@steerable/agent-shell-web 0.6.18 → 0.6.19

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steerable/agent-shell-web",
-  "version": "0.6.18",
+  "version": "0.6.19",
   "type": "module",
   "description": "Steerable framework — product-neutral renderer SPA source for @steerable/agent-shell (React + Vite). Consumed by product web entry points via the `@/` alias (anchored at this package's src/) and the createProductViteConfig factory. Published as a source package (src/ + vite.base.ts), not a build artifact.",
   "license": "Apache-2.0",
@@ -39,8 +39,8 @@
     "react-router-dom": "^6.30.0",
     "rehype-raw": "^7.0.0",
     "remark-gfm": "^4.0.1",
-    "@steerable/agent-protocol": "0.6.18",
-    "@steerable/agent-ui": "0.6.18"
+    "@steerable/agent-protocol": "0.6.19",
+    "@steerable/agent-ui": "0.6.19"
   },
   "devDependencies": {
     "@tailwindcss/vite": "^4.3.0",
@@ -53,7 +53,7 @@
     "typescript": "^5.8.3",
     "vite": "^5.4.21",
     "vitest": "^3.2.4",
-    "@steerable/pack-sdk": "0.6.18"
+    "@steerable/pack-sdk": "0.6.19"
   },
   "scripts": {
     "gen": "echo agent-shell-web",

package/src/components/chat/TaskPanelModal.test.tsx

@@ -46,12 +46,12 @@ function installBridge(tasks: LocalTask[]) {
     return Promise.reject(new Error(`unexpected request: ${input.method} ${input.path}`));
   });
   const taskUpdatedListeners: Array<
-    (payload: { chatId: string; taskId: string; status: string }) => void
+    (payload: { chatId: string; taskId: string }) => void
   > = [];
   (window as { electron?: unknown }).electron = {
     localBackend: { request },
     onTaskUpdated: (
-      cb: (payload: { chatId: string; taskId: string; status: string }) => void,
+      cb: (payload: { chatId: string; taskId: string }) => void,
     ) => {
       taskUpdatedListeners.push(cb);
       return () => {
@@ -62,7 +62,7 @@ function installBridge(tasks: LocalTask[]) {
   };
   return {
     request,
-    emitTaskUpdated: (payload: { chatId: string; taskId: string; status: string }) => {
+    emitTaskUpdated: (payload: { chatId: string; taskId: string }) => {
       for (const cb of taskUpdatedListeners) cb(payload);
     },
   };
@@ -165,8 +165,8 @@ describe('TaskPanelModal', () => {
       ([input]) => (input as { method: string }).method === 'GET',
     ).length;
 
-    emitTaskUpdated({ chatId: 'chat_2', taskId: 'x', status: 'completed' });
-    emitTaskUpdated({ chatId: 'chat_1', taskId: 'task-1', status: 'completed' });
+    emitTaskUpdated({ chatId: 'chat_2', taskId: 'x' });
+    emitTaskUpdated({ chatId: 'chat_1', taskId: 'task-1' });
 
     await waitFor(() => {
       const gets = request.mock.calls.filter(

package/src/components/chat/useChatTasks.test.ts

@@ -34,7 +34,7 @@ function makeTask(overrides: Partial<LocalTask> = {}): LocalTask {
 
 function installBridge(initial: LocalTask[]) {
   let current = initial;
-  const listeners: Array<(p: { chatId: string; taskId: string; status: string }) => void> = [];
+  const listeners: Array<(p: { chatId: string; taskId: string }) => void> = [];
   (window as { electron?: unknown }).electron = {
     localBackend: {
       request: vi.fn((input: { method: string; path: string }) => {
@@ -44,7 +44,7 @@ function installBridge(initial: LocalTask[]) {
         return Promise.reject(new Error(`unexpected request: ${input.path}`));
       }),
     },
-    onTaskUpdated: (cb: (p: { chatId: string; taskId: string; status: string }) => void) => {
+    onTaskUpdated: (cb: (p: { chatId: string; taskId: string }) => void) => {
       listeners.push(cb);
       return () => listeners.splice(listeners.indexOf(cb), 1);
     },
@@ -53,7 +53,7 @@ function installBridge(initial: LocalTask[]) {
     async push(next: LocalTask[]) {
       current = next;
       await act(async () => {
-        for (const cb of listeners) cb({ chatId: 'chat_1', taskId: 'task-1', status: 'x' });
+        for (const cb of listeners) cb({ chatId: 'chat_1', taskId: 'task-1' });
       });
     },
   };

package/src/lib/chat-transport.test.ts

@@ -67,10 +67,13 @@ describe('LocalBackendSseAdapter 帧归一化', () => {
     expect(ofType(events, 'done')).toHaveLength(1);
   });
 
+  // fixture 与服务端 router.ts onNotice 的真实发射形状一致（budget.kind + message）。
   it('budget_exhausted 在没有任何内容流过时原样透出、不结束流', () => {
     const { events, onEvent } = collectEvents();
     const adapter = new LocalBackendSseAdapter(onEvent);
-    adapter.feed('data: {"type":"budget_exhausted","message":"token limit"}\n\n');
+    adapter.feed(
+      'data: {"type":"budget_exhausted","budget":{"kind":"tokens"},"message":"budget_exhausted: tokens"}\n\n',
+    );
     expect(ofType(events, 'budget_exhausted')).toHaveLength(1);
     expect(ofType(events, 'done')).toHaveLength(0);
   });
@@ -79,7 +82,9 @@ describe('LocalBackendSseAdapter 帧归一化', () => {
     const { events, onEvent } = collectEvents();
     const adapter = new LocalBackendSseAdapter(onEvent);
     adapter.feed('data: {"content":"半截回答"}\n\n');
-    adapter.feed('data: {"type":"budget_exhausted","message":"token limit"}\n\n');
+    adapter.feed(
+      'data: {"type":"budget_exhausted","budget":{"kind":"tokens"},"message":"budget_exhausted: tokens"}\n\n',
+    );
     // 原事件被吞，替换为 suppression 标记 + done。
     expect(ofType(events, 'budget_exhausted')).toHaveLength(0);
     const suppressed = events.filter(

package/src/lib/chat-transport.ts

@@ -20,8 +20,7 @@
  *   - Standard content tokens:    `data: {"content":"..."}\n\n`
  *   - User message echo:          `data: {"type":"user_message", "message":{...}}\n\n`
  *   - Tool execution summary:     `data: {"type":"executed_actions", "actions":[...]}\n\n`
- *   - Per-round completion:       `data: {"type":"completion", "status":"...", "reason":"..."}\n\n`
- *   - Budget exhausted:           `data: {"type":"budget_exhausted", "budget":{...}}\n\n`
+ *   - Budget exhausted:           `data: {"type":"budget_exhausted", "budget":{"kind":"..."}, "message":"..."}\n\n`
  *   - Persisted message id:       `data: {"type":"message_id", "messageId":"..."}\n\n`
  *   - Named error event:          `event: error\ndata: {"message":"..."}\n\n`
  *   - Stream terminator:          `data: [DONE]\n\n`

package/src/lib/electron-bridge.ts

@@ -164,10 +164,10 @@ export interface ElectronBridge {
   ) => () => void;
   /**
    * 4.6a 后台任务状态推送。任务到达终态或 worktree 合并/丢弃完成时主进程
-   * 广播；载荷只有 chatId/taskId/status，面板收到后重新拉列表。
+   * 广播；载荷只有 chatId/taskId，面板收到后重新拉列表。
    */
   onTaskUpdated?: (
-    callback: (payload: { chatId: string; taskId: string; status: string }) => void,
+    callback: (payload: { chatId: string; taskId: string }) => void,
   ) => () => void;
   /**
    * 场景包广播事件订阅（3.1 通用化）：按通道名订阅主进程/BS 后端的

package/src/lib/http-bridge.test.ts

@@ -57,7 +57,7 @@ describe('localBackend.request', () => {
     await bridge.localBackend.request({ method: 'GET', path: '/api/v2/chats' });
     expect(fetchMock).toHaveBeenCalledWith('/api/v2/chats', {
       method: 'GET',
-      headers: undefined,
+      headers: {},
       body: undefined,
     });
   });
@@ -227,6 +227,43 @@ describe('startStream / cancelStream', () => {
   });
 });
 
+describe('BS token（bootstrap 注入的 Bearer）', () => {
+  const BOOT = { platform: 'darwin', flavor: 'test', brandName: 'T', token: 'tok 1' };
+
+  it('request 与 startStream 带 Authorization 头', async () => {
+    vi.stubGlobal('__DEEPPATH_BS__', BOOT);
+    const fetchMock = stubFetch(() => jsonResponse({}));
+    const bridge = createHttpBridge();
+    await bridge.localBackend.request({ method: 'GET', path: '/api/v2/chats' });
+    expect(fetchMock).toHaveBeenCalledWith('/api/v2/chats', {
+      method: 'GET',
+      headers: { Authorization: 'Bearer tok 1' },
+      body: undefined,
+    });
+    await bridge.localBackend.startStream({ method: 'POST', path: '/x' }, () => {});
+    expect(fetchMock).toHaveBeenCalledWith('/x', expect.objectContaining({
+      headers: { 'Content-Type': 'application/json', Authorization: 'Bearer tok 1' },
+    }));
+  });
+
+  it('EventSource 不能设头，token 走 query（URL 编码）', () => {
+    vi.stubGlobal('__DEEPPATH_BS__', BOOT);
+    const urls: string[] = [];
+    vi.stubGlobal(
+      'EventSource',
+      class {
+        constructor(url: string) {
+          urls.push(url);
+        }
+        addEventListener(): void {}
+      },
+    );
+    const bridge = createHttpBridge();
+    bridge.onChatCreated?.(() => {});
+    expect(urls).toEqual(['/api/v2/events?token=tok%201']);
+  });
+});
+
 describe('浏览器形态的 local.* 降级', () => {
   it('目录选择直接取消（浏览器给不了路径）', async () => {
     stubFetch(() => jsonResponse({}));

package/src/lib/http-bridge.ts

@@ -28,6 +28,8 @@ interface BsBootstrap {
   platform: NodeJS.Platform;
   flavor: string;
   brandName: string;
+  /** 每次启动生成的 Bearer token；/api/v2/* 与 /host/* 全部要求携带。 */
+  token?: string;
 }
 
 function bootstrap(): BsBootstrap {
@@ -37,10 +39,18 @@ function bootstrap(): BsBootstrap {
     : { platform: 'linux', flavor: 'generic', brandName: '' };
 }
 
+function authHeaders(): Record<string, string> {
+  const token = bootstrap().token;
+  return token ? { Authorization: `Bearer ${token}` } : {};
+}
+
 async function http<T>(method: string, path: string, body?: unknown): Promise<T> {
   const res = await fetch(path, {
     method,
-    headers: body !== undefined ? { 'Content-Type': 'application/json' } : undefined,
+    headers: {
+      ...(body !== undefined ? { 'Content-Type': 'application/json' } : {}),
+      ...authHeaders(),
+    },
     body: body !== undefined ? JSON.stringify(body) : undefined,
   });
   const data = (await res.json().catch(() => null)) as T & { detail?: string };
@@ -63,7 +73,11 @@ let eventSource: EventSource | null = null;
 
 function ensureEventSource(): EventSource {
   if (eventSource) return eventSource;
-  eventSource = new EventSource('/api/v2/events');
+  // EventSource 不能设请求头，token 走 query（server 端两种都收）。
+  const token = bootstrap().token;
+  eventSource = new EventSource(
+    `/api/v2/events${token ? `?token=${encodeURIComponent(token)}` : ''}`,
+  );
   return eventSource;
 }
 
@@ -112,7 +126,7 @@ async function startStream(
   try {
     res = await fetch(input.path, {
       method: input.method,
-      headers: { 'Content-Type': 'application/json' },
+      headers: { 'Content-Type': 'application/json', ...authHeaders() },
       body: input.body !== undefined ? JSON.stringify(input.body) : undefined,
       signal: controller.signal,
     });
@@ -231,7 +245,7 @@ export function createHttpBridge(): ElectronBridge {
       subscribeChannel<{ chatId: string; agentId?: string | null }>('chat-created', callback),
 
     onTaskUpdated: (callback) =>
-      subscribeChannel<{ chatId: string; taskId: string; status: string }>(
+      subscribeChannel<{ chatId: string; taskId: string }>(
         'task-updated',
         callback,
       ),