@tea-agent/loop-agent 0.43.0-next.6 → 0.43.0-next.7

package/CHANGELOG.md

@@ -4,14 +4,18 @@
 
 ### 新增
 
+- Operator Chat 浏览器面板（DSH 风格）：Console 右侧辅助栏新增「浏览器」tab——地址栏（自动补 https、仅 http/https、禁止 javascript/data/file 等危险协议与本机回环地址）、后退/前进/刷新导航栈、系统浏览器跳转；页面运行在无 same-origin、无 top-navigation 的沙箱 iframe 中（访问的页面拿不到 Console 的存储与 API），沙箱状态条支持单页面临时解锁（红色警示 + 一键恢复）；对拒绝被嵌入的站点（X-Frame-Options / frame-ancestors）给出明确解释面板与「在系统浏览器打开 / 仍要加载」出口，探测端点仅返回响应头、仅限 http(s) 非回环、8 秒硬超时。
 - Operator Chat 源代码管理（DSH 风格）：模型获得 `scm` 工具（status/diff/stage/unstage/discard/commit/log/branch/push/pull，固定参数 git 无 shell、限时限量输出）；Console 右侧辅助栏新增「源码」面板（DSH GitView 布局——分支下拉切换、已暂存/更改分组与全部暂存/取消暂存、单行提交框 Ctrl+Enter、内联分页历史带 refs 徽标与相对时间、点击文件看 diff、右键菜单放弃更改/复制路径）；模型与面板共用同一工作区级 ScmService。
 - Operator Chat 在具备 Aimax 凭据资格时，向对话进程注入 `$AIMAX_AUTH_TOKEN`（明文或 `sm4:v1:` 解密后的 ticket），供 skills 读取；文件缺失、无法解析或解密失败时不注入该变量。
 - Operator Chat 终端管理（DSH 风格）：模型获得 `terminal` 持久 PTY 工具（跨平台 shell 目录——Windows 提供 powershell/bash，macOS/Linux 提供 bash/zsh，pwsh 7 装了即用；cwd/环境变量/后台任务跨调用保留，完成标记协议 + 超时与截断保护，枚举与默认值按平台动态生成）；Console 右侧辅助栏新增「终端」面板（xterm.js 渲染，实时查看/接管模型的 shell，按平台动态展示可创建的 shell，支持发送输入、Ctrl+C、终止并关闭）；模型 shell 与用户面板共用同一会话注册表并开在工作区仓库根目录，命名区分来源。
 
 ### 改进
 
-- 修复模型续跑取消后带部分文字仍被标记成功的问题；前端 Plan 的取消、认证、限流及策略失败优先于容量恢复，精确格式错误保留原修复路径。完整性检查按需求建立单次索引，减少大计划重复扫描，同时拆分纯检查与恢复策略模块。
+- 修复前端契约可选字段未填写时，评审分片索引引用不存在字段、导致设计评审启动前失败的问题。分片生成跳过 undefined；读取端明确拒绝缺失字段、无效引用、重复或非法范围及未索引内容，保留合法空数组和 JSON 空值。
 
+- Operator Chat 侧栏「添加工作区」图标改为与 DSH 一致的文件夹加号，不再用纯加号。
+- Operator Chat 侧栏改为单一「新会话」；空白会话在输入框上方用芯片选择工作区和模式（工作流 / Pi），有历史后芯片收起。不再用落地页双卡或「新 Pi」按钮；换模式会复用或新建对应空白会话，不会改已有会话的模式。
+- 修复模型续跑取消后带部分文字仍被标记成功的问题；前端 Plan 的取消、认证、限流及策略失败优先于容量恢复，精确格式错误保留原修复路径。完整性检查按需求建立单次索引，减少大计划重复扫描，同时拆分纯检查与恢复策略模块。
 - 优化 Operator Chat 长会话的流式渲染：完成回合、消息行、工具卡和用户输入锚点建立稳定的 memo 边界，流式文本更新不再重复渲染整段历史或重装锚点测量监听；缓存会在历史消息或工具实际更新时正确失效；无新增折叠回合时不再提交空状态及重复写入本地存储，工具参数与结果格式化按真实输入变化缓存。
 - 对话页「过程折叠」对齐 DSH 细节：折叠后的内容仍保留在页面中，浏览器 Ctrl+F 可直接命中并自动展开；折叠行展开时不再多出底部空隙；箭头改为 16px、颜色更淡的固定图标（靠旋转而非换图标），并补齐系统「减少动态效果」偏好；汇总文案新增「N 个 subagent」，内置 Explore 子代理不再计入普通工具调用。
 - 恢复前端 Plan 实时事实分页读取、逐需求 UX 遗漏检查与已完成范围复用；超限时补齐剩余验证目标，并接通 DAG 到 SDK 的原会话续跑。局部状态修改保留其他需求的关联，沿用耐久账本、显式替换和冻结分片边界。
@@ -33,6 +37,7 @@
 
 ### 修复
 
+- 修复点「新 Pi」后一发消息侧栏就变成「工作流」：全局会话列表和点进会话时漏了 `sessionMode`，缺省被当成工作流。
 - 修复对话页存在运行活动时，收起状态的右侧辅助栏展开按钮覆盖「运行活动 N」及数字徽标的问题；中大尺寸布局现在保留 8px 操作间距，窄屏布局不变。
 - 修复 Operator Chat 消息流的六处实际使用问题：
   - **回复被吞**：断线/重连（含每 25 秒的 SSE 事件窗口轮转）后，保留事件里已经生成的正文会在事件流恢复时重新应用到对应回合，不再被静默丢弃；仅当该回合已有更新内容时才跳过，避免重复气泡。

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "0.43.0-next.6",
-  "gitSha": "086f94db72547618b8dceb905a3972164acf56dd",
-  "builtAt": "2026-09-09T06:46:29.301Z"
+  "version": "0.43.0-next.7",
+  "gitSha": "55437ad2cc676289ad970390a991cf28f47584d2",
+  "builtAt": "2026-09-09T08:12:25.724Z"
 }

package/dist/worker/console/chat/browser-policy.js

@@ -0,0 +1,143 @@
+/**
+ * Pure URL policy for the Operator Chat browser panel: normalize user input
+ * into an http(s) URL and refuse destinations that would be dangerous to
+ * embed in the panel iframe. Dependency-free so it is unit-testable.
+ *
+ * The iframe sandbox (opaque origin — no allow-same-origin, no top
+ * navigation) is the primary security boundary; this module is the
+ * address-bar gate on top of it: only http/https may be navigated, and
+ * loopback addresses are refused so a browsed page cannot probe local
+ * services by user action. The Console's OWN origin is explicitly allowed —
+ * the sandbox still renders it in an opaque origin with no same-origin
+ * privileges, exactly like any other site.
+ */
+/**
+ * Extract the `frame-ancestors` source list of a Content-Security-Policy
+ * header, or undefined when the directive is absent (or empty).
+ */
+export function extractFrameAncestors(csp) {
+    if (csp === null)
+        return undefined;
+    for (const directive of csp.split(";")) {
+        const parts = directive.trim().split(/\s+/);
+        if (parts[0] === "frame-ancestors") {
+            const sources = parts.slice(1).filter((source) => source !== "");
+            return sources.length === 0 ? undefined : sources;
+        }
+    }
+    return undefined;
+}
+/**
+ * Decide whether a site can render inside the panel iframe. The signals are
+ * exactly the ones the browser enforces when it refuses an iframe load:
+ * X-Frame-Options DENY/SAMEORIGIN, or a frame-ancestors directive that does
+ * not allow `*` ('self' means the SITE's own origin — never ours, so it also
+ * blocks the panel). A site we could not reach yields 'unknown' and the
+ * plain iframe stays.
+ */
+export function embeddabilityOf(probe) {
+    if (probe.reachable !== true)
+        return "unknown";
+    const xfo = probe.xFrameOptions?.trim().toUpperCase();
+    if (xfo === "DENY" || xfo === "SAMEORIGIN")
+        return "blocked";
+    if (probe.frameAncestors !== undefined &&
+        !probe.frameAncestors.some((source) => source === "*")) {
+        return "blocked";
+    }
+    return "embeddable";
+}
+/** A loopback hostname (localhost, IPv6 ::1, 127.0.0.0/8, 0.0.0.0). */
+export function isLoopbackHostname(hostname) {
+    const host = hostname.replace(/^\[|\]$/g, "").toLowerCase();
+    if (host === "localhost" || host === "::1" || host === "0.0.0.0")
+        return true;
+    const parts = host.split(".");
+    return (parts.length === 4 &&
+        parts[0] === "127" &&
+        parts.every((part) => /^\d{1,3}$/.test(part) && Number(part) <= 255));
+}
+/**
+ * Schemes that must never reach the iframe even without `//` (javascript:,
+ * data:, file:, ...). Host:port lookalikes (example.com:8080) are NOT here —
+ * they parse as hosts below.
+ */
+const FORBIDDEN_SCHEMES = new Set([
+    "javascript",
+    "data",
+    "file",
+    "about",
+    "vbscript",
+    "blob",
+    "mailto",
+    "tel",
+    "ftp",
+    "ftps",
+    "ws",
+    "wss",
+    "sftp",
+    "ssh",
+    "chrome",
+    "chrome-extension",
+    "moz-extension",
+    "edge",
+    "opera",
+    "resource",
+    "view-source",
+]);
+/**
+ * Normalize one address-bar input against the navigation policy.
+ * @param input raw user text.
+ * @param selfOrigin the Console's own origin (window.location.origin). The
+ * Console itself may be browsed in the panel (the sandbox keeps it opaque),
+ * so it is let through BEFORE the loopback check — its host is normally
+ * loopback.
+ */
+export function normalizeBrowserUrl(input, selfOrigin) {
+    const trimmed = input.trim();
+    if (trimmed === "")
+        return { kind: "invalid" };
+    // Distinguish an explicit scheme from a bare host:port. "example.com:8080"
+    // would match a naive scheme regex (dots are legal in schemes), so a
+    // scheme prefix is only honored when it is http(s) or a known-forbidden
+    // scheme; anything else is treated as a host and gets https://.
+    const schemeMatch = /^([a-zA-Z][a-zA-Z0-9+.-]*):/.exec(trimmed);
+    let withScheme;
+    if (schemeMatch === null) {
+        withScheme = `https://${trimmed}`;
+    }
+    else {
+        const scheme = schemeMatch[1]?.toLowerCase() ?? "";
+        if (scheme === "http" || scheme === "https")
+            withScheme = trimmed;
+        else if (FORBIDDEN_SCHEMES.has(scheme))
+            return { kind: "blocked", reason: "scheme" };
+        else
+            withScheme = `https://${trimmed}`;
+    }
+    let url;
+    try {
+        url = new URL(withScheme);
+    }
+    catch {
+        return { kind: "invalid" };
+    }
+    // Protocol backstop: any URL that still parses to a non-http(s) scheme
+    // (ftp://, ws:// — which carry `//` and skip the list) is refused here.
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return { kind: "blocked", reason: "scheme" };
+    }
+    // The Console's own origin is allowed (browsed in an opaque origin like
+    // any other site); checked before the loopback gate because its host is
+    // normally loopback.
+    try {
+        if (url.origin === new URL(selfOrigin).origin)
+            return { kind: "ok", url: url.href };
+    }
+    catch {
+        // Unparsable selfOrigin (never in practice): fall through to the gate.
+    }
+    if (isLoopbackHostname(url.hostname))
+        return { kind: "blocked", reason: "loopback" };
+    return { kind: "ok", url: url.href };
+}

package/dist/worker/console/chat/browser-routes.js

@@ -0,0 +1,148 @@
+/**
+ * HTTP routes for the Operator Chat browser panel: one read-only probe
+ * endpoint the panel uses to explain an iframe refusal (X-Frame-Options /
+ * CSP frame-ancestors are exactly the signals the browser enforces when it
+ * refuses to embed a site). The probe is display-only (headers back to the
+ * caller), restricted to http(s) non-loopback URLs, with a hard timeout.
+ */
+import { embeddabilityOf, extractFrameAncestors, isLoopbackHostname, } from "./browser-policy.js";
+function workspaceIdOf(req) {
+    try {
+        return new URL(req.url ?? "/", "http://localhost").searchParams.get("workspaceId") ?? undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function sendJson(res, status, body) {
+    res.writeHead(status, {
+        "content-type": "application/json; charset=utf-8",
+        "cache-control": "no-store",
+    });
+    res.end(JSON.stringify(body));
+}
+/** Route dispatcher; returns true when the request was handled. */
+export async function handleBrowserRequest(req, res, deps, pathname) {
+    if (!pathname.startsWith("/api/operator/v1/chat/browser"))
+        return false;
+    const method = (req.method ?? "GET").toUpperCase();
+    const rest = pathname.slice("/api/operator/v1/chat/browser".length);
+    const parts = rest.split("/").filter(Boolean);
+    const sub = parts[0] ?? "";
+    try {
+        if (method === "GET" && sub === "probe" && parts.length === 1) {
+            // Fail-closed: the probe needs a workspaceId like every chat API.
+            if (deps.requireWorkspace) {
+                const ws = deps.requireWorkspace(req);
+                if (!ws.ok) {
+                    sendJson(res, 400, {
+                        ok: false,
+                        error: { code: "WORKSPACE_REQUIRED", message: "workspaceId is required" },
+                    });
+                    return true;
+                }
+            }
+            else if (!workspaceIdOf(req)) {
+                sendJson(res, 400, {
+                    ok: false,
+                    error: { code: "WORKSPACE_REQUIRED", message: "workspaceId is required" },
+                });
+                return true;
+            }
+            const url = new URL(req.url ?? "/", "http://localhost");
+            const raw = url.searchParams.get("url") ?? "";
+            let parsed;
+            try {
+                parsed = new URL(raw);
+            }
+            catch {
+                sendJson(res, 400, {
+                    ok: false,
+                    error: { code: "INVALID_URL", message: "invalid url" },
+                });
+                return true;
+            }
+            if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+                sendJson(res, 400, {
+                    ok: false,
+                    error: { code: "BAD_SCHEME", message: "only http/https urls can be probed" },
+                });
+                return true;
+            }
+            // Mirror the address-bar policy: loopback stays unreachable from
+            // the panel, so probing it would leak nothing the panel could use.
+            if (isLoopbackHostname(parsed.hostname)) {
+                sendJson(res, 400, {
+                    ok: false,
+                    error: { code: "LOOPBACK_REFUSED", message: "local addresses are not probed" },
+                });
+                return true;
+            }
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), 8000);
+            try {
+                let response = await fetch(parsed, {
+                    method: "HEAD",
+                    redirect: "follow",
+                    signal: controller.signal,
+                });
+                // Some servers answer HEAD with 405/501; retry once as GET
+                // (the body is discarded — only the headers matter).
+                if (response.status === 405 || response.status === 501) {
+                    response = await fetch(parsed, {
+                        method: "GET",
+                        redirect: "follow",
+                        signal: controller.signal,
+                    });
+                }
+                const csp = response.headers.get("content-security-policy");
+                const frameAncestors = extractFrameAncestors(csp);
+                const xFrameOptions = response.headers.get("x-frame-options");
+                const probe = {
+                    reachable: true,
+                    url: response.url,
+                    status: response.status,
+                    ...(xFrameOptions !== null ? { xFrameOptions } : {}),
+                    ...(frameAncestors !== undefined ? { frameAncestors } : {}),
+                };
+                sendJson(res, 200, {
+                    ok: true,
+                    data: { probe, verdict: embeddabilityOf(probe) },
+                });
+                return true;
+            }
+            catch {
+                // DNS / TLS / connection / timeout: nothing to judge — the
+                // client keeps the plain iframe.
+                sendJson(res, 200, {
+                    ok: true,
+                    data: { probe: { reachable: false }, verdict: "unknown" },
+                });
+                return true;
+            }
+            finally {
+                clearTimeout(timer);
+            }
+        }
+        sendJson(res, 404, {
+            ok: false,
+            error: { code: "NOT_FOUND", message: `unknown browser route: ${method} ${pathname}` },
+        });
+        return true;
+    }
+    catch (error) {
+        if (!res.headersSent) {
+            sendJson(res, 500, {
+                ok: false,
+                error: {
+                    code: "BROWSER_INTERNAL",
+                    message: error instanceof Error ? error.message : String(error),
+                },
+            });
+        }
+        else {
+            res.end();
+        }
+        return true;
+    }
+}

package/dist/worker/console/chat/routes.js

@@ -48,6 +48,7 @@ import { SddDataAlignmentError, } from "./sdd-data-alignment.js";
 import { TerminalSessionRegistry } from "./terminal-sessions.js";
 import { handleTerminalRequest } from "./terminal-routes.js";
 import { handleScmRequest } from "./scm-routes.js";
+import { handleBrowserRequest } from "./browser-routes.js";
 function projectBrowserChatSession(record) {
     const { telemetrySessionId, ...projected } = record;
     void telemetrySessionId;
@@ -4267,6 +4268,10 @@ async function dispatchChatRequest(req, res, deps, pathname, workspaceScope) {
             return true;
         }
     }
+    // Browser probe API (read-only; explains iframe refusals to the panel).
+    if (await handleBrowserRequest(req, res, {}, pathname)) {
+        return true;
+    }
     if (!pathname.startsWith("/api/operator/v1/chat/") &&
         !pathname.startsWith("/api/operator/v1/pi/"))
         return false;

package/dist/worker/console/chat/scm-routes.js

@@ -25,7 +25,7 @@ function sendJson(res, status, body) {
     res.end(JSON.stringify(body));
 }
 function mapScmError(res, error) {
-    const status = error.code === "NO_PATHS" || error.code === "EMPTY_MESSAGE" || error.code === "INVALID_NAME"
+    const status = error.code === "NO_PATHS" || error.code === "EMPTY_MESSAGE" || error.code === "INVALID_NAME" || error.code === "INVALID_HASH"
         ? 400
         : error.code === "GIT_TIMEOUT"
             ? 504
@@ -89,6 +89,30 @@ export async function handleScmRequest(req, res, deps, pathname) {
             sendJson(res, 200, { ok: true, data: r });
             return true;
         }
+        if (method === "GET" && sub === "commit-diff" && parts.length === 1) {
+            const hash = url.searchParams.get("hash") ?? "";
+            if (!hash) {
+                sendJson(res, 400, { ok: false, error: { code: "INVALID_INPUT", message: "hash is required" } });
+                return true;
+            }
+            const r = await deps.scm.commitDiff(hash);
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
+        if (method === "GET" && sub === "untracked-diff" && parts.length === 1) {
+            const path = url.searchParams.get("path") ?? "";
+            if (!path) {
+                sendJson(res, 400, { ok: false, error: { code: "NO_PATHS", message: "path is required" } });
+                return true;
+            }
+            const r = await deps.scm.untrackedDiff(path);
+            if (!r.ok)
+                return mapScmError(res, r), true;
+            sendJson(res, 200, { ok: true, data: r });
+            return true;
+        }
         if (method === "GET" && sub === "log" && parts.length === 1) {
             const limit = Number(url.searchParams.get("limit") ?? 30);
             const r = await deps.scm.log(Number.isFinite(limit) ? Math.min(Math.max(limit, 1), 200) : 30);

package/dist/worker/console/chat/scm-service.js

@@ -53,6 +53,9 @@ export class ScmService {
                     ? `git ${args[0]} timed out`
                     : err.message ?? String(e),
                 stderr: typeof err.stderr === "string" ? err.stderr.slice(0, 2000) : undefined,
+                // `git diff --no-index` exits 1 when a diff exists; callers that
+                // expect that carry the partial stdout through.
+                stdout: typeof err.stdout === "string" ? err.stdout : undefined,
             };
         }
     }
@@ -149,6 +152,33 @@ export class ScmService {
             return r;
         return { ok: true, diff: r.stdout };
     }
+    /** Full patch of one commit (`git show` without the commit header). */
+    async commitDiff(hash) {
+        if (!/^[0-9a-f]{4,40}$/i.test(hash)) {
+            return { ok: false, code: "INVALID_HASH", message: "invalid commit hash" };
+        }
+        const r = await this.git(["show", "--format=", "--no-color", hash]);
+        if (!r.ok)
+            return r;
+        return { ok: true, diff: r.stdout };
+    }
+    /**
+     * Untracked-file content as a full-addition diff (`git diff --no-index
+     * /dev/null <path>`): git diff never lists untracked files, and this
+     * renders them like any other change in the diff view.
+     */
+    async untrackedDiff(path) {
+        if (path.includes("\0") || path.includes("..")) {
+            return { ok: false, code: "NO_PATHS", message: "invalid path" };
+        }
+        const r = await this.git(["diff", "--no-index", "--no-color", "-U3", "--", "/dev/null", path]);
+        // `git diff --no-index` exits 1 when there IS a diff — carry stdout.
+        if (!r.ok && r.code === "GIT_FAILED")
+            return { ok: true, diff: r.stdout ?? "" };
+        if (!r.ok)
+            return r;
+        return { ok: true, diff: r.stdout };
+    }
     /** Stage paths (`git add --` / `git add -A --` for "."). */
     async stage(paths, all = false) {
         if (!all && paths.length === 0) {

package/dist/worker/console/chat/session-catalog.js

@@ -1,5 +1,36 @@
 import { isBlankChatSession } from "./session-store.js";
 import { projectDeferredTurnSummaries, projectDeferredTurnSummary, } from "./deferred-turn.js";
+/** Sidebar / global GET /chat/sessions projection. Must include sessionMode. */
+export function projectChatSessionCatalogListItem(entry, active) {
+    return {
+        sessionId: entry.sessionId,
+        ...(entry.workspaceId ? { workspaceId: entry.workspaceId } : {}),
+        state: entry.state,
+        createdAt: entry.createdAt,
+        updatedAt: entry.updatedAt,
+        ...(entry.title !== undefined ? { title: entry.title } : {}),
+        ...(entry.displayTitle !== undefined
+            ? { displayTitle: entry.displayTitle }
+            : {}),
+        ...(entry.modelProvider !== undefined
+            ? { modelProvider: entry.modelProvider }
+            : {}),
+        ...(entry.modelId !== undefined ? { modelId: entry.modelId } : {}),
+        ...(entry.thinkingLevel !== undefined
+            ? { thinkingLevel: entry.thinkingLevel }
+            : {}),
+        sessionMode: entry.sessionMode,
+        activeTurnId: active?.turnId,
+        turnPhase: active?.abortRequestedAt
+            ? "stopping"
+            : active
+                ? "running"
+                : "idle",
+        deferredTurn: entry.deferredTurn,
+        deferredTurns: entry.deferredTurns,
+        isBlank: entry.isBlank && !active,
+    };
+}
 /**
  * Process-wide Session baseline, mirroring DSH's independent session.list.
  * Full records stay in their fingerprint-isolated stores; this catalog only

package/dist/worker/console/chat/session-mode-view.js

@@ -16,9 +16,9 @@ export const SESSION_MODE_COPY = {
         bannerTitle: "工作流",
         bannerBody: "用自然语言编排 loop-agent / agent-worker 的全部能力。这是 Operator 面：默认具备完整 Pi 工具与受策略约束的 operator action。软约束：大改与高风险变更优先走受治 DAG。",
         landingTitle: "开始一段新的对话",
-        landingBody: "用自然语言编排 loop-agent：查询状态、诊断问题、创建与恢复任务。可先点选下方建议，或选择工作流 / Pi 模式新建会话。",
+        landingBody: "用自然语言编排 loop-agent：查询状态、诊断问题、创建与恢复任务。可先点选下方建议，或在输入框描述目标。工作流或 Pi 在输入框上方选择。",
         emptyTitle: "今天想推进什么？",
-        emptyBody: "会话已就绪。点选建议快速开场，或在下方输入框直接描述目标。业务写入仍经受治理 DAG。",
+        emptyBody: "会话已就绪。输入框上方可切换工作区或工作流 / Pi。点选建议快速开场，或直接描述目标。业务写入仍经受治理 DAG。",
     },
     pi: {
         id: "pi",
@@ -31,7 +31,7 @@ export const SESSION_MODE_COPY = {
         landingTitle: "开始一段 Pi 协作",
         landingBody: "Pi 模式保留压缩、Explore、认证与 SDD 接入，取消工作流业务注入。适合有人监督的直接编码与调试。",
         emptyTitle: "直接协作编码",
-        emptyBody: "会话已就绪。使用 Pi 工具读写仓库；Explore 负责只读深挖。本会话不加载任务 / DAG 工作流工具。",
+        emptyBody: "会话已就绪。输入框上方可切换工作区或模式。使用 Pi 工具读写仓库；Explore 负责只读深挖。本会话不加载任务 / DAG 工作流工具。",
     },
 };
 /** Slash actions that only exist in workflow sessions. Browser-safe: pure

package/dist/worker/console/server.js

@@ -9,7 +9,7 @@ import { DAG_ABSOLUTE_MAX_WALL_CLOCK_MS } from "../../shared/timeout-policy.js";
 import { openConsoleAppData } from "../../infrastructure/console/app-data.js";
 import { isLoopbackHost } from "./loopback.js";
 import { ChatSessionStore } from "./chat/session-store.js";
-import { ChatSessionCatalog } from "./chat/session-catalog.js";
+import { ChatSessionCatalog, projectChatSessionCatalogListItem, } from "./chat/session-catalog.js";
 import { matchRepoHtmlPreviewRoute } from "./chat/repo-browser.js";
 import { handleConsoleHealthRequest, handleWorkspaceRoutes, sendJson, serveConsoleStatic, } from "./routes.js";
 import { issueBootCapabilityToken, injectConfirmationTokenScript, } from "./security.js";
@@ -430,33 +430,7 @@ export async function createConsoleServer(options) {
                             .get(entry.workspaceId)
                             ?.chatRouteDeps.events.getActiveTurn(entry.sessionId)
                         : undefined;
-                    return {
-                        sessionId: entry.sessionId,
-                        ...(entry.workspaceId ? { workspaceId: entry.workspaceId } : {}),
-                        state: entry.state,
-                        createdAt: entry.createdAt,
-                        updatedAt: entry.updatedAt,
-                        ...(entry.title !== undefined ? { title: entry.title } : {}),
-                        ...(entry.displayTitle !== undefined
-                            ? { displayTitle: entry.displayTitle }
-                            : {}),
-                        ...(entry.modelProvider !== undefined
-                            ? { modelProvider: entry.modelProvider }
-                            : {}),
-                        ...(entry.modelId !== undefined ? { modelId: entry.modelId } : {}),
-                        ...(entry.thinkingLevel !== undefined
-                            ? { thinkingLevel: entry.thinkingLevel }
-                            : {}),
-                        activeTurnId: active?.turnId,
-                        turnPhase: active?.abortRequestedAt
-                            ? "stopping"
-                            : active
-                                ? "running"
-                                : "idle",
-                        deferredTurn: entry.deferredTurn,
-                        deferredTurns: entry.deferredTurns,
-                        isBlank: entry.isBlank && !active,
-                    };
+                    return projectChatSessionCatalogListItem(entry, active);
                 });
                 sendJson(res, 200, {
                     ok: true,

package/dist/worker/console/static/assets/{abnfDiagram-N423BO3Z-BuyrlONK.js → abnfDiagram-N423BO3Z-0z1FF_Mr.js}

@@ -1 +1 @@
-import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-BiGDkBtj.js";import{p as f}from"./chunk-JWPE2WC7-B5jjn7zq.js";import{_ as n,l as o}from"./mermaid.core-DPvHX155.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-DZECjpOe.js";import"./index-4wCGsXuU.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};
+import{g as p,r as u,d as a}from"./chunk-6Q2QTUOP-0wVqzhBr.js";import{p as f}from"./chunk-JWPE2WC7-BHizoNTm.js";import{_ as n,l as o}from"./mermaid.core-_8ilrIeK.js";import{M as c,b as d}from"./cynefin-VYW2F7L2-CNz317P7.js";import"./index-DHrt_6jk.js";var v=d().RailroadAbnf.parser.LangiumParser,i=n(e=>{const r=e.alternatives.map(g);return r.length===1?r[0]:{type:"choice",alternatives:r}},"transformAlternation"),g=n(e=>{const r=e.elements.map(y);return r.length===1?r[0]:{type:"sequence",elements:r}},"transformConcatenation"),b=n(e=>{if(e.includes("*")){const[t,s]=e.split("*"),l=t?parseInt(t,10):0,m=s?parseInt(s,10):1/0;return{min:l,max:m}}const r=parseInt(e,10);return{min:r,max:r}},"parseRepeat"),y=n(e=>{const r=A(e.primary);if(!e.repeat)return r;const{min:t,max:s}=b(e.repeat);return t===0&&s===1?{type:"optional",element:r}:{type:"repetition",element:r,min:t,max:s}},"transformElement"),A=n(e=>{switch(e.$type){case"AbnfStringLiteral":return{type:"terminal",value:e.value};case"AbnfNumVal":return{type:"terminal",value:e.value};case"AbnfRuleName":return{type:"nonterminal",name:e.name};case"AbnfGroup":return i(e.element);case"AbnfOptionalGroup":return{type:"optional",element:i(e.element)};default:throw new Error(`Unsupported ABNF primary node: ${e.$type}`)}},"transformPrimary"),P=n(e=>({name:e.name,definition:i(e.definition)}),"transformRule"),h=n(e=>{f(e,a),e.title&&a.setTitle(e.title),e.rules.map(r=>a.addRule(P(r)))},"populateDb"),R={parse:n(e=>{a.clear(),o.debug("[ABNF Parser] Starting Langium parse");const r=v.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new c(r);const t=r.value;o.debug("[ABNF Parser] Parsed rules:",t.rules.length),h(t),o.debug("[ABNF Parser] Parse complete")},"parse"),parser:{yy:a}},B={parser:R,db:a,renderer:u,styles:p};export{B as diagram};

package/dist/worker/console/static/assets/{arc-BvCl_wpi.js → arc-5Rtc6XV_.js}

@@ -1 +1 @@
-import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-DPvHX155.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};
+import{Y as ln,$ as an,a0 as F,a1 as q,a2 as j,a3 as un,a4 as y,a5 as tn,a6 as J,a7 as _,a8 as rn,a9 as o,aa as on,ab as sn,ac as fn}from"./mermaid.core-_8ilrIeK.js";function cn(l){return l.innerRadius}function yn(l){return l.outerRadius}function gn(l){return l.startAngle}function dn(l){return l.endAngle}function mn(l){return l&&l.padAngle}function pn(l,h,I,D,v,A,z,a){var O=I-l,i=D-h,n=z-v,d=a-A,u=d*O-n*i;if(!(u*u<y))return u=(n*(h-A)-d*(l-v))/u,[l+u*O,h+u*i]}function U(l,h,I,D,v,A,z){var a=l-I,O=h-D,i=(z?A:-A)/J(a*a+O*O),n=i*O,d=-i*a,u=l+n,s=h+d,f=I+n,c=D+d,B=(u+f)/2,t=(s+c)/2,m=f-u,g=c-s,R=m*m+g*g,T=v-A,P=u*c-f*s,S=(g<0?-1:1)*J(on(0,T*T*R-P*P)),Y=(P*g-m*S)/R,$=(-P*m-g*S)/R,w=(P*g+m*S)/R,p=(-P*m+g*S)/R,x=Y-B,e=$-t,r=w-B,C=p-t;return x*x+e*e>r*r+C*C&&(Y=w,$=p),{cx:Y,cy:$,x01:-n,y01:-d,x11:Y*(v/T-1),y11:$*(v/T-1)}}function hn(){var l=cn,h=yn,I=j(0),D=null,v=gn,A=dn,z=mn,a=null,O=ln(i);function i(){var n,d,u=+l.apply(this,arguments),s=+h.apply(this,arguments),f=v.apply(this,arguments)-un,c=A.apply(this,arguments)-un,B=rn(c-f),t=c>f;if(a||(a=n=O()),s<u&&(d=s,s=u,u=d),!(s>y))a.moveTo(0,0);else if(B>tn-y)a.moveTo(s*F(f),s*q(f)),a.arc(0,0,s,f,c,!t),u>y&&(a.moveTo(u*F(c),u*q(c)),a.arc(0,0,u,c,f,t));else{var m=f,g=c,R=f,T=c,P=B,S=B,Y=z.apply(this,arguments)/2,$=Y>y&&(D?+D.apply(this,arguments):J(u*u+s*s)),w=_(rn(s-u)/2,+I.apply(this,arguments)),p=w,x=w,e,r;if($>y){var C=sn($/u*q(Y)),K=sn($/s*q(Y));(P-=C*2)>y?(C*=t?1:-1,R+=C,T-=C):(P=0,R=T=(f+c)/2),(S-=K*2)>y?(K*=t?1:-1,m+=K,g-=K):(S=0,m=g=(f+c)/2)}var G=s*F(m),H=s*q(m),L=u*F(T),M=u*q(T);if(w>y){var N=s*F(g),Q=s*q(g),V=u*F(R),W=u*q(R),E;if(B<an)if(E=pn(G,H,V,W,N,Q,L,M)){var X=G-E[0],Z=H-E[1],b=N-E[0],k=Q-E[1],nn=1/q(fn((X*b+Z*k)/(J(X*X+Z*Z)*J(b*b+k*k)))/2),en=J(E[0]*E[0]+E[1]*E[1]);p=_(w,(u-en)/(nn-1)),x=_(w,(s-en)/(nn+1))}else p=x=0}S>y?x>y?(e=U(V,W,G,H,s,x,t),r=U(N,Q,L,M,s,x,t),a.moveTo(e.cx+e.x01,e.cy+e.y01),x<w?a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,x,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,s,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),!t),a.arc(r.cx,r.cy,x,o(r.y11,r.x11),o(r.y01,r.x01),!t))):(a.moveTo(G,H),a.arc(0,0,s,m,g,!t)):a.moveTo(G,H),!(u>y)||!(P>y)?a.lineTo(L,M):p>y?(e=U(L,M,N,Q,u,-p,t),r=U(G,H,V,W,u,-p,t),a.lineTo(e.cx+e.x01,e.cy+e.y01),p<w?a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(r.y01,r.x01),!t):(a.arc(e.cx,e.cy,p,o(e.y01,e.x01),o(e.y11,e.x11),!t),a.arc(0,0,u,o(e.cy+e.y11,e.cx+e.x11),o(r.cy+r.y11,r.cx+r.x11),t),a.arc(r.cx,r.cy,p,o(r.y11,r.x11),o(r.y01,r.x01),!t))):a.arc(0,0,u,T,R,t)}if(a.closePath(),n)return a=null,n+""||null}return i.centroid=function(){var n=(+l.apply(this,arguments)+ +h.apply(this,arguments))/2,d=(+v.apply(this,arguments)+ +A.apply(this,arguments))/2-an/2;return[F(d)*n,q(d)*n]},i.innerRadius=function(n){return arguments.length?(l=typeof n=="function"?n:j(+n),i):l},i.outerRadius=function(n){return arguments.length?(h=typeof n=="function"?n:j(+n),i):h},i.cornerRadius=function(n){return arguments.length?(I=typeof n=="function"?n:j(+n),i):I},i.padRadius=function(n){return arguments.length?(D=n==null?null:typeof n=="function"?n:j(+n),i):D},i.startAngle=function(n){return arguments.length?(v=typeof n=="function"?n:j(+n),i):v},i.endAngle=function(n){return arguments.length?(A=typeof n=="function"?n:j(+n),i):A},i.padAngle=function(n){return arguments.length?(z=typeof n=="function"?n:j(+n),i):z},i.context=function(n){return arguments.length?(a=n??null,i):a},i}export{hn as d};