@tea-agent/loop-agent 0.39.0-next.27 → 0.39.0-next.28

package/dist/commands/inspect-next.js

@@ -0,0 +1,8 @@
+import { collectNextInfo, formatNextInfo, } from "../../scripts/next-info.mjs";
+export async function runInspectNext(repoRoot, args = []) {
+    const json = args.includes("--json");
+    const result = collectNextInfo({ cwd: repoRoot });
+    process.stdout.write(formatNextInfo(result, { json }));
+    if (!result.ok)
+        process.exitCode = result.exitCode || 1;
+}

package/dist/executors/dag-pi-executor.js

@@ -9,7 +9,7 @@ import { cleanupPlaywrightCliDefaultSession, createPlaywrightCliTool, PI_COMMAND
 import { dagCommandPolicyAllows, resolveDagCommandPolicy, } from "../workflows/dag/types.js";
 import { redactPromptForLog, truncateOutput, } from "../shared/output-truncation.js";
 import { GitStatusUnavailableError, pathsChangedDuringRun, readGitStatusPorcelain, recoverRootNulArtifact, snapshotGitStatusPathFingerprints, snapshotGitStatusPorcelain, validateShellWriteGuard, } from "./shell-write-guard.js";
-import { isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "../workflows/dag/retry-policy.js";
+import { isTargetTemplateTransientRetryNode, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "../workflows/dag/retry-policy.js";
 import { assessBackendTestMdPlanCompleteness, assessBackendTestMdWriterCompleteness, assessBackendTestPytestPlanCompleteness, assessBackendTestPytestWriterCompleteness, assessBackendTestShardChildCompleteness, backendTestWriterProgressRoleForTask, classifyBackendTestWriterCompletenessFailure, isBackendTestCompletenessRetryCandidate, isBackendTestMdPlanTask, isBackendTestPytestPlanTask, isBackendTestShardChildTask, writeBackendTestWriterProgressArtifacts, } from "../workflows/dag/backend-test-writer-completeness.js";
 import { resolveBackendTestLayout } from "../workflows/dag/backend-test-layout.js";
 import { redactSecrets, truncateUtf8Preview } from "../shared/preview.js";
@@ -942,22 +942,31 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
     if (meta.writeGuardAttribution === "best-effort") {
         stderrParts.push("write guard note: concurrent rank writers use best-effort per-node attribution; keep same-rank writeSet entries disjoint");
     }
-    // Pure provider stall/timeout with zero workspace side effects is eligible
-    // for a single writer transport retry (implement-pi flake resilience).
-    // Partial writes, tool calls, or write-guard failures keep raw `timeout`.
-    const writerCleanTimeout = !mapped.ok &&
-        mapped.failureCategory === "timeout" &&
-        writeGuardOk &&
+    const rawFailureCategory = mapped.failureCategory;
+    const writeToolCallCount = readWriterThinkingExhaustionEvidence(result).writeToolCallCount;
+    const zeroSideEffects = writeGuardOk &&
         !completenessFailure &&
         !writerThinkingExhausted &&
-        isWriterTransportRetryCandidate(input.task) &&
+        !writerOutcomeViolation &&
         changeManifestChangedFiles !== undefined &&
         changeManifestChangedFiles.length === 0 &&
-        readWriterThinkingExhaustionEvidence(result).writeToolCallCount === 0;
+        writeToolCallCount === 0;
+    const targetCleanTransport = !mapped.ok &&
+        isTargetTemplateTransientRetryNode(input.task) &&
+        rawFailureCategory !== undefined &&
+        ["timeout", "network", "rate-limit", "unavailable"].includes(rawFailureCategory) &&
+        zeroSideEffects;
+    const frontendCleanTimeout = !mapped.ok &&
+        rawFailureCategory === "timeout" &&
+        isWriterTransportRetryCandidate(input.task) &&
+        !isTargetTemplateTransientRetryNode(input.task) &&
+        zeroSideEffects;
+    const writerCleanTimeout = targetCleanTransport || frontendCleanTimeout;
     return {
         ...mapped,
         ok: false,
         stderr: stderrParts.filter(Boolean).join("\n\n"),
+        ...(rawFailureCategory ? { rawFailureCategory } : {}),
         failureCategory: mapped.ok
             ? writeGuardOk
                 ? completenessFailure

package/dist/executors/shell-executor.js

@@ -123,6 +123,39 @@ function shouldReuseSuccessfulShellCommands(shell) {
 const DEFAULT_SHELL_TIMEOUT_MS = 300_000;
 const SUMMARY_STDOUT_MAX = 4_000;
 const SUMMARY_STDERR_MAX = 2_000;
+const TEST_TIMEOUT_CLASSIFY_MAX_CHARS = 8_000;
+const TEST_TIMEOUT_MARKERS = [
+    /Test timed out in \d+ms/i,
+    /Timeout of \d+ms exceeded/i,
+];
+const DETERMINISTIC_NON_TIMEOUT_FAILURE_MARKERS = [
+    /AssertionError/i,
+    /expected:?\s/i,
+    /received:?\s/i,
+    /Snapshot /i,
+    /toMatchSnapshot/i,
+    /SyntaxError/i,
+    /TS\d{4}/,
+    /error TS/i,
+    /eslint/i,
+    /compile error/i,
+    /Failed to compile/i,
+];
+function isIdentifiedTestCommand(command) {
+    return /(?:^|[\s"'`])(?:npx\s+)?vitest(?:\s|$)|(?:^|[\s"'`])npm(?:\.cmd)?\s+test(?:\s|$)|(?:^|[\s"'`])pnpm(?:\.cmd)?\s+test(?:\s|$)|(?:^|[\s"'`])yarn(?:\.cmd)?\s+test(?:\s|$)/i.test(command);
+}
+function classifyShellCommandFailure(input) {
+    if (input.processCategory !== "nonzero-exit")
+        return input.processCategory;
+    if (!isIdentifiedTestCommand(input.command))
+        return "nonzero-exit";
+    const sample = `${input.stdout}\n${input.stderr}`.slice(0, TEST_TIMEOUT_CLASSIFY_MAX_CHARS);
+    const hasTimeoutMarker = TEST_TIMEOUT_MARKERS.some((marker) => marker.test(sample));
+    if (!hasTimeoutMarker)
+        return "nonzero-exit";
+    const mixedDeterministicFailure = DETERMINISTIC_NON_TIMEOUT_FAILURE_MARKERS.some((marker) => marker.test(sample));
+    return mixedDeterministicFailure ? "nonzero-exit" : "test-timeout";
+}
 const NODE_STDOUT_MAX = 12_000;
 const NODE_STDERR_MAX = 8_000;
 const MAX_BUFFERED_OUTPUT_BYTES = 64 * 1024;
@@ -329,16 +362,21 @@ export async function executeShellCommand(input) {
             });
         });
         child.on("close", (code) => {
-            let failureCategory = "nonzero-exit";
+            let processCategory = "nonzero-exit";
             if (timedOut) {
-                failureCategory = "timeout";
+                processCategory = "timeout";
             }
             else if (code === 0) {
-                failureCategory = "success";
+                processCategory = "success";
             }
             finish({
                 exitCode: code,
-                failureCategory,
+                failureCategory: classifyShellCommandFailure({
+                    command: input.command,
+                    processCategory,
+                    stdout: formatBoundedOutput(stdout),
+                    stderr: formatBoundedOutput(stderr),
+                }),
                 ok: code === 0 && !timedOut,
             });
         });
@@ -2878,6 +2916,7 @@ export async function executeDagShellNode(input, meta) {
     const cwd = resolveShellCwd(input.cwd, shell.cwd);
     const timeoutMs = shell.timeoutMs ?? DEFAULT_SHELL_TIMEOUT_MS;
     const failFast = shell.failFast !== false;
+    const attemptNumber = input.attempt ?? 1;
     const results = [];
     const executedCommandKeys = new Set();
     let beforeStatus;
@@ -2973,8 +3012,8 @@ export async function executeDagShellNode(input, meta) {
             dagRunMeta: { runDir: meta.runDir, runId: meta.runId },
             reportActivity: input.reportActivity,
             outputArtifacts: {
-                stdoutPath: path.join(meta.runDir, input.task.id, "commands", `${commandNumber}.stdout.txt`),
-                stderrPath: path.join(meta.runDir, input.task.id, "commands", `${commandNumber}.stderr.txt`),
+                stdoutPath: path.join(meta.runDir, input.task.id, `attempt-${attemptNumber}`, "commands", `${commandNumber}.stdout.txt`),
+                stderrPath: path.join(meta.runDir, input.task.id, `attempt-${attemptNumber}`, "commands", `${commandNumber}.stderr.txt`),
             },
         });
         results.push(result);
@@ -3033,6 +3072,7 @@ export async function executeDagShellNode(input, meta) {
         schemaVersion: 1,
         runId: meta.runId,
         nodeId: input.task.id,
+        attempt: attemptNumber,
         workspaceFingerprint: workspaceFingerprint ?? null,
         failFast,
         commands: results.map((result) => ({
@@ -3051,6 +3091,7 @@ export async function executeDagShellNode(input, meta) {
             subchecks: parseCheckRepoSubcheckDurations(result),
         })),
     };
+    await writeDagNodeJsonArtifact(meta.runDir, input.task.id, path.posix.join(`attempt-${attemptNumber}`, "shell-command-receipt.json"), receipt);
     await writeDagNodeJsonArtifact(meta.runDir, input.task.id, "shell-command-receipt.json", receipt);
     const summaryMarkdown = buildShellResultSummaryMarkdown({
         nodeId: input.task.id,
@@ -3102,6 +3143,9 @@ export async function executeDagShellNode(input, meta) {
         stdout: `${recordPrefix}${reuseNote}${aggregate.stdout}`,
         stderr: stderrParts.filter(Boolean).join("\n\n"),
         failureCategory,
+        ...(firstFailure?.failureCategory
+            ? { rawFailureCategory: firstFailure.failureCategory }
+            : {}),
         durationMs: Date.now() - started,
         // extra field consumed by node-execution if supported; also embedded in stdout marker
         ...{ commandResults },

package/dist/shared/operator/capabilities.js

@@ -1822,6 +1822,13 @@ export const OPERATOR_COMMAND_COVERAGE = Object.freeze([
         source: "loop-agent",
         exclusionReason: "Not exposed to Operator Chat in M5.",
     },
+    {
+        command: "loop-agent init model-catalog",
+        coverage: "excluded",
+        action: null,
+        source: "loop-agent",
+        exclusionReason: "Not exposed to Operator Chat in M5.",
+    },
     {
         command: "loop-agent init doctor",
         coverage: "excluded",

package/dist/shared/update/console-notifier.js

@@ -0,0 +1,100 @@
+import { createInterface } from "node:readline/promises";
+import semver from "semver";
+import { acquireUpdateLock, readUpdateState, updateLockPath, updateStatePath, writeUpdateState, } from "./state.js";
+export async function runConsoleDailyUpdateCheck(options) {
+    void options.writeStdout;
+    void options.packageRoot;
+    void options.cwd;
+    const writeStderr = options.writeStderr ?? ((chunk) => process.stderr.write(chunk));
+    const now = options.now ?? (() => new Date());
+    try {
+        if (!canPromptInteractively(options))
+            return;
+        const statePath = updateStatePath(options.homeDir);
+        const today = formatLocalDate(now());
+        const existing = await readUpdateState(statePath);
+        if (existing.lastPromptedLocalDate === today)
+            return;
+        const release = await acquireUpdateLock(updateLockPath(options.homeDir), {
+            now,
+        });
+        if (!release)
+            return;
+        try {
+            const state = await readUpdateState(statePath);
+            if (state.lastPromptedLocalDate === today)
+                return;
+            const check = await options.client.latestVersionCheck();
+            if (!check.ok)
+                return;
+            if (!semver.gt(check.version, options.currentVersion))
+                return;
+            const parsedLatest = semver.parse(check.version);
+            if (!parsedLatest || parsedLatest.prerelease.length > 0)
+                return;
+            await markPromptedToday(statePath, state, today);
+            const answer = await ask(options, `loop-agent 有新版本：${options.currentVersion} → ${check.version}\n现在更新到 ${check.version}？[y/N] `);
+            if (!isYes(answer))
+                return;
+            const proof = await options.client.canAutoInstall();
+            if (!proof.ok) {
+                writeStderr(`当前 loop-agent 不是由此 npm 的正式全局安装管理，无法自动升级。\n请运行：npm install -g @tea-agent/loop-agent@${check.version}\n`);
+                return;
+            }
+            const install = await options.client.installExact(check.version);
+            if (!install.ok) {
+                writeStderr(`loop-agent 更新失败：${install.reason}\n`);
+                return;
+            }
+            const verified = await options.client.verifyInstalled(check.version);
+            if (!verified.ok) {
+                writeStderr(`loop-agent 已尝试安装，但验证失败：${verified.reason}\n`);
+                return;
+            }
+            writeStderr(`loop-agent 已更新到 ${check.version}；新版本将在下一次命令调用时完全生效。\n`);
+        }
+        finally {
+            await release().catch(() => undefined);
+        }
+    }
+    catch (error) {
+        writeStderr(`loop-agent 更新检查已跳过：${error instanceof Error ? error.message : String(error)}\n`);
+    }
+}
+function canPromptInteractively(options) {
+    if (!options.stdinIsTTY || !options.stderrIsTTY)
+        return false;
+    if (options.env.CI)
+        return false;
+    if (options.env.LOOP_AGENT_DISABLE_UPDATE_CHECK === "1")
+        return false;
+    return true;
+}
+function formatLocalDate(date) {
+    const year = date.getFullYear();
+    const month = String(date.getMonth() + 1).padStart(2, "0");
+    const day = String(date.getDate()).padStart(2, "0");
+    return `${year}-${month}-${day}`;
+}
+async function markPromptedToday(statePath, state, today) {
+    await writeUpdateState(statePath, {
+        ...state,
+        lastPromptedLocalDate: today,
+    });
+}
+async function ask(options, prompt) {
+    if (options.readLine) {
+        options.writeStderr?.(prompt);
+        return options.readLine(prompt);
+    }
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    try {
+        return await rl.question(prompt);
+    }
+    finally {
+        rl.close();
+    }
+}
+function isYes(answer) {
+    return /^(y|yes)$/i.test(answer.trim());
+}

package/dist/{cli → shared}/update/npm-client.js

@@ -3,25 +3,48 @@ import { lstat, readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import semver from "semver";
 const PACKAGE_NAME = "@tea-agent/loop-agent";
+export const DEFAULT_NPM_QUERY_TIMEOUT_MS = 15_000;
 export function createNpmUpdateClient(options) {
     const npmCommand = options.npmCommand ?? "npm";
     const loopAgentCommand = options.loopAgentCommand ?? "loop-agent";
     const runner = options.runner ?? runCommand;
-    const timeoutMs = options.timeoutMs ?? 1500;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_NPM_QUERY_TIMEOUT_MS;
+    const cwd = options.cwd;
     const env = options.env;
+    const latestVersionCheck = async () => {
+        let result;
+        try {
+            result = await runner(npmCommand, ["view", PACKAGE_NAME, "dist-tags.latest", "--json"], { timeoutMs, cwd, env });
+        }
+        catch {
+            return { ok: false, reason: "spawn-failure" };
+        }
+        if (result.timedOut)
+            return { ok: false, reason: "timeout" };
+        if (result.exitCode === null) {
+            return { ok: false, reason: "spawn-failure" };
+        }
+        if (result.exitCode !== 0) {
+            return { ok: false, reason: "command-failed" };
+        }
+        const version = parseNpmViewLatest(result.stdout);
+        return version
+            ? { ok: true, version }
+            : { ok: false, reason: "invalid-response" };
+    };
     return {
         async latestVersion() {
-            const result = await runner(npmCommand, ["view", PACKAGE_NAME, "dist-tags.latest", "--json"], { timeoutMs, env });
-            if (result.exitCode !== 0 || result.timedOut)
-                return undefined;
-            return parseNpmViewLatest(result.stdout);
+            const result = await latestVersionCheck();
+            return result.ok ? result.version : undefined;
         },
+        latestVersionCheck,
         async canAutoInstall() {
             return proveGlobalNpmInstall({
                 currentVersion: options.currentVersion,
                 packageRoot: options.packageRoot,
                 npmCommand,
                 runner,
+                cwd,
                 env,
                 timeoutMs,
             });
@@ -29,17 +52,25 @@ export function createNpmUpdateClient(options) {
         async installExact(version) {
             if (!isStrictRelease(version))
                 return { ok: false, reason: "invalid-version" };
-            const result = await runner(npmCommand, buildExactInstallArgs(version), { timeoutMs: Math.max(timeoutMs, 120000), env });
+            const result = await runner(npmCommand, buildExactInstallArgs(version), {
+                timeoutMs: Math.max(timeoutMs, 120000),
+                cwd,
+                env,
+            });
             if (result.exitCode !== 0 || result.timedOut)
                 return { ok: false, reason: "install-failed" };
             return { ok: true };
         },
         async verifyInstalled(version) {
-            const list = await runner(npmCommand, ["list", "-g", PACKAGE_NAME, "--depth=0", "--json"], { timeoutMs, env });
+            const list = await runner(npmCommand, ["list", "-g", PACKAGE_NAME, "--depth=0", "--json"], { timeoutMs, cwd, env });
             if (list.exitCode !== 0 || !verifyNpmListVersion(list.stdout, version)) {
                 return { ok: false, reason: "npm-list-version-mismatch" };
             }
-            const pathVersion = await runner(loopAgentCommand, ["--version"], { timeoutMs, env });
+            const pathVersion = await runner(loopAgentCommand, ["--version"], {
+                timeoutMs,
+                cwd,
+                env,
+            });
             if (pathVersion.exitCode !== 0 || !verifyPathVersion(pathVersion.stdout, version)) {
                 return { ok: false, reason: "path-version-mismatch" };
             }
@@ -80,6 +111,7 @@ export function verifyPathVersion(stdout, expectedVersion) {
 async function proveGlobalNpmInstall(options) {
     const root = await options.runner(options.npmCommand, ["root", "-g"], {
         timeoutMs: options.timeoutMs,
+        cwd: options.cwd,
         env: options.env,
     });
     if (root.exitCode !== 0 || root.timedOut)
@@ -113,6 +145,7 @@ function isStrictRelease(version) {
 async function runCommand(command, args, options) {
     return new Promise((resolve) => {
         const child = spawn(command, [...args], {
+            cwd: options.cwd,
             env: options.env ? { ...process.env, ...options.env } : process.env,
             stdio: ["ignore", "pipe", "pipe"],
             shell: false,

package/dist/{cli → shared}/update/state.js

@@ -1,4 +1,4 @@
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 export function updateStatePath(homeDir) {
     return path.join(homeDir, ".loop-agent", "update-state.json");
@@ -18,6 +18,7 @@ export async function readUpdateState(statePath) {
             latestVersion: stringOrUndefined(parsed.latestVersion),
             dismissedVersion: stringOrUndefined(parsed.dismissedVersion),
             retryAfter: stringOrUndefined(parsed.retryAfter),
+            lastPromptedLocalDate: stringOrUndefined(parsed.lastPromptedLocalDate),
         };
     }
     catch {
@@ -36,28 +37,55 @@ export async function acquireUpdateLock(lockPath, options = {}) {
     await mkdir(path.dirname(lockPath), { recursive: true });
     try {
         await mkdir(lockPath);
+        return await claimLock(lockPath, now);
+    }
+    catch {
+        if (await isFreshLock(lockPath, now, staleMs))
+            return undefined;
+        try {
+            await rm(lockPath, { recursive: true, force: true });
+            await mkdir(lockPath);
+            return await claimLock(lockPath, now);
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+async function claimLock(lockPath, now) {
+    try {
         await writeFile(path.join(lockPath, "owner.json"), JSON.stringify({ pid: process.pid, at: now().toISOString() }), "utf-8");
         return async () => {
             await rm(lockPath, { recursive: true, force: true });
         };
     }
+    catch {
+        await rm(lockPath, { recursive: true, force: true }).catch(() => undefined);
+        return undefined;
+    }
+}
+async function isFreshLock(lockPath, now, staleMs) {
+    try {
+        const ownerRaw = await readFile(path.join(lockPath, "owner.json"), "utf-8");
+        const owner = JSON.parse(ownerRaw);
+        if (typeof owner.at !== "string")
+            return false;
+        const at = Date.parse(owner.at);
+        if (!Number.isFinite(at))
+            return false;
+        return now().getTime() - at <= staleMs;
+    }
     catch {
         try {
-            const ownerRaw = await readFile(path.join(lockPath, "owner.json"), "utf-8");
-            const owner = JSON.parse(ownerRaw);
-            if (owner.at && now().getTime() - Date.parse(owner.at) > staleMs) {
-                await rm(lockPath, { recursive: true, force: true });
-                await mkdir(lockPath);
-                await writeFile(path.join(lockPath, "owner.json"), JSON.stringify({ pid: process.pid, at: now().toISOString() }), "utf-8");
-                return async () => {
-                    await rm(lockPath, { recursive: true, force: true });
-                };
-            }
+            const info = await stat(lockPath);
+            const mtime = Number.isFinite(info.mtimeMs)
+                ? info.mtimeMs
+                : info.mtime.getTime();
+            return now().getTime() - mtime <= staleMs;
         }
         catch {
-            return undefined;
+            return false;
         }
-        return undefined;
     }
 }
 function emptyState() {

package/dist/worker/cli.js

@@ -1,8 +1,11 @@
 #!/usr/bin/env node
 import { readFile } from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
+import { createNpmUpdateClient } from "../shared/update/npm-client.js";
+import { runConsoleDailyUpdateCheck } from "../shared/update/console-notifier.js";
 import { readPackageVersion } from "../shared/package-metadata.js";
 import YAML from "yaml";
 import { LoopAgentClient } from "./loop-agent/loop-agent-client.js";
@@ -838,10 +841,33 @@ function parseOptionalTimeoutMs(raw) {
     return value;
 }
 /** Console HTTP entry for bare `agent-worker console` (listen first, then optional browser open). */
-async function runConsoleServe(options) {
+export async function runConsoleServe(options) {
     const { createConsoleServer } = await import("./console/server.js");
     const { maybeOpenConsoleBrowser } = await import("./console/open-browser.js");
     try {
+        try {
+            const packageRoot = path.dirname(path.dirname(path.dirname(fileURLToPath(import.meta.url))));
+            const currentVersion = readPackageVersion(packageRoot) ?? "0.0.0";
+            await runConsoleDailyUpdateCheck({
+                currentVersion,
+                packageRoot,
+                homeDir: os.homedir(),
+                cwd: options.repoRoot,
+                env: process.env,
+                stdinIsTTY: process.stdin.isTTY === true,
+                stderrIsTTY: process.stderr.isTTY === true,
+                client: createNpmUpdateClient({
+                    currentVersion,
+                    packageRoot,
+                    cwd: options.repoRoot,
+                    env: process.env,
+                }),
+            });
+        }
+        catch (error) {
+            const detail = error instanceof Error ? error.message : String(error);
+            process.stderr.write(`loop-agent 更新检查已跳过：${detail}\n`);
+        }
         const server = await createConsoleServer({
             repoRoot: options.repoRoot,
             host: options.host,
@@ -857,6 +883,10 @@ async function runConsoleServe(options) {
             noOpen: options.noOpen === true,
             serverUrl: server.url,
         });
+        if (options.holdUntilSignal === false) {
+            await server.close();
+            return;
+        }
         await new Promise((resolve) => {
             const shutdown = () => resolve();
             process.once("SIGINT", shutdown);

package/dist/worker/console/chat/routes.js

@@ -270,6 +270,7 @@ export function parseChatImages(value) {
 }
 function gateMutation(req, deps) {
     const failure = evaluateMutationGate(req, {
+        cookieName: deps.bootToken.cookieName,
         bootToken: deps.bootToken.value,
         confirmationToken: deps.bootToken.confirmationToken,
         consoleOrigin: deps.getConsoleOrigin(),

package/dist/worker/console/operator-user-error.js

@@ -3,7 +3,7 @@ import { rewriteRecoveryOperatorError } from "./recovery-error-copy.js";
 const MUTATION_GATE_COPY = [
     {
         pattern: /invalid (boot capability|confirmation header) token/i,
-        copy: "页面已过期（控制台已重启），请刷新页面（F5）后重试。",
+        copy: "页面凭证已失效（控制台可能已重启），请刷新页面（F5）后重试。",
     },
     {
         pattern: /mutation requires boot capability cookie|mutation requires confirmation header token/i,

package/dist/worker/console/routes.js

@@ -116,6 +116,7 @@ async function handleRecoveryCandidates(_req, res, ctx, url) {
 }
 async function handleSessionPing(req, res, ctx) {
     const failure = evaluateMutationGate(req, {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
@@ -142,6 +143,7 @@ async function handleCreateOperation(req, res, ctx) {
         return;
     }
     const failure = evaluateMutationGate(req, {
+        cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
@@ -428,6 +430,7 @@ export async function handleConsoleOperatorRequest(req, res, ctx) {
     }
     if (isMutationMethod(method)) {
         const failure = evaluateMutationGate(req, {
+            cookieName: ctx.bootToken.cookieName,
             bootToken: ctx.bootToken.value,
             confirmationToken: ctx.bootToken.confirmationToken,
             consoleOrigin: ctx.getConsoleOrigin(),

package/dist/worker/console/security.js

@@ -1,19 +1,67 @@
-import { randomBytes, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { isLoopbackHost } from "./loopback.js";
+/** Prefix for instance-scoped Cookie names; not a lookup name. */
 export const BOOT_CAPABILITY_COOKIE = "loop_console_capability";
 /** Custom mutation confirmation header (design §9). JS-readable; not the HttpOnly boot cookie. */
 export const CONFIRMATION_TOKEN_HEADER = "x-loop-console-confirmation";
+function normalizeInstanceScope(scope) {
+    const repoFingerprint = scope.repoFingerprint.trim();
+    if (!repoFingerprint) {
+        throw new Error("console instance scope requires a non-empty repoFingerprint");
+    }
+    const bindHost = scope.bindHost.trim();
+    if (!bindHost) {
+        throw new Error("console instance scope requires a non-empty bindHost");
+    }
+    if (!Number.isInteger(scope.configuredPort) || scope.configuredPort < 0) {
+        throw new Error(`console instance scope configuredPort must be an integer >= 0, got ${String(scope.configuredPort)}`);
+    }
+    const instanceNonce = scope.instanceNonce?.trim();
+    if (scope.configuredPort === 0) {
+        if (!instanceNonce) {
+            throw new Error("console instance scope requires a non-empty instanceNonce when configuredPort is 0");
+        }
+        return {
+            repoFingerprint,
+            bindHost,
+            configuredPort: 0,
+            instanceNonce,
+        };
+    }
+    return {
+        repoFingerprint,
+        bindHost,
+        configuredPort: scope.configuredPort,
+    };
+}
+/** Deterministic Cookie name for one Console instance; never includes repo path or token. */
+export function deriveBootCapabilityCookieName(scope) {
+    const normalized = normalizeInstanceScope(scope);
+    const digest = createHash("sha256")
+        .update("loop-console-capability-v1\0", "utf8")
+        .update(normalized.repoFingerprint, "utf8")
+        .update("\0", "utf8")
+        .update(normalized.bindHost, "utf8")
+        .update("\0", "utf8")
+        .update(String(normalized.configuredPort), "utf8")
+        .update("\0", "utf8")
+        .update(normalized.instanceNonce ?? "", "utf8")
+        .digest("hex")
+        .slice(0, 32);
+    return `${BOOT_CAPABILITY_COOKIE}_${digest}`;
+}
 /** Issue per-process unguessable boot capability + confirmation tokens. */
-export function issueBootCapabilityToken() {
+export function issueBootCapabilityToken(scope) {
+    const cookieName = deriveBootCapabilityCookieName(scope);
     const value = randomBytes(32).toString("base64url");
     const confirmationToken = randomBytes(32).toString("base64url");
     const setCookieHeader = [
-        `${BOOT_CAPABILITY_COOKIE}=${value}`,
+        `${cookieName}=${value}`,
         "HttpOnly",
         "SameSite=Strict",
         "Path=/",
     ].join("; ");
-    return { value, setCookieHeader, confirmationToken };
+    return { cookieName, value, setCookieHeader, confirmationToken };
 }
 /** Inject confirmation token into HTML so the SPA can send the mutation header. */
 export function injectConfirmationTokenScript(html, confirmationToken) {
@@ -74,7 +122,7 @@ function loopbackOriginMatches(origin, consoleOrigin) {
     return originKey !== null && consoleKey !== null && originKey === consoleKey;
 }
 export function evaluateMutationGate(req, ctx) {
-    const cookieToken = parseCookieHeader(req.headers.cookie, BOOT_CAPABILITY_COOKIE);
+    const cookieToken = parseCookieHeader(req.headers.cookie, ctx.cookieName);
     if (!cookieToken) {
         return {
             status: 403,