Merge remote-tracking branch 'origin/main' into codex/coalesce-live-packet-rendering

Signed-off-by: huangruiteng <14976749+huangruiteng@users.noreply.github.com>

Author: huangruiteng

apps/presentation/dashboard/package.json

@@ -29,8 +29,9 @@
     "smoke:goal-order": "tsc --ignoreConfig --target ES2022 --module ES2022 --moduleResolution Bundler --skipLibCheck --strict --outDir node_modules/.cache/loopx-goal-order src/features/personal-workspace/goal-order.ts && node src/features/personal-workspace/goal-order.test.mjs",
     "smoke:home-browser": "node ../../../examples/dashboard-home-browser-smoke.mjs",
     "smoke:home-route": "rm -rf /tmp/loopx-home-route-smoke && tsc --ignoreConfig --target ES2022 --module CommonJS --moduleResolution Node --ignoreDeprecations 6.0 --skipLibCheck --strict --outDir /tmp/loopx-home-route-smoke smoke/home-route-smoke.ts && node /tmp/loopx-home-route-smoke/home-route-smoke.js",
-    "smoke:personal-workspace": "npm run smoke:goal-order && node src/features/personal-workspace/workspace-theme.test.mjs && node src/features/personal-workspace/personal-workspace-contract.test.mjs && node ../../../examples/personal-workspace-browser-smoke.mjs",
-    "smoke:personal-workspace-packaged": "npm run smoke:goal-order && node src/features/personal-workspace/workspace-theme.test.mjs && node src/features/personal-workspace/personal-workspace-contract.test.mjs && LOOPX_PERSONAL_WORKSPACE_PACKAGED=1 LOOPX_PLAYWRIGHT_PACKAGE=\"$PWD/node_modules/playwright\" node ../../../examples/personal-workspace-browser-smoke.mjs",
+    "smoke:delegation-preflight": "rm -rf node_modules/.cache/loopx-delegation-preflight-smoke && tsc --ignoreConfig --target ES2022 --module NodeNext --moduleResolution NodeNext --jsx react-jsx --skipLibCheck --strict --rootDir . --outDir node_modules/.cache/loopx-delegation-preflight-smoke smoke/delegation-preflight-smoke.tsx src/data/delegation-preflight.ts src/features/personal-workspace/delegation-preflight-status.tsx && node node_modules/.cache/loopx-delegation-preflight-smoke/smoke/delegation-preflight-smoke.js",
+    "smoke:personal-workspace": "npm run smoke:goal-order && npm run smoke:delegation-preflight && node src/features/personal-workspace/workspace-theme.test.mjs && node src/features/personal-workspace/personal-workspace-contract.test.mjs && node ../../../examples/personal-workspace-browser-smoke.mjs",
+    "smoke:personal-workspace-packaged": "npm run smoke:goal-order && npm run smoke:delegation-preflight && node src/features/personal-workspace/workspace-theme.test.mjs && node src/features/personal-workspace/personal-workspace-contract.test.mjs && LOOPX_PERSONAL_WORKSPACE_PACKAGED=1 LOOPX_PLAYWRIGHT_PACKAGE=\"$PWD/node_modules/playwright\" node ../../../examples/personal-workspace-browser-smoke.mjs",
     "smoke:personal-workspace-router": "rm -rf /tmp/loopx-personal-workspace-router-smoke && tsc --ignoreConfig --target ES2022 --module commonjs --moduleResolution node --ignoreDeprecations 6.0 --skipLibCheck --strict --outDir /tmp/loopx-personal-workspace-router-smoke smoke/personal-workspace-router-smoke.ts src/features/personal-workspace/personal-workspace-router.ts && node /tmp/loopx-personal-workspace-router-smoke/smoke/personal-workspace-router-smoke.js",
     "smoke:presentation-surface-schema": "rm -rf /tmp/loopx-presentation-surface-schema-smoke && tsc --ignoreConfig --target ES2022 --module CommonJS --moduleResolution Node --ignoreDeprecations 6.0 --skipLibCheck --strict --resolveJsonModule --esModuleInterop --outDir /tmp/loopx-presentation-surface-schema-smoke smoke/presentation-surface-schema-smoke.ts src/data/status.ts src/data/decision-research.ts src/data/goal-channel-frontstage.ts && NODE_PATH=\"$PWD/node_modules\" node /tmp/loopx-presentation-surface-schema-smoke/apps/presentation/dashboard/smoke/presentation-surface-schema-smoke.js",
     "smoke:projection-localization": "rm -rf /tmp/loopx-projection-localization-smoke && tsc --ignoreConfig --target ES2022 --module NodeNext --moduleResolution NodeNext --skipLibCheck --strict --outDir /tmp/loopx-projection-localization-smoke smoke/projection-localization-smoke.ts src/features/personal-workspace/projection-localization.ts && node /tmp/loopx-projection-localization-smoke/smoke/projection-localization-smoke.js",

apps/presentation/dashboard/smoke/delegation-preflight-smoke.tsx

@@ -0,0 +1,33 @@
+import {renderToStaticMarkup} from "react-dom/server";
+import type {DelegationPreflight} from "../src/data/delegation-preflight.js";
+import {DelegationPreflightStatus} from "../src/features/personal-workspace/delegation-preflight-status.js";
+
+const unavailable: DelegationPreflight = {
+  state: "authority_unavailable",
+  turn_eligible: false,
+  acceptance_ready: false,
+  turn_route: null,
+  authority_ready: false,
+  authority_reason: "Goal acceptance requires an existing canonical authority",
+  executor: null,
+  effects: {
+    host_invoked: false,
+    state_written: false,
+    quota_spent: false,
+    scheduler_acknowledged: false,
+  },
+};
+
+for (const [zh, expectedLabel, expectedBoundary] of [
+  [true, "缺少规范权限状态", "未检查或启动执行器"],
+  [false, "Canonical authority unavailable", "No executor was inspected or launched"],
+] as const) {
+  const html = renderToStaticMarkup(<DelegationPreflightStatus check={unavailable} zh={zh}/>);
+  if (!html.includes(expectedLabel)) throw new Error(`missing state label: ${expectedLabel}`);
+  if (!html.includes("Goal acceptance requires an existing canonical authority")) throw new Error("missing authority reason");
+  if (!html.includes(expectedBoundary)) throw new Error(`missing boundary copy: ${expectedBoundary}`);
+  if (/Local launch prerequisites met|本机启动条件已满足/.test(html)) throw new Error("rendered launchable copy for unavailable authority");
+}
+if (Object.values(unavailable.effects).some(Boolean)) throw new Error("authority-unavailable response must report zero effects");
+
+console.log("delegation authority-unavailable preflight smoke passed");

apps/presentation/dashboard/src/data/chat.ts

@@ -8,6 +8,7 @@ import {
   type TodoApplyResult,
   type TodoPreview,
 } from "./chat-model.js";
+import type {DelegationPreflight} from "./delegation-preflight.js";
 
 const configuredChatOrigin = String(import.meta.env?.VITE_LOOPX_CHAT_ORIGIN ?? "")
   .trim()
@@ -113,6 +114,11 @@ export const managerChannelBindingSchema = z.object({
   executor_kind: z.string(),
   model: z.string(),
   model_source: z.string(),
+  selection_policy: z.enum(["preferred", "pinned", "flexible"]).default("preferred"),
+  allocation_reason: z.string().default(""),
+  configured_endpoint: z.string().nullable().optional(),
+  eligible_endpoints: z.array(z.string()).default([]),
+  allocation_configuration_revision: z.string().default(""),
   credential_env_var: z.string(),
   operator_credential_configured: z.boolean(),
   output_token_budget: z.object({
@@ -895,11 +901,39 @@ export type DelegationInventory = {
     artifacts?: Array<{ref: string; sha256: string}>}>;
   has_more: boolean; next_cursor: string | null; page_readback_complete: boolean;
 };
-export type DelegationPreflight = {
-  state: "turn_blocked" | "acceptance_unavailable" | "runtime_unavailable" | "runtime_unverified" | "launchable";
-  turn_eligible: boolean; acceptance_ready: boolean; turn_route: string;
-  executor: {host: string; available: boolean | null; reason: string | null; profile: string | null};
+export type {DelegationPreflight} from "./delegation-preflight.js";
+export type DelegationDependency = {
+  operation_id: string; ref: string; sha256: string; input_ref: string;
+  relation: "responds_to" | "revises" | "uses"; state: "current" | "unavailable";
 };
+export type DelegationAdoption = {
+  requester_agent_id: string; consumer_operation_id: string; consumer_request_id: string;
+  consumer_agent_id: string; consumer_todo_id: string; state: "current" | "unavailable";
+  source_artifacts: Array<{ref: string; sha256: string}>;
+  consumer_artifacts: Array<{ref: string; sha256: string}>;
+};
+export type DelegationReadback = {
+  operation_id: string; request_id: string; agent_id: string; todo_id: string;
+  status: string; worker_active: boolean; recovery_required: boolean;
+  artifacts?: Array<{ref: string; sha256: string; text: string}>; error?: string;
+  dependencies?: DelegationDependency[]; adoptions?: DelegationAdoption[];
+};
+export function readLoopXTeamWork(sessionId: string, operationId: string) {
+  return requestJson<DelegationReadback>(`/api/chat/sessions/${sessionId}/loopx`, {
+    method: "POST", body: JSON.stringify({operation: "read", operation_id: operationId}),
+  });
+}
+// Keep inventory and selected-operation labels consistent; unknown states stay unknown.
+export function delegationStateLabel(row: {status: string; worker_active?: boolean; recovery_required: boolean | null}, zh: boolean) {
+  if (row.status === "unavailable") return zh ? "无法核验" : "Unavailable";
+  if (row.status === "accepted") return zh ? "已通过当前验收" : "Currently accepted";
+  if (row.status === "rejected") return zh ? "未通过验收" : "Rejected";
+  if (row.recovery_required) return zh ? "需要恢复原执行" : "Original execution needs recovery";
+  if (row.status === "running" && row.worker_active) return zh ? "执行中" : "Executing";
+  if (row.status === "turn_returned" && row.worker_active) return zh ? "正在验收" : "Validating";
+  if (["prepared", "running", "turn_returned"].includes(row.status)) return zh ? "已派发，等待执行回读" : "Dispatched; awaiting execution readback";
+  return zh ? "状态未知" : "Unknown state";
+}
 export function fetchLoopXTeamWork(sessionId: string, cursor?: string) {
   return requestJson<DelegationInventory>(`/api/chat/sessions/${sessionId}/loopx`, {
     method: "POST", body: JSON.stringify({operation: "operations", limit: 10, ...(cursor ? {cursor} : {})}),
@@ -915,9 +949,9 @@ export function updateLoopXMode(sessionId: string, operation: string, settings?:
     method: "POST", body: JSON.stringify({operation, operation_id: operationId, ...(settings ? {settings} : {})}),
   });
 }
-export function sendLoopXMessage(sessionId: string, message: string, deliveryMode: "queue" | "inbox" | "steer") {
+export function sendLoopXMessage(sessionId: string, message: string, deliveryMode: "queue" | "inbox" | "steer", operationId: string = crypto.randomUUID()) {
   return requestJson<{ok: true; status: string; delivery_mode: string}>(`/api/chat/sessions/${sessionId}/loopx`, {
-    method: "POST", body: JSON.stringify({operation: "message", operation_id: crypto.randomUUID(), message, delivery_mode: deliveryMode}),
+    method: "POST", body: JSON.stringify({operation: "message", operation_id: operationId, message, delivery_mode: deliveryMode}),
   });
 }
 

apps/presentation/dashboard/src/data/delegation-preflight.ts

@@ -0,0 +1,10 @@
+export type DelegationPreflight = {
+  state: "authority_unavailable" | "turn_blocked" | "acceptance_unavailable" | "runtime_unavailable" | "runtime_unverified" | "launchable";
+  turn_eligible: boolean;
+  acceptance_ready: boolean;
+  turn_route: string | null;
+  authority_ready: boolean;
+  authority_reason: string | null;
+  executor: {host: string; available: boolean | null; reason: string | null; profile: string | null} | null;
+  effects: {host_invoked: boolean; state_written: boolean; quota_spent: boolean; scheduler_acknowledged: boolean};
+};

apps/presentation/dashboard/src/features/personal-workspace/capability-localization.ts

@@ -18,7 +18,7 @@ const capabilityCopy: Record<WorkspaceLocale, Record<string, LocalizedCopy>> = {
     },
     steward_executor: {
       displayName: "Steward executor",
-      description: "Selects the executor, model, and reasoning effort the steward channel answers on for this machine, ahead of the Chat service environment.",
+      description: "Guides the steward executor, model, and selection boundary for this machine. A pinned route blocks substitution; a flexible pool permits only authorized fallback.",
     },
     todo_replan_cadence: { displayName: "Goal review cadence", description: "Configures the Goal review cadence." },
     change_quality_qualification: {
@@ -74,7 +74,7 @@ const capabilityCopy: Record<WorkspaceLocale, Record<string, LocalizedCopy>> = {
     },
     steward_executor: {
       displayName: "管家执行器",
-      description: "选择本机管家通道使用的执行器、模型与推理档位，优先级高于服务环境变量。",
+      description: "配置本机管家的执行器、模型与选择边界；锁定路径禁止替代，灵活池只允许在已授权范围内回退。",
     },
     todo_replan_cadence: { displayName: "Goal 复核周期", description: "配置 Goal 的复核周期。" },
     change_quality_qualification: {
@@ -128,7 +128,9 @@ const capabilityCopy: Record<WorkspaceLocale, Record<string, LocalizedCopy>> = {
 const fieldCopy: Record<WorkspaceLocale, FieldCopy> = {
   en: {
     runtime_profile: { label: "Runtime profile", description: "Restricted keeps scoped LoopX reads only. Trusted owner enables normal host tools while protected operations retain separate checks." },
-    executor_endpoint: { label: "Steward executor", description: "The executor this machine's steward channel answers on. The choice outranks the Chat service environment and the shipped default." },
+    selection_policy: { label: "Selection policy", description: "Preferred allows an explicit user choice; pinned rejects another executor; flexible permits fallback only inside the eligible pool." },
+    executor_endpoint: { label: "Primary steward executor", description: "The preferred or pinned executor for this machine. In a flexible pool it is tried first when available." },
+    eligible_endpoints: { label: "Flexible eligible executors", description: "One authorized executor per line. Use only with flexible selection and include the primary executor." },
     executor_model: { label: "Model", description: "Optional model for the selected executor. Leave blank to keep the executor's own default." },
     executor_reasoning_effort: { label: "Reasoning effort", description: "Optional reasoning effort for the selected executor. Leave blank to keep the executor's own default." },
     completed_todos: { label: "Completed Todos between Goal reviews", description: "Machine default or explicit Goal override, from 1 to 5." },
@@ -152,7 +154,9 @@ const fieldCopy: Record<WorkspaceLocale, FieldCopy> = {
   },
   "zh-CN": {
     runtime_profile: { label: "运行模式", description: "restricted 仅使用受限 LoopX 读取；trusted_owner 开放常规宿主工具，但受保护操作仍单独校验。" },
-    executor_endpoint: { label: "管家执行器", description: "本机管家通道使用的执行器；优先级高于 Chat 服务环境变量与出货默认值。" },
+    selection_policy: { label: "选择策略", description: "preferred 允许用户显式改选；pinned 拒绝其他执行器；flexible 只在已授权资源池内回退。" },
+    executor_endpoint: { label: "首选管家执行器", description: "本机首选或锁定的执行器；灵活池模式下优先尝试它。" },
+    eligible_endpoints: { label: "灵活池可用执行器", description: "每行一个已授权执行器，仅用于 flexible；必须包含首选执行器。" },
     executor_model: { label: "模型", description: "所选执行器使用的模型，可留空；留空表示沿用执行器自身的默认模型。" },
     executor_reasoning_effort: { label: "推理档位", description: "所选执行器使用的推理档位，可留空；留空表示沿用执行器自身的默认档位。" },
     completed_todos: { label: "两次 Goal 复核间的已完成 Todo 数", description: "可设置 1–5；机器默认值可被 Goal 显式覆盖。" },

apps/presentation/dashboard/src/features/personal-workspace/channel-header.tsx

@@ -87,6 +87,30 @@ export function ChannelHeader({
     && managerChannelBinding.executor_endpoint_default_reason === "steward_channel_default"
     ? "header.managerEndpointStewardDefault"
     : null;
+  const managerSelectionPolicyLabel = managerChannelBinding
+    ? t(managerChannelBinding.selection_policy === "pinned"
+      ? "header.managerSelectionPinned"
+      : managerChannelBinding.selection_policy === "flexible"
+        ? "header.managerSelectionFlexible"
+        : "header.managerSelectionPreferred")
+    : null;
+  const managerAllocationReasonLabel = managerChannelBinding?.allocation_reason
+    ? t(managerChannelBinding.allocation_reason === "user_explicit"
+      ? "header.managerAllocationUser"
+      : managerChannelBinding.allocation_reason === "pinned_configuration"
+        ? "header.managerAllocationPinned"
+        : managerChannelBinding.allocation_reason === "flexible_availability_fallback"
+          ? "header.managerAllocationFallback"
+          : managerChannelBinding.allocation_reason === "flexible_pool_unavailable"
+            ? "header.managerAllocationUnavailable"
+            : managerChannelBinding.allocation_reason === "flexible_primary_available"
+              ? "header.managerAllocationPrimary"
+              : managerChannelBinding.allocation_reason === "product_default"
+                ? "header.managerAllocationProductDefault"
+                : managerChannelBinding.allocation_reason === "service_override"
+                  ? "header.managerAllocationService"
+                  : "header.managerAllocationConfigured")
+    : null;
 
   const runtimeControl = readOnlySourceLabel ? (
           <span className="personal-read-only-source" title={t("header.readOnlySourceDescription", { source: readOnlySourceLabel })}><Eye size={15} />{readOnlySourceLabel}<small>{t("common.readOnly")}</small></span>
@@ -142,6 +166,12 @@ export function ChannelHeader({
               sandbox: managerRuntime.sandbox,
             })}</p>
         ) : null}
+            {managerSelectionPolicyLabel && managerAllocationReasonLabel && managerChannelBinding ? (
+              <p>{t("header.managerAllocation", {
+                policy: managerSelectionPolicyLabel,
+                reason: managerAllocationReasonLabel,
+              })}</p>
+            ) : null}
             {managerExecutionDefaultReason && managerChannelBinding ? (
               <span className="personal-execution-rule-note">
                 {t(managerExecutionDefaultReason, { executor: managerChannelBinding.executor_endpoint })}

apps/presentation/dashboard/src/features/personal-workspace/channel-timeline.tsx

@@ -77,7 +77,7 @@ export function ChannelTimeline({
       return (
         <button className={`personal-proposal-row is-${item.proposal.status}`} key={item.id} onClick={() => onSelect({ item: item.proposal, kind: "proposal" })} type="button">
           <span><Sparkles size={17} /></span>
-          <span><small>{item.proposal.actionKind} · {item.proposal.status}</small><strong>{item.proposal.title}</strong><p>{item.proposal.impact}</p></span>
+          <span><small>{item.proposal.actionKind} · {item.proposal.status}</small><strong>{item.proposal.title}</strong>{item.proposal.impact ? <p>{item.proposal.impact}</p> : null}</span>
           <b>{item.proposal.status === "gated" && item.proposal.actionKind !== "operation.execute" ? t("timeline.review") : item.proposal.primaryLabel ?? t("timeline.reviewAndConfirm")}</b>
         </button>
       );

apps/presentation/dashboard/src/features/personal-workspace/context-drawer.tsx

@@ -1010,7 +1010,7 @@ export function ContextDrawer({ agents, attentionHistory = [], onSelectAttention
             {selection.item.actionKind === "team.plan" && selection.item.status === "applied" ? <TeamPlanResult proposal={selection.item} t={t} /> : <section className="personal-proposal-card">
               <small>{selection.item.actionKind} · {selection.item.status}</small>
               <h3>{selection.item.title}</h3>
-              <p>{selection.item.impact}</p>
+              {selection.item.impact ? <p>{selection.item.impact}</p> : null}
               {selection.item.reviewPlan && !selection.item.reviewPlan.retryOriginal && selection.item.actionKind !== "team.plan" ? <p className="personal-proposal-explainer" data-action-review={selection.item.reviewPlan.interaction}>{selection.item.actionKind === "operation.execute" && selection.item.status === "gated"
                 ? t("actionReview.operation_group_confirmation")
                 : selection.item.actionKind === "operation.execute" && selection.item.reviewPlan.reason === "readback_unverified"