ec-web 0.0.20 → 0.0.22

package/dist/static/app.js

@@ -92,6 +92,28 @@ const translations = {
     'common.online': '在线',
     'common.offline': '离线',
     'common.ago': '前',
+    'basicSettings.open': '基础设置',
+    'basicSettings.openTitle': '打开基础设置',
+    'basicSettings.title': '基础设置',
+    'basicSettings.subtitle': '按用途组织参数。保存前会校验并保留未编辑字段。',
+    'basicSettings.reload': '重新读取',
+    'basicSettings.tabs.models': '模型与推理',
+    'basicSettings.tabs.modelsHint': '基座、模型与连接',
+    'basicSettings.tabs.response': '响应与会话',
+    'basicSettings.tabs.responseHint': '响应方式与续接',
+    'basicSettings.tabs.projects': '项目与服务',
+    'basicSettings.tabs.projectsHint': '路径与本机服务',
+    'basicSettings.tabs.identity': '身份与安全',
+    'basicSettings.tabs.identityHint': 'AID 与访问保护',
+    'basicSettings.tabs.runtime': '运行与诊断',
+    'basicSettings.tabs.runtimeHint': '日志与稳定性',
+    'basicSettings.noChanges': '没有需要保存的改动',
+    'basicSettings.viewJson': '查看 JSON',
+    'basicSettings.save': '保存设置',
+    'basicSettings.jsonTitle': '查看 JSON',
+    'basicSettings.jsonSubtitle': '只读预览，敏感值已脱敏。',
+    'basicSettings.daemonFile': 'daemon.json',
+    'basicSettings.defaultsFile': 'agents/defaults.json',
     'theme.light': '浅色模式',
     'theme.dark': '深色模式',
     'theme.system': '跟随系统',
@@ -587,6 +609,8 @@ const translations = {
     'triggers.history.field.payload': '事件数据',
     'triggers.history.field.sessionId': '会话 ID',
     'triggers.history.field.messageId': '消息 ID',
+    'triggers.history.field.operationId': '操作 ID',
+    'triggers.history.field.outboxId': 'Outbox ID',
     'triggers.history.field.handoffId': 'Handoff ID',
     'triggers.history.field.attempt': '尝试次数',
     'triggers.history.field.triggerId': 'Trigger ID',
@@ -609,8 +633,9 @@ const translations = {
     'triggers.history.outcome.error': '错误',
     'triggers.history.outcome.interrupted': '已中断',
     'triggers.history.outcome.timeout': '超时',
+    'triggers.history.outcome.queued': '已入队',
     'triggers.history.effect.message.send': '发送消息',
-    'triggers.history.effect.handoff.enqueue': '创建 Handoff',
+    'triggers.history.effect.handoff.enqueue': 'Handoff 投递',
     'triggers.history.effect.message.inbound': '注入目标会话',
     'triggers.history.effect.agent.conversation': 'Agent 对话',
     'triggers.runStatus.completed': '成功',
@@ -998,6 +1023,28 @@ const translations = {
     'common.online': 'Online',
     'common.offline': 'Offline',
     'common.ago': 'ago',
+    'basicSettings.open': 'Settings',
+    'basicSettings.openTitle': 'Open basic settings',
+    'basicSettings.title': 'Basic Settings',
+    'basicSettings.subtitle': 'Settings organized by purpose. Saving validates changes and preserves untouched fields.',
+    'basicSettings.reload': 'Reload',
+    'basicSettings.tabs.models': 'Models & Reasoning',
+    'basicSettings.tabs.modelsHint': 'Base Agents, models, connections',
+    'basicSettings.tabs.response': 'Responses & Sessions',
+    'basicSettings.tabs.responseHint': 'Delivery and renewal',
+    'basicSettings.tabs.projects': 'Projects & Services',
+    'basicSettings.tabs.projectsHint': 'Paths and local services',
+    'basicSettings.tabs.identity': 'Identity & Security',
+    'basicSettings.tabs.identityHint': 'AID and access protection',
+    'basicSettings.tabs.runtime': 'Runtime & Diagnostics',
+    'basicSettings.tabs.runtimeHint': 'Logs and stability',
+    'basicSettings.noChanges': 'No unsaved changes',
+    'basicSettings.viewJson': 'View JSON',
+    'basicSettings.save': 'Save Settings',
+    'basicSettings.jsonTitle': 'View JSON',
+    'basicSettings.jsonSubtitle': 'Read-only preview with sensitive values redacted.',
+    'basicSettings.daemonFile': 'daemon.json',
+    'basicSettings.defaultsFile': 'agents/defaults.json',
     'theme.light': 'Light',
     'theme.dark': 'Dark',
     'theme.system': 'System',
@@ -1493,6 +1540,8 @@ const translations = {
     'triggers.history.field.payload': 'Event Data',
     'triggers.history.field.sessionId': 'Session ID',
     'triggers.history.field.messageId': 'Message ID',
+    'triggers.history.field.operationId': 'Operation ID',
+    'triggers.history.field.outboxId': 'Outbox ID',
     'triggers.history.field.handoffId': 'Handoff ID',
     'triggers.history.field.attempt': 'Attempts',
     'triggers.history.field.triggerId': 'Trigger ID',
@@ -1515,8 +1564,9 @@ const translations = {
     'triggers.history.outcome.error': 'Error',
     'triggers.history.outcome.interrupted': 'Interrupted',
     'triggers.history.outcome.timeout': 'Timeout',
+    'triggers.history.outcome.queued': 'Queued',
     'triggers.history.effect.message.send': 'Send Message',
-    'triggers.history.effect.handoff.enqueue': 'Create Handoff',
+    'triggers.history.effect.handoff.enqueue': 'Deliver Handoff',
     'triggers.history.effect.message.inbound': 'Inject Target Session',
     'triggers.history.effect.agent.conversation': 'Agent Conversation',
     'triggers.runStatus.completed': 'Completed',
@@ -1857,6 +1907,7 @@ function updateI18n() {
   // 更新 html lang 属性
   document.documentElement.lang = currentLang;
   updateThemeButton();
+  window.refreshBasicSettingsI18n?.();
 }
 
 function toggleLang() {
@@ -1873,7 +1924,16 @@ function toggleLang() {
 // 本地直连时页面在 "/"，经 AUN Service Proxy 时页面在 "/ecweb/"。
 // 取当前页面所在目录（含尾斜杠）作为所有 API/WS 的前缀，使绝对路径在两种
 // 部署下都正确（proxy-server 用首段路径选服务，前缀不能丢）。
-const BASE = location.pathname.replace(/[^/]*$/, '');
+const BASE = (() => {
+  const baseElement = document.querySelector('base[href]');
+  if (baseElement) {
+    try {
+      const basePath = new URL(baseElement.href, location.href).pathname;
+      return basePath.endsWith('/') ? basePath : `${basePath}/`;
+    } catch {}
+  }
+  return location.pathname.replace(/[^/]*$/, '');
+})();
 const apiUrl = (p) => BASE + p.replace(/^\/+/, '');
 const authApiUrl = (p) => {
   const token = localStorage.getItem(TOKEN_KEY);
@@ -2196,6 +2256,12 @@ function subscribeRoleManagementSubview() {
 function setRoleManagementSubview(subview, options = {}) {
   roleManagementSubview = subview === 'assignments' ? 'assignments' : 'definitions';
   localStorage.setItem(ROLE_SUBVIEW_KEY, roleManagementSubview);
+  const newRoleButton = $('#btn-new-role');
+  if (newRoleButton) {
+    const visible = roleManagementSubview === 'definitions';
+    newRoleButton.hidden = !visible;
+    newRoleButton.setAttribute('aria-hidden', String(!visible));
+  }
   document.querySelectorAll('[data-role-subview]').forEach(tab => {
     const active = tab.dataset.roleSubview === roleManagementSubview;
     tab.classList.toggle('active', active);
@@ -3755,7 +3821,7 @@ function renderBlocks(blocks, options = {}) {
         : '';
       out += `<details class="blk blk-tool" open><summary class="tool-head">${icon} <span class="tool-name">${esc(tool)}</span></summary>${toolParams}</details>`;
     } else if (b.kind === 'tool_result') {
-      const rejection = b.rejection?.kind === 'approval_rejected' ? b.rejection : undefined;
+      const rejection = b.rejection && (b.rejection.kind === 'approval_rejected' || b.rejection.kind === 'policy_blocked') ? b.rejection : undefined;
       const cls = b.isError ? `blk-result err${rejection ? ' rejection' : ''}` : 'blk-result';
       const loadFull = b.truncated && b.resultKey
         ? `<button class="ctrl-btn result-load-full" type="button" data-result-key="${esc(b.resultKey)}">${t('sessions.loadFullResult') || '加载完整结果'}</button>`
@@ -3779,7 +3845,7 @@ function renderBlocks(blocks, options = {}) {
             : '';
           return '<div class="result-rejection-meta">' +
           `<span class="result-rejection-badge">⚠ ${t('sessions.block.rejection.title')}</span>` +
-          `<span>${rejection.source === 'evolcore-policy' ? t('sessions.block.rejection.source.policy') : t('sessions.block.rejection.source.approval')}</span>` +
+          `<span>${rejection.kind === 'policy_blocked' || rejection.source === 'evolcore-policy' ? t('sessions.block.rejection.source.policy') : t('sessions.block.rejection.source.approval')}</span>` +
           `<span>${t('sessions.block.rejection.notExecuted')}</span>` +
           `<span>${t(`sessions.block.rejection.evidence.${evidenceKey}`)}</span>` +
           backendReason + auditText +
@@ -5460,6 +5526,13 @@ const TRIGGER_EXECUTION_TYPES = [
 ];
 const TRIGGER_EFFORTS = ['low', 'medium', 'high', 'xhigh', 'max'];
 const TRIGGER_PERMISSION_MODES = ['readonly', 'auto', 'request', 'bypass'];
+function triggerPermissionModes(currentMode = '') {
+  const modes = [...TRIGGER_PERMISSION_MODES];
+  if ((state.triggers?.fullaccessEnabled === true
+      && state.triggers?.canApprovePersistentFullAccess === true)
+      || currentMode === 'fullaccess') modes.push('fullaccess');
+  return modes;
+}
 const TRIGGER_TARGET_SESSIONS = [
   ['main', () => t('triggers.session.main')],
   ['thread', () => t('triggers.session.thread')],
@@ -5581,8 +5654,9 @@ async function withTriggerOp(id, agent, label, fn) {
   finally { setTriggerOp(id, agent, null); }
 }
 
-function triggerOptionHtml(items, current, emptyLabel) {
+function triggerOptionHtml(items, current, emptyLabel, disabledValues = null) {
   const selected = String(current || '');
+  const disabled = disabledValues instanceof Set ? disabledValues : new Set(disabledValues || []);
   let html = emptyLabel == null ? '' : `<option value=""${selected ? '' : ' selected'}>${esc(emptyLabel)}</option>`;
   let seen = new Set();
   for (const item of items) {
@@ -5591,10 +5665,10 @@ function triggerOptionHtml(items, current, emptyLabel) {
     const label = typeof rawLabel === 'function' ? rawLabel() : String(rawLabel);
     if (seen.has(value)) continue;
     seen.add(value);
-    html += `<option value="${esc(value)}"${value === selected ? ' selected' : ''}>${esc(label)}</option>`;
+    html += `<option value="${esc(value)}"${value === selected ? ' selected' : ''}${disabled.has(value) ? ' disabled' : ''}>${esc(label)}</option>`;
   }
   if (selected && !seen.has(selected)) {
-    html += `<option value="${esc(selected)}" selected>${esc(selected)} (${t('common.currentSuffix')})</option>`;
+    html += `<option value="${esc(selected)}" selected${disabled.has(selected) ? ' disabled' : ''}>${esc(selected)} (${t('common.currentSuffix')})</option>`;
   }
   return html;
 }
@@ -6216,7 +6290,9 @@ function triggerHistoryFieldLabel(path, context = '') {
     channelType: t('triggers.th.channelType'),
     channelId: t('triggers.field.channelId'),
     sessionId: t('triggers.history.field.sessionId'),
+    operationId: t('triggers.history.field.operationId'),
     messageId: t('triggers.history.field.messageId'),
+    outboxId: t('triggers.history.field.outboxId'),
     handoffId: t('triggers.history.field.handoffId'),
     attempt: t('triggers.history.field.attempt'),
     startedAt: t('triggers.history.startedAt'),
@@ -6254,6 +6330,7 @@ function triggerHistoryFieldValue(path, value, context = '') {
   }
   if (context === 'effects' && path === 'status') {
     if (value === 'success') return t('triggers.history.outcome.success');
+    if (value === 'queued') return t('triggers.history.outcome.queued');
     if (value === 'failed') return t('triggers.runStatus.failed');
     if (value === 'skipped') return t('triggers.runStatus.skipped');
   }
@@ -6368,7 +6445,7 @@ function triggerHistoryEffectsBlock(effects) {
           'channelId',
           ...(Number(effect?.attempt) === 1 ? ['attempt'] : []),
         ],
-        keyOrder: ['type', 'status', 'handoffId', 'sessionId'],
+        keyOrder: ['type', 'status', 'messageId', 'outboxId', 'handoffId', 'sessionId', 'operationId'],
       }) +
     `</div>`,
   ).join('')}</div>`;
@@ -7280,7 +7357,7 @@ function openTriggerEditDrawer(id, agent) {
             `<label class="ag-edit-field"><span>${t('triggers.field.executionType')}</span><select id="trig-edit-type">${triggerOptionHtml(TRIGGER_EXECUTION_TYPES, original.executionType, null)}</select></label>` +
             `<label class="ag-edit-field trig-agent-field"><span>${t('triggers.field.model')}</span><select id="trig-edit-model">${agentSelectOptions([], original.model, t('common.inherited'))}</select></label>` +
             `<label class="ag-edit-field trig-agent-field"><span>${t('triggers.field.effort')}</span><select id="trig-edit-effort">${agentSelectOptions([], original.effort, t('common.inherited'))}</select></label>` +
-            `<label class="ag-edit-field trig-agent-field"><span>${t('triggers.field.permission')}</span><select id="trig-edit-permission">${triggerOptionHtml(TRIGGER_PERMISSION_MODES, original.permissionMode, t('common.inherited'))}</select></label>` +
+            `<label class="ag-edit-field trig-agent-field"><span>${t('triggers.field.permission')}</span><select id="trig-edit-permission">${triggerOptionHtml(triggerPermissionModes(original.permissionMode), original.permissionMode, t('common.inherited'), state.triggers?.canApprovePersistentFullAccess === true ? [] : ['fullaccess'])}</select></label>` +
             `<label class="ag-edit-field trig-script-field"><span>${t('triggers.field.scriptRuntime')}</span><select id="trig-edit-script-runtime">${triggerOptionHtml(['node', 'python', 'bash'], original.scriptRuntime, null)}</select></label>` +
             `<label class="ag-edit-field trig-script-field trig-script-path-field"><span>${t('triggers.field.scriptPath')}</span><input id="trig-edit-script-path" type="text" autocomplete="off" spellcheck="false" value="${esc(original.scriptPath)}" placeholder="${t('triggers.placeholder.scriptPath')}"></label>` +
           `</div>` +
@@ -9021,11 +9098,39 @@ function monDualLine(elId, varKey, times, isDark, title, series, fmtY, yRange) {
 }
 
 function renderRoles(data) {
-  if (!data) return;
-
   const agentSelect = $('#roles-agent-select');
+  const tbody = document.querySelector('#relations-table tbody');
+  if (!data) {
+    if (tbody) {
+      tbody.innerHTML = '';
+      const row = tbody.insertRow();
+      const cell = row.insertCell();
+      cell.colSpan = 7;
+      cell.textContent = t('common.loading');
+      cell.style.textAlign = 'center';
+      cell.style.color = 'var(--dim)';
+      cell.style.padding = '40px';
+    }
+    return;
+  }
   if (!agentSelect) return;
 
+  if (data.error) {
+    agentSelect.innerHTML = `<option value="">${esc(t('roles.selectAgentPlaceholder'))}</option>`;
+    rolesCurrentAgent = null;
+    if (tbody) {
+      tbody.innerHTML = '';
+      const row = tbody.insertRow();
+      const cell = row.insertCell();
+      cell.colSpan = 7;
+      cell.textContent = `${t('common.error')}: ${String(data.error)}`;
+      cell.style.textAlign = 'center';
+      cell.style.color = 'var(--red)';
+      cell.style.padding = '40px';
+    }
+    return;
+  }
+
   agentSelect.innerHTML = '';
   const placeholderOption = document.createElement('option');
   placeholderOption.value = '';
@@ -9063,6 +9168,7 @@ function roleSourceLabel(source) {
   const labels = {
     'relation-assigned': 'Explicit',
     'group-member': 'Member override',
+    'relation-actor': 'Private role',
     'private-inherited': 'Private role',
     'group-default': 'Group role',
     default: 'Default',
@@ -9080,6 +9186,34 @@ function peerTypeText(peerType) {
   return '-';
 }
 
+function roleVerificationStatus(item) {
+  const status = String(item?.verifyStatus || 'unknown').toLowerCase();
+  if (status === 'agentmd' || status === 'verified') return 'verified';
+  if (status === 'agentmd-unverified' || status === 'unverified') return 'agentmd-unverified';
+  if (status === 'invalid') return 'invalid';
+  return 'unknown';
+}
+
+function roleVerificationMatches(item, filter) {
+  if (!filter) return true;
+  const status = roleVerificationStatus(item);
+  return filter === 'verified' ? status === 'verified' : status === filter;
+}
+
+function roleVerificationBadge(item) {
+  const status = roleVerificationStatus(item);
+  if (status === 'invalid') {
+    return ` <span class="verify-badge verify-invalid" title="${esc(t('roles.verify.invalid'))}">⚠️ ${esc(t('roles.verify.invalidShort'))}</span>`;
+  }
+  if (status === 'agentmd-unverified') {
+    return ` <span class="verify-badge verify-unverified" title="${esc(t('roles.verify.unverified'))}">⚠️</span>`;
+  }
+  if (status === 'unknown') {
+    return ` <span class="verify-badge verify-unknown" title="${esc(t('roles.verify.unknown'))}">❓</span>`;
+  }
+  return '';
+}
+
 function roleClass(role) {
   return String(role || 'none').replace(/[^a-z0-9_-]/gi, '-');
 }
@@ -9092,7 +9226,9 @@ function assignedRoleFor(scope, item) {
   if (!item) return '';
   if (scope === 'private') return item.source === 'relation-assigned' ? (item.assignment?.role || item.role || '') : '';
   if (scope === 'group') return item.source === 'relation-assigned' ? (item.assignment?.role || item.role || '') : '';
-  return item.source === 'group-member' ? (item.assignment?.role || item.role || '') : '';
+  return item.source === 'group-member' || item.source === 'relation-actor'
+    ? (item.assignment?.role || item.role || '')
+    : '';
 }
 
 function assignableRolesForAgent(agentAid) {
@@ -9114,6 +9250,16 @@ function renderRelationsTable(data, filterAid = null) {
   if (!tbody) return;
 
   tbody.innerHTML = '';
+  if (data?.error) {
+    const row = tbody.insertRow();
+    const cell = row.insertCell();
+    cell.colSpan = 7;
+    cell.textContent = `${t('common.error')}: ${String(data.error)}`;
+    cell.style.textAlign = 'center';
+    cell.style.color = 'var(--red)';
+    cell.style.padding = '40px';
+    return;
+  }
   let conversations = data.conversations || [];
 
   if (filterAid) {
@@ -9141,6 +9287,16 @@ function renderRelationsTable(data, filterAid = null) {
     conversations = conversations.filter(conv => conv.chatType === rolesChatTypeFilter);
   }
 
+  if (rolesVerifyFilter) {
+    conversations = conversations
+      .map(conv => conv.chatType === 'group'
+        ? { ...conv, members: (conv.members || []).filter(member => roleVerificationMatches(member, rolesVerifyFilter)) }
+        : conv)
+      .filter(conv => conv.chatType === 'group'
+        ? (conv.members || []).length > 0
+        : roleVerificationMatches(conv, rolesVerifyFilter));
+  }
+
   conversations.sort((a, b) => {
     const lastDiff = (b.lastAt || 0) - (a.lastAt || 0);
     if (lastDiff !== 0) return lastDiff;
@@ -9170,10 +9326,12 @@ function renderPrivateConversationRow(tbody, conv) {
   const peerId = conv.peerId || conv.peerAid || conv.peerKey || conv.conversationId;
   const name = conv.peerName || conv.name || shortAid(peerId);
   const assignedRole = assignedRoleFor('private', conv);
+  const verifyBadge = roleVerificationBadge(conv);
+  const verifyClass = roleVerificationStatus(conv) === 'verified' ? '' : ` peer-${roleVerificationStatus(conv) === 'unknown' ? 'unknown' : 'unverified'}`;
   const row = tbody.insertRow();
   row.innerHTML = `
     <td><span class="chat-tag chat-tag-private">${esc(t('roles.chatType.private') || 'Private')}</span></td>
-    <td><strong>${esc(name)}</strong></td>
+    <td class="${verifyClass.trim()}"><strong>${esc(name)}</strong>${verifyBadge}</td>
     <td><code>${esc(peerId)}</code></td>
     <td>${esc(peerTypeText(conv.peerType))}</td>
     <td><span class="role-badge role-${esc(roleClass(conv.role))}">${esc(displayRole(conv.role))}</span></td>
@@ -9238,11 +9396,13 @@ function renderGroupMemberRow(tbody, conv, member) {
   const peerId = member.peerId || member.peerAid || member.peerKey;
   const name = member.peerName || shortAid(peerId);
   const assignedRole = assignedRoleFor('group-member', member);
+  const verifyBadge = roleVerificationBadge(member);
+  const verifyClass = roleVerificationStatus(member) === 'verified' ? '' : ` peer-${roleVerificationStatus(member) === 'unknown' ? 'unknown' : 'unverified'}`;
   const row = tbody.insertRow();
   row.className = 'group-member-row';
   row.innerHTML = `
     <td></td>
-    <td><span class="group-member-indent">${esc(name)}</span></td>
+    <td class="${verifyClass.trim()}"><span class="group-member-indent">${esc(name)}</span>${verifyBadge}</td>
     <td><code>${esc(peerId)}</code></td>
     <td>${esc(peerTypeText(member.peerType))}</td>
     <td><span class="role-badge role-${esc(roleClass(member.role))}">${esc(displayRole(member.role))}</span></td>