@tea-agent/loop-agent 0.40.0-next.1 → 0.40.0-next.10

package/dist/worker/observe/routes.js

@@ -11,7 +11,11 @@ import { buildGlobalSnapshot, clampDagRunHistoryPageSize, clampTaskRunHistoryLim
 import { loadDagRunExecutionTrajectory } from "../observability/dag-execution-trajectory.js";
 import { resolveDagTaskSourcePath } from "../../task/dag-source-paths.js";
 import { dagSourceBindingSchema } from "../../workflows/dag/types.js";
+import { getTaskPaths } from "../../task/runtime.js";
+import { classifyLedgerGate, computeLedgerInputDigest, LedgerParseError, parseLedgerJson, recoverLedgerInputContract, summarizeLedger, } from "../../task/source-prepare/ledger.js";
 import { getTaskPoolRoot } from "../pool/run-store.js";
+import { resolveDagRunArtifact, } from "./dag-run-artifacts.js";
+import { frontendPrewriteResultV1Schema } from "../../workflows/dag/frontend-prewrite-gate.js";
 import { isAllowedArtifactTextPath, resolveArtifactPath, resolveRepoFilePreview, toRepoRelativeArtifactPath, } from "./paths.js";
 import { extractSpecEvidence, extractSpecReadContent, } from "./spec-evidence.js";
 import { buildDagNodeInput } from "./node-input.js";
@@ -70,6 +74,15 @@ export const ROUTES = [
         pattern: /^\/api\/tasks\/([^/]+)\/runs$/,
         handler: handleTaskRuns,
     },
+    /**
+     * Read-only source fidelity ledger safe summary (AC-009 / AC-FIDELITY-009):
+     * 只返回计数/状态/failure code，不泄漏敏感原文。
+     */
+    {
+        method: "GET",
+        pattern: /^\/api\/tasks\/([^/]+)\/ledger$/,
+        handler: handleTaskLedger,
+    },
     {
         method: "GET",
         pattern: /^\/api\/tasks\/([^/]+)$/,
@@ -116,6 +129,16 @@ export const ROUTES = [
         pattern: /^\/api\/dag-runs\/([^/]+)\/nodes\/([^/]+)\/spec-evidence\/file$/,
         handler: handleDagNodeSpecEvidenceFile,
     },
+    // DAG run 专属只读 prewrite 结果（AC-006 / AC-BLOCK-006）：唯一读路径为
+    // run-owned contracts/frontend-prewrite-result.json（resolveDagRunArtifact 四类
+    // fail-closed），不扩大 isAllowedArtifactTextPath 通用 allowlist；响应以
+    // frontendPrewriteResultV1Schema（.strict()）解析，Inspector 不再做
+    // /api/artifacts 预览 → JSON.stringify → JSON.parse 双编码。
+    {
+        method: "GET",
+        pattern: /^\/api\/dag-runs\/([^/]+)\/prewrite-result$/,
+        handler: handleDagRunPrewriteResult,
+    },
     {
         method: "GET",
         pattern: /^\/api\/dag-runs\/([^/]+)$/,
@@ -448,6 +471,117 @@ async function handleTaskRuns(_req, res, match, ctx) {
     });
     sendJson(res, 200, page);
 }
+/**
+ * GET /api/tasks/:id/ledger — 只读 ledger 安全摘要。任务存在但无 ledger 时返回
+ * `{ present: false }`（空态，不伪造计数）；任务不存在返回 404；ledger 解析失败
+ * 返回带稳定 SOURCE_FIDELITY_* 错误码的 `{ present: false }`（AC-HARD-003：与
+ * parseLedgerJson 同一稳定码，不泄漏原文）。binding v2 标记 + ledgerSha256 +
+ * inputDigest 仅在真实 v2 绑定（非空 canonical requirement 集）时展示（AC-HARD-004：
+ * v1+optional 冒充 v2 不标记）；inputDigest 与当前权威源输入不一致时置 stale。
+ */
+async function handleTaskLedger(_req, res, match, ctx) {
+    const taskId = match.params.id;
+    if (!isSafeObservabilityIdentifier(taskId)) {
+        sendJson(res, 400, { error: "Invalid task identifier" });
+        return;
+    }
+    const taskPaths = getTaskPaths(ctx.repoRoot, taskId);
+    try {
+        await stat(taskPaths.taskDir);
+    }
+    catch {
+        sendJson(res, 404, { error: "Task not found" });
+        return;
+    }
+    const ledgerPath = path.join(taskPaths.sourceDir, "requirement-ledger.json");
+    let raw;
+    try {
+        raw = await readFile(ledgerPath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            sendJson(res, 200, { present: false, taskId });
+            return;
+        }
+        sendJson(res, 200, {
+            present: false,
+            taskId,
+            error: "ledger-unreadable",
+        });
+        return;
+    }
+    let ledger;
+    try {
+        ledger = parseLedgerJson(raw);
+    }
+    catch (error) {
+        // AC-HARD-003：解析失败分支使用与 parseLedgerJson 相同的稳定 SOURCE_FIDELITY_*
+        // 错误码（结构化可消费），而非裸字符串/裸 Error。
+        const code = error instanceof LedgerParseError
+            ? error.code
+            : "SOURCE_FIDELITY_LEDGER_STALE";
+        sendJson(res, 200, {
+            present: false,
+            taskId,
+            error: code,
+        });
+        return;
+    }
+    const classification = classifyLedgerGate(ledger);
+    const summary = summarizeLedger(ledger, {
+        gateStatus: classification.ok ? "pass" : "fail",
+        failureCode: classification.ok ? null : classification.code,
+    });
+    // v2 binding 语义（AC-HARD-004）：仅在真实 v2 绑定（canonical requirement 非空，
+    // 具备 requirement→fragment 映射证据）时标记 bindingSchemaVersion=2 并透传
+    // ledgerSha256/inputDigest；空 canonical 的 ledger 是退化/伪造 v2，不标记。
+    const contract = recoverLedgerInputContract(ledger);
+    const realV2Binding = contract.canonicalRequirements.length > 0;
+    let stale = false;
+    if (realV2Binding) {
+        // 当前权威源输入：ledger.sourcePaths（repo-root relative POSIX）→ 当前字节；
+        // 缺失/清空的权威源视为 stale（fail-closed，与 init-hybrid 语义一致）。
+        const currentByPath = new Map();
+        for (const sourcePath of contract.sourcePaths) {
+            try {
+                currentByPath.set(sourcePath, await readFile(path.resolve(ctx.repoRoot, sourcePath), "utf8"));
+            }
+            catch {
+                // 权威源缺失：保持缺失，expectedInputDigest 不一致 → stale。
+            }
+        }
+        const expectedDigest = computeLedgerInputDigest({
+            sourceDocuments: contract.sourcePaths.map((sourcePath) => ({
+                path: sourcePath,
+                content: currentByPath.get(sourcePath) ?? "",
+            })),
+            canonicalRequirements: contract.canonicalRequirements,
+        });
+        stale = ledger.inputDigest !== expectedDigest;
+    }
+    const ledgerSha256 = createHash("sha256").update(raw).digest("hex");
+    sendJson(res, 200, {
+        present: true,
+        taskId,
+        ...(realV2Binding
+            ? {
+                bindingSchemaVersion: 2,
+                ledgerSha256,
+                inputDigest: ledger.inputDigest,
+                stale,
+            }
+            : {}),
+        fragmentCount: summary.fragmentCount,
+        canonicalRequirementCount: summary.canonicalRequirementCount,
+        contextOnlyCount: summary.contextOnlyCount,
+        duplicateCount: summary.duplicateCount,
+        unresolvedCount: summary.unresolvedCount,
+        conflictCount: summary.conflictCount,
+        gateStatus: summary.gateStatus,
+        failureCode: summary.failureCode,
+        exclusions: summary.exclusions,
+    });
+}
 function ambiguousTaskBody(taskId, candidates) {
     return {
         error: "Task identity ambiguous",
@@ -535,6 +669,60 @@ async function handleDagRuns(_req, res, match, ctx) {
     const body = listDagRunHistoryFromSnapshot(snapshot, { page, pageSize });
     sendJson(res, 200, body);
 }
+/**
+ * GET /api/dag-runs/:dagRunId/prewrite-result（AC-006 / AC-BLOCK-006）
+ * 只读 run-owned contracts/frontend-prewrite-result.json：resolveDagRunArtifact 是
+ * 唯一读路径（active/paused/completed 生命周期；invalid-id / unsafe-path /
+ * not-found / ambiguous 四类 fail-closed）。响应以 frontendPrewriteResultV1Schema
+ * （.strict()）解析，拒绝 envelope 之外的字段；不扩大通用 artifact allowlist。
+ */
+async function handleDagRunPrewriteResult(_req, res, match, ctx) {
+    const dagRunId = match.params.id;
+    const resolved = resolveDagRunArtifact(ctx.repoRoot, dagRunId, [
+        "contracts",
+        "frontend-prewrite-result.json",
+    ]);
+    if (!resolved.ok) {
+        if (resolved.reason === "invalid-id") {
+            sendJson(res, 400, { error: "Invalid dag run identifier" });
+            return;
+        }
+        if (resolved.reason === "ambiguous") {
+            sendJson(res, 409, { error: "DAG run identity ambiguous" });
+            return;
+        }
+        sendJson(res, 404, { error: "Prewrite result not found" });
+        return;
+    }
+    let raw;
+    try {
+        raw = await readFile(resolved.result.absolutePath, "utf8");
+    }
+    catch {
+        sendJson(res, 404, { error: "Prewrite result not found" });
+        return;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        sendJson(res, 500, {
+            error: "Prewrite result is not valid JSON",
+            reason: "prewrite-result-unparseable",
+        });
+        return;
+    }
+    const envelope = frontendPrewriteResultV1Schema.safeParse(parsed);
+    if (!envelope.success) {
+        sendJson(res, 500, {
+            error: "Prewrite result is not a valid frontend-prewrite-result-v1 envelope",
+            reason: "prewrite-result-schema-invalid",
+        });
+        return;
+    }
+    sendJson(res, 200, envelope.data);
+}
 export async function handleDagRunById(_req, res, match, ctx) {
     const snapshot = await getSnapshot(ctx);
     const dagRun = snapshot.dagRuns.find((d) => d.dagRunId === match.params.id);

package/dist/worker/observe/server.js

@@ -83,6 +83,10 @@ export function createObserveServer(options) {
                 url: `http://${host}:${addr.port}`,
                 close: () => new Promise((closeResolve, closeReject) => {
                     server.close((err) => (err ? closeReject(err) : closeResolve()));
+                    // Explicit shutdown must not wait for the 65s keep-alive window.
+                    // This also closes active SSE clients so process/test teardown is
+                    // deterministic instead of timing out behind pooled connections.
+                    server.closeAllConnections();
                 }),
             });
         });

package/dist/worker/observe/static/api.js

@@ -1,8 +1,12 @@
 /** Fetch and artifact helpers (Observe UI R5). */
+import {
+	fetchWithWorkspaceScope,
+	workspaceScope,
+} from "./state.js";
 
 export async function fetchJson(url) {
 	try {
-		const res = await fetch(url);
+		const res = await fetchWithWorkspaceScope(url);
 		if (!res.ok) return null;
 		return await res.json();
 	} catch {
@@ -18,7 +22,10 @@ export async function fetchJson(url) {
 export async function fetchJsonResult(url, options = {}) {
 	const signal = options?.signal;
 	try {
-		const res = await fetch(url, signal ? { signal } : undefined);
+		const res = await fetchWithWorkspaceScope(
+			url,
+			signal ? { signal } : undefined,
+		);
 		let body = null;
 		try {
 			body = await res.json();
@@ -92,7 +99,7 @@ export async function fetchDagNodeProcess(runId, nodeId, key) {
  */
 export async function fetchSpecEvidenceFile(runId, nodeId, source, relPath) {
 	const url = `/api/dag-runs/${encodeURIComponent(runId)}/nodes/${encodeURIComponent(nodeId)}/spec-evidence/file?source=${encodeURIComponent(source)}&path=${encodeURIComponent(relPath)}`;
-	const res = await fetch(url);
+	const res = await fetchWithWorkspaceScope(url);
 	let body = null;
 	try {
 		body = await res.json();
@@ -116,8 +123,9 @@ export function artifactUrl(artifactPath) {
  * Experimental (prompt-override rerun only): POST one allowlisted operator
  * action through the Console mutation gate using the SCOPED inspect token
  * (window.__INSPECT_MUTATION_TOKEN__). The server injects it into /inspect
- * HTML only when HARNESS_DAG_RERUN_PROMPT_OVERRIDE is enabled, and it only
- * authorizes dagRerunPlan / dagRerun — never general Console mutations.
+ * HTML by default; HARNESS_DAG_RERUN_PROMPT_OVERRIDE=0|false|off disables
+ * injection. The token only authorizes dagRerunPlan / dagRerun — never general
+ * Console mutations.
  * Absent token → the call is not attempted.
  */
 export async function postOperatorAction(action, actionParams = {}) {
@@ -129,15 +137,28 @@ export async function postOperatorAction(action, actionParams = {}) {
 			body: { error: { code: "PROMPT_OVERRIDE_DISABLED", message: "提示词重启未启用（服务端未注入确认 token）" } },
 		};
 	}
+	const workspaceId = workspaceScope();
+	if (!workspaceId) {
+		return {
+			ok: false,
+			status: 400,
+			body: {
+				error: {
+					code: "WORKSPACE_REQUIRED",
+					message: "workspaceId is required",
+				},
+			},
+		};
+	}
 	try {
-		const res = await fetch("/api/operator/v1/operations", {
+		const res = await fetchWithWorkspaceScope("/api/operator/v1/operations", {
 			method: "POST",
 			credentials: "same-origin",
 			headers: {
 				"Content-Type": "application/json",
 				"x-loop-console-confirmation": token,
 			},
-			body: JSON.stringify({ action, actionParams }),
+			body: JSON.stringify({ workspaceId, action, actionParams }),
 		});
 		let body = null;
 		try {
@@ -154,7 +175,7 @@ export async function postOperatorAction(action, actionParams = {}) {
 /** Poll a Console operation snapshot (read-only GET). */
 export async function fetchOperatorOperation(operationId) {
 	try {
-		const res = await fetch(
+		const res = await fetchWithWorkspaceScope(
 			`/api/operator/v1/operations/${encodeURIComponent(operationId)}`,
 			{ credentials: "same-origin" },
 		);
@@ -180,4 +201,3 @@ export function parseArtifactPreviewResponse(text) {
 		truncated: parsed.truncated === true,
 	};
 }
-

package/dist/worker/observe/static/app.js

@@ -1,9 +1,8 @@
-/** Observe UI bootstrap: route wiring, listeners, compatibility re-exports. */
+/** Observe UI bootstrap: standalone compatibility entry + re-exports. */
 import {
 	parseHashRoute,
 	parseHashRouteWithFilters,
 	buildHashPath,
-	parseRoute,
 } from "./router.js";
 import { parseArtifactPreviewResponse } from "./api.js";
 import {
@@ -15,7 +14,6 @@ import {
 } from "./relations.js";
 import { copyText, renderRecommendedCommand } from "./copy.js";
 import {
-	isPageVisible,
 	detailPollDelay,
 	updateDagGraphViewportState,
 	captureDagGraphViewportState,
@@ -25,11 +23,9 @@ import {
 	shouldReuseDagDetailShell,
 	shouldPreserveDiagnosticsOpen,
 	isInteractiveGestureActive,
-	stopTimers,
 	renderViewState,
 	mountViewState,
 	viewStateDescriptor,
-	uiState,
 } from "./state.js";
 import { sortPoolTasks, poolStatusCounts } from "./format-pool.js";
 import {
@@ -45,34 +41,22 @@ import {
 	dashboardVisibleFeatures,
 	findDagForRun,
 } from "./dag-model.js";
-
-import { renderFailures } from "./views/failures.js";
-import { startPoolView } from "./views/pool.js";
-import { startDashboardPolling } from "./views/dashboard.js";
-import { startDagsView } from "./views/dags.js";
-import { renderFeatureDetail } from "./views/feature.js";
-import { renderBatch } from "./views/batch.js";
-import { startTaskPolling } from "./views/task.js";
-import { startRunPolling } from "./views/run.js";
-import { startDagPolling } from "./views/dag.js";
 import { renderDagGraph } from "./views/dag-graph.js";
-import { renderNightJobs } from "./views/night.js";
 import {
 	selectDagNode,
 	closeDagInspector,
-	closeDagInspectorOnOutsideClick,
 	renderDagInspector,
 } from "./views/dag-inspector.js";
 import {
 	mergeSessionEvents,
 	renderSessionTimeline,
 } from "./views/session-timeline.js";
-import { mountOperatorChrome } from "./operator-chrome.js";
+import {
+	route,
+	startStandaloneInspect,
+	tryCanonicalizeStandaloneInspect,
+} from "./inspect-workspace.js";
 
-// Compatibility re-exports for poll-stable UI helpers (owned by state.js / views):
-// reuse-dag-detail-shell, reuse-dag-graph-wrap, existingGraphWrap?.parentNode === ranksEl,
-// existingDetails?.parentNode === metaEl, let pre = existingPre, computeFollowLatest,
-// updateDagOutputViewportState, isInteractiveGestureActive.
 export {
 	detailPollDelay,
 	parseMarkdownBlocks,
@@ -114,56 +98,20 @@ export {
 	renderDagInspector,
 	renderSessionTimeline,
 	mergeSessionEvents,
+	route,
+	tryCanonicalizeStandaloneInspect,
 };
 
-function route() {
-	stopTimers();
-	const r = parseRoute();
-	if (r.view === "dashboard") {
-		startDashboardPolling(r.scrollTo);
-	} else if (r.view === "dags") {
-		void startDagsView();
-	} else if (r.view === "batch") {
-		void renderBatch(r.batchRunId);
-	} else if (r.view === "run") {
-		startRunPolling(r.workerRunId);
-	} else if (r.view === "dag") {
-		startDagPolling(r.dagRunId);
-	} else if (r.view === "failures") {
-		void renderFailures();
-	} else if (r.view === "pool") {
-		startPoolView();
-	} else if (r.view === "night") {
-		void renderNightJobs(r.scheduleId);
-	} else if (r.view === "task") {
-		startTaskPolling(r.featureId, r.taskId);
-	} else if (r.view === "feature") {
-		void renderFeatureDetail(r.featureId);
-	}
-}
-
 if (typeof window !== "undefined") {
-	// 先同步挂载共享壳，再启动路由；首个 snapshot 的新鲜度不会因异步挂载丢失。
-	const chromeHost = document.getElementById("operator-chrome");
-	if (chromeHost) {
-		mountOperatorChrome(chromeHost, {
-			mode: "inspect",
-			liveLocation: true,
-			healthUrl: "/api/health",
-			readinessTitle: "Pi 状态（只读展示）。模型与认证管理在操作侧，点击进入。",
-		});
+	// Compatibility listeners remain owned by inspect-workspace.js:
+	// window.addEventListener("hashchange", route)
+	// window.addEventListener("load", route)
+	// document.addEventListener("pointerdown", closeDagInspectorOnOutsideClick)
+	// document.addEventListener("visibilitychange", ...)
+	// reuse-dag-detail-shell, reuse-dag-graph-wrap, existingGraphWrap?.parentNode === ranksEl,
+	// existingDetails?.parentNode === metaEl, let pre = existingPre, computeFollowLatest,
+	// updateDagOutputViewportState, isInteractiveGestureActive.
+	if (!tryCanonicalizeStandaloneInspect(window.location)) {
+		startStandaloneInspect();
 	}
-	window.addEventListener("hashchange", route);
-	window.addEventListener("load", route);
-	document.addEventListener("pointerdown", closeDagInspectorOnOutsideClick);
-	document.addEventListener("visibilitychange", () => {
-		if (!isPageVisible()) return;
-		const r = parseRoute();
-		if (r.view === "dashboard") startDashboardPolling();
-		// History page is manual-refresh only (no 5s dashboard polling).
-		if (r.view === "run") startRunPolling(r.workerRunId, false);
-		if (r.view === "dag") startDagPolling(r.dagRunId, false);
-		if (r.view === "pool" && uiState.poolAutoRefresh) startPoolView();
-		if (r.view === "task") startTaskPolling(r.featureId, r.taskId);
-	});
 }

package/dist/worker/observe/static/dag-node-purpose.d.ts

@@ -0,0 +1,6 @@
+export const NODE_PURPOSE_BY_ID: Record<string, string>;
+
+export function describeDagNodePurpose(
+	nodeId: string | null | undefined,
+	node?: { executor?: string | null; label?: string | null },
+): string;