release: Eigent 1.0.0

.dockerignore

@@ -0,0 +1,70 @@
+# Keep build contexts small. This applies to every Dockerfile in the repo since
+# Docker reads it from the context root.
+
+# Source control
+.git
+.gitignore
+.gitattributes
+
+# Editor / OS
+.vscode
+.idea
+.DS_Store
+*.swp
+*.swo
+
+# Build outputs
+dist
+build
+out
+release
+.next
+.cache
+.vite
+.parcel-cache
+storybook-static
+
+# Dependencies installed inside the container; never copy host's tree.
+node_modules
+**/node_modules
+.pnp.*
+.yarn
+
+# Test / coverage artifacts
+coverage
+.nyc_output
+playwright-report
+test-results
+
+# Logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Local env (the image must not bake host secrets).
+.env
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+# Electron / desktop build artifacts not needed in runtime images.
+out
+release-builds
+dist_electron
+
+# Backend / server runtime data not needed in frontend/runtime images.
+server/runtime
+server/.venv
+server/lang
+server/celerybeat-schedule*
+server/.image_env
+backend/.venv
+
+# Docs / reviews — not relevant to runtime image.
+docs
+
+# Other working dirs in this repo that bloat the build context.
+projects
+benchmark

.env.development

@@ -1,14 +1,23 @@
 VITE_BASE_URL=/api
 
-# =======Production environment variables=======
+# =======Production environment variables start=======
 SERVER_URL=https://dev.eigent.ai
 VITE_PROXY_URL=https://dev.eigent.ai
 VITE_SITE_URL=https://www.eigent.ai
 VITE_USE_LOCAL_PROXY=false
+VITE_REMOTE_CONTROL_WEB_ORIGIN=https://remote.eigent.ai
+REMOTE_CONTROL_WEB_ORIGIN=https://remote.eigent.ai
+VITE_REMOTE_CONTROL_LOCAL_API_URL=https://dev.eigent.ai
+# =======Production environment variables end =======
 
-# =======Local environment variables=======
+# =======Local environment variables start =======
+# SERVER_URL=http://localhost:3001
 # VITE_PROXY_URL=http://localhost:3001
 # VITE_USE_LOCAL_PROXY=true
+# VITE_REMOTE_CONTROL_WEB_ORIGIN=http://localhost:5174
+# REMOTE_CONTROL_WEB_ORIGIN=http://localhost:5174
+# VITE_REMOTE_CONTROL_LOCAL_API_URL=http://localhost:3001
+# =======Local environment variables end=======
 
 # Dummy Stack Auth keys for local dev (enables StackProvider gating).
 # Replace with real values from Stack dashboard when needed.

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -12,7 +12,7 @@ body:
     id: version
     attributes:
       label: What version of eigent are you using?
-      placeholder: E.g., 0.0.91
+      placeholder: E.g., 1.0.0
     validations:
       required: true
 

.github/workflows/build-view.yml

@@ -121,6 +121,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for macOS builds with signing
@@ -160,6 +164,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Windows builds without signing
@@ -175,6 +183,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Linux builds
@@ -190,6 +202,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Verify built app contains Electron Framework

.github/workflows/build.yml

@@ -129,6 +129,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Windows builds without signing
@@ -143,6 +147,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Linux builds
@@ -157,6 +165,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Verify built app contains Electron Framework
@@ -347,7 +359,7 @@ jobs:
           files: |
             gh-release-assets/*
 
-      # Extract version from tag (e.g., v0.0.85 -> 0.0.91)
+      # Extract version from tag (e.g., v0.0.85 -> 1.0.0)
       - name: Extract version
         if: startsWith(github.ref, 'refs/tags/')
         id: version

.github/workflows/pre-build-view.yml

@@ -126,6 +126,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for macOS builds with signing
@@ -165,6 +169,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Windows builds without signing
@@ -180,6 +188,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Linux builds
@@ -195,6 +207,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Verify built app contains Electron Framework

.github/workflows/pre-build.yml

@@ -134,6 +134,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Windows builds without signing
@@ -148,6 +152,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Step for Linux builds
@@ -162,6 +170,10 @@ jobs:
           VITE_STACK_PROJECT_ID: ${{ secrets.VITE_STACK_PROJECT_ID }}
           VITE_STACK_PUBLISHABLE_CLIENT_KEY: ${{ secrets.VITE_STACK_PUBLISHABLE_CLIENT_KEY }}
           VITE_STACK_SECRET_SERVER_KEY: ${{ secrets.VITE_STACK_SECRET_SERVER_KEY }}
+          VITE_SITE_URL: ${{ secrets.VITE_SITE_URL }}
+          VITE_USE_LOCAL_PROXY: ${{ secrets.VITE_USE_LOCAL_PROXY }}
+          VITE_REMOTE_CONTROL_WEB_ORIGIN: ${{ secrets.VITE_REMOTE_CONTROL_WEB_ORIGIN }}
+          VITE_REMOTE_CONTROL_LOCAL_API_URL: ${{ secrets.VITE_REMOTE_CONTROL_LOCAL_API_URL }}
           USE_NPM_INSTALL_BUN: 'true'
 
       # Verify built app contains Electron Framework

.github/workflows/test.yml

@@ -12,6 +12,64 @@ permissions:
   contents: read
 
 jobs:
+  web-local-smoke:
+    name: Run Web + Local Brain Smoke
+    runs-on: ubuntu-latest
+    timeout-minutes: 25
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install frontend dependencies
+        run: npm install --ignore-scripts
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install 3.11
+
+      - name: Install backend dependencies
+        run: |
+          cd backend
+          uv sync
+
+      - name: Run web + local brain smoke
+        run: bash scripts/smoke-web-local-brain.sh
+
+  frontend-quality:
+    name: Run Frontend Guardrails
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+
+      - name: Install frontend dependencies
+        run: npm install --ignore-scripts
+
+      - name: Run type check
+        run: npm run type-check
+
+      - name: Check Electron Access Guard
+        run: bash scripts/check-electron-access.sh
+
+      - name: Design tokens (engine + no hard-coded colors in UI)
+        run: npm run check:design-tokens
+
   pytest:
     name: Run Python Tests
     runs-on: ubuntu-latest

.gitignore

@@ -1,6 +1,7 @@
 # Logs
 logs
 *.log
+camel_logs/
 npm-debug.log*
 yarn-debug.log*
 yarn-error.log*
@@ -10,6 +11,7 @@ node-compile-cache
 
 node_modules
 dist
+dist-web
 !package/**/dist
 dist-ssr
 dist-electron
@@ -40,7 +42,9 @@ yarn.lock
 .env.local
 .env.production
 .env.development
+client_secret_*.json
 
+.claude/
 .cursor
 
 # Public directory (large media files)

.lintstagedrc.json

@@ -1,6 +1,7 @@
 {
   "*.{ts,tsx}": [
     "eslint --fix --no-warn-ignored",
+    "node scripts/check-design-token-usage.mjs",
     "prettier --write",
     "node licenses/update_license.js"
   ],

backend/.gitignore

@@ -1,6 +1,7 @@
 # Python-generated files
 __pycache__/
 *.py[oc]
+camel_logs/
 build/
 dist/
 wheels/