dsh-data-cleaning-agent 0.9.7 → 0.9.9

package/CHANGELOG.md

@@ -4,6 +4,18 @@
 
 ## [Unreleased]
 
+## [0.9.9] - 2026-09-13
+
+- 原生首页标题桥接适配新版 Host 的 composer sibling slot；菜单进入数据清洗补全后稳定显示“数据清洗补全智能体”，不再回退为“探索未至之境”。
+- 保持桥接可逆并补充第三方插件共存回归，避免误改其它业务智能体的标题、提示区或输入框。
+
+## [0.9.8] - 2026-09-13
+
+- DC-SCOPE-P0：持久保存任务来源 Session/Workspace 与安全展示名称；v2 旧记录采用附加字段兼容读取，不猜测来源、不批量改写历史。
+- Profile 历史改为独立只读详情；打开来源会话按宿主能力降级，不覆盖当前任务、规则、名单或命令。保留客户 XLSX 与次要任务报告分层。
+- 当前绑定恢复、迟到刷新及 HTTP 写入/命令准备校验来源；跨会话请求拒绝，版本冲突仍由 Host revision 控制。
+- 审计增加 Provider 六类状态区分；完成态迟到更新、A/B、旧记录、重启和来源导航补充回归。真实 DSH Web 未认证，真实宿主与 Provider 未验证。
+
 ## [0.9.7] - 2026-09-11
 
 - 优化数据清洗补全工作台的区域间距、信息层级与明暗主题响应式布局，重构导入清单、字段映射、质量体检和主体匹配页面。

package/README.en.md

@@ -10,7 +10,9 @@ Related agents: [数据清洗补全](https://github.com/duhu2000/dsh-data-cleani
 
 > A data cleaning & completion agent plugin for DeepSeek Harness: local CSV/XLSX/JSON engine plus optional Qichacha (QCC) MCP enterprise-data enrichment. Initiated and maintained by the Qichacha (QCC) team.
 >
-> Current source version / 当前源码版本: **0.9.7** (stable release)
+> Current source version / 当前源码版本: **0.9.9** (stable release)
+
+0.9.9 restores the “数据清洗补全智能体” native home title when newer Host builds place the plugin marker and Hero headline in sibling composer branches. The bridge remains reversible and isolated from other business plugins. The 0.9.8 read-only Profile history and origin Workspace/Session guarantees remain unchanged. Rollback: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.8`. Live DSH A/B verification remains a post-install user check.
 
 This release refines workbench hierarchy, spacing, and responsive behavior across imported lists, field mapping, quality profiling, and entity matching. File, image, and pasted-data inputs collapse after a successful import and return through the explicit reimport action. Field mapping uses grouped choices, and searching a dimension exposes all fields in that group. Preparing a draft does not query QCC; sending starts execution. Fully restart DSH after upgrading. Existing download artifacts are not rewritten.
 

package/README.md

@@ -9,7 +9,7 @@
 数据清洗补全智能体：面向 Excel/CSV/JSON 企业名单，提供数据清洗、表格清洗、清洗补全、去重、企业数据补全与字段补全，支持企查查 MCP 和结果导出。
 
 ```sh
-dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7
+dsh plugin --profile web add dsh-data-cleaning-agent@0.9.9
 ```
 
 请先满足下文的 DSH、连接器及侧边栏依赖要求；安装后完整停止并重启对应 Profile。
@@ -27,7 +27,9 @@ dsh plugin --profile web add dsh-data-cleaning-agent@0.9.7
 
 > 在 DeepSeek Harness 中清洗、补全、画像企业名单数据的智能体插件：本地 CSV/XLSX/JSON 引擎 + 可选企查查（Qichacha/QCC）MCP 企业数据补全，由企查查（Qichacha/QCC）团队发起并维护。
 >
-> 当前源码版本 / Current source version: **0.9.7**（正式版本）
+> 当前源码版本 / Current source version: **0.9.9**（正式版本）
+
+0.9.9 修复新版 Host composer sibling slot 下的原生首页标题定位，进入数据清洗补全后稳定显示“数据清洗补全智能体”，并保持对其它业务插件的标题隔离。0.9.8 的 Profile 历史只读、来源工作区/会话校验与旧记录边界全部保留。回滚：`dsh plugin --profile web add dsh-data-cleaning-agent@0.9.8`。真实 DSH A/B 验收仍以安装后的用户验证为准，详见发布说明。
 
 本版优化工作台的信息层级、区域间距与响应式布局，重构导入清单、字段映射、质量体检及主体匹配页面。导入成功后文件、图片与粘贴入口自动收起，通过“重新导入”再次展开；映射字段按维度分组选择，搜索维度名称时展示该组全部字段。生成说明不查询，发送才执行；升级后需完整重启 DSH，历史下载文件不自动改写。
 

package/docs/RELEASE-0.9.9.md

@@ -0,0 +1,24 @@
+# 0.9.9 · Native home title compatibility
+
+Status: stable release. Date: 2026-09-13.
+
+## Scope
+
+- Adapt the reversible native Hero title bridge to Host layouts where the plugin marker and headline live in sibling branches below the composer container.
+- Keep the data-cleaning home title fixed at “数据清洗补全智能体” without modifying another business plugin's headline, prompt UI or input focus.
+- Preserve the 0.9.8 Profile history ownership, origin Workspace/Session checks and artifact-download behavior.
+
+## Verification
+
+- The coexistence fixture now exercises a sibling-slot Host structure rather than the obsolete nested Hero structure.
+- `npm run check` covers syntax, documentation version consistency, marketing metadata, package allowlist and the full Node test suite.
+- The React/Chromium layout matrix remains a separate isolated UI gate; real DSH and production QCC Provider behavior require post-install acceptance.
+
+## Install and rollback
+
+```sh
+dsh plugin --profile web add dsh-data-cleaning-agent@0.9.9
+```
+
+Rollback package: `dsh plugin --profile web add dsh-data-cleaning-agent@0.9.8`.
+Do not move or overwrite existing tags or npm versions.

package/lib/client.js

@@ -1941,8 +1941,20 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const time = date && Number.isFinite(date.getTime()) ? date.toLocaleString() : '';
       return `${base}｜${task.source?.type === 'image' && task.state === 'draft' ? '待识别' : `${task.source?.rowCount ?? 0} 条`}${time ? '｜' + time : ''}`;
     }
+    function taskBelongsToSession(task, sessionId) {
+      if (!sessionId || task?.originSessionId !== sessionId) return false;
+      const scope = sessionWorkbenchController?.originFor?.(sessionId);
+      return !scope?.originWorkspaceId || task.originWorkspaceId === scope.originWorkspaceId;
+    }
+    function workflowOriginLabel(task) {
+      if (!task?.originSessionId) return '历史版本未保存来源';
+      return `工作区：${task.originWorkspaceName || task.originWorkspaceId || '未取得来源工作区'} · 会话：${task.originSessionName || task.originSessionId}`;
+    }
     function cacheWorkflowTask(actions, sessionId, task) {
       if (!task) return null;
+      if (!taskBelongsToSession(task, sessionId)) throw new Error('此任务不属于当前会话；请在任务历史中只读查看或打开来源会话。');
+      const previous = workflowTaskBySession.get(String(sessionId));
+      if (previous?.id === task.id && previous.revision > task.revision) return previous;
       if (sessionId) workflowTaskBySession.set(String(sessionId), task);
       bindTask(sessionId, task.id);
       actions.setWorkflowTask(task);
@@ -1955,10 +1967,13 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     }
 
     async function createWorkflowTask(actions, sessionId, draft = {}) {
+      if (!sessionId) throw new Error('请先打开数据清洗会话。');
       const key = String(sessionId || 'unassigned');
       let pending = workflowTaskCreationBySession.get(key);
       if (!pending) {
         pending = requestJson('/data-cleaning/api/workflow/tasks', 'POST', {
+          ...sessionWorkbenchController?.originFor?.(sessionId),
+          originSessionId: sessionId,
           title: draft.title || '企业数据清洗补全任务',
           objectives: draft.objectives || DEFAULT_CLEANING_KEYS,
           fieldSelection: draft.fieldSelection || DEFAULT_ENRICHMENT_KEYS,
@@ -1984,9 +1999,12 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const saved = readTaskBindings()[key];
       if (ownedSessionId(key) && /^dcw-[a-zA-Z0-9-]+$/.test(saved || '')) {
         const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(saved)}`);
-        const task = cacheWorkflowTask(actions, sessionId, response.task);
-        if (restoreStage) actions.setStep(task.stage || 'upload');
-        return task;
+        if (taskBelongsToSession(response.task, sessionId)) {
+          const task = cacheWorkflowTask(actions, sessionId, response.task);
+          if (restoreStage) actions.setStep(task.stage || 'upload');
+          return task;
+        }
+        bindTask(sessionId, null);
       }
       return createWorkflowTask(actions, sessionId, draft);
     }
@@ -2000,6 +2018,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function ensureEditableWorkflowTask(actions, sessionId, draft = {}, preferredTask) {
       const key = String(sessionId || 'unassigned');
       const current = workflowTaskBySession.get(key) ?? preferredTask ?? null;
+      if (current && !taskBelongsToSession(current, sessionId)) throw new Error('不能将历史任务绑定到当前会话。请新建清洗任务。');
       if (!current) return createWorkflowTask(actions, sessionId, draft);
       if (EDITABLE_WORKFLOW_STATES.has(current.state)) return cacheWorkflowTask(actions, sessionId, current);
       workflowTaskBySession.delete(key);
@@ -2023,8 +2042,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function updateWorkflowTask(actions, sessionId, task, input) {
       const latest = workflowTaskBySession.get(String(sessionId || 'unassigned')) ?? task;
       if (!latest) return ensureWorkflowTask(actions, sessionId, input);
+      if (!taskBelongsToSession(latest, sessionId)) throw new Error('此任务不属于当前会话。');
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}`, 'PATCH', {
         ...input,
+        originSessionId: sessionId, originWorkspaceId: latest.originWorkspaceId,
         expectedRevision: latest.revision,
       });
       return cacheWorkflowTask(actions, sessionId, response.task);
@@ -2033,8 +2054,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
     async function workflowAction(actions, sessionId, task, action, input = {}) {
       const latest = workflowTaskBySession.get(String(sessionId || 'unassigned')) ?? task;
       if (!latest) throw new Error('请先创建数据清洗补全任务。');
+      if (!taskBelongsToSession(latest, sessionId)) throw new Error('此任务不属于当前会话。');
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}/actions/${action}`, 'POST', {
         ...input,
+        originSessionId: sessionId, originWorkspaceId: latest.originWorkspaceId,
         expectedRevision: latest.revision,
       });
       return cacheWorkflowTask(actions, sessionId, response.task);
@@ -2048,6 +2071,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         if (JSON.stringify([...(task.fieldSelection || [])].sort()) !== JSON.stringify([...(expected.enrichmentKeys || [])].sort())) throw new Error('图片任务字段配置尚未保存，请重试。');
         const bound = await requestJson(`/data-cleaning/api/images/commands/${encodeURIComponent(expected.imageCommandId)}`, 'PATCH', {
           taskId: task.id, expectedRevision: task.revision, executeOnSend: true,
+          originSessionId: sessionId, originWorkspaceId: task.originWorkspaceId,
         });
         return { ...bound.command, prompt: buildTaskPrompt(expected) };
       }
@@ -2071,6 +2095,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       });
       const response = await requestJson('/data-cleaning/api/g5/commands', 'POST', {
         kind: 'enrich', workflowOwned: true, expectedRevision: task.revision, taskId: task.id,
+        originSessionId: sessionId, originWorkspaceId: task.originWorkspaceId,
         rows: runtime.rows, headers: runtime.headers, fieldSelection: task.fieldSelection,
       });
       if (!response.command?.commandId || !response.command?.prompt) throw new Error('Host 未返回执行凭证；未发送任务。');
@@ -2079,6 +2104,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
 
     async function refreshHostedTask(actions, sessionId, taskId, run, navigate = true) {
       const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(taskId)}`);
+      if (!taskBelongsToSession(response.task, sessionId)) {
+        if (readTaskBindings()[sessionId] === taskId) bindTask(sessionId, null);
+        return null;
+      }
       const selectedTask = workflowTaskBySession.get(String(sessionId));
       if (selectedTask && selectedTask.id !== taskId) return response.task;
       if (selectedTask && selectedTask.revision > response.task.revision) return selectedTask;
@@ -2136,6 +2165,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           workflowContract: null,
           workflowTask: null,
           workflowTasks: [],
+          historyTask: null,
           taskTitle: '企业数据清洗补全任务',
           mappings: [],
           objectives: [...DEFAULT_CLEANING_KEYS],
@@ -2178,6 +2208,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
             draft.workflowTasks = (Array.isArray(value) ? value : []).map(task =>
               (cached.get(task.id)?.revision ?? -1) > (task.revision ?? -1) ? cached.get(task.id) : task);
           },
+          setHistoryTask: (draft, value) => { draft.historyTask = value; },
+          refreshHistoryTask: (draft, value) => {
+            if (value?.id === draft.historyTask?.id && value.revision >= draft.historyTask.revision) draft.historyTask = value;
+          },
           setTaskTitle: (draft, value) => { draft.taskTitle = String(value ?? ''); },
           setMappings: (draft, value) => {
             const next = Array.isArray(value) ? value : [];
@@ -2684,7 +2718,22 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       if (!enabled || typeof document === 'undefined' || typeof document.querySelectorAll !== 'function') return () => {};
       const marker = [...document.querySelectorAll('.dcAgentExperience')]
         .find((element) => element?.dataset?.sessionId === sessionId);
-      const hero = marker?.closest?.('[data-phase="hero"]');
+      const hasHeadline = (scope) => {
+        if (!scope?.querySelectorAll) return false;
+        const spans = [...scope.querySelectorAll('span')];
+        return spans.some((element) => element.dataset?.dcAgentHeroTitle === 'true'
+          || ['探索未至之境', 'Into the Unknown'].includes(element.textContent?.trim()))
+          || Boolean(scope.querySelector?.('[class*="headlineText"]'));
+      };
+      // 新版 Host 会把 list slot 放在 composer seat 的独立分支；marker 不一定再是
+      // data-phase=hero 的后代。沿祖先寻找同时包含原生标题的最小范围，保留旧结构兼容。
+      let hero = marker?.closest?.('[data-phase="hero"]') ?? null;
+      if (!hasHeadline(hero)) {
+        let scope = marker?.closest?.('[data-composer-seat]') ?? marker?.parentElement ?? null;
+        while (scope && !hasHeadline(scope)) scope = scope.parentElement;
+        if (scope) hero = scope;
+      }
+      if (!hero && document.body?.querySelectorAll) hero = document.body;
       if (!hero) return () => {};
       const changedTitles = new Map();
       const changedBadges = new Map();
@@ -3751,6 +3800,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       const workflowContract = useStore((state) => state.workflowContract);
       const workflowTask = useStore((state) => state.workflowTask);
       const workflowTasks = useStore((state) => state.workflowTasks);
+      const historyTask = useStore((state) => state.historyTask);
       const taskTitle = useStore((state) => state.taskTitle);
       const mappings = useStore((state) => state.mappings);
       const objectives = useStore((state) => state.objectives);
@@ -3811,6 +3861,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           try {
             const task = await refreshHostedTask(actions, activeSessionId, workflowTask.id, null, false);
             if (disposed) return;
+            if (!task) return;
             if (['matching', 'enriching'].includes(task.state)) timer = setTimeout(poll, 2000);
             else if (step === 'match' || step === 'enrich') actions.setStep(task.stage || step);
           } catch (error) { if (!disposed) actions.setError(error.message); }
@@ -4046,8 +4097,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
           throw new Error('当前会话无法提交数据清洗补全企查查任务');
         }
         const latest = workflowTaskBySession.get(String(activeSessionId)) ?? cachedTask;
+        if (!taskBelongsToSession(latest, activeSessionId)) throw new Error('此任务不属于当前会话。');
         const prepared = await api('/data-cleaning/api/g5/commands', {
           ...payload, workflowOwned: true, expectedRevision: latest.revision,
+          originSessionId: activeSessionId, originWorkspaceId: latest.originWorkspaceId,
           ...(payload.kind === 'enrich' ? {} : { confirmPaidCalls: true }),
         });
         const command = prepared?.command;
@@ -4200,28 +4253,12 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       };
 
       const resumeWorkflowTask = async (task) => {
+        // History selection has its own state; never hydrate the current task runtime.
+        actions.setHistoryTask(task);
         try {
-          workflowTaskBySession.set(String(activeSessionId), task);
-          task = await refreshHostedTask(actions, activeSessionId, task.id);
-          if (task.qccRunId) {
-            try {
-              const response = await api(`/data-cleaning/api/g5/run/${encodeURIComponent(task.qccRunId)}`);
-              actions.setQccRun(response);
-            } catch { /* Expired run data does not prevent persisted artifact downloads. */ }
-          }
+          const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(task.id)}`);
+          actions.refreshHistoryTask(response.task);
         } catch (error) { actions.setError(error.message); return; }
-        workflowTaskBySession.set(String(activeSessionId || 'unassigned'), task);
-        actions.setWorkflowTask(task);
-        actions.setTaskTitle(task.title);
-        actions.setMappings(task.mappings || []);
-        actions.setObjectives(task.objectives || []);
-        actions.setFieldSelection(task.fieldSelection || []);
-        for (const [key, value] of Object.entries(task.matchRules || {})) actions.setMatchRule(key, value);
-        actions.setStep(task.stage || 'upload');
-        if (!runtimeFor(task.id, false)?.rows?.length && task.source?.rowCount && !(task.artifacts || []).length) {
-          actions.setDataset(null);
-          actions.setError('已恢复任务元数据。出于隐私保护，原始企业名单未持久化；继续处理前请重新上传源文件。');
-        }
       };
 
       const startNewWorkflow = () => {
@@ -4251,6 +4288,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         const rows = exportRows();
         if (!rows?.length) throw new Error('当前页面没有可导出的明细。若任务来自历史记录，请重新上传源文件并继续处理。');
         const response = await requestJson(`/data-cleaning/api/workflow/tasks/${encodeURIComponent(latest.id)}/artifacts`, 'POST', {
+          originSessionId: activeSessionId, originWorkspaceId: latest.originWorkspaceId,
           expectedRevision: latest.revision,
           headers: runtime.headers,
           rows,
@@ -4350,7 +4388,7 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       let pane;
       if (step === 'history') {
         pane = h('div', { className: 'dcAgentPane' },
-          h('p', { className: 'dcAgentHint' }, '查看当前 Host 的数据清洗补全任务。Host 只保存任务元数据和摘要，不保存原始企业名单。'),
+          h('p', { className: 'dcAgentHint' }, '当前 Profile 的任务历史，仅只读查看；不会改变当前会话的任务、名单、规则或执行范围。'),
           h('div', { className: 'dcAgentRow' },
             h('button', {
               type: 'button',
@@ -4365,9 +4403,29 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
               onClick: startNewWorkflow,
             }, '新建清洗任务'),
           ),
+          historyTask ? h('section', { className: 'dcAgentSection', 'aria-label': '历史任务只读详情' },
+            h('h3', null, workflowDisplayName(historyTask)),
+            h('p', { className: 'dcAgentHint' }, workflowOriginLabel(historyTask)),
+            h('p', null, `只读 · ${WORKFLOW_STATE_LABELS[historyTask.state] || '未知'} · ${historyTask.source?.rowCount ?? 0} 行`),
+            h('p', { className: 'dcAgentHint' }, `任务编号：${historyTask.id}`),
+            sessionWorkbenchController?.canOpenOrigin?.(historyTask)
+              ? h('button', { type: 'button', className: 'dcAgentButton', onClick: () => {
+                  try { sessionWorkbenchController.openOrigin(historyTask); }
+                  catch (error) { actions.setError(error.message); }
+                } }, '打开来源会话')
+              : h('p', { className: 'dcAgentHint' }, '来源会话未知、已不可用或宿主不支持打开；保留只读查看和已有文件下载。'),
+            (historyTask.artifacts || []).filter(a => a.format === 'xlsx').map(artifact =>
+              h('div', { key: artifact.id, className: 'dcAgentRow' },
+                artifact.kind !== 'report' ? h('a', { className: 'dcAgentButton', href: `/data-cleaning/api/workflow/tasks/${encodeURIComponent(historyTask.id)}/artifacts/${encodeURIComponent(artifact.id)}?preview=1`, target: '_blank', rel: 'noopener' }, '预览 / 打开') : null,
+                h('a', { className: artifact.kind === 'report' ? 'dcAgentHint' : 'dcAgentButton',
+                  href: `/data-cleaning/api/workflow/tasks/${encodeURIComponent(historyTask.id)}/artifacts/${encodeURIComponent(artifact.id)}`,
+                  download: artifact.fileName }, artifact.kind === 'report' ? '下载任务结果报告' : `下载 ${artifact.fileName}`))),
+            !historyTask.artifacts?.length ? h('p', { className: 'dcAgentHint' }, '此任务暂无已保存制品；历史查看不会重新调用企查查。') : null,
+          ) : null,
           workflowTasks.length ? h('div', { className: 'dcAgentPane', 'aria-label': '任务历史列表' },
             workflowTasks.map((task) => h('button', { key: task.id, type: 'button', className: 'dcAgentHistoryTask', onClick: () => resumeWorkflowTask(task) },
               h('h3', null, workflowDisplayName(task)),
+              h('p', { className: 'dcAgentHint' }, workflowOriginLabel(task)),
               h('div', { className: 'dcAgentRow' },
                 h('span', { className: 'dcAgentJobsPill', 'data-state': task.state ?? 'idle' }, WORKFLOW_STATE_LABELS[task.state] ?? task.state ?? '未知'),
                 h('span', { className: 'dcAgentHint' }, `${task.source?.rowCount ?? 0} 行 · ${task.updatedAt ? new Date(task.updatedAt).toLocaleString() : ''}`),
@@ -4966,6 +5024,27 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
         : null;
       const disconnectFixture = typeof ctx.inject !== 'function' ? connectProvider(ctx.betterSidebar) : () => {};
       const controller = {
+        originFor(sessionId) {
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          const workspaces = typeof ctx.get === 'function' ? ctx.get('workspaces') : ctx.workspaces;
+          const summary = sessions?.list?.getSnapshot?.()?.byId?.[sessionId];
+          const workspace = workspaces?.list?.getSnapshot?.()?.items?.find(item => item.sessionIds?.includes(sessionId));
+          return { originSessionId: sessionId, originWorkspaceId: workspace?.workspaceId || summary?.workspaceId || null,
+            originSessionName: summary?.title || null, originWorkspaceName: workspace?.name || workspace?.title || null };
+        },
+        canOpenOrigin(task) {
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          if (!task?.originSessionId || !ownedSessionId(task.originSessionId) || typeof sessions?.open !== 'function') return false;
+          const summary = sessions.list?.getSnapshot?.()?.byId?.[task.originSessionId];
+          const scope = controller.originFor(task.originSessionId);
+          return Boolean(summary && (!task.originWorkspaceId || scope.originWorkspaceId === task.originWorkspaceId));
+        },
+        openOrigin(task) {
+          if (!controller.canOpenOrigin(task)) throw new Error('来源会话不可用；请继续只读查看。');
+          const sessions = typeof ctx.get === 'function' ? ctx.get('sessions') : ctx.sessions;
+          sessions.open(task.originSessionId);
+          // Navigation only: no task binding, command preparation, or draft writes.
+        },
         storeFor: instanceFor,
         actionsFor: sessionId => instanceFor(sessionId).actions,
         open(sessionId, step) {
@@ -5168,6 +5247,10 @@ body:has(.dcAgentPromptBackdrop) { overflow: hidden; }
       ensureWorkflowTask,
       ensureEditableWorkflowTask,
       queueWorkflowOperation,
+      taskBelongsToSession,
+      workflowOriginLabel,
+      cacheWorkflowTask,
+      refreshHostedTask,
     };
     return module.exports;
   },

package/lib/image-workflow.js

@@ -23,6 +23,7 @@ export function createImageWorkflow({ getWorkflow, execution, commands }) {
       summary: { total: rows.length, valid: rows.length, missingAnchor: 0,
         duplicates: rows.length - new Set(result.entries).size } });
     const payload = await execution.prepare({ taskId: task.id, expectedRevision: task.revision,
+      originSessionId: task.originSessionId, originWorkspaceId: task.originWorkspaceId,
       kind: 'enrich', rows, headers: ['主体标识'], nameField: '主体标识' });
     const command = commands.prepare(payload, { artifactOrigin: record.workflow.artifactOrigin });
     record.qccCommand = { commandId: command.commandId, taskId: task.id };

package/lib/qcc-safety.js

@@ -78,6 +78,7 @@ export function safeAuditEvent(event) {
     upstreamCode: source.upstreamCode ? String(source.upstreamCode) : null,
     durationMs: Math.max(0, Number(source.durationMs ?? 0)),
   };
+  if (['success-data', 'success-empty', 'not-required', 'no-permission', 'failed', 'unknown'].includes(source.providerState)) safe.providerState = source.providerState;
   if (source.catalogVersion || Array.isArray(source.missing) || Array.isArray(source.unknown)) {
     safe.catalogVersion = source.catalogVersion ? String(source.catalogVersion).slice(0, 64) : null;
     safe.missing = safeCatalogLabels(source.missing);

package/lib/qcc.js

@@ -281,12 +281,26 @@ function normalizedFailure(result, toolName, state) {
 
 function emitAudit(options, event) {
   try {
-    options?.onAudit?.(safeAuditEvent(event));
+    options?.onAudit?.(safeAuditEvent({ ...event, providerState: event.providerState ?? providerResultState({
+      error: event.outcome === 'failed' || event.outcome === 'not-dispatched' ? { code: event.code, upstreamCode: event.upstreamCode } : null,
+    }) }));
   } catch {
     // 审计 sink 失败不能改变计费工具调用的业务结果。
   }
 }
 
+/** Provider outcome is separate from execution completion and business review. */
+export function providerResultState({ data, error, required = true } = {}) {
+  if (!required) return 'not-required';
+  if (error) return ['401', '403', 'QCC_AUTH_REQUIRED'].includes(String(error.upstreamCode || error.code)) ? 'no-permission' : 'failed';
+  if (Array.isArray(data)) return data.length ? 'success-data' : 'success-empty';
+  if (!data || typeof data !== 'object' || !Object.keys(data).length) return 'unknown';
+  const lists = ['实际控制人信息', '受益所有人信息', 'items', 'records', '企业列表'].map(k => data[k]).filter(Array.isArray);
+  if (lists.length && lists.every(v => !v.length)) return data.has_more === true ? 'unknown' : 'success-empty';
+  // No fabricated zero count for a missing/null/unrecognised transport payload.
+  return 'success-data';
+}
+
 function candidateView(candidate) {
   const item = isRecord(candidate) ? candidate : {};
   return {
@@ -835,15 +849,17 @@ export class QccHostBridge {
           } : {}),
         });
         if (result?.isError !== true) {
+          const data = decodeQccToolValue(result?.value);
           emitAudit(options, {
             toolName: activeToolName,
             callId,
             attempt,
             outcome: 'success',
+            providerState: providerResultState({ data }),
             durationMs: Date.now() - attemptStarted,
           });
           attemptAudited = true;
-          return { callId, toolName: activeToolName, data: decodeQccToolValue(result?.value) };
+          return { callId, toolName: activeToolName, data };
         }
         const upstreamCode = upstreamFailureCode(result);
         if (upstreamCode === 'UNKNOWN_TOOL' && attempt === 1 && !state.signal.aborted) {

package/lib/web.js

@@ -424,6 +424,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         const payload = JSON.parse((await readBody(req)).toString('utf8'));
         const record = imageIntake.require(decodeURIComponent(rest[0]));
         const task = await (await getWorkflow()).require(payload.taskId);
+        await (await getWorkflow()).assertRequestOrigin(task.id, payload);
         if (payload.executeOnSend !== true || record.state !== 'prepared' || task.state !== 'draft'
           || task.revision !== payload.expectedRevision || task.source?.type !== 'image'
           || task.source.fileName !== record.fileName || !task.fieldSelection.length) {
@@ -516,6 +517,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (req.method === 'PATCH') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           return writeJson(res, 200, {
             ok: true,
             marker: 'data-cleaning-workflow-v2',
@@ -545,6 +547,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
         if (rest.length === 2 && req.method === 'POST') {
           const body = await readBody(req);
           const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
+          await workflow.assertRequestOrigin(taskId, payload);
           if (Number(payload.expectedRevision) !== current.revision) {
             throw new WorkflowError('DC_WORKFLOW_REVISION_CONFLICT', 'Workflow task was updated by another session.', 409);
           }
@@ -612,6 +615,7 @@ export function mountWebRoutes(wctx, { logger, report, TOOL_NAME, SKILL_NAME })
       const body = await readBody(req);
       const payload = body.length ? JSON.parse(body.toString('utf8')) : {};
       const action = rest[2];
+      await workflow.assertRequestOrigin(taskId, payload);
       const actions = {
         upload: () => workflow.recordUpload(taskId, payload),
         rules: () => workflow.confirmRules(taskId, payload),

package/lib/workflow-contract.js

@@ -215,5 +215,17 @@ export function assertWorkflowRecordShape(record) {
   if (!STAGE_IDS.has(record.stage) || !STATE_IDS.has(record.state)) {
     throw new WorkflowContractError('DC_WORKFLOW_SCHEMA', 'Workflow record contains an invalid stage or state.');
   }
-  return record;
+  // Additive v2 migration: never infer ownership from whichever Session reads history.
+  return { ...record, ...normalizeWorkflowOrigin(record) };
+}
+
+export function normalizeWorkflowOrigin(value = {}) {
+  const id = value => typeof value === 'string' && /^[\w:.-]{1,200}$/.test(value) ? value : null;
+  const label = value => typeof value === 'string' ? value.replace(/[\u0000-\u001f\u007f]/g, '').trim().slice(0, 120) || null : null;
+  return {
+    originSessionId: id(value.originSessionId),
+    originWorkspaceId: id(value.originWorkspaceId),
+    originSessionName: label(value.originSessionName),
+    originWorkspaceName: label(value.originWorkspaceName),
+  };
 }

package/lib/workflow-execution.js

@@ -10,7 +10,7 @@ export function createWorkflowExecution({ getWorkflow, artifacts }) {
   return {
     async prepare(payload) {
       const store = await requireStore();
-      const task = await store.require(payload.taskId);
+      const task = await store.assertRequestOrigin(payload.taskId, payload);
       if (!['rules_confirmed', 'diagnosed', 'review_required', 'partial'].includes(task.state)) {
         throw new WorkflowError('DC_EXECUTION_STATE', '请先在工作台确认规则；进行中或已完成任务不能重复启动。', 409);
       }

package/lib/workflow.js

@@ -12,6 +12,7 @@ import {
   assertWorkflowTransition,
   normalizeFieldSelection,
   normalizeWorkflowDraft,
+  normalizeWorkflowOrigin,
   validateMappings,
 } from './workflow-contract.js';
 
@@ -140,6 +141,7 @@ export class DataCleaningWorkflowStore {
     const id = this.idFactory();
     const record = {
       id,
+      ...normalizeWorkflowOrigin(input),
       schemaVersion: WORKFLOW_SCHEMA_VERSION,
       revision: 1,
       title: draft.title,
@@ -180,6 +182,16 @@ export class DataCleaningWorkflowStore {
     return record;
   }
 
+  async assertRequestOrigin(id, input = {}) {
+    const task = await this.require(id);
+    // Origin-less legacy/headless records remain readable; UI never adopts them.
+    if (task.originSessionId && (input.originSessionId !== task.originSessionId
+      || (task.originWorkspaceId && input.originWorkspaceId !== task.originWorkspaceId))) {
+      throw new WorkflowError('DC_WORKFLOW_SCOPE', '任务不属于此来源会话；历史任务仅可只读查看。', 409);
+    }
+    return task;
+  }
+
   async mutate(id, expectedRevision, updater) {
     const key = String(id);
     const current = await this.require(key);
@@ -197,6 +209,7 @@ export class DataCleaningWorkflowStore {
         ...latest,
         ...patch,
         id: latest.id,
+        ...normalizeWorkflowOrigin(latest),
         schemaVersion: WORKFLOW_SCHEMA_VERSION,
         revision: latest.revision + 1,
         updatedAt: this.nowFn(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-data-cleaning-agent",
-  "version": "0.9.7",
+  "version": "0.9.9",
   "description": "Data cleaning and data enrichment for CSV/XLSX/JSON enterprise lists in DeepSeek Harness, including spreadsheet cleaning, deduplication, profiling, optional Qichacha MCP and exports.",
   "type": "module",
   "main": "lib/index.js",
@@ -20,6 +20,7 @@
     "install.sh",
     "marketing",
     "docs/USER-GUIDE.md",
+    "docs/RELEASE-0.9.9.md",
     "docs/FIRST-CONTRIBUTION.md",
     "docs/COMPATIBILITY.md",
     "docs/UI-V1.5.0-ADOPTION.md",