@tea-agent/loop-agent 0.42.0-next.2 → 0.42.0-next.3

package/dist/worker/console/chat/pi-runtime.js

@@ -26,7 +26,7 @@
  * `createDefaultPiSdkBindings()`.
  */
 import { createHash, randomBytes } from "node:crypto";
-import { access } from "node:fs/promises";
+import { access, stat } from "node:fs/promises";
 import path from "node:path";
 import { extractAssistantContentBlocks, extractAssistantText, isAssistantSdkMessage, } from "./assistant-content.js";
 import { parseProviderError, } from "./provider-error.js";
@@ -931,6 +931,44 @@ export class PiSessionInitFailedError extends Error {
         this.name = "PiSessionInitFailedError";
     }
 }
+async function readModelConfigFileVersion(filePath) {
+    try {
+        const value = await stat(filePath, { bigint: true });
+        return {
+            exists: true,
+            dev: value.dev,
+            ino: value.ino,
+            size: value.size,
+            mtimeNs: value.mtimeNs,
+            ctimeNs: value.ctimeNs,
+        };
+    }
+    catch (error) {
+        if (error !== null &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return { exists: false };
+        }
+        throw new Error("MODEL_CONFIG_CHECK_FAILED");
+    }
+}
+function sameModelConfigFileVersion(left, right) {
+    if (!left.exists || !right.exists)
+        return left.exists === right.exists;
+    return (left.dev === right.dev &&
+        left.ino === right.ino &&
+        left.size === right.size &&
+        left.mtimeNs === right.mtimeNs &&
+        left.ctimeNs === right.ctimeNs);
+}
+async function captureModelConfigFile(agentDir) {
+    const filePath = path.join(agentDir, "models.json");
+    return {
+        path: filePath,
+        version: await readModelConfigFileVersion(filePath),
+    };
+}
 /**
  * Console Pi runtime — holds Chat sessions and drives prompt() with three-gate
  * tool enforcement. Session-per-sessionId; cross-request reuse via open().
@@ -940,6 +978,8 @@ export class ConsolePiRuntime {
     loader;
     sessions = new Map();
     modelRuntimes = new Map();
+    /** Non-sensitive models.json metadata used to avoid reparsing unchanged config. */
+    modelConfigFiles = new Map();
     sessionManagers = new Map();
     /** Per-session SDK service scope (resourceLoader / settingsManager) used by the live runtime snapshot. */
     serviceScopes = new Map();
@@ -949,6 +989,8 @@ export class ConsolePiRuntime {
     reloadInFlight = new Set();
     /** Synchronous prompt ownership per session (admission before first await). */
     promptOwners = new Set();
+    /** Steering requests accepted by the SDK but not yet consumed into Pi context. */
+    pendingSteering = new Map();
     /** At most one detached automatic-title task per durable Console session. */
     titleInFlight = new Set();
     /** Composer thinking selection ("auto" = no explicit override). */
@@ -1341,6 +1383,9 @@ export class ConsolePiRuntime {
         if (this.disposedSessions.has(sessionId))
             return;
         const agentDir = await safeGetAgentDir(this.bindings);
+        // Capture before services parse models.json. A concurrent edit can therefore
+        // cause at most one harmless extra refresh, never a missed next-turn refresh.
+        const modelConfigFile = await captureModelConfigFile(agentDir);
         const appendSystemPrompt = [
             OPERATOR_CHAT_SYSTEM_PROMPT_BASE,
             ...(init.systemPromptSuffix ? [init.systemPromptSuffix] : []),
@@ -1400,6 +1445,7 @@ export class ConsolePiRuntime {
         this.sessions.set(sessionId, session);
         this.sessionManagers.set(sessionId, init.sessionManager);
         this.modelRuntimes.set(sessionId, modelRuntime);
+        this.modelConfigFiles.set(sessionId, modelConfigFile);
         this.sessionModels.set(sessionId, model);
         this.serviceScopes.set(sessionId, {
             resourceLoader: services.resourceLoader,
@@ -1420,6 +1466,7 @@ export class ConsolePiRuntime {
             this.sessions.delete(sessionId);
             this.sessionManagers.delete(sessionId);
             this.modelRuntimes.delete(sessionId);
+            this.modelConfigFiles.delete(sessionId);
             this.sessionModels.delete(sessionId);
             this.serviceScopes.delete(sessionId);
             this.revisions.delete(sessionId);
@@ -1498,6 +1545,7 @@ export class ConsolePiRuntime {
         this.sessions.set(sessionId, built.session);
         this.sessionManagers.set(sessionId, sessionManager);
         this.modelRuntimes.set(sessionId, built.modelRuntime);
+        this.modelConfigFiles.set(sessionId, built.modelConfigFile);
         this.sessionModels.set(sessionId, init.model);
         this.serviceScopes.set(sessionId, built.services);
         this.revisions.set(sessionId, 1);
@@ -1569,11 +1617,69 @@ export class ConsolePiRuntime {
         if (!resolved)
             throw new Error("MODEL_NOT_AVAILABLE");
         await session.setModel(resolved);
-        this.bumpRevision(sessionId);
-        return {
+        const applied = {
             provider: session.model?.provider ?? model.provider,
             modelId: session.model?.id ?? session.model?.modelId ?? model.modelId,
         };
+        this.sessionModels.set(sessionId, applied);
+        this.bumpRevision(sessionId);
+        return applied;
+    }
+    async refreshModelConfiguration(sessionId, mode) {
+        const session = this.sessions.get(sessionId);
+        const modelRuntime = this.modelRuntimes.get(sessionId);
+        const configFile = this.modelConfigFiles.get(sessionId);
+        if (!session || !modelRuntime || !configFile) {
+            throw new Error(`chat session not active: ${sessionId}`);
+        }
+        const nextVersion = await readModelConfigFileVersion(configFile.path);
+        if (mode === "if-changed" &&
+            sameModelConfigFileVersion(configFile.version, nextVersion)) {
+            return false;
+        }
+        if (typeof modelRuntime.refresh !== "function") {
+            throw new Error("MODEL_CONFIG_REFRESH_UNSUPPORTED");
+        }
+        const stored = this.sessionModels.get(sessionId);
+        const provider = session.model?.provider ?? stored?.provider;
+        const modelId = session.model?.id ?? session.model?.modelId ?? stored?.modelId;
+        try {
+            await modelRuntime.refresh({ allowNetwork: false });
+            if (typeof modelRuntime.getError === "function" && modelRuntime.getError()) {
+                throw new Error("MODEL_CONFIG_REFRESH_FAILED");
+            }
+            if (provider && modelId) {
+                if (typeof session.setModel !== "function") {
+                    throw new Error("MODEL_CONFIG_REBIND_UNSUPPORTED");
+                }
+                const resolved = this.bindings.resolveModel({
+                    modelRuntime,
+                    provider,
+                    modelId,
+                });
+                if (!resolved) {
+                    throw new Error("MODEL_NOT_AVAILABLE_AFTER_CONFIG_REFRESH");
+                }
+                await session.setModel(resolved);
+                this.sessionModels.set(sessionId, { provider, modelId });
+            }
+        }
+        catch (error) {
+            if (error instanceof Error &&
+                (error.message === "MODEL_CONFIG_REBIND_UNSUPPORTED" ||
+                    error.message === "MODEL_NOT_AVAILABLE_AFTER_CONFIG_REFRESH")) {
+                throw error;
+            }
+            // Do not surface SDK/config error text: it may contain credential material.
+            throw new Error("MODEL_CONFIG_REFRESH_FAILED");
+        }
+        if (this.disposedSessions.has(sessionId) ||
+            this.sessions.get(sessionId) !== session) {
+            throw new Error(`chat session not active: ${sessionId}`);
+        }
+        configFile.version = nextVersion;
+        this.bumpRevision(sessionId);
+        return true;
     }
     /**
      * Apply a thinking-level selection. `auto` records the selection WITHOUT
@@ -1696,6 +1802,8 @@ export class ConsolePiRuntime {
             };
         }
         const busyReasons = [];
+        if (this.promptOwners.has(sessionId))
+            busyReasons.push("prompt in flight");
         if (session.isStreaming === true || session.isIdle === false)
             busyReasons.push("streaming");
         if (session.isCompacting === true)
@@ -1727,6 +1835,7 @@ export class ConsolePiRuntime {
             const services = this.serviceScopes.get(sessionId);
             if (services)
                 this.applySessionCompactionOverride(sessionId, services, session);
+            await this.refreshModelConfiguration(sessionId, "force");
         }
         catch (error) {
             return {
@@ -1738,7 +1847,6 @@ export class ConsolePiRuntime {
         finally {
             this.reloadInFlight.delete(sessionId);
         }
-        this.bumpRevision(sessionId);
         // Reload replaces the effective resource/session context. Persisted Goal
         // remains visible, but continuation authorization must be renewed by user.
         this.options.goalRegistry?.disarm(sessionId);
@@ -2257,6 +2365,7 @@ export class ConsolePiRuntime {
             this.sessions.set(sessionId, session);
             this.sessionManagers.set(sessionId, sessionManager);
             this.modelRuntimes.set(sessionId, built.modelRuntime);
+            this.modelConfigFiles.set(sessionId, built.modelConfigFile);
             this.sessionModels.set(sessionId, init.model);
             this.serviceScopes.set(sessionId, built.services);
             this.revisions.set(sessionId, 1);
@@ -2310,6 +2419,7 @@ export class ConsolePiRuntime {
      */
     async buildSessionWithServices(init) {
         const agentDir = await safeGetAgentDir(this.bindings);
+        const modelConfigFile = await captureModelConfigFile(agentDir);
         const appendSystemPrompt = [
             OPERATOR_CHAT_SYSTEM_PROMPT_BASE,
             ...(init.systemPromptSuffix ? [init.systemPromptSuffix] : []),
@@ -2343,6 +2453,7 @@ export class ConsolePiRuntime {
         return {
             session,
             modelRuntime,
+            modelConfigFile,
             services: {
                 resourceLoader: services.resourceLoader,
                 settingsManager: services.settingsManager,
@@ -2354,14 +2465,31 @@ export class ConsolePiRuntime {
         return this.sessions.get(sessionId);
     }
     /** Inject one queued message into the currently running Pi turn. */
-    async steer(sessionId, text, images) {
+    async steer(sessionId, clientRequestId, text, images) {
         const session = this.sessions.get(sessionId);
         if (!session || !this.promptOwners.has(sessionId) || session.isStreaming === false) {
             throw new Error("CHAT_TURN_NOT_ACTIVE");
         }
         if (typeof session.steer !== "function")
             throw new Error("CHAT_STEER_UNAVAILABLE");
-        await session.steer(text, images);
+        const pending = this.pendingSteering.get(sessionId) ?? [];
+        const identity = { clientRequestId, text };
+        pending.push(identity);
+        this.pendingSteering.set(sessionId, pending);
+        try {
+            await session.steer(text, images);
+        }
+        catch (error) {
+            const current = this.pendingSteering.get(sessionId);
+            if (current) {
+                const index = current.indexOf(identity);
+                if (index >= 0)
+                    current.splice(index, 1);
+                if (current.length === 0)
+                    this.pendingSteering.delete(sessionId);
+            }
+            throw error;
+        }
     }
     hasSession(sessionId) {
         return this.sessions.has(sessionId);
@@ -2397,12 +2525,13 @@ export class ConsolePiRuntime {
      */
     async prompt(sessionId, text, onEvent, options) {
         // Synchronous admission fence — before any await.
-        if (this.promptOwners.has(sessionId)) {
+        if (this.promptOwners.has(sessionId) || this.reloadInFlight.has(sessionId)) {
             throw new Error("CHAT_TURN_ACTIVE");
         }
         this.promptOwners.add(sessionId);
         let unsub;
         let abortPromise;
+        let initialUserMessageStarted = false;
         const onAbort = () => {
             // M1 T08 / AC-R3-003: Stop must abort only the current turn, NEVER
             // dispose the session. Await session.abort() so ownership settles
@@ -2459,6 +2588,11 @@ export class ConsolePiRuntime {
             if (options?.signal?.aborted) {
                 return;
             }
+            await this.refreshModelConfiguration(sessionId, "if-changed");
+            // Stop may arrive while stat/refresh/rebind is in flight.
+            if (options?.signal?.aborted) {
+                return;
+            }
             const emitContextUsage = () => {
                 try {
                     const contextUsage = session.getSessionStats?.()?.contextUsage;
@@ -2500,6 +2634,27 @@ export class ConsolePiRuntime {
             };
             unsub = session.subscribe((event) => {
                 const observedAt = Date.now();
+                if (event.type === "message_start" && isUserSdkMessage(event.message)) {
+                    if (!initialUserMessageStarted) {
+                        // The first user message_start belongs to session.prompt(text), not
+                        // to a steering request that may have raced with prompt startup.
+                        initialUserMessageStarted = true;
+                    }
+                    else {
+                        const pending = this.pendingSteering.get(sessionId);
+                        const accepted = pending?.shift();
+                        if (pending?.length === 0)
+                            this.pendingSteering.delete(sessionId);
+                        if (accepted) {
+                            onEvent({
+                                type: "steering_accepted",
+                                sessionId,
+                                clientRequestId: accepted.clientRequestId,
+                                text: accepted.text,
+                            });
+                        }
+                    }
+                }
                 if (event.type === "compaction_start") {
                     activeCompaction = {
                         compactionId: newCompactionId(sessionId),
@@ -2638,6 +2793,10 @@ export class ConsolePiRuntime {
         finally {
             if (this.options.questionRegistry)
                 this.options.questionRegistry.clearTurn(sessionId);
+            // Unconsumed durable DeferredTurns remain dispatching and are recovered by
+            // the route layer after this active Turn closes. Never carry their volatile
+            // identities into a later prompt.
+            this.pendingSteering.delete(sessionId);
             this.promptOwners.delete(sessionId);
         }
     }
@@ -2759,11 +2918,13 @@ export class ConsolePiRuntime {
         this.sessionManagers.delete(sessionId);
         this.mainlineLeaves.delete(sessionId);
         this.modelRuntimes.delete(sessionId);
+        this.modelConfigFiles.delete(sessionId);
         this.sessionModels.delete(sessionId);
         this.serviceScopes.delete(sessionId);
         this.revisions.delete(sessionId);
         this.thinkingSelections.delete(sessionId);
         this.reloadInFlight.delete(sessionId);
+        this.pendingSteering.delete(sessionId);
     }
     disposeAll() {
         for (const id of [...this.sessions.keys()])
@@ -2796,6 +2957,11 @@ function mapAssistantMessageEvent(type, sessionId, message) {
         ...(content.length > 0 ? { content } : {}),
     };
 }
+function isUserSdkMessage(message) {
+    return Boolean(message &&
+        typeof message === "object" &&
+        message.role === "user");
+}
 function mapSdkEvent(sessionId, event, compactionId) {
     switch (event.type) {
         case "agent_start":

package/dist/worker/console/chat/repo-browser.js

@@ -9,6 +9,9 @@ const TREE_LIMIT = 500;
 export const TEXT_PREVIEW_LIMIT = 512 * 1024;
 /** Full-file ceiling for the sandboxed HTML preview route and its assets. */
 export const HTML_PREVIEW_ASSET_LIMIT = 20 * 1024 * 1024;
+/** Self-contained HTML exports commonly embed data and can be much larger than
+ * an individual image/script asset. Keep a separate, still-bounded ceiling. */
+export const HTML_PREVIEW_DOCUMENT_LIMIT = 64 * 1024 * 1024;
 export const REPO_HTML_PREVIEW_ROUTE_PREFIX = "/api/operator/v1/chat/repo/html/";
 const SKIP_DIRS = new Set([
     ".git",
@@ -190,8 +193,12 @@ export async function readRepoHtmlAsset(repoRoot, rawPath) {
             const info = await handle.stat();
             if (!info.isFile())
                 throw new RepoBrowserError(400, "NOT_A_FILE", "path is not a regular file");
-            if (info.size > HTML_PREVIEW_ASSET_LIMIT)
-                throw new RepoBrowserError(413, "TOO_LARGE", `file exceeds ${HTML_PREVIEW_ASSET_LIMIT} byte HTML preview limit`);
+            const contentType = repoHtmlAssetContentType(guard.repoRelative);
+            const limit = contentType.startsWith("text/html")
+                ? HTML_PREVIEW_DOCUMENT_LIMIT
+                : HTML_PREVIEW_ASSET_LIMIT;
+            if (info.size > limit)
+                throw new RepoBrowserError(413, "TOO_LARGE", `file exceeds ${limit} byte HTML preview limit`);
             const rechecked = await guardReadPath(repoRoot, rawPath);
             if (!rechecked.ok)
                 throw new RepoBrowserError(403, guardedCode(rechecked.code), "file path changed while it was being opened");
@@ -202,7 +209,7 @@ export async function readRepoHtmlAsset(repoRoot, rawPath) {
                 throw new RepoBrowserError(403, "OUT_OF_REPO", "file identity changed while it was being opened");
             return {
                 body: await handle.readFile(),
-                contentType: repoHtmlAssetContentType(guard.repoRelative),
+                contentType,
                 bytes: info.size,
             };
         }

package/dist/worker/console/chat/routes.js

@@ -1065,20 +1065,10 @@ export async function handleSteerDeferredTurn(req, res, deps, sessionId, clientR
     }
     const item = claim.deferredTurn;
     try {
-        await deps.runtime.steer(sessionId, item.text, item.images);
-        const userMessage = await deps.store.appendMessage(sessionId, {
-            role: "user",
-            text: item.text,
-        });
-        deps.events.append(sessionId, active.turnId, {
-            kind: "user_message",
-            data: {
-                clientRequestId: item.clientRequestId,
-                message: { id: userMessage.id, text: userMessage.text, at: userMessage.at },
-            },
-        });
-        await deps.store.clearDeferredTurnForRequest(sessionId, item.clientRequestId);
-        await emitDeferredTurnUpdate(deps, sessionId, active.turnId, undefined, item.revision + 2);
+        await deps.runtime.steer(sessionId, item.clientRequestId, item.text, item.images);
+        // session.steer() only acknowledges queueing. Keep the durable item in
+        // dispatching until Pi emits the corresponding user message_start.
+        await emitDeferredTurnUpdate(deps, sessionId, active.turnId, item, item.revision);
         sendJson(res, 200, {
             ok: true,
             accepted: true,
@@ -1102,6 +1092,21 @@ export async function handleSteerDeferredTurn(req, res, deps, sessionId, clientR
         });
     }
 }
+async function persistAcceptedSteering(deps, sessionId, turnId, userMessage, clientRequestId) {
+    deps.events.append(sessionId, turnId, {
+        kind: "user_message",
+        data: {
+            clientRequestId,
+            steering: true,
+            message: {
+                id: userMessage.id,
+                text: userMessage.text,
+                at: userMessage.at,
+            },
+        },
+    });
+    await emitDeferredTurnUpdate(deps, sessionId, turnId, undefined, 0);
+}
 /** Lightweight busy-truth endpoint for the client reconcile loop (pi-web
  *  get_state equivalent): exposes the active turn + the latest turn's durable
  *  outcome WITHOUT the full message payload, so the UI can poll it on an
@@ -1661,6 +1666,9 @@ export async function handleChatPrompt(req, res, deps, sessionId) {
                 if (!res.writableEnded)
                     writeChatSse(res, persisted);
             },
+            onSteeringMessagePersisted: async (_record, userMessage, accepted) => {
+                await persistAcceptedSteering(deps, sessionId, turnId, userMessage, accepted.clientRequestId);
+            },
             onOperationAccepted: (accepted) => deps.operationLinker.link({
                 sessionId,
                 turnId,
@@ -1971,6 +1979,9 @@ export async function handleCreateChatTurn(req, res, deps, sessionId, trustedPay
                     if (placeholder)
                         emitSessionTitle(deps, sessionId, turn.turnId, placeholder);
                 },
+                onSteeringMessagePersisted: async (_record, userMessage, accepted) => {
+                    await persistAcceptedSteering(deps, sessionId, turn.turnId, userMessage, accepted.clientRequestId);
+                },
                 persistUserMessage: trustedPayload?.persistUserMessage,
                 onOperationAccepted: (accepted) => deps.operationLinker.link({
                     sessionId,
@@ -2646,13 +2657,13 @@ async function handleRepoHtmlPreview(res, deps, rawPath) {
             "Cache-Control": "no-store",
             "X-Content-Type-Options": "nosniff",
             "Referrer-Policy": "no-referrer",
-            // The iframe also has an empty sandbox attribute. This response-level
-            // sandbox keeps direct/popup loads isolated, while explicit local-origin
-            // style/image/font/media sources let relative project assets render.
+            // Project scripts may drive tabs and other local interactions, but the
+            // opaque sandbox still withholds same-origin access, forms, popups and
+            // top-level navigation. Network requests remain disabled below.
             "Content-Security-Policy": [
-                "sandbox",
+                "sandbox allow-scripts",
                 "default-src 'none'",
-                "script-src 'none'",
+                `script-src 'unsafe-inline' ${origin}`,
                 "object-src 'none'",
                 "frame-src 'none'",
                 "form-action 'none'",