# 千手 AI 智能工作台 (QianShou / OctoDesk)

> Enterprise-grade AI-native desktop workbench. File management + Email + AI agents + MCP integrations in one unified interface.

## Documentation

- [Technical Overview](/docs): Architecture, features, tech stack
- [Getting Started](/docs/getting-started): 5-step deployment from trial to first AI call
- [System Architecture](/docs/architecture): Dual-engine AI, client-server model, IPC security, full service inventory
- [Integrations](/docs/integrations): MCP, OAuth, Presenton PPT, remote intel, web research
- [Security & Compliance](/docs/security): Encryption, credential management, IPC trust model, audit trail

## Key Features

- Dual-engine AI: DirectEngine (user models, local Keychain) + ProxyEngine (org models via server proxy)
- Local-first: SQLite + FTS5 full-text search with jieba-wasm Chinese tokenizer; sensitive data never leaves the device
- 18 built-in AI agents + custom agents with allowedTools whitelist (per-agent tool restrictions)
- MCP (Model Context Protocol) client: connect any MCP-compliant tool/data source with OAuth flow
- Email: IMAP/SMTP + Google/Microsoft Modern Auth (OAuth); local SMTP outbox queue with auto-retry; auto-responder rules
- Presenton PPT engine: outline generation, partial editing, outline rewrite, template cloning
- Remote intel handoff to OctoReport (no local collector duplication)
- Human-in-the-loop: high-risk ops (email send, bash, file edit, MCP tool calls) require confirmation
- Full audit trail: 10+ audit types with complete request/response logging, exportable to PDF/Excel
- Cross-platform: Windows, macOS (arm64 + x64), Linux (Electron 39.x with bundled Chromium)
- Operations: featureFlagService for gradual rollout, metricsService for runtime telemetry

## Tech Stack

- Client: Electron 39.x, React 18, in-house design-system (headless + Tailwind), SQLite FTS5, Vite 6, Zustand 5.0+ (SplitView + Activity routing for layout)
- Server: Hono.js 4.x, Node.js 24, PostgreSQL 16 + Prisma 5.x, Redis 7.x, JWT (access + refresh), AES-256
- Deployment: Docker Compose (server + postgres + redis); private deployment supported

## Architecture Surface

- 90+ main process services across Core / Integration / Infrastructure tiers
- 13 renderer Activities defined in src/app/viewRegistry.ts (refactor-2026 §A.5.2):
  - 9 default visible: home, mail, calendar, chat, files, aisearch, knowledge, intel, library
  - 1 pinned-bottom: settings
  - 3 default hidden (opt-in via CustomizeMenu): audit, education, presenton
- Shell chrome (src/shell/*): TitleBarV2, ActivityBar, StatusBar, NotificationCenter, CommandPalette, CustomizeMenu, DialogHost, ToastHost, UndoBridge — all consume design-system primitives
- design-system: 23 in-house headless components (14 primitives — Button, IconButton, Input, Textarea, Switch, Chip, Tabs, SegmentedControl, Badge, StatusDot, Spinner, Kbd, EmptyState, Toolbar; 3 layout — Sidebar, SplitView, WorkspaceHeader; 6 overlays — Tooltip, Popover, Menu, ContextMenu, Dialog, Toast). Tailwind-styled, no external UI library.
- 16+ server API surfaces under /api/* + /health
- 550+ IPC handlers with assertTrustedSender + schema validation

## Links

- Website: https://qianshou.octoooo.com
- Trial: https://qianshou.octoooo.com/trial
- Customer portal: https://qianshou-portal.octoooo.com
- Contact: octoooo@octoooo.com