feat(monitoring): dispatch monitoring tasks to desktop via AMQP outbox

Replace SSE /desktop/events with priority AMQP dispatch for monitoring
runs, and add phase1/phase2 infrastructure so desktop workers can lease,
resume, report, skip, and cancel monitoring tasks over the existing
dispatch WebSocket.

- Add monitoring collect outbox worker and phase2 desktop task fields
- Add /desktop/monitoring/tasks/{lease,resume,result,skip,cancel} routes
- Introduce execution-devtools and network-observer on desktop runtime
- Refactor runtime-controller, LoginView, and doubao adapter for the new flow
- Add channelName column to tracking views

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/desktop-client/src/preload/bridge.ts

@@ -8,6 +8,7 @@ import type {
   ListDesktopPublishTasksParams,
 } from "@geo/shared-types";
 import type { DesktopRuntimeSnapshot } from "../renderer/types";
+import type { DesktopObservedRequest } from "../shared/network-debug";
 
 interface DesktopDeviceInfo {
   device_name: string;
@@ -15,6 +16,68 @@ interface DesktopDeviceInfo {
   cpu_arch: string;
 }
 
+const rendererProxyRequestChannel = "desktop:renderer-devtools-proxy:request";
+const rendererProxyResponseChannel = "desktop:renderer-devtools-proxy:response";
+
+ipcRenderer.on(
+  rendererProxyRequestChannel,
+  async (
+    _event,
+    payload: {
+      requestId?: unknown;
+      request?: {
+        url?: unknown;
+        method?: unknown;
+        headers?: unknown;
+        body?: unknown;
+      };
+    },
+  ) => {
+    const requestId = typeof payload?.requestId === "string" ? payload.requestId : "";
+    const request = payload?.request;
+    if (!requestId || !request || typeof request !== "object") {
+      return;
+    }
+
+    const url = typeof request.url === "string" ? request.url : "";
+    const method = typeof request.method === "string" ? request.method : "GET";
+    const headers = isStringRecord(request.headers) ? request.headers : {};
+    const body = typeof request.body === "string" ? request.body : undefined;
+
+    const response = await (async () => {
+      try {
+        const fetchResponse = await fetch(url, {
+          method,
+          headers,
+          body,
+        });
+        const bodyText = await fetchResponse.text();
+        return {
+          ok: fetchResponse.ok,
+          status: fetchResponse.status,
+          statusText: fetchResponse.statusText,
+          headers: Object.fromEntries(fetchResponse.headers.entries()),
+          bodyText,
+        };
+      } catch (error) {
+        return {
+          ok: false,
+          status: 0,
+          statusText: "",
+          headers: {},
+          bodyText: "",
+          error: String(error && ((error as Error).message || error)),
+        };
+      }
+    })();
+
+    ipcRenderer.send(rendererProxyResponseChannel, {
+      requestId,
+      response,
+    });
+  },
+);
+
 const desktopBridge = {
   app: {
     ping: () => ipcRenderer.invoke("desktop:ping") as Promise<string>,
@@ -42,6 +105,8 @@ const desktopBridge = {
       ipcRenderer.invoke("desktop:runtime-session-sync", session) as Promise<null>,
     releaseRuntimeSession: (revoke?: boolean) =>
       ipcRenderer.invoke("desktop:runtime-session-release", revoke) as Promise<null>,
+    setWindowMode: (mode: "login" | "main") =>
+      ipcRenderer.invoke("desktop:set-window-mode", mode) as Promise<null>,
     onRuntimeInvalidated: (
       listener: (event: { reason: "account-health"; at: number }) => void,
     ) => {
@@ -53,7 +118,24 @@ const desktopBridge = {
         ipcRenderer.off("desktop:runtime-invalidated", wrapped);
       };
     },
+    onNetworkObserved: (listener: (event: DesktopObservedRequest) => void) => {
+      const wrapped = (_event: IpcRendererEvent, payload: DesktopObservedRequest) => {
+        listener(payload);
+      };
+      ipcRenderer.on("desktop:network-observed", wrapped);
+      return () => {
+        ipcRenderer.off("desktop:network-observed", wrapped);
+      };
+    },
   },
 };
 
 contextBridge.exposeInMainWorld("desktopBridge", desktopBridge);
+
+function isStringRecord(value: unknown): value is Record<string, string> {
+  if (!value || typeof value !== "object") {
+    return false;
+  }
+
+  return Object.values(value).every((item) => typeof item === "string");
+}