create-windy 0.8.2 → 0.8.3

package/template/apps/web/src/pages/system/components/agent-workbench/SessionReplayTimeline.vue

@@ -0,0 +1,142 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import type { AgentWorkbenchRecordingV1 } from "@southwind-ai/shared";
+import { Button } from "@/components/ui/button";
+import { useSessionReplay } from "../../composables/useSessionReplay";
+import { replayEntries } from "./replay-presenter";
+import ReplayEventDetail from "./ReplayEventDetail.vue";
+const props = defineProps<{ recording?: AgentWorkbenchRecordingV1 }>();
+const entries = computed(() => replayEntries(props.recording));
+const events = computed(() => entries.value.map((entry) => entry.event));
+const replay = useSessionReplay(events);
+</script>
+<template>
+  <section class="space-y-4" aria-label="只读会话回放">
+    <header class="rounded-lg border bg-card p-4">
+      <h2 class="font-medium">只读历史回放</h2>
+      <p class="mt-1 text-xs text-muted-foreground">
+        播放只移动本地查看位置，不重新调用模型或工具，不产生新的使用计量。每个日志按原始序号播放，关联子日志展开不代表全局时间排序。
+      </p>
+      <p v-if="recording" class="mt-2 text-xs">
+        来源：{{ recording.source }} · {{ recording.sessionId }} · 关联{{
+          recording.correlationStatus === "complete"
+            ? "完整"
+            : recording.correlationStatus === "partial"
+              ? "部分缺失"
+              : "缺失"
+        }}
+      </p>
+      <ol
+        v-if="recording?.segments?.length"
+        class="mt-3 space-y-1 text-xs"
+        aria-label="父子 Session 回放范围"
+      >
+        <li
+          v-for="(segment, index) in recording.segments"
+          :key="segment.sessionId"
+          class="break-all"
+        >
+          {{ index + 1 }}. Session {{ segment.sessionId }} · 原始序号截至 #{{
+            segment.throughSequence
+          }}{{
+            segment.sessionId === recording.sessionId
+              ? "（当前分支）"
+              : "（父分支）"
+          }}
+        </li>
+      </ol>
+      <p
+        v-if="recording?.missing.length"
+        class="mt-2 text-sm text-muted-foreground"
+      >
+        缺失记录：{{ recording.missing.join("、") }}
+      </p>
+    </header>
+    <div class="flex flex-wrap items-center gap-2">
+      <Button
+        variant="outline"
+        :disabled="!entries.length"
+        @click="replay.playing.value ? replay.pause() : replay.play()"
+        >{{ replay.playing.value ? "暂停" : "播放" }}</Button
+      ><Button
+        variant="outline"
+        :disabled="replay.cursor.value <= 0"
+        @click="replay.seek(replay.cursor.value - 1)"
+        >上一事件</Button
+      ><Button
+        variant="outline"
+        :disabled="replay.cursor.value >= entries.length - 1"
+        @click="replay.seek(replay.cursor.value + 1)"
+        >下一事件</Button
+      ><select
+        v-model.number="replay.speed.value"
+        aria-label="回放速度"
+        class="h-9 rounded-md border bg-background px-2 text-sm"
+      >
+        <option :value="0.5">0.5 倍速</option>
+        <option :value="1">1 倍速</option>
+        <option :value="2">2 倍速</option>
+        <option :value="4">4 倍速</option></select
+      ><span class="text-xs text-muted-foreground"
+        >{{ replay.cursor.value + 1 }} / {{ entries.length }}</span
+      >
+    </div>
+    <div
+      v-if="recording?.messages.length"
+      class="space-y-2 rounded-lg border bg-card p-4"
+    >
+      <h3 class="text-sm font-medium">受控会话内容</h3>
+      <article
+        v-for="item in recording.messages"
+        :key="item.sequence"
+        class="rounded-md bg-muted p-3 text-sm"
+      >
+        <p class="mb-1 text-xs text-muted-foreground">
+          {{ item.sequence }} · {{ item.role === "user" ? "用户输入" : "回答" }}
+        </p>
+        <p class="whitespace-pre-wrap break-words">{{ item.content }}</p>
+      </article>
+    </div>
+    <div
+      class="grid items-start gap-4 xl:grid-cols-[minmax(0,1fr)_minmax(18rem,1fr)]"
+    >
+      <div
+        class="max-h-[36rem] space-y-2 overflow-auto rounded-lg border bg-card p-3"
+      >
+        <button
+          v-for="(entry, index) in entries"
+          :key="`${entry.ledger}:${index}`"
+          type="button"
+          :aria-current="index === replay.cursor.value ? 'step' : undefined"
+          class="w-full rounded-md border p-3 text-left hover:bg-muted aria-[current=step]:border-primary aria-[current=step]:bg-primary/5"
+          @click="replay.seek(index)"
+        >
+          <span class="block break-all text-xs text-muted-foreground"
+            >{{ entry.ledger
+            }}<span
+              v-if="entry.sessionId && !entry.ledger.startsWith('Session ')"
+            >
+              · Session {{ entry.sessionId }}</span
+            >
+            · #{{ entry.event.sequence }} · {{ entry.event.type }}</span
+          ><span class="block text-sm">{{ entry.event.summary }}</span
+          ><span
+            v-if="index > replay.cursor.value"
+            class="text-xs text-muted-foreground"
+            >尚未播放</span
+          >
+        </button>
+        <p v-if="!entries.length" class="p-4 text-sm text-muted-foreground">
+          暂无可回放的历史事件；缺失关联不会补造。
+        </p>
+      </div>
+      <ReplayEventDetail
+        :event="replay.current.value"
+        :session-id="entries[replay.cursor.value]?.sessionId"
+        :recording="recording"
+        :events="events"
+        @seek="replay.seek"
+      />
+    </div>
+  </section>
+</template>

package/template/apps/web/src/pages/system/components/agent-workbench/SessionReplayTimeline.webtest.ts

@@ -0,0 +1,242 @@
+import { mount } from "@vue/test-utils";
+import { describe, expect, test, vi } from "vitest";
+import type { AgentWorkbenchRecordingV1 } from "@southwind-ai/shared";
+import SessionReplayTimeline from "./SessionReplayTimeline.vue";
+import { replayEntries } from "./replay-presenter";
+import { publicWorkbenchEvent } from "@/services/agent-workbench-event";
+const recording: AgentWorkbenchRecordingV1 = {
+  source: "business",
+  sessionId: "business_1",
+  title: "案件查询",
+  updatedAt: "2026-10-07",
+  mode: "read-only",
+  sideEffectPolicy: "no-reexecution",
+  correlationStatus: "partial",
+  missing: ["历史审批关联缺失"],
+  messages: [
+    {
+      sequence: 1,
+      role: "user",
+      content: "查看资金线索",
+      createdAt: "2026-10-07",
+    },
+  ],
+  timeline: [
+    { sequence: 3, type: "run.linked", summary: "第一轮", runId: "run_1" },
+    { sequence: 9, type: "run.linked", summary: "第二轮", runId: "run_2" },
+  ],
+  runs: [
+    {
+      runId: "run_1",
+      operationKey: "query",
+      status: "completed",
+      correlationStatus: "complete",
+      missing: [],
+      events: [
+        {
+          sequence: 1,
+          type: "tool.requested",
+          summary: "资金工具",
+          runId: "run_1",
+          toolKey: "money.read",
+          toolCallId: "tool_1",
+        },
+      ],
+    },
+    {
+      runId: "run_2",
+      operationKey: "query",
+      status: "completed",
+      correlationStatus: "complete",
+      missing: [],
+      result: { output: { total: 12 } },
+      events: [
+        {
+          sequence: 1,
+          type: "usage.reported",
+          summary: "模型用量",
+          runId: "run_2",
+          modelAttemptId: "attempt_2",
+          usage: { inputTokens: 15 },
+        },
+      ],
+    },
+  ],
+  workflows: [
+    {
+      workflowRunId: "workflow_2",
+      parentRunId: "run_2",
+      workflowKey: "review",
+      title: "复核",
+      status: "completed",
+      nodes: [
+        {
+          nodeRunId: "node_2",
+          nodeId: "review",
+          type: "model",
+          status: "completed",
+          attempt: 2,
+          selectedBranch: "approved",
+          workItemId: "workitem_review",
+          artifactIds: ["artifact_2"],
+          agentRunId: "run_2",
+        },
+      ],
+      events: [
+        {
+          sequence: 6,
+          type: "node.completed",
+          summary: "节点完成",
+          workItemId: "workitem_review",
+          outcome: "approved",
+          workflowRunId: "workflow_2",
+          nodeRunId: "node_2",
+          runId: "run_2",
+        },
+      ],
+    },
+  ],
+};
+describe("会话只读回放", () => {
+  test("fork按父子Session分段回放，各自原始序号从1开始，父Run不会误标为缺失", async () => {
+    const parentEvent = {
+      sequence: 1,
+      type: "run.linked",
+      summary: "父分支第一轮",
+      runId: "run_1",
+    };
+    const childEvent = {
+      sequence: 1,
+      type: "run.linked",
+      summary: "子分支第一轮",
+      runId: "run_2",
+    };
+    const fork: AgentWorkbenchRecordingV1 = {
+      ...recording,
+      source: "harness",
+      sessionId: "session_child",
+      timeline: [childEvent],
+      segments: [
+        {
+          sessionId: "session_parent",
+          throughSequence: 1,
+          timeline: [parentEvent],
+        },
+        {
+          sessionId: "session_child",
+          throughSequence: 1,
+          timeline: [childEvent],
+        },
+      ],
+      runs: recording.runs.map((run, index) => ({
+        ...run,
+        sessionId: index === 0 ? "session_parent" : "session_child",
+      })),
+    };
+    const entries = replayEntries(fork);
+    expect(entries.map((entry) => entry.event.sequence)).toEqual([
+      1, 1, 1, 1, 6,
+    ]);
+    expect(entries[1]?.sessionId).toBe("session_parent");
+    expect(entries[3]?.sessionId).toBe("session_child");
+    expect(entries.some((entry) => entry.ledger.includes("独立 Run"))).toBe(
+      false,
+    );
+    const wrapper = mount(SessionReplayTimeline, {
+      props: { recording: fork },
+    });
+    expect(
+      wrapper.get('[aria-label="父子 Session 回放范围"]').text(),
+    ).toContain("session_parent");
+    expect(
+      wrapper.get('[aria-label="父子 Session 回放范围"]').text(),
+    ).toContain("session_child");
+    await wrapper
+      .findAll("button")
+      .find(
+        (button) =>
+          button.text().includes("Run run_1") &&
+          button.text().includes("资金工具"),
+      )!
+      .trigger("click");
+    expect(wrapper.get('[aria-label="调用关联详情"]').text()).toContain(
+      "session_parent",
+    );
+    await wrapper
+      .findAll("button")
+      .find((button) => button.text() === "下一事件")!
+      .trigger("click");
+    expect(wrapper.get('[aria-current="step"]').text()).toContain(
+      "Session session_child",
+    );
+    wrapper.unmount();
+  });
+
+  test("保留多轮日志各自序号而不补造全局序列，且播放不触发网络", async () => {
+    const fetcher = vi.spyOn(globalThis, "fetch");
+    const entries = replayEntries(recording);
+    expect(entries.map((entry) => entry.event.sequence)).toEqual([
+      3, 1, 9, 1, 6,
+    ]);
+    const wrapper = mount(SessionReplayTimeline, { props: { recording } });
+    expect(wrapper.text()).toContain("历史审批关联缺失");
+    await wrapper
+      .findAll("button")
+      .find((button) => button.text() === "播放")!
+      .trigger("click");
+    await wrapper
+      .findAll("button")
+      .find((button) => button.text() === "暂停")!
+      .trigger("click");
+    await wrapper
+      .findAll("button")
+      .find((button) => button.text() === "下一事件")!
+      .trigger("click");
+    expect(wrapper.text()).toContain("money.read");
+    expect(fetcher).not.toHaveBeenCalled();
+    wrapper.unmount();
+  });
+  test("点击关联节点在统一视图中定位，详情显示结果和分支", async () => {
+    const wrapper = mount(SessionReplayTimeline, { props: { recording } });
+    await wrapper
+      .findAll("button")
+      .find(
+        (button) =>
+          button.text().includes("Run run_2") &&
+          button.text().includes("模型用量"),
+      )!
+      .trigger("click");
+    const detail = wrapper.get('[aria-label="调用关联详情"]');
+    expect(detail.text()).toContain("attempt_2");
+    expect(detail.text()).toContain("12");
+    expect(detail.text()).toContain("approved");
+    expect(detail.text()).toContain("审批任务：workitem_review");
+    await detail
+      .findAll("button")
+      .find((button) => button.text() === "定位审批记录")!
+      .trigger("click");
+    expect(wrapper.get('[aria-label="调用关联详情"]').text()).toContain(
+      "workitem_review",
+    );
+    await detail
+      .findAll("button")
+      .find((button) => button.text() === "定位节点 / Run 的记录")!
+      .trigger("click");
+    expect(wrapper.get('[aria-current="step"]').text()).toContain("节点完成");
+    wrapper.unmount();
+  });
+  test("SSE 客户端不保留未声明的敏感字段", () => {
+    const event = publicWorkbenchEvent({
+      sequence: 1,
+      type: "tool.requested",
+      summary: "已请求",
+      toolKey: "tool.read",
+      arguments: { secret: "secret" },
+      providerBody: "private",
+      chainOfThought: "hidden",
+      usage: { inputTokens: 3, secret: "unsafe" },
+    });
+    expect(JSON.stringify(event)).not.toMatch(/secret|private|hidden|unsafe/);
+    expect(event?.usage?.inputTokens).toBe(3);
+  });
+});

package/template/apps/web/src/pages/system/components/agent-workbench/TestRunComposer.vue

@@ -0,0 +1,97 @@
+<script setup lang="ts">
+import { computed } from "vue";
+import type { AgentAdminOperationCatalogItem } from "@southwind-ai/shared";
+import { Button } from "@/components/ui/button";
+import { availabilityLabel, formatJson } from "./catalog-presenter";
+const props = defineProps<{
+  operations: readonly AgentAdminOperationCatalogItem[];
+  operationKey: string;
+  input: string;
+  starting: boolean;
+  running: boolean;
+  canManage: boolean;
+}>();
+defineEmits<{
+  "update:input": [value: string];
+  operation: [key: string];
+  start: [];
+}>();
+const operation = computed(() =>
+  props.operations.find((item) => item.key === props.operationKey),
+);
+</script>
+<template>
+  <form
+    class="space-y-3 rounded-lg border bg-card p-4"
+    @submit.prevent="$emit('start')"
+  >
+    <h2 class="font-medium">真实受治理测试</h2>
+    <p class="text-xs text-muted-foreground">
+      使用当前登录身份，运行会真实调用模型与允许的工具。同一测试会话可连续运行多轮。
+    </p>
+    <label class="grid gap-2 text-sm"
+      ><span>Operation</span
+      ><select
+        required
+        :value="operationKey"
+        :disabled="starting || running || !canManage"
+        class="h-9 rounded-md border bg-background px-2 user-invalid:border-destructive"
+        @change="$emit('operation', ($event.target as HTMLSelectElement).value)"
+      >
+        <option value="" disabled>请选择已注册操作</option>
+        <option
+          v-for="item in operations"
+          :key="item.key"
+          :value="item.key"
+          :disabled="!item.selectable"
+        >
+          {{ item.key }} · {{ item.moduleLabel
+          }}{{
+            item.selectable
+              ? ""
+              : `（${availabilityLabel(item.availabilityReason)}）`
+          }}
+        </option>
+      </select></label
+    >
+    <details v-if="operation">
+      <summary class="cursor-pointer text-xs">
+        查看输入 Schema 与运行规则
+      </summary>
+      <pre
+        class="mt-2 max-h-64 overflow-auto rounded-md bg-muted p-3 text-xs"
+        >{{ formatJson(operation.inputSchema) }}</pre>
+      <p class="mt-2 text-xs text-muted-foreground">
+        {{ availabilityLabel(operation.availabilityReason) }}；最长
+        {{ operation.limits.maxDurationSeconds }} 秒；输入
+        {{ operation.limits.maxInputBytes }} 字节。允许工具：{{
+          operation.allowedToolKeys.join("、") || "无"
+        }}
+      </p>
+    </details>
+    <label class="grid gap-2 text-sm"
+      ><span>测试输入（JSON）</span
+      ><textarea
+        :value="input"
+        :disabled="starting || running || !canManage"
+        rows="5"
+        spellcheck="false"
+        aria-label="测试输入 JSON"
+        class="min-h-32 w-full rounded-md border border-input bg-background p-3 font-mono text-sm disabled:opacity-50"
+        @input="
+          $emit('update:input', ($event.target as HTMLTextAreaElement).value)
+        "
+      />
+    </label>
+    <p v-if="!canManage" class="text-sm text-muted-foreground">
+      当前只有查看权限，不能新建测试运行。
+    </p>
+    <Button
+      type="submit"
+      :disabled="!canManage || !operation?.selectable || starting || running"
+      >{{
+        starting ? "创建中…" : running ? "运行进行中" : "开始真实测试"
+      }}</Button
+    >
+  </form>
+</template>

package/template/apps/web/src/pages/system/components/agent-workbench/ToolCatalogPanel.vue

@@ -0,0 +1,100 @@
+<script setup lang="ts">
+import type { AgentAdminToolCatalogItem } from "@southwind-ai/shared";
+import { computed, shallowRef } from "vue";
+import { Input } from "@/components/ui/input";
+import { availabilityLabel } from "./catalog-presenter";
+const props = defineProps<{
+  tools: readonly AgentAdminToolCatalogItem[];
+  selected: string;
+}>();
+defineEmits<{ select: [key: string] }>();
+const query = shallowRef("");
+const moduleKey = shallowRef("");
+const operationKey = shallowRef("");
+const availability = shallowRef("");
+const modules = computed(() =>
+  [...new Set(props.tools.map((tool) => tool.module))].sort(),
+);
+const operations = computed(() =>
+  [...new Set(props.tools.flatMap((tool) => tool.allowedOperationKeys))].sort(),
+);
+const filtered = computed(() =>
+  props.tools.filter(
+    (tool) =>
+      (!moduleKey.value || tool.module === moduleKey.value) &&
+      (!operationKey.value ||
+        tool.allowedOperationKeys.includes(operationKey.value)) &&
+      (!availability.value ||
+        tool.allowed === (availability.value === "allowed")) &&
+      `${tool.key} ${tool.label} ${tool.description}`
+        .toLocaleLowerCase()
+        .includes(query.value.trim().toLocaleLowerCase()),
+  ),
+);
+</script>
+<template>
+  <section
+    class="space-y-3 rounded-lg border bg-card p-4"
+    aria-label="工具目录"
+  >
+    <Input
+      v-model="query"
+      aria-label="搜索工具"
+      placeholder="搜索名称、说明或 Key"
+    />
+    <div class="grid gap-2 sm:grid-cols-3 lg:grid-cols-1">
+      <select
+        v-model="moduleKey"
+        aria-label="所属模块筛选"
+        class="h-9 rounded-md border bg-background px-2 text-sm"
+      >
+        <option value="">所有模块</option>
+        <option v-for="module in modules" :key="module">{{ module }}</option>
+      </select>
+      <select
+        v-model="operationKey"
+        aria-label="Operation 筛选"
+        class="h-9 rounded-md border bg-background px-2 text-sm"
+      >
+        <option value="">所有 Operations</option>
+        <option v-for="operation in operations" :key="operation">
+          {{ operation }}
+        </option>
+      </select>
+      <select
+        v-model="availability"
+        aria-label="调用条件筛选"
+        class="h-9 rounded-md border bg-background px-2 text-sm"
+      >
+        <option value="">所有调用状态</option>
+        <option value="allowed">具备调用条件</option>
+        <option value="denied">当前不可调用</option>
+      </select>
+    </div>
+    <p class="text-xs text-muted-foreground">
+      {{ filtered.length }} /
+      {{ tools.length }} 个工具。查看目录不会授予执行权限。
+    </p>
+    <div class="max-h-[65vh] space-y-2 overflow-y-auto">
+      <button
+        v-for="tool in filtered"
+        :key="tool.key"
+        type="button"
+        :aria-pressed="selected === tool.key"
+        class="w-full rounded-md border p-3 text-left transition-colors hover:bg-muted aria-pressed:border-primary aria-pressed:bg-primary/5"
+        @click="$emit('select', tool.key)"
+      >
+        <span class="block text-sm font-medium">{{ tool.label }}</span
+        ><span class="block break-all text-xs text-muted-foreground">{{
+          tool.key
+        }}</span
+        ><span class="mt-1 block text-xs">{{
+          availabilityLabel(tool.availabilityReason)
+        }}</span>
+      </button>
+      <p v-if="!filtered.length" class="p-5 text-sm text-muted-foreground">
+        没有匹配的已装配工具。
+      </p>
+    </div>
+  </section>
+</template>

package/template/apps/web/src/pages/system/components/agent-workbench/ToolCatalogPanel.webtest.ts

@@ -0,0 +1,55 @@
+import { mount } from "@vue/test-utils";
+import { describe, expect, test } from "vitest";
+import type { AgentAdminToolCatalogItem } from "@southwind-ai/shared";
+import ToolCatalogPanel from "./ToolCatalogPanel.vue";
+import ToolRuleDetail from "./ToolRuleDetail.vue";
+const tool: AgentAdminToolCatalogItem = {
+  key: "analysis.location-query.query",
+  label: "位置查询",
+  description: "查询已授权地理轨迹",
+  module: "analysis.location-query",
+  operation: "query",
+  featureKey: "analysis.location-query",
+  permissionKey: "analysis.location-query.read",
+  auditAction: "query.read",
+  scopeMode: "request",
+  executionMode: "host",
+  dataClassification: "sensitive",
+  approval: "required",
+  approvalRoles: [{ code: "reviewer", name: "复核员" }],
+  approvalTimeoutSeconds: 120,
+  idempotency: "required",
+  limits: { maxDurationSeconds: 60, maxInputBytes: 1024, maxOutputBytes: 2048 },
+  inputSchemaKey: "input.v1",
+  outputSchemaKey: "output.v1",
+  inputSchema: { type: "object", properties: { keyword: { type: "string" } } },
+  outputSchema: { type: "array" },
+  allowedOperationKeys: ["copilot.query"],
+  allowed: false,
+  availabilityReason: "permission-denied",
+};
+describe("动态工具目录", () => {
+  test("下游工具由服务投影显示，可见与执行权限分离且没有执行按钮", async () => {
+    const wrapper = mount(ToolCatalogPanel, {
+      props: { tools: [tool], selected: "" },
+    });
+    expect(wrapper.text()).toContain("位置查询");
+    expect(wrapper.text()).toContain("缺少执行权限");
+    expect(wrapper.text()).not.toContain("执行工具");
+    await wrapper.get("input").setValue("copilot");
+    expect(wrapper.text()).toContain("没有匹配");
+    await wrapper.get("input").setValue("位置");
+    await wrapper.get("button").trigger("click");
+    expect(wrapper.emitted("select")).toEqual([[tool.key]]);
+    await wrapper.get('[aria-label="调用条件筛选"]').setValue("allowed");
+    expect(wrapper.text()).toContain("没有匹配");
+  });
+  test("Schema 和审批/范围/限制展示使用实际注册投影", () => {
+    const wrapper = mount(ToolRuleDetail, { props: { tool } });
+    expect(wrapper.text()).toContain("keyword");
+    expect(wrapper.text()).toContain("input.v1");
+    expect(wrapper.text()).toContain("复核员");
+    expect(wrapper.text()).toContain("1024");
+    expect(wrapper.text()).toContain("copilot.query");
+  });
+});