Record the admin-issued accounts decision and R2 delivery

Why: the user replaced the stage-2 email self-registration sketch with admin-issued accounts (2026-09-30): no self registration, admin sets initial passwords, first login after creation or reset forces a change. Evidence: R2 landed on feature/auth-admin-accounts (migration v10, auth/session APIs, CLI user subcommands, login page + forced change gate + admin user management); store/e2e tests and a full headless journey on the real binary are green (see that task's PR). Impact: proposal status line only; section 5.1 sketch superseded.
Merge pull request 'feature/tavily-search-tool' (#18 ) from feature/tavily-search-tool into main
2026-09-30 11:15:41 +00:00 · 2026-09-30 11:00:28 +00:00 · 2026-09-30 11:00:11 +00:00 · 2026-09-30 10:45:59 +00:00 · 2026-09-30 10:45:57 +00:00 · 2026-09-30 10:45:26 +00:00
2 changed files with 4 additions and 3 deletions
@@ -120,7 +120,7 @@ frontmatter 刻意最小（无 YAML 依赖，解析器在 parse.go）；正文
 两条都不满足的，**不入库**：给不存在的工具写描述、为不存在的模式写行为规范，
 一旦被组装注入就是错误指引，死数据比缺数据更糟。

-按此标准对 Claude Code 提示词目录的处置（44 个已入库 + 明确不移植清单）：
+按此标准对 Claude Code 提示词目录的处置（46 个已入库 + 明确不移植清单）：

 | 目录条目 | 处置 | 落点 |
 |---|---|---|
@@ -138,7 +138,8 @@ frontmatter 刻意最小（无 YAML 依赖，解析器在 parse.go）；正文
 | 4.1-4.5 通用/探索/规划/验证 | 移植 | agent.sub.* |
 | 4.6 向导 | 移植 | agent.docs-wizard |
 | 4.7 记忆提取 | 移植 | agent.memory-extractor |
-| 5.x 工具描述（15 个） | 按需移植 | 仅本系统真实存在的工具（7 个）；其余 8 个（Bash/FileRead/FileWrite/FileEdit/Glob/Grep/WebFetch/WebSearch/Sleep/Skill/AskUserQuestion/NotebookEdit/Brief）**不移植**——无对应工具 |
+| 5.9 WebFetch、5.10 WebSearch | 移植 | tool.tavily_search / tool.web_search（后端经 Agent-Native TavilyProvider 注册；未配置密钥时不注册，模块不生效） |
+| 5.x 其余工具描述（13 个） | 按需移植 | 仅本系统真实存在的工具；其余（Bash/FileRead/FileWrite/FileEdit/Glob/Grep/Sleep/Skill/AskUserQuestion/NotebookEdit/Brief）**不移植**——无对应工具 |
 | 6.1 会话压缩 | 移植 | aux.session-compact |
 | 6.2 Session Memory | 移植 | aux.session-memory |
 | 6.3 Magic Docs | 移植 | aux.magic-docs |
@@ -1,6 +1,6 @@
 # 界面重构与多用户认证 —— 设计提案（2026-09-30）

-状态：**proposed**（本文为方案对比稿，待用户裁定方向后另立实施提案）；owner：weichen；主任务：Dev 仓 `feature/ui-redesign-proposals`。
+状态：**accepted（方向 + R2 范围）**——2026-09-30 用户裁定采用**方案 A 任务中心**；同日裁定认证阶段 2 改为**管理员发放制**：无自助注册，账号仅管理员（或 CLI 引导）创建并设定初始密码，创建后与重置后的首次登录均强制改密（§5.1 邮箱+自助注册方案作废）。R1 已实施：Dev 仓 `feature/task-sidebar-r1`（Core +pinned/archived、Backend 迁移 v9 与任务列表 API、Frontend TaskSidebar）。R2 已实施：Dev 仓 `feature/auth-admin-accounts`（Backend 迁移 v10 auth_accounts：users 密码/must_change/is_admin + sessions 表；`/api/auth/login|logout|password`、`/api/admin/users*`；argon2id；登录失败退避；中间件接受 Bearer 密钥或会话 cookie 且豁免静态与登录入口；CLI `user create|reset-password|list`；Frontend 登录页双 tab、强制改密门、用户管理弹层。验证：store/e2e 测试 + 无头全流程走查）。owner：weichen。
 前置：[界面交互底座](2026-09-30-ui-inbox-command-workspace.md)（D25–D33）、[双档存储、多租户与规模化](2026-09-30-dual-tier-storage-and-multitenancy.md)（D17–D24）。
 配套 demo：`ui-redesign-demos/`（index.html 为入口，本地浏览器直接打开）。
Author	SHA1	Message	Date
weichen	924c3033a9	Record the admin-issued accounts decision and R2 delivery Why: the user replaced the stage-2 email self-registration sketch with admin-issued accounts (2026-09-30): no self registration, admin sets initial passwords, first login after creation or reset forces a change. Evidence: R2 landed on feature/auth-admin-accounts (migration v10, auth/session APIs, CLI user subcommands, login page + forced change gate + admin user management); store/e2e tests and a full headless journey on the real binary are green (see that task's PR). Impact: proposal status line only; section 5.1 sketch superseded.	2026-09-30 11:15:41 +00:00
weichen	9d4738142b	Merge pull request 'feature/tavily-search-tool' (#18 ) from feature/tavily-search-tool into main	2026-09-30 11:00:28 +00:00
weichen	b4546fee1b	Move WebSearch to ported in the catalog disposition table Why: the backend now registers tavily_search/web_search via Agent-Native's TavilyProvider, so the guide's not-ported reason no longer holds. Evidence: backend PR records the registration and runtime checks. Impact: table row updated, library count 44 -> 46. Refs: feature/tavily-search-tool task card.	2026-09-30 11:00:11 +00:00
weichen	1774cfeefa	Merge pull request 'Record option A acceptance and R1 execution (UI proposal)' (#17 ) from feature/task-sidebar-r1 into main	2026-09-30 10:45:59 +00:00
weichen	151925b9ee	Record option A acceptance and R1 execution in the UI proposal Why: the user picked option A (task-centric) after reviewing the demos; the proposal status must reflect the decision and where R1 landed. Evidence: R1 delivered on feature/task-sidebar-r1 across core/backend/ frontend (contract flags, migration v8, task list APIs, TaskSidebar); headless walk and test suites green there. Impact: status line only; no design content change.	2026-09-30 10:45:57 +00:00
weichen	ea4fd721ea	Merge pull request 'feature/prompt-catalog-coverage' (#16 ) from feature/prompt-catalog-coverage into main	2026-09-30 10:45:26 +00:00