dsh-data-cleaning-agent 0.9.6 → 0.9.8

package/lib/image-workflow.js

@@ -23,6 +23,7 @@ export function createImageWorkflow({ getWorkflow, execution, commands }) {
       summary: { total: rows.length, valid: rows.length, missingAnchor: 0,
         duplicates: rows.length - new Set(result.entries).size } });
     const payload = await execution.prepare({ taskId: task.id, expectedRevision: task.revision,
+      originSessionId: task.originSessionId, originWorkspaceId: task.originWorkspaceId,
       kind: 'enrich', rows, headers: ['主体标识'], nameField: '主体标识' });
     const command = commands.prepare(payload, { artifactOrigin: record.workflow.artifactOrigin });
     record.qccCommand = { commandId: command.commandId, taskId: task.id };

package/lib/qcc-safety.js

@@ -78,6 +78,7 @@ export function safeAuditEvent(event) {
     upstreamCode: source.upstreamCode ? String(source.upstreamCode) : null,
     durationMs: Math.max(0, Number(source.durationMs ?? 0)),
   };
+  if (['success-data', 'success-empty', 'not-required', 'no-permission', 'failed', 'unknown'].includes(source.providerState)) safe.providerState = source.providerState;
   if (source.catalogVersion || Array.isArray(source.missing) || Array.isArray(source.unknown)) {
     safe.catalogVersion = source.catalogVersion ? String(source.catalogVersion).slice(0, 64) : null;
     safe.missing = safeCatalogLabels(source.missing);

package/lib/qcc.js

@@ -281,12 +281,26 @@ function normalizedFailure(result, toolName, state) {
 
 function emitAudit(options, event) {
   try {
-    options?.onAudit?.(safeAuditEvent(event));
+    options?.onAudit?.(safeAuditEvent({ ...event, providerState: event.providerState ?? providerResultState({
+      error: event.outcome === 'failed' || event.outcome === 'not-dispatched' ? { code: event.code, upstreamCode: event.upstreamCode } : null,
+    }) }));
   } catch {
     // 审计 sink 失败不能改变计费工具调用的业务结果。
   }
 }
 
+/** Provider outcome is separate from execution completion and business review. */
+export function providerResultState({ data, error, required = true } = {}) {
+  if (!required) return 'not-required';
+  if (error) return ['401', '403', 'QCC_AUTH_REQUIRED'].includes(String(error.upstreamCode || error.code)) ? 'no-permission' : 'failed';
+  if (Array.isArray(data)) return data.length ? 'success-data' : 'success-empty';
+  if (!data || typeof data !== 'object' || !Object.keys(data).length) return 'unknown';
+  const lists = ['实际控制人信息', '受益所有人信息', 'items', 'records', '企业列表'].map(k => data[k]).filter(Array.isArray);
+  if (lists.length && lists.every(v => !v.length)) return data.has_more === true ? 'unknown' : 'success-empty';
+  // No fabricated zero count for a missing/null/unrecognised transport payload.
+  return 'success-data';
+}
+
 function candidateView(candidate) {
   const item = isRecord(candidate) ? candidate : {};
   return {
@@ -835,15 +849,17 @@ export class QccHostBridge {
           } : {}),
         });
         if (result?.isError !== true) {
+          const data = decodeQccToolValue(result?.value);
           emitAudit(options, {
             toolName: activeToolName,
             callId,
             attempt,
             outcome: 'success',
+            providerState: providerResultState({ data }),
             durationMs: Date.now() - attemptStarted,
           });
           attemptAudited = true;
-          return { callId, toolName: activeToolName, data: decodeQccToolValue(result?.value) };
+          return { callId, toolName: activeToolName, data };
         }
         const upstreamCode = upstreamFailureCode(result);
         if (upstreamCode === 'UNKNOWN_TOOL' && attempt === 1 && !state.signal.aborted) {

package/lib/web.js

@@ -424,6 +424,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         const payload = JSON.parse((await readBody(req)).toString('utf8'));
         const record = imageIntake.require(decodeURIComponent(rest[0]));
         const task = await (await getWorkflow()).require(payload.taskId);
+        await (await getWorkflow()).assertRequestOrigin(task.id, payload);
         if (payload.executeOnSend !== true || record.state !== 'prepared' || task.state !== 'draft'
           || task.revision !== payload.expectedRevision || task.source?.type !== 'image'
           || task.source.fileName !== record.fileName || !task.fieldSelection.length) {
@@ -516,6 +517,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (req.method === 'PATCH') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           return writeJson(res, 200, {
             ok: true,
             marker: 'data-cleaning-workflow-v2',
@@ -545,6 +547,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (rest.length === 2 && req.method === 'POST') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           if (Number(payload.expectedRevision) !== current.revision) {
             throw new WorkflowError('DC_WORKFLOW_REVISION_CONFLICT', 'Workflow task was updated by another session.', 409);
           }
@@ -612,6 +615,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
       const body = await readBody(req);
       const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
       const action = rest[2];
+      await workflow.assertRequestOrigin(taskId, payload);
       const actions = {
         upload: () => workflow.recordUpload(taskId, payload),
         rules: () => workflow.confirmRules(taskId, payload),

package/lib/workflow-contract.js

@@ -215,5 +215,17 @@ export function assertWorkflowRecordShape(record) {
   if (!STAGE_IDS.has(record.stage) || !STATE_IDS.has(record.state)) {
     throw new WorkflowContractError('DC_WORKFLOW_SCHEMA', 'Workflow record contains an invalid stage or state.');
   }
-  return record;
+  // Additive v2 migration: never infer ownership from whichever Session reads history.
+  return { ...record, ...normalizeWorkflowOrigin(record) };
+}
+
+export function normalizeWorkflowOrigin(value = {}) {
+  const id = value => typeof value === 'string' && /^[\w:.-]{1,200}$/.test(value) ? value : null;
+  const label = value => typeof value === 'string' ? value.replace(/[\u0000-\u001f\u007f]/g, '').trim().slice(0, 120) || null : null;
+  return {
+    originSessionId: id(value.originSessionId),
+    originWorkspaceId: id(value.originWorkspaceId),
+    originSessionName: label(value.originSessionName),
+    originWorkspaceName: label(value.originWorkspaceName),
+  };
 }

package/lib/workflow-execution.js

@@ -10,7 +10,7 @@ export function createWorkflowExecution({ getWorkflow, artifacts }) {
   return {
     async prepare(payload) {
       const store = await requireStore();
-      const task = await store.require(payload.taskId);
+      const task = await store.assertRequestOrigin(payload.taskId, payload);
       if (!['rules_confirmed', 'diagnosed', 'review_required', 'partial'].includes(task.state)) {
         throw new WorkflowError('DC_EXECUTION_STATE', '请先在工作台确认规则；进行中或已完成任务不能重复启动。', 409);
       }

package/lib/workflow.js

@@ -12,6 +12,7 @@ import {
   assertWorkflowTransition,
   normalizeFieldSelection,
   normalizeWorkflowDraft,
+  normalizeWorkflowOrigin,
   validateMappings,
 } from './workflow-contract.js';
 
@@ -140,6 +141,7 @@ export class DataCleaningWorkflowStore {
     const id = this.idFactory();
     const record = {
       id,
+      ...normalizeWorkflowOrigin(input),
       schemaVersion: WORKFLOW_SCHEMA_VERSION,
       revision: 1,
       title: draft.title,
@@ -180,6 +182,16 @@ export class DataCleaningWorkflowStore {
     return record;
   }
 
+  async assertRequestOrigin(id, input = {}) {
+    const task = await this.require(id);
+    // Origin-less legacy/headless records remain readable; UI never adopts them.
+    if (task.originSessionId && (input.originSessionId !== task.originSessionId
+      || (task.originWorkspaceId && input.originWorkspaceId !== task.originWorkspaceId))) {
+      throw new WorkflowError('DC_WORKFLOW_SCOPE', '任务不属于此来源会话；历史任务仅可只读查看。', 409);
+    }
+    return task;
+  }
+
   async mutate(id, expectedRevision, updater) {
     const key = String(id);
     const current = await this.require(key);
@@ -197,6 +209,7 @@ export class DataCleaningWorkflowStore {
         ...latest,
         ...patch,
         id: latest.id,
+        ...normalizeWorkflowOrigin(latest),
         schemaVersion: WORKFLOW_SCHEMA_VERSION,
         revision: latest.revision + 1,
         updatedAt: this.nowFn(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-data-cleaning-agent",
-  "version": "0.9.6",
+  "version": "0.9.8",
   "description": "Data cleaning and data enrichment for CSV/XLSX/JSON enterprise lists in DeepSeek Harness, including spreadsheet cleaning, deduplication, profiling, optional Qichacha MCP and exports.",
   "type": "module",
   "main": "lib/index.js",
@@ -20,6 +20,7 @@
     "install.sh",
     "marketing",
     "docs/USER-GUIDE.md",
+    "docs/RELEASE-0.9.8.md",
     "docs/FIRST-CONTRIBUTION.md",
     "docs/COMPATIBILITY.md",
     "docs/UI-V1.5.0-ADOPTION.md",