@tea-agent/loop-agent 0.39.0-next.29 → 0.39.0-next.30

package/AGENTS.md

@@ -41,7 +41,7 @@
 4. 涉及测试纪律/验证声明/调试时继续读：`docs/governance/harness-methodology-*.md`。
 5. 查看最近提交、相关 plan/progress/report；`git status --short --branch`；跑最小基线验证。
 6. 后端/接口/pytest → `taskKind: "backend-test"`（不是 `--profile`）；知识回写 `knowledge-sync`；图谱开荒 `knowledge-graph-bootstrap`。`--profile` 仅 `auto|minimal|standard|reviewed|supervised`。
-7. 看板/observe → `agent-worker console`（默认 repo=当前目录、port=8790；listen 成功后默认打开系统浏览器，`--no-open` 禁止）（`/inspect/` 只读）；`observe serve` 已下线（`OBSERVE_SERVE_REMOVED` + exit 2）；`observe snapshot` 仍可用。
+7. 看板/observe → `agent-worker console`（默认 repo=当前目录、port=8790；listen 成功后默认打开系统浏览器，`--no-open` 禁止）（`/inspect/` 只读；唯一实验例外：`HARNESS_DAG_RERUN_PROMPT_OVERRIDE=1` 时节点 inspector 出现「提示词重启」tab 并注入 mutation token，默认关闭时零 token 零 tab）；`observe serve` 已下线（`OBSERVE_SERVE_REMOVED` + exit 2）；`observe snapshot` 仍可用。
 8. 分支合并 → 先读 `docs/operations/branch-merge-guideline.md`。
 9. 涉及版本发布、npm 渠道、release 分支、GitHub Actions 发布链或 dist-tag → 先读 `docs/operations/version-and-release-management.md`。
 

package/CHANGELOG.md

@@ -18,6 +18,8 @@
 
 ### 新增
 
+- Operator Chat 时间线左缘新增「用户消息锚点栏」：每个用户输入一枚横向小条（12×3px 微圆角），紧凑等距排列并在时间线高度内垂直居中；条数超出栏高时相邻锚点自动聚合为稍宽的聚合条（悬停展开「N 条聚合输入」逐条列表，时间 + 单行预览，逐条点击定位）。悬停时小条向对话一侧平滑伸长（12→18px）并变橙，浮窗右侧弹出（白底圆角，正文最多 3 行、超出省略号，附序号与时间）；单击平滑滚动定位到对应消息（精确停靠在视口顶部偏移 8px）；覆盖视口顶部的锚点保持高亮。空会话自动隐藏；历史分页/流式更新/窗口缩放时自动重算（rAF 节流）。
+- 实验能力「编辑失败节点提示词后从节点重跑」（默认关闭）：内部开关 `HARNESS_DAG_RERUN_PROMPT_OVERRIDE=1` 启用后，`dag rerun` 支持 `--prompt-override <nodeId>@<file>`（全文替换）与 `--prompt-override-append <nodeId>@<file>`（追加指令：保留冻结原提示词，末尾追加 `<operator_addendum>` 块）。仅限 ERROR 且位于 reset closure 内的节点；mode + base/最终 prompt sha256 计入 planHash（execute 漂移即 `PLAN_DRIFT`），父 run spec 冻结、provenance（含 mode）落 `continuation.promptOverrides`。Console 新增 `dagPromptOverrideConfig` 开关探测 action，`dagRerunPlan`/`dagRerun` 接受 `promptOverrides`（`{nodeId, prompt, mode?}`）；Inspect DAG 节点 inspector 新增「提示词重启」tab——默认「追加指令」模式（只读底稿 + 追加编辑器），可切换「全文替换（高级）」，预检通过展示执行估算，提交后续跑并跳转新 run，全程不离开图页；开关开启时 `/inspect` 只注入 **scoped** 变体凭据（独立 cookie + `__INSPECT_MUTATION_TOKEN__`，与 Console 通用 token 互不可重放），mutations 路由对 inspect 凭据仅放行 `dagRerunPlan`/`dagRerun`（其余 action 403 `ACTION_NOT_IN_INSPECT_SCOPE`），Inspect 不获得通用写能力；开关关闭时不注入任何 token、tab 不出现，检视面保持严格只读。
 - 观察面 DAG Inspector 节点详情适配 Pi 扩展：执行器输入摘要展示节点声明的 `piExtensions` 短 id；新增「Pi 扩展运行事实」展示 `pi-extensions.json` 的 resolved（包名@版本）与 missing 降级原因（缺包降级不再静默）；产物未生成/损坏时降级提示不阻断接口，绝对路径不外泄。
 - 后端实现 DAG（standard / review-gated / supervised）的 Pi 节点支持按桶显式加载本机 Pi 导航扩展：读侧节点（除 closeout）加载 `pi-codegraph` + `pi-lens`，写侧节点只加载 `pi-codegraph`（pi-lens 的 `ast_grep_replace` 可绕过 writeSet，不加载）；前端/测试模板与省略字段节点保持扩展全关。扩展发现始终关闭，只经白名单解析 `~/.pi/agent` 与项目 `.pi` settings 的已装包（缺包降级不失败，产物 `pi-extensions.json` 记录 requested/resolved/missing）；session 后 pin 工具面剔 builtin 同名、deny 面与写工具，writer 的 `edit`/`write` 仍为 policy-wrapped；`.codegraph/**` index 同步不再计入 write-guard 越界。
 - Pi SDK 终态 session-events JSONL 顶层增加可选 `finish_reason`：仅当 `message_end` / `turn_end` / `assistant_message` 明确携带非空终止原因时由序列化层提升，不伪造默认值，也不回流 `stopReason` 诊断。

package/README.md

@@ -116,7 +116,7 @@ loop-agent dag report --run-id <run-id>
 | --- | --- | --- |
 | 受治理 CLI | `loop-agent …` / `agent-worker …` | 权威写入与诊断 |
 | Loop Operator Console | `agent-worker console` | Official 本地控制面（默认 repo=当前目录、`127.0.0.1:8790`，含 Operate 与 Inspect） |
-| Inspect（只读） | `agent-worker console` → `/inspect/`；`observe snapshot` | 统一 Console 内只读检视；`observe serve` 已下线（REMOVED / exit 2） |
+| Inspect（只读） | `agent-worker console` → `/inspect/`；`observe snapshot` | 统一 Console 内只读检视；`observe serve` 已下线（REMOVED / exit 2）。实验例外：`HARNESS_DAG_RERUN_PROMPT_OVERRIDE=1` 时节点 inspector 增加失败节点「提示词重启」tab（默认关闭，不注入任何 mutation token） |
 
 ```bash
 # 终端 A：Console（任务/运行操作面；canonical mutation 只经 sibling loop-agent）

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
   "version": "0.38.3",
-  "gitSha": "a757f2e56597122ab0be09e7524038ad14a576bb",
-  "builtAt": "2026-08-22T10:37:15.456Z"
+  "gitSha": "07a0a9bcee0b9aa29cafc085485f3aed7ae03cec",
+  "builtAt": "2026-08-22T12:04:10.935Z"
 }

package/dist/commands/dag-rerun.js

@@ -1,3 +1,5 @@
+import { readFile } from "node:fs/promises";
+import { isDagRerunPromptOverrideEnabled } from "../shared/dag-prompt-override.js";
 import { executeDagRerun, planDagRerun, } from "../workflows/dag/rerun-run.js";
 export function parseDagRerunArgs(args) {
     if (args.length === 0) {
@@ -9,6 +11,8 @@ export function parseDagRerunArgs(args) {
     let planHash;
     let requestId;
     let reason;
+    const promptOverrideSpecs = [];
+    const promptOverrideAppendSpecs = [];
     for (let index = 0; index < args.length; index += 1) {
         const arg = args[index];
         if (arg === "--run-id")
@@ -33,6 +37,14 @@ export function parseDagRerunArgs(args) {
             reason = args[++index];
         else if (arg.startsWith("--reason="))
             reason = arg.slice("--reason=".length);
+        else if (arg === "--prompt-override")
+            promptOverrideSpecs.push(args[++index] ?? "");
+        else if (arg.startsWith("--prompt-override="))
+            promptOverrideSpecs.push(arg.slice("--prompt-override=".length));
+        else if (arg === "--prompt-override-append")
+            promptOverrideAppendSpecs.push(args[++index] ?? "");
+        else if (arg.startsWith("--prompt-override-append="))
+            promptOverrideAppendSpecs.push(arg.slice("--prompt-override-append=".length));
         else if (arg === "--json")
             continue;
         else if (arg.startsWith("-"))
@@ -50,7 +62,13 @@ export function parseDagRerunArgs(args) {
         if (planHash || requestId || reason) {
             throw new Error("dag rerun --plan cannot be combined with execute flags");
         }
-        return { parentRunId, selectedNodeId, planOnly: true };
+        return {
+            parentRunId,
+            selectedNodeId,
+            planOnly: true,
+            promptOverrideSpecs,
+            promptOverrideAppendSpecs,
+        };
     }
     if (!planHash?.trim()) {
         throw new Error("dag rerun execute requires --plan-hash <hash>");
@@ -68,15 +86,50 @@ export function parseDagRerunArgs(args) {
         planHash: planHash.trim(),
         requestId: requestId.trim(),
         reason: reason.trim(),
+        promptOverrideSpecs,
+        promptOverrideAppendSpecs,
     };
 }
+async function loadPromptOverrides(specs, mode) {
+    const overrides = [];
+    for (const spec of specs) {
+        const separator = spec.indexOf("@");
+        if (separator <= 0 || separator >= spec.length - 1) {
+            throw new Error(`dag rerun --prompt-override${mode === "append" ? "-append" : ""} expects <nodeId>@<filePath>, got: ${spec}`);
+        }
+        const nodeId = spec.slice(0, separator);
+        const filePath = spec.slice(separator + 1);
+        let prompt;
+        try {
+            prompt = await readFile(filePath, "utf-8");
+        }
+        catch (error) {
+            throw new Error(`cannot read prompt override file for node ${nodeId} (${filePath}): ${error instanceof Error ? error.message : String(error)}`);
+        }
+        overrides.push(mode === "append" ? { nodeId, prompt, mode } : { nodeId, prompt });
+    }
+    return overrides;
+}
 export async function runDagRerun(repoRoot, rawArgs) {
     const parsed = parseDagRerunArgs(rawArgs);
+    let promptOverrides;
+    const hasOverrides = parsed.promptOverrideSpecs.length > 0 ||
+        parsed.promptOverrideAppendSpecs.length > 0;
+    if (hasOverrides) {
+        if (!isDagRerunPromptOverrideEnabled()) {
+            throw new Error("prompt override rerun is disabled; set HARNESS_DAG_RERUN_PROMPT_OVERRIDE=1 to enable this experimental capability");
+        }
+        promptOverrides = [
+            ...(await loadPromptOverrides(parsed.promptOverrideSpecs, "replace")),
+            ...(await loadPromptOverrides(parsed.promptOverrideAppendSpecs, "append")),
+        ];
+    }
     if (parsed.planOnly) {
         const plan = await planDagRerun({
             cwd: repoRoot,
             parentRunId: parsed.parentRunId,
             selectedNodeId: parsed.selectedNodeId,
+            promptOverrides,
         });
         const result = {
             ok: plan.eligible,
@@ -95,6 +148,7 @@ export async function runDagRerun(repoRoot, rawArgs) {
         planHash: parsed.planHash,
         requestId: parsed.requestId,
         reason: parsed.reason,
+        promptOverrides,
     });
     console.log(JSON.stringify(result, null, 2));
     if (!result.ok) {

package/dist/shared/dag-prompt-override.js

@@ -0,0 +1,28 @@
+/**
+ * Internal switch for the experimental "rerun failed node with an edited
+ * prompt" capability. Default is OFF; nothing may depend on it being enabled.
+ * The switch is deliberately env-based (no harness.json surface) while the
+ * feature is internal.
+ */
+export const DAG_RERUN_PROMPT_OVERRIDE_ENV = "HARNESS_DAG_RERUN_PROMPT_OVERRIDE";
+/** Upper bound for an override input body (characters). */
+export const MAX_DAG_RERUN_PROMPT_OVERRIDE_CHARS = 65_536;
+export function isDagRerunPromptOverrideEnabled(env = process.env) {
+    const value = env[DAG_RERUN_PROMPT_OVERRIDE_ENV];
+    return value === "1" || value === "true";
+}
+export const DAG_RERUN_PROMPT_ADDENDUM_TAG = "operator_addendum";
+/**
+ * Compose the final subtask_prompt for a rerun override.
+ * - "replace": the operator text becomes the whole prompt (advanced mode).
+ * - "append" (recommended): the frozen base prompt is kept verbatim and the
+ *   operator addendum is appended in a clearly marked block, mirroring the
+ *   rerunFeedback / retry_instruction augmentation semantics — small diffs,
+ *   no risk of dropping template scaffolding.
+ */
+export function composeDagPromptOverridePrompt(input) {
+    if (input.mode === "replace") {
+        return input.text;
+    }
+    return `${input.basePrompt}\n\n<${DAG_RERUN_PROMPT_ADDENDUM_TAG}>\n${input.text.trim()}\n</${DAG_RERUN_PROMPT_ADDENDUM_TAG}>\n`;
+}

package/dist/shared/operator/capabilities.js

@@ -1155,6 +1155,19 @@ export function buildOperatorCapabilitiesDocument() {
             modelCallable: "always",
             humanConfirmation: "none",
         },
+        {
+            action: "dagPromptOverrideConfig",
+            cli: "console dag-prompt-override-config",
+            kind: "read",
+            inputSchemaVersion: 1,
+            resultSchemaVersion: 1,
+            envelopeSchemaVersion: 1,
+            requiredErrorCodes: [],
+            description: "Read-only probe of the experimental prompt-override rerun switch (env-gated, default off). The browser Recovery UI hides the failed-node prompt editor unless this returns enabled=true. Never mutates.",
+            inputParams: [],
+            modelCallable: "always",
+            humanConfirmation: "none",
+        },
         {
             action: "dagRerunPlan",
             cli: "loop-agent dag rerun --run-id <id> --from-node <node> --plan --json",
@@ -1177,6 +1190,12 @@ export function buildOperatorCapabilitiesDocument() {
                     required: true,
                     description: "node id to rerun from (prefer failed/attention node from dagReport primaryFailure.nodeId)",
                 },
+                {
+                    name: "promptOverrides",
+                    type: "array",
+                    required: false,
+                    description: "experimental (switch off by default): [{nodeId, prompt, mode?}] — mode append (recommended) keeps the frozen base prompt and appends the text as a marked addendum block, replace swaps the whole subtask_prompt; only FAILED nodes inside the reset closure are admitted and the planHash binds the composed change",
+                },
             ],
             modelCallable: "always",
             humanConfirmation: "none",
@@ -1219,6 +1238,12 @@ export function buildOperatorCapabilitiesDocument() {
                     required: true,
                     description: "why continue from this node (e.g. provider flake; resume from review-pi)",
                 },
+                {
+                    name: "promptOverrides",
+                    type: "array",
+                    required: false,
+                    description: "experimental (switch off by default): must match the dagRerunPlan promptOverrides exactly (same mode/text); the planHash already binds them, any drift is rejected",
+                },
             ],
             // always: fresh eligible dagRerun plans are model-callable (2026-08-11).
             // The CLI keeps enforcing parent lifecycle, fromNode, planHash,

package/dist/worker/console/operator-actions.js

@@ -1,5 +1,6 @@
 import { access, readFile } from "node:fs/promises";
 import { buildOperatorCapabilitiesDocument, OFFICIAL_TAIL_ACTION_IDS, } from "../../shared/operator/capabilities.js";
+import { DAG_RERUN_PROMPT_OVERRIDE_ENV, isDagRerunPromptOverrideEnabled, MAX_DAG_RERUN_PROMPT_OVERRIDE_CHARS, } from "../../shared/dag-prompt-override.js";
 import { buildOperatorResult, operatorFailed, operatorSucceeded, } from "../../shared/operator/envelope.js";
 import { CANONICAL_TASK_ID_PATTERN, formatLocalBusinessDate, getTaskPaths, loadTaskConfig, } from "../../task/runtime.js";
 import { diffTaskContract, validateDraftForTask, } from "../../task/contract/index.js";
@@ -401,6 +402,85 @@ async function runReadCli(ctx, args, command) {
         });
     }
 }
+/**
+ * Parse and bound the experimental promptOverrides action param. The env
+ * switch is checked separately so disabled deployments fail closed before any
+ * staging happens. `mode` defaults to "replace"; "append" keeps the frozen
+ * base prompt and only appends the operator text as a marked addendum.
+ */
+function parsePromptOverrideParams(raw) {
+    if (raw === undefined || raw === null)
+        return { kind: "ok", overrides: [] };
+    if (!Array.isArray(raw)) {
+        return {
+            kind: "error",
+            message: "promptOverrides must be an array of {nodeId, prompt, mode?}",
+        };
+    }
+    if (raw.length === 0)
+        return { kind: "ok", overrides: [] };
+    if (raw.length > 8) {
+        return { kind: "error", message: "promptOverrides supports at most 8 nodes" };
+    }
+    const overrides = [];
+    const seen = new Set();
+    for (const item of raw) {
+        if (!item || typeof item !== "object") {
+            return {
+                kind: "error",
+                message: "promptOverrides entries must be objects {nodeId, prompt, mode?}",
+            };
+        }
+        const record = item;
+        const nodeId = typeof record.nodeId === "string" ? record.nodeId.trim() : "";
+        const prompt = typeof record.prompt === "string" ? record.prompt : "";
+        const mode = record.mode === undefined || record.mode === null
+            ? undefined
+            : typeof record.mode === "string"
+                ? record.mode
+                : "invalid";
+        if (!nodeId) {
+            return { kind: "error", message: "promptOverrides nodeId is required" };
+        }
+        if (seen.has(nodeId)) {
+            return {
+                kind: "error",
+                message: `promptOverrides contains duplicate nodeId: ${nodeId}`,
+            };
+        }
+        seen.add(nodeId);
+        if (mode !== undefined && mode !== "append" && mode !== "replace") {
+            return {
+                kind: "error",
+                message: `promptOverrides mode for ${nodeId} must be append or replace`,
+            };
+        }
+        if (!prompt.trim() || prompt.length > MAX_DAG_RERUN_PROMPT_OVERRIDE_CHARS) {
+            return {
+                kind: "error",
+                message: `promptOverrides prompt for ${nodeId} must be 1-${MAX_DAG_RERUN_PROMPT_OVERRIDE_CHARS} characters`,
+            };
+        }
+        overrides.push(mode === undefined ? { nodeId, prompt } : { nodeId, prompt, mode });
+    }
+    return { kind: "ok", overrides };
+}
+/** Stage override bodies under app-data and build `--prompt-override` CLI
+ *  args. The flag carries the mode: `--prompt-override-append` for append. */
+async function buildPromptOverrideCliArgs(ctx, overrides) {
+    const args = [];
+    for (const override of overrides) {
+        const staged = await stageUtf8Text(ctx.appData, override.prompt, {
+            extension: ".md",
+            label: `prompt-override-${override.nodeId}`,
+        });
+        const flag = override.mode === "append"
+            ? "--prompt-override-append"
+            : "--prompt-override";
+        args.push(flag, `${override.nodeId}@${staged.path}`);
+    }
+    return args;
+}
 async function acceptOperation(ctx, input) {
     const created = await ctx.operations.create({
         clientRequestId: input.clientRequestId,
@@ -2078,12 +2158,35 @@ export async function dispatchOperatorAction(ctx, req) {
             }
             return accepted;
         }
+        case "dagPromptOverrideConfig": {
+            // Experimental internal switch; the browser UI hides the prompt-edit
+            // entry unless this reports enabled=true.
+            return {
+                kind: "sync",
+                status: 200,
+                body: operatorSucceeded(action, {
+                    enabled: isDagRerunPromptOverrideEnabled(),
+                    envVar: DAG_RERUN_PROMPT_OVERRIDE_ENV,
+                }),
+            };
+        }
         case "dagRerunPlan": {
             const runId = str(p.runId);
             const fromNode = str(p.fromNode);
             if (!runId || !fromNode) {
                 return invalid(action, "runId and fromNode are required");
             }
+            const parsedOverrides = parsePromptOverrideParams(p.promptOverrides);
+            if (parsedOverrides.kind === "error") {
+                return invalid(action, parsedOverrides.message);
+            }
+            if (parsedOverrides.overrides.length > 0 &&
+                !isDagRerunPromptOverrideEnabled()) {
+                return invalid(action, `prompt override rerun is disabled; set ${DAG_RERUN_PROMPT_OVERRIDE_ENV}=1 to enable this experimental capability`);
+            }
+            const overrideArgs = parsedOverrides.overrides.length > 0
+                ? await buildPromptOverrideCliArgs(ctx, parsedOverrides.overrides)
+                : [];
             const body = await runReadCli(ctx, [
                 "dag",
                 "rerun",
@@ -2092,6 +2195,7 @@ export async function dispatchOperatorAction(ctx, req) {
                 "--from-node",
                 fromNode,
                 "--plan",
+                ...overrideArgs,
                 "--json",
             ], "dag rerun plan");
             return { kind: "sync", status: body.ok ? 200 : 400, body };
@@ -2105,6 +2209,17 @@ export async function dispatchOperatorAction(ctx, req) {
             if (!runId || !fromNode || !planHash || !reason || !clientRequestId) {
                 return invalid(action, "runId, fromNode, planHash, reason, and clientRequestId are required");
             }
+            const parsedOverrides = parsePromptOverrideParams(p.promptOverrides);
+            if (parsedOverrides.kind === "error") {
+                return invalid(action, parsedOverrides.message);
+            }
+            if (parsedOverrides.overrides.length > 0 &&
+                !isDagRerunPromptOverrideEnabled()) {
+                return invalid(action, `prompt override rerun is disabled; set ${DAG_RERUN_PROMPT_OVERRIDE_ENV}=1 to enable this experimental capability`);
+            }
+            const overrideArgs = parsedOverrides.overrides.length > 0
+                ? await buildPromptOverrideCliArgs(ctx, parsedOverrides.overrides)
+                : [];
             return acceptOperation(ctx, {
                 action,
                 actionParams: p,
@@ -2122,6 +2237,7 @@ export async function dispatchOperatorAction(ctx, req) {
                     clientRequestId,
                     "--reason",
                     reason,
+                    ...overrideArgs,
                     "--json",
                 ],
             });

package/dist/worker/console/routes.js

@@ -131,6 +131,16 @@ async function handleSessionPing(req, res, ctx) {
     }
     sendJson(res, 200, { ok: true, pong: true });
 }
+/**
+ * Actions the inspect-scoped mutation token may dispatch. Deliberately
+ * minimal: the experimental prompt-override rerun tab needs plan preflight +
+ * execution only. Everything else (task creation, runDag, reconcile, chat,
+ * worker actions…) requires the general Console token.
+ */
+export const INSPECT_MUTATION_ALLOWED_ACTIONS = new Set([
+    "dagRerunPlan",
+    "dagRerun",
+]);
 async function handleCreateOperation(req, res, ctx) {
     if (!ctx.operator) {
         sendJson(res, 503, {
@@ -142,13 +152,31 @@ async function handleCreateOperation(req, res, ctx) {
         });
         return;
     }
-    const failure = evaluateMutationGate(req, {
+    const generalGateContext = {
         cookieName: ctx.bootToken.cookieName,
         bootToken: ctx.bootToken.value,
         confirmationToken: ctx.bootToken.confirmationToken,
         consoleOrigin: ctx.getConsoleOrigin(),
         allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
-    });
+    };
+    let failure = evaluateMutationGate(req, generalGateContext);
+    let inspectScoped = false;
+    if (failure && ctx.inspectBootToken) {
+        // Scoped /inspect credentials: try the inspect gate before failing. The
+        // general gate already rejected, so passing here only ever yields the
+        // allowlisted actions below — never general write capability.
+        const scopedFailure = evaluateMutationGate(req, {
+            cookieName: ctx.inspectBootToken.cookieName,
+            bootToken: ctx.inspectBootToken.value,
+            confirmationToken: ctx.inspectBootToken.confirmationToken,
+            consoleOrigin: ctx.getConsoleOrigin(),
+            allowNonLoopbackAccess: ctx.allowNonLoopbackAccess === true,
+        });
+        if (!scopedFailure) {
+            inspectScoped = true;
+            failure = undefined;
+        }
+    }
     if (failure) {
         sendJson(res, failure.status, {
             ok: false,
@@ -175,6 +203,16 @@ async function handleCreateOperation(req, res, ctx) {
         ? body.actionParams
         : {};
     const clientRequestId = typeof body.clientRequestId === "string" ? body.clientRequestId : undefined;
+    if (inspectScoped && !INSPECT_MUTATION_ALLOWED_ACTIONS.has(action)) {
+        sendJson(res, 403, {
+            ok: false,
+            error: {
+                code: "ACTION_NOT_IN_INSPECT_SCOPE",
+                message: `inspect-scoped token only allows: ${[...INSPECT_MUTATION_ALLOWED_ACTIONS].join(", ")}`,
+            },
+        });
+        return;
+    }
     const result = await dispatchOperatorAction(ctx.operator.actionContext, {
         action,
         actionParams,

package/dist/worker/console/security.js

@@ -35,7 +35,7 @@ function normalizeInstanceScope(scope) {
     };
 }
 /** Deterministic Cookie name for one Console instance; never includes repo path or token. */
-export function deriveBootCapabilityCookieName(scope) {
+export function deriveBootCapabilityCookieName(scope, variant) {
     const normalized = normalizeInstanceScope(scope);
     const digest = createHash("sha256")
         .update("loop-console-capability-v1\0", "utf8")
@@ -46,13 +46,17 @@ export function deriveBootCapabilityCookieName(scope) {
         .update(String(normalized.configuredPort), "utf8")
         .update("\0", "utf8")
         .update(normalized.instanceNonce ?? "", "utf8")
+        .update("\0", "utf8")
+        .update(variant ?? "", "utf8")
         .digest("hex")
         .slice(0, 32);
     return `${BOOT_CAPABILITY_COOKIE}_${digest}`;
 }
-/** Issue per-process unguessable boot capability + confirmation tokens. */
-export function issueBootCapabilityToken(scope) {
-    const cookieName = deriveBootCapabilityCookieName(scope);
+/** Issue per-process unguessable boot capability + confirmation tokens.
+ *  `variant` (e.g. "inspect") derives a separate cookie name so scoped
+ *  credentials cannot be replayed against the general mutation surface. */
+export function issueBootCapabilityToken(scope, options = {}) {
+    const cookieName = deriveBootCapabilityCookieName(scope, options.variant);
     const value = randomBytes(32).toString("base64url");
     const confirmationToken = randomBytes(32).toString("base64url");
     const setCookieHeader = [
@@ -63,10 +67,12 @@ export function issueBootCapabilityToken(scope) {
     ].join("; ");
     return { cookieName, value, setCookieHeader, confirmationToken };
 }
-/** Inject confirmation token into HTML so the SPA can send the mutation header. */
-export function injectConfirmationTokenScript(html, confirmationToken) {
+/** Inject confirmation token into HTML so the SPA can send the mutation
+ *  header. `varName` separates the general Console token from the scoped
+ *  inspect token on the read-only /inspect surface. */
+export function injectConfirmationTokenScript(html, confirmationToken, varName = "__CONSOLE_CONFIRMATION_TOKEN__") {
     const source = typeof html === "string" ? html : html.toString("utf8");
-    const script = `<script>window.__CONSOLE_CONFIRMATION_TOKEN__=${JSON.stringify(confirmationToken)};</script>`;
+    const script = `<script>window.${varName}=${JSON.stringify(confirmationToken)};</script>`;
     if (source.includes("</head>")) {
         return Buffer.from(source.replace("</head>", `${script}</head>`), "utf8");
     }

package/dist/worker/console/server.js

@@ -21,8 +21,9 @@ import { createOperationEventStore, } from "./operation-sse.js";
 import { OperationStore } from "./operation-store.js";
 import { probePiReadiness, } from "./pi-readiness.js";
 import { handleConsoleHealthRequest, handleConsoleOperatorRequest, sendJson, serveConsoleStatic, } from "./routes.js";
-import { issueBootCapabilityToken } from "./security.js";
+import { issueBootCapabilityToken, injectConfirmationTokenScript, } from "./security.js";
 import { resolveSiblingLoopAgentBin } from "./sibling-controller.js";
+import { isDagRerunPromptOverrideEnabled } from "../../shared/dag-prompt-override.js";
 import { NightAuxTicker } from "./night-aux-ticker.js";
 import { deriveObserveRouteCapabilities } from "../observe/health.js";
 import { createObserveRouteContext, defaultObserveStaticDir, handleMatchedObserveRoute, matchObserveGetRoute, ROUTES, serveObserveStatic, } from "../observe/routes.js";
@@ -86,6 +87,15 @@ export async function createConsoleServer(options) {
         configuredPort,
         ...(instanceNonce ? { instanceNonce } : {}),
     });
+    // Scoped credentials for the experimental /inspect prompt-override rerun:
+    // separate cookie name + confirmation token so the read-only inspect page
+    // can never replay them against the general Console mutation surface.
+    const inspectBootToken = issueBootCapabilityToken({
+        repoFingerprint: appData.fingerprint,
+        bindHost: host,
+        configuredPort,
+        ...(instanceNonce ? { instanceNonce } : {}),
+    }, { variant: "inspect" });
     const operations = new OperationStore(appData);
     const events = createOperationEventStore({
         persistenceDir: path.join(appData.operations, "events"),
@@ -194,6 +204,7 @@ export async function createConsoleServer(options) {
         repoRoot,
         staticDir,
         bootToken,
+        inspectBootToken,
         getConsoleOrigin,
         allowNonLoopbackAccess: !loopbackBind,
         inspect: {
@@ -283,8 +294,22 @@ export async function createConsoleServer(options) {
                 }
             }
             if (pathname.startsWith("/inspect")) {
+                // Experimental prompt-override rerun: only while the internal switch
+                // is enabled do we hand the inspect page SCOPED mutation
+                // credentials (separate cookie + token, only strong enough for
+                // INSPECT_MUTATION_ALLOWED_ACTIONS — see routes.ts). Default stays
+                // strictly read-only: no token, no cookie, no tab.
+                const htmlEnhancer = isDagRerunPromptOverrideEnabled()
+                    ? (html) => ({
+                        content: injectConfirmationTokenScript(html, routeContext.inspectBootToken?.confirmationToken ??
+                            routeContext.bootToken.confirmationToken, "__INSPECT_MUTATION_TOKEN__"),
+                        setCookie: routeContext.inspectBootToken?.setCookieHeader ??
+                            routeContext.bootToken.setCookieHeader,
+                    })
+                    : undefined;
                 await serveObserveStatic(req, res, inspectStaticDir, {
                     urlPrefix: "/inspect",
+                    ...(htmlEnhancer ? { htmlEnhancer } : {}),
                 });
                 return;
             }

package/dist/worker/console/static/assets/{abnfDiagram-N423BO3Z-DGn9iNrd.js → abnfDiagram-N423BO3Z-CiGOV5eG.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-D0q1WN6w.js";import{p as f}from"./chunk-JWPE2WC7-DkP-pEox.js";import{_ as n,l as o}from"./mermaid.core-Dmy4lSGv.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-CntzMSR8.js";import"./index-CqWlWE4l.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-DJIlR25o.js";import{p as f}from"./chunk-JWPE2WC7-fZNtEdQZ.js";import{_ as n,l as o}from"./mermaid.core-C1cSavOy.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-xn_NxcfB.js";import"./index-C2jmYBfu.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/dist/worker/console/static/assets/{arc-Dc0C2Nyv.js → arc-Ds9Gyfd8.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-Dmy4lSGv.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-C1cSavOy.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};