@tea-agent/loop-agent 0.42.0-next.9 → 0.42.1

package/dist/worker/console/chat/routes.js

@@ -16,6 +16,7 @@ import { randomUUID } from "node:crypto";
 import { access } from "node:fs/promises";
 import { parseAssistantContent } from "./assistant-content.js";
 import { OPERATOR_CHAT_ALLOWED_TOOLS, OPERATOR_CHAT_DENIED_TOOLS, OPERATOR_CHAT_DENIED_OPERATOR_ACTIONS, } from "./tools.js";
+import { InvalidChatSessionModeError, SESSION_MODE_ACTION_DENIED_CODE, SESSION_MODE_ACTION_DENIED_MESSAGE, SESSION_MODE_IMMUTABLE_CODE, UnknownChatSessionModeError, isWorkflowSessionMode, parseCreateSessionMode, readStoredSessionMode, shouldAcceptOperatorSnapshot, } from "./session-mode.js";
 import { buildModelCallableToolSchemas } from "./tool-adapter.js";
 import { cleanChatTitle, acceptedOperationIdFromResult, isBlankChatSession } from "./session-store.js";
 import { hashChatTurnPayload, projectChatToolEventPayload, projectCompactSnapshot, } from "./chat-event-store.js";
@@ -44,11 +45,80 @@ import { buildGoalCompactionInstructions, buildGoalContinuationContext, } from "
 import { classifyGoalRoundAdmission, } from "./goal-round-driver.js";
 import { isTerminalOperationState } from "../../../infrastructure/console/operation-store.js";
 import { SddDataAlignmentError, } from "./sdd-data-alignment.js";
+import { TerminalSessionRegistry } from "./terminal-sessions.js";
+import { handleTerminalRequest } from "./terminal-routes.js";
+import { handleScmRequest } from "./scm-routes.js";
+import { handleBrowserRequest } from "./browser-routes.js";
 function projectBrowserChatSession(record) {
     const { telemetrySessionId, ...projected } = record;
     void telemetrySessionId;
     return projected;
 }
+function reopenInitFromRecord(record) {
+    return {
+        sessionId: record.sessionId,
+        sessionFile: record.sessionFile,
+        ...(record.modelProvider && record.modelId
+            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
+            : {}),
+        sessionMode: record.sessionMode,
+    };
+}
+async function readChatSessionMode(deps, sessionId) {
+    let record;
+    try {
+        record = await deps.store.get(sessionId);
+    }
+    catch (error) {
+        if (error instanceof UnknownChatSessionModeError) {
+            return {
+                ok: false,
+                status: 409,
+                code: error.code,
+                message: error.message,
+            };
+        }
+        throw error;
+    }
+    if (!record) {
+        return {
+            ok: false,
+            status: 404,
+            code: "NOT_FOUND",
+            message: `chat session not found: ${sessionId}`,
+        };
+    }
+    // Normalize: the store contract always fills sessionMode, but handler-level
+    // fakes / partial records may omit it — treat missing as workflow (the
+    // stock-record read rule), while a present-but-unknown value still fails
+    // closed in the store layer.
+    return {
+        ok: true,
+        record,
+        sessionMode: readStoredSessionMode(record.sessionMode),
+    };
+}
+async function requireWorkflowSession(res, deps, sessionId) {
+    const resolved = await readChatSessionMode(deps, sessionId);
+    if (!resolved.ok) {
+        sendJson(res, resolved.status, {
+            ok: false,
+            error: { code: resolved.code, message: resolved.message },
+        });
+        return undefined;
+    }
+    if (!isWorkflowSessionMode(resolved.sessionMode)) {
+        sendJson(res, 409, {
+            ok: false,
+            error: {
+                code: SESSION_MODE_ACTION_DENIED_CODE,
+                message: SESSION_MODE_ACTION_DENIED_MESSAGE,
+            },
+        });
+        return undefined;
+    }
+    return resolved.record;
+}
 /**
  * Reattach the durable event-ring order to session-store rows. The session
  * store remains the content authority; the ring only supplies chronology.
@@ -517,6 +587,14 @@ export async function handleChatCapabilities(_req, res, deps) {
         deniedTools: OPERATOR_CHAT_DENIED_TOOLS,
         deniedOperatorActions: OPERATOR_CHAT_DENIED_OPERATOR_ACTIONS,
         tools: toolSchemas,
+        builtinSubagents: [
+            {
+                toolId: "Agent",
+                agent: "Explore",
+                kind: "subagent",
+                description: "Start the built-in read-only Explore subagent for codebase search, symbol lookup, and call-chain tracing.",
+            },
+        ],
         // ADR 0011: full Pi tools including bash are default-active.
         hasBash: true,
     });
@@ -557,6 +635,22 @@ workspaceId) {
         });
         return;
     }
+    let sessionMode;
+    try {
+        sessionMode = parseCreateSessionMode(body.sessionMode);
+    }
+    catch (error) {
+        sendJson(res, 400, {
+            ok: false,
+            error: {
+                code: error instanceof InvalidChatSessionModeError
+                    ? error.code
+                    : "INVALID_SESSION_MODE",
+                message: error instanceof Error ? error.message : String(error),
+            },
+        });
+        return;
+    }
     const provider = typeof body.modelProvider === "string" ? body.modelProvider : undefined;
     const modelId = typeof body.modelId === "string" ? body.modelId : undefined;
     const snapshotInput = body.snapshot;
@@ -578,6 +672,16 @@ workspaceId) {
     let createdSessionId;
     let persisted = false;
     try {
+        if (snapshotInput !== undefined && !shouldAcceptOperatorSnapshot(sessionMode)) {
+            sendJson(res, 409, {
+                ok: false,
+                error: {
+                    code: SESSION_MODE_ACTION_DENIED_CODE,
+                    message: "Operator snapshots cannot be imported into Pi sessions",
+                },
+            });
+            return;
+        }
         const snapshot = snapshotInput === undefined ? undefined : projectCompactSnapshot(snapshotInput);
         // A Console record promises that its Pi JSONL can be reopened after a
         // Console restart. Do not make that promise until Pi has finished
@@ -585,6 +689,7 @@ workspaceId) {
         // future JSONL path, leaving an unrecoverable orphan when init failed or
         // the process restarted in that window.
         const handle = await deps.runtime.createSession({
+            sessionMode,
             ...(provider && modelId ? { model: { provider, modelId } } : {}),
             ...(snapshot
                 ? {
@@ -611,6 +716,7 @@ workspaceId) {
             sessionFile: handle.sessionFile,
             modelProvider: selection.model?.provider ?? handle.model?.provider,
             modelId: selection.model?.modelId ?? handle.model?.modelId,
+            sessionMode,
             // AC-R7-002: explicit parameter from the dispatcher — the runtime
             // store.create wrapper is gone; body workspaceId (if any) only acts as
             // a fallback for direct (non-dispatcher) handler tests.
@@ -681,6 +787,7 @@ export async function handleForkChatSession(req, res, deps, sourceSessionId) {
     try {
         const handle = await deps.runtime.forkSession({
             sourceSessionFile: source.sessionFile ?? "",
+            sessionMode: source.sessionMode,
             ...(source.modelProvider && source.modelId
                 ? { model: { provider: source.modelProvider, modelId: source.modelId } }
                 : {}),
@@ -747,10 +854,7 @@ export async function handleBranchChatSession(req, res, deps, sessionId) {
     }
     try {
         if (!deps.runtime.hasSession(sessionId)) {
-            const reopened = await deps.runtime.reopenSession({
-                sessionId,
-                sessionFile: record.sessionFile,
-            });
+            const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
             if (!reopened.ok) {
                 const mapped = await mapFailedReopen(deps, sessionId, reopened);
                 sendJson(res, mapped.status, {
@@ -851,6 +955,7 @@ export async function handleGetChatSession(_req, res, deps, sessionId) {
         }
     }
     await deps.operationLinker.recoverSession(sessionId);
+    const messagePage = await deps.store.listMessages(sessionId, { limit: 50 });
     const composerDraft = await new ComposerDraftStore(deps.appData).get(sessionId);
     const snapshot = deps.events.snapshot(sessionId);
     const telemetry = deriveChatSessionTelemetry(snapshot);
@@ -862,7 +967,7 @@ export async function handleGetChatSession(_req, res, deps, sessionId) {
         eventEpoch: deps.events.epoch(sessionId),
         session: {
             ...projectBrowserChatSession(record),
-            messages: projectStoredMessagesWithEventOrder(record.messages, snapshot),
+            messages: projectStoredMessagesWithEventOrder(messagePage.messages, snapshot),
             composerDraft,
             activeTurnId: activeTurn?.turnId,
             turnPhase: activeTurn
@@ -874,6 +979,10 @@ export async function handleGetChatSession(_req, res, deps, sessionId) {
             todos: projectCurrentTodos(snapshot) ?? [],
             goal: deps.goalRegistry?.get(sessionId) ?? null,
         },
+        history: {
+            hasMore: messagePage.hasMore,
+            ...(messagePage.nextCursor ? { nextCursor: messagePage.nextCursor } : {}),
+        },
         hasBash: true,
         sessionStats: telemetry.stats,
         usage: telemetry.usage,
@@ -1134,19 +1243,18 @@ export async function handleSteerDeferredTurn(req, res, deps, sessionId, clientR
     }
 }
 async function persistAcceptedSteering(deps, sessionId, turnId, userMessage, clientRequestId) {
+    emitUserMessageEvent(deps, sessionId, turnId, userMessage, clientRequestId, true);
+    await emitDeferredTurnUpdate(deps, sessionId, turnId, undefined, 0);
+}
+function emitUserMessageEvent(deps, sessionId, turnId, userMessage, clientRequestId, steering = false) {
     deps.events.append(sessionId, turnId, {
         kind: "user_message",
         data: {
-            clientRequestId,
-            steering: true,
-            message: {
-                id: userMessage.id,
-                text: userMessage.text,
-                at: userMessage.at,
-            },
+            ...(clientRequestId ? { clientRequestId } : {}),
+            ...(steering ? { steering: true } : {}),
+            message: { id: userMessage.id, text: userMessage.text, at: userMessage.at },
         },
     });
-    await emitDeferredTurnUpdate(deps, sessionId, turnId, undefined, 0);
 }
 /** Lightweight busy-truth endpoint for the client reconcile loop (pi-web
  *  get_state equivalent): exposes the active turn + the latest turn's durable
@@ -1219,13 +1327,8 @@ export async function handleChatGoal(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await deps.store.get(sessionId))) {
-        sendJson(res, 404, {
-            ok: false,
-            error: { code: "NOT_FOUND", message: `chat session not found: ${sessionId}` },
-        });
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
-    }
     if (req.method === "GET") {
         sendJson(res, 200, { ok: true, goal: registry.get(sessionId) });
         return;
@@ -1439,6 +1542,7 @@ export async function listChatSessionSummaries(deps, ownerWorkspaceId) {
             ...(session.thinkingLevel !== undefined
                 ? { thinkingLevel: session.thinkingLevel }
                 : {}),
+            sessionMode: session.sessionMode,
             activeTurnId: active?.turnId,
             turnPhase: active?.abortRequestedAt
                 ? "stopping"
@@ -1462,6 +1566,16 @@ export async function handlePatchChatSession(req, res, deps, sessionId) {
     }
     try {
         const body = await readJsonBody(req);
+        if ("sessionMode" in body) {
+            sendJson(res, 409, {
+                ok: false,
+                error: {
+                    code: SESSION_MODE_IMMUTABLE_CODE,
+                    message: "sessionMode cannot be changed after create",
+                },
+            });
+            return;
+        }
         let record;
         if (typeof body.title === "string")
             record = await deps.store.rename(sessionId, body.title);
@@ -1520,13 +1634,7 @@ export async function handleReopenChatSession(req, res, deps, sessionId) {
         });
         return;
     }
-    const result = await deps.runtime.reopenSession({
-        sessionId,
-        sessionFile: record.sessionFile,
-        ...(record.modelProvider && record.modelId
-            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-            : {}),
-    });
+    const result = await deps.runtime.reopenSession(reopenInitFromRecord(record));
     if (!result.ok) {
         const mapped = await mapFailedReopen(deps, sessionId, result);
         sendJson(res, mapped.status, {
@@ -1606,13 +1714,7 @@ export async function handleChatPrompt(req, res, deps, sessionId) {
             });
             return;
         }
-        const reopen = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopen = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopen.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopen);
             sendJson(res, mapped.status, {
@@ -1690,7 +1792,8 @@ export async function handleChatPrompt(req, res, deps, sessionId) {
             text,
             images,
             signal: ac.signal,
-            onUserMessagePersisted: (record) => {
+            onUserMessagePersisted: (record, userMessage) => {
+                emitUserMessageEvent(deps, sessionId, turnId, userMessage);
                 const users = record.messages.filter((message) => message.role === "user");
                 if (users.length !== 1)
                     return;
@@ -1875,13 +1978,7 @@ export async function handleCreateChatTurn(req, res, deps, sessionId, trustedPay
             });
             return;
         }
-        const reopen = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopen = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopen.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopen);
             sendJson(res, mapped.status, {
@@ -2000,9 +2097,12 @@ export async function handleCreateChatTurn(req, res, deps, sessionId, trustedPay
                 sessionId,
                 turnId: turn.turnId,
                 text,
+                clientRequestId,
                 images,
                 signal: controller.signal,
                 onUserMessagePersisted: async (record, userMessage) => {
+                    if (!trustedPayload)
+                        emitUserMessageEvent(deps, sessionId, turn.turnId, userMessage, clientRequestId);
                     await trustedPayload?.onUserMessagePersisted?.(turn.turnId, userMessage);
                     const users = record.messages.filter((message) => message.role === "user");
                     if (users.length !== 1)
@@ -2156,6 +2256,10 @@ export async function driveGoalRound(deps, sessionId) {
         registry.disarm(sessionId);
         return "idle";
     }
+    if (!isWorkflowSessionMode(readStoredSessionMode(record.sessionMode))) {
+        registry.disarm(sessionId);
+        return "idle";
+    }
     const runtimeFacts = deps.runtime.getSessionBusyFacts(sessionId);
     const operationStore = deps.runtime.actionContext?.operations;
     const linkedOperationIds = linkedOperationIdsForGoal(deps.events.snapshot(sessionId));
@@ -2804,6 +2908,7 @@ export async function handleChatCommands(res, deps, sessionId) {
         const warning = typeof listed.warning === "string" && listed.warning.trim()
             ? listed.warning.trim().slice(0, 160)
             : undefined;
+        const resolvedMode = await readChatSessionMode(deps, sessionId);
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.end(JSON.stringify({
@@ -2811,18 +2916,25 @@ export async function handleChatCommands(res, deps, sessionId) {
             commands,
             capabilities: {
                 sddBingo: Boolean(await deps.sddDataAlignment?.isEligible()),
+                ...(resolvedMode.ok ? { sessionMode: resolvedMode.sessionMode } : {}),
             },
             ...(warning ? { warning } : {}),
         }));
     }
     catch (error) {
         // Whole-list / readiness failures stay fail-soft with empty commands + warning.
+        // Keep the two capability shapes symmetric: the fallback mode mirrors the
+        // client-side prop fallback in useComposer.
+        const fallbackMode = await readChatSessionMode(deps, sessionId).catch(() => undefined);
         res.statusCode = 200;
         res.setHeader("content-type", "application/json; charset=utf-8");
         res.end(JSON.stringify({
             ok: true,
             commands: [],
-            capabilities: { sddBingo: false },
+            capabilities: {
+                sddBingo: false,
+                ...(fallbackMode?.ok ? { sessionMode: fallbackMode.sessionMode } : {}),
+            },
             warning: error instanceof Error ? error.message : "commands unavailable",
         }));
     }
@@ -2845,8 +2957,8 @@ async function handleSddBingo(req, res, deps, sessionId) {
         if (Object.keys(body).some((key) => key !== "skillName")) {
             throw new SddDataAlignmentError("SDD_INVALID_SKILL_NAME", "请求体只允许 skillName 字段", 400);
         }
-        await deps.sddDataAlignment.report(sessionId, body.skillName);
-        sendJson(res, 200, { ok: true });
+        const result = await deps.sddDataAlignment.report(sessionId, body.skillName);
+        sendJson(res, 200, { ok: true, skillName: result.skillName });
     }
     catch (error) {
         if (error instanceof SddDataAlignmentError) {
@@ -3067,13 +3179,7 @@ export async function ensureActiveSession(deps, sessionId) {
             message: `chat session not found: ${sessionId}`,
         };
     }
-    const reopened = await deps.runtime.reopenSession({
-        sessionId,
-        sessionFile: record.sessionFile,
-        ...(record.modelProvider && record.modelId
-            ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-            : {}),
-    });
+    const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
     if (!reopened.ok) {
         return { ok: false, ...(await mapFailedReopen(deps, sessionId, reopened)) };
     }
@@ -3402,7 +3508,7 @@ async function handleStartInterview(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -3444,7 +3550,7 @@ async function handleAnswerInterview(req, res, deps, sessionId, interviewSession
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -3480,7 +3586,7 @@ async function handleAnswerInterview(req, res, deps, sessionId, interviewSession
     }
 }
 async function handleGetInterviewFact(res, deps, sessionId, interviewSessionId, fact) {
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const state = await new ChatInterviewAdapter(deps.appData, deps.events).get(interviewSessionId);
     if (!state || state.interview.operatorSessionId !== sessionId) {
@@ -3578,7 +3684,7 @@ async function handleContractApplyHumanGate(req, res, deps, sessionId, step) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3760,7 +3866,7 @@ async function handleDagHumanGate(req, res, deps, sessionId, step) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3869,7 +3975,7 @@ async function handleMutationHumanGate(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     const ctx = deps.runtime.actionContext;
     if (!ctx) {
@@ -3958,7 +4064,7 @@ async function handleConfirmTaskKind(req, res, deps, sessionId, interviewSession
         });
         return;
     }
-    if (!(await requireChatSession(res, deps, sessionId)))
+    if (!(await requireWorkflowSession(res, deps, sessionId)))
         return;
     try {
         const body = await readJsonBody(req);
@@ -4014,13 +4120,7 @@ export async function handleChatCompact(req, res, deps, sessionId) {
         return;
     }
     if (!deps.runtime.hasSession(sessionId)) {
-        const reopened = await deps.runtime.reopenSession({
-            sessionId,
-            sessionFile: record.sessionFile,
-            ...(record.modelProvider && record.modelId
-                ? { model: { provider: record.modelProvider, modelId: record.modelId } }
-                : {}),
-        });
+        const reopened = await deps.runtime.reopenSession(reopenInitFromRecord(record));
         if (!reopened.ok) {
             const mapped = await mapFailedReopen(deps, sessionId, reopened);
             sendJson(res, mapped.status, {
@@ -4044,7 +4144,9 @@ export async function handleChatCompact(req, res, deps, sessionId) {
     const rawInstructions = typeof body.instructions === "string" ? body.instructions : undefined;
     const currentTodos = projectCurrentTodos(deps.events.snapshot(sessionId));
     const todoInstructions = buildTodoCompactionInstructions(rawInstructions, currentTodos);
-    const customInstructions = buildGoalCompactionInstructions(todoInstructions, deps.goalRegistry?.get(sessionId) ?? null);
+    const customInstructions = isWorkflowSessionMode(record.sessionMode)
+        ? buildGoalCompactionInstructions(todoInstructions, deps.goalRegistry?.get(sessionId) ?? null)
+        : todoInstructions;
     const turnId = deps.events.latestTurnId(sessionId) ?? `${sessionId}:compact`;
     const compactionId = `${sessionId}:compaction:${randomUUID()}`;
     deps.events.append(sessionId, turnId, {
@@ -4130,6 +4232,46 @@ export async function handleChatMessages(res, deps, sessionId, url) {
 export async function handleChatRequest(req, res, deps, pathname, workspaceScope) {
     if (!deps)
         return false;
+    try {
+        return await dispatchChatRequest(req, res, deps, pathname, workspaceScope);
+    }
+    catch (error) {
+        // Store-level fail-closed for corrupt sessionMode: bounded 409 instead of
+        // a generic 500, for any handler that reads the record without its own
+        // UnknownChatSessionModeError mapping (readChatSessionMode covers the rest).
+        if (error instanceof UnknownChatSessionModeError) {
+            sendJson(res, 409, {
+                ok: false,
+                error: { code: error.code, message: error.message },
+            });
+            return true;
+        }
+        throw error;
+    }
+}
+async function dispatchChatRequest(req, res, deps, pathname, workspaceScope) {
+    // Terminal management API (model + Console UI shared PTY registry).
+    if (await handleTerminalRequest(req, res, {
+        terminals: deps.terminals ?? new TerminalSessionRegistry(),
+        gateMutation: (r) => gateMutation(r, deps),
+        // Terminals open in the workspace repo root, not the Console process cwd.
+        defaultCwd: deps.appData.repoRoot,
+    }, pathname)) {
+        return true;
+    }
+    // Source control API (model + Console UI shared workspace ScmService).
+    if (deps.scm) {
+        if (await handleScmRequest(req, res, {
+            scm: deps.scm,
+            gateMutation: (r) => gateMutation(r, deps),
+        }, pathname)) {
+            return true;
+        }
+    }
+    // Browser probe API (read-only; explains iframe refusals to the panel).
+    if (await handleBrowserRequest(req, res, {}, pathname)) {
+        return true;
+    }
     if (!pathname.startsWith("/api/operator/v1/chat/") &&
         !pathname.startsWith("/api/operator/v1/pi/"))
         return false;