dsh-tender-workbench 0.5.7 → 0.5.8

package/lib/index.js

@@ -1,11 +1,12 @@
 import { createRequire } from "node:module";
-import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
+import { createHash, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import { z } from "zod";
 import { mkdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
 import { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import ExcelJS from "exceljs";
 import PDFDocument from "pdfkit";
+import { fileURLToPath } from "node:url";
 //#region src/contracts/dataset.ts
 const TENDER_DATA_SOURCES = ["tender", "proposed"];
 const OPPORTUNITY_LIFECYCLES = [
@@ -217,6 +218,66 @@ const QccProposedSearchArgsSchema = z.object({
 function hasSupportedQueryFilter(value) {
 	return Object.keys(value).some((key) => key !== "smartSort");
 }
+const ProviderOutcomeSchema = z.enum([
+	"data",
+	"zero",
+	"not-needed",
+	"no-permission",
+	"failed",
+	"unknown"
+]);
+const count = z.number().int().nonnegative();
+const TenderExecutionSchema = z.object({
+	operationId: z.string().min(1).max(128),
+	status: z.enum([
+		"running",
+		"succeeded",
+		"partial",
+		"failed",
+		"interrupted"
+	]),
+	currentAction: z.string().min(1).max(200),
+	startedAt: count,
+	updatedAt: count,
+	finishedAt: count.optional(),
+	counts: z.object({
+		queried: count,
+		succeeded: count,
+		zero: count,
+		failed: count,
+		noPermission: count,
+		unknown: count,
+		needsReview: count
+	}).strict(),
+	recentItem: z.string().max(200).optional(),
+	queryTarget: z.string().max(2048).optional(),
+	providers: z.object({
+		tender: ProviderOutcomeSchema,
+		proposed: ProviderOutcomeSchema
+	}).strict()
+}).strict();
+function emptyExecution(operationId, currentAction, time) {
+	return {
+		operationId,
+		currentAction,
+		status: "running",
+		startedAt: time,
+		updatedAt: time,
+		counts: {
+			queried: 0,
+			succeeded: 0,
+			zero: 0,
+			failed: 0,
+			noPermission: 0,
+			unknown: 0,
+			needsReview: 0
+		},
+		providers: {
+			tender: "not-needed",
+			proposed: "not-needed"
+		}
+	};
+}
 //#endregion
 //#region src/contracts/orchestration.ts
 const TENDER_SKILL_CONTRACT_MARKER = "dsh-tender-workbench/workflow-v2";
@@ -554,6 +615,7 @@ const TenderWorkflowProjectionV2Schema = z.object({
 	revision: z.number().int().nonnegative(),
 	currentStage: z.enum(WORKFLOW_STAGES),
 	observedTurn: z.number().int().positive().optional(),
+	execution: TenderExecutionSchema.optional(),
 	pendingIntent: z.object({
 		intentId: idText$5,
 		kind: z.enum(TENDER_INTENT_KINDS),
@@ -593,12 +655,14 @@ const TenderWorkflowProjectionV2Schema = z.object({
 			tender: z.object({
 				status: z.enum(["succeeded", "failed"]),
 				loaded: z.number().int().nonnegative(),
+				outcome: ProviderOutcomeSchema.optional(),
 				errorMessage: errorText.optional(),
 				sourceData: ArtifactRefV1Schema.optional()
 			}).strict().optional(),
 			proposed: z.object({
 				status: z.enum(["succeeded", "failed"]),
 				loaded: z.number().int().nonnegative(),
+				outcome: ProviderOutcomeSchema.optional(),
 				errorMessage: errorText.optional(),
 				sourceData: ArtifactRefV1Schema.optional()
 			}).strict().optional()
@@ -1407,6 +1471,23 @@ function isLoopbackHost(value) {
 		return false;
 	}
 }
+/** Profile metadata is same-origin read-only; no artifact capability is returned. */
+function historyRequestIdentity(request) {
+	if (!isLoopbackAddress(request.socket.remoteAddress)) return void 0;
+	const hosts = rawHeaderValues(request, "host"), sessions = rawHeaderValues(request, "x-dsh-tender-session");
+	const origins = rawHeaderValues(request, "origin"), sites = rawHeaderValues(request, "sec-fetch-site");
+	if (hosts.length !== 1 || sessions.length !== 1 || origins.length > 1 || sites.length > 1) return void 0;
+	if (!isLoopbackHost(hosts[0]) || !sessions[0] || sessions[0].length > 128) return void 0;
+	if (sites[0] !== void 0 && sites[0] !== "same-origin") return void 0;
+	if (origins[0] !== void 0) try {
+		const origin = new URL(origins[0]);
+		if (origin.protocol !== "http:" || origin.host !== hosts[0]) return void 0;
+	} catch {
+		return;
+	}
+	else if (sites[0] !== "same-origin") return void 0;
+	return sessions[0];
+}
 function artifactRequestIdentity(request) {
 	if (!isLoopbackAddress(request.socket.remoteAddress)) return void 0;
 	const hosts = rawHeaderValues(request, "host");
@@ -3627,7 +3708,7 @@ function pendingFromConversation(state, tool, intentId) {
 		bindingFingerprint: `conversation_${intentId}`.slice(0, 128)
 	};
 }
-function applyTenderProjection(state, event) {
+function applyWorkflowFacts(state, event) {
 	if (event.type === "turn/start") return {
 		...state ?? createEmptyTenderWorkflowProjection(),
 		observedTurn: event.data.turn
@@ -3737,9 +3818,61 @@ function applyTenderProjection(state, event) {
 	}
 	return restored;
 }
+/** Execution telemetry is independent of business stages and has a one-way terminal latch. */
+function applyTenderProjection(state, event) {
+	if (event.type === "dsh-tender/progress") {
+		const parsed = TenderExecutionSchema.safeParse(event.data);
+		if (!parsed.success || !state?.activeOperation || state.activeOperation.callId !== parsed.data.operationId) return state;
+		if (state.execution?.operationId === parsed.data.operationId && state.execution.status !== "running") return state;
+		if (state.execution?.operationId === parsed.data.operationId && state.execution.updatedAt > parsed.data.updatedAt) return state;
+		return {
+			...state,
+			execution: parsed.data
+		};
+	}
+	const next = applyWorkflowFacts(state, event);
+	if (next === null) return next;
+	let execution = next.execution ?? state?.execution;
+	if (event.type === "tool/call" && next.activeOperation?.callId === String(event.data.callId) && state?.activeOperation?.callId !== next.activeOperation.callId && state?.execution?.operationId !== next.activeOperation.callId) {
+		execution = emptyExecution(next.activeOperation.callId, next.activeOperation.tool, event.time);
+		if (state?.query) {
+			if (state.execution) {
+				execution.counts = { ...state.execution.counts };
+				execution.providers = { ...state.execution.providers };
+			}
+			execution.counts.succeeded = state.query.total;
+			execution.counts.queried = Object.keys(state.query.sources).length;
+			execution.counts.needsReview = state.review?.pending ?? state.classification?.manualReview ?? 0;
+		}
+	}
+	if (execution?.status === "running" && (event.type === "tool/result" && String(event.data.message.source.callId) === execution.operationId || event.type === "turn/end" && state?.observedTurn === event.data.turn)) {
+		let reportedFailure = false;
+		if (event.type === "tool/result") try {
+			reportedFailure = parseTenderToolMetaV2(event.data.meta).effect === "failed";
+		} catch {
+			reportedFailure = true;
+		}
+		const failed = event.type === "tool/result" && (event.data.error !== void 0 || event.data.message.content[0].isError === true || reportedFailure || next.lastFailure !== void 0 && JSON.stringify(next.lastFailure) !== JSON.stringify(state?.lastFailure));
+		execution = {
+			...execution,
+			updatedAt: event.time,
+			finishedAt: event.time,
+			status: event.type === "turn/end" ? "interrupted" : failed ? "failed" : execution.counts.failed + execution.counts.noPermission + execution.counts.unknown > 0 ? "partial" : "succeeded",
+			currentAction: event.type === "turn/end" ? "执行中断，请核对来源会话" : failed ? "本次操作失败" : "本次操作已结束",
+			counts: {
+				...execution.counts,
+				needsReview: next.review?.pending ?? next.classification?.manualReview ?? 0
+			}
+		};
+	}
+	return execution === void 0 || next.execution === execution ? next : {
+		...next,
+		execution
+	};
+}
 const tenderWorkflowProjectionDefinition = {
 	key: "dshTenderWorkflow",
-	stateVersion: 2,
+	stateVersion: 3,
 	stateSchema: TenderWorkflowProjectionV2Schema.nullable(),
 	init: () => null,
 	apply: applyTenderProjection,
@@ -3923,6 +4056,41 @@ function nestedToolExecution(exec, callId, name, argumentsValue) {
 	};
 }
 //#endregion
+//#region src/host/pipeline/provider-envelope.ts
+const object = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var ProviderEnvelopeError = class extends Error {
+	outcome;
+	constructor(outcome) {
+		super(outcome === "no-permission" ? "来源权限不足，请检查客户 MCP 授权。" : outcome === "failed" ? "来源明确返回失败，请检查连接后重试。" : "来源返回结构未知，未将其视为零记录。");
+		this.outcome = outcome;
+	}
+};
+/** Bounded, explicit QCC/MCP wrappers; never search arbitrary nested customer data. */
+function unwrapProviderEnvelope(raw, source) {
+	let value = raw;
+	const key = source === "tender" ? "标讯列表" : "拟建项目列表";
+	for (let depth = 0; depth < 5; depth++) {
+		if (!object(value)) throw new ProviderEnvelopeError("unknown");
+		const code = value["Status"] ?? value["statusCode"] ?? value["code"];
+		if ([
+			"401",
+			"403",
+			"FORBIDDEN",
+			"UNAUTHORIZED",
+			"NO_PERMISSION"
+		].includes(String(code).toUpperCase())) throw new ProviderEnvelopeError("no-permission");
+		if (value["isError"] === true || value["success"] === false || value["error"] != null || code !== void 0 && !["0", "200"].includes(String(code))) throw new ProviderEnvelopeError("failed");
+		if (Object.hasOwn(value, key)) {
+			if (!Array.isArray(value[key])) throw new ProviderEnvelopeError("unknown");
+			return value;
+		}
+		const next = value["Result"] ?? value["result"] ?? value["data"] ?? value["structuredContent"];
+		if (next === void 0) throw new ProviderEnvelopeError("unknown");
+		value = next;
+	}
+	throw new ProviderEnvelopeError("unknown");
+}
+//#endregion
 //#region src/host/pipeline/qcc-adapters.ts
 const sourceText = z.string().max(32768);
 const requiredSourceText = sourceText.refine((value) => value.trim() !== "", "required source identifier is empty");
@@ -3935,7 +4103,7 @@ const sourceEntitySchema = z.object({
 const sourceEntitiesSchema = z.preprocess((value) => value === null ? void 0 : value, z.array(sourceEntitySchema).max(500).optional());
 const sourceStringsSchema = z.preprocess((value) => value === null ? void 0 : value, z.array(sourceText).max(500).optional());
 const querySummarySchema = z.object({
-	命中总数: z.number().finite().nonnegative().optional(),
+	命中总数: z.preprocess((value) => typeof value === "string" && /^\d+$/u.test(value) ? Number(value) : value, z.number().int().nonnegative().safe().optional()),
 	结果说明: optionalSourceText,
 	生效筛选: z.preprocess((value) => value === null ? void 0 : value, z.record(z.string(), z.unknown()).optional())
 }).passthrough();
@@ -4031,6 +4199,7 @@ function hasEnvelopeMarker(value, listKey) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) && (Object.hasOwn(value, "查询摘要") || Object.hasOwn(value, listKey));
 }
 function adaptQccTenderPayload(value) {
+	value = unwrapProviderEnvelope(value, "tender");
 	if (!hasEnvelopeMarker(value, "标讯列表")) throw new QccSourceContractError("invalid-tender-payload");
 	const envelope = qccTenderPayloadEnvelopeSchema.safeParse(value);
 	if (!envelope.success) throw new QccSourceContractError("invalid-tender-payload");
@@ -4041,6 +4210,7 @@ function adaptQccTenderPayload(value) {
 	};
 }
 function adaptQccProposedPayload(value) {
+	value = unwrapProviderEnvelope(value, "proposed");
 	if (!hasEnvelopeMarker(value, "拟建项目列表")) throw new QccSourceContractError("invalid-proposed-payload");
 	const envelope = qccProposedPayloadEnvelopeSchema.safeParse(value);
 	if (!envelope.success) throw new QccSourceContractError("invalid-proposed-payload");
@@ -4858,16 +5028,6 @@ function sanitizeMessage(value) {
 	const sanitized = value.replaceAll(/\p{C}/gu, "").trim();
 	return (sanitized === "" ? "来源工具调用失败。" : sanitized).slice(0, 512);
 }
-function contentText(result) {
-	const texts = [];
-	const visit = (value) => {
-		if (typeof value !== "object" || value === null) return;
-		if ("text" in value && typeof value.text === "string") texts.push(value.text);
-		if ("content" in value && Array.isArray(value.content)) value.content.forEach(visit);
-	};
-	result.content.forEach(visit);
-	return texts.join("\n");
-}
 function jsonValue$5(value) {
 	const serialized = JSON.stringify(value);
 	if (serialized === void 0) throw new TypeError("value is not lossless JSON");
@@ -4882,6 +5042,7 @@ function hasSourceList(value, source) {
 function extractMcpCanonicalPayloadCandidates(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new TypeError("MCP canonical value must be an object");
 	const record = value;
+	if (record["isError"] === true) throw new ProviderEnvelopeError("failed");
 	const candidates = [];
 	if (record["structuredContent"] !== void 0) candidates.push(jsonValue$5(record["structuredContent"]));
 	const content = record["content"];
@@ -4907,13 +5068,22 @@ async function executeSource(dependencies, exec, source, args) {
 	const callId = `${String(exec.callId)}:qcc:${source}`;
 	const result = await dependencies.tools.execute(nestedToolExecution(exec, callId, name, args));
 	exec.signal.throwIfAborted();
-	if (result.isError) return {
-		source,
-		status: "failed",
-		message: sanitizeMessage(result.error.message || contentText(result))
-	};
+	if (result.isError) {
+		const code = String(result.error.info?.code ?? "");
+		return {
+			source,
+			status: "failed",
+			outcome: /^(401|403|FORBIDDEN|UNAUTHORIZED|NO_PERMISSION)$/iu.test(code) ? "no-permission" : "failed",
+			message: "来源工具调用失败，请检查连接与授权。"
+		};
+	}
 	try {
 		const candidates = [...extractMcpCanonicalPayloadCandidates(result.value)].sort((left, right) => Number(hasSourceList(right, source)) - Number(hasSourceList(left, source)));
+		for (const payload of candidates) try {
+			unwrapProviderEnvelope(payload, source);
+		} catch (error) {
+			if (error instanceof ProviderEnvelopeError && error.outcome !== "unknown") throw error;
+		}
 		let contractError;
 		for (const payload of candidates) try {
 			return {
@@ -4930,6 +5100,7 @@ async function executeSource(dependencies, exec, source, args) {
 		return {
 			source,
 			status: "failed",
+			outcome: error instanceof ProviderEnvelopeError ? error.outcome : "unknown",
 			message: sanitizeMessage(error instanceof Error ? error.message : "来源结果无法校验。")
 		};
 	}
@@ -4964,10 +5135,12 @@ function succeededState(revision, intent, now, querySpec, normalizedData, source
 	const sourceState = Object.fromEntries(executions.map((execution) => [execution.source, execution.status === "succeeded" ? {
 		status: "succeeded",
 		loaded: execution.adapted.rawRecordCount,
+		outcome: execution.adapted.rawRecordCount === 0 ? "zero" : "data",
 		sourceData: sourceArtifacts[execution.source]
 	} : {
 		status: "failed",
 		loaded: 0,
+		outcome: execution.outcome,
 		errorMessage: execution.message
 	}]));
 	return TenderWorkflowProjectionV2Schema.parse({
@@ -5189,8 +5362,59 @@ function createTenderWorkbenchQueryTool(dependencies) {
 				revisionOf: (result) => QueryToolResultV2Schema.parse(result).state.revision,
 				execute: async (nextRevision) => {
 					const executions = [];
-					if (intent.tender !== void 0) executions.push(await executeSource(dependencies, exec, "tender", intent.tender));
-					if (intent.proposed !== void 0) executions.push(await executeSource(dependencies, exec, "proposed", intent.proposed));
+					let progress = emptyExecution(String(exec.callId), "准备查询已授权来源", Date.now());
+					progress.queryTarget = intent.target;
+					progress.providers = {
+						tender: intent.tender ? "unknown" : "not-needed",
+						proposed: intent.proposed ? "unknown" : "not-needed"
+					};
+					const publish = () => {
+						exec.agent?.session.append?.("dsh-tender/progress", progress);
+					};
+					publish();
+					for (const source of ["tender", "proposed"]) {
+						const args = intent[source];
+						if (args === void 0) continue;
+						progress = {
+							...progress,
+							currentAction: source === "tender" ? "正在查询招投标来源" : "正在查询拟建项目来源",
+							updatedAt: Date.now()
+						};
+						publish();
+						let execution;
+						try {
+							execution = await executeSource(dependencies, exec, source, args);
+						} catch (error) {
+							exec.signal.throwIfAborted();
+							execution = {
+								source,
+								status: "failed",
+								outcome: "failed",
+								message: "来源调用异常，请检查连接后重试。"
+							};
+						}
+						executions.push(execution);
+						const outcome = execution.status === "succeeded" ? execution.adapted.rawRecordCount === 0 ? "zero" : "data" : execution.outcome;
+						progress = {
+							...progress,
+							updatedAt: Date.now(),
+							recentItem: source === "tender" ? "招投标来源已返回" : "拟建项目来源已返回",
+							providers: {
+								...progress.providers,
+								[source]: outcome
+							},
+							counts: {
+								...progress.counts,
+								queried: progress.counts.queried + 1,
+								succeeded: progress.counts.succeeded + (execution.status === "succeeded" ? execution.adapted.items.length : 0),
+								zero: progress.counts.zero + Number(outcome === "zero"),
+								failed: progress.counts.failed + Number(outcome === "failed"),
+								noPermission: progress.counts.noPermission + Number(outcome === "no-permission"),
+								unknown: progress.counts.unknown + Number(outcome === "unknown")
+							}
+						};
+						publish();
+					}
 					exec.signal.throwIfAborted();
 					const successes = executions.filter((execution) => execution.status === "succeeded");
 					const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -5203,7 +5427,10 @@ function createTenderWorkbenchQueryTool(dependencies) {
 							intentId,
 							outcome: "failed",
 							message: `查询失败：${message}`.slice(0, 512),
-							state: failedState(previous, nextRevision, intentId, message, now),
+							state: {
+								...failedState(previous, nextRevision, intentId, message, now),
+								execution: progress
+							},
 							control: {
 								status: "failed",
 								reasonCode: "all-sources-failed",
@@ -5232,6 +5459,7 @@ function createTenderWorkbenchQueryTool(dependencies) {
 					const querySpec = await transaction.stageJson("query-spec", `query-${intentId}.json`, jsonValue$5(intent));
 					const normalizedData = await transaction.stageJson("normalized-data", `dataset-${intentId}.json`, jsonValue$5(dataset), dataset.rows.length);
 					const state = succeededState(nextRevision, intent, now, querySpec, normalizedData, sourceArtifacts, executions, dataset.summary);
+					state.execution = progress;
 					const outcome = successes.length === executions.length ? "succeeded" : "partial";
 					const message = outcome === "partial" ? `查询部分完成：已保留 ${successes.length} 个可用来源，失败来源已明确记录。` : `查询完成：已生成包含 ${dataset.rows.length} 个规范化项目的新活动快照。`;
 					return jsonValue$5(QueryToolResultV2Schema.parse({
@@ -10424,6 +10652,236 @@ function createTenderWorkbenchWorkflowStateTool(dependencies) {
 	});
 }
 //#endregion
+//#region src/contracts/history.ts
+const HistoryEntrySchema = z.object({
+	taskId: z.string().min(1).max(128),
+	originSessionId: z.string().min(1).max(128),
+	originWorkspaceId: z.string().max(128).nullable(),
+	originWorkspaceTitle: z.string().max(200),
+	title: z.string().max(2048),
+	createdAt: z.string(),
+	updatedAt: z.string(),
+	revision: z.number().int().nonnegative(),
+	status: z.enum([
+		"in-progress",
+		"needs-review",
+		"partial",
+		"completed",
+		"failed"
+	]),
+	records: z.number().int().nonnegative().nullable(),
+	reviewed: z.number().int().nonnegative(),
+	pending: z.number().int().nonnegative(),
+	deliverables: z.array(z.enum(["excel", "pdf"])).max(2)
+}).strict();
+z.object({
+	schemaVersion: z.literal(1),
+	scope: z.literal("profile"),
+	entries: z.array(HistoryEntrySchema.extend({ sourceAvailable: z.boolean() })),
+	total: z.number().int().nonnegative(),
+	page: z.number().int().positive(),
+	pageSize: z.number().int().positive()
+}).strict();
+//#endregion
+//#region src/host/history.ts
+const IndexSchema = z.object({
+	schemaVersion: z.literal(1),
+	entries: z.array(HistoryEntrySchema)
+}).strict();
+const HISTORY_ROUTE = "/dsh-tender-workbench/api/v1/history";
+/** One Profile's derivative metadata only. Never stores raw data, tokens, or writable projections. */
+var TenderHistoryIndex = class {
+	path;
+	entries = /* @__PURE__ */ new Map();
+	tail = Promise.resolve();
+	ready;
+	closed = false;
+	constructor(path) {
+		this.path = path;
+		this.ready = readFile(path, "utf8").then((raw) => {
+			for (const entry of IndexSchema.parse(JSON.parse(raw)).entries) this.entries.set(this.key(entry), entry);
+		}).catch((error) => {
+			if (error.code !== "ENOENT") throw error;
+		});
+		this.ready.catch(() => {});
+	}
+	key(entry) {
+		return `${entry.originSessionId}:${entry.taskId}`;
+	}
+	async put(entry) {
+		if (this.closed) return;
+		const operation = this.tail.then(async () => {
+			await this.ready;
+			const validated = HistoryEntrySchema.parse(entry), key = this.key(validated), old = this.entries.get(key);
+			if (old && (old.revision > entry.revision || old.status === "completed")) return;
+			const next = old ? {
+				...validated,
+				originWorkspaceId: old.originWorkspaceId,
+				originWorkspaceTitle: old.originWorkspaceTitle
+			} : validated;
+			if (JSON.stringify(old) === JSON.stringify(next)) return;
+			const entries = new Map(this.entries);
+			entries.set(key, next);
+			await mkdir(dirname(this.path), {
+				recursive: true,
+				mode: 448
+			});
+			const temporary = `${this.path}.${randomUUID()}.tmp`;
+			await writeFile(temporary, JSON.stringify({
+				schemaVersion: 1,
+				entries: [...entries.values()]
+			}), {
+				mode: 384,
+				flag: "wx"
+			});
+			await rename(temporary, this.path);
+			this.entries = entries;
+		});
+		this.tail = operation.catch(() => {});
+		return operation;
+	}
+	async list() {
+		await this.ready;
+		await this.tail;
+		return [...this.entries.values()].map((entry) => structuredClone(entry)).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt) || a.taskId.localeCompare(b.taskId));
+	}
+	async close() {
+		this.closed = true;
+		await this.tail;
+	}
+};
+function historyEntry(header, state, workspace) {
+	const failedAttempt = state.execution;
+	if (failedAttempt?.queryTarget && ["failed", "interrupted"].includes(failedAttempt.status)) return HistoryEntrySchema.parse({
+		taskId: failedAttempt.operationId,
+		originSessionId: String(header.id),
+		originWorkspaceId: workspace?.id ?? null,
+		originWorkspaceTitle: workspace?.title.slice(0, 200) ?? "原任务未绑定 Workspace",
+		title: failedAttempt.queryTarget,
+		createdAt: new Date(failedAttempt.startedAt).toISOString(),
+		updatedAt: new Date(failedAttempt.finishedAt ?? failedAttempt.updatedAt).toISOString(),
+		revision: state.revision,
+		status: "failed",
+		records: null,
+		reviewed: 0,
+		pending: 0,
+		deliverables: []
+	});
+	const query = state.query;
+	if (!query) return void 0;
+	const report = state.report;
+	const completed = report?.completeness === "complete" && report.excel.status === "succeeded" && report.pdf.status === "succeeded";
+	const times = Object.values(state.stages).flatMap((stage) => stage.updatedAt ? [stage.updatedAt] : []);
+	return HistoryEntrySchema.parse({
+		taskId: query.querySpec.id,
+		originSessionId: String(header.id),
+		originWorkspaceId: workspace?.id ?? null,
+		originWorkspaceTitle: workspace?.title.slice(0, 200) ?? "原任务未绑定 Workspace",
+		title: query.targetSummary,
+		createdAt: query.querySpec.createdAt,
+		updatedAt: times.sort().at(-1) ?? query.querySpec.createdAt,
+		revision: state.revision,
+		status: completed ? "completed" : state.stages[state.currentStage].status === "failed" ? "failed" : report?.finalSnapshot ? "partial" : (state.review?.pending ?? state.classification?.manualReview ?? 0) > 0 ? "needs-review" : "in-progress",
+		records: query.total,
+		reviewed: report?.reviewed ?? (state.review ? state.review.confirmedCandidate + state.review.watch + state.review.exclude : 0),
+		pending: state.review?.pending ?? state.classification?.manualReview ?? 0,
+		deliverables: ["excel", "pdf"].filter((format) => report?.[format].status === "succeeded")
+	});
+}
+/** Loader root baseUrl is the public, verified Profile anchor; never default to process cwd/HOME. */
+function profileHistoryPath(loader) {
+	const baseUrl = loader?.ctx?.baseUrl;
+	if (typeof baseUrl !== "string") return void 0;
+	try {
+		const url = new URL(".", baseUrl);
+		if (url.protocol !== "file:") return void 0;
+		return join(fileURLToPath(url), ".dsh-tender-workbench", "history-v1.json");
+	} catch {
+		return;
+	}
+}
+function registerTenderHistory(ctx) {
+	if (ctx.webServer.host !== "127.0.0.1") throw new Error("History requires loopback Host");
+	const path = profileHistoryPath(ctx.get("loader"));
+	const index = path ? new TenderHistoryIndex(path) : void 0;
+	let disposed = false, lastError = false;
+	const capture = (session, raw) => {
+		if (!index || disposed) return;
+		const parsed = TenderWorkflowProjectionV2Schema.safeParse(raw);
+		if (!parsed.success) return;
+		try {
+			const workspace = ctx.workspaceRegistry.list().find((item) => item.sessionIds.includes(session.id));
+			const entry = historyEntry(session.header, parsed.data, workspace);
+			if (entry) index.put(entry).catch(() => {
+				lastError = true;
+			});
+		} catch {
+			lastError = true;
+		}
+	};
+	const unsubscribe = ctx.sessionProjections.onChanged((session, key, value) => {
+		if (key === "dshTenderWorkflow") capture(session, value);
+	});
+	for (const session of ctx.sessions.list()) capture(session, ctx.sessionProjections.stateOf(session, "dshTenderWorkflow"));
+	const created = ctx.on("session/created", (session) => capture(session, ctx.sessionProjections.stateOf(session, "dshTenderWorkflow")));
+	const unregister = ctx.webServer.register({
+		kind: "exact",
+		path: HISTORY_ROUTE,
+		async handler(req, res) {
+			const json = (status, value) => {
+				res.writeHead(status, {
+					"Content-Type": "application/json",
+					"Cache-Control": "private, no-store",
+					"X-Content-Type-Options": "nosniff"
+				});
+				res.end(JSON.stringify(value));
+			};
+			if (req.method !== "GET") {
+				json(405, { error: "只读历史" });
+				return;
+			}
+			const identity = historyRequestIdentity(req);
+			if (!identity || !ctx.sessions.get(identity) && !ctx.workspaceRegistry.list().some((workspace) => workspace.sessionIds.includes(identity))) {
+				json(403, { error: "来源请求不可验证" });
+				return;
+			}
+			if (!index || lastError) {
+				json(503, { error: "当前 Profile 历史不可用，请检查宿主能力或本地存储；来源会话不受影响。" });
+				return;
+			}
+			try {
+				const url = new URL(req.url ?? "/dsh-tender-workbench/api/v1/history", "http://127.0.0.1");
+				const page = Number(url.searchParams.get("page") ?? 1), pageSize = 20;
+				if (!Number.isSafeInteger(page) || page < 1 || page > 1e5) {
+					json(400, { error: "页码无效" });
+					return;
+				}
+				const rows = await index.list(), workspaces = ctx.workspaceRegistry.list();
+				json(200, {
+					schemaVersion: 1,
+					scope: "profile",
+					entries: rows.slice((page - 1) * pageSize, page * pageSize).map((entry) => ({
+						...entry,
+						sourceAvailable: workspaces.some((w) => String(w.id) === entry.originWorkspaceId && w.sessionIds.includes(entry.originSessionId))
+					})),
+					page,
+					pageSize,
+					total: rows.length
+				});
+			} catch {
+				json(503, { error: "历史索引读取失败；没有将错误视为空历史。" });
+			}
+		}
+	});
+	return async () => {
+		disposed = true;
+		unsubscribe();
+		created();
+		unregister();
+		await index?.close();
+	};
+}
+//#endregion
 //#region src/index.ts
 /** Public Host services required by the S2/S3 workflow and Session-private Artifact seam. */
 const inject = [
@@ -10432,7 +10890,8 @@ const inject = [
 	"sessionPersistence",
 	"webServer",
 	"sessions",
-	"skills"
+	"skills",
+	"workspaceRegistry"
 ];
 function sessionPersistenceLocator(ctx) {
 	const candidate = ctx.get("sessionPersistence");
@@ -10443,6 +10902,7 @@ function sessionPersistenceLocator(ctx) {
 /** Register the whole-Session Projection, high-level tools, and read-only Artifact route. */
 function apply(ctx) {
 	ctx.sessionProjections.register(tenderWorkflowProjectionDefinition);
+	ctx.effect(() => registerTenderHistory(ctx), "dsh-tender-workbench: Profile history");
 	const persistence = sessionPersistenceLocator(ctx);
 	const receipts = new IntentReceiptCoordinator();
 	ctx.effect(() => ctx.tools.register(createTenderWorkbenchQueryTool({

package/lib/types/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.tsx"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAoB9D,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAiBrD,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,kBAAkB;QAC1B,2DAA2D;QAC3D,YAAY,EAAE,SAAS,CAAA;KACxB;CACF;AAID,yFAAyF;AACzF,eAAO,MAAM,MAAM,UAElB,CAAA;AAmCD,mGAAmG;AACnG,wBAAgB,KAAK,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CAyIpD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.tsx"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAoB9D,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,cAAc,CAAA;AAiBrD,OAAO,QAAQ,kCAAkC,CAAC;IAChD,UAAU,kBAAkB;QAC1B,2DAA2D;QAC3D,YAAY,EAAE,SAAS,CAAA;KACxB;CACF;AAID,yFAAyF;AACzF,eAAO,MAAM,MAAM,UAElB,CAAA;AAsCD,mGAAmG;AACnG,wBAAgB,KAAK,CAAC,GAAG,EAAE,mBAAmB,GAAG,IAAI,CA+IpD"}