@orion-agents/orion-code 0.3.12 → 0.3.14

package/CHANGELOG.md

@@ -22,11 +22,58 @@ which is **not** a pass.
 
 ## [Unreleased]
 
-## [0.3.12] — CANDIDATE
+## [0.3.14] — CANDIDATE
 
-> **Status: candidate.** Wide Right Workspace + repository-truth + guarded Git
-> mutations (plan docs/plan/v0.3.12-plan.md) plus the v0.3.13 follow-ups that
-> landed on this branch (plans v3/v4/v5). Not merged, tagged or published.
+> **Status: candidate.** Editable Files panel (guarded `POST /files/write` with
+> revision CAS) and removal of the legacy view-only controls. Not merged,
+> tagged or published.
+
+### Added
+
+- File editing in the Files panel: content view gains a view/edit toggle; the
+  edit mode is a controlled monospace textarea with dirty tracking, explicit
+  save (guarded `POST /files/write`), cancel/Esc with an unsaved-changes
+  confirmation, and a 409 conflict path that offers an explicit reload.
+- `POST /files/write`: workspace-fenced (registry + symlink escape checks),
+  sensitive-path block, 512 KiB text-only payload limit, on-disk stat
+  fingerprint CAS (`file_revision_conflict`), user-gesture header
+  (`file-mutation-v1`), idempotent `file.write` mutation ledger entry, and
+  one-shot snapshot invalidation so Git/Review decorations refresh after a
+  save.
+
+### Fixed
+
+- Resource refreshes keep the inspected file: `ReviewPanel` no longer drops the
+  open diff on a manual refresh, a `refreshEpoch` invalidation or a Git revision
+  conflict recovery; `FilesPanel` keeps the open file on refresh (still reset
+  when the workspace itself changes), so the editor no longer closes mid-edit.
+- The review summary counters are localised (已暂存 / 未暂存 / 未跟踪 / 冲突)
+  instead of raw English labels.
+- Binary detection tolerates an 8 KiB sample that ends inside one UTF-8 code
+  point, so CJK files are no longer rejected as binary on read or save.
+
+### Removed
+
+- The read-only file toolbar: 「跳转」（line jump）, 「复制」 and 「自动换行」
+  controls, the line-number gutter spans and the wrap-only styles.
+- The Review panel's 「验证证据」 module: the evidence list,
+  `WebReviewVerificationV1`, `ReviewServiceV1.verificationPage`, the
+  `GET /review/verification` route and the snapshot's `verification` /
+  `verificationTruncated` fields. The review overview is now composed only from
+  Git facts; durable tool receipts remain available to the runtime.
+
+## [0.3.13] — CANDIDATE
+
+> **Status: candidate.** Development baseline after v0.3.12 (version bump only;
+> no functional changes yet). Not merged, tagged or published.
+
+## [0.3.12] — NPM-PUBLISHED
+
+> **Status: npm-published.** `@orion-agents/orion-code@0.3.12` is available
+> through the npm registry (latest tag). Published 2026-09-07 via PR #252;
+> git tag/release may lag. Wide Right Workspace + repository-truth + guarded
+> Git mutations (v0.3.12-plan) plus resource split layout, conversation
+> history navigator and the unified brand mark (v0.3.13-plan v3/v4/v5).
 
 ### Added
 

package/dist/web/file-read-service.d.ts

@@ -1,3 +1,4 @@
+import { type BigIntStats } from 'fs';
 export type WebFileKindV1 = 'file' | 'directory' | 'symlink';
 export interface WebFileNodeV1 {
     readonly id: string;
@@ -79,6 +80,15 @@ export declare class FileReadServiceV1 {
         readonly cursor?: string;
         readonly limitBytes?: number;
     }): WebFileContentPageV1;
+    /** v0.3.14 — write-path preflight for an existing in-root regular text file. */
+    writePreflight(fileId: string): {
+        readonly canonicalPath: string;
+        readonly relativePath: string;
+        readonly revision: string;
+        readonly sizeBytes: number;
+    };
+    /** v0.3.14 — post-write revision fingerprint for the response. */
+    revisionOf(canonicalPath: string): string;
     private projectNode;
     private resolveNode;
     private resolveRelative;
@@ -86,4 +96,6 @@ export declare class FileReadServiceV1 {
     private encodeCursor;
     private decodeCursor;
 }
+export declare function fingerprintStat(stat: BigIntStats): string;
+export declare function isBinary(buffer: Buffer): boolean;
 //# sourceMappingURL=file-read-service.d.ts.map

package/dist/web/file-read-service.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FileReadServiceV1 = void 0;
+exports.fingerprintStat = fingerprintStat;
+exports.isBinary = isBinary;
 const crypto_1 = require("crypto");
 const fs_1 = require("fs");
 const path_1 = require("path");
@@ -269,7 +271,7 @@ class FileReadServiceV1 {
             if (sample.length > 0) {
                 this.performance.bytesRead += (0, fs_1.readSync)(descriptor, sample, 0, sample.length, 0);
             }
-            const binary = isBinary(sample);
+            const binary = isBinary(validUtf8Prefix(sample));
             if (binary) {
                 return Object.freeze({
                     fileId: input.fileId,
@@ -333,6 +335,27 @@ class FileReadServiceV1 {
             (0, fs_1.closeSync)(descriptor);
         }
     }
+    /** v0.3.14 — write-path preflight for an existing in-root regular text file. */
+    writePreflight(fileId) {
+        this.performance.readOperations += 1;
+        const node = this.resolveNode(fileId);
+        if (!node.stat.isFile()) {
+            throw new errors_1.WebWorkbenchError(409, 'File node is not a regular file.', 'file_not_regular');
+        }
+        if (isSensitiveResolvedPath(this.root, node.relativePath, node.canonicalPath)) {
+            throw new errors_1.WebWorkbenchError(403, 'Sensitive files are not writable in the Web Workbench.', 'sensitive_file_blocked');
+        }
+        return Object.freeze({
+            canonicalPath: node.canonicalPath,
+            relativePath: node.relativePath,
+            revision: fingerprintStat(node.stat),
+            sizeBytes: Number(node.stat.size),
+        });
+    }
+    /** v0.3.14 — post-write revision fingerprint for the response. */
+    revisionOf(canonicalPath) {
+        return fingerprintStat((0, fs_1.statSync)(canonicalPath, { bigint: true }));
+    }
     projectNode(relativePath) {
         const lexicalPath = (0, path_1.resolve)(this.root, relativePath);
         const lexicalStat = (0, fs_1.lstatSync)(lexicalPath, { bigint: true });

package/dist/web/file-write-service.d.ts

@@ -0,0 +1,16 @@
+import { FileReadServiceV1 } from './file-read-service';
+export interface WebFileWriteResultV1 {
+    readonly fileId: string;
+    readonly revision: string;
+    readonly sizeBytes: number;
+}
+export declare class FileWriteServiceV1 {
+    private readonly fileService;
+    constructor(fileService: FileReadServiceV1);
+    writeContent(input: {
+        readonly fileId: string;
+        readonly content: string;
+        readonly expectedRevision: string;
+    }): WebFileWriteResultV1;
+}
+//# sourceMappingURL=file-write-service.d.ts.map

package/dist/web/file-write-service.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileWriteServiceV1 = void 0;
+const fs_1 = require("fs");
+const errors_1 = require("./errors");
+const file_read_service_1 = require("./file-read-service");
+const MAX_WRITE_BYTES = 512 * 1024;
+const WRITE_SAMPLE_BYTES = 8192;
+/**
+ * v0.3.14 — bounded, CAS-guarded writes for an existing in-root text file.
+ *
+ * Safety stack mirrors the read path: the file id resolves through the read
+ * service's fenced registry (workspace escape, symlink escape and sensitive
+ * paths fail closed there), the payload must be valid UTF-8 text without NULs
+ * within 512 KiB, and the write commits only when the on-disk revision still
+ * matches the caller's `expectedRevision` (compare-and-swap against the same
+ * stat fingerprint the read path returns).
+ */
+/**
+ * A bounded sample can end inside one UTF-8 code point (very likely for CJK
+ * text at an 8 KiB boundary); drop the trailing partial byte before judging the
+ * file as binary, mirroring the read path's `validUtf8Prefix`.
+ */
+function completeUtf8Tail(buffer) {
+    for (let trim = 0; trim <= Math.min(3, Math.max(0, buffer.length - 1)); trim += 1) {
+        const candidate = buffer.subarray(0, buffer.length - trim);
+        if (!(0, file_read_service_1.isBinary)(candidate))
+            return candidate;
+    }
+    return buffer;
+}
+class FileWriteServiceV1 {
+    constructor(fileService) {
+        this.fileService = fileService;
+    }
+    writeContent(input) {
+        const content = input.content;
+        if (typeof content !== 'string') {
+            throw new errors_1.WebWorkbenchError(400, 'File content must be a string.', 'file_content_invalid');
+        }
+        if (content.includes('\0')) {
+            throw new errors_1.WebWorkbenchError(415, 'Files containing NUL bytes are not editable in the Web Workbench.', 'file_binary');
+        }
+        const byteLength = Buffer.byteLength(content, 'utf8');
+        if (byteLength > MAX_WRITE_BYTES) {
+            throw new errors_1.WebWorkbenchError(413, 'Edited file content exceeds the 512 KiB Web editor limit.', 'file_too_large');
+        }
+        if (!/^[0-9a-f]{64}$/u.test(input.expectedRevision)) {
+            throw new errors_1.WebWorkbenchError(400, 'expectedRevision is invalid.', 'file_revision_invalid');
+        }
+        const preflight = this.fileService.writePreflight(input.fileId);
+        if (preflight.sizeBytes > MAX_WRITE_BYTES) {
+            throw new errors_1.WebWorkbenchError(413, 'Target file exceeds the 512 KiB Web editor limit.', 'file_too_large');
+        }
+        const payload = Buffer.from(content, 'utf8');
+        // Phase 1 (read descriptor): CAS + binary re-check. An O_WRONLY descriptor
+        // cannot readSync, so the preflight opens its own read handle first.
+        const readDescriptor = (0, fs_1.openSync)(preflight.canonicalPath, fs_1.constants.O_RDONLY);
+        let beforeSize;
+        try {
+            const before = (0, fs_1.fstatSync)(readDescriptor, { bigint: true });
+            beforeSize = before.size;
+            const sample = Buffer.alloc(Math.min(WRITE_SAMPLE_BYTES, Number(before.size)));
+            if (sample.length > 0) {
+                (0, fs_1.readSync)(readDescriptor, sample, 0, sample.length, 0);
+                if ((0, file_read_service_1.isBinary)(completeUtf8Tail(sample))) {
+                    throw new errors_1.WebWorkbenchError(415, 'Target file is not UTF-8 text.', 'file_binary');
+                }
+            }
+            if ((0, file_read_service_1.fingerprintStat)(before) !== input.expectedRevision) {
+                throw new errors_1.WebWorkbenchError(409, 'The file changed on disk before the save could run; reload it first.', 'file_revision_conflict');
+            }
+        }
+        finally {
+            (0, fs_1.closeSync)(readDescriptor);
+        }
+        // Phase 2 (write descriptor): CAS is re-checked by the kernel fingerprint
+        // window being as short as possible between the two handles.
+        const writeDescriptor = (0, fs_1.openSync)(preflight.canonicalPath, fs_1.constants.O_WRONLY);
+        try {
+            const before = (0, fs_1.fstatSync)(writeDescriptor, { bigint: true });
+            if ((0, file_read_service_1.fingerprintStat)(before) !== input.expectedRevision) {
+                throw new errors_1.WebWorkbenchError(409, 'The file changed on disk before the save could run; reload it first.', 'file_revision_conflict');
+            }
+            (0, fs_1.writeSync)(writeDescriptor, payload, 0, payload.length, 0);
+            // Shrink keeps the file exactly as long as the payload.
+            if (beforeSize > BigInt(payload.length)) {
+                (0, fs_1.truncateSync)(preflight.canonicalPath, payload.length);
+            }
+            const after = (0, fs_1.statSync)(preflight.canonicalPath, { bigint: true });
+            return Object.freeze({
+                fileId: input.fileId,
+                revision: (0, file_read_service_1.fingerprintStat)(after),
+                sizeBytes: Number(after.size),
+            });
+        }
+        finally {
+            (0, fs_1.closeSync)(writeDescriptor);
+        }
+    }
+}
+exports.FileWriteServiceV1 = FileWriteServiceV1;
+//# sourceMappingURL=file-write-service.js.map

package/dist/web/protocol.d.ts

@@ -9,7 +9,7 @@ import type { SessionMeta } from '../services/session-storage';
 import type { ToolConfirmationPolicy } from '../services/global-config';
 import type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1 } from './file-read-service';
 import type { WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1 } from './git-read-model-service';
-import type { WebReviewSnapshotV1, WebReviewVerificationV1 } from './review-service';
+import type { WebReviewSnapshotV1 } from './review-service';
 import type { WebSessionRuntimeSummaryV1 } from './session-runtime-registry';
 import type { WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1 } from './terminal-manager';
 export declare const WEB_API_VERSION: 1;
@@ -376,7 +376,7 @@ export type WebWorkspaceResourceV1 = 'files' | 'git' | 'review';
 export type WebWorkspaceInvalidationReasonV1 = 'context-change' | 'filesystem-change' | 'terminal-command' | 'tool-finished';
 export type WebToolDetailSummaryV1 = ToolDetailSummary;
 export type WebToolDetailPageV1 = ToolDetailPage;
-export type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1, WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1, WebReviewSnapshotV1, WebReviewVerificationV1, WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1, };
+export type { WebFileContentPageV1, WebFileNodeV1, WebFileTreePageV1, WebGitCommitV1, WebGitDiffPageV1, WebGitFileV1, WebGitLogPageV1, WebGitStatusV1, WebReviewSnapshotV1, WebTerminalCreateResultV1, WebTerminalExitV1, WebTerminalGapV1, WebTerminalMetadataV1, WebTerminalOutputFrameV1, WebTerminalStateV1, };
 export interface WebBootstrapV1 {
     readonly apiVersion: 1;
     readonly productVersion: string;

package/dist/web/review-service.d.ts

@@ -1,19 +1,4 @@
-import type { VerifiedDurableToolReceiptRefV1 } from '../runtime/durable-tool-receipt-reader';
 import type { GitReadModelServiceV1, WebGitDiffPageV1, WebGitFileV1 } from './git-read-model-service';
-export interface WebReviewVerificationV1 {
-    readonly callId: string;
-    readonly sessionId: string;
-    readonly threadId: string;
-    readonly sequence: number;
-    readonly toolName: string;
-    readonly state: 'success' | 'error' | 'skipped';
-    readonly terminal: VerifiedDurableToolReceiptRefV1['terminal'];
-    readonly success: boolean;
-    readonly outputBytes: number;
-    readonly hasArtifact: boolean;
-    readonly executionPolicyDigest: string;
-    readonly receiptDigest: string;
-}
 export interface WebReviewSnapshotV1 {
     readonly revision: string;
     readonly repositoryRevision: string;
@@ -26,28 +11,12 @@ export interface WebReviewSnapshotV1 {
     readonly untrackedCount: number;
     readonly conflictCount: number;
     readonly truncated: boolean;
-    readonly verification: readonly WebReviewVerificationV1[];
 }
-/** Review overview composed only from Git facts and doubly verified durable tool receipts. */
+/** Review overview composed only from Git facts. */
 export declare class ReviewServiceV1 {
     private readonly git;
-    private readonly listReceiptRefs;
-    constructor(git: GitReadModelServiceV1, listReceiptRefs: () => Promise<readonly VerifiedDurableToolReceiptRefV1[]> | readonly VerifiedDurableToolReceiptRefV1[]);
+    constructor(git: GitReadModelServiceV1);
     snapshot(): Promise<WebReviewSnapshotV1>;
-    /**
-     * v0.3.12 S2 — progressive verification evidence. The Review summary loads
-     * first; receipts page in behind it, optionally filtered to one session.
-     */
-    verificationPage(input: {
-        readonly sessionId?: string;
-        readonly cursor?: number;
-        readonly pageSize?: number;
-    }): Promise<{
-        readonly items: readonly WebReviewVerificationV1[];
-        readonly nextCursor: number | null;
-        readonly totalForSession: number;
-    }>;
-    private projectVerification;
     diff(input: Parameters<GitReadModelServiceV1['diff']>[0]): Promise<WebGitDiffPageV1>;
 }
 //# sourceMappingURL=review-service.d.ts.map

package/dist/web/review-service.js

@@ -2,21 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ReviewServiceV1 = void 0;
 const crypto_1 = require("crypto");
-/** Review overview composed only from Git facts and doubly verified durable tool receipts. */
+/** Review overview composed only from Git facts. */
 class ReviewServiceV1 {
-    constructor(git, listReceiptRefs) {
+    constructor(git) {
         this.git = git;
-        this.listReceiptRefs = listReceiptRefs;
     }
     async snapshot() {
         // v0.3.9 #237/#228 — collect every Git status page. A repository with more
         // than the single pageSize of changed files was silently truncated before;
         // the review overview must aggregate all pages (bounded by a guard that
         // keeps runaway repositories from looping forever).
-        const [receiptRefs, statusPages] = await Promise.all([
-            this.listReceiptRefs(),
-            collectStatusPages((cursor) => this.git.status({ pageSize: 2000, ...(cursor ? { cursor } : {}) })),
-        ]);
+        const statusPages = await collectStatusPages((cursor) => this.git.status({ pageSize: 2000, ...(cursor ? { cursor } : {}) }));
         const status = statusPages.at(-1) ?? (await this.git.status({ pageSize: 2000 }));
         const conflicted = [];
         const staged = [];
@@ -29,12 +25,8 @@ class ReviewServiceV1 {
             untracked.push(...page.untracked);
         }
         const changedFiles = uniqueFiles([...conflicted, ...staged, ...unstaged, ...untracked]);
-        const verification = this.projectVerification(receiptRefs.slice(0, 100));
         const revision = (0, crypto_1.createHash)('sha256')
-            .update(JSON.stringify({
-            repositoryRevision: status.repositoryRevision,
-            verification,
-        }))
+            .update(JSON.stringify({ repositoryRevision: status.repositoryRevision }))
             .digest('hex');
         return Object.freeze({
             revision,
@@ -48,66 +40,19 @@ class ReviewServiceV1 {
             untrackedCount: untracked.length,
             conflictCount: conflicted.length,
             truncated: statusPages.at(-1)?.truncated ?? false,
-            verification: Object.freeze(verification),
-        });
-    }
-    /**
-     * v0.3.12 S2 — progressive verification evidence. The Review summary loads
-     * first; receipts page in behind it, optionally filtered to one session.
-     */
-    async verificationPage(input) {
-        const refs = await this.listReceiptRefs();
-        const filtered = input.sessionId ? refs.filter(ref => ref.sessionId === input.sessionId) : refs;
-        const offset = Math.max(0, Math.min(filtered.length, Math.trunc(input.cursor ?? 0)));
-        const pageSize = Math.max(1, Math.min(100, Math.trunc(input.pageSize ?? 25)));
-        const page = filtered.slice(offset, offset + pageSize);
-        const nextCursor = offset + page.length < filtered.length ? offset + page.length : null;
-        return Object.freeze({
-            items: Object.freeze(this.projectVerification(page)),
-            nextCursor,
-            totalForSession: filtered.length,
         });
     }
-    projectVerification(refs) {
-        return refs.map(receipt => Object.freeze({
-            callId: receipt.callId,
-            sessionId: receipt.sessionId,
-            threadId: receipt.threadId,
-            sequence: receipt.sequence,
-            toolName: receipt.toolName,
-            state: reviewState(receipt),
-            terminal: receipt.terminal,
-            success: receipt.success,
-            outputBytes: receipt.outputBytes,
-            hasArtifact: receipt.hasArtifact,
-            executionPolicyDigest: receipt.executionPolicyDigest,
-            receiptDigest: receipt.receiptDigest,
-        }));
-    }
     diff(input) {
         return this.git.diff(input);
     }
 }
 exports.ReviewServiceV1 = ReviewServiceV1;
-function reviewState(receipt) {
-    if (receipt.success)
-        return 'success';
-    return receipt.terminal === 'interrupted' || receipt.terminal === 'indeterminate'
-        ? 'skipped'
-        : 'error';
-}
 function uniqueFiles(files) {
     const byId = new Map();
     for (const file of files)
         byId.set(file.fileId, file);
     return [...byId.values()].sort((left, right) => left.path.localeCompare(right.path));
 }
-/**
- * v0.3.9 #237/#228 — page through Git status until the snapshot is fully
- * collected. The bounded guard (64 pages x 2_000 = 128k files) exists to stop
- * runaway repositories from looping; a repository exceeding it stays marked
- * truncated so the UI can still communicate the limit.
- */
 async function collectStatusPages(fetchPage) {
     const pages = [];
     let page = await fetchPage(undefined);

package/dist/web/server.js

@@ -431,6 +431,32 @@ async function handleRequest(context) {
         }));
         return;
     }
+    const fileWriteMatch = path === '/files/write';
+    if (method === 'POST' && fileWriteMatch) {
+        assertMutation(request, context.nonce, context.origin, 'file_mutation_forbidden');
+        assertFileUserGesture(request);
+        const body = requireRecord(await readJson(request), 'File write request');
+        assertOnlyKeys(body, [
+            'requestId',
+            'fileId',
+            'content',
+            'expectedRevision',
+            'workspaceId',
+            'expectedContextRevision',
+        ]);
+        const requestId = requireUuid(body.requestId, 'requestId');
+        const contextGuard = requireContextGuardRecord(body);
+        const fileId = requireText(body.fileId, 'fileId', 256);
+        const content = requireText(body.content, 'content', 512 * 1024 + 8);
+        const expectedRevision = requireFileRevision(body.expectedRevision);
+        const result = await context.workbench.executeMutation(requestId, 'file.write', { fileId, expectedRevision, ...contextGuard }, () => context.workbench.writeFileContent(contextGuard, {
+            fileId,
+            content,
+            expectedRevision,
+        }));
+        sendJson(response, 200, result);
+        return;
+    }
     if (method === 'POST' && (path === '/git/stage' || path === '/git/unstage')) {
         assertMutation(request, context.nonce, context.origin, 'git_mutation_forbidden');
         assertGitUserGesture(request);
@@ -495,15 +521,6 @@ async function handleRequest(context) {
         }));
         return;
     }
-    if (method === 'GET' && path === '/review/verification') {
-        const contextGuard = requireContextGuardQuery(url);
-        const sessionId = url.searchParams.get('sessionId') ?? undefined;
-        const cursorValue = url.searchParams.get('cursor');
-        const cursor = cursorValue === null ? undefined : Number(cursorValue);
-        const pageSize = boundedInteger(url.searchParams.get('pageSize'), 25, 1, 100);
-        sendJson(response, 200, await context.workbench.reviewVerificationPage(contextGuard, { sessionId, cursor, pageSize }));
-        return;
-    }
     if (method === 'GET' && path === '/review') {
         sendJson(response, 200, await context.workbench.review(requireContextGuardQuery(url)));
         return;
@@ -646,6 +663,18 @@ function requireGitRevision(value) {
     }
     return text;
 }
+function assertFileUserGesture(request) {
+    if (request.headers[protocol_1.WEB_USER_GESTURE_HEADER] !== 'file-mutation-v1') {
+        throw new HttpProblem(403, 'File mutations require an explicit browser user gesture.', 'file_user_gesture_required');
+    }
+}
+function requireFileRevision(value) {
+    const text = requireText(value, 'expectedRevision', 64);
+    if (!/^[0-9a-f]{64}$/u.test(text)) {
+        throw new HttpProblem(400, 'expectedRevision must be a file content revision.');
+    }
+    return text;
+}
 function assertGitUserGesture(request) {
     if (request.headers[protocol_1.WEB_USER_GESTURE_HEADER] !== 'git-mutation-v1') {
         throw new HttpProblem(403, 'Git mutations require an explicit browser user gesture.', 'git_user_gesture_required');

package/dist/web/workbench-controller.d.ts

@@ -43,6 +43,7 @@ export declare class WebWorkbenchController {
     private readonly workspaceMutationOwners;
     private readonly pendingWorkspaceMutationStates;
     private fileService;
+    private fileWriteService;
     private gitService;
     private reviewService;
     private contextRevisionValue;
@@ -100,6 +101,16 @@ export declare class WebWorkbenchController {
     readToolDetail(callId: string, offsetBytes: number, limitBytes: number, context?: WebContextGuardV1): Promise<WebToolDetailPageV1>;
     listFiles(context: WebContextGuardV1, input: Parameters<FileReadServiceV1['list']>[0]): import("./file-read-service").WebFileTreePageV1;
     readFileContent(context: WebContextGuardV1, input: Parameters<FileReadServiceV1['readContent']>[0]): import("./file-read-service").WebFileContentPageV1;
+    /** v0.3.14 — guarded CAS write for an existing in-root text file. */
+    writeFileContent(context: WebContextGuardV1, input: {
+        readonly fileId: string;
+        readonly content: string;
+        readonly expectedRevision: string;
+    }): {
+        readonly fileId: string;
+        readonly revision: string;
+        readonly sizeBytes: number;
+    };
     gitStatus(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['status']>[0]): Promise<import("./git-read-model-service").WebGitStatusV1>;
     searchFiles(context: WebContextGuardV1, input: {
         readonly query: string;
@@ -137,15 +148,6 @@ export declare class WebWorkbenchController {
     private resolveSafeGitPaths;
     private assertGitRepositoryRevision;
     private fileContextRevision;
-    reviewVerificationPage(context: WebContextGuardV1, input: {
-        readonly sessionId?: string;
-        readonly cursor?: number;
-        readonly pageSize?: number;
-    }): Promise<{
-        readonly items: readonly import("./review-service").WebReviewVerificationV1[];
-        readonly nextCursor: number | null;
-        readonly totalForSession: number;
-    }>;
     gitLog(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['log']>[0]): Promise<import("./git-read-model-service").WebGitLogPageV1>;
     gitDiff(context: WebContextGuardV1, input: Parameters<GitReadModelServiceV1['diff']>[0]): Promise<import("./git-read-model-service").WebGitDiffPageV1>;
     review(context: WebContextGuardV1): Promise<import("./review-service").WebReviewSnapshotV1>;

package/dist/web/workbench-controller.js

@@ -7,7 +7,6 @@ const crypto_1 = require("crypto");
 const fs_1 = require("fs");
 const path_1 = require("path");
 const agent_runtime_controller_1 = require("../runtime/agent-runtime-controller");
-const durable_tool_receipt_reader_1 = require("../runtime/durable-tool-receipt-reader");
 const mcp_1 = require("../runtime/mcp");
 const product_bootstrap_1 = require("../runtime/product-bootstrap");
 const canonical_1 = require("../runtime/protocol/canonical");
@@ -27,6 +26,7 @@ const errors_1 = require("./errors");
 const context_text_1 = require("./context-text");
 const event_hub_1 = require("./event-hub");
 const file_read_service_1 = require("./file-read-service");
+const file_write_service_1 = require("./file-write-service");
 const git_read_model_service_1 = require("./git-read-model-service");
 const workspace_mutation_arbiter_1 = require("./workspace-mutation-arbiter");
 const protocol_1 = require("./protocol");
@@ -840,6 +840,13 @@ class WebWorkbenchController {
         this.assertContextGuard(context);
         return result;
     }
+    /** v0.3.14 — guarded CAS write for an existing in-root text file. */
+    writeFileContent(context, input) {
+        this.assertContextGuard(context);
+        const result = this.fileWriteService.writeContent(input);
+        this.assertContextGuard(context);
+        return result;
+    }
     async gitStatus(context, input) {
         this.assertContextGuard(context);
         const result = await this.gitService.status(input);
@@ -901,10 +908,6 @@ class WebWorkbenchController {
         const node = this.fileService;
         return typeof node.rootRevision === 'function' ? node.rootRevision() : '';
     }
-    async reviewVerificationPage(context, input) {
-        this.assertContextGuard(context);
-        return this.reviewService.verificationPage(input);
-    }
     async gitLog(context, input) {
         this.assertContextGuard(context);
         const result = await this.gitService.log(input);
@@ -919,17 +922,9 @@ class WebWorkbenchController {
     }
     async review(context) {
         this.assertContextGuard(context);
-        try {
-            const result = await this.reviewService.snapshot();
-            this.assertContextGuard(context);
-            return result;
-        }
-        catch (error) {
-            if (error instanceof durable_tool_receipt_reader_1.DurableToolReceiptReaderError) {
-                throw new errors_1.WebWorkbenchError(500, 'Durable Review receipt facts failed integrity validation.', 'review_receipt_invalid');
-            }
-            throw error;
-        }
+        const result = await this.reviewService.snapshot();
+        this.assertContextGuard(context);
+        return result;
     }
     listTerminals(context) {
         this.assertContextGuard(context);
@@ -1819,8 +1814,9 @@ class WebWorkbenchController {
         this.workspaceValue = workspace;
         this.runtimeValue = runtime;
         this.fileService = new file_read_service_1.FileReadServiceV1(workspace);
+        this.fileWriteService = new file_write_service_1.FileWriteServiceV1(this.fileService);
         this.gitService = new git_read_model_service_1.GitReadModelServiceV1(workspace);
-        this.reviewService = new review_service_1.ReviewServiceV1(this.gitService, () => (0, durable_tool_receipt_reader_1.listProjectDurableToolReceiptRefsV1)(this.workspaceValue));
+        this.reviewService = new review_service_1.ReviewServiceV1(this.gitService);
         const eventSink = {
             emit: (event) => {
                 if (event.type === 'status_changed')

package/dist/web-client/assets/{DiffViewer-Bs1C5uRM.js → DiffViewer-BrHqudpK.js}

@@ -1,4 +1,4 @@
-import{r as u,j as s,I as N}from"./index-DiNz6Qhw.js";function v(t){const n=[];let i;for(const r of t)r.startsWith("@@")?(i&&n.push(i),i={title:r,lines:[r]}):i&&i.lines.push(r);return i&&n.push(i),n}function D(t,n){const i={schemaVersion:1,type:"review_context",repositoryRevision:t.repositoryRevision,path:t.path,hunk:n.title},r=n.lines.join(`
+import{r as u,j as s,I as N}from"./index-DgVNIqmE.js";function v(t){const n=[];let i;for(const r of t)r.startsWith("@@")?(i&&n.push(i),i={title:r,lines:[r]}):i&&i.lines.push(r);return i&&n.push(i),n}function D(t,n){const i={schemaVersion:1,type:"review_context",repositoryRevision:t.repositoryRevision,path:t.path,hunk:n.title},r=n.lines.join(`
 `).slice(0,12e3);return[`请审阅 ${t.path} 的这个 diff hunk，并指出正确性、安全性和测试风险：`,"","```review_context",JSON.stringify(i,null,2),"```","","```diff",r,"```"].join(`
 `)}function H({page:t,loading:n=!1,onLoadMore:i,onSendToComposer:r}){const a=u.useMemo(()=>v(t.lines),[t.lines]),[m,h]=u.useState(0),[f,p]=u.useState(!1),[x,k]=u.useState(!1),[b,y]=u.useState(""),d=Math.min(m,Math.max(0,a.length-1)),c=a[d];u.useEffect(()=>{h(0),p(!1),y("")},[t.fileId,t.repositoryRevision]);const j=(e,l)=>{let o=l;if(e.key==="ArrowRight"||e.key==="ArrowDown")o=(l+1)%a.length;else if(e.key==="ArrowLeft"||e.key==="ArrowUp")o=(l-1+a.length)%a.length;else if(e.key==="Home")o=0;else if(e.key==="End")o=a.length-1;else return;e.preventDefault(),h(o);const w=e.currentTarget.parentElement;window.requestAnimationFrame(()=>w?.querySelector(`[data-hunk-index="${o}"]`)?.focus())};return t.binary?s.jsxs("div",{className:"resource-empty compact",children:[s.jsx(N,{name:"code"}),s.jsx("strong",{children:"二进制差异"}),s.jsx("p",{children:"只展示变更事实，不返回 binary patch。"})]}):s.jsxs("div",{className:"diff-viewer",children:[s.jsxs("header",{children:[s.jsx("strong",{title:t.path,children:t.path}),s.jsx("span",{children:t.truncated?"受限预览":`${t.lines.length} 行`})]}),a.length>1?s.jsx("div",{className:"diff-hunk-nav",role:"tablist","aria-label":"Diff hunks",children:a.map((e,l)=>s.jsx("button",{type:"button",role:"tab","data-hunk-index":l,"aria-selected":d===l,tabIndex:d===l?0:-1,onClick:()=>h(l),onKeyDown:o=>j(o,l),children:e.title||`Hunk ${l+1}`},`${e.title}-${l}`))}):null,s.jsxs("div",{className:"diff-actions","aria-label":"Diff 显示选项",children:[c?s.jsx("button",{type:"button",className:"text-button","aria-expanded":!f,onClick:()=>p(e=>!e),children:f?"展开 Hunk":"折叠 Hunk"}):null,s.jsx("button",{type:"button",className:"text-button","aria-pressed":x,onClick:()=>k(e=>!e),children:"显示空白字符"}),c?s.jsx("button",{type:"button",className:"text-button",onClick:()=>{$(c.lines.join(`
 `),y)},children:"复制 Hunk"}):null]}),f?null:s.jsx("pre",{className:"diff-lines",tabIndex:0,"aria-label":`Diff ${t.path}`,children:(c?.lines??t.lines).map((e,l)=>s.jsxs("span",{className:e.startsWith("+")?"addition":e.startsWith("-")?"deletion":"",children:[S(e,x)||" ",`

package/dist/web-client/assets/FilesPanel-BcFY6L1a.js

@@ -0,0 +1 @@
+import{r as l,j as e,I as R,s as fe,W as xe}from"./index-DgVNIqmE.js";import{R as me}from"./ResourceSplitLayout-fPYE9JKJ.js";function Ne({workspaceId:s,refreshEpoch:a,actions:o,navigatorWidthPx:r,onNavigatorWidthCommit:d}){const[u,h]=l.useState({}),[j,x]=l.useState(new Set(["workspace-root"])),[n,m]=l.useState(null),[b,M]=l.useState(""),[B,G]=l.useState(null),[U,z]=l.useState(!1),[X,K]=l.useState(""),[Y,N]=l.useState(""),[T,ie]=l.useState(""),[H,P]=l.useState({}),[J,_]=l.useState(""),[O,F]=l.useState("view"),[$,k]=l.useState(""),[D,V]=l.useState(!1),[le,S]=l.useState(!1),[ae,oe]=l.useState(""),f=l.useRef(0),w=l.useRef(0),Z=l.useRef(null),E=async(t,i=!1,g=f.current)=>{if(g!==f.current)return;const v=u[t],C=i?v?.nextCursor:void 0;if(!(i&&!C)){h(c=>({...c,[t]:{items:v?.items??[],nextCursor:v?.nextCursor??null,revision:v?.revision??"",loading:!0}}));try{const c=await o.listFiles(t,C??void 0);if(g!==f.current)return;h(p=>({...p,[t]:{items:i?je(p[t]?.items??[],c.items):c.items,nextCursor:c.nextCursor,revision:c.revision,loading:!1}}))}catch(c){if(g!==f.current)return;if(i&&W(c)){N("目录已变化，已重新载入第一页。"),E(t,!1,g);return}h(p=>({...p,[t]:{items:p[t]?.items??[],nextCursor:p[t]?.nextCursor??null,revision:p[t]?.revision??"",loading:!1,error:L(c)}}))}}},A=async(t=f.current)=>{try{const i=await o.gitStatus();if(t!==f.current)return;P(ve(i)),_(i.nextCursor?"Git 装饰仅显示首批 200 个变更；在 Git 面板继续分页查看。":"")}catch(i){if(t!==f.current)return;P({}),_(`Git 状态装饰不可用：${L(i)}`)}},q=l.useRef(s);l.useEffect(()=>{const t=f.current+1;f.current=t,w.current+=1;const i=q.current===s?Z.current:null;q.current=s,h({}),x(new Set(["workspace-root"])),m(i),M(""),G(null),z(!1),K(""),N(""),P({}),_(""),s&&(E("workspace-root",!1,t),A(t),i&&y(i,!1,!1,t))},[a,s]);const y=async(t,i=!1,g=!1,v=f.current,C=w.current+1)=>{if(v===f.current&&!(!t.readable||t.sensitive||Q(t))){w.current=C,m(t),K(""),i||(M(""),G(null),z(!1),F("view"),k(""),S(!1)),g||N("");try{const c=await o.readFileContent(t.id,i?B??void 0:void 0);if(v!==f.current||C!==w.current)return;z(c.binary),M(p=>i?`${p}${c.content??""}`:c.content??""),G(c.nextCursor),oe(c.revision),g&&N("文件已变化，已从第一页重新载入。")}catch(c){if(v!==f.current||C!==w.current)return;if(i&&W(c)){await y(t,!1,!0,v,C);return}K(L(c))}}},I=be({selected:n,binary:U,hasMorePages:B!==null}),ce=()=>{k(b),S(!1),F("edit")},ee=()=>{$!==b&&!window.confirm("放弃未保存的修改？")||(F("view"),k(""),S(!1))},ue=async()=>{if(!(!n||D)){V(!0),S(!1);try{await o.writeFileContent(n.id,$,ae),F("view"),k(""),await y(n,!1,!0,f.current,w.current+1),N("已保存文件。"),A()}catch(t){W(t)?S(!0):N(L(t))}finally{V(!1)}}},te=t=>{const i=new Set(j);i.has(t)?i.delete(t):(i.add(t),u[t]||E(t)),x(i)};l.useEffect(()=>{Z.current=n},[n]);const de=l.useMemo(()=>Object.values(u).flatMap(t=>t.items),[u]),se=T.trim()?de.filter(t=>t.name.toLocaleLowerCase().includes(T.toLocaleLowerCase())):null;return e.jsxs("div",{className:"work-resource-panel files-panel",children:[e.jsxs("div",{className:"resource-toolbar",children:[e.jsxs("label",{className:"resource-search",children:[e.jsx("span",{className:"sr-only",children:"搜索已加载文件"}),e.jsx(R,{name:"search",size:14}),e.jsx("input",{type:"search",value:T,onChange:t=>ie(t.target.value),placeholder:"搜索已加载文件"})]}),e.jsx("button",{type:"button",className:"icon-button","aria-label":"刷新文件树",onClick:()=>{E("workspace-root"),A()},children:e.jsx(R,{name:"refresh",size:15})})]}),e.jsxs(me,{panelId:"files",navigatorWidthPx:r,onNavigatorWidthCommit:d,contentLabel:"文件预览",navigatorLabel:"工作区文件",handleLabel:"调整文件目录宽度",contentClassName:"file-preview",navigatorClassName:"file-tree",children:[e.jsxs(e.Fragment,{children:[J?e.jsx("p",{className:"resource-hint",role:"status",children:J}):null,se?e.jsxs(e.Fragment,{children:[e.jsx("p",{className:"resource-hint",children:"搜索仅覆盖已加载的目录和文件。"}),e.jsx("ul",{role:"list",className:"file-node-list search-results",children:se.map(t=>e.jsx(ne,{node:t,depth:0,expanded:!1,selected:n?.id===t.id,gitLabels:H[t.displayPath]??[],onToggle:te,onSelect:i=>{y(i)}},t.id))})]}):e.jsx(re,{parentId:"workspace-root",depth:0,directories:u,expanded:j,selectedId:n?.id,gitDecorations:H,onToggle:te,onSelect:t=>{y(t)},onLoadMore:t=>{E(t,!0)}})]}),e.jsxs(e.Fragment,{children:[Y?e.jsx("p",{className:"resource-notice",role:"status",children:Y}):null,n?e.jsxs(e.Fragment,{children:[e.jsxs("header",{children:[e.jsx("strong",{children:n.name}),e.jsx("span",{children:ye(n.sizeBytes??0)})]}),X?e.jsx("p",{className:"resource-error",role:"alert",children:X}):U?e.jsxs("div",{className:"resource-empty",children:[e.jsx(R,{name:"code"}),e.jsx("strong",{children:"二进制文件"}),e.jsx("p",{children:"出于安全和性能考虑，只显示元数据。"})]}):e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"file-preview-actions",children:O==="view"?e.jsx("button",{type:"button",className:"text-button",disabled:!I,title:I?void 0:"仅支持编辑 512 KB 内的 UTF-8 文本文件",onClick:ce,children:"编辑"}):e.jsxs(e.Fragment,{children:[e.jsx("button",{type:"button",className:"primary-button",disabled:D||$===b,onClick:()=>{ue()},children:D?"保存中…":"保存"}),e.jsx("button",{type:"button",className:"text-button",disabled:D,onClick:ee,children:"取消"})]})}),le?e.jsxs("p",{className:"resource-error",role:"alert",children:["文件已在别处变更，保存被拒绝。",e.jsx("button",{type:"button",className:"text-button",onClick:()=>{y(n,!1,!0)},children:"重新加载"})]}):null,O==="edit"?e.jsx("textarea",{className:"file-editor",value:$,spellCheck:!1,"aria-label":`编辑文件 ${n.name}`,onChange:t=>k(t.target.value),onKeyDown:t=>{t.key==="Escape"&&(t.preventDefault(),ee())}}):e.jsx("pre",{tabIndex:0,className:"file-code-view","aria-label":`文件内容 ${n.name}`,children:fe(b)})]}),B&&O==="view"?e.jsx("button",{type:"button",className:"secondary-button",onClick:()=>{y(n,!0)},children:"加载更多内容"}):null]}):e.jsxs("div",{className:"resource-empty",children:[e.jsx(R,{name:"workspace"}),e.jsx("strong",{children:"选择文件预览"}),e.jsx("p",{children:"敏感文件、工作区外链接和二进制正文不会返回浏览器。"})]})]})]})]})}function re({parentId:s,depth:a,directories:o,expanded:r,selectedId:d,gitDecorations:u,onToggle:h,onSelect:j,onLoadMore:x}){const n=o[s];return n?n.error?e.jsx("p",{className:"resource-error",role:"alert",children:n.error}):e.jsxs("ul",{role:"list",className:"file-node-list",children:[n.items.map(m=>{const b=r.has(m.id);return e.jsxs("li",{children:[e.jsx(ne,{node:m,depth:a,expanded:b,selected:d===m.id,gitLabels:u[m.displayPath]??[],onToggle:h,onSelect:j}),Q(m)&&b?e.jsx(re,{parentId:m.id,depth:a+1,directories:o,expanded:r,selectedId:d,gitDecorations:u,onToggle:h,onSelect:j,onLoadMore:x}):null]},m.id)}),n.loading?e.jsx("li",{className:"resource-loading",children:"正在读取…"}):null,n.nextCursor?e.jsx("li",{children:e.jsx("button",{type:"button",className:"text-button",onClick:()=>x(s),children:"加载更多"})}):null]}):e.jsx("p",{className:"resource-loading",children:"正在读取…"})}function ne({node:s,depth:a,expanded:o,selected:r,gitLabels:d,onToggle:u,onSelect:h}){const j=s.sensitive||!s.readable,x=Q(s);return e.jsxs("button",{type:"button",className:`file-node ${r?"selected":""} ${j?"blocked":""}`,style:{paddingInlineStart:`${8+a*15}px`},"aria-expanded":x?o:void 0,"aria-label":`${he(s)} ${s.name}${j?"，不可读取":""}${d.length?`，Git ${d.join("、")}`:""}`,onClick:()=>x?u(s.id):h(s),disabled:j,children:[e.jsx(R,{name:x?"workspace":"code",size:14}),e.jsx("span",{children:s.name}),s.kind==="symlink"?e.jsx("small",{children:"链接"}):null,s.sensitive?e.jsx("small",{children:"敏感"}):null,d.length?e.jsx("small",{className:"file-git-status",title:`Git ${d.join("、")}`,children:d.join(" · ")}):null]})}function he(s){return s.kind==="directory"?"目录":s.kind==="symlink"?s.targetKind==="directory"?"符号链接目录":"符号链接":"文件"}function Q(s){return s.kind==="directory"||s.kind==="symlink"&&s.targetKind==="directory"}function je(s,a){const o=new Map(s.map(r=>[r.id,r]));for(const r of a)o.set(r.id,r);return[...o.values()]}function ve(s){if(!s.isRepository)return{};const a=new Map,o=(r,d)=>{const u=r.replace(/\\/gu,"/").replace(/^\.\//u,"");if(!u)return;const h=a.get(u)??new Set;h.add(d),a.set(u,h);const j=u.split("/");for(let x=1;x<j.length;x+=1){const n=j.slice(0,x).join("/"),m=a.get(n)??new Set;m.add("含变更"),a.set(n,m)}};return s.conflicted.forEach(r=>o(r.path,"冲突")),s.staged.forEach(r=>o(r.path,"已暂存")),s.unstaged.forEach(r=>o(r.path,"未暂存")),s.untracked.forEach(r=>o(r.path,"未跟踪")),Object.fromEntries([...a].map(([r,d])=>[r,Object.freeze([...d])]))}const pe=512*1024;function be(s){const{selected:a,binary:o,hasMorePages:r}=s;return!a||o||a.sensitive||!a.readable||r?!1:(a.sizeBytes??0)<=pe}function ye(s){return s<1024?`${s} B`:s<1048576?`${(s/1024).toFixed(1)} KB`:`${(s/1048576).toFixed(1)} MB`}function W(s){return s instanceof xe&&s.code==="file_revision_conflict"}function L(s){return s instanceof Error?s.message:"文件请求失败。"}export{pe as FILE_EDIT_MAX_BYTES,Ne as FilesPanel,be as canEditFileContent};