@tea-agent/loop-agent 0.43.0-next.10 → 0.43.0-next.11

package/CHANGELOG.md

@@ -2,18 +2,33 @@
 
 ## [Unreleased]
 
+- 修复前端 Plan 无法提交实现步骤的问题：finalize_plan 支持按 AC 绑定实施动作，缺漏在节点内返回修正，避免空计划反复进入设计审查。
+
+- 修复前端最终审查反复猜错范围 ID：明确 checkpoint 参数和补交步骤，收尾正确识别 checkpoint 之后的审批结论。
+
+- 前端实现流程简化为需求实现覆盖审查和 `npm run build`，不再强制单测或测试方案；行为测试可后补，构建结果不冒充行为验证。
+
 ### 改进
 
+- Operator Chat 浏览器面板默认以完整权限运行（去掉 iframe 沙箱与「临时解锁」状态条），并放开本机回环地址限制——`localhost` / `127.0.0.1` / `::1` 等本地开发服务器可直接在面板内浏览；地址栏仍仅放行 http/https，`javascript:` / `data:` / `file:` 等危险协议继续拦截，拒绝嵌入站点（X-Frame-Options / frame-ancestors）的解释面板与出口保持不变。
+
 - 前端 Plan 普通分片按本批完整需求材料打包，固定提示词、用户消息和工具定义不再挤占 24 KB 分片目标，也不再触发发送前的机械二分，减少小需求逐 AC 会话；实际模型容量检查与超限恢复继续生效。
 
 - 前端 Plan 小任务合并规划不再受固定 48 KB 输入门槛限制，避免提示词、用户消息或工具定义变长导致额外分片；完整输入、其余任务规模条件及容量恢复机制保持不变。
 - 节点侧栏修复执行分次下拉菜单被执行记录工具栏遮挡的问题，直接展示所选失败尝试的简要原因，并移除重复的左右切换箭头。
 - Operator Chat 的 Pi Runtime 按职责拆出工具构造、运行态检视和 SDK 适配，并共用创建/恢复/分叉的会话准备流程；对外入口、错误类型和会话行为保持不变。
 
+### 修复
+
+
+- 前端设计审查的写入门禁只统计已提交的审批终态，避免审查范围、发现记录导致合法审批被误判为缺失或歧义；要求修改时保留具体审查意见，缺失、重复及冲突终态仍阻断写入。
+
 ## [0.42.1] - 2026-09-09
 
 ### 新增
 
+- Console Chat 的 `/goal` 持续目标能力对 Pi 模式开放（与工作流模式同语义）：斜杠面板两模式均可见 `/goal`；Pi 会话注册 `get_goal` / `create_goal` / `update_goal` 工具并纳入激活集；Goal HTTP 接口（创建/暂停/恢复/清除）在 Pi 会话不再返回模式拒绝；GoalBar 与目标编辑面板在 Pi 会话渲染；压缩恢复、每轮 Goal 上下文与有界自主续跑（仅显式 `/goal` 才 arm，maxRounds 上限，reload/重启/出错/暂停即 disarm）在 Pi 会话可用。
+
 - Operator Chat 浏览器面板（DSH 风格）：Console 右侧辅助栏新增「浏览器」tab——地址栏（自动补 https、仅 http/https、禁止 javascript/data/file 等危险协议与本机回环地址）、后退/前进/刷新导航栈、系统浏览器跳转；页面运行在无 same-origin、无 top-navigation 的沙箱 iframe 中（访问的页面拿不到 Console 的存储与 API），沙箱状态条支持单页面临时解锁（红色警示 + 一键恢复）；对拒绝被嵌入的站点（X-Frame-Options / frame-ancestors）给出明确解释面板与「在系统浏览器打开 / 仍要加载」出口，探测端点仅返回响应头、仅限 http(s) 非回环、8 秒硬超时。
 - Operator Chat 源代码管理（DSH 风格）：模型获得 `scm` 工具（status/diff/stage/unstage/discard/commit/log/branch/push/pull，固定参数 git 无 shell、限时限量输出）；Console 右侧辅助栏新增「源码」面板（DSH GitView 布局——分支下拉切换、已暂存/更改分组与全部暂存/取消暂存、单行提交框 Ctrl+Enter、内联分页历史带 refs 徽标与相对时间、点击文件看 diff、右键菜单放弃更改/复制路径）；模型与面板共用同一工作区级 ScmService。
 - Operator Chat 在具备 Aimax 凭据资格时，向对话进程注入 `$AIMAX_AUTH_TOKEN`（明文或 `sm4:v1:` 解密后的 ticket），供 skills 读取；文件缺失、无法解析或解密失败时不注入该变量。

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "0.43.0-next.10",
-  "gitSha": "a57ccda19e1372045d03071a01e7e6df1be2e942",
-  "builtAt": "2026-09-10T04:37:15.842Z"
+  "version": "0.43.0-next.11",
+  "gitSha": "e64b429d8ed2b8c87afe9f2a1d167ae29e3fb0d9",
+  "builtAt": "2026-09-10T11:05:38.558Z"
 }

package/dist/executors/dag-pi-executor.js

@@ -2286,9 +2286,13 @@ export async function createFrontendPlanLedgerTools(input) {
     const finalizePlanTool = defineTool({
         name: "finalize_plan",
         label: "finalize_plan",
-        description: "Commit the finalize_plan terminal. Requirements, verification targets, and evidence gaps (optional) were already committed incrementally through record_plan_requirement / record_plan_verification_target / record_plan_evidence_gap; finalize_plan assembles them from the ledger together with these optional remaining fields, publishes the canonical editable patch on a target-surface fact, and commits the terminal. A successful terminal commit occurs exactly once. If validation fails, correct only the reported facts and retry finalize.",
-        promptSnippet: "Commit the finalize_plan terminal (ledger fields + optional residualRisks / realIntegrationGap).",
+        description: "Commit the finalize_plan terminal. Requirements, verification targets, and evidence gaps (optional) were already committed incrementally through record_plan_requirement / record_plan_verification_target / record_plan_evidence_gap; finalize_plan requires implementationSteps: [{requirementIds, action}] covering every frozen requirement (shared steps allowed), and assembles them with the ledger and optional remaining fields, publishes the canonical editable patch on a target-surface fact, and commits the terminal. A successful terminal commit occurs exactly once. If validation fails, correct only the reported facts and retry finalize.",
+        promptSnippet: "Commit finalize_plan with implementationSteps: [{requirementIds, action}] covering every frozen requirement; optional residualRisks / realIntegrationGap.",
         parameters: Type.Object({
+            implementationSteps: Type.Optional(Type.Array(Type.Object({
+                requirementIds: Type.Array(Type.String({ minLength: 1 }), { minItems: 1 }),
+                action: Type.String({ minLength: 1 }),
+            }, { additionalProperties: false }))),
             residualRisks: optionalStringArray,
             realIntegrationGap: optionalString,
         }, { additionalProperties: false }),
@@ -2305,8 +2309,23 @@ export async function createFrontendPlanLedgerTools(input) {
                 if (missingData.length)
                     return planToolReceipt({ ok: false, kind: "finalize_plan", code: "PLAN_DATA_FLOW_INCOMPLETE", error: missingData.map(f => f.reason).join("; ") });
                 const fragment = assemblePlanPatchFromCommittedFacts(committed, contractInheritance) ?? {};
+                const requiredIds = new Set([
+                    ...(input.requirementIds ?? []),
+                    ...contractInheritance.keys(),
+                    ...(Array.isArray(fragment.requirements) ? fragment.requirements.flatMap((entry) => isRecordObject(entry) && typeof entry.id === "string" ? [entry.id] : []) : []),
+                ]);
+                const steps = params?.implementationSteps ?? [];
+                const coveredIds = new Set(steps.flatMap(step => step.requirementIds));
+                const missingRequirementIds = [...requiredIds].filter(id => !coveredIds.has(id));
+                const unknownRequirementIds = [...coveredIds].filter(id => !requiredIds.has(id));
+                if (missingRequirementIds.length || unknownRequirementIds.length || steps.some(step => !step.action.trim())) {
+                    return planToolReceipt({ ok: false, kind: "finalize_plan", code: "PLAN_IMPLEMENTATION_STEPS_INCOMPLETE",
+                        error: `Submit finalize_plan with non-empty implementationSteps: [{requirementIds: [exact frozen IDs], action: "what to change and where"}]. Cover every requirement; shared steps may cover several IDs. Missing: ${missingRequirementIds.join(", ") || "none"}; unknown: ${unknownRequirementIds.join(", ") || "none"}. Actions must not be blank. Do not add a test plan.`,
+                    });
+                }
                 const patch = {
                     ...fragment,
+                    ...(steps.length ? { implementationSteps: steps.map(step => `[${[...new Set(step.requirementIds)].join(", ")}] ${step.action.trim()}`) } : {}),
                     ...(params?.residualRisks
                         ? { residualRisks: params.residualRisks }
                         : {}),
@@ -3802,7 +3821,7 @@ const FRONTEND_PLAN_SEGMENTS = [
         toolNames: null,
         instruction: [
             "PLAN PHASE — finalize.",
-            "All record_* tools are available only for a narrowly named correction if the finalize receipt reports missing or invalid facts. Otherwise call finalize_plan exactly once with no extra fields.",
+            "All record_* tools are available only for a narrowly named correction if the finalize receipt reports missing or invalid facts. Otherwise call finalize_plan with implementationSteps: [{requirementIds, action}] covering every frozen requirement. Describe concrete changes within approved paths, including what constraints preserve; shared steps may cover related IDs. Do not add tests or a test plan.",
         ].join(" "),
     },
 ];
@@ -4318,12 +4337,14 @@ export async function runFrontendReviewSegmentedSessions(input) {
             index--;
             continue;
         }
+        const completionInstruction = `${item.repairs ? "REPAIR: the prior session did not commit all required checkpoints/verdict. Do not repeat the review narrative. " : ""}Complete these exact runtime scope IDs using complete_review_scope: ${JSON.stringify(scopes.map(scope => scope.id))}. These are scope IDs, not node IDs. ${finalScope ? `After those checkpoints succeed, call exactly one terminal tool: ${terminalKinds.join(" or ")}. A prose conclusion is not a committed verdict.` : "More scopes remain; do not submit an overall verdict yet."}`;
+        const userMessage = `${input.sessionOptions.userMessage}\n\n${completionInstruction}`;
         if (++calls > 128)
             return { ...last, ok: false, failureCategory: "frontend-input-exhausted", stderr: "FRONTEND_REVIEW_RECOVERY_EXHAUSTED: session quota reached" };
-        last = await observeFrontendSession({ ...input.observation, phase: `${input.phase}/scope`, scopeIds: scopes.map(s => s.id), prompt, userMessage: input.sessionOptions.userMessage, customTools,
+        last = await observeFrontendSession({ ...input.observation, phase: `${input.phase}/scope`, scopeIds: scopes.map(s => s.id), prompt, userMessage, customTools,
             artifactPath: input.observation?.artifactPath ? `${input.observation.artifactPath}-${calls}.json` : undefined,
             committedCount: () => protocol.committedFacts().length, durableCommittedCount: () => protocol.committedFacts().length,
-        }, observer => input.piStepFn({ ...input.sessionOptions, prompt, onAttemptObservation: observer, writerToolPolicy: { requireSdk: true, customTools } }));
+        }, observer => input.piStepFn({ ...input.sessionOptions, prompt, userMessage, onAttemptObservation: observer, writerToolPolicy: { requireSdk: true, customTools } }));
         await input.tools.flush();
         await input.inventory.validate();
         if (last.timedOut || /interrupt|termination-unconfirmed|budget_breach/.test(last.failureCategory))
@@ -4607,7 +4628,7 @@ export async function runFrontendPlanSegmentedSessions(input) {
     const buildPhasePrompt = (segment, missing = [], scopeIds = allRequirementIds) => {
         const compact = allRequirementIds.length > 0
             ? compactFrontendPlanPromptForRequirementSlice(input.basePrompt, scopeIds, {
-                includeRequirementText: segment.id === "global-mock-data",
+                includeRequirementText: segment.id === "global-mock-data" || segment.id === "finalize",
                 includeVerificationTargets: false,
                 includeDesignEvidence: segment.id === "global-dependency-deviation" || segment.id === "finalize",
                 includeChecklist: false,

package/dist/executors/shell-executor.js

@@ -2329,7 +2329,7 @@ async function collectReviewTerminalKinds(runDir, reviewNodeId) {
             const kind = record.fact.kind;
             return typeof kind === "string" ? kind : "";
         })
-            .filter(Boolean);
+            .filter((kind) => kind === "approve_review" || kind === "request_review_changes");
     }
     catch {
         return [];
@@ -2348,7 +2348,7 @@ async function collectDesignTerminalKinds(runDir, designNodeId) {
             const kind = record.fact.kind;
             return typeof kind === "string" ? kind : "";
         })
-            .filter(Boolean);
+            .filter((kind) => kind === "approve_design" || kind === "request_design_changes");
     }
     catch {
         return [];
@@ -2974,6 +2974,7 @@ async function executeFrontendCloseout(input, meta) {
         const contract = frontendImplementationContractSchema.parse(JSON.parse(contractRaw));
         const trace = context.verificationTrace;
         const verificationTargets = (trace?.targets ?? []).map((target) => ({
+            mode: contract.verificationTargets.find((entry) => entry.id === target.id)?.mode ?? "static",
             status: target.status === "ok" ? "ok" : "failed",
         }));
         const mockEvidenceBound = contract.mockApi.strategy !== "not-needed" &&

package/dist/worker/console/chat/browser-policy.js

@@ -1,15 +1,11 @@
 /**
  * Pure URL policy for the Operator Chat browser panel: normalize user input
- * into an http(s) URL and refuse destinations that would be dangerous to
- * embed in the panel iframe. Dependency-free so it is unit-testable.
+ * into an http(s) URL. Dependency-free so it is unit-testable.
  *
- * The iframe sandbox (opaque origin — no allow-same-origin, no top
- * navigation) is the primary security boundary; this module is the
- * address-bar gate on top of it: only http/https may be navigated, and
- * loopback addresses are refused so a browsed page cannot probe local
- * services by user action. The Console's OWN origin is explicitly allowed —
- * the sandbox still renders it in an opaque origin with no same-origin
- * privileges, exactly like any other site.
+ * Only the scheme is gated: javascript:, data:, file: and friends must never
+ * reach the iframe. Local addresses (localhost / 127.0.0.1 / ::1 / LAN
+ * hosts) are deliberately allowed — the panel is a development console and
+ * its users routinely browse local dev servers.
  */
 /**
  * Extract the `frame-ancestors` source list of a Content-Security-Policy
@@ -47,16 +43,6 @@ export function embeddabilityOf(probe) {
     }
     return "embeddable";
 }
-/** A loopback hostname (localhost, IPv6 ::1, 127.0.0.0/8, 0.0.0.0). */
-export function isLoopbackHostname(hostname) {
-    const host = hostname.replace(/^\[|\]$/g, "").toLowerCase();
-    if (host === "localhost" || host === "::1" || host === "0.0.0.0")
-        return true;
-    const parts = host.split(".");
-    return (parts.length === 4 &&
-        parts[0] === "127" &&
-        parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255));
-}
 /**
  * Schemes that must never reach the iframe even without `//` (javascript:,
  * data:, file:, ...). Host:port lookalikes (example.com:8080) are NOT here —
@@ -88,12 +74,8 @@ const FORBIDDEN_SCHEMES = new Set([
 /**
  * Normalize one address-bar input against the navigation policy.
  * @param input raw user text.
- * @param selfOrigin the Console's own origin (window.location.origin). The
- * Console itself may be browsed in the panel (the sandbox keeps it opaque),
- * so it is let through BEFORE the loopback check — its host is normally
- * loopback.
  */
-export function normalizeBrowserUrl(input, selfOrigin) {
+export function normalizeBrowserUrl(input) {
     const trimmed = input.trim();
     if (trimmed === "")
         return { kind: "invalid" };
@@ -127,17 +109,5 @@ export function normalizeBrowserUrl(input, selfOrigin) {
     if (url.protocol !== "http:" && url.protocol !== "https:") {
         return { kind: "blocked", reason: "scheme" };
     }
-    // The Console's own origin is allowed (browsed in an opaque origin like
-    // any other site); checked before the loopback gate because its host is
-    // normally loopback.
-    try {
-        if (url.origin === new URL(selfOrigin).origin)
-            return { kind: "ok", url: url.href };
-    }
-    catch {
-        // Unparsable selfOrigin (never in practice): fall through to the gate.
-    }
-    if (isLoopbackHostname(url.hostname))
-        return { kind: "blocked", reason: "loopback" };
     return { kind: "ok", url: url.href };
 }

package/dist/worker/console/chat/browser-routes.js

@@ -3,9 +3,10 @@
  * endpoint the panel uses to explain an iframe refusal (X-Frame-Options /
  * CSP frame-ancestors are exactly the signals the browser enforces when it
  * refuses to embed a site). The probe is display-only (headers back to the
- * caller), restricted to http(s) non-loopback URLs, with a hard timeout.
+ * caller), restricted to http(s) URLs, with a hard timeout. Local addresses
+ * are allowed — the panel routinely browses local dev servers.
  */
-import { embeddabilityOf, extractFrameAncestors, isLoopbackHostname, } from "./browser-policy.js";
+import { embeddabilityOf, extractFrameAncestors, } from "./browser-policy.js";
 function workspaceIdOf(req) {
     try {
         return new URL(req.url ?? "/", "http://localhost").searchParams.get("workspaceId") ?? undefined;
@@ -69,15 +70,6 @@ export async function handleBrowserRequest(req, res, deps, pathname) {
                 });
                 return true;
             }
-            // Mirror the address-bar policy: loopback stays unreachable from
-            // the panel, so probing it would leak nothing the panel could use.
-            if (isLoopbackHostname(parsed.hostname)) {
-                sendJson(res, 400, {
-                    ok: false,
-                    error: { code: "LOOPBACK_REFUSED", message: "local addresses are not probed" },
-                });
-                return true;
-            }
             const controller = new AbortController();
             const timer = setTimeout(() => controller.abort(), 8000);
             try {

package/dist/worker/console/chat/pi-runtime/custom-tools/goal-tools.js

@@ -1,5 +1,6 @@
 /**
- * Session-bound Goal tools (workflow-mode only).
+ * Session-bound Goal tools (shared by workflow and Pi modes since
+ * 2026-09-10; see exec-plan 2026-09-10-console-chat-goal-for-pi-mode).
  * create_goal still requires a consumed model-create grant from the registry.
  */
 const GET_GOAL_DESCRIPTION = "Read the current session's durable cross-turn Goal, including revision, status, round limit, and whether this Console process is authorized to continue it.";

package/dist/worker/console/chat/pi-runtime.js

@@ -33,7 +33,7 @@ import { parseProviderError, } from "./provider-error.js";
 import { projectCompactSnapshot, } from "./chat-event-store.js";
 import { extractUsageSample } from "./usage.js";
 import { OPERATOR_CHAT_ALLOWED_TOOLS, authorizeOperatorChatTool, assertNoWriteToolInList, } from "./tools.js";
-import { authorizeChatSessionTool, DEFAULT_CONSOLE_CHAT_SESSION_MODE, chatActiveToolBaseline, composeChatSystemPrompt, composeChatSystemPromptParts, computeChatActiveToolNames, shouldInjectGoalContinuation, shouldLoadWorkflowBusinessTools, } from "./session-mode.js";
+import { authorizeChatSessionTool, DEFAULT_CONSOLE_CHAT_SESSION_MODE, chatActiveToolBaseline, composeChatSystemPrompt, composeChatSystemPromptParts, computeChatActiveToolNames, shouldLoadWorkflowBusinessTools, } from "./session-mode.js";
 import { buildAgentCustomTool, ExploreOrchestrator, } from "./subagents/index.js";
 import { createOperatorChatResourceLoader, } from "./resource-loader.js";
 import { applySkillAutoInvocationPreferences, loadResourcePreferences, } from "./resource-preferences-store.js";
@@ -492,9 +492,7 @@ export class ConsolePiRuntime {
         const pressureExtension = sessionId
             ? this.createContextPressureInlineExtension(sessionId)
             : undefined;
-        const goalContextExtension = sessionId &&
-            this.options.goalRegistry &&
-            shouldInjectGoalContinuation(sessionMode)
+        const goalContextExtension = sessionId && this.options.goalRegistry
             ? createGoalCompactionContextExtension({
                 sessionId,
                 registry: this.options.goalRegistry,
@@ -985,7 +983,7 @@ export class ConsolePiRuntime {
                 sessionMode,
             })
             : undefined;
-        const goalTools = loadWorkflowTools && this.options.goalRegistry
+        const goalTools = this.options.goalRegistry
             ? await buildGoalTools({ sessionId, registry: this.options.goalRegistry })
             : [];
         const terminalTools = this.options.terminalRegistry
@@ -1819,8 +1817,7 @@ export class ConsolePiRuntime {
             if (options?.turnId && this.options.todoRegistry) {
                 this.options.todoRegistry.startTurn(sessionId, options.turnId);
             }
-            if (this.options.goalRegistry &&
-                shouldInjectGoalContinuation(this.sessionModeOf(sessionId))) {
+            if (this.options.goalRegistry) {
                 this.options.goalRegistry.startTurn(sessionId, text);
             }
             // AC-FIX-002: if Stop already fired before readiness, never start model work.

package/dist/worker/console/chat/routes.js

@@ -1327,7 +1327,7 @@ export async function handleChatGoal(req, res, deps, sessionId) {
         });
         return;
     }
-    if (!(await requireWorkflowSession(res, deps, sessionId)))
+    if (!(await requireChatSession(res, deps, sessionId)))
         return;
     if (req.method === "GET") {
         sendJson(res, 200, { ok: true, goal: registry.get(sessionId) });
@@ -2256,10 +2256,6 @@ export async function driveGoalRound(deps, sessionId) {
         registry.disarm(sessionId);
         return "idle";
     }
-    if (!isWorkflowSessionMode(readStoredSessionMode(record.sessionMode))) {
-        registry.disarm(sessionId);
-        return "idle";
-    }
     const runtimeFacts = deps.runtime.getSessionBusyFacts(sessionId);
     const operationStore = deps.runtime.actionContext?.operations;
     const linkedOperationIds = linkedOperationIdsForGoal(deps.events.snapshot(sessionId));

package/dist/worker/console/chat/session-mode-view.js

@@ -27,21 +27,22 @@ export const SESSION_MODE_COPY = {
         description: "保留压缩与 Explore，直接协作编码",
         createLabel: "新建 Pi 会话",
         bannerTitle: "Pi",
-        bannerBody: "保留 Console 压缩与 Explore，直接协作编码。不注入工作流业务指令、业务工具或 Goal 驱动。",
+        bannerBody: "保留 Console 压缩、Explore 与持续目标，直接协作编码。不注入工作流业务指令与业务工具。",
         landingTitle: "开始一段 Pi 协作",
-        landingBody: "Pi 模式保留压缩、Explore、认证与 SDD 接入，取消工作流业务注入。适合有人监督的直接编码与调试。",
+        landingBody: "Pi 模式保留压缩、Explore、持续目标、认证与 SDD 接入，取消工作流业务注入。适合有人监督的直接编码与调试。",
         emptyTitle: "直接协作编码",
         emptyBody: "会话已就绪。输入框上方可切换工作区或模式。使用 Pi 工具读写仓库；Explore 负责只读深挖。本会话不加载任务 / DAG 工作流工具。",
     },
 };
 /** Slash actions that only exist in workflow sessions. Browser-safe: pure
- *  string constants, no runtime/tool policy imports. */
+ *  string constants, no runtime/tool policy imports. `/goal` was moved to
+ *  shared on 2026-09-10 (exec-plan 2026-09-10-console-chat-goal-for-pi-mode);
+ *  interview/panel navigation remain workflow-only. */
 export const WORKFLOW_EXCLUSIVE_SLASH_ACTIONS = Object.freeze([
     "focus-panel:task",
     "focus-panel:contract",
     "focus-panel:dag",
     "focus:interview",
-    "goal",
 ]);
 export function isWorkflowExclusiveSlashAction(action) {
     return WORKFLOW_EXCLUSIVE_SLASH_ACTIONS.includes(action);

package/dist/worker/console/chat/session-mode.js

@@ -74,7 +74,8 @@ export const PI_CHAT_SYSTEM_PROMPT_BASE = [
     "Use read/write/edit/bash/grep/find/ls to inspect and change the workspace. apply_patch, full-tools, shell and coding-chat are denied.",
     "Agent (Explore) is a built-in read-only subagent for path-uncertain codebase search. Do not use it for a known single-file read. Prefer safe-read/safe-grep for secret-safe probes.",
     "ask_user_question pauses for a real user answer. todo_write tracks the current work and is restored after compression; it is not a workflow auto-continue signal. The persistent terminal tool is available.",
-    "This session keeps Console compression (L0/L1/L2, sift, strict checkpoint) and existing Aimax / SDD access. Do not create tasks, run DAGs, drive Goals, or start requirement interviews from this session.",
+    "Goal tools (get_goal / create_goal / update_goal) track the session's durable cross-turn objective. Create a Goal only when the user explicitly asks to start one; iterate in bounded rounds until complete or blocked.",
+    "This session keeps Console compression (L0/L1/L2, sift, strict checkpoint) and existing Aimax / SDD access. Do not create tasks, run DAGs, or start requirement interviews from this session.",
     "Obey repository AGENTS.md, skills and extensions when they apply. Choosing Pi mode is not extra write authorization and does not bypass Console access control or output scrubbing.",
 ].join("\n");
 export const CHAT_SAFE_EXPLORE_TOOL_IDS = Object.freeze([
@@ -87,7 +88,11 @@ export const PI_CHAT_GENERIC_HELPER_TOOLS = Object.freeze([
     "ask_user_question",
     "todo_write",
 ]);
-export const PI_CHAT_WORKFLOW_TOOL_IDS = Object.freeze([
+/** Durable cross-turn Goal tools. Shared by both session modes since
+ *  2026-09-10 (exec-plan 2026-09-10-console-chat-goal-for-pi-mode); they are
+ *  NOT workflow business tools and are registered whenever a GoalRegistry
+ *  is present. */
+export const GOAL_TOOL_IDS = Object.freeze([
     "get_goal",
     "create_goal",
     "update_goal",
@@ -102,7 +107,6 @@ const CHAT_EXTENSION_DENIED_TOOL_IDS = new Set([
     "shell",
 ].map((name) => name.toLowerCase()));
 const WORKFLOW_OPERATOR_TOOL_IDS = new Set(OPERATOR_CHAT_ALLOWED_TOOLS.map((name) => name.toLowerCase()));
-const PI_GOAL_TOOL_IDS = new Set(PI_CHAT_WORKFLOW_TOOL_IDS.map((name) => name.toLowerCase()));
 export function workflowActiveToolBaseline() {
     return [
         ...OPERATOR_CHAT_ALLOWED_TOOLS,
@@ -117,6 +121,7 @@ export function piActiveToolBaseline() {
         ...CHAT_SAFE_EXPLORE_TOOL_IDS,
         ...OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS,
         ...PI_CHAT_GENERIC_HELPER_TOOLS,
+        ...GOAL_TOOL_IDS,
     ];
 }
 export function chatActiveToolBaseline(sessionMode) {
@@ -126,7 +131,8 @@ export function chatActiveToolBaseline(sessionMode) {
 }
 /**
  * Gate 2 pin: mode baseline plus user/project extension tools. Pi mode must
- * not re-add operator actions or Goal tools via the extras pass.
+ * not re-add operator actions via the extras pass (Goal tools are shared and
+ * part of the Pi baseline since 2026-09-10).
  */
 export function computeChatActiveToolNames(session, sessionMode) {
     const baseline = chatActiveToolBaseline(sessionMode);
@@ -145,8 +151,6 @@ export function computeChatActiveToolNames(session, sessionMode) {
             continue;
         if (sessionMode === "pi" && WORKFLOW_OPERATOR_TOOL_IDS.has(lower))
             continue;
-        if (sessionMode === "pi" && PI_GOAL_TOOL_IDS.has(lower))
-            continue;
         extras.push(name);
     }
     return extras.length > 0 ? [...baseline, ...extras] : baseline;
@@ -172,7 +176,7 @@ export function authorizeChatSessionTool(toolId, sessionMode) {
         };
     }
     const lower = id.toLowerCase();
-    if (WORKFLOW_OPERATOR_TOOL_IDS.has(lower) || PI_GOAL_TOOL_IDS.has(lower)) {
+    if (WORKFLOW_OPERATOR_TOOL_IDS.has(lower)) {
         return {
             ok: false,
             code: "tool-denied",
@@ -207,9 +211,6 @@ export { WORKFLOW_EXCLUSIVE_SLASH_ACTIONS, isWorkflowExclusiveSlashAction, } fro
 export function shouldLoadWorkflowBusinessTools(sessionMode) {
     return sessionMode === "workflow";
 }
-export function shouldInjectGoalContinuation(sessionMode) {
-    return sessionMode === "workflow";
-}
 export function shouldAcceptOperatorSnapshot(sessionMode) {
     return sessionMode === "workflow";
 }

package/dist/worker/console/static/assets/{abnfDiagram-N423BO3Z-D_fNbWc_.js → abnfDiagram-N423BO3Z-CTSK0xbU.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-Dwd6r-SF.js";import{p as f}from"./chunk-JWPE2WC7-CuGp0DeE.js";import{_ as n,l as o}from"./mermaid.core-p2l8IrWY.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-BdXcxtlb.js";import"./index-24jp3aBh.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-C92cgilm.js";import{p as f}from"./chunk-JWPE2WC7-CGHbJyCH.js";import{_ as n,l as o}from"./mermaid.core-BIMhty7A.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-B-4yuRAX.js";import"./index-CUPeoE8W.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/dist/worker/console/static/assets/{arc-_HuqLW6m.js → arc-_2MfctFP.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-p2l8IrWY.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-BIMhty7A.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};