前端"自主视觉"开关重整为"隐私模式"，开启时禁用 user activity tracker (#1024)

* 前端"自主视觉"开关重整为"隐私模式"，开启时禁用 user activity tracker

- 前端 UI 仅改显示：toggle label 改"隐私模式"+ inverted: true，变量
  proactiveVisionEnabled 语义不动；侧弹"基础间隔"改"感知间隔"。8 个
  locale + 教学引导 step14 / 屏幕分享 tooltip 文案同步翻新。
- 后端隐私模式 = !proactiveVisionEnabled，新增 utils.preferences
  is_privacy_mode_enabled / ais_privacy_mode_enabled。
- main_logic/activity/tracker.py：on_user/ai_message 隐私模式下不把
  text 写进 buffer（避免切回非隐私模式时旧消息被 enrichment LLM 回放），
  kickoff_open_threads_compute 直接 return，_activity_guess_loop 每
  tick 检查跳过。state machine 时间戳照常更新，只是 LLM 通路全断。
- main_routers/system_router.py：proactive_chat 入口读隐私模式，开了
  就把 activity_snapshot 设 None，PR #1015 设计时所有 gating 都已写
  过 "if snapshot is not None" fallback —— restricted_screen_only /
  unfinished_thread / state_section / mark_unfinished_thread_used /
  _allow_reminiscence 全部退化到 PR #1015 之前的无限制搭话路径。

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* 按 PR review 修四处问题

- avatar-ui-drag.js / avatar-ui-popup-config.js：popup 重新打开时
  re-sync 路径漏了 inverted 语义，会把 checkbox 强行写回 raw
  proactiveVisionEnabled，开了隐私模式重开 popup 又被翻回去（codex P1）
- tracker.py / system_router.py 隐私模式 helper 改 fail-closed：读取
  异常时按"隐私开启"处理。正常"用户没开隐私"路径不进 except，没影响
  （coderabbit Major × 2）
- pt.json / es.json 教程 step14 desc 里的英文 "Screen Share" 换成
  本地化术语（葡："Compartilhamento de tela"，西："Compartir pantalla"）
  和同 locale 已有的 proactiveVisionChat 翻译对齐（coderabbit Minor × 2）

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Hongzhi Wen <cartabio.coder1@gmail.com>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: 3 people

main_logic/activity/tracker.py

@@ -72,6 +72,25 @@
 _EXTERNAL_SIGNAL_TTL_SECONDS = 30.0
 
 
+def _privacy_mode_active() -> bool:
+    """用户是否开启了隐私模式。开启时整个 tracker 应当短路。
+
+    存储在前端 ``proactiveVisionEnabled`` 的反面（详见 utils.preferences）。
+    异常路径 fail-closed：任何读取异常一律按"隐私模式开启"处理，宁可
+    短期内 tracker 不可用，也不能让"读不出来"等价于"用户没开隐私"。
+    正常的"用户没开隐私"路径走 ``is_privacy_mode_enabled`` 返回 False，
+    不进 except 分支。
+    """
+    try:
+        from utils.preferences import is_privacy_mode_enabled
+        return is_privacy_mode_enabled()
+    except Exception as e:
+        logger.warning(
+            'privacy mode check failed, defaulting to enabled (fail-closed): %s', e,
+        )
+        return True
+
+
 class UserActivityTracker:
     """Per-character activity inference engine.
 
@@ -155,7 +174,10 @@ def on_user_message(self, *, text: str | None = None, now: float | None = None)
         ts = now if now is not None else time.time()
         self._sm.update_user_message(now=ts)
         self._conv_seq += 1
-        if text:
+        # 隐私模式：让用户消息文本直接不进 buffer，避免在切回非隐私模式时
+        # 旧数据被 enrichment LLM 二次曝光。state machine 的时间戳还要更新
+        # （下游 idle / focused_work 判定依赖），文本扔了即可。
+        if text and not _privacy_mode_active():
             self._user_msg_buffer.append((ts, text.strip()[:1000]))
 
     def on_ai_message(self, *, text: str | None = None, now: float | None = None) -> None:
@@ -173,7 +195,7 @@ def on_ai_message(self, *, text: str | None = None, now: float | None = None) ->
         """
         ts = now if now is not None else time.time()
         self._sm.update_ai_message(text=text, now=ts)
-        if text:
+        if text and not _privacy_mode_active():
             self._ai_msg_buffer.append((ts, text.strip()[:1000]))
             # AI also opens threads (promises, abandoned mid-sentences) →
             # bump _conv_seq so kickoff_open_threads_compute will recompute.
@@ -339,6 +361,9 @@ def kickoff_open_threads_compute(self, lang: str = 'zh') -> None:
           * If a previous task is still running → skip (don't queue).
           * If conversation buffers are empty → skip (nothing to score).
         """
+        # 隐私模式下整个 enrichment 通路都关掉。
+        if _privacy_mode_active():
+            return
         if self._open_threads_computed_at_seq == self._conv_seq:
             return
         if self._open_threads_task is not None and not self._open_threads_task.done():
@@ -410,6 +435,12 @@ async def _activity_guess_loop(self) -> None:
             except asyncio.CancelledError:
                 return
 
+            # 隐私模式：本 tick 不读窗口/进程，也不调 LLM，直接进入下一轮。
+            # 缓存自然衰减（保留最后一次值，proactive_chat 那边 snapshot 已被
+            # gating 成 None，缓存不会被消费）。
+            if _privacy_mode_active():
+                continue
+
             try:
                 # Pull a fresh snapshot to compare against.
                 ts = time.time()

main_routers/system_router.py

@@ -3355,13 +3355,36 @@ def _proactive_preempted_json(where: str) -> dict:
         # 在 enabled_modes 解析之前拉一次，因为 propensity 可能需要把
         # enabled_modes 收紧到只剩 vision（restricted_screen_only 状态）。
         # 详见 docs/design/user-activity-tracker.md。
+        #
+        # 隐私模式：用户开了"隐私模式"开关 → 临时禁用整个 user-activity-tracker，
+        # 回退到 PR #1015 之前的无限制策略。snapshot 留 None，下游所有 gating
+        # 都已在 PR #1015 设计时按 "snapshot is not None" 写过 fallback：
+        #   - propensity 收紧（restricted_screen_only）→ 不触发
+        #   - 反思/回忆 _allow_reminiscence → 默认放开
+        #   - state_section 渲染 → 输出空串
+        #   - mark_unfinished_thread_used → 不计数
+        # 所以这里把 snapshot 直接设 None 就够，等价于"tracker 不存在"。
+        from utils.preferences import ais_privacy_mode_enabled
         try:
-            activity_snapshot = await mgr._activity_tracker.get_snapshot()
-            print(f"[{lanlan_name}] activity snapshot: state={activity_snapshot.state} "
-                  f"propensity={activity_snapshot.propensity} reasons={activity_snapshot.propensity_reasons}")
-        except Exception as _act_err:
-            logger.warning(f"[{lanlan_name}] activity snapshot fetch failed: {_act_err}; falling back to open propensity")
+            privacy_mode = await ais_privacy_mode_enabled()
+        except Exception as _pm_err:
+            # fail-closed：读不出来按隐私开启处理。正常"用户没开隐私"是
+            # ais_privacy_mode_enabled 返回 False，不进这个 except。
+            logger.warning(
+                f"[{lanlan_name}] privacy mode check failed, defaulting to enabled: {_pm_err}",
+            )
+            privacy_mode = True
+        if privacy_mode:
+            print(f"[{lanlan_name}] 隐私模式开启，跳过 activity tracker，按无限制策略搭话")
             activity_snapshot = None
+        else:
+            try:
+                activity_snapshot = await mgr._activity_tracker.get_snapshot()
+                print(f"[{lanlan_name}] activity snapshot: state={activity_snapshot.state} "
+                      f"propensity={activity_snapshot.propensity} reasons={activity_snapshot.propensity_reasons}")
+            except Exception as _act_err:
+                logger.warning(f"[{lanlan_name}] activity snapshot fetch failed: {_act_err}; falling back to open propensity")
+                activity_snapshot = None
 
         # ========== 解析 enabled_modes ==========
         enabled_modes = data.get('enabled_modes', [])

static/avatar-ui-drag.js

@@ -680,8 +680,11 @@ Live2DManager.prototype.showPopup = function (buttonId, popup) {
         }
 
         // 更新 proactive vision checkbox 状态和视觉样式
+        // 注意：UI 是"隐私模式"，underlying 变量 proactiveVisionEnabled 语义相反，
+        // 故 checked = !proactiveVisionEnabled。和 avatar-ui-popup.js 里 toggle
+        // 配置 inverted: true 对齐。
         if (proactiveVisionCheckbox && typeof window.proactiveVisionEnabled !== 'undefined') {
-            const newChecked = window.proactiveVisionEnabled;
+            const newChecked = !window.proactiveVisionEnabled;
             if (proactiveVisionCheckbox.checked !== newChecked) {
                 proactiveVisionCheckbox.checked = newChecked;
             }

static/avatar-ui-popup-config.js

@@ -77,7 +77,8 @@ const _vrmPopupConfig = {
             syncCheckbox(document.querySelector(`#${prefix}-focus-mode`), !window.focusModeEnabled);
             syncCheckbox(document.querySelector(`#${prefix}-avatar-reaction-bubble`), window.avatarReactionBubbleEnabled);
             syncCheckbox(popup.querySelector(`#${prefix}-proactive-chat`), window.proactiveChatEnabled);
-            syncCheckbox(popup.querySelector(`#${prefix}-proactive-vision`), window.proactiveVisionEnabled);
+            // proactive-vision 走 inverted（"隐私模式" UI 显示），与 avatar-ui-popup.js 对齐
+            syncCheckbox(popup.querySelector(`#${prefix}-proactive-vision`), !window.proactiveVisionEnabled);
             syncCheckbox(popup.querySelector(`#${prefix}-mouse-tracking-toggle`), window.mouseTrackingEnabled);
             if (window.CHAT_MODE_CONFIG) {
                 window.CHAT_MODE_CONFIG.forEach(config => {

static/avatar-ui-popup.js

@@ -336,7 +336,7 @@ function createSettingsPopupContent(manager, prefix, popup) {
     // 4. 主动搭话和自主视觉（角色设置已移至分隔线下方的导航菜单区域）
     const settingsToggles = [
         { id: 'proactive-chat', label: window.t ? window.t('settings.toggles.proactiveChat') : '主动搭话', labelKey: 'settings.toggles.proactiveChat', storageKey: 'proactiveChatEnabled', hasInterval: true, intervalKey: 'proactiveChatInterval', defaultInterval: 15 },
-        { id: 'proactive-vision', label: window.t ? window.t('settings.toggles.proactiveVision') : '自主视觉', labelKey: 'settings.toggles.proactiveVision', storageKey: 'proactiveVisionEnabled', hasInterval: true, intervalKey: 'proactiveVisionInterval', defaultInterval: 15 }
+        { id: 'proactive-vision', label: window.t ? window.t('settings.toggles.proactiveVision') : '隐私模式', labelKey: 'settings.toggles.proactiveVision', storageKey: 'proactiveVisionEnabled', hasInterval: true, intervalKey: 'proactiveVisionInterval', defaultInterval: 15, inverted: true }
     ];
 
     settingsToggles.forEach(toggle => {
@@ -1589,7 +1589,7 @@ function createIntervalControl(manager, prefix, toggle) {
     });
 
     const labelKey = toggle.id === 'proactive-chat' ? 'settings.interval.chatIntervalBase' : 'settings.interval.visionInterval';
-    const defaultLabel = toggle.id === 'proactive-chat' ? '基础间隔' : '读取间隔';
+    const defaultLabel = toggle.id === 'proactive-chat' ? '感知间隔' : '读取间隔';
     const labelText = document.createElement('span');
     labelText.textContent = window.t ? window.t(labelKey) : defaultLabel;
     labelText.setAttribute('data-i18n', labelKey);
@@ -1907,7 +1907,7 @@ function createSettingsToggleItem(manager, prefix, toggle) {
     } else if (toggle.id === 'proactive-chat' && typeof window.proactiveChatEnabled !== 'undefined') {
         checkbox.checked = window.proactiveChatEnabled;
     } else if (toggle.id === 'proactive-vision' && typeof window.proactiveVisionEnabled !== 'undefined') {
-        checkbox.checked = window.proactiveVisionEnabled;
+        checkbox.checked = toggle.inverted ? !window.proactiveVisionEnabled : window.proactiveVisionEnabled;
     } else if (toggle.id === 'fullscreen-tracking' && typeof window.live2dFullscreenTrackingEnabled !== 'undefined') {
         checkbox.checked = window.live2dFullscreenTrackingEnabled;
     }
@@ -2012,11 +2012,12 @@ function createSettingsToggleItem(manager, prefix, toggle) {
                 window.stopProactiveChatSchedule();
             }
         } else if (toggle.id === 'proactive-vision') {
-            window.proactiveVisionEnabled = isChecked;
+            const visionEnabled = toggle.inverted ? !isChecked : isChecked;
+            window.proactiveVisionEnabled = visionEnabled;
             if (typeof window.saveNEKOSettings === 'function') {
                 window.saveNEKOSettings();
             }
-            if (isChecked) {
+            if (visionEnabled) {
                 if (typeof window.acquireProactiveVisionStream === 'function') {
                     window.acquireProactiveVisionStream();
                 }

static/locales/en.json

@@ -2153,17 +2153,17 @@
             "ru": "Русский"
         },
         "interval": {
-            "chatIntervalBase": "Base Interval",
+            "chatIntervalBase": "Perception Interval",
             "visionInterval": "Read Interval"
         },
         "toggles": {
             "allowInterrupt": "Allow Interrupt",
             "mergeMessages": "Merge Messages",
             "avatarReactionBubble": "Expression Bubble",
             "proactiveChat": "Proactive Chat",
-            "proactiveVision": "Proactive Vision",
+            "proactiveVision": "Privacy Mode",
             "proactiveVisionChat": "Screen Share",
-            "proactiveVisionChatTooltip": "Requires both Proactive Chat and Proactive Vision to be enabled",
+            "proactiveVisionChatTooltip": "Requires Proactive Chat enabled and Privacy Mode disabled",
             "proactiveNewsChat": "News Website",
             "proactiveNewsChatTooltip": "Use trending topics for proactive chat",
             "proactiveVideoChat": "Video Website",
@@ -2563,8 +2563,8 @@
             "desc": "Your Neko initiates conversation proactively. Adjust frequency here~"
         },
         "step14": {
-            "title": "👀 Proactive Vision",
-            "desc": "Unlike Screen Share which continuously streams during voice sessions, Proactive Vision lets your Neko glance at your screen from time to time on her own. Adjust the interval here~"
+            "title": "🔒 Privacy Mode",
+            "desc": "When Privacy Mode is off, your Neko will glance at your screen from time to time on her own — unlike Screen Share which continuously streams during voice sessions. Adjust the interval here~"
         },
         "step15": {
             "title": "👤 Character Manager",

static/locales/es.json

@@ -2153,17 +2153,17 @@
             "ru": "ruso"
         },
         "interval": {
-            "chatIntervalBase": "Intervalo base",
+            "chatIntervalBase": "Intervalo de percepción",
             "visionInterval": "Intervalo de lectura"
         },
         "toggles": {
             "allowInterrupt": "Permitir interrupción",
             "mergeMessages": "Fusionar mensajes",
             "avatarReactionBubble": "Burbuja de expresión",
             "proactiveChat": "Chat proactivo",
-            "proactiveVision": "Visión Proactiva",
+            "proactiveVision": "Modo Privacidad",
             "proactiveVisionChat": "Compartir pantalla",
-            "proactiveVisionChatTooltip": "Requiere que estén habilitados tanto el chat proactivo como la visión proactiva",
+            "proactiveVisionChatTooltip": "Requiere chat proactivo habilitado y Modo Privacidad deshabilitado",
             "proactiveNewsChat": "Sitio web de noticias",
             "proactiveNewsChatTooltip": "Utilice temas de actualidad para un chat proactivo",
             "proactiveVideoChat": "Sitio web de vídeos",
@@ -2563,8 +2563,8 @@
             "desc": "Tu Neko inicia la conversación de forma proactiva. Ajuste la frecuencia aquí ~"
         },
         "step14": {
-            "title": "👀 Visión Proactiva",
-            "desc": "A diferencia de Screen Share, que transmite continuamente durante las sesiones de voz, Proactive Vision permite que tu Neko mire tu pantalla de vez en cuando por sí solo. Ajuste el intervalo aquí ~"
+            "title": "🔒 Modo Privacidad",
+            "desc": "Cuando el Modo Privacidad está desactivado, tu Neko echará un vistazo a tu pantalla de vez en cuando por sí solo, a diferencia del Compartir pantalla que transmite continuamente durante las sesiones de voz. Ajuste el intervalo aquí ~"
         },
         "step15": {
             "title": "👤 Administrador de personajes",

static/locales/ja.json

@@ -2153,17 +2153,17 @@
             "ru": "Русский"
         },
         "interval": {
-            "chatIntervalBase": "基本間隔",
+            "chatIntervalBase": "感知間隔",
             "visionInterval": "読取間隔"
         },
         "toggles": {
             "allowInterrupt": "割り込み許可",
             "mergeMessages": "メッセージ結合",
             "avatarReactionBubble": "表情バブル",
             "proactiveChat": "自発的会話",
-            "proactiveVision": "自発的視覚",
+            "proactiveVision": "プライバシーモード",
             "proactiveVisionChat": "画面共有",
-            "proactiveVisionChatTooltip": "自発的会話と自発的視覚の両方を有効にする必要があります",
+            "proactiveVisionChatTooltip": "自発的会話を有効にし、プライバシーモードを無効にする必要があります",
             "proactiveNewsChat": "ニュースサイト",
             "proactiveNewsChatTooltip": "トレンド話題を使用してチャット",
             "proactiveVideoChat": "動画サイト",
@@ -2563,8 +2563,8 @@
             "desc": "ネコが自発的に会話を開始。頻度をここで調整~"
         },
         "step14": {
-            "title": "👀 プロアクティブビジョン",
-            "desc": "音声セッション中にリアルタイムで配信する画面共有とは異なり、プロアクティブビジョンを有効にするとネコが時々自分から画面をチラッと見ます。間隔をここで調整~"
+            "title": "🔒 プライバシーモード",
+            "desc": "プライバシーモードをオフにすると、ネコが時々自分から画面をチラッと見ます。音声セッション中にリアルタイムで配信する画面共有とは異なります。間隔をここで調整~"
         },
         "step15": {
             "title": "👤 キャラクターマネージャー",

static/locales/ko.json

@@ -2153,17 +2153,17 @@
             "ru": "Русский"
         },
         "interval": {
-            "chatIntervalBase": "기본 간격",
+            "chatIntervalBase": "인지 간격",
             "visionInterval": "읽기 간격"
         },
         "toggles": {
             "allowInterrupt": "인터럽트 허용",
             "mergeMessages": "메시지 병합",
             "avatarReactionBubble": "표정 말풍선",
             "proactiveChat": "사전 예방적 채팅",
-            "proactiveVision": "사전 예방적 비전",
+            "proactiveVision": "프라이버시 모드",
             "proactiveVisionChat": "화면 공유",
-            "proactiveVisionChatTooltip": "사전 예방적 채팅과 사전 예방적 비전을 모두 활성화해야 합니다",
+            "proactiveVisionChatTooltip": "사전 예방적 채팅을 활성화하고 프라이버시 모드를 비활성화해야 합니다",
             "proactiveNewsChat": "뉴스 웹사이트",
             "proactiveNewsChatTooltip": "트렌딩 토픽을 사용하여 채팅",
             "proactiveVideoChat": "동영상 웹사이트",
@@ -2563,8 +2563,8 @@
             "desc": "동반자는 주기적으로 대화를 시작합니다. 여기서 간격을 조정하세요~"
         },
         "step14": {
-            "title": "🙌 사전 예방적 비전",
-            "desc": "음성 세션 중 실시간으로 전송하는 화면 공유와 달리, 사전 예방적 비전을 활성화하면 동료가 때때로 스스로 화면을 살펴봅니다. 여기서 간격을 조정하세요~"
+            "title": "🔒 프라이버시 모드",
+            "desc": "프라이버시 모드를 끄면 동료가 때때로 스스로 화면을 살펴봅니다. 음성 세션 중 실시간으로 전송하는 화면 공유와는 다릅니다. 여기서 간격을 조정하세요~"
         },
         "step15": {
             "title": "👤 캐릭터 관리자",