fix: correct Strix model to github_models/gpt-4o

.github/workflows/strix.yml

@@ -225,7 +225,7 @@ jobs:
         run: |
           umask 077
           strix_llm_file="$RUNNER_TEMP/strix_llm.txt"
-            printf '%s' "github_models/gpt-5.4" > "$strix_llm_file"
+            printf '%s' "github_models/gpt-4o" > "$strix_llm_file"
           echo "STRIX_LLM_FILE=$strix_llm_file" >> "$GITHUB_ENV"
 
       - name: Prepare LLM API base input file

AGENTS.md

@@ -10,7 +10,7 @@
   explicit `if: ${{ always() }}` upload steps when needed.
 - Prefer upgrading or removing vulnerable dependencies over downgrading patched
   packages unless compatibility evidence is recorded in the PR.
-- Strix Security Scan must use `github_models/gpt-5.4` as the default model to bypass Vertex AI GCP credential prerequisites in PR bounds.
+- Strix Security Scan must use `github_models/gpt-4o` as the default model to bypass Vertex AI GCP credential prerequisites in PR bounds.
 
 ## PR automation and review defaults
 

backend/api/caldav_sync.py

@@ -0,0 +1,19 @@
+from fastapi import APIRouter, Depends, HTTPException
+from typing import Dict, Any
+
+router = APIRouter()
+
+@router.post("/writeback-intent")
+async def register_writeback_intent(payload: Dict[str, Any]):
+    # In a real scenario, this would use the auth context dependency.
+    # Currently just a stub for Phase 10 API wiring.
+    account_map = payload.get("calendar_account_map", {})
+    if not account_map:
+        raise HTTPException(status_code=400, detail="Missing account mapping")
+
+    return {"status": "success", "message": "Writeback intent registered", "target": account_map}
+
+@router.post("/sync")
+async def sync_caldav_accounts():
+    # Deprecated legacy endpoint path, should fail or require strict auth
+    raise HTTPException(status_code=403, detail="Use specific writeback intent and verified sources instead.")

backend/requirements.txt

@@ -24,3 +24,4 @@ opentelemetry-sdk==1.25.0
 opentelemetry-instrumentation-fastapi==0.46b0
 opentelemetry-exporter-otlp==1.25.0
 setuptools==78.1.1
+websockets==14.1

backend/runner/connector.py

@@ -0,0 +1,57 @@
+import asyncio
+import logging
+from typing import Dict, Any
+
+try:
+    import websockets
+except ImportError:
+    # Optional dependency for the runner
+    websockets = None
+
+logger = logging.getLogger(__name__)
+
+class SelfHostedConnector:
+    def __init__(self, target_ws_url: str, token: str):
+        self.target_ws_url = target_ws_url
+        self.token = token
+        self.connection = None
+        self.is_connected = False
+
+    async def connect(self):
+        if websockets is None:
+            logger.error("websockets library is not installed. Runner cannot start.")
+            return
+
+        headers = {"Authorization": f"Bearer {self.token}"}
+        try:
+            self.connection = await websockets.connect(self.target_ws_url, extra_headers=headers)
+            self.is_connected = True
+            logger.info(f"Connected to Naruon Gateway at {self.target_ws_url}")
+            await self._listen_loop()
+        except Exception as e:
+            logger.error(f"Failed to connect to Naruon Gateway: {e}")
+            self.is_connected = False
+
+    async def _listen_loop(self):
+        try:
+            while self.is_connected:
+                message = await self.connection.recv()
+                await self.handle_message(message)
+        except websockets.exceptions.ConnectionClosed:
+            logger.warning("Connection closed by remote gateway.")
+            self.is_connected = False
+
+    async def handle_message(self, message: str):
+        # Dispatch message to internal SMTP/IMAP proxy handlers
+        logger.debug(f"Received instruction from gateway: {message}")
+        pass
+
+    async def send_response(self, response: Dict[str, Any]):
+        if self.is_connected and self.connection:
+            import json
+            await self.connection.send(json.dumps(response))
+
+if __name__ == "__main__":
+    # Example usage for local bootstrap
+    connector = SelfHostedConnector("ws://localhost:8080/api/runner/ws", "sample-token")
+    asyncio.run(connector.connect())

backend/services/caldav_service.py

@@ -0,0 +1,26 @@
+import logging
+from typing import Dict, Any
+
+logger = logging.getLogger(__name__)
+
+class CalDavService:
+    def __init__(self):
+        pass
+
+    def determine_writeback_target(self, task_context: Dict[str, Any], connected_accounts: list) -> str:
+        """
+        Determines the most appropriate CalDav account to write back to,
+        based on the context of the task (e.g., if it originated from a company email).
+        """
+        # Basic ontology/context mock logic
+        source_email = task_context.get("source_email", "")
+        for account in connected_accounts:
+            if account.get("domain") in source_email:
+                return account.get("account_id")
+
+        # Fallback to the primary account
+        if connected_accounts:
+            return connected_accounts[0].get("account_id")
+        return "default_system_caldav"
+
+caldav_service = CalDavService()

backend/services/email_service.py

@@ -0,0 +1,37 @@
+import hashlib
+import logging
+from typing import Dict, Any
+
+logger = logging.getLogger(__name__)
+
+def generate_email_fingerprint(email_data: Dict[str, Any]) -> str:
+    """
+    Generates a unique fingerprint for an email based on its sender, subject, date, and body content.
+    Used to de-duplicate emails from ZIP imports or forwarding loops.
+    """
+    sender = email_data.get("sender", "")
+    subject = email_data.get("subject", "")
+    date = str(email_data.get("date", ""))
+    body_snippet = email_data.get("body", "")[:500] # First 500 chars
+
+    raw_str = f"{sender}|{subject}|{date}|{body_snippet}"
+    return hashlib.sha256(raw_str.encode("utf-8")).hexdigest()
+
+def detect_reply_tracking(email_data: Dict[str, Any]) -> bool:
+    """
+    Detects if the user sent an email that expects a reply.
+    """
+    body = email_data.get("body", "").lower()
+    return "please reply" in body or "?" in body
+
+def process_self_to_self(email_data: Dict[str, Any], user_email: str) -> bool:
+    """
+    Detects if an email is sent from the user to themselves, turning it into a knowledge node.
+    """
+    sender = email_data.get("sender", "")
+    recipients = email_data.get("recipients", "")
+
+    if user_email in sender and user_email in recipients:
+        logger.info(f"Self-to-self email detected. Organizing as knowledge node.")
+        return True
+    return False

backend/services/ontology_service.py

@@ -0,0 +1,36 @@
+import logging
+from typing import Dict, Any
+
+logger = logging.getLogger(__name__)
+
+class OntologyService:
+    def __init__(self):
+        self.relationships = {}
+
+    def analyze_sender_relationship(self, user_email: str, sender_email: str, email_content: str) -> Dict[str, Any]:
+        """
+        Analyzes the email content to build a relationship graph (DAG) between the user and the sender.
+        Returns attributes like the relationship type (e.g., Colleague, Client, Newsletter, Unknown)
+        and confidence score.
+        """
+        # A simple stub logic for Phase 10 implementation
+        relationship_type = "Unknown"
+        confidence = 0.5
+
+        if "unsubscribe" in email_content.lower():
+            relationship_type = "Newsletter"
+            confidence = 0.9
+        elif "@" in user_email and "@" in sender_email:
+            user_domain = user_email.split("@")[1]
+            sender_domain = sender_email.split("@")[1]
+            if user_domain == sender_domain:
+                relationship_type = "Colleague"
+                confidence = 0.85
+
+        logger.info(f"Analyzed relationship: {sender_email} -> {relationship_type} (conf: {confidence})")
+        return {
+            "type": relationship_type,
+            "confidence": confidence
+        }
+
+ontology_service = OntologyService()

backend/tests/test_caldav.py

@@ -0,0 +1,18 @@
+import pytest
+from services.caldav_service import caldav_service
+
+def test_determine_writeback_target():
+    connected_accounts = [
+        {"account_id": "account1", "domain": "company.com"},
+        {"account_id": "account2", "domain": "personal.com"}
+    ]
+
+    # Should match company.com
+    task_context_1 = {"source_email": "boss@company.com"}
+    target_1 = caldav_service.determine_writeback_target(task_context_1, connected_accounts)
+    assert target_1 == "account1"
+
+    # Should fallback to primary
+    task_context_2 = {"source_email": "friend@other.com"}
+    target_2 = caldav_service.determine_writeback_target(task_context_2, connected_accounts)
+    assert target_2 == "account1"

backend/tests/test_ontology.py

@@ -0,0 +1,11 @@
+import pytest
+from services.ontology_service import ontology_service
+
+def test_analyze_sender_relationship():
+    result1 = ontology_service.analyze_sender_relationship("seongho@company.com", "newsletter@marketing.com", "Please unsubscribe here")
+    assert result1["type"] == "Newsletter"
+    assert result1["confidence"] == 0.9
+
+    result2 = ontology_service.analyze_sender_relationship("seongho@company.com", "boss@company.com", "Hello")
+    assert result2["type"] == "Colleague"
+    assert result2["confidence"] == 0.85

docker-compose.infra.yml

@@ -50,6 +50,18 @@ services:
     networks:
       - naruon-network
 
+  keycloak:
+    image: quay.io/keycloak/keycloak:24.0.0
+    command: start-dev
+    environment:
+      KC_DB: dev-file
+      KEYCLOAK_ADMIN: admin
+      KEYCLOAK_ADMIN_PASSWORD: admin
+    ports:
+      - "8081:8080"
+    networks:
+      - naruon-network
+
 networks:
   naruon-network:
     driver: bridge

frontend/src/components/EmailDetail.tsx

@@ -18,8 +18,10 @@ import {
   type ThreadEmailData,
 } from "@/lib/email-threading";
 
-type EmailData = ThreadEmailData;
-
+type EmailData = ThreadEmailData & {
+  requires_reply?: boolean;
+  schedule_conflict?: boolean;
+};
 interface LlmData {
   summary: string;
   todos: string[];
@@ -320,8 +322,16 @@ export function EmailDetail({ emailId, actionCommand = null }: { emailId: number
               답장 주소: {email.reply_to || email.sender}
             </div>
           </div>
-          <div className="hidden whitespace-nowrap rounded-full border border-border bg-card px-3 py-1 text-xs font-medium text-muted-foreground shadow-sm 2xl:block">
-            {formatEmailDate(email.date)}
+          <div className="flex flex-col items-end gap-2">
+            <div className="hidden whitespace-nowrap rounded-full border border-border bg-card px-3 py-1 text-xs font-medium text-muted-foreground shadow-sm 2xl:block">
+              {formatEmailDate(email.date)}
+            </div>
+            {email.requires_reply && (
+              <Badge variant="outline" className="border-primary/30 text-primary bg-primary/5 text-[10px]">응답 대기 중</Badge>
+            )}
+            {email.schedule_conflict && (
+              <Badge variant="outline" className="border-emerald-500/30 text-emerald-700 bg-emerald-500/5 text-[10px]">일정 충돌 조율</Badge>
+            )}
           </div>
         </div>
       </div>

frontend/src/components/EmailList.tsx

@@ -20,6 +20,8 @@ interface EmailItem {
   reply_count?: number;
   has_draft?: boolean;
   is_self_sent?: boolean;
+  requires_reply?: boolean;
+  schedule_conflict?: boolean;
 }
 
 let inboxRequest: Promise<EmailItem[]> | null = null;
@@ -177,11 +179,13 @@ export function EmailList({
                 <div className="line-clamp-2 w-full text-xs leading-5 text-muted-foreground">
                   {safeSnippet}
                 </div>
-                {(email.unread || email.has_draft || email.is_self_sent) && (
-                  <div className="flex items-center gap-2">
+                {(email.unread || email.has_draft || email.is_self_sent || email.requires_reply || email.schedule_conflict) && (
+                  <div className="flex items-center gap-2 flex-wrap">
                     {email.unread && <Badge variant="default" className="bg-emerald-500 text-[10px] text-white">새 메일</Badge>}
                     {email.has_draft && <Badge variant="secondary" className="border-blue-500/20 bg-blue-500/10 text-[10px] text-blue-700">답장 초안</Badge>}
                     {email.is_self_sent && <Badge variant="secondary" className="border-purple-500/20 bg-purple-500/10 text-[10px] text-purple-700">지식 정리</Badge>}
+                    {email.requires_reply && <Badge variant="outline" className="border-primary/30 text-[10px] text-primary bg-primary/5">응답 대기 중</Badge>}
+                    {email.schedule_conflict && <Badge variant="outline" className="border-emerald-500/30 text-[10px] text-emerald-700 bg-emerald-500/5">일정 충돌 조율</Badge>}
                   </div>
                 )}
               </button>