@tea-agent/loop-agent 0.44.0-next.1 → 0.44.0-next.10

package/dist/worker/console/chat/sdd-data-alignment.js

@@ -2,6 +2,8 @@ import { createDecipheriv, randomBytes } from "node:crypto";
 import { readFile, stat } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
+import { injectWizardLocalTelemetryHeaders, } from "../../../shared/wizard-local-telemetry.js";
+export { WIZARD_LOCAL_DEFAULT_USER_AGENT, } from "../../../shared/wizard-local-telemetry.js";
 export const SDD_SKILL_NAMES = [
     "SDD-design-analysis",
     "SDD-implementation-test-review",
@@ -14,7 +16,6 @@ export const SDD_TELEMETRY_URL = "https://wizard-ai.paic.com.cn/code_pilot/api/s
 export const DEFAULT_AI_MA_PUB_SALT_KEY = "52aad0c09e6b46818a11ee702d6fe0ba";
 export const SDD_TELEMETRY_SIGN = DEFAULT_AI_MA_PUB_SALT_KEY;
 export const AIMAX_AUTH_TOKEN_ENV = "AIMAX_AUTH_TOKEN";
-export const WIZARD_LOCAL_DEFAULT_USER_AGENT = "Builder/OpenCode ai-sdk/provider-utils/4.0.21 runtime/bun/1.3.11";
 const SM4_V1_PREFIX = "sm4:v1:";
 /** Decode a plaintext ticket or `sm4:v1:` ciphertext. Unknown prefixes and crypto errors fail closed. */
 export function decodeAimaxAuthToken(raw, keyHex = DEFAULT_AI_MA_PUB_SALT_KEY) {
@@ -215,7 +216,7 @@ export class SddDataAlignmentService {
         if (!response.ok || body?.ret !== 0 || body.succ !== true) {
             throw new SddDataAlignmentError("SDD_UPSTREAM_FAILED", "SDD 数据对齐上报失败", 502);
         }
-        return { skillName };
+        return { skillName, telemetrySessionId };
     }
 }
 async function readBoundedTelemetryJson(response) {
@@ -251,39 +252,15 @@ async function readBoundedTelemetryJson(response) {
         reader.releaseLock();
     }
 }
-function deleteHeaderCaseInsensitive(headers, name) {
-    for (const key of Object.keys(headers))
-        if (key.toLowerCase() === name.toLowerCase())
-            delete headers[key];
-}
-function configuredHeader(headers, name) {
-    const key = Object.keys(headers ?? {}).find((entry) => entry.toLowerCase() === name.toLowerCase());
-    return key ? headers?.[key] : undefined;
-}
-function setStaticHeader(headers, configured, name, defaultValue) {
-    deleteHeaderCaseInsensitive(headers, name);
-    headers[name] = configuredHeader(configured, name) ?? defaultValue;
-}
 export async function injectWizardLocalHeaders(options) {
     const model = options.context.model;
     if (model?.provider !== "wizard-local" || !model.id)
         return;
     if (!(await options.service.isEligible()))
         return;
-    const modelRegistry = options.context.modelRegistry;
-    if (!modelRegistry?.getApiKeyAndHeaders)
-        return;
-    // Keep the method call attached to ModelRegistry. Its implementation reads
-    // the private runtime through `this`; extracting the function would make the
-    // SDK path fail closed and silently drop all custom headers.
-    const auth = await modelRegistry.getApiKeyAndHeaders(model);
-    if (!auth.ok || typeof auth.apiKey !== "string" || !auth.apiKey)
-        return;
-    setStaticHeader(options.headers, auth.headers, "client-code", "OpenCode");
-    setStaticHeader(options.headers, auth.headers, "User-Agent", WIZARD_LOCAL_DEFAULT_USER_AGENT);
-    for (const name of ["x-api-key", "X-Session-Id", "X-Model-Id"])
-        deleteHeaderCaseInsensitive(options.headers, name);
-    options.headers["x-api-key"] = auth.apiKey;
-    options.headers["X-Session-Id"] = await options.service.ensureTelemetrySessionId(options.sessionId);
-    options.headers["X-Model-Id"] = model.id;
+    await injectWizardLocalTelemetryHeaders({
+        headers: options.headers,
+        context: options.context,
+        telemetrySessionId: await options.service.ensureTelemetrySessionId(options.sessionId),
+    });
 }

package/dist/worker/console/chat/session-store.js

@@ -11,7 +11,8 @@
  * operator action call. Every invocation is re-authorized here.
  */
 import path from "node:path";
-import { readdir, rm } from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import { copyFile, mkdir, readFile, readdir, rm, writeFile } from "node:fs/promises";
 import { readJsonIfExists, writeSecureJson, } from "../../../infrastructure/console/app-data.js";
 import { dispatchOperatorAction } from "../operator-actions.js";
 import { authorizeOperatorChatTool } from "./tools.js";
@@ -19,6 +20,18 @@ import { authorizeChatSessionTool, DEFAULT_CONSOLE_CHAT_SESSION_MODE, readStored
 import { projectOperationForChat } from "./chat-event-store.js";
 import { scrubSecrets } from "./explore-tools.js";
 import { hashDeferredTurnPayload, parseDeferredTurns, } from "./deferred-turn.js";
+const CHAT_IMAGE_MIME_TYPES = new Set([
+    "image/png",
+    "image/jpeg",
+    "image/gif",
+    "image/webp",
+]);
+function isChatImageMimeType(value) {
+    return typeof value === "string" && CHAT_IMAGE_MIME_TYPES.has(value);
+}
+function isChatAttachmentId(value) {
+    return typeof value === "string" && /^[0-9a-f-]{36}$/i.test(value);
+}
 /** True only for a durable session that has never received user work. */
 export function isBlankChatSession(record) {
     return (record.state === "active" &&
@@ -48,6 +61,11 @@ export function cleanChatTitle(value) {
 function recordPath(appData, sessionId) {
     return path.join(appData.chats, `${sessionId}.json`);
 }
+function attachmentDir(appData, sessionId) {
+    if (!/^[a-zA-Z0-9_-]+$/.test(sessionId))
+        throw new Error("invalid chat session id");
+    return path.join(appData.chats, "attachments", sessionId);
+}
 /** True when `sessionFile` lives inside this store's dedicated Pi JSONL dir. */
 export function isConsoleOwnedSessionFile(appData, sessionFile) {
     const value = sessionFile?.trim();
@@ -196,6 +214,12 @@ export class ChatSessionStore {
         const source = await this.get(input.sourceSessionId);
         if (!source)
             throw new Error(`chat session not found: ${input.sourceSessionId}`);
+        const throughIndex = input.throughMessageId
+            ? source.messages.findIndex((message) => message.id === input.throughMessageId && message.role === "user")
+            : -1;
+        if (input.throughMessageId && throughIndex < 0) {
+            throw new Error("FORK_MESSAGE_NOT_FOUND");
+        }
         return this.serialize(input.targetSessionId, async () => {
             const now = new Date().toISOString();
             const record = {
@@ -208,11 +232,30 @@ export class ChatSessionStore {
                 updatedAt: now,
                 deferredTurns: [],
                 deferredQueueRevision: 0,
-                messages: structuredClone(source.messages),
-                toolInvocations: structuredClone(source.toolInvocations),
+                messages: structuredClone(throughIndex >= 0
+                    ? source.messages.slice(0, throughIndex + 1)
+                    : source.messages),
+                toolInvocations: throughIndex >= 0 ? [] : structuredClone(source.toolInvocations),
             };
-            await this.persist(record);
-            return record;
+            const attachmentIds = record.messages.flatMap((message) => Array.isArray(message.attachments)
+                ? message.attachments.map((attachment) => attachment.id)
+                : []);
+            if (!attachmentIds.every(isChatAttachmentId)) {
+                throw new Error("INVALID_CHAT_ATTACHMENT_REFERENCE");
+            }
+            try {
+                if (attachmentIds.length > 0) {
+                    const targetDir = attachmentDir(this.appData, input.targetSessionId);
+                    await mkdir(targetDir, { recursive: true });
+                    await Promise.all(attachmentIds.map((attachmentId) => copyFile(path.join(attachmentDir(this.appData, input.sourceSessionId), attachmentId), path.join(targetDir, attachmentId))));
+                }
+                await this.persist(record);
+                return record;
+            }
+            catch (error) {
+                await this.removeAttachmentFiles(input.targetSessionId).catch(() => undefined);
+                throw error;
+            }
         });
     }
     /** Atomically backfill the per-conversation simulated identity on first use. */
@@ -286,17 +329,84 @@ export class ChatSessionStore {
             const record = await this.get(sessionId);
             if (!record)
                 return false;
-            const sessionFile = record.sessionFile;
-            await rm(recordPath(this.appData, sessionId), { force: true });
-            this.options.onRecordChange?.(sessionId, undefined);
-            // Record first, then best-effort JSONL unlink. Final consistency is
-            // "both gone" — a leftover JSONL is harmless, a leftover record is not.
-            if (isConsoleOwnedSessionFile(this.appData, sessionFile) && sessionFile) {
-                await rm(sessionFile, { force: true }).catch(() => undefined);
-            }
+            await this.removeSessionArtifacts(sessionId, record.sessionFile);
             return true;
         });
     }
+    /** Roll back a runtime-created session that never acquired a durable owner. */
+    async discardUnownedSession(sessionId, sessionFile) {
+        await this.serialize(sessionId, () => this.removeSessionArtifacts(sessionId, sessionFile));
+    }
+    async removeSessionArtifacts(sessionId, sessionFile) {
+        await rm(recordPath(this.appData, sessionId), { force: true });
+        await this.removeAttachmentFiles(sessionId).catch(() => undefined);
+        this.options.onRecordChange?.(sessionId, undefined);
+        // Record first, then best-effort JSONL unlink. Final consistency is
+        // "both gone" — a leftover JSONL is harmless, a leftover record is not.
+        if (isConsoleOwnedSessionFile(this.appData, sessionFile) && sessionFile) {
+            await rm(sessionFile, { force: true }).catch(() => undefined);
+        }
+    }
+    async removeAttachmentFiles(sessionId, attachmentIds) {
+        const dir = attachmentDir(this.appData, sessionId);
+        if (!attachmentIds) {
+            await rm(dir, { recursive: true, force: true });
+            return;
+        }
+        await Promise.all(attachmentIds.map((attachmentId) => rm(path.join(dir, attachmentId), { force: true })));
+    }
+    async saveAttachments(sessionId, images) {
+        if (images.length === 0)
+            return [];
+        if (!(await this.get(sessionId)))
+            throw new Error(`chat session not found: ${sessionId}`);
+        const dir = attachmentDir(this.appData, sessionId);
+        await mkdir(dir, { recursive: true });
+        const stored = [];
+        try {
+            for (const [index, image] of images.entries()) {
+                if (!isChatImageMimeType(image.mimeType)) {
+                    throw new Error("unsupported chat attachment mime type");
+                }
+                const id = randomUUID();
+                const bytes = Buffer.from(image.data, "base64");
+                await writeFile(path.join(dir, id), bytes, { flag: "wx", mode: 0o600 });
+                stored.push({
+                    id,
+                    name: `图片 ${index + 1}`,
+                    mimeType: image.mimeType,
+                    byteLength: bytes.length,
+                });
+            }
+        }
+        catch (error) {
+            await this.removeAttachmentFiles(sessionId, stored.map((attachment) => attachment.id)).catch(() => undefined);
+            throw error;
+        }
+        return stored;
+    }
+    async readAttachment(sessionId, attachmentId) {
+        if (!isChatAttachmentId(attachmentId))
+            return undefined;
+        const record = await this.get(sessionId);
+        const metadata = record?.messages
+            .flatMap((message) => Array.isArray(message.attachments) ? message.attachments : [])
+            .find((attachment) => attachment.id === attachmentId);
+        if (!metadata || !isChatImageMimeType(metadata.mimeType))
+            return undefined;
+        try {
+            return {
+                metadata,
+                bytes: await readFile(path.join(attachmentDir(this.appData, sessionId), attachmentId)),
+            };
+        }
+        catch {
+            return undefined;
+        }
+    }
+    async removeAttachments(sessionId, attachments) {
+        await this.removeAttachmentFiles(sessionId, attachments.map((attachment) => attachment.id));
+    }
     async putDeferredTurn(sessionId, input) {
         return this.serialize(sessionId, async () => {
             const record = await this.get(sessionId);
@@ -454,11 +564,13 @@ export class ChatSessionStore {
             const deferredTurn = index >= 0 ? queue[index] : undefined;
             if (!deferredTurn || deferredTurn.state !== "dispatching")
                 return undefined;
+            const attachments = await this.saveAttachments(sessionId, deferredTurn.images);
             const message = {
                 id: `m_${record.messages.length + 1}_${Math.random().toString(36).slice(2, 8)}`,
                 role: "user",
                 text,
                 at: new Date().toISOString(),
+                ...(attachments.length > 0 ? { attachments } : {}),
             };
             queue.splice(index, 1);
             record.messages.push(message);
@@ -468,7 +580,13 @@ export class ChatSessionStore {
             if (!record.displayTitle)
                 record.displayTitle = cleanChatTitle(message.text);
             record.updatedAt = message.at;
-            await this.persist(record);
+            try {
+                await this.persist(record);
+            }
+            catch (error) {
+                await this.removeAttachments(sessionId, attachments).catch(() => undefined);
+                throw error;
+            }
             return {
                 record,
                 message,
@@ -623,11 +741,20 @@ export async function runChatTurn(options) {
         };
     }
     if (options.persistUserMessage !== false) {
-        const userMessage = await store.appendMessage(sessionId, {
-            role: "user",
-            text,
-            ...(options.clientRequestId ? { clientRequestId: options.clientRequestId } : {}),
-        });
+        const attachments = await store.saveAttachments(sessionId, options.images ?? []);
+        let userMessage;
+        try {
+            userMessage = await store.appendMessage(sessionId, {
+                role: "user",
+                text,
+                ...(options.clientRequestId ? { clientRequestId: options.clientRequestId } : {}),
+                ...(attachments.length > 0 ? { attachments } : {}),
+            });
+        }
+        catch (error) {
+            await store.removeAttachments(sessionId, attachments).catch(() => undefined);
+            throw error;
+        }
         const afterUserMessage = await store.get(sessionId);
         if (afterUserMessage)
             await options.onUserMessagePersisted?.(afterUserMessage, userMessage);
@@ -687,6 +814,7 @@ export async function runChatTurn(options) {
                 // persisted + framed above. Nothing further to persist here.
                 break;
             case "tool_call":
+            case "tool_update":
                 // Forwarded to the caller (SSE) for UI feedback. The actual tool
                 // execution happens in the SDK's customTools[].execute(), which
                 // routes to dispatchChatToolCall (Gate 3). Do NOT dispatch here —

package/dist/worker/console/chat/shortcuts.js

@@ -42,6 +42,13 @@ export const SHORTCUTS = [
         action: "reload",
         source: "operator",
     },
+    {
+        command: "/context",
+        label: "Context insights",
+        description: "打开上下文洞察仪表盘：构成、趋势、事件与文件活动",
+        action: "focus:context-insights",
+        source: "operator",
+    },
 ];
 export const SDD_BINGO_SHORTCUT = {
     command: "/sdd-bingo",

package/dist/worker/console/chat/timeline-message-order.js

@@ -0,0 +1,22 @@
+/** Repair only a local submission pair after the ordinary stable sort.
+ * A pair-specific comparator would be non-transitive when a third row falls
+ * between the user and placeholder, so this bounded pass moves the user back
+ * to the placeholder's established timeline seat instead. */
+export function ensureLinkedSubmissionOrder(messages) {
+    const next = [...messages];
+    for (let assistantIndex = 0; assistantIndex < next.length; assistantIndex += 1) {
+        const assistant = next[assistantIndex];
+        if (assistant?.role !== "assistant" || !assistant.clientRequestId)
+            continue;
+        const userIndex = next.findIndex((message, index) => index > assistantIndex &&
+            message.role === "user" &&
+            message.clientRequestId === assistant.clientRequestId);
+        if (userIndex < 0)
+            continue;
+        const [user] = next.splice(userIndex, 1);
+        if (user)
+            next.splice(assistantIndex, 0, user);
+        assistantIndex += 1;
+    }
+    return next;
+}

package/dist/worker/console/chat/tools.js

@@ -20,6 +20,39 @@ import { OFFICIAL_DENIED_TOOL_IDS } from "../resource-loader.js";
 import { EXECUTABLE_GATE_ONLY_ACTIONS } from "./tool-adapter.js";
 import { OPERATOR_CHAT_AGENT_TOOL_NAME } from "./subagents/types.js";
 const EXECUTABLE_GATE_ONLY = new Set(EXECUTABLE_GATE_ONLY_ACTIONS);
+/** Server-owned metadata for SQL custom tools advertised to the Console UI. */
+export const OPERATOR_CHAT_SQL_TOOL_CAPABILITIES = Object.freeze([
+    {
+        toolId: "sql_query",
+        description: "对命名数据库连接执行受限只读 SQL 查询。",
+        kind: "read",
+    },
+    {
+        toolId: "sql_exec",
+        description: "已禁用：数据库连接强制只读，拒绝 DELETE、DROP 及所有写入或 DDL。",
+        kind: "read",
+    },
+    {
+        toolId: "sql_schema",
+        description: "查看数据库表及字段结构。",
+        kind: "read",
+    },
+    {
+        toolId: "sql_stats",
+        description: "查看数据库表行数和存储规模统计。",
+        kind: "read",
+    },
+    {
+        toolId: "sql_health",
+        description: "检查数据库连接健康状态与安全配置。",
+        kind: "read",
+    },
+    {
+        toolId: "sql_connections",
+        description: "列出、新增或移除受治理的命名数据库连接。",
+        kind: "mutation",
+    },
+]);
 /** Built-in Chat custom tools that are not operator registry actions. */
 export const OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS = Object.freeze([
     OPERATOR_CHAT_AGENT_TOOL_NAME,
@@ -35,6 +68,7 @@ export const OPERATOR_CHAT_BUILTIN_CUSTOM_TOOLS = Object.freeze([
     "browser_dialog",
     "browser_wait",
     "browser_screenshot",
+    ...OPERATOR_CHAT_SQL_TOOL_CAPABILITIES.map((tool) => tool.toolId),
 ]);
 /**
  * Actions the model MAY invoke. Derived from the registry but filtered by the