fix(settings): clone save payloads (#1768)

* docs: add tape systems design

* feat(tape): implement view manifest flow

* fix: address tape view manifest review feedback

* fix(tape): address view manifest review

* fix(settings): clone save payloads

Serialize renderer config payloads before IPC invokes and restore MCP auto-approve checkbox rendering.

* fix(tape): address review feedback

Preserve tape view metadata across truncation and resumes, make replay slice hashing deterministic, localize trace fallbacks, and tighten MCP/TraceDialog tests.

Author: zerob13

docs/architecture/deepchat-tape-baseline/plan.md

@@ -0,0 +1,12 @@
+# DeepChat Tape Baseline Plan
+
+## Approach
+
+Keep the Tape implementation baseline as a goal-scoped architecture document.
+Use it as the shared map for the active Tape SDD folders.
+
+## Maintenance
+
+- Keep references to active Tape SDD folders relative to this directory.
+- Update the baseline when ownership or runtime flow changes.
+- Keep compatibility notes aligned with the current Tape schema.

…cs/architecture/deepchat_tape_spec_v1.md …hitecture/deepchat-tape-baseline/spec.mddocs/architecture/deepchat_tape_spec_v1.md renamed to docs/architecture/deepchat-tape-baseline/spec.md docs/architecture/deepchat_tape_spec_v1.md renamed to docs/architecture/deepchat-tape-baseline/spec.md

@@ -1,12 +1,12 @@
 # DeepChat Tape System - Implementation Baseline
 
 Status: current implementation direction. Active SDD goals are
-[deepchat-tape-view-manifest](deepchat-tape-view-manifest/spec.md),
-[deepchat-tape-replay-contract](deepchat-tape-replay-contract/spec.md), and
-[deepchat-tape-view-assembler](deepchat-tape-view-assembler/spec.md), and
-[deepchat-tape-view-policy](deepchat-tape-view-policy/spec.md), and
-[deepchat-tape-policy-provenance](deepchat-tape-policy-provenance/spec.md), and
-[deepchat-tape-policy-selector](deepchat-tape-policy-selector/spec.md).
+[deepchat-tape-view-manifest](../deepchat-tape-view-manifest/spec.md),
+[deepchat-tape-replay-contract](../deepchat-tape-replay-contract/spec.md), and
+[deepchat-tape-view-assembler](../deepchat-tape-view-assembler/spec.md), and
+[deepchat-tape-view-policy](../deepchat-tape-view-policy/spec.md), and
+[deepchat-tape-policy-provenance](../deepchat-tape-policy-provenance/spec.md), and
+[deepchat-tape-policy-selector](../deepchat-tape-policy-selector/spec.md).
 
 This document keeps the Tape vision aligned with the current DeepChat codebase. The implementation
 path is:

docs/architecture/deepchat-tape-baseline/tasks.md

@@ -0,0 +1,5 @@
+# DeepChat Tape Baseline Tasks
+
+- [x] Move the baseline spec into a kebab-case architecture folder.
+- [x] Update relative links to active Tape SDD folders.
+- [x] Update references from the legacy flat architecture path.

docs/architecture/deepchat-tape-policy-selector/plan.md

@@ -27,7 +27,7 @@ TapeViewAssembler.buildTapeResumeView()
 | `src/main/presenter/agentRuntimePresenter/tapeViewAssembler.ts` | Resolve default policy through selector. |
 | `test/main/presenter/agentRuntimePresenter/tapeViewPolicy.test.ts` | Cover registry and selector behavior. |
 | `test/main/presenter/agentRuntimePresenter/tapeViewAssembler.test.ts` | Assert selection reason and injected policy behavior. |
-| `docs/architecture/deepchat_tape_spec_v1.md` | Record the selector boundary. |
+| `docs/architecture/deepchat-tape-baseline/spec.md` | Record the selector boundary. |
 
 ## Compatibility
 

docs/architecture/deepchat-tape-view-assembler/plan.md

@@ -36,7 +36,7 @@ resumeAssistantMessage()
 | `src/main/presenter/agentRuntimePresenter/tapeViewPolicy.ts` | Selection policy boundary used by the assembler. |
 | `src/main/presenter/agentRuntimePresenter/index.ts` | Replace direct metadata builder calls with assembler calls. |
 | `test/main/presenter/agentRuntimePresenter/tapeViewAssembler.test.ts` | Add chat/resume parity tests. |
-| `docs/architecture/deepchat_tape_spec_v1.md` | Update current implementation path and owner table. |
+| `docs/architecture/deepchat-tape-baseline/spec.md` | Update current implementation path and owner table. |
 
 ## Compatibility
 

docs/architecture/deepchat-tape-view-policy/plan.md

@@ -27,7 +27,7 @@ TapeViewAssembler.buildTapeResumeView()
 | `src/main/presenter/agentRuntimePresenter/tapeViewAssembler.ts` | Delegate selection to `TapeViewPolicy`. |
 | `test/main/presenter/agentRuntimePresenter/tapeViewPolicy.test.ts` | Prove legacy policy parity. |
 | `test/main/presenter/agentRuntimePresenter/tapeViewAssembler.test.ts` | Assert policy metadata and policy delegation. |
-| `docs/architecture/deepchat_tape_spec_v1.md` | Record the new policy boundary. |
+| `docs/architecture/deepchat-tape-baseline/spec.md` | Record the new policy boundary. |
 
 ## Compatibility
 

docs/issues/deepchat-tape-view-manifest-pr-review/plan.md

@@ -15,6 +15,9 @@ Apply the PR review fixes in place, keeping the existing Tape architecture and p
 | `TraceDialog.vue` | When a request sequence is selected, only show matching trace/manifest data. |
 | `routes.ts` | Replace broad route catalog annotation with `satisfies Record<string, RouteContract>`. |
 | i18n `traceDialog.json` | Translate new diagnostic keys for non-English locales and convert Traditional Chinese files. |
+| `contextBuilder.ts` | Preserve turn boundaries during emergency truncation. |
+| `tapeService.ts` | Exclude replay export timestamps from slice hash inputs. |
+| `tapeViewManifest.ts` | Copy included/excluded ref arrays into manifest snapshots. |
 | SDD docs | Keep this issue SDD current and address small doc nitpicks. |
 
 ## Compatibility
@@ -40,5 +43,7 @@ pnpm run typecheck
 pnpm vitest run test/main/presenter/agentRuntimePresenter/agentRuntimePresenter.test.ts
 pnpm vitest run test/main/presenter/agentRuntimePresenter/tapeViewAssembler.test.ts
 pnpm vitest run test/main/presenter/agentRuntimePresenter/tapeViewManifest.test.ts
+pnpm vitest run test/main/presenter/agentRuntimePresenter/tapeService.test.ts
+pnpm vitest run test/main/presenter/agentRuntimePresenter/contextBuilder.test.ts
 pnpm vitest run test/renderer/components/trace/TraceDialog.test.ts
 ```

docs/issues/deepchat-tape-view-manifest-pr-review/spec.md

@@ -1,18 +1,18 @@
 # Tape ViewManifest PR Review Fixes - Spec
 
-Status: active issue-fix SDD for PR #1767 review follow-up.
+Status: active issue-fix SDD for PR #1768 review follow-up.
 
 ## Problem
 
-PR review identified correctness and localization issues in the Tape ViewManifest flow. Some diagnostics can fail hard instead of degrading gracefully, request/manifest diagnostics can show mismatched request sequences, manifest provenance can record stale summary cursors after context-pressure recovery, resume view assembly can use stale tape history after compaction, route-contract typing loses literal key precision, and newly added TraceDialog labels are not properly localized.
+PR review identified correctness and localization issues in the Tape ViewManifest flow. Some diagnostics can fail hard instead of degrading gracefully, request/manifest diagnostics can show mismatched request sequences, manifest provenance can record stale summary cursors after context-pressure recovery, resume view assembly can use stale tape history after compaction, request sequence generation can repeat after resume, replay hashes can include wall-clock time, manifest snapshots can alias caller arrays, and newly added TraceDialog labels are not properly localized.
 
 ## Goals
 
-1. Fix still-valid CodeRabbit review findings for PR #1767 with minimal changes.
+1. Fix still-valid CodeRabbit review findings for PR #1768 with minimal changes.
 2. Preserve Tape ViewManifest and replay-slice contracts while correcting provenance and diagnostics behavior.
 3. Ensure TraceDialog diagnostic strings are localized for every supported non-English locale touched by the PR.
 4. Keep route-contract literal key inference intact.
-5. Commit the fixes locally without pushing.
+5. Commit and push the fixes to the existing PR branch.
 
 ## Acceptance Criteria
 
@@ -25,11 +25,13 @@ PR review identified correctness and localization issues in the Tape ViewManifes
 7. `DEEPCHAT_ROUTE_CATALOG` uses `satisfies Record<string, RouteContract>` so route names remain a literal union.
 8. TraceDialog diagnostic labels are translated in supported non-English locale files, including Traditional Chinese variants.
 9. Review nitpicks that are small and local are addressed without broad refactors.
-10. `pnpm run format`, `pnpm run i18n`, and `pnpm run lint` pass or any blocker is documented.
+10. Emergency history truncation preserves per-turn metadata associations.
+11. Replay slice hashes are deterministic across exports of the same manifest.
+12. Manifest included/excluded snapshots are detached from caller-owned arrays.
+13. `pnpm run format`, `pnpm run i18n`, and `pnpm run lint` pass or any blocker is documented.
 
 ## Constraints
 
-- Do not push changes.
 - Do not weaken authentication, authorization, or validation.
 - Avoid unrelated refactors and preserve existing presenter boundaries.
 - Keep ViewManifest schema compatible.

docs/issues/deepchat-tape-view-manifest-pr-review/tasks.md

@@ -8,3 +8,9 @@
 - [x] T6: Address local documentation/nitpick comments.
 - [x] T7: Run format, i18n, lint, and focused validation.
 - [x] T8: Stage intentional files and create a local commit without pushing.
+- [x] T9: Preserve turn metadata during emergency context truncation.
+- [x] T10: Make replay slice hashes deterministic across export times.
+- [x] T11: Detach manifest included/excluded snapshots from caller-owned arrays.
+- [x] T12: Localize TraceDialog fallback values and Traditional Chinese model labels.
+- [x] T13: Restore MCP checkbox test semantics and PascalCase component filename.
+- [x] T14: Run required checks, commit, and push the PR branch.

docs/issues/mcp-server-form-auto-approve-controls/plan.md

@@ -0,0 +1,15 @@
+# MCP Server Form Auto Approve Controls Plan
+
+## Approach
+
+Restore the existing checkbox component binding for the MCP server form auto-approve options.
+Keep the submitted `MCPServerConfig.autoApprove` shape unchanged.
+
+## Implementation
+
+- Import the shared checkbox component used by the form template.
+- Verify edit-mode initial values and submit behavior for read/write permissions.
+
+## Verification
+
+- `pnpm vitest --config vitest.config.renderer.ts test/renderer/components/McpServerForm.test.ts`