.miniapps"
-      ],
-      "documentedItemIds": [
-        "feature.miniapps:market-account"
-      ],
-      "visibility": "documented",
-      "rustPath": "api::miniapp_market_api::miniapp_market_auth_poll",
-      "sourceFile": "src/apps/desktop/src/api/miniapp_market_api.rs",
-      "signature": "fn miniapp_market_auth_poll( app: AppHandle, request: DesktopAuthPollViewRequest, ) -> Result<DesktopAuthPollViewResponse, String>",
-      "remoteWorkspacePolicy": "WorkspaceAgnostic"
-    },
-    {
-      "id": "miniapp_market_auth_start",
-      "moduleId": "miniapp_market",
-      "capabilityId": "feature.miniapps",
-      "capabilityIds": [
-        "feature.miniapps"
-      ],
-      "documentedItemIds": [
-        "feature.miniapps:market-account"
-      ],
-      "visibility": "documented",
-      "rustPath": "api::miniapp_market_api::miniapp_market_auth_start",
-      "sourceFile": "src/apps/desktop/src/api/miniapp_market_api.rs",
-      "signature": "fn miniapp_market_auth_start() -> Result<DesktopAuthStartView, String>",
-      "remoteWorkspacePolicy": "WorkspaceAgnostic"
-    },
     {
       "id": "miniapp_market_browse",
       "moduleId": "miniapp_market",

scripts/check-core-boundaries.test.mjs

@@ -957,6 +957,11 @@ test('contract and AI adapter tests keep reviewed feature and failure-domain top
       path: 'tests/loopx_contracts.rs',
       requiredFeatures: ['miniapp'],
     },
+    {
+      name: 'legacy_migration_contracts',
+      path: 'tests/legacy_migration_contracts.rs',
+      requiredFeatures: ['legacy-migration'],
+    },
     {
       name: 'plugin_source_contracts',
       path: 'tests/plugin_source_contracts.rs',

scripts/core-boundaries/cargo-dependency-boundaries.mjs

@@ -153,6 +153,7 @@ const SERVICES_INTEGRATIONS_TOKIO_FEATURES = new Map([
   ['function-agents', ['fs', 'io-util', 'macros', 'rt', 'time']],
   ['mcp', ['fs', 'io-util', 'net', 'process', 'rt', 'sync', 'time']],
   ['miniapp-loopx', ['fs', 'io-util', 'macros', 'process', 'rt', 'sync', 'time']],
+  ['miniapp-storage', ['fs', 'time']],
   ['miniapp-runtime', ['fs', 'io-util', 'net', 'process', 'rt', 'sync', 'time']],
   ['miniapp-market', ['fs', 'io-util', 'net', 'process', 'rt', 'sync', 'time']],
   ['plugin-source', ['fs', 'rt', 'sync', 'time']],

scripts/core-boundaries/explicit-test-topology.mjs

@@ -212,6 +212,11 @@ export const productDomainsIntegrationTestTargets = [
     path: 'tests/loopx_contracts.rs',
     requiredFeatures: ['miniapp'],
   },
+  {
+    name: 'legacy_migration_contracts',
+    path: 'tests/legacy_migration_contracts.rs',
+    requiredFeatures: ['legacy-migration'],
+  },
   {
     name: 'plugin_source_contracts',
     path: 'tests/plugin_source_contracts.rs',

scripts/core-boundaries/rules/feature-rules.mjs

@@ -285,7 +285,7 @@ export const optionalDependencyFeatureOwnerRules = [
         depName: 'openbitfun-core-types',
         ownerFeatures: ['deep-research', 'remote-connect', 'remote-ssh-concrete', 'speech'],
       },
-      { depName: 'openbitfun-product-domains', ownerFeatures: ['canvas-runtime', 'function-agents', 'hook-import', 'miniapp-loopx', 'miniapp-market', 'miniapp-runtime', 'plugin-source'] },
+      { depName: 'openbitfun-product-domains', ownerFeatures: ['account-identity', 'canvas-runtime', 'function-agents', 'hook-import', 'miniapp-loopx', 'miniapp-market', 'miniapp-runtime', 'miniapp-storage', 'plugin-source', 'remote-connect'] },
       { depName: 'openbitfun-runtime-ports', ownerFeatures: ['deep-research', 'git', 'remote-connect', 'remote-ssh', 'remote-ssh-concrete', 'script-tool-runtime', 'web-tools'] },
       {
         depName: 'openbitfun-services-core',
@@ -312,15 +312,15 @@ export const optionalDependencyFeatureOwnerRules = [
         ],
       },
       { depName: 'bzip2', ownerFeatures: ['speech'] },
-      { depName: 'chrono', ownerFeatures: ['git', 'miniapp-market', 'remote-connect', 'remote-ssh-concrete', 'review-platform', 'speech', 'web-tools'] },
-      { depName: 'dirs', ownerFeatures: ['browser-control', 'miniapp-runtime', 'remote-connect', 'remote-ssh-concrete'] },
+      { depName: 'chrono', ownerFeatures: ['account-identity', 'git', 'miniapp-market', 'remote-connect', 'remote-ssh-concrete', 'review-platform', 'speech', 'web-tools'] },
+      { depName: 'dirs', ownerFeatures: ['account-identity', 'browser-control', 'miniapp-runtime', 'remote-connect', 'remote-ssh-concrete'] },
       { depName: 'dunce', ownerFeatures: ['miniapp-loopx', 'plugin-source', 'workspace-search'] },
-      { depName: 'fs2', ownerFeatures: ['plugin-source'] },
+      { depName: 'fs2', ownerFeatures: ['plugin-source', 'remote-persistence', 'remote-connect'] },
       { depName: 'futures', ownerFeatures: ['mcp', 'remote-connect', 'review-platform'] },
       { depName: 'futures-util', ownerFeatures: ['speech', 'web-tools'] },
       { depName: 'git2', ownerFeatures: ['git'] },
       { depName: 'hex', ownerFeatures: ['hook-import', 'mcp', 'miniapp-loopx', 'miniapp-market', 'plugin-source', 'remote-connect'] },
-      { depName: 'hostname', ownerFeatures: ['remote-connect'] },
+      { depName: 'hostname', ownerFeatures: ['remote-connect', 'remote-persistence'] },
       { depName: 'image', ownerFeatures: ['miniapp-market', 'remote-connect'] },
       { depName: 'local-ip-address', ownerFeatures: ['remote-connect'] },
       { depName: 'libc', ownerFeatures: ['plugin-source'] },
@@ -341,20 +341,20 @@ export const optionalDependencyFeatureOwnerRules = [
       { depName: 'rustls', ownerFeatures: ['remote-connect'] },
       { depName: 'rustls-native-certs', ownerFeatures: ['remote-connect'] },
       { depName: 'schannel', ownerFeatures: ['remote-connect'] },
-      { depName: 'sha2', ownerFeatures: ['canvas-runtime', 'hook-import', 'mcp', 'miniapp-loopx', 'miniapp-market', 'models-dev', 'plugin-source', 'remote-connect', 'remote-ssh', 'review-platform', 'speech'] },
+      { depName: 'sha2', ownerFeatures: ['canvas-runtime', 'hook-import', 'mcp', 'miniapp-loopx', 'miniapp-market', 'models-dev', 'plugin-source', 'remote-connect', 'remote-persistence', 'remote-ssh', 'review-platform', 'speech'] },
       { depName: 'sherpa-onnx', ownerFeatures: ['speech'] },
       { depName: 'shellexpand', ownerFeatures: ['remote-ssh-concrete'] },
       { depName: 'sse-stream', ownerFeatures: ['mcp'] },
       { depName: 'ssh_config', ownerFeatures: ['remote-ssh-concrete', 'ssh_config'] },
       { depName: 'terminal-core', ownerFeatures: ['remote-ssh', 'remote-ssh-concrete'] },
       { depName: 'tar', ownerFeatures: ['speech'] },
-      { depName: 'thiserror', ownerFeatures: ['browser-control', 'git', 'hook-import', 'miniapp-loopx', 'miniapp-market', 'plugin-source', 'remote-ssh', 'remote-ssh-concrete', 'review-platform', 'speech', 'web-tools', 'workspace-search'] },
+      { depName: 'thiserror', ownerFeatures: ['account-identity', 'browser-control', 'git', 'hook-import', 'miniapp-loopx', 'miniapp-market', 'plugin-source', 'remote-connect', 'remote-ssh', 'remote-ssh-concrete', 'review-platform', 'speech', 'web-tools', 'workspace-search'] },
       { depName: 'tokio-tungstenite', ownerFeatures: ['remote-connect', 'speech-realtime'] },
       { depName: 'tokio-util', ownerFeatures: ['miniapp-loopx', 'remote-ssh', 'speech'] },
       { depName: 'urlencoding', ownerFeatures: ['canvas-runtime', 'miniapp-market', 'remote-connect', 'review-platform'] },
-      { depName: 'uuid', ownerFeatures: ['canvas-runtime', 'hook-import', 'miniapp-loopx', 'miniapp-runtime', 'plugin-source', 'remote-connect', 'remote-ssh-concrete', 'speech'] },
+      { depName: 'uuid', ownerFeatures: ['canvas-runtime', 'hook-import', 'miniapp-loopx', 'miniapp-runtime', 'miniapp-storage', 'plugin-source', 'remote-connect', 'remote-ssh-concrete', 'speech'] },
       { depName: 'which', ownerFeatures: ['miniapp-loopx', 'miniapp-runtime', 'remote-connect', 'script-tool-runtime', 'workspace-search'] },
-      { depName: 'windows', ownerFeatures: ['models-dev', 'plugin-source', 'review-platform'] },
+      { depName: 'windows', ownerFeatures: ['models-dev', 'plugin-source', 'remote-connect', 'remote-persistence', 'remote-ssh-concrete', 'review-platform'] },
       { depName: 'x25519-dalek', ownerFeatures: ['remote-connect'] },
     ],
   },

scripts/desktop-tauri-build.mjs

@@ -14,6 +14,7 @@ import {
   writeFileSync,
 } from 'fs';
 import { buildLoopx } from './build-loopx.mjs';
+import { ensureFlashgrepBinary } from './prepare-flashgrep-resource.mjs';
 import { extractProductConfigArg } from './product-customization/cli.mjs';
 import { productBuildEnvironment } from './product-customization/projections.mjs';
 import { resolveProductDefinition } from './product-customization/resolver.mjs';
@@ -49,9 +50,12 @@ async function main() {
   console.log(`[release] channel=${releaseChannel.channel}`);
 
   const desktopDir = join(ROOT, 'src', 'apps', 'desktop');
-  preparePluginHost();
-  // Flashgrep distribution is temporarily suspended.
-  const flashgrepBinary = null;
+  if (!bundleOnly) preparePluginHost();
+  const flashgrepBinary = prepareMacOSFlashgrepForSigning(
+    ensureFlashgrepBinary({ target: optionValue(forward, '--target') || rustHostTargetTriple() }),
+    desktopDir,
+  );
+  process.env.FLASHGREP_DAEMON_BIN = flashgrepBinary;
   const loopxResourceDir = await prepareBundledLoopx(forward, desktopDir);
   // Tauri CLI reads CI and rejects numeric "1" (common in CI providers).
   process.env.CI = 'true';

scripts/dev.cjs

@@ -154,6 +154,7 @@ function runCommandPrefixed(prefix, cmd, args, cwd = ROOT_DIR, envOverrides = {}
   return new Promise((resolve) => {
     const spawnOptions = {
       cwd,
+      windowsHide: true,
       stdio: ['ignore', 'pipe', 'pipe'],
       env: {
         ...process.env,
@@ -681,7 +682,8 @@ async function main() {
   let currentStep = 1;
 
   // Step 1: Run all independent preparation tasks in parallel.
-  // copy-monaco / generate-version / mobile-web / plugin-host / loopx have no
+  // copy-monaco / generate-version / mobile-web / flashgrep / plugin-host / loopx
+  // have no
   // dependencies on each other; each task's output is line-prefixed so the
   // interleaved logs stay attributable. The DeepSeek bridge is not prepared
   // here: it is not a compile-time Tauri resource. Official desktop:build
@@ -690,7 +692,7 @@ async function main() {
     currentStep++,
     totalSteps,
     desktopMode
-      ? 'Prepare resources (parallel: monaco, version, mobile-web, plugin-host, loopx)'
+      ? 'Prepare resources (parallel: monaco, version, mobile-web, flashgrep, plugin-host, loopx)'
       : 'Prepare resources (parallel: monaco, version)'
   );
 
@@ -720,6 +722,32 @@ async function main() {
       name: 'Prepare loopx CLI sidecar',
       promise: ensureLoopxSidecar(),
     });
+    prepTasks.push({
+      name: 'Prepare speech libraries',
+      promise: (async () => {
+        try {
+          const { prepareSherpaDev } = await import('./prepare-sherpa-dev.mjs');
+          prepareSherpaDev(ROOT_DIR);
+          return { ok: true, code: 0 };
+        } catch (error) {
+          return { ok: false, code: null, error };
+        }
+      })(),
+    });
+    prepTasks.push({
+      name: 'Prepare workspace search daemon',
+      promise: (async () => {
+        try {
+          const { ensureFlashgrepBinary } = await import(
+            pathToFileURL(path.join(__dirname, 'prepare-flashgrep-resource.mjs')).href
+          );
+          process.env.FLASHGREP_DAEMON_BIN = ensureFlashgrepBinary();
+          return { ok: true, code: 0 };
+        } catch (error) {
+          return { ok: false, code: null, error };
+        }
+      })(),
+    });
     prepTasks.push({
       name: 'Build mobile-web',
       promise: runCommandPrefixed('mobile-web', 'node', ['scripts/mobile-web-build.cjs', '--install']),