dsh-data-cleaning-agent 0.9.7 → 0.9.8

package/CHANGELOG.md

@@ -4,6 +4,13 @@
 
 ## [Unreleased]
 
+## [0.9.8] - 2026-09-13
+
+- DC-SCOPE-P0：持久保存任务来源 Session/Workspace 与安全展示名称；v2 旧记录采用附加字段兼容读取，不猜测来源、不批量改写历史。
+- Profile 历史改为独立只读详情；打开来源会话按宿主能力降级，不覆盖当前任务、规则、名单或命令。保留客户 XLSX 与次要任务报告分层。
+- 当前绑定恢复、迟到刷新及 HTTP 写入/命令准备校验来源；跨会话请求拒绝，版本冲突仍由 Host revision 控制。
+- 审计增加 Provider 六类状态区分；完成态迟到更新、A/B、旧记录、重启和来源导航补充回归。真实 DSH Web 未认证，真实宿主与 Provider 未验证。
+
 ## [0.9.7] - 2026-09-11
 
 - 优化数据清洗补全工作台的区域间距、信息层级与明暗主题响应式布局，重构导入清单、字段映射、质量体检和主体匹配页面。

package/README.en.md

@@ -10,7 +10,9 @@ Related agents: [数据清洗补全](https://github.com/duhu2000/dsh-data-cleani
 
 > A data cleaning & completion agent plugin for DeepSeek Harness: local CSV/XLSX/JSON engine plus optional Qichacha (QCC) MCP enterprise-data enrichment. Initiated and maintained by the Qichacha (QCC) team.
 >
-> Current source version / 当前源码版本: **0.9.7** (stable release)
+> Current source version / 当前源码版本: **0.9.8** (stable release)
+
+0.9.8 makes Profile history read-only and persists origin Workspace/Session metadata. Legacy records remain explicitly unattributed and cannot become the current Session task. Open-origin navigation is capability-gated; existing XLSX artifacts remain downloadable without MCP calls. Rollback: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7` (reintroduces the old history-binding risk). Live DSH A/B verification is unverified because the local Web session requires authentication; see the release checklist.
 
 This release refines workbench hierarchy, spacing, and responsive behavior across imported lists, field mapping, quality profiling, and entity matching. File, image, and pasted-data inputs collapse after a successful import and return through the explicit reimport action. Field mapping uses grouped choices, and searching a dimension exposes all fields in that group. Preparing a draft does not query QCC; sending starts execution. Fully restart DSH after upgrading. Existing download artifacts are not rewritten.
 

package/README.md

@@ -9,7 +9,7 @@
 数据清洗补全智能体：面向 Excel/CSV/JSON 企业名单，提供数据清洗、表格清洗、清洗补全、去重、企业数据补全与字段补全，支持企查查 MCP 和结果导出。
 
 ```sh
-dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7
+dsh plugin --profile web add dsh-data-cleaning-agent@0.9.8
 ```
 
 请先满足下文的 DSH、连接器及侧边栏依赖要求；安装后完整停止并重启对应 Profile。
@@ -27,7 +27,9 @@ dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7
 
 > 在 DeepSeek Harness 中清洗、补全、画像企业名单数据的智能体插件：本地 CSV/XLSX/JSON 引擎 + 可选企查查（Qichacha/QCC）MCP 企业数据补全，由企查查（Qichacha/QCC）团队发起并维护。
 >
-> 当前源码版本 / Current source version: **0.9.7**（正式版本）
+> 当前源码版本 / Current source version: **0.9.8**（正式版本）
+
+0.9.8 修复历史任务跨 Session 误绑定：历史默认只读，显示来源工作区/会话；旧记录显示“历史版本未保存来源”，不自动接管。来源可用时可“打开来源会话”，不会修改当前任务。已有 XLSX 与任务报告可继续下载，导航不调用 MCP。升级后旧版本当前绑定将进入只读历史；新任务按 Session 恢复。回滚：`dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7`（回滚会重新暴露旧版误绑定风险）。真实 DSH A/B 验收因本机 Web 未认证而未验证，详见发布清单。
 
 本版优化工作台的信息层级、区域间距与响应式布局，重构导入清单、字段映射、质量体检及主体匹配页面。导入成功后文件、图片与粘贴入口自动收起，通过“重新导入”再次展开；映射字段按维度分组选择，搜索维度名称时展示该组全部字段。生成说明不查询，发送才执行；升级后需完整重启 DSH，历史下载文件不自动改写。
 

package/docs/RELEASE-0.9.8.md

@@ -0,0 +1,68 @@
+# 0.9.8 · DC-SCOPE-P0
+
+Status: release candidate. Date: 2026-09-13.
+
+## Scope and authorization
+
+Explicit ledger delegation authorizes code, tests, commit/push, PR merge, immutable tag,
+GitHub Release, OIDC npm publishing and registry read-back. Base main: 2424c97.
+Package: dsh-data-cleaning-agent 0.9.8; qcc-field-contracts stays 0.2.0.
+Adopts DSH-UX-001 v1.5.3 at the shared AI-设计/DSH智能体开发交互规范方案.md;
+visual reference: DSH智能体_企查查蓝_UI_Mockup_v1.5.0.html.
+
+## Migration and boundaries
+
+- New UI tasks persist immutable originSessionId/originWorkspaceId and bounded display labels.
+  Missing Workspace capability is explicitly unknown; never inferred from active/recent Workspace.
+- Schema v2 additive read migration returns null origin for legacy records. No bulk rewrite.
+- LocalStorage bindings are hints, not ownership proof. Wrong/legacy bindings cannot hydrate
+  the current Session; explicit new work creates a new task. Profile history remains readable.
+- History selection has separate state and uses GET only. It does not load run rows, rules,
+  field selection, paid confirmations or command credentials into the current Session.
+- Open-source-Session uses an existing, capability-verified Session only. Missing/deleted
+  origins remain read-only; no clone or silent rebind feature is introduced.
+- HTTP task mutations and workflow command preparation require matching persisted origin
+  for scoped tasks. This is an application isolation guard, not an authentication boundary:
+  existing Host same-origin/Profile access controls remain authoritative. Legacy/headless
+  origin-less API records remain backwards-compatible; UI never adopts them as current.
+- Revision conflict rejects concurrent updates; stale UI snapshots do not overwrite newer ones.
+- Customer XLSX and secondary report links remain separated. Downloads reuse saved artifacts.
+- Provider audit distinguishes success-data, success-empty, not-required, no-permission,
+  failed, unknown without changing field completeness or charging rules. No raw response saved.
+- Completed/cancelled workflow states cannot regress. Existing explicit partial-result retry
+  is retained; it is not classified as an immutable successful completion.
+
+## Verification
+
+Local evidence (2026-09-13): `npm run check` passed, 275/275 tests, zero failures.
+Real React/Chromium layout matrix passed 10/10 (light/dark; 320–1440px).
+Artifact preview passed 390/800/1440px with compact rows, two-axis scrolling and fixed headers.
+`git diff --check` passed. Remote CI and registry evidence are pending publication.
+No separate compiled build: runtime consists of shipped JS;
+`npm run check` includes syntax, documentation, package allowlist and full node tests.
+Real React/Chromium layout and preview regressions are separate from live DSH.
+Tests cover Session A/B, origin persistence across store restart, legacy unknown records,
+concurrent revision updates, stale history/current responses, open-origin capability checks,
+Tab X/fold/provider-remount and synthetic four-plugin coexistence baseline from PR #13.
+
+**真实 DSH Session A/B 浏览器验收：因本机 DSH Web 未认证而未验证。**
+Observed browser text: “dsh web authentication required; reopen the URL printed by dsh web.”
+No authentication bypass or token collection attempted. Ledger confirmed this external
+condition does not block release if all automated gates pass. Live QCC/OCR/Windows-host
+and real four-plugin installation verification are not claimed. Market publishing out of scope.
+
+Minimal user recheck after authentication/restart:
+1. In Session A, create a synthetic task without sending paid commands; confirm origin labels.
+2. In Session B, enter a different draft/field selection, view A from history, then return to
+   current task. B's draft, fields, taskId and stage must remain unchanged.
+3. Download A's saved artifact without new MCP calls; open source Session A only via explicit action.
+4. Restart/reload, close Tab X, fold/unfold Sidebar, switch among four plugins and repeat.
+   Old tasks must say “历史版本未保存来源” and must never replace B's current task.
+
+## Publish and rollback
+
+Follow PR → exact merge main CI → annotated v0.9.8 → Release workflow OIDC/provenance.
+Read back npm latest/version/gitHead/attestations, tag SHA and GitHub Release flags.
+Rollback package: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7`.
+Rollback reintroduces history adoption risk; preserve persisted records and do not move tags.
+Release evidence will be appended after publication; no market or user acceptance claim.

package/lib/client.js

@@ -1941,8 +1941,20 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const time = date && Number.isFinite(date.getTime()) ? date.toLocaleString() : '';
       return `${base}｜${task.source?.type === 'image' && task.state === 'draft' ? '待识别' : `${task.source?.rowCount ?? 0} 条`}${time ? '｜' + time : ''}`;
     }
+    function taskBelongsToSession(task, sessionId) {
+      if (!sessionId || task?.originSessionId !== sessionId) return false;
+      const scope = sessionWorkbenchController?.originFor?.(sessionId);
+      return !scope?.originWorkspaceId || task.originWorkspaceId === scope.originWorkspaceId;
+    }
+    function workflowOriginLabel(task) {
+      if (!task?.originSessionId) return '历史版本未保存来源';
+      return `工作区：${task.originWorkspaceName || task.originWorkspaceId || '未取得来源工作区'} · 会话：${task.originSessionName || task.originSessionId}`;
+    }
     function cacheWorkflowTask(actions, sessionId, task) {
       if (!task) return null;
+      if (!taskBelongsToSession(task, sessionId)) throw new Error('此任务不属于当前会话；请在任务历史中只读查看或打开来源会话。');
+      const previous = workflowTaskBySession.get(String(sessionId));
+      if (previous?.id === task.id && previous.revision > task.revision) return previous;
       if (sessionId) workflowTaskBySession.set(String(sessionId), task);
       bindTask(sessionId, task.id);
       actions.setWorkflowTask(task);
@@ -1955,10 +1967,13 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     }
 
     async function createWorkflowTask(actions, sessionId, draft = {}) {
+      if (!sessionId) throw new Error('请先打开数据清洗会话。');
       const key = String(sessionId || 'unassigned');
       let pending = workflowTaskCreationBySession.get(key);
       if (!pending) {
         pending = requestJson('/data-cleaning/api/workflow/tasks', 'POST', {
+          ...sessionWorkbenchController?.originFor?.(sessionId),
+          originSessionId: sessionId,
           title: draft.title || '企业数据清洗补全任务',
           objectives: draft.objectives || DEFAULT_CLEANING_KEYS,
           fieldSelection: draft.fieldSelection || DEFAULT_ENRICHMENT_KEYS,
@@ -1984,9 +1999,12 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const saved = readTaskBindings()[key];
       if (ownedSessionId(key) && /^dcw-[a-zA-Z0-9-]+$/.test(saved || '')) {
         const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(saved)}`);
-        const task = cacheWorkflowTask(actions, sessionId, response.task);
-        if (restoreStage) actions.setStep(task.stage || 'upload');
-        return task;
+        if (taskBelongsToSession(response.task, sessionId)) {
+          const task = cacheWorkflowTask(actions, sessionId, response.task);
+          if (restoreStage) actions.setStep(task.stage || 'upload');
+          return task;
+        }
+        bindTask(sessionId, null);
       }
       return createWorkflowTask(actions, sessionId, draft);
     }
@@ -2000,6 +2018,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function ensureEditableWorkflowTask(actions, sessionId, draft = {}, preferredTask) {
       const key = String(sessionId || 'unassigned');
       const current = workflowTaskBySession.get(key) ?? preferredTask ?? null;
+      if (current && !taskBelongsToSession(current, sessionId)) throw new Error('不能将历史任务绑定到当前会话。请新建清洗任务。');
       if (!current) return createWorkflowTask(actions, sessionId, draft);
       if (EDITABLE_WORKFLOW_STATES.has(current.state)) return cacheWorkflowTask(actions, sessionId, current);
       workflowTaskBySession.delete(key);
@@ -2023,8 +2042,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function updateWorkflowTask(actions, sessionId, task, input) {
       const latest = workflowTaskBySession.get(String(sessionId || 'unassigned')) ?? task;
       if (!latest) return ensureWorkflowTask(actions, sessionId, input);
+      if (!taskBelongsToSession(latest, sessionId)) throw new Error('此任务不属于当前会话。');
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}`, 'PATCH', {
         ...input,
+        originSessionId: sessionId, originWorkspaceId: latest.originWorkspaceId,
         expectedRevision: latest.revision,
       });
       return cacheWorkflowTask(actions, sessionId, response.task);
@@ -2033,8 +2054,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function workflowAction(actions, sessionId, task, action, input = {}) {
       const latest = workflowTaskBySession.get(String(sessionId || 'unassigned')) ?? task;
       if (!latest) throw new Error('请先创建数据清洗补全任务。');
+      if (!taskBelongsToSession(latest, sessionId)) throw new Error('此任务不属于当前会话。');
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}/actions/${action}`, 'POST', {
         ...input,
+        originSessionId: sessionId, originWorkspaceId: latest.originWorkspaceId,
         expectedRevision: latest.revision,
       });
       return cacheWorkflowTask(actions, sessionId, response.task);
@@ -2048,6 +2071,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         if (JSON.stringify([...(task.fieldSelection || [])].sort()) !== JSON.stringify([...(expected.enrichmentKeys || [])].sort())) throw new Error('图片任务字段配置尚未保存，请重试。');
         const bound = await requestJson(`/data-cleaning/api/images/commands/${encodeURIComponent(expected.imageCommandId)}`, 'PATCH', {
           taskId: task.id, expectedRevision: task.revision, executeOnSend: true,
+          originSessionId: sessionId, originWorkspaceId: task.originWorkspaceId,
         });
         return { ...bound.command, prompt: buildTaskPrompt(expected) };
       }
@@ -2071,6 +2095,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       });
       const response = await requestJson('/data-cleaning/api/g5/commands', 'POST', {
         kind: 'enrich', workflowOwned: true, expectedRevision: task.revision, taskId: task.id,
+        originSessionId: sessionId, originWorkspaceId: task.originWorkspaceId,
         rows: runtime.rows, headers: runtime.headers, fieldSelection: task.fieldSelection,
       });
       if (!response.command?.commandId || !response.command?.prompt) throw new Error('Host 未返回执行凭证；未发送任务。');
@@ -2079,6 +2104,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
 
     async function refreshHostedTask(actions, sessionId, taskId, run, navigate = true) {
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(taskId)}`);
+      if (!taskBelongsToSession(response.task, sessionId)) {
+        if (readTaskBindings()[sessionId] === taskId) bindTask(sessionId, null);
+        return null;
+      }
       const selectedTask = workflowTaskBySession.get(String(sessionId));
       if (selectedTask && selectedTask.id !== taskId) return response.task;
       if (selectedTask && selectedTask.revision > response.task.revision) return selectedTask;
@@ -2136,6 +2165,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           workflowContract: null,
           workflowTask: null,
           workflowTasks: [],
+          historyTask: null,
           taskTitle: '企业数据清洗补全任务',
           mappings: [],
           objectives: [...DEFAULT_CLEANING_KEYS],
@@ -2178,6 +2208,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
             draft.workflowTasks = (Array.isArray(value) ? value : []).map(task =>
               (cached.get(task.id)?.revision ?? -1) > (task.revision ?? -1) ? cached.get(task.id) : task);
           },
+          setHistoryTask: (draft, value) => { draft.historyTask = value; },
+          refreshHistoryTask: (draft, value) => {
+            if (value?.id === draft.historyTask?.id && value.revision >= draft.historyTask.revision) draft.historyTask = value;
+          },
           setTaskTitle: (draft, value) => { draft.taskTitle = String(value ?? ''); },
           setMappings: (draft, value) => {
             const next = Array.isArray(value) ? value : [];
@@ -3751,6 +3785,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const workflowContract = useStore((state) => state.workflowContract);
       const workflowTask = useStore((state) => state.workflowTask);
       const workflowTasks = useStore((state) => state.workflowTasks);
+      const historyTask = useStore((state) => state.historyTask);
       const taskTitle = useStore((state) => state.taskTitle);
       const mappings = useStore((state) => state.mappings);
       const objectives = useStore((state) => state.objectives);
@@ -3811,6 +3846,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           try {
             const task = await refreshHostedTask(actions, activeSessionId, workflowTask.id, null, false);
             if (disposed) return;
+            if (!task) return;
             if (['matching', 'enriching'].includes(task.state)) timer = setTimeout(poll, 2000);
             else if (step === 'match' || step === 'enrich') actions.setStep(task.stage || step);
           } catch (error) { if (!disposed) actions.setError(error.message); }
@@ -4046,8 +4082,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           throw new Error('当前会话无法提交数据清洗补全企查查任务');
         }
         const latest = workflowTaskBySession.get(String(activeSessionId)) ?? cachedTask;
+        if (!taskBelongsToSession(latest, activeSessionId)) throw new Error('此任务不属于当前会话。');
         const prepared = await api('/data-cleaning/api/g5/commands', {
           ...payload, workflowOwned: true, expectedRevision: latest.revision,
+          originSessionId: activeSessionId, originWorkspaceId: latest.originWorkspaceId,
           ...(payload.kind === 'enrich' ? {} : { confirmPaidCalls: true }),
         });
         const command = prepared?.command;
@@ -4200,28 +4238,12 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       };
 
       const resumeWorkflowTask = async (task) => {
+        // History selection has its own state; never hydrate the current task runtime.
+        actions.setHistoryTask(task);
         try {
-          workflowTaskBySession.set(String(activeSessionId), task);
-          task = await refreshHostedTask(actions, activeSessionId, task.id);
-          if (task.qccRunId) {
-            try {
-              const response = await api(`/data-cleaning/api/g5/run/${encodeURIComponent(task.qccRunId)}`);
-              actions.setQccRun(response);
-            } catch { /* Expired run data does not prevent persisted artifact downloads. */ }
-          }
+          const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(task.id)}`);
+          actions.refreshHistoryTask(response.task);
         } catch (error) { actions.setError(error.message); return; }
-        workflowTaskBySession.set(String(activeSessionId || 'unassigned'), task);
-        actions.setWorkflowTask(task);
-        actions.setTaskTitle(task.title);
-        actions.setMappings(task.mappings || []);
-        actions.setObjectives(task.objectives || []);
-        actions.setFieldSelection(task.fieldSelection || []);
-        for (const [key, value] of Object.entries(task.matchRules || {})) actions.setMatchRule(key, value);
-        actions.setStep(task.stage || 'upload');
-        if (!runtimeFor(task.id, false)?.rows?.length && task.source?.rowCount && !(task.artifacts || []).length) {
-          actions.setDataset(null);
-          actions.setError('已恢复任务元数据。出于隐私保护，原始企业名单未持久化；继续处理前请重新上传源文件。');
-        }
       };
 
       const startNewWorkflow = () => {
@@ -4251,6 +4273,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         const rows = exportRows();
         if (!rows?.length) throw new Error('当前页面没有可导出的明细。若任务来自历史记录，请重新上传源文件并继续处理。');
         const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}/artifacts`, 'POST', {
+          originSessionId: activeSessionId, originWorkspaceId: latest.originWorkspaceId,
           expectedRevision: latest.revision,
           headers: runtime.headers,
           rows,
@@ -4350,7 +4373,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       let pane;
       if (step === 'history') {
         pane = h('div', { className: 'dcAgentPane' },
-          h('p', { className: 'dcAgentHint' }, '查看当前 Host 的数据清洗补全任务。Host 只保存任务元数据和摘要，不保存原始企业名单。'),
+          h('p', { className: 'dcAgentHint' }, '当前 Profile 的任务历史，仅只读查看；不会改变当前会话的任务、名单、规则或执行范围。'),
           h('div', { className: 'dcAgentRow' },
             h('button', {
               type: 'button',
@@ -4365,9 +4388,29 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
               onClick: startNewWorkflow,
             }, '新建清洗任务'),
           ),
+          historyTask ? h('section', { className: 'dcAgentSection', 'aria-label': '历史任务只读详情' },
+            h('h3', null, workflowDisplayName(historyTask)),
+            h('p', { className: 'dcAgentHint' }, workflowOriginLabel(historyTask)),
+            h('p', null, `只读 · ${WORKFLOW_STATE_LABELS[historyTask.state] || '未知'} · ${historyTask.source?.rowCount ?? 0} 行`),
+            h('p', { className: 'dcAgentHint' }, `任务编号：${historyTask.id}`),
+            sessionWorkbenchController?.canOpenOrigin?.(historyTask)
+              ? h('button', { type: 'button', className: 'dcAgentButton', onClick: () => {
+                  try { sessionWorkbenchController.openOrigin(historyTask); }
+                  catch (error) { actions.setError(error.message); }
+                } }, '打开来源会话')
+              : h('p', { className: 'dcAgentHint' }, '来源会话未知、已不可用或宿主不支持打开；保留只读查看和已有文件下载。'),
+            (historyTask.artifacts || []).filter(a => a.format === 'xlsx').map(artifact =>
+              h('div', { key: artifact.id, className: 'dcAgentRow' },
+                artifact.kind !== 'report' ? h('a', { className: 'dcAgentButton', href: `/data-cleaning/api/workflow/tasks/${encodeURIComponent(historyTask.id)}/artifacts/${encodeURIComponent(artifact.id)}?preview=1`, target: '_blank', rel: 'noopener' }, '预览 / 打开') : null,
+                h('a', { className: artifact.kind === 'report' ? 'dcAgentHint' : 'dcAgentButton',
+                  href: `/data-cleaning/api/workflow/tasks/${encodeURIComponent(historyTask.id)}/artifacts/${encodeURIComponent(artifact.id)}`,
+                  download: artifact.fileName }, artifact.kind === 'report' ? '下载任务结果报告' : `下载 ${artifact.fileName}`))),
+            !historyTask.artifacts?.length ? h('p', { className: 'dcAgentHint' }, '此任务暂无已保存制品；历史查看不会重新调用企查查。') : null,
+          ) : null,
           workflowTasks.length ? h('div', { className: 'dcAgentPane', 'aria-label': '任务历史列表' },
             workflowTasks.map((task) => h('button', { key: task.id, type: 'button', className: 'dcAgentHistoryTask', onClick: () => resumeWorkflowTask(task) },
               h('h3', null, workflowDisplayName(task)),
+              h('p', { className: 'dcAgentHint' }, workflowOriginLabel(task)),
               h('div', { className: 'dcAgentRow' },
                 h('span', { className: 'dcAgentJobsPill', 'data-state': task.state ?? 'idle' }, WORKFLOW_STATE_LABELS[task.state] ?? task.state ?? '未知'),
                 h('span', { className: 'dcAgentHint' }, `${task.source?.rowCount ?? 0} 行 · ${task.updatedAt ? new Date(task.updatedAt).toLocaleString() : ''}`),
@@ -4966,6 +5009,27 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         : null;
       const disconnectFixture = typeof ctx.inject !== 'function' ? connectProvider(ctx.betterSidebar) : () => {};
       const controller = {
+        originFor(sessionId) {
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          const workspaces = typeof ctx.get === 'function' ? ctx.get('workspaces') : ctx.workspaces;
+          const summary = sessions?.list?.getSnapshot?.()?.byId?.[sessionId];
+          const workspace = workspaces?.list?.getSnapshot?.()?.items?.find(item => item.sessionIds?.includes(sessionId));
+          return { originSessionId: sessionId, originWorkspaceId: workspace?.workspaceId || summary?.workspaceId || null,
+            originSessionName: summary?.title || null, originWorkspaceName: workspace?.name || workspace?.title || null };
+        },
+        canOpenOrigin(task) {
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          if (!task?.originSessionId || !ownedSessionId(task.originSessionId) || typeof sessions?.open !== 'function') return false;
+          const summary = sessions.list?.getSnapshot?.()?.byId?.[task.originSessionId];
+          const scope = controller.originFor(task.originSessionId);
+          return Boolean(summary && (!task.originWorkspaceId || scope.originWorkspaceId === task.originWorkspaceId));
+        },
+        openOrigin(task) {
+          if (!controller.canOpenOrigin(task)) throw new Error('来源会话不可用；请继续只读查看。');
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          sessions.open(task.originSessionId);
+          // Navigation only: no task binding, command preparation, or draft writes.
+        },
         storeFor: instanceFor,
         actionsFor: sessionId => instanceFor(sessionId).actions,
         open(sessionId, step) {
@@ -5168,6 +5232,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       ensureWorkflowTask,
       ensureEditableWorkflowTask,
       queueWorkflowOperation,
+      taskBelongsToSession,
+      workflowOriginLabel,
+      cacheWorkflowTask,
+      refreshHostedTask,
     };
     return module.exports;
   },

package/lib/image-workflow.js

@@ -23,6 +23,7 @@ export function createImageWorkflow({ getWorkflow, execution, commands }) {
       summary: { total: rows.length, valid: rows.length, missingAnchor: 0,
         duplicates: rows.length - new Set(result.entries).size } });
     const payload = await execution.prepare({ taskId: task.id, expectedRevision: task.revision,
+      originSessionId: task.originSessionId, originWorkspaceId: task.originWorkspaceId,
       kind: 'enrich', rows, headers: ['主体标识'], nameField: '主体标识' });
     const command = commands.prepare(payload, { artifactOrigin: record.workflow.artifactOrigin });
     record.qccCommand = { commandId: command.commandId, taskId: task.id };

package/lib/qcc-safety.js

@@ -78,6 +78,7 @@ export function safeAuditEvent(event) {
     upstreamCode: source.upstreamCode ? String(source.upstreamCode) : null,
     durationMs: Math.max(0, Number(source.durationMs ?? 0)),
   };
+  if (['success-data', 'success-empty', 'not-required', 'no-permission', 'failed', 'unknown'].includes(source.providerState)) safe.providerState = source.providerState;
   if (source.catalogVersion || Array.isArray(source.missing) || Array.isArray(source.unknown)) {
     safe.catalogVersion = source.catalogVersion ? String(source.catalogVersion).slice(0, 64) : null;
     safe.missing = safeCatalogLabels(source.missing);

package/lib/qcc.js

@@ -281,12 +281,26 @@ function normalizedFailure(result, toolName, state) {
 
 function emitAudit(options, event) {
   try {
-    options?.onAudit?.(safeAuditEvent(event));
+    options?.onAudit?.(safeAuditEvent({ ...event, providerState: event.providerState ?? providerResultState({
+      error: event.outcome === 'failed' || event.outcome === 'not-dispatched' ? { code: event.code, upstreamCode: event.upstreamCode } : null,
+    }) }));
   } catch {
     // 审计 sink 失败不能改变计费工具调用的业务结果。
   }
 }
 
+/** Provider outcome is separate from execution completion and business review. */
+export function providerResultState({ data, error, required = true } = {}) {
+  if (!required) return 'not-required';
+  if (error) return ['401', '403', 'QCC_AUTH_REQUIRED'].includes(String(error.upstreamCode || error.code)) ? 'no-permission' : 'failed';
+  if (Array.isArray(data)) return data.length ? 'success-data' : 'success-empty';
+  if (!data || typeof data !== 'object' || !Object.keys(data).length) return 'unknown';
+  const lists = ['实际控制人信息', '受益所有人信息', 'items', 'records', '企业列表'].map(k => data[k]).filter(Array.isArray);
+  if (lists.length && lists.every(v => !v.length)) return data.has_more === true ? 'unknown' : 'success-empty';
+  // No fabricated zero count for a missing/null/unrecognised transport payload.
+  return 'success-data';
+}
+
 function candidateView(candidate) {
   const item = isRecord(candidate) ? candidate : {};
   return {
@@ -835,15 +849,17 @@ export class QccHostBridge {
           } : {}),
         });
         if (result?.isError !== true) {
+          const data = decodeQccToolValue(result?.value);
           emitAudit(options, {
             toolName: activeToolName,
             callId,
             attempt,
             outcome: 'success',
+            providerState: providerResultState({ data }),
             durationMs: Date.now() - attemptStarted,
           });
           attemptAudited = true;
-          return { callId, toolName: activeToolName, data: decodeQccToolValue(result?.value) };
+          return { callId, toolName: activeToolName, data };
         }
         const upstreamCode = upstreamFailureCode(result);
         if (upstreamCode === 'UNKNOWN_TOOL' && attempt === 1 && !state.signal.aborted) {

package/lib/web.js

@@ -424,6 +424,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         const payload = JSON.parse((await readBody(req)).toString('utf8'));
         const record = imageIntake.require(decodeURIComponent(rest[0]));
         const task = await (await getWorkflow()).require(payload.taskId);
+        await (await getWorkflow()).assertRequestOrigin(task.id, payload);
         if (payload.executeOnSend !== true || record.state !== 'prepared' || task.state !== 'draft'
           || task.revision !== payload.expectedRevision || task.source?.type !== 'image'
           || task.source.fileName !== record.fileName || !task.fieldSelection.length) {
@@ -516,6 +517,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (req.method === 'PATCH') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           return writeJson(res, 200, {
             ok: true,
             marker: 'data-cleaning-workflow-v2',
@@ -545,6 +547,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (rest.length === 2 && req.method === 'POST') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           if (Number(payload.expectedRevision) !== current.revision) {
             throw new WorkflowError('DC_WORKFLOW_REVISION_CONFLICT', 'Workflow task was updated by another session.', 409);
           }
@@ -612,6 +615,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
       const body = await readBody(req);
       const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
       const action = rest[2];
+      await workflow.assertRequestOrigin(taskId, payload);
       const actions = {
         upload: () => workflow.recordUpload(taskId, payload),
         rules: () => workflow.confirmRules(taskId, payload),

package/lib/workflow-contract.js

@@ -215,5 +215,17 @@ export function assertWorkflowRecordShape(record) {
   if (!STAGE_IDS.has(record.stage) || !STATE_IDS.has(record.state)) {
     throw new WorkflowContractError('DC_WORKFLOW_SCHEMA', 'Workflow record contains an invalid stage or state.');
   }
-  return record;
+  // Additive v2 migration: never infer ownership from whichever Session reads history.
+  return { ...record, ...normalizeWorkflowOrigin(record) };
+}
+
+export function normalizeWorkflowOrigin(value = {}) {
+  const id = value => typeof value === 'string' && /^[\w:.-]{1,200}$/.test(value) ? value : null;
+  const label = value => typeof value === 'string' ? value.replace(/[\u0000-\u001f\u007f]/g, '').trim().slice(0, 120) || null : null;
+  return {
+    originSessionId: id(value.originSessionId),
+    originWorkspaceId: id(value.originWorkspaceId),
+    originSessionName: label(value.originSessionName),
+    originWorkspaceName: label(value.originWorkspaceName),
+  };
 }

package/lib/workflow-execution.js

@@ -10,7 +10,7 @@ export function createWorkflowExecution({ getWorkflow, artifacts }) {
   return {
     async prepare(payload) {
       const store = await requireStore();
-      const task = await store.require(payload.taskId);
+      const task = await store.assertRequestOrigin(payload.taskId, payload);
       if (!['rules_confirmed', 'diagnosed', 'review_required', 'partial'].includes(task.state)) {
         throw new WorkflowError('DC_EXECUTION_STATE', '请先在工作台确认规则；进行中或已完成任务不能重复启动。', 409);
       }

package/lib/workflow.js

@@ -12,6 +12,7 @@ import {
   assertWorkflowTransition,
   normalizeFieldSelection,
   normalizeWorkflowDraft,
+  normalizeWorkflowOrigin,
   validateMappings,
 } from './workflow-contract.js';
 
@@ -140,6 +141,7 @@ export class DataCleaningWorkflowStore {
     const id = this.idFactory();
     const record = {
       id,
+      ...normalizeWorkflowOrigin(input),
       schemaVersion: WORKFLOW_SCHEMA_VERSION,
       revision: 1,
       title: draft.title,
@@ -180,6 +182,16 @@ export class DataCleaningWorkflowStore {
     return record;
   }
 
+  async assertRequestOrigin(id, input = {}) {
+    const task = await this.require(id);
+    // Origin-less legacy/headless records remain readable; UI never adopts them.
+    if (task.originSessionId && (input.originSessionId !== task.originSessionId
+      || (task.originWorkspaceId && input.originWorkspaceId !== task.originWorkspaceId))) {
+      throw new WorkflowError('DC_WORKFLOW_SCOPE', '任务不属于此来源会话；历史任务仅可只读查看。', 409);
+    }
+    return task;
+  }
+
   async mutate(id, expectedRevision, updater) {
     const key = String(id);
     const current = await this.require(key);
@@ -197,6 +209,7 @@ export class DataCleaningWorkflowStore {
         ...latest,
         ...patch,
         id: latest.id,
+        ...normalizeWorkflowOrigin(latest),
         schemaVersion: WORKFLOW_SCHEMA_VERSION,
         revision: latest.revision + 1,
         updatedAt: this.nowFn(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-data-cleaning-agent",
-  "version": "0.9.7",
+  "version": "0.9.8",
   "description": "Data cleaning and data enrichment for CSV/XLSX/JSON enterprise lists in DeepSeek Harness, including spreadsheet cleaning, deduplication, profiling, optional Qichacha MCP and exports.",
   "type": "module",
   "main": "lib/index.js",
@@ -20,6 +20,7 @@
     "install.sh",
     "marketing",
     "docs/USER-GUIDE.md",
+    "docs/RELEASE-0.9.8.md",
     "docs/FIRST-CONTRIBUTION.md",
     "docs/COMPATIBILITY.md",
     "docs/UI-V1.5.0-ADOPTION.md",