create-windy 0.6.12 → 0.6.15

package/template/apps/server/src/system/user-account-policy.ts

@@ -2,12 +2,22 @@ import type { RequestActor } from "../guards.js";
 import type { AuthRepository } from "../auth/repository.js";
 import type { ManagedRole, ManagedUser } from "./entities.js";
 import type { EntityRepository } from "./repository.js";
+import { resolveSystemActorForUser } from "./actor.js";
+
+export interface AuthorizationRevocationPublisher {
+  publish(input: {
+    readonly previousActor: RequestActor;
+    readonly eventId: string;
+    readonly occurredAt: string;
+  }): Promise<void>;
+}
 
 export class UserAccountPolicy {
   constructor(
     private readonly users: EntityRepository<ManagedUser>,
     private readonly roles: EntityRepository<ManagedRole>,
     private readonly auth?: Pick<AuthRepository, "revokeUserSessions">,
+    private readonly authorizationRevocations?: AuthorizationRevocationPublisher,
   ) {}
 
   async validate(
@@ -53,6 +63,19 @@ export class UserAccountPolicy {
     updated: ManagedUser,
     actor: RequestActor,
   ): Promise<void> {
+    if (userAuthorizationChanged(current, updated)) {
+      const previousActor = await resolveSystemActorForUser(
+        { roles: this.roles },
+        current,
+      );
+      if (previousActor) {
+        await this.authorizationRevocations?.publish({
+          previousActor,
+          eventId: `system-user-authorization:${updated.id}:${updated.updatedAt}`,
+          occurredAt: updated.updatedAt,
+        });
+      }
+    }
     void actor;
     if (current.status === "active" && updated.status !== "active") {
       await this.auth?.revokeUserSessions(updated.id, new Date());
@@ -60,9 +83,35 @@ export class UserAccountPolicy {
   }
 
   async afterDelete(deleted: ManagedUser): Promise<void> {
+    const previousActor = await resolveSystemActorForUser({ roles: this.roles }, {
+      ...deleted,
+      status: "active",
+    });
+    if (previousActor) {
+      await this.authorizationRevocations?.publish({
+        previousActor,
+        eventId: `system-user-authorization:${deleted.id}:${deleted.updatedAt}`,
+        occurredAt: deleted.updatedAt,
+      });
+    }
     await this.auth?.revokeUserSessions(deleted.id, new Date());
   }
 
+  async afterRoleUpdate(
+    current: ManagedRole,
+    updated: ManagedRole,
+  ): Promise<void> {
+    if (!roleAuthorizationChanged(current, updated)) return;
+    await this.publishRoleRevocations(current, updated.updatedAt);
+  }
+
+  async afterRoleDelete(deleted: ManagedRole): Promise<void> {
+    await this.publishRoleRevocations(
+      { ...deleted, status: "active" },
+      deleted.updatedAt,
+    );
+  }
+
   async protectRoleUpdate(
     current: ManagedRole,
     input: Partial<ManagedRole>,
@@ -100,4 +149,46 @@ export class UserAccountPolicy {
       (role) => role?.status === "active" && role.code === "super-admin",
     );
   }
+
+  private async publishRoleRevocations(
+    previousRole: ManagedRole,
+    occurredAt: string,
+  ) {
+    const users = await this.users.all({ status: "active" });
+    for (const user of users) {
+      if (!user.roleIds.includes(previousRole.id)) continue;
+      const previousActor = await resolveSystemActorForUser(
+        { roles: this.roles },
+        user,
+        [previousRole],
+      );
+      if (!previousActor) continue;
+      await this.authorizationRevocations?.publish({
+        previousActor,
+        eventId: `system-role-authorization:${previousRole.id}:${occurredAt}`,
+        occurredAt,
+      });
+    }
+  }
+}
+
+function userAuthorizationChanged(left: ManagedUser, right: ManagedUser) {
+  return (
+    left.status !== right.status ||
+    left.departmentId !== right.departmentId ||
+    stableStrings(left.roleIds) !== stableStrings(right.roleIds)
+  );
+}
+
+function roleAuthorizationChanged(left: ManagedRole, right: ManagedRole) {
+  return (
+    left.status !== right.status ||
+    left.dataScope !== right.dataScope ||
+    stableStrings(left.permissionKeys) !== stableStrings(right.permissionKeys) ||
+    stableStrings(left.departmentIds ?? []) !== stableStrings(right.departmentIds ?? [])
+  );
+}
+
+function stableStrings(values: readonly string[]) {
+  return [...values].sort().join("\u0000");
 }

package/template/apps/server/src/workflow/drizzle-repository.integration.test.ts

@@ -32,6 +32,7 @@ describePostgres("PostgreSQL 最小审批 Repository", () => {
     await pool.query(`truncate table
       governed_export_requests,
       bulk_data_artifacts, bulk_data_jobs, scheduled_task_runs,
+      client_agent_workflow_artifacts,
       durable_job_recoveries, durable_job_failures, durable_job_artifacts,
       durable_job_progress, durable_job_leases, durable_job_attempts,
       durable_job_stages, durable_jobs,

package/template/apps/web/package.json

@@ -20,6 +20,7 @@
     "@tailwindcss/vite": "^4.3.2",
     "@tanstack/vue-form": "^1.33.0",
     "@tanstack/vue-table": "^8.21.3",
+    "@vue-flow/core": "^1.48.2",
     "@vueuse/core": "^14.3.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/template/apps/web/src/layout/AppSidebar.vue

@@ -12,6 +12,7 @@ import {
   HouseIcon,
   KeyRoundIcon,
   LayoutDashboardIcon,
+  MessagesSquareIcon,
   PanelLeftIcon,
   SettingsIcon,
   ShieldCheckIcon,
@@ -54,6 +55,7 @@ const iconMap: Record<string, Component> = {
   bell: BellIcon,
   blocks: BlocksIcon,
   "layout-dashboard": LayoutDashboardIcon,
+  "messages-square": MessagesSquareIcon,
   "book-open": BookOpenIcon,
   "building-2": Building2Icon,
   "panel-left": PanelLeftIcon,

package/template/apps/web/src/pages/system/AgentSessionPage.vue

@@ -0,0 +1,73 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import { RefreshCwIcon } from "@lucide/vue";
+import { Button } from "@/components/ui/button";
+import AgentSessionDetail from "./components/agent-session/AgentSessionDetail.vue";
+import AgentSessionList from "./components/agent-session/AgentSessionList.vue";
+import { useAgentSessions } from "./composables/useAgentSessions";
+
+const sessionState = useAgentSessions();
+const selectedSession = computed(() =>
+  sessionState.sessions.value.find(
+    ({ sessionId }) => sessionId === sessionState.selectedSessionId.value,
+  ),
+);
+const refreshing = computed(
+  () => sessionState.listLoading.value || sessionState.detailLoading.value,
+);
+</script>
+
+<template>
+  <div class="space-y-5">
+    <header
+      class="flex flex-col gap-3 md:flex-row md:items-center md:justify-between"
+    >
+      <div class="space-y-2">
+        <h1 class="text-2xl font-semibold tracking-normal text-foreground">
+          Agent Session
+        </h1>
+        <p class="text-sm text-muted-foreground">
+          查看长期 Session、公开事件摘要、模型 Context 来源和受控 Memory 投影。
+        </p>
+      </div>
+      <Button
+        variant="outline"
+        :disabled="refreshing"
+        @click="sessionState.refresh"
+      >
+        <RefreshCwIcon data-icon="inline-start" />
+        刷新
+      </Button>
+    </header>
+
+    <div
+      class="grid gap-4 lg:h-[calc(100vh-12rem)] lg:min-h-[32rem] lg:grid-cols-[20rem_minmax(0,1fr)] lg:overflow-hidden"
+    >
+      <AgentSessionList
+        class="lg:min-h-0"
+        :sessions="sessionState.sessions.value"
+        :selected-session-id="sessionState.selectedSessionId.value"
+        :loading="sessionState.listLoading.value"
+        :error="sessionState.listError.value"
+        @select="sessionState.selectSession"
+        @refresh="sessionState.refresh"
+      />
+      <div class="min-w-0 lg:min-h-0 lg:overflow-y-auto lg:pr-1">
+        <AgentSessionDetail
+          :session="selectedSession"
+          :detail="sessionState.detail.value"
+          :context-versions="sessionState.contextVersions.value"
+          :memories="sessionState.memories.value"
+          :detail-loading="sessionState.detailLoading.value"
+          :context-loading="sessionState.contextLoading.value"
+          :memory-loading="sessionState.memoryLoading.value"
+          :detail-error="sessionState.detailError.value"
+          :context-error="sessionState.contextError.value"
+          :memory-error="sessionState.memoryError.value"
+          :deleting-memory-id="sessionState.deletingMemoryId.value"
+          @delete-memory="sessionState.deleteMemory"
+        />
+      </div>
+    </div>
+  </div>
+</template>

package/template/apps/web/src/pages/system/AgentSessionPage.webtest.ts

@@ -0,0 +1,66 @@
+import { mount } from "@vue/test-utils";
+import { describe, expect, test, vi } from "vitest";
+import { shallowRef } from "vue";
+import AgentSessionPage from "./AgentSessionPage.vue";
+
+const state = vi.hoisted(() => ({
+  refresh: vi.fn(),
+  selectSession: vi.fn(),
+  deleteMemory: vi.fn(),
+}));
+
+vi.mock("./composables/useAgentSessions", () => ({
+  useAgentSessions: () => ({
+    sessions: shallowRef([
+      {
+        sessionId: "session_1",
+        status: "active",
+        headSequence: 12,
+        updatedAt: "2026-08-27T10:00:00.000Z",
+      },
+    ]),
+    selectedSessionId: shallowRef("session_1"),
+    detail: shallowRef({
+      session: {
+        sessionId: "session_1",
+        status: "active",
+        headSequence: 12,
+        updatedAt: "2026-08-27T10:00:00.000Z",
+      },
+      timeline: [
+        {
+          sequence: 1,
+          type: "turn.completed",
+          occurredAt: "2026-08-27T10:00:00.000Z",
+          summary: "已生成受控回复摘要",
+        },
+      ],
+    }),
+    contextVersions: shallowRef([]),
+    memories: shallowRef([]),
+    listLoading: shallowRef(false),
+    detailLoading: shallowRef(false),
+    contextLoading: shallowRef(false),
+    memoryLoading: shallowRef(false),
+    deletingMemoryId: shallowRef(""),
+    listError: shallowRef(""),
+    detailError: shallowRef(""),
+    contextError: shallowRef(""),
+    memoryError: shallowRef(""),
+    refresh: state.refresh,
+    selectSession: state.selectSession,
+    deleteMemory: state.deleteMemory,
+  }),
+}));
+
+describe("Agent Session 受控投影页", () => {
+  test("组合 Session 列表、公开时间线、Context 与 Memory 面板", () => {
+    const wrapper = mount(AgentSessionPage);
+
+    expect(wrapper.text()).toContain("session_1");
+    expect(wrapper.text()).toContain("已生成受控回复摘要");
+    expect(wrapper.text()).toContain("Context 版本与来源");
+    expect(wrapper.text()).toContain("Memory 投影");
+    expect(wrapper.find(".lg\\:overflow-y-auto").exists()).toBe(true);
+  });
+});

package/template/apps/web/src/pages/system/AgentWorkflowPage.vue

@@ -0,0 +1,69 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import { useRoute, type LocationQueryValue } from "vue-router";
+import { RefreshCwIcon } from "@lucide/vue";
+import { Button } from "@/components/ui/button";
+import WorkflowRunDetail from "./components/agent-workflow/WorkflowRunDetail.vue";
+import WorkflowRunList from "./components/agent-workflow/WorkflowRunList.vue";
+import { useAgentWorkflowRuns } from "./composables/useAgentWorkflowRuns";
+
+const route = useRoute();
+const preferredRunId = computed(() => routeRunId(route.query.runId));
+const workflowState = useAgentWorkflowRuns({ preferredRunId });
+const refreshing = computed(
+  () => workflowState.listLoading.value || workflowState.detailLoading.value,
+);
+
+function routeRunId(value: LocationQueryValue | LocationQueryValue[]) {
+  const candidate = Array.isArray(value) ? value[0] : value;
+  const runId = candidate?.trim() ?? "";
+  return runId.length <= 256 ? runId : "";
+}
+</script>
+
+<template>
+  <div class="space-y-5">
+    <header
+      class="flex flex-col gap-3 md:flex-row md:items-start md:justify-between"
+    >
+      <div class="max-w-3xl space-y-2">
+        <h1 class="text-2xl font-semibold tracking-normal text-foreground">
+          Agent Workflow
+        </h1>
+        <p class="text-sm leading-6 text-muted-foreground">
+          查看不可变 Release 对应的 Workflow Run、节点状态和受控交付坐标。
+          页面不展示原始推理链、Prompt、Tool 参数或大对象结果。
+        </p>
+      </div>
+      <Button
+        variant="outline"
+        :disabled="refreshing"
+        @click="workflowState.refresh"
+      >
+        <RefreshCwIcon data-icon="inline-start" />
+        {{ refreshing ? "刷新中..." : "刷新" }}
+      </Button>
+    </header>
+
+    <div
+      class="grid gap-4 lg:h-[calc(100vh-12rem)] lg:min-h-[32rem] lg:grid-cols-[20rem_minmax(0,1fr)] lg:overflow-hidden"
+    >
+      <WorkflowRunList
+        class="lg:min-h-0"
+        :runs="workflowState.runs.value"
+        :selected-run-id="workflowState.selectedRunId.value"
+        :loading="workflowState.listLoading.value"
+        :error="workflowState.listError.value"
+        @select="workflowState.selectRun"
+        @refresh="workflowState.refresh"
+      />
+      <div class="min-w-0 lg:min-h-0 lg:overflow-y-auto lg:pr-1">
+        <WorkflowRunDetail
+          :detail="workflowState.detail.value"
+          :loading="workflowState.detailLoading.value"
+          :error="workflowState.detailError.value"
+        />
+      </div>
+    </div>
+  </div>
+</template>

package/template/apps/web/src/pages/system/components/agent-session/AgentSessionDetail.vue

@@ -0,0 +1,114 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import { Badge } from "@/components/ui/badge";
+import { Card, CardContent } from "@/components/ui/card";
+import type {
+  AgentContextVersion,
+  AgentMemoryProjection,
+  AgentSessionDetailResponse,
+  AgentSessionSummary,
+} from "@/services/agent-session-api";
+import ContextVersionPanel from "./ContextVersionPanel.vue";
+import MemoryProjectionPanel from "./MemoryProjectionPanel.vue";
+import SessionTimeline from "./SessionTimeline.vue";
+import {
+  formatAgentSessionTime,
+  sessionStatusLabel,
+  statusVariant,
+} from "./agent-session-presenter";
+
+const props = defineProps<{
+  session?: AgentSessionSummary;
+  detail?: AgentSessionDetailResponse;
+  contextVersions: readonly AgentContextVersion[];
+  memories: readonly AgentMemoryProjection[];
+  detailLoading: boolean;
+  contextLoading: boolean;
+  memoryLoading: boolean;
+  detailError: string;
+  contextError: string;
+  memoryError: string;
+  deletingMemoryId: string;
+}>();
+
+const emit = defineEmits<{
+  deleteMemory: [memoryId: string];
+}>();
+
+const displayedSession = computed(() => props.detail?.session ?? props.session);
+const timeline = computed(() => props.detail?.timeline ?? []);
+</script>
+
+<template>
+  <section class="min-w-0 space-y-4">
+    <Card v-if="!displayedSession && !detailLoading">
+      <CardContent
+        class="flex min-h-52 items-center justify-center p-6 text-center text-sm text-muted-foreground"
+      >
+        请从左侧选择一个长期 Session。
+      </CardContent>
+    </Card>
+
+    <template v-else>
+      <header v-if="displayedSession" class="rounded-lg border bg-card p-4">
+        <div class="flex flex-wrap items-start justify-between gap-3">
+          <div class="min-w-0">
+            <h2 class="break-all font-mono text-sm font-semibold">
+              {{ displayedSession.sessionId }}
+            </h2>
+            <p class="mt-1 text-xs text-muted-foreground">
+              更新于 {{ formatAgentSessionTime(displayedSession.updatedAt) }}
+            </p>
+          </div>
+          <div class="flex flex-wrap gap-2">
+            <Badge :variant="statusVariant(displayedSession.status)">
+              {{ sessionStatusLabel(displayedSession.status) }}
+            </Badge>
+            <Badge variant="outline"
+              >Head #{{ displayedSession.headSequence }}</Badge
+            >
+          </div>
+        </div>
+        <dl
+          v-if="displayedSession.lineage"
+          class="mt-4 grid gap-2 border-t pt-3 text-xs sm:grid-cols-3"
+        >
+          <div>
+            <dt class="text-muted-foreground">父 Session</dt>
+            <dd class="break-all font-mono">
+              {{ displayedSession.lineage.parentSessionId }}
+            </dd>
+          </div>
+          <div>
+            <dt class="text-muted-foreground">Checkpoint</dt>
+            <dd class="break-all font-mono">
+              {{ displayedSession.lineage.parentCheckpointId }}
+            </dd>
+          </div>
+          <div>
+            <dt class="text-muted-foreground">父序列</dt>
+            <dd>#{{ displayedSession.lineage.parentSequence }}</dd>
+          </div>
+        </dl>
+      </header>
+
+      <SessionTimeline
+        :events="timeline"
+        :loading="detailLoading"
+        :error="detailError"
+      />
+      <ContextVersionPanel
+        :versions="contextVersions"
+        :loading="contextLoading"
+        :error="contextError"
+      />
+      <MemoryProjectionPanel
+        :memories="memories"
+        :loading="memoryLoading"
+        :error="memoryError"
+        :deleting-memory-id="deletingMemoryId"
+        @delete="emit('deleteMemory', $event)"
+      />
+    </template>
+  </section>
+</template>

package/template/apps/web/src/pages/system/components/agent-session/AgentSessionList.vue

@@ -0,0 +1,84 @@
+<script setup lang="ts">
+import { Badge } from "@/components/ui/badge";
+import { Button } from "@/components/ui/button";
+import { Skeleton } from "@/components/ui/skeleton";
+import type { AgentSessionSummary } from "@/services/agent-session-api";
+import {
+  formatAgentSessionTime,
+  sessionStatusLabel,
+  statusVariant,
+} from "./agent-session-presenter";
+
+defineProps<{
+  sessions: readonly AgentSessionSummary[];
+  selectedSessionId: string;
+  loading: boolean;
+  error: string;
+}>();
+
+const emit = defineEmits<{
+  select: [sessionId: string];
+  refresh: [];
+}>();
+</script>
+
+<template>
+  <aside class="flex min-h-0 flex-col rounded-lg border bg-card">
+    <header class="border-b px-4 py-3">
+      <h2 class="font-semibold">长期 Session</h2>
+      <p class="mt-1 text-xs text-muted-foreground">
+        只读查看可访问的持久会话及恢复位置。
+      </p>
+    </header>
+
+    <div
+      v-if="error"
+      class="m-3 rounded-md border border-destructive/30 bg-destructive/5 p-3 text-sm text-destructive"
+    >
+      <p>{{ error }}</p>
+      <Button class="mt-2" size="sm" variant="outline" @click="emit('refresh')">
+        重试
+      </Button>
+    </div>
+
+    <div v-if="loading && !sessions.length" class="space-y-3 p-3">
+      <div v-for="row in 4" :key="row" class="space-y-2 rounded-md border p-3">
+        <Skeleton class="h-4 w-4/5" />
+        <Skeleton class="h-3 w-2/3" />
+      </div>
+    </div>
+
+    <div
+      v-else-if="!sessions.length && !error"
+      class="flex min-h-52 items-center justify-center p-6 text-center text-sm text-muted-foreground"
+    >
+      当前没有可访问的长期 Session。
+    </div>
+
+    <ul v-else class="min-h-0 space-y-2 overflow-y-auto p-3">
+      <li v-for="session in sessions" :key="session.sessionId">
+        <Button
+          class="h-auto w-full justify-start whitespace-normal p-3 text-left"
+          :variant="session.sessionId === selectedSessionId ? 'secondary' : 'ghost'"
+          @click="emit('select', session.sessionId)"
+        >
+          <span class="min-w-0 flex-1 space-y-2">
+            <span class="flex items-center justify-between gap-2">
+              <span class="truncate font-mono text-xs">{{ session.sessionId }}</span>
+              <Badge :variant="statusVariant(session.status)">
+                {{ sessionStatusLabel(session.status) }}
+              </Badge>
+            </span>
+            <span class="flex flex-wrap gap-x-3 gap-y-1 text-xs text-muted-foreground">
+              <span>Head #{{ session.headSequence }}</span>
+              <span>{{ formatAgentSessionTime(session.updatedAt) }}</span>
+            </span>
+            <span v-if="session.lineage" class="block text-xs text-muted-foreground">
+              Fork 自 #{{ session.lineage.parentSequence }}
+            </span>
+          </span>
+        </Button>
+      </li>
+    </ul>
+  </aside>
+</template>

package/template/apps/web/src/pages/system/components/agent-session/ContextVersionPanel.vue

@@ -0,0 +1,119 @@
+<script setup lang="ts">
+import { Badge } from "@/components/ui/badge";
+import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
+import { Skeleton } from "@/components/ui/skeleton";
+import type { AgentContextVersion } from "@/services/agent-session-api";
+import {
+  formatAgentSessionTime,
+  statusVariant,
+  validityLabel,
+} from "./agent-session-presenter";
+
+defineProps<{
+  versions: readonly AgentContextVersion[];
+  loading: boolean;
+  error: string;
+}>();
+</script>
+
+<template>
+  <Card>
+    <CardHeader>
+      <CardTitle class="text-base">Context 版本与来源</CardTitle>
+    </CardHeader>
+    <CardContent>
+      <p
+        v-if="error"
+        class="rounded-md border border-destructive/30 bg-destructive/5 p-3 text-sm text-destructive"
+      >
+        {{ error }}
+      </p>
+      <div v-else-if="loading" class="space-y-3">
+        <Skeleton v-for="row in 2" :key="row" class="h-28 w-full" />
+      </div>
+      <p v-else-if="!versions.length" class="py-5 text-sm text-muted-foreground">
+        该 Session 暂无可查看的 Context 版本。
+      </p>
+      <ol v-else class="space-y-4">
+        <li
+          v-for="version in versions"
+          :key="version.contextVersionId"
+          class="rounded-md border p-4"
+        >
+          <div class="flex flex-wrap items-start justify-between gap-2">
+            <div class="min-w-0">
+              <p class="break-all font-mono text-xs">{{ version.contextVersionId }}</p>
+              <p class="mt-1 text-xs text-muted-foreground">
+                {{ formatAgentSessionTime(version.createdAt) }}
+              </p>
+            </div>
+            <Badge variant="outline">{{ version.sources.length }} 个来源</Badge>
+          </div>
+          <dl class="mt-3 grid gap-2 text-xs sm:grid-cols-2">
+            <div>
+              <dt class="text-muted-foreground">Model attempt</dt>
+              <dd class="break-all font-mono">{{ version.modelAttemptId }}</dd>
+            </div>
+            <div>
+              <dt class="text-muted-foreground">Run</dt>
+              <dd class="break-all font-mono">{{ version.runId }}</dd>
+            </div>
+            <div>
+              <dt class="text-muted-foreground">Turn</dt>
+              <dd class="break-all font-mono">{{ version.turnId }}</dd>
+            </div>
+            <div>
+              <dt class="text-muted-foreground">Context digest</dt>
+              <dd class="break-all font-mono">{{ version.digest }}</dd>
+            </div>
+          </dl>
+
+          <ul class="mt-4 space-y-3 border-t pt-3">
+            <li
+              v-for="source in version.sources"
+              :key="`${source.kind}:${source.id}:${source.version}`"
+              class="rounded-md bg-muted/40 p-3"
+            >
+              <div class="flex flex-wrap items-center justify-between gap-2">
+                <span class="font-medium">{{ source.kind }}</span>
+                <Badge :variant="statusVariant(source.validity.status)">
+                  {{ validityLabel(source.validity.status) }}
+                </Badge>
+              </div>
+              <dl class="mt-2 grid gap-2 text-xs sm:grid-cols-2">
+                <div>
+                  <dt class="text-muted-foreground">来源 ID</dt>
+                  <dd class="break-all font-mono">{{ source.id }}</dd>
+                </div>
+                <div>
+                  <dt class="text-muted-foreground">版本</dt>
+                  <dd class="break-all font-mono">{{ source.version }}</dd>
+                </div>
+                <div>
+                  <dt class="text-muted-foreground">Digest</dt>
+                  <dd class="break-all font-mono">{{ source.digest }}</dd>
+                </div>
+                <div>
+                  <dt class="text-muted-foreground">核验时间</dt>
+                  <dd>
+                    {{ formatAgentSessionTime(source.validity.checkedAt) }}
+                  </dd>
+                </div>
+                <div v-if="source.validity.reason">
+                  <dt class="text-muted-foreground">失效原因</dt>
+                  <dd>{{ source.validity.reason }}</dd>
+                </div>
+                <div v-if="source.validity.expiresAt">
+                  <dt class="text-muted-foreground">有效期至</dt>
+                  <dd>
+                    {{ formatAgentSessionTime(source.validity.expiresAt) }}
+                  </dd>
+                </div>
+              </dl>
+            </li>
+          </ul>
+        </li>
+      </ol>
+    </CardContent>
+  </Card>
+</template>