npm - @tea-agent/loop-agent - Versions diffs - 0.34.3 → 0.34.5 - Mend

@tea-agent/loop-agent 0.34.3 → 0.34.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (47) hide show

package/dist/worker/console/static/index.html CHANGED Viewed

@@ -6,8 +6,8 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <link rel="stylesheet" href="/inspect/operator-chrome.css" />
     <title>Loop 操作台 · Operator Console</title>
-    <script type="module" crossorigin src="/assets/index-BpuHmlSP.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-BQkhJpV8.css">
+    <script type="module" crossorigin src="/assets/index-y980PqtP.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-qpkysQYW.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/worker/console/static-src/chat-markdown-security.js ADDED Viewed

@@ -0,0 +1,38 @@
+/**
+ * Pure security helpers for Operator Chat Markdown (UI-07).
+ * Kept free of JSX so root `tsc` (no jsx) and vitest can import them.
+ */
+const DANGEROUS_PROTOCOLS = /^(javascript|vbscript|data):/i;
+export function isSafeMarkdownHref(href) {
+    if (!href)
+        return false;
+    const trimmed = href.trim();
+    if (!trimmed)
+        return false;
+    if (DANGEROUS_PROTOCOLS.test(trimmed))
+        return false;
+    return true;
+}
+/** Controlled local/session image paths may load; remote/unknown never auto-fetch. */
+export function isAllowedMarkdownImageSrc(src) {
+    if (!src)
+        return false;
+    const trimmed = src.trim();
+    if (!trimmed)
+        return false;
+    if (DANGEROUS_PROTOCOLS.test(trimmed))
+        return false;
+    if (trimmed.startsWith("blob:") || trimmed.startsWith("data:image/")) {
+        return false;
+    }
+    if (/^https?:\/\//i.test(trimmed))
+        return false;
+    if (trimmed.startsWith("/") ||
+        trimmed.startsWith("./") ||
+        trimmed.startsWith("../")) {
+        return true;
+    }
+    if (!/^[a-zA-Z][a-zA-Z0-9+.-]*:/.test(trimmed))
+        return true;
+    return false;
+}

package/dist/worker/console/static-src/operator-chat/chat-sse-events.js CHANGED Viewed

@@ -9,7 +9,7 @@ import { requestId } from "./format.js";
  * original request would have. `assistantId` is the in-flight assistant
  * message id to patch for streaming text; reconnect creates one if none. */
 export function createChatSseEventApplier(deps) {
-    const { refs, onReconcile, setError, setProcessOpen, setInterview, setHumanGateCards, setArtifactCards, setStreaming, setStreamingAssistantId, setUnread, setOperationCards, setUsage, setMessages, setToolCalls, } = deps;
+    const { refs, onReconcile, setError, setInterview, setHumanGateCards, setArtifactCards, setStreaming, setStreamingAssistantId, setUnread, setOperationCards, setUsage, setMessages, setToolCalls, } = deps;
     return (eventName, data, assistantId, options) => {
         if (options?.generation !== undefined &&
             refs.sessionGenerationRef.current !== options.generation)
@@ -275,8 +275,6 @@ export function createChatSseEventApplier(deps) {
                 ? payload.resultPreview
                 : "{}";
             const now = Date.now();
-            if (isError)
-                setProcessOpen(true);
             setToolCalls((prev) => {
                 const exists = prev.find((t) => t.id === id);
                 if (exists) {

package/dist/worker/console/static-src/operator-chat/format.js CHANGED Viewed

@@ -1,4 +1,4 @@
-import { truncateToolResult } from "../../chat/tool-preview.js";
+import { extractToolResultText, truncateToolResult } from "../../chat/tool-preview.js";
 export function confirmationToken() {
     const w = window;
     return w.__CONSOLE_CONFIRMATION_TOKEN__ ?? "";
@@ -41,7 +41,7 @@ export function fmtDaySep(ts) {
 }
 export function resultPreview(result) {
     try {
-        const s = typeof result === "string" ? result : JSON.stringify(result, null, 2);
+        const s = extractToolResultText(result);
         return truncateToolResult(s).text;
     }
     catch {

package/dist/worker/console/static-src/operator-chat/refs.js CHANGED Viewed

@@ -14,6 +14,14 @@ export function useChatRefs() {
     const turnAssistantIdsRef = useRef(new Map());
     const reconnectAbortRef = useRef(null);
     const activeTurnIdRef = useRef(null);
+    const submitInFlightRef = useRef(false);
+    const submitGenerationRef = useRef(0);
+    const pendingSubmissionRef = useRef(null);
+    const stopInFlightRef = useRef(false);
+    const stopRequestedRef = useRef(false);
+    const stoppingTurnIdRef = useRef(null);
+    const abortPostedTurnIdsRef = useRef(new Set());
+    const releasedClientRequestIdsRef = useRef(new Set());
     const usageResponseKeysRef = useRef(new Set());
     const isComposingRef = useRef(false);
     const compositionEndedAtRef = useRef(0);
@@ -34,6 +42,14 @@ export function useChatRefs() {
         turnAssistantIdsRef,
         reconnectAbortRef,
         activeTurnIdRef,
+        submitInFlightRef,
+        submitGenerationRef,
+        pendingSubmissionRef,
+        stopInFlightRef,
+        stopRequestedRef,
+        stoppingTurnIdRef,
+        abortPostedTurnIdsRef,
+        releasedClientRequestIdsRef,
         usageResponseKeysRef,
         isComposingRef,
         compositionEndedAtRef,
@@ -52,6 +68,14 @@ export function useChatRefs() {
         turnAssistantIdsRef,
         reconnectAbortRef,
         activeTurnIdRef,
+        submitInFlightRef,
+        submitGenerationRef,
+        pendingSubmissionRef,
+        stopInFlightRef,
+        stopRequestedRef,
+        stoppingTurnIdRef,
+        abortPostedTurnIdsRef,
+        releasedClientRequestIdsRef,
         usageResponseKeysRef,
         isComposingRef,
         compositionEndedAtRef,

package/dist/worker/console/static-src/operator-chat/resource-auto-invocation.js ADDED Viewed

@@ -0,0 +1,91 @@
+/**
+ * Operator Chat — Skills panel auto-invocation mutation client.
+ *
+ * Real PATCH only (contract mockApi.strategy = not-needed). Fail closed on
+ * write errors; adopt returned snapshot when reloadApplied; surface partial
+ * busy (preference saved, reload pending) without aborting the turn.
+ */
+import { parseRuntimeSnapshotError } from "./runtime-snapshot-store.js";
+function autoInvocationUrl(origin, sessionId, resourceId) {
+    return `${origin}/api/operator/v1/chat/sessions/${encodeURIComponent(sessionId)}/skills/${encodeURIComponent(resourceId)}/auto-invocation`;
+}
+/**
+ * PATCH skill auto-invocation preference for the current session's repo.
+ * Never comments out or replaces the real request path.
+ */
+export async function patchSkillAutoInvocation(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    try {
+        const res = await fetchImpl(autoInvocationUrl(input.origin, input.sessionId, input.resourceId), {
+            method: "PATCH",
+            credentials: "include",
+            headers: {
+                "content-type": "application/json",
+                "x-loop-console-confirmation": input.confirmationToken,
+            },
+            body: JSON.stringify({
+                autoInvocationEnabled: input.autoInvocationEnabled,
+            }),
+        });
+        const body = (await res.json().catch(() => ({})));
+        if (!res.ok || body.ok === false) {
+            return {
+                ok: false,
+                error: {
+                    ...parseRuntimeSnapshotError(body),
+                    status: res.status,
+                },
+            };
+        }
+        const preferenceSaved = body.preferenceSaved === true;
+        const reloadApplied = body.reloadApplied === true;
+        if (!preferenceSaved) {
+            return {
+                ok: false,
+                error: {
+                    status: res.status,
+                    code: "PI_RESOURCE_PREFERENCES_WRITE_FAILED",
+                    message: "preference was not saved",
+                },
+            };
+        }
+        if (!reloadApplied) {
+            const code = body.error?.code ?? "PI_SESSION_BUSY";
+            const message = body.error?.message ??
+                "preference saved; current session is busy and was not reloaded";
+            return {
+                ok: true,
+                preferenceSaved: true,
+                reloadApplied: false,
+                ...(body.snapshot ? { snapshot: body.snapshot } : {}),
+                partialBusy: { code, message },
+            };
+        }
+        return {
+            ok: true,
+            preferenceSaved: true,
+            reloadApplied: true,
+            ...(body.snapshot ? { snapshot: body.snapshot } : {}),
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            error: {
+                message: error instanceof Error ? error.message : String(error),
+            },
+        };
+    }
+}
+export function autoInvocationStatusCopy(skill) {
+    if (skill.autoInvocationEnabled) {
+        return {
+            badge: "允许自动使用",
+            help: "模型可自动选择该技能，也可通过 /skill:<name> 手动调用。",
+        };
+    }
+    return {
+        badge: "已隐藏自动使用",
+        help: `已从模型自动技能列表隐藏，仍可通过 /skill:${skill.name} 手动调用。`,
+    };
+}