fix: 恢复 rsync 误删的近期开发(agents/skills/mcp/knowledge/workflow/tenant/billing/storage/privacy/promotion/achievement/automation/code-exec/developer/distribution/im-bot/portal/casdoor 等后端模块 + 对应前端页面路由, 补回 main.py 挂载与 App.tsx 路由

migrations/mig_g5_privacy.sql

@@ -0,0 +1,89 @@
+-- Phase G5: Local Agent / Privacy Mode — Database Migration
+-- Tables: privacy_configs, offline_licenses, kb_sync_states, usage_reports
+-- Also: ALTER distributions ADD COLUMN privacy_mode
+
+-- 1. Privacy Configurations (per-user privacy settings)
+CREATE TABLE IF NOT EXISTS privacy_configs (
+    id BIGINT AUTO_INCREMENT PRIMARY KEY,
+    user_id VARCHAR(64) NOT NULL,
+    agent_id VARCHAR(64) DEFAULT NULL COMMENT 'FK to market_apps.id',
+    privacy_mode ENUM('local', 'cloud', 'hybrid') NOT NULL DEFAULT 'cloud',
+    local_llm_provider VARCHAR(64) DEFAULT NULL COMMENT 'ollama/vllm/localai',
+    local_llm_model VARCHAR(128) DEFAULT NULL,
+    local_llm_endpoint VARCHAR(256) DEFAULT NULL COMMENT 'http://localhost:11434',
+    data_retention_days INT NOT NULL DEFAULT 30 COMMENT 'Local data retention period',
+    anonymize_usage TINYINT(1) NOT NULL DEFAULT 1,
+    sync_knowledge_bases JSON DEFAULT NULL COMMENT 'KB IDs to sync locally',
+    sync_frequency ENUM('realtime', 'hourly', 'daily', 'manual') NOT NULL DEFAULT 'daily',
+    last_sync_at DATETIME DEFAULT NULL,
+    status ENUM('active', 'inactive', 'error') NOT NULL DEFAULT 'active',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    INDEX idx_privacy_user (user_id),
+    INDEX idx_privacy_agent (agent_id),
+    INDEX idx_privacy_mode (privacy_mode)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 2. Offline Licenses
+CREATE TABLE IF NOT EXISTS offline_licenses (
+    id BIGINT AUTO_INCREMENT PRIMARY KEY,
+    license_key VARCHAR(256) NOT NULL UNIQUE COMMENT 'JWT token',
+    user_id VARCHAR(64) NOT NULL,
+    agent_id BIGINT DEFAULT NULL,
+    device_fingerprint VARCHAR(256) DEFAULT NULL COMMENT 'SHA256 of machine-id + MAC',
+    issued_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    expires_at DATETIME NOT NULL,
+    last_validated_at DATETIME DEFAULT NULL,
+    max_offline_days INT NOT NULL DEFAULT 7,
+    is_active TINYINT(1) NOT NULL DEFAULT 1,
+    revoked_reason VARCHAR(512) DEFAULT NULL,
+    status ENUM('active', 'expired', 'revoked', 'pending') NOT NULL DEFAULT 'active',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    INDEX idx_ol_user (user_id),
+    INDEX idx_ol_license (license_key),
+    INDEX idx_ol_status (status),
+    INDEX idx_ol_expires (expires_at)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 3. Knowledge Base Sync States
+CREATE TABLE IF NOT EXISTS kb_sync_states (
+    id BIGINT AUTO_INCREMENT PRIMARY KEY,
+    user_id VARCHAR(64) NOT NULL,
+    knowledge_base_id BIGINT NOT NULL COMMENT 'FK to knowledge_bases.id',
+    local_version INT NOT NULL DEFAULT 0,
+    remote_version INT NOT NULL DEFAULT 0,
+    last_sync_at DATETIME DEFAULT NULL,
+    sync_status ENUM('synced', 'syncing', 'pending', 'conflict', 'failed') NOT NULL DEFAULT 'pending',
+    total_docs INT NOT NULL DEFAULT 0,
+    synced_docs INT NOT NULL DEFAULT 0,
+    sync_direction ENUM('push', 'pull', 'bidirectional') NOT NULL DEFAULT 'pull',
+    error_message VARCHAR(1024) DEFAULT NULL,
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    updated_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+    INDEX idx_kbs_user (user_id),
+    INDEX idx_kbs_kb (knowledge_base_id),
+    INDEX idx_kbs_status (sync_status),
+    UNIQUE KEY uk_user_kb (user_id, knowledge_base_id)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 4. Usage Reports (anonymized)
+CREATE TABLE IF NOT EXISTS usage_reports (
+    id BIGINT AUTO_INCREMENT PRIMARY KEY,
+    user_hash VARCHAR(64) NOT NULL COMMENT 'SHA256 anonymized user ID',
+    report_type ENUM('daily', 'weekly', 'monthly', 'realtime') NOT NULL DEFAULT 'daily',
+    metrics JSON NOT NULL COMMENT 'Aggregated usage metrics',
+    period_start DATETIME NOT NULL,
+    period_end DATETIME NOT NULL,
+    is_anonymized TINYINT(1) NOT NULL DEFAULT 1,
+    submitted_at DATETIME DEFAULT NULL COMMENT 'When local agent submitted',
+    created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    INDEX idx_ur_hash (user_hash),
+    INDEX idx_ur_type (report_type),
+    INDEX idx_ur_period (period_start, period_end)
+) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+
+-- 5. Add privacy_mode to distributions table
+ALTER TABLE distributions 
+    ADD COLUMN IF NOT EXISTS privacy_mode ENUM('local', 'cloud', 'hybrid') NOT NULL DEFAULT 'cloud' 
+    COMMENT 'Deployment mode for distribution' AFTER status;