- Add GET /agent/jobs/{jobId}/events SSE endpoint that streams job status, plan ready, and tool execution events
- Add AgentJobEvent schema with event types for job and tool lifecycle
- Implement frontend SSE parser and streamAgentJobEvents API helper
- Integrate streaming into useAgentSession with polling fallback
- Stream events update ChatMessage events array, status, planResult, and executeResult in real-time

- Display lightweight agent activity events (e.g. tool calls) above the answer
- Filter out terminal job.succeeded events, show last 4 events
- Update dev Library page turns with sample event data

- Add AdminUserUsageStats schema with trafficBytes and agentTokens
- Extend AdminUserItem with usageStats, storage usage percentage
- Implement backend collection of upload traffic and agent token usage within a configurable time window (default 7 days, max 90)
- Add usageFrom/usageTo query params with validation
- Update frontend UsersPage with date range filters and usage display
- Add mock usage events and stats generation

- Add DownloadRateLimitService that enforces per-user and per-IP download byte quotas via Redis weighted rate limiter
- Add configurable DOWNLOAD_RATE_WINDOW_SECONDS, DOWNLOAD_RATE_LIMIT_REQUESTS, DOWNLOAD_RATE_LIMIT_BYTES settings
- Inject rate limiter into files and shares download/preview/batch-download routes
- Refactor batch download into create_batch_download_plan + create_batch_download_archive_from_plan for pre-check
- Admins bypass user-level download rate limits
- Add allow_weighted method to RedisRateLimiter for byte-count tracking

…ion deletion, tool registry)

Captures the three-subproject design covering A) bi-directional interaction
via Redis pub/sub + inbox table + new event types, B) ChatSession entity on
the backend with soft delete + cascaded cancellation, and C) ToolRegistry
replacing if/elif dispatch plus five new read-only query tools.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

… backend)

Sixteen TDD tasks covering settings + enums + Flyway V14 migration, ORM
model + repository for AgentInboxMessage, AgentEventBus (in-memory + Redis),
AgentInbox service, AskProtocol, POST /agent/jobs/{id}/messages route,
SSE replacement, removal of legacy POST /agent/cancel, ExecuteRunner inbox
integration, PlanRunner/ExecuteRunner ask wiring, worker assembly, and an
end-to-end pause+cancel test. Frontend changes excluded - see the
forthcoming frontend plan.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

… frontend)

Twelve TDD tasks: extend types/agent.d.ts with 14 event types + inbox
schemas; rewire api/agent.ts to sendAgentMessage + 6 control helpers
(drop cancelAgentJob); extend useAgentSession with waiting_for_user/
paused states, pendingAsk/progress/thinking caches, replyToAsk +
pause/resume/skip/approve/deny methods, cancel via control.cancel;
add AskPrompt + ControlBar components and useAskTimeout composable;
integrate into TurnEntry; lock TaskInputDock during waiting/paused;
13 new i18n keys (zh/en); end-to-end specs reusing project vi.mock
factory style; manual verification checklist.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…tion, repository, schemas

…service

…essages route

…LM tool loops, and LLM answer

…, progress, thinking, new mock routes

Relax login/register rate limits and account lockout parameters
based on production traffic patterns.

Record exploratory tool calls as planning evidence for transparency.
Rewrite planner summaries with concrete file/folder names for write operations.

Render exploratory tool calls from planning phase beneath the summary,
with collapsible overflow for 3+ evidence items.