@tea-agent/loop-agent 0.39.0-beta.0 → 0.39.0-beta.10

package/dist/worker/observe/shell-handler-keys.js

@@ -0,0 +1,34 @@
+/**
+ * Allowlist of in-process shell handlers (preset/gate flags on task.shell).
+ * Observe projects these names; the executor writes process receipts for them.
+ */
+export const SHELL_NAMED_HANDLER_KEYS = [
+    "verdictGate",
+    "projectGovernanceGate",
+    "requirementCoverageGate",
+    "jsonArtifactGate",
+    "frontendPrewriteGate",
+    "frontendLintBaseline",
+    "frontendVerificationBundle",
+    "frontendReviewContext",
+    "frontendTestCaseChecklist",
+    "frontendBrowserToolPreflight",
+    "frontendTestStandardScenarios",
+    "frontendTestEnvironmentProbe",
+    "frontendTestEvidenceValidation",
+    "finalWriteSetApprovalGate",
+    "frontendTestL5Report",
+    "frontendTestHtmlReport",
+    "frontendTestCaseManifest",
+    "frontendTestResultFinalize",
+    "frontendTestReports",
+    "backendTestPipeline",
+    "jacocoCoverage",
+    "verifyEvidence",
+    "repairArtifactGate",
+];
+export function namedShellHandlers(shell) {
+    if (!shell)
+        return [];
+    return SHELL_NAMED_HANDLER_KEYS.filter((key) => shell[key] != null);
+}

package/dist/worker/observe/static/api.js

@@ -1,8 +1,12 @@
 /** Fetch and artifact helpers (Observe UI R5). */
+import {
+	fetchWithWorkspaceScope,
+	workspaceScope,
+} from "./state.js";
 
 export async function fetchJson(url) {
 	try {
-		const res = await fetch(url);
+		const res = await fetchWithWorkspaceScope(url);
 		if (!res.ok) return null;
 		return await res.json();
 	} catch {
@@ -18,7 +22,10 @@ export async function fetchJson(url) {
 export async function fetchJsonResult(url, options = {}) {
 	const signal = options?.signal;
 	try {
-		const res = await fetch(url, signal ? { signal } : undefined);
+		const res = await fetchWithWorkspaceScope(
+			url,
+			signal ? { signal } : undefined,
+		);
 		let body = null;
 		try {
 			body = await res.json();
@@ -77,6 +84,14 @@ export async function fetchDagNodeInput(runId, nodeId) {
 	return fetchJsonResult(url);
 }
 
+export async function fetchDagNodeProcess(runId, nodeId, key) {
+	const params = new URLSearchParams();
+	if (key) params.set("key", String(key));
+	const qs = params.toString();
+	const url = `/api/dag-runs/${encodeURIComponent(runId)}/nodes/${encodeURIComponent(nodeId)}/process${qs ? `?${qs}` : ""}`;
+	return fetchJsonResult(url);
+}
+
 /**
  * Fetch a spec-evidence file preview (binding source or successful read).
  * Resolves to the parsed JSON body, or throws an Error carrying the HTTP
@@ -84,7 +99,7 @@ export async function fetchDagNodeInput(runId, nodeId) {
  */
 export async function fetchSpecEvidenceFile(runId, nodeId, source, relPath) {
 	const url = `/api/dag-runs/${encodeURIComponent(runId)}/nodes/${encodeURIComponent(nodeId)}/spec-evidence/file?source=${encodeURIComponent(source)}&path=${encodeURIComponent(relPath)}`;
-	const res = await fetch(url);
+	const res = await fetchWithWorkspaceScope(url);
 	let body = null;
 	try {
 		body = await res.json();
@@ -104,6 +119,78 @@ export function artifactUrl(artifactPath) {
 	return `/api/artifacts?path=${encodeURIComponent(artifactPath)}&tail=200`;
 }
 
+/**
+ * Experimental (prompt-override rerun only): POST one allowlisted operator
+ * action through the Console mutation gate using the SCOPED inspect token
+ * (window.__INSPECT_MUTATION_TOKEN__). The server injects it into /inspect
+ * HTML by default; HARNESS_DAG_RERUN_PROMPT_OVERRIDE=0|false|off disables
+ * injection. The token only authorizes dagRerunPlan / dagRerun — never general
+ * Console mutations.
+ * Absent token → the call is not attempted.
+ */
+export async function postOperatorAction(action, actionParams = {}) {
+	const token = globalThis.__INSPECT_MUTATION_TOKEN__;
+	if (!token) {
+		return {
+			ok: false,
+			status: 0,
+			body: { error: { code: "PROMPT_OVERRIDE_DISABLED", message: "提示词重启未启用（服务端未注入确认 token）" } },
+		};
+	}
+	const workspaceId = workspaceScope();
+	if (!workspaceId) {
+		return {
+			ok: false,
+			status: 400,
+			body: {
+				error: {
+					code: "WORKSPACE_REQUIRED",
+					message: "workspaceId is required",
+				},
+			},
+		};
+	}
+	try {
+		const res = await fetchWithWorkspaceScope("/api/operator/v1/operations", {
+			method: "POST",
+			credentials: "same-origin",
+			headers: {
+				"Content-Type": "application/json",
+				"x-loop-console-confirmation": token,
+			},
+			body: JSON.stringify({ workspaceId, action, actionParams }),
+		});
+		let body = null;
+		try {
+			body = await res.json();
+		} catch {
+			body = null;
+		}
+		return { ok: res.ok, status: res.status, body };
+	} catch {
+		return { ok: false, status: 0, body: null };
+	}
+}
+
+/** Poll a Console operation snapshot (read-only GET). */
+export async function fetchOperatorOperation(operationId) {
+	try {
+		const res = await fetchWithWorkspaceScope(
+			`/api/operator/v1/operations/${encodeURIComponent(operationId)}`,
+			{ credentials: "same-origin" },
+		);
+		let body = null;
+		try {
+			body = await res.json();
+		} catch {
+			body = null;
+		}
+		return { ok: res.ok, status: res.status, body };
+	} catch {
+		return { ok: false, status: 0, body: null };
+	}
+}
+
 export function parseArtifactPreviewResponse(text) {
 	const parsed = JSON.parse(text);
 	if (!parsed || typeof parsed.content !== "string") {
@@ -114,4 +201,3 @@ export function parseArtifactPreviewResponse(text) {
 		truncated: parsed.truncated === true,
 	};
 }
-

package/dist/worker/observe/static/app.js

@@ -1,9 +1,8 @@
-/** Observe UI bootstrap: route wiring, listeners, compatibility re-exports. */
+/** Observe UI bootstrap: standalone compatibility entry + re-exports. */
 import {
 	parseHashRoute,
 	parseHashRouteWithFilters,
 	buildHashPath,
-	parseRoute,
 } from "./router.js";
 import { parseArtifactPreviewResponse } from "./api.js";
 import {
@@ -15,7 +14,6 @@ import {
 } from "./relations.js";
 import { copyText, renderRecommendedCommand } from "./copy.js";
 import {
-	isPageVisible,
 	detailPollDelay,
 	updateDagGraphViewportState,
 	captureDagGraphViewportState,
@@ -25,11 +23,9 @@ import {
 	shouldReuseDagDetailShell,
 	shouldPreserveDiagnosticsOpen,
 	isInteractiveGestureActive,
-	stopTimers,
 	renderViewState,
 	mountViewState,
 	viewStateDescriptor,
-	uiState,
 } from "./state.js";
 import { sortPoolTasks, poolStatusCounts } from "./format-pool.js";
 import {
@@ -45,34 +41,22 @@ import {
 	dashboardVisibleFeatures,
 	findDagForRun,
 } from "./dag-model.js";
-
-import { renderFailures } from "./views/failures.js";
-import { startPoolView } from "./views/pool.js";
-import { startDashboardPolling } from "./views/dashboard.js";
-import { startDagsView } from "./views/dags.js";
-import { renderFeatureDetail } from "./views/feature.js";
-import { renderBatch } from "./views/batch.js";
-import { startTaskPolling } from "./views/task.js";
-import { startRunPolling } from "./views/run.js";
-import { startDagPolling } from "./views/dag.js";
 import { renderDagGraph } from "./views/dag-graph.js";
-import { renderNightJobs } from "./views/night.js";
 import {
 	selectDagNode,
 	closeDagInspector,
-	closeDagInspectorOnOutsideClick,
 	renderDagInspector,
 } from "./views/dag-inspector.js";
 import {
 	mergeSessionEvents,
 	renderSessionTimeline,
 } from "./views/session-timeline.js";
-import { mountOperatorChrome } from "./operator-chrome.js";
+import {
+	route,
+	startStandaloneInspect,
+	tryCanonicalizeStandaloneInspect,
+} from "./inspect-workspace.js";
 
-// Compatibility re-exports for poll-stable UI helpers (owned by state.js / views):
-// reuse-dag-detail-shell, reuse-dag-graph-wrap, existingGraphWrap?.parentNode === ranksEl,
-// existingDetails?.parentNode === metaEl, let pre = existingPre, computeFollowLatest,
-// updateDagOutputViewportState, isInteractiveGestureActive.
 export {
 	detailPollDelay,
 	parseMarkdownBlocks,
@@ -114,56 +98,20 @@ export {
 	renderDagInspector,
 	renderSessionTimeline,
 	mergeSessionEvents,
+	route,
+	tryCanonicalizeStandaloneInspect,
 };
 
-function route() {
-	stopTimers();
-	const r = parseRoute();
-	if (r.view === "dashboard") {
-		startDashboardPolling(r.scrollTo);
-	} else if (r.view === "dags") {
-		void startDagsView();
-	} else if (r.view === "batch") {
-		void renderBatch(r.batchRunId);
-	} else if (r.view === "run") {
-		startRunPolling(r.workerRunId);
-	} else if (r.view === "dag") {
-		startDagPolling(r.dagRunId);
-	} else if (r.view === "failures") {
-		void renderFailures();
-	} else if (r.view === "pool") {
-		startPoolView();
-	} else if (r.view === "night") {
-		void renderNightJobs(r.scheduleId);
-	} else if (r.view === "task") {
-		startTaskPolling(r.featureId, r.taskId);
-	} else if (r.view === "feature") {
-		void renderFeatureDetail(r.featureId);
-	}
-}
-
 if (typeof window !== "undefined") {
-	// 先同步挂载共享壳，再启动路由；首个 snapshot 的新鲜度不会因异步挂载丢失。
-	const chromeHost = document.getElementById("operator-chrome");
-	if (chromeHost) {
-		mountOperatorChrome(chromeHost, {
-			mode: "inspect",
-			liveLocation: true,
-			healthUrl: "/api/health",
-			readinessTitle: "Pi 状态（只读展示）。模型与认证管理在操作侧，点击进入。",
-		});
+	// Compatibility listeners remain owned by inspect-workspace.js:
+	// window.addEventListener("hashchange", route)
+	// window.addEventListener("load", route)
+	// document.addEventListener("pointerdown", closeDagInspectorOnOutsideClick)
+	// document.addEventListener("visibilitychange", ...)
+	// reuse-dag-detail-shell, reuse-dag-graph-wrap, existingGraphWrap?.parentNode === ranksEl,
+	// existingDetails?.parentNode === metaEl, let pre = existingPre, computeFollowLatest,
+	// updateDagOutputViewportState, isInteractiveGestureActive.
+	if (!tryCanonicalizeStandaloneInspect(window.location)) {
+		startStandaloneInspect();
 	}
-	window.addEventListener("hashchange", route);
-	window.addEventListener("load", route);
-	document.addEventListener("pointerdown", closeDagInspectorOnOutsideClick);
-	document.addEventListener("visibilitychange", () => {
-		if (!isPageVisible()) return;
-		const r = parseRoute();
-		if (r.view === "dashboard") startDashboardPolling();
-		// History page is manual-refresh only (no 5s dashboard polling).
-		if (r.view === "run") startRunPolling(r.workerRunId, false);
-		if (r.view === "dag") startDagPolling(r.dagRunId, false);
-		if (r.view === "pool" && uiState.poolAutoRefresh) startPoolView();
-		if (r.view === "task") startTaskPolling(r.featureId, r.taskId);
-	});
 }

package/dist/worker/observe/static/constants.js

@@ -53,7 +53,14 @@ export const UI_TEXT = {
 	inputError: "加载节点输入失败。",
 	inputFrozenLabel: "冻结 DAG 节点定义",
 	inputFingerprintNote: "仅保存 assembled prompt 指纹，全文未持久化",
-	noSessionEvents: "该节点暂无过程日志",
+	noSessionEvents: "该 Pi 节点暂无过程日志（可能尚未执行、走 CLI 路径，或为历史 run）",
+	noShellProcess: "该 shell 节点尚未留下命令回执。",
+	noPresetProcess: "该内部处理器尚未留下过程回执。",
+	staticNoProcess: "静态节点没有逐步执行过程，请查看节点输出。",
+	processLoading: "正在加载执行过程…",
+	processError: "加载执行过程失败。",
+	shellCommandsHeading: "Shell 命令",
+	shellPresetHeading: "内部处理器",
 	noArtifacts: "暂无产物记录。",
 	noActiveCommand: "当前没有正在执行的命令。",
 	noFailures: "当前没有异常 Task。",

package/dist/worker/observe/static/dag-history-labels.js

@@ -14,6 +14,10 @@ const ATTEMPT_FAILURE_LABELS = {
 	timeout: "执行超时",
 	"nonzero-exit": "命令执行失败",
 	"invalid-output": "输出格式无效",
+	"structured-output-truncated": "结构化输出被截断",
+	"output-too-large": "输出超出体积上限",
+	"structured-repair-exhausted": "结构化修复耗尽",
+	"governance-blocked": "治理规则阻断",
 	"empty-output": "输出为空",
 	auth: "认证失败",
 	quota: "额度或限流",

package/dist/worker/observe/static/dag-node-purpose.d.ts

@@ -0,0 +1,6 @@
+export const NODE_PURPOSE_BY_ID: Record<string, string>;
+
+export function describeDagNodePurpose(
+	nodeId: string | null | undefined,
+	node?: { executor?: string | null; label?: string | null },
+): string;

package/dist/worker/observe/static/dag-node-purpose.js

@@ -0,0 +1,208 @@
+/**
+ * Short Chinese purpose copy for DAG node IDs shown in the inspector table.
+ * Exact IDs first; then conservative suffixes. Never echo the raw nodeId.
+ */
+
+const NODE_PURPOSE_BY_ID = {
+	"contract-pi": "只读梳理范围、风险与写入边界，产出实现契约，不改代码。",
+	"scout-src": "只读侦察源码结构与现有模式，给后续实现找落点，不改文件。",
+	"scout-tests": "只读侦察测试与验证入口，标出可复用的检查方式，不改文件。",
+	"plan-pi": "根据契约与侦察结果制定实现计划与 writeSet，仍不改业务代码。",
+	"plan-revision-pi": "按审查意见修订实现计划，收窄写入范围，不扩大任务边界。",
+	"implement-pi": "在允许路径内按计划改代码，完成本轮主实现。",
+	"implement-core": "在允许路径内完成核心实现，不越出约定写入范围。",
+	"repair-pi": "只修验证暴露出的可修复问题，不重开需求、不扩大 writeSet。",
+	"verify-shell": "跑冻结的验证命令，用退出码证明实现是否达标。",
+	"soft-verify-shell": "先做软验证，留下证据供过程监督，不立刻判整单失败。",
+	"hard-verify-shell": "硬验证：命令必须通过，作为后续审查与收口的事实。",
+	"review-pi": "对照需求与 diff 做只读审查，给出通过或需修订。",
+	"review-verdict-recovery-pi": "补齐或纠正审查结论格式，确保门禁能读到明确 VERDICT。",
+	"review-gate-shell": "确定性门禁：只有审查结论为通过才放行收口。",
+	"decision-pi": "汇总本轮证据，给出继续、修订或停止的决策建议。",
+	"closeout-pi": "汇总完成证据与交接说明，宣告本轮交付结束。",
+	"write-set-audit-pi": "审查计划中的写入范围是否过宽或重叠，给出初审结论。",
+	"write-set-audit-format-repair-pi": "只修复写入范围审查的结论格式，不改计划内容。",
+	"write-set-format-gate-shell": "检查写入范围审查格式是否有效，未通过则不能开始改代码。",
+	"final-write-set-audit-pi": "终审写入范围：确认最终计划可授权 implement-pi。",
+	"final-write-set-audit-format-repair-pi": "只修复终审结论格式，保留原审查发现。",
+	"write-set-gate-shell": "写入授权门禁：终审通过后才允许实现节点改文件。",
+	"process-supervisor-pi": "只读检查实现过程是否偏离契约与验证，提出Bounded 修复建议。",
+	"process-gate-shell": "过程监督门禁：根据监督结论决定是否进入 repair。",
+	"authority-surface-audit-pi": "审查谁能写状态、哪些面暴露给模型，防止越权通路。",
+	"authority-surface-gate-shell": "权限面门禁：审查未通过则不能进入收口。",
+	"task-state-reconcile-shell": "核对任务状态与运行事实是否一致，避免用过期状态收口。",
+	"requirement-coverage-shell": "检查实现是否覆盖已编号需求，漏项则不能宣称完成。",
+	"static-invariant-shell": "跑静态不变量检查，确认约定结构与约束仍成立。",
+	"changeset-impact-shell": "评估本轮 diff 的影响面，标出高风险改动。",
+	"closeout-artifact-shell": "收集收口所需的确定性产物与证据路径。",
+	"final-verify-shell": "收口前最后一轮冻结验证，作为完成权威。",
+	"closeout-summary-pi": "把验证与交付事实写成简短交接摘要。",
+
+	"frontend-contract-pi": "把前端需求整理成可追踪契约：页面、状态、验收与边界。",
+	"frontend-contract-import-shell": "导入并固化前端实现契约，供后续设计、写入与验证节点使用。",
+	"frontend-scout-pi": "只读侦察前端结构、组件与接口用法，不改文件。",
+	"frontend-plan-pi": "选定实现与 Mock/API 策略，输出可执行的前端实现契约补丁。",
+	"frontend-design-policy-shell": "确定前端设计与 Mock/API 策略，冻结后续实现必须遵守的规则。",
+	"frontend-design-review-pi": "审查前端计划是否可写：通过则沿用原计划，否则要求修订。",
+	"frontend-plan-revision-pi": "按设计审查意见修订前端契约，不扩大范围。",
+	"frontend-final-design-review-pi": "复核修订后的前端计划，只有通过才能授权写入。",
+	"frontend-prewrite-gate-shell": "写入前门禁：核对契约、覆盖与 Mock 策略，通过才允许改前端。",
+	"frontend-writer-admission-shell": "核对契约、设计策略与 writeSet，满足准入条件后才允许 writer 写入。",
+	"frontend-lint-baseline-shell": "记录写入前的 lint 基线，供实现后对比，不阻断写入。",
+	"frontend-implement-pi": "按已批准契约改前端代码、状态与交互，留在 writeSet 内。",
+	"frontend-verify-assess-shell": "跑静态/行为/Mock 验证并评估能否有界修复。",
+	"frontend-verify-shell": "执行冻结的前端验证命令，产出可复查的通过或失败证据。",
+	"frontend-repair-pi": "只修评估为可修复的前端失败，不重开需求。",
+	"frontend-reverify-shell": "修复后用同一套冻结命令复验。",
+	"frontend-review-context-shell": "打包真实 diff 与有效验证证据，供审查节点使用。",
+	"frontend-review-pi": "对照契约审查前端实现与证据，给出通过或需修订。",
+	"frontend-review-gate-shell": "前端审查门禁：结论为通过才进入收口。",
+	"frontend-closeout-shell": "汇总实现、验证与遗留事项，形成确定性的前端收口事实。",
+	"frontend-closeout-pi": "汇总前端交付状态（含真实联调是否仍待完成）。",
+	"frontend-mock-assess-pi": "评估项目是否具备授权的 Mock 验证能力。",
+	"frontend-mock-contract-gate-shell": "Mock 契约门禁：策略与验证命令不一致则阻断。",
+	"frontend-mock-verify-shell": "执行已授权的 Mock 验证命令。",
+	"frontend-mock-blocked-shell": "缺少授权 Mock 命令时给出确定性阻断说明。",
+
+	"preflight-frontend-browser-tool-shell": "检查浏览器自动化工具是否可用，失败则不进入用例执行。",
+	"prepare-frontend-test-package-shell": "准备前端测试包与标准场景资产。",
+	"retrieve-frontend-test-context-pi": "检索页面与验收上下文，供生成用例引用。",
+	"materialize-frontend-test-execution-shell": "物化前端测试执行清单与路径。",
+	"generate-frontend-functional-cases-pi": "按验收标准生成可执行的前端功能用例。",
+	"checklist-and-materialize-manifest-shell": "核对清单并物化用例 manifest。",
+	"execute-frontend-cases-map": "按用例清单并行跑浏览器步骤，每条用例一个子节点。",
+	"select-frontend-rerun-candidates-shell": "挑出可有界重跑的失败/缺失用例。",
+	"rerun-frontend-cases-map": "对入选用例再跑一轮浏览器步骤，以最新证据为准。",
+	"generate-backend-md-cases-map": "按模块并行写出 Markdown 用例卡片。",
+	"generate-backend-pytest-cases-map": "按模块并行写出对应的 pytest 脚本。",
+	"patch-backend-md-cases-map": "按缺口计划并行补丁各模块 Markdown 用例。",
+	"patch-backend-pytest-cases-map": "按缺口计划并行补丁各模块 pytest 脚本。",
+	"finalize-frontend-test-result-shell": "汇总用例结果，写成统一结论。",
+	"frontend-test-reports-shell": "生成前端测试 HTML/Markdown 报告。",
+	"frontend-test-result-outcome-gate-shell": "前端测试结果门禁：未达标则不能进入复盘收口。",
+	"frontend-test-retrospect-pi": "根据真实执行证据写前端测试复盘。",
+
+	"validate-backend-test-environment-shell": "检查 Python/pytest 与测试布局是否可跑，失败则不消耗模型。",
+	"backend-test-analysis-contract-shell": "固化后端测试分析契约与布局。",
+	"backend-test-environment-scout-pi": "侦察后端测试环境与入口，不改业务代码。",
+	"backend-test-execution-contract-shell": "冻结后端测试如何执行、产物写到哪里。",
+	"generate-backend-md-plan-pi": "生成中文模块索引与用例卡片计划。",
+	"materialize-backend-md-module-manifest-shell": "把 Markdown 模块清单落到磁盘。",
+	"review-and-revise-backend-md-cases-pi": "独立审查并修订 Markdown 用例。",
+	"validate-backend-md-cases-shell": "校验用例章节与 Case ID，结果只记录不阻断。",
+	"generate-backend-pytest-plan-pi": "把 Markdown 用例转成 pytest 脚本计划。",
+	"materialize-backend-pytest-module-manifest-shell": "物化 pytest 模块与脚本映射。",
+	"assess-backend-pytest-collection-shell": "试收集 pytest：能修的缺口才进入 repair。",
+	"repair-backend-pytest-collection-pi": "只补齐可归因的缺失 mapped 脚本。",
+	"effective-backend-pytest-collection-gate-shell": "收集门禁：映射不齐则不跑业务 pytest。",
+	"backend-test-traceability-gate-shell": "核对用例、脚本与验收的追踪关系。",
+	"backend-test-case-manifest-shell": "写出本轮有效用例清单事实。",
+	"execute-backend-pytest-and-html-report-shell": "单次跑业务 pytest 并生成 HTML/事实报告。",
+	"backend-test-report-and-l5-pi": "用中文汇总 advisory、执行事实与结论。",
+	"backend-test-outcome-gate-shell": "后端测试结果门禁：失败分类决定能否收口。",
+	"backend-test-report-shell": "生成后端测试报告产物。",
+
+	"knowledge-sync-collect-pi": "收集本轮验证与实现中应回写的知识。",
+	"knowledge-sync-draft-pi": "起草知识条目，不直接改权威文档。",
+	"knowledge-sync-validate-shell": "校验知识草稿结构与路径边界。",
+	"knowledge-sync-apply-pi": "把通过校验的知识写入约定文档。",
+	"knowledge-sync-pointer-pi": "更新知识索引或指针，方便下次检索。",
+
+	"kg-bootstrap-preflight-shell": "图谱开荒前检：确认仓库与工具可用。",
+	"kg-bootstrap-inventory-shell": "盘点代码与文档，列出待建图谱对象。",
+	"kg-bootstrap-propose-pi": "提出知识图谱节点与关系草案。",
+	"kg-bootstrap-validate-shell": "校验图谱草案是否可物化。",
+	"kg-bootstrap-review-pi": "审查图谱草案质量与边界。",
+	"kg-bootstrap-review-gate-shell": "图谱审查门禁：通过才允许物化。",
+	"kg-bootstrap-promote-shell": "把审查通过的图谱草案提升为有效输入。",
+	"kg-bootstrap-materialize-shell": "把图谱写入约定产物路径。",
+};
+
+function normalizeNodeId(nodeId) {
+	return String(nodeId ?? "")
+		.trim()
+		.split(/[/#]/)[0];
+}
+
+const NODE_PURPOSE_BY_PREFIX = [
+	[/^execute-frontend-case-\d+$/, "执行单条前端用例的浏览器步骤，并留下证据。"],
+	[/^rerun-frontend-case-/, "重跑入选的前端用例，以本轮证据覆盖上一轮结果。"],
+	[/^generate-backend-md-case-/, "为单个后端模块写出 Markdown 用例卡片。"],
+	[/^generate-backend-pytest-case-/, "为单个后端模块写出对应的 pytest 脚本。"],
+	[/^patch-backend-md-case-/, "按缺口计划补丁单个模块的 Markdown 用例。"],
+	[/^patch-backend-pytest-case-/, "按缺口计划补丁单个模块的 pytest 脚本。"],
+];
+
+function describeFromPattern(nodeId) {
+	const id = nodeId.toLowerCase();
+	for (const [pattern, text] of NODE_PURPOSE_BY_PREFIX) {
+		if (pattern.test(id)) return text;
+	}
+	if (id.endsWith("-map") || id.includes("-cases-map")) {
+		return "按清单并行展开子节点并汇总结果。";
+	}
+	if (id.includes("-gate-shell")) {
+		return "确定性门禁：核验上游结论，通过才放行后续节点。";
+	}
+	if (id.endsWith("-shell") && id.includes("verify")) {
+		return "跑冻结验证命令，留下可复查的通过/失败证据。";
+	}
+	if (id.endsWith("-shell") && (id.includes("report") || id.includes("manifest"))) {
+		return "把本轮证据整理成报告或清单，不改业务代码。";
+	}
+	if (id.endsWith("-shell")) {
+		return "运行确定性命令并留下证据，不靠模型自由发挥。";
+	}
+	if (id.includes("scout") && id.endsWith("-pi")) {
+		return "只读侦察相关代码或测试，整理给下游使用，不改文件。";
+	}
+	if (id.includes("repair") && id.endsWith("-pi")) {
+		return "在原写入范围内做有界修复，不重开需求。";
+	}
+	if (id.includes("implement") && id.endsWith("-pi")) {
+		return "在允许路径内改代码，完成本节点负责的实现。";
+	}
+	if ((id.includes("review") || id.includes("audit")) && id.endsWith("-pi")) {
+		return "只读审查上游产出，给出通过或需修订的结论。";
+	}
+	if (id.includes("plan") && id.endsWith("-pi")) {
+		return "制定或修订计划/契约，仍不直接改业务代码。";
+	}
+	if (id.includes("closeout") && id.endsWith("-pi")) {
+		return "汇总证据并写出交接说明。";
+	}
+	if (id.includes("contract") && id.endsWith("-pi")) {
+		return "把需求收成可执行契约：范围、验收与边界。";
+	}
+	if (id.endsWith("-pi")) {
+		return "由模型完成该步骤的分析或写入，受 writeSet 与验证约束。";
+	}
+	return "";
+}
+
+function describeFromExecutor(executor) {
+	if (executor === "shell") return "运行确定性命令并留下证据。";
+	if (executor === "pi") return "由模型执行该步骤，范围受节点契约约束。";
+	if (executor === "static") return "按冻结规则直接给出结果，不调用模型。";
+	return "";
+}
+
+/**
+ * @param {string | null | undefined} nodeId
+ * @param {{ executor?: string | null, label?: string | null }} [node]
+ */
+export function describeDagNodePurpose(nodeId, node = {}) {
+	const id = normalizeNodeId(nodeId);
+	if (!id) return "";
+	const exact = NODE_PURPOSE_BY_ID[id];
+	if (exact) return exact;
+	const patterned = describeFromPattern(id);
+	if (patterned) return patterned;
+	const label = typeof node.label === "string" ? node.label.trim() : "";
+	if (label && label !== id && label.toLowerCase() !== id.toLowerCase()) {
+		return label;
+	}
+	return describeFromExecutor(node.executor) || "";
+}
+
+export { NODE_PURPOSE_BY_ID };

package/dist/worker/observe/static/format.js

@@ -345,3 +345,63 @@ export function formatRepoPathDisplay(repoRoot) {
 		.replace(/^\/Users\/[^/]+/, "~")
 		.replace(/^\/home\/[^/]+/, "~");
 }
+
+/**
+ * If `text` is a complete JSON object or array, return pretty-printed JSON.
+ * Primitives, JSONL, truncated/invalid JSON, and markdown return null so
+ * callers can fall back to Markdown rendering.
+ */
+export function prettyJsonBlock(text) {
+	if (typeof text !== "string") return null;
+	const trimmed = text.trim();
+	if (trimmed.length < 2) return null;
+	const start = trimmed[0];
+	const end = trimmed[trimmed.length - 1];
+	if (!((start === "{" && end === "}") || (start === "[" && end === "]"))) {
+		return null;
+	}
+	try {
+		const value = JSON.parse(trimmed);
+		if (value === null || typeof value !== "object") return null;
+		return JSON.stringify(value, null, 2);
+	} catch {
+		return null;
+	}
+}
+
+/**
+ * Source fidelity ledger 安全摘要渲染（AC-009/AC-010/AC-HARD-004）：计数/状态/
+ * failure code + v2 binding 语义（binding=v2 + ledger sha256/inputDigest，仅真实
+ * DagSourceBindingV2 时展示；inputDigest ≠ 当前 expectedInputDigest 时标记 stale）+
+ * 有界排除理由（fragmentId + 截断 reason），绝不渲染未截断原文。输入即安全摘要对象。
+ */
+export function formatLedgerSummary(summary) {
+	if (!summary || summary.present !== true) {
+		return "无 source fidelity ledger（任务无引用或 ledger 缺失，不伪造计数）";
+	}
+	const lines = [
+		`fragments=${summary.fragmentCount ?? 0}`,
+		`canonical requirements=${summary.canonicalRequirementCount ?? 0}`,
+		`context-only=${summary.contextOnlyCount ?? 0}`,
+		`duplicate=${summary.duplicateCount ?? 0}`,
+		`unresolved=${summary.unresolvedCount ?? 0}`,
+		`conflict=${summary.conflictCount ?? 0}`,
+		`gate=${summary.gateStatus ?? "unknown"}`,
+	];
+	if (summary.bindingSchemaVersion === 2) {
+		lines.push(
+			`binding=v2（受管 ledger 绑定）${summary.stale ? " · STALE（输入漂移）" : ""}`,
+		);
+		if (summary.ledgerSha256) lines.push(`ledgerSha256=${summary.ledgerSha256}`);
+		if (summary.inputDigest) lines.push(`inputDigest=${summary.inputDigest}`);
+	}
+	if (summary.failureCode) lines.push(`failureCode=${summary.failureCode}`);
+	const exclusions = Array.isArray(summary.exclusions) ? summary.exclusions : [];
+	if (exclusions.length > 0) {
+		lines.push("排除理由（有界摘要）：");
+		for (const entry of exclusions.slice(0, 20)) {
+			lines.push(`- ${entry.fragmentId}: ${truncateText(entry.reason ?? "", 120)}`);
+		}
+	}
+	return lines.join("\n");
+}

package/dist/worker/observe/static/index.html

@@ -210,7 +210,7 @@
               >
                 刷新
               </button>
-              <a class="page-action-btn" href="/#/night">在操作台管理 →</a>
+              <a class="page-action-btn" href="/#/operate/night">在操作台管理 →</a>
             </div>
           </header>
           <section
@@ -352,6 +352,11 @@
             class="panel panel-table"
             aria-label="运行历史"
           ></section>
+          <section
+            id="task-ledger"
+            class="panel panel-table"
+            aria-label="Source fidelity ledger"
+          ></section>
         </section>
 
         <section data-view="feature" id="view-feature" class="view" hidden>