sayacode 3.2.1__tar.gz → 3.2.2__tar.gz

{sayacode-3.2.1 → sayacode-3.2.2}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # 更新日志
 
+## 3.2.2（2026-09-27）
+
+- 收窄本地审计记录：任务状态不再复制提示词、追问、结果和上下文快照；审批暂停只记录待批准数量，运行失败只记录异常类型，工具轨迹不再写入调用参数中的路径和搜索词。
+- 串行化进程内并发审计追加，修复 Windows 上自动记忆的并行模型回调可能覆盖同一审计文件记录的问题。
+- 修正工作区或查询条件切换时旧请求晚到覆盖当前设置面板的问题；新资源加载前隐藏旧数据，旧操作完成后不会刷新另一个资源。
+- Web 构建产物随修复更新，wheel 和源码包继续直接提供界面资源。历史审计文件不会自动改写。
+
 ## 3.2.1（2026-09-25）
 
 - 将独立的“当前运行活动”卡片替换为对话内可展开的过程行：并发工具按调用标识原位更新，长时间运行显示动态状态与耗时，完成后保留简明摘要；详细事件仍在“运行轨迹”中查看。

{sayacode-3.2.1 → sayacode-3.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sayacode
-Version: 3.2.1
+Version: 3.2.2
 Summary: A local LangChain and LangGraph coding assistant with a Web UI
 Project-URL: Homepage, https://github.com/saya-ch/sayacode
 Project-URL: Repository, https://github.com/saya-ch/sayacode
@@ -65,7 +65,7 @@ Description-Content-Type: text/markdown
 
   <p>
     <img src="https://img.shields.io/badge/Python-3.11%20%E2%80%93%203.13-334155" alt="Python 3.11 至 3.13">
-    <img src="https://img.shields.io/badge/Version-3.2.1-EF5DA8" alt="版本 3.2.1">
+    <img src="https://img.shields.io/badge/Version-3.2.2-EF5DA8" alt="版本 3.2.2">
     <img src="https://img.shields.io/badge/License-MIT-334155" alt="MIT 许可证">
   </p>
 </div>
@@ -74,7 +74,7 @@ Description-Content-Type: text/markdown
 
 SAYACODE 是基于 **LangChain / LangGraph** 的本机编程助手。左侧管理工作区与会话，中间呈现对话和工具轨迹，右侧展示计划、子 Agent、审批与代码交付。Agent 由 LangChain `create_agent` 构建；LangGraph 管理消息、待办、检查点和审批中断。Web 页面只展示和操作运行结果，不另建一套 Agent 执行协议。
 
-**3.x 的运行方式：**交互式 TUI 已由 FastAPI + React 工作台取代；适合脚本和 CI 的无头 CLI 继续保留。3.1 增加运行中消息队列、整棵子 Agent 任务树停止和会话管理；3.2 整理四档信任策略；3.2.1 将工具与模型过程放入对话时间线。
+**3.x 的运行方式：**交互式 TUI 已由 FastAPI + React 工作台取代；适合脚本和 CI 的无头 CLI 继续保留。3.1 增加运行中消息队列、整棵子 Agent 任务树停止和会话管理；3.2 整理四档信任策略与对话内运行过程，并持续改进审计隐私和界面状态可靠性。
 
 ## 快速开始
 

{sayacode-3.2.1 → sayacode-3.2.2}/README.md

@@ -15,7 +15,7 @@
 
   <p>
     <img src="https://img.shields.io/badge/Python-3.11%20%E2%80%93%203.13-334155" alt="Python 3.11 至 3.13">
-    <img src="https://img.shields.io/badge/Version-3.2.1-EF5DA8" alt="版本 3.2.1">
+    <img src="https://img.shields.io/badge/Version-3.2.2-EF5DA8" alt="版本 3.2.2">
     <img src="https://img.shields.io/badge/License-MIT-334155" alt="MIT 许可证">
   </p>
 </div>
@@ -24,7 +24,7 @@
 
 SAYACODE 是基于 **LangChain / LangGraph** 的本机编程助手。左侧管理工作区与会话，中间呈现对话和工具轨迹，右侧展示计划、子 Agent、审批与代码交付。Agent 由 LangChain `create_agent` 构建；LangGraph 管理消息、待办、检查点和审批中断。Web 页面只展示和操作运行结果，不另建一套 Agent 执行协议。
 
-**3.x 的运行方式：**交互式 TUI 已由 FastAPI + React 工作台取代；适合脚本和 CI 的无头 CLI 继续保留。3.1 增加运行中消息队列、整棵子 Agent 任务树停止和会话管理；3.2 整理四档信任策略；3.2.1 将工具与模型过程放入对话时间线。
+**3.x 的运行方式：**交互式 TUI 已由 FastAPI + React 工作台取代；适合脚本和 CI 的无头 CLI 继续保留。3.1 增加运行中消息队列、整棵子 Agent 任务树停止和会话管理；3.2 整理四档信任策略与对话内运行过程，并持续改进审计隐私和界面状态可靠性。
 
 ## 快速开始
 

sayacode-3.2.2/frontend/src/products/useProduct.ts

@@ -0,0 +1,98 @@
+import { useCallback, useEffect, useLayoutEffect, useRef, useState } from "react";
+
+interface ProductState<T> {
+  key: string;
+  data: T | null;
+  loading: boolean;
+  busy: boolean;
+  error: string | null;
+}
+
+export function useProduct<T>(key: string, load: () => Promise<T>) {
+  const loader = useRef(load);
+  const activeResource = useRef<{ key: string } | null>(null);
+  const requestVersion = useRef(0);
+  const [state, setState] = useState<ProductState<T>>({
+    key,
+    data: null,
+    loading: true,
+    busy: false,
+    error: null,
+  });
+
+  useLayoutEffect(() => {
+    loader.current = load;
+  });
+  useLayoutEffect(() => {
+    // 重访同一个 key 也会得到新身份，旧操作不能回写新页面。
+    activeResource.current = { key };
+    return () => {
+      activeResource.current = null;
+      requestVersion.current += 1;
+    };
+  }, [key]);
+
+  const refresh = useCallback(async () => {
+    const owner = activeResource.current;
+    if (owner?.key !== key) return;
+    const version = ++requestVersion.current;
+    setState((current) => ({
+      key,
+      data: current.key === key ? current.data : null,
+      loading: true,
+      busy: current.key === key && current.busy,
+      error: null,
+    }));
+    try {
+      const data = await loader.current();
+      if (activeResource.current === owner && requestVersion.current === version) {
+        setState((current) => ({ ...current, key, data, loading: false, error: null }));
+      }
+    } catch (reason) {
+      if (activeResource.current === owner && requestVersion.current === version) {
+        setState((current) => ({
+          ...current,
+          key,
+          loading: false,
+          error: reason instanceof Error ? reason.message : "读取失败",
+        }));
+      }
+    }
+  }, [key]);
+
+  useEffect(() => {
+    void refresh();
+  }, [refresh]);
+
+  const setError = (error: string | null) => {
+    if (activeResource.current?.key !== key) return;
+    setState((current) => (current.key === key ? { ...current, error } : current));
+  };
+  const run = async (work: () => Promise<unknown>) => {
+    const owner = activeResource.current;
+    if (owner?.key !== key) return;
+    setState((current) => ({
+      key,
+      data: current.key === key ? current.data : null,
+      loading: current.key === key ? current.loading : true,
+      busy: true,
+      error: null,
+    }));
+    try {
+      const result = await work();
+      if (activeResource.current === owner) await refresh();
+      return result;
+    } catch (reason) {
+      if (activeResource.current === owner)
+        setError(reason instanceof Error ? reason.message : "操作失败");
+      throw reason;
+    } finally {
+      if (activeResource.current === owner)
+        setState((current) => (current.key === key ? { ...current, busy: false } : current));
+    }
+  };
+  // 新请求尚未开始时，先隐藏上一个 key 的结果。
+  const visible =
+    state.key === key ? state : { data: null, loading: true, busy: false, error: null };
+  return { ...visible, setError, refresh, run };
+}

{sayacode-3.2.1 → sayacode-3.2.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sayacode"
-version = "3.2.1"
+version = "3.2.2"
 description = "A local LangChain and LangGraph coding assistant with a Web UI"
 readme = "README.md"
 requires-python = ">=3.11,<3.14"

{sayacode-3.2.1 → sayacode-3.2.2}/src/sayacode/application.py

@@ -250,14 +250,6 @@ class SayacodeApp:
         if kind not in {"tool.started", "tool.completed", "tool.failed"}:
             return
         call_id = str(event.get("tool_call_id") or "")
-        tool_input = event.get("tool_input")
-        target: str | None = None
-        if isinstance(tool_input, dict):
-            for key in ("path", "file_path", "target_path", "directory", "pattern"):
-                value = tool_input.get(key)
-                if isinstance(value, str) and value:
-                    target = value[:300]
-                    break
         await self.audit.append(
             kind,
             thread_id=thread_id,
@@ -267,7 +259,6 @@ class SayacodeApp:
                 "tool_call_id": call_id,
                 "tool_name": event.get("tool_name"),
                 "duration_ms": event.get("duration_ms"),
-                "target": target,
                 "output_characters": len(str(event.get("tool_output") or ""))
                 if kind == "tool.completed"
                 else None,
@@ -674,7 +665,9 @@ class SayacodeApp:
             )
             if result.interrupts:
                 await self.audit.append(
-                    "run.paused", thread_id=thread_id, details={"interrupts": result.interrupts}
+                    "run.paused",
+                    thread_id=thread_id,
+                    details={"interrupt_count": len(result.interrupts)},
                 )
                 return {
                     "ok": False,
@@ -701,7 +694,11 @@ class SayacodeApp:
             except (KeyError, ValueError):
                 profile = None
             error = _model_error_message(exc, profile)
-            await self.audit.append("run.failed", thread_id=thread_id, details={"error": error})
+            await self.audit.append(
+                "run.failed",
+                thread_id=thread_id,
+                details={"error_type": type(exc).__name__},
+            )
             return {"ok": False, "status": "failed", "thread_id": thread_id, "error": error}
 
     async def stream(
@@ -778,7 +775,9 @@ class SayacodeApp:
             if interrupted:
                 await self.runtime.set_thread_status(thread_id, "interrupted")
                 await self.audit.append(
-                    "run.paused", thread_id=thread_id, details={"interrupts": interrupts}
+                    "run.paused",
+                    thread_id=thread_id,
+                    details={"interrupt_count": len(interrupts)},
                 )
                 yield {
                     "type": "approval.requested",
@@ -813,7 +812,11 @@ class SayacodeApp:
             except (KeyError, ValueError):
                 profile = None
             error = _model_error_message(exc, profile)
-            await self.audit.append("run.failed", thread_id=thread_id, details={"error": error})
+            await self.audit.append(
+                "run.failed",
+                thread_id=thread_id,
+                details={"error_type": type(exc).__name__},
+            )
             yield {"type": "run.failed", "thread_id": thread_id, "error": error, "ok": False}
 
     def _normalize_event(self, event: dict[str, Any], thread_id: str) -> list[dict[str, Any]]:

{sayacode-3.2.1 → sayacode-3.2.2}/src/sayacode/audit.py

@@ -9,6 +9,7 @@ from collections import deque
 from collections.abc import Callable
 from datetime import UTC, datetime
 from pathlib import Path
+from threading import Lock
 from time import perf_counter
 from typing import Any
 from uuid import uuid4
@@ -16,6 +17,7 @@ from uuid import uuid4
 from langchain_core.callbacks import BaseCallbackHandler
 
 _SECRET = re.compile(r"(?:api[_-]?key|secret|password|credential|authorization|token)$", re.I)
+_WRITE_LOCK = Lock()
 
 
 def _redact(value: Any, key: str = "") -> Any:
@@ -50,15 +52,16 @@ class AuditLog:
         """异步追加一条审计事件。传入事件名和会话任务运行编号加详情，返回写下的那行。写入走后台线程，不堵事件循环。"""
         row = self._row(event, thread_id=thread_id, task_id=task_id, details=details, run_id=run_id)
 
-        def write() -> None:
-            """追加一条审计记录并落盘。"""
+        await asyncio.to_thread(self._append_row, row)
+        return row
+
+    def _append_row(self, row: dict[str, Any]) -> None:
+        """同一进程内串行追加，避免并发回调覆盖同一文件的记录。"""
+        with _WRITE_LOCK:
             self.path.parent.mkdir(parents=True, exist_ok=True)
             with self.path.open("a", encoding="utf-8") as handle:
                 handle.write(json.dumps(row, ensure_ascii=False, default=str) + "\n")
 
-        await asyncio.to_thread(write)
-        return row
-
     def append_sync(
         self,
         event: str,
@@ -70,9 +73,7 @@ class AuditLog:
     ) -> dict[str, Any]:
         """从同步回调接口写入一条回调事件。传入事件名和会话任务运行编号加详情，返回写下的那行。回调里不能等事件循环，只能用同步写。"""
         row = self._row(event, thread_id=thread_id, task_id=task_id, details=details, run_id=run_id)
-        self.path.parent.mkdir(parents=True, exist_ok=True)
-        with self.path.open("a", encoding="utf-8") as handle:
-            handle.write(json.dumps(row, ensure_ascii=False, default=str) + "\n")
+        self._append_row(row)
         return row
 
     @staticmethod

{sayacode-3.2.1 → sayacode-3.2.2}/src/sayacode/cli/preferences.py

@@ -20,7 +20,7 @@ def _package_version() -> str:
     try:
         return version("sayacode")
     except PackageNotFoundError:
-        return "3.2.1"
+        return "3.2.2"
 
 
 def _state_home() -> Path:

{sayacode-3.2.1 → sayacode-3.2.2}/src/sayacode/tasks/inbox.py

@@ -256,7 +256,16 @@ async def on_task_update(app: Any, record: Any) -> None:
         "task.status",
         thread_id=record.thread_id,
         task_id=record.task_id,
-        details=record.to_dict(),
+        details={
+            "status": record.status,
+            "role": record.role,
+            "outcome": record.last_outcome,
+            "turn_seq": record.turn_seq,
+            "delivery_state": record.delivery_state,
+            "parent_thread_id": record.parent_thread_id,
+            "worktree_enabled": record.worktree_enabled,
+            "unconfirmed_effects": record.unconfirmed_effects,
+        },
     )
     if (
         record.parent_thread_id is None

{sayacode-3.2.1 → sayacode-3.2.2}/src/sayacode/tasks/records.py

@@ -68,10 +68,10 @@ class TaskRecord:
     turn_seq: int = 0
 
     def to_dict(self) -> dict[str, Any]:
-        """做什么，返回展示和审计可用的任务元数据视图。
+        """做什么，返回界面和任务工具可用的任务视图。
 
         参数与返回，无入参，返回全字段字典，密钥会被遮蔽。
-        调用约束，只给界面和审计用，不要拿它再存回去。"""
+        调用约束，含提示词和结果正文，不能写入审计，也不要拿它再存回去。"""
         data = asdict(self)
         snapshot = data.get("profile_snapshot")
         if isinstance(snapshot, dict) and snapshot.get("api_key"):